@nohacklabs/mcp-server 1.0.3

package/README.md

@@ -0,0 +1,165 @@
+# NoHack Security MCP Server
+
+An MCP (Model Context Protocol) server for querying security scan data from the NoHack platform. Analyze vulnerabilities, secrets, scans, and repository configurations directly from AI assistants like Claude, Cursor, or any MCP-compatible client.
+
+## Features
+
+- Query security scan results across repositories
+- Analyze vulnerabilities by severity, type, and status
+- Track detected secrets with filtering by detector type
+- Aggregate and trend analysis with grouping support
+- Filter by organization, repository, date ranges, and custom criteria
+
+## Tools
+
+### Listing Tools
+
+| Tool | Description |
+|------|-------------|
+| `list_scans` | List security scans with filters |
+| `list_vulnerabilities` | List vulnerabilities by severity, status, scan |
+| `list_repositories` | List configured repositories |
+| `list_secrets` | List detected secrets with detector type filtering |
+| `get_recent_scans` | Get scans from last N days |
+| `get_recent_vulnerabilities` | Get vulnerabilities from last N days |
+| `search_vulnerabilities` | Text search across vulnerabilities |
+
+### Advanced Query Tool
+
+| Tool | Description |
+|------|-------------|
+| `query_collection` | Complex queries with aggregations and grouping |
+
+### Detail Tools
+
+| Tool | Description |
+|------|-------------|
+| `get_scan_details` | Full scan details with vulnerabilities and secrets |
+| `get_vulnerability_details` | Full vulnerability with code context and recommendations |
+| `get_repo_config_details` | Repository configuration details |
+| `get_organization` | Organization details |
+
+## Collections
+
+- `scans` - Security scan records
+- `vulnerabilities` - Detected vulnerabilities  
+- `secrets` - Detected secrets (filter by `detector_name`: Github, AWS, PrivateKey, OpenAI, etc.)
+- `github_repo_config` - Repository configurations
+- `organisations` - Organization data
+
+## Usage Examples
+
+### List Critical Vulnerabilities
+```json
+{
+  "orgId": "your-org-id",
+  "severity": "Critical",
+  "limit": 50
+}
+```
+
+### List GitHub Secrets
+```json
+{
+  "orgId": "your-org-id",
+  "detectorName": "Github",
+  "limit": 50
+}
+```
+
+### Count Vulnerabilities by Severity
+```json
+{
+  "collection": "vulnerabilities",
+  "aggregate": { "count": "*" },
+  "groupBy": ["severity"],
+  "limit": -1
+}
+```
+
+### Search for SQL Injection
+```json
+{
+  "orgId": "your-org-id",
+  "query": "SQL injection",
+  "limit": 50
+}
+```
+
+## Configuration
+
+The server requires environment variables:
+
+| Variable | Description |
+|----------|-------------|
+| `NOHACK_API_URL` | NoHack API endpoint |
+| `NOHACK_API_TOKEN` | Your API access token |
+
+## Integration
+
+### Claude Desktop
+
+Add to `~/Library/Application Support/Claude/claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "nohack-security": {
+      "command": "npx",
+      "args": ["@nohacklabs/mcp-server"],
+      "env": {
+        "NOHACK_API_URL": "https://your-nohack-instance.com",
+        "NOHACK_API_TOKEN": "your-api-token"
+      }
+    }
+  }
+}
+```
+
+### Cursor
+
+Add to your Cursor MCP settings:
+
+```json
+{
+  "mcpServers": {
+    "nohack-security": {
+      "command": "npx",
+      "args": ["@nohacklabs/mcp-server"],
+      "env": {
+        "NOHACK_API_URL": "https://your-nohack-instance.com",
+        "NOHACK_API_TOKEN": "your-api-token"
+      }
+    }
+  }
+}
+```
+
+## Filter Operators
+
+| Operator | Description |
+|----------|-------------|
+| `_eq` | Equals |
+| `_neq` | Not equals |
+| `_in` | In array |
+| `_gt`, `_gte`, `_lt`, `_lte` | Comparisons |
+| `_contains`, `_icontains` | Text search |
+| `_null`, `_nnull` | Null checks |
+| `_and`, `_or` | Logical operators |
+
+## Dynamic Dates
+
+| Expression | Meaning |
+|------------|---------|
+| `$NOW(-7 days)` | 7 days ago |
+| `$NOW(-1 month)` | 1 month ago |
+| `$NOW(-1 year)` | 1 year ago |
+
+## License
+
+MIT
+
+## Links
+
+- [NoHack Labs](https://nohacklabs.com)
+- [Documentation](https://docs.nohacklabs.com)

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,724 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+// ============================================================================
+// API CLIENT
+// ============================================================================
+class ApiClient {
+    apiUrl;
+    token;
+    constructor(apiUrl, token) {
+        this.apiUrl = apiUrl;
+        this.token = token;
+    }
+    async fetch(endpoint, options) {
+        const url = `${this.apiUrl}${endpoint}`;
+        const response = await fetch(url, {
+            ...options,
+            headers: {
+                Authorization: `Bearer ${this.token}`,
+                "Content-Type": "application/json",
+                ...options?.headers,
+            },
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`API Error: ${response.status} ${response.statusText} - ${errorText}`);
+        }
+        return response.json();
+    }
+    // ---------------------------------------------------------------------------
+    // Schema Discovery (via generic collections API metadata)
+    // ---------------------------------------------------------------------------
+    async getCollectionSchema(collection) {
+        // Use the generic collections API with meta parameter to get schema info
+        const params = new URLSearchParams();
+        params.set("limit", "1");
+        params.set("meta", "*");
+        const result = await this.fetch(`/api/collections/${collection}?${params.toString()}`);
+        // Return basic schema information from metadata
+        return {
+            collection,
+            message: "Schema discovery via BFF API. Use query_collection with specific fields.",
+            availableFields: "Use the generic query API to discover available fields by querying with limit=1",
+            sampleQuery: `{ collection: "${collection}", fields: ["*"], limit: 1 }`
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Generic Query (via BFF API)
+    // ---------------------------------------------------------------------------
+    async queryCollection(options) {
+        const { collection, filter, aggregate, groupBy, sort, limit, offset, fields, deep, orgId, } = options;
+        const params = new URLSearchParams();
+        // Add orgId if provided
+        if (orgId) {
+            params.set("orgId", orgId);
+        }
+        // Add filter
+        if (filter) {
+            params.set("filter", JSON.stringify(filter));
+        }
+        // Add aggregation
+        if (aggregate) {
+            if (aggregate.count) {
+                if (Array.isArray(aggregate.count)) {
+                    aggregate.count.forEach((field) => params.append("aggregate[count][]", field));
+                }
+                else {
+                    params.set("aggregate[count]", aggregate.count);
+                }
+            }
+            if (aggregate.avg) {
+                aggregate.avg.forEach((field) => params.append("aggregate[avg][]", field));
+            }
+            if (aggregate.sum) {
+                aggregate.sum.forEach((field) => params.append("aggregate[sum][]", field));
+            }
+            if (aggregate.min) {
+                aggregate.min.forEach((field) => params.append("aggregate[min][]", field));
+            }
+            if (aggregate.max) {
+                aggregate.max.forEach((field) => params.append("aggregate[max][]", field));
+            }
+            if (aggregate.countDistinct) {
+                aggregate.countDistinct.forEach((field) => params.append("aggregate[countDistinct][]", field));
+            }
+        }
+        // Add groupBy
+        if (groupBy && groupBy.length > 0) {
+            groupBy.forEach((field) => params.append("groupBy[]", field));
+        }
+        // Add sort
+        if (sort && sort.length > 0) {
+            sort.forEach((field) => params.append("sort[]", field));
+        }
+        // Add limit
+        if (limit !== undefined) {
+            params.set("limit", limit.toString());
+        }
+        // Add offset (for pagination)
+        if (offset !== undefined) {
+            params.set("offset", offset.toString());
+        }
+        // Add fields (supports dot notation for relations)
+        if (fields && fields.length > 0) {
+            fields.forEach((field) => params.append("fields[]", field));
+        }
+        // Add deep query parameters for nested relations
+        if (deep) {
+            Object.entries(deep).forEach(([key, value]) => {
+                if (typeof value === "object") {
+                    Object.entries(value).forEach(([deepKey, deepValue]) => {
+                        params.set(`deep[${key}][${deepKey}]`, String(deepValue));
+                    });
+                }
+            });
+        }
+        // Add meta for total count
+        params.set("meta", "total_count,filter_count");
+        const result = await this.fetch(`/api/collections/${collection}?${params.toString()}`);
+        return {
+            data: result.data || [],
+            meta: result.meta || { total_count: 0, filter_count: 0 },
+            count: result.data?.length || 0,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Convenience Methods (via BFF API)
+    // ---------------------------------------------------------------------------
+    // --- List Methods ---
+    async listScans(options) {
+        const params = new URLSearchParams();
+        params.set("orgId", options.orgId);
+        params.set("limit", (options.limit || 20).toString());
+        params.set("page", (options.page || 1).toString());
+        params.set("sort[]", "-date_created");
+        if (options.scanType) {
+            params.set("filter", JSON.stringify({ scan_type: { _eq: options.scanType } }));
+        }
+        if (options.status) {
+            params.set("filter", JSON.stringify({ status: { _eq: options.status } }));
+        }
+        const result = await this.fetch(`/api/scans?${params.toString()}`);
+        return result;
+    }
+    async listVulnerabilities(options) {
+        const params = new URLSearchParams();
+        params.set("orgId", options.orgId);
+        params.set("limit", (options.limit || 50).toString());
+        params.set("page", (options.page || 1).toString());
+        const filters = [];
+        if (options.severity) {
+            filters.push({ severity: { _eq: options.severity } });
+        }
+        if (options.status) {
+            filters.push({ vuln_status: { _eq: options.status } });
+        }
+        if (options.scanId) {
+            filters.push({ scan: { _eq: options.scanId } });
+        }
+        if (filters.length > 0) {
+            params.set("filter", JSON.stringify(filters.length === 1 ? filters[0] : { _and: filters }));
+        }
+        const result = await this.fetch(`/api/vulnerabilities?${params.toString()}`);
+        return result;
+    }
+    async listRepositories(options) {
+        const params = new URLSearchParams();
+        params.set("orgId", options.orgId);
+        params.set("limit", (options.limit || 20).toString());
+        params.set("page", (options.page || 1).toString());
+        const result = await this.fetch(`/api/repos?${params.toString()}`);
+        return result;
+    }
+    async listSecrets(options) {
+        const params = new URLSearchParams();
+        params.set("orgId", options.orgId);
+        params.set("limit", (options.limit || 50).toString());
+        params.set("page", (options.page || 1).toString());
+        // Simple query params (preferred)
+        if (options.scanId) {
+            params.set("scanId", options.scanId);
+        }
+        if (options.detectorName) {
+            params.set("detectorName", options.detectorName);
+        }
+        if (options.secretStatus) {
+            params.set("secretStatus", options.secretStatus);
+        }
+        if (options.verified) {
+            params.set("verified", options.verified);
+        }
+        const result = await this.fetch(`/api/secrets?${params.toString()}`);
+        return result;
+    }
+    async getRecentScans(options) {
+        const days = options.days || 7;
+        const params = new URLSearchParams();
+        params.set("orgId", options.orgId);
+        params.set("limit", (options.limit || 20).toString());
+        params.set("filter", JSON.stringify({
+            date_created: { _gte: `$NOW(-${days} days)` }
+        }));
+        params.set("sort[]", "-date_created");
+        const result = await this.fetch(`/api/scans?${params.toString()}`);
+        return result;
+    }
+    async getRecentVulnerabilities(options) {
+        const days = options.days || 7;
+        const params = new URLSearchParams();
+        params.set("orgId", options.orgId);
+        params.set("limit", (options.limit || 50).toString());
+        const filters = [
+            { date_created: { _gte: `$NOW(-${days} days)` } }
+        ];
+        if (options.severity) {
+            filters.push({ severity: { _eq: options.severity } });
+        }
+        params.set("filter", JSON.stringify({ _and: filters }));
+        params.set("sort[]", "-date_created");
+        const result = await this.fetch(`/api/vulnerabilities?${params.toString()}`);
+        return result;
+    }
+    async searchVulnerabilities(options) {
+        const params = new URLSearchParams();
+        params.set("orgId", options.orgId);
+        params.set("limit", (options.limit || 50).toString());
+        params.set("filter", JSON.stringify({
+            _or: [
+                { type: { _icontains: options.query } },
+                { file: { _icontains: options.query } },
+                { description: { _icontains: options.query } }
+            ]
+        }));
+        const result = await this.fetch(`/api/vulnerabilities?${params.toString()}`);
+        return result;
+    }
+    // --- Detail Methods ---
+    async getScanById(scanId) {
+        const result = await this.fetch(`/api/scans/${scanId}`);
+        return result.data;
+    }
+    async getVulnerabilityById(vulnId) {
+        const result = await this.fetch(`/api/vulnerabilities/${vulnId}`);
+        return result.data;
+    }
+    async getRepoConfigById(repoId) {
+        const result = await this.fetch(`/api/repos/${repoId}`);
+        return result.data;
+    }
+    async getOrganization(orgId) {
+        const result = await this.fetch(`/api/orgs/${orgId}`);
+        return result.data;
+    }
+}
+// ============================================================================
+// MCP SERVER
+// ============================================================================
+const server = new McpServer({
+    name: "nohack-security-api",
+    version: "1.0.0",
+    description: "MCP server for NoHack security scanning API - query vulnerabilities, secrets, scans, and repo configs",
+});
+// Get API configuration from environment
+function getClient() {
+    // Default to local dev server, but allow override
+    const apiUrl = process.env.NOHACK_API_URL || "http://localhost:5173";
+    const apiToken = process.env.NOHACK_API_TOKEN;
+    if (!apiToken) {
+        throw new Error("NOHACK_API_TOKEN environment variable is required (your access token from localStorage)");
+    }
+    return new ApiClient(apiUrl, apiToken);
+}
+// ============================================================================
+// TOOL DEFINITIONS
+// ============================================================================
+// Define collections enum for reuse
+const collectionsEnum = z.enum([
+    "scans",
+    "vulnerabilities",
+    "secrets",
+    "github_repo_config",
+    "organisations",
+]);
+// ============================================================================
+// LISTING TOOLS - Simple queries for common operations
+// ============================================================================
+server.registerTool("list_scans", {
+    description: `List security scans with optional filtering.
+Use this for simple scan listings. For aggregations/grouping, use query_collection.
+
+Returns paginated results with scan details.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("Organization ID (required)"),
+        limit: z.number().optional().describe("Number of results (default: 20)"),
+        page: z.number().optional().describe("Page number (default: 1)"),
+        scanType: z.string().optional().describe("Filter by scan type: 'sast', 'dast', 'full'"),
+        status: z.string().optional().describe("Filter by status: 'published', 'draft', etc."),
+    }),
+}, async ({ orgId, limit, page, scanType, status }) => {
+    try {
+        const client = getClient();
+        const result = await client.listScans({ orgId, limit, page, scanType, status });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("list_vulnerabilities", {
+    description: `List vulnerabilities with optional filtering.
+Use this for simple vulnerability listings. For aggregations/grouping, use query_collection.
+
+Returns paginated results with vulnerability details.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("Organization ID (required)"),
+        limit: z.number().optional().describe("Number of results (default: 50)"),
+        page: z.number().optional().describe("Page number (default: 1)"),
+        severity: z.string().optional().describe("Filter by severity: 'Critical', 'High', 'Medium', 'Low'"),
+        status: z.string().optional().describe("Filter by status: 'Open', 'Fixed', 'Accepted', etc."),
+        scanId: z.string().optional().describe("Filter by specific scan ID"),
+    }),
+}, async ({ orgId, limit, page, severity, status, scanId }) => {
+    try {
+        const client = getClient();
+        const result = await client.listVulnerabilities({ orgId, limit, page, severity, status, scanId });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("list_repositories", {
+    description: `List configured repositories.
+Use this for simple repository listings.
+
+Returns paginated results with repository details.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("Organization ID (required)"),
+        limit: z.number().optional().describe("Number of results (default: 20)"),
+        page: z.number().optional().describe("Page number (default: 1)"),
+    }),
+}, async ({ orgId, limit, page }) => {
+    try {
+        const client = getClient();
+        const result = await client.listRepositories({ orgId, limit, page });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("list_secrets", {
+    description: `List detected secrets with optional filtering.
+Use this for simple secret listings.
+
+KEY FIELDS:
+- detector_name: Type of secret (e.g., 'Github', 'AWS', 'PrivateKey', 'OpenAI', 'Stripe', 'MongoDB', 'JDBC')
+- detector_type: Numeric ID for the detector
+- secret_status: 'open', 'false_positive', 'duplicate'
+- verified: Whether the secret was verified as valid
+
+Common detector_name values: Github, GitHubOauth2, PrivateKey, AWS, OpenAI, Stripe, MongoDB, JDBC, Postgres, SQLServer, URI, NpmToken, Gitlab, Slack, SendGrid, Anthropic, HuggingFace
+
+Returns paginated results with secret details.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("Organization ID (required)"),
+        limit: z.number().optional().describe("Number of results (default: 50)"),
+        page: z.number().optional().describe("Page number (default: 1)"),
+        scanId: z.string().optional().describe("Filter by specific scan ID"),
+        detectorName: z.string().optional().describe("Filter by detector/secret type (e.g., 'Github', 'AWS', 'PrivateKey', 'OpenAI')"),
+        secretStatus: z.string().optional().describe("Filter by status: 'open', 'false_positive', 'duplicate'"),
+        verified: z.string().optional().describe("Filter by verified status: 'true' or 'false'"),
+    }),
+}, async ({ orgId, limit, page, scanId, detectorName, secretStatus, verified }) => {
+    try {
+        const client = getClient();
+        const result = await client.listSecrets({ orgId, limit, page, scanId, detectorName, secretStatus, verified });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("get_recent_scans", {
+    description: `Get scans from the last N days.
+Useful for recent activity monitoring.
+
+Returns scans sorted by most recent first.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("Organization ID (required)"),
+        days: z.number().optional().describe("Number of days to look back (default: 7)"),
+        limit: z.number().optional().describe("Number of results (default: 20)"),
+    }),
+}, async ({ orgId, days, limit }) => {
+    try {
+        const client = getClient();
+        const result = await client.getRecentScans({ orgId, days, limit });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("get_recent_vulnerabilities", {
+    description: `Get vulnerabilities discovered in the last N days.
+Useful for recent findings and trend monitoring.
+
+Returns vulnerabilities sorted by most recent first.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("Organization ID (required)"),
+        days: z.number().optional().describe("Number of days to look back (default: 7)"),
+        limit: z.number().optional().describe("Number of results (default: 50)"),
+        severity: z.string().optional().describe("Filter by severity: 'Critical', 'High', 'Medium', 'Low'"),
+    }),
+}, async ({ orgId, days, limit, severity }) => {
+    try {
+        const client = getClient();
+        const result = await client.getRecentVulnerabilities({ orgId, days, limit, severity });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("search_vulnerabilities", {
+    description: `Search vulnerabilities by text query.
+Searches in: type, file path, and description.
+
+Returns matching vulnerabilities.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("Organization ID (required)"),
+        query: z.string().describe("Search query (e.g., 'SQL injection', 'auth.js', 'XSS')"),
+        limit: z.number().optional().describe("Number of results (default: 50)"),
+    }),
+}, async ({ orgId, query, limit }) => {
+    try {
+        const client = getClient();
+        const result = await client.searchVulnerabilities({ orgId, query, limit });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+// ============================================================================
+// ADVANCED QUERY TOOL - For aggregations, grouping, and complex queries
+// ============================================================================
+server.registerTool("query_collection", {
+    description: `ADVANCED QUERY TOOL - For aggregations, grouping, and complex filtering.
+
+⚠️ USE THIS ONLY FOR:
+- AGGREGATIONS: Count, sum, avg, min, max
+- GROUPING: Group by severity, status, repo, etc.
+- COMPLEX FILTERS: Multiple conditions, nested relations, custom logic
+- TREND ANALYSIS: Time-series data with groupBy
+
+❌ DON'T USE FOR:
+- Simple listings → Use list_scans, list_vulnerabilities, etc.
+- Recent items → Use get_recent_scans, get_recent_vulnerabilities
+- Text search → Use search_vulnerabilities
+
+WHEN TO USE:
+- "Count vulnerabilities by severity" ✅
+- "Show vulnerability trend by month" ✅
+- "Average scan duration by repo" ✅
+- "List scans" ❌ (use list_scans instead)
+
+AVAILABLE COLLECTIONS:
+- 'scans': Security scan data (fields: id, scan_status, scan_type, date_created, repo_config, etc.)
+- 'vulnerabilities': Vulnerability findings (fields: id, type, severity, vuln_status, file, line, etc.)
+- 'secrets': Exposed secrets (fields: id, detector_name, detector_type, secret_status, verified, etc.)
+  NOTE: Use 'detector_name' for secret type (e.g., 'Github', 'AWS', 'PrivateKey'), NOT 'type'
+- 'github_repo_config': Repository configurations (fields: id, name, full_name, url, type, branch, etc.)
+- 'organisations': Organization data (fields: id, name, quota, plan, etc.)
+
+CRITICAL RULES:
+1. ALWAYS specify fields (collections have 40+ fields!)
+2. Use limit: -1 ONLY for aggregations (to count ALL records)
+3. Use limit: 10-100 for data queries
+4. Use orgId to filter by organization
+
+FILTER OPERATORS:
+- Equality: _eq, _neq, _in, _nin
+- Comparison: _gt, _gte, _lt, _lte
+- Text: _contains, _icontains, _starts_with, _ends_with
+- Null: _null, _nnull, _empty, _nempty
+- Logical: _and, _or
+- Relations: _some, _none
+
+DYNAMIC DATES (use in filters):
+- Last 7 days: { "date_created": { "_gte": "$NOW(-7 days)" } }
+- Last month: { "date_created": { "_gte": "$NOW(-1 month)" } }
+
+AGGREGATIONS:
+- count: Count records (use "*" or specific field)
+- avg, sum, min, max: Numeric operations
+- groupBy: Group results (e.g., ["severity", "vuln_status"])
+
+EXAMPLES:
+// List critical vulnerabilities
+{ collection: "vulnerabilities", filter: { severity: { _eq: "Critical" } }, fields: ["id", "type", "file"], limit: 50 }
+
+// Count vulnerabilities by severity
+{ collection: "vulnerabilities", aggregate: { count: "*" }, groupBy: ["severity"], limit: -1 }
+
+// Count secrets by detector type
+{ collection: "secrets", aggregate: { count: "*" }, groupBy: ["detector_name"], limit: -1 }
+
+// List AWS secrets
+{ collection: "secrets", filter: { detector_name: { _eq: "AWS" } }, fields: ["id", "detector_name", "secret_status", "verified"], limit: 50 }
+
+// Recent scans for a repo
+{ collection: "scans", filter: { repo_config: { name: { _eq: "my-repo" } } }, fields: ["id", "scan_type", "date_created"], limit: 10 }`,
+    inputSchema: z.object({
+        collection: collectionsEnum.describe("The collection to query"),
+        filter: z
+            .record(z.any())
+            .optional()
+            .describe('Filter object. Supports nested relations. Example: {"severity": {"_eq": "Critical"}, "scan": {"scan_type": {"_eq": "sast"}}}'),
+        aggregate: z
+            .object({
+            count: z.union([z.string(), z.array(z.string())]).optional(),
+            avg: z.array(z.string()).optional(),
+            sum: z.array(z.string()).optional(),
+            min: z.array(z.string()).optional(),
+            max: z.array(z.string()).optional(),
+            countDistinct: z.array(z.string()).optional(),
+        })
+            .optional()
+            .describe("Aggregation functions"),
+        groupBy: z
+            .array(z.string())
+            .optional()
+            .describe('Fields to group by (e.g., ["severity", "vuln_status"])'),
+        sort: z
+            .array(z.string())
+            .optional()
+            .describe('Sort fields (prefix with - for descending, e.g., ["-date_created"])'),
+        limit: z
+            .number()
+            .optional()
+            .describe("Max results. Use -1 for aggregations to count ALL records, 10-100 for data queries"),
+        offset: z.number().optional().describe("Records to skip (for pagination)"),
+        fields: z
+            .array(z.string())
+            .optional()
+            .describe('Fields to return. Use dot notation for relations: ["id", "scan.repo_config.name"]'),
+        deep: z
+            .record(z.any())
+            .optional()
+            .describe("Deep query parameters for nested relations"),
+        orgId: z
+            .string()
+            .optional()
+            .describe("Organization ID to filter by (auto-applied to queries)"),
+    }),
+}, async ({ collection, filter, aggregate, groupBy, sort, limit, offset, fields, deep, orgId, }) => {
+    try {
+        const client = getClient();
+        const result = await client.queryCollection({
+            collection,
+            filter,
+            aggregate,
+            groupBy,
+            sort,
+            limit,
+            offset,
+            fields,
+            deep,
+            orgId,
+        });
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+// ============================================================================
+// DETAIL TOOLS - Get full records by ID
+// ============================================================================
+server.registerTool("get_scan_details", {
+    description: `Get complete details for a specific scan by ID.
+Returns the full scan record with all vulnerabilities, secrets, and related data.
+
+Use this when you have a scan ID and need all its details.`,
+    inputSchema: z.object({
+        scanId: z.string().describe("The scan ID"),
+    }),
+}, async ({ scanId }) => {
+    try {
+        const client = getClient();
+        const result = await client.getScanById(scanId);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("get_vulnerability_details", {
+    description: `Get complete details for a specific vulnerability by ID.
+Returns the full vulnerability record with code context, data flow, and recommendations.
+
+Use this when you have a vulnerability ID and need all its details.`,
+    inputSchema: z.object({
+        vulnerabilityId: z.string().describe("The vulnerability ID"),
+    }),
+}, async ({ vulnerabilityId }) => {
+    try {
+        const client = getClient();
+        const result = await client.getVulnerabilityById(vulnerabilityId);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("get_repo_config_details", {
+    description: `Get complete details for a specific repository by ID.
+Returns the full repository record with related scans, vulnerabilities, and secrets.
+
+Use this when you have a repository ID and need all its details.`,
+    inputSchema: z.object({
+        repoId: z.string().describe("The repository configuration ID"),
+    }),
+}, async ({ repoId }) => {
+    try {
+        const client = getClient();
+        const result = await client.getRepoConfigById(repoId);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+server.registerTool("get_organization", {
+    description: `Get organization details by ID.
+Returns organization name, quota, and plan information.`,
+    inputSchema: z.object({
+        orgId: z.string().describe("The organization ID"),
+    }),
+}, async ({ orgId }) => {
+    try {
+        const client = getClient();
+        const result = await client.getOrganization(orgId);
+        return {
+            content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        };
+    }
+    catch (error) {
+        return {
+            content: [{ type: "text", text: `Error: ${error.message}` }],
+            isError: true,
+        };
+    }
+});
+// ============================================================================
+// SERVER STARTUP
+// ============================================================================
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("NoHack Security MCP Server running on stdio");
+}
+main().catch((error) => {
+    console.error("Fatal error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,SAAS;IACL,MAAM,CAAS;IACf,KAAK,CAAS;IAEtB,YAAY,MAAc,EAAE,KAAa;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,OAAqB;QACzD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,GAAG,OAAO,EAAE,OAAO;aACpB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,8EAA8E;IAC9E,0DAA0D;IAC1D,8EAA8E;IAE9E,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC1C,yEAAyE;QACzE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAExB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEvF,gDAAgD;QAChD,OAAO;YACL,UAAU;YACV,OAAO,EAAE,0EAA0E;YACnF,eAAe,EAAE,iFAAiF;YAClG,WAAW,EAAE,kBAAkB,UAAU,8BAA8B;SACxE,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAE9E,KAAK,CAAC,eAAe,CAAC,OAkBrB;QACC,MAAM,EACJ,UAAU,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,IAAI,EACJ,KAAK,EACL,MAAM,EACN,MAAM,EACN,IAAI,EACJ,KAAK,GACN,GAAG,OAAO,CAAC;QAEZ,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAErC,wBAAwB;QACxB,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,aAAa;QACb,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,kBAAkB;QAClB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;gBACpB,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAChC,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAC3C,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CACzC,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CACzC,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CACzC,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CACzC,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;gBAC5B,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACxC,MAAM,CAAC,MAAM,CAAC,4BAA4B,EAAE,KAAK,CAAC,CACnD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,cAAc;QACd,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,WAAW;QACX,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,YAAY;QACZ,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxC,CAAC;QAED,8BAA8B;QAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,mDAAmD;QACnD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,iDAAiD;QACjD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC9B,MAAM,CAAC,OAAO,CAAC,KAA4B,CAAC,CAAC,OAAO,CAClD,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE;wBACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,GAAG,KAAK,OAAO,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC5D,CAAC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEvF,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;YACxD,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,oCAAoC;IACpC,8EAA8E;IAE9E,uBAAuB;IAEvB,KAAK,CAAC,SAAS,CAAC,OAMf;QACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAEtC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAOzB;QACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEnD,MAAM,OAAO,GAAU,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAItB;QACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAQjB;QACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEnD,kCAAkC;QAClC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAIpB;QACC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;YAClC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,IAAI,QAAQ,EAAE;SAC9C,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAK9B;QACC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEtD,MAAM,OAAO,GAAU;YACrB,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,IAAI,QAAQ,EAAE,EAAE;SAClD,CAAC;QAEF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAI3B;QACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;YAClC,GAAG,EAAE;gBACH,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE;gBACvC,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE;gBACvC,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE;aAC/C;SACF,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yBAAyB;IAEzB,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;CACF;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,OAAO;IAChB,WAAW,EACT,uGAAuG;CAC1G,CAAC,CAAC;AAEH,yCAAyC;AACzC,SAAS,SAAS;IAChB,kDAAkD;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,uBAAuB,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAE9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,oCAAoC;AACpC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7B,OAAO;IACP,iBAAiB;IACjB,SAAS;IACT,oBAAoB;IACpB,eAAe;CAChB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,uDAAuD;AACvD,+EAA+E;AAE/E,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;IACE,WAAW,EAAE;;;6CAG4B;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAChE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;QACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KACvF,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;IACE,WAAW,EAAE;;;sDAGqC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAChE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;QACnG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;QAC7F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KACrE,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;IACE,WAAW,EAAE;;;mDAGkC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;KACjE,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;IACE,WAAW,EAAE;;;;;;;;;;;+CAW8B;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAChE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACpE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gFAAgF,CAAC;QAC9H,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;QACvG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;KACzF,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9G,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;IACE,WAAW,EAAE;;;2CAG0B;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QAChF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KACzE,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,4BAA4B,EAC5B;IACE,WAAW,EAAE;;;qDAGoC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QAChF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACxE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;KACpG,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvF,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;IACE,WAAW,EAAE;;;kCAGiB;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QACpF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KACzE,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,wEAAwE;AACxE,+EAA+E;AAE/E,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;IACE,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uIAgEsH;IACnI,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAC/D,MAAM,EAAE,CAAC;aACN,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;aACf,QAAQ,EAAE;aACV,QAAQ,CACP,8HAA8H,CAC/H;QACH,SAAS,EAAE,CAAC;aACT,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC5D,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACnC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACnC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACnC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACnC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC9C,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CAAC,uBAAuB,CAAC;QACpC,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;QACrE,IAAI,EAAE,CAAC;aACJ,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,qEAAqE,CACtE;QACH,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,oFAAoF,CACrF;QACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QAC1E,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,mFAAmF,CACpF;QACH,IAAI,EAAE,CAAC;aACJ,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;aACf,QAAQ,EAAE;aACV,QAAQ,CAAC,4CAA4C,CAAC;QACzD,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,wDAAwD,CAAC;KACtE,CAAC;CACH,EACD,KAAK,EAAE,EACL,UAAU,EACV,MAAM,EACN,SAAS,EACT,OAAO,EACP,IAAI,EACJ,KAAK,EACL,MAAM,EACN,MAAM,EACN,IAAI,EACJ,KAAK,GACN,EAAE,EAAE;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;YAC1C,UAAU;YACV,MAAM;YACN,SAAS;YACT,OAAO;YACP,IAAI;YACJ,KAAK;YACL,MAAM;YACN,MAAM;YACN,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,wCAAwC;AACxC,+EAA+E;AAE/E,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;IACE,WAAW,EAAE;;;2DAG0C;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;KAC3C,CAAC;CACH,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,2BAA2B,EAC3B;IACE,WAAW,EAAE;;;oEAGmD;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;KAC7D,CAAC;CACH,EACD,KAAK,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAClE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;IACE,WAAW,EAAE;;;iEAGgD;IAC7D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;KAC/D,CAAC;CACH,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;IACE,WAAW,EAAE;wDACuC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAClD,CAAC;CACH,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;IAClB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACnD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAC/D,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@nohacklabs/mcp-server",
+  "version": "1.0.3",
+  "description": "MCP server for NoHack security scanning API - query vulnerabilities, secrets, scans, and repo configs",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "nohack-mcp": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "tsc --watch",
+    "prepublishOnly": "npm run build",
+    "inspector": "npx @anthropic-ai/mcp-inspector node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.11.0",
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.0",
+    "typescript": "^5.7.3"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "security",
+    "vulnerability",
+    "sast",
+    "scanning",
+    "nohack",
+    "ai",
+    "cursor",
+    "claude"
+  ],
+  "author": "NoHack Labs",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nohacklabs/mcp-server.git"
+  },
+  "homepage": "https://nohacklabs.com",
+  "publishConfig": {
+    "access": "public"
+  }
+}