@confluentinc/mcp-confluent 1.2.2 → 1.4.0

package/dist/config/env-config.js

@@ -0,0 +1,478 @@
+import { formatZodIssues, KAFKA_PROTECTED_EXTRA_PROPERTY_KEYS, mcpConfigSchema, MCPServerConfiguration, } from "../config/models.js";
+import { logger } from "../logger.js";
+/**
+ * Connection name synthesized by the env-var path. Chosen as `"_default"` so
+ * the YAML loader can reuse the same name as the zero-config fallback.
+ *
+ * Fallback contract: with no CLI args and no env vars, this module produces
+ * `connections: { _default: { type: "direct" } }` alongside the
+ * always-present `server` block. This yields a config with no service
+ * blocks, so only connection-agnostic tools are enabled. When the env-var
+ * path is retired, the YAML loader must preserve this connection shape.
+ */
+export const DEFAULT_CONNECTION_NAME = "_default";
+/** The manufactured document path prefix for the single connection configured from env vars. */
+const CONN = `connections.${DEFAULT_CONNECTION_NAME}`;
+/**
+ * Maps each environment variable in type Environment (and handled by buildConfigFromEnvAndCli)
+ * to its corresponding Zod document path in the manufactured MCPServerConfiguration.
+ */
+const ENV_VAR_TO_ZPATH = {
+    // Kafka connection parameters
+    BOOTSTRAP_SERVERS: `${CONN}.kafka.bootstrap_servers`,
+    KAFKA_API_KEY: `${CONN}.kafka.auth.key`,
+    KAFKA_API_SECRET: `${CONN}.kafka.auth.secret`,
+    KAFKA_REST_ENDPOINT: `${CONN}.kafka.rest_endpoint`,
+    KAFKA_CLUSTER_ID: `${CONN}.kafka.cluster_id`,
+    KAFKA_ENV_ID: `${CONN}.kafka.env_id`,
+    // Schema Registry connection parameters
+    SCHEMA_REGISTRY_ENDPOINT: `${CONN}.schema_registry.endpoint`,
+    SCHEMA_REGISTRY_API_KEY: `${CONN}.schema_registry.auth.key`,
+    SCHEMA_REGISTRY_API_SECRET: `${CONN}.schema_registry.auth.secret`,
+    // Confluent Cloud control plane parameters
+    CONFLUENT_CLOUD_REST_ENDPOINT: `${CONN}.confluent_cloud.endpoint`,
+    CONFLUENT_CLOUD_API_KEY: `${CONN}.confluent_cloud.auth.key`,
+    CONFLUENT_CLOUD_API_SECRET: `${CONN}.confluent_cloud.auth.secret`,
+    CONFLUENT_CLOUD_ORG_ID: `${CONN}.confluent_cloud.organization_id`,
+    // Tableflow parameters
+    TABLEFLOW_API_KEY: `${CONN}.tableflow.auth.key`,
+    TABLEFLOW_API_SECRET: `${CONN}.tableflow.auth.secret`,
+    // Flink parameters
+    FLINK_REST_ENDPOINT: `${CONN}.flink.endpoint`,
+    FLINK_API_KEY: `${CONN}.flink.auth.key`,
+    FLINK_API_SECRET: `${CONN}.flink.auth.secret`,
+    FLINK_ENV_ID: `${CONN}.flink.environment_id`,
+    FLINK_ORG_ID: `${CONN}.flink.organization_id`,
+    FLINK_COMPUTE_POOL_ID: `${CONN}.flink.compute_pool_id`,
+    // FLINK_CATALOG_NAME comes before FLINK_ENV_NAME so error-message humanization
+    // (which iterates this map in insertion order) surfaces the preferred name.
+    FLINK_CATALOG_NAME: `${CONN}.flink.catalog_name`,
+    FLINK_ENV_NAME: `${CONN}.flink.catalog_name`,
+    FLINK_DATABASE_NAME: `${CONN}.flink.database_name`,
+    // Telemetry parameters
+    TELEMETRY_ENDPOINT: `${CONN}.telemetry.endpoint`,
+    TELEMETRY_API_KEY: `${CONN}.telemetry.auth.key`,
+    TELEMETRY_API_SECRET: `${CONN}.telemetry.auth.secret`,
+    // Analytics (internal-dev-only: Segment write key override)
+    TELEMETRY_WRITE_KEY: "server.analytics.write_key",
+    // OAuth diagnostic knob — only meaningful when --oauth is also set, in which
+    // case buildConfigFromEnv synthesizes the OAuth connection arm that carries it.
+    OAUTH_KAFKA_DEBUG: `${CONN}.kafka_debug`,
+    // Server configuration
+    LOG_LEVEL: "server.log_level",
+    HTTP_PORT: "server.http.port",
+    HTTP_HOST: "server.http.host",
+    HTTP_MCP_ENDPOINT_PATH: "server.http.mcp_endpoint",
+    SSE_MCP_ENDPOINT_PATH: "server.http.sse_endpoint",
+    SSE_MCP_MESSAGE_ENDPOINT_PATH: "server.http.sse_message_endpoint",
+    MCP_API_KEY: "server.auth.api_key",
+    MCP_AUTH_DISABLED: "server.auth.disabled",
+    MCP_ALLOWED_HOSTS: "server.auth.allowed_hosts",
+    DO_NOT_TRACK: "server.do_not_track",
+};
+/**
+ * Constructs a single-direct-connection MCPServerConfiguration from environment variables.
+ *
+ * This is peer to the functionality provided by loadConfigFromYaml(), but for users
+ * who want to configure the server solely via (legacy) environment variables. Called when
+ * no YAML config file is provided via CLI args.
+ *
+ * @returns MCPServerConfiguration with a single connection constructed from an Environment object
+ * @throws Error if required environment variables are missing or if validation fails
+ */
+function buildConfigFromEnv(env, authOverrides = {}, kafkaConfig, oauth) {
+    // OAuth path: synthesize a single OAuth-typed connection. No surface blocks,
+    // no auth fields. ccloud_env defaults to "prod" via the schema.
+    if (oauth) {
+        const rawDocument = {
+            connections: {
+                [DEFAULT_CONNECTION_NAME]: {
+                    type: "oauth",
+                    ...(oauth.ccloudEnv && {
+                        ccloud_env: oauth.ccloudEnv,
+                    }),
+                    ...(env.OAUTH_KAFKA_DEBUG !== undefined && {
+                        kafka_debug: env.OAUTH_KAFKA_DEBUG,
+                    }),
+                },
+            },
+            ...buildServerBlock(env, authOverrides),
+        };
+        const result = mcpConfigSchema.safeParse(rawDocument);
+        if (!result.success) {
+            // Server-config validation can still fail on the OAuth path
+            // (e.g., MCP_API_KEY length / disabled+api_key conflict). Run the
+            // env-var humanizer so users see env-var names, not schema paths.
+            const formattedIssues = humanizeEnvConfigPaths(formatZodIssues(result.error.issues));
+            throw new Error(`Failed to construct OAuth MCPServerConfiguration from environment variables:\n${formattedIssues}`);
+        }
+        return new MCPServerConfiguration(result.data);
+    }
+    const connection = { type: "direct" };
+    // Each connection builder returns { <blockKey>: { ...fields } } or null — the key is owned
+    // by the builder, not the caller. See builder docstrings for the env vars each handles.
+    const connectionBuilders = [
+        buildKafkaBlock,
+        buildSchemaRegistryBlock,
+        buildConfluentCloudBlock,
+        buildTableflowBlock,
+        buildTelemetryBlock,
+        buildFlinkBlock,
+    ];
+    for (const build of connectionBuilders) {
+        const result = build(env);
+        if (result)
+            Object.assign(connection, result);
+    }
+    if (kafkaConfig) {
+        connection.kafka = mergeKafkaConfigIntoRawBlock(connection.kafka, kafkaConfig);
+    }
+    // Build root document with both the connection and the server block.
+    // authOverrides are folded in here so Zod validates the final combined state,
+    // including the disabled+api_key mutual exclusion refine.
+    const rawDocument = {
+        connections: { [DEFAULT_CONNECTION_NAME]: connection },
+        ...buildServerBlock(env, authOverrides),
+    };
+    // Validate the manufactured config object against the schema, as if it were loaded from a YAML file.
+    //
+    // (We do this inline here so that we can reverse project any validation errors back into the
+    // env var space in the catch block, which we would not be able to do if we deferred validation
+    // to a single codepath shared with YAML-loaded configs.)
+    const result = mcpConfigSchema.safeParse(rawDocument);
+    if (!result.success) {
+        const formattedIssues = humanizeEnvConfigPaths(formatZodIssues(result.error.issues));
+        throw new Error(`Failed to construct MCPServerConfiguration from environment variables:\n${formattedIssues}`);
+    }
+    return new MCPServerConfiguration(result.data);
+}
+/**
+ * Constructs a fully-resolved MCPServerConfiguration from environment variables and optional
+ * CLI flag overrides. Extends {@link buildConfigFromEnv} by folding in the three CLI flags that
+ * are only valid on the env-var path (`--disable-auth`, `--allowed-hosts`, `--kafka-config-file`),
+ * so that the returned config needs no further patching by the caller.
+ *
+ * @param env - Environment variables (same contract as {@link buildConfigFromEnv})
+ * @param overrides - CLI flag values to merge on top of the env-var-derived config
+ */
+export function buildConfigFromEnvAndCli(env, overrides = {}) {
+    return buildConfigFromEnv(env, {
+        disableAuth: overrides.disableAuth,
+        allowedHosts: overrides.allowedHosts,
+    }, overrides.kafkaConfig, overrides.oauth ? { ccloudEnv: overrides.ccloudEnv } : undefined);
+}
+/**
+ * Builds the `kafka` connection block from env vars. Triggered when any Kafka-related
+ * env var is set. All fields are optional; at least one connectivity field
+ * (bootstrap_servers, rest_endpoint, cluster_id, or env_id) is required by the schema.
+ *
+ * Equivalent YAML:
+ *
+ * kafka:
+ *   bootstrap_servers: "${BOOTSTRAP_SERVERS}"
+ *   rest_endpoint: "${KAFKA_REST_ENDPOINT}"
+ *   cluster_id: "${KAFKA_CLUSTER_ID}"
+ *   env_id: "${KAFKA_ENV_ID}"
+ *   auth:
+ *     type: api_key
+ *     key: "${KAFKA_API_KEY}"
+ *     secret: "${KAFKA_API_SECRET}"
+ */
+function buildKafkaBlock(env) {
+    if (!env.BOOTSTRAP_SERVERS &&
+        !env.KAFKA_API_KEY &&
+        !env.KAFKA_API_SECRET &&
+        !env.KAFKA_REST_ENDPOINT &&
+        !env.KAFKA_CLUSTER_ID &&
+        !env.KAFKA_ENV_ID)
+        return null;
+    return {
+        kafka: {
+            ...(env.BOOTSTRAP_SERVERS && {
+                bootstrap_servers: env.BOOTSTRAP_SERVERS,
+            }),
+            ...apiKeyAuth(env.KAFKA_API_KEY, env.KAFKA_API_SECRET),
+            ...(env.KAFKA_REST_ENDPOINT && {
+                rest_endpoint: env.KAFKA_REST_ENDPOINT,
+            }),
+            ...(env.KAFKA_CLUSTER_ID && { cluster_id: env.KAFKA_CLUSTER_ID }),
+            ...(env.KAFKA_ENV_ID && { env_id: env.KAFKA_ENV_ID }),
+        },
+    };
+}
+/**
+ * Builds the `schema_registry` connection block from env vars. Triggered when any
+ * Schema Registry env var is set.
+ *
+ * Equivalent YAML:
+ *
+ * schema_registry:
+ *   endpoint: "${SCHEMA_REGISTRY_ENDPOINT}"
+ *   auth:
+ *     type: api_key
+ *     key: "${SCHEMA_REGISTRY_API_KEY}"
+ *     secret: "${SCHEMA_REGISTRY_API_SECRET}"
+ *
+ * Returns a looser object than SchemaRegistryDirectConfig so that Zod will be able
+ * to make the complaint that endpoint is required if only the auth var(s) are set.
+ */
+function buildSchemaRegistryBlock(env) {
+    if (!env.SCHEMA_REGISTRY_ENDPOINT &&
+        !env.SCHEMA_REGISTRY_API_KEY &&
+        !env.SCHEMA_REGISTRY_API_SECRET)
+        return null;
+    return {
+        schema_registry: {
+            ...(env.SCHEMA_REGISTRY_ENDPOINT && {
+                endpoint: env.SCHEMA_REGISTRY_ENDPOINT,
+            }),
+            ...apiKeyAuth(env.SCHEMA_REGISTRY_API_KEY, env.SCHEMA_REGISTRY_API_SECRET),
+        },
+    };
+}
+/**
+ * Builds the `confluent_cloud` connection block from env vars. Triggered when at least
+ * one of CONFLUENT_CLOUD_API_KEY or CONFLUENT_CLOUD_API_SECRET is set. CONFLUENT_CLOUD_REST_ENDPOINT
+ * alone is not sufficient — an endpoint without credentials is ignored.
+ *
+ * Equivalent YAML:
+ *
+ * confluent_cloud:
+ *   endpoint: "${CONFLUENT_CLOUD_REST_ENDPOINT}"
+ *   organization_id: "${CONFLUENT_CLOUD_ORG_ID}"
+ *   auth:
+ *     type: api_key
+ *     key: "${CONFLUENT_CLOUD_API_KEY}"
+ *     secret: "${CONFLUENT_CLOUD_API_SECRET}"
+ */
+function buildConfluentCloudBlock(env) {
+    if (!env.CONFLUENT_CLOUD_API_KEY && !env.CONFLUENT_CLOUD_API_SECRET)
+        return null;
+    return {
+        confluent_cloud: {
+            ...(env.CONFLUENT_CLOUD_REST_ENDPOINT && {
+                endpoint: env.CONFLUENT_CLOUD_REST_ENDPOINT,
+            }),
+            ...(env.CONFLUENT_CLOUD_ORG_ID && {
+                organization_id: env.CONFLUENT_CLOUD_ORG_ID,
+            }),
+            ...apiKeyAuth(env.CONFLUENT_CLOUD_API_KEY, env.CONFLUENT_CLOUD_API_SECRET),
+        },
+    };
+}
+/**
+ * Builds the `tableflow` connection block from env vars. Triggered when either
+ * Tableflow credential env var is set.
+ *
+ * Equivalent YAML:
+ *
+ * tableflow:
+ *   auth:
+ *     type: api_key
+ *     key: "${TABLEFLOW_API_KEY}"
+ *     secret: "${TABLEFLOW_API_SECRET}"
+ */
+function buildTableflowBlock(env) {
+    if (!env.TABLEFLOW_API_KEY && !env.TABLEFLOW_API_SECRET)
+        return null;
+    return {
+        tableflow: apiKeyAuth(env.TABLEFLOW_API_KEY, env.TABLEFLOW_API_SECRET),
+    };
+}
+/**
+ * Builds the `telemetry` connection block from env vars. Triggered when any telemetry
+ * env var is set.
+ *
+ * Equivalent YAML:
+ *
+ * telemetry:
+ *   endpoint: "${TELEMETRY_ENDPOINT}"
+ *   auth:
+ *     type: api_key
+ *     key: "${TELEMETRY_API_KEY}"
+ *     secret: "${TELEMETRY_API_SECRET}"
+ */
+function buildTelemetryBlock(env) {
+    if (!env.TELEMETRY_ENDPOINT &&
+        !env.TELEMETRY_API_KEY &&
+        !env.TELEMETRY_API_SECRET)
+        return null;
+    return {
+        telemetry: {
+            ...(env.TELEMETRY_ENDPOINT && { endpoint: env.TELEMETRY_ENDPOINT }),
+            ...apiKeyAuth(env.TELEMETRY_API_KEY, env.TELEMETRY_API_SECRET),
+        },
+    };
+}
+/**
+ * Builds the `flink` connection block from env vars. Triggered when any Flink env var
+ * is set. Returns a looser object than FlinkDirectConfig so that Zod will be able
+ * to make the complaint that endpoint, auth, environment_id, organization_id, and
+ * compute_pool_id are required if only some fields are set.
+ *
+ * Equivalent YAML:
+ *
+ * flink:
+ *   endpoint: "${FLINK_REST_ENDPOINT}"
+ *   environment_id: "${FLINK_ENV_ID}"
+ *   organization_id: "${FLINK_ORG_ID}"
+ *   compute_pool_id: "${FLINK_COMPUTE_POOL_ID}"
+ *   catalog_name: "${FLINK_CATALOG_NAME}"
+ *   database_name: "${FLINK_DATABASE_NAME}"
+ *   auth:
+ *     type: api_key
+ *     key: "${FLINK_API_KEY}"
+ *     secret: "${FLINK_API_SECRET}"
+ */
+function buildFlinkBlock(env) {
+    if (!env.FLINK_REST_ENDPOINT &&
+        !env.FLINK_API_KEY &&
+        !env.FLINK_API_SECRET &&
+        !env.FLINK_ENV_ID &&
+        !env.FLINK_ORG_ID &&
+        !env.FLINK_COMPUTE_POOL_ID &&
+        !env.FLINK_CATALOG_NAME &&
+        !env.FLINK_ENV_NAME &&
+        !env.FLINK_DATABASE_NAME)
+        return null;
+    const catalogName = resolveFlinkCatalogName(env);
+    return {
+        flink: {
+            ...(env.FLINK_REST_ENDPOINT && { endpoint: env.FLINK_REST_ENDPOINT }),
+            ...apiKeyAuth(env.FLINK_API_KEY, env.FLINK_API_SECRET),
+            ...(env.FLINK_ENV_ID && { environment_id: env.FLINK_ENV_ID }),
+            ...(env.FLINK_ORG_ID && { organization_id: env.FLINK_ORG_ID }),
+            ...(env.FLINK_COMPUTE_POOL_ID && {
+                compute_pool_id: env.FLINK_COMPUTE_POOL_ID,
+            }),
+            ...(catalogName && { catalog_name: catalogName }),
+            ...(env.FLINK_DATABASE_NAME && {
+                database_name: env.FLINK_DATABASE_NAME,
+            }),
+        },
+    };
+}
+/**
+ * Resolves the Flink catalog name from env vars, accepting either the preferred
+ * `FLINK_CATALOG_NAME` or the deprecated `FLINK_ENV_NAME`. Throws when both are
+ * set (unambiguous conflict — user must remove the legacy one). Emits a single
+ * `logger.warn` when only the legacy var is set so the deprecation lands in
+ * server logs at startup.
+ *
+ * TODO: Remove FLINK_ENV_NAME support in v1.4.0. See issue #209.
+ */
+function resolveFlinkCatalogName(env) {
+    if (env.FLINK_CATALOG_NAME && env.FLINK_ENV_NAME) {
+        throw new Error("Both FLINK_CATALOG_NAME and the deprecated FLINK_ENV_NAME are set; remove FLINK_ENV_NAME.");
+    }
+    if (env.FLINK_CATALOG_NAME)
+        return env.FLINK_CATALOG_NAME;
+    if (env.FLINK_ENV_NAME) {
+        logger.warn("FLINK_ENV_NAME is deprecated and will be removed in v1.4.0; rename to FLINK_CATALOG_NAME.");
+        return env.FLINK_ENV_NAME;
+    }
+    return undefined;
+}
+/**
+ * Builds the root-level `server` block from env vars. Always returns a block —
+ * all fields have defaults in envSchema so they are always present after initEnv().
+ *
+ * Equivalent YAML:
+ *
+ * server:
+ *   log_level: "${LOG_LEVEL}"
+ *   http:
+ *     port: ${HTTP_PORT}
+ *     host: "${HTTP_HOST}"
+ *     mcp_endpoint: "${HTTP_MCP_ENDPOINT_PATH}"
+ *     sse_endpoint: "${SSE_MCP_ENDPOINT_PATH}"
+ *     sse_message_endpoint: "${SSE_MCP_MESSAGE_ENDPOINT_PATH}"
+ *   do_not_track: ${DO_NOT_TRACK}
+ *   auth:
+ *     api_key: "${MCP_API_KEY}"       # omitted when not set
+ *     disabled: ${MCP_AUTH_DISABLED}
+ *     allowed_hosts: ${MCP_ALLOWED_HOSTS}
+ */
+function buildServerBlock(env, authOverrides = {}) {
+    return {
+        server: {
+            log_level: env.LOG_LEVEL,
+            do_not_track: env.DO_NOT_TRACK,
+            http: {
+                port: env.HTTP_PORT,
+                host: env.HTTP_HOST,
+                mcp_endpoint: env.HTTP_MCP_ENDPOINT_PATH,
+                sse_endpoint: env.SSE_MCP_ENDPOINT_PATH,
+                sse_message_endpoint: env.SSE_MCP_MESSAGE_ENDPOINT_PATH,
+            },
+            auth: {
+                ...(env.MCP_API_KEY !== undefined && { api_key: env.MCP_API_KEY }),
+                disabled: authOverrides.disableAuth ?? env.MCP_AUTH_DISABLED,
+                allowed_hosts: authOverrides.allowedHosts ?? env.MCP_ALLOWED_HOSTS,
+            },
+            ...(env.TELEMETRY_WRITE_KEY !== undefined && {
+                analytics: { write_key: env.TELEMETRY_WRITE_KEY },
+            }),
+        },
+    };
+}
+/** Returns an `{ auth: ... }` spread object when either credential is present, empty object otherwise. */
+function apiKeyAuth(key, secret) {
+    if (!key && !secret)
+        return {};
+    // Non-null assertions: Zod validates that both are actually present and non-empty.
+    return { auth: { type: "api_key", key: key, secret: secret } };
+}
+/**
+ * Replaces Zod document path segments in a formatted error string with their
+ * corresponding environment variable names, translating schema-space errors
+ * back into the env-var space the user configured.
+ */
+function humanizeEnvConfigPaths(message) {
+    return Object.entries(ENV_VAR_TO_ZPATH).reduce((msg, [envVar, zodPath]) => msg.replaceAll(zodPath, envVar), message);
+}
+/**
+ * Merges `-k` / `--kafka-config-file` properties into the raw (pre-Zod) kafka block so
+ * that all config is consolidated before MCPServerConfiguration is constructed.
+ *
+ * Protected keys (`bootstrap.servers`, `sasl.username`, `sasl.password`) are promoted
+ * into their corresponding named fields, overriding any env-var-derived values already
+ * present. All other keys go into `extra_properties`. Creates a kafka block if none
+ * exists, provided `bootstrap.servers` is supplied.
+ */
+function mergeKafkaConfigIntoRawBlock(kafka, props) {
+    for (const key of KAFKA_PROTECTED_EXTRA_PROPERTY_KEYS) {
+        if (Object.hasOwn(props, key) && props[key] === "") {
+            throw new Error(`--kafka-config-file: ${key} is present but empty — provide a non-empty value or omit the key`);
+        }
+    }
+    if (!kafka) {
+        if (!Object.hasOwn(props, "bootstrap.servers")) {
+            throw new Error("--kafka-config-file: no kafka block is configured and props do not include bootstrap.servers — cannot establish a Kafka connection");
+        }
+        kafka = {};
+    }
+    const hasSaslUser = Object.hasOwn(props, "sasl.username");
+    const hasSaslPass = Object.hasOwn(props, "sasl.password");
+    if (hasSaslUser !== hasSaslPass) {
+        throw new Error("--kafka-config-file: sasl.username and sasl.password must both be present or both be absent");
+    }
+    const protectedSet = new Set(KAFKA_PROTECTED_EXTRA_PROPERTY_KEYS);
+    const result = { ...kafka };
+    if (Object.hasOwn(props, "bootstrap.servers")) {
+        result.bootstrap_servers = props["bootstrap.servers"];
+    }
+    if (hasSaslUser && hasSaslPass) {
+        result.auth = {
+            type: "api_key",
+            key: props["sasl.username"],
+            secret: props["sasl.password"],
+        };
+    }
+    const remaining = Object.fromEntries(Object.entries(props).filter(([k]) => !protectedSet.has(k)));
+    if (Object.keys(remaining).length > 0) {
+        result.extra_properties = remaining;
+    }
+    return result;
+}
+//# sourceMappingURL=env-config.js.map

package/dist/config/env-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-config.js","sourceRoot":"","sources":["../../src/config/env-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,eAAe,EACf,mCAAmC,EACnC,eAAe,EACf,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGxC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAElD,gGAAgG;AAChG,MAAM,IAAI,GAAG,eAAe,uBAAuB,EAAE,CAAC;AAEtD;;;GAGG;AACH,MAAM,gBAAgB,GAAG;IACvB,8BAA8B;IAC9B,iBAAiB,EAAE,GAAG,IAAI,0BAA0B;IACpD,aAAa,EAAE,GAAG,IAAI,iBAAiB;IACvC,gBAAgB,EAAE,GAAG,IAAI,oBAAoB;IAC7C,mBAAmB,EAAE,GAAG,IAAI,sBAAsB;IAClD,gBAAgB,EAAE,GAAG,IAAI,mBAAmB;IAC5C,YAAY,EAAE,GAAG,IAAI,eAAe;IACpC,wCAAwC;IACxC,wBAAwB,EAAE,GAAG,IAAI,2BAA2B;IAC5D,uBAAuB,EAAE,GAAG,IAAI,2BAA2B;IAC3D,0BAA0B,EAAE,GAAG,IAAI,8BAA8B;IACjE,2CAA2C;IAC3C,6BAA6B,EAAE,GAAG,IAAI,2BAA2B;IACjE,uBAAuB,EAAE,GAAG,IAAI,2BAA2B;IAC3D,0BAA0B,EAAE,GAAG,IAAI,8BAA8B;IACjE,sBAAsB,EAAE,GAAG,IAAI,kCAAkC;IACjE,uBAAuB;IACvB,iBAAiB,EAAE,GAAG,IAAI,qBAAqB;IAC/C,oBAAoB,EAAE,GAAG,IAAI,wBAAwB;IACrD,mBAAmB;IACnB,mBAAmB,EAAE,GAAG,IAAI,iBAAiB;IAC7C,aAAa,EAAE,GAAG,IAAI,iBAAiB;IACvC,gBAAgB,EAAE,GAAG,IAAI,oBAAoB;IAC7C,YAAY,EAAE,GAAG,IAAI,uBAAuB;IAC5C,YAAY,EAAE,GAAG,IAAI,wBAAwB;IAC7C,qBAAqB,EAAE,GAAG,IAAI,wBAAwB;IACtD,+EAA+E;IAC/E,4EAA4E;IAC5E,kBAAkB,EAAE,GAAG,IAAI,qBAAqB;IAChD,cAAc,EAAE,GAAG,IAAI,qBAAqB;IAC5C,mBAAmB,EAAE,GAAG,IAAI,sBAAsB;IAClD,uBAAuB;IACvB,kBAAkB,EAAE,GAAG,IAAI,qBAAqB;IAChD,iBAAiB,EAAE,GAAG,IAAI,qBAAqB;IAC/C,oBAAoB,EAAE,GAAG,IAAI,wBAAwB;IACrD,4DAA4D;IAC5D,mBAAmB,EAAE,4BAA4B;IACjD,6EAA6E;IAC7E,gFAAgF;IAChF,iBAAiB,EAAE,GAAG,IAAI,cAAc;IACxC,uBAAuB;IACvB,SAAS,EAAE,kBAAkB;IAC7B,SAAS,EAAE,kBAAkB;IAC7B,SAAS,EAAE,kBAAkB;IAC7B,sBAAsB,EAAE,0BAA0B;IAClD,qBAAqB,EAAE,0BAA0B;IACjD,6BAA6B,EAAE,kCAAkC;IACjE,WAAW,EAAE,qBAAqB;IAClC,iBAAiB,EAAE,sBAAsB;IACzC,iBAAiB,EAAE,2BAA2B;IAC9C,YAAY,EAAE,qBAAqB;CACQ,CAAC;AAE9C;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CACzB,GAAgB,EAChB,gBAA2E,EAAE,EAC7E,WAAgC,EAChC,KAAiD;IAEjD,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,WAAW,GAA4B;YAC3C,WAAW,EAAE;gBACX,CAAC,uBAAuB,CAAC,EAAE;oBACzB,IAAI,EAAE,OAAO;oBACb,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI;wBACrB,UAAU,EAAE,KAAK,CAAC,SAAS;qBAC5B,CAAC;oBACF,GAAG,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI;wBACzC,WAAW,EAAE,GAAG,CAAC,iBAAiB;qBACnC,CAAC;iBACH;aACF;YACD,GAAG,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC;SACxC,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,4DAA4D;YAC5D,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,eAAe,GAAG,sBAAsB,CAC5C,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CACrC,CAAC;YACF,MAAM,IAAI,KAAK,CACb,iFAAiF,eAAe,EAAE,CACnG,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,UAAU,GAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAE/D,2FAA2F;IAC3F,wFAAwF;IACxF,MAAM,kBAAkB,GAAG;QACzB,eAAe;QACf,wBAAwB;QACxB,wBAAwB;QACxB,mBAAmB;QACnB,mBAAmB;QACnB,eAAe;KAChB,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,UAAU,CAAC,KAAK,GAAG,4BAA4B,CAC7C,UAAU,CAAC,KAA4C,EACvD,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,8EAA8E;IAC9E,0DAA0D;IAC1D,MAAM,WAAW,GAA4B;QAC3C,WAAW,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE,UAAU,EAAE;QACtD,GAAG,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC;KACxC,CAAC;IAEF,qGAAqG;IACrG,EAAE;IACF,6FAA6F;IAC7F,+FAA+F;IAC/F,yDAAyD;IACzD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAEtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,eAAe,GAAG,sBAAsB,CAC5C,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CACrC,CAAC;QACF,MAAM,IAAI,KAAK,CACb,2EAA2E,eAAe,EAAE,CAC7F,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAgB,EAChB,YAAiC,EAAE;IAEnC,OAAO,kBAAkB,CACvB,GAAG,EACH;QACE,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY,EAAE,SAAS,CAAC,YAAY;KACrC,EACD,SAAS,CAAC,WAAW,EACrB,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CACjE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,eAAe,CACtB,GAAgB;IAEhB,IACE,CAAC,GAAG,CAAC,iBAAiB;QACtB,CAAC,GAAG,CAAC,aAAa;QAClB,CAAC,GAAG,CAAC,gBAAgB;QACrB,CAAC,GAAG,CAAC,mBAAmB;QACxB,CAAC,GAAG,CAAC,gBAAgB;QACrB,CAAC,GAAG,CAAC,YAAY;QAEjB,OAAO,IAAI,CAAC;IAEd,OAAO;QACL,KAAK,EAAE;YACL,GAAG,CAAC,GAAG,CAAC,iBAAiB,IAAI;gBAC3B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;aACzC,CAAC;YACF,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,gBAAgB,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,mBAAmB,IAAI;gBAC7B,aAAa,EAAE,GAAG,CAAC,mBAAmB;aACvC,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACjE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;SACtD;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,wBAAwB,CAC/B,GAAgB;IAEhB,IACE,CAAC,GAAG,CAAC,wBAAwB;QAC7B,CAAC,GAAG,CAAC,uBAAuB;QAC5B,CAAC,GAAG,CAAC,0BAA0B;QAE/B,OAAO,IAAI,CAAC;IACd,OAAO;QACL,eAAe,EAAE;YACf,GAAG,CAAC,GAAG,CAAC,wBAAwB,IAAI;gBAClC,QAAQ,EAAE,GAAG,CAAC,wBAAwB;aACvC,CAAC;YACF,GAAG,UAAU,CACX,GAAG,CAAC,uBAAuB,EAC3B,GAAG,CAAC,0BAA0B,CAC/B;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,wBAAwB,CAAC,GAAgB;IAChD,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,GAAG,CAAC,0BAA0B;QACjE,OAAO,IAAI,CAAC;IACd,OAAO;QACL,eAAe,EAAE;YACf,GAAG,CAAC,GAAG,CAAC,6BAA6B,IAAI;gBACvC,QAAQ,EAAE,GAAG,CAAC,6BAA6B;aAC5C,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI;gBAChC,eAAe,EAAE,GAAG,CAAC,sBAAsB;aAC5C,CAAC;YACF,GAAG,UAAU,CACX,GAAG,CAAC,uBAAuB,EAC3B,GAAG,CAAC,0BAA0B,CAC/B;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,mBAAmB,CAAC,GAAgB;IAC3C,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,oBAAoB,CAAC;KACvE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,mBAAmB,CAC1B,GAAgB;IAEhB,IACE,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,iBAAiB;QACtB,CAAC,GAAG,CAAC,oBAAoB;QAEzB,OAAO,IAAI,CAAC;IACd,OAAO;QACL,SAAS,EAAE;YACT,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACnE,GAAG,UAAU,CAAC,GAAG,CAAC,iBAAiB,EAAE,GAAG,CAAC,oBAAoB,CAAC;SAC/D;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,eAAe,CAAC,GAAgB;IAWvC,IACE,CAAC,GAAG,CAAC,mBAAmB;QACxB,CAAC,GAAG,CAAC,aAAa;QAClB,CAAC,GAAG,CAAC,gBAAgB;QACrB,CAAC,GAAG,CAAC,YAAY;QACjB,CAAC,GAAG,CAAC,YAAY;QACjB,CAAC,GAAG,CAAC,qBAAqB;QAC1B,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,cAAc;QACnB,CAAC,GAAG,CAAC,mBAAmB;QAExB,OAAO,IAAI,CAAC;IACd,MAAM,WAAW,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACjD,OAAO;QACL,KAAK,EAAE;YACL,GAAG,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC;YACrE,GAAG,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,gBAAgB,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;YAC7D,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9D,GAAG,CAAC,GAAG,CAAC,qBAAqB,IAAI;gBAC/B,eAAe,EAAE,GAAG,CAAC,qBAAqB;aAC3C,CAAC;YACF,GAAG,CAAC,WAAW,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,mBAAmB,IAAI;gBAC7B,aAAa,EAAE,GAAG,CAAC,mBAAmB;aACvC,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAAC,GAAgB;IAC/C,IAAI,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,kBAAkB;QAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC;IAC1D,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CACT,2FAA2F,CAC5F,CAAC;QACF,OAAO,GAAG,CAAC,cAAc,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,gBAAgB,CACvB,GAAgB,EAChB,gBAA2E,EAAE;IAE7E,OAAO;QACL,MAAM,EAAE;YACN,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,YAAY,EAAE,GAAG,CAAC,sBAAsB;gBACxC,YAAY,EAAE,GAAG,CAAC,qBAAqB;gBACvC,oBAAoB,EAAE,GAAG,CAAC,6BAA6B;aACxD;YACD,IAAI,EAAE;gBACJ,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;gBAClE,QAAQ,EAAE,aAAa,CAAC,WAAW,IAAI,GAAG,CAAC,iBAAiB;gBAC5D,aAAa,EAAE,aAAa,CAAC,YAAY,IAAI,GAAG,CAAC,iBAAiB;aACnE;YACD,GAAG,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAC3C,SAAS,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,mBAAmB,EAAE;aAClD,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,SAAS,UAAU,CACjB,GAAuB,EACvB,MAA0B;IAE1B,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC/B,mFAAmF;IACnF,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAI,EAAE,MAAM,EAAE,MAAO,EAAE,EAAE,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAC5C,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,EAC3D,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,4BAA4B,CACnC,KAA0C,EAC1C,KAA6B;IAE7B,KAAK,MAAM,GAAG,IAAI,mCAAmC,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,wBAAwB,GAAG,mEAAmE,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC1D,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,mCAAmC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IAErD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,GAAG;YACZ,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,KAAK,CAAC,eAAe,CAAE;YAC5B,MAAM,EAAE,KAAK,CAAC,eAAe,CAAE;SAChC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC5D,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC;IACtC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/config/index.d.ts

@@ -0,0 +1,31 @@
+import { MCPServerConfiguration } from "../config/models.js";
+export { buildConfigFromEnvAndCli } from "../config/env-config.js";
+export { CONFLUENT_CLOUD_DEFAULT_ENDPOINT, MCPServerConfiguration, type DirectConnectionConfig, type OAuthConnectionConfig, } from "../config/models.js";
+/**
+ * Loads and validates an MCP server configuration from a YAML file.
+ *
+ * @param filePath - Path to the YAML configuration file
+ * @param environ      - Environment variables used for ${VAR} interpolation
+ * @returns Validated MCPServerConfiguration object
+ * @throws Error if file doesn't exist, YAML is invalid, interpolation fails, or validation fails
+ */
+export declare function loadConfigFromYaml(filePath: string, environ: Record<string, string | undefined>): MCPServerConfiguration;
+/**
+ * Reads configuration file contents from disk.
+ *
+ * @param filePath - Path to the YAML configuration file
+ * @returns File contents as string
+ * @throws Error if file doesn't exist or cannot be read
+ */
+export declare function loadConfigFileContents(filePath: string): string;
+/**
+ * Parses and validates YAML configuration content.
+ * Always performs ${VAR} and ${VAR:-default} interpolation before Zod validation.
+ *
+ * @param yamlContent - YAML string content
+ * @param env         - Environment variables used for ${VAR} interpolation
+ * @returns Validated MCPServerConfiguration object
+ * @throws Error if YAML is invalid, interpolation fails, or validation fails
+ */
+export declare function parseYamlConfiguration(yamlContent: string, environ: Record<string, string | undefined>): MCPServerConfiguration;
+//# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,sBAAsB,EACvB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EACL,gCAAgC,EAChC,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C,sBAAsB,CAGxB;AAKD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgB/D;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C,sBAAsB,CA+BxB"}

package/dist/config/index.js

@@ -0,0 +1,76 @@
+import { interpolateValues } from "../config/interpolation.js";
+import { formatZodIssues, mcpConfigSchema, MCPServerConfiguration, } from "../config/models.js";
+import * as nodeDeps from "../confluent/node-deps.js";
+import path from "node:path";
+import { parse as parseYaml } from "yaml";
+export { buildConfigFromEnvAndCli } from "../config/env-config.js";
+export { CONFLUENT_CLOUD_DEFAULT_ENDPOINT, MCPServerConfiguration, } from "../config/models.js";
+/**
+ * Loads and validates an MCP server configuration from a YAML file.
+ *
+ * @param filePath - Path to the YAML configuration file
+ * @param environ      - Environment variables used for ${VAR} interpolation
+ * @returns Validated MCPServerConfiguration object
+ * @throws Error if file doesn't exist, YAML is invalid, interpolation fails, or validation fails
+ */
+export function loadConfigFromYaml(filePath, environ) {
+    const yamlContent = loadConfigFileContents(filePath);
+    return parseYamlConfiguration(yamlContent, environ);
+}
+/* All the rest of the functions in this file are internal helpers for loading and validating the configuration, only exported for
+  test suite purposes. */
+/**
+ * Reads configuration file contents from disk.
+ *
+ * @param filePath - Path to the YAML configuration file
+ * @returns File contents as string
+ * @throws Error if file doesn't exist or cannot be read
+ */
+export function loadConfigFileContents(filePath) {
+    const absolutePath = path.resolve(filePath);
+    // Check if file exists
+    if (!nodeDeps.fs.existsSync(absolutePath)) {
+        throw new Error(`Configuration file not found: ${absolutePath}`);
+    }
+    // Read file contents
+    try {
+        return nodeDeps.fs.readFileSync(absolutePath, "utf-8");
+    }
+    catch (error) {
+        throw new Error(`Failed to read configuration file: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Parses and validates YAML configuration content.
+ * Always performs ${VAR} and ${VAR:-default} interpolation before Zod validation.
+ *
+ * @param yamlContent - YAML string content
+ * @param env         - Environment variables used for ${VAR} interpolation
+ * @returns Validated MCPServerConfiguration object
+ * @throws Error if YAML is invalid, interpolation fails, or validation fails
+ */
+export function parseYamlConfiguration(yamlContent, environ) {
+    // Parse YAML
+    let parsedYaml;
+    try {
+        parsedYaml = parseYaml(yamlContent);
+    }
+    catch (error) {
+        throw new Error(`Failed to parse YAML: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    // Interpolate environment variables (before Zod sees the values)
+    try {
+        parsedYaml = interpolateValues(parsedYaml, environ);
+    }
+    catch (error) {
+        throw new Error(`Failed to interpolate configuration values: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    // Validate with Zod
+    const validationResult = mcpConfigSchema.safeParse(parsedYaml);
+    if (!validationResult.success) {
+        throw new Error(`Configuration validation failed:\n${formatZodIssues(validationResult.error.issues)}`);
+    }
+    // Promote from raw parsed object to MCPServerConfiguration instance.
+    return new MCPServerConfiguration(validationResult.data);
+}
+//# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EACL,eAAe,EACf,eAAe,EACf,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,QAAQ,MAAM,6BAA6B,CAAC;AACxD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EACL,gCAAgC,EAChC,sBAAsB,GAGvB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,OAA2C;IAE3C,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrD,OAAO,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;yBACyB;AAEzB;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE5C,uBAAuB;IACvB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAA2C;IAE3C,aAAa;IACb,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC;QACH,UAAU,GAAG,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,MAAM,gBAAgB,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAE/D,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,qCAAqC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,OAAO,IAAI,sBAAsB,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC"}

package/dist/config/interpolation.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Recursively interpolates `${VAR}` and `${VAR:-default}` patterns in all
+ * string values of the given object/array/primitive. Non-string leaves
+ * (numbers, booleans, null, undefined) are returned unchanged.
+ *
+ * Escaping: `$${LITERAL}` is replaced with the literal text `${LITERAL}`.
+ */
+export declare function interpolateValues(obj: unknown, environ: Record<string, string | undefined>): unknown;
+//# sourceMappingURL=interpolation.d.ts.map

package/dist/config/interpolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interpolation.d.ts","sourceRoot":"","sources":["../../src/config/interpolation.ts"],"names":[],"mappings":"AA0CA;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAC1C,OAAO,CAoBT"}