@mauribadnights/clooks 0.6.1 → 0.6.2

package/dist/server.js

@@ -91,7 +91,12 @@ function readBody(req) {
 }
 function sendJson(res, status, data) {
     const body = JSON.stringify(data);
-    res.socket?.on('error', () => { }); // suppress EPIPE if client disconnected early
+    // Guard against EPIPE: add listener only once per socket (keep-alive sockets are reused
+    // across requests — adding a listener per-request accumulates them and triggers
+    // MaxListenersExceededWarning after ~10 requests on the same connection).
+    if (res.socket && res.socket.listenerCount('error') === 0) {
+        res.socket.on('error', () => { }); // suppress EPIPE if client disconnected
+    }
     try {
         res.writeHead(status, {
             'Content-Type': 'application/json',
@@ -159,14 +164,7 @@ function createServer(manifest, metrics) {
             const source = req.socket.remoteAddress ?? 'unknown';
             // Rate limiting: check if this source has too many auth failures
             if (!rateLimiter.check(source)) {
-                const retryAfter = rateLimiter.retryAfter(source);
-                const body = JSON.stringify({ error: 'Too many auth failures' });
-                res.writeHead(429, {
-                    'Content-Type': 'application/json',
-                    'Content-Length': Buffer.byteLength(body),
-                    'Retry-After': String(retryAfter),
-                });
-                res.end(body);
+                sendJson(res, 429, { error: 'Too many auth failures' });
                 return;
             }
             const authHeader = req.headers['authorization'];
@@ -317,6 +315,13 @@ function startDaemon(manifest, metrics, options) {
     return new Promise((resolve, reject) => {
         const ctx = createServer(manifest, metrics);
         const port = manifest.settings?.port ?? constants_js_1.DEFAULT_PORT;
+        // Catch EPIPE at connection birth — handles the window between request arrival
+        // and the first sendJson call (e.g., during slow async handler execution).
+        // Without this, an EPIPE that arrives before sendJson's per-response listener
+        // is attached becomes an unhandled error event and crashes the process.
+        ctx.server.on('connection', (socket) => {
+            socket.on('error', () => { }); // no-op: client disconnected mid-flight
+        });
         ctx.server.on('error', async (err) => {
             if (err.code === 'EADDRINUSE') {
                 log(`Port ${port} already in use — attempting orphan recovery`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mauribadnights/clooks",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "description": "Persistent hook runtime for Claude Code — eliminates process spawning overhead and gives you observability",
   "bin": {
     "clooks": "./dist/cli.js"