claude-threads 1.16.2 → 1.16.3

package/dist/mcp/mcp-server.js

@@ -12838,6 +12838,44 @@ var require_coerce = __commonJS((exports, module) => {
   module.exports = coerce;
 });
 
+// node_modules/semver/functions/truncate.js
+var require_truncate = __commonJS((exports, module) => {
+  var parse10 = require_parse();
+  var constants = require_constants();
+  var SemVer = require_semver();
+  var truncate = (version3, truncation, options) => {
+    if (!constants.RELEASE_TYPES.includes(truncation)) {
+      return null;
+    }
+    const clonedVersion = cloneInputVersion(version3, options);
+    return clonedVersion && doTruncation(clonedVersion, truncation);
+  };
+  var cloneInputVersion = (version3, options) => {
+    const versionStringToParse = version3 instanceof SemVer ? version3.version : version3;
+    return parse10(versionStringToParse, options);
+  };
+  var doTruncation = (version3, truncation) => {
+    if (isPrerelease(truncation)) {
+      return version3.version;
+    }
+    version3.prerelease = [];
+    switch (truncation) {
+      case "major":
+        version3.minor = 0;
+        version3.patch = 0;
+        break;
+      case "minor":
+        version3.patch = 0;
+        break;
+    }
+    return version3.format();
+  };
+  var isPrerelease = (type) => {
+    return type.startsWith("pre");
+  };
+  module.exports = truncate;
+});
+
 // node_modules/semver/internal/lrucache.js
 var require_lrucache = __commonJS((exports, module) => {
   class LRUCache {
@@ -12942,6 +12980,7 @@ var require_range = __commonJS((exports, module) => {
       return this.range;
     }
     parseRange(range) {
+      range = range.replace(BUILDSTRIPRE, "");
       const memoOpts = (this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE);
       const memoKey = memoOpts + ":" + range;
       const cached3 = cache.get(memoKey);
@@ -13023,12 +13062,14 @@ var require_range = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var {
     safeRe: re,
+    src,
     t,
     comparatorTrimReplace,
     tildeTrimReplace,
     caretTrimReplace
   } = require_re();
   var { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants();
+  var BUILDSTRIPRE = new RegExp(src[t.BUILD], "g");
   var isNullSet = (c) => c.value === "<0.0.0-0";
   var isAny = (c) => c.value === "";
   var isSatisfiable = (comparators, options) => {
@@ -13745,7 +13786,7 @@ var require_subset = __commonJS((exports, module) => {
           if (higher === c && higher !== gt) {
             return false;
           }
-        } else if (gt.operator === ">=" && !satisfies(gt.semver, String(c), options)) {
+        } else if (gt.operator === ">=" && !c.test(gt.semver)) {
           return false;
         }
       }
@@ -13760,7 +13801,7 @@ var require_subset = __commonJS((exports, module) => {
           if (lower === c && lower !== lt) {
             return false;
           }
-        } else if (lt.operator === "<=" && !satisfies(lt.semver, String(c), options)) {
+        } else if (lt.operator === "<=" && !c.test(lt.semver)) {
           return false;
         }
       }
@@ -13825,6 +13866,7 @@ var require_semver2 = __commonJS((exports, module) => {
   var lte = require_lte();
   var cmp = require_cmp();
   var coerce = require_coerce();
+  var truncate = require_truncate();
   var Comparator = require_comparator();
   var Range = require_range();
   var satisfies = require_satisfies();
@@ -13863,6 +13905,7 @@ var require_semver2 = __commonJS((exports, module) => {
     lte,
     cmp,
     coerce,
+    truncate,
     Comparator,
     Range,
     satisfies,
@@ -13896,6 +13939,7 @@ var require_constants2 = __commonJS((exports, module) => {
     BINARY_TYPES.push("blob");
   module.exports = {
     BINARY_TYPES,
+    CLOSE_TIMEOUT: 30000,
     EMPTY_BUFFER: Buffer.alloc(0),
     GUID: "258EAFA5-E914-47DA-95CA-C5AB0DC85B11",
     hasBlob,
@@ -14033,11 +14077,11 @@ var require_permessage_deflate = __commonJS((exports, module) => {
   var zlibLimiter;
 
   class PerMessageDeflate {
-    constructor(options, isServer, maxPayload) {
-      this._maxPayload = maxPayload | 0;
+    constructor(options) {
       this._options = options || {};
       this._threshold = this._options.threshold !== undefined ? this._options.threshold : 1024;
-      this._isServer = !!isServer;
+      this._maxPayload = this._options.maxPayload | 0;
+      this._isServer = !!this._options.isServer;
       this._deflate = null;
       this._inflate = null;
       this.params = null;
@@ -14496,6 +14540,8 @@ var require_receiver = __commonJS((exports, module) => {
       this._binaryType = options.binaryType || BINARY_TYPES[0];
       this._extensions = options.extensions || {};
       this._isServer = !!options.isServer;
+      this._maxBufferedChunks = options.maxBufferedChunks | 0;
+      this._maxFragments = options.maxFragments | 0;
       this._maxPayload = options.maxPayload | 0;
       this._skipUTF8Validation = !!options.skipUTF8Validation;
       this[kWebSocket] = undefined;
@@ -14518,6 +14564,10 @@ var require_receiver = __commonJS((exports, module) => {
     _write(chunk, encoding, cb) {
       if (this._opcode === 8 && this._state == GET_INFO)
         return cb();
+      if (this._maxBufferedChunks > 0 && this._buffers.length >= this._maxBufferedChunks) {
+        cb(this.createError(RangeError, "Too many buffered chunks", false, 1008, "WS_ERR_TOO_MANY_BUFFERED_PARTS"));
+        return;
+      }
       this._bufferedBytes += chunk.length;
       this._buffers.push(chunk);
       this.startLoop(cb);
@@ -14721,6 +14771,11 @@ var require_receiver = __commonJS((exports, module) => {
         return;
       }
       if (data.length) {
+        if (this._maxFragments > 0 && this._fragments.length >= this._maxFragments) {
+          const error49 = this.createError(RangeError, "Too many message fragments", false, 1008, "WS_ERR_TOO_MANY_BUFFERED_PARTS");
+          cb(error49);
+          return;
+        }
         this._messageLength = this._totalPayloadLength;
         this._fragments.push(data);
       }
@@ -14738,6 +14793,11 @@ var require_receiver = __commonJS((exports, module) => {
             cb(error49);
             return;
           }
+          if (this._maxFragments > 0 && this._fragments.length >= this._maxFragments) {
+            const error49 = this.createError(RangeError, "Too many message fragments", false, 1008, "WS_ERR_TOO_MANY_BUFFERED_PARTS");
+            cb(error49);
+            return;
+          }
           this._fragments.push(buf);
         }
         this.dataMessage(cb);
@@ -14853,6 +14913,9 @@ var require_receiver = __commonJS((exports, module) => {
 var require_sender = __commonJS((exports, module) => {
   var { Duplex } = __require("stream");
   var { randomFillSync } = __require("crypto");
+  var {
+    types: { isUint8Array }
+  } = __require("util");
   var PerMessageDeflate = require_permessage_deflate();
   var { EMPTY_BUFFER, kWebSocket, NOOP } = require_constants2();
   var { isBlob, isValidStatusCode } = require_validation3();
@@ -14972,8 +15035,10 @@ var require_sender = __commonJS((exports, module) => {
         buf.writeUInt16BE(code, 0);
         if (typeof data === "string") {
           buf.write(data, 2);
-        } else {
+        } else if (isUint8Array(data)) {
           buf.set(data, 2);
+        } else {
+          throw new TypeError("Second argument must be a string or a Uint8Array");
         }
       }
       const options = {
@@ -15535,6 +15600,7 @@ var require_websocket = __commonJS((exports, module) => {
   var { isBlob } = require_validation3();
   var {
     BINARY_TYPES,
+    CLOSE_TIMEOUT,
     EMPTY_BUFFER,
     GUID,
     kForOnEventAttribute,
@@ -15548,7 +15614,6 @@ var require_websocket = __commonJS((exports, module) => {
   } = require_event_target();
   var { format, parse: parse10 } = require_extension();
   var { toBuffer } = require_buffer_util();
-  var closeTimeout = 30 * 1000;
   var kAborted = Symbol("kAborted");
   var protocolVersions = [8, 13];
   var readyStates = ["CONNECTING", "OPEN", "CLOSING", "CLOSED"];
@@ -15588,6 +15653,7 @@ var require_websocket = __commonJS((exports, module) => {
         initAsClient(this, address, protocols, options);
       } else {
         this._autoPong = options.autoPong;
+        this._closeTimeout = options.closeTimeout;
         this._isServer = true;
       }
     }
@@ -15639,6 +15705,8 @@ var require_websocket = __commonJS((exports, module) => {
         binaryType: this.binaryType,
         extensions: this._extensions,
         isServer: this._isServer,
+        maxBufferedChunks: options.maxBufferedChunks,
+        maxFragments: options.maxFragments,
         maxPayload: options.maxPayload,
         skipUTF8Validation: options.skipUTF8Validation
       });
@@ -15879,7 +15947,10 @@ var require_websocket = __commonJS((exports, module) => {
     const opts = {
       allowSynchronousEvents: true,
       autoPong: true,
+      closeTimeout: CLOSE_TIMEOUT,
       protocolVersion: protocolVersions[1],
+      maxBufferedChunks: 1024 * 1024,
+      maxFragments: 128 * 1024,
       maxPayload: 100 * 1024 * 1024,
       skipUTF8Validation: false,
       perMessageDeflate: true,
@@ -15896,6 +15967,7 @@ var require_websocket = __commonJS((exports, module) => {
       port: undefined
     };
     websocket._autoPong = opts.autoPong;
+    websocket._closeTimeout = opts.closeTimeout;
     if (!protocolVersions.includes(opts.protocolVersion)) {
       throw new RangeError(`Unsupported protocol version: ${opts.protocolVersion} ` + `(supported versions: ${protocolVersions.join(", ")})`);
     }
@@ -15905,7 +15977,7 @@ var require_websocket = __commonJS((exports, module) => {
     } else {
       try {
         parsedUrl = new URL2(address);
-      } catch (e) {
+      } catch {
         throw new SyntaxError(`Invalid URL: ${address}`);
       }
     }
@@ -15953,7 +16025,11 @@ var require_websocket = __commonJS((exports, module) => {
     opts.path = parsedUrl.pathname + parsedUrl.search;
     opts.timeout = opts.handshakeTimeout;
     if (opts.perMessageDeflate) {
-      perMessageDeflate = new PerMessageDeflate(opts.perMessageDeflate !== true ? opts.perMessageDeflate : {}, false, opts.maxPayload);
+      perMessageDeflate = new PerMessageDeflate({
+        ...opts.perMessageDeflate,
+        isServer: false,
+        maxPayload: opts.maxPayload
+      });
       opts.headers["Sec-WebSocket-Extensions"] = format({
         [PerMessageDeflate.extensionName]: perMessageDeflate.offer()
       });
@@ -16113,6 +16189,8 @@ var require_websocket = __commonJS((exports, module) => {
       websocket.setSocket(socket, head, {
         allowSynchronousEvents: opts.allowSynchronousEvents,
         generateMask: opts.generateMask,
+        maxBufferedChunks: opts.maxBufferedChunks,
+        maxFragments: opts.maxFragments,
         maxPayload: opts.maxPayload,
         skipUTF8Validation: opts.skipUTF8Validation
       });
@@ -16234,7 +16312,7 @@ var require_websocket = __commonJS((exports, module) => {
     }
   }
   function setCloseTimer(websocket) {
-    websocket._closeTimer = setTimeout(websocket._socket.destroy.bind(websocket._socket), closeTimeout);
+    websocket._closeTimer = setTimeout(websocket._socket.destroy.bind(websocket._socket), websocket._closeTimeout);
   }
   function socketOnClose() {
     const websocket = this[kWebSocket];
@@ -16242,8 +16320,8 @@ var require_websocket = __commonJS((exports, module) => {
     this.removeListener("data", socketOnData);
     this.removeListener("end", socketOnEnd);
     websocket._readyState = WebSocket.CLOSING;
-    let chunk;
-    if (!this._readableState.endEmitted && !websocket._closeFrameReceived && !websocket._receiver._writableState.errorEmitted && (chunk = websocket._socket.read()) !== null) {
+    if (!this._readableState.endEmitted && !websocket._closeFrameReceived && !websocket._receiver._writableState.errorEmitted && this._readableState.length !== 0) {
+      const chunk = this.read(this._readableState.length);
       websocket._receiver.write(chunk);
     }
     websocket._receiver.end();
@@ -16436,7 +16514,7 @@ var require_websocket_server = __commonJS((exports, module) => {
   var PerMessageDeflate = require_permessage_deflate();
   var subprotocol = require_subprotocol();
   var WebSocket = require_websocket();
-  var { GUID, kWebSocket } = require_constants2();
+  var { CLOSE_TIMEOUT, GUID, kWebSocket } = require_constants2();
   var keyRegex = /^[+/0-9A-Za-z]{22}==$/;
   var RUNNING = 0;
   var CLOSING = 1;
@@ -16448,11 +16526,14 @@ var require_websocket_server = __commonJS((exports, module) => {
       options = {
         allowSynchronousEvents: true,
         autoPong: true,
+        maxBufferedChunks: 1024 * 1024,
+        maxFragments: 128 * 1024,
         maxPayload: 100 * 1024 * 1024,
         skipUTF8Validation: false,
         perMessageDeflate: false,
         handleProtocols: null,
         clientTracking: true,
+        closeTimeout: CLOSE_TIMEOUT,
         verifyClient: null,
         noServer: false,
         backlog: null,
@@ -16598,7 +16679,11 @@ var require_websocket_server = __commonJS((exports, module) => {
       const secWebSocketExtensions = req.headers["sec-websocket-extensions"];
       const extensions = {};
       if (this.options.perMessageDeflate && secWebSocketExtensions !== undefined) {
-        const perMessageDeflate = new PerMessageDeflate(this.options.perMessageDeflate, true, this.options.maxPayload);
+        const perMessageDeflate = new PerMessageDeflate({
+          ...this.options.perMessageDeflate,
+          isServer: true,
+          maxPayload: this.options.maxPayload
+        });
         try {
           const offers = extension.parse(secWebSocketExtensions);
           if (offers[PerMessageDeflate.extensionName]) {
@@ -16669,6 +16754,8 @@ var require_websocket_server = __commonJS((exports, module) => {
       socket.removeListener("error", socketOnError);
       ws.setSocket(socket, head, {
         allowSynchronousEvents: this.options.allowSynchronousEvents,
+        maxBufferedChunks: this.options.maxBufferedChunks,
+        maxFragments: this.options.maxFragments,
         maxPayload: this.options.maxPayload,
         skipUTF8Validation: this.options.skipUTF8Validation
       });
@@ -16729,13 +16816,23 @@ var require_websocket_server = __commonJS((exports, module) => {
 
 // node_modules/ws/index.js
 var require_ws = __commonJS((exports, module) => {
+  var createWebSocketStream = require_stream();
+  var extension = require_extension();
+  var PerMessageDeflate = require_permessage_deflate();
+  var Receiver = require_receiver();
+  var Sender = require_sender();
+  var subprotocol = require_subprotocol();
   var WebSocket = require_websocket();
-  WebSocket.createWebSocketStream = require_stream();
-  WebSocket.Server = require_websocket_server();
-  WebSocket.Receiver = require_receiver();
-  WebSocket.Sender = require_sender();
+  var WebSocketServer = require_websocket_server();
+  WebSocket.createWebSocketStream = createWebSocketStream;
+  WebSocket.extension = extension;
+  WebSocket.PerMessageDeflate = PerMessageDeflate;
+  WebSocket.Receiver = Receiver;
+  WebSocket.Sender = Sender;
+  WebSocket.Server = WebSocketServer;
+  WebSocket.subprotocol = subprotocol;
   WebSocket.WebSocket = WebSocket;
-  WebSocket.WebSocketServer = WebSocket.Server;
+  WebSocket.WebSocketServer = WebSocketServer;
   module.exports = WebSocket;
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-threads",
-  "version": "1.16.2",
+  "version": "1.16.3",
   "description": "Share Claude Code sessions live in a Mattermost channel with interactive features",
   "main": "dist/index.js",
   "type": "module",
@@ -63,7 +63,7 @@
     "package.json"
   ],
   "dependencies": {
-    "@hono/node-server": "^2.0.0",
+    "@hono/node-server": "2.0.4",
     "@inkjs/ui": "^2.0.0",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "@redactpii/node": "^1.0.16",
@@ -71,15 +71,15 @@
     "commander": "^14.0.2",
     "diff": "^8.0.3",
     "express-rate-limit": "^8.3.0",
-    "hono": "^4.12.18",
+    "hono": "4.12.23",
     "ink": "^6.6.0",
     "ink-scroll-view": "^0.3.5",
     "js-yaml": "^4.1.1",
     "prompts": "^2.4.2",
     "react": "^19.2.3",
-    "semver": "^7.7.3",
+    "semver": "7.8.1",
     "update-notifier": "^7.3.1",
-    "ws": "^8.18.0",
+    "ws": "8.21.0",
     "zod": "^4.3.6"
   },
   "devDependencies": {