claude-threads 1.32.0 → 1.33.0

package/CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.33.0] - 2026-09-02
+
+### Security
+- **fast-uri floored at 4.1.4** (transitive via `ajv`), clearing four fresh high-severity advisories (host confusion and SSRF classes, GHSA-5jgf-p345-68v8 and siblings). Override floor raised from `>=4.1.2`; no direct dependency changes.
+
+### Added
+- **Slack: posts made through the app's own user token count as the person's message** (#527, thanks @kaza). Tooling that posts into the channel via the app's user token (same `app_id` + team, acting user set) previously looked bot-authored and was ignored; such posts now command the bot as the acting user. Authorship is decided only from server-authoritative envelope identity (`app_id` learned from the `hello` frame and per-envelope `api_app_id`) — content-based spoofing cannot trigger it, and events that don't match fail closed to today's behavior. Closes #526.
+
+## [1.32.1] - 2026-09-02
+
+### Changed
+- **Dependency updates.** Production: hono 4.13.5, zod 4.5.4, js-yaml 4.3.2, express-rate-limit 8.7.0 (#522); dev-dependency group refreshed (#521). Validated with the full unit and Slack integration suites.
+
 ## [1.32.0] - 2026-09-01
 
 ### Added

package/dist/index.js

@@ -71932,6 +71932,8 @@ class SlackClient extends BasePlatformClient {
   userCache = new Map;
   usernameToIdCache = new Map;
   botUserId = null;
+  appId = null;
+  teamId = null;
   botUser = null;
   teamUrl = null;
   lastProcessedTs = null;
@@ -71997,7 +71999,9 @@ class SlackClient extends BasePlatformClient {
       return;
     this.channelClients.delete(channelId);
   }
-  _injectSlackEvent(event) {
+  _injectSlackEvent(event, appId) {
+    if (appId)
+      this.appId = appId;
     this.handleSlackEvent(event);
   }
   disconnect() {
@@ -72218,21 +72222,37 @@ class SlackClient extends BasePlatformClient {
       }
       return;
     }
+    if (envelope.type === "hello" && envelope.connection_info?.app_id) {
+      this.appId = envelope.connection_info.app_id;
+    }
     if (envelope.type === "events_api" && envelope.payload?.event) {
+      if (envelope.payload.api_app_id)
+        this.appId = envelope.payload.api_app_id;
       this.handleSlackEvent(envelope.payload.event);
     }
   }
+  isBotAuthored(message) {
+    if (message.user === this.botUserId)
+      return true;
+    if (!message.bot_id)
+      return false;
+    const isOurUserTokenPost = Boolean(this.appId && message.app_id === this.appId && this.teamId && message.team === this.teamId && message.user);
+    if (isOurUserTokenPost) {
+      wsLogger.debug(`Accepting post by ${message.user} made through this app's user token`);
+    }
+    return !isOurUserTokenPost;
+  }
   handleSlackEvent(event) {
     const eventChannel = event.channel || event.item?.channel;
     if (eventChannel && eventChannel !== this.channelId) {
       const secondary = this.channelClients.get(eventChannel);
       if (secondary) {
-        secondary._injectSlackEvent(event);
+        secondary._injectSlackEvent(event, this.appId);
         return;
       }
     }
     if (event.type === "message" && (!event.subtype || event.subtype === "file_share")) {
-      if (event.user === this.botUserId || event.bot_id) {
+      if (this.isBotAuthored(event)) {
         return;
       }
       if (event.channel !== this.channelId) {
@@ -72332,7 +72352,7 @@ class SlackClient extends BasePlatformClient {
       log40.info(`Recovered ${messages.length} missed message(s)`);
       const sortedMessages = messages.sort((a, b) => parseFloat(a.ts) - parseFloat(b.ts));
       for (const message of sortedMessages) {
-        if (message.user === this.botUserId || message.bot_id) {
+        if (this.isBotAuthored(message)) {
           continue;
         }
         this.lastProcessedTs = message.ts;
@@ -72350,6 +72370,7 @@ class SlackClient extends BasePlatformClient {
   async fetchBotUser() {
     const response = await this.api("POST", "auth.test");
     this.botUserId = response.user_id;
+    this.teamId = response.team_id ?? null;
     this.teamUrl = response.url.replace(/\/$/, "");
     const userResponse = await this.api("GET", `users.info?user=${response.user_id}`);
     this.botUser = userResponse.user;
@@ -72559,7 +72580,7 @@ class SlackClient extends BasePlatformClient {
         const cursorParam = cursor ? `&cursor=${encodeURIComponent(cursor)}` : "";
         const response = await this.api("GET", `conversations.replies?channel=${this.channelId}&ts=${threadId}&limit=1000${cursorParam}`);
         for (const msg of response.messages || []) {
-          if (options?.excludeBotMessages && (msg.user === this.botUserId || msg.bot_id))
+          if (options?.excludeBotMessages && this.isBotAuthored(msg))
             continue;
           filtered.push(msg);
         }

package/dist/mcp/mcp-server.js

@@ -3035,10 +3035,12 @@ var require_data = __commonJS((exports, module) => {
 var require_utils = __commonJS((exports, module) => {
   var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
   var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
+  var isPort = RegExp.prototype.test.bind(/^\d*$/u);
   var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
   var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
-  var isPathCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/]$/iu);
-  var isQueryFragmentCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/?]$/iu);
+  var isPathCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/]$/u);
+  var isQueryFragmentCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/?]$/u);
+  var isUserinfoCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:]$/u);
   function stringArrayToHexStripped(input) {
     let acc = "";
     let code = 0;
@@ -3063,91 +3065,127 @@ var require_utils = __commonJS((exports, module) => {
     }
     return acc;
   }
+  var isHextet = RegExp.prototype.test.bind(/^[\dA-Fa-f]{1,4}$/);
+  var isIPvFuture = RegExp.prototype.test.bind(/^[vV][\dA-Fa-f]+\.[A-Za-z\d\-._~!$&'()*+,;=:]+$/);
+  var isZoneCharacter = RegExp.prototype.test.bind(/^[A-Za-z\d\-._~]$/);
   var nonSimpleDomain = RegExp.prototype.test.bind(/[^!"$&'()*+,\-.;=_`a-z{}~]/u);
-  function consumeIsZone(buffer) {
-    buffer.length = 0;
-    return true;
+  var nonSimpleDomainChars = RegExp.prototype.test.bind(/[^\d!"$&'()*+,\-.;=_`a-z{}~]/u);
+  var numericLastLabel = RegExp.prototype.test.bind(/(?:^|\.)\d+$/u);
+  function nonSimpleMailtoDomain(domain) {
+    return nonSimpleDomainChars(domain) || numericLastLabel(domain);
   }
-  function consumeHextets(buffer, address, output) {
-    if (buffer.length) {
-      const hex = stringArrayToHexStripped(buffer);
-      if (hex !== "") {
-        address.push(hex);
-      } else {
-        output.error = true;
-        return false;
+  function isZoneIdentifier(zone) {
+    if (zone.length === 0)
+      return false;
+    for (let i = 0;i < zone.length; i++) {
+      if (isZoneCharacter(zone[i]))
+        continue;
+      if (zone[i] === "%" && i + 2 < zone.length && isHexPair(zone.slice(i + 1, i + 3))) {
+        i += 2;
+        continue;
       }
-      buffer.length = 0;
+      return false;
     }
     return true;
   }
-  function getIPV6(input) {
-    let tokenCount = 0;
-    const output = { error: false, address: "", zone: "" };
-    const address = [];
-    const buffer = [];
-    let endipv6Encountered = false;
-    let endIpv6 = false;
-    let consume = consumeHextets;
-    for (let i = 0;i < input.length; i++) {
-      const cursor = input[i];
-      if (cursor === "[" || cursor === "]") {
-        continue;
-      }
-      if (cursor === ":") {
-        if (endipv6Encountered === true) {
-          endIpv6 = true;
-        }
-        if (!consume(buffer, address, output)) {
-          break;
+  function compressIPv6ZeroRun(hextets) {
+    let bestStart = -1;
+    let bestLength = 0;
+    let runStart = -1;
+    let runLength = 0;
+    for (let i = 0;i < hextets.length; i++) {
+      if (hextets[i] === "0") {
+        if (runStart === -1)
+          runStart = i;
+        runLength++;
+        if (runLength > bestLength) {
+          bestLength = runLength;
+          bestStart = runStart;
         }
-        if (++tokenCount > 7) {
-          output.error = true;
-          break;
-        }
-        if (i > 0 && input[i - 1] === ":") {
-          endipv6Encountered = true;
-        }
-        address.push(":");
-        continue;
-      } else if (cursor === "%") {
-        if (!consume(buffer, address, output)) {
-          break;
-        }
-        consume = consumeIsZone;
       } else {
-        buffer.push(cursor);
-        continue;
+        runStart = -1;
+        runLength = 0;
       }
     }
-    if (buffer.length) {
-      if (consume === consumeIsZone) {
-        output.zone = buffer.join("");
-      } else if (endIpv6) {
-        address.push(buffer.join(""));
-      } else {
-        address.push(stringArrayToHexStripped(buffer));
+    if (bestLength < 2)
+      return hextets.join(":");
+    const head = hextets.slice(0, bestStart).join(":");
+    const tail = hextets.slice(bestStart + bestLength).join(":");
+    return head + "::" + tail;
+  }
+  function normalizeIPv6Address(input) {
+    const compression = input.indexOf("::");
+    if (compression !== -1 && input.indexOf("::", compression + 1) !== -1)
+      return;
+    const left = compression === -1 ? input.split(":") : input.slice(0, compression).split(":");
+    const right = compression === -1 ? [] : input.slice(compression + 2).split(":");
+    if (compression !== -1) {
+      if (left.length === 1 && left[0] === "")
+        left.length = 0;
+      if (right.length === 1 && right[0] === "")
+        right.length = 0;
+    }
+    const parts = left.concat(right);
+    let hextetCount = 0;
+    for (let i = 0;i < parts.length; i++) {
+      const part = parts[i];
+      if (part === "")
+        return;
+      if (part.indexOf(".") !== -1) {
+        if (i !== parts.length - 1 || compression !== -1 && right.length === 0 || !isIPv4(part))
+          return;
+        hextetCount += 2;
+        continue;
       }
+      if (!isHextet(part))
+        return;
+      parts[i] = parseInt(part, 16).toString(16);
+      hextetCount++;
     }
-    output.address = address.join("");
-    return output;
+    if (compression === -1) {
+      if (hextetCount !== 8)
+        return;
+      return compressIPv6ZeroRun(parts);
+    }
+    if (hextetCount >= 8)
+      return;
+    const expanded = parts.slice(0, left.length);
+    for (let i = hextetCount;i < 8; i++)
+      expanded.push("0");
+    for (let i = left.length;i < parts.length; i++)
+      expanded.push(parts[i]);
+    return compressIPv6ZeroRun(expanded);
   }
   function normalizeIPv6(host) {
-    if (findToken(host, ":") < 2) {
-      return { host, isIPV6: false };
-    }
-    const ipv62 = getIPV6(host);
-    if (!ipv62.error) {
-      let newHost = ipv62.address;
-      let escapedHost = ipv62.address;
-      if (ipv62.zone) {
-        newHost += "%" + ipv62.zone;
-        escapedHost += "%25" + ipv62.zone;
-      }
-      return { host: newHost, isIPV6: true, escapedHost };
-    } else {
-      return { host, isIPV6: false };
-    }
+    const bracketed = host[0] === "[" && host[host.length - 1] === "]";
+    const hasBracket = host[0] === "[" || host[host.length - 1] === "]";
+    if (hasBracket && !bracketed)
+      return { host, isIPV6: false, error: true };
+    let input = bracketed ? host.slice(1, -1) : host;
+    if (bracketed && isIPvFuture(input)) {
+      input = input.toLowerCase();
+      return { host: `[${input}]`, escapedHost: input, isIPV6: false, isIPVFuture: true };
+    }
+    if (findToken(input, ":") < 2) {
+      return { host, isIPV6: false, error: bracketed };
+    }
+    let zoneIdentifier = "";
+    const zoneSeparator = input.indexOf("%");
+    if (zoneSeparator !== -1) {
+      const separatorLength = input.slice(zoneSeparator, zoneSeparator + 3).toLowerCase() === "%25" ? 3 : 1;
+      zoneIdentifier = input.slice(zoneSeparator + separatorLength);
+      if (!isZoneIdentifier(zoneIdentifier))
+        return { host, isIPV6: false, error: true };
+      input = input.slice(0, zoneSeparator);
+    }
+    const address = normalizeIPv6Address(input);
+    if (address === undefined)
+      return { host, isIPV6: false, error: true };
+    return {
+      host: address + (zoneIdentifier ? "%" + zoneIdentifier : ""),
+      escapedHost: address + (zoneIdentifier ? "%25" + zoneIdentifier : ""),
+      isIPV6: true
+    };
   }
   function findToken(str, token) {
     let ind = 0;
@@ -3324,6 +3362,45 @@ var require_utils = __commonJS((exports, module) => {
     }
     return output;
   }
+  function serializePathEncoding(input, pathNoScheme = false) {
+    let output = "";
+    let firstSegment = pathNoScheme && input[0] !== "/";
+    for (let i = 0;i < input.length; i++) {
+      const ch = input[i];
+      if (ch === "%" && i + 2 < input.length) {
+        const hex = input.slice(i + 1, i + 3);
+        if (isHexPair(hex)) {
+          output += "%" + hex.toUpperCase();
+          i += 2;
+          continue;
+        }
+      }
+      if (ch === "/") {
+        firstSegment = false;
+      }
+      if (isPathCharacter(ch) && (ch !== ":" || !firstSegment)) {
+        output += ch;
+      } else {
+        const code = input.charCodeAt(i);
+        if (code < 128) {
+          output += BYTE_HEX[code];
+        } else if (code < 55296 || code > 57343) {
+          output += percentEncodeNonAscii(code);
+        } else if (code <= 56319 && i + 1 < input.length) {
+          const low = input.charCodeAt(i + 1);
+          if (low >= 56320 && low <= 57343) {
+            output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+            i++;
+          } else {
+            output += percentEncodeNonAscii(65533);
+          }
+        } else {
+          output += percentEncodeNonAscii(65533);
+        }
+      }
+    }
+    return output;
+  }
   function normalizeQueryFragmentEncoding(input) {
     let output = "";
     for (let i = 0;i < input.length; i++) {
@@ -3365,6 +3442,50 @@ var require_utils = __commonJS((exports, module) => {
     }
     return output;
   }
+  function encodeComponent(input, isAllowed) {
+    let output = "";
+    for (let i = 0;i < input.length; i++) {
+      const ch = input[i];
+      if (ch === "%" && i + 2 < input.length) {
+        const hex = input.slice(i + 1, i + 3);
+        if (isHexPair(hex)) {
+          output += "%" + hex.toUpperCase();
+          i += 2;
+          continue;
+        }
+      }
+      if (isAllowed(ch)) {
+        output += ch;
+      } else {
+        const code = input.charCodeAt(i);
+        if (code < 128) {
+          output += BYTE_HEX[code];
+        } else if (code < 55296 || code > 57343) {
+          output += percentEncodeNonAscii(code);
+        } else if (code <= 56319 && i + 1 < input.length) {
+          const low = input.charCodeAt(i + 1);
+          if (low >= 56320 && low <= 57343) {
+            output += percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+            i++;
+          } else {
+            output += percentEncodeNonAscii(65533);
+          }
+        } else {
+          output += percentEncodeNonAscii(65533);
+        }
+      }
+    }
+    return output;
+  }
+  function encodeUserinfo(input) {
+    return encodeComponent(input, isUserinfoCharacter);
+  }
+  function encodeQuery(input) {
+    return encodeComponent(input, isQueryFragmentCharacter);
+  }
+  function encodeFragment(input) {
+    return encodeComponent(input, isQueryFragmentCharacter);
+  }
   function escapePreservingEscapes(input) {
     let output = "";
     for (let i = 0;i < input.length; i++) {
@@ -3399,14 +3520,18 @@ var require_utils = __commonJS((exports, module) => {
   function recomposeAuthority(component) {
     const uriTokens = [];
     if (component.userinfo !== undefined) {
-      uriTokens.push(component.userinfo);
+      uriTokens.push(encodeUserinfo(component.userinfo));
       uriTokens.push("@");
     }
     if (component.host !== undefined) {
-      let host = unescape(component.host);
+      let host = component.host;
       if (!isIPv4(host)) {
-        const ipV6res = normalizeIPv6(host);
-        if (ipV6res.isIPV6 === true) {
+        let ipV6res = normalizeIPv6(host);
+        if (ipV6res.isIPV6 !== true && ipV6res.isIPVFuture !== true) {
+          host = normalizePercentEncoding(host, true);
+          ipV6res = normalizeIPv6(host);
+        }
+        if (ipV6res.isIPV6 === true || ipV6res.isIPVFuture === true) {
           host = `[${ipV6res.escapedHost}]`;
         } else {
           host = reescapeHostDelimiters(host, false);
@@ -3415,18 +3540,29 @@ var require_utils = __commonJS((exports, module) => {
       uriTokens.push(host);
     }
     if (typeof component.port === "number" || typeof component.port === "string") {
+      const port = String(component.port);
+      if (!isPort(port)) {
+        throw new TypeError("URI port is malformed.");
+      }
       uriTokens.push(":");
-      uriTokens.push(String(component.port));
+      uriTokens.push(port);
     }
     return uriTokens.length ? uriTokens.join("") : undefined;
   }
   module.exports = {
+    BYTE_HEX,
+    percentEncodeNonAscii,
     nonSimpleDomain,
+    nonSimpleMailtoDomain,
     recomposeAuthority,
     reescapeHostDelimiters,
     normalizePercentEncoding,
     normalizePathEncoding,
+    serializePathEncoding,
     normalizeQueryFragmentEncoding,
+    encodeUserinfo,
+    encodeQuery,
+    encodeFragment,
     escapePreservingEscapes,
     removeDotSegments,
     isIPv4,
@@ -3438,15 +3574,16 @@ var require_utils = __commonJS((exports, module) => {
 
 // node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS((exports, module) => {
-  var { isUUID } = require_utils();
-  var URN_REG = /([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-.:;=@]|%[\da-f]{2})+)/iu;
+  var { isUUID, BYTE_HEX, percentEncodeNonAscii, nonSimpleMailtoDomain } = require_utils();
+  var URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
   var supportedSchemeNames = [
     "http",
     "https",
     "ws",
     "wss",
     "urn",
-    "urn:uuid"
+    "urn:uuid",
+    "mailto"
   ];
   function isValidSchemeName(name) {
     return supportedSchemeNames.indexOf(name) !== -1;
@@ -3494,9 +3631,10 @@ var require_schemes = __commonJS((exports, module) => {
       wsComponent.secure = undefined;
     }
     if (wsComponent.resourceName) {
-      const [path, query] = wsComponent.resourceName.split("?");
+      const queryIndex = wsComponent.resourceName.indexOf("?");
+      const path = queryIndex === -1 ? wsComponent.resourceName : wsComponent.resourceName.slice(0, queryIndex);
       wsComponent.path = path && path !== "/" ? path : undefined;
-      wsComponent.query = query;
+      wsComponent.query = queryIndex === -1 ? undefined : wsComponent.resourceName.slice(queryIndex + 1);
       wsComponent.resourceName = undefined;
     }
     wsComponent.fragment = undefined;
@@ -3508,7 +3646,7 @@ var require_schemes = __commonJS((exports, module) => {
       return urnComponent;
     }
     const matches = urnComponent.path.match(URN_REG);
-    if (matches) {
+    if (matches && matches[0] === urnComponent.path) {
       const scheme = options.scheme || urnComponent.scheme || "urn";
       urnComponent.nid = matches[1].toLowerCase();
       urnComponent.nss = matches[2];
@@ -3590,13 +3728,235 @@ var require_schemes = __commonJS((exports, module) => {
     serialize: urnuuidSerialize,
     skipNormalize: true
   };
+  var LOCAL_PART_ALLOWED = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~!$'()*+=";
+  var HFNAME_ALLOWED = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~!$'()*+,;:@";
+  var DTEXT_ALLOWED = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~!$'()*+;:";
+  function allowSet(chars, allowNonAscii = false) {
+    const table = new Uint8Array(128);
+    for (let i = 0;i < chars.length; i++) {
+      table[chars.charCodeAt(i)] = 1;
+    }
+    const escaped = chars.replace(/[\\\]^-]/gu, "\\$&");
+    const cls = allowNonAscii ? `[${escaped}]|[^\\0-\\x7F\\uD800-\\uDFFF]` : `[${escaped}]`;
+    return { all: new RegExp(`^(?:${cls})*$`, "u"), table, allowNonAscii };
+  }
+  var LOCAL_PART = allowSet(LOCAL_PART_ALLOWED);
+  var HFNAME = allowSet(HFNAME_ALLOWED);
+  var DTEXT = allowSet(DTEXT_ALLOWED);
+  var DTEXT_IRI = allowSet(DTEXT_ALLOWED, true);
+  var HEX_PAIR = /^[\da-f]{2}$/iu;
+  var MAILTO_DOMAIN_LITERAL = /^\[[\x21-\x5A\x5E-\x7E]*\]$/u;
+  var MAILTO_DOMAIN_ERROR = "URI mailto has an invalid recipient domain.";
+  var HAS_SURROGATE = /[\uD800-\uDFFF]/u;
+  function decodeHex(str) {
+    if (typeof str !== "string" || str.indexOf("%") === -1) {
+      return str;
+    }
+    try {
+      return decodeURIComponent(str);
+    } catch {
+      return str;
+    }
+  }
+  function replaceLoneSurrogates(input) {
+    let result = "";
+    for (let i = 0;i < input.length; i++) {
+      const code = input.charCodeAt(i);
+      if (code >= 55296 && code <= 56319 && i + 1 < input.length) {
+        const low = input.charCodeAt(i + 1);
+        if (low >= 56320 && low <= 57343) {
+          result += input[i] + input[i + 1];
+          i++;
+          continue;
+        }
+      }
+      result += code >= 55296 && code <= 57343 ? "�" : input[i];
+    }
+    return result;
+  }
+  function encodeWithAllow(input, set2) {
+    if (set2.all.test(input)) {
+      return input;
+    }
+    const table = set2.table;
+    let result = "";
+    for (let i = 0;i < input.length; i++) {
+      const code = input.charCodeAt(i);
+      if (code < 128) {
+        if (table[code] === 1) {
+          result += input[i];
+        } else if (code === 37 && i + 2 < input.length && HEX_PAIR.test(input.slice(i + 1, i + 3))) {
+          result += "%" + input.slice(i + 1, i + 3).toUpperCase();
+          i += 2;
+        } else {
+          result += BYTE_HEX[code];
+        }
+        continue;
+      }
+      if (code < 55296 || code > 57343) {
+        result += set2.allowNonAscii ? input[i] : percentEncodeNonAscii(code);
+        continue;
+      }
+      if (code <= 56319 && i + 1 < input.length) {
+        const low = input.charCodeAt(i + 1);
+        if (low >= 56320 && low <= 57343) {
+          result += set2.allowNonAscii ? input[i] + input[i + 1] : percentEncodeNonAscii(65536 + (code - 55296 << 10) + (low - 56320));
+          i++;
+          continue;
+        }
+      }
+      result += set2.allowNonAscii ? "�" : percentEncodeNonAscii(65533);
+    }
+    return result;
+  }
+  function mailtoNormalizeDomain(domain, options, component) {
+    const normalizedDomain = String(domain).toLowerCase();
+    if (MAILTO_DOMAIN_LITERAL.test(normalizedDomain)) {
+      return normalizedDomain;
+    }
+    if (normalizedDomain !== "" && !nonSimpleMailtoDomain(normalizedDomain)) {
+      return normalizedDomain;
+    }
+    try {
+      const parsedDomain = new URL("http://" + normalizedDomain);
+      if (parsedDomain.username || parsedDomain.password || parsedDomain.port || parsedDomain.pathname !== "/" || parsedDomain.search || parsedDomain.hash || !parsedDomain.hostname) {
+        throw new Error(MAILTO_DOMAIN_ERROR);
+      }
+      return options && options.unicodeSupport ? normalizedDomain : parsedDomain.hostname;
+    } catch {
+      if (component) {
+        component.error = component.error || MAILTO_DOMAIN_ERROR;
+      }
+      return normalizedDomain;
+    }
+  }
+  function mailtoEncodeDomain(domain, options) {
+    const set2 = options && options.unicodeSupport ? DTEXT_IRI : DTEXT;
+    if (domain.length > 1 && domain[0] === "[" && domain[domain.length - 1] === "]") {
+      return "[" + encodeWithAllow(domain.slice(1, -1), set2) + "]";
+    }
+    return encodeWithAllow(domain, set2);
+  }
+  function mailtoParse(component, options) {
+    const mailtoComponent = component;
+    let rawPath = mailtoComponent.path;
+    let rawQuery = mailtoComponent.query;
+    if (rawPath && HAS_SURROGATE.test(rawPath))
+      rawPath = replaceLoneSurrogates(rawPath);
+    if (rawQuery && HAS_SURROGATE.test(rawQuery))
+      rawQuery = replaceLoneSurrogates(rawQuery);
+    const to = rawPath ? rawPath.indexOf(",") === -1 ? [rawPath] : rawPath.split(",") : [];
+    mailtoComponent.path = undefined;
+    if (rawQuery) {
+      let headers = null;
+      let start = 0;
+      while (start <= rawQuery.length) {
+        let end = rawQuery.indexOf("&", start);
+        if (end === -1)
+          end = rawQuery.length;
+        const token = rawQuery.slice(start, end);
+        start = end + 1;
+        const eqIdx = token.indexOf("=");
+        if (eqIdx !== token.lastIndexOf("=")) {
+          mailtoComponent.error = mailtoComponent.error || "URI mailto has malformed header fields.";
+          continue;
+        }
+        const name = eqIdx === -1 ? token : token.slice(0, eqIdx);
+        const value = eqIdx === -1 ? "" : token.slice(eqIdx + 1);
+        if (name === "to") {
+          const addrs = value.split(",");
+          for (let j = 0;j < addrs.length; j++)
+            to.push(addrs[j]);
+          continue;
+        }
+        if (name === "subject") {
+          mailtoComponent.subject = decodeHex(value);
+          continue;
+        }
+        if (name === "body") {
+          mailtoComponent.body = decodeHex(value);
+          continue;
+        }
+        if (headers === null)
+          headers = Object.create(null);
+        headers[decodeHex(name)] = decodeHex(value);
+      }
+      if (headers !== null)
+        mailtoComponent.headers = headers;
+    }
+    mailtoComponent.query = undefined;
+    for (let i = 0;i < to.length; i++) {
+      const rawAddr = to[i];
+      const atIdx = rawAddr.lastIndexOf("@");
+      if (atIdx < 0) {
+        mailtoComponent.error = mailtoComponent.error || MAILTO_DOMAIN_ERROR;
+        to[i] = decodeHex(rawAddr);
+        continue;
+      }
+      const local = decodeHex(rawAddr.slice(0, atIdx));
+      const domain = mailtoNormalizeDomain(decodeHex(rawAddr.slice(atIdx + 1)), options, mailtoComponent);
+      to[i] = local + "@" + domain;
+    }
+    if (to.length)
+      mailtoComponent.to = to;
+    return mailtoComponent;
+  }
+  function mailtoSerialize(component, options) {
+    const mailtoComponent = component;
+    const to = Array.isArray(mailtoComponent.to) ? mailtoComponent.to.slice() : [];
+    if (to.length) {
+      for (let i = 0;i < to.length; i++) {
+        const addr = String(to[i]);
+        const atIdx = addr.lastIndexOf("@");
+        const rawLocal = atIdx >= 0 ? addr.slice(0, atIdx) : addr;
+        const rawDomain = atIdx >= 0 ? addr.slice(atIdx + 1) : "";
+        const local = encodeWithAllow(rawLocal, LOCAL_PART);
+        const decodedDomain = decodeHex(rawDomain);
+        const normalizedDomain = mailtoNormalizeDomain(decodedDomain, options);
+        to[i] = local + "@" + mailtoEncodeDomain(normalizedDomain, options);
+      }
+      mailtoComponent.path = to.join(",");
+      options.skipEscape = true;
+    } else {
+      mailtoComponent.path = undefined;
+    }
+    const headers = mailtoComponent.headers && typeof mailtoComponent.headers === "object" ? Object.assign(Object.create(null), mailtoComponent.headers) : Object.create(null);
+    if (mailtoComponent.subject)
+      headers.subject = mailtoComponent.subject;
+    if (mailtoComponent.body)
+      headers.body = mailtoComponent.body;
+    mailtoComponent.headers = headers;
+    let query = "";
+    let count = 0;
+    for (const name in headers) {
+      if (count++ !== 0)
+        query += "&";
+      query += encodeWithAllow(name, HFNAME) + "=" + encodeWithAllow(String(headers[name]), HFNAME);
+    }
+    if (count !== 0) {
+      mailtoComponent.query = query;
+    } else {
+      mailtoComponent.headers = undefined;
+    }
+    return mailtoComponent;
+  }
+  var mailto = {
+    scheme: "mailto",
+    parse: mailtoParse,
+    serialize: mailtoSerialize,
+    domainHost: false,
+    unicodeSupport: true,
+    skipNormalize: true,
+    absolutePath: true
+  };
   var SCHEMES = {
     http,
     https,
     ws,
     wss,
     urn,
-    "urn:uuid": urnuuid
+    "urn:uuid": urnuuid,
+    mailto
   };
   Object.setPrototypeOf(SCHEMES, null);
   function getSchemeHandler(scheme) {
@@ -3612,8 +3972,17 @@ var require_schemes = __commonJS((exports, module) => {
 
 // node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS((exports, module) => {
-  var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, normalizeQueryFragmentEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+  var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
   var { SCHEMES, getSchemeHandler } = require_schemes();
+  var VALID_SCHEME = /^[A-Za-z][A-Za-z0-9+.-]*$/u;
+  var MALFORMED_SCHEME_ERROR = "URI scheme is malformed.";
+  function decodeValidScheme(scheme) {
+    const decodedScheme = unescape(String(scheme));
+    if (!VALID_SCHEME.test(decodedScheme)) {
+      throw new TypeError(MALFORMED_SCHEME_ERROR);
+    }
+    return decodedScheme;
+  }
   function normalize(uri, options) {
     if (typeof uri === "string") {
       uri = normalizeString(uri, options);
@@ -3624,12 +3993,34 @@ var require_fast_uri = __commonJS((exports, module) => {
   }
   function resolve(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-    const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
-    const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
-    if (baseMalformed || relativeMalformed) {
+    const {
+      parsed: baseParsed,
+      malformedAuthorityOrPort: baseMalformed,
+      malformedPercentEncoding: baseMalformedPercentEncoding,
+      malformedSchemeSpecific: baseMalformedSchemeSpecific,
+      malformedHost: baseMalformedHost,
+      malformedScheme: baseMalformedScheme
+    } = parseWithStatus(baseURI, schemelessOptions);
+    const {
+      parsed: relativeParsed,
+      malformedAuthorityOrPort: relativeMalformed,
+      malformedPercentEncoding: relativeMalformedPercentEncoding,
+      malformedSchemeSpecific: relativeMalformedSchemeSpecific,
+      malformedHost: relativeMalformedHost,
+      malformedScheme: relativeMalformedScheme
+    } = parseWithStatus(relativeURI, schemelessOptions);
+    if (baseMalformed || relativeMalformed || baseMalformedPercentEncoding || relativeMalformedPercentEncoding || baseMalformedSchemeSpecific || relativeMalformedSchemeSpecific || baseMalformedHost || relativeMalformedHost || baseMalformedScheme || relativeMalformedScheme) {
       throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
     }
     const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
+    const resolvedSchemeHandler = getSchemeHandler(options && options.scheme || resolved.scheme);
+    const resolvedHost = resolved.host;
+    const resolvedHostIsIP = resolvedHost !== undefined && resolvedHost !== "" && (isIPv4(resolvedHost) || normalizeIPv6(resolvedHost).isIPV6);
+    canonicalizeHost(resolved, options || {}, resolvedSchemeHandler, resolvedHostIsIP);
+    const encodedASCIIHost = resolvedHost && resolvedHost.indexOf("%") !== -1 && !/\P{ASCII}/u.test(resolvedHost);
+    if (resolved.error && !encodedASCIIHost) {
+      throw new Error(resolved.error);
+    }
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
@@ -3689,7 +4080,7 @@ var require_fast_uri = __commonJS((exports, module) => {
   function equal(uriA, uriB, options) {
     const normalizedA = normalizeComparableURI(uriA, options);
     const normalizedB = normalizeComparableURI(uriB, options);
-    return normalizedA !== undefined && normalizedB !== undefined && normalizedA.toLowerCase() === normalizedB.toLowerCase();
+    return normalizedA !== undefined && normalizedB !== undefined && normalizedA === normalizedB;
   }
   function serialize(cmpts, opts) {
     const component = {
@@ -3706,24 +4097,31 @@ var require_fast_uri = __commonJS((exports, module) => {
       reference: cmpts.reference,
       resourceName: cmpts.resourceName,
       secure: cmpts.secure,
+      to: cmpts.to,
+      subject: cmpts.subject,
+      body: cmpts.body,
+      headers: cmpts.headers,
       error: ""
     };
     const options = Object.assign({}, opts);
     const uriTokens = [];
+    if (component.scheme) {
+      component.scheme = decodeValidScheme(component.scheme);
+    }
     const schemeHandler = getSchemeHandler(options.scheme || component.scheme);
     if (schemeHandler && schemeHandler.serialize)
       schemeHandler.serialize(component, options);
+    const hasAuthority = component.userinfo !== undefined || component.host !== undefined || component.port !== undefined;
+    const pathNoScheme = !options.skipEscape && component.scheme === undefined && !hasAuthority;
     if (component.path !== undefined) {
       if (!options.skipEscape) {
-        component.path = escapePreservingEscapes(component.path);
-        if (component.scheme !== undefined) {
-          component.path = component.path.split("%3A").join(":");
-        }
+        component.path = serializePathEncoding(component.path, pathNoScheme);
       } else {
         component.path = normalizePercentEncoding(component.path);
       }
     }
     if (options.reference !== "suffix" && component.scheme) {
+      component.scheme = decodeValidScheme(component.scheme);
       uriTokens.push(component.scheme, ":");
     }
     const authority = recomposeAuthority(component);
@@ -3741,16 +4139,19 @@ var require_fast_uri = __commonJS((exports, module) => {
       if (!options.absolutePath && (!schemeHandler || !schemeHandler.absolutePath)) {
         s = removeDotSegments(s);
       }
+      if (pathNoScheme) {
+        s = serializePathEncoding(s, true);
+      }
       if (authority === undefined && s[0] === "/" && s[1] === "/") {
         s = "/%2F" + s.slice(2);
       }
       uriTokens.push(s);
     }
     if (component.query !== undefined) {
-      uriTokens.push("?", component.query);
+      uriTokens.push("?", encodeQuery(component.query));
     }
     if (component.fragment !== undefined) {
-      uriTokens.push("#", component.fragment);
+      uriTokens.push("#", encodeFragment(component.fragment));
     }
     return uriTokens.join("");
   }
@@ -3766,6 +4167,37 @@ var require_fast_uri = __commonJS((exports, module) => {
     }
     return;
   }
+  function hasMalformedPercentEncoding(component) {
+    if (component === undefined)
+      return false;
+    let percent = component.indexOf("%");
+    while (percent !== -1) {
+      if (percent + 2 >= component.length || !/^[\da-f]{2}$/iu.test(component.slice(percent + 1, percent + 3))) {
+        return true;
+      }
+      percent = component.indexOf("%", percent + 3);
+    }
+    return false;
+  }
+  function isIPLiteral(host) {
+    return host[0] === "[" && host[host.length - 1] === "]";
+  }
+  function hasMalformedComponentPercentEncoding(matches) {
+    const host = matches[4];
+    return hasMalformedPercentEncoding(matches[3]) || host !== undefined && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
+  }
+  function canonicalizeHost(parsed, options, schemeHandler, isIP) {
+    const bracketedIPLiteral = parsed.host && parsed.host[0] === "[" && parsed.host[parsed.host.length - 1] === "]";
+    if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && !bracketedIPLiteral && nonSimpleDomain(parsed.host)) {
+      try {
+        parsed.host = new URL("http://" + parsed.host).hostname;
+      } catch (e) {
+        parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
+        return true;
+      }
+    }
+    return false;
+  }
   function parseWithStatus(uri, opts) {
     const options = Object.assign({}, opts);
     const parsed = {
@@ -3778,6 +4210,11 @@ var require_fast_uri = __commonJS((exports, module) => {
       fragment: undefined
     };
     let malformedAuthorityOrPort = false;
+    let malformedPercentEncoding = false;
+    let malformedSchemeSpecific = false;
+    let malformedHost = false;
+    let malformedIPLiteral = false;
+    let malformedScheme = false;
     let isIP = false;
     if (options.reference === "suffix") {
       if (options.scheme) {
@@ -3807,13 +4244,26 @@ var require_fast_uri = __commonJS((exports, module) => {
     }
     const matches = uri.match(URI_PARSE);
     if (matches) {
-      parsed.scheme = matches[1] === undefined ? undefined : matches[1].toLowerCase();
+      parsed.scheme = matches[1];
       parsed.userinfo = matches[3];
       parsed.host = matches[4];
       parsed.port = parseInt(matches[5], 10);
       parsed.path = matches[6] || "";
       parsed.query = matches[7];
       parsed.fragment = matches[8];
+      if (parsed.scheme !== undefined) {
+        const decodedScheme = unescape(parsed.scheme);
+        if (VALID_SCHEME.test(decodedScheme)) {
+          parsed.scheme = decodedScheme.toLowerCase();
+        } else {
+          parsed.error = parsed.error || MALFORMED_SCHEME_ERROR;
+          malformedScheme = true;
+        }
+      }
+      malformedPercentEncoding = hasMalformedComponentPercentEncoding(matches);
+      if (malformedPercentEncoding) {
+        parsed.error = parsed.error || "URI contains malformed percent-encoding.";
+      }
       if (isNaN(parsed.port)) {
         parsed.port = matches[5];
       }
@@ -3825,9 +4275,16 @@ var require_fast_uri = __commonJS((exports, module) => {
       if (parsed.host) {
         const ipv4result = isIPv4(parsed.host);
         if (ipv4result === false) {
+          const bracketedIPLiteral = isIPLiteral(parsed.host);
+          const hasIPLiteralBracket = parsed.host.indexOf("[") !== -1 || parsed.host.indexOf("]") !== -1;
           const ipv6result = normalizeIPv6(parsed.host);
-          parsed.host = ipv6result.host.toLowerCase();
-          isIP = ipv6result.isIPV6;
+          isIP = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
+          malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
+          parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
+          if (malformedIPLiteral) {
+            parsed.error = parsed.error || "URI host is malformed.";
+            malformedAuthorityOrPort = true;
+          }
         } else {
           isIP = true;
         }
@@ -3845,22 +4302,14 @@ var require_fast_uri = __commonJS((exports, module) => {
         parsed.error = parsed.error || "URI is not a " + options.reference + " reference.";
       }
       const schemeHandler = getSchemeHandler(options.scheme || parsed.scheme);
-      if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport)) {
-        if (parsed.host && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
-          try {
-            parsed.host = new URL("http://" + parsed.host).hostname;
-          } catch (e) {
-            parsed.error = parsed.error || "Host's domain name can not be converted to ASCII: " + e;
-          }
-        }
+      if (!malformedIPLiteral) {
+        malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
       }
       if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
         if (uri.indexOf("%") !== -1) {
-          if (parsed.scheme !== undefined) {
-            parsed.scheme = unescape(parsed.scheme);
-          }
-          if (parsed.host !== undefined) {
-            parsed.host = reescapeHostDelimiters(unescape(parsed.host), isIP);
+          if (parsed.host !== undefined && !malformedIPLiteral) {
+            const host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
+            parsed.host = reescapeHostDelimiters(host, isIP);
           }
         }
         if (parsed.path) {
@@ -3875,11 +4324,14 @@ var require_fast_uri = __commonJS((exports, module) => {
       }
       if (schemeHandler && schemeHandler.parse) {
         schemeHandler.parse(parsed, options);
+        if (schemeHandler === SCHEMES.urn && parsed.nid === undefined) {
+          malformedSchemeSpecific = true;
+        }
       }
     } else {
       parsed.error = parsed.error || "URI can not be parsed.";
     }
-    return { parsed, malformedAuthorityOrPort };
+    return { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme };
   }
   function parse6(uri, opts) {
     return parseWithStatus(uri, opts).parsed;
@@ -3888,20 +4340,28 @@ var require_fast_uri = __commonJS((exports, module) => {
     return normalizeStringWithStatus(uri, opts).normalized;
   }
   function normalizeStringWithStatus(uri, opts) {
-    const { parsed, malformedAuthorityOrPort } = parseWithStatus(uri, opts);
+    const { parsed, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = parseWithStatus(uri, opts);
     return {
-      normalized: malformedAuthorityOrPort ? uri : serialize(parsed, opts),
-      malformedAuthorityOrPort
+      normalized: malformedAuthorityOrPort || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? uri : serialize(parsed, opts),
+      malformedAuthorityOrPort,
+      malformedPercentEncoding,
+      malformedSchemeSpecific,
+      malformedHost,
+      malformedScheme
     };
   }
   function normalizeComparableURI(uri, opts) {
-    if (typeof uri === "string") {
-      const { normalized, malformedAuthorityOrPort } = normalizeStringWithStatus(uri, opts);
-      return malformedAuthorityOrPort ? undefined : normalized;
+    if (typeof uri !== "string" && typeof uri !== "object") {
+      return;
     }
-    if (typeof uri === "object") {
-      return serialize(uri, opts);
+    let value;
+    try {
+      value = typeof uri === "string" ? uri : serialize(uri, opts);
+    } catch {
+      return;
     }
+    const { normalized, malformedAuthorityOrPort, malformedPercentEncoding, malformedSchemeSpecific, malformedHost, malformedScheme } = normalizeStringWithStatus(value, opts);
+    return malformedAuthorityOrPort || malformedPercentEncoding || malformedSchemeSpecific || malformedHost || malformedScheme ? undefined : normalized;
   }
   var fastUri = {
     SCHEMES,

package/docs/app-user-posts-spec.md

@@ -0,0 +1,79 @@
+# Posts made through the app's own user token are the person's messages
+
+Upstream discussion: anneschuth/claude-threads#526.
+
+## What it does
+
+A message posted with `chat.postMessage` and a **user token of this app**
+(`xoxp-…`, obtained when a person authorises the app) shows up in Slack as
+that person, and Slack delivers it with `user` = the person **and**
+`bot_id` + `app_id` of the app. Today the Slack client drops every message
+that carries a `bot_id`, so such a post never reaches Claude, silently.
+
+With this change the client treats a message as bot-authored only when
+
+- its `user` is the bot's own user (the daemon's replies), or
+- it carries a `bot_id` and is **not** a post from this app, from this
+  workspace, with a `user`.
+
+So a post relayed through this app's own user token is handled exactly like
+the person typing it: same session routing, same allow-list, same everything.
+Other apps' bot posts, classic bot posts without a `user`, the daemon's own
+replies, and a bot copy of this same app installed in another workspace that
+shares a Slack Connect channel (same `app_id`, other `team`) stay ignored,
+as before.
+
+The rule is applied in the three places the filter lives: live events,
+missed-message recovery after a reconnect, and thread history with
+`excludeBotMessages`.
+
+## Why
+
+Any integration that speaks *for* a person — a voice front desk, a phone
+bridge, an approval UI — posts on the person's behalf with the app's user
+token, because that is the only way to keep attribution honest and the bot's
+consent gate (channel membership, allow-lists) intact. Slack marks every
+API-posted message with the app's `bot_id`; there is no way to post a
+"pure" human message through the API. Without this exception the daemon
+can never be driven by such an integration.
+
+Origin: the VVS live voice desk (`voice/` on the `local/voice-desk` branch
+of the kaza fork) relayed a spoken question into a task channel as the
+speaker, and the daemon ACKed the event and dropped it at the `bot_id`
+check with no log line. Seen 2026-09-02, message
+`{user: U…, bot_id: B0BUDMNPD26, app_id: A0BSH7L7N9E, bot_profile: {…}}`.
+
+## How
+
+- The client learns its workspace from `auth.test` (`team_id`, already
+  called for the bot user) and its own app id from the Socket Mode `hello`
+  (`connection_info.app_id`) and, belt and braces, from every `events_api`
+  envelope (`payload.api_app_id`). Secondary clients on a shared socket get
+  it handed over with each injected event. No new config, no new API call.
+- One predicate, `isBotAuthored(message)`, replaces the three inline
+  `user === botUserId || bot_id` checks.
+- `app_id` is added to the `SlackEvent` and `SlackMessage` types; it was
+  already on the wire.
+- Until app and team ids are known (only possible before the first `hello`), the
+  old rule applies: anything with a `bot_id` is ignored. Conservative, and
+  the window is the connection handshake.
+
+Why `app_id` and not `bot_id`: the `bot_id` on a user-token post is a
+per-authorisation bot profile (`B0BUDMNPD26` above), different from the
+bot token's own `bot_id` from `auth.test` (`B0BSH828Z6U`). `app_id` is the
+one stable identity.
+
+## Decisions
+
+| Decision | Why |
+|---|---|
+| No config flag | with `app_id` and `team` checked, only this installation's own user tokens qualify; nothing to opt out of |
+| `team` must match too (Codex review) | Slack Connect lets the same app be installed on both sides of a shared channel; the other copy's bot shares our `app_id` but not our `team`, and two daemons answering each other is the one loop this must never open |
+| Learn the app id from the socket, not config | zero setup; every install already receives it |
+| Old behaviour until the app id is known | never widen the filter on a guess |
+
+## Lessons learned
+
+- A dropped event at the "ignore ourselves" check leaves no trace in the
+  log. Reproducing needed `conversations.history` on the exact `ts` to see
+  the stored message's fields.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-threads",
-  "version": "1.32.0",
+  "version": "1.33.0",
   "description": "Run Claude Code from Slack or Mattermost. Sessions stream live into threads where your whole team can watch and steer.",
   "main": "dist/index.js",
   "type": "module",
@@ -76,7 +76,7 @@
     "commander": "^14.0.2",
     "diff": "^8.0.3",
     "express-rate-limit": "^8.3.0",
-    "hono": "4.13.3",
+    "hono": "4.13.5",
     "ink": "^6.6.0",
     "ink-scroll-view": "^0.3.5",
     "js-yaml": "^4.3.1",
@@ -99,7 +99,7 @@
     "@types/ws": "^8.18.0",
     "eslint": "^10.7.0",
     "husky": "^9.1.7",
-    "knip": "6.32.2",
+    "knip": "6.33.0",
     "lint-staged": "^17.0.4",
     "prettier": "^3.9.5",
     "typescript": "^6.0.2",
@@ -122,7 +122,7 @@
     "flatted": ">=3.4.0",
     "picomatch": ">=2.3.2",
     "path-to-regexp": ">=8.4.0",
-    "fast-uri": ">=4.1.2",
+    "fast-uri": ">=4.1.4",
     "brace-expansion": ">=5.0.9",
     "ip-address": ">=10.3.1",
     "ws": "$ws",
@@ -135,7 +135,7 @@
     "flatted": ">=3.4.0",
     "picomatch": ">=2.3.2",
     "path-to-regexp": ">=8.4.0",
-    "fast-uri": ">=4.1.2",
+    "fast-uri": ">=4.1.4",
     "brace-expansion": ">=5.0.9",
     "ip-address": ">=10.3.1",
     "ws": "$ws",