@rockhopper-co/mcp-server 0.2.1 → 0.3.1

package/CHANGELOG.md

@@ -4,6 +4,45 @@ All notable changes to this project are documented here. Follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.0] — 2026-04-24
+
+Adds a **library entry point** so `@rockhopper-co/mcp-server` can be
+consumed programmatically — most notably by the remote MCP gateway
+([`mcp-gateway`](https://github.com/Rockhopper-Co/mcp-gateway)) which
+needs `createServer` and `ApiClient` to wire the Streamable HTTP
+transport. The stdio CLI continues to work exactly as before.
+
+### Added
+- **Library exports.** `import { createServer, ApiClient } from
+  '@rockhopper-co/mcp-server'` now works. The library entry is
+  side-effect free — importing it does NOT read `ROCKHOPPER_TOKEN`,
+  call `process.exit`, or open any transport. Stable surface:
+  - `createServer(apiClient: ApiClient): McpServer`
+  - `ApiClient` (class), `ApiClientConfig` (interface)
+  - All entity types (`Team`, `EnrolledFile`, `FileVersion`, ...)
+- `package.json` `exports` field with explicit subpath conditions for
+  `.` (library) and `./package.json` (so consumers can read the
+  package version). Anything else is intentionally not part of the
+  public API.
+
+### Changed
+- **CLI moved** from `src/index.ts` → `src/cli.ts` so the default
+  entrypoint can be a side-effect-free re-export. The `rockhopper-mcp`
+  bin still works the same; `npx -y @rockhopper-co/mcp-server` still
+  spawns the stdio server. Only difference: `dist/cli.js` is the
+  shebang file now (was `dist/index.js`).
+- `package.json` `bin`, `start`, and `dev` scripts now reference
+  `cli.js` / `cli.ts`.
+- Publish workflow's "Verify bin is executable" step now checks
+  `dist/cli.js`.
+
+### Internal
+- New unit test `lib.exports.test.ts` enforces the side-effect-freedom
+  invariant — fails loud if anyone re-introduces top-level CLI
+  bootstrap into `index.ts` or `lib.ts`.
+- Old `index.bootstrap.test.ts` renamed to `cli.bootstrap.test.ts`
+  with imports adjusted.
+
 ## [0.2.1] — 2026-04-24
 
 Publishing-pipeline hardening release. **No runtime or API changes** — the

package/README.md

@@ -75,6 +75,18 @@ Add to `.cursor/mcp.json` in your project:
 | `ROCKHOPPER_TOKEN` | Yes | — | Personal Access Token (starts with `rh_pat_`) |
 | `ROCKHOPPER_API_URL` | No | `https://api.rockhopper.co` | Rockhopper API base URL |
 
+## Postman
+
+A starter Postman collection + environment files are available in
+`postman/` for gateway smoke testing (`/healthz`, `/mcp initialize`,
+`/mcp tools/list`) across local/dev/staging/production.
+
+Regenerate artifacts with:
+
+```bash
+npm run generate:postman
+```
+
 ## Available Tools
 
 | Tool | Description |

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { ApiClient } from './api-client.js';
+import { createServer } from './server.js';
+const ROCKHOPPER_API_URL = process.env.ROCKHOPPER_API_URL || 'https://api.rockhopper.co';
+const ROCKHOPPER_TOKEN = process.env.ROCKHOPPER_TOKEN;
+if (!ROCKHOPPER_TOKEN) {
+    console.error('Error: ROCKHOPPER_TOKEN environment variable is required.\n' +
+        'Create a Personal Access Token in Rockhopper Settings and set it as ROCKHOPPER_TOKEN.');
+    process.exit(1);
+}
+if (!ROCKHOPPER_TOKEN.startsWith('rh_pat_')) {
+    console.error('Error: ROCKHOPPER_TOKEN does not look like a valid Personal Access Token.\n' +
+        'Tokens start with "rh_pat_". Check that the full token was copied correctly.');
+    process.exit(1);
+}
+const apiClient = new ApiClient({
+    baseUrl: ROCKHOPPER_API_URL,
+    token: ROCKHOPPER_TOKEN,
+});
+try {
+    await apiClient.getMe();
+}
+catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg.includes('401') || msg.includes('403')) {
+        console.error('Error: ROCKHOPPER_TOKEN is invalid or expired.\n' +
+            'Create a new Personal Access Token in Rockhopper Settings and set it as ROCKHOPPER_TOKEN.');
+    }
+    else {
+        console.error(`Error: Could not reach Rockhopper API at ${ROCKHOPPER_API_URL}.\n` +
+            `Details: ${msg}`);
+    }
+    process.exit(1);
+}
+const server = createServer(apiClient);
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,kBAAkB,GACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,2BAA2B,CAAC;AAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAEtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACtB,OAAO,CAAC,KAAK,CACX,6DAA6D;QAC3D,uFAAuF,CAC1F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IAC5C,OAAO,CAAC,KAAK,CACX,6EAA6E;QAC3E,8EAA8E,CACjF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;IAC9B,OAAO,EAAE,kBAAkB;IAC3B,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEH,IAAI,CAAC;IACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CACX,kDAAkD;YAChD,2FAA2F,CAC9F,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CACX,4CAA4C,kBAAkB,KAAK;YACjE,YAAY,GAAG,EAAE,CACpB,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAEvC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,11 @@
-#!/usr/bin/env node
-export {};
+/**
+ * Default entry point. Re-exports the public library API from `./lib`.
+ *
+ * The CLI lives at `./cli.js` (the `rockhopper-mcp` bin). Importing
+ * this module is side-effect free; it does NOT start a stdio server.
+ *
+ * @see ./lib.ts for the canonical export list.
+ * @see ./cli.ts for the stdio CLI entrypoint.
+ */
+export * from './lib.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,UAAU,CAAC"}

package/dist/index.js

@@ -1,19 +1,11 @@
-#!/usr/bin/env node
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { ApiClient } from './api-client.js';
-import { createServer } from './server.js';
-const ROCKHOPPER_API_URL = process.env.ROCKHOPPER_API_URL || 'https://api.rockhopper.co';
-const ROCKHOPPER_TOKEN = process.env.ROCKHOPPER_TOKEN;
-if (!ROCKHOPPER_TOKEN) {
-    console.error('Error: ROCKHOPPER_TOKEN environment variable is required.\n' +
-        'Create a Personal Access Token in Rockhopper Settings and set it as ROCKHOPPER_TOKEN.');
-    process.exit(1);
-}
-const apiClient = new ApiClient({
-    baseUrl: ROCKHOPPER_API_URL,
-    token: ROCKHOPPER_TOKEN,
-});
-const server = createServer(apiClient);
-const transport = new StdioServerTransport();
-await server.connect(transport);
+/**
+ * Default entry point. Re-exports the public library API from `./lib`.
+ *
+ * The CLI lives at `./cli.js` (the `rockhopper-mcp` bin). Importing
+ * this module is side-effect free; it does NOT start a stdio server.
+ *
+ * @see ./lib.ts for the canonical export list.
+ * @see ./cli.ts for the stdio CLI entrypoint.
+ */
+export * from './lib.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,kBAAkB,GACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,2BAA2B,CAAC;AAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAEtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACtB,OAAO,CAAC,KAAK,CACX,6DAA6D;QAC3D,uFAAuF,CAC1F,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;IAC9B,OAAO,EAAE,kBAAkB;IAC3B,KAAK,EAAE,gBAAgB;CACxB,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAEvC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,cAAc,UAAU,CAAC"}

package/dist/lib.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Library entry point for `@rockhopper-co/mcp-server`.
+ *
+ * This file is **side-effect free** — importing the package as a library
+ * (e.g. from the remote MCP gateway) gives you the building blocks
+ * (`createServer`, `ApiClient`, types) without spawning a stdio server
+ * or reading `ROCKHOPPER_TOKEN` from the environment.
+ *
+ * The CLI entry (the `rockhopper-mcp` bin) is `./cli.js` — running it
+ * directly is what spins up the stdio transport. Library consumers
+ * should never import `./cli.js`; they should compose `createServer`
+ * with their own transport (HTTP, in-memory, etc.).
+ *
+ * Stable API surface (semver-bound):
+ *   - `createServer(apiClient): McpServer`
+ *   - `ApiClient` (class) and `ApiClientConfig` (interface)
+ *   - All `types` (Team, EnrolledFile, FileVersion, ...)
+ */
+export { createServer } from './server.js';
+export { type RegisterToolsOptions } from './tools/index.js';
+export { ApiClient, type ApiClientConfig } from './api-client.js';
+export * from './types.js';
+//# sourceMappingURL=lib.d.ts.map

package/dist/lib.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lib.d.ts","sourceRoot":"","sources":["../src/lib.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClE,cAAc,YAAY,CAAC"}

package/dist/lib.js

@@ -0,0 +1,22 @@
+/**
+ * Library entry point for `@rockhopper-co/mcp-server`.
+ *
+ * This file is **side-effect free** — importing the package as a library
+ * (e.g. from the remote MCP gateway) gives you the building blocks
+ * (`createServer`, `ApiClient`, types) without spawning a stdio server
+ * or reading `ROCKHOPPER_TOKEN` from the environment.
+ *
+ * The CLI entry (the `rockhopper-mcp` bin) is `./cli.js` — running it
+ * directly is what spins up the stdio transport. Library consumers
+ * should never import `./cli.js`; they should compose `createServer`
+ * with their own transport (HTTP, in-memory, etc.).
+ *
+ * Stable API surface (semver-bound):
+ *   - `createServer(apiClient): McpServer`
+ *   - `ApiClient` (class) and `ApiClientConfig` (interface)
+ *   - All `types` (Team, EnrolledFile, FileVersion, ...)
+ */
+export { createServer } from './server.js';
+export { ApiClient } from './api-client.js';
+export * from './types.js';
+//# sourceMappingURL=lib.js.map

package/dist/lib.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lib.js","sourceRoot":"","sources":["../src/lib.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAwB,MAAM,iBAAiB,CAAC;AAClE,cAAc,YAAY,CAAC"}

package/dist/server.d.ts

@@ -1,4 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { ApiClient } from './api-client.js';
-export declare function createServer(apiClient: ApiClient): McpServer;
+import { type RegisterToolsOptions } from './tools/index.js';
+export declare function createServer(apiClient: ApiClient, options?: RegisterToolsOptions): McpServer;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAK5C,wBAAgB,YAAY,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAsB5D"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,wBAAgB,YAAY,CAC1B,SAAS,EAAE,SAAS,EACpB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,SAAS,CA6BX"}

package/dist/server.js

@@ -2,20 +2,27 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { registerPrompts } from './prompts/index.js';
 import { registerResources } from './resources/index.js';
 import { registerTools } from './tools/index.js';
-export function createServer(apiClient) {
+export function createServer(apiClient, options) {
+    const readOnly = options?.scope === 'read-only';
     const server = new McpServer({
         name: 'rockhopper',
         version: '0.1.0',
     }, {
-        instructions: 'Rockhopper MCP server for managing Excel file metadata. ' +
-            'Use list_files first to discover available files, then drill into ' +
-            'versions, comments, reviews, or cell history. Write operations ' +
-            '(add_comment, reply_to_comment, resolve_comment, create_review_request, ' +
-            'approve_review, update_file_description) require a read-write scoped token. ' +
-            'File IDs use the platformId field (e.g. from list_files output).',
+        instructions: readOnly
+            ? 'Rockhopper MCP server for reading Excel file metadata. ' +
+                'Use list_files first to discover available files, then drill into ' +
+                'versions, comments, reviews, or cell history. ' +
+                'This token is read-only — write operations are not available. ' +
+                'File IDs use the platformId field (e.g. from list_files output).'
+            : 'Rockhopper MCP server for managing Excel file metadata. ' +
+                'Use list_files first to discover available files, then drill into ' +
+                'versions, comments, reviews, or cell history. Write operations ' +
+                '(add_comment, reply_to_comment, resolve_comment, create_review_request, ' +
+                'approve_review, update_file_description) require a read-write scoped token. ' +
+                'File IDs use the platformId field (e.g. from list_files output).',
     });
     registerResources(server, apiClient);
-    registerTools(server, apiClient);
+    registerTools(server, apiClient, options);
     registerPrompts(server, apiClient);
     return server;
 }

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,UAAU,YAAY,CAAC,SAAoB;IAC/C,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EACV,0DAA0D;YAC1D,oEAAoE;YACpE,iEAAiE;YACjE,0EAA0E;YAC1E,8EAA8E;YAC9E,kEAAkE;KACrE,CACF,CAAC;IAEF,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEnC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,aAAa,EAA6B,MAAM,kBAAkB,CAAC;AAE5E,MAAM,UAAU,YAAY,CAC1B,SAAoB,EACpB,OAA8B;IAE9B,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,KAAK,WAAW,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EAAE,QAAQ;YACpB,CAAC,CAAC,yDAAyD;gBACzD,oEAAoE;gBACpE,gDAAgD;gBAChD,gEAAgE;gBAChE,kEAAkE;YACpE,CAAC,CAAC,0DAA0D;gBAC1D,oEAAoE;gBACpE,iEAAiE;gBACjE,0EAA0E;gBAC1E,8EAA8E;gBAC9E,kEAAkE;KACvE,CACF,CAAC;IAEF,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACrC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1C,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEnC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/index.d.ts

@@ -1,4 +1,7 @@
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import type { ApiClient } from '../api-client.js';
-export declare function registerTools(server: McpServer, api: ApiClient): void;
+export interface RegisterToolsOptions {
+    scope?: 'read-only' | 'read-write';
+}
+export declare function registerTools(server: McpServer, api: ApiClient, options?: RegisterToolsOptions): void;
 //# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAWlD,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,GAAG,IAAI,CAarE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAWlD,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;CACpC;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,EACjB,GAAG,EAAE,SAAS,EACd,OAAO,CAAC,EAAE,oBAAoB,GAC7B,IAAI,CAeN"}

package/dist/tools/index.js

@@ -7,7 +7,7 @@ import { registerSearchTool } from './search.js';
 import { registerWriteCommentTools } from './write-comments.js';
 import { registerWriteReviewTools } from './write-reviews.js';
 import { registerWriteFileTool } from './write-files.js';
-export function registerTools(server, api) {
+export function registerTools(server, api, options) {
     // Read-only tools (available to all scopes)
     registerListFilesTool(server, api);
     registerGetVersionsTool(server, api);
@@ -16,8 +16,10 @@ export function registerTools(server, api) {
     registerGetCellHistoryTool(server, api);
     registerSearchTool(server, api);
     // Write tools (require read-write scope on PAT)
-    registerWriteCommentTools(server, api);
-    registerWriteReviewTools(server, api);
-    registerWriteFileTool(server, api);
+    if (options?.scope !== 'read-only') {
+        registerWriteCommentTools(server, api);
+        registerWriteReviewTools(server, api);
+        registerWriteFileTool(server, api);
+    }
 }
 //# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,GAAc;IAC7D,4CAA4C;IAC5C,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpC,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEhC,gDAAgD;IAChD,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAMzD,MAAM,UAAU,aAAa,CAC3B,MAAiB,EACjB,GAAc,EACd,OAA8B;IAE9B,4CAA4C;IAC5C,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACpC,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEhC,gDAAgD;IAChD,IAAI,OAAO,EAAE,KAAK,KAAK,WAAW,EAAE,CAAC;QACnC,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtC,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,12 +1,19 @@
 {
   "name": "@rockhopper-co/mcp-server",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "description": "Rockhopper MCP server — expose file metadata, versions, reviews, and comments to AI tools",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
   "bin": {
-    "rockhopper-mcp": "dist/index.js"
+    "rockhopper-mcp": "dist/cli.js"
   },
   "files": [
     "dist",
@@ -16,8 +23,8 @@
   ],
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
-    "start": "node dist/index.js",
-    "dev": "tsx watch src/index.ts",
+    "start": "node dist/cli.js",
+    "dev": "tsx watch src/cli.ts",
     "lint": "eslint src/",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
@@ -26,6 +33,8 @@
     "test:e2e:cov": "vitest run --config vitest.e2e.config.ts --coverage",
     "test:cov": "vitest run --coverage",
     "test:watch": "vitest",
+    "generate:postman": "tsx scripts/generate-postman-collection.ts && tsx scripts/generate-postman-environments.ts",
+    "generate:postman:check": "npm run generate:postman && git diff --exit-code -- postman/",
     "prepublishOnly": "npm run build",
     "release:patch": "npm version patch -m 'release: v%s' && git push && git push --tags",
     "release:minor": "npm version minor -m 'release: v%s' && git push && git push --tags",
@@ -43,7 +52,8 @@
     "@vitest/coverage-v8": "^3.2.4",
     "tsx": "^4.19.4",
     "typescript": "^5.8.3",
-    "vitest": "^3.1.2"
+    "vitest": "^3.1.2",
+    "zod-to-json-schema": "^3.24.6"
   },
   "keywords": [
     "mcp",