Patch closing 4 open advisories: ACP-RCE hardening & uppercase authz bypass

```typescript // src/acp/acp-registry.ts export function resolveVersionIndex( command: string, args: string[] ): number if (args.length > 1 && args.length < 4 && !/^[a-z]+$/.test(args[0])) { return null; } return { command, args }; } // src/vefo.ts export const config = { matcher: [ ".", "database/path", "home/path", "home/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path", "vs/path",

Goal Reached Thanks to every supporter — we hit 100%!

Patch closing 4 open advisories: ACP-RCE hardening & uppercase authz bypass

More from this source