@bbradar/mcp 0.1.3

package/dist/config.js

@@ -0,0 +1,60 @@
+const DEFAULT_API_BASE_URL = "https://bbradar.io/api/v1";
+const DEFAULT_WEB_BASE_URL = "https://bbradar.io";
+export function loadConfig(env = process.env) {
+    const apiKey = env.BBRADAR_API_KEY?.trim();
+    if (!apiKey) {
+        throw new Error("BBRADAR_API_KEY is required.");
+    }
+    return {
+        apiKey,
+        apiBaseUrl: normalizeBaseUrl(env.BBRADAR_API_BASE_URL ?? DEFAULT_API_BASE_URL),
+        webBaseUrl: normalizeBaseUrl(env.BBRADAR_WEB_BASE_URL ?? DEFAULT_WEB_BASE_URL),
+        cacheTtlMs: readNonNegativeInteger(env.BBRADAR_MCP_CACHE_TTL_SECONDS, 30) * 1000,
+        cacheMaxEntries: readPositiveInteger(env.BBRADAR_MCP_CACHE_MAX_ENTRIES, 500),
+        defaultRateLimitPerMinute: readPositiveInteger(env.BBRADAR_MCP_RATE_LIMIT_PER_MINUTE, 60),
+        exportRateLimitPerMinute: readPositiveInteger(env.BBRADAR_MCP_EXPORT_RATE_LIMIT_PER_MINUTE, 15),
+        requestTimeoutMs: readPositiveInteger(env.BBRADAR_MCP_REQUEST_TIMEOUT_SECONDS, 30) * 1000,
+        validateOnStartup: readBoolean(env.BBRADAR_MCP_VALIDATE_ON_STARTUP, false)
+    };
+}
+function normalizeBaseUrl(value) {
+    const trimmed = value.trim();
+    if (!trimmed) {
+        throw new Error("Base URL cannot be empty.");
+    }
+    return trimmed.replace(/\/+$/, "");
+}
+function readPositiveInteger(value, fallback) {
+    if (!value) {
+        return fallback;
+    }
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed <= 0) {
+        return fallback;
+    }
+    return parsed;
+}
+function readNonNegativeInteger(value, fallback) {
+    if (!value) {
+        return fallback;
+    }
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isFinite(parsed) || parsed < 0) {
+        return fallback;
+    }
+    return parsed;
+}
+function readBoolean(value, fallback) {
+    if (!value) {
+        return fallback;
+    }
+    const normalized = value.trim().toLowerCase();
+    if (["1", "true", "yes", "on"].includes(normalized)) {
+        return true;
+    }
+    if (["0", "false", "no", "off"].includes(normalized)) {
+        return false;
+    }
+    return fallback;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAYA,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AACzD,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAElD,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,OAAO;QACL,MAAM;QACN,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;QAC9E,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;QAC9E,UAAU,EAAE,sBAAsB,CAAC,GAAG,CAAC,6BAA6B,EAAE,EAAE,CAAC,GAAG,IAAI;QAChF,eAAe,EAAE,mBAAmB,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC;QAC5E,yBAAyB,EAAE,mBAAmB,CAAC,GAAG,CAAC,iCAAiC,EAAE,EAAE,CAAC;QACzF,wBAAwB,EAAE,mBAAmB,CAAC,GAAG,CAAC,wCAAwC,EAAE,EAAE,CAAC;QAC/F,gBAAgB,EAAE,mBAAmB,CAAC,GAAG,CAAC,mCAAmC,EAAE,EAAE,CAAC,GAAG,IAAI;QACzF,iBAAiB,EAAE,WAAW,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB,EAAE,QAAgB;IACtE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAyB,EAAE,QAAgB;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,QAAiB;IAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE9C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { BBRadarClient } from "./bbradarClient.js";
+import { loadConfig } from "./config.js";
+import { createBbradarServer } from "./server.js";
+async function main() {
+    const config = loadConfig();
+    const client = new BBRadarClient(config);
+    if (config.validateOnStartup) {
+        await client.validateKey();
+    }
+    const server = createBbradarServer(client, config);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`[bbradar-mcp] ${message}`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/json.d.ts

@@ -0,0 +1,4 @@
+export type JsonObject = Record<string, unknown>;
+export declare function isJsonObject(value: unknown): value is JsonObject;
+export declare function stableStringify(value: unknown): string;
+export declare function stripUndefined(value: JsonObject): JsonObject;

package/dist/json.js

@@ -0,0 +1,21 @@
+export function isJsonObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function stableStringify(value) {
+    return JSON.stringify(sortJson(value));
+}
+export function stripUndefined(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+}
+function sortJson(value) {
+    if (Array.isArray(value)) {
+        return value.map(sortJson);
+    }
+    if (!isJsonObject(value)) {
+        return value;
+    }
+    return Object.fromEntries(Object.keys(value)
+        .sort()
+        .map((key) => [key, sortJson(value[key])]));
+}
+//# sourceMappingURL=json.js.map

package/dist/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../src/json.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACf,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC7C,CAAC;AACJ,CAAC"}

package/dist/rateLimit.d.ts

@@ -0,0 +1,11 @@
+export type RateLimitDecision = {
+    allowed: boolean;
+    remaining: number;
+    resetAt: string;
+};
+export declare class FixedWindowRateLimiter {
+    private readonly windowMs;
+    private readonly buckets;
+    constructor(windowMs?: number);
+    consume(key: string, limit: number): RateLimitDecision;
+}

package/dist/rateLimit.js

@@ -0,0 +1,29 @@
+export class FixedWindowRateLimiter {
+    windowMs;
+    buckets = new Map();
+    constructor(windowMs = 60_000) {
+        this.windowMs = windowMs;
+    }
+    consume(key, limit) {
+        const now = Date.now();
+        const existing = this.buckets.get(key);
+        const bucket = existing && now - existing.windowStart < this.windowMs
+            ? existing
+            : { count: 0, windowStart: now };
+        if (bucket.count >= limit) {
+            return {
+                allowed: false,
+                remaining: 0,
+                resetAt: new Date(bucket.windowStart + this.windowMs).toISOString()
+            };
+        }
+        bucket.count += 1;
+        this.buckets.set(key, bucket);
+        return {
+            allowed: true,
+            remaining: Math.max(limit - bucket.count, 0),
+            resetAt: new Date(bucket.windowStart + this.windowMs).toISOString()
+        };
+    }
+}
+//# sourceMappingURL=rateLimit.js.map

package/dist/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../src/rateLimit.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,sBAAsB;IAGJ;IAFZ,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,YAA6B,WAAW,MAAM;QAAjB,aAAQ,GAAR,QAAQ,CAAS;IAAG,CAAC;IAElD,OAAO,CAAC,GAAW,EAAE,KAAa;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GACV,QAAQ,IAAI,GAAG,GAAG,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ;YACpD,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QAErC,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;aACpE,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE9B,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,OAAO,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;SACpE,CAAC;IACJ,CAAC;CACF"}

package/dist/sanitize.d.ts

@@ -0,0 +1,11 @@
+import { type JsonObject } from "./json.js";
+export declare function sanitizeProgram(value: unknown, webBaseUrl: string): JsonObject;
+export declare function sanitizeTarget(value: unknown): JsonObject;
+export declare function sanitizeChange(value: unknown, webBaseUrl: string): JsonObject;
+export declare function sanitizeTargetsForExport(value: unknown, limit: number): unknown;
+export declare function readObject(value: unknown): JsonObject | undefined;
+export declare function readArray(value: unknown): unknown[];
+export declare function readString(value: unknown): string | undefined;
+export declare function readNumber(value: unknown): number | undefined;
+export declare function readBoolean(value: unknown): boolean | undefined;
+export declare function sanitizeJson(value: unknown, depth?: number): unknown;

package/dist/sanitize.js

@@ -0,0 +1,202 @@
+import { isJsonObject, stripUndefined } from "./json.js";
+const MAX_SANITIZED_STRING_LENGTH = 2_000;
+const MAX_SANITIZED_ARRAY_LENGTH = 50;
+const MAX_SANITIZED_OBJECT_KEYS = 50;
+const MAX_SANITIZED_DEPTH = 4;
+const MAX_SANITIZED_KEY_LENGTH = 128;
+const CONTROL_CHARS = /[\u0000-\u001F\u007F]/g;
+export function sanitizeProgram(value, webBaseUrl) {
+    if (!isJsonObject(value)) {
+        return {};
+    }
+    const id = readString(value.id);
+    const extraData = readObject(value.extra_data);
+    const reportCount = readNumber(value.report_count) ?? readNumber(extraData?.report_count);
+    const reportCountLabel = readString(extraData?.report_count_label);
+    const bountyMin = readNumber(value.bounty_min);
+    const bountyMax = readNumber(value.bounty_max);
+    const scopeTags = readStringArray(value.scope_tags);
+    return stripUndefined({
+        id,
+        handle: readString(value.handle),
+        name: readString(value.name),
+        platform: readString(value.platform),
+        platform_url: readString(value.link),
+        bbradar_url: id ? `${webBaseUrl}/programs/${encodeURIComponent(id)}` : undefined,
+        opportunity_tag: sanitizeOpportunityTag(value.opportunity_tag),
+        reward_range: bountyMin === undefined && bountyMax === undefined ? undefined : { min: bountyMin, max: bountyMax },
+        public_report_count: reportCount,
+        public_report_count_label: reportCountLabel,
+        first_seen_date: readString(value.added_at) ?? readString(value.date_launched),
+        date_launched: readString(value.date_launched),
+        last_updated: readString(value.last_updated),
+        targets_updated_at: readString(value.targets_updated_at),
+        scope_summary: stripUndefined({
+            tags: scopeTags.length > 0 ? scopeTags : undefined,
+            target_counts: sanitizeTargetCounts(value.target_counts),
+            target_activity: sanitizeTargetActivity(value.target_activity)
+        })
+    });
+}
+export function sanitizeTarget(value) {
+    if (!isJsonObject(value)) {
+        return {};
+    }
+    return stripUndefined({
+        target_type: readString(value.target_type) ?? readString(value.type),
+        identifier: readString(value.identifier),
+        display_name: readString(value.display_name),
+        normalized_identifier: readString(value.normalized_identifier),
+        scope_tags: readStringArrayOrUndefined(value.scope_tags),
+        language_tags: readStringArrayOrUndefined(value.language_tags),
+        in_scope: readBoolean(value.in_scope),
+        eligible_for_bounty: readBoolean(value.eligible_for_bounty),
+        severity_score: readNumber(value.severity_score),
+        severity_label: readString(value.severity_label),
+        source_url: readString(value.source_url),
+        added_at: readString(value.added_at),
+        source_added_at: readString(value.source_added_at),
+        last_seen: readString(value.last_seen),
+        last_change_type: readString(value.last_change_type),
+        last_changed_at: readString(value.last_changed_at),
+        is_active: readBoolean(value.is_active),
+        wildcard: readBoolean(value.wildcard),
+        metadata: sanitizeJson(value.metadata)
+    });
+}
+export function sanitizeChange(value, webBaseUrl) {
+    if (!isJsonObject(value)) {
+        return {};
+    }
+    return stripUndefined({
+        id: readNumber(value.id) ?? readString(value.id),
+        change_type: readString(value.change_type),
+        changed_at: readString(value.changed_at),
+        program: sanitizeProgram(value.program, webBaseUrl),
+        target: sanitizeTarget(value.target),
+        metadata: sanitizeJson(value.metadata),
+        diff: sanitizeJson(value.diff)
+    });
+}
+export function sanitizeTargetsForExport(value, limit) {
+    if (typeof value === "string" || value === null) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.slice(0, limit).map(sanitizeTarget);
+    }
+    if (!isJsonObject(value)) {
+        return value;
+    }
+    const targets = Array.isArray(value.targets) ? value.targets.slice(0, limit).map(sanitizeTarget) : undefined;
+    return stripUndefined({
+        targets,
+        meta: sanitizeJson(value.meta),
+        format: readString(value.format),
+        total: readNumber(value.total),
+        generated_at: readString(value.generated_at)
+    });
+}
+export function readObject(value) {
+    return isJsonObject(value) ? value : undefined;
+}
+export function readArray(value) {
+    return Array.isArray(value) ? value : [];
+}
+export function readString(value) {
+    if (typeof value !== "string") {
+        return undefined;
+    }
+    const sanitized = sanitizeString(value);
+    return sanitized.length > 0 ? sanitized : undefined;
+}
+export function readNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+export function readBoolean(value) {
+    return typeof value === "boolean" ? value : undefined;
+}
+export function sanitizeJson(value, depth = 0) {
+    if (depth > MAX_SANITIZED_DEPTH) {
+        return "[truncated]";
+    }
+    if (typeof value === "string") {
+        return sanitizeString(value);
+    }
+    if (typeof value === "number") {
+        return Number.isFinite(value) ? value : undefined;
+    }
+    if (typeof value === "boolean" || value === null) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.slice(0, MAX_SANITIZED_ARRAY_LENGTH).map((entry) => sanitizeJson(entry, depth + 1));
+    }
+    if (isJsonObject(value)) {
+        const entries = [];
+        for (const [key, entry] of Object.entries(value).slice(0, MAX_SANITIZED_OBJECT_KEYS)) {
+            const sanitizedKey = sanitizeString(key).slice(0, MAX_SANITIZED_KEY_LENGTH);
+            const sanitizedEntry = sanitizeJson(entry, depth + 1);
+            if (sanitizedKey.length > 0 && sanitizedEntry !== undefined) {
+                entries.push([sanitizedKey, sanitizedEntry]);
+            }
+        }
+        return Object.fromEntries(entries);
+    }
+    return undefined;
+}
+function readStringArray(value) {
+    return Array.isArray(value)
+        ? value.map(readString).filter((entry) => entry !== undefined)
+        : [];
+}
+function readStringArrayOrUndefined(value) {
+    const entries = readStringArray(value);
+    return entries.length > 0 ? entries : undefined;
+}
+function sanitizeOpportunityTag(value) {
+    if (!isJsonObject(value)) {
+        return undefined;
+    }
+    return stripUndefined({
+        tier: readString(value.tier),
+        label: readString(value.label),
+        description: readString(value.description),
+        reason: readString(value.reason),
+        opportunity_score: readNumber(value.opportunity_score),
+        freshness: readNumber(value.freshness),
+        competition: readNumber(value.competition),
+        reward: readNumber(value.reward),
+        scope_bonus: readNumber(value.scope_bonus),
+        signal_count: readNumber(value.signal_count),
+        is_vdp: readBoolean(value.is_vdp)
+    });
+}
+function sanitizeTargetCounts(value) {
+    if (!isJsonObject(value)) {
+        return undefined;
+    }
+    return stripUndefined({
+        total: readNumber(value.total),
+        in_scope: readNumber(value.in_scope),
+        out_of_scope: readNumber(value.out_of_scope),
+        eligible_for_bounty: readNumber(value.eligible_for_bounty),
+        wildcard: readNumber(value.wildcard)
+    });
+}
+function sanitizeTargetActivity(value) {
+    if (!isJsonObject(value)) {
+        return undefined;
+    }
+    return stripUndefined({
+        latest_change_at: readString(value.latest_change_at),
+        latest_added_at: readString(value.latest_added_at),
+        added_24h: readNumber(value.added_24h),
+        added_7d: readNumber(value.added_7d),
+        removed_7d: readNumber(value.removed_7d)
+    });
+}
+function sanitizeString(value) {
+    return value.replace(CONTROL_CHARS, " ").trim().slice(0, MAX_SANITIZED_STRING_LENGTH);
+}
+//# sourceMappingURL=sanitize.js.map

package/dist/sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAmB,MAAM,WAAW,CAAC;AAE1E,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAC1C,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAE/C,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,UAAkB;IAChE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG,UAAU,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEpD,OAAO,cAAc,CAAC;QACpB,EAAE;QACF,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QAChC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QAChF,eAAe,EAAE,sBAAsB,CAAC,KAAK,CAAC,eAAe,CAAC;QAC9D,YAAY,EAAE,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE;QACjH,mBAAmB,EAAE,WAAW;QAChC,yBAAyB,EAAE,gBAAgB;QAC3C,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9E,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9C,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;QAC5C,kBAAkB,EAAE,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACxD,aAAa,EAAE,cAAc,CAAC;YAC5B,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAClD,aAAa,EAAE,oBAAoB,CAAC,KAAK,CAAC,aAAa,CAAC;YACxD,eAAe,EAAE,sBAAsB,CAAC,KAAK,CAAC,eAAe,CAAC;SAC/D,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QACpE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QACxC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;QAC5C,qBAAqB,EAAE,UAAU,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAC9D,UAAU,EAAE,0BAA0B,CAAC,KAAK,CAAC,UAAU,CAAC;QACxD,aAAa,EAAE,0BAA0B,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9D,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;QACrC,mBAAmB,EAAE,WAAW,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC3D,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC;QAChD,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC;QAChD,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QACxC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;QAClD,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;QACtC,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACpD,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;QAClD,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;QACvC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;QACrC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;KACvC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,UAAkB;IAC/D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1C,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QACxC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC;QACnD,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;QACtC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,KAAa;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7G,OAAO,cAAc,CAAC;QACpB,OAAO;QACP,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAExC,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACpD,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAChC,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACnG,CAAC;IAED,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAA6B,EAAE,CAAC;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC,EAAE,CAAC;YACrF,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YAC5E,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAEtD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;QAC/E,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1C,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QAChC,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACtD,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;QACtC,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1C,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QAChC,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1C,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;QAC5C,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;QAC5C,mBAAmB,EAAE,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC;QAC1D,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,cAAc,CAAC;QACpB,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACpD,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC;QAClD,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC;QACtC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QACpC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC;AACxF,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { BBRadarClient } from "./bbradarClient.js";
+import type { ServerConfig } from "./config.js";
+export declare function createBbradarServer(client: BBRadarClient, config: ServerConfig): McpServer;