@confluentinc/mcp-confluent 1.2.2 → 1.4.0

package/dist/env-schema.js

@@ -54,13 +54,13 @@ const envSchema = z.object({
         .optional(),
     KAFKA_API_KEY: z
         .string()
-        .describe("Authentication credential (username) required to establish secure connection with the Kafka cluster")
+        .describe("SASL authentication username (API key on Confluent Cloud; principal name on Confluent Platform) for the Kafka cluster")
         .trim()
         .min(1)
         .optional(),
     KAFKA_API_SECRET: z
         .string()
-        .describe("Authentication credential (password) paired with KAFKA_API_KEY for secure Kafka cluster access")
+        .describe("SASL authentication password (API secret on Confluent Cloud; password on Confluent Platform), paired with KAFKA_API_KEY")
         .trim()
         .min(1)
         .optional(),
@@ -90,13 +90,13 @@ const envSchema = z.object({
         .optional(),
     SCHEMA_REGISTRY_API_KEY: z
         .string()
-        .describe("Authentication key for accessing Schema Registry services to manage and validate data schemas")
+        .describe("HTTP Basic Auth username for Schema Registry (API key on Confluent Cloud; principal on Confluent Platform)")
         .trim()
         .min(1)
         .optional(),
     SCHEMA_REGISTRY_API_SECRET: z
         .string()
-        .describe("Authentication secret paired with SCHEMA_REGISTRY_API_KEY for secure Schema Registry access")
+        .describe("HTTP Basic Auth password for Schema Registry, paired with SCHEMA_REGISTRY_API_KEY")
         .trim()
         .min(1)
         .optional(),
@@ -136,9 +136,16 @@ const configSchema = z
         .describe("Unique identifier for the Flink compute pool, must start with 'lfcp-' prefix")
         .trim()
         .startsWith("lfcp-"),
+    FLINK_CATALOG_NAME: z
+        .string()
+        .describe("Name of the Flink catalog used as `sql.current-catalog` in submitted statements. Typically the Confluent Cloud environment's display name.")
+        .trim()
+        .min(1),
+    // TODO: Remove FLINK_ENV_NAME in v1.4.0 — kept as a deprecated alias of
+    // FLINK_CATALOG_NAME for one release cycle. See issue #209.
     FLINK_ENV_NAME: z
         .string()
-        .describe("Human-readable name for the Flink environment used for identification and display purposes")
+        .describe("DEPRECATED: rename to FLINK_CATALOG_NAME. Will be removed in v1.4.0. Same meaning — the Flink catalog name used as `sql.current-catalog`.")
         .trim()
         .min(1),
     FLINK_DATABASE_NAME: z
@@ -160,11 +167,15 @@ const configSchema = z
         .string()
         .describe("Base URL for Confluent Cloud's REST API services")
         .trim()
-        .url()
-        .default("https://api.confluent.cloud"),
+        .url(),
+    CONFLUENT_CLOUD_ORG_ID: z
+        .string()
+        .describe("Organization identifier within Confluent Cloud. Optional for tools that build CRNs; for example, connector logs can auto-resolve it via the Cloud API when omitted, but setting it avoids that extra lookup.")
+        .trim()
+        .min(1),
     SCHEMA_REGISTRY_ENDPOINT: z
         .string()
-        .describe("URL endpoint for accessing Schema Registry services to manage data schemas")
+        .describe("Base URL of the Schema Registry (Confluent Cloud or Confluent Platform)")
         .trim()
         .url(),
     KAFKA_REST_ENDPOINT: z
@@ -176,8 +187,7 @@ const configSchema = z
         .string()
         .describe("Base URL for Confluent Cloud Telemetry API (metrics)")
         .trim()
-        .url()
-        .default("https://api.telemetry.confluent.cloud"),
+        .url(),
     TELEMETRY_API_KEY: z
         .string()
         .describe("Optional API key for telemetry access with basic read permissions. Falls back to CONFLUENT_CLOUD_API_KEY if not set.")
@@ -188,41 +198,17 @@ const configSchema = z
         .describe("Optional API secret paired with TELEMETRY_API_KEY. Falls back to CONFLUENT_CLOUD_API_SECRET if not set.")
         .trim()
         .min(1),
+    TELEMETRY_WRITE_KEY: z
+        .string()
+        .describe("Developer-only override for the Segment write key used to emit anonymous usage analytics from this MCP server. Normal builds inject the right value at npm pack time; setting this is only useful when developing mcp-confluent against a non-production telemetry sink.")
+        .trim()
+        .min(1),
+    OAUTH_KAFKA_DEBUG: z
+        .string()
+        .describe("librdkafka `debug` contexts for the native Kafka client of an --oauth-synthesized connection. Common values: 'security,broker,protocol', 'all'. Useful when diagnosing a SASL/OAUTHBEARER handshake failure under OAuth. YAML configs supply this via the OAuth connection's kafka_debug field instead.")
+        .trim()
+        .min(1),
 })
     .partial();
 export const combinedSchema = envSchema.merge(configSchema);
-export const TELEMETRY_REQUIRED_ENV_VARS = [
-    // Configuring the telemetry client will first look for TELEMETRY_API_KEY/SECRET, then fall back to CONFLUENT_CLOUD_API_KEY/SECRET, so
-    // the only absolute required env vars for telemetry are the Confluent Cloud API key/secret.
-    // Likewise, TELEMETRY_ENDPOINT has a default value, so it's not strictly required either.
-    // The fallback behavior for the configuration of telemetry
-    // in DefaultClientManager indicates that the entire concept
-    // of BaseToolHandler.getRequiredEnvVars() is ill designed, and that tool enablement
-    // needs to be made more flexible, which should happen in conjunction with
-    // migrating configuration to primarily be YAML based, not env var based.
-    // For now, though, we describe the truly required env vars for telemetry as
-    // just the Confluent Cloud API key/secret, for better or worse.
-    "CONFLUENT_CLOUD_API_KEY",
-    "CONFLUENT_CLOUD_API_SECRET",
-];
-export const CCLOUD_CONTROL_PLANE_REQUIRED_ENV_VARS = [
-    "CONFLUENT_CLOUD_REST_ENDPOINT",
-    "CONFLUENT_CLOUD_API_KEY",
-    "CONFLUENT_CLOUD_API_SECRET",
-];
-export const CCLOUD_SCHEMA_REGISTRY_REQUIRED_ENV_VARS = [
-    "SCHEMA_REGISTRY_ENDPOINT",
-    "SCHEMA_REGISTRY_API_KEY",
-    "SCHEMA_REGISTRY_API_SECRET",
-];
-export const KAFKA_REST_REQUIRED_ENV_VARS = [
-    "KAFKA_REST_ENDPOINT",
-    "KAFKA_API_KEY",
-    "KAFKA_API_SECRET",
-];
-export const FLINK_REQUIRED_ENV_VARS = [
-    "FLINK_REST_ENDPOINT",
-    "FLINK_API_KEY",
-    "FLINK_API_SECRET",
-];
 //# sourceMappingURL=env-schema.js.map

package/dist/env-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-schema.js","sourceRoot":"","sources":["../src/env-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,gCAAgC,CAAC;SAC1C,OAAO,CAAC,IAAI,CAAC;IAChB,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,CACP,2EAA2E,CAC5E;SACA,OAAO,CAAC,WAAW,CAAC;IACvB,sBAAsB,EAAE,CAAC;SACtB,MAAM,EAAE;SACR,QAAQ,CAAC,qDAAqD,CAAC;SAC/D,OAAO,CAAC,MAAM,CAAC;IAClB,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,CACP,8EAA8E,CAC/E;SACA,OAAO,CAAC,MAAM,CAAC;IAClB,6BAA6B,EAAE,CAAC;SAC7B,MAAM,EAAE;SACR,QAAQ,CACP,0FAA0F,CAC3F;SACA,OAAO,CAAC,WAAW,CAAC;IACvB,SAAS,EAAE,CAAC;SACT,UAAU,CACT,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAC5D,CAAC,CAAC,IAAI,CACJ,MAAM,CAAC,IAAI,CAAC,SAAS,CAGpB,CACF,CACF;SACA,QAAQ,CACP,4EAA4E,CAC7E;SACA,OAAO,CAAC,MAAM,CAAC;IAClB,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CACP,oFAAoF,CACrF;SACA,IAAI,EAAE;SACN,GAAG,CAAC,EAAE,EAAE,qDAAqD,CAAC;SAC9D,QAAQ,EAAE;IACb,iBAAiB,EAAE,CAAC;SACjB,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,QAAQ,CACP,gGAAgG,CACjG;SACA,OAAO,CAAC,KAAK,CAAC;IACjB,YAAY,EAAE,CAAC;SACZ,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,QAAQ,CAAC,8BAA8B,CAAC;SACxC,OAAO,CAAC,KAAK,CAAC;IACjB,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,kFAAkF,CACnF;SACA,OAAO,CAAC,qBAAqB,CAAC;SAC9B,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACxE,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,gIAAgI,CACjI;SACA,IAAI,EAAE;SACN,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,CACP,qGAAqG,CACtG;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CACP,gGAAgG,CACjG;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,CACP,yHAAyH,CAC1H;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CACP,qGAAqG,CACtG;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,QAAQ,CACP,uHAAuH,CACxH;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,0BAA0B,EAAE,CAAC;SAC1B,MAAM,EAAE;SACR,QAAQ,CACP,iHAAiH,CAClH;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,QAAQ,CACP,+FAA+F,CAChG;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,0BAA0B,EAAE,CAAC;SAC1B,MAAM,EAAE;SACR,QAAQ,CACP,6FAA6F,CAC9F;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,uEAAuE,CACxE;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,QAAQ,CACP,iFAAiF,CAClF;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CACP,4EAA4E,CAC7E;SACA,IAAI,EAAE;SACN,UAAU,CAAC,MAAM,CAAC;IACrB,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CACP,8EAA8E,CAC/E;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,CACP,4GAA4G,CAC7G;SACA,IAAI,EAAE;SACN,GAAG,EAAE;IACR,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,CACP,8EAA8E,CAC/E;SACA,IAAI,EAAE;SACN,UAAU,CAAC,OAAO,CAAC;IACtB,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,CACP,4FAA4F,CAC7F;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,CACP,2FAA2F,CAC5F;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CACP,0EAA0E,CAC3E;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CACP,yEAAyE,CAC1E;SACA,IAAI,EAAE;SACN,UAAU,CAAC,MAAM,CAAC;IACrB,6BAA6B,EAAE,CAAC;SAC7B,MAAM,EAAE;SACR,QAAQ,CAAC,kDAAkD,CAAC;SAC5D,IAAI,EAAE;SACN,GAAG,EAAE;SACL,OAAO,CAAC,6BAA6B,CAAC;IACzC,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,QAAQ,CACP,4EAA4E,CAC7E;SACA,IAAI,EAAE;SACN,GAAG,EAAE;IACR,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,CACP,mEAAmE,CACpE;SACA,IAAI,EAAE;SACN,GAAG,EAAE;IACR,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,QAAQ,CAAC,sDAAsD,CAAC;SAChE,IAAI,EAAE;SACN,GAAG,EAAE;SACL,OAAO,CAAC,uCAAuC,CAAC;IACnD,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,sHAAsH,CACvH;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,QAAQ,CACP,yGAAyG,CAC1G;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,OAAO,EAAE,CAAC;AAEb,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAK5D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,sIAAsI;IACtI,4FAA4F;IAC5F,0FAA0F;IAE1F,2DAA2D;IAC3D,4DAA4D;IAC5D,oFAAoF;IACpF,0EAA0E;IAC1E,yEAAyE;IAEzE,4EAA4E;IAC5E,gEAAgE;IAEhE,yBAAyB;IACzB,4BAA4B;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,+BAA+B;IAC/B,yBAAyB;IACzB,4BAA4B;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,0BAA0B;IAC1B,yBAAyB;IACzB,4BAA4B;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,qBAAqB;IACrB,eAAe;IACf,kBAAkB;CACV,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,qBAAqB;IACrB,eAAe;IACf,kBAAkB;CACV,CAAC"}
+{"version":3,"file":"env-schema.js","sourceRoot":"","sources":["../src/env-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,gCAAgC,CAAC;SAC1C,OAAO,CAAC,IAAI,CAAC;IAChB,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,CACP,2EAA2E,CAC5E;SACA,OAAO,CAAC,WAAW,CAAC;IACvB,sBAAsB,EAAE,CAAC;SACtB,MAAM,EAAE;SACR,QAAQ,CAAC,qDAAqD,CAAC;SAC/D,OAAO,CAAC,MAAM,CAAC;IAClB,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,CACP,8EAA8E,CAC/E;SACA,OAAO,CAAC,MAAM,CAAC;IAClB,6BAA6B,EAAE,CAAC;SAC7B,MAAM,EAAE;SACR,QAAQ,CACP,0FAA0F,CAC3F;SACA,OAAO,CAAC,WAAW,CAAC;IACvB,SAAS,EAAE,CAAC;SACT,UAAU,CACT,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAC5D,CAAC,CAAC,IAAI,CACJ,MAAM,CAAC,IAAI,CAAC,SAAS,CAGpB,CACF,CACF;SACA,QAAQ,CACP,4EAA4E,CAC7E;SACA,OAAO,CAAC,MAAM,CAAC;IAClB,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,CACP,oFAAoF,CACrF;SACA,IAAI,EAAE;SACN,GAAG,CAAC,EAAE,EAAE,qDAAqD,CAAC;SAC9D,QAAQ,EAAE;IACb,iBAAiB,EAAE,CAAC;SACjB,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,QAAQ,CACP,gGAAgG,CACjG;SACA,OAAO,CAAC,KAAK,CAAC;IACjB,YAAY,EAAE,CAAC;SACZ,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,QAAQ,CAAC,8BAA8B,CAAC;SACxC,OAAO,CAAC,KAAK,CAAC;IACjB,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,kFAAkF,CACnF;SACA,OAAO,CAAC,qBAAqB,CAAC;SAC9B,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACxE,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,gIAAgI,CACjI;SACA,IAAI,EAAE;SACN,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,CACP,uHAAuH,CACxH;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CACP,yHAAyH,CAC1H;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,CACP,yHAAyH,CAC1H;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CACP,qGAAqG,CACtG;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,QAAQ,CACP,uHAAuH,CACxH;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,0BAA0B,EAAE,CAAC;SAC1B,MAAM,EAAE;SACR,QAAQ,CACP,iHAAiH,CAClH;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,QAAQ,CACP,4GAA4G,CAC7G;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,0BAA0B,EAAE,CAAC;SAC1B,MAAM,EAAE;SACR,QAAQ,CACP,mFAAmF,CACpF;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,uEAAuE,CACxE;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;IACb,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,QAAQ,CACP,iFAAiF,CAClF;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CACP,4EAA4E,CAC7E;SACA,IAAI,EAAE;SACN,UAAU,CAAC,MAAM,CAAC;IACrB,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CACP,8EAA8E,CAC/E;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,CACP,4GAA4G,CAC7G;SACA,IAAI,EAAE;SACN,GAAG,EAAE;IACR,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,CACP,8EAA8E,CAC/E;SACA,IAAI,EAAE;SACN,UAAU,CAAC,OAAO,CAAC;IACtB,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,QAAQ,CACP,4IAA4I,CAC7I;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,wEAAwE;IACxE,4DAA4D;IAC5D,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,QAAQ,CACP,2IAA2I,CAC5I;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,CACP,2FAA2F,CAC5F;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CACP,0EAA0E,CAC3E;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CACP,yEAAyE,CAC1E;SACA,IAAI,EAAE;SACN,UAAU,CAAC,MAAM,CAAC;IACrB,6BAA6B,EAAE,CAAC;SAC7B,MAAM,EAAE;SACR,QAAQ,CAAC,kDAAkD,CAAC;SAC5D,IAAI,EAAE;SACN,GAAG,EAAE;IACR,sBAAsB,EAAE,CAAC;SACtB,MAAM,EAAE;SACR,QAAQ,CACP,8MAA8M,CAC/M;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,QAAQ,CACP,yEAAyE,CAC1E;SACA,IAAI,EAAE;SACN,GAAG,EAAE;IACR,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,CACP,mEAAmE,CACpE;SACA,IAAI,EAAE;SACN,GAAG,EAAE;IACR,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,QAAQ,CAAC,sDAAsD,CAAC;SAChE,IAAI,EAAE;SACN,GAAG,EAAE;IACR,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,sHAAsH,CACvH;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,QAAQ,CACP,yGAAyG,CAC1G;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,mBAAmB,EAAE,CAAC;SACnB,MAAM,EAAE;SACR,QAAQ,CACP,0QAA0Q,CAC3Q;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;IACT,iBAAiB,EAAE,CAAC;SACjB,MAAM,EAAE;SACR,QAAQ,CACP,ySAAyS,CAC1S;SACA,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC;CACV,CAAC;KACD,OAAO,EAAE,CAAC;AAEb,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC"}

package/dist/env.d.ts

@@ -2,15 +2,22 @@ import { combinedSchema } from "./env-schema.js";
 import { z } from "zod";
 export type Environment = z.infer<typeof combinedSchema>;
 /**
- * Loads and validates environment variables
- * @returns Validated environment object
+ * Initialize environment and save the values
  */
-export declare function loadEnv(): Promise<Environment>;
+export declare function initEnv(): Environment;
 /**
- * Initialize environment and save the values
+ * Lazy proxy over the validated environment values. Reading any property
+ * before {@linkcode initEnv} has run throws — this is what catches code that
+ * tries to consult the env outside the bootstrap.
+ *
+ * The default-export shape was retired in #234 to make accidental consumers
+ * visibly fail at the import site, and an ESLint rule slams the door behind
+ * it. The intended pattern is: `main()` calls `initEnv()` once, captures the
+ * returned `Environment` into a local, and passes it explicitly to the few
+ * call sites that need it. No global env consultation lives in handler code,
+ * test infrastructure, or anywhere else.
  */
-export declare function initEnv(): Promise<Environment>;
-declare const env: {
+export declare const env: {
     HTTP_PORT: number;
     HTTP_HOST: string;
     HTTP_MCP_ENDPOINT_PATH: string;
@@ -36,16 +43,19 @@ declare const env: {
     FLINK_ORG_ID?: string | undefined;
     FLINK_REST_ENDPOINT?: string | undefined;
     FLINK_COMPUTE_POOL_ID?: string | undefined;
+    FLINK_CATALOG_NAME?: string | undefined;
     FLINK_ENV_NAME?: string | undefined;
     FLINK_DATABASE_NAME?: string | undefined;
     KAFKA_CLUSTER_ID?: string | undefined;
     KAFKA_ENV_ID?: string | undefined;
     CONFLUENT_CLOUD_REST_ENDPOINT?: string | undefined;
+    CONFLUENT_CLOUD_ORG_ID?: string | undefined;
     SCHEMA_REGISTRY_ENDPOINT?: string | undefined;
     KAFKA_REST_ENDPOINT?: string | undefined;
     TELEMETRY_ENDPOINT?: string | undefined;
     TELEMETRY_API_KEY?: string | undefined;
     TELEMETRY_API_SECRET?: string | undefined;
+    TELEMETRY_WRITE_KEY?: string | undefined;
+    OAUTH_KAFKA_DEBUG?: string | undefined;
 };
-export default env;
 //# sourceMappingURL=env.d.ts.map

package/dist/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAMzD;;;GAGG;AACH,wBAAsB,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAQpD;AAED;;GAEG;AACH,wBAAsB,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC,CAMpD;AAGD,QAAA,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CASP,CAAC;AAEH,eAAe,GAAG,CAAC"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAoBzD;;GAEG;AACH,wBAAgB,OAAO,IAAI,WAAW,CAMrC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CASd,CAAC"}

package/dist/env.js

@@ -7,7 +7,7 @@ let envValues = {};
  * Loads and validates environment variables
  * @returns Validated environment object
  */
-export async function loadEnv() {
+function loadEnv() {
     try {
         // Load and validate environment variables with automatic type conversion
         return combinedSchema.parse(process.env);
@@ -20,15 +20,26 @@ export async function loadEnv() {
 /**
  * Initialize environment and save the values
  */
-export async function initEnv() {
+export function initEnv() {
     if (!isInitialized) {
-        envValues = await loadEnv();
+        envValues = loadEnv();
         isInitialized = true;
     }
     return envValues;
 }
-// Create a module to provide access to environment variables
-const env = new Proxy({}, {
+/**
+ * Lazy proxy over the validated environment values. Reading any property
+ * before {@linkcode initEnv} has run throws — this is what catches code that
+ * tries to consult the env outside the bootstrap.
+ *
+ * The default-export shape was retired in #234 to make accidental consumers
+ * visibly fail at the import site, and an ESLint rule slams the door behind
+ * it. The intended pattern is: `main()` calls `initEnv()` once, captures the
+ * returned `Environment` into a local, and passes it explicitly to the few
+ * call sites that need it. No global env consultation lives in handler code,
+ * test infrastructure, or anywhere else.
+ */
+export const env = new Proxy({}, {
     get: (_, property) => {
         if (!isInitialized) {
             throw new Error(`Environment not initialized. Attempted to access ${property} before initialization.`);
@@ -36,5 +47,4 @@ const env = new Proxy({}, {
         return envValues[property];
     },
 });
-export default env;
 //# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAKxC,sCAAsC;AACtC,IAAI,aAAa,GAAG,KAAK,CAAC;AAC1B,IAAI,SAAS,GAAgB,EAAiB,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,IAAI,CAAC;QACH,yEAAyE;QACzE,OAAO,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,SAAS,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6DAA6D;AAC7D,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,EAAiB,EAAE;IACvC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAgB,EAAE,EAAE;QAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,oDAAoD,QAAQ,yBAAyB,CACtF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,QAA6B,CAAC,CAAC;IAClD,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,GAAG,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAKxC,sCAAsC;AACtC,IAAI,aAAa,GAAG,KAAK,CAAC;AAC1B,IAAI,SAAS,GAAgB,EAAiB,CAAC;AAE/C;;;GAGG;AACH,SAAS,OAAO;IACd,IAAI,CAAC;QACH,yEAAyE;QACzE,OAAO,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO;IACrB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,SAAS,GAAG,OAAO,EAAE,CAAC;QACtB,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,EAAiB,EAAE;IAC9C,GAAG,EAAE,CAAC,CAAC,EAAE,QAAgB,EAAE,EAAE;QAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,oDAAoD,QAAQ,yBAAyB,CACtF,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,QAA6B,CAAC,CAAC;IAClD,CAAC;CACF,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,76 @@
 #!/usr/bin/env node
-export {};
+import { CLIOptions } from "./cli.js";
+import { MCPServerConfiguration } from "./config/index.js";
+import { ToolHandler } from "./confluent/tools/base-tools.js";
+import { ToolName } from "./confluent/tools/tool-name.js";
+import { ServerRuntime } from "./server-runtime.js";
+/**
+ * Determine the subset of ToolHandlers to register based on the filtered tool names
+ * and which connections satisfy each tool's service requirements.
+ **/
+export declare function getToolHandlersToRegister(filteredToolNames: ToolName[], runtime: ServerRuntime): Map<ToolName, ToolHandler>;
+/**
+ * Resolve the Segment write key handed to `TelemetryService.initialize`.
+ *
+ * Precedence: an explicit YAML `server.analytics.write_key` wins; otherwise
+ * fall back to `buildConfig.TELEMETRY_WRITE_KEY` (the value `npm pack` injects
+ * at release time). On unpacked / dev builds the build-time value is empty,
+ * so an absent YAML field produces an empty-string fallback that
+ * `TelemetryService` treats as "no key supplied" — analytics stays off.
+ *
+ * Extracted from `main()` so the precedence is unit-testable without booting
+ * the full server.
+ */
+export declare function resolveTelemetryWriteKey(mcpConfig: MCPServerConfiguration): string | undefined;
+export declare function outputApiKey(): void;
+/**
+ * Bootstrap a starter `config.yaml` in the current working directory by
+ * copying one of the bundled example templates, then ensure the new file
+ * is listed in `<cwd>/.gitignore` so credentials filled in later don't
+ * slip into git.
+ *
+ * Resolved relative to `import.meta.url` (the compiled `dist/index.js`)
+ * so this keeps working when invoked via `npx`, where `process.cwd()`
+ * is the user's project but the example file lives next to the install.
+ *
+ * Refuses to overwrite an existing destination so an accidental rerun
+ * cannot wipe credentials the user already filled in. The write uses
+ * `wx` (exclusive create) so the existence check and the create happen
+ * as a single syscall — there is no TOCTOU window where another process
+ * could create the file between a precheck and the write.
+ *
+ * @param oauth When true, copy `config.oauth.example.yaml` (the minimal
+ *   OAuth template); when false, copy `config.example.yaml` (the
+ *   fully-annotated direct/api-key template). The CLI flag in the EEXIST
+ *   error message is selected to match.
+ */
+export declare function outputInitConfig(oauth?: boolean): void;
+export declare function outputToolList(filteredToolNames: ToolName[]): void;
+/**
+ * Result of {@link handleEarlyExits}. Returning a value instead of calling
+ * `process.exit` directly keeps the function pure enough that tests can
+ * assert dispatch behavior by inspecting the result + per-output spies,
+ * without having to stub `process.exit`.
+ */
+export type EarlyExitResult = {
+    handled: false;
+} | {
+    handled: true;
+    exitCode: 0;
+} | {
+    handled: true;
+    exitCode: 1;
+    stderr: string;
+};
+/**
+ * Dispatch the CLI's mutually-exclusive early-exit modes — generate-key,
+ * init-config, init-oauth-config, and list-tools — before the server
+ * bootstrap begins. Returns `{ handled: false }` when none apply, in
+ * which case the caller continues with normal startup.
+ *
+ * On init-config failure, the friendly error message is returned in
+ * `stderr` rather than written here, so the caller controls writing to
+ * stderr and exiting.
+ */
+export declare function handleEarlyExits(cliOptions: CLIOptions): EarlyExitResult;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EACL,UAAU,EAMX,MAAM,aAAa,CAAC;AACrB,OAAO,EAGL,sBAAsB,EACvB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAgB,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAM7D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD;;;IAGI;AACJ,wBAAgB,yBAAyB,CACvC,iBAAiB,EAAE,QAAQ,EAAE,EAC7B,OAAO,EAAE,aAAa,GACrB,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAiD5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,sBAAsB,GAChC,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,YAAY,IAAI,IAAI,CAQnC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,GAAE,OAAe,GAAG,IAAI,CAgC7D;AAkCD,wBAAgB,cAAc,CAAC,iBAAiB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAuClE;AAED;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,CAAC,CAAA;CAAE,GAC9B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,GAAG,eAAe,CAqBxE"}