@hasna/conversations 0.2.54 → 0.2.56

package/bin/index.js

@@ -14483,6 +14483,11 @@ function guessMimeType(name) {
   };
   return mimeMap[ext || ""] || "application/octet-stream";
 }
+function assertMessageSize(content) {
+  if (Buffer.byteLength(content, "utf8") > MAX_MESSAGE_BYTES) {
+    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
+  }
+}
 function checkRateLimit(agentId) {
   const dbPath = process.env.CONVERSATIONS_DB_PATH ?? process.env.HASNA_CONVERSATIONS_DB_PATH ?? "";
   if (dbPath === ":memory:" || dbPath.includes("test") || dbPath.includes("tmp"))
@@ -14499,10 +14504,9 @@ function checkRateLimit(agentId) {
   }
 }
 function sendMessage(opts) {
-  if (Buffer.byteLength(opts.content, "utf8") > MAX_MESSAGE_BYTES) {
-    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
-  }
+  assertMessageSize(opts.content);
   checkRateLimit(opts.from);
+  const validatedAttachments = opts.attachments && opts.attachments.length > 0 ? opts.attachments.map((att) => validateAttachment(att.source_path, att.name)) : [];
   const db2 = getDb();
   const explicitSession = opts.session_id && opts.session_id.trim().length > 0 ? opts.session_id : undefined;
   const sessionId = explicitSession ?? (opts.space ? `space:${opts.space}` : `${[opts.from, opts.to].sort().join("-")}-${randomUUID3().slice(0, 8)}`);
@@ -14518,12 +14522,11 @@ function sendMessage(opts) {
   `);
   const row = stmt.get(msgUuid, sessionId, opts.from, opts.to, opts.space || null, opts.project_id || null, opts.content, normalizedPriority, opts.working_dir || null, opts.repository || null, opts.branch || null, metadata, blocking, replyTo);
   const message = parseMessage(row);
-  if (opts.attachments && opts.attachments.length > 0) {
+  if (validatedAttachments.length > 0) {
     const attachmentsDir = join11(getAttachmentsDir(), String(message.id));
     mkdirSync8(attachmentsDir, { recursive: true });
     const attachmentInfos = [];
-    for (const att of opts.attachments) {
-      const { safeSource, safeName } = validateAttachment(att.source_path, att.name);
+    for (const { safeSource, safeName } of validatedAttachments) {
       const destPath = join11(attachmentsDir, safeName);
       copyFileSync3(safeSource, destPath);
       const stat = statSync2(destPath);
@@ -14773,6 +14776,7 @@ function deleteMessage(id, agent) {
   return result.changes > 0;
 }
 function editMessage(id, agent, newContent) {
+  assertMessageSize(newContent);
   const db2 = getDb();
   const stmt = db2.prepare(`UPDATE messages SET content = ?, edited_at = strftime('%Y-%m-%dT%H:%M:%f', 'now') WHERE id = ? AND from_agent = ? RETURNING *`);
   const row = stmt.get(newContent, id, agent);
@@ -15549,7 +15553,7 @@ var init_space_notifications = __esm(() => {
 var require_package = __commonJS((exports, module) => {
   module.exports = {
     name: "@hasna/conversations",
-    version: "0.2.54",
+    version: "0.2.56",
     description: "Real-time CLI messaging for AI agents",
     type: "module",
     bin: {

package/bin/mcp.js

@@ -41141,6 +41141,11 @@ function guessMimeType(name) {
   return mimeMap[ext || ""] || "application/octet-stream";
 }
 var MAX_MESSAGE_BYTES = 65536;
+function assertMessageSize(content) {
+  if (Buffer.byteLength(content, "utf8") > MAX_MESSAGE_BYTES) {
+    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
+  }
+}
 var RATE_LIMIT_MAX = 60;
 var RATE_LIMIT_WINDOW_MS = 60000;
 var _rateLimitCounters = new Map;
@@ -41160,10 +41165,9 @@ function checkRateLimit(agentId) {
   }
 }
 function sendMessage(opts) {
-  if (Buffer.byteLength(opts.content, "utf8") > MAX_MESSAGE_BYTES) {
-    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
-  }
+  assertMessageSize(opts.content);
   checkRateLimit(opts.from);
+  const validatedAttachments = opts.attachments && opts.attachments.length > 0 ? opts.attachments.map((att) => validateAttachment(att.source_path, att.name)) : [];
   const db2 = getDb();
   const explicitSession = opts.session_id && opts.session_id.trim().length > 0 ? opts.session_id : undefined;
   const sessionId = explicitSession ?? (opts.space ? `space:${opts.space}` : `${[opts.from, opts.to].sort().join("-")}-${randomUUID().slice(0, 8)}`);
@@ -41179,12 +41183,11 @@ function sendMessage(opts) {
   `);
   const row = stmt.get(msgUuid, sessionId, opts.from, opts.to, opts.space || null, opts.project_id || null, opts.content, normalizedPriority, opts.working_dir || null, opts.repository || null, opts.branch || null, metadata, blocking, replyTo);
   const message = parseMessage(row);
-  if (opts.attachments && opts.attachments.length > 0) {
+  if (validatedAttachments.length > 0) {
     const attachmentsDir = join10(getAttachmentsDir(), String(message.id));
     mkdirSync7(attachmentsDir, { recursive: true });
     const attachmentInfos = [];
-    for (const att of opts.attachments) {
-      const { safeSource, safeName } = validateAttachment(att.source_path, att.name);
+    for (const { safeSource, safeName } of validatedAttachments) {
       const destPath = join10(attachmentsDir, safeName);
       copyFileSync3(safeSource, destPath);
       const stat = statSync2(destPath);
@@ -41428,6 +41431,7 @@ function deleteMessage(id, agent) {
   return result.changes > 0;
 }
 function editMessage(id, agent, newContent) {
+  assertMessageSize(newContent);
   const db2 = getDb();
   const stmt = db2.prepare(`UPDATE messages SET content = ?, edited_at = strftime('%Y-%m-%dT%H:%M:%f', 'now') WHERE id = ? AND from_agent = ? RETURNING *`);
   const row = stmt.get(newContent, id, agent);
@@ -46900,7 +46904,7 @@ function startMcpHttpServer(options) {
 // package.json
 var package_default = {
   name: "@hasna/conversations",
-  version: "0.2.54",
+  version: "0.2.56",
   description: "Real-time CLI messaging for AI agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -12142,6 +12142,11 @@ function guessMimeType(name) {
   return mimeMap[ext || ""] || "application/octet-stream";
 }
 var MAX_MESSAGE_BYTES = 65536;
+function assertMessageSize(content) {
+  if (Buffer.byteLength(content, "utf8") > MAX_MESSAGE_BYTES) {
+    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
+  }
+}
 var RATE_LIMIT_MAX = 60;
 var RATE_LIMIT_WINDOW_MS = 60000;
 var _rateLimitCounters = new Map;
@@ -12161,10 +12166,9 @@ function checkRateLimit(agentId) {
   }
 }
 function sendMessage(opts) {
-  if (Buffer.byteLength(opts.content, "utf8") > MAX_MESSAGE_BYTES) {
-    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
-  }
+  assertMessageSize(opts.content);
   checkRateLimit(opts.from);
+  const validatedAttachments = opts.attachments && opts.attachments.length > 0 ? opts.attachments.map((att) => validateAttachment(att.source_path, att.name)) : [];
   const db2 = getDb();
   const explicitSession = opts.session_id && opts.session_id.trim().length > 0 ? opts.session_id : undefined;
   const sessionId = explicitSession ?? (opts.space ? `space:${opts.space}` : `${[opts.from, opts.to].sort().join("-")}-${randomUUID().slice(0, 8)}`);
@@ -12180,12 +12184,11 @@ function sendMessage(opts) {
   `);
   const row = stmt.get(msgUuid, sessionId, opts.from, opts.to, opts.space || null, opts.project_id || null, opts.content, normalizedPriority, opts.working_dir || null, opts.repository || null, opts.branch || null, metadata, blocking, replyTo);
   const message = parseMessage(row);
-  if (opts.attachments && opts.attachments.length > 0) {
+  if (validatedAttachments.length > 0) {
     const attachmentsDir = join8(getAttachmentsDir(), String(message.id));
     mkdirSync6(attachmentsDir, { recursive: true });
     const attachmentInfos = [];
-    for (const att of opts.attachments) {
-      const { safeSource, safeName } = validateAttachment(att.source_path, att.name);
+    for (const { safeSource, safeName } of validatedAttachments) {
       const destPath = join8(attachmentsDir, safeName);
       copyFileSync3(safeSource, destPath);
       const stat = statSync2(destPath);
@@ -12373,6 +12376,7 @@ function deleteMessage(id, agent) {
   return result.changes > 0;
 }
 function editMessage(id, agent, newContent) {
+  assertMessageSize(newContent);
   const db2 = getDb();
   const stmt = db2.prepare(`UPDATE messages SET content = ?, edited_at = strftime('%Y-%m-%dT%H:%M:%f', 'now') WHERE id = ? AND from_agent = ? RETURNING *`);
   const row = stmt.get(newContent, id, agent);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/conversations",
-  "version": "0.2.54",
+  "version": "0.2.56",
   "description": "Real-time CLI messaging for AI agents",
   "type": "module",
   "bin": {