@orygn/opa-mcp 0.0.0 → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,99 @@
+# Changelog
+
+All notable changes to `@orygn/opa-mcp` are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+The public surface — for the purposes of SemVer — is:
+
+- the set of registered MCP tools, prompts, and resources
+- the input and output schemas of those tools
+- the set of recognized environment variables
+- the CLI entry point (`opa-mcp`) and its supported flags
+
+Internal helpers (`src/lib/**`), type names not re-exported, and log formats are
+not part of the public surface and may change in minor releases.
+
+## [Unreleased]
+
+## [0.1.0] — initial public release
+
+### Added
+
+#### Tools (32)
+
+**Authoring (7)** — `rego_format`, `rego_check`, `rego_lint`,
+`rego_parse_ast`, `rego_inspect`, `rego_capabilities`, `rego_deps`.
+Operate on Rego source without a running OPA server.
+
+**Evaluation (7)** — `rego_eval` plus `_with_explain`, `_with_profile`,
+`_with_coverage` variants; `rego_test`, `rego_bench`,
+`rego_compile_query`. Run policies against inputs with optional
+trace, profile, and coverage.
+
+**Bundles (2)** — `opa_bundle_build`, `opa_bundle_sign`. Build and
+sign deployable bundles.
+
+**Server management (12)** — `opa_list_policies`, `opa_get_policy`,
+`opa_put_policy`, `opa_delete_policy`, `opa_get_data`, `opa_put_data`,
+`opa_patch_data`, `opa_query_decision`, `opa_compile_query`,
+`opa_health`, `opa_status`, `opa_config`. Manage a running OPA over
+its REST API.
+
+**Helpers (4)** — `rego_explain_decision` produces a structured
+trace and per-rule fired/not-fired summary; `rego_generate_test_skeleton`
+emits a `*_test.rego` stub from a policy AST; `rego_describe_policy`
+returns a structured summary of package / imports / rules;
+`rego_suggest_fix` maps known diagnostic codes to mechanical fix
+suggestions.
+
+#### Prompts (3)
+
+`policy_authoring_assistant`, `policy_review_checklist`,
+`decision_debugging_workflow` — workflow templates that direct the
+agent through writing, reviewing, or debugging a policy using the
+tools above.
+
+#### Resources (3)
+
+`opa://builtins` — categorized OPA builtin function reference,
+derived at read time from `opa capabilities --current` and annotated
+with security-sensitive functions.
+
+`opa://style-guide` — condensed Rego style guide covering
+`rego.v1`, package layout, naming, default-deny, comprehensions vs
+`every`, schema annotations, and tests.
+
+`opa://patterns` — curated pattern library with six worked
+examples: RBAC, ABAC, Kubernetes admission, Terraform IaC gates, API
+authorization, rate limiting. Each pattern includes a working policy,
+a test, and common pitfalls.
+
+#### Distribution
+
+- npm package `@orygn/opa-mcp`
+- Multi-arch Docker image `orygn/opa-mcp` bundling pinned `opa`
+  0.69.0 and `regal` 0.30.0 binaries
+- MCPB bundle (`opa-mcp.mcpb`) attached to GitHub releases
+- MCP registry entry under `io.github.orygnscode/opa-mcp`
+- Smithery descriptor for one-click client installs
+
+#### Configuration
+
+Environment variables: `OPA_URL`, `OPA_TOKEN`, `OPA_BINARY`,
+`REGAL_BINARY`, `OPA_MCP_ALLOWED_PATHS`, `OPA_MCP_LOG_FILE`,
+`OPA_MCP_LOG_LEVEL`, `OPA_MCP_MAX_RESPONSE_BYTES`,
+`OPA_MCP_TIMEOUT_MS`, `OPA_MCP_HTTP_TIMEOUT_MS`. File-based tools
+fail-secure when `OPA_MCP_ALLOWED_PATHS` is unset.
+
+#### Testing
+
+50 unit tests (mocked subprocess) plus 20 integration tests
+(real `opa` 0.69.0 and `regal` 0.30.0 binaries) covering both CLI
+wrappers end-to-end. CI matrix: Ubuntu / macOS / Windows on Node 20
+and 22, plus CodeQL security scanning and weekly Dependabot updates
+for npm, GitHub Actions, and Docker base images.
+
+[Unreleased]: https://github.com/OrygnsCode/opa-mcp-server/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/OrygnsCode/opa-mcp-server/releases/tag/v0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Orygn LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.