@chkp/policy-insights-mcp 0.1.1 → 0.3.2

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @chkp/policy-insights-mcp
 
+## 0.3.0
+
+### Minor Changes
+
+- b5fdd00: Updated implementation and features, Modified 1 file(s) (synced from internal repository)
+
 ## 0.1.1
 
 ### Patch Changes

package/dist/index.js

@@ -360,9 +360,6 @@ var init_ui_dialog = __esm({
   }
 });
 
-// src/index.ts
-import { z as z2 } from "zod";
-
 // src/toolDefinitionMap.ts
 var toolDefinitionMap = [
   {
@@ -989,9 +986,10 @@ var ClientResponse = class {
   }
 };
 var APIClientBase = class {
-  constructor(authToken = "", tokenType = TokenType.API_KEY) {
+  constructor(authToken = "", tokenType = TokenType.API_KEY, cloudConnected = false) {
     this.authToken = authToken;
     this.tokenType = tokenType;
+    this.cloudConnected = cloudConnected;
     this.sid = null;
     this.sessionTimeout = null;
     this.sessionStart = null;
@@ -1014,6 +1012,10 @@ var APIClientBase = class {
     if (this.sid) {
       headers["X-chkp-sid"] = this.sid;
     }
+    if (this.cloudConnected && this.tokenType === TokenType.CI_TOKEN) {
+      headers["Authorization"] = `Bearer ${this.authToken}`;
+      headers["CLOUD-INFRA-TOKEN"] = this.authToken;
+    }
     return headers;
   }
   /**
@@ -1117,12 +1119,15 @@ var APIClientBase = class {
     const now = Date.now();
     return now > this.sessionStart + (this.sessionTimeout - 5) * 1e3;
   }
+  getHeadersForLogin() {
+    return { "Content-Type": "application/json" };
+  }
   /**
    * Login to the API using the API key
    */
   async login() {
     const apiTokenHeader = this.tokenType === TokenType.API_KEY ? "api-key" : "ci-token";
-    const loginResp = await this.makeRequest(this.getHost(), "POST", "login", { [apiTokenHeader]: this.authToken }, { "Content-Type": "application/json" });
+    const loginResp = await this.makeRequest(this.getHost(), "POST", "login", { [apiTokenHeader]: this.authToken }, this.getHeadersForLogin());
     if (loginResp.status !== 200 || !loginResp.response || !loginResp.response.sid) {
       throw loginResp;
     }
@@ -1196,13 +1201,20 @@ var APIClientBase = class {
   }
 };
 var SmartOneCloudAPIClient = class extends APIClientBase {
-  constructor(authToken, tokenType, s1cUrl) {
-    super(authToken, tokenType);
+  constructor(authToken, tokenType, s1cUrl, cloudConnected = false) {
+    super(authToken, tokenType, cloudConnected);
     this.s1cUrl = s1cUrl;
   }
   getHost() {
     return this.s1cUrl;
   }
+  getHeadersForLogin() {
+    const headers = { "Content-Type": "application/json" };
+    if (this.cloudConnected && this.tokenType === TokenType.CI_TOKEN) {
+      headers["Authorization"] = `Bearer ${this.authToken}`;
+    }
+    return headers;
+  }
 };
 var OnPremAPIClient = class extends APIClientBase {
   constructor(apiKey, managementHost, managementPort = "443", username, password) {
@@ -1654,18 +1666,11 @@ async function launchHTTPServer(config, serverModule2, port) {
     } else if (req.url === "/health" || req.url === "/status") {
       res.writeHead(200, { "Content-Type": "application/json" });
       const sessionCount = serverModule2.sessionManager.getSessionCount();
-      const sessions = serverModule2.sessionManager.getAllSessions().map((session) => ({
-        id: session.sessionId,
-        createdAt: session.createdAt,
-        lastActive: session.lastActive
-        // Don't include potentially sensitive metadata
-      }));
       res.end(JSON.stringify({
         status: "ok",
         server: config.name,
         version: serverModule2.pkg.version,
-        activeSessions: sessionCount,
-        sessions
+        activeSessions: sessionCount
       }));
     } else {
       res.writeHead(404, { "Content-Type": "text/plain" });
@@ -2789,7 +2794,7 @@ var APIManagerForAPIKey = class extends APIManagerBase {
       }
       throw new Error("API key or cloud infrastructure token is required");
     }
-    return new this(SmartOneCloudAPIClient.create(key, keyType, args.s1cUrl));
+    return new this(SmartOneCloudAPIClient.create(key, keyType, args.s1cUrl, !!args.cloudConnected));
   }
 };
 
@@ -2828,7 +2833,7 @@ var Settings = class _Settings {
       return "STG";
     return void 0;
   }
-  constructor({ apiKey = process.env.API_KEY, username = process.env.USERNAME, password = process.env.PASSWORD, s1cUrl = process.env.S1C_URL, managementHost = process.env.MANAGEMENT_HOST, managementPort = process.env.MANAGEMENT_PORT || "443", cloudInfraToken = process.env.CLOUD_INFRA_TOKEN, clientId = process.env.CLIENT_ID, secretKey = process.env.SECRET_KEY, region = process.env.REGION || "EU", devPort = process.env.DEV_PORT || "8006", gatewayUrl } = {}) {
+  constructor({ apiKey = process.env.API_KEY, username = process.env.USERNAME, password = process.env.PASSWORD, s1cUrl = process.env.S1C_URL, managementHost = process.env.MANAGEMENT_HOST, managementPort = process.env.MANAGEMENT_PORT || "443", cloudInfraToken = process.env.CLOUD_INFRA_TOKEN, cloudConnected = process.env.CLOUD_CONNECTED === "true", clientId = process.env.CLIENT_ID, secretKey = process.env.SECRET_KEY, region = process.env.REGION || "EU", devPort = process.env.DEV_PORT || "8006", gatewayUrl } = {}) {
     this.region = "EU";
     this.devPort = "8006";
     this.gatewayUrl = "";
@@ -2855,6 +2860,7 @@ var Settings = class _Settings {
     this.managementHost = managementHost;
     this.managementPort = managementPort;
     this.cloudInfraToken = cloudInfraToken;
+    this.cloudConnected = cloudConnected;
     this.clientId = clientId;
     this.secretKey = secretKey;
     this.region = this.normalizeRegion(region) || "EU";
@@ -2878,7 +2884,7 @@ var Settings = class _Settings {
    * Check if the provided string is a valid region
    */
   isValidRegion(region) {
-    return ["EU", "US", "STG", "LOCAL"].includes(region.toUpperCase());
+    return ["EU", "US", "STG", "DEV", "LOCAL"].includes(region.toUpperCase());
   }
   /**
    * Get the base gateway URL for a given region
@@ -2890,6 +2896,7 @@ var Settings = class _Settings {
       case "US":
         return "https://cloudinfra-gw-us.portal.checkpoint.com";
       case "STG":
+      case "DEV":
       case "LOCAL":
         return "https://dev-cloudinfra-gw.kube1.iaas.checkpoint.com";
       default:
@@ -2986,6 +2993,7 @@ var Settings = class _Settings {
       managementHost: args.managementHost,
       managementPort: args.managementPort,
       cloudInfraToken: args.cloudInfraToken,
+      cloudConnected: args.cloudConnected,
       clientId: args.clientId,
       secretKey: args.secretKey,
       region: typeof args.region === "string" ? args.region.trim().toUpperCase() : void 0,
@@ -3011,6 +3019,7 @@ var Settings = class _Settings {
       managementHost: getHeaderValue(headers, "MANAGEMENT-HOST"),
       managementPort: getHeaderValue(headers, "MANAGEMENT-PORT"),
       cloudInfraToken: getHeaderValue(headers, "CLOUD-INFRA-TOKEN"),
+      cloudConnected: getHeaderValue(headers, "CLOUD-CONNECTED"),
       clientId: getHeaderValue(headers, "CLIENT-ID"),
       secretKey: getHeaderValue(headers, "SECRET-KEY"),
       region: getHeaderValue(headers, "REGION"),
@@ -3043,6 +3052,7 @@ var Settings = class _Settings {
       managementHost: extractedValues.managementHost,
       managementPort: extractedValues.managementPort,
       cloudInfraToken: extractedValues.cloudInfraToken,
+      cloudConnected: extractedValues.cloudConnected === "true",
       clientId: extractedValues.clientId,
       secretKey: extractedValues.secretKey,
       region: extractedValues.region?.toUpperCase(),
@@ -3089,7 +3099,7 @@ var runApi = createApiRunner(serverModule);
 server.tool(
   `${SERVER_PACKAGE_NAME.split("/").pop().replace(/-mcp$/, "")}__init`,
   "Verify, login and initialize management connection. Use this tool on your first interaction with the server.",
-  z2.object({}).strict(),
+  {},
   async (args, extra) => {
     try {
       const apiManager = SessionContext.getAPIManager(serverModule, extra);

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chkp/policy-insights-mcp",
-  "version": "0.1.1",
+  "version": "0.3.2",
   "bin": {
     "policy-insights-mcp": "dist/index.js"
   },
@@ -20,9 +20,13 @@
     "build:bundle": "node ../../bundle-mcp.js",
     "build:tsc": "npx tsc && npx shx chmod +x ./dist/index.js && npx shx cp src/server-config.json dist/",
     "dev": "tsc --watch",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "prepack": "node ../../scripts/strip-bundled-deps.js",
+    "postpack": "node ../../scripts/strip-bundled-deps.js restore"
   },
   "dependencies": {
+    "@chkp/mcp-utils": "*",
+    "@chkp/quantum-infra": "*",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "axios": "^1.13.5",
     "commander": "^13.1.0",
@@ -30,8 +34,6 @@
     "zod": "^3.22.4"
   },
   "devDependencies": {
-    "@chkp/mcp-utils": "*",
-    "@chkp/quantum-infra": "*",
     "@types/node": "^22.15.2",
     "@typescript-eslint/eslint-plugin": "^8.38.0",
     "@typescript-eslint/parser": "^8.38.0",

package/dist/server-config.json

@@ -23,6 +23,13 @@
       "type": "string",
       "hidden": true
     },
+    {
+      "flag": "--cloud-connected",
+      "description": "Enable cloud-connected mode",
+      "env": "CLOUD_CONNECTED",
+      "type": "boolean",
+      "hidden": true
+    },
     {
       "flag": "--username <username>",
       "description": "Username for on-prem authentication",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chkp/policy-insights-mcp",
-  "version": "0.1.1",
+  "version": "0.3.2",
   "bin": {
     "policy-insights-mcp": "dist/index.js"
   },
@@ -20,7 +20,9 @@
     "build:bundle": "node ../../bundle-mcp.js",
     "build:tsc": "npx tsc && npx shx chmod +x ./dist/index.js && npx shx cp src/server-config.json dist/",
     "dev": "tsc --watch",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "prepack": "node ../../scripts/strip-bundled-deps.js",
+    "postpack": "node ../../scripts/strip-bundled-deps.js restore"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",
@@ -30,8 +32,6 @@
     "zod": "^3.24.4"
   },
   "devDependencies": {
-    "@chkp/mcp-utils": "*",
-    "@chkp/quantum-infra": "*",
     "@types/node": "^22.15.2",
     "@typescript-eslint/eslint-plugin": "^8.38.0",
     "@typescript-eslint/parser": "^8.38.0",

package/package.json.bak

@@ -0,0 +1,51 @@
+{
+  "name": "@chkp/policy-insights-mcp",
+  "version": "0.3.2",
+  "bin": {
+    "policy-insights-mcp": "dist/index.js"
+  },
+  "description": "Official MCP server for Check Point Policy Insights",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/CheckPointSW/mcp-servers.git",
+    "directory": "packages/policy-insights"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "npm run build:bundle && npx shx chmod +x ./dist/index.js && npx shx cp src/server-config.json dist/",
+    "build:bundle": "node ../../bundle-mcp.js",
+    "build:tsc": "npx tsc && npx shx chmod +x ./dist/index.js && npx shx cp src/server-config.json dist/",
+    "dev": "tsc --watch",
+    "start": "node dist/index.js",
+    "prepack": "node ../../scripts/strip-bundled-deps.js",
+    "postpack": "node ../../scripts/strip-bundled-deps.js restore"
+  },
+  "dependencies": {
+    "@chkp/mcp-utils": "*",
+    "@chkp/quantum-infra": "*",
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "commander": "^13.1.0",
+    "axios": "^1.13.5",
+    "node-machine-id": "^1.1.12",
+    "zod": "^3.24.4"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.2",
+    "@typescript-eslint/eslint-plugin": "^8.38.0",
+    "@typescript-eslint/parser": "^8.38.0",
+    "eslint": "^8.57.0",
+    "eslint-config-prettier": "^9.1.0",
+    "eslint-plugin-prettier": "^5.2.1",
+    "prettier": "^3.6.2",
+    "typescript": "^5.8.3"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [],
+  "author": ""
+}