@dewtech/dare-cli 3.2.0 → 3.4.0

package/dist/__tests__/project-generator.test.js

@@ -0,0 +1,56 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import path from 'node:path';
+import fs from 'fs-extra';
+import { generateProjectStructure } from '../utils/project-generator.js';
+import { DEFAULTS, seedVerificationDefaultsIfAbsent, } from '../verification/config.js';
+describe('project-generator — verification block', () => {
+    let tmpRoot;
+    beforeEach(async () => {
+        tmpRoot = path.join(process.cwd(), `.pg-verif-${Date.now()}-${Math.random().toString(36).slice(2)}`);
+        await fs.ensureDir(tmpRoot);
+    });
+    afterEach(async () => {
+        if (tmpRoot)
+            await fs.remove(tmpRoot);
+    });
+    async function initProject() {
+        const appDir = path.join(tmpRoot, 'app');
+        await generateProjectStructure({
+            name: 'test-app',
+            structure: 'backend',
+            backend: 'node-nestjs',
+            outputDir: appDir,
+            skipBootstrap: true,
+            ide: 'cursor',
+            graphrag: 'sqlite',
+            mcp: false,
+        });
+        return appDir;
+    }
+    it('should_write_verification_block_disabled', async () => {
+        const appDir = await initProject();
+        const cfg = await fs.readJSON(path.join(appDir, 'dare.config.json'));
+        expect(cfg.verification).toBeDefined();
+        expect(cfg.verification.enabled).toBe(false);
+        expect(cfg.verification.mutation.minScore).toBe(0.7);
+        expect(cfg.verification.loop.policy).toBe('decay');
+        expect(cfg.verification.prerank.enabled).toBe(false);
+    });
+    it('should_match_config_defaults', async () => {
+        const appDir = await initProject();
+        const cfg = await fs.readJSON(path.join(appDir, 'dare.config.json'));
+        expect(cfg.verification).toEqual(DEFAULTS);
+    });
+    it('should_add_verification_on_update_when_absent', async () => {
+        const cfgPath = path.join(tmpRoot, 'dare.config.json');
+        await fs.writeJSON(cfgPath, { name: 'legacy', version: '3.2.0', review: { onComplete: false, strict: false } }, { spaces: 2 });
+        const cfg = await fs.readJSON(cfgPath);
+        expect(seedVerificationDefaultsIfAbsent(cfg)).toBe(true);
+        expect(cfg.verification).toEqual(DEFAULTS);
+        await fs.writeJSON(cfgPath, cfg, { spaces: 2 });
+        const reloaded = await fs.readJSON(cfgPath);
+        expect(reloaded.verification.enabled).toBe(false);
+        expect(seedVerificationDefaultsIfAbsent(reloaded)).toBe(false);
+    });
+});
+//# sourceMappingURL=project-generator.test.js.map

package/dist/__tests__/project-generator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-generator.test.js","sourceRoot":"","sources":["../../src/__tests__/project-generator.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,QAAQ,EACR,gCAAgC,GACjC,MAAM,2BAA2B,CAAC;AAEnC,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,IAAI,CAAC,IAAI,CACjB,OAAO,CAAC,GAAG,EAAE,EACb,aAAa,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CACjE,CAAC;QACF,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,OAAO;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,WAAW;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,wBAAwB,CAAC;YAC7B,IAAI,EAAE,UAAU;YAChB,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,MAAM;YACjB,aAAa,EAAE,IAAI;YACnB,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,QAAQ;YAClB,GAAG,EAAE,KAAK;SACX,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAErE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAErE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,SAAS,CAChB,OAAO,EACP,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAClF,EAAE,MAAM,EAAE,CAAC,EAAE,CACd,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/refine.test.js

@@ -49,61 +49,61 @@ describe('analyzeTaskComplexity', () => {
         expect(r?.signals[0].kind).toBe('no-spec');
     });
     it('scores a tiny task as LOW', async () => {
-        await writeFile(tmp, 'DARE/EXECUTION/task-001.md', `
-# Task 001
-
-## 3. Arquivos
-
-| Ação | Caminho |
-|------|---------|
-| CRIAR | \`src/foo.ts\` |
-
-## 4. Implementação
-
-- [ ] Teste do caminho feliz
+        await writeFile(tmp, 'DARE/EXECUTION/task-001.md', `
+# Task 001
+
+## 3. Arquivos
+
+| Ação | Caminho |
+|------|---------|
+| CRIAR | \`src/foo.ts\` |
+
+## 4. Implementação
+
+- [ ] Teste do caminho feliz
 `);
         const r = await analyzeTaskComplexity('task-001', tmp);
         expect(r?.level).toBe('LOW');
         expect(r?.recommendsSplit).toBe(false);
     });
     it('scores a big task as HIGH/CRITICAL', async () => {
-        await writeFile(tmp, 'DARE/EXECUTION/task-002.md', `
-# Task 002
-
-> **Complexidade:** HIGH
-
-## 3. Arquivos
-
-| Ação | Caminho |
-|------|---------|
-| CRIAR | \`src/a.ts\` |
-| CRIAR | \`src/b.ts\` |
-| CRIAR | \`src/c.ts\` |
-| CRIAR | \`src/d.ts\` |
-| CRIAR | \`src/e.ts\` |
-| CRIAR | \`src/f.ts\` |
-| CRIAR | \`src/g.ts\` |
-| MODIFICAR | \`tests/a.test.ts\` |
-
-## 4. Implementação
-
-Implementar:
-- \`POST /auth/register\`
-- \`POST /auth/login\`
-- \`POST /auth/refresh\`
-- \`POST /auth/logout\`
-- \`GET /auth/me\`
-
-Vamos refactor o UserService e migrate o schema para suportar profile_settings.
-Precisamos integrate com o serviço externo de email também.
-
-- [ ] Teste do happy path
-- [ ] Teste de email inválido
-- [ ] Teste de senha fraca
-- [ ] Teste de email duplicado
-- [ ] Teste de rate limit
-- [ ] Teste de refresh expirado
-- [ ] Teste de logout idempotente
+        await writeFile(tmp, 'DARE/EXECUTION/task-002.md', `
+# Task 002
+
+> **Complexidade:** HIGH
+
+## 3. Arquivos
+
+| Ação | Caminho |
+|------|---------|
+| CRIAR | \`src/a.ts\` |
+| CRIAR | \`src/b.ts\` |
+| CRIAR | \`src/c.ts\` |
+| CRIAR | \`src/d.ts\` |
+| CRIAR | \`src/e.ts\` |
+| CRIAR | \`src/f.ts\` |
+| CRIAR | \`src/g.ts\` |
+| MODIFICAR | \`tests/a.test.ts\` |
+
+## 4. Implementação
+
+Implementar:
+- \`POST /auth/register\`
+- \`POST /auth/login\`
+- \`POST /auth/refresh\`
+- \`POST /auth/logout\`
+- \`GET /auth/me\`
+
+Vamos refactor o UserService e migrate o schema para suportar profile_settings.
+Precisamos integrate com o serviço externo de email também.
+
+- [ ] Teste do happy path
+- [ ] Teste de email inválido
+- [ ] Teste de senha fraca
+- [ ] Teste de email duplicado
+- [ ] Teste de rate limit
+- [ ] Teste de refresh expirado
+- [ ] Teste de logout idempotente
 `);
         const r = await analyzeTaskComplexity('task-002', tmp);
         expect(['HIGH', 'CRITICAL']).toContain(r?.level);

package/dist/__tests__/reverse-collection.test.js

@@ -26,10 +26,10 @@ async function write(rel, content) {
 }
 describe('extractDataModel — v3.2 collection', () => {
     it('composes the @Controller prefix into NestJS routes', async () => {
-        await write('src/users/users.controller.ts', `@Controller('users')
-       export class UsersController {
-         @Get(':id') findOne() {}
-         @Post('bulk') bulk() {}
+        await write('src/users/users.controller.ts', `@Controller('users')
+       export class UsersController {
+         @Get(':id') findOne() {}
+         @Post('bulk') bulk() {}
        }`);
         const model = await extractDataModel(dir);
         const routes = model.endpoints.map((e) => `${e.method} ${e.route}`);
@@ -37,7 +37,7 @@ describe('extractDataModel — v3.2 collection', () => {
         expect(routes).toContain('POST /users/bulk');
     });
     it('handles an empty @Controller() prefix', async () => {
-        await write('src/health/health.controller.ts', `@Controller()
+        await write('src/health/health.controller.ts', `@Controller()
        export class HealthController { @Get('health') h() {} }`);
         const model = await extractDataModel(dir);
         expect(model.endpoints.map((e) => e.route)).toContain('/health');
@@ -51,7 +51,7 @@ describe('extractDataModel — v3.2 collection', () => {
         expect(names).not.toContain('CreateUserDto');
     });
     it('drops SQL keywords (CASCADE) but keeps lowercase table names', async () => {
-        await write('db/schema.sql', `CREATE TABLE produtos (id INT);
+        await write('db/schema.sql', `CREATE TABLE produtos (id INT);
        ALTER TABLE pedidos ADD CONSTRAINT fk FOREIGN KEY (pid) REFERENCES produtos(id) ON DELETE CASCADE;`);
         const model = await extractDataModel(dir);
         const names = model.entities.map((e) => e.name);

package/dist/__tests__/review.test.js

@@ -35,14 +35,14 @@ describe('isTestFile', () => {
 // ── parseFilesFromSpec ────────────────────────────────────────────────────────
 describe('parseFilesFromSpec', () => {
     it('extracts files from a CRIAR/MODIFICAR table', () => {
-        const md = `
-## 3. ARQUIVOS
-
-| Ação | Caminho | Descrição |
-|------|---------|-----------|
-| CRIAR | \`src/auth/login.ts\` | Login handler |
-| MODIFICAR | \`src/routes.ts\` | Wire route |
-| CRIAR | \`tests/auth.test.ts\` | Tests |
+        const md = `
+## 3. ARQUIVOS
+
+| Ação | Caminho | Descrição |
+|------|---------|-----------|
+| CRIAR | \`src/auth/login.ts\` | Login handler |
+| MODIFICAR | \`src/routes.ts\` | Wire route |
+| CRIAR | \`tests/auth.test.ts\` | Tests |
 `;
         expect(parseFilesFromSpec(md)).toEqual([
             'src/auth/login.ts',
@@ -51,25 +51,25 @@ describe('parseFilesFromSpec', () => {
         ]);
     });
     it('accepts English actions too', () => {
-        const md = `
-| Action | Path |
-| CREATE | \`a.ts\` |
-| MODIFY | \`b.ts\` |
-| UPDATE | \`c.ts\` |
+        const md = `
+| Action | Path |
+| CREATE | \`a.ts\` |
+| MODIFY | \`b.ts\` |
+| UPDATE | \`c.ts\` |
 `;
         expect(parseFilesFromSpec(md)).toEqual(['a.ts', 'b.ts', 'c.ts']);
     });
     it('de-duplicates paths', () => {
-        const md = `
-| MODIFICAR | \`src/a.ts\` |
-| MODIFICAR | \`src/a.ts\` |
+        const md = `
+| MODIFICAR | \`src/a.ts\` |
+| MODIFICAR | \`src/a.ts\` |
 `;
         expect(parseFilesFromSpec(md)).toEqual(['src/a.ts']);
     });
     it('ignores rows without a backtick path', () => {
-        const md = `
-| CRIAR | descrição sem path | x |
-| MODIFICAR | \`src/real.ts\` | x |
+        const md = `
+| CRIAR | descrição sem path | x |
+| MODIFICAR | \`src/real.ts\` | x |
 `;
         expect(parseFilesFromSpec(md)).toEqual(['src/real.ts']);
     });
@@ -147,19 +147,19 @@ describe('static-analyzer: detectors', () => {
         expect(kinds(r)).not.toContain('production-mock');
     });
     it('runs clean on a real-looking implementation', async () => {
-        const r = await analyze('src/auth/login.ts', `
-import { hash } from 'crypto';
-
-export async function login(email: string, password: string) {
-  if (!email || !password) {
-    throw new Error('email and password are required');
-  }
-  const user = await db.users.findOne({ email });
-  if (!user) return { ok: false, code: 401 };
-  const ok = await verify(user.passwordHash, password);
-  if (!ok) return { ok: false, code: 401 };
-  return { ok: true, token: signToken(user.id) };
-}
+        const r = await analyze('src/auth/login.ts', `
+import { hash } from 'crypto';
+
+export async function login(email: string, password: string) {
+  if (!email || !password) {
+    throw new Error('email and password are required');
+  }
+  const user = await db.users.findOne({ email });
+  if (!user) return { ok: false, code: 401 };
+  const ok = await verify(user.passwordHash, password);
+  if (!ok) return { ok: false, code: 401 };
+  return { ok: true, token: signToken(user.id) };
+}
       `.trim());
         expect(r.violations).toEqual([]);
     });
@@ -197,12 +197,12 @@ describe('runReview end-to-end', () => {
         await fs.remove(tmp);
     });
     it('parses spec, scans listed files, fails on errors', async () => {
-        await writeFile(tmp, 'DARE/EXECUTION/task-001.md', `
-## 3. ARQUIVOS
-
-| Ação | Caminho | Descrição |
-|------|---------|-----------|
-| CRIAR | \`src/foo.ts\` | Foo handler |
+        await writeFile(tmp, 'DARE/EXECUTION/task-001.md', `
+## 3. ARQUIVOS
+
+| Ação | Caminho | Descrição |
+|------|---------|-----------|
+| CRIAR | \`src/foo.ts\` | Foo handler |
 `);
         await writeFile(tmp, 'src/foo.ts', `function foo() { throw new Error('not implemented'); }`);
         const report = await runReview('task-001', { projectRoot: tmp });

package/dist/__tests__/security-hardening.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security-hardening.test.d.ts.map

package/dist/__tests__/security-hardening.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-hardening.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/security-hardening.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/security-hardening.test.js

@@ -0,0 +1,101 @@
+import { execFileSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { describe, it, expect } from 'vitest';
+import express from 'express';
+import request from 'supertest';
+import { createMcpServer } from '../mcp-server/server.js';
+import { createAuthMiddleware, redactToken } from '../mcp-server/middleware/auth.js';
+import { createErrorHandler } from '../mcp-server/middleware/error-handler.js';
+import { validateProjectName } from '../commands/init-validation.js';
+import { resolveMcpBindHost } from '../mcp-server/boot-config.js';
+const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../../../..');
+describe('security-hardening regression audit (N-1)', () => {
+    it('O-01: path-confinement suite file exists with 20+ malicious fixtures', () => {
+        const specPath = path.join(repoRoot, 'packages/cli/src/mcp-server/__tests__/path-confinement.test.ts');
+        const content = fs.readFileSync(specPath, 'utf8');
+        const fixtures = content.match(/MALICIOUS_PROJECT_PATHS/g);
+        expect(fixtures).not.toBeNull();
+        const arrayMatch = content.match(/MALICIOUS_PROJECT_PATHS = \[([\s\S]*?)\];/);
+        expect(arrayMatch).not.toBeNull();
+        const entries = (arrayMatch[1].match(/'/g) ?? []).length;
+        expect(entries).toBeGreaterThanOrEqual(20);
+    });
+    it('O-02: non-loopback without token returns 401', async () => {
+        const app = express();
+        app.set('trust proxy', true);
+        app.use((req, _res, next) => {
+            Object.defineProperty(req, 'ip', { value: '203.0.113.1', configurable: true });
+            Object.defineProperty(req.socket, 'remoteAddress', {
+                value: '203.0.113.1',
+                configurable: true,
+            });
+            next();
+        });
+        app.use(createAuthMiddleware({ token: 'audit-secret-token-value' }));
+        app.get('/probe', (_req, res) => res.json({ ok: true }));
+        const res = await request(app).get('/probe');
+        expect(res.status).toBe(401);
+    });
+    it('O-03: 5xx bodies never leak absolute paths', async () => {
+        const app = express();
+        const logger = { error: () => undefined };
+        app.get('/boom', () => {
+            throw new Error(`failed at C:\\Users\\secret\\file.ts`);
+        });
+        app.use(createErrorHandler(logger));
+        const res = await request(app).get('/boom');
+        expect(res.status).toBe(500);
+        expect(res.body.error).toBe('Internal server error');
+        expect(JSON.stringify(res.body)).not.toMatch(/Users|file\.ts/);
+        expect(res.body.correlationId).toBeTruthy();
+    });
+    it('O-04: init-validation rejects traversal, absolute paths and uppercase', () => {
+        expect(validateProjectName('../../tmp/x').ok).toBe(false);
+        expect(validateProjectName('/etc/passwd').ok).toBe(false);
+        expect(validateProjectName('MyApp').ok).toBe(false);
+        expect(validateProjectName('valid-name').ok).toBe(true);
+    });
+    it('O-05: publish-smoke workflow exists', () => {
+        const smoke = path.join(repoRoot, '.github/workflows/publish-smoke.yml');
+        expect(fs.existsSync(smoke)).toBe(true);
+        const content = fs.readFileSync(smoke, 'utf8');
+        expect(content).toContain('smoke');
+        expect(content).toContain('Publish to npm');
+    });
+    it('O-06: eslint and coverage scripts are invocable', () => {
+        const pkg = JSON.parse(fs.readFileSync(path.join(repoRoot, 'packages/cli/package.json'), 'utf8'));
+        expect(pkg.scripts.lint).toBeTruthy();
+        const vitestConfig = fs.readFileSync(path.join(repoRoot, 'packages/cli/vitest.config.ts'), 'utf8');
+        expect(vitestConfig).toContain('thresholds');
+        expect(fs.existsSync(path.join(repoRoot, 'KNOWN-COV-BASELINE.md'))).toBe(true);
+    });
+    it('O-07: CI audit job configured for prod high/critical', () => {
+        const ci = fs.readFileSync(path.join(repoRoot, '.github/workflows/ci.yml'), 'utf8');
+        expect(ci).toContain('pnpm audit --prod --audit-level=high');
+    });
+    it('O-08: verify-actions-pinned.mjs exits 0', () => {
+        const script = path.join(repoRoot, 'scripts/verify-actions-pinned.mjs');
+        expect(() => {
+            execFileSync(process.execPath, [script], { cwd: repoRoot, stdio: 'pipe' });
+        }).not.toThrow();
+    });
+    it('boot token masking never prints full secret', () => {
+        const token = 'a1b2c3d4-e5f6-7890-abcd-ef1234567890';
+        const masked = redactToken(token);
+        expect(masked).not.toBe(token);
+        expect(masked).not.toContain(token);
+    });
+    it('MCP default bind is loopback-only', () => {
+        expect(resolveMcpBindHost({})).toBe('127.0.0.1');
+    });
+    it('createMcpServer health never returns absolute project path', async () => {
+        const app = createMcpServer(repoRoot, { authToken: 'audit-token' });
+        const res = await request(app).get('/health');
+        expect(res.status).toBe(200);
+        expect(res.body.projectRoot).not.toBe(repoRoot);
+        expect(String(res.body.projectRoot)).not.toContain(':');
+    });
+});
+//# sourceMappingURL=security-hardening.test.js.map

package/dist/__tests__/security-hardening.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-hardening.test.js","sourceRoot":"","sources":["../../src/__tests__/security-hardening.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AAE3F,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,QAAQ,EACR,gEAAgE,CACjE,CAAC;QACF,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9E,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,CAAC,UAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC7B,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1B,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE;gBACjD,KAAK,EAAE,aAAa;gBACpB,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAEpC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,2BAA2B,CAAC,EAAE,MAAM,CAAC,CACnC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,+BAA+B,CAAC,EACpD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,EAAE;YACV,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,KAAK,GAAG,sCAAsC,CAAC;QACrD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/validate.test.js

@@ -57,74 +57,74 @@ describe('dare validate', () => {
         expect(stdout).toMatch(/Invalid id/);
     });
 });
-const validYaml = `title: "ok"
-version: "1.0.0"
-models:
-  cursor: { HIGH: a, MED: b, LOW: c }
-tasks:
-  - id: task-001
-    title: "First"
-    depends_on: []
-    complexity: LOW
-    subtask_prompt: "go"
-  - id: task-002
-    title: "Second"
-    depends_on: []
-    complexity: LOW
-    subtask_prompt: "go"
+const validYaml = `title: "ok"
+version: "1.0.0"
+models:
+  cursor: { HIGH: a, MED: b, LOW: c }
+tasks:
+  - id: task-001
+    title: "First"
+    depends_on: []
+    complexity: LOW
+    subtask_prompt: "go"
+  - id: task-002
+    title: "Second"
+    depends_on: []
+    complexity: LOW
+    subtask_prompt: "go"
 `;
-const dupIdYaml = `title: "dup"
-version: "1.0.0"
-models:
-  cursor: { HIGH: a, MED: b, LOW: c }
-tasks:
-  - id: task-001
-    title: "A"
-    depends_on: []
-    complexity: LOW
-    subtask_prompt: "go"
-  - id: task-001
-    title: "B"
-    depends_on: []
-    complexity: LOW
-    subtask_prompt: "go"
+const dupIdYaml = `title: "dup"
+version: "1.0.0"
+models:
+  cursor: { HIGH: a, MED: b, LOW: c }
+tasks:
+  - id: task-001
+    title: "A"
+    depends_on: []
+    complexity: LOW
+    subtask_prompt: "go"
+  - id: task-001
+    title: "B"
+    depends_on: []
+    complexity: LOW
+    subtask_prompt: "go"
 `;
-const unknownDepYaml = `title: "missing"
-version: "1.0.0"
-models:
-  cursor: { HIGH: a, MED: b, LOW: c }
-tasks:
-  - id: task-001
-    title: "A"
-    depends_on: [task-999]
-    complexity: LOW
-    subtask_prompt: "go"
+const unknownDepYaml = `title: "missing"
+version: "1.0.0"
+models:
+  cursor: { HIGH: a, MED: b, LOW: c }
+tasks:
+  - id: task-001
+    title: "A"
+    depends_on: [task-999]
+    complexity: LOW
+    subtask_prompt: "go"
 `;
-const cycleYaml = `title: "cycle"
-version: "1.0.0"
-models:
-  cursor: { HIGH: a, MED: b, LOW: c }
-tasks:
-  - id: task-001
-    title: "A"
-    depends_on: [task-002]
-    complexity: LOW
-    subtask_prompt: "go"
-  - id: task-002
-    title: "B"
-    depends_on: [task-001]
-    complexity: LOW
-    subtask_prompt: "go"
+const cycleYaml = `title: "cycle"
+version: "1.0.0"
+models:
+  cursor: { HIGH: a, MED: b, LOW: c }
+tasks:
+  - id: task-001
+    title: "A"
+    depends_on: [task-002]
+    complexity: LOW
+    subtask_prompt: "go"
+  - id: task-002
+    title: "B"
+    depends_on: [task-001]
+    complexity: LOW
+    subtask_prompt: "go"
 `;
-const badIdYaml = `title: "bad-id"
-version: "1.0.0"
-models:
-  cursor: { HIGH: a, MED: b, LOW: c }
-tasks:
-  - id: Task_001
-    title: "Wrong case"
-    depends_on: []
-    complexity: LOW
-    subtask_prompt: "go"
+const badIdYaml = `title: "bad-id"
+version: "1.0.0"
+models:
+  cursor: { HIGH: a, MED: b, LOW: c }
+tasks:
+  - id: Task_001
+    title: "Wrong case"
+    depends_on: []
+    complexity: LOW
+    subtask_prompt: "go"
 `;
 //# sourceMappingURL=validate.test.js.map

package/dist/bin/dare.js

@@ -17,6 +17,7 @@ import { bootstrapCommand } from '../commands/bootstrap.js';
 import { updateCommand } from '../commands/update.js';
 import { reviewCommand } from '../commands/review.js';
 import { refineCommand } from '../commands/refine.js';
+import { benchCommand } from '../commands/bench.js';
 import { skillCommand } from '../skills/index.js';
 import { welcomeCommand } from '../commands/welcome.js';
 import { printBanner } from '../utils/banner.js';
@@ -44,6 +45,7 @@ program.addCommand(infoCommand);
 program.addCommand(updateCommand);
 program.addCommand(reviewCommand);
 program.addCommand(refineCommand);
+program.addCommand(benchCommand);
 program.addCommand(skillCommand);
 program.addCommand(welcomeCommand);
 // Show banner + help when invoked with no subcommand

package/dist/bin/dare.js.map

@@ -1 +1 @@
-{"version":3,"file":"dare.js","sourceRoot":"","sources":["../../src/bin/dare.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAEzE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,mGAAmG,CAAC;KAChH,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;AAEtD,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACpC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACpC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAEnC,qDAAqD;AACrD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,WAAW,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,UAAU,EAAE,CAAC;AACvB,CAAC;KAAM,CAAC;IACN,yDAAyD;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,gDAAgD;QAChD,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,WAAW,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"dare.js","sourceRoot":"","sources":["../../src/bin/dare.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAEzE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,mGAAmG,CAAC;KAChH,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;AAEtD,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACpC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACrC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AACnC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC/B,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACpC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AAChC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACjC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAEnC,qDAAqD;AACrD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,WAAW,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,UAAU,EAAE,CAAC;AACvB,CAAC;KAAM,CAAC;IACN,yDAAyD;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,gDAAgD;QAChD,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,WAAW,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/__tests__/bench.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bench.spec.d.ts.map

package/dist/commands/__tests__/bench.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bench.spec.d.ts","sourceRoot":"","sources":["../../../src/commands/__tests__/bench.spec.ts"],"names":[],"mappings":""}