@falzz1010/laravel-mcp-server 1.0.0

package/build/tests/security.test.js

@@ -0,0 +1,124 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { classifyCommand, isCommandAllowed, sanitizeArgs, validateDangerousFlags, sanitizeTinkerCode, isPathSafe, isWriteAllowed, maskEnvValues, } from "../utils/security.js";
+import { RateLimiter } from "../utils/rate-limiter.js";
+import { parseConfig } from "../utils/config.js";
+test("Command Classification & Safelist", () => {
+    assert.equal(classifyCommand("about"), "READ_ONLY");
+    assert.equal(classifyCommand("route:list"), "READ_ONLY");
+    assert.equal(classifyCommand("make:controller"), "CAUTIOUS");
+    assert.equal(classifyCommand("migrate"), "CAUTIOUS");
+    assert.equal(classifyCommand("migrate:fresh"), "DANGEROUS");
+    assert.equal(classifyCommand("db:wipe"), "DANGEROUS");
+    assert.equal(classifyCommand("down"), "DANGEROUS");
+    assert.equal(classifyCommand("unknown:command"), "DANGEROUS");
+    assert.equal(isCommandAllowed("about").allowed, true);
+    assert.equal(isCommandAllowed("migrate:fresh").allowed, false);
+    assert.equal(isCommandAllowed("down").allowed, false);
+});
+test("Input Sanitization & Injections", () => {
+    assert.deepEqual(sanitizeArgs(["ProductController", "--resource"]), [
+        "ProductController",
+        "--resource",
+    ]);
+    assert.throws(() => sanitizeArgs(["; rm -rf /"]), /Security Error/);
+    assert.throws(() => sanitizeArgs(["&& cat /etc/passwd"]), /Security Error/);
+    assert.throws(() => sanitizeArgs(["$(whoami)"]), /Security Error/);
+    assert.throws(() => sanitizeArgs(["`id`"]), /Security Error/);
+    assert.throws(() => sanitizeArgs(["../etc/passwd"]), /Security Error/);
+    assert.throws(() => sanitizeArgs(["arg > out.txt"]), /Security Error/);
+    // Long arg check
+    const longArg = "a".repeat(300);
+    assert.throws(() => sanitizeArgs([longArg]), /exceeds 255/);
+    // Too many args check
+    const manyArgs = Array(25).fill("arg");
+    assert.throws(() => sanitizeArgs(manyArgs), /Too many arguments/);
+});
+test("Dangerous Flags Check", () => {
+    assert.throws(() => validateDangerousFlags("migrate", ["--force"]), /--force/);
+    assert.throws(() => validateDangerousFlags("migrate", ["--seed"]), /--seed/);
+    assert.throws(() => validateDangerousFlags("db:seed", ["--drop-tables"]), /prohibited/i);
+    // Valid flags
+    assert.doesNotThrow(() => validateDangerousFlags("migrate", ["--pretend"]));
+});
+test("Tinker Code Sanitization", () => {
+    assert.equal(sanitizeTinkerCode("User::count();").safe, true);
+    assert.equal(sanitizeTinkerCode("config('app.name');").safe, true);
+    const check1 = sanitizeTinkerCode("exec('whoami');");
+    assert.equal(check1.safe, false);
+    assert.ok(check1.blocked.includes("exec"));
+    const check2 = sanitizeTinkerCode("DB::statement('DROP TABLE users');");
+    assert.equal(check2.safe, false);
+    assert.ok(check2.blocked.includes("DB::statement"));
+    const check3 = sanitizeTinkerCode("unlink('/tmp/file');");
+    assert.equal(check3.safe, false);
+    assert.ok(check3.blocked.includes("unlink"));
+});
+test("Path Security", () => {
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "mcp-test-"));
+    const appDir = path.join(tmpDir, "app");
+    fs.mkdirSync(appDir, { recursive: true });
+    assert.equal(isPathSafe("app/Models/User.php", tmpDir), path.resolve(tmpDir, "app/Models/User.php"));
+    assert.throws(() => isPathSafe("../../etc/passwd", tmpDir), /Security Error/);
+    // Clean up
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+test("Write Permission Check", () => {
+    assert.equal(isWriteAllowed("app/Http/Controllers/TestController.php").allowed, true);
+    assert.equal(isWriteAllowed("routes/api.php").allowed, true);
+    assert.equal(isWriteAllowed("database/migrations/2026_create_test.php").allowed, true);
+    assert.equal(isWriteAllowed(".env").allowed, false);
+    assert.equal(isWriteAllowed("vendor/autoload.php").allowed, false);
+    assert.equal(isWriteAllowed("artisan").allowed, false);
+    assert.equal(isWriteAllowed("app/test.sh").allowed, false);
+    assert.equal(isWriteAllowed("public/index.php").allowed, false);
+});
+test("Environment Masking", () => {
+    const rawEnv = `
+APP_NAME=Laravel
+DB_PASSWORD=secret123
+API_KEY=xyz_789
+APP_URL=http://localhost
+`;
+    const masked = maskEnvValues(rawEnv);
+    assert.ok(masked.includes("APP_NAME=Laravel"));
+    assert.ok(masked.includes("DB_PASSWORD=***MASKED***"));
+    assert.ok(masked.includes("API_KEY=***MASKED***"));
+    assert.ok(masked.includes("APP_URL=http://localhost"));
+});
+test("Rate Limiter", () => {
+    const limiter = new RateLimiter({
+        maxRequestsPerMinute: 3,
+        maxRequestsPerHour: 10,
+        cooldownMs: 0, // Disable cooldown for fast test
+    });
+    assert.equal(limiter.checkRateLimit().allowed, true);
+    limiter.recordRequest();
+    assert.equal(limiter.checkRateLimit().allowed, true);
+    limiter.recordRequest();
+    assert.equal(limiter.checkRateLimit().allowed, true);
+    limiter.recordRequest();
+    // 4th request should be blocked
+    assert.equal(limiter.checkRateLimit().allowed, false);
+});
+test("CLI Config Parsing", () => {
+    const config = parseConfig([
+        "node",
+        "index.js",
+        "/path/to/laravel",
+        "--allow-write",
+        "--allow-tinker",
+        "--dry-run",
+        "--timeout",
+        "15000",
+    ]);
+    assert.equal(config.laravelPath, path.resolve("/path/to/laravel"));
+    assert.equal(config.allowWrite, true);
+    assert.equal(config.allowTinker, true);
+    assert.equal(config.dryRun, true);
+    assert.equal(config.commandTimeout, 15000);
+});
+//# sourceMappingURL=security.test.js.map

package/build/tests/security.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.js","sourceRoot":"","sources":["../../src/tests/security.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;IAC7C,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,CAAC;IAE9D,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC3C,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,EAAE;QAClE,mBAAmB;QACnB,YAAY;KACb,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC5E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC9D,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAEvE,iBAAiB;IACjB,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAE5D,sBAAsB;IACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACjC,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,EACpD,SAAS,CACV,CAAC;IACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,EACnD,QAAQ,CACT,CAAC;IACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC,EAC1D,aAAa,CACd,CAAC;IAEF,cAAc;IACd,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CACvB,sBAAsB,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACpC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEnE,MAAM,MAAM,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;IAEpD,MAAM,MAAM,GAAG,kBAAkB,CAAC,sBAAsB,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE;IACzB,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,qBAAqB,EAAE,MAAM,CAAC,EACzC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAC5C,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAE9E,WAAW;IACX,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE;IAClC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,yCAAyC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,0CAA0C,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEvF,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE;IAC/B,MAAM,MAAM,GAAG;;;;;CAKhB,CAAC;IACA,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE;IACxB,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;QAC9B,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,EAAE;QACtB,UAAU,EAAE,CAAC,EAAE,iCAAiC;KACjD,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,aAAa,EAAE,CAAC;IAExB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,aAAa,EAAE,CAAC;IAExB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,aAAa,EAAE,CAAC;IAExB,gCAAgC;IAChC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAC9B,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,MAAM;QACN,UAAU;QACV,kBAAkB;QAClB,eAAe;QACf,gBAAgB;QAChB,WAAW;QACX,WAAW;QACX,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC"}

package/build/tools/list-routes.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+export declare function registerListRoutesTool(server: McpServer, config: ServerConfig): void;
+//# sourceMappingURL=list-routes.d.ts.map

package/build/tools/list-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-routes.d.ts","sourceRoot":"","sources":["../../src/tools/list-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CA4EpF"}

package/build/tools/list-routes.js

@@ -0,0 +1,68 @@
+import { z } from "zod";
+import { runArtisan } from "../utils/process.js";
+import { logAudit } from "../utils/audit.js";
+export function registerListRoutesTool(server, config) {
+    server.registerTool("list_routes", {
+        title: "List Laravel Routes",
+        description: "Fetches defined application routes using 'php artisan route:list --json' with optional method/path filtering.",
+        inputSchema: z.object({
+            method: z
+                .string()
+                .optional()
+                .describe("Filter routes by HTTP method (e.g. 'GET', 'POST', 'PUT', 'DELETE')"),
+            path: z
+                .string()
+                .optional()
+                .describe("Filter routes by URI path pattern (e.g. 'api/', 'users')"),
+        }),
+    }, async ({ method, path: pathPattern }) => {
+        const result = await runArtisan("route:list", ["--json"], {
+            laravelPath: config.laravelPath,
+            phpBinary: config.phpBinary,
+            timeoutMs: config.commandTimeout,
+        });
+        if (result.exitCode !== 0) {
+            logAudit({
+                tool: "list_routes",
+                tier: "READ_ONLY",
+                status: "ERROR",
+                reason: result.stderr,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[ERROR] Failed to fetch route list: ${result.stderr}` }],
+            };
+        }
+        try {
+            let routes = JSON.parse(result.stdout);
+            if (method) {
+                const upperMethod = method.toUpperCase();
+                routes = routes.filter((r) => r.method ? r.method.toUpperCase().includes(upperMethod) : false);
+            }
+            if (pathPattern) {
+                const lowerPattern = pathPattern.toLowerCase();
+                routes = routes.filter((r) => r.uri ? r.uri.toLowerCase().includes(lowerPattern) : false);
+            }
+            logAudit({
+                tool: "list_routes",
+                tier: "READ_ONLY",
+                outputSize: JSON.stringify(routes).length,
+                status: "ALLOWED",
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify(routes, null, 2),
+                    },
+                ],
+            };
+        }
+        catch {
+            return {
+                content: [{ type: "text", text: result.stdout }],
+            };
+        }
+    });
+}
+//# sourceMappingURL=list-routes.js.map

package/build/tools/list-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-routes.js","sourceRoot":"","sources":["../../src/tools/list-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,sBAAsB,CAAC,MAAiB,EAAE,MAAoB;IAC5E,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,+GAA+G;QAC5H,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oEAAoE,CAAC;YACjF,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,0DAA0D,CAAC;SACxE,CAAC;KACH,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE;YACxD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,cAAc;SACjC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;aAC1F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAEvC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBACzC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAChC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAChE,CAAC;YACJ,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;gBAC/C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAChC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAC3D,CAAC;YACJ,CAAC;YAED,QAAQ,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,WAAW;gBACjB,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM;gBACzC,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBACtC;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;aACjD,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tools/read-env.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+export declare function registerReadEnvTool(server: McpServer, config: ServerConfig): void;
+//# sourceMappingURL=read-env.d.ts.map

package/build/tools/read-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-env.d.ts","sourceRoot":"","sources":["../../src/tools/read-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAmDjF"}

package/build/tools/read-env.js

@@ -0,0 +1,51 @@
+import { z } from "zod";
+import path from "node:path";
+import { readFileContent } from "../utils/file.js";
+import { maskEnvValues } from "../utils/security.js";
+import { logAudit } from "../utils/audit.js";
+export function registerReadEnvTool(server, config) {
+    server.registerTool("read_env", {
+        title: "Read Laravel .env Configuration",
+        description: "Reads the project .env file. Sensitive credentials (passwords, keys, secrets) are masked by default.",
+        inputSchema: z.object({
+            show_values: z
+                .boolean()
+                .optional()
+                .default(false)
+                .describe("If true, shows unmasked sensitive values (use with caution)"),
+        }),
+    }, async ({ show_values = false }) => {
+        const envPath = path.join(config.laravelPath, ".env");
+        try {
+            const rawContent = await readFileContent(envPath);
+            const finalContent = show_values ? rawContent : maskEnvValues(rawContent);
+            logAudit({
+                tool: "read_env",
+                tier: "READ_ONLY",
+                filePath: envPath,
+                status: "ALLOWED",
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: finalContent,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            logAudit({
+                tool: "read_env",
+                tier: "READ_ONLY",
+                status: "ERROR",
+                reason: err.message,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[ERROR READING .ENV] ${err.message}` }],
+            };
+        }
+    });
+}
+//# sourceMappingURL=read-env.js.map

package/build/tools/read-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-env.js","sourceRoot":"","sources":["../../src/tools/read-env.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAoB;IACzE,MAAM,CAAC,YAAY,CACjB,UAAU,EACV;QACE,KAAK,EAAE,iCAAiC;QACxC,WAAW,EACT,sGAAsG;QACxG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,CAAC;iBACX,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,OAAO,CAAC,KAAK,CAAC;iBACd,QAAQ,CAAC,6DAA6D,CAAC;SAC3E,CAAC;KACH,EACD,KAAK,EAAE,EAAE,WAAW,GAAG,KAAK,EAAE,EAAE,EAAE;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;YAE1E,QAAQ,CAAC;gBACP,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,YAAY;qBACnB;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC;gBACP,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;aACzE,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tools/read-file.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+export declare function registerReadFileTool(server: McpServer, config: ServerConfig): void;
+//# sourceMappingURL=read-file.d.ts.map

package/build/tools/read-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-file.d.ts","sourceRoot":"","sources":["../../src/tools/read-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CA6DlF"}

package/build/tools/read-file.js

@@ -0,0 +1,60 @@
+import { z } from "zod";
+import { isPathSafe } from "../utils/security.js";
+import { readFileContent } from "../utils/file.js";
+import { logAudit } from "../utils/audit.js";
+export function registerReadFileTool(server, config) {
+    server.registerTool("read_file", {
+        title: "Read Laravel Source File",
+        description: "Reads content of a source file within the Laravel project with path traversal protection.",
+        inputSchema: z.object({
+            path: z
+                .string()
+                .describe("Relative path to file from project root (e.g. 'app/Models/User.php', 'routes/web.php')"),
+        }),
+    }, async ({ path: relPath }) => {
+        try {
+            if (relPath.includes(".env")) {
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: "text",
+                            text: "[SECURITY BLOCK] Use 'read_env' tool to read .env files with credential masking.",
+                        },
+                    ],
+                };
+            }
+            const safePath = isPathSafe(relPath, config.laravelPath);
+            const content = await readFileContent(safePath);
+            logAudit({
+                tool: "read_file",
+                tier: "READ_ONLY",
+                filePath: relPath,
+                outputSize: content.length,
+                status: "ALLOWED",
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: content,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            logAudit({
+                tool: "read_file",
+                tier: "READ_ONLY",
+                filePath: relPath,
+                status: "BLOCKED",
+                reason: err.message,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[SECURITY/FILE ERROR] ${err.message}` }],
+            };
+        }
+    });
+}
+//# sourceMappingURL=read-file.js.map

package/build/tools/read-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-file.js","sourceRoot":"","sources":["../../src/tools/read-file.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAoB;IAC1E,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,2FAA2F;QACxG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,wFAAwF,CAAC;SACtG,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,kFAAkF;yBACzF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;YAEhD,QAAQ,CAAC;gBACP,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,OAAO;qBACd;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC;gBACP,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;aAC1E,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tools/read-logs.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+export declare function registerReadLogsTool(server: McpServer, config: ServerConfig): void;
+//# sourceMappingURL=read-logs.d.ts.map

package/build/tools/read-logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-logs.d.ts","sourceRoot":"","sources":["../../src/tools/read-logs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CA+DlF"}

package/build/tools/read-logs.js

@@ -0,0 +1,60 @@
+import { z } from "zod";
+import { findLogFile, readLastLines } from "../utils/file.js";
+import { logAudit } from "../utils/audit.js";
+export function registerReadLogsTool(server, config) {
+    server.registerTool("read_logs", {
+        title: "Read Laravel Log File",
+        description: "Reads recent log entries from storage/logs/laravel.log or daily log file with optional line filtering.",
+        inputSchema: z.object({
+            lines: z
+                .number()
+                .optional()
+                .default(100)
+                .describe("Number of recent lines to read (default: 100, max: 500)"),
+            filter: z
+                .string()
+                .optional()
+                .describe("Optional keyword filter (e.g. 'ERROR', 'CRITICAL', 'Exception')"),
+        }),
+    }, async ({ lines = 100, filter }) => {
+        try {
+            const logFile = await findLogFile(config.laravelPath);
+            let content = await readLastLines(logFile, lines);
+            if (filter) {
+                const filterLower = filter.toLowerCase();
+                content = content
+                    .split("\n")
+                    .filter((l) => l.toLowerCase().includes(filterLower))
+                    .join("\n");
+            }
+            logAudit({
+                tool: "read_logs",
+                tier: "READ_ONLY",
+                filePath: logFile,
+                outputSize: content.length,
+                status: "ALLOWED",
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: content || `(No log lines matched filter '${filter}')`,
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            logAudit({
+                tool: "read_logs",
+                tier: "READ_ONLY",
+                status: "ERROR",
+                reason: err.message,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[ERROR READING LOGS] ${err.message}` }],
+            };
+        }
+    });
+}
+//# sourceMappingURL=read-logs.js.map

package/build/tools/read-logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-logs.js","sourceRoot":"","sources":["../../src/tools/read-logs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAoB;IAC1E,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,wGAAwG;QAC1G,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,CAAC,GAAG,CAAC;iBACZ,QAAQ,CAAC,yDAAyD,CAAC;YACtE,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,iEAAiE,CAAC;SAC/E,CAAC;KACH,EACD,KAAK,EAAE,EAAE,KAAK,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAElD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBACzC,OAAO,GAAG,OAAO;qBACd,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;qBACpD,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;YAED,QAAQ,CAAC;gBACP,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,OAAO,IAAI,iCAAiC,MAAM,IAAI;qBAC7D;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC;gBACP,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;aACzE,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tools/run-artisan.d.ts

@@ -0,0 +1,5 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+import { RateLimiter } from "../utils/rate-limiter.js";
+export declare function registerRunArtisanTool(server: McpServer, config: ServerConfig, rateLimiter: RateLimiter): void;
+//# sourceMappingURL=run-artisan.d.ts.map

package/build/tools/run-artisan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-artisan.d.ts","sourceRoot":"","sources":["../../src/tools/run-artisan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQlD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,YAAY,EACpB,WAAW,EAAE,WAAW,GACvB,IAAI,CAwIN"}

package/build/tools/run-artisan.js

@@ -0,0 +1,130 @@
+import { z } from "zod";
+import { isCommandAllowed, sanitizeArgs, validateDangerousFlags, } from "../utils/security.js";
+import { runArtisan } from "../utils/process.js";
+import { logAudit } from "../utils/audit.js";
+export function registerRunArtisanTool(server, config, rateLimiter) {
+    server.registerTool("run_artisan", {
+        title: "Run Laravel Artisan Command",
+        description: "Executes safe php artisan commands in the target Laravel project. Destructive commands (migrate:fresh, db:wipe, down) are permanently blocked.",
+        inputSchema: z.object({
+            command: z
+                .string()
+                .describe("The artisan command to run (e.g. 'make:controller', 'route:list', 'migrate')"),
+            args: z
+                .array(z.string())
+                .optional()
+                .describe("Additional command arguments (e.g. ['ProductController', '--resource'])"),
+        }),
+    }, async ({ command, args = [] }) => {
+        // Step 1: Check rate limiter
+        const rateCheck = rateLimiter.checkRateLimit();
+        if (!rateCheck.allowed) {
+            logAudit({
+                tool: "run_artisan",
+                tier: "UNKNOWN",
+                command,
+                args,
+                status: "BLOCKED",
+                reason: rateCheck.reason,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[RATE LIMIT BLOCKED] ${rateCheck.reason}` }],
+            };
+        }
+        // Step 2: Check command security classification
+        const check = isCommandAllowed(command);
+        if (!check.allowed) {
+            logAudit({
+                tool: "run_artisan",
+                tier: check.tier,
+                command,
+                args,
+                status: "BLOCKED",
+                reason: check.reason,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[SECURITY BLOCK] ${check.reason}` }],
+            };
+        }
+        // Step 3: Sanitize args & check dangerous flags
+        let cleanArgs = [];
+        try {
+            cleanArgs = sanitizeArgs(args);
+            validateDangerousFlags(command, cleanArgs);
+        }
+        catch (err) {
+            logAudit({
+                tool: "run_artisan",
+                tier: check.tier,
+                command,
+                args,
+                status: "BLOCKED",
+                reason: err.message,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[SECURITY BLOCK] ${err.message}` }],
+            };
+        }
+        // Record rate limit request for non-read-only
+        if (check.tier !== "READ_ONLY") {
+            rateLimiter.recordRequest();
+        }
+        // Step 4: Dry-run check
+        if (config.dryRun) {
+            logAudit({
+                tool: "run_artisan",
+                tier: check.tier,
+                command,
+                args: cleanArgs,
+                status: "ALLOWED",
+                reason: "DRY-RUN MODE",
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `[DRY-RUN PREVIEW] Would execute: php artisan ${command} ${cleanArgs.join(" ")}`,
+                    },
+                ],
+            };
+        }
+        // Step 5: Execute via execFile
+        const result = await runArtisan(command, cleanArgs, {
+            laravelPath: config.laravelPath,
+            phpBinary: config.phpBinary,
+            timeoutMs: config.commandTimeout,
+        });
+        // Step 6: Log audit
+        logAudit({
+            tool: "run_artisan",
+            tier: check.tier,
+            command,
+            args: cleanArgs,
+            exitCode: result.exitCode,
+            outputSize: result.stdout.length + result.stderr.length,
+            status: result.exitCode === 0 ? "ALLOWED" : "ERROR",
+            duration: result.duration,
+            reason: result.killed ? "Execution timed out" : undefined,
+        });
+        let output = "";
+        if (result.stdout) {
+            output += result.stdout;
+        }
+        if (result.stderr) {
+            if (output)
+                output += "\n--- STDERR ---\n";
+            output += result.stderr;
+        }
+        if (!output) {
+            output = "(Command executed successfully with no output)";
+        }
+        return {
+            isError: result.exitCode !== 0,
+            content: [{ type: "text", text: output }],
+        };
+    });
+}
+//# sourceMappingURL=run-artisan.js.map

package/build/tools/run-artisan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-artisan.js","sourceRoot":"","sources":["../../src/tools/run-artisan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7C,MAAM,UAAU,sBAAsB,CACpC,MAAiB,EACjB,MAAoB,EACpB,WAAwB;IAExB,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,gJAAgJ;QAClJ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CAAC,8EAA8E,CAAC;YAC3F,IAAI,EAAE,CAAC;iBACJ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;SACvF,CAAC;KACH,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE;QAC/B,6BAA6B;QAC7B,MAAM,SAAS,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACvB,QAAQ,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,SAAS;gBACf,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;aAC9E,CAAC;QACJ,CAAC;QAED,gDAAgD;QAChD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,QAAQ,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;aACtE,CAAC;QACJ,CAAC;QAED,gDAAgD;QAChD,IAAI,SAAS,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAC/B,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;aACrE,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,WAAW,CAAC,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,wBAAwB;QACxB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,QAAQ,CAAC;gBACP,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO;gBACP,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gDAAgD,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;qBACvF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE;YAClD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,cAAc;SACjC,CAAC,CAAC;QAEH,oBAAoB;QACpB,QAAQ,CAAC;YACP,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO;YACP,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM;YACvD,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAC1B,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,MAAM;gBAAE,MAAM,IAAI,oBAAoB,CAAC;YAC3C,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,gDAAgD,CAAC;QAC5D,CAAC;QAED,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;YAC9B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tools/run-tinker.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+export declare function registerRunTinkerTool(server: McpServer, config: ServerConfig): void;
+//# sourceMappingURL=run-tinker.d.ts.map

package/build/tools/run-tinker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-tinker.d.ts","sourceRoot":"","sources":["../../src/tools/run-tinker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAgFnF"}