@sn4p.dev/mucv 0.5.0

package/dist/utils/url-validator.js

@@ -0,0 +1,37 @@
+/**
+ * MUCV — Validación de URLs seguras
+ * Bloquea protocolos peligrosos: javascript:, data:, vbscript:
+ */
+const DANGEROUS_PROTOCOLS = new Set(['javascript:', 'data:', 'vbscript:']);
+const MAX_URL_LENGTH = 2048;
+/**
+ * Verifica si una URL es segura (no usa protocolos peligrosos).
+ * Acepta URLs absolutas (https://, http://) y relativas (/page, #anchor, ./file).
+ */
+export function isUrlSafe(url) {
+    if (url.length > MAX_URL_LENGTH)
+        return false;
+    // Normalizar: eliminar espacios y saltos de línea que podrían ocultar protocolo
+    const normalized = url.replace(/[\s\n\r\t]/g, '').toLowerCase();
+    // Verificar protocolos peligrosos directamente
+    for (const protocol of DANGEROUS_PROTOCOLS) {
+        if (normalized.startsWith(protocol))
+            return false;
+    }
+    // Intentar parsear como URL absoluta
+    try {
+        const parsed = new URL(url);
+        return !DANGEROUS_PROTOCOLS.has(parsed.protocol);
+    }
+    catch {
+        // URL relativa (/page, #anchor, ./file) — aceptar si pasó los checks anteriores
+        return true;
+    }
+}
+/**
+ * Sanitiza una URL: retorna '#' si es insegura, la URL original si es segura.
+ */
+export function sanitizeUrl(url) {
+    return isUrlSafe(url) ? url : '#';
+}
+//# sourceMappingURL=url-validator.js.map

package/dist/utils/url-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-validator.js","sourceRoot":"","sources":["../../src/utils/url-validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;AAC1E,MAAM,cAAc,GAAG,IAAI,CAAA;AAE3B;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc;QAAE,OAAO,KAAK,CAAA;IAE7C,gFAAgF;IAChF,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IAE/D,+CAA+C;IAC/C,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAA;IACnD,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;AACnC,CAAC"}

package/package.json

@@ -0,0 +1,73 @@
+{
+  "name": "@sn4p.dev/mucv",
+  "version": "0.5.0",
+  "description": "Motor Universal de Conversión Visual — MCP server para conversión entre Elementor, React, HTML, Vue y Svelte via VIR",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "mucv": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "keywords": [
+    "mcp",
+    "elementor",
+    "react",
+    "vue",
+    "svelte",
+    "html",
+    "css",
+    "converter",
+    "visual",
+    "wordpress",
+    "design"
+  ],
+  "author": "yosnap",
+  "license": "ISC",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/yosnap/mucv.git"
+  },
+  "homepage": "https://github.com/yosnap/mucv#readme",
+  "bugs": {
+    "url": "https://github.com/yosnap/mucv/issues"
+  },
+  "scripts": {
+    "build": "tsc --project tsconfig.json",
+    "dev": "tsx watch src/index.ts",
+    "type-check": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "test:e2e": "RUN_E2E=1 vitest run tests/e2e/",
+    "lint": "eslint src tests",
+    "lint:fix": "eslint src tests --fix"
+  },
+  "engines": {
+    "node": ">=20.0.0",
+    "npm": ">=10.0.0"
+  },
+  "dependencies": {
+    "@babel/parser": "^7.29.0",
+    "@babel/traverse": "^7.29.0",
+    "@babel/types": "^7.29.0",
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "node-html-parser": "^7.0.2",
+    "pino": "^9.6.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/babel__core": "^7.20.5",
+    "@types/babel__traverse": "^7.28.0",
+    "@types/node": "^22.0.0",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    "@vitest/coverage-v8": "^3.0.0",
+    "eslint": "^9.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  }
+}