{
  "interval": {
    "intervalStart": "2025-11-01T00:00:00.000Z",
    "intervalEnd": "2025-12-01T00:00:00.000Z",
    "intervalType": "month"
  },
  "repository": "elizaos/eliza",
  "overview": "From 2025-11-01 to 2025-12-01, elizaos/eliza had 27 new PRs (20 merged), 63 new issues, and 25 active contributors.",
  "topIssues": [
    {
      "id": "I_kwDOMT5cIs7ZOm4N",
      "title": "Add Farcaster + Base app support",
      "author": "borisudovicic",
      "number": 6161,
      "repository": "elizaos/eliza",
      "body": "",
      "createdAt": "2025-11-19T21:28:09Z",
      "closedAt": null,
      "state": "OPEN",
      "commentCount": 3
    },
    {
      "id": "I_kwDOMT5cIs7XCsUe",
      "title": "Bug: Disabling Web UI blocks all endpoints",
      "author": "humuhimi",
      "number": 6138,
      "repository": "elizaos/eliza",
      "body": "",
      "createdAt": "2025-11-10T12:26:11Z",
      "closedAt": "2025-11-10T12:47:31Z",
      "state": "CLOSED",
      "commentCount": 2
    },
    {
      "id": "I_kwDOMT5cIs7aSEq_",
      "title": "Add OpenAI-compatible API",
      "author": "joglomedia",
      "number": 6168,
      "repository": "elizaos/eliza",
      "body": "Hi,\n\nIt would be great if we have an option to use LLM API from OpenAI-compatible API, not only open router. So, we can set the API host & API Key",
      "createdAt": "2025-11-25T09:19:35Z",
      "closedAt": "2025-11-30T18:41:08Z",
      "state": "CLOSED",
      "commentCount": 2
    },
    {
      "id": "I_kwDOMT5cIs7V2H1G",
      "title": "Support Tasks",
      "author": "borisudovicic",
      "number": 6131,
      "repository": "elizaos/eliza",
      "body": "* Collaborate with CJ on anonymous ID + free inference architecture.",
      "createdAt": "2025-11-04T18:16:47Z",
      "closedAt": "2025-11-08T12:37:51Z",
      "state": "CLOSED",
      "commentCount": 1
    },
    {
      "id": "I_kwDOMT5cIs7V2Hh0",
      "title": "Voice Infrastructure",
      "author": "borisudovicic",
      "number": 6130,
      "repository": "elizaos/eliza",
      "body": "* Test browser-based voice generation (client-side).\n* Prepare optional **server voice endpoint** for paid users.\n* Support Compute embeddings integration.",
      "createdAt": "2025-11-04T18:16:25Z",
      "closedAt": "2025-11-14T13:34:37Z",
      "state": "CLOSED",
      "commentCount": 1
    }
  ],
  "topPRs": [
    {
      "id": "PR_kwDOMT5cIs6vVL6j",
      "title": "feat: create @elizaos/react package with headless React hooks",
      "author": "wtfsayo",
      "number": 6093,
      "body": "## Overview\n\nThis PR introduces a new **** package containing headless, reusable React hooks extracted from the client package. This enables external developers to build custom UIs for ElizaOS agents while maintaining full type safety and React Query integration.\n\n## What's New\n\n### Package: \n\nA standalone package providing headless React hooks with:\n- ✅ Zero UI coupling (no toasts, navigation, or DOM dependencies)\n- ✅ Full TypeScript support with proper type declarations\n- ✅ TanStack React Query for caching and state management\n- ✅ Network-aware polling that adapts to connection quality\n- ✅ Composable lifecycle callbacks (onSuccess, onError, onMutate)\n\n### Hooks Included (30 total)\n\n**Agents (8 hooks)**\n- `useAgents`, `useAgent`, `useStartAgent`, `useStopAgent`\n- `useAgentActions`, `useDeleteLog`, `useAgentPanels`, `useAgentsWithDetails`\n\n**Runs (2 hooks)**\n- `useAgentRuns`, `useAgentRunDetail`\n\n**Messaging (5 hooks)**\n- `useServers`, `useChannels`, `useChannelDetails`, `useChannelParticipants`, `useDeleteChannel`\n\n**Messages (3 hooks)**\n- `useChannelMessages` (stateful with pagination), `useDeleteChannelMessage`, `useClearChannelMessages`\n\n**Memories (6 hooks)**\n- `useAgentMemories`, `useDeleteMemory`, `useDeleteAllMemories`, `useUpdateMemory`, `useDeleteGroupMemory`, `useClearGroupChat`\n\n**Internal/Agent-Perspective (6 hooks)**\n- `useAgentInternalActions`, `useDeleteAgentInternalLog`, `useAgentInternalMemories`\n- `useDeleteAgentInternalMemory`, `useDeleteAllAgentInternalMemories`, `useUpdateAgentInternalMemory`\n\n## Architecture\n\n```tsx\nimport { QueryClient, QueryClientProvider } from '@tanstack/react-query';\nimport { ElizaReactProvider, useAgents, useStartAgent } from '@elizaos/react';\n\nconst queryClient = new QueryClient();\n\nfunction App() {\n  return (\n    <QueryClientProvider client={queryClient}>\n      <ElizaReactProvider baseUrl=\"http://localhost:3000\">\n        <AgentList />\n      </ElizaReactProvider>\n    </QueryClientProvider>\n  );\n}\n\nfunction AgentList() {\n  const { data: agents, isLoading } = useAgents();\n  const startAgent = useStartAgent({\n    onSuccess: () => toast.success('Agent started!'),\n  });\n\n  if (isLoading) return <div>Loading...</div>;\n\n  return (\n    <div>\n      {agents?.map((agent) => (\n        <div key={agent.id}>\n          <h3>{agent.name}</h3>\n          <button onClick={() => startAgent.mutate(agent.id)}>\n            Start\n          </button>\n        </div>\n      ))}\n    </div>\n  );\n}\n```\n\n## Benefits\n\n1. **Reusability**: External developers can build custom UIs using these hooks\n2. **Type Safety**: Full TypeScript support with types from `@elizaos/api-client`\n3. **Performance**: Smart polling adapts to network quality (2G → 4G)\n4. **Separation of Concerns**: UI logic stays in components, data logic in hooks\n5. **Future-proof**: Ready for migration of `packages/client` to consume these hooks\n\n## Testing\n\n- ✅ Package builds successfully with TypeScript declarations\n- ✅ All hooks properly typed with React Query v5 signatures\n- ✅ Zero build errors or type issues\n- ✅ Ready for integration into turbo build pipeline\n\n## Next Steps (Future PRs)\n\n- Migrate `packages/client` to consume `@elizaos/react`\n- Add unit tests for hooks with mocked ElizaClient\n- Publish to npm for external consumption\n\n## Files Changed\n\n- `packages/react/` - New package with provider, hooks, and documentation\n- Comprehensive README with installation, API reference, and examples\n\n---\n\n**Ready for review!** 🚀\n\n<!-- CURSOR_SUMMARY -->\n---\n\n> [!NOTE]\n> Introduces a new `@elizaos/react` package with headless, type-safe React hooks and provider (plus build/docs), integrates it into the workspace, and publishes comprehensive core type declarations.\n> \n> - **New package `@elizaos/react`**:\n>   - Headless React hooks and provider (`ElizaReactProvider`) built on `@tanstack/react-query` and `@elizaos/api-client`.\n>   - Hooks for: agents, runs, messaging (servers/channels), messages (stateful + pagination), memories, and internal agent-perspective operations.\n>   - Network-aware polling, composable mutation callbacks, TypeScript types, and index exports.\n>   - Build tooling (`build.ts`, bunfig, tsconfigs), and comprehensive README.\n> - **Workspace integration**:\n>   - Added to lockfile/workspace with peer/dev deps.\n> - **Type declarations**:\n>   - Added/updated numerous `@elizaos/core` `.d.ts` and source maps to expose APIs/types for consumers.\n> \n> <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit 5a290e0071637d785858567d960ab7d1d5e54456. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup>\n<!-- /CURSOR_SUMMARY -->",
      "repository": "elizaos/eliza",
      "createdAt": "2025-10-23T18:06:32Z",
      "mergedAt": null,
      "additions": 8223,
      "deletions": 1753
    },
    {
      "id": "PR_kwDOMT5cIs607dMZ",
      "title": "feat: Entity-level RLS & Security Improvements",
      "author": "standujar",
      "number": 6167,
      "body": "## Summary\r\n\r\nThis PR implements four major improvements to ElizaOS's security, data architecture, and observability:\r\n\r\n1. **Entity-Level Row Level Security (RLS)** - PostgreSQL RLS policies for entity-based data isolation\r\n2. **Semantic Clarity Refactoring** - Renames `serverId` to `messageServerId` for clarity\r\n3. **Performance Optimization** - Efficient participant checking methods (`isRoomParticipant`, `isChannelParticipant`)\r\n4. **Timeline Action Spans Fix** - Correct inclusion of `action_event` logs in run timelines\r\n\r\nAll changes maintain full backward compatibility with existing deployments and plugins.\r\n\r\n---\r\n\r\n## Table of Contents\r\n\r\n1. [Architecture Overview](#architecture-overview)\r\n   - [Entity-Level RLS](#1-entity-level-row-level-security-rls)\r\n   - [Semantic Clarity](#2-semantic-clarity-serverid-vs-messageserverid)\r\n   - [Performance Optimization](#3-performance-optimization-participant-checking)\r\n   - [Timeline Action Spans Fix](#4-timeline-action-spans-fix)\r\n2. [Test Coverage](#test-coverage)\r\n3. [Database Migration](#database-migration)\r\n4. [Configuration](#configuration)\r\n\r\n---\r\n\r\n## Architecture Overview\r\n\r\n### 1. Entity-Level Row Level Security (RLS)\r\n\r\n**Problem**: ElizaOS needed fine-grained access control to isolate data by entity (users, agents, bots, etc.) within the same database.\r\n\r\n**Solution**: Implemented PostgreSQL RLS policies that automatically filter data based on the current entity context.\r\n\r\n**Benefits:**\r\n- ✅ **Data Isolation**: Each entity only sees its own data\r\n- ✅ **Automatic Enforcement**: RLS is enforced at the database level, preventing accidental data leaks\r\n- ✅ **Performance**: Database-level filtering is more efficient than application-level checks\r\n- ✅ **Security**: Even if application code has bugs, RLS prevents unauthorized access\r\n\r\n**Implementation:**\r\n- Added `current_entity_id()` PostgreSQL function to track current entity context via `app.entity_id` session variable\r\n- Created `add_entity_isolation()` function to apply RLS policies to tables\r\n- Two isolation strategies:\r\n  - **Direct ownership**: Tables with `entityId` or `authorId` columns\r\n  - **Shared access**: Tables with `roomId` that join to `participants` table\r\n- Integrated with entity context management in ElizaOS core\r\n\r\n**RLS Isolation Strategies:**\r\n\r\nThe system automatically detects which strategy to use based on table schema:\r\n\r\n**Strategy 1: Direct Entity Ownership**\r\n- Tables: `memories`, `tasks`, `components`\r\n- Policy: `entityId = current_entity_id()`\r\n- Effect: Users see only their own records\r\n\r\n**Strategy 2: Room-Based Shared Access**\r\n- Tables: `logs`, `messages` (via `roomId`)\r\n- Policy: `roomId IN (SELECT roomId FROM participants WHERE entityId = current_entity_id())`\r\n- Effect: Users see all records in rooms they're a participant in\r\n- **Key Benefit**: In a room with 3 participants, all 3 can see the same logs/messages\r\n\r\n---\r\n\r\n### 2. Server-Level Row Level Security (RLS)\r\n\r\n**Problem**: ElizaOS needed multi-tenant isolation to prevent data leakage between different server instances (deployments, environments).\r\n\r\n**Solution**: Implemented PostgreSQL RLS policies that automatically isolate data by ElizaOS server instance.\r\n\r\nAlready implemented: #6101\r\n\r\n---\r\n\r\n### 3. Semantic Clarity: `serverId` vs `messageServerId`\r\n\r\n#### Problem Statement\r\n\r\n##### Why `serverId` was problematic\r\n\r\nThe term `serverId` was ambiguous and created confusion in the codebase for multiple reasons:\r\n\r\n**1. Semantic Ambiguity**\r\n\r\nThe name `serverId` doesn't clearly indicate what type of server it refers to. In a distributed system like ElizaOS, \"server\" could mean:\r\n- Message servers (Discord, Telegram, Slack)\r\n- Application servers (ElizaOS instances)\r\n- Database servers\r\n- Authentication servers\r\n\r\nThis ambiguity made code harder to read and maintain.\r\n\r\n**2. Conflict with Row Level Security (RLS)**\r\n\r\nElizaOS uses PostgreSQL Row Level Security for multi-tenant isolation. In this context:\r\n- `server_id` in RLS refers to the **ElizaOS server instance** (for tenant isolation)\r\n- `serverId` in messaging refers to **external message platforms** (Discord guild, Telegram bot, etc.)\r\n\r\n**Key distinction:**\r\n- ONE ElizaOS server instance (`server_id = \"abc-123\"`) can connect to MULTIPLE message servers\r\n  - Discord guilds (`messageServerId = \"discord-1\"`, `messageServerId = \"discord-2\"`)\r\n  - Telegram bots (`messageServerId = \"telegram-1\"`)\r\n\r\nThis dual meaning created confusion:\r\n\r\n```typescript\r\n// Which serverId is this? ElizaOS instance or Discord guild?\r\nconst room = await adapter.getRoom({ serverId, roomId });\r\n\r\n// Is this filtering by tenant or by Discord server?\r\nawait adapter.getRoomsByServerId(serverId);\r\n```\r\n\r\n**3. Developer Confusion**\r\n\r\nWhen working on features involving both RLS and messaging:\r\n- Setting RLS policies with `server_id` (tenant isolation)\r\n- Querying rooms by `serverId` (message platform)\r\n\r\nSame name, completely different concepts → bugs and confusion\r\n\r\n**4. API Inconsistency**\r\n\r\nAPI routes like `/api/agents/:agentId/servers/:serverId/channels` didn't clearly communicate that `serverId` refers to a messaging platform, not an ElizaOS server.\r\n\r\n#### Solution\r\n\r\nRename message-related `serverId` to `messageServerId` to:\r\n- **Clearly indicate purpose**: It's the ID of an external messaging platform\r\n- **Avoid RLS conflicts**: RLS continues using `server_id` for tenant isolation\r\n- **Improve maintainability**: Code is self-documenting and semantically clear\r\n- **Better API design**: Routes like `/api/agents/:agentId/message-servers/:messageServerId/channels` are crystal clear\r\n\r\n---\r\n\r\n### 4. Performance Optimization: Participant Checking\r\n\r\n**Problem**: Checking if an entity is a participant required loading ALL participants into memory and using `.some()` - O(n) complexity.\r\n\r\n**Solution**: Added direct database existence checks - O(1) complexity.\r\n\r\n**New Methods:**\r\n- `isRoomParticipant(entityId, roomId)` - Direct DB query\r\n- `isChannelParticipant(entityId, channelId)` - Direct DB query\r\n\r\n**Benefits:**\r\n- **Constant time complexity** - O(1) instead of O(n)\r\n- **Lower memory usage** - No loading all participants\r\n- **Better scalability** - Handles rooms with 1000+ participants\r\n- **Database indexes** - Optimized queries\r\n\r\n**Implementation:**\r\n\r\n```typescript\r\n// OLD: O(n) - Load all participants into memory\r\nasync isParticipant(entityId: UUID, roomId: UUID): Promise<boolean> {\r\n  const participants = await this.getParticipantsForRoom(roomId);\r\n  return participants.some(p => p === entityId);\r\n}\r\n\r\n// NEW: O(1) - Direct database existence check\r\nasync isRoomParticipant(entityId: UUID, roomId: UUID): Promise<boolean> {\r\n  return this.withEntityContext(null, async (tx) => {\r\n    const result = await tx\r\n      .select({ exists: sql<number>`1` })\r\n      .from(participantTable)\r\n      .where(\r\n        and(\r\n          eq(participantTable.roomId, roomId),\r\n          eq(participantTable.entityId, entityId)\r\n        )\r\n      )\r\n      .limit(1);\r\n    return result.length > 0;\r\n  });\r\n}\r\n```\r\n\r\n**Impact on Authorization Checks:**\r\n\r\nBefore:\r\n```typescript\r\n// Load 1000 participants into memory\r\nconst participants = await runtime.getParticipantsForRoom(roomId);\r\nif (!participants.includes(entityId)) {\r\n  return sendError(res, 403, 'FORBIDDEN', 'Not a participant');\r\n}\r\n```\r\n\r\nAfter:\r\n```typescript\r\n// Single indexed DB query\r\nif (!(await runtime.isRoomParticipant(entityId, roomId))) {\r\n  return sendError(res, 403, 'FORBIDDEN', 'Not a participant');\r\n}\r\n```\r\n\r\n---\r\n\r\n### 5. Timeline Action Spans Fix\r\n\r\n**Problem**: The Timeline tab showed run summaries with action counts (e.g., \"11 spans\") but didn't display individual action details (REPLY, GET_TOKEN_CRYPTOSCORE, etc.). Only model calls (TEXT_LARGE, TEXT_EMBEDDING) were visible.\r\n\r\n**Root Cause**:\r\n\r\nElizaOS creates two types of logs for actions:\r\n- `action_event`: Logged when action STARTS (contains `runId` of the action, NO `parentRunId`)\r\n- `action`: Logged when action COMPLETES (contains `runId` of the action AND `parentRunId` pointing to main run)\r\n\r\n**Example from database:**\r\n\r\n```sql\r\n-- Main run\r\nrunId: c29cc856-4ee0-435b-a5ca-b81f76f7ef43\r\n\r\n-- Action completion log (type: 'action')\r\nrunId: 03286e8f-6eff-4c48-b0b9-e92cf2c52d0a  -- action's run\r\nparentRunId: c29cc856-4ee0-435b-a5ca-b81f76f7ef43  -- main run ✅\r\n\r\n-- Action start log (type: 'action_event')\r\nrunId: 03286e8f-6eff-4c48-b0b9-e92cf2c52d0a  -- action's run\r\nparentRunId: NULL  -- ❌ no link to main run\r\n```\r\n\r\n**The Filter Problem:**\r\n\r\nThe original filter in `runs.ts` only matched logs where:\r\n```typescript\r\nbody.runId === runId || body.parentRunId === runId\r\n```\r\n\r\nFor main run `c29cc856...`:\r\n- ✅ `action` logs matched (via `parentRunId`)\r\n- ❌ `action_event` logs didn't match (neither `runId` nor `parentRunId` matched)\r\n\r\n**Frontend Behavior:**\r\n\r\nThe frontend (`eliza-span-adapter.ts`) requires BOTH events:\r\n- `ACTION_STARTED` (from `action_event` logs) → **creates** the action span\r\n- `ACTION_COMPLETED` (from `action` logs) → **updates** the existing span\r\n\r\nWithout `ACTION_STARTED` events:\r\n- Action spans never created\r\n- `ACTION_COMPLETED` events try to update non-existent spans\r\n- Actions invisible in timeline UI\r\n\r\n**Solution:**\r\n\r\nModified the filter logic in [`runs.ts:439-466`](/Users/stanislasandujar/Projects/elizaos/eliza/packages/server/src/api/agents/runs.ts#L439-L466):\r\n\r\n```typescript\r\n// Step 1: Find directly related logs (run_event, action, etc.)\r\nconst directlyRelated = logs.filter((l) => {\r\n  const body = l.body as { runId?: UUID; parentRunId?: UUID };\r\n  return body.runId === runId || body.parentRunId === runId;\r\n});\r\n\r\n// Step 2: Extract action runIds from matched action completion logs\r\nconst actionRunIds = new Set(\r\n  directlyRelated\r\n    .filter((l) => l.type === 'action')\r\n    .map((l) => (l.body as { runId?: UUID }).runId)\r\n    .filter((id): id is UUID => !!id)\r\n);\r\n\r\n// Step 3: Include action_event logs that share runId with matched actions\r\nconst related = logs.filter((l) => {\r\n  const body = l.body as { runId?: UUID; parentRunId?: UUID };\r\n\r\n  // Include if directly related to main run\r\n  if (body.runId === runId || body.parentRunId === runId) {\r\n    return true;\r\n  }\r\n\r\n  // Also include action_event logs matching action runIds\r\n  if (l.type === 'action_event' && body.runId && actionRunIds.has(body.runId)) {\r\n    return true;\r\n  }\r\n\r\n  return false;\r\n});\r\n```\r\n\r\n**How it Works:**\r\n\r\n1. **First pass**: Find all logs directly related to the main run\r\n   - Includes `action` completion logs (via `parentRunId`)\r\n   - Includes `run_event`, model calls, etc.\r\n\r\n2. **Extract action IDs**: Collect all `runId` values from the matched `action` logs\r\n   - These are the action-specific run IDs\r\n\r\n3. **Second pass**: Also include `action_event` logs that share those action run IDs\r\n   - Even though they don't link to the main run via `parentRunId`\r\n   - They're identified by matching the action's `runId`\r\n\r\n**Result:**\r\n\r\nNow the API returns complete action data:\r\n- `ACTION_STARTED` events (from `action_event` logs)\r\n- `ACTION_COMPLETED` events (from `action` logs)\r\n\r\nFrontend can now:\r\n- Create action spans on `ACTION_STARTED`\r\n- Update them on `ACTION_COMPLETED`\r\n- Display actions in timeline alongside model calls\r\n\r\n**Files Modified:**\r\n- [`packages/server/src/api/agents/runs.ts`](/Users/stanislasandujar/Projects/elizaos/eliza/packages/server/src/api/agents/runs.ts#L439-L466)\r\n\r\n**Impact:**\r\n- ✅ Timeline now shows ALL spans (actions + model calls)\r\n- ✅ Action details visible (REPLY, GET_TOKEN_CRYPTOSCORE, etc.)\r\n- ✅ Accurate span counts match displayed spans\r\n- ✅ Complete observability for debugging agent behavior\r\n\r\n---\r\n\r\n### 6. RLS Security for Junction Table\r\n\r\n**Problem Identified**: Without RLS on `message_server_agents`, Server A could see the existence of Discord/Telegram servers linked to Server B's agents.\r\n\r\n**Solution**: The RLS system automatically adds isolation to the junction table:\r\n\r\n- Adds `server_id UUID DEFAULT current_server_id()` column\r\n- Creates `server_isolation_policy` for complete isolation\r\n- Server A cannot see or modify Server B's message server associations\r\n\r\n---\r\n\r\n## Test Coverage\r\n\r\n### All Tests Passing ✅\r\n\r\n**RLS Tests**: 77 tests pass, 0 fail, 173 expect() calls\r\n\r\n**Participant Tests**: 11 tests pass, 0 fail, 27 expect() calls\r\n- 5 tests in `participant.test.ts` (3 new for `isRoomParticipant`)\r\n- 6 tests in `messaging.test.ts` (2 new for `isChannelParticipant`)\r\n\r\n**Timeline Tests**: Integration tests verify action spans display correctly\r\n- Run detail API returns both `ACTION_STARTED` and `ACTION_COMPLETED` events\r\n- Frontend renders action spans with correct names and status\r\n- Span counts match displayed spans\r\n\r\n### Test Files\r\n\r\n**Unit Tests - Entity RLS** (`entity-rls.test.ts`)\r\n- Column detection priority (`roomId` > `entityId` > `authorId`)\r\n- Policy generation (STRICT vs PERMISSIVE modes)\r\n- Isolation behavior logic\r\n\r\n**Integration Tests - Entity RLS** (`rls-entity.test.ts`)\r\n- Entity isolation (Alice, Bob, Charlie)\r\n- Participant-based access control (room membership)\r\n- Combined Server RLS + Entity RLS (double isolation)\r\n\r\n**Integration Tests - message_server_agents** (`rls-message-server-agents.test.ts`)\r\n- Isolation: Server A sees only its 2 associations, Server B sees only its 1\r\n- Auto-population: `server_id` automatically set via `DEFAULT current_server_id()`\r\n- Query blocking: Server A queries Server B's message server → 0 results\r\n- Modification blocking: Server B tries to delete Server A's association → blocked\r\n- JOIN protection: Cross-server JOINs filtered correctly\r\n- Schema validation: Policy and DEFAULT constraint verified\r\n\r\n**Room Integration Tests** (5/5 passing)\r\n- Added test: `should map messageServerId to serverId for backward compatibility`\r\n- Verifies both fields are populated correctly\r\n\r\n**Timeline Integration Tests**\r\n- Verifies `action_event` logs included in run details\r\n- Confirms `ACTION_STARTED` events generated\r\n- Validates action spans display in frontend\r\n\r\n---\r\n\r\n## Breaking Changes\r\n\r\n**None**. All changes are fully backward compatible.\r\n\r\n---\r\n\r\n## Benefits\r\n\r\n### Code Clarity\r\n- **Developers immediately understand what `messageServerId` refers to**\r\n- **Self-documenting code**: No additional comments needed\r\n- **Clear method names**: `isChannelParticipant()` vs generic checks\r\n\r\n### Security\r\n- **Three-layer security**: Server RLS + Entity RLS + Application Authorization\r\n- **Complete RLS isolation** for both Server-level and Entity-level data\r\n- **Fail-closed** security model (deny access on errors)\r\n- **Database-enforced** isolation (can't be bypassed by application bugs)\r\n- **Zero Configuration**: RLS policies apply automatically to all tables\r\n\r\n### Developer Experience\r\n- **Reduced Bugs**: No more confusion between RLS `server_id` and messaging `serverId`\r\n- **Better Onboarding**: New developers don't need to guess which \"server\" is referenced\r\n- **Future-Proof**: Clear naming prevents similar ambiguities in future development\r\n- **Backward Compatible**: Existing code continues to work\r\n- **Type Safety**: TypeScript guides migration with deprecation warnings\r\n\r\n### Performance\r\n- **O(1) participant checks**: Constant time instead of linear\r\n- **Lower memory usage**: No loading all participants\r\n- **Database optimization**: Indexed queries for fast lookups\r\n- **Scalable**: Handles rooms with thousands of participants\r\n\r\n### Observability\r\n- **Complete timeline visibility**: All actions and model calls displayed\r\n- **Accurate span counts**: Numbers match displayed spans\r\n- **Better debugging**: See exactly what actions executed and when\r\n- **Production monitoring**: Full observability for agent behavior analysis\r\n\r\n### Testing\r\n- **Comprehensive Testing**: 88+ total tests ensure complete coverage\r\n- **All tests passing**: 0 failures, 200+ assertions\r\n- **Integration tests**: Real database scenarios\r\n- **Performance tests**: Verify optimization improvements\r\n- **Security tests**: RLS isolation, unauthorized access prevention\r\n\r\n---\r\n\r\n## Database Migration\r\n\r\n### Automatic Migration System\r\n\r\nThe migration system automatically handles:\r\n\r\n1. **Table rename**: `server_agents` → `message_server_agents`\r\n2. **Column rename**: `server_id` → `message_server_id` in junction table\r\n3. **RLS automatic application**:\r\n   - Adds `server_id` column with `DEFAULT current_server_id()` to all tables\r\n   - Creates indexes for performance\r\n   - Applies isolation policies (both server-level and entity-level)\r\n   - Handles backfill for existing data\r\n\r\n**Developer experience:**\r\n- **Zero configuration required** - just update and restart\r\n- **No manual SQL scripts** - everything is automated\r\n- **Idempotent and safe** - can be run multiple times without issues\r\n\r\n---\r\n\r\n## RLS Architecture Details\r\n\r\n### Three-Layer Security Model\r\n\r\n**Layer 1: Server RLS (Multi-Tenant Isolation)**\r\n- Isolates data between different ElizaOS server instances\r\n- Uses `server_id` for isolation\r\n- Context set via `application_name` connection parameter\r\n\r\n**Layer 2: Entity RLS (User Privacy Isolation)**\r\n- Isolates data between different entities within a server\r\n- Uses `entityId`, `authorId`, or joins via `participants` table\r\n- Context set via `app.entity_id` transaction-local variable\r\n- Provides DM privacy and multi-user isolation\r\n\r\n**Layer 3: Application Layer**\r\n- Authorization checks (participant validation)\r\n- Business logic enforcement\r\n\r\n**All three layers stack** - a user can only see data from their server AND their accessible entities AND that they have permission to access.\r\n\r\n### Excluded Tables (with rationale)\r\n\r\n**Entity RLS Exclusions:**\r\n- `users` - Authentication table (no entity isolation needed)\r\n- `entity_mappings` - Cross-platform entity mapping\r\n- `drizzle_migrations`, `__drizzle_migrations` - Migration tracking\r\n- `agents` - Shared across entities\r\n- `owners` - RLS management table\r\n\r\nAll other tables receive RLS automatically based on their column structure.\r\n\r\n---\r\n\r\n## Configuration\r\n\r\n### Environment Variables\r\n\r\n```bash\r\n# Layer 1: Server RLS (Multi-tenant isolation)\r\nENABLE_RLS_ISOLATION=true                  # Enable Row Level Security\r\nRLS_OWNER_ID=my-server-uuid               # Server instance ID for multi-tenant isolation\r\n\r\n# Layer 2: Entity RLS (User privacy isolation)\r\nENABLE_DATA_ISOLATION=true                # Enable entity-level data isolation\r\n\r\n# Database\r\nPOSTGRES_URL=postgresql://user:password@localhost:5432/eliza\r\n```\r\n\r\n---\r\n\r\n## API Changes\r\n\r\n### Backward Compatibility\r\n\r\nAll API changes maintain backward compatibility:\r\n\r\n**Database Adapter Methods:**\r\n- ✅ New methods added: `isRoomParticipant()`, `isChannelParticipant()`\r\n- ✅ Existing methods unchanged\r\n- ✅ `serverId` field still populated (maps to `messageServerId`)\r\n\r\n**API Endpoints:**\r\n- ✅ All existing endpoints continue to work\r\n- ✅ Run detail endpoint now includes `action_event` logs\r\n- ✅ No breaking changes to request/response formats\r\n\r\n**TypeScript:**\r\n- ✅ `serverId` marked as deprecated (still works)\r\n- ✅ Migration path via TypeScript warnings\r\n- ✅ Type safety preserved\r\n\r\n---\r\n\r\n## Summary\r\n\r\nThis PR delivers a complete security, performance, and observability overhaul:\r\n\r\n- **Entity-Level RLS**: Automatic data isolation at the database level\r\n- **Semantic Clarity**: Clear naming eliminates confusion\r\n- **Performance Optimization**: O(1) participant checking\r\n- **Timeline Fix**: Complete action visibility in observability UI\r\n- **100% Backward Compatible**: Zero breaking changes\r\n- **Fully Tested**: 88+ tests, 0 failures\r\n- **Production Ready**: Auto-migration, fail-closed security\r\n\r\n**Impact:**\r\n- 🔒 **Stronger security** with three-layer isolation (Server RLS + Entity RLS + Authorization)\r\n- 📖 **Clearer code** with semantic naming\r\n- 🚀 **Better performance** with optimized queries\r\n- 👁️ **Complete observability** with action spans in timelines\r\n- 🛡️ **Database-enforced** security that can't be bypassed\r\n- 🔧 **Developer-friendly** zero-config automatic migrations\r\n\r\n**Testing:**\r\n- ✅ 77 RLS tests passing\r\n- ✅ 11 participant optimization tests passing\r\n- ✅ Timeline integration tests passing\r\n- ✅ All existing tests passing\r\n- ✅ 0 failures\r\n",
      "repository": "elizaos/eliza",
      "createdAt": "2025-11-22T01:44:49Z",
      "mergedAt": "2025-11-27T09:14:36Z",
      "additions": 6118,
      "deletions": 2157
    },
    {
      "id": "PR_kwDOMT5cIs6xVUO6",
      "title": "feat: x402 middleware",
      "author": "odilitime",
      "number": 6114,
      "body": "pulled enhanced response & health check from Otaku\r\n\r\n\n<!-- CURSOR_SUMMARY -->\n---\n\n> [!NOTE]\n> Introduces x402 payment protection for plugin routes (EVM/Solana), adds core payment types, integrates verification and x402scan 402 responses, plus config registry, docs, and tests.\n> \n> - **Server (x402 middleware)**:\n>   - Add payment middleware (`x402/`) with EVM (EIP-712/ERC-3009) and Solana verification, facilitator payment ID support, and x402scan-compliant 402 responses.\n>   - Integrate into plugin routing to auto-wrap routes with `x402` config (`createPaymentAwareHandler`, `applyPaymentProtection`).\n>   - Expose middleware/types via `middleware/index.ts` and `x402/index.ts`.\n> - **Core Types**:\n>   - Add payment types (`PaymentEnabledRoute`, `X402Config`, validators, OpenAPI helpers) in `@elizaos/core` (`types/payment.ts` and export in `types/index.ts`).\n> - **Config & Utilities**:\n>   - Add payment config registry (`payment-config.ts`) with built-in configs (`base_usdc`, `solana_usdc`, `polygon_usdc`), CAIP-19 generation, pricing helpers, health reporting.\n>   - Define strict x402 schemas (`x402-types.ts`) and request/response/runtime types (`types.ts`).\n> - **API Integration**:\n>   - Update `api/index.ts` to use payment-aware handlers for plugin routes.\n> - **Docs & Tests**:\n>   - Add comprehensive README for x402 usage.\n>   - Add extensive tests for amount conversion, verification logic, integration, config, and schema validation.\n> - **Dependencies**:\n>   - Add `viem`, `@solana/web3.js`, and `cors` to server; lockfile updates.\n> \n> <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit d64e2a5e1045bc204ffb435d0ef74a044efe1287. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup>\n<!-- /CURSOR_SUMMARY -->",
      "repository": "elizaos/eliza",
      "createdAt": "2025-11-04T06:10:07Z",
      "mergedAt": null,
      "additions": 5434,
      "deletions": 10
    },
    {
      "id": "PR_kwDOMT5cIs6xzKBP",
      "title": "fix: align server tests with ElizaOS API changes",
      "author": "odilitime",
      "number": 6135,
      "body": "<!-- CURSOR_SUMMARY -->\n> [!NOTE]\n> Aligns server tests and routers with new ElizaOS interfaces, clarifies plugin auto-injection behavior, and deflakes/modernizes middleware, loader, socket, and utility tests.\n> \n> - **Server/API alignment**:\n>   - Update `agentExistsMiddleware`, Socket.IO router, Jobs and Agent Runs routers to use `ElizaOS` getters instead of agent maps.\n>   - Adjust message flow and log streaming tests to new event/filter semantics.\n> - **Plugin loading behavior**:\n>   - Clarify that server auto-injects `sql` plugin; bootstrap injection handled at character level; ensure deduping and order expectations.\n> - **Test refactors/deflakes**:\n>   - Replace heavy `mock.module` with spies and lightweight mocks; remove brittle fs mocks.\n>   - Skip flaky/integration suites causing interference (version, DB ops, message bus, agent runs, some jobs tests).\n> - **Utilities and middleware**:\n>   - Update tests for `authMiddleware`, validation, security headers, rate limits.\n>   - Adjust `sanitizeFilename` expectations and `resolvePgliteDir` behavior; strengthen path handling assertions.\n> - **Misc**:\n>   - Minor type/interface tweaks (e.g., runtime methods) and improved express server boot/teardown in tests.\n> \n> <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit a988400e95a3efe7e9366332d18e83a99429c2f2. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup>\n<!-- /CURSOR_SUMMARY -->\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai -->\n\n## Summary by CodeRabbit\n\n* **Bug Fixes**\n  * Improved plugin loading flexibility: server now recognizes both short and full bootstrap plugin identifiers during initialization.\n  * Enhanced SQL plugin auto-injection and plugin deduplication logic.\n\n* **Refactor**\n  * Removed internal loader APIs: `tryLoadFile` and `loadCharacterTryPath` functions are no longer available.\n  * Updated core routing infrastructure for improved agent management.\n  * Simplified test infrastructure by reducing mock dependencies and improving test reliability across environments.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
      "repository": "elizaos/eliza",
      "createdAt": "2025-11-06T04:07:48Z",
      "mergedAt": "2025-11-20T23:02:50Z",
      "additions": 4294,
      "deletions": 4383
    },
    {
      "id": "PR_kwDOMT5cIs6zHHko",
      "title": "fix: plugin-mysql support, initPromise and other minor fixes",
      "author": "odilitime",
      "number": 6143,
      "body": "<!-- CURSOR_SUMMARY -->\n> [!NOTE]\n> Adds conditional MySQL vs SQL plugin selection (with URL validation and MySQL no-op migrations), introduces runtime initPromise, updates mocks, and adds comprehensive tests.\n> \n> - **Server**:\n>   - **Database plugin selection**: Dynamically load `@elizaos/plugin-mysql` when `MYSQL_URL` is set; otherwise use `@elizaos/plugin-sql`.\n>   - **Utilities**: Add `validateAndLogMySQLUrl` and `MySQLNoOpMigrationService` for MySQL.\n>   - **RLS**: Enable only for PostgreSQL; skip/cleanup when using MySQL.\n>   - **DB ops**: Parameterized default server creation with dialect-specific upsert (`ON DUPLICATE KEY UPDATE` vs `ON CONFLICT`).\n>   - **Logging**: Trim verbose route-matching logs; minor try/catch cleanup.\n> - **CLI (Scenario)**:\n>   - Plugin selection prefers MySQL when `MYSQL_URL` or explicit plugin present; otherwise SQL.\n>   - Avoid loading both `plugin-sql` and `plugin-mysql`; only set `PGLITE_DATA_DIR` for SQL.\n> - **Core**:\n>   - Add `initPromise: Promise<void>` to `IAgentRuntime`.\n> - **Test Utils**:\n>   - Mock runtime gains pending `initPromise` with `resolveInit`/`rejectInit`; mocks migrated to `bun:test`.\n> - **Tests**:\n>   - New tests for scenario plugin selection, server MySQL compatibility/behavior, and runtime/mock `initPromise` semantics.\n> \n> <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit 96c2b1df774f0e6c889e7ac22a33d9e03599c317. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup>\n<!-- /CURSOR_SUMMARY -->\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai -->\n\n## Summary by CodeRabbit\n\n* **New Features**\n  * Added support for flexible database provider selection, allowing configuration with either MySQL or PostgreSQL through environment variables.\n\n* **Improvements**\n  * Updated security features to conditionally enable based on your database provider.\n  * Enhanced Content Security Policy configuration and database initialization flow.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
      "repository": "elizaos/eliza",
      "createdAt": "2025-11-13T01:58:45Z",
      "mergedAt": null,
      "additions": 2292,
      "deletions": 404
    }
  ],
  "codeChanges": {
    "additions": 10041,
    "deletions": 7749,
    "files": 253,
    "commitCount": 312
  },
  "completedItems": [
    {
      "title": "docs: fix old links to actual",
      "prNumber": 6050,
      "type": "bugfix",
      "body": "<!-- Use this template by filling in information and copying and pasting relevant items out of the HTML comments. -->\r\n\r\n<!-- This risks section must be filled out before the final review and merge. -->\r\n\r\n# Risks\r\n\r\nLow\r\n\r\n## What does thi",
      "files": [
        "packages/cli/README.md"
      ]
    },
    {
      "title": "fix: agent settings persistence across restarts",
      "prNumber": 6106,
      "type": "bugfix",
      "body": "# Relates to\r\n\r\nFixes agent settings not persisting across restarts, causing runtime-generated configuration to be lost.\r\n\r\n# Risks\r\n\r\n**Low risk**\r\n\r\n- Changes core runtime initialization logic for agent settings merge\r\n- All existing test",
      "files": [
        "packages/core/src/__tests__/ensure-agent-exists.test.ts",
        "packages/core/src/runtime.ts"
      ]
    },
    {
      "title": "feat: add ElizaOS reference to runtime",
      "prNumber": 6111,
      "type": "feature",
      "body": "<!-- Use this template by filling in information and copying and pasting relevant items out of the HTML comments. -->\r\n\r\n# Relates to\r\n\r\nRelates to #6095 - Unified messaging API\r\n\r\n# Risks\r\n\r\n**Low risk**\r\n\r\nThis change is non-breaking and ",
      "files": [
        "packages/core/src/__tests__/elizaos.test.ts",
        "packages/core/src/elizaos.ts",
        "packages/core/src/runtime.ts",
        "packages/core/src/types/elizaos.ts",
        "packages/core/src/types/index.ts",
        "packages/core/src/types/runtime.ts",
        "packages/plugin-sql/src/__tests__/integration/postgres-init.test.ts",
        "packages/plugin-sql/src/__tests__/unit/index.test.ts",
        "packages/project-starter/src/__tests__/utils/core-test-utils.ts",
        "packages/project-tee-starter/src/__tests__/utils/core-test-utils.ts",
        "packages/server/src/__tests__/integration/jobs-message-flow.test.ts",
        "packages/core/src/__tests__/runtime-embedding.test.ts"
      ]
    },
    {
      "title": "fix(plugin-sql): correct types path in package.json exports",
      "prNumber": 6134,
      "type": "bugfix",
      "body": "- Fix incorrect types path from ./types/index.d.ts to ./dist/index.d.ts\r\n- Remove non-existent 'types' directory from files array\r\n- Resolves TypeScript import errors when using @elizaos/plugin-sql\n\n<!-- CURSOR_SUMMARY -->\n---\n\n> [!NOTE]\n> ",
      "files": [
        "bun.lock",
        "packages/plugin-sql/package.json"
      ]
    },
    {
      "title": "fix: entity names array serialization for PostgreSQL",
      "prNumber": 6133,
      "type": "bugfix",
      "body": "Fix entity creation failures by normalizing the names field to ensure it's\r\nalways a proper array before database operations. Handles Set objects by\r\nconverting them with Array.from().\r\n\r\n- Add normalization in createEntities() and updateEn",
      "files": [
        "packages/plugin-sql/src/__tests__/integration/entity-array-fix.test.ts",
        "packages/plugin-sql/src/__tests__/integration/entity-methods.test.ts",
        "packages/plugin-sql/src/base.ts"
      ]
    },
    {
      "title": "feat(core): add skipMigrations option to runtime.initialize() for ser…",
      "prNumber": 6132,
      "type": "feature",
      "body": "- Add optional skipMigrations parameter to initialize() method in IAgentRuntime interface\r\n- Implement skipMigrations logic in AgentRuntime.initialize() to conditionally skip plugin migrations\r\n- Default behavior unchanged - migrations run ",
      "files": [
        "bun.lock",
        "packages/core/src/__tests__/runtime.test.ts",
        "packages/core/src/runtime.ts",
        "packages/core/src/types/runtime.ts"
      ]
    },
    {
      "title": "fix: align server tests with ElizaOS API changes",
      "prNumber": 6135,
      "type": "bugfix",
      "body": "<!-- CURSOR_SUMMARY -->\n> [!NOTE]\n> Aligns server tests and routers with new ElizaOS interfaces, clarifies plugin auto-injection behavior, and deflakes/modernizes middleware, loader, socket, and utility tests.\n> \n> - **Server/API alignment*",
      "files": [
        "bun.lock",
        "packages/server/src/__tests__/agent-plugin-reload.test.ts",
        "packages/server/src/__tests__/agent-server-database.test.ts",
        "packages/server/src/__tests__/agent-server-errors.test.ts",
        "packages/server/src/__tests__/agent-server-initialization.test.ts",
        "packages/server/src/__tests__/agent-server-management.test.ts",
        "packages/server/src/__tests__/agent-server-middleware.test.ts",
        "packages/server/src/__tests__/agents-runs.test.ts",
        "packages/server/src/__tests__/api.test.ts",
        "packages/server/src/__tests__/authMiddleware.test.ts",
        "packages/server/src/__tests__/basic-functionality.test.ts",
        "packages/server/src/__tests__/bootstrap-autoload.test.ts",
        "packages/server/src/__tests__/file-utils.test.ts",
        "packages/server/src/__tests__/integration/database-operations.test.ts",
        "packages/server/src/__tests__/integration/jobs-message-flow.test.ts",
        "packages/server/src/__tests__/loader.test.ts",
        "packages/server/src/__tests__/message-bus.test.ts",
        "packages/server/src/__tests__/middleware.test.ts",
        "packages/server/src/__tests__/simple-validation.test.ts",
        "packages/server/src/__tests__/socketio-router.test.ts",
        "packages/server/src/__tests__/ui-disable-feature.test.ts",
        "packages/server/src/__tests__/utils.test.ts",
        "packages/server/src/__tests__/validation.test.ts",
        "packages/server/src/api/system/__tests__/version.test.ts",
        ".github/workflows/core-package-tests.yaml",
        "package.json",
        "packages/core/src/__tests__/secrets.test.ts",
        "packages/core/src/__tests__/settings.test.ts",
        "packages/core/src/elizaos.ts",
        "packages/core/src/secrets.ts",
        "packages/server/README.md",
        "packages/server/package.json",
        "packages/server/scripts/run-integration-tests.sh",
        "packages/server/src/__tests__/EventEmitter-Compatibility-README.md",
        "packages/server/src/__tests__/README.md",
        "packages/server/src/__tests__/agent-server-lifecycle.test.ts",
        "packages/server/src/__tests__/builders/channel.builder.ts",
        "packages/server/src/__tests__/builders/character.builder.ts",
        "packages/server/src/__tests__/builders/message.builder.ts",
        "packages/server/src/__tests__/compatibility/cli-compatibility.test.ts",
        "packages/server/src/__tests__/compatibility/cli-patterns.test.ts",
        "packages/server/src/__tests__/features/bootstrap-autoload.test.ts",
        "packages/server/src/__tests__/features/character-file-size-regression.test.ts",
        "packages/server/src/__tests__/features/server-core.test.ts",
        "packages/server/src/__tests__/features/socketio-router.test.ts",
        "packages/server/src/__tests__/features/ui-toggle.test.ts",
        "packages/server/src/__tests__/fixtures/agent.fixture.ts",
        "packages/server/src/__tests__/fixtures/database.fixture.ts",
        "packages/server/src/__tests__/fixtures/server.fixture.ts",
        "packages/server/src/__tests__/helpers/networking.ts",
        "packages/server/src/__tests__/helpers/retry.ts",
        "packages/server/src/__tests__/helpers/wait.ts",
        "packages/server/src/__tests__/index.ts",
        "packages/server/src/__tests__/integration/agent-server-interaction.test.ts",
        "packages/server/src/__tests__/integration/message-bus-service.test.ts",
        "packages/server/src/__tests__/integration/socketio-message-flow.test.ts",
        "packages/server/src/__tests__/run-working-tests.sh",
        "packages/server/src/__tests__/security/rls-server.test.ts",
        "packages/server/src/__tests__/spa-routing-fix.test.ts"
      ]
    },
    {
      "title": "fix: load environment variables from process.env instead of .env file",
      "prNumber": 6141,
      "type": "bugfix",
      "body": "## Relates to\r\n\r\nFixes the issue where `runtime.getSetting(\"ANY_VARIABLES\")` returns `undefined` when environment variables are exported on the host (`export VAR=value`) instead of being defined in a `.env` file, causing agents to use incor",
      "files": [
        "bun.lock",
        "packages/cli/src/commands/start/index.ts",
        "packages/core/src/__tests__/secrets.test.ts",
        "packages/core/src/__tests__/settings.test.ts",
        "packages/core/src/__tests__/utils/environment.test.ts",
        "packages/core/src/secrets.ts",
        "packages/core/src/utils/environment.ts",
        "packages/server/src/index.ts"
      ]
    },
    {
      "title": "fix: RLS (Row-Level Security) server_id validation checks blocking all users when RLS isolation is disabled.",
      "prNumber": 6139,
      "type": "bugfix",
      "body": "# Relates to\r\n\r\nFix for RLS (Row-Level Security) server_id validation checks blocking all users when RLS isolation is disabled.\r\n\r\nMaybe: https://github.com/elizaOS/eliza/issues/6138\r\n\r\n# Risks\r\n\r\n**Low**. Changes only affect RLS security c",
      "files": [
        "packages/server/src/__tests__/rls-server.test.ts",
        "packages/server/src/api/messaging/channels.ts",
        "packages/server/src/api/messaging/core.ts",
        "packages/server/src/utils/rls-validation.ts"
      ]
    },
    {
      "title": "fix: Add openrouter embedding option in CLI",
      "prNumber": 6142,
      "type": "bugfix",
      "body": "# Relates to\r\n\r\nImproves OpenRouter integration in ElizaOS CLI by adding native embedding support, eliminating the need for users to configure a separate embedding provider when using OpenRouter.\r\n\r\n# Risks\r\n\r\n**Low Risk** - Well-contained ",
      "files": [
        "packages/cli/src/commands/create/actions/setup.ts",
        "packages/cli/src/commands/create/utils/selection.ts",
        "packages/cli/src/utils/get-config.ts",
        "packages/cli/tests/unit/utils/selection.test.ts"
      ]
    },
    {
      "title": "fix(build): resolve TypeScript declaration generation errors",
      "prNumber": 6146,
      "type": "bugfix",
      "body": "- Add missing hasElizaOS() method to test-utils mock runtime\r\n  * Implements required type predicate from IAgentRuntime interface\r\n  * Returns false by default for test scenarios\r\n\r\n- Fix plugin-sql TypeScript declaration generation\r\n  * Ov",
      "files": [
        "bun.lock",
        "packages/plugin-sql/build.ts",
        "packages/plugin-sql/tsconfig.build.json",
        "packages/plugin-sql/tsconfig.build.node.json",
        "packages/test-utils/src/mocks/runtime.ts"
      ]
    },
    {
      "title": "fix: migrate from LangChain v0.3 to @langchain/textsplitters v1.0",
      "prNumber": 6152,
      "type": "bugfix",
      "body": "- Replace langchain dependency with @langchain/textsplitters in @elizaos/core\r\n- Update import from 'langchain/text_splitter' to '@langchain/textsplitters'\r\n- Remove outdated langchain resolutions from plugin starter packages\r\n- Add compreh",
      "files": [
        "bun.lock",
        "packages/core/package.json",
        "packages/core/src/__tests__/utils.test.ts",
        "packages/core/src/utils.ts",
        "packages/plugin-quick-starter/package.json",
        "packages/plugin-starter/package.json"
      ]
    },
    {
      "title": "feat: improve accepted formats for plugin names in plugin dependencies",
      "prNumber": 6164,
      "type": "feature",
      "body": "<!-- CURSOR_SUMMARY -->\n> [!NOTE]\n> Adds name normalization and enhanced dependency resolution to handle both scoped package names and short names, with deduped queuing and comprehensive tests.\n> \n> - **Core (`packages/core/src/plugin.ts`)*",
      "files": [
        "packages/core/src/__tests__/plugin.test.ts",
        "packages/core/src/plugin.ts",
        "packages/cli/tests/commands/plugins.test.ts",
        "packages/core/src/runtime.ts"
      ]
    },
    {
      "title": "fix: topP support for anthropic PR",
      "prNumber": 6166,
      "type": "bugfix",
      "body": "<!-- CURSOR_SUMMARY -->\n> [!NOTE]\n> Introduce `topP` as a configurable model parameter (defaults and per-model-type) and pass-through in runtime-generated params.\n> \n> - **Core Runtime (`packages/core/src/runtime.ts`)**\n>   - Extend model s",
      "files": [
        "packages/core/src/runtime.ts",
        "packages/core/src/types/model.ts",
        "packages/core/src/__tests__/runtime-generation.test.ts",
        "packages/core/src/__tests__/runtime.test.ts"
      ]
    },
    {
      "title": "fix(server): update MessageBusService integration tests",
      "prNumber": 6165,
      "type": "bugfix",
      "body": "# Relates to\r\n\r\nUpdates to MessageBusService integration tests following architecture changes\r\n\r\n# Risks\r\n\r\nLow - Test-only changes, no production code modified\r\n\r\n# Background\r\n\r\n## What does this PR do?\r\n\r\nUpdates MessageBusService integr",
      "files": [
        "bun.lock",
        "packages/server/package.json",
        "packages/server/scripts/run-integration-tests.sh",
        "packages/server/src/__tests__/integration/database-operations.test.ts",
        "packages/server/src/__tests__/integration/message-bus-service.test.ts"
      ]
    },
    {
      "title": "feat: Entity-level RLS & Security Improvements",
      "prNumber": 6167,
      "type": "feature",
      "body": "## Summary\r\n\r\nThis PR implements four major improvements to ElizaOS's security, data architecture, and observability:\r\n\r\n1. **Entity-Level Row Level Security (RLS)** - PostgreSQL RLS policies for entity-based data isolation\r\n2. **Semantic C",
      "files": [
        ".github/workflows/client-cypress-tests.yml",
        "bun.lock",
        "examples/standalone-cli-chat.ts",
        "examples/standalone.ts",
        "packages/api-client/src/__tests__/services/media.test.ts",
        "packages/api-client/src/__tests__/services/memory.test.ts",
        "packages/api-client/src/__tests__/services/messaging.test.ts",
        "packages/api-client/src/services/agents.ts",
        "packages/api-client/src/services/media.ts",
        "packages/api-client/src/services/memory.ts",
        "packages/api-client/src/services/messaging.ts",
        "packages/api-client/src/types/memory.ts",
        "packages/api-client/src/types/messaging.ts",
        "packages/cli/src/commands/scenario/src/ConversationManager.ts",
        "packages/cli/src/commands/scenario/src/runtime-factory.ts",
        "packages/cli/tests/commands/dev.test.ts",
        "packages/cli/tests/commands/plugins.test.ts",
        "packages/cli/tests/integration/version-display.test.ts",
        "packages/client/cypress.config.cjs",
        "packages/client/cypress/e2e/01-home-page.cy.ts",
        "packages/client/cypress/e2e/02-chat-functionality.cy.ts",
        "packages/client/cypress/e2e/03-spa-routing.cy.ts",
        "packages/client/cypress/support/auth-commands.ts",
        "packages/client/cypress/support/commands.ts",
        "packages/client/cypress/support/e2e.ts",
        "packages/client/docker-compose.test.yml",
        "packages/client/package.json",
        "packages/client/scripts/test-e2e-server-auth.sh",
        "packages/client/scripts/test-e2e-server.sh",
        "packages/client/src/App.tsx",
        "packages/client/src/components/agent-creator.tsx",
        "packages/client/src/components/agent-log-viewer.tsx",
        "packages/client/src/components/agent-runs/AgentRunTimeline.tsx",
        "packages/client/src/components/agent-settings.tsx",
        "packages/client/src/components/app-sidebar.tsx",
        "packages/client/src/components/audio-recorder.tsx",
        "packages/client/src/components/character-form.tsx",
        "packages/client/src/components/chat.tsx",
        "packages/client/src/components/connection-error-banner.tsx",
        "packages/client/src/components/connection-status.cy.tsx",
        "packages/client/src/components/connection-status.tsx",
        "packages/client/src/components/env-settings.tsx",
        "packages/client/src/components/group-card.tsx",
        "packages/client/src/components/group-panel.tsx",
        "packages/client/src/components/secret-panel.tsx",
        "packages/client/src/components/server-management.tsx",
        "packages/client/src/components/ui/chat/chat-tts-button.tsx",
        "packages/client/src/context/AuthContext.tsx",
        "packages/client/src/context/ConnectionContext.tsx",
        "packages/client/src/hooks/__tests__/use-character-convert.test.ts"
      ]
    },
    {
      "title": "refactor: Standardize Logging Across Core, CLI, and Server",
      "prNumber": 6169,
      "type": "refactor",
      "body": "",
      "files": [
        "bun.lock",
        "packages/cli/src/index.ts",
        "packages/cli/tests/commands/create.test.ts",
        "packages/core/package.json",
        "packages/core/src/__tests__/message-service.test.ts",
        "packages/core/src/__tests__/roles.test.ts",
        "packages/core/src/entities.ts",
        "packages/core/src/logger.ts",
        "packages/core/src/plugin.ts",
        "packages/core/src/roles.ts",
        "packages/core/src/runtime.ts",
        "packages/core/src/services/default-message-service.ts",
        "packages/core/src/settings.ts",
        "packages/core/src/utils.ts",
        "packages/plugin-bootstrap/src/actions/choice.ts",
        "packages/plugin-bootstrap/src/actions/followRoom.ts",
        "packages/plugin-bootstrap/src/actions/imageGeneration.ts",
        "packages/plugin-bootstrap/src/actions/muteRoom.ts",
        "packages/plugin-bootstrap/src/actions/reply.ts",
        "packages/plugin-bootstrap/src/actions/roles.ts",
        "packages/plugin-bootstrap/src/actions/sendMessage.ts",
        "packages/plugin-bootstrap/src/actions/settings.ts",
        "packages/plugin-bootstrap/src/actions/unmuteRoom.ts",
        "packages/plugin-bootstrap/src/actions/updateEntity.ts",
        "packages/plugin-bootstrap/src/evaluators/reflection.ts",
        "packages/plugin-bootstrap/src/index.ts",
        "packages/plugin-bootstrap/src/providers/capabilities.ts",
        "packages/plugin-bootstrap/src/providers/roles.ts",
        "packages/plugin-bootstrap/src/providers/settings.ts",
        "packages/plugin-bootstrap/src/providers/world.ts",
        "packages/plugin-bootstrap/src/services/embedding.ts",
        "packages/plugin-bootstrap/src/services/task.ts",
        "packages/plugin-sql/src/base.ts",
        "packages/plugin-sql/src/index.browser.ts",
        "packages/plugin-sql/src/index.node.ts",
        "packages/plugin-sql/src/index.ts",
        "packages/plugin-sql/src/migration-service.ts",
        "packages/plugin-sql/src/pg/adapter.ts",
        "packages/plugin-sql/src/pg/manager.ts",
        "packages/plugin-sql/src/pglite/adapter.ts",
        "packages/plugin-sql/src/rls.ts",
        "packages/plugin-sql/src/runtime-migrator/drizzle-adapters/database-introspector.ts",
        "packages/plugin-sql/src/runtime-migrator/drizzle-adapters/sql-generator.ts",
        "packages/plugin-sql/src/runtime-migrator/extension-manager.ts",
        "packages/plugin-sql/src/runtime-migrator/runtime-migrator.ts",
        "packages/plugin-sql/src/runtime-migrator/schema-transformer.ts",
        "packages/server/src/__tests__/unit/middleware/auth-middleware.test.ts",
        "packages/server/src/__tests__/unit/middleware/middleware.test.ts",
        "packages/server/src/__tests__/unit/utils/validation.test.ts",
        "packages/server/src/api/agents/crud.ts",
        "packages/api-client/eslint.config.js",
        "packages/api-client/package.json",
        "packages/app/eslint.config.js",
        "packages/app/package.json",
        "packages/cli/eslint.config.js",
        "packages/cli/package.json",
        "packages/client/eslint.config.js",
        "packages/client/package.json",
        "packages/config/src/eslint/eslint.config.base.js",
        "packages/core/eslint.config.js",
        "packages/plugin-bootstrap/eslint.config.js",
        "packages/plugin-bootstrap/package.json",
        "packages/plugin-bootstrap/src/__tests__/attachments.test.ts",
        "packages/plugin-bootstrap/src/__tests__/services.test.ts",
        "packages/plugin-bootstrap/src/providers/actionState.ts",
        "packages/plugin-bootstrap/src/providers/choice.ts",
        "packages/plugin-bootstrap/src/providers/facts.ts",
        "packages/plugin-bootstrap/src/providers/recentMessages.ts",
        "packages/cli/src/commands/agent/actions/lifecycle.ts",
        "packages/cli/src/commands/containers/actions/delete.ts",
        "packages/cli/src/commands/containers/actions/list.ts",
        "packages/cli/src/commands/containers/actions/logs.ts",
        "packages/cli/src/commands/create/index.ts",
        "packages/cli/src/commands/deploy/actions/deploy-ecs.ts",
        "packages/cli/src/commands/deploy/actions/deploy.ts",
        "packages/cli/src/commands/deploy/index.ts",
        "packages/cli/src/commands/deploy/utils/api-client.ts",
        "packages/cli/src/commands/deploy/utils/docker-build.ts",
        "packages/cli/src/commands/login/utils/browser.ts",
        "packages/cli/src/commands/plugins/actions/install.ts",
        "packages/cli/src/commands/plugins/actions/list.ts",
        "packages/cli/src/commands/plugins/actions/remove.ts",
        "packages/cli/src/commands/plugins/utils/directory.ts",
        "packages/cli/src/commands/plugins/utils/env-vars.ts",
        "packages/cli/src/commands/start/index.ts",
        "packages/cli/src/commands/tee/eigen-wrapper.ts",
        "packages/cli/src/commands/tee/phala-wrapper.ts",
        "packages/cli/src/commands/test/actions/component-tests.ts",
        "packages/cli/src/commands/test/actions/e2e-tests.ts",
        "packages/cli/src/commands/test/index.ts",
        "packages/cli/src/commands/update/index.ts",
        "packages/cli/src/project.ts",
        "packages/cli/src/utils/auto-install-bun.ts",
        "packages/cli/src/utils/bun-exec.ts",
        "packages/cli/src/utils/bun-installation-helper.ts",
        "packages/cli/src/utils/cli-bun-migration.ts",
        "packages/cli/src/utils/config-manager.ts",
        "packages/cli/src/utils/copy-template.ts",
        "packages/cli/src/utils/dependency-manager.ts",
        "packages/cli/src/utils/emoji-handler.ts",
        "packages/cli/src/utils/get-config.ts",
        "packages/cli/src/utils/github.ts",
        "packages/cli/src/utils/handle-error.ts",
        "packages/cli/src/utils/install-plugin.ts",
        "packages/cli/src/utils/load-plugin.ts",
        "packages/cli/src/utils/local-cli-delegation.ts",
        "packages/cli/src/utils/package-manager.ts",
        "packages/cli/src/utils/plugin-context.ts",
        "packages/cli/src/utils/plugin-discovery.ts",
        "packages/cli/src/utils/publisher.ts"
      ]
    },
    {
      "title": "fix(core): resolve TS2358 instanceof error",
      "prNumber": 6170,
      "type": "bugfix",
      "body": "Fix TypeScript declaration build failure caused by `instanceof` checks on generic type `ModelParamsMap[T]`.\r\n\r\n### Changes\r\n- Add `isPlainObject` type guard in `utils/type-guards.ts`\r\n- Replace manual instanceof checks in `runtime.ts` with ",
      "files": [
        "packages/core/src/__tests__/type-guards.test.ts",
        "packages/core/src/runtime.ts",
        "packages/core/src/utils/type-guards.ts"
      ]
    },
    {
      "title": "fix: dynamic prompt normalization follow-up",
      "prNumber": 6192,
      "type": "bugfix",
      "body": "## Summary\n- normalize structured responses from dynamicPromptExecFromState for both XML and JSON outputs\n- relax required field validation to allow legitimate falsy values\n- add regression tests exercising JSON normalization and falsy requ",
      "files": [
        "packages/core/src/__tests__/runtime.test.ts",
        "packages/core/src/runtime.ts",
        "packages/core/src/types/runtime.ts"
      ]
    },
    {
      "title": "rollback(plugin-sql): revert build configuration changes from 08d5141…",
      "prNumber": 6194,
      "type": "other",
      "body": "# Rollback plugin-sql build configuration\r\n\r\nReverts build configuration changes from commits 08d5141 and 726b1d7 in plugin-sql package.\r\n\r\n## Changes\r\n\r\n- Restore types path to `./types/index.d.ts` in package.json exports\r\n- Add `types` di",
      "files": [
        "packages/plugin-sql/build.ts",
        "packages/plugin-sql/package.json",
        "packages/plugin-sql/tsconfig.build.json",
        "packages/plugin-sql/tsconfig.build.node.json"
      ]
    }
  ],
  "topContributors": [
    {
      "username": "standujar",
      "avatarUrl": "https://avatars.githubusercontent.com/u/16385918?u=718bdcd1585be8447bdfffb8c11ce249baa7532d&v=4",
      "totalScore": 540.203005430697,
      "prScore": 486.6450054306969,
      "issueScore": 0,
      "reviewScore": 51.5,
      "commentScore": 2.058,
      "summary": "standujar: Focused on developing several key features this month, with a significant amount of work in progress across multiple repositories. They opened pull requests to implement entity-level row-level security (elizaos/eliza#6107) and integrate a unified messaging API for the Discord plugin (elizaos-plugins/plugin-discord#24). This work, while not yet merged, involved substantial changes across 187 files (+4640/-1654 lines) and 25 commits. Based on their code changes, their effort was primarily centered on new feature development and refactoring."
    },
    {
      "username": "odilitime",
      "avatarUrl": "https://avatars.githubusercontent.com/u/16395496?u=c9bac48e632aae594a0d85aaf9e9c9c69b674d8b&v=4",
      "totalScore": 495.67286473700096,
      "prScore": 484.83286473700093,
      "issueScore": 0,
      "reviewScore": 9.5,
      "commentScore": 1.34,
      "summary": "odilitime: This month, odilitime made significant contributions to documentation and bug fixes, while also initiating new feature work. They landed a major documentation update in elizaos/spartan#21, which added over 5,000 lines, and also merged a fix for tasks in elizaos-plugins/plugin-birdeye#7. In addition to this merged work, they have several features in progress for the elizaos/eliza repository, including a new framework for adjusting prompts (#6113). Their activity shows a primary focus on general development and bug fixes, with contributions spread across code, tests, and documentation."
    },
    {
      "username": "0xbbjoker",
      "avatarUrl": "https://avatars.githubusercontent.com/u/54844437?u=90fe1762420de6ad493a1c1582f1f70c0d87d8e2&v=4",
      "totalScore": 359.00973859146256,
      "prScore": 319.1097385914626,
      "issueScore": 0,
      "reviewScore": 39.5,
      "commentScore": 0.4,
      "summary": "0xbbjoker: This month, 0xbbjoker focused on extending plugin capabilities by implementing a key feature in `elizaos-plugins/plugin-openrouter` via PR #17. This significant contribution added support for `TEXT_EMBEDDING` models, involving changes across code, tests, and configuration files. In addition to this feature work, they also contributed one pull request review."
    },
    {
      "username": "Freytes",
      "avatarUrl": "https://avatars.githubusercontent.com/u/4147278?u=89aa9570e6f8b4a8e9e41e8f908c16fb69c5a43f&v=4",
      "totalScore": 232.1658694828805,
      "prScore": 232.1658694828805,
      "issueScore": 0,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "Freytes: Focused on adding substantial new features to the `elizaos/spartan` repository, merging four significant pull requests. Their most impactful contributions included introducing a new Chrome extension in PR #17 (+42042 lines) and a Farcaster miniapp in PR #19 (+13210 lines). Freytes also improved the developer experience by adding Docker support for an easier development setup in PR #20. In total, their work added over 67k lines of new code and tests to build out major new components for the project."
    },
    {
      "username": "wtfsayo",
      "avatarUrl": "https://avatars.githubusercontent.com/u/82053242?u=98209a1f10456f42d4d2fa71db4d5bf4a672cbc3&v=4",
      "totalScore": 110.2731160057757,
      "prScore": 104.9331160057757,
      "issueScore": 0,
      "reviewScore": 5,
      "commentScore": 0.33999999999999997,
      "summary": "wtfsayo: This month, wtfsayo focused on maintenance within the `elizaos-plugins/plugin-mcp` repository. They merged a single pull request (#18) to update action names and dependencies, which involved a significant refactor that removed nearly 400 lines of code. Their commits were distributed across feature work, bug fixes, and tests, primarily modifying code, documentation, and configuration files."
    },
    {
      "username": "borisudovicic",
      "avatarUrl": "https://avatars.githubusercontent.com/u/31806472?u=8935f4d43fd7e4eb9bf5ff92d54d4d2f8ac8a786&v=4",
      "totalScore": 94.54,
      "prScore": 0,
      "issueScore": 94,
      "reviewScore": 0,
      "commentScore": 0.54,
      "summary": "borisudovicic: Focused on planning and defining future work for the elizaos/eliza repository this month. They initiated discussions on several potential features by creating issues for \"Points / Leaderboard\" (#6110), \"Background tasks\" (#6109), and \"Parallel actions\" (#6108)."
    },
    {
      "username": "rferrari",
      "avatarUrl": "https://avatars.githubusercontent.com/u/495887?u=5a56d90f584ffc1827bb301541076597dca9cb3e&v=4",
      "totalScore": 36.77887055267063,
      "prScore": 34.57887055267063,
      "issueScore": 2,
      "reviewScore": 0,
      "commentScore": 0.2,
      "summary": "rferrari: This month, rferrari focused on initiating improvements to plugin functionality and developer tooling. They proposed enhancements to the Farcaster plugin's configuration and API handling in an open pull request (elizaos-plugins/plugin-farcaster#13). Additionally, rferrari opened an issue to improve debugging support in the core application (elizaos/eliza#6154)."
    },
    {
      "username": "LinuxIsCool",
      "avatarUrl": "https://avatars.githubusercontent.com/u/31582215?u=b8eb5d3849bf877a3a0b686cf1632aca92e744ae&v=4",
      "totalScore": 27.88213122712422,
      "prScore": 23.68213122712422,
      "issueScore": 4,
      "reviewScore": 0,
      "commentScore": 0.2,
      "summary": "LinuxIsCool: This month, LinuxIsCool's contributions were focused on project maintenance within the elizaos/eliza repository. They identified and opened two issues regarding project health: #6122 about missing documentation and #6121 concerning an outdated changelog."
    },
    {
      "username": "ChristopherTrimboli",
      "avatarUrl": "https://avatars.githubusercontent.com/u/27584221?u=0d816ce1dcdea8f925aba18bb710153d4a87a719&v=4",
      "totalScore": 26,
      "prScore": 0,
      "issueScore": 0,
      "reviewScore": 26,
      "commentScore": 0,
      "summary": "ChristopherTrimboli: Focused on supporting the team through code review this month, performing 3 reviews which included 2 approvals and 1 request for changes. He also made progress on a local refactoring effort, committing changes across 17 files."
    },
    {
      "username": "ai16x402",
      "avatarUrl": "https://avatars.githubusercontent.com/u/241517257?u=db5e37fbc5cfc2fc78bd2de767f7235704dc2b0f&v=4",
      "totalScore": 25.22068353919891,
      "prScore": 24.78268353919891,
      "issueScore": 0,
      "reviewScore": 0,
      "commentScore": 0.43799999999999994,
      "summary": "ai16x402: This month, ai16x402 focused on expanding the plugin ecosystem by opening three pull requests to add new plugins to the `elizaos-plugins/registry` (#237, #238, #239). This work, which is still in progress, involved 7 commits and modifications to configuration files (+80/-18 lines). They also participated in discussions with 3 comments on pull requests."
    },
    {
      "username": "madjin",
      "avatarUrl": "https://avatars.githubusercontent.com/u/32600939?u=cdcf89f44c7a50906c7a80d889efa85023af2049&v=4",
      "totalScore": 23.146346309695485,
      "prScore": 23.146346309695485,
      "issueScore": 0,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "madjin: This month, madjin focused on expanding the project's pipeline configuration. They merged a pull request in elizaos/elizaos.github.io (#169) that added 12 new active repositories to the system. This work consisted entirely of modifications to configuration files."
    },
    {
      "username": "Neysixx",
      "avatarUrl": "https://avatars.githubusercontent.com/u/115616810?u=94c403172b4ffda30d6fc765f5997631fb7d1ef1&v=4",
      "totalScore": 22.861633597686627,
      "prScore": 22.861633597686627,
      "issueScore": 0,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "Neysixx: Focused on extending command-line functionality in the elizaos/eliza repository this month. They opened a pull request to add a new embedding option (elizaos/eliza#6142), which involved modifying 6 files with significant changes (+620/-545 lines). This work, which included new tests, was an even mix of feature development, bug fixing, and refactoring."
    },
    {
      "username": "tungpun",
      "avatarUrl": "https://avatars.githubusercontent.com/u/5058370?u=59cb956de322867be56c0abee49ab3f28f819e2f&v=4",
      "totalScore": 13.943573590279971,
      "prScore": 13.943573590279971,
      "issueScore": 0,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "tungpun: This month, tungpun focused on improving stability in the `elizaos/eliza` repository by addressing a potential race condition. They opened a pull request (#6137) to remove a message emit in the source API, a change that modified 24 files (+272/-57 lines). This work indicates a focus on bug prevention and code maintenance."
    },
    {
      "username": "nguyennk92",
      "avatarUrl": "https://avatars.githubusercontent.com/u/30664183?u=d6e579cd25d50bc8e9ec4928d95909d759b841db&v=4",
      "totalScore": 12.745835825288449,
      "prScore": 12.145835825288449,
      "issueScore": 0,
      "reviewScore": 0,
      "commentScore": 0.6000000000000001,
      "summary": "nguyennk92: This month's work was focused on adding an authentication token to the Socket.io server, proposed in the open pull request elizaos/eliza#6144. The contribution consisted of 3 commits modifying 5 files. The changes touched application code, configuration, and tests, indicating a primary focus on feature work and its associated testing."
    },
    {
      "username": "otaku-x402",
      "avatarUrl": "https://avatars.githubusercontent.com/u/242004857?u=1325b26d380eec4a0b8d84e8e249c523eebd28dc&v=4",
      "totalScore": 12.097573590279971,
      "prScore": 11.897573590279972,
      "issueScore": 0,
      "reviewScore": 0,
      "commentScore": 0.2,
      "summary": "otaku-x402: No activity this month."
    },
    {
      "username": "samarth30",
      "avatarUrl": "https://avatars.githubusercontent.com/u/48334430?u=1fc119a6c2deb8cf60448b4c8961cb21dc69baeb&v=4",
      "totalScore": 8,
      "prScore": 0,
      "issueScore": 8,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "samarth30: This month, samarth30's contribution was focused on planning for new billing functionality in the Eliza Cloud product. They initiated this effort by creating an issue to track the integration of Stripe for settings and billing (elizaos/eliza#6118)."
    },
    {
      "username": "skurzyp",
      "avatarUrl": "https://avatars.githubusercontent.com/u/98319381?v=4",
      "totalScore": 7,
      "prScore": 0,
      "issueScore": 2,
      "reviewScore": 5,
      "commentScore": 0,
      "summary": "skurzyp: This month, skurzyp's activity was focused on identifying future technical debt by opening an issue in `elizaos/eliza` (#6145) to track the necessary migration from a deprecated version of Langchain."
    },
    {
      "username": "github-advanced-security",
      "avatarUrl": "https://avatars.githubusercontent.com/in/57789?v=4",
      "totalScore": 4.5,
      "prScore": 0,
      "issueScore": 0,
      "reviewScore": 4.5,
      "commentScore": 0,
      "summary": "github-advanced-security: No activity this month."
    },
    {
      "username": "devbrett90-prog",
      "avatarUrl": "https://avatars.githubusercontent.com/u/241853504?v=4",
      "totalScore": 4.5,
      "prScore": 0,
      "issueScore": 0,
      "reviewScore": 4.5,
      "commentScore": 0,
      "summary": "devbrett90-prog: No activity this month."
    },
    {
      "username": "humuhimi",
      "avatarUrl": "https://avatars.githubusercontent.com/u/35215680?u=029a1ed6ea6a26ebf1cfd081cba6af2e6d32ef6d&v=4",
      "totalScore": 4.3,
      "prScore": 0,
      "issueScore": 4.1,
      "reviewScore": 0,
      "commentScore": 0.2,
      "summary": "humuhimi: Contributed to repository stability by identifying and reporting a significant bug in `elizaos/eliza` (#6138), where disabling the Web UI was incorrectly blocking all endpoints."
    },
    {
      "username": "tdnupe3",
      "avatarUrl": "https://avatars.githubusercontent.com/u/25161668?u=94680b6bcbcfce954c7a9dd09d667a3919953041&v=4",
      "totalScore": 2,
      "prScore": 0,
      "issueScore": 2,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "tdnupe3: This month, tdnupe3 contributed to the elizaos/eliza repository by opening an issue (#6148) to propose a new plugin submission for \"Coin Railz x402 Micropayment Services\"."
    },
    {
      "username": "nikatuz8-cell",
      "avatarUrl": "https://avatars.githubusercontent.com/u/243873833?v=4",
      "totalScore": 2,
      "prScore": 0,
      "issueScore": 2,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "nikatuz8-cell: Contributed to the elizaos/eliza repository by opening and closing an issue related to migration (#6149)."
    },
    {
      "username": "linear",
      "avatarUrl": "https://avatars.githubusercontent.com/in/20150?v=4",
      "totalScore": 2,
      "prScore": 0,
      "issueScore": 2,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "linear: This month's activity consisted of creating an issue to define entity-level row-level security in elizaos/eliza (#6112)."
    },
    {
      "username": "joglomedia",
      "avatarUrl": "https://avatars.githubusercontent.com/u/3152988?v=4",
      "totalScore": 2,
      "prScore": 0,
      "issueScore": 2,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "joglomedia: This month, their contribution was focused on proposing new functionality in the elizaos/eliza repository by creating issue #6168 to add an OpenAI-compatible API."
    },
    {
      "username": "christophwallacher-web",
      "avatarUrl": "https://avatars.githubusercontent.com/u/233379771?v=4",
      "totalScore": 2,
      "prScore": 0,
      "issueScore": 2,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "christophwallacher-web: This month, christophwallacher-web's activity consisted of identifying and reporting a potential bug in the `elizaos/eliza` repository by opening issue #6140."
    },
    {
      "username": "TommyVeit",
      "avatarUrl": "https://avatars.githubusercontent.com/u/244845549?v=4",
      "totalScore": 2,
      "prScore": 0,
      "issueScore": 2,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "TommyVeit: This month, TommyVeit's activity was focused on the `elizaos/eliza` repository, where they identified and reported a user-facing bug. They opened and subsequently closed issue #6158 concerning a snapshot eligibility and wallet connection problem."
    },
    {
      "username": "870171594",
      "avatarUrl": "https://avatars.githubusercontent.com/u/216127669?u=d4669261a63be8c0bcb69c4e497ed51ecc07776e&v=4",
      "totalScore": 2,
      "prScore": 0,
      "issueScore": 2,
      "reviewScore": 0,
      "commentScore": 0,
      "summary": "870171594: This month's activity was limited to the elizaos/eliza repository, where they opened an issue (#6156) to inquire about API capabilities."
    },
    {
      "username": "letmehateu",
      "avatarUrl": "https://avatars.githubusercontent.com/u/133153661?u=2217cec1ebd7bf22a8e4e3ace28b3183720dd444&v=4",
      "totalScore": 0.2,
      "prScore": 0,
      "issueScore": 0,
      "reviewScore": 0,
      "commentScore": 0.2,
      "summary": null
    }
  ],
  "newPRs": 27,
  "mergedPRs": 20,
  "newIssues": 63,
  "closedIssues": 28,
  "activeContributors": 25
}