mcp4openapi 0.2.8 → 0.3.1

package/dist/src/tool-filter/filter/filter-engine.js

@@ -0,0 +1,94 @@
+/**
+ * Filter engine - orchestrates filter rules
+ */
+/**
+ * Filter result
+ */
+export class FilterResult {
+    constructor(allowed, reason) {
+        this.allowed = allowed;
+        this.reason = reason;
+    }
+    static allowed(reason) {
+        return new FilterResult(true, reason);
+    }
+    static denied(reason) {
+        return new FilterResult(false, reason);
+    }
+}
+/**
+ * Filter engine that evaluates tools against rules
+ */
+export class FilterEngine {
+    constructor(allowRules, denyRules) {
+        this.allowRules = allowRules;
+        this.denyRules = denyRules;
+    }
+    /**
+     * Evaluate tool name against rules
+     *
+     * Rule precedence:
+     * 1. Deny rules (if any match, deny immediately)
+     * 2. If no allow rules, allow by default
+     * 3. Allow rules (must match at least one)
+     */
+    evaluate(toolName) {
+        // Normalize tool name (Unicode NFC)
+        const normalized = toolName.normalize('NFC');
+        // Check deny rules first (precedence)
+        for (const rule of this.denyRules) {
+            if (rule.matches(normalized)) {
+                return FilterResult.denied(rule.getReason());
+            }
+        }
+        // If no allow rules, allow by default
+        if (this.allowRules.length === 0) {
+            return FilterResult.allowed();
+        }
+        // Check allow rules
+        for (const rule of this.allowRules) {
+            if (rule.matches(normalized)) {
+                return FilterResult.allowed(rule.getReason());
+            }
+        }
+        // No allow rule matched
+        return FilterResult.denied('no_allow_match');
+    }
+    /**
+     * Evaluate tool definition against rules
+     *
+     * Used when rules need full tool definition (e.g., CategoryMatchRule).
+     * Tool name is normalized (NFC) before passing to name-based rules.
+     *
+     * Rule precedence:
+     * 1. Deny rules (if any match, deny immediately)
+     * 2. If no allow rules, allow by default
+     * 3. Allow rules (must match at least one)
+     */
+    evaluateTool(tool) {
+        // Normalize tool name for consistency (NFC)
+        const normalizedTool = {
+            ...tool,
+            name: tool.name.normalize('NFC')
+        };
+        // Check deny rules first (precedence)
+        for (const rule of this.denyRules) {
+            if (rule.matches(normalizedTool)) {
+                return FilterResult.denied(rule.getReason());
+            }
+        }
+        // If no allow rules, allow by default
+        if (this.allowRules.length === 0) {
+            return FilterResult.allowed();
+        }
+        // Check allow rules
+        for (const rule of this.allowRules) {
+            if (rule.matches(normalizedTool)) {
+                return FilterResult.allowed(rule.getReason());
+            }
+        }
+        // No allow rule matched
+        return FilterResult.denied('no_allow_match');
+    }
+}
+//# sourceMappingURL=filter-engine.js.map

package/dist/src/tool-filter/filter/filter-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter-engine.js","sourceRoot":"","sources":["../../../../src/tool-filter/filter/filter-engine.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;GAEG;AACH,MAAM,OAAO,YAAY;IACvB,YACkB,OAAgB,EAChB,MAAe;QADf,YAAO,GAAP,OAAO,CAAS;QAChB,WAAM,GAAN,MAAM,CAAS;IAC9B,CAAC;IAEJ,MAAM,CAAC,OAAO,CAAC,MAAe;QAC5B,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,MAAc;QAC1B,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,YAAY;IACvB,YACU,UAAwB,EACxB,SAAuB;QADvB,eAAU,GAAV,UAAU,CAAc;QACxB,cAAS,GAAT,SAAS,CAAc;IAC9B,CAAC;IAEJ;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAgB;QACvB,oCAAoC;QACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAE7C,sCAAsC;QACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,OAAO,EAAE,CAAC;QAChC,CAAC;QAED,oBAAoB;QACpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,OAAO,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;OAUG;IACH,YAAY,CAAC,IAAoB;QAC/B,4CAA4C;QAC5C,MAAM,cAAc,GAAG;YACrB,GAAG,IAAI;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SACjC,CAAC;QAEF,sCAAsC;QACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjC,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,OAAO,EAAE,CAAC;QAChC,CAAC;QAED,oBAAoB;QACpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjC,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,OAAO,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/src/tool-filter/filter/filter-rules.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Filter rules - Strategy pattern for tool filtering
+ */
+import type { CompiledRegex } from '../types.js';
+import type { ToolDefinition } from '../../types/profile.js';
+import type { OperationDetector } from '../operation/operation-detector.js';
+/**
+ * Filter rule interface
+ */
+export interface FilterRule {
+    matches(toolNameOrTool: string | ToolDefinition): boolean;
+    getReason(): string;
+}
+/**
+ * Exact name match rule
+ */
+export declare class ExactMatchRule implements FilterRule {
+    private names;
+    private type;
+    constructor(names: Set<string>, type: 'allow' | 'deny');
+    matches(toolNameOrTool: string | ToolDefinition): boolean;
+    getReason(): string;
+}
+/**
+ * Regex pattern match rule
+ */
+export declare class RegexMatchRule implements FilterRule {
+    private patterns;
+    private type;
+    constructor(patterns: CompiledRegex[], type: 'allow' | 'deny');
+    matches(toolNameOrTool: string | ToolDefinition): boolean;
+    getReason(): string;
+}
+/**
+ * Category match rule - matches based on operation categories
+ */
+export declare class CategoryMatchRule implements FilterRule {
+    private allowedCategories;
+    private detector;
+    constructor(allowedCategories: Set<'list' | 'read'>, detector: OperationDetector);
+    matches(toolNameOrTool: string | ToolDefinition): boolean;
+    getReason(): string;
+}
+//# sourceMappingURL=filter-rules.d.ts.map

package/dist/src/tool-filter/filter/filter-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter-rules.d.ts","sourceRoot":"","sources":["../../../../src/tool-filter/filter/filter-rules.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO,CAAC;IAC1D,SAAS,IAAI,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,UAAU;IAE7C,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,IAAI;gBADJ,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAClB,IAAI,EAAE,OAAO,GAAG,MAAM;IAGhC,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO;IAKzD,SAAS,IAAI,MAAM;CAGpB;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,UAAU;IAE7C,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,IAAI;gBADJ,QAAQ,EAAE,aAAa,EAAE,EACzB,IAAI,EAAE,OAAO,GAAG,MAAM;IAGhC,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO;IAKzD,SAAS,IAAI,MAAM;CAGpB;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,UAAU;IAEhD,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,QAAQ;gBADR,iBAAiB,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EACvC,QAAQ,EAAE,iBAAiB;IAGrC,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,cAAc,GAAG,OAAO;IA8BzD,SAAS,IAAI,MAAM;CAIpB"}

package/dist/src/tool-filter/filter/filter-rules.js

@@ -0,0 +1,72 @@
+/**
+ * Filter rules - Strategy pattern for tool filtering
+ */
+/**
+ * Exact name match rule
+ */
+export class ExactMatchRule {
+    constructor(names, type) {
+        this.names = names;
+        this.type = type;
+    }
+    matches(toolNameOrTool) {
+        const toolName = typeof toolNameOrTool === 'string' ? toolNameOrTool : toolNameOrTool.name;
+        return this.names.has(toolName);
+    }
+    getReason() {
+        return `${this.type}_list`;
+    }
+}
+/**
+ * Regex pattern match rule
+ */
+export class RegexMatchRule {
+    constructor(patterns, type) {
+        this.patterns = patterns;
+        this.type = type;
+    }
+    matches(toolNameOrTool) {
+        const toolName = typeof toolNameOrTool === 'string' ? toolNameOrTool : toolNameOrTool.name;
+        return this.patterns.some(pattern => pattern.test(toolName));
+    }
+    getReason() {
+        return `${this.type}_regex`;
+    }
+}
+/**
+ * Category match rule - matches based on operation categories
+ */
+export class CategoryMatchRule {
+    constructor(allowedCategories, detector) {
+        this.allowedCategories = allowedCategories;
+        this.detector = detector;
+    }
+    matches(toolNameOrTool) {
+        // This rule only works with ToolDefinition objects
+        if (typeof toolNameOrTool === 'string') {
+            return false;
+        }
+        const tool = toolNameOrTool;
+        const categories = this.detector.detectCategories(tool);
+        // Check if tool matches allowed categories
+        const hasListAndRead = this.allowedCategories.has('list') && this.allowedCategories.has('read');
+        if (hasListAndRead) {
+            // If both list and read are allowed, accept tools that are list-only, read-only, or both
+            // But NOT tools that have modify operations
+            return categories.isList || categories.isRead;
+        }
+        // Single category - must match exactly (no mixing)
+        if (this.allowedCategories.has('list')) {
+            return categories.isList && !categories.isRead;
+        }
+        if (this.allowedCategories.has('read')) {
+            return categories.isRead && !categories.isList;
+        }
+        return false;
+    }
+    getReason() {
+        const cats = Array.from(this.allowedCategories).sort();
+        return `allow_categories:${cats.join(',')}`;
+    }
+}
+//# sourceMappingURL=filter-rules.js.map

package/dist/src/tool-filter/filter/filter-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter-rules.js","sourceRoot":"","sources":["../../../../src/tool-filter/filter/filter-rules.ts"],"names":[],"mappings":"AAAA;;GAEG;AAcH;;GAEG;AACH,MAAM,OAAO,cAAc;IACzB,YACU,KAAkB,EAClB,IAAsB;QADtB,UAAK,GAAL,KAAK,CAAa;QAClB,SAAI,GAAJ,IAAI,CAAkB;IAC7B,CAAC;IAEJ,OAAO,CAAC,cAAuC;QAC7C,MAAM,QAAQ,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC;QAC3F,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,SAAS;QACP,OAAO,GAAG,IAAI,CAAC,IAAI,OAAO,CAAC;IAC7B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,cAAc;IACzB,YACU,QAAyB,EACzB,IAAsB;QADtB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,SAAI,GAAJ,IAAI,CAAkB;IAC7B,CAAC;IAEJ,OAAO,CAAC,cAAuC;QAC7C,MAAM,QAAQ,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC;QAC3F,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,SAAS;QACP,OAAO,GAAG,IAAI,CAAC,IAAI,QAAQ,CAAC;IAC9B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAiB;IAC5B,YACU,iBAAuC,EACvC,QAA2B;QAD3B,sBAAiB,GAAjB,iBAAiB,CAAsB;QACvC,aAAQ,GAAR,QAAQ,CAAmB;IAClC,CAAC;IAEJ,OAAO,CAAC,cAAuC;QAC7C,mDAAmD;QACnD,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,cAAc,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAExD,2CAA2C;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEhG,IAAI,cAAc,EAAE,CAAC;YACnB,yFAAyF;YACzF,4CAA4C;YAC5C,OAAO,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;QAChD,CAAC;QAED,mDAAmD;QACnD,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACjD,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QACjD,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS;QACP,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,oBAAoB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;CACF"}

package/dist/src/tool-filter/filter/global-tool-filter.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Global tool filter - applies environment-based filtering
+ */
+import type { ToolDefinition } from '../../types/profile.js';
+import type { ToolFilterConfig } from '../types.js';
+import type { Logger } from '../../core/logger.js';
+import type { OperationDetector } from '../operation/operation-detector.js';
+export interface GlobalToolFilterResult {
+    allowed: ToolDefinition[];
+    removed: ToolDefinition[];
+    reasons: Map<string, string[]>;
+    summary: {
+        originalCount: number;
+        allowedCount: number;
+        removedCount: number;
+    };
+}
+/**
+ * Applies global tool filtering based on environment configuration
+ */
+export declare class GlobalToolFilter {
+    private config;
+    private logger;
+    private detector?;
+    private engine;
+    constructor(config: ToolFilterConfig, logger: Logger, detector?: OperationDetector | undefined);
+    /**
+     * Apply filter to tools
+     */
+    apply(tools: ToolDefinition[]): GlobalToolFilterResult;
+    /**
+     * Build filter engine from config
+     */
+    private buildEngine;
+    /**
+     * Log filtered tool
+     */
+    private logFiltered;
+}
+//# sourceMappingURL=global-tool-filter.d.ts.map

package/dist/src/tool-filter/filter/global-tool-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-tool-filter.d.ts","sourceRoot":"","sources":["../../../../src/tool-filter/filter/global-tool-filter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAI5E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/B,OAAO,EAAE;QACP,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAIzB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,QAAQ,CAAC;IALnB,OAAO,CAAC,MAAM,CAAe;gBAGnB,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,iBAAiB,YAAA;IAKtC;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,sBAAsB;IA+BtD;;OAEG;IACH,OAAO,CAAC,WAAW;IAsCnB;;OAEG;IACH,OAAO,CAAC,WAAW;CAQpB"}

package/dist/src/tool-filter/filter/global-tool-filter.js

@@ -0,0 +1,92 @@
+/**
+ * Global tool filter - applies environment-based filtering
+ */
+import { FilterEngine } from './filter-engine.js';
+import { ExactMatchRule, RegexMatchRule, CategoryMatchRule } from './filter-rules.js';
+/**
+ * Applies global tool filtering based on environment configuration
+ */
+export class GlobalToolFilter {
+    constructor(config, logger, detector) {
+        this.config = config;
+        this.logger = logger;
+        this.detector = detector;
+        this.engine = this.buildEngine(config);
+    }
+    /**
+     * Apply filter to tools
+     */
+    apply(tools) {
+        const allowed = [];
+        const removed = [];
+        const reasons = new Map();
+        for (const tool of tools) {
+            const result = this.engine.evaluateTool(tool);
+            if (result.allowed) {
+                allowed.push(tool);
+            }
+            else {
+                removed.push(tool);
+                if (result.reason) {
+                    reasons.set(tool.name, [result.reason]);
+                }
+                this.logFiltered(tool, result.reason);
+            }
+        }
+        return {
+            allowed,
+            removed,
+            reasons,
+            summary: {
+                originalCount: tools.length,
+                allowedCount: allowed.length,
+                removedCount: removed.length
+            }
+        };
+    }
+    /**
+     * Build filter engine from config
+     */
+    buildEngine(config) {
+        const allowRules = [];
+        const denyRules = [];
+        // Build allow rules
+        if (config.allowList.size > 0) {
+            allowRules.push(new ExactMatchRule(config.allowList, 'allow'));
+        }
+        if (config.allowRegex.length > 0) {
+            allowRules.push(new RegexMatchRule(config.allowRegex, 'allow'));
+        }
+        // Add CategoryMatchRule if categories configured and detector available
+        if (config.allowCategories.size > 0) {
+            if (this.detector) {
+                allowRules.push(new CategoryMatchRule(config.allowCategories, this.detector));
+            }
+            else {
+                // Fail-safe: if allowCategories is set but detector is not available, throw error
+                throw new Error('MCP4_TOOL_FILTER_ALLOW_CATEGORIES is set but OperationDetector is not available. ' +
+                    'This is a configuration error - category filtering requires OpenAPI parser.');
+            }
+        }
+        // Build deny rules
+        if (config.denyList.size > 0) {
+            denyRules.push(new ExactMatchRule(config.denyList, 'deny'));
+        }
+        if (config.denyRegex.length > 0) {
+            denyRules.push(new RegexMatchRule(config.denyRegex, 'deny'));
+        }
+        return new FilterEngine(allowRules, denyRules);
+    }
+    /**
+     * Log filtered tool
+     */
+    logFiltered(tool, reason) {
+        this.logger.info('Tool filtered', {
+            filter_source: 'env',
+            tool: tool.name,
+            action: 'removed',
+            reason: reason || 'unknown'
+        });
+    }
+}
+//# sourceMappingURL=global-tool-filter.js.map

package/dist/src/tool-filter/filter/global-tool-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-tool-filter.js","sourceRoot":"","sources":["../../../../src/tool-filter/filter/global-tool-filter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAatF;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAG3B,YACU,MAAwB,EACxB,MAAc,EACd,QAA4B;QAF5B,WAAM,GAAN,MAAM,CAAkB;QACxB,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAoB;QAEpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAuB;QAC3B,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAE9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,OAAO;YACP,OAAO;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,KAAK,CAAC,MAAM;gBAC3B,YAAY,EAAE,OAAO,CAAC,MAAM;gBAC5B,YAAY,EAAE,OAAO,CAAC,MAAM;aAC7B;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,MAAwB;QAC1C,MAAM,UAAU,GAAG,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,EAAE,CAAC;QAErB,oBAAoB;QACpB,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,wEAAwE;QACxE,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACN,kFAAkF;gBAClF,MAAM,IAAI,KAAK,CACb,mFAAmF;oBACnF,6EAA6E,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,SAAS,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,IAAI,YAAY,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,IAAoB,EAAE,MAAe;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;YAChC,aAAa,EAAE,KAAK;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,IAAI,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/tool-filter/filter/session-tool-filter.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Session tool filter - applies per-session filtering
+ */
+import type { ToolDefinition } from '../../types/profile.js';
+import type { SessionToolFilterRequest } from '../types.js';
+import type { OperationDetector } from '../operation/operation-detector.js';
+export interface SessionToolFilterResult {
+    allowedToolNames: Set<string>;
+    reasons: Map<string, string[]>;
+    normalizedHeader: string;
+}
+/**
+ * Applies session-based tool filtering from X-Mcp4-Tools header
+ */
+export declare class SessionToolFilter {
+    private request;
+    private detector?;
+    private engine;
+    constructor(request: SessionToolFilterRequest, detector?: OperationDetector | undefined);
+    /**
+     * Apply filter to tools
+     */
+    apply(tools: ToolDefinition[]): SessionToolFilterResult;
+    /**
+     * Build filter engine from request
+     */
+    private buildEngine;
+}
+//# sourceMappingURL=session-tool-filter.d.ts.map

package/dist/src/tool-filter/filter/session-tool-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-tool-filter.d.ts","sourceRoot":"","sources":["../../../../src/tool-filter/filter/session-tool-filter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAI5E,MAAM,WAAW,uBAAuB;IACtC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,QAAQ,CAAC;IAJnB,OAAO,CAAC,MAAM,CAAe;gBAGnB,OAAO,EAAE,wBAAwB,EACjC,QAAQ,CAAC,EAAE,iBAAiB,YAAA;IAKtC;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,uBAAuB;IAkCvD;;OAEG;IACH,OAAO,CAAC,WAAW;CAuBpB"}

package/dist/src/tool-filter/filter/session-tool-filter.js

@@ -0,0 +1,69 @@
+/**
+ * Session tool filter - applies per-session filtering
+ */
+import { FilterEngine } from './filter-engine.js';
+import { ExactMatchRule, RegexMatchRule, CategoryMatchRule } from './filter-rules.js';
+/**
+ * Applies session-based tool filtering from X-Mcp4-Tools header
+ */
+export class SessionToolFilter {
+    constructor(request, detector) {
+        this.request = request;
+        this.detector = detector;
+        this.engine = this.buildEngine(request);
+    }
+    /**
+     * Apply filter to tools
+     */
+    apply(tools) {
+        const allowedToolNames = new Set();
+        const reasons = new Map();
+        // If no rules, allow all
+        if (!this.request.hasRules) {
+            for (const tool of tools) {
+                allowedToolNames.add(tool.name);
+            }
+            return {
+                allowedToolNames,
+                reasons,
+                normalizedHeader: this.request.normalizedHeader
+            };
+        }
+        // Apply rules
+        for (const tool of tools) {
+            const result = this.engine.evaluateTool(tool);
+            if (result.allowed) {
+                allowedToolNames.add(tool.name);
+            }
+            else {
+                reasons.set(tool.name, ['session_filter']);
+            }
+        }
+        return {
+            allowedToolNames,
+            reasons,
+            normalizedHeader: this.request.normalizedHeader
+        };
+    }
+    /**
+     * Build filter engine from request
+     */
+    buildEngine(request) {
+        const allowRules = [];
+        if (request.exactNames.size > 0) {
+            allowRules.push(new ExactMatchRule(request.exactNames, 'allow'));
+        }
+        if (request.regexPatterns.length > 0) {
+            allowRules.push(new RegexMatchRule(request.regexPatterns, 'allow'));
+        }
+        if (request.allowCategories.size > 0) {
+            if (!this.detector) {
+                throw new Error('X-Mcp4-Tools includes _allow_list/_allow_read but OperationDetector is not available. ' +
+                    'Category-based session tool filtering requires OpenAPI parser.');
+            }
+            allowRules.push(new CategoryMatchRule(request.allowCategories, this.detector));
+        }
+        return new FilterEngine(allowRules, []);
+    }
+}
+//# sourceMappingURL=session-tool-filter.js.map

package/dist/src/tool-filter/filter/session-tool-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-tool-filter.js","sourceRoot":"","sources":["../../../../src/tool-filter/filter/session-tool-filter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAQtF;;GAEG;AACH,MAAM,OAAO,iBAAiB;IAG5B,YACU,OAAiC,EACjC,QAA4B;QAD5B,YAAO,GAAP,OAAO,CAA0B;QACjC,aAAQ,GAAR,QAAQ,CAAoB;QAEpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAuB;QAC3B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;QAE5C,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,OAAO;gBACL,gBAAgB;gBAChB,OAAO;gBACP,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;aAChD,CAAC;QACJ,CAAC;QAED,cAAc;QACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAE9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO;YACL,gBAAgB;YAChB,OAAO;YACP,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;SAChD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,OAAiC;QACnD,MAAM,UAAU,GAAG,EAAE,CAAC;QAEtB,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CACb,wFAAwF;oBACxF,gEAAgE,CACjE,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,IAAI,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/src/tool-filter/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Tool Filter Module - Public API
+ *
+ * This module provides tool filtering functionality for MCP servers.
+ */
+export { RegexValidator } from './regex/regex-validator.js';
+export { RegexCompiler } from './regex/regex-compiler.js';
+export { OperationClassifier } from './operation/operation-classifier.js';
+export { OpenAPIOperationResolver } from './operation/operation-resolver.js';
+export { OperationDetector } from './operation/operation-detector.js';
+export { FilterEngine, FilterResult } from './filter/filter-engine.js';
+export { ExactMatchRule, RegexMatchRule, CategoryMatchRule } from './filter/filter-rules.js';
+export type { FilterRule } from './filter/filter-rules.js';
+export { GlobalToolFilter } from './filter/global-tool-filter.js';
+export type { GlobalToolFilterResult } from './filter/global-tool-filter.js';
+export { SessionToolFilter } from './filter/session-tool-filter.js';
+export type { SessionToolFilterResult } from './filter/session-tool-filter.js';
+export { EnvConfigParser } from './config/env-config-parser.js';
+export { HeaderConfigParser } from './config/header-config-parser.js';
+export { ToolFilterService } from './integration/tool-filter-service.js';
+export { normalizeToolName } from './utils.js';
+export { normalizeToolFilterHeaderValue, parseSessionToolFilterHeader, applySessionToolFilter, type SessionToolFilter as SessionToolFilterCompat } from './compat.js';
+export type { ValidationResult, CompiledRegex, ToolFilterConfig, ToolFilterResult, SessionToolFilterRequest, SessionToolFilter as SessionToolFilterLegacy, OperationResolver, OperationCategory, ToolFilterCategory, ToolCategories } from './types.js';
+export { InvalidRegexError, ConfigurationError, ValidationError } from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/tool-filter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tool-filter/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAG1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAGtE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,YAAY,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAG3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,YAAY,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,YAAY,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAG/E,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAGtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAGzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,sBAAsB,EACtB,KAAK,iBAAiB,IAAI,uBAAuB,EAClD,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,iBAAiB,IAAI,uBAAuB,EAC5C,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/src/tool-filter/index.js

@@ -0,0 +1,30 @@
+/**
+ * Tool Filter Module - Public API
+ *
+ * This module provides tool filtering functionality for MCP servers.
+ */
+// Regex validation and compilation
+export { RegexValidator } from './regex/regex-validator.js';
+export { RegexCompiler } from './regex/regex-compiler.js';
+// Operation classification
+export { OperationClassifier } from './operation/operation-classifier.js';
+export { OpenAPIOperationResolver } from './operation/operation-resolver.js';
+export { OperationDetector } from './operation/operation-detector.js';
+// Filter engine and rules
+export { FilterEngine, FilterResult } from './filter/filter-engine.js';
+export { ExactMatchRule, RegexMatchRule, CategoryMatchRule } from './filter/filter-rules.js';
+// Filter implementations
+export { GlobalToolFilter } from './filter/global-tool-filter.js';
+export { SessionToolFilter } from './filter/session-tool-filter.js';
+// Config parsers
+export { EnvConfigParser } from './config/env-config-parser.js';
+export { HeaderConfigParser } from './config/header-config-parser.js';
+// Integration service
+export { ToolFilterService } from './integration/tool-filter-service.js';
+// Utilities
+export { normalizeToolName } from './utils.js';
+// Compatibility functions (for legacy code)
+export { normalizeToolFilterHeaderValue, parseSessionToolFilterHeader, applySessionToolFilter } from './compat.js';
+// Errors
+export { InvalidRegexError, ConfigurationError, ValidationError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/src/tool-filter/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tool-filter/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,mCAAmC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,2BAA2B;AAC3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE,0BAA0B;AAC1B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7F,yBAAyB;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGpE,iBAAiB;AACjB,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,sBAAsB;AACtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAEzE,YAAY;AACZ,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,4CAA4C;AAC5C,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,sBAAsB,EAEvB,MAAM,aAAa,CAAC;AAgBrB,SAAS;AACT,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/src/tool-filter/integration/tool-filter-service.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Tool Filter Service - orchestrates all filtering components
+ */
+import type { ToolDefinition } from '../../types/profile.js';
+import type { Logger } from '../../core/logger.js';
+import type { EnvConfigParser } from '../config/env-config-parser.js';
+import type { HeaderConfigParser } from '../config/header-config-parser.js';
+import type { OperationDetector } from '../operation/operation-detector.js';
+import type { SessionToolFilterResult } from '../filter/session-tool-filter.js';
+/**
+ * Service that orchestrates tool filtering from environment and headers
+ */
+export declare class ToolFilterService {
+    private envParser;
+    private headerParser;
+    private logger;
+    private detector?;
+    constructor(envParser: EnvConfigParser, headerParser: HeaderConfigParser, logger: Logger, detector?: OperationDetector | undefined);
+    /**
+     * Apply global filtering based on environment variables
+     *
+     * @param tools - Tools to filter
+     * @param env - Environment variables (process.env)
+     * @returns Filtered tools (or original if no config)
+     */
+    applyGlobalFilter(tools: ToolDefinition[], env: NodeJS.ProcessEnv): ToolDefinition[];
+    /**
+     * Apply session filtering based on X-Mcp4-Tools header
+     *
+     * @param tools - Tools to filter (typically after global filtering)
+     * @param headerValue - X-Mcp4-Tools header value
+     * @returns Session filter result with allowed tool names
+     */
+    applySessionFilter(tools: ToolDefinition[], headerValue: string): SessionToolFilterResult;
+    /**
+     * Check if tool is allowed in session
+     *
+     * @param toolName - Tool name to check
+     * @param sessionResult - Session filter result
+     * @returns true if tool is allowed
+     */
+    isToolAllowed(toolName: string, sessionResult: SessionToolFilterResult): boolean;
+}
+//# sourceMappingURL=tool-filter-service.d.ts.map

package/dist/src/tool-filter/integration/tool-filter-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-filter-service.d.ts","sourceRoot":"","sources":["../../../../src/tool-filter/integration/tool-filter-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAIhF;;GAEG;AACH,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,QAAQ,CAAC;gBAHT,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,kBAAkB,EAChC,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,iBAAiB,YAAA;IAGtC;;;;;;OAMG;IACH,iBAAiB,CACf,KAAK,EAAE,cAAc,EAAE,EACvB,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,cAAc,EAAE;IAmBnB;;;;;;OAMG;IACH,kBAAkB,CAChB,KAAK,EAAE,cAAc,EAAE,EACvB,WAAW,EAAE,MAAM,GAClB,uBAAuB;IAgB1B;;;;;;OAMG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,uBAAuB,GAAG,OAAO;CAGjF"}