keycloak-model-context-protocol 0.0.2 → 1.0.1

package/dist/tools/users.js

@@ -0,0 +1,272 @@
+import { z } from "zod";
+import { ToolError } from "../keycloak/errors.js";
+import { defineTool, pageOf, paginationShape, realmField, toPage } from "./shared.js";
+const userSummary = z.object({
+    id: z.string().describe("User ID (UUID); use it as `userId` in other tools."),
+    username: z.string().describe("Login name."),
+    email: z.string().optional().describe("E-mail address, if set."),
+    firstName: z.string().optional().describe("First name, if set."),
+    lastName: z.string().optional().describe("Last name, if set."),
+    enabled: z.boolean().optional().describe("Whether the user can log in."),
+    emailVerified: z.boolean().optional().describe("Whether the e-mail address is verified."),
+});
+/** Projects a Keycloak user onto the safe subset we expose (no attributes, no credentials). */
+export function toUserSummary(user) {
+    return {
+        id: user.id ?? "",
+        username: user.username ?? "",
+        ...(user.email !== undefined && { email: user.email }),
+        ...(user.firstName !== undefined && { firstName: user.firstName }),
+        ...(user.lastName !== undefined && { lastName: user.lastName }),
+        ...(user.enabled !== undefined && { enabled: user.enabled }),
+        ...(user.emailVerified !== undefined && { emailVerified: user.emailVerified }),
+    };
+}
+// Pattern for list tools: paginationShape in, pageOf() out, query max + 1 and use toPage().
+const userSearch = defineTool({
+    name: "user_search",
+    title: "Search users",
+    description: "Search users in a realm by free text and/or exact fields, with pagination. Without filters it lists all users. Use `search` for a general match on username, name and e-mail (prefix/infix); set `exact` to match username/email exactly.",
+    kind: "read",
+    input: z.object({
+        realm: realmField,
+        search: z.string().optional().describe("Free-text search across username, name and e-mail."),
+        username: z.string().optional().describe("Filter by username."),
+        email: z.string().optional().describe("Filter by e-mail address."),
+        exact: z
+            .boolean()
+            .optional()
+            .describe("If true, `username`/`email`/`search` must match exactly instead of by prefix."),
+        ...paginationShape,
+    }),
+    output: pageOf(userSummary).extend({ realm: z.string().describe("Realm that was searched.") }),
+    async handler({ realm, search, username, email, exact, first, max }, { gateway }) {
+        const rows = await gateway.run((kc) => kc.users.find({
+            realm,
+            first,
+            max: max + 1,
+            briefRepresentation: true,
+            ...(search !== undefined && { search }),
+            ...(username !== undefined && { username }),
+            ...(email !== undefined && { email }),
+            ...(exact !== undefined && { exact }),
+        }));
+        const page = toPage(rows.map(toUserSummary), first, max);
+        return {
+            data: { ...page, realm },
+            summary: `Found ${page.items.length} user(s) in realm '${realm}' (first=${first}, max=${max}${page.hasMore ? ", more available" : ""}).`,
+        };
+    },
+});
+const userCreate = defineTool({
+    name: "user_create",
+    title: "Create user",
+    description: "Create a new user in a realm. The user is enabled by default and has no credentials; use a separate flow to set a password or send required actions.",
+    kind: "write",
+    idempotent: false,
+    input: z.object({
+        realm: realmField,
+        username: z.string().min(1).describe("Unique login name."),
+        email: z.email().optional().describe("E-mail address."),
+        firstName: z.string().optional().describe("First name."),
+        lastName: z.string().optional().describe("Last name."),
+        enabled: z.boolean().default(true).describe("Whether the user can log in (default true)."),
+        emailVerified: z.boolean().optional().describe("Mark the e-mail address as verified."),
+    }),
+    output: z.object({
+        id: z.string().describe("ID of the created user."),
+        username: z.string().describe("Username of the created user."),
+        realm: z.string().describe("Realm the user was created in."),
+    }),
+    async handler({ realm, username, email, firstName, lastName, enabled, emailVerified }, { gateway }) {
+        const created = await gateway.run((kc) => kc.users.create({
+            realm,
+            username,
+            enabled,
+            ...(email !== undefined && { email }),
+            ...(firstName !== undefined && { firstName }),
+            ...(lastName !== undefined && { lastName }),
+            ...(emailVerified !== undefined && { emailVerified }),
+        }));
+        return {
+            data: { id: created.id, username, realm },
+            summary: `Created user '${username}' (id ${created.id}) in realm '${realm}'.`,
+        };
+    },
+});
+const userDelete = defineTool({
+    name: "user_delete",
+    title: "Delete user",
+    description: "Permanently delete a user from a realm. This cannot be undone. Requires confirm: true (ask the user first).",
+    kind: "destructive",
+    input: z.object({
+        realm: realmField,
+        userId: z.string().min(1).describe("ID (UUID) of the user to delete, e.g. from user_search."),
+    }),
+    output: z.object({
+        deleted: z.boolean().describe("True if the user was deleted."),
+        userId: z.string().describe("ID of the deleted user."),
+        realm: z.string().describe("Realm the user was deleted from."),
+    }),
+    async preview({ realm, userId }, { gateway }) {
+        const user = await gateway.run((kc) => kc.users.findOne({ realm, id: userId }));
+        if (!user)
+            throw new ToolError("not_found", `User ${userId} does not exist in realm '${realm}'.`);
+        return `permanently delete user '${user.username ?? userId}' (id ${userId}) from realm '${realm}'.`;
+    },
+    async handler({ realm, userId }, { gateway }) {
+        await gateway.run((kc) => kc.users.del({ realm, id: userId }));
+        return {
+            data: { deleted: true, userId, realm },
+            summary: `Deleted user ${userId} from realm '${realm}'.`,
+        };
+    },
+});
+export function toUserDetails(user) {
+    return {
+        ...toUserSummary(user),
+        ...(user.createdTimestamp !== undefined && { createdTimestamp: user.createdTimestamp }),
+        ...(user.requiredActions !== undefined && { requiredActions: user.requiredActions }),
+        ...(user.totp !== undefined && { totp: user.totp }),
+        ...(user.federationLink !== undefined && { federationLink: user.federationLink }),
+    };
+}
+const userGet = defineTool({
+    name: "user_get",
+    title: "Get user",
+    description: "Get one user by ID with a safe subset of fields (no attributes, no credentials). Use user_search to find the ID.",
+    kind: "read",
+    input: z.object({
+        realm: realmField,
+        userId: z.string().min(1).describe("ID (UUID) of the user, e.g. from user_search."),
+    }),
+    output: userSummary.extend({
+        createdTimestamp: z.number().optional().describe("Creation time in epoch milliseconds."),
+        requiredActions: z.array(z.string()).optional().describe("Pending required actions."),
+        totp: z.boolean().optional().describe("Whether the user has OTP configured."),
+        federationLink: z.string().optional().describe("ID of the federation provider, if any."),
+    }),
+    async handler({ realm, userId }, { gateway }) {
+        const user = await gateway.run((kc) => kc.users.findOne({ realm, id: userId }));
+        if (!user)
+            throw new ToolError("not_found", `User ${userId} does not exist in realm '${realm}'.`);
+        return {
+            data: toUserDetails(user),
+            summary: `Returned user ${userId} from realm '${realm}'.`,
+        };
+    },
+});
+const userUpdate = defineTool({
+    name: "user_update",
+    title: "Update user",
+    description: "Update selected fields of a user (partial update; omitted fields stay unchanged). At least one field besides realm and userId is required. Setting `requiredActions` replaces the existing list.",
+    kind: "write",
+    idempotent: true,
+    input: z
+        .object({
+        realm: realmField,
+        userId: z.string().min(1).describe("ID (UUID) of the user to update."),
+        email: z.email().optional().describe("New e-mail address."),
+        firstName: z.string().optional().describe("New first name."),
+        lastName: z.string().optional().describe("New last name."),
+        enabled: z.boolean().optional().describe("Enable or disable the user."),
+        emailVerified: z.boolean().optional().describe("Mark the e-mail as verified or not."),
+        requiredActions: z
+            .array(z.string().min(1))
+            .optional()
+            .describe("Required actions to set, e.g. UPDATE_PASSWORD (replaces the existing list)."),
+    })
+        .refine((v) => v.email !== undefined ||
+        v.firstName !== undefined ||
+        v.lastName !== undefined ||
+        v.enabled !== undefined ||
+        v.emailVerified !== undefined ||
+        v.requiredActions !== undefined, { message: "Provide at least one field to update." }),
+    output: z.object({
+        userId: z.string().describe("ID of the updated user."),
+        realm: z.string().describe("Realm of the user."),
+        updatedFields: z.array(z.string()).describe("Names of the fields that were set."),
+    }),
+    async handler({ realm, userId, ...changes }, { gateway }) {
+        const fields = Object.entries(changes).filter(([, v]) => v !== undefined);
+        if (fields.length === 0)
+            throw new ToolError("bad_request", "Provide at least one field to update.");
+        await gateway.run(async (kc) => {
+            // Keycloak's PUT replaces the representation, so merge into the current one.
+            const current = await kc.users.findOne({ realm, id: userId });
+            if (!current)
+                throw new ToolError("not_found", `User ${userId} does not exist in realm '${realm}'.`);
+            await kc.users.update({ realm, id: userId }, { ...current, ...Object.fromEntries(fields) });
+        });
+        return {
+            data: { userId, realm, updatedFields: fields.map(([k]) => k) },
+            summary: `Updated ${fields.length} field(s) of user ${userId} in realm '${realm}'.`,
+        };
+    },
+});
+const userSendActionsEmail = defineTool({
+    name: "user_send_actions_email",
+    title: "Send required-actions e-mail",
+    description: "Send the user an e-mail with a link to perform required actions (e.g. update password, verify e-mail). Each call sends another e-mail. Requires SMTP to be configured in the realm and the user to have an e-mail address.",
+    kind: "write",
+    idempotent: false,
+    input: z.object({
+        realm: realmField,
+        userId: z.string().min(1).describe("ID (UUID) of the user to e-mail."),
+        actions: z
+            .array(z.enum([
+            "UPDATE_PASSWORD",
+            "VERIFY_EMAIL",
+            "CONFIGURE_TOTP",
+            "UPDATE_PROFILE",
+            "TERMS_AND_CONDITIONS",
+        ]))
+            .min(1)
+            .describe("Actions the user must perform via the e-mailed link."),
+        lifespan: z
+            .number()
+            .int()
+            .min(1)
+            .optional()
+            .describe("Link validity in seconds (Keycloak default if omitted)."),
+        clientId: z
+            .string()
+            .min(1)
+            .optional()
+            .describe("Client ID used for the redirect after the actions."),
+        redirectUri: z
+            .string()
+            .min(1)
+            .optional()
+            .describe("Redirect URI after the actions; requires clientId."),
+    }),
+    output: z.object({
+        sent: z.boolean().describe("True if Keycloak accepted the e-mail request."),
+        userId: z.string().describe("ID of the user."),
+        realm: z.string().describe("Realm of the user."),
+        actions: z.array(z.string()).describe("Actions requested in the e-mail."),
+    }),
+    async handler({ realm, userId, actions, lifespan, clientId, redirectUri }, { gateway }) {
+        await gateway.run((kc) => kc.users.executeActionsEmail({
+            realm,
+            id: userId,
+            actions,
+            ...(lifespan !== undefined && { lifespan }),
+            ...(clientId !== undefined && { clientId }),
+            ...(redirectUri !== undefined && { redirectUri }),
+        }));
+        return {
+            data: { sent: true, userId, realm, actions },
+            summary: `Requested actions e-mail (${actions.join(", ")}) for user ${userId} in realm '${realm}'.`,
+        };
+    },
+});
+export const userTools = [
+    userSearch,
+    userGet,
+    userCreate,
+    userUpdate,
+    userDelete,
+    userSendActionsEmail,
+];
+//# sourceMappingURL=users.js.map

package/dist/tools/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/tools/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAEtF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAChE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC9D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACxE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAC1F,CAAC,CAAC;AAYH,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;QAC7B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,GAAG,UAAU,CAAC;IAC5B,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,2OAA2O;IAC7O,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QAC5F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC/D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAClE,KAAK,EAAE,CAAC;aACL,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,GAAG,eAAe;KACnB,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;IAC9F,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE;QAC9E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACpC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YACZ,KAAK;YACL,KAAK;YACL,GAAG,EAAE,GAAG,GAAG,CAAC;YACZ,mBAAmB,EAAE,IAAI;YACzB,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;YACrC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;SACtC,CAAC,CACH,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO;YACL,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE;YACxB,OAAO,EAAE,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,sBAAsB,KAAK,YAAY,KAAK,SAAS,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,IAAI;SACzI,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,UAAU,CAAC;IAC5B,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,sJAAsJ;IACxJ,IAAI,EAAE,OAAO;IACb,UAAU,EAAE,KAAK;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC1D,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;QACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;QACtD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;QAC1F,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;KACvF,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC9D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;KAC7D,CAAC;IACF,KAAK,CAAC,OAAO,CACX,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,EACvE,EAAE,OAAO,EAAE;QAEX,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACvC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;YACd,KAAK;YACL,QAAQ;YACR,OAAO;YACP,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC;SACtD,CAAC,CACH,CAAC;QACF,OAAO;YACL,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;YACzC,OAAO,EAAE,iBAAiB,QAAQ,SAAS,OAAO,CAAC,EAAE,eAAe,KAAK,IAAI;SAC9E,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,UAAU,CAAC;IAC5B,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,6GAA6G;IAC/G,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yDAAyD,CAAC;KAC9F,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;KAC/D,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,QAAQ,MAAM,6BAA6B,KAAK,IAAI,CAAC,CAAC;QACzF,OAAO,4BAA4B,IAAI,CAAC,QAAQ,IAAI,MAAM,SAAS,MAAM,iBAAiB,KAAK,IAAI,CAAC;IACtG,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE;QAC1C,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/D,OAAO;YACL,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;YACtC,OAAO,EAAE,gBAAgB,MAAM,gBAAgB,KAAK,IAAI;SACzD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAUH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,OAAO;QACL,GAAG,aAAa,CAAC,IAAI,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvF,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;KAClF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,UAAU,CAAC;IACzB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,UAAU;IACjB,WAAW,EACT,kHAAkH;IACpH,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC;KACpF,CAAC;IACF,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;QACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxF,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QACrF,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QAC7E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;KACzF,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,QAAQ,MAAM,6BAA6B,KAAK,IAAI,CAAC,CAAC;QACzF,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC;YACzB,OAAO,EAAE,iBAAiB,MAAM,gBAAgB,KAAK,IAAI;SAC1D,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,UAAU,CAAC;IAC5B,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,kMAAkM;IACpM,IAAI,EAAE,OAAO;IACb,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACtE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC1D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QACvE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QACrF,eAAe,EAAE,CAAC;aACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACxB,QAAQ,EAAE;aACV,QAAQ,CAAC,6EAA6E,CAAC;KAC3F,CAAC;SACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,KAAK,SAAS;QACrB,CAAC,CAAC,SAAS,KAAK,SAAS;QACzB,CAAC,CAAC,QAAQ,KAAK,SAAS;QACxB,CAAC,CAAC,OAAO,KAAK,SAAS;QACvB,CAAC,CAAC,aAAa,KAAK,SAAS;QAC7B,CAAC,CAAC,eAAe,KAAK,SAAS,EACjC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CACrD;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAChD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KAClF,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;QAC9E,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC7B,6EAA6E;YAC7E,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO;gBACV,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,QAAQ,MAAM,6BAA6B,KAAK,IAAI,CAAC,CAAC;YACzF,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;QACH,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;YAC9D,OAAO,EAAE,WAAW,MAAM,CAAC,MAAM,qBAAqB,MAAM,cAAc,KAAK,IAAI;SACpF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,UAAU,CAAC;IACtC,IAAI,EAAE,yBAAyB;IAC/B,KAAK,EAAE,8BAA8B;IACrC,WAAW,EACT,4NAA4N;IAC9N,IAAI,EAAE,OAAO;IACb,UAAU,EAAE,KAAK;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACtE,OAAO,EAAE,CAAC;aACP,KAAK,CACJ,CAAC,CAAC,IAAI,CAAC;YACL,iBAAiB;YACjB,cAAc;YACd,gBAAgB;YAChB,gBAAgB;YAChB,sBAAsB;SACvB,CAAC,CACH;aACA,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,CAAC,sDAAsD,CAAC;QACnE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,yDAAyD,CAAC;QACtE,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,oDAAoD,CAAC;QACjE,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,QAAQ,EAAE;aACV,QAAQ,CAAC,oDAAoD,CAAC;KAClE,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAC3E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAChD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;KAC1E,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE;QACpF,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACvB,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;YAC3B,KAAK;YACL,EAAE,EAAE,MAAM;YACV,OAAO;YACP,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;SAClD,CAAC,CACH,CAAC;QACF,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;YAC5C,OAAO,EAAE,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,MAAM,cAAc,KAAK,IAAI;SACpG,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,UAAU;IACV,OAAO;IACP,UAAU;IACV,UAAU;IACV,UAAU;IACV,oBAAoB;CACrB,CAAC"}

package/dist/version.js

@@ -0,0 +1,5 @@
+import { readFileSync } from "node:fs";
+// Resolves to the package root from both src/ (tests) and dist/ (published build).
+const packageJsonUrl = new URL("../package.json", import.meta.url);
+export const VERSION = JSON.parse(readFileSync(packageJsonUrl, "utf8")).version;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,mFAAmF;AACnF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,OAAO,GAClB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAChD,CAAC,OAAO,CAAC"}

package/package.json

@@ -1,29 +1,64 @@
 {
   "name": "keycloak-model-context-protocol",
-  "version": "0.0.2",
+  "version": "1.0.1",
   "description": "MCP server for Keycloak administration",
+  "mcpName": "io.github.ChristophEnglisch/keycloak-model-context-protocol",
   "license": "MIT",
   "author": "Christoph Englisch",
   "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ChristophEnglisch/keycloak-model-context-protocol.git"
+  },
+  "homepage": "https://github.com/ChristophEnglisch/keycloak-model-context-protocol#readme",
+  "bugs": {
+    "url": "https://github.com/ChristophEnglisch/keycloak-model-context-protocol/issues"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "keycloak",
+    "iam",
+    "identity",
+    "admin",
+    "ai"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
   "bin": {
-    "keycloak-model-context-protocol": "./dist/index.js"
+    "keycloak-model-context-protocol": "dist/index.js"
   },
   "files": [
     "dist"
   ],
   "scripts": {
-    "build": "tsc && shx chmod +x dist/*.js",
-    "prepare": "npm run build",
-    "watch": "tsc --watch"
+    "build": "tsc -p tsconfig.build.json && node -e \"require('node:fs').chmodSync('dist/index.js', 0o755)\"",
+    "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "biome check .",
+    "format": "biome check --write .",
+    "test": "vitest run tests/unit",
+    "test:watch": "vitest tests/unit",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "prepublishOnly": "npm run clean && npm run build && npm test",
+    "test:smoke": "npm run build && node tests/smoke/pack-smoke.mjs",
+    "test:all": "npm test && npm run test:integration && npm run test:smoke",
+    "docs:tools": "npm run build && node scripts/generate-tools-reference.mjs",
+    "docs:check": "npm run build && node scripts/generate-tools-reference.mjs --check"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "0.5.0",
-    "@keycloak/keycloak-admin-client": "^22.0.5",
-    "zod": "^3.22.4"
+    "@keycloak/keycloak-admin-client": "^26.8.1",
+    "@modelcontextprotocol/server": "^2.4.0",
+    "zod": "^4.6.7"
   },
   "devDependencies": {
-    "@types/node": "^22",
-    "shx": "^0.3.4",
-    "typescript": "^5.3.3"
+    "@biomejs/biome": "^2.6.2",
+    "@modelcontextprotocol/client": "^2.4.0",
+    "@types/node": "^22.20.5",
+    "@vitest/coverage-v8": "^5.0.5",
+    "testcontainers": "^12.2.1",
+    "typescript": "^7.0.2",
+    "vitest": "^5.0.5"
   }
-}
+}