newblaccandClaude Sonnet 4.6
5539235004
- Add security.ts: helmet, CORS allowlist, timing-safe API key auth, prototype pollution guard, Mermaid input limits, rate limiting (general/destructive/burst) - WS auth challenge-response with 5 s timeout and close code 4001 - Fix sync crash: array check before logger access (500 → 400) - Fix sync/v2: validate element type before write (invalid → 400) - Upgrade zod 3.22.4 → 3.25.5 (fixes ERR_PACKAGE_PATH_NOT_EXPORTED on startup) - Extract ElementSharedFieldsSchema; move VALID_ELEMENT_TYPES to module level - Docker: resource limits, .dockerignore hardening - Add .project-hooks/pre-commit; expand test coverage (369 tests) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
36 lines
400 B
Plaintext
36 lines
400 B
Plaintext
# Dependencies
|
|
node_modules/
|
|
|
|
# Build artifacts
|
|
dist/
|
|
public/dist/
|
|
|
|
# Environment files
|
|
.env
|
|
.env.*
|
|
*.key
|
|
*.pem
|
|
*.p12
|
|
*.pfx
|
|
secrets.json
|
|
|
|
# Logs
|
|
*.log
|
|
|
|
# Editor artifacts
|
|
.cursor/
|
|
.claude/
|
|
|
|
# User preferences (only the example ships)
|
|
skills/excalidraw-skill/preferences.json
|
|
|
|
# Development artifacts
|
|
*.excalidraw
|
|
|
|
# Test artifacts
|
|
test-results/
|
|
playwright-report/
|
|
coverage/
|
|
|
|
docs/*
|
|
!docs/screenshots/ |