@hasna/conversations 0.2.55 → 0.2.57

package/bin/index.js

@@ -14483,6 +14483,11 @@ function guessMimeType(name) {
   };
   return mimeMap[ext || ""] || "application/octet-stream";
 }
+function assertMessageSize(content) {
+  if (Buffer.byteLength(content, "utf8") > MAX_MESSAGE_BYTES) {
+    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
+  }
+}
 function checkRateLimit(agentId) {
   const dbPath = process.env.CONVERSATIONS_DB_PATH ?? process.env.HASNA_CONVERSATIONS_DB_PATH ?? "";
   if (dbPath === ":memory:" || dbPath.includes("test") || dbPath.includes("tmp"))
@@ -14499,9 +14504,7 @@ function checkRateLimit(agentId) {
   }
 }
 function sendMessage(opts) {
-  if (Buffer.byteLength(opts.content, "utf8") > MAX_MESSAGE_BYTES) {
-    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
-  }
+  assertMessageSize(opts.content);
   checkRateLimit(opts.from);
   const validatedAttachments = opts.attachments && opts.attachments.length > 0 ? opts.attachments.map((att) => validateAttachment(att.source_path, att.name)) : [];
   const db2 = getDb();
@@ -14773,6 +14776,7 @@ function deleteMessage(id, agent) {
   return result.changes > 0;
 }
 function editMessage(id, agent, newContent) {
+  assertMessageSize(newContent);
   const db2 = getDb();
   const stmt = db2.prepare(`UPDATE messages SET content = ?, edited_at = strftime('%Y-%m-%dT%H:%M:%f', 'now') WHERE id = ? AND from_agent = ? RETURNING *`);
   const row = stmt.get(newContent, id, agent);
@@ -15549,7 +15553,7 @@ var init_space_notifications = __esm(() => {
 var require_package = __commonJS((exports, module) => {
   module.exports = {
     name: "@hasna/conversations",
-    version: "0.2.55",
+    version: "0.2.57",
     description: "Real-time CLI messaging for AI agents",
     type: "module",
     bin: {
@@ -49909,6 +49913,44 @@ function normalizePort(value, fallback) {
     return fallback;
   return port;
 }
+function registryTimeoutMs() {
+  const raw = process.env.CONVERSATIONS_REGISTRY_TIMEOUT_MS;
+  if (!raw)
+    return DEFAULT_REGISTRY_TIMEOUT_MS;
+  const parsed = Number(raw);
+  if (!Number.isFinite(parsed) || parsed <= 0)
+    return DEFAULT_REGISTRY_TIMEOUT_MS;
+  return Math.min(Math.ceil(parsed), MAX_REGISTRY_TIMEOUT_MS);
+}
+async function fetchLatestPackageVersion() {
+  const timeoutMs = registryTimeoutMs();
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const res = await fetch(NPM_LATEST_URL, {
+      headers: { Accept: "application/json" },
+      signal: controller.signal
+    });
+    if (!res.ok) {
+      throw new Error(`npm registry responded with ${res.status}`);
+    }
+    const data = await res.json();
+    if (typeof data.version !== "string" || !data.version) {
+      throw new Error("npm registry response did not include a version");
+    }
+    return data.version;
+  } catch (e) {
+    if (controller.signal.aborted) {
+      throw new RegistryTimeoutError(timeoutMs);
+    }
+    throw e;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+function registryErrorStatus(e) {
+  return e instanceof RegistryTimeoutError ? 504 : 500;
+}
 function isSameOrigin(req) {
   const origin = req.headers.get("origin");
   if (!origin)
@@ -50312,12 +50354,10 @@ function startDashboardServer(port = 0, host) {
         try {
           const pkg3 = await Promise.resolve().then(() => __toESM(require_package(), 1));
           const current = pkg3.version;
-          const res = await fetch("https://registry.npmjs.org/@hasna/conversations/latest");
-          const data = await res.json();
-          const latest = data.version;
+          const latest = await fetchLatestPackageVersion();
           return jsonResponse({ current, latest, updateAvailable: current !== latest });
         } catch (e) {
-          return jsonResponse({ error: e.message }, 500);
+          return jsonResponse({ error: e.message }, registryErrorStatus(e));
         }
       }
       if (path === "/api/update" && req.method === "POST") {
@@ -50327,9 +50367,7 @@ function startDashboardServer(port = 0, host) {
         try {
           const pkg3 = await Promise.resolve().then(() => __toESM(require_package(), 1));
           const current = pkg3.version;
-          const res = await fetch("https://registry.npmjs.org/@hasna/conversations/latest");
-          const data = await res.json();
-          const latest = data.version;
+          const latest = await fetchLatestPackageVersion();
           if (current === latest) {
             return jsonResponse({ current, latest, status: "up-to-date" });
           }
@@ -50346,7 +50384,7 @@ function startDashboardServer(port = 0, host) {
             return jsonResponse({ current, latest, status: "failed", exitCode, stderr }, 500);
           }
         } catch (e) {
-          return jsonResponse({ error: e.message }, 500);
+          return jsonResponse({ error: e.message }, registryErrorStatus(e));
         }
       }
       if (dashboardDist) {
@@ -50380,7 +50418,7 @@ function startDashboardServer(port = 0, host) {
   console.log(`Dashboard running at http://localhost:${server2.port}`);
   return server2;
 }
-var isDirectRun2;
+var NPM_LATEST_URL = "https://registry.npmjs.org/@hasna/conversations/latest", DEFAULT_REGISTRY_TIMEOUT_MS = 3000, MAX_REGISTRY_TIMEOUT_MS = 30000, RegistryTimeoutError, isDirectRun2;
 var init_serve = __esm(() => {
   init_messages();
   init_sessions();
@@ -50394,6 +50432,12 @@ var init_serve = __esm(() => {
   init_locks();
   init_http();
   init_mcp2();
+  RegistryTimeoutError = class RegistryTimeoutError extends Error {
+    constructor(timeoutMs) {
+      super(`npm registry request timed out after ${timeoutMs}ms`);
+      this.name = "RegistryTimeoutError";
+    }
+  };
   isDirectRun2 = import.meta.url === `file://${process.argv[1]}` || process.argv[1]?.endsWith("serve.ts") || process.argv[1]?.endsWith("serve.js");
   if (isDirectRun2) {
     const port = normalizePort(process.env.PORT, 0);

package/bin/mcp.js

@@ -41141,6 +41141,11 @@ function guessMimeType(name) {
   return mimeMap[ext || ""] || "application/octet-stream";
 }
 var MAX_MESSAGE_BYTES = 65536;
+function assertMessageSize(content) {
+  if (Buffer.byteLength(content, "utf8") > MAX_MESSAGE_BYTES) {
+    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
+  }
+}
 var RATE_LIMIT_MAX = 60;
 var RATE_LIMIT_WINDOW_MS = 60000;
 var _rateLimitCounters = new Map;
@@ -41160,9 +41165,7 @@ function checkRateLimit(agentId) {
   }
 }
 function sendMessage(opts) {
-  if (Buffer.byteLength(opts.content, "utf8") > MAX_MESSAGE_BYTES) {
-    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
-  }
+  assertMessageSize(opts.content);
   checkRateLimit(opts.from);
   const validatedAttachments = opts.attachments && opts.attachments.length > 0 ? opts.attachments.map((att) => validateAttachment(att.source_path, att.name)) : [];
   const db2 = getDb();
@@ -41428,6 +41431,7 @@ function deleteMessage(id, agent) {
   return result.changes > 0;
 }
 function editMessage(id, agent, newContent) {
+  assertMessageSize(newContent);
   const db2 = getDb();
   const stmt = db2.prepare(`UPDATE messages SET content = ?, edited_at = strftime('%Y-%m-%dT%H:%M:%f', 'now') WHERE id = ? AND from_agent = ? RETURNING *`);
   const row = stmt.get(newContent, id, agent);
@@ -46900,7 +46904,7 @@ function startMcpHttpServer(options) {
 // package.json
 var package_default = {
   name: "@hasna/conversations",
-  version: "0.2.55",
+  version: "0.2.57",
   description: "Real-time CLI messaging for AI agents",
   type: "module",
   bin: {

package/dist/index.js

@@ -12142,6 +12142,11 @@ function guessMimeType(name) {
   return mimeMap[ext || ""] || "application/octet-stream";
 }
 var MAX_MESSAGE_BYTES = 65536;
+function assertMessageSize(content) {
+  if (Buffer.byteLength(content, "utf8") > MAX_MESSAGE_BYTES) {
+    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
+  }
+}
 var RATE_LIMIT_MAX = 60;
 var RATE_LIMIT_WINDOW_MS = 60000;
 var _rateLimitCounters = new Map;
@@ -12161,9 +12166,7 @@ function checkRateLimit(agentId) {
   }
 }
 function sendMessage(opts) {
-  if (Buffer.byteLength(opts.content, "utf8") > MAX_MESSAGE_BYTES) {
-    throw new Error(`Message content exceeds maximum size of ${MAX_MESSAGE_BYTES} bytes (64 KB).`);
-  }
+  assertMessageSize(opts.content);
   checkRateLimit(opts.from);
   const validatedAttachments = opts.attachments && opts.attachments.length > 0 ? opts.attachments.map((att) => validateAttachment(att.source_path, att.name)) : [];
   const db2 = getDb();
@@ -12373,6 +12376,7 @@ function deleteMessage(id, agent) {
   return result.changes > 0;
 }
 function editMessage(id, agent, newContent) {
+  assertMessageSize(newContent);
   const db2 = getDb();
   const stmt = db2.prepare(`UPDATE messages SET content = ?, edited_at = strftime('%Y-%m-%dT%H:%M:%f', 'now') WHERE id = ? AND from_agent = ? RETURNING *`);
   const row = stmt.get(newContent, id, agent);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/conversations",
-  "version": "0.2.55",
+  "version": "0.2.57",
   "description": "Real-time CLI messaging for AI agents",
   "type": "module",
   "bin": {