botinabox 2.16.19 → 2.16.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/index.js +2 -4
  2. package/package.json +2 -2
package/dist/index.js CHANGED
@@ -2688,10 +2688,8 @@ var DataStore = class {
2688
2688
  slug: (row) => {
2689
2689
  const val = row[def.slugColumn];
2690
2690
  const raw = val == null ? String(row.id ?? row.name ?? "unknown") : String(val);
2691
- if (raw.includes("/") || raw.includes("\\") || raw.includes("..")) {
2692
- throw new Error(`Invalid slug "${raw}": contains path traversal characters`);
2693
- }
2694
- return raw;
2691
+ const safe = raw.replace(/[/\\]/g, "-").replace(/\.{2,}/g, "-").replace(/^\.+/, "").trim();
2692
+ return safe.length > 0 ? safe : String(row.id ?? "unknown");
2695
2693
  },
2696
2694
  directoryRoot: def.directory,
2697
2695
  files: def.files,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "botinabox",
3
- "version": "2.16.19",
3
+ "version": "2.16.21",
4
4
  "description": "Bot in a Box — framework for building multi-agent bots",
5
5
  "type": "module",
6
6
  "main": "./dist/index.js",
@@ -60,7 +60,7 @@
60
60
  "@types/uuid": "^10.0.0",
61
61
  "ajv": "^8.17.1",
62
62
  "cron-parser": "^4.9.0",
63
- "latticesql": "^1.16.5",
63
+ "latticesql": "^2.0.0",
64
64
  "uuid": "^13.0.0",
65
65
  "yaml": "^2.7.0"
66
66
  },