@orygn/opa-mcp 0.1.4 → 0.1.5

package/dist/tools/helpers/policy-diff.js

@@ -0,0 +1,226 @@
+/**
+ * `rego_policy_diff` -- evaluate the same query against two policies and
+ * compare the results.
+ *
+ * Both evaluations run in parallel. The output surfaces:
+ *   - `resultA` / `resultB`: the extracted expression value from each eval
+ *     (undefined when the query is undefined for that policy)
+ *   - `equal`: true when the results are structurally identical
+ *   - `changedPaths`: dot/bracket paths where values differ, e.g.
+ *     ["allow", "violations[0].code"]
+ *
+ * Typical use case: compare a refactored policy against the original to
+ * verify behavioral equivalence (or intentional divergence) for a
+ * representative input.
+ *
+ * Each side accepts either inline source (sourceA / sourceB) or a file /
+ * directory path (pathA / pathB). File paths must be within allowed roots.
+ */
+import { z } from 'zod';
+import { OpaCli } from '../../lib/opa-cli.js';
+import { err, ok } from '../../lib/errors.js';
+import { mapSubprocessFailure, validatePaths, withToolEnvelope } from '../../lib/tool-helpers.js';
+const RegoPolicyDiffInput = {
+    sourceA: z
+        .string()
+        .optional()
+        .describe('Inline Rego source for policy A. Mutually exclusive with pathA.'),
+    pathA: z
+        .string()
+        .optional()
+        .describe('File or directory path for policy A. Must be inside an allowed root. Mutually exclusive with sourceA.'),
+    sourceB: z
+        .string()
+        .optional()
+        .describe('Inline Rego source for policy B. Mutually exclusive with pathB.'),
+    pathB: z
+        .string()
+        .optional()
+        .describe('File or directory path for policy B. Must be inside an allowed root. Mutually exclusive with sourceB.'),
+    query: z
+        .string()
+        .min(1)
+        .describe('The query to evaluate against both policies, e.g. "data.example.allow".'),
+    input: z
+        .unknown()
+        .optional()
+        .describe('Inline input document (JSON). Mutually exclusive with inputPath.'),
+    inputPath: z
+        .string()
+        .optional()
+        .describe('Path to a JSON input file. Must be inside an allowed root. Mutually exclusive with input.'),
+    dataPaths: z
+        .array(z.string())
+        .optional()
+        .describe('Additional data or policy paths loaded for both evaluations. Each must be inside an allowed root.'),
+};
+/**
+ * Extract the meaningful value from `opa eval --format=json` stdout.
+ *
+ * - Single result, single expression: returns expressions[0].value
+ * - Multiple result rows (iteration binding): returns the full result array
+ * - Empty result (`{}` or `{"result":[]}`) or parse failure: returns undefined
+ */
+export function extractResultValue(stdout) {
+    const text = stdout.trim();
+    if (!text || text === '{}')
+        return undefined;
+    try {
+        const parsed = JSON.parse(text);
+        if (!parsed.result || parsed.result.length === 0)
+            return undefined;
+        if (parsed.result.length === 1) {
+            const exprs = parsed.result[0]?.expressions ?? [];
+            if (exprs.length === 1)
+                return exprs[0]?.value;
+            return exprs.map((e) => e?.value);
+        }
+        // Multiple result rows from iteration -- return the full result array so
+        // the caller can compare the complete set of solutions.
+        return parsed.result;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Return the set of dot/bracket paths where `a` and `b` differ.
+ *
+ * Rules:
+ * - Identical values (JSON.stringify equal): []
+ * - Different types, nulls, or undefined on either side: [path || '.']
+ * - Both arrays with different lengths: [path || '.']
+ * - Both arrays, same length: recurse per index using `[i]` notation
+ * - Both plain objects: recurse per key using dot notation
+ */
+export function diffValues(a, b, path = '') {
+    if (JSON.stringify(a) === JSON.stringify(b))
+        return [];
+    const label = path || '.';
+    if (a === null ||
+        b === null ||
+        a === undefined ||
+        b === undefined ||
+        typeof a !== 'object' ||
+        typeof b !== 'object' ||
+        Array.isArray(a) !== Array.isArray(b)) {
+        return [label];
+    }
+    if (Array.isArray(a) && Array.isArray(b)) {
+        if (a.length !== b.length)
+            return [label];
+        const diffs = [];
+        for (let i = 0; i < a.length; i++) {
+            diffs.push(...diffValues(a[i], b[i], `${path}[${i}]`));
+        }
+        return diffs;
+    }
+    const objA = a;
+    const objB = b;
+    const keys = new Set([...Object.keys(objA), ...Object.keys(objB)]);
+    const diffs = [];
+    for (const key of keys) {
+        const childPath = path ? `${path}.${key}` : key;
+        diffs.push(...diffValues(objA[key], objB[key], childPath));
+    }
+    return diffs;
+}
+export function registerRegoPolicyDiff(server, config) {
+    const opa = new OpaCli(config);
+    server.registerTool('rego_policy_diff', {
+        title: 'Diff two Rego policies',
+        description: 'Evaluate the same query against two policies (or two versions of the same policy) and compare the results. Both evaluations run in parallel. Returns `equal: true/false`, the raw result from each side, and `changedPaths` -- the dot/bracket paths that differ. Useful for verifying that a refactor preserves behavior, or understanding exactly where two policies diverge. Each side takes either inline source (sourceA/sourceB) or a file/directory path (pathA/pathB). The same input and query are used for both evaluations.',
+        inputSchema: RegoPolicyDiffInput,
+    }, async ({ sourceA, pathA, sourceB, pathB, query, input, inputPath, dataPaths }) => {
+        return withToolEnvelope(config, async () => {
+            // ── Input validation ──────────────────────────────────────────────
+            if (sourceA === undefined && pathA === undefined) {
+                return err('INVALID_INPUT', 'One of sourceA or pathA is required.');
+            }
+            if (sourceA !== undefined && pathA !== undefined) {
+                return err('INVALID_INPUT', 'Provide either sourceA or pathA, not both.');
+            }
+            if (sourceB === undefined && pathB === undefined) {
+                return err('INVALID_INPUT', 'One of sourceB or pathB is required.');
+            }
+            if (sourceB !== undefined && pathB !== undefined) {
+                return err('INVALID_INPUT', 'Provide either sourceB or pathB, not both.');
+            }
+            if (input !== undefined && inputPath !== undefined) {
+                return err('INVALID_INPUT', 'Provide either input or inputPath, not both.');
+            }
+            // ── Path validation ───────────────────────────────────────────────
+            let resolvedPathA;
+            if (pathA !== undefined) {
+                const v = validatePaths([pathA], config, { mustExist: true });
+                if (!v.ok)
+                    return v.error;
+                resolvedPathA = v.resolved[0];
+            }
+            let resolvedPathB;
+            if (pathB !== undefined) {
+                const v = validatePaths([pathB], config, { mustExist: true });
+                if (!v.ok)
+                    return v.error;
+                resolvedPathB = v.resolved[0];
+            }
+            let resolvedInputPath;
+            if (inputPath !== undefined) {
+                const v = validatePaths([inputPath], config, { mustExist: true });
+                if (!v.ok)
+                    return v.error;
+                resolvedInputPath = v.resolved[0];
+            }
+            let resolvedDataPaths = [];
+            if (dataPaths && dataPaths.length > 0) {
+                const v = validatePaths(dataPaths, config, { mustExist: true });
+                if (!v.ok)
+                    return v.error;
+                resolvedDataPaths = v.resolved;
+            }
+            // ── Build eval inputs ─────────────────────────────────────────────
+            const commonOpts = {
+                query,
+                ...(input !== undefined ? { input } : {}),
+                ...(resolvedInputPath !== undefined ? { inputPath: resolvedInputPath } : {}),
+            };
+            const evalInputA = sourceA !== undefined
+                ? { ...commonOpts, source: sourceA, paths: resolvedDataPaths }
+                : { ...commonOpts, paths: [...resolvedDataPaths, resolvedPathA] };
+            const evalInputB = sourceB !== undefined
+                ? { ...commonOpts, source: sourceB, paths: resolvedDataPaths }
+                : { ...commonOpts, paths: [...resolvedDataPaths, resolvedPathB] };
+            // ── Run both evals in parallel ─────────────────────────────────────
+            const [resultA, resultB] = await Promise.all([opa.eval(evalInputA), opa.eval(evalInputB)]);
+            // ── Error mapping (check A first, then B) ─────────────────────────
+            const binaryFailure = mapSubprocessFailure(resultA, 'opa');
+            if (binaryFailure)
+                return binaryFailure;
+            if (resultA.exitCode !== 0) {
+                return err('INVALID_REGO', 'Policy A failed to evaluate.', {
+                    details: { policy: 'A', stderr: resultA.stderr.trim(), exitCode: resultA.exitCode },
+                });
+            }
+            const binaryFailureB = mapSubprocessFailure(resultB, 'opa');
+            if (binaryFailureB)
+                return binaryFailureB;
+            if (resultB.exitCode !== 0) {
+                return err('INVALID_REGO', 'Policy B failed to evaluate.', {
+                    details: { policy: 'B', stderr: resultB.stderr.trim(), exitCode: resultB.exitCode },
+                });
+            }
+            // ── Extract and compare ───────────────────────────────────────────
+            const valueA = extractResultValue(resultA.stdout);
+            const valueB = extractResultValue(resultB.stdout);
+            const changedPaths = diffValues(valueA, valueB);
+            return ok({
+                query,
+                equal: changedPaths.length === 0,
+                resultA: valueA,
+                resultB: valueB,
+                changedPaths,
+            });
+        });
+    });
+}
+//# sourceMappingURL=policy-diff.js.map

package/dist/tools/helpers/policy-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-diff.js","sourceRoot":"","sources":["../../../src/tools/helpers/policy-diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElG,MAAM,mBAAmB,GAAG;IAC1B,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,uGAAuG,CACxG;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,uGAAuG,CACxG;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,yEAAyE,CAAC;IACtF,KAAK,EAAE,CAAC;SACL,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;IAC/E,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,2FAA2F,CAC5F;IACH,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,EAAE;SACV,QAAQ,CACP,mGAAmG,CACpG;CACJ,CAAC;AAqBF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAE7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAI7B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEnE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;YAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,yEAAyE;QACzE,wDAAwD;QACxD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,CAAU,EAAE,CAAU,EAAE,IAAI,GAAG,EAAE;IAC1D,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,IAAI,IAAI,GAAG,CAAC;IAE1B,IACE,CAAC,KAAK,IAAI;QACV,CAAC,KAAK,IAAI;QACV,CAAC,KAAK,SAAS;QACf,CAAC,KAAK,SAAS;QACf,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,KAAK,QAAQ;QACrB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EACrC,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,MAAM,IAAI,GAAG,CAA4B,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAiB,EAAE,MAAc;IACtE,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/B,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,wgBAAwgB;QAC1gB,WAAW,EAAE,mBAAmB;KACjC,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;QAC/E,OAAO,gBAAgB,CAAuB,MAAM,EAAE,KAAK,IAAI,EAAE;YAC/D,qEAAqE;YACrE,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjD,OAAO,GAAG,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjD,OAAO,GAAG,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjD,OAAO,GAAG,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjD,OAAO,GAAG,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnD,OAAO,GAAG,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;YAC9E,CAAC;YAED,qEAAqE;YACrE,IAAI,aAAiC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,CAAC,CAAC,KAAK,CAAC;gBAC1B,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;YAED,IAAI,aAAiC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,CAAC,CAAC,KAAK,CAAC;gBAC1B,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;YAED,IAAI,iBAAqC,CAAC;YAC1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClE,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,CAAC,CAAC,KAAK,CAAC;gBAC1B,iBAAiB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,iBAAiB,GAAa,EAAE,CAAC;YACrC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,CAAC,CAAC,KAAK,CAAC;gBAC1B,iBAAiB,GAAG,CAAC,CAAC,QAAQ,CAAC;YACjC,CAAC;YAED,qEAAqE;YACrE,MAAM,UAAU,GAAG;gBACjB,KAAK;gBACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E,CAAC;YAEF,MAAM,UAAU,GACd,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE;gBAC9D,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,iBAAiB,EAAE,aAAc,CAAC,EAAE,CAAC;YAEvE,MAAM,UAAU,GACd,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE;gBAC9D,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,iBAAiB,EAAE,aAAc,CAAC,EAAE,CAAC;YAEvE,sEAAsE;YACtE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAE3F,qEAAqE;YACrE,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3D,IAAI,aAAa;gBAAE,OAAO,aAAa,CAAC;YAExC,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,GAAG,CAAC,cAAc,EAAE,8BAA8B,EAAE;oBACzD,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5D,IAAI,cAAc;gBAAE,OAAO,cAAc,CAAC;YAE1C,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,GAAG,CAAC,cAAc,EAAE,8BAA8B,EAAE;oBACzD,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;YAED,qEAAqE;YACrE,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAEhD,OAAO,EAAE,CAAuB;gBAC9B,KAAK;gBACL,KAAK,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC;gBAChC,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE,MAAM;gBACf,YAAY;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -25,7 +25,11 @@
  *                                   rego_describe_policy,
  *                                   rego_suggest_fix,
  *                                   rego_coverage_gaps,
- *                                   rego_security_audit
+ *                                   rego_security_audit,
+ *                                   rego_infer_input_schema,
+ *                                   rego_fix,
+ *                                   rego_format_write,
+ *                                   rego_policy_diff
  *   Category F -- Meta:             mcp_server_info
  */
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQ3C,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAOrE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQ3C,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAOrE"}

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,MAAc;IAC7D,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAE7E,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,MAAc;IAC7D,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orygn/opa-mcp",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "mcpName": "io.github.OrygnsCode/opa-mcp",
   "description": "Model Context Protocol server for Open Policy Agent (OPA). Author, validate, debug, and explain Rego policies through any MCP-compatible client.",
   "type": "module",