oops-errors-mcp 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,176 @@
-# Temporary Holding Version
+# oops-errors-mcp
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[Model Context Protocol](https://modelcontextprotocol.io) server for
+[oops](https://oops.3m4.net), the open-source error-tracking service. Lets an
+AI agent (Claude Code, Claude Desktop, Cursor, the MCP Inspector, your own
+app) list and triage issues, read stack traces and breadcrumbs, resolve or
+ignore errors, check stats and manage projects — and report its *own*
+failures into a project — with **role-based tool access**, a **human approval
+step** for destructive actions, and an **audit trail**.
+
+```
+npx oops-errors-mcp              # stdio (local hosts)
+https://oops.3m4.net/mcp         # Streamable HTTP (remote hosts)
+```
+
+## Quick start
+
+1. Create an API key in the dashboard (`/dashboard/settings`) and pick a role.
+2. Register the server with your host.
+
+**Claude Code**
+
+```bash
+claude mcp add oops --scope user \
+  --env OOPS_API_KEY=oops_live_… \
+  -- npx -y oops-errors-mcp
+```
+
+**Claude Desktop / Cursor / any JSON config**
+
+```json
+{
+  "mcpServers": {
+    "oops": {
+      "command": "npx",
+      "args": ["-y", "oops-errors-mcp"],
+      "env": { "OOPS_API_KEY": "oops_live_…" }
+    }
+  }
+}
+```
+
+**Remote (Streamable HTTP)** — no install, the key travels as a Bearer token:
+
+```bash
+claude mcp add --transport http oops https://oops.3m4.net/mcp \
+  --header "Authorization: Bearer oops_live_…"
+```
+
+Then ask: *"what is breaking in checkout today?"*, *"show me issue #12 and
+its stack"*, *"which errors affect the most users since release 1.4.2?"*,
+*"resolve every issue from the old release"*, *"triage the API project"*,
+*"report this failure to the agents project"*.
+
+## Configuration
+
+| Variable         | Default                       | Meaning |
+|------------------|-------------------------------|---------|
+| `OOPS_API_KEY`   | —                             | Required for stdio. The oops management API key (`oops_live_…`). |
+| `OOPS_API_URL`   | `https://oops.3m4.net/api`    | API base URL. Self-hosters point this at their instance. |
+| `OOPS_AUDIT_LOG` | `stderr`                      | `stderr`, `none`, or a file path (JSON lines). |
+| `OOPS_MCP_PORT`  | `3333`                        | HTTP entrypoint only. |
+
+Project public keys (`oops_pub_…`) are **not** accepted: they can only call
+the ingest API and carry no role.
+
+## Roles and tools (RBAC)
+
+Each API key has a role. The server asks the API for the key's scopes once
+(`GET /apikeys/me`) and **only registers the tools those scopes allow**, so a
+read-only key never even lists `purge_events`. Every call is re-checked at
+call time, and the API enforces the same scopes independently — three layers,
+and a bug in the server can hide access but never grant it.
+
+| Tool                 | Scope             | viewer | editor | admin | Notes |
+|----------------------|-------------------|:------:|:------:|:-----:|-------|
+| `list_projects`      | `projects:read`   | ✓ | ✓ | ✓ | open issues, events 24h / 30d, users 30d, last event; `q` |
+| `get_project`        | `projects:read`   | ✓ | ✓ | ✓ | public key, time zone, allowed origins, switches |
+| `list_issues`        | `issues:read`     | ✓ | ✓ | ✓ | `status`, `level`, `environment`, `release`, `q`, `period`, `sort`, paging |
+| `get_issue`          | `issues:read`     | ✓ | ✓ | ✓ | uuid, `12` or `#12`; includes the latest event with its stack |
+| `list_issue_events`  | `issues:read`     | ✓ | ✓ | ✓ | occurrences of one issue, newest first |
+| `get_event`          | `issues:read`     | ✓ | ✓ | ✓ | frames, raw stack, tags, extra, breadcrumbs, user |
+| `search_events`      | `issues:read`     | ✓ | ✓ | ✓ | raw events; `level`, `environment`, `release`, `q`, `issue`, `period` |
+| `get_stats`          | `issues:read`     | ✓ | ✓ | ✓ | totals vs previous period, series, breakdowns; `period` or `from`/`to` |
+| `get_live`           | `issues:read`     | ✓ | ✓ | ✓ | events in the last few minutes |
+| `get_usage`          | `usage:read`      | ✓ | ✓ | ✓ | events / dropped / counts vs. plan limits |
+| `report_error`       | `projects:read`   | ✓ | ✓ | ✓ | posts an event to `/ingest` with the project's public key |
+| `create_project`     | `projects:write`  |   | ✓ | ✓ | returns the public key + SDK tag |
+| `update_project`     | `projects:write`  |   | ✓ | ✓ | pause ingest, store raw IPs, time zone, allowed origins… |
+| `rotate_public_key`  | `projects:write`  |   | ✓ | ✓ | old key stops working immediately |
+| `update_issue`       | `issues:write`    |   | ✓ | ✓ | `status`: `resolved`, `ignored`, `open` (reopen) |
+| `bulk_update_issues` | `issues:write`    |   | ✓ | ✓ | same status on ≤ 100 issues |
+| `delete_project`     | `projects:delete` |   |   | ✓ | **confirmation required** |
+| `purge_events`       | `events:delete`   |   |   | ✓ | **confirmation required**; deletes every event and issue |
+| `get_audit_log`      | `audit:read`      |   |   | ✓ | `action`, `actor_type`, `outcome`, `since`, paging |
+
+Roles are defined once in
+[`packages/shared/api_key_roles.json`](../shared/api_key_roles.json) and
+shared by the API, the dashboard and this server.
+
+Also exposed: resources `oops://projects` and `oops://projects/{id}/summary`,
+and the **`triage`** prompt (`project`, `period?`): summarise the open issues
+of a project — new vs regressed, most users affected, by environment and
+release — and propose what to fix, resolve or ignore first. It only proposes;
+status changes still go through `update_issue` after the user agrees.
+
+### Reporting from an agent
+
+`report_error` lets the agent file its own failures: it reads the project to
+get its public key and posts one event to `POST /api/ingest` with
+`X-Project-Key`, `platform: "agent"` (override with `python`, `node`, …) and
+`sdk: "oops-errors-mcp/<version>"`. Give `type` and/or `message`, optionally
+`stack` (parsed server-side), `frames`, `url`, `release`, `environment`,
+`user`, `tags`, `extra`, `breadcrumbs` and a `fingerprint` to control
+grouping. The result is the event id and the issue `#number`, or `ok: false`
+with a drop reason (`paused`, `origin`, `limit`) — never an error on the
+agent's side.
+
+## Human approval for destructive actions
+
+`delete_project` and `purge_events` are irreversible, so they never run on the
+model's say-so alone:
+
+- On hosts that support MCP **elicitation** (Claude Code, Inspector) the user
+  gets a native confirmation dialog showing exactly what will be deleted.
+- On hosts that don't (and always over HTTP, which is stateless), the tool
+  refuses with `confirmation_required` until the model calls it again with
+  `confirm: true` — which it can only honestly do after asking the user.
+
+`rotate_public_key` is not gated but is marked destructive: every SDK tag and
+server-side reporter using the previous key stops working the moment it runs.
+Prefer `update_project` with `ingest_enabled: false` over deleting a project.
+
+## Audit trail
+
+Two complementary logs:
+
+- **Server-side** (`audit_events` table, `GET /account/audit`, tool
+  `get_audit_log`): every mutation and every authorization denial, written in
+  the same transaction as the change.
+- **Agent-side** (`OOPS_AUDIT_LOG`, JSON lines): every tool call the agent
+  attempted, including ones refused locally that never reached the API, with
+  duration, outcome (`ok|denied|error|cancelled|pending`) and compacted args.
+
+## Design notes
+
+- **Structured outputs.** Every tool declares an `outputSchema` and returns
+  `structuredContent`; hosts can validate and chain results without parsing
+  prose. The text part is a compact summary (one line per issue or event, the
+  stack of the latest event top-first). Objects mirroring API responses allow
+  extra fields, so an additive API change never breaks client-side validation.
+- **Errors are results.** API errors come back as `isError` with the stable
+  code (`limit_reached` + `which`, `key_taken`, `invalid_timezone`,
+  `invalid_origins`, `insufficient_scope`, `not_found`, `invalid_issue_ref`…)
+  so the model can recover instead of crashing.
+- **stdio hygiene.** stdout is the protocol channel; all logging goes to stderr.
+- **Stateless HTTP.** Each request builds a server bound to the caller's key;
+  tenants can never share state. The `/apikeys/me` lookup is cached 60 s per key.
+
+## Development
+
+```bash
+bun install
+bun test            # in-memory MCP client ↔ server against a fake API
+bun run build
+OOPS_API_KEY=… OOPS_API_URL=http://localhost:8084/api bun run inspect   # MCP Inspector
+OOPS_API_KEY=… OOPS_API_URL=http://localhost:8084/api bun run dev:http  # http://localhost:3333/mcp
+```
+
+The Docker image (`packages/mcp-server/Dockerfile`) runs the HTTP flavour and
+is wired into `deploy/docker-compose.yml` as the `mcp` service, exposed by
+Caddy at `/mcp`.
+
+## License
+
+MIT © Enrique Magallon Alvarez

package/dist/audit.d.ts

@@ -0,0 +1,42 @@
+export type AuditOutcome = "ok" | "denied" | "error" | "cancelled" | "pending";
+export interface AuditEntry {
+    ts: string;
+    event: "server.start" | "tool.call";
+    transport: string;
+    actor: {
+        account: string;
+        prefix: string;
+        role: string;
+    };
+    tool?: string;
+    outcome?: AuditOutcome;
+    duration_ms?: number;
+    args?: Record<string, unknown>;
+    error?: {
+        code: string;
+        message: string;
+    };
+    meta?: Record<string, unknown>;
+}
+export interface AuditSink {
+    write(entry: AuditEntry): void;
+}
+export declare class StderrAuditSink implements AuditSink {
+    write(entry: AuditEntry): void;
+}
+export declare class FileAuditSink implements AuditSink {
+    private readonly path;
+    constructor(path: string);
+    write(entry: AuditEntry): void;
+}
+export declare class MemoryAuditSink implements AuditSink {
+    readonly entries: AuditEntry[];
+    write(entry: AuditEntry): void;
+}
+export declare class NullAuditSink implements AuditSink {
+    write(): void;
+}
+/** `OOPS_AUDIT_LOG`: "stderr" (default) | "none" | a file path. */
+export declare function createAuditSink(setting: string | undefined): AuditSink;
+/** Keep logged arguments small and free of giant payloads. */
+export declare function compactArgs(args: unknown): Record<string, unknown> | undefined;

package/dist/audit.js

@@ -0,0 +1,53 @@
+/**
+ * Client-side audit trail for the MCP server: one JSON line per tool call.
+ *
+ * This complements (does not replace) the server-side `audit_events` table:
+ * the API records *what changed*; this log records *what the agent tried*,
+ * including calls that were refused locally and never reached the API.
+ *
+ * In stdio mode stdout is the protocol channel, so the default sink is stderr.
+ */
+import { appendFileSync } from "node:fs";
+export class StderrAuditSink {
+    write(entry) {
+        process.stderr.write(JSON.stringify(entry) + "\n");
+    }
+}
+export class FileAuditSink {
+    path;
+    constructor(path) {
+        this.path = path;
+    }
+    write(entry) {
+        appendFileSync(this.path, JSON.stringify(entry) + "\n");
+    }
+}
+export class MemoryAuditSink {
+    entries = [];
+    write(entry) {
+        this.entries.push(entry);
+    }
+}
+export class NullAuditSink {
+    write() { }
+}
+/** `OOPS_AUDIT_LOG`: "stderr" (default) | "none" | a file path. */
+export function createAuditSink(setting) {
+    const value = (setting ?? "stderr").trim();
+    if (value === "" || value === "stderr")
+        return new StderrAuditSink();
+    if (value === "none")
+        return new NullAuditSink();
+    return new FileAuditSink(value);
+}
+/** Keep logged arguments small and free of giant payloads. */
+export function compactArgs(args) {
+    if (!args || typeof args !== "object")
+        return undefined;
+    const out = {};
+    for (const [k, v] of Object.entries(args)) {
+        out[k] = typeof v === "string" && v.length > 200 ? v.slice(0, 200) + "…" : v;
+    }
+    return out;
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAqBzC,MAAM,OAAO,eAAe;IAC1B,KAAK,CAAC,KAAiB;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,CAAC;CACF;AAED,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAC7C,KAAK,CAAC,KAAiB;QACrB,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,CAAC;CACF;AAED,MAAM,OAAO,eAAe;IACjB,OAAO,GAAiB,EAAE,CAAC;IACpC,KAAK,CAAC,KAAiB;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,OAAO,aAAa;IACxB,KAAK,KAAU,CAAC;CACjB;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,OAA2B;IACzD,MAAM,KAAK,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,eAAe,EAAE,CAAC;IACrE,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IACjD,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Minimal typed HTTP client for the oops management API (and the ingest
+ * endpoint, used by `report_error`).
+ *
+ * Deliberately dependency-free (global `fetch`) so the MCP server stays small
+ * and the client can be swapped for a fake in tests.
+ */
+import type { AuditEvent, AuditParams, CreateProjectInput, Event, EventsParams, IngestEventInput, IngestResult, Issue, IssueStatus, IssuesParams, KeyInfo, Live, Page, Project, PurgeResult, Stats, StatsParams, Summary, UpdateProjectInput, Usage } from "./types.js";
+/** An error the API returned on purpose (`{ error: { code, message, ...extra } }`). */
+export declare class OopsApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    /** Extra error fields, e.g. `which` on `limit_reached`, `required_scope` on `insufficient_scope`. */
+    readonly extra: Record<string, unknown>;
+    constructor(status: number, code: string, message: string, 
+    /** Extra error fields, e.g. `which` on `limit_reached`, `required_scope` on `insufficient_scope`. */
+    extra?: Record<string, unknown>);
+}
+export interface OopsClientOptions {
+    /** Base URL including the `/api` prefix, e.g. `https://oops.3m4.net/api`. */
+    baseUrl: string;
+    apiKey: string;
+    fetch?: typeof fetch;
+}
+export declare class OopsClient {
+    private readonly baseUrl;
+    private readonly apiKey;
+    private readonly fetchImpl;
+    constructor(opts: OopsClientOptions);
+    private request;
+    /** Identity + scopes of the calling key. */
+    me(): Promise<KeyInfo>;
+    listProjects(): Promise<{
+        items: Project[];
+    }>;
+    createProject(input: CreateProjectInput): Promise<Project>;
+    getProject(id: string): Promise<Project>;
+    updateProject(id: string, patch: UpdateProjectInput): Promise<Project>;
+    deleteProject(id: string): Promise<void>;
+    /** New public key; the old one stops working at once. Returns the updated project. */
+    rotatePublicKey(id: string): Promise<Project>;
+    summary(projectId: string): Promise<Summary>;
+    /** Purge every event and issue of the project. */
+    purgeEvents(projectId: string): Promise<PurgeResult>;
+    listIssues(projectId: string, params?: IssuesParams): Promise<Page<Issue>>;
+    /** `issueRef` is the issue uuid or its per-project number as a string (see `parseIssueRef`). */
+    getIssue(projectId: string, issueRef: string): Promise<Issue>;
+    updateIssue(projectId: string, issueRef: string, status: IssueStatus): Promise<Issue>;
+    bulkUpdateIssues(projectId: string, ids: string[], status: IssueStatus): Promise<{
+        updated: number;
+    }>;
+    listIssueEvents(projectId: string, issueRef: string, params?: {
+        page?: number;
+        per_page?: number;
+    }): Promise<Page<Event>>;
+    listEvents(projectId: string, params?: EventsParams): Promise<Page<Event>>;
+    getEvent(projectId: string, eventId: string): Promise<Event>;
+    stats(projectId: string, params?: StatsParams): Promise<Stats>;
+    live(projectId: string): Promise<Live>;
+    usage(): Promise<Usage>;
+    auditLog(params?: AuditParams): Promise<Page<AuditEvent>>;
+    /**
+     * Report one event into a project. Authenticated with the project's PUBLIC
+     * key (`X-Project-Key`), never the API key: that is the only credential the
+     * ingest endpoint understands. Always 202; `ok: false` carries a drop reason.
+     */
+    ingest(publicKey: string, event: IngestEventInput): Promise<IngestResult>;
+}

package/dist/client.js

@@ -0,0 +1,146 @@
+import { VERSION } from "./version.js";
+/** An error the API returned on purpose (`{ error: { code, message, ...extra } }`). */
+export class OopsApiError extends Error {
+    status;
+    code;
+    extra;
+    constructor(status, code, message, 
+    /** Extra error fields, e.g. `which` on `limit_reached`, `required_scope` on `insufficient_scope`. */
+    extra = {}) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.extra = extra;
+        this.name = "OopsApiError";
+    }
+}
+const enc = encodeURIComponent;
+export class OopsClient {
+    baseUrl;
+    apiKey;
+    fetchImpl;
+    constructor(opts) {
+        this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
+        this.apiKey = opts.apiKey;
+        this.fetchImpl = opts.fetch ?? globalThis.fetch;
+    }
+    async request(method, path, opts = {}) {
+        const url = new URL(this.baseUrl + path);
+        for (const [k, v] of Object.entries(opts.query ?? {})) {
+            if (v !== undefined && v !== "")
+                url.searchParams.set(k, String(v));
+        }
+        const headers = {
+            Accept: "application/json",
+            "User-Agent": `oops-errors-mcp/${VERSION}`,
+            ...(opts.headers ?? {}),
+        };
+        if (opts.auth !== false)
+            headers["X-API-Key"] = this.apiKey;
+        if (opts.body !== undefined)
+            headers["Content-Type"] = "application/json";
+        const res = await this.fetchImpl(url, {
+            method,
+            headers,
+            body: opts.body === undefined ? undefined : JSON.stringify(opts.body),
+        });
+        if (res.status === 204)
+            return undefined;
+        const text = await res.text();
+        let data = null;
+        try {
+            data = text ? JSON.parse(text) : null;
+        }
+        catch {
+            data = null;
+        }
+        if (!res.ok) {
+            const err = (data?.error ?? {});
+            const { code, message, ...extra } = err;
+            throw new OopsApiError(res.status, typeof code === "string" ? code : `http_${res.status}`, typeof message === "string" ? message : `HTTP ${res.status}`, extra);
+        }
+        return data;
+    }
+    /** Identity + scopes of the calling key. */
+    me() {
+        return this.request("GET", "/apikeys/me");
+    }
+    // --- Projects ---------------------------------------------------------- //
+    listProjects() {
+        return this.request("GET", "/projects");
+    }
+    createProject(input) {
+        return this.request("POST", "/projects", { body: input });
+    }
+    getProject(id) {
+        return this.request("GET", `/projects/${enc(id)}`);
+    }
+    updateProject(id, patch) {
+        return this.request("PATCH", `/projects/${enc(id)}`, { body: patch });
+    }
+    deleteProject(id) {
+        return this.request("DELETE", `/projects/${enc(id)}`);
+    }
+    /** New public key; the old one stops working at once. Returns the updated project. */
+    rotatePublicKey(id) {
+        return this.request("POST", `/projects/${enc(id)}/rotate-key`);
+    }
+    summary(projectId) {
+        return this.request("GET", `/projects/${enc(projectId)}/summary`);
+    }
+    /** Purge every event and issue of the project. */
+    purgeEvents(projectId) {
+        return this.request("DELETE", `/projects/${enc(projectId)}/events`);
+    }
+    // --- Issues and events --------------------------------------------------- //
+    listIssues(projectId, params = {}) {
+        return this.request("GET", `/projects/${enc(projectId)}/issues`, { query: params });
+    }
+    /** `issueRef` is the issue uuid or its per-project number as a string (see `parseIssueRef`). */
+    getIssue(projectId, issueRef) {
+        return this.request("GET", `/projects/${enc(projectId)}/issues/${enc(issueRef)}`);
+    }
+    updateIssue(projectId, issueRef, status) {
+        return this.request("PATCH", `/projects/${enc(projectId)}/issues/${enc(issueRef)}`, { body: { status } });
+    }
+    bulkUpdateIssues(projectId, ids, status) {
+        return this.request("POST", `/projects/${enc(projectId)}/issues/bulk`, { body: { ids, status } });
+    }
+    listIssueEvents(projectId, issueRef, params = {}) {
+        return this.request("GET", `/projects/${enc(projectId)}/issues/${enc(issueRef)}/events`, { query: params });
+    }
+    listEvents(projectId, params = {}) {
+        return this.request("GET", `/projects/${enc(projectId)}/events`, { query: params });
+    }
+    getEvent(projectId, eventId) {
+        return this.request("GET", `/projects/${enc(projectId)}/events/${enc(eventId)}`);
+    }
+    // --- Stats ------------------------------------------------------------- //
+    stats(projectId, params = {}) {
+        return this.request("GET", `/projects/${enc(projectId)}/stats`, { query: params });
+    }
+    live(projectId) {
+        return this.request("GET", `/projects/${enc(projectId)}/live`);
+    }
+    // --- Account ----------------------------------------------------------- //
+    usage() {
+        return this.request("GET", "/account/usage");
+    }
+    auditLog(params = {}) {
+        return this.request("GET", "/account/audit", { query: params });
+    }
+    // --- Ingest (project public key, no API key) ---------------------------- //
+    /**
+     * Report one event into a project. Authenticated with the project's PUBLIC
+     * key (`X-Project-Key`), never the API key: that is the only credential the
+     * ingest endpoint understands. Always 202; `ok: false` carries a drop reason.
+     */
+    ingest(publicKey, event) {
+        return this.request("POST", "/ingest", {
+            body: event,
+            auth: false,
+            headers: { "X-Project-Key": publicKey },
+        });
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,uFAAuF;AACvF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAEnB;IACA;IAGA;IALlB,YACkB,MAAc,EACd,IAAY,EAC5B,OAAe;IACf,qGAAqG;IACrF,QAAiC,EAAE;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;QANC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAGZ,UAAK,GAAL,KAAK,CAA8B;QAGnD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAWD,MAAM,GAAG,GAAG,kBAAkB,CAAC;AAE/B,MAAM,OAAO,UAAU;IACJ,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,SAAS,CAAe;IAEzC,YAAY,IAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,OAA4F,EAAE;QAE9F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,mBAAmB,OAAO,EAAE;YAC1C,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SACxB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAE1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;SACtE,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,CAAE,IAAmD,EAAE,KAAK,IAAI,EAAE,CAG7E,CAAC;YACF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,GAAG,CAAC;YACxC,MAAM,IAAI,YAAY,CACpB,GAAG,CAAC,MAAM,EACV,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,EACtD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,EAC5D,KAAK,CACN,CAAC;QACJ,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,4CAA4C;IAC5C,EAAE;QACA,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC5C,CAAC;IAED,6EAA6E;IAE7E,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,aAAa,CAAC,EAAU,EAAE,KAAyB;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,aAAa,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,sFAAsF;IACtF,eAAe,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;IAED,kDAAkD;IAClD,WAAW,CAAC,SAAiB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,+EAA+E;IAE/E,UAAU,CAAC,SAAiB,EAAE,SAAuB,EAAE;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAe,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,gGAAgG;IAChG,QAAQ,CAAC,SAAiB,EAAE,QAAgB;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAmB;QAClE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,gBAAgB,CAAC,SAAiB,EAAE,GAAa,EAAE,MAAmB;QACpE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,eAAe,CAAC,SAAiB,EAAE,QAAgB,EAAE,SAA+C,EAAE;QACpG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,SAAuB,EAAE;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAe,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,QAAQ,CAAC,SAAiB,EAAE,OAAe;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,SAAiB,EAAE,SAAsB,EAAE;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAe,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC,SAAiB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,6EAA6E;IAE7E,KAAK;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,SAAsB,EAAE;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAe,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAE9E;;;;OAIG;IACH,MAAM,CAAC,SAAiB,EAAE,KAAuB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE;YACrC,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,9 @@
+/** Environment-driven configuration shared by the stdio and HTTP entrypoints. */
+export interface Config {
+    apiUrl: string;
+    apiKey: string | undefined;
+    auditLog: string | undefined;
+    port: number;
+}
+export declare const DEFAULT_API_URL = "https://oops.3m4.net/api";
+export declare function loadConfig(env?: NodeJS.ProcessEnv): Config;

package/dist/config.js

@@ -0,0 +1,11 @@
+/** Environment-driven configuration shared by the stdio and HTTP entrypoints. */
+export const DEFAULT_API_URL = "https://oops.3m4.net/api";
+export function loadConfig(env = process.env) {
+    return {
+        apiUrl: (env.OOPS_API_URL || DEFAULT_API_URL).replace(/\/+$/, ""),
+        apiKey: env.OOPS_API_KEY?.trim() || undefined,
+        auditLog: env.OOPS_AUDIT_LOG,
+        port: Number(env.OOPS_MCP_PORT || 3333),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,iFAAiF;AASjF,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAE1D,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACjE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,SAAS;QAC7C,QAAQ,EAAE,GAAG,CAAC,cAAc;QAC5B,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/http.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+/**
+ * Streamable HTTP entrypoint (remote MCP).
+ *
+ * - One endpoint, `POST /mcp`. Auth is the oops API key as a Bearer token
+ *   (`Authorization: Bearer oops_live_…`); `X-API-Key` is accepted too.
+ * - Stateless: every request gets a fresh server + transport bound to the
+ *   caller's key, so tenants can never share state. The cost is one
+ *   `/apikeys/me` lookup per request, cached briefly per key.
+ * - No elicitation here: a stateless server has no back-channel to the user,
+ *   so the destructive tools fall back to the explicit `confirm=true` flow.
+ */
+import { createHash } from "node:crypto";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import express from "express";
+import { createAuditSink } from "./audit.js";
+import { OopsApiError, OopsClient } from "./client.js";
+import { loadConfig } from "./config.js";
+import { createOopsServer } from "./server.js";
+import { VERSION } from "./version.js";
+const cfg = loadConfig();
+const audit = createAuditSink(cfg.auditLog);
+const ME_CACHE_MS = 60_000;
+const meCache = new Map();
+function extractKey(req) {
+    const auth = req.header("authorization");
+    if (auth?.toLowerCase().startsWith("bearer "))
+        return auth.slice(7).trim();
+    return req.header("x-api-key")?.trim() || undefined;
+}
+async function resolveKey(apiKey) {
+    const id = createHash("sha256").update(apiKey).digest("hex");
+    const hit = meCache.get(id);
+    if (hit && hit.expires > Date.now())
+        return hit.info;
+    const info = await new OopsClient({ baseUrl: cfg.apiUrl, apiKey }).me();
+    meCache.set(id, { info, expires: Date.now() + ME_CACHE_MS });
+    return info;
+}
+function rpcError(res, status, message) {
+    if (status === 401)
+        res.setHeader("WWW-Authenticate", 'Bearer realm="oops-errors-mcp"');
+    res.status(status).json({ jsonrpc: "2.0", error: { code: -32000, message }, id: null });
+}
+const app = express();
+app.use(express.json({ limit: "1mb" }));
+app.get("/healthz", (_req, res) => {
+    res.json({ status: "ok", name: "oops-errors-mcp", version: VERSION });
+});
+app.all("/mcp", async (req, res) => {
+    const apiKey = extractKey(req);
+    if (!apiKey)
+        return rpcError(res, 401, "Missing API key. Send `Authorization: Bearer oops_live_…`.");
+    let keyInfo;
+    try {
+        keyInfo = await resolveKey(apiKey);
+    }
+    catch (err) {
+        if (err instanceof OopsApiError && (err.status === 401 || err.status === 403)) {
+            return rpcError(res, err.status, err.message);
+        }
+        return rpcError(res, 502, `Upstream oops API unavailable: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const client = new OopsClient({ baseUrl: cfg.apiUrl, apiKey });
+    const server = createOopsServer({ client, keyInfo, audit, transport: "http", allowElicitation: false });
+    const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+    res.on("close", () => {
+        void transport.close();
+        void server.close();
+    });
+    await server.connect(transport);
+    await transport.handleRequest(req, res, req.body);
+});
+app.listen(cfg.port, "0.0.0.0", () => {
+    process.stderr.write(`oops-errors-mcp http listening on :${cfg.port} (api: ${cfg.apiUrl})\n`);
+});
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,OAAwC,MAAM,SAAS,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;AACzB,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC5C,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;AAEtE,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACzC,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,MAAc;IACtC,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAa,EAAE,MAAc,EAAE,OAAe;IAC9D,IAAI,MAAM,KAAK,GAAG;QAAE,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,gCAAgC,CAAC,CAAC;IACxF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAExC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IAChC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACjC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,4DAA4D,CAAC,CAAC;IAErG,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9E,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;IACxG,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;IACvF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;AAChG,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { createOopsServer, buildInstructions, type OopsServerOptions } from "./server.js";
+export { OopsClient, OopsApiError, type OopsClientOptions } from "./client.js";
+export { TOOL_SCOPES, ALL_TOOLS, CONFIRMED_TOOLS, allowedTools, hasScope, hasAllScopes, type ToolName } from "./rbac.js";
+export { parseIssueRef, formatIssueRef, InvalidIssueRef } from "./issue.js";
+export { createAuditSink, StderrAuditSink, FileAuditSink, MemoryAuditSink, NullAuditSink, type AuditSink, type AuditEntry, type AuditOutcome, } from "./audit.js";
+export { loadConfig, DEFAULT_API_URL, type Config } from "./config.js";
+export type * from "./types.js";
+export { VERSION } from "./version.js";

package/dist/index.js

@@ -0,0 +1,8 @@
+export { createOopsServer, buildInstructions } from "./server.js";
+export { OopsClient, OopsApiError } from "./client.js";
+export { TOOL_SCOPES, ALL_TOOLS, CONFIRMED_TOOLS, allowedTools, hasScope, hasAllScopes } from "./rbac.js";
+export { parseIssueRef, formatIssueRef, InvalidIssueRef } from "./issue.js";
+export { createAuditSink, StderrAuditSink, FileAuditSink, MemoryAuditSink, NullAuditSink, } from "./audit.js";
+export { loadConfig, DEFAULT_API_URL } from "./config.js";
+export { VERSION } from "./version.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAA0B,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,YAAY,EAA0B,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAiB,MAAM,WAAW,CAAC;AACzH,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,eAAe,EACf,aAAa,EACb,eAAe,EACf,aAAa,GAId,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,eAAe,EAAe,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC"}