@orygn/opa-mcp 0.0.0 → 0.1.1

package/dist/lib/regal-cli.js

@@ -0,0 +1,122 @@
+/**
+ * Wrapper around the optional `regal` binary (Rego linter, by Styra).
+ *
+ * Regal is OPTIONAL — only the `rego_lint` tool requires it. Other
+ * tools work without Regal installed. If absent, `rego_lint` returns a
+ * structured `REGAL_NOT_FOUND` error with an install hint.
+ */
+import { randomUUID } from 'node:crypto';
+import { rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { runBinary } from './subprocess.js';
+/**
+ * Rules whose verdict depends on the on-disk path of the file being
+ * linted. When a caller passes inline `source`, the file lives at a
+ * randomized temp path that can never match the source's declared
+ * package, so these rules always fire as false positives. Auto-disabled
+ * for inline source unless the caller explicitly re-enables them.
+ */
+export const INLINE_SOURCE_FALSE_POSITIVE_RULES = ['directory-package-mismatch'];
+/**
+ * Wrapper around the local `regal` binary.
+ *
+ * Like `OpaCli`, methods do not throw on Regal-side errors — the exit
+ * code on the returned `SpawnResult` is the signal. Inline source is
+ * always written to a temp file because `regal lint` does not read
+ * from stdin.
+ */
+export class RegalCli {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Verify the binary is present and report its version. Returns null
+     * if the binary is unreachable or output is malformed.
+     */
+    async version() {
+        const result = await this.run(['version']);
+        if (result.exitCode !== 0)
+            return null;
+        const match = /Version:\s*(\S+)/i.exec(result.stdout) ?? /v?(\d+\.\d+\.\d+\S*)/i.exec(result.stdout);
+        return match?.[1] ?? null;
+    }
+    /**
+     * Lint Rego source. Stdout is JSON when `--format=json` is set
+     * (always, here). Either `source` or one or more `paths` must be
+     * provided.
+     *
+     * Regal's exit codes:
+     * - 0 — no findings at or above `failLevel`
+     * - 3 — findings present
+     * - non-zero other — Regal-internal failure (config error, etc.)
+     *
+     * When called with inline `source`, location-bound rules whose
+     * verdict depends on the on-disk path (currently
+     * `directory-package-mismatch`) are auto-disabled because the
+     * randomized temp-file path makes those rules false positives.
+     * Callers that want them anyway can re-enable via `enable`.
+     */
+    async lint(input) {
+        if (!input.source && !input.paths?.length) {
+            throw new Error('regal lint requires either source or at least one path');
+        }
+        const args = ['lint', '--format=json', '--no-color'];
+        if (input.configFile)
+            args.push('--config-file', input.configFile);
+        if (input.failLevel)
+            args.push('--fail-level', input.failLevel);
+        if (input.disableAll)
+            args.push('--disable-all');
+        if (input.enableAll)
+            args.push('--enable-all');
+        const userEnable = new Set(input.enable ?? []);
+        const userDisable = new Set(input.disable ?? []);
+        const effectiveDisable = new Set(userDisable);
+        if (input.source !== undefined) {
+            for (const rule of INLINE_SOURCE_FALSE_POSITIVE_RULES) {
+                if (!userEnable.has(rule))
+                    effectiveDisable.add(rule);
+            }
+        }
+        for (const rule of effectiveDisable)
+            args.push('--disable', rule);
+        for (const rule of userEnable)
+            args.push('--enable', rule);
+        for (const cat of input.disableCategory ?? [])
+            args.push('--disable-category', cat);
+        for (const cat of input.enableCategory ?? [])
+            args.push('--enable-category', cat);
+        for (const pattern of input.ignoreFiles ?? [])
+            args.push('--ignore-files', pattern);
+        if (input.source !== undefined) {
+            return this.withTempSource(input.source, (path) => this.run([...args, path]));
+        }
+        args.push(...(input.paths ?? []));
+        return this.run(args);
+    }
+    /**
+     * Run `regal` with the given argv. Tools should prefer the typed
+     * methods above; this is the escape hatch.
+     */
+    async run(args) {
+        const opts = {
+            args,
+            timeoutMs: this.config.subprocessTimeoutMs,
+        };
+        return runBinary(this.config.regalBinary, opts);
+    }
+    // ─── Internal: temp file management ──────────────────────────────────
+    async withTempSource(source, fn) {
+        const path = join(tmpdir(), `orygn-opa-mcp-${randomUUID()}.rego`);
+        await writeFile(path, source, 'utf8');
+        try {
+            return await fn(path);
+        }
+        finally {
+            await rm(path, { force: true });
+        }
+    }
+}
+//# sourceMappingURL=regal-cli.js.map

package/dist/lib/regal-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regal-cli.js","sourceRoot":"","sources":["../../src/lib/regal-cli.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,SAAS,EAAoB,MAAM,iBAAiB,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,4BAA4B,CAAU,CAAC;AA+B1F;;;;;;;GAOG;AACH,MAAM,OAAO,QAAQ;IACU;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,KAAK,GACT,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5B,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,IAAI,CAAC,KAAgB;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE/C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,kCAAkC,EAAE,CAAC;gBACtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,gBAAgB;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3D,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;QACpF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAClF,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAEpF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,IAAc;QACtB,MAAM,IAAI,GAAoC;YAC5C,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;SAC3C,CAAC;QACF,OAAO,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,wEAAwE;IAEhE,KAAK,CAAC,cAAc,CAAI,MAAc,EAAE,EAAgC;QAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,UAAU,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF"}

package/dist/lib/security.d.ts

@@ -0,0 +1,16 @@
+import type { ToolEnvelope } from '../types.js';
+export interface PathValidationResult {
+    ok: boolean;
+    resolved?: string;
+    error?: ToolEnvelope<never>;
+}
+/**
+ * Resolve `inputPath` and confirm it is contained within at least one
+ * `allowedRoots` entry. Returns the resolved absolute path on success.
+ */
+export declare function validatePath(inputPath: string, allowedRoots: string[], options?: {
+    mustExist?: boolean;
+}): PathValidationResult;
+/** Convenience: returns true if the path is a directory (after validation). */
+export declare function isDirectory(path: string): boolean;
+//# sourceMappingURL=security.d.ts.map

package/dist/lib/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;CAC7B;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,oBAAoB,CAiDtB;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMjD"}

package/dist/lib/security.js

@@ -0,0 +1,64 @@
+/**
+ * Path validation against the configured allow-list.
+ *
+ * Tools that accept filesystem paths must validate inputs through
+ * `validatePath` to prevent reading or writing outside the
+ * agreed-upon roots.
+ */
+import { existsSync, statSync } from 'node:fs';
+import { isAbsolute, resolve, sep } from 'node:path';
+import { err } from './errors.js';
+/**
+ * Resolve `inputPath` and confirm it is contained within at least one
+ * `allowedRoots` entry. Returns the resolved absolute path on success.
+ */
+export function validatePath(inputPath, allowedRoots, options = {}) {
+    if (typeof inputPath !== 'string' || inputPath.length === 0) {
+        return {
+            ok: false,
+            error: err('INVALID_INPUT', 'Path must be a non-empty string'),
+        };
+    }
+    if (allowedRoots.length === 0) {
+        return {
+            ok: false,
+            error: err('PATH_NOT_ALLOWED', 'File-based tools are disabled because OPA_MCP_ALLOWED_PATHS is empty.', {
+                hint: 'Set OPA_MCP_ALLOWED_PATHS to a comma-separated list of directories the server may read or write.',
+            }),
+        };
+    }
+    const resolved = isAbsolute(inputPath) ? resolve(inputPath) : resolve(process.cwd(), inputPath);
+    const isInsideRoot = allowedRoots.some((root) => {
+        const resolvedRoot = resolve(root);
+        const rootWithSep = resolvedRoot.endsWith(sep) ? resolvedRoot : resolvedRoot + sep;
+        return resolved === resolvedRoot || resolved.startsWith(rootWithSep);
+    });
+    if (!isInsideRoot) {
+        return {
+            ok: false,
+            error: err('PATH_NOT_ALLOWED', `Path is outside allowed roots: ${inputPath}`, {
+                hint: 'Set OPA_MCP_ALLOWED_PATHS to a comma-separated list of directories, or use a path under the current allowed roots.',
+                details: { resolved, allowedRoots },
+            }),
+        };
+    }
+    if (options.mustExist && !existsSync(resolved)) {
+        return {
+            ok: false,
+            error: err('PATH_NOT_FOUND', `Path does not exist: ${inputPath}`, {
+                details: { resolved },
+            }),
+        };
+    }
+    return { ok: true, resolved };
+}
+/** Convenience: returns true if the path is a directory (after validation). */
+export function isDirectory(path) {
+    try {
+        return statSync(path).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/lib/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/lib/security.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AASlC;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,YAAsB,EACtB,UAAmC,EAAE;IAErC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,CAAC,eAAe,EAAE,iCAAiC,CAAC;SAC/D,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,CACR,kBAAkB,EAClB,uEAAuE,EACvE;gBACE,IAAI,EAAE,kGAAkG;aACzG,CACF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IAEhG,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC;QACnF,OAAO,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,CAAC,kBAAkB,EAAE,kCAAkC,SAAS,EAAE,EAAE;gBAC5E,IAAI,EAAE,oHAAoH;gBAC1H,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;aACpC,CAAC;SACH,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,wBAAwB,SAAS,EAAE,EAAE;gBAChE,OAAO,EAAE,EAAE,QAAQ,EAAE;aACtB,CAAC;SACH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/lib/subprocess.d.ts

@@ -0,0 +1,26 @@
+export interface SpawnOptions {
+    /** Argument vector passed directly to the binary. */
+    args: string[];
+    /** Optional stdin payload (e.g., Rego source). */
+    stdin?: string;
+    /** Working directory for the child process. */
+    cwd?: string;
+    /** Hard timeout in milliseconds. */
+    timeoutMs: number;
+    /** Extra environment variables to merge into process.env. */
+    env?: Record<string, string>;
+}
+export interface SpawnResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    timedOut: boolean;
+    /** Time spent in milliseconds. */
+    durationMs: number;
+}
+/**
+ * Run a binary and return its captured output. Never throws — failures
+ * are reflected in `exitCode` / `timedOut`.
+ */
+export declare function runBinary(binary: string, opts: SpawnOptions): Promise<SpawnResult>;
+//# sourceMappingURL=subprocess.d.ts.map

package/dist/lib/subprocess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.d.ts","sourceRoot":"","sources":["../../src/lib/subprocess.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CA8DxF"}

package/dist/lib/subprocess.js

@@ -0,0 +1,72 @@
+/**
+ * Subprocess wrapper used by `opa-cli.ts` and `regal-cli.ts`.
+ *
+ * - Uses argv arrays only (never shell strings) — prevents injection.
+ * - Hard timeout per invocation, defaulting to config.subprocessTimeoutMs.
+ * - Captures stdout / stderr / exit code separately.
+ * - Optional stdin payload for piping source code.
+ */
+import { spawn } from 'node:child_process';
+/**
+ * Run a binary and return its captured output. Never throws — failures
+ * are reflected in `exitCode` / `timedOut`.
+ */
+export async function runBinary(binary, opts) {
+    const start = Date.now();
+    return await new Promise((resolvePromise) => {
+        const child = spawn(binary, opts.args, {
+            cwd: opts.cwd,
+            env: opts.env ? { ...process.env, ...opts.env } : process.env,
+            shell: false,
+            windowsHide: true,
+        });
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        let timedOut = false;
+        let killTimer;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGTERM');
+            // SIGKILL escalation if SIGTERM is ignored.
+            killTimer = setTimeout(() => {
+                if (!child.killed)
+                    child.kill('SIGKILL');
+            }, 2_000);
+        }, opts.timeoutMs);
+        const clearTimers = () => {
+            clearTimeout(timer);
+            if (killTimer)
+                clearTimeout(killTimer);
+        };
+        child.stdout?.on('data', (chunk) => stdoutChunks.push(chunk));
+        child.stderr?.on('data', (chunk) => stderrChunks.push(chunk));
+        child.on('error', (e) => {
+            clearTimers();
+            resolvePromise({
+                exitCode: null,
+                stdout: '',
+                stderr: e.message,
+                timedOut: false,
+                durationMs: Date.now() - start,
+            });
+        });
+        child.on('close', (code) => {
+            clearTimers();
+            resolvePromise({
+                exitCode: code,
+                stdout: Buffer.concat(stdoutChunks).toString('utf8'),
+                stderr: Buffer.concat(stderrChunks).toString('utf8'),
+                timedOut,
+                durationMs: Date.now() - start,
+            });
+        });
+        if (opts.stdin !== undefined) {
+            child.stdin?.write(opts.stdin);
+            child.stdin?.end();
+        }
+        else {
+            child.stdin?.end();
+        }
+    });
+}
+//# sourceMappingURL=subprocess.js.map

package/dist/lib/subprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.js","sourceRoot":"","sources":["../../src/lib/subprocess.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAwB3C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,IAAkB;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,OAAO,MAAM,IAAI,OAAO,CAAc,CAAC,cAAc,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;YACrC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;YAC7D,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,SAAoD,CAAC;QAEzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,4CAA4C;YAC5C,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,CAAC,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC,EAAE,KAAK,CAAC,CAAC;QACZ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,WAAW,GAAG,GAAS,EAAE;YAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,CAAC;YACd,cAAc,CAAC;gBACb,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,CAAC,CAAC,OAAO;gBACjB,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,WAAW,EAAE,CAAC;YACd,cAAc,CAAC;gBACb,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpD,QAAQ;gBACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/tool-helpers.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Helpers shared across tool implementations.
+ *
+ * Each tool follows the same shape — validate input, call into a CLI
+ * wrapper or HTTP client, map errors to a structured envelope, return
+ * the formatted MCP result. The pieces here factor out the parts every
+ * tool repeats so each tool file can stay focused on its own logic.
+ */
+import type { Config } from '../config.js';
+import { type McpToolResult } from './output.js';
+import type { SpawnResult } from './subprocess.js';
+import type { ToolEnvelope } from '../types.js';
+/**
+ * Convert a subprocess outcome into a structured tool error envelope
+ * for the cases that are universal across all CLI-backed tools:
+ * binary missing, subprocess timed out. Returns `undefined` when the
+ * subprocess exited normally (exitCode is a number) so the caller can
+ * inspect the result.
+ */
+export declare function mapSubprocessFailure(result: SpawnResult, binary: 'opa' | 'regal'): ToolEnvelope<never> | undefined;
+/**
+ * Try to parse `text` as JSON. Returns `undefined` on failure so the
+ * caller can fall back to a textual error envelope rather than throwing.
+ */
+export declare function tryParseJson<T = unknown>(text: string): T | undefined;
+/**
+ * Validate a list of input paths against the configured allow-list.
+ * Returns either an array of resolved absolute paths or a structured
+ * error envelope on the first violation.
+ */
+export declare function validatePaths(paths: string[], config: Config, options?: {
+    mustExist?: boolean;
+}): {
+    ok: true;
+    resolved: string[];
+} | {
+    ok: false;
+    error: ToolEnvelope<never>;
+};
+/**
+ * Run a tool body, automatically wrapping any thrown exception in a
+ * `UNKNOWN_ERROR` envelope and serializing the result. Use this in
+ * place of try/catch around every tool handler.
+ */
+export declare function withToolEnvelope<T>(config: Config, body: () => Promise<ToolEnvelope<T>>): Promise<McpToolResult>;
+//# sourceMappingURL=tool-helpers.d.ts.map

package/dist/lib/tool-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/tool-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,aAAa,CAAC;AAE/D;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,KAAK,GAAG,OAAO,GACtB,YAAY,CAAC,KAAK,CAAC,GAAG,SAAS,CAmBjC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAOrE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAA;CAAE,CAU9E;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GACnC,OAAO,CAAC,aAAa,CAAC,CASxB"}

package/dist/lib/tool-helpers.js

@@ -0,0 +1,73 @@
+import { err } from './errors.js';
+import { formatEnvelope } from './output.js';
+import { validatePath } from './security.js';
+/**
+ * Convert a subprocess outcome into a structured tool error envelope
+ * for the cases that are universal across all CLI-backed tools:
+ * binary missing, subprocess timed out. Returns `undefined` when the
+ * subprocess exited normally (exitCode is a number) so the caller can
+ * inspect the result.
+ */
+export function mapSubprocessFailure(result, binary) {
+    if (result.exitCode === null) {
+        const code = binary === 'opa' ? 'OPA_BINARY_NOT_FOUND' : 'REGAL_NOT_FOUND';
+        const hint = binary === 'opa'
+            ? 'Install OPA (https://www.openpolicyagent.org/docs/latest/) or set OPA_BINARY to the absolute path of the binary.'
+            : 'Install Regal (https://docs.styra.com/regal) or set REGAL_BINARY to the absolute path of the binary.';
+        return err(code, `${binary} binary unreachable: ${result.stderr || 'spawn failed'}`, { hint });
+    }
+    if (result.timedOut) {
+        return err('TIMEOUT', `${binary} subprocess exceeded the configured timeout (OPA_MCP_TIMEOUT_MS).`, {
+            details: { durationMs: result.durationMs },
+        });
+    }
+    return undefined;
+}
+/**
+ * Try to parse `text` as JSON. Returns `undefined` on failure so the
+ * caller can fall back to a textual error envelope rather than throwing.
+ */
+export function tryParseJson(text) {
+    if (text.trim().length === 0)
+        return undefined;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Validate a list of input paths against the configured allow-list.
+ * Returns either an array of resolved absolute paths or a structured
+ * error envelope on the first violation.
+ */
+export function validatePaths(paths, config, options = {}) {
+    const resolved = [];
+    for (const path of paths) {
+        const result = validatePath(path, config.allowedPaths, options);
+        if (!result.ok) {
+            return { ok: false, error: result.error };
+        }
+        if (result.resolved !== undefined)
+            resolved.push(result.resolved);
+    }
+    return { ok: true, resolved };
+}
+/**
+ * Run a tool body, automatically wrapping any thrown exception in a
+ * `UNKNOWN_ERROR` envelope and serializing the result. Use this in
+ * place of try/catch around every tool handler.
+ */
+export async function withToolEnvelope(config, body) {
+    try {
+        const envelope = await body();
+        return formatEnvelope(envelope, config.maxResponseBytes);
+    }
+    catch (e) {
+        const message = e instanceof Error ? e.message : 'An unknown error occurred';
+        const details = e instanceof Error ? { stack: e.stack } : { value: e };
+        return formatEnvelope(err('UNKNOWN_ERROR', message, { details }), config.maxResponseBytes);
+    }
+}
+//# sourceMappingURL=tool-helpers.js.map

package/dist/lib/tool-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-helpers.js","sourceRoot":"","sources":["../../src/lib/tool-helpers.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,cAAc,EAAsB,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAI7C;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAmB,EACnB,MAAuB;IAEvB,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAkB,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC1F,MAAM,IAAI,GACR,MAAM,KAAK,KAAK;YACd,CAAC,CAAC,kHAAkH;YACpH,CAAC,CAAC,sGAAsG,CAAC;QAC7G,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,wBAAwB,MAAM,CAAC,MAAM,IAAI,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,GAAG,CACR,SAAS,EACT,GAAG,MAAM,mEAAmE,EAC5E;YACE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;SAC3C,CACF,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAc,IAAY;IACpD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAe,EACf,MAAc,EACd,UAAmC,EAAE;IAErC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAM,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,IAAoC;IAEpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAC7E,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACvE,OAAO,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC"}

package/dist/prompts/index.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Config } from '../config.js';
+export declare function registerPrompts(server: McpServer, _config: Config): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/prompts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAgG3C,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAoExE"}

package/dist/prompts/index.js

@@ -0,0 +1,147 @@
+/**
+ * MCP Prompts — slash-command-like workflow templates.
+ *
+ * Each prompt is a stateless instruction set the agent receives when
+ * the user invokes it. They orient the agent toward a specific
+ * workflow (write a policy, review one, debug a decision) and tell it
+ * which of our tools to call in what order.
+ */
+import { z } from 'zod';
+const policyAuthoringAssistantPrompt = (args) => {
+    const description = args.description ?? '<not provided>';
+    const packageName = args.package_name ?? '<choose a package, e.g. authz>';
+    return `You are a Rego policy authoring assistant.
+
+Goal: produce a working policy for the user's described scenario.
+
+User's description:
+${description}
+
+Suggested package: ${packageName}
+
+Workflow:
+1. Clarify the inputs and decision the policy needs to produce.
+   - What does \`input\` look like? (Ask the user if unclear.)
+   - What is the boolean or set-valued decision? (allow / deny / reasons)
+2. Draft the policy using \`rego.v1\` syntax. Keep it minimal.
+3. Call \`rego_format\` to canonicalise it.
+4. Call \`rego_check\` on the formatted source. If it returns errors,
+   call \`rego_suggest_fix\` with the diagnostics and incorporate the
+   suggestions.
+5. Call \`rego_lint\` and address \`error\` and \`warning\` level findings.
+6. Call \`rego_generate_test_skeleton\` and turn the stubs into real
+   tests with realistic inputs.
+7. Run \`rego_test\` and iterate until tests pass.
+8. Return the final policy + tests to the user.`;
+};
+const policyReviewChecklistPrompt = (args) => {
+    return `You are reviewing the following Rego policy:
+
+\`\`\`rego
+${args.source ?? '<paste the policy via the next user message>'}
+\`\`\`
+
+Apply this checklist, calling tools as needed:
+
+1. **Compiles cleanly.** Run \`rego_check\` with \`strict: true\`.
+2. **Lints cleanly.** Run \`rego_lint\`. Address every \`error\` and
+   \`warning\` finding. Note \`notice\` items but don't insist.
+3. **Has tests.** If no \`*_test.rego\` was provided, call
+   \`rego_generate_test_skeleton\` and propose tests.
+4. **Default-deny.** Confirm the principal decision (e.g. \`allow\`) has
+   a \`default := false\` (or equivalent). If not, flag it.
+5. **No HTTP_SEND.** Search the source for \`http.send\`. If present,
+   confirm it's truly necessary; it's a major performance and security
+   concern in a policy hot path.
+6. **Annotations.** Check that exported rules have docstrings. If
+   missing, suggest minimal \`# METADATA\` annotations.
+7. **Shape of input.** Use \`rego_describe_policy\` to enumerate input
+   refs the policy reads; confirm the documented input contract
+   matches.
+
+Return a concise review with: pass/fail per item, recommended diffs.`;
+};
+const decisionDebuggingWorkflowPrompt = (args) => {
+    return `You are debugging an unexpected Rego decision.
+
+Query: ${args.query ?? '<not provided — ask the user>'}
+User's expectation: ${args.expectation ?? '<ask the user what they expected>'}
+
+Workflow:
+1. Gather inputs.
+   - The exact input document the agent saw at decision time.
+   - The policy and any data files involved.
+   - The actual returned decision (vs. the expected one).
+2. Reproduce the decision with \`rego_eval\` (no flags). Confirm it
+   matches the reported outcome.
+3. Re-run with \`rego_explain_decision\` to get a structured trace.
+   Identify which rules were evaluated and which fired.
+4. The cause is one of:
+   a. **Input mismatch** — the policy expected a different input shape.
+      Use \`rego_describe_policy\` to list the refs the policy reads
+      and confirm each is present in the input.
+   b. **Rule logic** — a guard fired or didn't fire when it should
+      have. Read the trace and explain which rule's body evaluated to
+      true/false and why.
+   c. **Default decision** — no rule produced a value, so the default
+      kicked in.
+5. Propose the smallest fix: either an input correction or a policy
+   change. If a policy change, run \`rego_check\` and \`rego_test\` on the
+   patched policy before declaring it fixed.
+
+Be specific in the explanation: cite rule names, line numbers, and the
+exact input value that flipped each guard.`;
+};
+export function registerPrompts(server, _config) {
+    server.registerPrompt('policy_authoring_assistant', {
+        title: 'Policy authoring assistant',
+        description: 'Guides an agent through writing a new Rego policy: clarify decision shape, draft, format, check, lint, test, iterate.',
+        argsSchema: {
+            description: z.string().optional().describe('What the policy needs to enforce.'),
+            package_name: z.string().optional().describe('Suggested package path (e.g. "authz").'),
+        },
+    }, (args) => ({
+        messages: [
+            {
+                role: 'user',
+                content: { type: 'text', text: policyAuthoringAssistantPrompt(args) },
+            },
+        ],
+    }));
+    server.registerPrompt('policy_review_checklist', {
+        title: 'Policy review checklist',
+        description: 'Review checklist for an existing Rego policy: compile, lint, tests, default-deny, http.send, annotations, input shape.',
+        argsSchema: {
+            source: z
+                .string()
+                .optional()
+                .describe('Rego source to review. Optional — agent can ask for it.'),
+        },
+    }, (args) => ({
+        messages: [
+            {
+                role: 'user',
+                content: { type: 'text', text: policyReviewChecklistPrompt(args) },
+            },
+        ],
+    }));
+    server.registerPrompt('decision_debugging_workflow', {
+        title: 'Decision debugging workflow',
+        description: 'Diagnostic flow for an unexpected Rego decision: reproduce, explain trace, identify input vs logic vs default cause, propose minimal fix.',
+        argsSchema: {
+            query: z
+                .string()
+                .optional()
+                .describe('The Rego query that produced the unexpected result.'),
+            expectation: z.string().optional().describe('What the user expected to happen.'),
+        },
+    }, (args) => ({
+        messages: [
+            {
+                role: 'user',
+                content: { type: 'text', text: decisionDebuggingWorkflowPrompt(args) },
+            },
+        ],
+    }));
+}
+//# sourceMappingURL=index.js.map

package/dist/prompts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/prompts/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,MAAM,8BAA8B,GAAG,CAAC,IAGvC,EAAU,EAAE;IACX,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,IAAI,gCAAgC,CAAC;IAC1E,OAAO;;;;;EAKP,WAAW;;qBAEQ,WAAW;;;;;;;;;;;;;;;gDAegB,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAAC,IAAyB,EAAU,EAAE;IACxE,OAAO;;;EAGP,IAAI,CAAC,MAAM,IAAI,8CAA8C;;;;;;;;;;;;;;;;;;;;;qEAqBM,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,+BAA+B,GAAG,CAAC,IAGxC,EAAU,EAAE;IACX,OAAO;;SAEA,IAAI,CAAC,KAAK,IAAI,+BAA+B;sBAChC,IAAI,CAAC,WAAW,IAAI,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;2CAyBlC,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAiB,EAAE,OAAe;IAChE,MAAM,CAAC,cAAc,CACnB,4BAA4B,EAC5B;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,uHAAuH;QACzH,UAAU,EAAE;YACV,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAChF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;SACvF;KACF,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACT,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,CAAC,IAAI,CAAC,EAAE;aACtE;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,yBAAyB,EACzB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,wHAAwH;QAC1H,UAAU,EAAE;YACV,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yDAAyD,CAAC;SACvE;KACF,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACT,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,CAAC,IAAI,CAAC,EAAE;aACnE;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,6BAA6B,EAC7B;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,2IAA2I;QAC7I,UAAU,EAAE;YACV,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,qDAAqD,CAAC;YAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;SACjF;KACF,EACD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACT,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,CAAC,IAAI,CAAC,EAAE;aACvE;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/resources/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * MCP Resources — read-only references the agent can fetch by URI.
+ *
+ * - opa://builtins      — derived at read-time from `opa capabilities`.
+ * - opa://style-guide   — curated Rego style guide content.
+ * - opa://patterns      — pattern library: RBAC, ABAC, K8s admission,
+ *                         IaC gates, API authz, rate limiting.
+ */
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Config } from '../config.js';
+export declare function registerResources(server: McpServer, config: Config): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/resources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAuF3C,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAmEzE"}