- Add security.ts: helmet, CORS allowlist, timing-safe API key auth, prototype pollution guard, Mermaid input limits, rate limiting (general/destructive/burst) - WS auth challenge-response with 5 s timeout and close code 4001 - Fix sync crash: array check before logger access (500 → 400) - Fix sync/v2: validate element type before write (invalid → 400) - Upgrade zod 3.22.4 → 3.25.5 (fixes ERR_PACKAGE_PATH_NOT_EXPORTED on startup) - Extract ElementSharedFieldsSchema; move VALID_ELEMENT_TYPES to module level - Docker: resource limits, .dockerignore hardening - Add .project-hooks/pre-commit; expand test coverage (369 tests) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
64 lines
501 B
Plaintext
64 lines
501 B
Plaintext
# Dependencies
|
|
node_modules
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
|
|
# Build outputs
|
|
dist
|
|
build
|
|
*.log
|
|
|
|
# Git
|
|
.git
|
|
.gitignore
|
|
.gitattributes
|
|
|
|
# IDE
|
|
.vscode
|
|
.idea
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Testing
|
|
coverage
|
|
.nyc_output
|
|
*.test.ts
|
|
*.spec.ts
|
|
tests
|
|
|
|
# CI/CD
|
|
.github
|
|
|
|
# Documentation
|
|
*.md
|
|
!README.md
|
|
docs
|
|
|
|
# Docker
|
|
Dockerfile*
|
|
docker-compose*.yml
|
|
.dockerignore
|
|
|
|
# Environment
|
|
.env
|
|
.env.local
|
|
.env.*.local
|
|
|
|
# Sensitive key material
|
|
*.pem
|
|
*.key
|
|
*.p12
|
|
*.pfx
|
|
*.crt
|
|
|
|
# Misc
|
|
tmp
|
|
temp
|
|
*.tmp
|