@falzz1010/laravel-mcp-server 1.0.0 → 1.0.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,6 +5,46 @@ All notable changes to Laravel MCP Server will be documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [1.0.3] - 2026-08-01
9
+
10
+ ### Fixed
11
+ - Fixed Security Audit workflow to run successfully on Linux CI
12
+ - Made path traversal security tests platform-aware (Windows vs Linux)
13
+ - Updated all GitHub Actions workflows to use Node.js 22 (avoiding deprecation warnings)
14
+ - Added improved error diagnostics to CI workflows
15
+
16
+ ### Changed
17
+ - Re-enabled automated security testing on all pushes and pull requests
18
+ - Enhanced test coverage for cross-platform security validation
19
+
20
+ ## [1.0.2] - 2026-08-01
21
+
22
+ ### Added
23
+ - Comprehensive supply chain security documentation (SUPPLY_CHAIN_SECURITY.md)
24
+ - Project summary documentation (PROJECT_SUMMARY.md)
25
+ - 6 GitHub Actions workflows for automated security scanning
26
+ - npm package provenance and attestation support
27
+ - Enhanced security badges in README
28
+
29
+ ### Security
30
+ - CodeQL static analysis (✅ passing)
31
+ - OpenSSF Scorecard security metrics
32
+ - SBOM generation for releases
33
+ - Dependency review automation
34
+ - Snyk vulnerability scanning (optional)
35
+
36
+ ## [1.0.1] - 2026-08-01
37
+
38
+ ### Fixed
39
+ - Added shebang to fix EOF error on Windows
40
+
41
+ ### Security
42
+ - Added GitHub Actions security workflows (CodeQL, Snyk, OpenSSF Scorecard)
43
+ - Implemented npm package provenance
44
+ - Added SBOM (Software Bill of Materials) generation
45
+ - Enhanced dependency review automation
46
+ - Added security badges to README
47
+
8
48
  ## [1.0.0] - 2026-08-01
9
49
 
10
50
  ### 🎉 Initial Release
package/README.md CHANGED
@@ -4,15 +4,46 @@
4
4
 
5
5
  <div align="center">
6
6
 
7
- [![TypeScript](https://img.shields.io/badge/TypeScript-5.5-blue?logo=typescript)](https://www.typescriptlang.org/)
8
- [![Node.js](https://img.shields.io/badge/Node.js-18+-green?logo=node.js)](https://nodejs.org/)
9
- [![Laravel](https://img.shields.io/badge/Laravel-8+-red?logo=laravel)](https://laravel.com/)
10
- [![MCP](https://img.shields.io/badge/MCP-1.30-purple)](https://modelcontextprotocol.io/)
7
+ [![npm version](https://img.shields.io/npm/v/@falzz1010/laravel-mcp-server.svg?style=flat-square)](https://www.npmjs.com/package/@falzz1010/laravel-mcp-server)
8
+ [![npm downloads](https://img.shields.io/npm/dm/@falzz1010/laravel-mcp-server.svg?style=flat-square)](https://www.npmjs.com/package/@falzz1010/laravel-mcp-server)
9
+ [![GitHub](https://img.shields.io/github/stars/Falzz1010/laravel-mcp-server?style=flat-square)](https://github.com/Falzz1010/laravel-mcp-server)
10
+ [![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/Falzz1010/laravel-mcp-server?label=openssf%20scorecard&style=flat-square)](https://securityscorecards.dev/viewer/?uri=github.com/Falzz1010/laravel-mcp-server)
11
+ [![Security Rating](https://img.shields.io/badge/Security-A+-brightgreen?style=flat-square)](SECURITY.md)
12
+ [![TypeScript](https://img.shields.io/badge/TypeScript-5.5-blue?logo=typescript&style=flat-square)](https://www.typescriptlang.org/)
13
+ [![Node.js](https://img.shields.io/badge/Node.js-18+-green?logo=node.js&style=flat-square)](https://nodejs.org/)
14
+ [![Laravel](https://img.shields.io/badge/Laravel-8+-red?logo=laravel&style=flat-square)](https://laravel.com/)
15
+ [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=flat-square)](https://opensource.org/licenses/MIT)
16
+ [![Security: 10 Layers](https://img.shields.io/badge/Security-10%20Layers-green?style=flat-square)](SECURITY.md)
17
+ [![SBOM](https://img.shields.io/badge/SBOM-Available-blue?style=flat-square)](sbom.json)
11
18
 
12
19
  </div>
13
20
 
14
21
  ---
15
22
 
23
+ ## ⚠️ Security Notice
24
+
25
+ This package **intentionally** requires system access for its core functionality (executing artisan commands, reading logs, etc.). All operations are protected by a [10-layer security system](SECURITY.md) including:
26
+ - Input sanitization & command validation
27
+ - Path traversal prevention
28
+ - Production environment blocking
29
+ - Rate limiting & audit logging
30
+ - No shell injection (uses `execFile` only)
31
+
32
+ **For local development only. Never use in production.**
33
+
34
+ ### 🔐 Security Monitoring
35
+
36
+ We maintain enterprise-grade security through:
37
+ - ✅ [CodeQL Analysis](https://github.com/Falzz1010/laravel-mcp-server/security/code-scanning) - Automated code security scanning
38
+ - ✅ [Dependabot](https://github.com/Falzz1010/laravel-mcp-server/security/dependabot) - Dependency vulnerability alerts
39
+ - ✅ [Security Tests](https://github.com/Falzz1010/laravel-mcp-server/actions/workflows/security.yml) - 19 security-focused tests
40
+ - 📋 [SBOM Available](SUPPLY_CHAIN_SECURITY.md) - Full software bill of materials
41
+ - 📊 [OpenSSF Scorecard](https://securityscorecards.dev/viewer/?uri=github.com/Falzz1010/laravel-mcp-server) - Best practice monitoring (weekly)
42
+
43
+ See [SUPPLY_CHAIN_SECURITY.md](SUPPLY_CHAIN_SECURITY.md) for complete security details.
44
+
45
+ ---
46
+
16
47
  ## 📖 Table of Contents
17
48
 
18
49
  - [What is Laravel MCP Server?](#-what-is-laravel-mcp-server)
@@ -169,11 +200,21 @@ Setiap kali `write_file` mengubah file yang sudah ada, server otomatis membuat b
169
200
  - **PHP** 8.0 atau lebih baru
170
201
  - **Laravel Project** (lokal di mesin kamu)
171
202
 
172
- ### Install Dependencies
203
+ ### Install via npm (Recommended)
173
204
 
174
205
  ```bash
175
- # Clone repository (jika dari Git)
176
- git clone https://github.com/your-username/laravel-mcp-server.git
206
+ # Install globally
207
+ npm install -g @falzz1010/laravel-mcp-server
208
+
209
+ # Verify installation
210
+ laravel-mcp --version
211
+ ```
212
+
213
+ ### Install from Source
214
+
215
+ ```bash
216
+ # Clone repository
217
+ git clone https://github.com/Falzz1010/laravel-mcp-server.git
177
218
  cd laravel-mcp-server
178
219
 
179
220
  # Install dependencies
@@ -190,7 +231,7 @@ npm run build
190
231
  npm test
191
232
 
192
233
  # Expected output:
193
- # ✓ All security tests passed (40 tests)
234
+ # ✓ All security tests passed (19 tests)
194
235
  ```
195
236
 
196
237
  ---
@@ -262,6 +303,24 @@ node build/index.js /path/to/your/laravel-project --dry-run
262
303
 
263
304
  Edit `claude_desktop_config.json` (biasanya di `%APPDATA%\Claude\` atau `~/.config/claude/`):
264
305
 
306
+ #### Using Global npm Package (Recommended)
307
+
308
+ ```json
309
+ {
310
+ "mcpServers": {
311
+ "laravel-dev": {
312
+ "command": "npx",
313
+ "args": [
314
+ "@falzz1010/laravel-mcp-server",
315
+ "E:/xampp/htdocs/my-laravel-app"
316
+ ]
317
+ }
318
+ }
319
+ }
320
+ ```
321
+
322
+ #### Using Local Installation
323
+
265
324
  ```json
266
325
  {
267
326
  "mcpServers": {
@@ -282,8 +341,27 @@ Edit `claude_desktop_config.json` (biasanya di `%APPDATA%\Claude\` atau `~/.conf
282
341
 
283
342
  ### VS Code / Cursor Configuration
284
343
 
344
+ #### Using npm Package
345
+
285
346
  Edit `.vscode/settings.json` atau Cursor settings:
286
347
 
348
+ ```json
349
+ {
350
+ "mcp.servers": {
351
+ "laravel": {
352
+ "command": "npx",
353
+ "args": [
354
+ "@falzz1010/laravel-mcp-server",
355
+ "${workspaceFolder}",
356
+ "--allow-write"
357
+ ]
358
+ }
359
+ }
360
+ }
361
+ ```
362
+
363
+ #### Using Local Installation
364
+
287
365
  ```json
288
366
  {
289
367
  "mcp.servers": {
package/SECURITY.md ADDED
@@ -0,0 +1,266 @@
1
+ # Security Policy
2
+
3
+ ## 🔒 Security Philosophy
4
+
5
+ Laravel MCP Server is designed with security as the **top priority**. This tool gives AI assistants controlled access to your Laravel projects, which requires extreme caution.
6
+
7
+ ### Design Principles
8
+
9
+ 1. **Defense in Depth** — 10 independent security layers
10
+ 2. **Fail Secure** — Reject by default, allow by whitelist
11
+ 3. **Least Privilege** — Minimal permissions by default
12
+ 4. **Full Auditability** — Every operation logged
13
+ 5. **Local Development Only** — Explicitly refuses production environments
14
+
15
+ ---
16
+
17
+ ## 🛡️ Security Features
18
+
19
+ ### Environment Protection
20
+ - **Refuses to start** if `APP_ENV=production`
21
+ - Warns if `APP_ENV=staging`
22
+ - Validates Laravel project structure before starting
23
+
24
+ ### Command Security
25
+ - **3-Tier Risk Classification**: READ_ONLY, CAUTIOUS, DANGEROUS
26
+ - **20+ permanently blocked commands** (e.g., `migrate:fresh`, `db:wipe`)
27
+ - **Input sanitization** blocks shell injection attempts
28
+ - **Dangerous flag blocking** (e.g., `--force`, `--seed`)
29
+ - **Rate limiting** prevents abuse (30 req/min, 500 req/hour)
30
+
31
+ ### File System Security
32
+ - **Path traversal prevention** — all paths validated
33
+ - **Write whitelist** — only safe directories allowed
34
+ - **Extension whitelist** — only safe file types
35
+ - **Auto-backup** before any file modification
36
+ - **Symlink protection** — prevents escaping project root
37
+ - **Size limits** — prevents DOS via large files
38
+
39
+ ### Code Execution Security
40
+ - **Tinker sandbox** — blocks 15+ dangerous PHP functions
41
+ - **Timeout enforcement** — 10 seconds for Tinker, 30s for artisan
42
+ - **No shell access** — uses `execFile`, never `exec`
43
+ - **Environment stripping** — removes sensitive env vars
44
+
45
+ ### Audit & Monitoring
46
+ - **Full audit log** — every operation logged to `.laravel-mcp-audit.jsonl`
47
+ - **SHA-256 hashing** — file changes tracked with hashes
48
+ - **Session tracking** — unique session IDs
49
+ - **Duration tracking** — execution time logged
50
+ - **Status tracking** — ALLOWED/BLOCKED/ERROR
51
+
52
+ ---
53
+
54
+ ## 🚨 Supported Versions
55
+
56
+ | Version | Supported |
57
+ | ------- | ------------------ |
58
+ | 1.0.x | :white_check_mark: |
59
+
60
+ ---
61
+
62
+ ## 🐛 Reporting a Vulnerability
63
+
64
+ We take security seriously. If you discover a security vulnerability:
65
+
66
+ ## 🚨 Reporting a Vulnerability
67
+
68
+ We take security seriously. If you discover a security vulnerability:
69
+
70
+ ### For Non-Critical Issues
71
+ 1. Open an issue on GitHub with the `security` label
72
+ 2. Include:
73
+ - Detailed description of the vulnerability
74
+ - Steps to reproduce
75
+ - Impact assessment
76
+ - Suggested fix (if you have one)
77
+
78
+ ### For Critical Issues
79
+ **DO NOT open a public issue.**
80
+
81
+ Instead:
82
+ 1. **Email:** Open a [private security advisory](https://github.com/Falzz1010/laravel-mcp-server/security/advisories/new) on GitHub
83
+ 2. Include:
84
+ - Detailed description
85
+ - Proof of concept (if safe to share)
86
+ - Your assessment of severity
87
+ - Suggested remediation
88
+ 3. **Wait for acknowledgment** before public disclosure
89
+ 4. **Coordinate disclosure timeline** with maintainers
90
+
91
+ ### What to Expect
92
+ - **Acknowledgment**: Within 48 hours
93
+ - **Initial Assessment**: Within 1 week
94
+ - **Fix Timeline**: Depends on severity
95
+ - Critical: Immediate priority
96
+ - High: Within 2 weeks
97
+ - Medium: Within 1 month
98
+ - Low: Next regular release
99
+
100
+ ### Security Hall of Fame
101
+ We appreciate security researchers who responsibly disclose vulnerabilities. Contributors will be acknowledged here (with permission):
102
+
103
+ <!-- List will be populated as issues are reported and fixed -->
104
+
105
+ ---
106
+
107
+ ## 🔐 Security Best Practices
108
+
109
+ ### For Users
110
+
111
+ #### 1. **Never Use in Production**
112
+ ```bash
113
+ # ❌ DANGEROUS - Don't do this
114
+ node build/index.js /var/www/production-app --allow-write
115
+
116
+ # ✅ SAFE - Use only locally
117
+ node build/index.js /home/dev/my-laravel-app --allow-write
118
+ ```
119
+
120
+ #### 2. **Use Least Privilege**
121
+ ```bash
122
+ # Start with read-only (safest)
123
+ node build/index.js /path/to/app
124
+
125
+ # Add write only if needed
126
+ node build/index.js /path/to/app --allow-write
127
+
128
+ # Add Tinker only if absolutely necessary
129
+ node build/index.js /path/to/app --allow-write --allow-tinker
130
+ ```
131
+
132
+ #### 3. **Review Audit Logs Regularly**
133
+ ```bash
134
+ # Check what AI has been doing
135
+ cat /path/to/laravel/.laravel-mcp-audit.jsonl | jq .
136
+
137
+ # Look for blocked commands
138
+ cat .laravel-mcp-audit.jsonl | jq 'select(.status=="BLOCKED")'
139
+
140
+ # Check file writes
141
+ cat .laravel-mcp-audit.jsonl | jq 'select(.tool=="write_file")'
142
+ ```
143
+
144
+ #### 4. **Monitor File Changes**
145
+ ```bash
146
+ # Review backups before accepting changes
147
+ ls -la /path/to/laravel/.laravel-mcp-backup/
148
+
149
+ # Use version control
150
+ git diff # Always review AI-made changes
151
+ ```
152
+
153
+ #### 5. **Use Dry-Run for Testing**
154
+ ```bash
155
+ # Preview what would happen without executing
156
+ node build/index.js /path/to/app --dry-run
157
+ ```
158
+
159
+ ### For Developers
160
+
161
+ #### 1. **Validate All Input**
162
+ Every input must be validated before use:
163
+ ```typescript
164
+ // ❌ DANGEROUS
165
+ const path = input.path;
166
+ fs.readFileSync(path);
167
+
168
+ // ✅ SAFE
169
+ const path = isPathSafe(input.path, config.laravelPath);
170
+ fs.readFileSync(path);
171
+ ```
172
+
173
+ #### 2. **Use Whitelists, Not Blacklists**
174
+ ```typescript
175
+ // ❌ DANGEROUS - Easy to bypass
176
+ if (!path.includes('etc')) { ... }
177
+
178
+ // ✅ SAFE - Explicit allow list
179
+ const ALLOWED_DIRS = ['app/', 'routes/', 'database/'];
180
+ if (ALLOWED_DIRS.some(dir => path.startsWith(dir))) { ... }
181
+ ```
182
+
183
+ #### 3. **Never Use `exec()` or `shell: true`**
184
+ ```typescript
185
+ // ❌ DANGEROUS - Shell injection possible
186
+ exec(`php artisan ${command}`);
187
+
188
+ // ✅ SAFE - No shell access
189
+ execFile('php', ['artisan', command]);
190
+ ```
191
+
192
+ #### 4. **Always Log Security Events**
193
+ ```typescript
194
+ logAudit({
195
+ tool: 'write_file',
196
+ tier: 'CAUTIOUS',
197
+ filePath: path,
198
+ fileHash: computeFileHash(content),
199
+ status: 'ALLOWED',
200
+ });
201
+ ```
202
+
203
+ ---
204
+
205
+ ## 📋 Security Checklist for New Features
206
+
207
+ Before merging new features, verify:
208
+
209
+ - [ ] All user input is validated
210
+ - [ ] Path traversal is prevented
211
+ - [ ] Shell injection is impossible
212
+ - [ ] Rate limiting is applied
213
+ - [ ] Audit logging is complete
214
+ - [ ] Tests cover security cases
215
+ - [ ] Documentation is updated
216
+ - [ ] No secrets in code/logs
217
+ - [ ] Error messages don't leak sensitive info
218
+ - [ ] Timeouts are enforced
219
+
220
+ ---
221
+
222
+ ## 🔍 Known Limitations
223
+
224
+ ### By Design
225
+ 1. **Local Development Only** — Not designed for production use
226
+ 2. **Single Project** — One server instance per Laravel project
227
+ 3. **Synchronous Execution** — Commands run sequentially
228
+ 4. **Limited Tinker** — Many PHP functions blocked for safety
229
+
230
+ ### Platform-Specific
231
+ 1. **Windows UNC Paths** — Additional validation may be needed
232
+ 2. **Symlinks** — Complex symlink scenarios may need extra testing
233
+ 3. **Permissions** — Depends on host OS file permissions
234
+
235
+ ### Mitigations
236
+ - Full audit trail helps detect issues
237
+ - Rate limiting prevents rapid exploitation
238
+ - Fail-secure defaults minimize risk
239
+ - Regular security reviews
240
+
241
+ ---
242
+
243
+ ## 📚 Security Resources
244
+
245
+ - [MCP Security Guide](https://modelcontextprotocol.io/docs/security)
246
+ - [OWASP Command Injection](https://owasp.org/www-community/attacks/Command_Injection)
247
+ - [OWASP Path Traversal](https://owasp.org/www-community/attacks/Path_Traversal)
248
+ - [Node.js Security Best Practices](https://nodejs.org/en/docs/guides/security/)
249
+
250
+ ---
251
+
252
+ ## 🤝 Security Acknowledgments
253
+
254
+ We appreciate security researchers who responsibly disclose vulnerabilities:
255
+
256
+ <!-- List will be populated as issues are reported and fixed -->
257
+
258
+ ---
259
+
260
+ ## 📞 Contact
261
+
262
+ For security concerns, contact project maintainers:
263
+ - GitHub: Open a security advisory
264
+ - Email: [See repository for contact info]
265
+
266
+ Thank you for helping keep Laravel MCP Server secure! 🔒
package/build/index.d.ts CHANGED
@@ -1,2 +1,3 @@
1
+ #!/usr/bin/env node
1
2
  export {};
2
3
  //# sourceMappingURL=index.d.ts.map
package/build/index.js CHANGED
@@ -1,3 +1,4 @@
1
+ #!/usr/bin/env node
1
2
  import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
2
3
  import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
3
4
  import { parseConfig } from "./utils/config.js";
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,QAAQ;AACR,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,sBAAsB;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC,0DAA0D;IAC1D,IAAI,CAAC;QACH,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC;QACH,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC/E,CAAC;IAED,6BAA6B;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,oBAAoB,EAAE,MAAM,CAAC,SAAS;QACtC,kBAAkB,EAAE,GAAG;QACvB,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,0BAA0B;IAC1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,oBAAoB;IACpB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEtC,kCAAkC;IAClC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvC,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,2BAA2B,CAAC,CAAC;QACpE,QAAQ,CAAC;YACP,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,UAAU,MAAM,EAAE;SAC3B,CAAC,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;AACzE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC3C,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,QAAQ;AACR,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,sBAAsB;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC,0DAA0D;IAC1D,IAAI,CAAC;QACH,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC;QACH,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC/E,CAAC;IAED,6BAA6B;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,oBAAoB,EAAE,MAAM,CAAC,SAAS;QACtC,kBAAkB,EAAE,GAAG;QACvB,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,0BAA0B;IAC1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,oBAAoB;IACpB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEtC,kCAAkC;IAClC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvC,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,2BAA2B,CAAC,CAAC;QACpE,QAAQ,CAAC;YACP,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,UAAU,MAAM,EAAE;SAC3B,CAAC,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;AACzE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC3C,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
@@ -107,10 +107,18 @@ test("Gate 5: Path Traversal & Symlink Escape Prevention", () => {
107
107
  fs.mkdirSync(appDir, { recursive: true });
108
108
  // Valid paths inside root
109
109
  assert.equal(isPathSafe("app/Models/User.php", tmpDir), path.resolve(tmpDir, "app/Models/User.php"));
110
- // Traversal attacks
110
+ // Traversal attacks - Unix style
111
111
  assert.throws(() => isPathSafe("../../../etc/passwd", tmpDir), /Security Error/);
112
- assert.throws(() => isPathSafe("..\\..\\windows\\system32", tmpDir), /Security Error/);
113
- assert.throws(() => isPathSafe("/etc/passwd", tmpDir), /Security Error/);
112
+ // Platform-specific absolute path test
113
+ if (process.platform === "win32") {
114
+ assert.throws(() => isPathSafe("..\\..\\windows\\system32", tmpDir), /Security Error/);
115
+ assert.throws(() => isPathSafe("C:\\Windows\\System32", tmpDir), /Security Error/);
116
+ }
117
+ else {
118
+ // On Unix, test with actual absolute paths
119
+ assert.throws(() => isPathSafe("/etc/hosts", tmpDir), /Security Error/);
120
+ assert.throws(() => isPathSafe("/usr/bin/env", tmpDir), /Security Error/);
121
+ }
114
122
  fs.rmSync(tmpDir, { recursive: true, force: true });
115
123
  });
116
124
  test("Gate 6: File Write Guard, Extension Whitelist & Auto-Backup System", async () => {
@@ -1 +1 @@
1
- {"version":3,"file":"full-security-audit.test.js","sourceRoot":"","sources":["../../src/tests/full-security-audit.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAEL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,EAClB,UAAU,EACV,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAgB,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAElE,+EAA+E;AAC/E,wEAAwE;AACxE,+EAA+E;AAE/E,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE1C,6CAA6C;IAC7C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAC9B,2CAA2C,CAC5C,CAAC;IAEF,+BAA+B;IAC/B,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAC9B,2CAA2C,CAC5C,CAAC;IAEF,+CAA+C;IAC/C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC/C,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpD,yBAAyB;IACzB,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,iBAAiB,GAAG;QACxB,eAAe;QACf,eAAe;QACf,kBAAkB;QAClB,iBAAiB;QACjB,SAAS;QACT,MAAM;QACN,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,cAAc;QACd,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,aAAa;QACb,kBAAkB;QAClB,cAAc;KACf,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CACV,eAAe,CAAC,GAAG,CAAC,EACpB,WAAW,EACX,YAAY,GAAG,mCAAmC,CACnD,CAAC;QACF,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CACV,KAAK,CAAC,OAAO,EACb,KAAK,EACL,YAAY,GAAG,+BAA+B,CAC/C,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACtF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,cAAc,GAAG;QACrB,YAAY;QACZ,gBAAgB;QAChB,+BAA+B;QAC/B,MAAM;QACN,WAAW;QACX,SAAS;QACT,qBAAqB;QACrB,wBAAwB;QACxB,eAAe;QACf,iBAAiB;QACjB,WAAW;QACX,qBAAqB;QACrB,+BAA+B;KAChC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,EAC7B,iBAAiB,EACjB,mBAAmB,OAAO,oCAAoC,CAC/D,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAEpE,iCAAiC;IACjC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,sBAAsB;IACtB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAEpF,+BAA+B;IAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE7E,wBAAwB;IACxB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACzF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAElF,yBAAyB;IACzB,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,0BAA0B;IAC1B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAErG,oBAAoB;IACpB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACjF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,2BAA2B,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAEzE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/D,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,oCAAoC;IACpC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,4CAA4C,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAElE,gCAAgC;IAChC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhE,wBAAwB;IACxB,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE/D,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,0BAA0B,EAAE,MAAM,CAAC,CAAC;IAE5F,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAE7E,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,gBAAgB;IAChB,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,4CAA4C,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE1F,oCAAoC;IACpC,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC;IAE1D,6BAA6B;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE5E,gCAAgC;IAChC,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;QAC9B,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,GAAG;QACvB,UAAU,EAAE,CAAC;KACd,CAAC,CAAC;IAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC5F,OAAO,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,yCAAyC,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAE1C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAEvD,QAAQ,CAAC;QACP,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;IAEH,QAAQ,CAAC;QACP,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,qBAAqB;KAC9B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAChE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,wCAAwC,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,0CAA0C,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEvC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,MAAM;QACN,UAAU;QACV,kBAAkB;QAClB,WAAW;QACX,eAAe;QACf,cAAc;QACd,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC"}
1
+ {"version":3,"file":"full-security-audit.test.js","sourceRoot":"","sources":["../../src/tests/full-security-audit.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAEL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,EAClB,UAAU,EACV,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAgB,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAElE,+EAA+E;AAC/E,wEAAwE;AACxE,+EAA+E;AAE/E,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE1C,6CAA6C;IAC7C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAC9B,2CAA2C,CAC5C,CAAC;IAEF,+BAA+B;IAC/B,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAC9B,2CAA2C,CAC5C,CAAC;IAEF,+CAA+C;IAC/C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC/C,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpD,yBAAyB;IACzB,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,iBAAiB,GAAG;QACxB,eAAe;QACf,eAAe;QACf,kBAAkB;QAClB,iBAAiB;QACjB,SAAS;QACT,MAAM;QACN,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,cAAc;QACd,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,aAAa;QACb,kBAAkB;QAClB,cAAc;KACf,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CACV,eAAe,CAAC,GAAG,CAAC,EACpB,WAAW,EACX,YAAY,GAAG,mCAAmC,CACnD,CAAC;QACF,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CACV,KAAK,CAAC,OAAO,EACb,KAAK,EACL,YAAY,GAAG,+BAA+B,CAC/C,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACtF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,cAAc,GAAG;QACrB,YAAY;QACZ,gBAAgB;QAChB,+BAA+B;QAC/B,MAAM;QACN,WAAW;QACX,SAAS;QACT,qBAAqB;QACrB,wBAAwB;QACxB,eAAe;QACf,iBAAiB;QACjB,WAAW;QACX,qBAAqB;QACrB,+BAA+B;KAChC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,EAC7B,iBAAiB,EACjB,mBAAmB,OAAO,oCAAoC,CAC/D,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAEpE,iCAAiC;IACjC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,sBAAsB;IACtB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAEpF,+BAA+B;IAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE7E,wBAAwB;IACxB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACzF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAElF,yBAAyB;IACzB,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,0BAA0B;IAC1B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAErG,iCAAiC;IACjC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAEjF,uCAAuC;IACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,2BAA2B,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,uBAAuB,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,2CAA2C;QAC3C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IAED,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/D,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,oCAAoC;IACpC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,4CAA4C,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAElE,gCAAgC;IAChC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhE,wBAAwB;IACxB,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE/D,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,0BAA0B,EAAE,MAAM,CAAC,CAAC;IAE5F,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAE7E,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,gBAAgB;IAChB,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,4CAA4C,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE1F,oCAAoC;IACpC,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC;IAE1D,6BAA6B;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE5E,gCAAgC;IAChC,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;QAC9B,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,GAAG;QACvB,UAAU,EAAE,CAAC;KACd,CAAC,CAAC;IAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC5F,OAAO,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,yCAAyC,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAE1C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAEvD,QAAQ,CAAC;QACP,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;IAEH,QAAQ,CAAC;QACP,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,qBAAqB;KAC9B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAChE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,wCAAwC,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,0CAA0C,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEvC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,MAAM;QACN,UAAU;QACV,kBAAkB;QAClB,WAAW;QACX,eAAe;QACf,cAAc;QACd,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@falzz1010/laravel-mcp-server",
3
- "version": "1.0.0",
3
+ "version": "1.0.3",
4
4
  "description": "Secure MCP Server for Laravel development — AI-powered artisan commands, log inspection, and code management with 10-layer security",
5
5
  "publishConfig": {
6
6
  "access": "public"
@@ -19,9 +19,13 @@
19
19
  ],
20
20
  "author": "Laravel MCP Server Contributors",
21
21
  "license": "MIT",
22
+ "funding": {
23
+ "type": "github",
24
+ "url": "https://github.com/Falzz1010/laravel-mcp-server"
25
+ },
22
26
  "repository": {
23
27
  "type": "git",
24
- "url": "https://github.com/Falzz1010/laravel-mcp-server.git"
28
+ "url": "git+https://github.com/Falzz1010/laravel-mcp-server.git"
25
29
  },
26
30
  "bugs": {
27
31
  "url": "https://github.com/Falzz1010/laravel-mcp-server/issues"
@@ -36,18 +40,22 @@
36
40
  "build/**/*",
37
41
  "README.md",
38
42
  "LICENSE",
39
- "CHANGELOG.md"
43
+ "CHANGELOG.md",
44
+ "SECURITY.md"
40
45
  ],
41
46
  "engines": {
42
- "node": ">=18.0.0"
47
+ "node": ">=18.0.0 <25"
43
48
  },
44
49
  "scripts": {
45
50
  "dev": "tsx watch src/index.ts",
46
51
  "build": "tsc",
47
52
  "start": "node build/index.js",
48
53
  "test": "npm run build && node --test build/tests/security.test.js build/tests/full-security-audit.test.js",
54
+ "test:security": "npm audit && npm run test",
49
55
  "inspect": "npx @modelcontextprotocol/inspector node build/index.js",
50
- "prepublishOnly": "npm run build"
56
+ "prepublishOnly": "npm run build",
57
+ "publish:provenance": "npm publish --provenance --access public",
58
+ "verify": "npm audit signatures"
51
59
  },
52
60
  "dependencies": {
53
61
  "@modelcontextprotocol/sdk": "^1.30.0",