@confluentinc/mcp-confluent 1.4.0 → 1.6.0

package/dist/confluent/tools/tool-availability.d.ts

@@ -1,7 +1,7 @@
-import { ToolCategory, ToolHandler } from "../../confluent/tools/base-tools.js";
-import { ToolDisabledReason } from "../../confluent/tools/connection-predicates.js";
-import { ToolName } from "../../confluent/tools/tool-name.js";
-import { ServerRuntime } from "../../server-runtime.js";
+import type { ToolCategory, ToolHandler } from "../../confluent/tools/base-tools.js";
+import type { ToolDisabledReason } from "../../confluent/tools/connection-predicates.js";
+import type { ToolName } from "../../confluent/tools/tool-name.js";
+import type { ServerRuntime } from "../../server-runtime.js";
 /**
  * One bucket of disabled tools sharing a single bucket key. The key field
  * is discriminated by {@linkcode ToolGatingReport.groupBy}:
@@ -23,25 +23,53 @@ export type DisabledToolGroup = {
 };
 /** Bucket-key projection for a {@linkcode DisabledToolGroup}, irrespective of axis. */
 export declare function disabledToolGroupKey(group: DisabledToolGroup): string;
+/**
+ * One configured connection's view of the gating report: the tools disabled
+ * *on this connection*, bucketed by the report's chosen axis, plus the
+ * connection's own enabled/disabled tallies. A tool enabled on this connection
+ * never appears in `disabledGroups` here; a tool enabled on a sibling
+ * connection but disabled on this one shows up in this section's buckets, so
+ * the cross-connection asymmetry is readable by comparing sections.
+ */
+export interface ConnectionGatingSection {
+    readonly connectionId: string;
+    readonly disabledGroups: readonly DisabledToolGroup[];
+    /** Tools advertisable on this connection: `totalRegistered - disabledCount`. */
+    readonly enabledCount: number;
+    /** Tools disabled on this connection: the sum of `disabledGroups[].tools.length`. */
+    readonly disabledCount: number;
+}
 /**
  * Output of {@linkcode buildToolGatingReport}; drives the
- * `explain-disabled-tools` diagnostic tool. Tools advertised via
- * `tools/list` are intentionally absent — the report carries the
- * negative signal only.
+ * `explain-disabled-tools` diagnostic tool.
+ *
+ * The report is connection-shaped: one {@linkcode ConnectionGatingSection} per
+ * configured connection, each carrying that connection's disabled-tool buckets.
+ * A single-connection config yields exactly one section — there is one shape
+ * regardless of connection count.
+ *
+ * `groupBy` records which axis the section buckets carry so consumers
+ * (renderer, MCP-client UIs) can pick the right framing.
  *
- * `groupBy` records which axis the bucket discriminators carry so
- * consumers (renderer, MCP-client UIs) can pick the right framing.
+ * `operatorBlocked` is the server-wide allow/block-list verdict, held apart
+ * from the per-connection sections because the operator filter is the
+ * outermost gate: it excludes a tool from every connection at once and owes
+ * nothing to any connection's config. A blocked tool appears here and in no
+ * section's buckets, and is subtracted from each section's `enabledCount`.
  *
- * Single-connection scope today (the server enforces one connection; see
- * `enforceSingleConnectionOnly()` in `src/config/models.ts`). When
- * multi-connection support lands as part of issue #151's follow-ups the
- * shape regrows around connections — per-connection sections plus a
- * cross-connection-deltas section calling out tools enabled on some
- * connections but not others.
+ * The top-level `enabledCount` / `disabledCount` are whole-server rollups: a
+ * tool counts as enabled if it survives the operator filter AND is
+ * connection-independent or enabled on at least one connection; it counts as
+ * disabled when the operator filter excludes it, or when it is
+ * connection-dependent and dark on every connection (or there are no
+ * connections at all).
  */
 export interface ToolGatingReport {
     readonly groupBy: "reason" | "category";
-    readonly disabledGroups: readonly DisabledToolGroup[];
+    /** Tools the operator's allow/block-list excluded server-wide, in handler iteration order. */
+    readonly operatorBlocked: readonly ToolName[];
+    /** One section per configured connection, lex-sorted by id; empty iff no connections are configured. */
+    readonly connections: readonly ConnectionGatingSection[];
     readonly enabledCount: number;
     readonly disabledCount: number;
 }
@@ -69,23 +97,26 @@ export interface StartupLogToolGroup {
  */
 export declare function groupDisabledToolsByReason(handlers: Iterable<readonly [ToolName, ToolHandler]>, runtime: ServerRuntime): StartupLogToolGroup[];
 /**
- * Assemble a {@linkcode ToolGatingReport} for the given handler set against
- * the configured connection.
+ * Assemble a connection-shaped {@linkcode ToolGatingReport} for the given
+ * handler set against the configured connections.
+ *
+ * One pass over the handlers:
+ * - a tool the operator's allow/block-list excludes (`!isToolAllowed`) is
+ *   recorded in `operatorBlocked` and counts as disabled, ahead of and
+ *   independent of its predicate verdict — the filter is the outermost gate,
+ *   so it never reaches a connection section;
+ * - connection-independent tools count as enabled and appear in no section
+ *   (they are enabled on every connection);
+ * - a connection-dependent tool on a zero-connection config counts as disabled
+ *   with no section to attribute it to;
+ * - otherwise each connection that disables it gets the tool added to its
+ *   section bucket (keyed by reason, or by {@linkcode ToolHandler.category}
+ *   under `groupBy: "category"`), and the tool counts as enabled iff at least
+ *   one connection enables it.
  *
- * v1 (single-connection scope):
- * - `disabledGroups` is sorted lex by reason; tools within a group follow
- *   handler iteration order.
- * - Each tool contributes once to `enabledCount` *or* `disabledCount`:
- *   a tool whose predicate produces an `enabled: true` verdict on at
- *   least one configured connection counts as enabled (and is omitted
- *   from `disabledGroups`); otherwise it counts as disabled and lands
- *   under the first disabled verdict's reason. This flatten is lossy
- *   on a multi-connection runtime — see the handler module-doc for
- *   the consequences and the v2 (multi-connection) shape on
- *   {@linkcode ToolGatingReport}.
- * - Throws `Wacky -- ...` if any handler returns an empty verdict map
- *   (a runtime-shaped invariant violation rather than a tool-state
- *   condition; see `classifyTool` for the rationale).
+ * Sections are lex-sorted by `connectionId` and buckets lex by
+ * {@linkcode disabledToolGroupKey}. Tools within a bucket — and within
+ * `operatorBlocked` — follow handler iteration order.
  */
 export declare function buildToolGatingReport(handlers: Iterable<readonly [ToolName, ToolHandler]>, runtime: ServerRuntime, groupBy?: "reason" | "category"): ToolGatingReport;
 //# sourceMappingURL=tool-availability.d.ts.map

package/dist/confluent/tools/tool-availability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-availability.d.ts","sourceRoot":"","sources":["../../../src/confluent/tools/tool-availability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAEL,kBAAkB,EACnB,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAA;CAAE,CAAC;AAE7E,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAErE;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EACpD,OAAO,EAAE,aAAa,GACrB,mBAAmB,EAAE,CA+BvB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EACpD,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,QAAQ,GAAG,UAAqB,GACxC,gBAAgB,CAmClB"}
+{"version":3,"file":"tool-availability.d.ts","sourceRoot":"","sources":["../../../src/confluent/tools/tool-availability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACZ,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAA;CAAE,CAAC;AAE7E,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAErE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACtD,gFAAgF;IAChF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,UAAU,CAAC;IACxC,8FAA8F;IAC9F,QAAQ,CAAC,eAAe,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC9C,wGAAwG;IACxG,QAAQ,CAAC,WAAW,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACzD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EACpD,OAAO,EAAE,aAAa,GACrB,mBAAmB,EAAE,CA+BvB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EACpD,OAAO,EAAE,aAAa,EACtB,OAAO,GAAE,QAAQ,GAAG,UAAqB,GACxC,gBAAgB,CAqDlB"}

package/dist/confluent/tools/tool-availability.js

@@ -43,88 +43,120 @@ export function groupDisabledToolsByReason(handlers, runtime) {
     return Array.from(groups.values()).sort((a, b) => a.connectionId.localeCompare(b.connectionId));
 }
 /**
- * Assemble a {@linkcode ToolGatingReport} for the given handler set against
- * the configured connection.
+ * Assemble a connection-shaped {@linkcode ToolGatingReport} for the given
+ * handler set against the configured connections.
  *
- * v1 (single-connection scope):
- * - `disabledGroups` is sorted lex by reason; tools within a group follow
- *   handler iteration order.
- * - Each tool contributes once to `enabledCount` *or* `disabledCount`:
- *   a tool whose predicate produces an `enabled: true` verdict on at
- *   least one configured connection counts as enabled (and is omitted
- *   from `disabledGroups`); otherwise it counts as disabled and lands
- *   under the first disabled verdict's reason. This flatten is lossy
- *   on a multi-connection runtime — see the handler module-doc for
- *   the consequences and the v2 (multi-connection) shape on
- *   {@linkcode ToolGatingReport}.
- * - Throws `Wacky -- ...` if any handler returns an empty verdict map
- *   (a runtime-shaped invariant violation rather than a tool-state
- *   condition; see `classifyTool` for the rationale).
+ * One pass over the handlers:
+ * - a tool the operator's allow/block-list excludes (`!isToolAllowed`) is
+ *   recorded in `operatorBlocked` and counts as disabled, ahead of and
+ *   independent of its predicate verdict — the filter is the outermost gate,
+ *   so it never reaches a connection section;
+ * - connection-independent tools count as enabled and appear in no section
+ *   (they are enabled on every connection);
+ * - a connection-dependent tool on a zero-connection config counts as disabled
+ *   with no section to attribute it to;
+ * - otherwise each connection that disables it gets the tool added to its
+ *   section bucket (keyed by reason, or by {@linkcode ToolHandler.category}
+ *   under `groupBy: "category"`), and the tool counts as enabled iff at least
+ *   one connection enables it.
+ *
+ * Sections are lex-sorted by `connectionId` and buckets lex by
+ * {@linkcode disabledToolGroupKey}. Tools within a bucket — and within
+ * `operatorBlocked` — follow handler iteration order.
  */
 export function buildToolGatingReport(handlers, runtime, groupBy = "reason") {
-    // Both axes' keys (ToolDisabledReason values, ToolCategory values) are
-    // string enums at runtime, so a single string-keyed Map drives both code
-    // paths. The discriminator on the emitted DisabledToolGroup is what
-    // tells the consumer which axis it's reading.
-    const groups = new Map();
+    const connectionIds = runtime.config.getConnectionIds();
+    // Per-connection accumulator: connectionId -> (bucketKey -> tools). Both
+    // axes' keys (ToolDisabledReason / ToolCategory values) are string enums at
+    // runtime, so a single string-keyed inner Map drives both code paths.
+    const sectionBuckets = new Map(connectionIds.map((id) => [id, new Map()]));
+    const operatorBlocked = [];
     let enabledCount = 0;
     let disabledCount = 0;
     for (const [toolName, handler] of handlers) {
-        const classification = classifyTool(handler.connectionVerdicts(runtime));
-        if (classification.kind === "enabled") {
-            enabledCount += 1;
+        if (!runtime.isToolAllowed(toolName)) {
+            operatorBlocked.push(toolName);
+            disabledCount += 1;
             continue;
         }
-        disabledCount += 1;
-        const key = groupBy === "reason" ? classification.reason : handler.category;
-        let bucket = groups.get(key);
-        bucket ??= [];
-        groups.set(key, bucket);
-        bucket.push(toolName);
+        if (classifyAndBucketHandler(toolName, handler, runtime, groupBy, sectionBuckets)) {
+            enabledCount += 1;
+        }
+        else {
+            disabledCount += 1;
+        }
     }
-    const disabledGroups = Array.from(groups.entries())
-        .map(([key, tools]) => groupBy === "reason"
-        ? { reason: key, tools }
-        : { category: key, tools })
-        .sort((a, b) => disabledToolGroupKey(a).localeCompare(disabledToolGroupKey(b)));
-    return { groupBy, disabledGroups, enabledCount, disabledCount };
+    const totalRegistered = enabledCount + disabledCount;
+    const connections = connectionIds
+        .map((id) => buildSection(id, sectionBuckets.get(id), groupBy, totalRegistered, operatorBlocked.length))
+        .sort((a, b) => a.connectionId.localeCompare(b.connectionId));
+    return {
+        groupBy,
+        operatorBlocked,
+        connections,
+        enabledCount,
+        disabledCount,
+    };
 }
 /**
- * Reduce a tool's per-connection verdict map to a single classification for
- * the v1 flat report. Under the single-connection invariant the verdict map
- * has exactly one entry, so this is a pass-through; the implementation
- * tolerates multi-entry maps (test fixtures synthesise them) by treating
- * "enabled on at least one connection" as enabled and otherwise reporting
- * the first disabled verdict's reason.
- *
- * v2 multi-connection: drop this helper. The aggregation moves into the
- * caller, which builds per-connection rows and cross-connection deltas
- * directly from the verdict map.
+ * Classify one handler for the report and, as a side effect, bucket its tool
+ * into the section of every connection that disables it. Returns `true` when
+ * the tool is advertised (connection-independent, or enabled on at least one
+ * connection) — i.e. when it counts toward `enabledCount` rather than
+ * `disabledCount`. A connection-dependent tool on a zero-connection config is
+ * dark with no section to attribute it to.
  */
-function classifyTool(verdicts) {
-    let firstDisabledReason;
-    for (const verdict of verdicts.values()) {
-        if (verdict.enabled)
-            return { kind: "enabled" };
-        if (firstDisabledReason === undefined) {
-            firstDisabledReason = verdict.reason;
+function classifyAndBucketHandler(toolName, handler, runtime, groupBy, sectionBuckets) {
+    if (handler.isConnectionIndependent)
+        return true;
+    const verdicts = handler.connectionVerdicts(runtime);
+    if (verdicts.size === 0)
+        return false;
+    let anyEnabled = false;
+    for (const [connectionId, verdict] of verdicts) {
+        if (verdict.enabled) {
+            anyEnabled = true;
+            continue;
         }
+        const key = groupBy === "reason" ? verdict.reason : handler.category;
+        pushToBucket(sectionBuckets.get(connectionId), key, toolName);
     }
-    if (firstDisabledReason === undefined) {
-        // Wacky -- handler returned an empty verdict map. BaseToolHandler builds
-        // verdicts directly from `runtime.config.connections`, so an empty map
-        // means there are zero configured connections, which
-        // `enforceSingleConnectionOnly()` in `src/config/models.ts` should have
-        // prevented at bootstrap. Fail loudly rather than fabricate a
-        // misleading `ToolDisabledReason` and ship it in the operator-facing
-        // report — a wrong-by-name reason is harder to diagnose than a stack
-        // trace.
-        throw new Error("Wacky -- classifyTool received an empty verdict map: a handler's " +
-            "connectionVerdicts() returned no entries. BaseToolHandler derives " +
-            "verdicts from runtime.config.connections; an empty map implies zero " +
-            "configured connections, which enforceSingleConnectionOnly() in " +
-            "src/config/models.ts should have rejected at bootstrap.");
-    }
-    return { kind: "disabled", reason: firstDisabledReason };
+    return anyEnabled;
+}
+/** Append `toolName` to `buckets[key]`, creating the bucket array on first use. */
+function pushToBucket(buckets, key, toolName) {
+    let bucket = buckets.get(key);
+    bucket ??= [];
+    buckets.set(key, bucket);
+    bucket.push(toolName);
+}
+/**
+ * Assemble one connection's {@linkcode ConnectionGatingSection} from its bucket
+ * accumulator. `enabledCount` is what remains advertisable on this connection
+ * once both the operator-blocked tools (excluded server-wide, never in this
+ * section's buckets) and this connection's own predicate-disabled tools are
+ * removed from the whole registered set — so connection-independent tools count
+ * as enabled here, but operator-blocked ones never do.
+ */
+function buildSection(connectionId, buckets, groupBy, totalRegistered, operatorBlockedCount) {
+    const disabledGroups = bucketsToGroups(buckets, groupBy);
+    const sectionDisabled = disabledGroups.reduce((sum, group) => sum + group.tools.length, 0);
+    return {
+        connectionId,
+        disabledGroups,
+        enabledCount: totalRegistered - operatorBlockedCount - sectionDisabled,
+        disabledCount: sectionDisabled,
+    };
+}
+/**
+ * Project one connection's `(bucketKey -> tools)` accumulator into the
+ * discriminated {@linkcode DisabledToolGroup} array, lex-sorted by bucket key.
+ */
+function bucketsToGroups(buckets, groupBy) {
+    return Array.from(buckets.entries())
+        .map(([key, tools]) => groupBy === "reason"
+        ? { reason: key, tools }
+        : { category: key, tools })
+        .sort((a, b) => disabledToolGroupKey(a).localeCompare(disabledToolGroupKey(b)));
 }
 //# sourceMappingURL=tool-availability.js.map

package/dist/confluent/tools/tool-availability.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-availability.js","sourceRoot":"","sources":["../../../src/confluent/tools/tool-availability.ts"],"names":[],"mappings":"AAwBA,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,OAAO,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;AAC3D,CAAC;AAsCD;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAoD,EACpD,OAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACrD,oEAAoE;QACpE,mEAAmE;QACnE,oCAAoC;QACpC,MAAM,eAAe,GAAiD,EAAE,CAAC;QACzE,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,eAAe,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,gBAAgB;YAAE,SAAS;QAE/B,KAAK,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,MAAM,EAAE,CAAC;YACzC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/C,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAoD,EACpD,OAAsB,EACtB,UAAiC,QAAQ;IAEzC,uEAAuE;IACvE,yEAAyE;IACzE,oEAAoE;IACpE,8CAA8C;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACtC,YAAY,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,aAAa,IAAI,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5E,IAAI,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,cAAc,GAAwB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;SACrE,GAAG,CACF,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAqB,EAAE,CAClC,OAAO,KAAK,QAAQ;QAClB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAyB,EAAE,KAAK,EAAE;QAC9C,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAmB,EAAE,KAAK,EAAE,CAC/C;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,oBAAoB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAC/D,CAAC;IAEJ,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CACnB,QAAsC;IAEtC,IAAI,mBAAmD,CAAC;IACxD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAChD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;QACvC,CAAC;IACH,CAAC;IACD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,yEAAyE;QACzE,uEAAuE;QACvE,qDAAqD;QACrD,wEAAwE;QACxE,8DAA8D;QAC9D,qEAAqE;QACrE,qEAAqE;QACrE,SAAS;QACT,MAAM,IAAI,KAAK,CACb,mEAAmE;YACjE,oEAAoE;YACpE,sEAAsE;YACtE,iEAAiE;YACjE,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"tool-availability.js","sourceRoot":"","sources":["../../../src/confluent/tools/tool-availability.ts"],"names":[],"mappings":"AAwBA,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,OAAO,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;AAC3D,CAAC;AAmED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAoD,EACpD,OAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACrD,oEAAoE;QACpE,mEAAmE;QACnE,oCAAoC;QACpC,MAAM,eAAe,GAAiD,EAAE,CAAC;QACzE,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC/C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM;YACR,CAAC;YACD,eAAe,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,gBAAgB;YAAE,SAAS;QAE/B,KAAK,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,MAAM,EAAE,CAAC;YACzC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/C,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAoD,EACpD,OAAsB,EACtB,UAAiC,QAAQ;IAEzC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;IACxD,yEAAyE;IACzE,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,cAAc,GAAmB,IAAI,GAAG,CAC5C,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,GAAG,EAAsB,CAAC,CAAC,CAC/D,CAAC;IACF,MAAM,eAAe,GAAe,EAAE,CAAC;IACvC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,aAAa,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IACE,wBAAwB,CACtB,QAAQ,EACR,OAAO,EACP,OAAO,EACP,OAAO,EACP,cAAc,CACf,EACD,CAAC;YACD,YAAY,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,aAAa,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,YAAY,GAAG,aAAa,CAAC;IACrD,MAAM,WAAW,GAAG,aAAa;SAC9B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACV,YAAY,CACV,EAAE,EACF,cAAc,CAAC,GAAG,CAAC,EAAE,CAAE,EACvB,OAAO,EACP,eAAe,EACf,eAAe,CAAC,MAAM,CACvB,CACF;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAEhE,OAAO;QACL,OAAO;QACP,eAAe;QACf,WAAW;QACX,YAAY;QACZ,aAAa;KACd,CAAC;AACJ,CAAC;AASD;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAC/B,QAAkB,EAClB,OAAoB,EACpB,OAAsB,EACtB,OAA8B,EAC9B,cAA8B;IAE9B,IAAI,OAAO,CAAC,uBAAuB;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrE,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,YAAY,CAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CACnB,OAAgC,EAChC,GAAW,EACX,QAAkB;IAElB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CACnB,YAAoB,EACpB,OAAgC,EAChC,OAA8B,EAC9B,eAAuB,EACvB,oBAA4B;IAE5B,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAC3C,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EACxC,CAAC,CACF,CAAC;IACF,OAAO;QACL,YAAY;QACZ,cAAc;QACd,YAAY,EAAE,eAAe,GAAG,oBAAoB,GAAG,eAAe;QACtE,aAAa,EAAE,eAAe;KAC/B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CACtB,OAAgC,EAChC,OAA8B;IAE9B,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;SACjC,GAAG,CACF,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAqB,EAAE,CAClC,OAAO,KAAK,QAAQ;QAClB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAyB,EAAE,KAAK,EAAE;QAC9C,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAmB,EAAE,KAAK,EAAE,CAC/C;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,oBAAoB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAC/D,CAAC;AACN,CAAC"}

package/dist/confluent/tools/tool-input-error.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Thrown when a tool call is missing a required identifier that only the
+ * caller (or their connection config) can supply -- e.g. a resource id with
+ * no config fallback under an OAuth connection, or a required field absent
+ * from both the tool argument and the direct connection's config block.
+ *
+ * Distinguished from a plain `Error` so the tool-call wrapper in
+ * `mcp/server.ts` can skip reporting it to crash reporting: it's an
+ * expected, caller-correctable input error -- not an unexpected fault in
+ * the server itself.
+ */
+export declare class ToolInputError extends Error {
+    constructor(message: string);
+}
+/** True for caller-correctable input errors -- skip reporting these to crash reporting. */
+export declare function isExpectedToolError(error: unknown): boolean;
+//# sourceMappingURL=tool-input-error.d.ts.map

package/dist/confluent/tools/tool-input-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-input-error.d.ts","sourceRoot":"","sources":["../../../src/confluent/tools/tool-input-error.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE3D"}

package/dist/confluent/tools/tool-input-error.js

@@ -0,0 +1,23 @@
+import { ZodError } from "zod";
+/**
+ * Thrown when a tool call is missing a required identifier that only the
+ * caller (or their connection config) can supply -- e.g. a resource id with
+ * no config fallback under an OAuth connection, or a required field absent
+ * from both the tool argument and the direct connection's config block.
+ *
+ * Distinguished from a plain `Error` so the tool-call wrapper in
+ * `mcp/server.ts` can skip reporting it to crash reporting: it's an
+ * expected, caller-correctable input error -- not an unexpected fault in
+ * the server itself.
+ */
+export class ToolInputError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ToolInputError";
+    }
+}
+/** True for caller-correctable input errors -- skip reporting these to crash reporting. */
+export function isExpectedToolError(error) {
+    return error instanceof ZodError || error instanceof ToolInputError;
+}
+//# sourceMappingURL=tool-input-error.js.map

package/dist/confluent/tools/tool-input-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-input-error.js","sourceRoot":"","sources":["../../../src/confluent/tools/tool-input-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAE/B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,2FAA2F;AAC3F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,KAAK,YAAY,QAAQ,IAAI,KAAK,YAAY,cAAc,CAAC;AACtE,CAAC"}

package/dist/confluent/tools/tool-metadata-handler.d.ts

@@ -0,0 +1,52 @@
+import type { ToolHandler } from "../../confluent/tools/base-tools.js";
+import { BaseToolHandler } from "../../confluent/tools/base-tools.js";
+import type { ToolName } from "../../confluent/tools/tool-name.js";
+import type { ServerRuntime } from "../../server-runtime.js";
+/**
+ * Base class for tools that introspect the server's own tool catalog —
+ * `list-configured-connections`, `explain-disabled-tools`, and
+ * `describe-configured-connection`.
+ *
+ * The catalog is reached through `registryAccessor`, a thunk, rather than a
+ * direct `ToolHandlerRegistry` import. `ToolHandlerRegistry` constructs these
+ * handlers eagerly in its static field initializer, so a handler that imported
+ * the registry back would close an ESM cycle: on any load order that reaches
+ * the handler module first (a colocated unit test, say), the registry's `new
+ * SubclassHandler()` runs while the subclass binding is still in its temporal
+ * dead zone — a `ReferenceError`. The accessor keeps the import arrow pointing
+ * one way (registry → handler) and, crucially, stays un-invoked until request
+ * time: calling it during construction would re-enter `allHandlers()` while the
+ * registry's `handlers` map is still `undefined`. Subclasses read the catalog
+ * via {@link getToolNamesAndHandlers}.
+ */
+export declare abstract class ToolMetadataHandler extends BaseToolHandler {
+    private readonly registryAccessor;
+    constructor(registryAccessor: () => Iterable<readonly [ToolName, ToolHandler]>);
+    /**
+     * The tool catalog as a fresh array, materialized at request time. Always
+     * call this from `handle()`, never the accessor at construction time — see
+     * the class docstring for why the deferral is load-bearing.
+     */
+    protected getToolNamesAndHandlers(): ReadonlyArray<readonly [ToolName, ToolHandler]>;
+    /**
+     * The catalog filtered to the tools that route to a specific connection: those
+     * the operator left enabled ({@link ServerRuntime.isToolAllowed}) AND that are
+     * not connection-independent. The criterion is the predicate-level property
+     * {@link ToolHandler.isConnectionIndependent} (`predicate === alwaysEnabled`):
+     * such a tool is enabled regardless of which connections exist and never routes
+     * a call through a connection's client manager or depends on its service blocks,
+     * so listing it under each connection would misrepresent it as connection-routable.
+     * Whether the tool *accepts* a `connectionId` argument is irrelevant —
+     * `describe-configured-connection` is itself connection-independent yet takes a
+     * `connectionId` as a lookup key (not a routing target), which is precisely why
+     * the parameter's presence can't be the test. Operator-blocked tools were never
+     * advertised, so a per-connection view must not claim them either.
+     *
+     * Shared by `list-configured-connections` (the all-connections overview) and
+     * `describe-configured-connection` (the single-connection card). Not used by
+     * `explain-disabled-tools`, whose server-wide report intentionally counts
+     * connection-independent and operator-blocked tools too.
+     */
+    protected connectionRoutableTools(runtime: ServerRuntime): Iterable<readonly [ToolName, ToolHandler]>;
+}
+//# sourceMappingURL=tool-metadata-handler.d.ts.map

package/dist/confluent/tools/tool-metadata-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-metadata-handler.d.ts","sourceRoot":"","sources":["../../../src/confluent/tools/tool-metadata-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE5D;;;;;;;;;;;;;;;;GAgBG;AACH,8BAAsB,mBAAoB,SAAQ,eAAe;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAE/B;gBAGA,gBAAgB,EAAE,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAMpE;;;;OAIG;IACH,SAAS,CAAC,uBAAuB,IAAI,aAAa,CAChD,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CACjC;IAID;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,CAAE,uBAAuB,CAChC,OAAO,EAAE,aAAa,GACrB,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;CAQ9C"}

package/dist/confluent/tools/tool-metadata-handler.js

@@ -0,0 +1,61 @@
+import { BaseToolHandler } from "../../confluent/tools/base-tools.js";
+/**
+ * Base class for tools that introspect the server's own tool catalog —
+ * `list-configured-connections`, `explain-disabled-tools`, and
+ * `describe-configured-connection`.
+ *
+ * The catalog is reached through `registryAccessor`, a thunk, rather than a
+ * direct `ToolHandlerRegistry` import. `ToolHandlerRegistry` constructs these
+ * handlers eagerly in its static field initializer, so a handler that imported
+ * the registry back would close an ESM cycle: on any load order that reaches
+ * the handler module first (a colocated unit test, say), the registry's `new
+ * SubclassHandler()` runs while the subclass binding is still in its temporal
+ * dead zone — a `ReferenceError`. The accessor keeps the import arrow pointing
+ * one way (registry → handler) and, crucially, stays un-invoked until request
+ * time: calling it during construction would re-enter `allHandlers()` while the
+ * registry's `handlers` map is still `undefined`. Subclasses read the catalog
+ * via {@link getToolNamesAndHandlers}.
+ */
+export class ToolMetadataHandler extends BaseToolHandler {
+    registryAccessor;
+    constructor(registryAccessor) {
+        super();
+        this.registryAccessor = registryAccessor;
+    }
+    /**
+     * The tool catalog as a fresh array, materialized at request time. Always
+     * call this from `handle()`, never the accessor at construction time — see
+     * the class docstring for why the deferral is load-bearing.
+     */
+    getToolNamesAndHandlers() {
+        return [...this.registryAccessor()];
+    }
+    /**
+     * The catalog filtered to the tools that route to a specific connection: those
+     * the operator left enabled ({@link ServerRuntime.isToolAllowed}) AND that are
+     * not connection-independent. The criterion is the predicate-level property
+     * {@link ToolHandler.isConnectionIndependent} (`predicate === alwaysEnabled`):
+     * such a tool is enabled regardless of which connections exist and never routes
+     * a call through a connection's client manager or depends on its service blocks,
+     * so listing it under each connection would misrepresent it as connection-routable.
+     * Whether the tool *accepts* a `connectionId` argument is irrelevant —
+     * `describe-configured-connection` is itself connection-independent yet takes a
+     * `connectionId` as a lookup key (not a routing target), which is precisely why
+     * the parameter's presence can't be the test. Operator-blocked tools were never
+     * advertised, so a per-connection view must not claim them either.
+     *
+     * Shared by `list-configured-connections` (the all-connections overview) and
+     * `describe-configured-connection` (the single-connection card). Not used by
+     * `explain-disabled-tools`, whose server-wide report intentionally counts
+     * connection-independent and operator-blocked tools too.
+     */
+    *connectionRoutableTools(runtime) {
+        for (const [name, handler] of this.getToolNamesAndHandlers()) {
+            if (!runtime.isToolAllowed(name) || handler.isConnectionIndependent) {
+                continue;
+            }
+            yield [name, handler];
+        }
+    }
+}
+//# sourceMappingURL=tool-metadata-handler.js.map

package/dist/confluent/tools/tool-metadata-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-metadata-handler.js","sourceRoot":"","sources":["../../../src/confluent/tools/tool-metadata-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAIrE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAgB,mBAAoB,SAAQ,eAAe;IAC9C,gBAAgB,CAE/B;IAEF,YACE,gBAAkE;QAElE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACO,uBAAuB;QAG/B,OAAO,CAAC,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACO,CAAC,uBAAuB,CAChC,OAAsB;QAEtB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,uBAAuB,EAAE,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;gBACpE,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/confluent/tools/tool-name.d.ts

@@ -10,7 +10,7 @@ export declare enum ToolName {
     GET_CONSUMER_GROUP_LAG = "get-consumer-group-lag",
     LIST_FLINK_STATEMENTS = "list-flink-statements",
     CREATE_FLINK_STATEMENT = "create-flink-statement",
-    READ_FLINK_STATEMENT = "read-flink-statement",
+    GET_FLINK_STATEMENT_RESULTS = "get-flink-statement-results",
     DELETE_FLINK_STATEMENTS = "delete-flink-statements",
     GET_FLINK_STATEMENT_EXCEPTIONS = "get-flink-statement-exceptions",
     LIST_FLINK_CATALOGS = "list-flink-catalogs",
@@ -21,6 +21,7 @@ export declare enum ToolName {
     CHECK_FLINK_STATEMENT_HEALTH = "check-flink-statement-health",
     DETECT_FLINK_STATEMENT_ISSUES = "detect-flink-statement-issues",
     GET_FLINK_STATEMENT_PROFILE = "get-flink-statement-profile",
+    LIST_COMPUTE_POOLS = "list-compute-pools",
     LIST_CONNECTORS = "list-connectors",
     CREATE_CONNECTOR = "create-connector",
     DELETE_CONNECTOR = "delete-connector",
@@ -47,6 +48,7 @@ export declare enum ToolName {
     LIST_ENVIRONMENTS = "list-environments",
     READ_ENVIRONMENT = "read-environment",
     LIST_SCHEMAS = "list-schemas",
+    CREATE_SCHEMA = "create-schema",
     DELETE_SCHEMA = "delete-schema",
     GET_TOPIC_CONFIG = "get-topic-config",
     CREATE_TABLEFLOW_TOPIC = "create-tableflow-topic",
@@ -66,6 +68,9 @@ export declare enum ToolName {
     SEARCH_PRODUCT_DOCS = "search-product-docs",
     GET_PRODUCT_DOC_PAGE = "get-product-doc-page",
     LIST_ORGANIZATIONS = "list-organizations",
-    EXPLAIN_DISABLED_TOOLS = "explain-disabled-tools"
+    EXPLAIN_DISABLED_TOOLS = "explain-disabled-tools",
+    LIST_CONFIGURED_CONNECTIONS = "list-configured-connections",
+    CONFIG_HELP = "config-help",
+    DESCRIBE_CONFIGURED_CONNECTION = "describe-configured-connection"
 }
 //# sourceMappingURL=tool-name.d.ts.map

package/dist/confluent/tools/tool-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-name.d.ts","sourceRoot":"","sources":["../../../src/confluent/tools/tool-name.ts"],"names":[],"mappings":"AAAA,oBAAY,QAAQ;IAClB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IACjD,oBAAoB,yBAAyB;IAC7C,uBAAuB,4BAA4B;IACnD,8BAA8B,mCAAmC;IACjE,mBAAmB,wBAAwB;IAC3C,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;IACvC,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,2BAA2B,gCAAgC;IAC3D,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,gBAAgB,qBAAqB;IACrC,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;IAC3D,mCAAmC,wCAAwC;IAC3E,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,iBAAiB,sBAAsB;IACvC,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,iBAAiB,sBAAsB;IACvC,UAAU,eAAe;IACzB,sBAAsB,2BAA2B;IACjD,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,kBAAkB,uBAAuB;IACzC,aAAa,kBAAkB;IAC/B,iBAAiB,sBAAsB;IACvC,gBAAgB,qBAAqB;IACrC,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,gBAAgB,qBAAqB;IACrC,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,oCAAoC,yCAAyC;IAC7E,mCAAmC,wCAAwC;IAC3E,kCAAkC,uCAAuC;IACzE,oCAAoC,yCAAyC;IAC7E,oCAAoC,yCAAyC;IAC7E,kBAAkB,uBAAuB;IACzC,aAAa,kBAAkB;IAC/B,YAAY,2BAA2B;IACvC,mBAAmB,wBAAwB;IAC3C,oBAAoB,yBAAyB;IAC7C,kBAAkB,uBAAuB;IACzC,sBAAsB,2BAA2B;CAClD"}
+{"version":3,"file":"tool-name.d.ts","sourceRoot":"","sources":["../../../src/confluent/tools/tool-name.ts"],"names":[],"mappings":"AAAA,oBAAY,QAAQ;IAClB,WAAW,gBAAgB;IAC3B,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,uBAAuB,4BAA4B;IACnD,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAC3D,uBAAuB,4BAA4B;IACnD,8BAA8B,mCAAmC;IACjE,mBAAmB,wBAAwB;IAC3C,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;IACvC,oBAAoB,yBAAyB;IAC7C,oBAAoB,yBAAyB;IAC7C,4BAA4B,iCAAiC;IAC7D,6BAA6B,kCAAkC;IAC/D,2BAA2B,gCAAgC;IAC3D,kBAAkB,uBAAuB;IACzC,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,gBAAgB,qBAAqB;IACrC,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,mBAAmB,wBAAwB;IAC3C,2BAA2B,gCAAgC;IAC3D,mCAAmC,wCAAwC;IAC3E,kBAAkB,uBAAuB;IACzC,uBAAuB,4BAA4B;IACnD,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,iBAAiB,sBAAsB;IACvC,oBAAoB,yBAAyB;IAC7C,qBAAqB,0BAA0B;IAC/C,iBAAiB,sBAAsB;IACvC,UAAU,eAAe;IACzB,sBAAsB,2BAA2B;IACjD,iBAAiB,sBAAsB;IACvC,SAAS,cAAc;IACvB,kBAAkB,uBAAuB;IACzC,aAAa,kBAAkB;IAC/B,iBAAiB,sBAAsB;IACvC,gBAAgB,qBAAqB;IACrC,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,gBAAgB,qBAAqB;IACrC,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,qBAAqB,0BAA0B;IAC/C,oBAAoB,yBAAyB;IAC7C,sBAAsB,2BAA2B;IACjD,sBAAsB,2BAA2B;IACjD,oCAAoC,yCAAyC;IAC7E,mCAAmC,wCAAwC;IAC3E,kCAAkC,uCAAuC;IACzE,oCAAoC,yCAAyC;IAC7E,oCAAoC,yCAAyC;IAC7E,kBAAkB,uBAAuB;IACzC,aAAa,kBAAkB;IAC/B,YAAY,2BAA2B;IACvC,mBAAmB,wBAAwB;IAC3C,oBAAoB,yBAAyB;IAC7C,kBAAkB,uBAAuB;IACzC,sBAAsB,2BAA2B;IACjD,2BAA2B,gCAAgC;IAC3D,WAAW,gBAAgB;IAC3B,8BAA8B,mCAAmC;CAClE"}

package/dist/confluent/tools/tool-name.js

@@ -11,7 +11,7 @@ export var ToolName;
     ToolName["GET_CONSUMER_GROUP_LAG"] = "get-consumer-group-lag";
     ToolName["LIST_FLINK_STATEMENTS"] = "list-flink-statements";
     ToolName["CREATE_FLINK_STATEMENT"] = "create-flink-statement";
-    ToolName["READ_FLINK_STATEMENT"] = "read-flink-statement";
+    ToolName["GET_FLINK_STATEMENT_RESULTS"] = "get-flink-statement-results";
     ToolName["DELETE_FLINK_STATEMENTS"] = "delete-flink-statements";
     ToolName["GET_FLINK_STATEMENT_EXCEPTIONS"] = "get-flink-statement-exceptions";
     ToolName["LIST_FLINK_CATALOGS"] = "list-flink-catalogs";
@@ -22,6 +22,7 @@ export var ToolName;
     ToolName["CHECK_FLINK_STATEMENT_HEALTH"] = "check-flink-statement-health";
     ToolName["DETECT_FLINK_STATEMENT_ISSUES"] = "detect-flink-statement-issues";
     ToolName["GET_FLINK_STATEMENT_PROFILE"] = "get-flink-statement-profile";
+    ToolName["LIST_COMPUTE_POOLS"] = "list-compute-pools";
     ToolName["LIST_CONNECTORS"] = "list-connectors";
     ToolName["CREATE_CONNECTOR"] = "create-connector";
     ToolName["DELETE_CONNECTOR"] = "delete-connector";
@@ -48,6 +49,7 @@ export var ToolName;
     ToolName["LIST_ENVIRONMENTS"] = "list-environments";
     ToolName["READ_ENVIRONMENT"] = "read-environment";
     ToolName["LIST_SCHEMAS"] = "list-schemas";
+    ToolName["CREATE_SCHEMA"] = "create-schema";
     ToolName["DELETE_SCHEMA"] = "delete-schema";
     ToolName["GET_TOPIC_CONFIG"] = "get-topic-config";
     ToolName["CREATE_TABLEFLOW_TOPIC"] = "create-tableflow-topic";
@@ -68,5 +70,8 @@ export var ToolName;
     ToolName["GET_PRODUCT_DOC_PAGE"] = "get-product-doc-page";
     ToolName["LIST_ORGANIZATIONS"] = "list-organizations";
     ToolName["EXPLAIN_DISABLED_TOOLS"] = "explain-disabled-tools";
+    ToolName["LIST_CONFIGURED_CONNECTIONS"] = "list-configured-connections";
+    ToolName["CONFIG_HELP"] = "config-help";
+    ToolName["DESCRIBE_CONFIGURED_CONNECTION"] = "describe-configured-connection";
 })(ToolName || (ToolName = {}));
 //# sourceMappingURL=tool-name.js.map