@orygn/opa-mcp 0.0.0 → 0.1.0

package/dist/tools/server-management/index.js

@@ -0,0 +1,11 @@
+import { registerDataTools } from './data.js';
+import { registerDecisionTools } from './decisions.js';
+import { registerPolicyTools } from './policies.js';
+import { registerStatusTools } from './status.js';
+export function registerServerManagementTools(server, config) {
+    registerPolicyTools(server, config);
+    registerDataTools(server, config);
+    registerDecisionTools(server, config);
+    registerStatusTools(server, config);
+}
+//# sourceMappingURL=index.js.map

package/dist/tools/server-management/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/server-management/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,UAAU,6BAA6B,CAAC,MAAiB,EAAE,MAAc;IAC7E,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/tools/server-management/policies.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Config } from '../../config.js';
+export declare function registerPolicyTools(server: McpServer, config: Config): void;
+//# sourceMappingURL=policies.d.ts.map

package/dist/tools/server-management/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../src/tools/server-management/policies.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAY9C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAqG3E"}

package/dist/tools/server-management/policies.js

@@ -0,0 +1,94 @@
+/**
+ * Policy-management tools that talk to a running OPA via REST:
+ * opa_list_policies, opa_get_policy, opa_put_policy, opa_delete_policy.
+ */
+import { z } from 'zod';
+import { OpaClient } from '../../lib/opa-client.js';
+import { ok } from '../../lib/errors.js';
+import { withToolEnvelope } from '../../lib/tool-helpers.js';
+import { mapOpaClientError } from './_shared.js';
+export function registerPolicyTools(server, config) {
+    const opa = new OpaClient(config);
+    server.registerTool('opa_list_policies', {
+        title: 'List OPA policies',
+        description: 'List policies registered on the running OPA server. Returns an array of `{ id, raw, ast }` records.',
+        inputSchema: {},
+    }, async () => {
+        return withToolEnvelope(config, async () => {
+            try {
+                const data = await opa.request({
+                    method: 'GET',
+                    path: '/v1/policies',
+                });
+                return ok({ policies: data.result ?? [] });
+            }
+            catch (e) {
+                return mapOpaClientError(e);
+            }
+        });
+    });
+    server.registerTool('opa_get_policy', {
+        title: 'Get OPA policy by ID',
+        description: 'Fetch a single policy by ID from the running OPA server.',
+        inputSchema: {
+            id: z.string().min(1).describe('Policy ID, e.g. "rbac" or "policies/auth/main".'),
+        },
+    }, async ({ id }) => {
+        return withToolEnvelope(config, async () => {
+            try {
+                const data = await opa.request({
+                    method: 'GET',
+                    path: `/v1/policies/${encodeURIComponent(id)}`,
+                });
+                return ok({ policy: data.result });
+            }
+            catch (e) {
+                return mapOpaClientError(e, 'POLICY_NOT_FOUND');
+            }
+        });
+    });
+    server.registerTool('opa_put_policy', {
+        title: 'Upload or replace OPA policy',
+        description: 'Upload a Rego policy under the given ID. Replaces any existing policy with that ID. The policy is uploaded as raw text/plain — OPA parses it on the server side.',
+        inputSchema: {
+            id: z.string().min(1).describe('Policy ID to create or replace.'),
+            source: z.string().min(1).describe('Rego source.'),
+        },
+    }, async ({ id, source }) => {
+        return withToolEnvelope(config, async () => {
+            try {
+                await opa.request({
+                    method: 'PUT',
+                    path: `/v1/policies/${encodeURIComponent(id)}`,
+                    rawBody: source,
+                    rawContentType: 'text/plain',
+                });
+                return ok({ id, replaced: true });
+            }
+            catch (e) {
+                return mapOpaClientError(e);
+            }
+        });
+    });
+    server.registerTool('opa_delete_policy', {
+        title: 'Delete OPA policy',
+        description: 'Delete a policy by ID from the running OPA server.',
+        inputSchema: {
+            id: z.string().min(1).describe('Policy ID to delete.'),
+        },
+    }, async ({ id }) => {
+        return withToolEnvelope(config, async () => {
+            try {
+                await opa.request({
+                    method: 'DELETE',
+                    path: `/v1/policies/${encodeURIComponent(id)}`,
+                });
+                return ok({ id, deleted: true });
+            }
+            catch (e) {
+                return mapOpaClientError(e, 'POLICY_NOT_FOUND');
+            }
+        });
+    });
+}
+//# sourceMappingURL=policies.js.map

package/dist/tools/server-management/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../src/tools/server-management/policies.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAQjD,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAc;IACnE,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IAElC,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,qGAAqG;QACvG,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,OAAO,gBAAgB,CAAkC,MAAM,EAAE,KAAK,IAAI,EAAE;YAC1E,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAgC;oBAC5D,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,cAAc;iBACrB,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,0DAA0D;QACvE,WAAW,EAAE;YACX,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;SAClF;KACF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,OAAO,gBAAgB,CAA8B,MAAM,EAAE,KAAK,IAAI,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAA8B;oBAC1D,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE;iBAC/C,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,kKAAkK;QACpK,WAAW,EAAE;YACX,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;SACnD;KACF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACvB,OAAO,gBAAgB,CAAoC,MAAM,EAAE,KAAK,IAAI,EAAE;YAC5E,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,OAAO,CAAC;oBAChB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE;oBAC9C,OAAO,EAAE,MAAM;oBACf,cAAc,EAAE,YAAY;iBAC7B,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE;YACX,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;SACvD;KACF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,OAAO,gBAAgB,CAAmC,MAAM,EAAE,KAAK,IAAI,EAAE;YAC3E,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,OAAO,CAAC;oBAChB,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,EAAE,CAAC,EAAE;iBAC/C,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/server-management/status.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Config } from '../../config.js';
+export declare function registerStatusTools(server: McpServer, config: Config): void;
+//# sourceMappingURL=status.d.ts.map

package/dist/tools/server-management/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/tools/server-management/status.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAM9C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAqF3E"}

package/dist/tools/server-management/status.js

@@ -0,0 +1,82 @@
+/**
+ * Server-status tools: opa_health, opa_status, opa_config.
+ */
+import { z } from 'zod';
+import { OpaClient, OpaUnreachableError } from '../../lib/opa-client.js';
+import { err, ok } from '../../lib/errors.js';
+import { withToolEnvelope } from '../../lib/tool-helpers.js';
+import { mapOpaClientError } from './_shared.js';
+export function registerStatusTools(server, config) {
+    const opa = new OpaClient(config);
+    server.registerTool('opa_health', {
+        title: 'OPA health check',
+        description: 'Hit the OPA `/health` endpoint. Returns `{ healthy: true }` on 200. Supports `bundles` and `plugins` query flags to require those subsystems to also be healthy.',
+        inputSchema: {
+            bundles: z.boolean().optional().describe('Require bundle plugin to be healthy as well.'),
+            plugins: z.boolean().optional().describe('Require all plugins to be healthy.'),
+        },
+    }, async ({ bundles, plugins }) => {
+        return withToolEnvelope(config, async () => {
+            try {
+                const query = {};
+                if (bundles)
+                    query['bundles'] = true;
+                if (plugins)
+                    query['plugins'] = true;
+                await opa.request({
+                    method: 'GET',
+                    path: '/health',
+                    query,
+                });
+                return ok({ healthy: true });
+            }
+            catch (e) {
+                if (e instanceof OpaUnreachableError) {
+                    return mapOpaClientError(e);
+                }
+                // Any non-2xx counts as unhealthy without raising.
+                return err('OPA_UNREACHABLE', 'OPA reported unhealthy.', {
+                    details: { error: e instanceof Error ? e.message : String(e) },
+                });
+            }
+        });
+    });
+    server.registerTool('opa_status', {
+        title: 'OPA status',
+        description: 'Return OPA bundle and decision-log status from the running server. Combines `/v1/config` and the operational status the server exposes through it.',
+        inputSchema: {},
+    }, async () => {
+        return withToolEnvelope(config, async () => {
+            try {
+                // OPA's status comes back through /v1/config — the same call as
+                // opa_config, but presented with a simpler envelope here so an
+                // agent can ask "what's running" without needing to know the
+                // underlying shape of the response.
+                const status = await opa.request({ method: 'GET', path: '/v1/config' });
+                return ok({ status });
+            }
+            catch (e) {
+                return mapOpaClientError(e);
+            }
+        });
+    });
+    server.registerTool('opa_config', {
+        title: 'OPA configuration',
+        description: 'Return the running OPA server configuration (sanitized — secrets are not included).',
+        inputSchema: {},
+    }, async () => {
+        return withToolEnvelope(config, async () => {
+            try {
+                const data = await opa.request({
+                    method: 'GET',
+                    path: '/v1/config',
+                });
+                return ok({ config: data.result ?? data });
+            }
+            catch (e) {
+                return mapOpaClientError(e);
+            }
+        });
+    });
+}
+//# sourceMappingURL=status.js.map

package/dist/tools/server-management/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/tools/server-management/status.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAc;IACnE,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IAElC,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EACT,kKAAkK;QACpK,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;YACxF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;SAC/E;KACF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;QAC7B,OAAO,gBAAgB,CAAuB,MAAM,EAAE,KAAK,IAAI,EAAE;YAC/D,IAAI,CAAC;gBACH,MAAM,KAAK,GAA4B,EAAE,CAAC;gBAC1C,IAAI,OAAO;oBAAE,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;gBACrC,IAAI,OAAO;oBAAE,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;gBACrC,MAAM,GAAG,CAAC,OAAO,CAAC;oBAChB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,SAAS;oBACf,KAAK;iBACN,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,mBAAmB,EAAE,CAAC;oBACrC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC;gBACD,mDAAmD;gBACnD,OAAO,GAAG,CAAC,iBAAiB,EAAE,yBAAyB,EAAE;oBACvD,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EACT,oJAAoJ;QACtJ,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,OAAO,gBAAgB,CAAsB,MAAM,EAAE,KAAK,IAAI,EAAE;YAC9D,IAAI,CAAC;gBACH,gEAAgE;gBAChE,+DAA+D;gBAC/D,6DAA6D;gBAC7D,oCAAoC;gBACpC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBACxE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EACT,qFAAqF;QACvF,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,OAAO,gBAAgB,CAAsB,MAAM,EAAE,KAAK,IAAI,EAAE;YAC9D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAsB;oBAClD,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,YAAY;iBACnB,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Shared types used across tools, prompts, and resources.
+ */
+/** Standard error codes returned by tools. */
+export type ToolErrorCode = 'INVALID_INPUT' | 'OPA_BINARY_NOT_FOUND' | 'REGAL_NOT_FOUND' | 'REGAL_VERSION_TOO_OLD' | 'INVALID_REGO' | 'INVALID_BUNDLE' | 'EVAL_ERROR' | 'PATH_NOT_ALLOWED' | 'PATH_NOT_FOUND' | 'OPA_UNREACHABLE' | 'OPA_AUTH_FAILED' | 'POLICY_NOT_FOUND' | 'DEPENDENCY_CONFLICT' | 'NO_TESTS_FOUND' | 'HTTP_SEND_BLOCKED' | 'TIMEOUT' | 'UNKNOWN_ERROR';
+/** Structured error payload. */
+export interface ToolError {
+    code: ToolErrorCode;
+    message: string;
+    hint?: string;
+    details?: unknown;
+}
+/**
+ * Standard envelope returned by every tool. The MCP SDK wraps this as
+ * `{ content: [{ type: 'text', text: JSON.stringify(envelope) }] }`.
+ */
+export interface ToolEnvelope<T = unknown> {
+    ok: boolean;
+    data?: T;
+    error?: ToolError;
+    warnings?: string[];
+    truncated?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,8CAA8C;AAC9C,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,sBAAsB,GACtB,iBAAiB,GACjB,uBAAuB,GACvB,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,qBAAqB,GACrB,gBAAgB,GAChB,mBAAmB,GACnB,SAAS,GACT,eAAe,CAAC;AAEpB,gCAAgC;AAChC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/types.js

@@ -0,0 +1,5 @@
+/**
+ * Shared types used across tools, prompts, and resources.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/package.json

@@ -1,8 +1,86 @@
 {
   "name": "@orygn/opa-mcp",
-  "version": "0.0.0",
-  "description": "Reserved. Stable release coming soon — see homepage.",
+  "version": "0.1.0",
+  "description": "Model Context Protocol server for Open Policy Agent (OPA). Author, validate, debug, and explain Rego policies through any MCP-compatible client.",
+  "type": "module",
   "license": "MIT",
-  "author": "Daniel Okwor <daniel@orygn.tech>",
-  "homepage": "https://github.com/OrygnsCode/opa-mcp-server"
+  "author": {
+    "name": "Daniel Okwor",
+    "email": "daniel@orygn.tech",
+    "url": "https://orygn.tech"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/OrygnsCode/opa-mcp-server.git"
+  },
+  "homepage": "https://github.com/OrygnsCode/opa-mcp-server#readme",
+  "bugs": {
+    "url": "https://github.com/OrygnsCode/opa-mcp-server/issues"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "opa",
+    "open-policy-agent",
+    "rego",
+    "policy",
+    "policy-as-code",
+    "authorization",
+    "kubernetes",
+    "claude",
+    "cursor",
+    "ai-agents",
+    "llm"
+  ],
+  "bin": {
+    "opa-mcp": "./dist/server.js"
+  },
+  "main": "./dist/server.js",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsx watch src/server.ts",
+    "start": "node dist/server.js",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --config vitest.coverage.config.ts --coverage",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "prepublishOnly": "npm run lint && npm run typecheck && npm run test && npm run build",
+    "clean": "rimraf dist coverage .vitest-cache"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "@typescript-eslint/eslint-plugin": "^8.0.0",
+    "@typescript-eslint/parser": "^8.0.0",
+    "@vitest/coverage-v8": "^4.1.5",
+    "eslint": "^9.10.0",
+    "eslint-config-prettier": "^9.1.0",
+    "globals": "^17.6.0",
+    "prettier": "^3.3.0",
+    "rimraf": "^6.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0",
+    "vitest": "^4.1.5"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
 }