@yawlabs/caddy-mcp 2.5.8 → 2.5.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/bin/caddy-mcp.mjs CHANGED
@@ -68,8 +68,8 @@
68
68
  * real oam 0.8.2 host, the MCP handshake never answered. Piping the streams
69
69
  * explicitly completes it, to both oam and Node. The sandbox spawn from a
70
70
  * supported oam host pipes too -- one rule for every oam host, verified with a
71
- * real handshake on 0.15.2. A Node host keeps `inherit`, which hands over the
72
- * same fds untouched.
71
+ * real handshake on 0.18.0 (first measured on 0.15.2). A Node host keeps
72
+ * `inherit`, which hands over the same fds untouched.
73
73
  *
74
74
  * The sandbox asks for a spawn; it does not guarantee one. Discovery can still
75
75
  * come up empty -- no usable oam binary, or a spawn that fails -- and under
@@ -112,7 +112,7 @@
112
112
  * "unauthenticated". The env list is derived from the shipped bundle.
113
113
  *
114
114
  * MINIMUM OAM VERSION
115
- * The latest oam release, 0.15.2 -- bump OAM_MIN when oam ships a newer one.
115
+ * The latest oam release, 0.18.0 -- bump OAM_MIN when oam ships a newer one.
116
116
  * Only the current oam is used and verified; an older one is passed over. The
117
117
  * floor is not cosmetic: before 0.9.0 `child_process.execFile` ran its
118
118
  * arguments through a SHELL, `exec` accepted `timeout` and ignored it,
@@ -142,7 +142,7 @@ import { delimiter, join } from "node:path";
142
142
  import { fileURLToPath } from "node:url";
143
143
 
144
144
  /** Oldest oam this server is served on. See MINIMUM OAM VERSION above. */
145
- const OAM_MIN = [0, 15, 2];
145
+ const OAM_MIN = [0, 18, 0];
146
146
 
147
147
  /**
148
148
  * Bound on each `oam --version` probe. A healthy oam answers in milliseconds;
@@ -357,7 +357,7 @@ function sandboxFlags() {
357
357
  // Omitting the flag DENIES the category (oam reads an absent --allow-net as
358
358
  // false, a bare one as "*"), and denial costs nothing here: oam has no unix
359
359
  // socket transport at all, so api.ts's node:http `socketPath` dial cannot work
360
- // under oam whether the grant is open or closed. Re-verified against oam 0.15.2 --
360
+ // under oam whether the grant is open or closed. Re-verified against oam 0.18.0 --
361
361
  // bare grant lets an unrelated host through, omitted grant denies it.
362
362
  //
363
363
  // This mirrors getMalformedUnixUrl's predicate in src/api.ts, NOT the stricter
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@yawlabs/caddy-mcp",
3
- "version": "2.5.8",
3
+ "version": "2.5.9",
4
4
  "mcpName": "io.github.YawLabs/caddy-mcp",
5
5
  "description": "Caddy MCP server for Claude Code, Cursor, and any MCP client: admin API, config, routes, reverse proxy, TLS, PKI, metrics",
6
6
  "license": "MIT",
@@ -38,15 +38,16 @@
38
38
  "start": "node dist/index.js"
39
39
  },
40
40
  "dependencies": {
41
- "@modelcontextprotocol/sdk": "^1.30.0",
41
+ "@modelcontextprotocol/sdk": "^1.32.1",
42
42
  "zod": "^4.3.6"
43
43
  },
44
44
  "overrides": {
45
45
  "hono": "^4.13.5",
46
46
  "@hono/node-server": "^1.19.15",
47
47
  "postcss": "^8.5.23",
48
- "ip-address": "^10.3.1",
49
- "fast-uri": "^3.1.6",
48
+ "ip-address": "^10.7.3",
49
+ "proxy-addr": "^2.0.8",
50
+ "fast-uri": "^3.1.8",
50
51
  "qs": "^6.16.0",
51
52
  "esbuild": "^0.28.1"
52
53
  },