@falzz1010/laravel-mcp-server 1.0.0

package/build/tools/run-tinker.js

@@ -0,0 +1,75 @@
+import { z } from "zod";
+import { sanitizeTinkerCode } from "../utils/security.js";
+import { runArtisan } from "../utils/process.js";
+import { logAudit } from "../utils/audit.js";
+export function registerRunTinkerTool(server, config) {
+    if (!config.allowTinker) {
+        return;
+    }
+    server.registerTool("run_tinker", {
+        title: "Run Laravel Tinker PHP Code (Opt-In)",
+        description: "Executes a PHP snippet in Laravel Tinker context with strict security filtering.",
+        inputSchema: z.object({
+            code: z
+                .string()
+                .describe("PHP code snippet to execute (e.g. 'User::count();', 'config(\"app.name\");')"),
+        }),
+    }, async ({ code }) => {
+        // 1. Sanitize code
+        const check = sanitizeTinkerCode(code);
+        if (!check.safe) {
+            logAudit({
+                tool: "run_tinker",
+                tier: "DANGEROUS",
+                status: "BLOCKED",
+                reason: `Blocked functions: ${check.blocked.join(", ")}`,
+            });
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: "text",
+                        text: `[SECURITY BLOCK] Prohibited PHP functions/keywords detected: ${check.blocked.join(", ")}`,
+                    },
+                ],
+            };
+        }
+        // Dry-run check
+        if (config.dryRun) {
+            logAudit({
+                tool: "run_tinker",
+                tier: "CAUTIOUS",
+                status: "ALLOWED",
+                reason: "DRY-RUN MODE",
+            });
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `[DRY-RUN PREVIEW] Would execute in tinker:\n${code}`,
+                    },
+                ],
+            };
+        }
+        // 2. Execute code via artisan tinker
+        // Note: Passing code via execute
+        const result = await runArtisan("tinker", ["--execute", code], {
+            laravelPath: config.laravelPath,
+            phpBinary: config.phpBinary,
+            timeoutMs: Math.min(config.commandTimeout, 10000), // Max 10s for tinker
+        });
+        logAudit({
+            tool: "run_tinker",
+            tier: "CAUTIOUS",
+            exitCode: result.exitCode,
+            outputSize: result.stdout.length,
+            status: result.exitCode === 0 ? "ALLOWED" : "ERROR",
+            duration: result.duration,
+        });
+        return {
+            isError: result.exitCode !== 0,
+            content: [{ type: "text", text: result.stdout || result.stderr || "(No output)" }],
+        };
+    });
+}
+//# sourceMappingURL=run-tinker.js.map

package/build/tools/run-tinker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-tinker.js","sourceRoot":"","sources":["../../src/tools/run-tinker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,MAAoB;IAC3E,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,kFAAkF;QACpF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,8EAA8E,CAAC;SAC5F,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,mBAAmB;QACnB,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,QAAQ,CAAC;gBACP,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,sBAAsB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACzD,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,gEAAgE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACjG;iBACF;aACF,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,QAAQ,CAAC;gBACP,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,cAAc;aACvB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,+CAA+C,IAAI,EAAE;qBAC5D;iBACF;aACF,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,iCAAiC;QACjC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE;YAC7D,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,qBAAqB;SACzE,CAAC,CAAC;QAEH,QAAQ,CAAC;YACP,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;YAChC,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;YAC9B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;SACnF,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tools/write-file.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ServerConfig } from "../utils/config.js";
+export declare function registerWriteFileTool(server: McpServer, config: ServerConfig): void;
+//# sourceMappingURL=write-file.d.ts.map

package/build/tools/write-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-file.d.ts","sourceRoot":"","sources":["../../src/tools/write-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CA8GnF"}

package/build/tools/write-file.js

@@ -0,0 +1,103 @@
+import { z } from "zod";
+import { isPathSafe, isWriteAllowed, computeFileHash } from "../utils/security.js";
+import { writeFileContent } from "../utils/file.js";
+import { logAudit } from "../utils/audit.js";
+export function registerWriteFileTool(server, config) {
+    if (!config.allowWrite) {
+        return;
+    }
+    server.registerTool("write_file", {
+        title: "Write/Modify Laravel File (Opt-In)",
+        description: "Writes or edits a file within allowed Laravel project directories (app, routes, config, database, resources). Automatic backups are saved to .laravel-mcp-backup.",
+        inputSchema: z.object({
+            path: z
+                .string()
+                .describe("Relative path to file from project root (e.g. 'app/Http/Controllers/ProductController.php')"),
+            content: z.string().describe("File content to write"),
+        }),
+    }, async ({ path: relPath, content }) => {
+        // 1. Max size check
+        if (content.length > 500 * 1024) {
+            logAudit({
+                tool: "write_file",
+                tier: "CAUTIOUS",
+                filePath: relPath,
+                status: "BLOCKED",
+                reason: "Content exceeds 500KB limit",
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: "[SECURITY BLOCK] Content size exceeds 500KB limit." }],
+            };
+        }
+        // 2. Write allowed check
+        const writeCheck = isWriteAllowed(relPath);
+        if (!writeCheck.allowed) {
+            logAudit({
+                tool: "write_file",
+                tier: "CAUTIOUS",
+                filePath: relPath,
+                status: "BLOCKED",
+                reason: writeCheck.reason,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[SECURITY BLOCK] ${writeCheck.reason}` }],
+            };
+        }
+        try {
+            // 3. Path safe check
+            const safePath = isPathSafe(relPath, config.laravelPath);
+            // Dry-run check
+            if (config.dryRun) {
+                logAudit({
+                    tool: "write_file",
+                    tier: "CAUTIOUS",
+                    filePath: relPath,
+                    status: "ALLOWED",
+                    reason: "DRY-RUN MODE",
+                });
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `[DRY-RUN PREVIEW] Would write ${content.length} bytes to ${relPath}`,
+                        },
+                    ],
+                };
+            }
+            // 4. Write with backup
+            const { backupPath } = await writeFileContent(safePath, content, config.laravelPath);
+            const fileHash = computeFileHash(content);
+            logAudit({
+                tool: "write_file",
+                tier: "CAUTIOUS",
+                filePath: relPath,
+                fileHash,
+                outputSize: content.length,
+                status: "ALLOWED",
+            });
+            let msg = `Successfully wrote ${content.length} bytes to ${relPath}.`;
+            if (backupPath) {
+                msg += ` Previous version backed up to ${backupPath}.`;
+            }
+            return {
+                content: [{ type: "text", text: msg }],
+            };
+        }
+        catch (err) {
+            logAudit({
+                tool: "write_file",
+                tier: "CAUTIOUS",
+                filePath: relPath,
+                status: "ERROR",
+                reason: err.message,
+            });
+            return {
+                isError: true,
+                content: [{ type: "text", text: `[WRITE ERROR] ${err.message}` }],
+            };
+        }
+    });
+}
+//# sourceMappingURL=write-file.js.map

package/build/tools/write-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-file.js","sourceRoot":"","sources":["../../src/tools/write-file.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,qBAAqB,CAAC,MAAiB,EAAE,MAAoB;IAC3E,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IAED,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,mKAAmK;QACrK,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,6FAA6F,CAAC;YAC1G,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;SACtD,CAAC;KACH,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,oBAAoB;QACpB,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;YAChC,QAAQ,CAAC;gBACP,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,6BAA6B;aACtC,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC;aACxF,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,QAAQ,CAAC;gBACP,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;aAC3E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,qBAAqB;YACrB,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAEzD,gBAAgB;YAChB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,QAAQ,CAAC;oBACP,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,cAAc;iBACvB,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,iCAAiC,OAAO,CAAC,MAAM,aAAa,OAAO,EAAE;yBAC5E;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,uBAAuB;YACvB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAE1C,QAAQ,CAAC;gBACP,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,OAAO;gBACjB,QAAQ;gBACR,UAAU,EAAE,OAAO,CAAC,MAAM;gBAC1B,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC;YAEH,IAAI,GAAG,GAAG,sBAAsB,OAAO,CAAC,MAAM,aAAa,OAAO,GAAG,CAAC;YACtE,IAAI,UAAU,EAAE,CAAC;gBACf,GAAG,IAAI,kCAAkC,UAAU,GAAG,CAAC;YACzD,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;aACvC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC;gBACP,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;aAClE,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/utils/audit.d.ts

@@ -0,0 +1,23 @@
+export interface AuditEntry {
+    timestamp: string;
+    sessionId: string;
+    tool: string;
+    tier: string;
+    command?: string;
+    args?: string[];
+    filePath?: string;
+    exitCode?: number;
+    outputSize?: number;
+    fileHash?: string;
+    status: "ALLOWED" | "BLOCKED" | "ERROR";
+    reason?: string;
+    duration?: number;
+}
+export declare function initAuditLogger(laravelPath: string): string;
+export declare function logAudit(entry: Omit<AuditEntry, "timestamp" | "sessionId">): void;
+export declare function getAuditStats(): {
+    total: number;
+    allowed: number;
+    blocked: number;
+};
+//# sourceMappingURL=audit.d.ts.map

package/build/utils/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/utils/audit.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAmB3D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,IAAI,CAuBjF;AAED,wBAAgB,aAAa,IAAI;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAEnF"}

package/build/utils/audit.js

@@ -0,0 +1,52 @@
+import fs from "node:fs";
+import path from "node:path";
+import crypto from "node:crypto";
+let currentSessionId = "";
+let auditFilePath = "";
+let sessionStats = { total: 0, allowed: 0, blocked: 0 };
+export function initAuditLogger(laravelPath) {
+    currentSessionId = crypto.randomBytes(6).toString("hex");
+    auditFilePath = path.join(laravelPath, ".laravel-mcp-audit.jsonl");
+    // Check file size for rotation if > 10MB
+    if (fs.existsSync(auditFilePath)) {
+        try {
+            const stats = fs.statSync(auditFilePath);
+            if (stats.size > 10 * 1024 * 1024) {
+                const dateStr = new Date().toISOString().split("T")[0];
+                const rotatedPath = path.join(laravelPath, `.laravel-mcp-audit.${dateStr}.jsonl`);
+                fs.renameSync(auditFilePath, rotatedPath);
+            }
+        }
+        catch {
+            // Ignore rotation errors
+        }
+    }
+    return currentSessionId;
+}
+export function logAudit(entry) {
+    sessionStats.total++;
+    if (entry.status === "ALLOWED") {
+        sessionStats.allowed++;
+    }
+    else if (entry.status === "BLOCKED") {
+        sessionStats.blocked++;
+    }
+    const fullEntry = {
+        timestamp: new Date().toISOString(),
+        sessionId: currentSessionId || "unknown",
+        ...entry,
+    };
+    const line = JSON.stringify(fullEntry) + "\n";
+    if (auditFilePath) {
+        try {
+            fs.appendFileSync(auditFilePath, line, "utf-8");
+        }
+        catch (err) {
+            console.error("[AUDIT LOG ERROR]", err);
+        }
+    }
+}
+export function getAuditStats() {
+    return { ...sessionStats };
+}
+//# sourceMappingURL=audit.js.map

package/build/utils/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/utils/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AAkBjC,IAAI,gBAAgB,GAAG,EAAE,CAAC;AAC1B,IAAI,aAAa,GAAG,EAAE,CAAC;AACvB,IAAI,YAAY,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAExD,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IAEnE,yCAAyC;IACzC,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,OAAO,QAAQ,CAAC,CAAC;gBAClF,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAkD;IACzE,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,YAAY,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,YAAY,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,SAAS,GAAe;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,gBAAgB,IAAI,SAAS;QACxC,GAAG,KAAK;KACT,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;IAE9C,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;AAC7B,CAAC"}

package/build/utils/config.d.ts

@@ -0,0 +1,12 @@
+export interface ServerConfig {
+    laravelPath: string;
+    phpBinary: string;
+    commandTimeout: number;
+    maxLogLines: number;
+    allowWrite: boolean;
+    allowTinker: boolean;
+    dryRun: boolean;
+    rateLimit: number;
+}
+export declare function parseConfig(argv: string[]): ServerConfig;
+//# sourceMappingURL=config.d.ts.map

package/build/utils/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAwDxD"}

package/build/utils/config.js

@@ -0,0 +1,63 @@
+import path from "node:path";
+export function parseConfig(argv) {
+    const args = argv.slice(2);
+    let laravelPath = "";
+    let phpBinary = "php";
+    let commandTimeout = 30000;
+    let maxLogLines = 200;
+    let allowWrite = false;
+    let allowTinker = false;
+    let dryRun = false;
+    let rateLimit = 30;
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--allow-write") {
+            allowWrite = true;
+        }
+        else if (arg === "--allow-tinker") {
+            allowTinker = true;
+        }
+        else if (arg === "--dry-run") {
+            dryRun = true;
+        }
+        else if (arg === "--php" && i + 1 < args.length) {
+            phpBinary = args[++i];
+        }
+        else if (arg === "--timeout" && i + 1 < args.length) {
+            const parsed = parseInt(args[++i], 10);
+            if (!isNaN(parsed) && parsed > 0) {
+                commandTimeout = parsed;
+            }
+        }
+        else if (arg === "--rate-limit" && i + 1 < args.length) {
+            const parsed = parseInt(args[++i], 10);
+            if (!isNaN(parsed) && parsed > 0) {
+                rateLimit = parsed;
+            }
+        }
+        else if (arg === "--max-log-lines" && i + 1 < args.length) {
+            const parsed = parseInt(args[++i], 10);
+            if (!isNaN(parsed) && parsed > 0) {
+                maxLogLines = parsed;
+            }
+        }
+        else if (!arg.startsWith("--") && !laravelPath) {
+            laravelPath = path.resolve(arg);
+        }
+    }
+    if (!laravelPath) {
+        // Default to current working directory if not supplied
+        laravelPath = process.cwd();
+    }
+    return {
+        laravelPath,
+        phpBinary,
+        commandTimeout,
+        maxLogLines,
+        allowWrite,
+        allowTinker,
+        dryRun,
+        rateLimit,
+    };
+}
+//# sourceMappingURL=config.js.map

package/build/utils/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,MAAM,UAAU,WAAW,CAAC,IAAc;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,WAAW,GAAG,GAAG,CAAC;IACtB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,SAAS,GAAG,EAAE,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YAC5B,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAClD,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,cAAc,GAAG,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,KAAK,cAAc,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,SAAS,GAAG,MAAM,CAAC;YACrB,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,KAAK,iBAAiB,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,WAAW,GAAG,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjD,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,uDAAuD;QACvD,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,WAAW;QACX,SAAS;QACT,cAAc;QACd,WAAW;QACX,UAAU;QACV,WAAW;QACX,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC"}

package/build/utils/file.d.ts

@@ -0,0 +1,8 @@
+export declare function findLogFile(laravelPath: string): Promise<string>;
+export declare function readLastLines(filePath: string, lineCount?: number): Promise<string>;
+export declare function readFileContent(filePath: string, maxSizeBytes?: number): Promise<string>;
+export declare function createBackup(filePath: string, laravelPath: string): Promise<string | null>;
+export declare function writeFileContent(filePath: string, content: string, laravelPath: string): Promise<{
+    backupPath: string | null;
+}>;
+//# sourceMappingURL=file.d.ts.map

package/build/utils/file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/utils/file.ts"],"names":[],"mappings":"AAGA,wBAAsB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBtE;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,GAAE,MAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CA4C9F;AAED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,GAAE,MAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAW3G;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBhG;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAcxC"}

package/build/utils/file.js

@@ -0,0 +1,96 @@
+import fs from "node:fs";
+import path from "node:path";
+export async function findLogFile(laravelPath) {
+    const logDir = path.join(laravelPath, "storage", "logs");
+    if (!fs.existsSync(logDir)) {
+        throw new Error(`Log directory does not exist: ${logDir}`);
+    }
+    // Check default laravel.log
+    const defaultLog = path.join(logDir, "laravel.log");
+    if (fs.existsSync(defaultLog)) {
+        return defaultLog;
+    }
+    // Find daily log files laravel-YYYY-MM-DD.log
+    const files = fs
+        .readdirSync(logDir)
+        .filter((f) => f.startsWith("laravel") && f.endsWith(".log"))
+        .sort()
+        .reverse();
+    if (files.length > 0) {
+        return path.join(logDir, files[0]);
+    }
+    throw new Error(`No log files found in ${logDir}`);
+}
+export async function readLastLines(filePath, lineCount = 100) {
+    if (!fs.existsSync(filePath)) {
+        throw new Error(`File does not exist: ${filePath}`);
+    }
+    const limit = Math.min(Math.max(1, lineCount), 500);
+    // Read file in chunks from the end for efficiency
+    const stat = fs.statSync(filePath);
+    const fileSize = stat.size;
+    if (fileSize === 0) {
+        return "(Log file is empty)";
+    }
+    const chunkSize = 64 * 1024; // 64KB
+    const fd = fs.openSync(filePath, "r");
+    let lines = [];
+    let buffer = Buffer.alloc(chunkSize);
+    let readPosition = fileSize;
+    try {
+        let leftover = "";
+        while (readPosition > 0 && lines.length <= limit) {
+            const bytesToRead = Math.min(chunkSize, readPosition);
+            readPosition -= bytesToRead;
+            fs.readSync(fd, buffer, 0, bytesToRead, readPosition);
+            const chunkStr = buffer.toString("utf-8", 0, bytesToRead) + leftover;
+            const chunkLines = chunkStr.split(/\r?\n/);
+            leftover = chunkLines.shift() || "";
+            lines = [...chunkLines, ...lines];
+        }
+        if (leftover) {
+            lines.unshift(leftover);
+        }
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    return lines.slice(-limit).join("\n");
+}
+export async function readFileContent(filePath, maxSizeBytes = 1024 * 1024) {
+    if (!fs.existsSync(filePath)) {
+        throw new Error(`File does not exist: ${filePath}`);
+    }
+    const stat = fs.statSync(filePath);
+    if (stat.size > maxSizeBytes) {
+        throw new Error(`File size (${(stat.size / 1024).toFixed(1)}KB) exceeds limit of ${(maxSizeBytes / 1024).toFixed(1)}KB.`);
+    }
+    return fs.readFileSync(filePath, "utf-8");
+}
+export async function createBackup(filePath, laravelPath) {
+    if (!fs.existsSync(filePath)) {
+        return null;
+    }
+    const backupDir = path.join(laravelPath, ".laravel-mcp-backup");
+    if (!fs.existsSync(backupDir)) {
+        fs.mkdirSync(backupDir, { recursive: true });
+    }
+    const relName = path.relative(laravelPath, filePath).replace(/[\\/]/g, "_");
+    const timestamp = Date.now();
+    const backupPath = path.join(backupDir, `${relName}.${timestamp}.bak`);
+    fs.copyFileSync(filePath, backupPath);
+    return backupPath;
+}
+export async function writeFileContent(filePath, content, laravelPath) {
+    // Ensure parent directory exists
+    const parentDir = path.dirname(filePath);
+    if (!fs.existsSync(parentDir)) {
+        fs.mkdirSync(parentDir, { recursive: true });
+    }
+    // Create backup if target file exists
+    const backupPath = await createBackup(filePath, laravelPath);
+    // Write content
+    fs.writeFileSync(filePath, content, "utf-8");
+    return { backupPath };
+}
+//# sourceMappingURL=file.js.map

package/build/utils/file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file.js","sourceRoot":"","sources":["../../src/utils/file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAmB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,4BAA4B;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,8CAA8C;IAC9C,MAAM,KAAK,GAAG,EAAE;SACb,WAAW,CAAC,MAAM,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SAC5D,IAAI,EAAE;SACN,OAAO,EAAE,CAAC;IAEb,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB,EAAE,YAAoB,GAAG;IAC3E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAEpD,kDAAkD;IAClD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IAE3B,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO;IACpC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEtC,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,YAAY,GAAG,QAAQ,CAAC;IAE5B,IAAI,CAAC;QACH,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,OAAO,YAAY,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACtD,YAAY,IAAI,WAAW,CAAC;YAE5B,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC;YAErE,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3C,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAEpC,KAAK,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,eAAuB,IAAI,GAAG,IAAI;IACxF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5H,CAAC;IAED,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,WAAmB;IACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,IAAI,SAAS,MAAM,CAAC,CAAC;IAEvE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,OAAe,EACf,WAAmB;IAEnB,iCAAiC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,sCAAsC;IACtC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE7D,gBAAgB;IAChB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAE7C,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC"}

package/build/utils/process.d.ts

@@ -0,0 +1,16 @@
+export interface ExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    duration: number;
+    killed: boolean;
+}
+export interface RunOptions {
+    laravelPath: string;
+    phpBinary: string;
+    timeoutMs: number;
+}
+export declare function runArtisan(command: string, args: string[] | undefined, options: RunOptions): Promise<ExecResult>;
+export declare function findPhpBinary(customPath?: string): Promise<string>;
+export declare function killAllChildren(): void;
+//# sourceMappingURL=process.d.ts.map

package/build/utils/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/utils/process.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,YAAK,EACnB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,UAAU,CAAC,CAgErB;AAED,wBAAgB,aAAa,CAAC,UAAU,GAAE,MAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAczE;AAED,wBAAgB,eAAe,IAAI,IAAI,CAStC"}

package/build/utils/process.js

@@ -0,0 +1,78 @@
+import { execFile } from "node:child_process";
+import path from "node:path";
+const activeChildren = new Set();
+export function runArtisan(command, args = [], options) {
+    return new Promise((resolve) => {
+        const startTime = Date.now();
+        const artisanPath = path.join(options.laravelPath, "artisan");
+        const fullArgs = [artisanPath, command, ...args];
+        let killed = false;
+        // Filter environment to strip sensitive process environment variables
+        const safeEnv = { ...process.env };
+        delete safeEnv.APP_KEY;
+        delete safeEnv.DB_PASSWORD;
+        delete safeEnv.AWS_SECRET_ACCESS_KEY;
+        const child = execFile(options.phpBinary, fullArgs, {
+            cwd: options.laravelPath,
+            timeout: options.timeoutMs,
+            maxBuffer: 5 * 1024 * 1024, // 5MB limit
+            env: safeEnv,
+        }, (error, stdout, stderr) => {
+            activeChildren.delete(child);
+            const duration = Date.now() - startTime;
+            let exitCode = 0;
+            if (error) {
+                exitCode = typeof error.code === "number" ? error.code : 1;
+                if (error.killed) {
+                    killed = true;
+                }
+            }
+            // Truncate output if larger than 50KB to protect LLM context
+            const maxCharOutput = 50 * 1024;
+            let finalStdout = stdout || "";
+            let finalStderr = stderr || "";
+            if (finalStdout.length > maxCharOutput) {
+                finalStdout =
+                    finalStdout.substring(0, maxCharOutput) +
+                        "\n... [Output truncated by MCP Server because it exceeds 50KB]";
+            }
+            if (finalStderr.length > maxCharOutput) {
+                finalStderr =
+                    finalStderr.substring(0, maxCharOutput) +
+                        "\n... [Stderr truncated by MCP Server because it exceeds 50KB]";
+            }
+            resolve({
+                stdout: finalStdout,
+                stderr: finalStderr,
+                exitCode,
+                duration,
+                killed,
+            });
+        });
+        activeChildren.add(child);
+    });
+}
+export function findPhpBinary(customPath = "php") {
+    return new Promise((resolve, reject) => {
+        execFile(customPath, ["-v"], (error, stdout) => {
+            if (error) {
+                reject(new Error(`PHP binary '${customPath}' not found or failed to execute. Make sure PHP is installed and in PATH.`));
+            }
+            else {
+                resolve(customPath);
+            }
+        });
+    });
+}
+export function killAllChildren() {
+    for (const child of activeChildren) {
+        try {
+            child.kill("SIGKILL");
+        }
+        catch {
+            // Ignore errors when killing
+        }
+    }
+    activeChildren.clear();
+}
+//# sourceMappingURL=process.js.map

package/build/utils/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/utils/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAgB,MAAM,oBAAoB,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAgB7B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAgB,CAAC;AAE/C,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,OAAiB,EAAE,EACnB,OAAmB;IAEnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,sEAAsE;QACtE,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,OAAO,CAAC;QACvB,OAAO,OAAO,CAAC,WAAW,CAAC;QAC3B,OAAO,OAAO,CAAC,qBAAqB,CAAC;QAErC,MAAM,KAAK,GAAG,QAAQ,CACpB,OAAO,CAAC,SAAS,EACjB,QAAQ,EACR;YACE,GAAG,EAAE,OAAO,CAAC,WAAW;YACxB,OAAO,EAAE,OAAO,CAAC,SAAS;YAC1B,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,YAAY;YACxC,GAAG,EAAE,OAAO;SACb,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAExC,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,MAAM,GAAG,IAAI,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,6DAA6D;YAC7D,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;YAChC,IAAI,WAAW,GAAG,MAAM,IAAI,EAAE,CAAC;YAC/B,IAAI,WAAW,GAAG,MAAM,IAAI,EAAE,CAAC;YAE/B,IAAI,WAAW,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;gBACvC,WAAW;oBACT,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC;wBACvC,gEAAgE,CAAC;YACrE,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;gBACvC,WAAW;oBACT,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC;wBACvC,gEAAgE,CAAC;YACrE,CAAC;YAED,OAAO,CAAC;gBACN,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW;gBACnB,QAAQ;gBACR,QAAQ;gBACR,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,aAAqB,KAAK;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CACJ,IAAI,KAAK,CACP,eAAe,UAAU,2EAA2E,CACrG,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IACD,cAAc,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC"}

package/build/utils/rate-limiter.d.ts

@@ -0,0 +1,19 @@
+export interface RateLimiterConfig {
+    maxRequestsPerMinute: number;
+    maxRequestsPerHour: number;
+    cooldownMs: number;
+}
+export declare class RateLimiter {
+    private config;
+    private timestamps;
+    private lastRequestTime;
+    constructor(config?: RateLimiterConfig);
+    checkRateLimit(): {
+        allowed: boolean;
+        retryAfterMs?: number;
+        reason?: string;
+    };
+    recordRequest(): void;
+    reset(): void;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/build/utils/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/utils/rate-limiter.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,WAAW;IAKpB,OAAO,CAAC,MAAM;IAJhB,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,eAAe,CAAK;gBAGlB,MAAM,GAAE,iBAIf;IAGI,cAAc,IAAI;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IA0C9E,aAAa,IAAI,IAAI;IAMrB,KAAK,IAAI,IAAI;CAIrB"}