@creatoria/miniapp-mcp 0.1.0

package/dist/core/tool-logger.js

@@ -0,0 +1,453 @@
+/**
+ * Tool call logger wrapper for automatic logging
+ */
+/**
+ * Maximum size for logged arguments/results (1KB)
+ */
+const MAX_LOG_SIZE = 1024;
+/**
+ * Maximum recursion depth for sanitization
+ */
+const MAX_SANITIZE_DEPTH = 5;
+/**
+ * Maximum number of tool call records to keep in memory (F3)
+ */
+const MAX_TOOL_CALL_RECORDS = 1000;
+/**
+ * Sensitive key patterns to redact from logs (Issue #3: Enhanced sanitization)
+ * Uses regex for case-insensitive matching and pattern variations
+ */
+const SENSITIVE_PATTERNS = [
+    /password/i,
+    /passwd/i,
+    /pwd/i,
+    /token/i,
+    /secret/i,
+    /api[_-]?key/i,
+    /auth/i,
+    /authorization/i,
+    /bearer/i,
+    /credential/i,
+    /private[_-]?key/i,
+    /access[_-]?key/i,
+    /session[_-]?id/i,
+    /csrf/i,
+    /xsrf/i,
+    /jwt/i,
+    // WeChat specific PII
+    /openid/i,
+    /unionid/i,
+    /app[_-]?secret/i,
+];
+/**
+ * Tool logger wrapper for automatic START/END/ERROR logging
+ */
+export class ToolLogger {
+    logger;
+    config;
+    capturing = false; // Issue #P2: Prevent recursive snapshot triggers
+    constructor(logger, config) {
+        this.logger = logger;
+        this.config = config;
+    }
+    /**
+     * Wrap a tool handler with automatic logging
+     *
+     * @param toolName - Name of the tool (e.g., "page_query")
+     * @param handler - Original tool handler function
+     * @returns Wrapped handler with automatic logging
+     */
+    wrap(toolName, handler) {
+        return async (session, args) => {
+            const startTime = Date.now();
+            const childLogger = this.logger.child(toolName);
+            // Log START
+            childLogger.info('Tool call started', {
+                phase: 'START',
+                args: this.sanitizeArgs(args),
+            });
+            try {
+                // Execute tool
+                const result = await handler(session, args);
+                const duration = Date.now() - startTime;
+                // Log END
+                childLogger.info('Tool call completed', {
+                    phase: 'END',
+                    duration,
+                    result: this.sanitizeResult(result),
+                });
+                // F3: Record successful tool call
+                this.recordToolCall(session, {
+                    timestamp: new Date(startTime),
+                    toolName,
+                    duration,
+                    success: true,
+                    result: this.sanitizeResult(result),
+                });
+                return result;
+            }
+            catch (error) {
+                const duration = Date.now() - startTime;
+                // Log ERROR
+                childLogger.error('Tool call failed', {
+                    phase: 'ERROR',
+                    duration,
+                    error: error instanceof Error ? error.message : String(error),
+                    stackTrace: error instanceof Error ? error.stack : undefined,
+                });
+                // F2: Capture failure snapshot (fire-and-forget, non-blocking)
+                let snapshotPath;
+                if (this.config?.enableFailureSnapshot) {
+                    snapshotPath = await this.captureFailureSnapshot({
+                        session,
+                        toolName,
+                        args,
+                        error: error instanceof Error ? error : new Error(String(error)),
+                        duration,
+                    }).catch((e) => {
+                        childLogger.warn('Snapshot capture failed', {
+                            error: e instanceof Error ? e.message : String(e),
+                        });
+                        return undefined;
+                    });
+                }
+                // F3: Record failed tool call
+                this.recordToolCall(session, {
+                    timestamp: new Date(startTime),
+                    toolName,
+                    duration,
+                    success: false,
+                    error: {
+                        message: this.sanitizeErrorMessage(error instanceof Error ? error.message : String(error)),
+                        snapshotPath,
+                    },
+                });
+                throw error; // Re-throw to preserve error handling
+            }
+        };
+    }
+    /**
+     * Check if a key name matches sensitive patterns (Issue #3)
+     */
+    isSensitiveKey(key) {
+        return SENSITIVE_PATTERNS.some((pattern) => pattern.test(key));
+    }
+    /**
+     * Sanitize arguments for logging (remove sensitive data, limit size)
+     * Issue #3: Enhanced with deep recursion and pattern matching
+     */
+    sanitizeArgs(args, depth = 0) {
+        if (args === null || args === undefined) {
+            return args;
+        }
+        // Prevent infinite recursion
+        if (depth > MAX_SANITIZE_DEPTH) {
+            return '<Max sanitization depth reached>';
+        }
+        try {
+            // For primitives, handle directly
+            if (typeof args !== 'object') {
+                if (typeof args === 'string' && args.length > MAX_LOG_SIZE) {
+                    return args.substring(0, MAX_LOG_SIZE) + `... (${args.length} bytes total)`;
+                }
+                return args;
+            }
+            // Handle arrays
+            if (Array.isArray(args)) {
+                return args.map((item) => this.sanitizeArgs(item, depth + 1));
+            }
+            // Handle objects with deep sanitization
+            const sanitized = {};
+            for (const [key, value] of Object.entries(args)) {
+                // Redact sensitive keys (Issue #3: Pattern-based matching)
+                if (this.isSensitiveKey(key)) {
+                    sanitized[key] = '[REDACTED]';
+                    continue;
+                }
+                // Truncate large strings
+                if (typeof value === 'string' && value.length > MAX_LOG_SIZE) {
+                    sanitized[key] = value.substring(0, MAX_LOG_SIZE) + `... (${value.length} bytes total)`;
+                    continue;
+                }
+                // Convert buffers to placeholder
+                if (value &&
+                    typeof value === 'object' &&
+                    'type' in value &&
+                    value.type === 'Buffer' &&
+                    'data' in value) {
+                    const bufferData = value.data;
+                    sanitized[key] = `<Buffer ${bufferData?.length || 0} bytes>`;
+                    continue;
+                }
+                // Recursively sanitize nested objects/arrays (Issue #3: Deep sanitization)
+                if (value && typeof value === 'object') {
+                    sanitized[key] = this.sanitizeArgs(value, depth + 1);
+                    continue;
+                }
+                sanitized[key] = value;
+            }
+            return sanitized;
+        }
+        catch (error) {
+            // If sanitization fails, return placeholder
+            return '<Failed to sanitize args>';
+        }
+    }
+    /**
+     * Sanitize result for logging (limit size, remove large objects)
+     * Issue #3: Use same deep sanitization as args
+     */
+    sanitizeResult(result, depth = 0) {
+        if (result === null || result === undefined) {
+            return result;
+        }
+        // Prevent infinite recursion
+        if (depth > MAX_SANITIZE_DEPTH) {
+            return '<Max sanitization depth reached>';
+        }
+        try {
+            // For simple types, return as-is
+            if (typeof result !== 'object') {
+                if (typeof result === 'string' && result.length > MAX_LOG_SIZE) {
+                    return result.substring(0, MAX_LOG_SIZE) + `... (${result.length} bytes total)`;
+                }
+                return result;
+            }
+            // Handle arrays
+            if (Array.isArray(result)) {
+                if (result.length > 10) {
+                    return [
+                        ...result.slice(0, 10).map((item) => this.sanitizeResult(item, depth + 1)),
+                        `... (${result.length - 10} more items)`,
+                    ];
+                }
+                return result.map((item) => this.sanitizeResult(item, depth + 1));
+            }
+            // For objects, sanitize with deep recursion
+            const sanitized = {};
+            for (const [key, value] of Object.entries(result)) {
+                // Redact sensitive keys in results too (Issue #3)
+                if (this.isSensitiveKey(key)) {
+                    sanitized[key] = '[REDACTED]';
+                    continue;
+                }
+                // Truncate large strings
+                if (typeof value === 'string' && value.length > MAX_LOG_SIZE) {
+                    sanitized[key] = value.substring(0, MAX_LOG_SIZE) + `... (${value.length} bytes total)`;
+                    continue;
+                }
+                // Convert buffers to placeholder
+                if (value &&
+                    typeof value === 'object' &&
+                    'type' in value &&
+                    value.type === 'Buffer' &&
+                    'data' in value) {
+                    const bufferData = value.data;
+                    sanitized[key] = `<Buffer ${bufferData?.length || 0} bytes>`;
+                    continue;
+                }
+                // Recursively sanitize nested objects/arrays
+                if (value && typeof value === 'object') {
+                    sanitized[key] = this.sanitizeResult(value, depth + 1);
+                    continue;
+                }
+                sanitized[key] = value;
+            }
+            return sanitized;
+        }
+        catch (error) {
+            // If sanitization fails, return placeholder
+            return '<Failed to sanitize result>';
+        }
+    }
+    /**
+     * Capture failure snapshot when tool call fails (F2 feature)
+     *
+     * Creates a failure directory with:
+     * - snapshot.json: Page data
+     * - snapshot.png: Screenshot
+     * - error-context.json: Error details + tool context
+     *
+     * @param context Failure context
+     * @returns Relative path to the failure directory (for F3 reporting)
+     */
+    async captureFailureSnapshot(context) {
+        const { session, toolName, args, error, duration } = context;
+        const logger = this.logger;
+        // Issue #P2: Prevent recursive snapshot triggers
+        if (this.capturing) {
+            logger?.debug('Skipping failure snapshot: already capturing');
+            return undefined;
+        }
+        this.capturing = true;
+        try {
+            // 1. Check prerequisites
+            if (!this.config?.enableFailureSnapshot) {
+                return undefined; // Feature disabled
+            }
+            if (!session.miniProgram) {
+                logger?.debug('Skipping failure snapshot: miniProgram not connected');
+                return undefined;
+            }
+            if (!session.outputManager) {
+                logger?.debug('Skipping failure snapshot: outputManager not available');
+                return undefined;
+            }
+            // 2. Create failure directory
+            // Issue #P1: Sanitize toolName to prevent path traversal
+            const sanitizedToolName = toolName.replace(/[^a-zA-Z0-9_-]/g, '_');
+            // Issue #P1: Preserve millisecond precision to avoid collisions
+            const timestamp = new Date().toISOString().replace(/[:.]/g, '-').replace('T', '_');
+            const failureDirName = `${sanitizedToolName}-${timestamp}`;
+            const failureDir = `failures/${failureDirName}`;
+            const outputManager = session.outputManager;
+            await outputManager.ensureOutputDir();
+            // Create failures subdirectory
+            const { mkdir } = await import('fs/promises');
+            const { join } = await import('path');
+            const failurePath = join(outputManager.getOutputDir(), failureDir);
+            await mkdir(failurePath, { recursive: true });
+            logger?.info('Capturing failure snapshot', { path: failurePath });
+            // 3. Capture page snapshot
+            const snapshotFilename = join(failureDir, 'snapshot.json');
+            const snapshotTools = await import('../tools/snapshot.js');
+            await snapshotTools.snapshotPage(session, {
+                filename: snapshotFilename,
+                includeScreenshot: true,
+                fullPage: false,
+            });
+            // 4. Save error context
+            const errorContext = {
+                toolName,
+                timestamp: new Date().toISOString(),
+                error: {
+                    message: error.message,
+                    // Issue #P2: Sanitize stack trace to remove sensitive paths
+                    stack: this.sanitizeStackTrace(error.stack),
+                    code: error.code,
+                },
+                args: this.sanitizeArgs(args), // Reuse existing sanitization
+                duration,
+            };
+            const contextFilename = join(failureDir, 'error-context.json');
+            await outputManager.writeFile(contextFilename, Buffer.from(JSON.stringify(errorContext, null, 2)));
+            logger?.info('Failure snapshot captured successfully', {
+                path: failurePath,
+                files: ['snapshot.json', 'snapshot.png', 'error-context.json'],
+            });
+            // F3: Return relative path for report linking
+            return failureDir;
+        }
+        catch (snapshotError) {
+            // Snapshot capture failed - log but don't throw
+            logger?.warn('Failed to capture failure snapshot', {
+                error: snapshotError instanceof Error ? snapshotError.message : String(snapshotError),
+            });
+            return undefined;
+        }
+        finally {
+            this.capturing = false;
+        }
+    }
+    /**
+     * Record a tool call to session report data (F3 feature)
+     *
+     * Adds a tool call record to the session's reportData. Implements
+     * memory protection by limiting to MAX_TOOL_CALL_RECORDS with FIFO eviction.
+     *
+     * @param session Session state
+     * @param record Tool call record to add
+     */
+    recordToolCall(session, record) {
+        // Skip if session reporting is not enabled
+        if (!session.reportData) {
+            return;
+        }
+        // Add record to the array
+        session.reportData.toolCalls.push(record);
+        // F3-P2: Memory protection with batch eviction for better performance
+        // Instead of shift() every time (O(n)), we batch-remove when hitting 1.5x limit
+        // This reduces eviction frequency from every call to every 500 calls
+        const currentLength = session.reportData.toolCalls.length;
+        if (currentLength >= MAX_TOOL_CALL_RECORDS * 1.5) {
+            // Remove oldest 50% to get back to limit
+            const removeCount = Math.floor(MAX_TOOL_CALL_RECORDS * 0.5);
+            const removed = session.reportData.toolCalls.splice(0, removeCount);
+            this.logger?.debug('Tool call records evicted (memory limit)', {
+                removedCount: removed.length,
+                oldestTool: removed[0]?.toolName,
+                oldestTimestamp: removed[0]?.timestamp,
+                newestRemovedTool: removed[removed.length - 1]?.toolName,
+                currentCount: session.reportData.toolCalls.length,
+                maxCount: MAX_TOOL_CALL_RECORDS,
+            });
+        }
+    }
+    /**
+     * Sanitize error message to remove sensitive information (F3-S1)
+     *
+     * Removes:
+     * - File paths (Unix, Linux, Windows)
+     * - API keys and tokens (32+ character alphanumeric strings)
+     * - Stack trace locations
+     *
+     * @param message Raw error message
+     * @returns Sanitized error message with placeholders
+     */
+    sanitizeErrorMessage(message) {
+        if (!message)
+            return message;
+        try {
+            return (message
+                // Replace Unix user paths: /Users/username/ -> /Users/<user>/
+                .replace(/\/Users\/[^/]+\//g, '/Users/<user>/')
+                // Replace Linux home paths: /home/username/ -> /home/<user>/
+                .replace(/\/home\/[^/]+\//g, '/home/<user>/')
+                // Replace Windows user paths: C:\Users\username\ -> C:\Users\<user>\
+                .replace(/C:\\Users\\[^\\]+\\/gi, 'C:\\Users\\<user>\\')
+                // Replace common environment paths
+                .replace(/\/opt\/[^/\s]+\//g, '/opt/<app>/')
+                .replace(/\/var\/[^/\s]+\//g, '/var/<app>/')
+                // Replace long alphanumeric strings with underscores/hyphens (likely API keys/tokens)
+                .replace(/\b[a-zA-Z0-9_-]{32,}\b/g, '<REDACTED>')
+                // Replace stack trace locations: "at path:line:col" or " at path:line:col" -> "at <path>:<line>:<col>"
+                .replace(/\bat\s+[^:\s]+:\d+:\d+/g, 'at <path>:<line>:<col>'));
+        }
+        catch (error) {
+            // If sanitization fails, return placeholder to avoid leaking raw message
+            return '<Failed to sanitize error message>';
+        }
+    }
+    /**
+     * Sanitize stack trace to remove sensitive file paths (Issue #P2)
+     *
+     * Removes:
+     * - Absolute user paths (/Users/<username>/, /home/<username>/)
+     * - Windows paths (C:\Users\<username>\)
+     * - Environment-specific paths
+     *
+     * @param stack Raw stack trace
+     * @returns Sanitized stack trace with placeholders
+     */
+    sanitizeStackTrace(stack) {
+        if (!stack)
+            return stack;
+        try {
+            return (stack
+                // Replace Unix user paths: /Users/username/ -> /Users/<user>/
+                .replace(/\/Users\/[^/]+\//g, '/Users/<user>/')
+                // Replace Linux home paths: /home/username/ -> /home/<user>/
+                .replace(/\/home\/[^/]+\//g, '/home/<user>/')
+                // Replace Windows user paths: C:\Users\username\ -> C:\Users\<user>\
+                .replace(/C:\\Users\\[^\\]+\\/gi, 'C:\\Users\\<user>\\')
+                // Replace common environment variables that may leak info
+                .replace(/\/opt\/[^/]+\//g, '/opt/<app>/')
+                .replace(/\/var\/[^/]+\//g, '/var/<app>/'));
+        }
+        catch (error) {
+            // If sanitization fails, return placeholder to avoid leaking raw stack
+            return '<Stack trace sanitization failed>';
+        }
+    }
+}
+//# sourceMappingURL=tool-logger.js.map

package/dist/core/tool-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-logger.js","sourceRoot":"","sources":["../../src/core/tool-logger.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;GAEG;AACH,MAAM,YAAY,GAAG,IAAI,CAAA;AAEzB;;GAEG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAE5B;;GAEG;AACH,MAAM,qBAAqB,GAAG,IAAI,CAAA;AAElC;;;GAGG;AACH,MAAM,kBAAkB,GAAG;IACzB,WAAW;IACX,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,cAAc;IACd,OAAO;IACP,gBAAgB;IAChB,SAAS;IACT,aAAa;IACb,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,OAAO;IACP,OAAO;IACP,MAAM;IACN,sBAAsB;IACtB,SAAS;IACT,UAAU;IACV,iBAAiB;CAClB,CAAA;AAED;;GAEG;AACH,MAAM,OAAO,UAAU;IAIX;IACA;IAJF,SAAS,GAAG,KAAK,CAAA,CAAC,iDAAiD;IAE3E,YACU,MAAc,EACd,MAA2C;QAD3C,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAqC;IAClD,CAAC;IAEJ;;;;;;OAMG;IACH,IAAI,CACF,QAAgB,EAChB,OAAiE;QAEjE,OAAO,KAAK,EAAE,OAAqB,EAAE,IAAW,EAAoB,EAAE;YACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAE/C,YAAY;YACZ,WAAW,CAAC,IAAI,CAAC,mBAAmB,EAAE;gBACpC,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;aAC9B,CAAC,CAAA;YAEF,IAAI,CAAC;gBACH,eAAe;gBACf,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;gBAEvC,UAAU;gBACV,WAAW,CAAC,IAAI,CAAC,qBAAqB,EAAE;oBACtC,KAAK,EAAE,KAAK;oBACZ,QAAQ;oBACR,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAA;gBAEF,kCAAkC;gBAClC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;oBAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;oBAC9B,QAAQ;oBACR,QAAQ;oBACR,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAA;gBAEF,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;gBAEvC,YAAY;gBACZ,WAAW,CAAC,KAAK,CAAC,kBAAkB,EAAE;oBACpC,KAAK,EAAE,OAAO;oBACd,QAAQ;oBACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBAC7D,CAAC,CAAA;gBAEF,+DAA+D;gBAC/D,IAAI,YAAgC,CAAA;gBACpC,IAAI,IAAI,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC;oBACvC,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC;wBAC/C,OAAO;wBACP,QAAQ;wBACR,IAAI;wBACJ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBAChE,QAAQ;qBACT,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;wBACb,WAAW,CAAC,IAAI,CAAC,yBAAyB,EAAE;4BAC1C,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;yBAClD,CAAC,CAAA;wBACF,OAAO,SAAS,CAAA;oBAClB,CAAC,CAAC,CAAA;gBACJ,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;oBAC3B,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;oBAC9B,QAAQ;oBACR,QAAQ;oBACR,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAChC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD;wBACD,YAAY;qBACb;iBACF,CAAC,CAAA;gBAEF,MAAM,KAAK,CAAA,CAAC,sCAAsC;YACpD,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAW;QAChC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAChE,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,IAAS,EAAE,KAAK,GAAG,CAAC;QACvC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,6BAA6B;QAC7B,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,OAAO,kCAAkC,CAAA;QAC3C,CAAC;QAED,IAAI,CAAC;YACH,kCAAkC;YAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;oBAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,QAAQ,IAAI,CAAC,MAAM,eAAe,CAAA;gBAC7E,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;YAED,gBAAgB;YAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;YAC/D,CAAC;YAED,wCAAwC;YACxC,MAAM,SAAS,GAAQ,EAAE,CAAA;YACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,2DAA2D;gBAC3D,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAA;oBAC7B,SAAQ;gBACV,CAAC;gBAED,yBAAyB;gBACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;oBAC7D,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,QAAQ,KAAK,CAAC,MAAM,eAAe,CAAA;oBACvF,SAAQ;gBACV,CAAC;gBAED,iCAAiC;gBACjC,IACE,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,QAAQ;oBACvB,MAAM,IAAI,KAAK,EACf,CAAC;oBACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAW,CAAA;oBACpC,SAAS,CAAC,GAAG,CAAC,GAAG,WAAW,UAAU,EAAE,MAAM,IAAI,CAAC,SAAS,CAAA;oBAC5D,SAAQ;gBACV,CAAC;gBAED,2EAA2E;gBAC3E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;oBACpD,SAAQ;gBACV,CAAC;gBAED,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACxB,CAAC;YAED,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4CAA4C;YAC5C,OAAO,2BAA2B,CAAA;QACpC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,MAAW,EAAE,KAAK,GAAG,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAA;QACf,CAAC;QAED,6BAA6B;QAC7B,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;YAC/B,OAAO,kCAAkC,CAAA;QAC3C,CAAC;QAED,IAAI,CAAC;YACH,iCAAiC;YACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;oBAC/D,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,QAAQ,MAAM,CAAC,MAAM,eAAe,CAAA;gBACjF,CAAC;gBACD,OAAO,MAAM,CAAA;YACf,CAAC;YAED,gBAAgB;YAChB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBACvB,OAAO;wBACL,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;wBAC1E,QAAQ,MAAM,CAAC,MAAM,GAAG,EAAE,cAAc;qBACzC,CAAA;gBACH,CAAC;gBACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;YACnE,CAAC;YAED,4CAA4C;YAC5C,MAAM,SAAS,GAAQ,EAAE,CAAA;YACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,kDAAkD;gBAClD,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAA;oBAC7B,SAAQ;gBACV,CAAC;gBAED,yBAAyB;gBACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;oBAC7D,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,QAAQ,KAAK,CAAC,MAAM,eAAe,CAAA;oBACvF,SAAQ;gBACV,CAAC;gBAED,iCAAiC;gBACjC,IACE,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,QAAQ;oBACvB,MAAM,IAAI,KAAK,EACf,CAAC;oBACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAW,CAAA;oBACpC,SAAS,CAAC,GAAG,CAAC,GAAG,WAAW,UAAU,EAAE,MAAM,IAAI,CAAC,SAAS,CAAA;oBAC5D,SAAQ;gBACV,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;oBACtD,SAAQ;gBACV,CAAC;gBAED,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACxB,CAAC;YAED,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4CAA4C;YAC5C,OAAO,6BAA6B,CAAA;QACtC,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,sBAAsB,CAAC,OAMpC;QACC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAE1B,iDAAiD;QACjD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,EAAE,KAAK,CAAC,8CAA8C,CAAC,CAAA;YAC7D,OAAO,SAAS,CAAA;QAClB,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC;YACH,yBAAyB;YACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,qBAAqB,EAAE,CAAC;gBACxC,OAAO,SAAS,CAAA,CAAC,mBAAmB;YACtC,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,EAAE,KAAK,CAAC,sDAAsD,CAAC,CAAA;gBACrE,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3B,MAAM,EAAE,KAAK,CAAC,wDAAwD,CAAC,CAAA;gBACvE,OAAO,SAAS,CAAA;YAClB,CAAC;YAED,8BAA8B;YAC9B,yDAAyD;YACzD,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAA;YAElE,gEAAgE;YAChE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAClF,MAAM,cAAc,GAAG,GAAG,iBAAiB,IAAI,SAAS,EAAE,CAAA;YAC1D,MAAM,UAAU,GAAG,YAAY,cAAc,EAAE,CAAA;YAE/C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAA;YAC3C,MAAM,aAAa,CAAC,eAAe,EAAE,CAAA;YAErC,+BAA+B;YAC/B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;YAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;YACrC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAA;YAClE,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAE7C,MAAM,EAAE,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAA;YAEjE,2BAA2B;YAC3B,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;YAE1D,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAA;YAC1D,MAAM,aAAa,CAAC,YAAY,CAAC,OAAO,EAAE;gBACxC,QAAQ,EAAE,gBAAgB;gBAC1B,iBAAiB,EAAE,IAAI;gBACvB,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YAEF,wBAAwB;YACxB,MAAM,YAAY,GAAG;gBACnB,QAAQ;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,KAAK,EAAE;oBACL,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,4DAA4D;oBAC5D,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC;oBAC3C,IAAI,EAAG,KAAa,CAAC,IAAI;iBAC1B;gBACD,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,8BAA8B;gBAC7D,QAAQ;aACT,CAAA;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;YAC9D,MAAM,aAAa,CAAC,SAAS,CAC3B,eAAe,EACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CACnD,CAAA;YAED,MAAM,EAAE,IAAI,CAAC,wCAAwC,EAAE;gBACrD,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,oBAAoB,CAAC;aAC/D,CAAC,CAAA;YAEF,8CAA8C;YAC9C,OAAO,UAAU,CAAA;QACnB,CAAC;QAAC,OAAO,aAAa,EAAE,CAAC;YACvB,gDAAgD;YAChD,MAAM,EAAE,IAAI,CAAC,oCAAoC,EAAE;gBACjD,KAAK,EAAE,aAAa,YAAY,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;aACtF,CAAC,CAAA;YACF,OAAO,SAAS,CAAA;QAClB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,KAAK,CAAA;QACxB,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,cAAc,CAAC,OAAqB,EAAE,MAAsB;QAClE,2CAA2C;QAC3C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,OAAM;QACR,CAAC;QAED,0BAA0B;QAC1B,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAEzC,sEAAsE;QACtE,gFAAgF;QAChF,qEAAqE;QACrE,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAA;QACzD,IAAI,aAAa,IAAI,qBAAqB,GAAG,GAAG,EAAE,CAAC;YACjD,yCAAyC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAA;YAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;YAEnE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,0CAA0C,EAAE;gBAC7D,YAAY,EAAE,OAAO,CAAC,MAAM;gBAC5B,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ;gBAChC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS;gBACtC,iBAAiB,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,QAAQ;gBACxD,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM;gBACjD,QAAQ,EAAE,qBAAqB;aAChC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,oBAAoB,CAAC,OAAe;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAA;QAE5B,IAAI,CAAC;YACH,OAAO,CACL,OAAO;gBACL,8DAA8D;iBAC7D,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;gBAC/C,6DAA6D;iBAC5D,OAAO,CAAC,kBAAkB,EAAE,eAAe,CAAC;gBAC7C,qEAAqE;iBACpE,OAAO,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;gBACxD,mCAAmC;iBAClC,OAAO,CAAC,mBAAmB,EAAE,aAAa,CAAC;iBAC3C,OAAO,CAAC,mBAAmB,EAAE,aAAa,CAAC;gBAC5C,sFAAsF;iBACrF,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC;gBACjD,uGAAuG;iBACtG,OAAO,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,CAChE,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,OAAO,oCAAoC,CAAA;QAC7C,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,kBAAkB,CAAC,KAAyB;QAClD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QAExB,IAAI,CAAC;YACH,OAAO,CACL,KAAK;gBACH,8DAA8D;iBAC7D,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;gBAC/C,6DAA6D;iBAC5D,OAAO,CAAC,kBAAkB,EAAE,eAAe,CAAC;gBAC7C,qEAAqE;iBACpE,OAAO,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;gBACxD,0DAA0D;iBACzD,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC;iBACzC,OAAO,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAC7C,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,OAAO,mCAAmC,CAAA;QAC5C,CAAC;IACH,CAAC;CACF"}

package/dist/core/validation.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Input validation utilities
+ */
+/**
+ * Validates a filename to prevent path traversal attacks
+ *
+ * Rules:
+ * - No path separators (/ or \)
+ * - No parent directory references (..)
+ * - Only alphanumeric, underscore, hyphen, and dot
+ * - Must have a valid extension
+ *
+ * @param filename - The filename to validate
+ * @param allowedExtensions - Array of allowed extensions (without dot)
+ * @throws Error if filename is invalid
+ *
+ * @example
+ * ```typescript
+ * validateFilename('screenshot.png', ['png', 'jpg']) // OK
+ * validateFilename('../etc/passwd', ['png']) // throws
+ * validateFilename('file/path.png', ['png']) // throws
+ * ```
+ */
+export declare function validateFilename(filename: string, allowedExtensions?: string[]): void;
+/**
+ * Sanitizes a filename by removing or replacing invalid characters
+ *
+ * @param filename - The filename to sanitize
+ * @param defaultExtension - Default extension if none provided
+ * @returns A safe filename
+ *
+ * @example
+ * ```typescript
+ * sanitizeFilename('my file!.png') // 'my-file.png'
+ * sanitizeFilename('test', 'json') // 'test.json'
+ * ```
+ */
+export declare function sanitizeFilename(filename: string, defaultExtension?: string): string;
+//# sourceMappingURL=validation.d.ts.map

package/dist/core/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,iBAAiB,GAAE,MAAM,EAA0C,GAClE,IAAI,CA0CN;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CA0BpF"}

package/dist/core/validation.js

@@ -0,0 +1,93 @@
+/**
+ * Input validation utilities
+ */
+/**
+ * Validates a filename to prevent path traversal attacks
+ *
+ * Rules:
+ * - No path separators (/ or \)
+ * - No parent directory references (..)
+ * - Only alphanumeric, underscore, hyphen, and dot
+ * - Must have a valid extension
+ *
+ * @param filename - The filename to validate
+ * @param allowedExtensions - Array of allowed extensions (without dot)
+ * @throws Error if filename is invalid
+ *
+ * @example
+ * ```typescript
+ * validateFilename('screenshot.png', ['png', 'jpg']) // OK
+ * validateFilename('../etc/passwd', ['png']) // throws
+ * validateFilename('file/path.png', ['png']) // throws
+ * ```
+ */
+export function validateFilename(filename, allowedExtensions = ['png', 'jpg', 'jpeg', 'json', 'txt']) {
+    if (!filename || filename.trim() === '') {
+        throw new Error('Filename cannot be empty');
+    }
+    // Check for path traversal attempts
+    if (filename.includes('..')) {
+        throw new Error('Filename must not contain ".." sequences (path traversal attempt)');
+    }
+    // Check for path separators
+    if (filename.includes('/') || filename.includes('\\')) {
+        throw new Error('Filename must not contain path separators');
+    }
+    // Check for null bytes (security)
+    if (filename.includes('\0')) {
+        throw new Error('Filename must not contain null bytes');
+    }
+    // Validate format: alphanumeric, underscore, hyphen, and dot
+    if (!/^[a-zA-Z0-9_.-]+$/.test(filename)) {
+        throw new Error('Filename must only contain alphanumeric characters, underscores, hyphens, and dots');
+    }
+    // Check extension
+    const parts = filename.split('.');
+    if (parts.length < 2) {
+        throw new Error('Filename must have an extension');
+    }
+    const extension = parts[parts.length - 1].toLowerCase();
+    if (!allowedExtensions.includes(extension)) {
+        throw new Error(`Invalid file extension. Allowed extensions: ${allowedExtensions.join(', ')}`);
+    }
+    // Check length (防止过长文件名)
+    if (filename.length > 255) {
+        throw new Error('Filename is too long (max 255 characters)');
+    }
+}
+/**
+ * Sanitizes a filename by removing or replacing invalid characters
+ *
+ * @param filename - The filename to sanitize
+ * @param defaultExtension - Default extension if none provided
+ * @returns A safe filename
+ *
+ * @example
+ * ```typescript
+ * sanitizeFilename('my file!.png') // 'my-file.png'
+ * sanitizeFilename('test', 'json') // 'test.json'
+ * ```
+ */
+export function sanitizeFilename(filename, defaultExtension) {
+    // Remove path components
+    filename = filename.split('/').pop();
+    filename = filename.split('\\').pop();
+    // Remove or replace invalid characters
+    filename = filename.replace(/[^a-zA-Z0-9_.-]/g, '-');
+    // Remove multiple consecutive hyphens or dots
+    filename = filename.replace(/[-]{2,}/g, '-');
+    filename = filename.replace(/[.]{2,}/g, '.');
+    // Ensure extension
+    if (defaultExtension && !filename.includes('.')) {
+        filename = `${filename}.${defaultExtension}`;
+    }
+    // Limit length
+    if (filename.length > 255) {
+        const parts = filename.split('.');
+        const ext = parts.pop();
+        const name = parts.join('.').substring(0, 255 - ext.length - 1);
+        filename = `${name}.${ext}`;
+    }
+    return filename;
+}
+//# sourceMappingURL=validation.js.map

package/dist/core/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/core/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,oBAA8B,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;IAEnE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC7C,CAAC;IAED,oCAAoC;IACpC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;IACtF,CAAC;IAED,4BAA4B;IAC5B,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC9D,CAAC;IAED,kCAAkC;IAClC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;IAED,6DAA6D;IAC7D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAA;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACvD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+CAA+C,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IAED,yBAAyB;IACzB,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,gBAAyB;IAC1E,yBAAyB;IACzB,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAA;IACrC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAG,CAAA;IAEtC,uCAAuC;IACvC,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;IAEpD,8CAA8C;IAC9C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC5C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAE5C,mBAAmB;IACnB,IAAI,gBAAgB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,QAAQ,GAAG,GAAG,QAAQ,IAAI,gBAAgB,EAAE,CAAA;IAC9C,CAAC;IAED,eAAe;IACf,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAA;QACvB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,GAAG,GAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAChE,QAAQ,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAA;IAC7B,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Main entry point for creatoria-miniapp-mcp
+ * MCP Server for WeChat Mini Program automation
+ */
+export { startServer } from './server.js';
+export type { ServerConfig } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,6 @@
+/**
+ * Main entry point for creatoria-miniapp-mcp
+ * MCP Server for WeChat Mini Program automation
+ */
+export { startServer } from './server.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA"}

package/dist/server.d.ts

@@ -0,0 +1,7 @@
+/**
+ * MCP Server implementation for WeChat Mini Program automation
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ServerConfig } from './types.js';
+export declare function startServer(config?: Partial<ServerConfig>): Promise<Server>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAGlE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAK9C,wBAAsB,WAAW,CAAC,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA8FrF"}