2026-05-28 23:37:31 +00:00
|
|
|
{
|
|
|
|
|
"name": "@workspace/api-server",
|
|
|
|
|
"version": "0.0.0",
|
|
|
|
|
"private": true,
|
|
|
|
|
"type": "module",
|
|
|
|
|
"scripts": {
|
|
|
|
|
"dev": "export NODE_ENV=development && pnpm run build && pnpm run start",
|
|
|
|
|
"build": "node ./build.mjs",
|
|
|
|
|
"start": "node --enable-source-maps ./dist/index.mjs",
|
|
|
|
|
"typecheck": "tsc -p tsconfig.json --noEmit"
|
|
|
|
|
},
|
|
|
|
|
"dependencies": {
|
|
|
|
|
"@workspace/api-zod": "workspace:*",
|
|
|
|
|
"@workspace/db": "workspace:*",
|
|
|
|
|
"cookie-parser": "^1.4.7",
|
|
|
|
|
"cors": "^2.8.6",
|
|
|
|
|
"drizzle-orm": "catalog:",
|
|
|
|
|
"express": "^5.2.1",
|
SkillGuard: complete frontend wiring and harden backend
Original task: build "SkillGuard", a German web app to audit agent skills on
two axes (IT-Sicherheit, Datenschutz) with static rule engine + Replit-independent
AI analysis configured via an admin backend.
This session:
- Fixed frontend TS errors: lucide-react name collisions (Badge from ui, Activity
from lucide), widened apiType to AiProviderApiType, added queryKey to useGetScan.
- Verified all pages render in German (Dashboard, Prüfen, Bericht, Verlauf, Admin)
and the full scan flow works end-to-end (malicious sample -> verdict block).
Code-review-driven hardening:
- POST /api/scans now returns the full ScanDetail (files + findings) to match the
OpenAPI contract, instead of only the summary.
- AI provider error bodies are redacted (token, Bearer, sk- patterns) before being
returned/persisted, and provider fetches now have a 60s timeout.
- ZIP parsing now enforces limits (max files, total + per-file size) to mitigate
zip-bomb DoS.
Updated replit.md (project overview, decisions, gotchas) and added a memory note
on lucide-react icon name collisions.
2026-06-08 14:59:17 +00:00
|
|
|
"fflate": "^0.8.3",
|
2026-05-28 23:37:31 +00:00
|
|
|
"pino": "^9.14.0",
|
|
|
|
|
"pino-http": "^10.5.0"
|
|
|
|
|
},
|
|
|
|
|
"devDependencies": {
|
|
|
|
|
"@types/cookie-parser": "^1.4.10",
|
|
|
|
|
"@types/cors": "^2.8.19",
|
|
|
|
|
"@types/express": "^5.0.6",
|
|
|
|
|
"@types/node": "catalog:",
|
|
|
|
|
"esbuild": "0.27.3",
|
|
|
|
|
"esbuild-plugin-pino": "^2.3.3",
|
|
|
|
|
"pino-pretty": "^13.1.3",
|
|
|
|
|
"thread-stream": "3.1.0"
|
|
|
|
|
}
|
|
|
|
|
}
|