@nodatachat/mcp 0.8.0 → 0.9.0

package/dist/index.js

@@ -31,12 +31,16 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { z } from "zod";
+// Our deepest content scanner, shipped as its own zero-dep, Node-native npm
+// package. nodata_scan_folder wires to it directly (not a reimplementation) so
+// the "SEE what's sensitive" step runs INSIDE this one command, entirely local.
+import { runFolderScan, silentLogger, formatFolderScan } from "@nodatachat/folder-scan";
 import { homedir, hostname } from "node:os";
-import { join } from "node:path";
+import { join, resolve, basename } from "node:path";
 import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";
 import { spawn } from "node:child_process";
 import { generateKeyPairSync, createPrivateKey, sign, randomBytes } from "node:crypto";
-const VERSION = "0.8.0";
+const VERSION = "0.9.0";
 // ---------------------------------------------------------------------------
 // Local credential store — "register once, autoload forever"
 // ---------------------------------------------------------------------------
@@ -614,8 +618,8 @@ const SETUP_STEPS = "TURN THE DATA TOOLS ON — 3 steps, about a minute, once:\n
 // Admin mode: connected. Frame the whole product as the developer's real journey
 // — SEE -> CHOOSE -> PROVE — each step a plain-language ask mapped to a tool.
 const START_OUTCOMES_ADMIN = "NOW — TURN YOUR DATA INTO AN AGENT THAT CAN'T LEAK, in 3 asks (just say them in plain words):\n\n" +
-    "  1. SEE what's sensitive    open  https://www.nodatacapsule.com/ai-folder\n" +
-    "                             -> pick a folder; it shows what an AI could read. Nothing uploads.\n\n" +
+    "  1. SEE what's sensitive    run  nodata_scan_folder  — scans a local folder right here, nothing\n" +
+    "                             uploads (or open https://www.nodatacapsule.com/ai-folder in a browser).\n\n" +
     "  2. CHOOSE what to release  say  \"let <agent> read name + plan on <table>, hide the rest\"\n" +
     "                             -> I run nodata_register_table + nodata_grant; the agent gets a token.\n\n" +
     "  3. PROVE & control         the agent now reads ONLY those columns — the rest never decrypt.\n" +
@@ -805,6 +809,65 @@ function registerConnectTool(server, baseUrl) {
     });
 }
 // ---------------------------------------------------------------------------
+// nodata_scan_folder — SEE what's sensitive, locally, before you govern it
+// ---------------------------------------------------------------------------
+// The journey's first step ("SEE") brought inside the one command. It runs our
+// deep content scanner (the published @nodatachat/folder-scan — the same detection
+// engine the NoData agent uses: 24 secret patterns + checksum-validated PII, and
+// PDF/Office text extraction) ENTIRELY on this machine — nothing uploads — over a
+// folder the developer names, then points at register_table + grant for what it
+// surfaces. Local compute needs no credential, so this is offered even in setup
+// mode: scan before you even sign up.
+function formatScanReport(r) {
+    // The neutral report comes from the scanner package (shared with its CLI);
+    // the MCP only adds the governance bridge — turn what the scan surfaced into
+    // the next step of the same journey.
+    const base = formatFolderScan(r);
+    if (r.error)
+        return base;
+    return (base +
+        "\n\nGOVERN what it surfaced — same journey, inside this command:\n" +
+        "  · CHOOSE what an agent may read:  nodata_register_table  then  nodata_grant   (denied columns never decrypt)\n" +
+        "  · PROVE every access afterwards:  nodata_evidence\n" +
+        "\nWant a standalone deep scan any time? npx @nodatachat/folder-scan  (this same engine).");
+}
+function registerScanFolderTool(server) {
+    server.registerTool("nodata_scan_folder", {
+        description: "SEE what's sensitive before you govern it. Scans a LOCAL folder for hardcoded secrets and unencrypted PII (checksum-validated — Israeli ID / Luhn credit-card / IBAN) with NoData's deep content scanner, reading PDFs and Office files too, ENTIRELY on this machine — nothing uploads, no credential needed. Returns the findings by file and severity plus the first fix, then points at nodata_register_table + nodata_grant to govern what it found. If the user asks to scan / audit / check a folder or repo for sensitive data, secrets, or exposure, call this.",
+        inputSchema: {
+            path: z
+                .string()
+                .optional()
+                .describe("Folder to scan (absolute or relative). Default: the directory the server runs in."),
+        },
+    }, async ({ path: scanPath }) => {
+        const dir = (scanPath ?? ".").trim() || ".";
+        const absDir = resolve(dir);
+        if (!existsSync(absDir)) {
+            return {
+                content: [{ type: "text", text: `No folder found at: ${absDir}\nPass an existing path, e.g. nodata_scan_folder path: "."` }],
+            };
+        }
+        try {
+            // Deep scanner: async, takes an injected logger. silentLogger keeps the
+            // MCP's stdout (JSON-RPC) clean; the scan never writes to stdout itself.
+            const report = await runFolderScan({
+                target_id: "mcp",
+                target_label: basename(absDir),
+                target_path: absDir,
+                log: silentLogger,
+            });
+            return { content: [{ type: "text", text: formatScanReport(report) }] };
+        }
+        catch (e) {
+            return {
+                content: [{ type: "text", text: `Scan failed: ${e instanceof Error ? e.message : String(e)}` }],
+                isError: true,
+            };
+        }
+    });
+}
+// ---------------------------------------------------------------------------
 // Server setup
 // ---------------------------------------------------------------------------
 async function main() {
@@ -823,6 +886,10 @@ async function main() {
     if (grantToken)
         registerAgentTool(server, baseUrl, grantToken);
     registerGetStarted(server, mode);
+    // The local exposure scan needs no credential — offer it wherever the owner is
+    // driving (setup, before signup, or admin), just not to a scoped agent.
+    if (mode !== "agent")
+        registerScanFolderTool(server);
     if (mode === "setup") {
         registerConnectTool(server, baseUrl);
         console.error("nodata-mcp: no credential given — running in setup mode (data tools disabled).\n" +

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nodatachat/mcp",
-  "version": "0.8.0",
-  "description": "NoData MCP Server — govern data AND code for AI agents: decide (may I?) + retrieve (authorized context) + read + secret-blind invoke + blind code advise/patch (fix code without exposure), plus admin governance/encrypt/decrypt/deliver",
+  "version": "0.9.0",
+  "description": "NoData MCP Server — scan a folder for exposure (locally, nothing uploads) + govern data AND code for AI agents: decide (may I?) + retrieve (authorized context) + read + secret-blind invoke + blind code advise/patch (fix code without exposure), plus admin governance/encrypt/decrypt/deliver",
   "bin": {
     "nodata-mcp": "dist/index.js"
   },
@@ -13,6 +13,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
+    "@nodatachat/folder-scan": "^1.0.0",
     "zod": "^4.0.0"
   },
   "devDependencies": {