npm - @confluentinc/mcp-confluent - Versions diffs - 1.2.1 → 1.3.0 - Mend

@confluentinc/mcp-confluent 1.2.1 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (428) hide show

package/assets/oauth-templates/callback-failure.html ADDED Viewed

@@ -0,0 +1,22 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <title>Confluent Cloud — Authentication Failed</title>
+    <link rel="shortcut icon" href="https://www.confluent.io/favicon.ico" />
+    {#include styles/}
+    <meta name="color-scheme" content="light dark" />
+  </head>
+  <body>
+    {#include logo/}
+    <div class="banner">
+      <h1>Authentication Failed</h1>
+      <p>
+        We couldn't complete the authentication with Confluent Cloud due to the
+        following error:
+      </p>
+      <p><b class="failure">{{error}}</b></p>
+    </div>
+  </body>
+</html>

package/assets/oauth-templates/callback-success.html ADDED Viewed

@@ -0,0 +1,19 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <title>Confluent Cloud — Authentication Complete</title>
+    <link rel="shortcut icon" href="https://www.confluent.io/favicon.ico" />
+    {#include styles/}
+    <meta name="color-scheme" content="light dark" />
+  </head>
+  <body>
+    {#include logo/}
+    <div class="banner">
+      <h1>Authentication Complete</h1>
+      <p>You have successfully authenticated with Confluent Cloud.</p>
+      <p>You may close this page and return to your terminal.</p>
+    </div>
+  </body>
+</html>

package/assets/oauth-templates/logo.html ADDED Viewed

@@ -0,0 +1,91 @@
+<div class="logo">
+  <svg
+    id="Layer_1"
+    xmlns="http://www.w3.org/2000/svg"
+    x="0px"
+    y="0px"
+    viewBox="0 0 1475 467.84"
+    xml:space="preserve"
+  >
+    <g>
+      <rect class="st0" width="1475" height="467.84" />
+    </g>
+    <g>
+      <g>
+        <path
+          class="st1"
+          d="M482.17,246.58h11.01c-4.3,20.54-21.08,34.37-43.5,34.37c-26.32,0-47.53-20.41-47.53-47.39
+                    s21.21-47.26,47.53-47.26c22.42,0,39.2,13.69,43.5,34.24h-11.01c-3.76-14.9-15.84-24.3-32.49-24.3
+                    c-20.68,0-36.79,15.98-36.79,37.32s16.11,37.46,36.79,37.46C466.33,271.01,478.41,261.35,482.17,246.58"
+        />
+        <path
+          class="st1"
+          d="M602.72,233.55c0-20.68-16.11-37.32-36.78-37.32c-20.68,0-36.79,16.65-36.79,37.32
+                    c0,20.68,16.11,37.32,36.79,37.32C586.61,270.88,602.72,254.23,602.72,233.55 M613.46,233.55c0,26.31-21.21,47.26-47.53,47.26
+                    c-26.32,0-47.53-20.95-47.53-47.26c0-26.32,21.21-47.26,47.53-47.26C592.25,186.29,613.46,207.24,613.46,233.55"
+        />
+      </g>
+      <polygon
+        class="st1"
+        points="722.2,187.91 722.2,279.2 713.34,279.2 654.94,207.24 654.94,279.2 644.33,279.2 644.33,187.91
+                652.93,187.91 711.6,260.81 711.6,187.91 	"
+      />
+      <polygon
+        class="st1"
+        points="771,197.71 771,231.27 817.45,231.27 817.45,241.07 771,241.07 771,279.2 760.39,279.2 760.39,187.9
+                823.09,187.9 823.09,197.71 	"
+      />
+      <polygon
+        class="st1"
+        points="920.69,269.4 920.69,279.2 859.73,279.2 859.73,187.91 870.34,187.91 870.34,269.4 	"
+      />
+      <g>
+        <path
+          class="st1"
+          d="M1021.77,240.13c0,24.3-15.57,40.68-39.07,40.68c-23.49,0-39.07-16.38-39.07-40.68V187.9h10.61v52.23
+                    c0,17.86,11.28,30.75,28.46,30.75c17.05,0,28.46-12.89,28.46-30.75V187.9h10.61V240.13z"
+        />
+      </g>
+      <polygon
+        class="st1"
+        points="1069.59,197.71 1069.59,228.99 1117.52,228.99 1117.52,238.79 1069.59,238.79 1069.59,269.4
+                1122.89,269.4 1122.89,279.2 1058.98,279.2 1058.98,187.9 1122.89,187.9 1122.89,197.71 	"
+      />
+      <polygon
+        class="st1"
+        points="1232.47,187.91 1232.47,279.2 1223.61,279.2 1165.21,207.24 1165.21,279.2 1154.6,279.2
+                1154.6,187.91 1163.2,187.91 1221.87,260.81 1221.87,187.91 	"
+      />
+      <polygon
+        class="st1"
+        points="1260.63,187.91 1260.63,197.71 1294.19,197.71 1294.19,279.2 1304.8,279.2 1304.8,197.71
+                1338.5,197.71 1338.5,187.91 	"
+      />
+      <g>
+        <path
+          class="st1"
+          d="M263.68,230.76c-8.73-0.27-17.47-0.34-26.2-0.39c-0.02-8.74-0.06-17.48-0.29-26.21l-0.42-14.88
+                    c-0.25-4.96-0.4-9.92-0.75-14.88h-4.2c-0.35,4.96-0.5,9.92-0.75,14.88l-0.42,14.88c-0.11,4.1-0.16,8.2-0.21,12.3
+                    c-1.61-3.77-3.23-7.54-4.9-11.29l-6.08-13.59c-2.13-4.49-4.17-9.01-6.39-13.46l-3.88,1.61c1.57,4.72,3.34,9.35,5,14.03l5.31,13.91
+                    c1.47,3.83,2.99,7.64,4.52,11.44c-2.93-2.87-5.87-5.73-8.84-8.55l-10.82-10.23c-3.69-3.33-7.3-6.73-11.05-9.99l-2.97,2.97
+                    c3.26,3.76,6.66,7.37,9.99,11.05l10.23,10.82c2.82,2.98,5.68,5.91,8.55,8.84c-3.8-1.53-7.61-3.05-11.44-4.52l-13.91-5.31
+                    c-4.68-1.66-9.32-3.43-14.04-5l-1.61,3.88c4.45,2.22,8.98,4.25,13.46,6.39l13.59,6.08c3.75,1.67,7.51,3.29,11.28,4.9
+                    c-4.1,0.04-8.2,0.1-12.3,0.21l-14.88,0.42c-4.96,0.25-9.92,0.4-14.88,0.75v4.2c4.96,0.35,9.92,0.5,14.88,0.75l14.88,0.42
+                    c8.74,0.24,17.48,0.28,26.21,0.3c0.05,8.73,0.12,17.47,0.39,26.2l0.46,14.88c0.27,4.96,0.43,9.92,0.79,14.88h3.81
+                    c0.36-4.96,0.52-9.92,0.79-14.88l0.46-14.88c0.13-4.2,0.2-8.4,0.26-12.6c1.66,3.86,3.33,7.71,5.06,11.54l6.12,13.57
+                    c2.15,4.48,4.19,9,6.42,13.45l3.52-1.46c-1.57-4.72-3.31-9.36-4.97-14.05l-5.27-13.92c-1.49-3.93-3.03-7.84-4.58-11.74
+                    c3.01,2.93,6.03,5.85,9.09,8.73l10.85,10.2c3.7,3.32,7.32,6.71,11.08,9.96l2.7-2.7c-3.25-3.76-6.64-7.39-9.96-11.08l-10.2-10.85
+                    c-2.88-3.06-5.8-6.08-8.73-9.09c3.9,1.55,7.81,3.1,11.74,4.58l13.93,5.27c4.68,1.65,9.33,3.4,14.05,4.97l1.46-3.52
+                    c-4.44-2.23-8.97-4.28-13.45-6.42l-13.57-6.12c-3.83-1.73-7.68-3.4-11.54-5.06c4.2-0.06,8.4-0.13,12.6-0.26l14.88-0.46
+                    c4.96-0.27,9.92-0.43,14.88-0.79v-3.81c-4.96-0.36-9.92-0.52-14.88-0.79L263.68,230.76z"
+        />
+        <path
+          class="st1"
+          d="M233.92,136.5c-53.72,0-97.42,43.7-97.42,97.42c0,53.72,43.7,97.42,97.42,97.42s97.42-43.7,97.42-97.42
+                    C331.34,180.2,287.64,136.5,233.92,136.5z M233.92,322.23c-48.69,0-88.31-39.61-88.31-88.31c0-48.69,39.61-88.31,88.31-88.31
+                    c48.7,0,88.31,39.62,88.31,88.31C322.23,282.61,282.62,322.23,233.92,322.23z"
+        />
+      </g>
+    </g>
+  </svg>
+</div>

package/assets/oauth-templates/styles.html ADDED Viewed

@@ -0,0 +1,49 @@
+<style>
+    /* Axon theme design tokens partial */
+    :root {
+        --background: #F5F4F4;
+        --text-primary: #131316;
+        --link-primary: #4933D7;
+        --link-primary-hover: #30228B;
+        --support-failure: #C43B42;
+        --logo: #040531;
+    }
+    @media (prefers-color-scheme: dark) {
+        :root {
+            --background: #131316;
+            --text-primary: #F5F4F4;
+            --link-primary: #BDB3FF;
+            --link-primary-hover: #B4A8FF;
+            --support-failure: #F07A80;
+            --logo: #FFFFFF;
+        }
+    }
+    /* Page styling */
+    a, a:active { color: var(--link-primary); }
+    a:hover { color: var(--link-primary-hover); }
+    body {
+        margin: 0;
+        overflow: hidden;
+        background-color: var(--background);
+        color: var(--text-primary);
+    }
+    /* Logo styling */
+    div.logo {
+        width: 320px;
+    }
+    .logo .st0{ fill: none; }
+    .logo .st1{ fill: var(--logo); }
+    /* Content styling */
+    div.banner {
+        margin: 80px 32px;
+        font-family: 'MarkPro-NarrowBook', 'Arial', sans-serif;
+        text-align: center;
+    }
+    /* Util styling */
+    .failure { color: var(--support-failure); }
+</style>

package/config.example.yaml ADDED Viewed

@@ -0,0 +1,149 @@
+# Example MCP Confluent Server configuration.
+#
+# Generate `config.yaml` from this template with:
+#   npx @confluentinc/mcp-confluent --init-config
+#
+# Every `${VAR}` and `${VAR:-default}` placeholder is resolved from the process
+# environment at startup, so secrets can stay in your shell or `.env` file
+# rather than the YAML itself. Plain literal values are also fine when you do
+# not need interpolation.
+#
+# Each sub-block under `connections.<name>` is independently optional; remove
+# the ones you do not need. At least one of `kafka`, `schema_registry`,
+# `confluent_cloud`, `flink`, `tableflow`, or `telemetry` must remain.
+# --- Server ---
+# MCP server transport, authentication, and logging settings.
+# All fields are optional — omit the entire block to use the defaults shown.
+# When using --config, these replace the corresponding environment variables:
+#   LOG_LEVEL, HTTP_PORT, HTTP_HOST, HTTP_MCP_ENDPOINT_PATH,
+#   SSE_MCP_ENDPOINT_PATH, SSE_MCP_MESSAGE_ENDPOINT_PATH,
+#   MCP_API_KEY, MCP_AUTH_DISABLED, MCP_ALLOWED_HOSTS, DO_NOT_TRACK.
+# server.transports replaces the --transport CLI flag (the two are mutually
+# exclusive; omit --transport and declare transports here instead).
+# Exception: Env var DO_NOT_TRACK is always honored as a floor — if set in the
+# environment, telemetry is disabled regardless of do_not_track below.
+server:
+  # Transports to start. One or more of: stdio, http, sse. Defaults to [stdio].
+  # (Use server.transports instead of --transport when using --config.)
+  transports: [stdio]
+  # Logging verbosity. One of: trace, debug, info, warn, error, fatal.
+  log_level: "${LOG_LEVEL:-info}"
+  # Opt out of anonymous usage analytics.
+  # (DO_NOT_TRACK=true in the environment always wins; this field lets you opt
+  # out in YAML without needing the env var.)
+  # do_not_track: true
+  # HTTP and SSE transport settings. Omit entirely to use all defaults,
+  # or when only using the stdio transport.
+  http:
+    # TCP port and bind address (applies to both http and sse transports).
+    port: ${HTTP_PORT:-8080}
+    host: "${HTTP_HOST:-127.0.0.1}"
+    # URL path for the Streamable HTTP transport endpoint (http transport only).
+    mcp_endpoint: "${HTTP_MCP_ENDPOINT_PATH:-/mcp}"
+    # URL paths for the SSE transport endpoints (sse transport only).
+    sse_endpoint: "${SSE_MCP_ENDPOINT_PATH:-/sse}"
+    sse_message_endpoint: "${SSE_MCP_MESSAGE_ENDPOINT_PATH:-/messages}"
+  auth:
+    # Bearer token required on every HTTP/SSE request when set (min 32 chars).
+    # (Omit to run without a fixed API key; incompatible with disabled: true.)
+    # api_key: "${MCP_API_KEY}"
+    # Hosts accepted in the HTTP Host header (DNS-rebinding protection).
+    # (Defaults to [localhost, 127.0.0.1] when omitted.)
+    allowed_hosts:
+      - localhost
+      - "127.0.0.1"
+    # Disables HTTP/SSE authentication entirely when set to true.
+    # (For development environments only; incompatible with api_key.)
+    # disabled: true
+connections:
+  # Connection name is freeform. Today exactly one connection is read at
+  # runtime; multi-connection support is the focus of the next release, and
+  # this plural structure is here so that landing it does not require any
+  # schema changes on your side.
+  default:
+    type: direct
+    # --- Kafka ---
+    # `bootstrap_servers` is required for any Kafka client (admin, producer,
+    # consumer). `rest_endpoint` + `cluster_id` + `env_id` are required for
+    # Kafka admin REST operations against Confluent Cloud (topics, configs,
+    # ACLs).
+    kafka:
+      bootstrap_servers: "${BOOTSTRAP_SERVERS:-pkc-xxxxx.us-east-1.aws.confluent.cloud:9092}"
+      auth:
+        type: api_key
+        key: "${KAFKA_API_KEY}"
+        secret: "${KAFKA_API_SECRET}"
+      rest_endpoint: "${KAFKA_REST_ENDPOINT:-https://pkc-xxxxx.us-east-1.aws.confluent.cloud:443}"
+      cluster_id: "${KAFKA_CLUSTER_ID:-lkc-xxxxx}"
+      env_id: "${KAFKA_ENV_ID:-env-xxxxx}"
+      # Optional pass-through librdkafka properties. Must NOT include
+      # `bootstrap.servers`, `sasl.username`, or `sasl.password` — use the
+      # named fields above for those (the schema rejects them here).
+      # extra_properties:
+      #   socket.timeout.ms: "30000"
+      #   debug: "broker,topic"
+    # --- Schema Registry ---
+    schema_registry:
+      endpoint: "${SCHEMA_REGISTRY_ENDPOINT:-https://psrc-xxxxx.us-east-2.aws.confluent.cloud}"
+      auth:
+        type: api_key
+        key: "${SCHEMA_REGISTRY_API_KEY}"
+        secret: "${SCHEMA_REGISTRY_API_SECRET}"
+    # --- Confluent Cloud control plane ---
+    # Required for tools that hit the Confluent Cloud REST API (environments,
+    # service accounts, connectors, billing, etc.). `endpoint` defaults to
+    # https://api.confluent.cloud when omitted.
+    confluent_cloud:
+      endpoint: "${CONFLUENT_CLOUD_REST_ENDPOINT:-https://api.confluent.cloud}"
+      auth:
+        type: api_key
+        key: "${CONFLUENT_CLOUD_API_KEY}"
+        secret: "${CONFLUENT_CLOUD_API_SECRET}"
+    # --- Flink ---
+    # All five of `endpoint`, `auth`, `environment_id`, `organization_id`, and
+    # `compute_pool_id` are required if you include this block.
+    flink:
+      endpoint: "${FLINK_REST_ENDPOINT:-https://flink.us-east-1.aws.confluent.cloud}"
+      auth:
+        type: api_key
+        key: "${FLINK_API_KEY}"
+        secret: "${FLINK_API_SECRET}"
+      organization_id: "${FLINK_ORG_ID}"
+      environment_id: "${FLINK_ENV_ID:-env-xxxxx}"
+      compute_pool_id: "${FLINK_COMPUTE_POOL_ID:-lfcp-xxxxx}"
+      # Optional human-readable labels surfaced to tools / prompts:
+      # catalog_name: "${FLINK_CATALOG_NAME:-production}"
+      # database_name: "${FLINK_DATABASE_NAME:-my-cluster}"
+    # --- Tableflow ---
+    # Tableflow tools also need `confluent_cloud` above for environment and
+    # cluster lookups.
+    tableflow:
+      auth:
+        type: api_key
+        key: "${TABLEFLOW_API_KEY}"
+        secret: "${TABLEFLOW_API_SECRET}"
+    # --- Telemetry / Metrics ---
+    # If you omit this block entirely, telemetry inherits `confluent_cloud.auth`
+    # and uses the default endpoint (https://api.telemetry.confluent.cloud).
+    # Define this block only when you need to override one of those, e.g. with
+    # a separate metrics-only API key (recommended for least-privilege access).
+    # telemetry:
+    #   endpoint: "${TELEMETRY_ENDPOINT:-https://api.telemetry.confluent.cloud}"
+    #   auth:
+    #     type: api_key
+    #     key: "${TELEMETRY_API_KEY}"
+    #     secret: "${TELEMETRY_API_SECRET}"

package/config.oauth.example.yaml ADDED Viewed

@@ -0,0 +1,45 @@
+# Example MCP Confluent Server configuration — OAuth connection.
+#
+# Generate `config.yaml` from this template with:
+#   npx @confluentinc/mcp-confluent --init-oauth-config
+#
+# OAuth authenticates against Confluent Cloud via PKCE; no API keys to
+# provision. The browser sign-in opens automatically on server start; tools
+# that depend on OAuth begin working once sign-in completes. OAuth-eligible
+# tools auto-enable — there are no per-service blocks like there are for
+# direct (api-key) connections. Resource IDs (cluster_id, env_id, etc.) are
+# passed as tool arguments at call time rather than declared here.
+# --- Server ---
+# MCP server transport, authentication, and logging settings.
+# All fields are optional — uncomment and edit only what you need.
+# (See `config.example.yaml` for the fully-annotated server block; the same
+# fields apply here. Stdio users can leave the entire block commented out.)
+# server:
+#   transports: [stdio]
+#   log_level: "${LOG_LEVEL:-info}"
+#   http:
+#     port: ${HTTP_PORT:-8080}
+#     host: "${HTTP_HOST:-127.0.0.1}"
+#     mcp_endpoint: "${HTTP_MCP_ENDPOINT_PATH:-/mcp}"
+#     sse_endpoint: "${SSE_MCP_ENDPOINT_PATH:-/sse}"
+#     sse_message_endpoint: "${SSE_MCP_MESSAGE_ENDPOINT_PATH:-/messages}"
+#   auth:
+#     # api_key: "${MCP_API_KEY}"
+#     allowed_hosts:
+#       - localhost
+#       - "127.0.0.1"
+#     # disabled: true
+connections:
+  # Connection name is freeform. The `type: oauth` declaration is the only
+  # required field.
+  ccloud-oauth:
+    type: oauth
+    # librdkafka `debug` contexts to emit on stderr for this OAuth connection's
+    # native Kafka client. Reach for it when an OAuth/OAUTHBEARER SASL handshake
+    # misbehaves and you need to see which side broke — works the same in
+    # production as in dev. Common values: "security,broker,protocol", "all".
+    # The output is verbose; turn it off again once the investigation is done.
+    # kafka_debug: "${OAUTH_KAFKA_DEBUG:-security,broker,protocol}"

package/dist/cli.d.ts CHANGED Viewed

@@ -1,17 +1,29 @@
 import { ToolName } from "./confluent/tools/tool-name.js";
 import { TransportType } from "./mcp/transports/types.js";
 import { KeyValuePairObject } from "properties-file";
+/**
+ * Thrown when Commander has already printed help or version text and the process
+ * should exit cleanly (code 0). Callers catch this to call process.exit(0)
+ * without conflating it with a real error.
+ */
+export declare class DisplayedCommandLineUsageError extends Error {
+    constructor();
+}
 export interface CLIOptions {
     envFile?: string;
+    config?: string;
     transports: TransportType[];
     allowTools?: string[];
     blockTools?: string[];
     listTools?: boolean;
-    disableConfluentCloudTools?: boolean;
-    kafkaConfig: KeyValuePairObject;
+    kafkaConfig?: KeyValuePairObject;
     disableAuth?: boolean;
     allowedHosts?: string[];
     generateKey?: boolean;
+    initConfig?: boolean;
+    initOauthConfig?: boolean;
+    oauth?: boolean;
+    ccloudEnv?: "devel" | "stag" | "prod";
 }
 /**
  * Get the package version from package.json
@@ -19,34 +31,69 @@ export interface CLIOptions {
  */
 export declare function getPackageVersion(): string;
 /**
- * Parse command line arguments with strong typing
- * @returns Parsed CLI options
+ * Parse command line arguments into a structured CLIOptions object.
+ *
+ * Only minimally interprets the raw CLI input in order to populate CLIOptions:
+ *  1. Will dereference and parse named files for tool allow/block lists.
+ *  2. Will parse the kafka config properties file into an object.
+ *
+ * Does NOT load environment variables from the env file, nor does it load or
+ * validate the YAML configuration file.
+ *
+ * @param argv - Array of command line arguments (e.g., process.argv)
+ * @returns Structured CLIOptions object with parsed and validated values.
+ * @throws Error if CLI arguments are invalid, if specified files cannot be read, or if file contents are malformed.
  */
-export declare function parseCliArgs(): CLIOptions;
+export declare function parseCliArgs(argv: string[]): CLIOptions;
 /**
- * Load environment variables from file
+ * Parse a dotenv file, returning its entries as a `Record<string,string>` and
+ * (intentionally) writing the same entries into `process.env` with `override:
+ * true` so preexisting shell-environment values are replaced.
+ *
+ * Two channels, one source. The return value is what mcp-confluent application
+ * code consumes — fed into `buildConfigFromEnvAndCli` on the legacy env-var
+ * path, and supplied as the env source for `${VAR}` interpolation inside YAML.
+ * The `process.env` mutation exists for a different audience: **external
+ * libraries** (OpenSSL via `SSL_CERT_FILE` / `NODE_EXTRA_CA_CERTS`, cyrus-sasl
+ * via `SASL_PATH`, krb5 via `KRB5_CONFIG` / `KRB5CCNAME` / `KRB5_KTNAME`,
+ * undici via `HTTPS_PROXY` / `HTTP_PROXY` / `NO_PROXY`, librdkafka transitively
+ * through these) read `process.env` directly outside our control, and a user
+ * supplying `-e` reasonably expects those settings to be honored.
+ *
+ * Do not "clean up" the side effect: application code is forbidden by lint
+ * from reading `process.env` outside the bootstrap allowlist, but the linked
+ * libraries that need this seed are unaffected by that rule.
+ *
+ * Throws if the file does not exist or `dotenv` returns an error.
+ *
  * @param envFile Path to the environment file
+ * @returns The parsed entries — also reflected into `process.env`
  */
-export declare function loadEnvironmentVariables(envFile: string): void;
+export declare function loadDotEnvFile(envFile: string): Record<string, string>;
 /**
  * Filters and returns a sorted list of enabled ToolNames based on CLI allow/block options.
  *
  * This function determines which tools should be enabled for the server by applying
  * the following logic:
- *   1. If an allow list (`cliOptions.allowTools`) is provided and non-empty, only those
+ *   1. If allow list (`allowTools`) is non-empty, only those
  *      tool names present in the allow list (and valid) will be enabled. Any invalid
  *      tool names in the allow list are ignored and a warning is logged.
- *   2. If a block list (`cliOptions.blockTools`) is provided and non-empty, any tool
+ *   2. If block list (`blockTools`) is non-empty, any tool
  *      names present in the block list (and valid) will be removed from the enabled
  *      set. Any invalid tool names in the block list are ignored and a warning is logged.
- *   3. If neither allow nor block lists are provided, all available tools are enabled.
+ *   3. If both lists are empty, all available tools are enabled.
  *
  * The returned list is always sorted alphabetically.
  *
- * @param cliOptions - The parsed CLI options containing allow/block tool lists.
+ * @param allowTools - Array of tool names to explicitly allow/enable. If nonempty, only these tools will possibly
+ *                    be enabled (subject to block list). If not provided or empty, all tools are initially
+ *                    considered for enabling.
+ * @param blockTools - Array of tool names to block. If nonempty, these tools will be disabled (even if
+ *                      they are in the allow list).
+ *
  * @returns An alphabetically sorted array of enabled ToolNames.
  */
-export declare function getFilteredToolNames(cliOptions: CLIOptions): ToolName[];
+export declare function getFilteredToolNames(allowTools: string[], blockTools: string[]): ToolName[];
 /**
  * Loads configuration from a properties file
  * @param filePath - Path to the properties file

package/dist/cli.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"~~AACA~~,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;~~AAI7D~~,OAAO,EAAiB,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;~~AAIpE~~,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,~~0BAA0B~~,CAAC,EAAE,~~OAAO~~,CAAC;~~IACrC~~,WAAW,EAAE,~~kBAAkB~~,CAAC;~~IAChC~~,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,~~YAAY~~,CAAC,EAAE,~~MAAM~~,EAAE,CAAC;~~IACxB~~,~~WAAW~~,CAAC,EAAE,OAAO,CAAC;~~CACvB~~;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;~~AAiED;;;GAGG~~;AACH,wBAAgB,YAAY,IAAI,UAAU,~~CA0HzC~~;AAED~~;;;GAGG~~;AACH,wBAAgB,~~wBAAwB~~,CAAC,OAAO,EAAE,MAAM,GAAG,~~IAAI~~,~~CAgB9D~~;AAED~~;;;;;;;;;;;;;;;;;GAiBG~~;AACH,wBAAgB,oBAAoB,~~CAAC~~,UAAU,EAAE,UAAU,~~GAAG~~,QAAQ,EAAE,~~CA6CvE~~;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAexE"}
1	+ {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,OAAO,EAAiB,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGpE;;;;GAIG;AACH,qBAAa,8BAA+B,SAAQ,KAAK;;CAKxD;AAGD,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;CACvC;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAkGD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAwJvD;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBtE;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAAE,EACpB,UAAU,EAAE,MAAM,EAAE,GACnB,QAAQ,EAAE,CA4CZ;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAexE"}