feat: Introduce Tracking of Used Auth and Bound Keys in parse_tool for Client Strictness

This commit introduces functionality to the `parse_tool` helper to identify and report which bound and authentication keys are actively used during tool parsing. This is a foundational step towards implementing a more robust and predictable client through a new `strict` mode.

The ability to determine used keys will allow the client to:

* Provide errors when users supply unnecessary authentication or bound parameters (in non-`strict` mode).
* Enforce that all provided authentication and bound parameters are consumed by the loaded tools, ensuring no extraneous or potentially misleading information is present (in `strict` mode).

Author: anubhav756

packages/toolbox-core/src/toolbox_core/client.py

@@ -61,7 +61,7 @@ def __parse_tool(
         schema: ToolSchema,
         auth_token_getters: dict[str, Callable[[], str]],
         all_bound_params: Mapping[str, Union[Callable[[], Any], Any]],
-    ) -> ToolboxTool:
+    ) -> tuple[ToolboxTool, set[str], set[str]]:
         """Internal helper to create a callable tool from its schema."""
         # sort into reg, authn, and bound params
         params = []
@@ -90,7 +90,13 @@ def __parse_tool(
             auth_service_token_getters=types.MappingProxyType(auth_token_getters),
             bound_params=types.MappingProxyType(bound_params),
         )
-        return tool
+
+        used_bound_keys = set(bound_params.keys())
+        used_auth_keys: set[str] = set()
+        for required_sources in authn_params.values():
+            used_auth_keys.update(required_sources)
+
+        return tool, used_auth_keys, used_bound_keys
 
     async def __aenter__(self):
         """
@@ -163,7 +169,7 @@ async def load_tool(
         if name not in manifest.tools:
             # TODO: Better exception
             raise Exception(f"Tool '{name}' not found!")
-        tool = self.__parse_tool(
+        tool, _, _ = self.__parse_tool(
             name, manifest.tools[name], auth_token_getters, bound_params
         )
 
@@ -199,7 +205,7 @@ async def load_toolset(
 
         # parse each tools name and schema into a list of ToolboxTools
         tools = [
-            self.__parse_tool(n, s, auth_token_getters, bound_params)
+            self.__parse_tool(n, s, auth_token_getters, bound_params)[0]
             for n, s in manifest.tools.items()
         ]
         return tools