SCAL-319970 Add OAuth-gated list_orgs tool

[rohitthughtspot]

Add a new list_orgs MCP tool that lists the ACTIVE Orgs configured on the ThoughtSpot instance, available only to connections authenticated via OAuth.

Auth method is per client connection (decided by the endpoint the client connects to), not per user or per deployment. To gate on it at runtime, this introduces an explicit authMode field on the connection Props:

• OAuth routes (/mcp, /sse) set authMode = "oauth"
• Static-token routes (/bearer/, /token/) set authMode = "bearer" | "token"

The tool is gated with defense in depth:

• Filtered out of listTools() for non-OAuth connections
• Rejected in callTool() if invoked directly by a non-OAuth connection

Data comes from the public POST /api/rest/2.0/orgs/search endpoint (client.searchOrgs), filtered to ACTIVE orgs. The response includes the current_org_id read from session info.

[gemini-code-assist]

Code Review

This pull request introduces the list_orgs tool, which is restricted to OAuth-authenticated connections. It adds the necessary schemas, types, and service methods to search and list active Orgs from the ThoughtSpot instance. Feedback on these changes suggests fetching session info dynamically to ensure current_org_id is reliably populated, and adding a defensive nullish coalescing guard when filtering the upstream Orgs response to prevent potential runtime errors.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

The orgs returned from this.client.searchOrgs could potentially be null or undefined if the upstream API returns an empty or unexpected response. To prevent a runtime TypeError when calling .filter() on a nullish value, we should add a defensive nullish coalescing guard (orgs ?? []).

Suggested change

	const results: Org[] = orgs
	.filter(
	(org): org is typeof org & { id: number } =>
	typeof org.id === "number" && org.status === "ACTIVE",
	)
	const results: Org[] = (orgs ?? [])
	.filter(
	(org): org is typeof org & { id: number } =>
	typeof org.id === "number" && org.status === "ACTIVE",
	)