Skip to content

v1.4.2

Choose a tag to compare

View all tags
@rabbitcannon rabbitcannon released this 13 Jun 22:02
· 9 commits to main since this release
v1.4.2
69d4a64
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bug fix + hardening release. Reimplements ideas from #1 (credit: @ultimatefrisbie1) cleanly across all tools, with tests.

  • Fix download_character_zip — it called res.json() on a binary ZIP (broken on every call). Now downloads binary via getBinary(), saves to pixellab-forge-output/, and returns { file_path, size_bytes }.
  • Strip base64 from error responses across all HTTP methods, so failures don't flood context with image data.
  • Validate + URL-encode all path-segment ids (characters/objects, including the v1.4.0 object animation/state endpoints) to prevent path traversal / injection.
  • file_path image arguments — any image arg can carry a file_path (resolved from disk, confined to the output dir / workspace root) instead of inline base64.

Tests: 78 → 101 passing. Mirrored to GitHub Packages as @rabbitcannon/pixellab-forge-mcp@1.4.2.

Contributors

ultimatefrisbie1
Assets 3
Loading