newblaccandClaude Sonnet 4.6
5539235004
- Add security.ts: helmet, CORS allowlist, timing-safe API key auth, prototype pollution guard, Mermaid input limits, rate limiting (general/destructive/burst) - WS auth challenge-response with 5 s timeout and close code 4001 - Fix sync crash: array check before logger access (500 → 400) - Fix sync/v2: validate element type before write (invalid → 400) - Upgrade zod 3.22.4 → 3.25.5 (fixes ERR_PACKAGE_PATH_NOT_EXPORTED on startup) - Extract ElementSharedFieldsSchema; move VALID_ELEMENT_TYPES to module level - Docker: resource limits, .dockerignore hardening - Add .project-hooks/pre-commit; expand test coverage (369 tests) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
13 lines
326 B
Bash
Executable File
13 lines
326 B
Bash
Executable File
#!/usr/bin/env bash
|
|
# Project-level pre-commit hook for mcp-excalidraw-local.
|
|
# ShipGuard SAST and secret detection are handled by the global hook.
|
|
# This hook runs the project test suite.
|
|
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(git rev-parse --show-toplevel)"
|
|
cd "$REPO_ROOT"
|
|
|
|
echo "→ Running tests (vitest)..."
|
|
npm test --silent
|