ruflo 3.5.14 → 3.5.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/package.json +1 -1
  2. package/src/ruvocal/Dockerfile +3 -0
  3. package/src/ruvocal/mcp-bridge/ruvector.db +0 -0
  4. package/src/ruvocal/src/lib/server/urlSafety.ts +7 -2
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "ruflo",
3
- "version": "3.5.14",
3
+ "version": "3.5.15",
4
4
  "description": "Ruflo - Enterprise AI agent orchestration platform. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-tolerant consensus, vector memory, and MCP integration",
5
5
  "main": "bin/ruflo.js",
6
6
  "type": "module",
package/src/ruvocal/Dockerfile CHANGED
@@ -30,6 +30,9 @@ USER user
30
30
 
31
31
 
32
32
  COPY --chown=1000 .env /app/.env
33
+ # Remove empty placeholder values that block .env.local overrides via dotenv-cli -c
34
+ RUN sed -i 's/^MODELS=$/# MODELS=/' /app/.env && \
35
+ sed -i 's/^TASK_MODEL=$/# TASK_MODEL=/' /app/.env
33
36
  COPY --chown=1000 entrypoint.sh /app/entrypoint.sh
34
37
  COPY --chown=1000 package.json /app/package.json
35
38
  COPY --chown=1000 package-lock.json /app/package-lock.json
package/src/ruvocal/src/lib/server/urlSafety.ts CHANGED
@@ -38,8 +38,13 @@ export function isValidUrl(urlString: string): boolean {
38
38
  try {
39
39
  const url = new URL(urlString.trim());
40
40
  const hostname = url.hostname.toLowerCase();
41
- // Allow HTTP for localhost/loopback (dev & local MCP bridge)
42
- if (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1") {
41
+ // Allow HTTP for localhost/loopback/Docker-internal (dev & local MCP bridge)
42
+ if (
43
+ hostname === "localhost" ||
44
+ hostname === "127.0.0.1" ||
45
+ hostname === "::1" ||
46
+ hostname === "host.docker.internal"
47
+ ) {
43
48
  return url.protocol === "http:" || url.protocol === "https:";
44
49
  }
45
50
  // Allow HTTP for Docker-internal service names (no dots = private network)