@nodatachat/mcp 0.9.0 → 1.1.0

package/dist/index.js

@@ -1,910 +1,109 @@
 #!/usr/bin/env node
-/**
- * NoData MCP Server
- *
- * Two modes — the credential you give it decides what it can do:
- *
- *   ADMIN MODE  (--api-key sk_live_...)
- *     Manage governance + blind-relay from inside any MCP client:
- *       nodata_register_table · nodata_grant · nodata_revoke
- *       nodata_encrypt · nodata_decrypt · nodata_deliver · nodata_evidence
- *
- *   AGENT MODE  (--grant-token ndca-...)
- *     This is the "permission management for language models" artifact.
- *     You hand an AI agent a grant token; this server then exposes tools
- *     scoped to exactly that grant:
- *       nodata_decide   — ask "may I reach this?" and get a decision + proof,
- *                         never any data (plan before you read).
- *       nodata_retrieve — get prompt-ready context filtered to what you may
- *                         see, with an accounting of what was withheld.
- *       nodata_read     — read governed data (denied columns never decrypt).
- *       nodata_use      — invoke a secret-blind capability: the Capsule injects
- *                         the sealed credential server-side and returns only the
- *                         result; the agent never receives the secret.
- *     Every decide/retrieve/read/invoke emits a receipt. Point any MCP client
- *     (Claude, an agent runtime) at it: it physically cannot exceed its grant.
- *
- * Usage:
- *   nodata-mcp --api-key sk_live_xxx
- *   nodata-mcp --grant-token ndca-xxx [--base-url https://www.nodatacapsule.com]
- */
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { z } from "zod";
-// Our deepest content scanner, shipped as its own zero-dep, Node-native npm
-// package. nodata_scan_folder wires to it directly (not a reimplementation) so
-// the "SEE what's sensitive" step runs INSIDE this one command, entirely local.
-import { runFolderScan, silentLogger, formatFolderScan } from "@nodatachat/folder-scan";
-import { homedir, hostname } from "node:os";
-import { join, resolve, basename } from "node:path";
-import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";
-import { spawn } from "node:child_process";
-import { generateKeyPairSync, createPrivateKey, sign, randomBytes } from "node:crypto";
-const VERSION = "0.9.0";
-// ---------------------------------------------------------------------------
-// Local credential store — "register once, autoload forever"
-// ---------------------------------------------------------------------------
-// This is the apply-side of "registration ≠ login": you register ONCE (in the
-// browser, where the recovery phrase + email verify happen), nodata_connect
-// saves an identity here, and every later start reads it back — no re-register,
-// no re-typing the launch command. The file is chmod 600.
-//
-// Two identity shapes live here:
-//   · device — a DEVICE PRIVATE KEY (the preferred, hardened path). No reusable
-//     bearer is stored; each start proves possession by signing a fresh nonce
-//     (POST /api/v1/attest) and gets a 15-min token. A stolen file is a
-//     revocable device key, not a replayable credential.
-//   · api_key — the org key at rest (the pre-attest fallback). Still supported
-//     for a backend that predates the attest endpoints; it is the standard
-//     CLI-login posture (gh/npm/vercel store a token the same way).
-// nodata_connect writes `device` when enrollment succeeds and falls back to
-// `api_key` otherwise. See docs/ATTEST-FABRIC-IDENTITY-SPEC.md.
-const CRED_DIR = join(homedir(), ".nodata");
-const CRED_FILE = join(CRED_DIR, "credentials.json");
-function readStoredCredential() {
-    try {
-        if (!existsSync(CRED_FILE))
-            return null;
-        const parsed = JSON.parse(readFileSync(CRED_FILE, "utf8"));
-        if (!parsed)
-            return null;
-        const hasDevice = parsed.device && typeof parsed.device.private_key_pkcs8_b64 === "string";
-        const hasKey = typeof parsed.api_key === "string" && parsed.api_key;
-        return hasDevice || hasKey ? parsed : null;
-    }
-    catch {
-        // A corrupt or unreadable store must never crash startup — fall through to
-        // setup mode, where nodata_connect can rewrite it.
-        return null;
-    }
-}
-function writeStoredCredential(cred) {
-    mkdirSync(CRED_DIR, { recursive: true });
-    const payload = JSON.stringify({ ...cred, saved_at: new Date().toISOString() }, null, 2);
-    writeFileSync(CRED_FILE, payload, { mode: 0o600 });
-    // writeFileSync's mode is ignored if the file already existed; enforce it.
-    try {
-        chmodSync(CRED_FILE, 0o600);
-    }
-    catch {
-        /* platforms without POSIX perms (Windows) — best effort */
-    }
-}
-const USAGE = `nodata-mcp v${VERSION} — NoData MCP server\n\n` +
-    "  ADMIN mode:  nodata-mcp --api-key sk_live_...\n" +
-    "  AGENT mode:  nodata-mcp --grant-token ndca-...\n" +
-    "  Options:     --base-url <url>   (default https://www.nodatacapsule.com)\n" +
-    "               --help · --version\n\n" +
-    "Env vars: NODATA_API_KEY · NODATA_GRANT_TOKEN · NODATA_BASE_URL\n" +
-    "Get a free API key: https://www.nodatacapsule.com/developers/get-started\n" +
-    "Mint a grant token: POST /api/v1/governance/grant (or the nodata_grant tool).";
-function parseArgs(argv) {
-    let apiKey = "";
-    let grantToken = "";
-    let baseUrl = "https://www.nodatacapsule.com";
-    for (let i = 0; i < argv.length; i++) {
-        if (argv[i] === "--api-key" && argv[i + 1]) {
-            apiKey = argv[++i];
-        }
-        else if (argv[i] === "--grant-token" && argv[i + 1]) {
-            grantToken = argv[++i];
-        }
-        else if (argv[i] === "--base-url" && argv[i + 1]) {
-            baseUrl = argv[++i];
-        }
-        else if (argv[i] === "--help" || argv[i] === "-h") {
-            console.log(USAGE);
-            process.exit(0);
-        }
-        else if (argv[i] === "--version" || argv[i] === "-v") {
-            console.log(VERSION);
-            process.exit(0);
-        }
-        else if (argv[i].startsWith("--")) {
-            // A typo like --apikey silently degrading to setup mode is worse than noise.
-            console.error(`nodata-mcp: unknown option '${argv[i]}' (see --help)`);
-        }
-    }
-    let credentialSource = apiKey || grantToken ? "flag" : "none";
-    if (!apiKey && process.env.NODATA_API_KEY) {
-        apiKey = process.env.NODATA_API_KEY;
-        credentialSource = "env";
-    }
-    if (!grantToken && process.env.NODATA_GRANT_TOKEN) {
-        grantToken = process.env.NODATA_GRANT_TOKEN;
-        if (credentialSource === "none")
-            credentialSource = "env";
-    }
-    if (process.env.NODATA_BASE_URL)
-        baseUrl = process.env.NODATA_BASE_URL;
-    // Last resort: what nodata_connect saved. An explicit flag or env always wins,
-    // so this only fires on a bare `npx @nodatachat/mcp` — the "autoload forever"
-    // path after a one-time connect. A stored DEVICE (attest) is preferred over a
-    // stored api_key.
-    let device;
-    if (!apiKey && !grantToken) {
-        const stored = readStoredCredential();
-        if (stored) {
-            // Honor a stored base_url only if nothing more explicit set one.
-            if (!process.env.NODATA_BASE_URL && baseUrl === "https://www.nodatacapsule.com" && stored.base_url) {
-                baseUrl = stored.base_url;
-            }
-            if (stored.device) {
-                device = stored.device;
-                credentialSource = "stored";
-            }
-            else if (stored.api_key) {
-                apiKey = stored.api_key;
-                credentialSource = "stored";
-            }
-        }
-    }
-    baseUrl = baseUrl.replace(/\/+$/, "");
-    return { apiKey, grantToken, baseUrl, credentialSource, device };
-}
-// Without a deadline a dead network turns a tool call into an indefinite hang
-// inside the MCP client; 30s comfortably covers a slow decide/retrieve.
-const REQUEST_TIMEOUT_MS = 30_000;
-async function doFetch(url, init) {
-    let res;
-    try {
-        res = await fetch(url, { ...init, signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
-    }
-    catch (err) {
-        const timedOut = err instanceof Error && err.name === "TimeoutError";
-        return {
-            ok: false,
-            status: 0,
-            body: {
-                error: timedOut
-                    ? `Request timed out after ${REQUEST_TIMEOUT_MS / 1000}s: ${url}`
-                    : `Network error reaching ${url}: ${err instanceof Error ? err.message : String(err)}`,
-            },
-        };
-    }
-    let parsed;
-    try {
-        parsed = await res.json();
-    }
-    catch {
-        parsed = { error: `Non-JSON response (HTTP ${res.status})` };
-    }
-    return { ok: res.ok, status: res.status, body: parsed };
-}
-async function resolveBearer(bearer) {
-    if (typeof bearer === "string")
-        return { token: bearer };
-    try {
-        return { token: await bearer() };
-    }
-    catch (err) {
-        return {
-            error: { ok: false, status: 0, body: { error: `Could not obtain an access token: ${err instanceof Error ? err.message : String(err)}` } },
-        };
-    }
-}
-async function apiPost(baseUrl, bearer, path, body) {
-    const r = await resolveBearer(bearer);
-    if ("error" in r)
-        return r.error;
-    return doFetch(`${baseUrl}${path}`, {
-        method: "POST",
-        headers: {
-            "Content-Type": "application/json",
-            Authorization: `Bearer ${r.token}`,
-        },
-        body: JSON.stringify(body),
-    });
-}
-async function apiGet(baseUrl, bearer, path, params) {
-    const r = await resolveBearer(bearer);
-    if ("error" in r)
-        return r.error;
-    const url = new URL(`${baseUrl}${path}`);
-    for (const [key, val] of Object.entries(params)) {
-        if (val !== undefined && val !== "")
-            url.searchParams.set(key, val);
-    }
-    return doFetch(url.toString(), {
-        method: "GET",
-        headers: { Authorization: `Bearer ${r.token}` },
-    });
-}
-function formatResult(resp) {
-    const text = JSON.stringify(resp.body, null, 2);
-    if (!resp.ok) {
-        return {
-            content: [{ type: "text", text: `Error (HTTP ${resp.status}):\n${text}` }],
-            isError: true,
-        };
-    }
-    return { content: [{ type: "text", text }] };
-}
-/** Decode the handle out of an agent grant token (ndca-<jwt>). */
-function handleFromGrant(token) {
-    try {
-        const jwt = token.startsWith("ndca-") ? token.slice(5) : token;
-        const payload = jwt.split(".")[1];
-        if (!payload)
-            return null;
-        const json = JSON.parse(Buffer.from(payload.replace(/-/g, "+").replace(/_/g, "/"), "base64").toString("utf8"));
-        return json.handle ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-// ---------------------------------------------------------------------------
-// Device attestation — the hardened credential path ("registration ≠ login")
-// ---------------------------------------------------------------------------
-// The client holds an Ed25519 PRIVATE key that never leaves this machine. Each
-// session it signs a fresh server nonce (POST /api/v1/attest) and gets a 15-min
-// token the governance surface already accepts — no reusable key at rest.
-// Reuses the shipped enrolled-agent challenge model server-side.
-const ATTEST_REFRESH_BUFFER_MS = 5 * 60_000; // refresh 5m before the 15m token expires
-function generateDeviceKeypair() {
-    const { publicKey, privateKey } = generateKeyPairSync("ed25519");
-    const spki = publicKey.export({ format: "der", type: "spki" });
-    const pkcs8 = privateKey.export({ format: "der", type: "pkcs8" });
-    return { publicKeyHex: spki.subarray(-32).toString("hex"), privateKeyPkcs8B64: pkcs8.toString("base64") };
-}
-function signChallenge(privateKeyPkcs8B64, challenge) {
-    const key = createPrivateKey({ key: Buffer.from(privateKeyPkcs8B64, "base64"), format: "der", type: "pkcs8" });
-    return sign(null, Buffer.from(challenge, "utf8"), key).toString("base64");
-}
-/** A stable, valid device handle derived from the machine (host + short random). */
-function defaultDeviceHandle() {
-    const host = hostname().toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 20) || "device";
-    const head = /^[a-z]/.test(host) ? host : `d-${host}`;
-    return `${head}-${randomBytes(3).toString("hex")}`.slice(0, 32);
-}
-/** Enroll a device public key under the org that owns `apiKey`; returns its org_id. */
-async function enrollDevice(baseUrl, apiKey, handle, label, publicKeyHex) {
-    const resp = await apiPost(baseUrl, apiKey, "/api/v1/attest/devices", {
-        handle,
-        label,
-        ed25519_pubkey_hex: publicKeyHex,
-    });
-    if (resp.ok) {
-        const orgId = resp.body.org_id ?? "";
-        return orgId ? { ok: true, orgId } : { ok: false, status: resp.status, error: "enroll response missing org_id" };
-    }
-    return { ok: false, status: resp.status, error: resp.body?.error ?? `HTTP ${resp.status}` };
-}
-/** One attest round: challenge → sign → token. Throws with a clear message on failure. */
-async function attestOnce(baseUrl, device) {
-    // Both attest endpoints are public (the signature is the auth), so the bearer is unused.
-    const ch = await apiPost(baseUrl, "", "/api/v1/attest/challenge", { org_id: device.org_id, handle: device.handle });
-    if (!ch.ok)
-        throw new Error(`challenge: ${ch.body?.error ?? `HTTP ${ch.status}`}`);
-    const { challenge, nonce } = ch.body;
-    if (!challenge || !nonce)
-        throw new Error("challenge response malformed");
-    const signature = signChallenge(device.private_key_pkcs8_b64, challenge);
-    const at = await apiPost(baseUrl, "", "/api/v1/attest", { org_id: device.org_id, handle: device.handle, nonce, signature });
-    if (!at.ok)
-        throw new Error(`attest: ${at.body?.error ?? `HTTP ${at.status}`}`);
-    const body = at.body;
-    if (!body.allowed || !body.access_token)
-        throw new Error(`attestation rejected: ${body.reason ?? "denied"}`);
-    return {
-        token: body.access_token,
-        expiresAtMs: body.expires_at ? Date.parse(body.expires_at) : Date.now() + 15 * 60_000,
-    };
-}
-/** A Bearer that attests lazily and refreshes before the token lapses. */
-function deviceTokenProvider(baseUrl, device) {
-    let cached = null;
-    return async () => {
-        if (!cached || Date.now() >= cached.expiresAtMs - ATTEST_REFRESH_BUFFER_MS) {
-            cached = await attestOnce(baseUrl, device);
-        }
-        return cached.token;
-    };
-}
-// ---------------------------------------------------------------------------
-// Tool registration
-// ---------------------------------------------------------------------------
-function registerAdminTools(server, baseUrl, apiKey) {
-    // ── Governance ──────────────────────────────────────────────────────
-    server.registerTool("nodata_register_table", {
-        description: "Register one of your own tables as AI-agent-readable ('connect your data'). Declares which columns are encrypted (per-column key release) and which are plaintext metadata. After this, grants can target the table.",
-        inputSchema: {
-            table_name: z.string().describe("Your SQL table name"),
-            encrypted_columns: z.array(z.string()).describe("Columns stored as <col>_ct/_iv/_tag triplets"),
-            plaintext_columns: z.array(z.string()).optional().describe("Plaintext metadata/filter columns"),
-            classification_column: z.string().optional().describe("Plaintext column carrying the classification value"),
-        },
-    }, async ({ table_name, encrypted_columns, plaintext_columns, classification_column }) => {
-        const resp = await apiPost(baseUrl, apiKey, "/api/v1/governance/tables", {
-            table_name,
-            encrypted_columns,
-            plaintext_columns: plaintext_columns ?? [],
-            classification_column,
-        });
-        return formatResult(resp);
-    });
-    server.registerTool("nodata_grant", {
-        description: "Issue an AI agent a claim-scoped grant over your data — claims, not blanket access. Returns a grant_token (shown once) the agent presents to read. Denied columns never decrypt.",
-        inputSchema: {
-            agent: z.string().describe("Agent label (becomes its handle)"),
-            table: z.string().optional().describe("Target table (default agent_demo_records)"),
-            columns: z.array(z.string()).describe("Columns the agent may read"),
-            where: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional().describe("Equality filter (plaintext cols only)"),
-            classifications: z.array(z.string()).optional().describe("Allowed classification values; empty = no gating"),
-            ttl_seconds: z.number().optional().describe("Token lifetime (default 30d, max 1y)"),
-        },
-    }, async ({ agent, table, columns, where, classifications, ttl_seconds }) => {
-        const resp = await apiPost(baseUrl, apiKey, "/api/v1/governance/grant", {
-            agent,
-            table,
-            columns,
-            where,
-            classifications,
-            ttl_seconds,
-        });
-        return formatResult(resp);
-    });
-    server.registerTool("nodata_revoke", {
-        description: "Revoke an agent's grant by handle (kills all its active credentials) or by a specific jti. Revocation is mathematics — the next read 401s and any cached data is governance-dead.",
-        inputSchema: {
-            handle: z.string().optional().describe("Agent handle to revoke"),
-            jti: z.string().optional().describe("Specific credential jti to revoke"),
-            reason: z.string().optional(),
-        },
-    }, async ({ handle, jti, reason }) => {
-        const resp = await apiPost(baseUrl, apiKey, "/api/v1/governance/revoke", { handle, jti, reason });
-        return formatResult(resp);
-    });
-    // ── Blind relay (kept from v0.1) ────────────────────────────────────
-    server.registerTool("nodata_encrypt", {
-        description: "Encrypt a sensitive field value using Capsule Blind Relay. Returns ciphertext. NoData stores nothing — the key is embedded in the ciphertext for YOU to store.",
-        inputSchema: {
-            field: z.string(),
-            value: z.string(),
-            context: z.string().optional(),
-        },
-    }, async ({ field, value, context }) => {
-        const body = { field, value };
-        if (context)
-            body.context = context;
-        return formatResult(await apiPost(baseUrl, apiKey, "/api/v1/encrypt", body));
-    });
-    server.registerTool("nodata_decrypt", {
-        description: "Decrypt a Capsule ciphertext back to plaintext (aes256gcm:v1:iv:cipher:key format).",
-        inputSchema: {
-            ciphertext: z.string(),
-            field: z.string().optional(),
-            requester: z.string().optional(),
-        },
-    }, async ({ ciphertext, field, requester }) => {
-        const body = { ciphertext };
-        if (field)
-            body.field = field;
-        if (requester)
-            body.requester = requester;
-        return formatResult(await apiPost(baseUrl, apiKey, "/api/v1/decrypt", body));
-    });
-    server.registerTool("nodata_deliver", {
-        description: "Create a burn-after-read secure link for delivering sensitive content. Returns a view URL and OTP.",
-        inputSchema: {
-            content: z.string(),
-            to: z.string().optional(),
-            maxViews: z.number().optional(),
-            ttl: z.string().optional(),
-            burn: z.boolean().optional(),
-        },
-    }, async ({ content, to, maxViews, ttl, burn }) => {
-        const body = { content };
-        if (to)
-            body.to = to;
-        if (maxViews !== undefined)
-            body.maxViews = maxViews;
-        if (ttl)
-            body.ttl = ttl;
-        if (burn !== undefined)
-            body.burn = burn;
-        return formatResult(await apiPost(baseUrl, apiKey, "/api/v1/deliver", body));
-    });
-    server.registerTool("nodata_evidence", {
-        description: "Retrieve the audit trail of governance/encryption events. Metadata only — never content, keys, or plaintext.",
-        inputSchema: {
-            from: z.string().optional(),
-            to: z.string().optional(),
-            action: z.string().optional(),
-            limit: z.number().optional(),
-        },
-    }, async ({ from, to, action, limit }) => {
-        const params = {
-            from,
-            to,
-            action,
-            limit: limit !== undefined ? String(limit) : undefined,
-        };
-        return formatResult(await apiGet(baseUrl, apiKey, "/api/v1/evidence", params));
-    });
-}
-function registerAgentTool(server, baseUrl, grantToken) {
-    const handle = handleFromGrant(grantToken);
-    if (!handle) {
-        // decide/retrieve are bearer-only and still work; read/use need the handle.
-        // Say so at startup instead of surprising the agent mid-conversation.
-        console.error("nodata-mcp: warning — could not derive an agent handle from the grant token " +
-            "(expected ndca-<jwt> with a 'handle' claim). nodata_decide/nodata_retrieve will work; " +
-            "nodata_read/nodata_use will fail until a valid grant token is provided.");
-    }
-    // ── Access Compute · the "may I?" oracle (P0) ───────────────────────
-    // Returns ONLY a decision + a signed proof, never any content. A planner
-    // calls this to learn what it can reach BEFORE moving data: allow, degrade
-    // (the reachable subset), or deny — with an access-distance cost. Bearer-only
-    // endpoint (no handle in the path).
-    server.registerTool("nodata_decide", {
-        description: "Ask whether this agent MAY reach a resource, WITHOUT reading it. Returns a decision (allow / degrade / deny), the reachable column subset, an access-distance cost, and a signed proof — never any data. Use it to plan: check reachability before you retrieve. Hard-scoped to this server's grant token.",
-        inputSchema: {
-            table: z.string().describe("Table to check (must be in your grant)"),
-            columns: z.array(z.string()).describe("Columns you want to reach"),
-            where: z
-                .record(z.string(), z.union([z.string(), z.number(), z.boolean()]))
-                .optional()
-                .describe("Equality filter (readable columns only)"),
-        },
-    }, async ({ table, columns, where }) => {
-        const resp = await apiPost(baseUrl, grantToken, "/api/access/decide", {
-            resource: { table, columns, where },
-            intent: "read",
-        });
-        return formatResult(resp);
-    });
-    // ── Authorized Context · access-aware RAG (P1) ──────────────────────
-    // Runs the same decision, then returns prompt-ready context filtered to
-    // exactly the allowed columns (denied columns are never decrypted), plus an
-    // accounting of what was withheld and a signed proof.
-    server.registerTool("nodata_retrieve", {
-        description: "Retrieve prompt-ready context for a resource, filtered to exactly what this agent may see. Denied columns are never decrypted; the response includes an accounting of what was withheld (columns + estimated tokens saved) and a signed proof. Prefer this over a raw read when assembling an LLM prompt. Hard-scoped to this server's grant token.",
-        inputSchema: {
-            table: z.string().describe("Table to retrieve from (must be in your grant)"),
-            columns: z.array(z.string()).describe("Columns to include in context"),
-            where: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional(),
-            top_k: z.number().optional().describe("Max rows (default 50, max 200)"),
-        },
-    }, async ({ table, columns, where, top_k }) => {
-        const resp = await apiPost(baseUrl, grantToken, "/api/access/retrieve", {
-            resource: { table, columns, where },
-            top_k,
-        });
-        return formatResult(resp);
-    });
-    server.registerTool("nodata_read", {
-        description: "Read governed data within this agent's grant. You may only request columns your grant allows — denied columns never decrypt server-side, and every read emits a cryptographic receipt. This tool is hard-scoped to the grant token this server was started with.",
-        inputSchema: {
-            table: z.string().describe("Table to read (must be in your grant)"),
-            columns: z.array(z.string()).describe("Columns to read (must be in your grant)"),
-            where: z.record(z.string(), z.union([z.string(), z.number(), z.boolean()])).optional(),
-            limit: z.number().optional().describe("Max rows (default 50, max 200)"),
-        },
-    }, async ({ table, columns, where, limit }) => {
-        if (!handle) {
-            return {
-                content: [{ type: "text", text: "Error: could not derive agent handle from grant token." }],
-                isError: true,
-            };
-        }
-        const resp = await apiPost(baseUrl, grantToken, `/api/agents/${encodeURIComponent(handle)}/read`, {
-            table,
-            columns,
-            where,
-            limit,
-        });
-        return formatResult(resp);
-    });
-    // ── Secret-blind action (AI Access Plane) ───────────────────────────
-    // The headline of the plane: INVOKE a pre-registered capability. The
-    // Capsule injects the sealed secret server-side and returns ONLY the
-    // result — you (the agent / model) never receive the key. Deny-by-default:
-    // you can invoke only capabilities your grant lists. Every invoke emits a
-    // signed receipt proving you acted and never held the secret.
-    server.registerTool("nodata_use", {
-        description: "Invoke a pre-registered capability (deploy, send, charge, query, …) WITHOUT receiving the secret. The Capsule injects the sealed credential server-side and returns only the result. You may invoke only capabilities your grant allows; the secret never reaches you. Hard-scoped to the grant token this server was started with.",
-        inputSchema: {
-            capability: z.string().describe("Capability name to invoke (must be in your grant, e.g. 'deploy-prod')"),
-            params: z.record(z.string(), z.unknown()).optional().describe("Allowlisted params; unknown keys are dropped server-side"),
-            resource_key: z.string().optional().describe("Optional folder/resource the action targets (enforced against corpus scope)"),
-        },
-    }, async ({ capability, params, resource_key }) => {
-        if (!handle) {
-            return {
-                content: [{ type: "text", text: "Error: could not derive agent handle from grant token." }],
-                isError: true,
-            };
-        }
-        const resp = await apiPost(baseUrl, grantToken, `/api/agents/${encodeURIComponent(handle)}/use`, {
-            capability,
-            params,
-            resource_key,
-        });
-        return formatResult(resp);
-    });
-    // ── Code plane · fix code without exposure, over the Fabric ─────────
-    // The agent drives the blind advisor on a code capsule. It sees only a
-    // content-blind projection (or, on an in-boundary model, a scoped slice that
-    // never egresses); the human sees only the changed hunks. Every turn returns
-    // an exposure proof + a receipt. Authorised by the capsule owner listing this
-    // agent's kid in scope.fabric_developers; deny-by-default.
-    server.registerTool("nodata_code_advise", {
-        description: "Ask the blind code advisor to diagnose/fix a bug in a code capsule WITHOUT seeing its source. You receive guidance + a targeted diff + an exposure proof (source never left the boundary); the source is never returned to you. Requires the capsule owner to have granted this agent (scope.fabric_developers). Hard-scoped to this server's grant token.",
-        inputSchema: {
-            capsule_id: z.string().describe("The code capsule to advise on (you must be granted on it)"),
-            question: z.string().optional().describe("What to fix / improve, in natural language"),
-            note: z.string().optional().describe("Extra context for the advisor"),
-            error: z
-                .object({
-                message: z.string().optional(),
-                stack: z.string().optional(),
-                kind: z.string().optional(),
-            })
-                .optional()
-                .describe("An error the code produced, to guide the fix"),
-            steer: z.string().optional().describe("A steer on a refine turn (e.g. 'no, round half-up')"),
-            prior_diff: z.string().optional().describe("The previously proposed diff, to refine"),
-        },
-    }, async ({ capsule_id, question, note, error, steer, prior_diff }) => {
-        if (!handle) {
-            return {
-                content: [{ type: "text", text: "Error: could not derive agent handle from grant token." }],
-                isError: true,
-            };
-        }
-        const resp = await apiPost(baseUrl, grantToken, `/api/agents/${encodeURIComponent(handle)}/code-capsule/${encodeURIComponent(capsule_id)}/advise`, { question, note, error, steer, prior_diff });
-        return formatResult(resp);
-    });
-    server.registerTool("nodata_code_patch", {
-        description: "Submit a fix to a code capsule as a SIGNED, queued patch WITHOUT seeing its source. Provide a raw unified `diff`, or a whole-file `replace` ({path, content}) that is diffed server-side against the sealed source. The source is never persisted or returned; you get back a patch id, the diff hash, and a receipt. Requires a capsule grant (scope.fabric_developers). Hard-scoped to this server's grant token.",
-        inputSchema: {
-            capsule_id: z.string().describe("The code capsule to patch (you must be granted on it)"),
-            summary: z.string().optional().describe("Short human-readable summary of the fix"),
-            diff: z.string().optional().describe("A raw unified diff (advanced)"),
-            replace: z
-                .object({ path: z.string(), content: z.string() })
-                .optional()
-                .describe("Whole-file replacement; the diff is synthesized server-side against sealed source"),
-        },
-    }, async ({ capsule_id, summary, diff, replace }) => {
-        if (!handle) {
-            return {
-                content: [{ type: "text", text: "Error: could not derive agent handle from grant token." }],
-                isError: true,
-            };
-        }
-        const resp = await apiPost(baseUrl, grantToken, `/api/agents/${encodeURIComponent(handle)}/code-capsule/${encodeURIComponent(capsule_id)}/patch`, { summary, diff, replace });
-        return formatResult(resp);
-    });
-}
-const START_ACHIEVEMENT = "WHAT NODATA DOES — in one line:\n" +
-    "  Give any agent real power over your data, without the power to leak it.\n" +
-    "  (Possession is not permission: it can hold the key and still not read what you didn't allow.)\n";
-// Setup mode: NOT connected yet. The one job here is to switch the tools on, so
-// this is a numbered do-this-exactly list — three steps, not a catalogue. The
-// last line answers the two questions everyone asks: "how do I activate?" (/mcp)
-// and "what about next time?" (nothing).
-const SETUP_STEPS = "TURN THE DATA TOOLS ON — 3 steps, about a minute, once:\n\n" +
-    "  1. GET A KEY   call  nodata_connect  (no arguments)\n" +
-    "                 -> opens the signup in your browser: email + company (~30s), a 12-word\n" +
-    "                    recovery phrase to keep, and an ORG KEY shown ONCE. Copy that key.\n\n" +
-    "  2. SAVE IT     call  nodata_connect  again, this time with\n" +
-    "                    api_key: \"<the key you copied>\"\n" +
-    "                 -> saved on this machine; you never paste it again.\n\n" +
-    "  3. ACTIVATE    type  /mcp  (or restart Claude Code) so the tools load.\n\n" +
-    "COMING BACK LATER? Nothing to redo — it starts ready. If the tools look missing, just /mcp.\n";
-// Admin mode: connected. Frame the whole product as the developer's real journey
-// — SEE -> CHOOSE -> PROVE — each step a plain-language ask mapped to a tool.
-const START_OUTCOMES_ADMIN = "NOW — TURN YOUR DATA INTO AN AGENT THAT CAN'T LEAK, in 3 asks (just say them in plain words):\n\n" +
-    "  1. SEE what's sensitive    run  nodata_scan_folder  — scans a local folder right here, nothing\n" +
-    "                             uploads (or open https://www.nodatacapsule.com/ai-folder in a browser).\n\n" +
-    "  2. CHOOSE what to release  say  \"let <agent> read name + plan on <table>, hide the rest\"\n" +
-    "                             -> I run nodata_register_table + nodata_grant; the agent gets a token.\n\n" +
-    "  3. PROVE & control         the agent now reads ONLY those columns — the rest never decrypt.\n" +
-    "                             \"what did it see?\" -> nodata_evidence   ·   \"cut it off\" -> nodata_revoke\n\n" +
-    "Also: a secret even NoData can't read -> nodata_encrypt, then hand it over once -> nodata_deliver.\n";
-// The agent-scoped reader IS the governed agent: it holds only decide/retrieve/read/use,
-// so its steps name those verbs (pointing it at admin tools it lacks would dead-end it).
-const START_OUTCOMES_AGENT = "WHAT YOU CAN DO — scoped to your grant; you reach only what it allows, the rest never decrypts:\n\n" +
-    "  1. PLAN   nodata_decide     \"may I reach X?\" -> allow / partial / deny + a signed proof. No data moves.\n" +
-    "  2. PULL   nodata_retrieve   prompt-ready context, allowed fields only, with a receipt.\n" +
-    "            (nodata_read for raw governed rows.)\n" +
-    "  3. ACT    nodata_use        run a capability with a secret injected server-side — you never see it.\n";
-const START_UNSTUCK = "STUCK? There's always a next step:\n" +
-    "  - Don't see the nodata_* tools? They load when the client starts — type  /mcp  or restart.\n" +
-    "    (Expected, not an error.)\n" +
-    "  - No MCP at all? The same governance runs from one curl, or the guided page:\n" +
-    "    https://www.nodatacapsule.com/developers/get-started\n";
-function startHeader(mode) {
-    if (mode === "setup") {
-        return "You're connected to NoData — but there's NO key yet, so the data tools are still off.\n\n";
-    }
-    if (mode === "agent") {
-        return "You're connected to NoData, scoped to one grant token.\n\n";
-    }
-    return "You're connected to NoData (admin mode). You don't memorize commands — just ask in plain words.\n\n";
-}
-function getStartedText(mode) {
-    // Setup leads with the 3 connect steps (the only thing that matters when off);
-    // admin/agent lead with the journey they can act on right now.
-    if (mode === "setup") {
-        return startHeader(mode) + START_ACHIEVEMENT + "\n" + SETUP_STEPS + "\n" + START_UNSTUCK;
-    }
-    const outcomes = mode === "agent" ? START_OUTCOMES_AGENT : START_OUTCOMES_ADMIN;
-    return startHeader(mode) + START_ACHIEVEMENT + "\n" + outcomes + "\n" + START_UNSTUCK;
-}
-function registerGetStarted(server, mode) {
-    server.registerTool("nodata_get_started", {
-        description: "Call this FIRST (no arguments). NoData in one line: what you can achieve — an agent that " +
-            "cannot leak, a look at what is already exposed, a secret we cannot read — with the single " +
-            "next step for each, and how to recover if the tools or MCP seem stuck. If the user asks what " +
-            "NoData can do, how to start, or why the tools are missing, call this and relay it.",
-        inputSchema: {},
-    }, async () => ({ content: [{ type: "text", text: getStartedText(mode) }] }));
-}
-// ---------------------------------------------------------------------------
-// nodata_connect — setup-mode "get switched on without re-typing the command"
-// ---------------------------------------------------------------------------
-// "Registration ≠ login." Call once with no args → open the real signup in the
-// browser (email + company, the 12-word recovery, the email verify — the parts
-// a headless mint would skip). It shows the org key once; call again with that
-// key → it is saved to ~/.nodata and every later start autoloads it. First run:
-// register + one paste. Every run after: nothing. The only residual is one /mcp,
-// because MCP clients read their tool list at startup (a client fact, not ours).
-const REGISTER_URL_PATH = "/capsule-api/register";
-function openInBrowser(url) {
-    const isWin = process.platform === "win32";
-    const cmd = process.platform === "darwin" ? "open" : isWin ? "cmd" : "xdg-open";
-    const args = isWin ? ["/c", "start", "", url] : [url];
-    try {
-        const child = spawn(cmd, args, { stdio: "ignore", detached: true });
-        // A missing opener (headless box, no xdg-open) must never surface as a tool
-        // error — the URL is always printed too, so the flow proceeds regardless.
-        child.on("error", () => { });
-        child.unref();
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-function registerConnectTool(server, baseUrl) {
-    server.registerTool("nodata_connect", {
-        description: "Switch NoData's data tools on. Step 1: call with NO arguments to open the free signup in a " +
-            "browser (email + company, ~30s — also where your 12-word recovery phrase + email verification " +
-            "happen); it shows an ORG KEY once. Step 2: call this tool again with that key as `api_key` and " +
-            "it is saved on this machine, so every later start comes up ready with nothing to retype. " +
-            "Step 3: type /mcp (or restart) so the client loads the tools.",
-        inputSchema: {
-            api_key: z
-                .string()
-                .optional()
-                .describe("The org key shown once at signup (ndp_… or sk_…). Omit on the first call to open signup."),
-        },
-    }, async ({ api_key }) => {
-        const key = (api_key ?? "").trim();
-        // First call (no key): open the real signup and tell them to come back with it.
-        if (!key) {
-            const url = baseUrl + REGISTER_URL_PATH;
-            const opened = openInBrowser(url);
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: (opened ? "STEP 1 of 3 — opened the NoData signup in your browser:\n  " : "STEP 1 of 3 — open the NoData signup in your browser:\n  ") +
-                            url +
-                            "\n\n" +
-                            "There, about a minute:\n" +
-                            "  - email + company (a personal email is fine for the sandbox)\n" +
-                            "  - a 12-WORD RECOVERY PHRASE — save it; it is the only way back into your org\n" +
-                            "  - your ORG KEY, shown ONCE — copy it\n\n" +
-                            "STEP 2 — come back and call this tool again with the key:\n" +
-                            '  nodata_connect  api_key: "<the key you copied>"\n' +
-                            "and I'll save it so you never paste it again. (Then STEP 3: type /mcp to activate.)",
-                    },
-                ],
-            };
-        }
-        // Shape check — don't persist something that clearly isn't a NoData key.
-        if (!/^(ndp_|sk_)/.test(key)) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "That doesn't look like a NoData org key (it should start with ndp_ or sk_).\n" +
-                            'Copy the key shown once on the signup page and try again: nodata_connect api_key: "ndp_…".',
-                    },
-                ],
-            };
-        }
-        // Preferred path: enroll a DEVICE KEY so no reusable key is stored. Generate
-        // a keypair, register its PUBLIC half under the org (authenticated by the key
-        // the user just pasted), keep only the PRIVATE half. Then every start attests.
-        const { publicKeyHex, privateKeyPkcs8B64 } = generateDeviceKeypair();
-        const handle = defaultDeviceHandle();
-        const label = hostname() || "this device";
-        const enrolled = await enrollDevice(baseUrl, key, handle, label, publicKeyHex);
-        if (enrolled.ok) {
-            try {
-                writeStoredCredential({
-                    device: {
-                        org_id: enrolled.orgId,
-                        handle,
-                        label,
-                        private_key_pkcs8_b64: privateKeyPkcs8B64,
-                        public_key_hex: publicKeyHex,
-                    },
-                    base_url: baseUrl,
-                });
-            }
-            catch (e) {
-                return {
-                    content: [{ type: "text", text: "Enrolled the device, but couldn't save it locally: " + (e instanceof Error ? e.message : String(e)) }],
-                };
-            }
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: `STEP 2 done — this device is enrolled as "${label}" (${handle}), and only its PRIVATE key is\n` +
-                            "saved at ~/.nodata/credentials.json (readable only by you). The org key you pasted was NOT\n" +
-                            "stored: every start now proves possession by signing a fresh challenge and gets a 15-minute token.\n\n" +
-                            "STEP 3 — type /mcp (or restart Claude Code) and the admin tools appear. Next time: nothing to do.",
-                    },
-                ],
-            };
-        }
-        // Fallback: a backend that predates the attest endpoints. Store the key at
-        // rest (the Part-2 path) so onboarding still works end to end.
-        const attestUnavailable = enrolled.status === 404 || enrolled.status === 0;
-        try {
-            writeStoredCredential({ api_key: key, key_prefix: key.slice(0, 12), base_url: baseUrl });
-        }
-        catch (e) {
-            return {
-                content: [
-                    {
-                        type: "text",
-                        text: "Couldn't save locally: " +
-                            (e instanceof Error ? e.message : String(e)) +
-                            "\nAs a fallback, pass it on launch: claude mcp add nodata --env NODATA_API_KEY=<your key> -- npx @nodatachat/mcp",
-                    },
-                ],
-            };
-        }
-        return {
-            content: [
-                {
-                    type: "text",
-                    text: (attestUnavailable
-                        ? "STEP 2 done — saved your key on this machine (device attestation isn't available on this\nserver yet, so this is the key-at-rest path). "
-                        : `STEP 2 done — saved your key on this machine (device enrollment didn't succeed: ${enrolled.error}). `) +
-                        "Every future start loads it automatically — no re-register, no re-paste.\n\n" +
-                        "STEP 3 — type /mcp (or restart Claude Code) and the admin tools appear. Next time: nothing to do.",
-                },
-            ],
-        };
-    });
-}
-// ---------------------------------------------------------------------------
-// nodata_scan_folder — SEE what's sensitive, locally, before you govern it
-// ---------------------------------------------------------------------------
-// The journey's first step ("SEE") brought inside the one command. It runs our
-// deep content scanner (the published @nodatachat/folder-scan — the same detection
-// engine the NoData agent uses: 24 secret patterns + checksum-validated PII, and
-// PDF/Office text extraction) ENTIRELY on this machine — nothing uploads — over a
-// folder the developer names, then points at register_table + grant for what it
-// surfaces. Local compute needs no credential, so this is offered even in setup
-// mode: scan before you even sign up.
-function formatScanReport(r) {
-    // The neutral report comes from the scanner package (shared with its CLI);
-    // the MCP only adds the governance bridge — turn what the scan surfaced into
-    // the next step of the same journey.
-    const base = formatFolderScan(r);
-    if (r.error)
-        return base;
-    return (base +
-        "\n\nGOVERN what it surfaced — same journey, inside this command:\n" +
-        "  · CHOOSE what an agent may read:  nodata_register_table  then  nodata_grant   (denied columns never decrypt)\n" +
-        "  · PROVE every access afterwards:  nodata_evidence\n" +
-        "\nWant a standalone deep scan any time? npx @nodatachat/folder-scan  (this same engine).");
-}
-function registerScanFolderTool(server) {
-    server.registerTool("nodata_scan_folder", {
-        description: "SEE what's sensitive before you govern it. Scans a LOCAL folder for hardcoded secrets and unencrypted PII (checksum-validated — Israeli ID / Luhn credit-card / IBAN) with NoData's deep content scanner, reading PDFs and Office files too, ENTIRELY on this machine — nothing uploads, no credential needed. Returns the findings by file and severity plus the first fix, then points at nodata_register_table + nodata_grant to govern what it found. If the user asks to scan / audit / check a folder or repo for sensitive data, secrets, or exposure, call this.",
-        inputSchema: {
-            path: z
-                .string()
-                .optional()
-                .describe("Folder to scan (absolute or relative). Default: the directory the server runs in."),
-        },
-    }, async ({ path: scanPath }) => {
-        const dir = (scanPath ?? ".").trim() || ".";
-        const absDir = resolve(dir);
-        if (!existsSync(absDir)) {
-            return {
-                content: [{ type: "text", text: `No folder found at: ${absDir}\nPass an existing path, e.g. nodata_scan_folder path: "."` }],
-            };
-        }
-        try {
-            // Deep scanner: async, takes an injected logger. silentLogger keeps the
-            // MCP's stdout (JSON-RPC) clean; the scan never writes to stdout itself.
-            const report = await runFolderScan({
-                target_id: "mcp",
-                target_label: basename(absDir),
-                target_path: absDir,
-                log: silentLogger,
-            });
-            return { content: [{ type: "text", text: formatScanReport(report) }] };
-        }
-        catch (e) {
-            return {
-                content: [{ type: "text", text: `Scan failed: ${e instanceof Error ? e.message : String(e)}` }],
-                isError: true,
-            };
-        }
-    });
-}
-// ---------------------------------------------------------------------------
-// Server setup
-// ---------------------------------------------------------------------------
-async function main() {
-    const { apiKey, grantToken, baseUrl, credentialSource, device } = parseArgs(process.argv.slice(2));
-    const mode = grantToken ? "agent" : apiKey || device ? "admin" : "setup";
-    const server = new McpServer({
-        name: mode === "agent" ? "NoData (agent-scoped)" : mode === "setup" ? "NoData (setup)" : "NoData",
-        version: VERSION,
-    });
-    // A stored device (attest) is preferred: the admin tools get a token PROVIDER
-    // that signs a fresh challenge per session instead of a static key.
-    if (device)
-        registerAdminTools(server, baseUrl, deviceTokenProvider(baseUrl, device));
-    else if (apiKey)
-        registerAdminTools(server, baseUrl, apiKey);
-    if (grantToken)
-        registerAgentTool(server, baseUrl, grantToken);
-    registerGetStarted(server, mode);
-    // The local exposure scan needs no credential — offer it wherever the owner is
-    // driving (setup, before signup, or admin), just not to a scoped agent.
-    if (mode !== "agent")
-        registerScanFolderTool(server);
-    if (mode === "setup") {
-        registerConnectTool(server, baseUrl);
-        console.error("nodata-mcp: no credential given — running in setup mode (data tools disabled).\n" +
-            "Call nodata_connect (opens signup, enrolls this device), or pass --api-key / --grant-token. See --help.");
-    }
-    else if (device) {
-        console.error(`nodata-mcp: loaded device identity "${device.label}" (${device.handle}) — attest mode; tokens are minted per session.`);
-    }
-    else if (credentialSource === "stored") {
-        console.error("nodata-mcp: loaded saved credential from ~/.nodata/credentials.json (admin mode).");
-    }
-    const transport = new StdioServerTransport();
-    await server.connect(transport);
-}
-main().catch((err) => {
-    console.error("Fatal error:", err);
-    process.exit(1);
-});
+/*! @nodatachat/mcp 1.1.0 | Copyright 2026 Capsule Ltd. | FSL-1.1-ALv2 | see LICENSE.md */
+import{McpServer as _t}from"@modelcontextprotocol/sdk/server/mcp.js";import{StdioServerTransport as vt}from"@modelcontextprotocol/sdk/server/stdio.js";import{z as c}from"zod";import{readdirSync as be,readFileSync as Se,statSync as Q}from"node:fs";import{join as pt}from"node:path";var oe=[{id:"aws-access-key",name:"AWS Access Key",pattern:/(?:^|[^A-Z0-9])AKIA[A-Z2-7]{16}(?:[^A-Z2-7]|$)/,severity:"critical"},{id:"aws-secret-key",name:"AWS Secret Key",pattern:/(?:aws_secret_access_key|aws_secret_key|secret_access_key)\s*[=:]\s*['"]?[A-Za-z0-9/+=]{40}['"]?/,severity:"critical"},{id:"gcp-api-key",name:"GCP API Key",pattern:/AIza[0-9A-Za-z_-]{35}/,severity:"critical"},{id:"gcp-service-account",name:"GCP Service Account",pattern:/"type"\s*:\s*"service_account"/,severity:"critical"},{id:"github-token",name:"GitHub Token",pattern:/gh[pousr]_[0-9a-zA-Z]{36,}/,severity:"critical"},{id:"github-fine-grained",name:"GitHub Fine-Grained Token",pattern:/github_pat_[0-9a-zA-Z_]{22,}/,severity:"critical"},{id:"gitlab-token",name:"GitLab Token",pattern:/glpat-[0-9a-zA-Z_-]{20,}/,severity:"critical"},{id:"stripe-secret",name:"Stripe Secret Key",pattern:/sk_live_[0-9a-zA-Z]{24,}/,severity:"critical"},{id:"stripe-restricted",name:"Stripe Restricted Key",pattern:/rk_live_[0-9a-zA-Z]{24,}/,severity:"critical"},{id:"slack-token",name:"Slack Token",pattern:/xox[baprs]-[0-9a-zA-Z-]{10,}/,severity:"high"},{id:"slack-webhook",name:"Slack Webhook",pattern:/hooks\.slack\.com\/services\/T[0-9A-Z]{8,}\/B[0-9A-Z]{8,}\/[0-9a-zA-Z]{24}/,severity:"high"},{id:"twilio-api-key",name:"Twilio API Key",pattern:/SK[0-9a-fA-F]{32}/,severity:"high"},{id:"sendgrid-api-key",name:"SendGrid API Key",pattern:/SG\.[0-9a-zA-Z_-]{22}\.[0-9a-zA-Z_-]{43}/,severity:"critical"},{id:"postgres-uri",name:"PostgreSQL Connection String",pattern:/postgres(?:ql)?:\/\/[^\s'"]{10,}/,severity:"critical"},{id:"mongodb-uri",name:"MongoDB Connection String",pattern:/mongodb(?:\+srv)?:\/\/[^\s'"]{10,}/,severity:"critical"},{id:"redis-uri",name:"Redis Connection String",pattern:/redis(?:s)?:\/\/[^\s'"]{10,}/,severity:"high"},{id:"openai-key",name:"OpenAI API Key",pattern:/sk-[0-9a-zA-Z]{20,}T3BlbkFJ[0-9a-zA-Z]{20,}/,severity:"critical"},{id:"anthropic-key",name:"Anthropic API Key",pattern:/sk-ant-[0-9a-zA-Z_-]{40,}/,severity:"critical"},{id:"firebase-key",name:"Firebase API Key",pattern:/AIza[0-9A-Za-z_-]{35}/,severity:"high"},{id:"supabase-key",name:"Supabase Service Key",pattern:/eyJ[0-9a-zA-Z_-]{100,}/,severity:"critical"},{id:"private-key",name:"Private Key",pattern:/-----BEGIN (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/,severity:"critical"},{id:"jwt-secret",name:"JWT/Generic Secret",pattern:/(?:jwt_secret|JWT_SECRET|secret_key|SECRET_KEY|api_secret|API_SECRET)\s*[=:]\s*['"][^'"]{8,}['"]/,severity:"high"},{id:"password-in-code",name:"Password in Code",pattern:/(?:password|passwd|pwd)\s*[=:]\s*['"][^'"]{8,}['"]/,severity:"high"},{id:"bearer-token",name:"Bearer Token in Code",pattern:/['"]Bearer\s+[0-9a-zA-Z._-]{20,}['"]/,severity:"high"}],se=/node_modules\/|\.next\/|\.test\.|\.spec\.|__tests__\/|\.env\.example$|\.nodata-proof\.json$|\.git\//,Ue=[{name:"lodash",below:"4.17.21",severity:"critical",cve:"CVE-2021-23337",desc:"Command injection via template"},{name:"minimist",below:"1.2.6",severity:"critical",cve:"CVE-2021-44906",desc:"Prototype pollution"},{name:"json5",below:"2.2.2",severity:"high",cve:"CVE-2022-46175",desc:"Prototype pollution"},{name:"express",below:"4.19.2",severity:"high",cve:"CVE-2024-29041",desc:"Open redirect"},{name:"path-to-regexp",below:"6.3.0",severity:"high",cve:"CVE-2024-45296",desc:"ReDoS"},{name:"sanitize-html",below:"2.12.1",severity:"high",cve:"CVE-2024-21501",desc:"XSS bypass"},{name:"dompurify",below:"3.0.9",severity:"high",cve:"CVE-2024-45801",desc:"mXSS"},{name:"jsonwebtoken",below:"9.0.0",severity:"critical",cve:"CVE-2022-23529",desc:"Key confusion attack"},{name:"jose",below:"4.15.5",severity:"high",cve:"CVE-2024-28176",desc:"DoS via JWE"},{name:"axios",below:"1.6.0",severity:"high",cve:"CVE-2023-45857",desc:"CSRF cookie leak"},{name:"node-fetch",below:"2.6.7",severity:"high",cve:"CVE-2022-0235",desc:"Header leak on redirect"},{name:"serialize-javascript",below:"6.0.2",severity:"critical",cve:"CVE-2024-11831",desc:"XSS via serialization"},{name:"xml2js",below:"0.6.0",severity:"high",cve:"CVE-2023-0842",desc:"Prototype pollution"},{name:"next",below:"14.1.1",severity:"high",cve:"CVE-2024-34350",desc:"SSRF via headers"},{name:"sharp",below:"0.32.6",severity:"high",cve:"CVE-2023-4863",desc:"libwebp heap overflow"},{name:"multer",below:"1.4.5",severity:"high",cve:"CVE-2022-24434",desc:"Prototype pollution"},{name:"tough-cookie",below:"4.1.3",severity:"medium",cve:"CVE-2023-26136",desc:"Prototype pollution"},{name:"semver",below:"7.5.4",severity:"medium",cve:"CVE-2022-25883",desc:"ReDoS"},{name:"ip",below:"2.0.1",severity:"critical",cve:"CVE-2024-29415",desc:"SSRF bypass via octal IP"},{name:"tar",below:"6.2.1",severity:"high",cve:"CVE-2024-28863",desc:"DoS via path traversal"}];function Be(e,t){let n=o=>o.replace(/^[^0-9]*/,"").split(".").map(r=>parseInt(r,10)||0),a=n(e),i=n(t);for(let o=0;o<3;o++){if((a[o]||0)<(i[o]||0))return!0;if((a[o]||0)>(i[o]||0))return!1}return!1}function ce(e){let t=[],n;try{n=JSON.parse(e)}catch{return t}let a={...n.dependencies??{},...n.devDependencies??{}};for(let[i,o]of Object.entries(a)){let r=(o||"").replace(/^[\^~>=<\s]+/,""),s=Ue.find(l=>l.name===i&&Be(r,l.below));s&&t.push({name:i,version:r,vuln:s})}return t}var je=[{pattern:/^(full_?name|first_?name|last_?name|spouse_?name|beneficiary_?name)$/i,type:"name",label:"Person name"},{pattern:/^(email|e_?mail|email_?address)$/i,type:"email",label:"Email address"},{pattern:/^(phone|mobile|telephone|phone_?number|cell_?phone)$/i,type:"phone",label:"Phone number"},{pattern:/^(id_?number|identity|ssn|social_?security|national_?id|teudat_?zehut)$/i,type:"id",label:"ID number"},{pattern:/^(address|street_?address|home_?address)$/i,type:"address",label:"Address"},{pattern:/^(date_?of_?birth|dob|birth_?date|birthday)$/i,type:"dob",label:"Date of birth"},{pattern:/^(bank_?account|iban|account_?number|bank_?details|routing_?number)$/i,type:"financial",label:"Bank account"},{pattern:/^(credit_?card|card_?number|cvv|cc_?number)$/i,type:"financial",label:"Credit card"},{pattern:/^(salary|income|commission|premium|compensation)$/i,type:"financial",label:"Salary / income"},{pattern:/^(medical_?info|health_?conditions|diagnosis|medication|prescription)$/i,type:"medical",label:"Medical"},{pattern:/^(passport|passport_?number|passport_?id)$/i,type:"id",label:"Passport"},{pattern:/^(driver_?license|drivers_?license|dl_?number)$/i,type:"id",label:"Driver license"},{pattern:/^(tax_?id|tin|vat_?number|ein)$/i,type:"financial",label:"Tax ID"},{pattern:/^(insurance_?number|policy_?number|member_?id)$/i,type:"id",label:"Insurance/Policy"},{pattern:/^(biometric|fingerprint|face_?id|retina)$/i,type:"biometric",label:"Biometric"},{pattern:/^(latitude|longitude|lat|lng|geo_?location|coordinates)$/i,type:"location",label:"Geolocation"}],Fe=[{pattern:/^(?:שם|שם_מלא|שם פרטי|שם_פרטי|שם משפחה|שם_משפחה|שם הלקוח|שם בן זוג|שם המבוטח|שם המוטב|שם הילד|שם הקטין)$/i,type:"name",label:"\u05E9\u05DD \u05D0\u05D3\u05DD"},{pattern:/^(?:ת"ז|ת\.ז|ת ז|תז|תעודת זהות|תעודת_זהות|מספר זהות|מס' זהות|teudat_zehut|tz|israeli_id|il_id)$/i,type:"id",label:"\u05EA\u05E2\u05D5\u05D3\u05EA \u05D6\u05D4\u05D5\u05EA"},{pattern:/^(?:דרכון|מספר דרכון|רישיון נהיגה|רישיון_נהיגה|רשיון נהיגה)$/i,type:"id",label:"\u05D3\u05E8\u05DB\u05D5\u05DF/\u05E8\u05D9\u05E9\u05D9\u05D5\u05DF"},{pattern:/^(?:מייל|דוא"ל|דוא_ל|דואר אלקטרוני|אימייל|כתובת מייל)$/i,type:"email",label:"\u05D3\u05D5\u05D0\u05E8 \u05D0\u05DC\u05E7\u05D8\u05E8\u05D5\u05E0\u05D9"},{pattern:/^(?:טלפון|טל'|נייד|פלאפון|סלולרי|מספר טלפון|טלפון נייד)$/i,type:"phone",label:"\u05DE\u05E1\u05E4\u05E8 \u05D8\u05DC\u05E4\u05D5\u05DF"},{pattern:/^(?:כתובת|כתובת מגורים|רחוב|מס בית|עיר|ישוב|יישוב|מיקוד|כתובת מלאה|מען)$/i,type:"address",label:"\u05DB\u05EA\u05D5\u05D1\u05EA"},{pattern:/^(?:תאריך לידה|ת לידה|תאריך הולדת|יום הולדת|גיל)$/i,type:"dob",label:"\u05EA\u05D0\u05E8\u05D9\u05DA \u05DC\u05D9\u05D3\u05D4"},{pattern:/^(?:חשבון בנק|מספר חשבון|מס חשבון|בנק|סניף|iban|iban_il)$/i,type:"financial",label:"\u05D7\u05E9\u05D1\u05D5\u05DF \u05D1\u05E0\u05E7"},{pattern:/^(?:כרטיס אשראי|מספר אשראי|cvv|אשראי)$/i,type:"financial",label:"\u05DB\u05E8\u05D8\u05D9\u05E1 \u05D0\u05E9\u05E8\u05D0\u05D9"},{pattern:/^(?:שכר|משכורת|הכנסה|פרמיה|שכר ברוטו|שכר נטו|תגמול|בונוס|פיצוי)$/i,type:"financial",label:"\u05E9\u05DB\u05E8/\u05D4\u05DB\u05E0\u05E1\u05D4"},{pattern:/^(?:אבחון|אבחנה|מחלה|תרופה|מרשם|בדיקה רפואית|מצב רפואי|חיסון|רגישות|אלרגיה|סוג דם)$/i,type:"medical",label:"\u05DE\u05D9\u05D3\u05E2 \u05E8\u05E4\u05D5\u05D0\u05D9"},{pattern:/^(?:מספר פוליסה|מס פוליסה|פוליסה|מספר חבר|מספר ביטוח)$/i,type:"id",label:"\u05E4\u05D5\u05DC\u05D9\u05E1\u05D4/\u05D7\u05D1\u05E8\u05D5\u05EA"},{pattern:/^(?:שם הילד|תעודת זהות של ילד|ילדים|קטין|מספר ילדים|תעודת לידה)$/i,type:"minor_data",label:"\u05DE\u05D9\u05D3\u05E2 \u05E2\u05DC \u05E7\u05D8\u05D9\u05DF"},{pattern:/^(?:דת|לאום|מין|נטייה מינית|השקפה פוליטית|מצב משפחתי|עדה|מוצא)$/i,type:"sensitive_personal",label:"\u05DE\u05D9\u05D3\u05E2 \u05D0\u05D9\u05E9\u05D9 \u05E8\u05D2\u05D9\u05E9"},{pattern:/^(?:מספר רכב|מס רכב|לוחית רישוי|מספר רישוי)$/i,type:"tracking",label:"\u05DE\u05E1\u05E4\u05E8 \u05E8\u05DB\u05D1"}],Me=/^(id|uuid|created_?at|updated_?at|deleted_?at|status|type|category|description|title|slug|url|path|key|value|enabled|active|public|version|metadata|config|settings|data|content|note|comment|label|color|icon)$/i;function G(e){if(!e)return null;let t=e.trim();if(Me.test(t)||/^name$/i.test(t))return null;for(let n of[...Fe,...je])if(n.pattern.test(t))return{type:n.type,label:n.label};return null}var Z={id:"critical",financial:"critical",medical:"critical",biometric:"critical",minor_data:"critical",sensitive_personal:"critical",email:"high",phone:"high",name:"high",address:"high",dob:"high",tracking:"medium",location:"medium"};function F(e){let t=String(e??"").replace(/\D/g,"");if(t.length===0||t.length>9)return!1;let n=t.padStart(9,"0"),a=0;for(let i=0;i<9;i++){let o=parseInt(n[i]??"0",10)*(i%2+1);o>9&&(o-=9),a+=o}return a%10===0&&parseInt(n,10)>0}var U=/(?:\+972[\s-]?|0)(?:5[0-9]|[2-4]|[89])(?:[\s-]?\d){7}/g;var B=/\bIL\d{2}\s?(?:\d{4}\s?){4}\d{3}\b/g;function Ke(e){let t=String(e??"").replace(/\D/g,"");if(t.length<12||t.length>19)return!1;let n=0,a=!1;for(let i=t.length-1;i>=0;i-=1){let o=parseInt(t[i]??"0",10);a&&(o*=2,o>9&&(o-=9)),n+=o,a=!a}return n%10===0}function He(e){let t=String(e??"").replace(/\s/g,"").toUpperCase();if(!/^[A-Z]{2}\d{2}[A-Z0-9]{10,30}$/.test(t))return!1;let n=t.slice(4)+t.slice(0,4),a=0;for(let i of n){let o=i>="A"&&i<="Z"?String(i.charCodeAt(0)-55):i;for(let r of o)a=(a*10+Number(r))%97}return a===1}var W="(?<![\\d.,])",Y="(?![\\d.,])",ze=[{subkind:"israeli_id",severity:"high",pattern:new RegExp(`${W}\\d{9}${Y}`,"g"),validate:F,hint:"Israeli national ID (check digit verified) in plaintext. Encrypt the column or mask it at rest."},{subkind:"credit_card",severity:"critical",pattern:new RegExp(`${W}(?:\\d[ -]?){12,18}\\d${Y}`,"g"),validate:Ke,hint:"Payment card number (Luhn verified) in plaintext. This is PCI scope."},{subkind:"iban",severity:"high",pattern:/\b[A-Z]{2}\d{2}[A-Z0-9]{10,30}\b/g,validate:He,hint:"Bank account in IBAN form (mod-97 verified) in plaintext."},{subkind:"israeli_phone",severity:"medium",pattern:new RegExp(`${W}(?:\\+972[- ]?|0)(?:5\\d|[2-489])[- ]?\\d{3}[- ]?\\d{4}${Y}`,"g"),validate:e=>{let t=e.replace(/\D/g,"").replace(/^972/,"0");return t.length===10&&t.startsWith("0")},hint:"Israeli phone number in plaintext."}];function le(e){let t=[];for(let n of ze){n.pattern.lastIndex=0;let a=new Set,i,o=0;for(;(i=n.pattern.exec(e))!==null&&(o+=1,!(o>2e5));){let r=i[0];if(n.validate(r)&&a.add(r.replace(/[\s-]/g,"")),a.size>=1e5)break}a.size>0&&t.push({subkind:n.subkind,severity:n.severity,hint:n.hint,count:a.size})}return t}function X(e,t){let n=[],a="",i=!1;for(let o=0;o<e.length;o++){let r=e[o];i?r==='"'&&e[o+1]==='"'?(a+='"',o++):r==='"'?i=!1:a+=r:r==='"'?i=!0:r===t?(n.push(a),a=""):a+=r}return n.push(a),n}import{inflateRawSync as et}from"node:zlib";import{inflateSync as Ve}from"node:zlib";var J=new Set([".pdf"]),de=8*1024*1024;function We(e){let t=e.toString("latin1"),n=new Map,a=/(\d+)\s+(\d+)\s+obj\b/g,i;for(;(i=a.exec(t))!==null;){let o=Number(i[1]),r=a.lastIndex,s=t.indexOf("endobj",r);if(s<0)continue;let l=t.indexOf("stream",r),d,p=null;if(l>=0&&l<s){d=t.slice(r,l);let f=l+6;t[f]==="\r"&&(f+=1),t[f]===`
+`&&(f+=1);let E=t.indexOf("endstream",f);E>f&&(p=e.subarray(f,E))}else d=t.slice(r,s);n.set(o,{num:o,dict:d,stream:p})}return n}function Ye(e){let t=e.toString("latin1").replace(/\s/g,"");t.startsWith("<~")&&(t=t.slice(2));let n=t.indexOf("~>");n>=0&&(t=t.slice(0,n));let a=[],i=0,o=0;for(let r of t){if(r==="z"&&o===0){a.push(0,0,0,0);continue}let s=r.charCodeAt(0)-33;if(s<0||s>84)return null;i=i*85+s,o+=1,o===5&&(a.push(i>>>24&255,i>>>16&255,i>>>8&255,i&255),i=0,o=0)}if(o>0){for(let s=o;s<5;s+=1)i=i*85+84;let r=[i>>>24&255,i>>>16&255,i>>>8&255,i&255];for(let s=0;s<o-1;s+=1)a.push(r[s]??0)}return Buffer.from(a)}function Ge(e){let t=e.toString("latin1").replace(/\s/g,"").split(">")[0]??"",n=t.length%2?t+"0":t;return/^[0-9A-Fa-f]*$/.test(n)?Buffer.from(n,"hex"):null}function Ze(e){let t=/\/Filter\s*(\[[^\]]*\]|\/\w+)/.exec(e);return!t||!t[1]?[]:[...t[1].matchAll(/\/(\w+)/g)].map(n=>n[1]??"")}function ue(e){if(!e.stream)return null;let t=e.stream;for(let n of Ze(e.dict)){let a=null;if(n==="FlateDecode")try{a=Ve(t)}catch{return null}else if(n==="ASCII85Decode")a=Ye(t);else if(n==="ASCIIHexDecode")a=Ge(t);else return null;if(a===null)return null;t=a}return t.toString("latin1")}function Xe(e){let t=new Map,n=1,a=/begincodespacerange([\s\S]*?)endcodespacerange/.exec(e);if(a&&a[1]){let l=/<([0-9A-Fa-f]+)>/.exec(a[1]);l&&l[1]&&l[1].length>=4&&(n=2)}let i=l=>{let d="";for(let p=0;p+3<l.length+1;p+=4){let f=parseInt(l.slice(p,p+4),16);Number.isFinite(f)&&f>0&&(d+=String.fromCharCode(f))}return d},o=/beginbfchar([\s\S]*?)endbfchar/g,r;for(;(r=o.exec(e))!==null;){let l=/<([0-9A-Fa-f]+)>\s*<([0-9A-Fa-f]*)>/g,d;for(;(d=l.exec(r[1]??""))!==null;)t.set(parseInt(d[1]??"0",16),i(d[2]??""))}let s=/beginbfrange([\s\S]*?)endbfrange/g;for(;(r=s.exec(e))!==null;){let l=r[1]??"",d=/<([0-9A-Fa-f]+)>\s*<([0-9A-Fa-f]+)>\s*<([0-9A-Fa-f]*)>/g,p;for(;(p=d.exec(l))!==null;){let f=parseInt(p[1]??"0",16),E=parseInt(p[2]??"0",16),P=parseInt((p[3]??"0").slice(0,4)||"0",16);if(!(E-f>65535))for(let R=f;R<=E;R+=1)t.set(R,String.fromCharCode(P+(R-f)))}}return{map:t,bytes:n}}function Je(e){let t=new Map,n=new Map,a=[];for(let i of e.values()){let o=/\/Font\s*<<([\s\S]*?)>>/.exec(i.dict);o?.[1]&&a.push(o[1]);let r=/\/Font\s+(\d+)\s+\d+\s+R/.exec(i.dict);if(r){let s=e.get(Number(r[1]));s&&a.push(s.dict)}}for(let i of a){let o=/\/([^\s/<>[\]()]+)\s+(\d+)\s+\d+\s+R/g,r;for(;(r=o.exec(i))!==null;)n.set(r[1]??"",Number(r[2]))}for(let[i,o]of n){let r=e.get(o);if(!r)continue;let s=/\/ToUnicode\s+(\d+)\s+\d+\s+R/.exec(r.dict);if(!s)continue;let l=e.get(Number(s[1]));if(!l)continue;let d=ue(l);d&&t.set(i,Xe(d))}return t}function fe(e){let t=[];for(let n=0;n<e.length;n+=1){let a=e[n];if(a!=="\\"){t.push(a.charCodeAt(0)&255);continue}let i=e[n+1];if(i===void 0)break;if(i>="0"&&i<="7"){let r="",s=n+1;for(;s<e.length&&r.length<3&&e[s]>="0"&&e[s]<="7";)r+=e[s],s+=1;t.push(parseInt(r,8)&255),n=s-1;continue}let o={n:10,r:13,t:9,b:8,f:12};t.push(o[i]??i.charCodeAt(0)&255),n+=1}return t}function he(e){if(e.length<2||e[0]!==254||e[1]!==255)return null;let t="";for(let n=2;n+1<e.length;n+=2)t+=String.fromCharCode((e[n]??0)<<8|(e[n+1]??0));return t}function pe(e,t){let n=he(e);if(n!==null)return n;if(!t)return e.map(i=>String.fromCharCode(i)).join("");let a="";if(t.bytes===2)for(let i=0;i+1<e.length;i+=2){let o=(e[i]??0)<<8|(e[i+1]??0);a+=t.map.get(o)??""}else for(let i of e)a+=t.map.get(i)??String.fromCharCode(i);return a}function qe(e,t){let n="",a,i=/\/([^\s/<>[\]()]+)\s+[\d.]+\s+Tf|\((?:\\.|[^\\)])*\)|<[0-9A-Fa-f\s]*>|TJ|Tj|'|"/g,o,r="";for(;(o=i.exec(e))!==null;){let s=o[0];if(s.endsWith("Tf")){a=t.get(o[1]??"");continue}if(s==="TJ"||s==="Tj"||s==="'"||s==='"'){r&&(n+=r+`
+`,r="");continue}if(s.startsWith("("))r+=pe(fe(s.slice(1,-1)),a);else if(s.startsWith("<")){let l=s.slice(1,-1).replace(/\s+/g,""),d=[];for(let p=0;p+1<l.length;p+=2)d.push(parseInt(l.slice(p,p+2),16));r+=pe(d,a)}}return r&&(n+=r+`
+`),n}function Qe(e,t){let n=e.toString("latin1"),a=/\/Info\s+(\d+)\s+\d+\s+R/.exec(n),i=a?t.get(Number(a[1]))?.dict:void 0;if(!i)return"";let o=[],r=/\/(Author|Title|Subject|Keywords|Creator|Producer)\s*(\((?:\\.|[^\\)])*\)|<[0-9A-Fa-f\s]*>)/g,s;for(;(s=r.exec(i))!==null;){let l=s[2]??"";if(l.startsWith("(")){let d=fe(l.slice(1,-1));o.push(he(d)??d.map(p=>String.fromCharCode(p)).join(""))}else{let d=l.slice(1,-1).replace(/\s+/g,""),p="";if(d.toUpperCase().startsWith("FEFF"))for(let f=4;f+3<d.length+1;f+=4)p+=String.fromCharCode(parseInt(d.slice(f,f+4),16));else for(let f=0;f+1<d.length;f+=2)p+=String.fromCharCode(parseInt(d.slice(f,f+2),16));o.push(p)}}return o.join(`
+`)}function ge(e){if(!e.subarray(0,8).toString("latin1").startsWith("%PDF-")||e.toString("latin1",0,Math.min(e.length,4096)).includes("/Encrypt"))return null;let n=We(e);if(n.size===0)return null;let a=Je(n),i=[];i.push(Qe(e,n));let o=0,r=0,s=!1;for(let l of n.values()){if(!l.stream||/\/Subtype|\/Type\s*\/(XObject|Font|Metadata)|\/FontFile/.test(l.dict))continue;let d=ue(l);if(d===null||!/(TJ|Tj)\b/.test(d))continue;let p=qe(d,a);if(p.trim().length!==0){if(r+=1,o+p.length>de){i.push(p.slice(0,Math.max(0,de-o))),s=!0;break}i.push(p),o+=p.length}}return r===0?null:{text:i.join(`
+`),truncated:s,streams:r}}var me=new Set([".xlsx",".xlsm",".docx",".pptx"]),q=8*1024*1024,tt=101010256,nt=33639248,rt=67324752;function it(e){let t=Math.min(e.length,67584),n=-1;for(let r=e.length-22;r>=e.length-t&&r>=0;r-=1)if(e.readUInt32LE(r)===tt){n=r;break}if(n<0)return null;let a=e.readUInt16LE(n+10),i=e.readUInt32LE(n+16);if(i>=e.length)return null;let o=[];for(let r=0;r<a&&!(i+46>e.length||e.readUInt32LE(i)!==nt);r+=1){let s=e.readUInt16LE(i+10),l=e.readUInt32LE(i+20),d=e.readUInt32LE(i+24),p=e.readUInt16LE(i+28),f=e.readUInt16LE(i+30),E=e.readUInt16LE(i+32),P=e.readUInt32LE(i+42),R=e.subarray(i+46,i+46+p).toString("utf8");o.push({name:R,method:s,compSize:l,uncompSize:d,localHeaderOffset:P}),i+=46+p+f+E}return o}function at(e,t){let n=t.localHeaderOffset;if(n+30>e.length||e.readUInt32LE(n)!==rt)return null;let a=e.readUInt16LE(n+26),i=e.readUInt16LE(n+28),o=n+30+a+i,r=o+t.compSize;if(r>e.length)return null;let s=e.subarray(o,r);try{if(t.method===0)return s.toString("utf8");if(t.method===8)return et(s).toString("utf8")}catch{return null}return null}var ot={"&amp;":"&","&lt;":"<","&gt;":">","&quot;":'"',"&apos;":"'"};function ye(e){return e.replace(/&(amp|lt|gt|quot|apos);/g,t=>ot[t]??t).replace(/&#(\d+);/g,(t,n)=>{let a=Number(n);return a>0&&a<1114112?String.fromCodePoint(a):""}).replace(/&#x([0-9a-fA-F]+);/g,(t,n)=>{let a=parseInt(n,16);return a>0&&a<1114112?String.fromCodePoint(a):""})}function st(e){return ye(e.replace(/<[^>]*>/g,`
+`)).replace(/\n{2,}/g,`
+`)}function ct(e,t,n){let a=new RegExp(`<${t}\\b[^>]*\\b${n}="([^"]*)"`,"g"),i=[],o;for(;(o=a.exec(e))!==null;)o[1]&&i.push(ye(o[1]));return i}function lt(e,t){let n=[];for(let a of t)(a==="docProps/core.xml"||a==="docProps/app.xml")&&n.push(a);if(e===".xlsx"||e===".xlsm")for(let a of t)(a==="xl/sharedStrings.xml"||a==="xl/workbook.xml"||/^xl\/worksheets\/sheet\d+\.xml$/.test(a)||/^xl\/comments\d*\.xml$/.test(a))&&n.push(a);else if(e===".docx")for(let a of t)(a==="word/document.xml"||/^word\/(header|footer|footnotes|endnotes|comments)\d*\.xml$/.test(a))&&n.push(a);else if(e===".pptx")for(let a of t)/^ppt\/(slides|notesSlides)\/(slide|notesSlide)\d+\.xml$/.test(a)&&n.push(a);return n}function dt(e,t){let n=it(e);if(!n||n.length===0)return null;let a=new Map(n.map(d=>[d.name,d])),i=lt(t,n.map(d=>d.name));if(i.length===0)return null;let o=[],r=[],s=0,l=!1;for(let d of i){if(s>=q){l=!0;break}let p=a.get(d);if(!p)continue;let f=at(e,p);if(f===null)continue;let E=st(f);if(d==="xl/workbook.xml"){let P=ct(f,"sheet","name");P.length&&(E+=`
+`+P.join(`
+`))}s+E.length>q&&(E=E.slice(0,Math.max(0,q-s)),l=!0),E.trim().length!==0&&(o.push(E),r.push(d),s+=E.length)}return o.length===0?null:{text:o.join(`
+`),truncated:l,parts:r}}function _e(e,t){if(me.has(t))return dt(e,t);if(J.has(t)){let n=ge(e);return n?{text:n.text,truncated:n.truncated,parts:[`pdf:${n.streams}-streams`]}:null}return null}var ve=new Set([...me,...J]);var ee=10,j=5e3,ut=64*1024*1024,te=32*1024,ft=new Set([".exe",".dll",".so",".dylib",".msi",".bin",".iso",".zip",".tar",".gz",".7z",".rar",".png",".jpg",".jpeg",".gif",".bmp",".tif",".tiff",".webp",".ico",".mp3",".mp4",".mov",".avi",".mkv",".wav",".flac",".ogg",".psd",".ai",".fla",".dwg",".dxf",".sqlite",".sqlite3",".db",".pyc",".class"]),ht=new Set(["node_modules",".git",".hg",".svn"]),gt=[{re:/\b\d{3}-\d{2}-\d{4}\b/,kind:"pii_unencrypted",subkind:"ssn",severity:"high",hint:"US Social Security Number pattern in plaintext."},{re:/\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/i,kind:"pii_unencrypted",subkind:"email",severity:"low",hint:"Email addresses in plaintext."},{re:/(passport|teudat.?zehut|(?<![א-ת])תעודת.?זהות(?![א-ת])|(?<![א-ת])ת["'׳״]?\.?ז(?![א-ת]))/i,kind:"pii_unencrypted",subkind:"passport_keyword",severity:"medium",hint:"Filename / content references passport / national-ID keyword."}],mt=[{re:/(salary|payroll|משכורת|ssn|social.?security|passport|דרכון|תעודת.?זהות)/i,kind:"pii_unencrypted",subkind:"sensitive_filename",severity:"medium",hint:"Filename suggests sensitive PII content."},{re:/\.(env|env\.local|pem|key|p12|pfx)$/i,kind:"pii_unencrypted",subkind:"secret_file",severity:"high",hint:"File extension implies secret / credential bundle in plaintext."}];function yt(e){let t=e.lastIndexOf(".");return t<0?"":e.slice(t).toLowerCase()}async function ne(e){let t=Date.now(),n=[],a=[],i=0,o=0,r={hit_file_cap:!1,hit_depth_cap:!1,max_files:j,max_depth:ee,skipped_by_extension:0,documents_extracted:0,documents_truncated:0,documents_unreadable:0,files_too_large:0,files_sampled_only:0,sample_bytes:te};function s(y){return(y.startsWith(e.target_path)?y.slice(e.target_path.length).replace(/^[\\/]+/,""):y).replace(/\\/g,"/")}function l(y,g,h,v,S){let m=s(y);m!==""&&a.push({target_id:e.target_id,path:m,kind:g,size_bytes:h,modified_at:v?v.toISOString():null,child_count:S})}function d(y,g){n.push({target_id:e.target_id,relative_path:y,finding_kind:g.kind,finding_subkind:g.subkind,severity:g.severity,remediation_hint:g.hint})}function p(y,g,h,v,S){n.push({target_id:e.target_id,relative_path:y,finding_kind:g,finding_subkind:v,severity:h,remediation_hint:S})}function f(y,g){if(i+=1,i>j){r.hit_file_cap=!0;return}let h=s(y);for(let u of mt)u.re.test(g)&&d(h,u);let v=yt(g);if(ft.has(v)){r.skipped_by_extension+=1;return}let S=ve.has(v),m=0;try{m=Q(y).size}catch{return}if(S&&m>ut){r.files_too_large+=1;return}let w;try{let u=Se(y,{flag:"r"});w=S?u:u.subarray(0,te)}catch{return}o+=1;let T;if(S){let u=_e(w,v);if(!u){r.documents_unreadable+=1;return}T=u.text,r.documents_extracted+=1,u.truncated&&(r.documents_truncated+=1)}else{let u=0;for(let _=0;_<w.length;_+=1)w[_]===0&&(u+=1);if(w.length>0&&u/w.length>.05)return;T=w.toString("utf8"),m>te&&(r.files_sampled_only+=1)}let k=new Set;for(let u of gt)if(u.re.test(T)){let _=`${u.subkind}::${h}`;k.has(_)||(k.add(_),d(h,u))}for(let u of le(T)){let _=`validated::${u.subkind}::${h}`;k.has(_)||(k.add(_),p(h,"pii_unencrypted",u.severity,u.subkind,`${u.hint} ${u.count} distinct value${u.count===1?"":"s"} in this file.`))}if(!se.test(h)){let u=T.split(`
+`),_=Math.min(u.length,2e3);for(let b=0;b<_;b++){let x=u[b];if(!x)continue;let C=x.trimStart();if(!(C.startsWith("//")||C.startsWith("/*")||C.startsWith("*")||C.startsWith("#"))&&!/process\.env/.test(x)&&!/\$\{[A-Z_]+/.test(x)){for(let $ of oe)if($.pattern.test(x)){let N=`secret::${$.id}::${h}::${b+1}`;if(k.has(N))break;k.add(N),p(h,"hardcoded_secret",$.severity,$.id,`Looks like a ${$.name} hardcoded near line ${b+1}. Move to an env var or secret manager.`);break}}}}if(g==="package.json"&&!h.includes("node_modules"))try{let u=Se(y,"utf8"),_=ce(u);for(let b of _){let x=`vuln::${b.name}::${h}`;k.has(x)||(k.add(x),p(h,"vulnerable_dependency",b.vuln.severity,b.name,`${b.name}@${b.version} is below ${b.vuln.below} (${b.vuln.cve} \xB7 ${b.vuln.desc}). Bump to ${b.vuln.below} or higher.`))}}catch{}if(v===".csv"||v===".tsv"){let u=v===".tsv"?"	":",",_=T.split(/\r?\n/);if(_.length>0){let b=X(_[0]??"",u),x=_.slice(1,51).map(C=>X(C??"",u));b.forEach((C,$)=>{let N=(C??"").trim();if(!N)return;let O=G(N)?.type??null;if(!O){let D=[];for(let Le of x){let V=Le[$];if(V&&V.trim().length>0&&D.push(V),D.length>=50)break}let L=P(D);L&&(O=L)}if(O){let D=Z[O]??"medium",L=`header::${h}::${N}::${O}`;if(k.has(L))return;k.add(L),p(h,"pii_header_match",D,`${O}:${N}`,`Column "${N}" looks like ${O} data. Wrap with envelope or move to a vault-backed reference.`)}})}}if(v===".json"&&!g.endsWith(".nodata-proof.json"))try{let u=JSON.parse(T),_=Array.isArray(u)?u[0]:u;if(_&&typeof _=="object")for(let b of Object.keys(_)){let x=G(b);if(x){let C=Z[x.type]??"medium",$=`jsonkey::${h}::${b}::${x.type}`;if(k.has($))continue;k.add($),p(h,"pii_header_match",C,`${x.type}:${b}`,`JSON key "${b}" looks like ${x.type} data.`)}}}catch{}/\.(txt|log|md|csv|tsv|json|jsonl|xml|html?|yaml|yml|sql)$/i.test(g)&&E(T,h,k)}function E(y,g,h){let v=y.split(`
+`),S=Math.min(v.length,1e3),m=-1,w=-1,T=-1;for(let k=0;k<S;k++){let u=v[k]??"";if(T<0){let _=u.match(/\b\d{9}\b/);_&&F(_[0])&&(T=k+1)}if(m<0&&(U.lastIndex=0,U.test(u)&&(m=k+1)),w<0&&(B.lastIndex=0,B.test(u)&&(w=k+1)),T>0&&m>0&&w>0)break}T>0&&!h.has(`ilid::${g}`)&&(h.add(`ilid::${g}`),p(g,"israeli_id_value","critical",`near_line:${T}`,`Israeli ID with valid Luhn checksum detected near line ${T}. Strong signal that real customer IDs are in plaintext.`)),m>0&&!h.has(`ilphone::${g}`)&&(h.add(`ilphone::${g}`),p(g,"israeli_phone_value","high",`near_line:${m}`,`Israeli phone number detected near line ${m}.`)),w>0&&!h.has(`iliban::${g}`)&&(h.add(`iliban::${g}`),p(g,"israeli_iban_value","critical",`near_line:${w}`,`Israeli IBAN (IL prefix) detected near line ${w}.`))}function P(y){if(y.length===0)return null;let g=0,h=0,v=0;for(let m of y)typeof m=="string"&&(F(m)&&g++,U.lastIndex=0,U.test(m)&&h++,B.lastIndex=0,B.test(m)&&v++);let S=y.length;return g/S>=.3?"id":h/S>=.3?"phone":v/S>=.3?"financial":null}function R(y,g){if(g>ee){r.hit_depth_cap=!0;return}if(i>j){r.hit_file_cap=!0;return}let h;try{h=be(y)}catch{return}for(let v of h){if(i>j)return;let S=pt(y,v),m;try{m=Q(S)}catch{continue}if(!m.isSymbolicLink())if(m.isDirectory()){if(ht.has(v))continue;let w=null;try{w=be(S).length}catch{w=null}l(S,"folder",null,m.mtime??null,w),R(S,g+1)}else m.isFile()&&(l(S,"file",m.size,m.mtime??null,null),f(S,v))}}let z;try{z=Q(e.target_path).isDirectory()}catch{z=!1}return z?(e.log.info("folder-scanner: starting",{target_label:e.target_label,target_path:e.target_path,max_files:j,max_depth:ee}),R(e.target_path,0),{target_id:e.target_id,target_label:e.target_label,target_path:e.target_path,files_walked:i,files_inspected:o,duration_ms:Date.now()-t,findings:n,inventory:a,coverage:r}):{target_id:e.target_id,target_label:e.target_label,target_path:e.target_path,files_walked:0,files_inspected:0,duration_ms:Date.now()-t,findings:[],inventory:[],coverage:r,error:"target_path_not_found_or_not_directory"}}var re={info(){}};var ke={critical:4,high:3,medium:2,low:1,info:0};function ie(e){let t=[];if(t.push(`Scanned "${e.target_label||e.target_path}" on this machine \u2014 nothing left your computer.
+`),e.error)return t.push(`Could not scan: ${e.error}`),t.join(`
+`);t.push(`WALKED     ${e.files_walked} files (${e.files_inspected} inspected) in ${e.duration_ms}ms`);let n=e.findings??[],a={};for(let s of n)a[s.severity]=(a[s.severity]??0)+1;let i=["critical","high","medium","low","info"].filter(s=>a[s]).map(s=>`${a[s]} ${s}`).join("  \xB7  ");if(t.push(`EXPOSURE   ${n.length} findings${i?"  \u2014  "+i:""}
+`),n.length===0)t.push(`No hardcoded secrets or unencrypted PII found in the files scanned. Clean.
+`);else{let s=[...n].sort((d,p)=>(ke[p.severity]??0)-(ke[d.severity]??0));t.push("TOP EXPOSURES:");for(let d of s.slice(0,8))t.push(`  \u2717 [${d.severity.toUpperCase()}] ${d.finding_subkind||d.finding_kind}  \u2014  ${d.relative_path}`);s.length>8&&t.push(`  \u2026 and ${s.length-8} more.`),t.push("");let l=s.find(d=>d.remediation_hint);l?.remediation_hint&&t.push(`FIRST FIX  ${l.remediation_hint}
+`)}let o=e.coverage,r=[];return o?.hit_file_cap&&r.push(`stopped at the ${o.max_files}-file cap`),o?.hit_depth_cap&&r.push(`folders deeper than ${o.max_depth} levels were not descended`),o?.files_too_large&&r.push(`${o.files_too_large} file(s) too large to read`),o?.documents_unreadable&&r.push(`${o.documents_unreadable} document(s) unreadable`),r.length&&t.push(`COVERAGE   ${r.join("; ")}.`),t.join(`
+`)}import{homedir as bt,hostname as $e}from"node:os";import{join as Re,resolve as M,basename as St}from"node:path";import{existsSync as K,readFileSync as Pe,writeFileSync as kt,mkdirSync as wt,chmodSync as Et}from"node:fs";import{spawn as xt}from"node:child_process";import{generateKeyPairSync as At,createPrivateKey as Tt,sign as It,randomBytes as Ct}from"node:crypto";var ae="1.1.0",Ne=Re(bt(),".nodata"),H=Re(Ne,"credentials.json");function $t(){try{if(!K(H))return null;let e=JSON.parse(Pe(H,"utf8"));if(!e)return null;let t=e.device&&typeof e.device.private_key_pkcs8_b64=="string",n=typeof e.api_key=="string"&&e.api_key;return t||n?e:null}catch{return null}}function we(e){wt(Ne,{recursive:!0});let t=JSON.stringify({...e,saved_at:new Date().toISOString()},null,2);kt(H,t,{mode:384});try{Et(H,384)}catch{}}var Rt=`nodata-mcp v${ae} \u2014 NoData MCP server
+
+  ADMIN mode:  nodata-mcp --api-key sk_live_...
+  AGENT mode:  nodata-mcp --grant-token ndca-...
+  Options:     --base-url <url>   (default https://www.nodatacapsule.com)
+               --help \xB7 --version
+
+Env vars: NODATA_API_KEY \xB7 NODATA_GRANT_TOKEN \xB7 NODATA_BASE_URL
+Get a free API key: https://www.nodatacapsule.com/developers/get-started
+Mint a grant token: POST /api/v1/governance/grant (or the nodata_grant tool).`;function Pt(e){let t="",n="",a="https://www.nodatacapsule.com";for(let r=0;r<e.length;r++)e[r]==="--api-key"&&e[r+1]?t=e[++r]:e[r]==="--grant-token"&&e[r+1]?n=e[++r]:e[r]==="--base-url"&&e[r+1]?a=e[++r]:e[r]==="--help"||e[r]==="-h"?(console.log(Rt),process.exit(0)):e[r]==="--version"||e[r]==="-v"?(console.log(ae),process.exit(0)):e[r].startsWith("--")&&console.error(`nodata-mcp: unknown option '${e[r]}' (see --help)`);let i=t||n?"flag":"none";!t&&process.env.NODATA_API_KEY&&(t=process.env.NODATA_API_KEY,i="env"),!n&&process.env.NODATA_GRANT_TOKEN&&(n=process.env.NODATA_GRANT_TOKEN,i==="none"&&(i="env")),process.env.NODATA_BASE_URL&&(a=process.env.NODATA_BASE_URL);let o;if(!t&&!n){let r=$t();r&&(!process.env.NODATA_BASE_URL&&a==="https://www.nodatacapsule.com"&&r.base_url&&(a=r.base_url),r.device?(o=r.device,i="stored"):r.api_key&&(t=r.api_key,i="stored"))}return a=a.replace(/\/+$/,""),{apiKey:t,grantToken:n,baseUrl:a,credentialSource:i,device:o}}var Ee=3e4;async function Oe(e,t){let n;try{n=await fetch(e,{...t,signal:AbortSignal.timeout(Ee)})}catch(i){return{ok:!1,status:0,body:{error:i instanceof Error&&i.name==="TimeoutError"?`Request timed out after ${Ee/1e3}s: ${e}`:`Network error reaching ${e}: ${i instanceof Error?i.message:String(i)}`}}}let a;try{a=await n.json()}catch{a={error:`Non-JSON response (HTTP ${n.status})`}}return{ok:n.ok,status:n.status,body:a}}async function De(e){if(typeof e=="string")return{token:e};try{return{token:await e()}}catch(t){return{error:{ok:!1,status:0,body:{error:`Could not obtain an access token: ${t instanceof Error?t.message:String(t)}`}}}}}async function A(e,t,n,a){let i=await De(t);return"error"in i?i.error:Oe(`${e}${n}`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${i.token}`},body:JSON.stringify(a)})}async function xe(e,t,n,a){let i=await De(t);if("error"in i)return i.error;let o=new URL(`${e}${n}`);for(let[r,s]of Object.entries(a))s!==void 0&&s!==""&&o.searchParams.set(r,s);return Oe(o.toString(),{method:"GET",headers:{Authorization:`Bearer ${i.token}`}})}function I(e){let t=JSON.stringify(e.body,null,2);return e.ok?{content:[{type:"text",text:t}]}:{content:[{type:"text",text:`Error (HTTP ${e.status}):
+${t}`}],isError:!0}}function Nt(e){let t=e?[M(e)]:[M(".env.local"),M(".env")];if(e&&!K(t[0]))return{error:`env file not found: ${t[0]}`};let n={},a=[];for(let o of t)if(K(o)){a.push(o);for(let r of Pe(o,"utf8").split(/\r?\n/)){let s=r.match(/^\s*(?:export\s+)?([A-Z0-9_]+)\s*=\s*(.*)\s*$/);!s||s[1]in n||(n[s[1]]=s[2].replace(/^(['"])(.*)\1$/,"$2").trim())}}let i=o=>{for(let r of o){let s=n[r]??process.env[r];if(s)return{name:r,value:s}}};return{url:i(["SUPABASE_URL","NEXT_PUBLIC_SUPABASE_URL","VITE_SUPABASE_URL","EXPO_PUBLIC_SUPABASE_URL"]),anon:i(["SUPABASE_ANON_KEY","NEXT_PUBLIC_SUPABASE_ANON_KEY","VITE_SUPABASE_ANON_KEY","EXPO_PUBLIC_SUPABASE_ANON_KEY","SUPABASE_PUBLISHABLE_KEY","NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY"]),jwt:i(["SUPABASE_JWT_SECRET","JWT_SECRET"]),files:a}}function Ot(e){try{let n=(e.startsWith("ndca-")?e.slice(5):e).split(".")[1];return n?JSON.parse(Buffer.from(n.replace(/-/g,"+").replace(/_/g,"/"),"base64").toString("utf8")).handle??null:null}catch{return null}}var Dt=5*6e4;function Lt(){let{publicKey:e,privateKey:t}=At("ed25519"),n=e.export({format:"der",type:"spki"}),a=t.export({format:"der",type:"pkcs8"});return{publicKeyHex:n.subarray(-32).toString("hex"),privateKeyPkcs8B64:a.toString("base64")}}function Ut(e,t){let n=Tt({key:Buffer.from(e,"base64"),format:"der",type:"pkcs8"});return It(null,Buffer.from(t,"utf8"),n).toString("base64")}function Bt(){let e=$e().toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,20)||"device";return`${/^[a-z]/.test(e)?e:`d-${e}`}-${Ct(3).toString("hex")}`.slice(0,32)}async function jt(e,t,n,a,i){let o=await A(e,t,"/api/v1/attest/devices",{handle:n,label:a,ed25519_pubkey_hex:i});if(o.ok){let r=o.body.org_id??"";return r?{ok:!0,orgId:r}:{ok:!1,status:o.status,error:"enroll response missing org_id"}}return{ok:!1,status:o.status,error:o.body?.error??`HTTP ${o.status}`}}async function Ft(e,t){let n=await A(e,"","/api/v1/attest/challenge",{org_id:t.org_id,handle:t.handle});if(!n.ok)throw new Error(`challenge: ${n.body?.error??`HTTP ${n.status}`}`);let{challenge:a,nonce:i}=n.body;if(!a||!i)throw new Error("challenge response malformed");let o=Ut(t.private_key_pkcs8_b64,a),r=await A(e,"","/api/v1/attest",{org_id:t.org_id,handle:t.handle,nonce:i,signature:o});if(!r.ok)throw new Error(`attest: ${r.body?.error??`HTTP ${r.status}`}`);let s=r.body;if(!s.allowed||!s.access_token)throw new Error(`attestation rejected: ${s.reason??"denied"}`);return{token:s.access_token,expiresAtMs:s.expires_at?Date.parse(s.expires_at):Date.now()+15*6e4}}function Mt(e,t){let n=null;return async()=>((!n||Date.now()>=n.expiresAtMs-Dt)&&(n=await Ft(e,t)),n.token)}function Ae(e,t,n){e.registerTool("nodata_register_table",{description:"Register one of your own tables as AI-agent-readable. This writes POLICY only: it declares which columns are sensitive (released per-column only if their ciphertext exists) and which are plaintext metadata. It does NOT encrypt or change anything in the user's database \u2014 never tell the user their data is now encrypted. Relay the response's `message` and `next_steps` verbatim. After this, grants can target the table.",inputSchema:{table_name:c.string().describe("Your SQL table name"),encrypted_columns:c.array(c.string()).describe("Columns stored as <col>_ct/_iv/_tag triplets"),plaintext_columns:c.array(c.string()).optional().describe("Plaintext metadata/filter columns"),classification_column:c.string().optional().describe("Plaintext column carrying the classification value")}},async({table_name:a,encrypted_columns:i,plaintext_columns:o,classification_column:r})=>{let s=await A(t,n,"/api/v1/governance/tables",{table_name:a,encrypted_columns:i,plaintext_columns:o??[],classification_column:r});return I(s)}),e.registerTool("nodata_connect_source",{description:"Connect the user's own Supabase project as the data source for their registered tables, so granted agents can read metadata through NoData. Reads the project URL, anon key and JWT secret from the user's LOCAL env file (e.g. .env.local) and sends them directly to NoData \u2014 never ask the user to paste a key or secret into the chat, and never print them. Only allowed_tables are readable (deny-by-default).",inputSchema:{allowed_tables:c.array(c.string()).describe("Tables agents may read through this source"),env_file:c.string().optional().describe("Path to the env file holding the Supabase keys (default: .env.local, then .env in the working directory)"),source_url:c.string().optional().describe("Override the project URL (https://<ref>.supabase.co) if the env file lacks it")}},async({allowed_tables:a,env_file:i,source_url:o})=>{let r=Nt(i);if("error"in r)return{content:[{type:"text",text:`Error: ${r.error}`}],isError:!0};let s=o??r.url?.value,l=[s?null:"project URL (SUPABASE_URL / NEXT_PUBLIC_SUPABASE_URL)",r.anon?null:"anon key (SUPABASE_ANON_KEY / NEXT_PUBLIC_SUPABASE_ANON_KEY)",r.jwt?null:"JWT secret (SUPABASE_JWT_SECRET \xB7 Supabase \u2192 Settings \u2192 API \u2192 JWT secret)"].filter(Boolean);if(l.length>0)return{content:[{type:"text",text:`Not sent. Missing in ${r.files.join(", ")||"the environment"}: ${l.join("; ")}.
+Ask the user to add them to that file themselves (not in this chat), then call this tool again.`}],isError:!0};let d=await A(t,n,"/api/connector/secrets",{source_url:s,allowed_tables:a,anon_key:r.anon.value,jwt_secret:r.jwt.value}),p={read_from:r.files,variables_used:[r.url?.name,r.anon.name,r.jwt.name].filter(Boolean)};return I({...d,body:{...d.body,...p}})}),e.registerTool("nodata_grant",{description:"Issue ONE AI agent a claim-scoped grant over your data \u2014 claims, not blanket access. Returns a grant_token (shown once) the agent presents to read. Denied columns never decrypt. For one agent over several tables pass `tables` in a single call \u2014 do NOT call this once per table, that creates a separate agent each time.",inputSchema:{agent:c.string().describe("Agent label (becomes its handle)"),tables:c.array(c.object({table:c.string(),columns:c.array(c.string()).describe("Columns the agent may read in this table"),where:c.record(c.string(),c.union([c.string(),c.number(),c.boolean()])).optional()})).optional().describe("Several tables for the same agent. When set, table/columns/where are ignored."),table:c.string().optional().describe("Single target table (default agent_demo_records)"),columns:c.array(c.string()).optional().describe("Columns the agent may read (single-table form)"),where:c.record(c.string(),c.union([c.string(),c.number(),c.boolean()])).optional().describe("Equality filter (plaintext cols only)"),classifications:c.array(c.string()).optional().describe("Allowed classification values; empty = no gating"),ttl_seconds:c.number().optional().describe("Token lifetime (default 30d, max 1y)")}},async({agent:a,tables:i,table:o,columns:r,where:s,classifications:l,ttl_seconds:d})=>{let p=await A(t,n,"/api/v1/governance/grant",{agent:a,...i?{tables:i}:{table:o,columns:r,where:s},classifications:l,ttl_seconds:d});return I(p)}),e.registerTool("nodata_revoke",{description:"Revoke an agent's grant by handle (kills all its active credentials) or by a specific jti. Revocation is mathematics \u2014 the next read 401s and any cached data is governance-dead.",inputSchema:{handle:c.string().optional().describe("Agent handle to revoke"),jti:c.string().optional().describe("Specific credential jti to revoke"),reason:c.string().optional()}},async({handle:a,jti:i,reason:o})=>{let r=await A(t,n,"/api/v1/governance/revoke",{handle:a,jti:i,reason:o});return I(r)}),e.registerTool("nodata_encrypt",{description:"Encrypt a sensitive field value using Capsule Blind Relay. Returns ciphertext. NoData stores nothing \u2014 the key is embedded in the ciphertext for YOU to store.",inputSchema:{field:c.string(),value:c.string(),context:c.string().optional()}},async({field:a,value:i,context:o})=>{let r={field:a,value:i};return o&&(r.context=o),I(await A(t,n,"/api/v1/encrypt",r))}),e.registerTool("nodata_decrypt",{description:"Decrypt a Capsule ciphertext back to plaintext (aes256gcm:v1:iv:cipher:key format).",inputSchema:{ciphertext:c.string(),field:c.string().optional(),requester:c.string().optional()}},async({ciphertext:a,field:i,requester:o})=>{let r={ciphertext:a};return i&&(r.field=i),o&&(r.requester=o),I(await A(t,n,"/api/v1/decrypt",r))}),e.registerTool("nodata_deliver",{description:"Create a burn-after-read secure link for delivering sensitive content. Returns a view URL and OTP.",inputSchema:{content:c.string(),to:c.string().optional(),maxViews:c.number().optional(),ttl:c.string().optional(),burn:c.boolean().optional()}},async({content:a,to:i,maxViews:o,ttl:r,burn:s})=>{let l={content:a};return i&&(l.to=i),o!==void 0&&(l.maxViews=o),r&&(l.ttl=r),s!==void 0&&(l.burn=s),I(await A(t,n,"/api/v1/deliver",l))}),e.registerTool("nodata_evidence",{description:"Field-level encrypt/decrypt/deliver events (field_access_log). Requires the Engine scope on the key. For the signed decision-receipt chain \u2014 grants, agent reads, denials \u2014 use nodata_proofs instead, which every org key can call. Metadata only.",inputSchema:{from:c.string().optional(),to:c.string().optional(),action:c.string().optional(),limit:c.number().optional()}},async({from:a,to:i,action:o,limit:r})=>{let s={from:a,to:i,action:o,limit:r!==void 0?String(r):void 0};return I(await xe(t,n,"/api/v1/evidence",s))}),e.registerTool("nodata_proofs",{description:"List your organization's signed proofs: every grant, agent read and denial, newest first. Content-free (labels, hashes, timestamps). Each proof can be verified by anyone, without an account, by POSTing its receipt_id to /api/access/verify. The response's `plan` says which proof types the user's plan includes and which need an upgrade (with the plan name) \u2014 relay it as is.",inputSchema:{receipt_id:c.string().optional().describe("Fetch one proof by id"),surface:c.string().optional().describe("Filter, e.g. 'governance.grant', 'agent.read'"),decision:c.string().optional().describe("Filter: 'grant' | 'allow' | 'deny' | 'revoke'"),from:c.string().optional().describe("ISO timestamp"),to:c.string().optional().describe("ISO timestamp"),limit:c.number().optional().describe("1..1000, default 50")}},async({receipt_id:a,surface:i,decision:o,from:r,to:s,limit:l})=>I(await xe(t,n,"/api/v1/proofs",{receipt_id:a,surface:i,decision:o,from:r,to:s,limit:l!==void 0?String(l):void 0})))}function Kt(e,t,n){let a=Ot(n);a||console.error("nodata-mcp: warning \u2014 could not derive an agent handle from the grant token (expected ndca-<jwt> with a 'handle' claim). nodata_decide/nodata_retrieve will work; nodata_read/nodata_use will fail until a valid grant token is provided."),e.registerTool("nodata_decide",{description:"Ask whether this agent MAY reach a resource, WITHOUT reading it. Returns a decision (allow / degrade / deny), the reachable column subset, an access-distance cost, and a signed proof \u2014 never any data. Use it to plan: check reachability before you retrieve. Hard-scoped to this server's grant token.",inputSchema:{table:c.string().describe("Table to check (must be in your grant)"),columns:c.array(c.string()).describe("Columns you want to reach"),where:c.record(c.string(),c.union([c.string(),c.number(),c.boolean()])).optional().describe("Equality filter (readable columns only)")}},async({table:i,columns:o,where:r})=>{let s=await A(t,n,"/api/access/decide",{resource:{table:i,columns:o,where:r},intent:"read"});return I(s)}),e.registerTool("nodata_retrieve",{description:"Retrieve prompt-ready context for a resource, filtered to exactly what this agent may see. Denied columns are never decrypted; the response includes an accounting of what was withheld (columns + estimated tokens saved) and a signed proof. Prefer this over a raw read when assembling an LLM prompt. Hard-scoped to this server's grant token.",inputSchema:{table:c.string().describe("Table to retrieve from (must be in your grant)"),columns:c.array(c.string()).describe("Columns to include in context"),where:c.record(c.string(),c.union([c.string(),c.number(),c.boolean()])).optional(),top_k:c.number().optional().describe("Max rows (default 50, max 200)")}},async({table:i,columns:o,where:r,top_k:s})=>{let l=await A(t,n,"/api/access/retrieve",{resource:{table:i,columns:o,where:r},top_k:s});return I(l)}),e.registerTool("nodata_read",{description:"Read governed data within this agent's grant. You may only request columns your grant allows \u2014 denied columns never decrypt server-side, and every read emits a cryptographic receipt. This tool is hard-scoped to the grant token this server was started with.",inputSchema:{table:c.string().describe("Table to read (must be in your grant)"),columns:c.array(c.string()).describe("Columns to read (must be in your grant)"),where:c.record(c.string(),c.union([c.string(),c.number(),c.boolean()])).optional(),limit:c.number().optional().describe("Max rows (default 50, max 200)")}},async({table:i,columns:o,where:r,limit:s})=>{if(!a)return{content:[{type:"text",text:"Error: could not derive agent handle from grant token."}],isError:!0};let l=await A(t,n,`/api/agents/${encodeURIComponent(a)}/read`,{table:i,columns:o,where:r,limit:s});return I(l)}),e.registerTool("nodata_use",{description:"Invoke a pre-registered capability (deploy, send, charge, query, \u2026) WITHOUT receiving the secret. The Capsule injects the sealed credential server-side and returns only the result. You may invoke only capabilities your grant allows; the secret never reaches you. Hard-scoped to the grant token this server was started with.",inputSchema:{capability:c.string().describe("Capability name to invoke (must be in your grant, e.g. 'deploy-prod')"),params:c.record(c.string(),c.unknown()).optional().describe("Allowlisted params; unknown keys are dropped server-side"),resource_key:c.string().optional().describe("Optional folder/resource the action targets (enforced against corpus scope)")}},async({capability:i,params:o,resource_key:r})=>{if(!a)return{content:[{type:"text",text:"Error: could not derive agent handle from grant token."}],isError:!0};let s=await A(t,n,`/api/agents/${encodeURIComponent(a)}/use`,{capability:i,params:o,resource_key:r});return I(s)}),e.registerTool("nodata_code_advise",{description:"Ask the blind code advisor to diagnose/fix a bug in a code capsule WITHOUT seeing its source. You receive guidance + a targeted diff + an exposure proof (source never left the boundary); the source is never returned to you. Requires the capsule owner to have granted this agent (scope.fabric_developers). Hard-scoped to this server's grant token.",inputSchema:{capsule_id:c.string().describe("The code capsule to advise on (you must be granted on it)"),question:c.string().optional().describe("What to fix / improve, in natural language"),note:c.string().optional().describe("Extra context for the advisor"),error:c.object({message:c.string().optional(),stack:c.string().optional(),kind:c.string().optional()}).optional().describe("An error the code produced, to guide the fix"),steer:c.string().optional().describe("A steer on a refine turn (e.g. 'no, round half-up')"),prior_diff:c.string().optional().describe("The previously proposed diff, to refine")}},async({capsule_id:i,question:o,note:r,error:s,steer:l,prior_diff:d})=>{if(!a)return{content:[{type:"text",text:"Error: could not derive agent handle from grant token."}],isError:!0};let p=await A(t,n,`/api/agents/${encodeURIComponent(a)}/code-capsule/${encodeURIComponent(i)}/advise`,{question:o,note:r,error:s,steer:l,prior_diff:d});return I(p)}),e.registerTool("nodata_code_patch",{description:"Submit a fix to a code capsule as a SIGNED, queued patch WITHOUT seeing its source. Provide a raw unified `diff`, or a whole-file `replace` ({path, content}) that is diffed server-side against the sealed source. The source is never persisted or returned; you get back a patch id, the diff hash, and a receipt. Requires a capsule grant (scope.fabric_developers). Hard-scoped to this server's grant token.",inputSchema:{capsule_id:c.string().describe("The code capsule to patch (you must be granted on it)"),summary:c.string().optional().describe("Short human-readable summary of the fix"),diff:c.string().optional().describe("A raw unified diff (advanced)"),replace:c.object({path:c.string(),content:c.string()}).optional().describe("Whole-file replacement; the diff is synthesized server-side against sealed source")}},async({capsule_id:i,summary:o,diff:r,replace:s})=>{if(!a)return{content:[{type:"text",text:"Error: could not derive agent handle from grant token."}],isError:!0};let l=await A(t,n,`/api/agents/${encodeURIComponent(a)}/code-capsule/${encodeURIComponent(i)}/patch`,{summary:o,diff:r,replace:s});return I(l)})}var Te=`WHAT NODATA DOES \u2014 in one line:
+  Give any agent real power over your data, without the power to leak it.
+  (Possession is not permission: it can hold the key and still not read what you didn't allow.)
+`,Ht=`TURN THE DATA TOOLS ON \u2014 3 steps, about a minute, once:
+
+  1. GET A KEY   call  nodata_connect  (no arguments)
+                 -> opens the signup in your browser: email + company (~30s), a 12-word
+                    recovery phrase to keep, and an ORG KEY shown ONCE. Copy that key.
+
+  2. SAVE IT     call  nodata_connect  again, this time with
+                    api_key: "<the key you copied>"
+                 -> saved on this machine; you never paste it again.
+
+  3. ACTIVATE    type  /mcp  (or restart Claude Code) so the tools load.
+
+COMING BACK LATER? Nothing to redo \u2014 it starts ready. If the tools look missing, just /mcp.
+`,zt=`NOW \u2014 TURN YOUR DATA INTO AN AGENT THAT CAN'T LEAK, in 3 asks (just say them in plain words):
+
+  1. SEE what's sensitive    run  nodata_scan_folder  \u2014 scans a local folder right here, nothing
+                             uploads (or open https://www.nodatacapsule.com/ai-folder in a browser).
+
+  2. CHOOSE what to release  say  "let <agent> read name + plan on <table>, hide the rest"
+                             -> I run nodata_register_table + nodata_grant; the agent gets a token.
+
+  3. PROVE & control         the agent now reads ONLY those columns \u2014 the rest never decrypt.
+                             "what did it see?" -> nodata_evidence   \xB7   "cut it off" -> nodata_revoke
+
+Also: a secret even NoData can't read -> nodata_encrypt, then hand it over once -> nodata_deliver.
+`,Vt=`WHAT YOU CAN DO \u2014 scoped to your grant; you reach only what it allows, the rest never decrypts:
+
+  1. PLAN   nodata_decide     "may I reach X?" -> allow / partial / deny + a signed proof. No data moves.
+  2. PULL   nodata_retrieve   prompt-ready context, allowed fields only, with a receipt.
+            (nodata_read for raw governed rows.)
+  3. ACT    nodata_use        run a capability with a secret injected server-side \u2014 you never see it.
+`,Ie=`STUCK? There's always a next step:
+  - Don't see the nodata_* tools? They load when the client starts \u2014 type  /mcp  or restart.
+    (Expected, not an error.)
+  - No MCP at all? The same governance runs from one curl, or the guided page:
+    https://www.nodatacapsule.com/developers/get-started
+`;function Ce(e){return e==="setup"?`You're connected to NoData \u2014 but there's NO key yet, so the data tools are still off.
+
+`:e==="agent"?`You're connected to NoData, scoped to one grant token.
+
+`:`You're connected to NoData (admin mode). You don't memorize commands \u2014 just ask in plain words.
+
+`}function Wt(e){if(e==="setup")return Ce(e)+Te+`
+`+Ht+`
+`+Ie;let t=e==="agent"?Vt:zt;return Ce(e)+Te+`
+`+t+`
+`+Ie}function Yt(e,t){e.registerTool("nodata_get_started",{description:"Call this FIRST (no arguments). NoData in one line: what you can achieve \u2014 an agent that cannot leak, a look at what is already exposed, a secret we cannot read \u2014 with the single next step for each, and how to recover if the tools or MCP seem stuck. If the user asks what NoData can do, how to start, or why the tools are missing, call this and relay it.",inputSchema:{}},async()=>({content:[{type:"text",text:Wt(t)}]}))}var Gt="/capsule-api/register";function Zt(e){let t=process.platform==="win32",n=process.platform==="darwin"?"open":t?"cmd":"xdg-open",a=t?["/c","start","",e]:[e];try{let i=xt(n,a,{stdio:"ignore",detached:!0});return i.on("error",()=>{}),i.unref(),!0}catch{return!1}}function Xt(e,t){e.registerTool("nodata_connect",{description:"Switch NoData's data tools on. Step 1: call with NO arguments to open the free signup in a browser (email + company, ~30s \u2014 also where your 12-word recovery phrase + email verification happen); it shows an ORG KEY once. Step 2: call this tool again with that key as `api_key` and it is saved on this machine, so every later start comes up ready with nothing to retype. Step 3: type /mcp (or restart) so the client loads the tools.",inputSchema:{api_key:c.string().optional().describe("The org key shown once at signup (ndp_\u2026 or sk_\u2026). Omit on the first call to open signup.")}},async({api_key:n})=>{let a=(n??"").trim();if(!a){let p=t+Gt;return{content:[{type:"text",text:(Zt(p)?`STEP 1 of 3 \u2014 opened the NoData signup in your browser:
+  `:`STEP 1 of 3 \u2014 open the NoData signup in your browser:
+  `)+p+`
+
+There, about a minute:
+  - email + company (a personal email is fine for the sandbox)
+  - a 12-WORD RECOVERY PHRASE \u2014 save it; it is the only way back into your org
+  - your ORG KEY, shown ONCE \u2014 copy it
+
+STEP 2 \u2014 come back and call this tool again with the key:
+  nodata_connect  api_key: "<the key you copied>"
+and I'll save it so you never paste it again. (Then STEP 3: type /mcp to activate.)`}]}}if(!/^(ndp_|sk_)/.test(a))return{content:[{type:"text",text:`That doesn't look like a NoData org key (it should start with ndp_ or sk_).
+Copy the key shown once on the signup page and try again: nodata_connect api_key: "ndp_\u2026".`}]};let{publicKeyHex:i,privateKeyPkcs8B64:o}=Lt(),r=Bt(),s=$e()||"this device",l=await jt(t,a,r,s,i);if(l.ok){try{we({device:{org_id:l.orgId,handle:r,label:s,private_key_pkcs8_b64:o,public_key_hex:i},base_url:t})}catch(p){return{content:[{type:"text",text:"Enrolled the device, but couldn't save it locally: "+(p instanceof Error?p.message:String(p))}]}}return{content:[{type:"text",text:`STEP 2 done \u2014 this device is enrolled as "${s}" (${r}), and only its PRIVATE key is
+saved at ~/.nodata/credentials.json (readable only by you). The org key you pasted was NOT
+stored: every start now proves possession by signing a fresh challenge and gets a 15-minute token.
+
+STEP 3 \u2014 type /mcp (or restart Claude Code) and the admin tools appear. Next time: nothing to do.`}]}}let d=l.status===404||l.status===0;try{we({api_key:a,key_prefix:a.slice(0,12),base_url:t})}catch(p){return{content:[{type:"text",text:"Couldn't save locally: "+(p instanceof Error?p.message:String(p))+`
+As a fallback, pass it on launch: claude mcp add nodata --env NODATA_API_KEY=<your key> -- npx @nodatachat/mcp`}]}}return{content:[{type:"text",text:(d?`STEP 2 done \u2014 saved your key on this machine (device attestation isn't available on this
+server yet, so this is the key-at-rest path). `:`STEP 2 done \u2014 saved your key on this machine (device enrollment didn't succeed: ${l.error}). `)+`Every future start loads it automatically \u2014 no re-register, no re-paste.
+
+STEP 3 \u2014 type /mcp (or restart Claude Code) and the admin tools appear. Next time: nothing to do.`}]}})}function Jt(e){let t=ie(e);return e.error?t:t+`
+
+GOVERN what it surfaced \u2014 same journey, inside this command:
+  \xB7 CHOOSE what an agent may read:  nodata_register_table  then  nodata_grant   (denied columns never decrypt)
+  \xB7 PROVE every access afterwards:  nodata_evidence
+
+Want a standalone deep scan any time? npx @nodatachat/nodata scan <folder>  (this same engine).`}function qt(e){e.registerTool("nodata_scan_folder",{description:"SEE what's sensitive before you govern it. Scans a LOCAL folder for hardcoded secrets and unencrypted PII (checksum-validated \u2014 Israeli ID / Luhn credit-card / IBAN) with NoData's deep content scanner, reading PDFs and Office files too, ENTIRELY on this machine \u2014 nothing uploads, no credential needed. Returns the findings by file and severity plus the first fix, then points at nodata_register_table + nodata_grant to govern what it found. If the user asks to scan / audit / check a folder or repo for sensitive data, secrets, or exposure, call this.",inputSchema:{path:c.string().optional().describe("Folder to scan (absolute or relative). Default: the directory the server runs in.")}},async({path:t})=>{let n=(t??".").trim()||".",a=M(n);if(!K(a))return{content:[{type:"text",text:`No folder found at: ${a}
+Pass an existing path, e.g. nodata_scan_folder path: "."`}]};try{let i=await ne({target_id:"mcp",target_label:St(a),target_path:a,log:re});return{content:[{type:"text",text:Jt(i)}]}}catch(i){return{content:[{type:"text",text:`Scan failed: ${i instanceof Error?i.message:String(i)}`}],isError:!0}}})}async function Qt(){let{apiKey:e,grantToken:t,baseUrl:n,credentialSource:a,device:i}=Pt(process.argv.slice(2)),o=t?"agent":e||i?"admin":"setup",r=new _t({name:o==="agent"?"NoData (agent-scoped)":o==="setup"?"NoData (setup)":"NoData",version:ae});i?Ae(r,n,Mt(n,i)):e&&Ae(r,n,e),t&&Kt(r,n,t),Yt(r,o),o!=="agent"&&qt(r),o==="setup"?(Xt(r,n),console.error(`nodata-mcp: no credential given \u2014 running in setup mode (data tools disabled).
+Call nodata_connect (opens signup, enrolls this device), or pass --api-key / --grant-token. See --help.`)):i?console.error(`nodata-mcp: loaded device identity "${i.label}" (${i.handle}) \u2014 attest mode; tokens are minted per session.`):a==="stored"&&console.error("nodata-mcp: loaded saved credential from ~/.nodata/credentials.json (admin mode).");let s=new vt;await r.connect(s)}Qt().catch(e=>{console.error("Fatal error:",e),process.exit(1)});