@skillsmith/mcp-server 0.1.0

package/dist/src/middleware/license.js

@@ -0,0 +1,281 @@
+/**
+ * License validation middleware for MCP server
+ *
+ * Validates that the user has the required license features for enterprise tools.
+ * Gracefully degrades if @skillsmith/enterprise is not installed.
+ *
+ * @see SMI-1055: Add license middleware to MCP server
+ */
+import { TOOL_FEATURES, FEATURE_DISPLAY_NAMES, FEATURE_TIERS, } from './toolFeatureMapping.js';
+/**
+ * Configuration for the upgrade URL
+ */
+const UPGRADE_URL = 'https://skillsmith.io/pricing';
+/**
+ * Type guard to validate enterprise module structure
+ */
+function isEnterpriseModule(mod) {
+    return (typeof mod === 'object' &&
+        mod !== null &&
+        'LicenseValidator' in mod &&
+        typeof mod['LicenseValidator'] === 'function');
+}
+/**
+ * Attempt to load the enterprise license validator
+ * Returns null if the package is not installed
+ */
+async function tryLoadEnterpriseValidator() {
+    try {
+        // Dynamic import with variable to prevent TypeScript from resolving at compile time
+        // This is an optional peer dependency that may not be installed
+        const packageName = '@skillsmith/enterprise';
+        const enterprise = await import(/* webpackIgnore: true */ packageName);
+        if (isEnterpriseModule(enterprise)) {
+            return new enterprise.LicenseValidator();
+        }
+        return null;
+    }
+    catch {
+        // Enterprise package not installed - this is expected for community users
+        return null;
+    }
+}
+/**
+ * Check if a tool name corresponds to an enterprise feature
+ *
+ * @param toolName - The name of the MCP tool
+ * @returns true if the tool requires an enterprise license
+ */
+export function isEnterpriseFeature(toolName) {
+    const feature = TOOL_FEATURES[toolName];
+    if (feature == null) {
+        return false;
+    }
+    return FEATURE_TIERS[feature] === 'enterprise';
+}
+/**
+ * Check if a tool name requires any license (team or enterprise)
+ *
+ * @param toolName - The name of the MCP tool
+ * @returns true if the tool requires any license
+ */
+export function requiresLicense(toolName) {
+    return TOOL_FEATURES[toolName] !== null && TOOL_FEATURES[toolName] !== undefined;
+}
+/**
+ * Get the required feature for a tool
+ *
+ * @param toolName - The name of the MCP tool
+ * @returns The feature flag required, or null if community tool
+ */
+export function getRequiredFeature(toolName) {
+    return TOOL_FEATURES[toolName] ?? null;
+}
+/**
+ * Check if license is expiring soon (within 30 days)
+ */
+function getExpirationWarning(expiresAt) {
+    if (!expiresAt)
+        return undefined;
+    const daysUntilExpiry = Math.floor((expiresAt.getTime() - Date.now()) / (1000 * 60 * 60 * 24));
+    if (daysUntilExpiry <= 30 && daysUntilExpiry > 0) {
+        return `Your license expires in ${daysUntilExpiry} day${daysUntilExpiry === 1 ? '' : 's'}. Please renew to avoid service interruption.`;
+    }
+    return undefined;
+}
+/**
+ * Create a license middleware factory
+ *
+ * This middleware reads the license key from environment variables and
+ * validates tool access based on the license features.
+ *
+ * @param options - Optional configuration
+ * @returns License middleware instance
+ */
+export function createLicenseMiddleware(options) {
+    const envVar = options?.licenseKeyEnvVar ?? 'SKILLSMITH_LICENSE_KEY';
+    const cacheTtl = options?.cacheTtlMs ?? 5 * 60 * 1000; // 5 minutes default
+    const context = {
+        validator: null,
+        licenseKey: process.env[envVar],
+        cachedLicense: null,
+        cacheExpiry: 0,
+    };
+    // Initialize validator lazily
+    let validatorPromise = null;
+    async function getValidator() {
+        if (!validatorPromise) {
+            validatorPromise = tryLoadEnterpriseValidator();
+        }
+        if (context.validator === null) {
+            context.validator = await validatorPromise;
+        }
+        return context.validator;
+    }
+    async function getLicenseInfo() {
+        // Check cache first
+        if (context.cachedLicense && Date.now() < context.cacheExpiry) {
+            return context.cachedLicense;
+        }
+        // No license key = community user
+        if (!context.licenseKey) {
+            const communityLicense = {
+                valid: true,
+                tier: 'community',
+                features: [],
+            };
+            context.cachedLicense = communityLicense;
+            context.cacheExpiry = Date.now() + cacheTtl;
+            return communityLicense;
+        }
+        // Try to validate with enterprise package
+        const validator = await getValidator();
+        if (!validator) {
+            // Enterprise package not installed but license key provided
+            // Security-conscious decision: Return null to indicate validation failure
+            // rather than silently degrading to community tier. This ensures paying
+            // customers get feedback that their license couldn't be validated.
+            // See SMI-1130 for rationale.
+            return null;
+        }
+        try {
+            const result = await validator.validate(context.licenseKey);
+            // Check if validation was successful
+            if (!result.valid || !result.license) {
+                // Invalid license - return null to indicate validation failure
+                return null;
+            }
+            // Convert enterprise License to middleware LicenseInfo
+            const license = {
+                valid: true,
+                tier: result.license.tier,
+                features: result.license.features,
+                expiresAt: result.license.expiresAt,
+                organizationId: result.license.customerId,
+            };
+            context.cachedLicense = license;
+            context.cacheExpiry = Date.now() + cacheTtl;
+            return license;
+        }
+        catch {
+            // Validation threw an exception - treat as invalid license
+            return null;
+        }
+    }
+    async function checkFeature(feature) {
+        const license = await getLicenseInfo();
+        // No valid license
+        if (!license || !license.valid) {
+            const tier = FEATURE_TIERS[feature];
+            const displayName = FEATURE_DISPLAY_NAMES[feature];
+            return {
+                valid: false,
+                feature,
+                message: `The "${displayName}" feature requires a ${tier} license. Your license could not be validated.`,
+                upgradeUrl: `${UPGRADE_URL}?feature=${feature}`,
+            };
+        }
+        // Community tier - no paid features
+        if (license.tier === 'community') {
+            const tier = FEATURE_TIERS[feature];
+            const displayName = FEATURE_DISPLAY_NAMES[feature];
+            return {
+                valid: false,
+                feature,
+                message: `The "${displayName}" feature requires a ${tier} license. You are currently on the community tier.`,
+                upgradeUrl: `${UPGRADE_URL}?feature=${feature}&current=community`,
+            };
+        }
+        // Team tier - only team features
+        if (license.tier === 'team' && FEATURE_TIERS[feature] === 'enterprise') {
+            const displayName = FEATURE_DISPLAY_NAMES[feature];
+            return {
+                valid: false,
+                feature,
+                message: `The "${displayName}" feature requires an enterprise license. You are currently on the team tier.`,
+                upgradeUrl: `${UPGRADE_URL}?feature=${feature}&current=team`,
+            };
+        }
+        // Check if feature is in the license
+        if (!license.features.includes(feature)) {
+            const displayName = FEATURE_DISPLAY_NAMES[feature];
+            const tier = FEATURE_TIERS[feature];
+            return {
+                valid: false,
+                feature,
+                message: `The "${displayName}" feature is not included in your license. Please upgrade to access this ${tier} feature.`,
+                upgradeUrl: `${UPGRADE_URL}?feature=${feature}&upgrade=true`,
+            };
+        }
+        const warning = getExpirationWarning(license.expiresAt);
+        return { valid: true, warning };
+    }
+    async function checkTool(toolName) {
+        const requiredFeature = getRequiredFeature(toolName);
+        // Community tool - no license required
+        if (requiredFeature === null) {
+            return { valid: true };
+        }
+        return checkFeature(requiredFeature);
+    }
+    function invalidateCache() {
+        context.cachedLicense = null;
+        context.cacheExpiry = 0;
+    }
+    return {
+        checkFeature,
+        checkTool,
+        getLicenseInfo,
+        invalidateCache,
+    };
+}
+/**
+ * Higher-order function to create feature requirement middleware
+ *
+ * Use this to wrap tool handlers that require specific features.
+ *
+ * @param feature - The feature flag required
+ * @returns Middleware function that checks the feature
+ *
+ * @example
+ * ```typescript
+ * const middleware = createLicenseMiddleware();
+ * const requireAudit = requireFeature('audit_logging');
+ *
+ * // In tool handler:
+ * const validation = await requireAudit(middleware);
+ * if (!validation.valid) {
+ *   return { error: validation.message, upgradeUrl: validation.upgradeUrl };
+ * }
+ * ```
+ */
+export function requireFeature(feature) {
+    return async (middleware) => {
+        return middleware.checkFeature(feature);
+    };
+}
+/**
+ * Create an error response for license validation failures
+ *
+ * @param result - The license validation result
+ * @returns MCP-formatted error response
+ */
+export function createLicenseErrorResponse(result) {
+    return {
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify({
+                    error: 'license_required',
+                    message: result.message,
+                    feature: result.feature,
+                    upgradeUrl: result.upgradeUrl,
+                }, null, 2),
+            },
+        ],
+        isError: true,
+        _meta: result.upgradeUrl ? { upgradeUrl: result.upgradeUrl } : undefined,
+    };
+}
+export { TOOL_FEATURES, FEATURE_DISPLAY_NAMES, FEATURE_TIERS } from './toolFeatureMapping.js';
+//# sourceMappingURL=license.js.map

package/dist/src/middleware/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../../../src/middleware/license.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,aAAa,GAEd,MAAM,yBAAyB,CAAA;AAEhC;;GAEG;AACH,MAAM,WAAW,GAAG,+BAA+B,CAAA;AAuDnD;;GAEG;AACH,SAAS,kBAAkB,CACzB,GAAY;IAEZ,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,kBAAkB,IAAI,GAAG;QACzB,OAAQ,GAA+B,CAAC,kBAAkB,CAAC,KAAK,UAAU,CAC3E,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,0BAA0B;IACvC,IAAI,CAAC;QACH,oFAAoF;QACpF,gEAAgE;QAChE,MAAM,WAAW,GAAG,wBAAwB,CAAA;QAC5C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAA;QACtE,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAA;QAC1C,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,aAAa,CAAC,OAAO,CAAC,KAAK,YAAY,CAAA;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,aAAa,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAA;AAClF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAA;AACxC,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,SAAgB;IAC5C,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAA;IAChC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAC9F,IAAI,eAAe,IAAI,EAAE,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,2BAA2B,eAAe,OAAO,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,+CAA+C,CAAA;IACzI,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAqCD;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAGvC;IACC,MAAM,MAAM,GAAG,OAAO,EAAE,gBAAgB,IAAI,wBAAwB,CAAA;IACpE,MAAM,QAAQ,GAAG,OAAO,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA,CAAC,oBAAoB;IAE1E,MAAM,OAAO,GAA6B;QACxC,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/B,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,CAAC;KACf,CAAA;IAED,8BAA8B;IAC9B,IAAI,gBAAgB,GAA+C,IAAI,CAAA;IAEvE,KAAK,UAAU,YAAY;QACzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,gBAAgB,GAAG,0BAA0B,EAAE,CAAA;QACjD,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,CAAC,SAAS,GAAG,MAAM,gBAAgB,CAAA;QAC5C,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAA;IAC1B,CAAC;IAED,KAAK,UAAU,cAAc;QAC3B,oBAAoB;QACpB,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAC9D,OAAO,OAAO,CAAC,aAAa,CAAA;QAC9B,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,gBAAgB,GAAgB;gBACpC,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,EAAE;aACb,CAAA;YACD,OAAO,CAAC,aAAa,GAAG,gBAAgB,CAAA;YACxC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAA;YAC3C,OAAO,gBAAgB,CAAA;QACzB,CAAC;QAED,0CAA0C;QAC1C,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAA;QACtC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,4DAA4D;YAC5D,0EAA0E;YAC1E,wEAAwE;YACxE,mEAAmE;YACnE,8BAA8B;YAC9B,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;YAE3D,qCAAqC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrC,+DAA+D;gBAC/D,OAAO,IAAI,CAAA;YACb,CAAC;YAED,uDAAuD;YACvD,MAAM,OAAO,GAAgB;gBAC3B,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;gBACzB,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;gBACjC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;gBACnC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU;aAC1C,CAAA;YAED,OAAO,CAAC,aAAa,GAAG,OAAO,CAAA;YAC/B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAA;YAC3C,OAAO,OAAO,CAAA;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;YAC3D,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,OAAoB;QAC9C,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAA;QAEtC,mBAAmB;QACnB,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;YACnC,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;YAClD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,OAAO,EAAE,QAAQ,WAAW,wBAAwB,IAAI,gDAAgD;gBACxG,UAAU,EAAE,GAAG,WAAW,YAAY,OAAO,EAAE;aAChD,CAAA;QACH,CAAC;QAED,oCAAoC;QACpC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;YACnC,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;YAClD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,OAAO,EAAE,QAAQ,WAAW,wBAAwB,IAAI,oDAAoD;gBAC5G,UAAU,EAAE,GAAG,WAAW,YAAY,OAAO,oBAAoB;aAClE,CAAA;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,YAAY,EAAE,CAAC;YACvE,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;YAClD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,OAAO,EAAE,QAAQ,WAAW,+EAA+E;gBAC3G,UAAU,EAAE,GAAG,WAAW,YAAY,OAAO,eAAe;aAC7D,CAAA;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;YAClD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;YACnC,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,OAAO,EAAE,QAAQ,WAAW,4EAA4E,IAAI,WAAW;gBACvH,UAAU,EAAE,GAAG,WAAW,YAAY,OAAO,eAAe;aAC7D,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACvD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACjC,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,QAAgB;QACvC,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAEpD,uCAAuC;QACvC,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;QACxB,CAAC;QAED,OAAO,YAAY,CAAC,eAAe,CAAC,CAAA;IACtC,CAAC;IAED,SAAS,eAAe;QACtB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAA;QAC5B,OAAO,CAAC,WAAW,GAAG,CAAC,CAAA;IACzB,CAAC;IAED,OAAO;QACL,YAAY;QACZ,SAAS;QACT,cAAc;QACd,eAAe;KAChB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAoB;IAEpB,OAAO,KAAK,EAAE,UAA6B,EAAE,EAAE;QAC7C,OAAO,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IACzC,CAAC,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAA+B;IAKxE,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;QACD,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS;KACzE,CAAA;AACH,CAAC;AAID,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA"}

package/dist/src/middleware/toolFeatureMapping.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Tool-to-Feature mapping for license validation
+ *
+ * Maps MCP tool names to their required feature flags.
+ * null = community feature (no license required)
+ * string = feature flag that must be enabled in the license
+ *
+ * @see SMI-1055: Add license middleware to MCP server
+ * @see SMI-1091: Unified tier feature definitions across packages
+ */
+/**
+ * Feature flags for enterprise licensing
+ *
+ * This type mirrors the canonical FeatureFlag from @skillsmith/enterprise.
+ * We define it locally because @skillsmith/enterprise is an optional peer
+ * dependency that may not be installed for community users.
+ *
+ * @see packages/enterprise/src/license/FeatureFlags.ts for canonical definition
+ */
+export type FeatureFlag = 'private_skills' | 'team_workspaces' | 'usage_analytics' | 'priority_support' | 'sso_saml' | 'rbac' | 'audit_logging' | 'siem_export' | 'compliance_reports' | 'private_registry' | 'custom_integrations' | 'advanced_analytics';
+/**
+ * Mapping of tool names to their required feature flags
+ *
+ * null = community tool (no license required)
+ * FeatureFlag = requires that feature to be enabled in license
+ */
+export declare const TOOL_FEATURES: Record<string, FeatureFlag | null>;
+/**
+ * Human-readable names for feature flags
+ */
+export declare const FEATURE_DISPLAY_NAMES: Record<FeatureFlag, string>;
+/**
+ * Tier information for upgrade messaging
+ */
+export declare const FEATURE_TIERS: Record<FeatureFlag, 'team' | 'enterprise'>;
+//# sourceMappingURL=toolFeatureMapping.d.ts.map

package/dist/src/middleware/toolFeatureMapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolFeatureMapping.d.ts","sourceRoot":"","sources":["../../../src/middleware/toolFeatureMapping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAEnB,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAElB,UAAU,GACV,MAAM,GACN,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,kBAAkB,GAElB,qBAAqB,GACrB,oBAAoB,CAAA;AAExB;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAoC5D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAgB7D,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAgBpE,CAAA"}

package/dist/src/middleware/toolFeatureMapping.js

@@ -0,0 +1,90 @@
+/**
+ * Tool-to-Feature mapping for license validation
+ *
+ * Maps MCP tool names to their required feature flags.
+ * null = community feature (no license required)
+ * string = feature flag that must be enabled in the license
+ *
+ * @see SMI-1055: Add license middleware to MCP server
+ * @see SMI-1091: Unified tier feature definitions across packages
+ */
+/**
+ * Mapping of tool names to their required feature flags
+ *
+ * null = community tool (no license required)
+ * FeatureFlag = requires that feature to be enabled in license
+ */
+export const TOOL_FEATURES = {
+    // Core tools - no feature required (null = community)
+    search: null,
+    get_skill: null,
+    install_skill: null,
+    uninstall_skill: null,
+    skill_recommend: null,
+    skill_validate: null,
+    skill_compare: null,
+    skill_suggest: null,
+    // Team tools - require team features
+    publish_private: 'private_skills',
+    team_workspace: 'team_workspaces',
+    share_skill: 'team_workspaces',
+    // Enterprise tools - require enterprise features
+    configure_sso: 'sso_saml',
+    sso_settings: 'sso_saml',
+    audit_export: 'audit_logging',
+    audit_query: 'audit_logging',
+    rbac_manage: 'rbac',
+    rbac_assign_role: 'rbac',
+    rbac_create_policy: 'rbac',
+    siem_export: 'siem_export',
+    compliance_report: 'compliance_reports',
+    private_registry_publish: 'private_registry',
+    private_registry_manage: 'private_registry',
+    // Analytics tools
+    analytics_dashboard: 'advanced_analytics',
+    usage_report: 'advanced_analytics',
+    // Integration tools
+    webhook_configure: 'custom_integrations',
+    api_key_manage: 'custom_integrations',
+};
+/**
+ * Human-readable names for feature flags
+ */
+export const FEATURE_DISPLAY_NAMES = {
+    // Team tier features
+    private_skills: 'Private Skills',
+    team_workspaces: 'Team Workspaces',
+    usage_analytics: 'Usage Analytics',
+    priority_support: 'Priority Support',
+    // Enterprise tier features
+    sso_saml: 'SSO/SAML Integration',
+    rbac: 'Role-Based Access Control',
+    audit_logging: 'Audit Logging',
+    siem_export: 'SIEM Export',
+    compliance_reports: 'Compliance Reports',
+    private_registry: 'Private Registry',
+    // Additional features
+    custom_integrations: 'Custom Integrations',
+    advanced_analytics: 'Advanced Analytics',
+};
+/**
+ * Tier information for upgrade messaging
+ */
+export const FEATURE_TIERS = {
+    // Team tier features
+    private_skills: 'team',
+    team_workspaces: 'team',
+    usage_analytics: 'team',
+    priority_support: 'team',
+    // Enterprise tier features
+    sso_saml: 'enterprise',
+    rbac: 'enterprise',
+    audit_logging: 'enterprise',
+    siem_export: 'enterprise',
+    compliance_reports: 'enterprise',
+    private_registry: 'enterprise',
+    // Additional features
+    custom_integrations: 'enterprise',
+    advanced_analytics: 'enterprise',
+};
+//# sourceMappingURL=toolFeatureMapping.js.map

package/dist/src/middleware/toolFeatureMapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolFeatureMapping.js","sourceRoot":"","sources":["../../../src/middleware/toolFeatureMapping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4BH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAuC;IAC/D,sDAAsD;IACtD,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,IAAI;IACf,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,eAAe,EAAE,IAAI;IACrB,cAAc,EAAE,IAAI;IACpB,aAAa,EAAE,IAAI;IACnB,aAAa,EAAE,IAAI;IAEnB,qCAAqC;IACrC,eAAe,EAAE,gBAAgB;IACjC,cAAc,EAAE,iBAAiB;IACjC,WAAW,EAAE,iBAAiB;IAE9B,iDAAiD;IACjD,aAAa,EAAE,UAAU;IACzB,YAAY,EAAE,UAAU;IACxB,YAAY,EAAE,eAAe;IAC7B,WAAW,EAAE,eAAe;IAC5B,WAAW,EAAE,MAAM;IACnB,gBAAgB,EAAE,MAAM;IACxB,kBAAkB,EAAE,MAAM;IAC1B,WAAW,EAAE,aAAa;IAC1B,iBAAiB,EAAE,oBAAoB;IACvC,wBAAwB,EAAE,kBAAkB;IAC5C,uBAAuB,EAAE,kBAAkB;IAE3C,kBAAkB;IAClB,mBAAmB,EAAE,oBAAoB;IACzC,YAAY,EAAE,oBAAoB;IAElC,oBAAoB;IACpB,iBAAiB,EAAE,qBAAqB;IACxC,cAAc,EAAE,qBAAqB;CACtC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC;IAChE,qBAAqB;IACrB,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;IAClC,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;IACpC,2BAA2B;IAC3B,QAAQ,EAAE,sBAAsB;IAChC,IAAI,EAAE,2BAA2B;IACjC,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,aAAa;IAC1B,kBAAkB,EAAE,oBAAoB;IACxC,gBAAgB,EAAE,kBAAkB;IACpC,sBAAsB;IACtB,mBAAmB,EAAE,qBAAqB;IAC1C,kBAAkB,EAAE,oBAAoB;CACzC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAA+C;IACvE,qBAAqB;IACrB,cAAc,EAAE,MAAM;IACtB,eAAe,EAAE,MAAM;IACvB,eAAe,EAAE,MAAM;IACvB,gBAAgB,EAAE,MAAM;IACxB,2BAA2B;IAC3B,QAAQ,EAAE,YAAY;IACtB,IAAI,EAAE,YAAY;IAClB,aAAa,EAAE,YAAY;IAC3B,WAAW,EAAE,YAAY;IACzB,kBAAkB,EAAE,YAAY;IAChC,gBAAgB,EAAE,YAAY;IAC9B,sBAAsB;IACtB,mBAAmB,EAAE,YAAY;IACjC,kBAAkB,EAAE,YAAY;CACjC,CAAA"}

package/dist/src/onboarding/first-run.d.ts

@@ -0,0 +1,64 @@
+/**
+ * SMI-911: First Run Detection and Tier 1 Skill Auto-Installation
+ *
+ * Detects first run of Skillsmith MCP server and provides:
+ * - First run detection via marker file
+ * - Tier 1 skills list for auto-installation
+ * - Welcome message formatting
+ *
+ * Tier 1 skills (from research doc):
+ * - varlock (score: 95) - Security foundation
+ * - commit (score: 92) - Git workflow
+ * - governance (score: 88) - Code quality
+ */
+/**
+ * Skillsmith configuration directory
+ */
+export declare const SKILLSMITH_DIR: string;
+/**
+ * Marker file indicating first run is complete
+ */
+export declare const FIRST_RUN_MARKER: string;
+/**
+ * Tier 1 skill definition
+ */
+export interface Tier1Skill {
+    /** Full skill ID (e.g., 'anthropic/varlock') */
+    id: string;
+    /** Short name for display */
+    name: string;
+    /** Quality score from research (0-100) */
+    score: number;
+}
+/**
+ * Tier 1 skills to auto-install on first run
+ *
+ * These are the highest-value, lowest-friction skills identified
+ * in the skill prioritization research.
+ */
+export declare const TIER1_SKILLS: readonly Tier1Skill[];
+/**
+ * Check if this is the first run of Skillsmith
+ *
+ * First run is detected by the absence of the marker file
+ * at ~/.skillsmith/.first-run-complete
+ *
+ * @returns true if this is the first run, false otherwise
+ */
+export declare function isFirstRun(): boolean;
+/**
+ * Mark first run as complete
+ *
+ * Creates the marker file at ~/.skillsmith/.first-run-complete
+ * with the current timestamp. Also ensures the .skillsmith
+ * directory exists.
+ */
+export declare function markFirstRunComplete(): void;
+/**
+ * Generate welcome message after first run setup
+ *
+ * @param installedSkills - List of skill names that were installed
+ * @returns Formatted welcome message
+ */
+export declare function getWelcomeMessage(installedSkills: string[]): string;
+//# sourceMappingURL=first-run.d.ts.map

package/dist/src/onboarding/first-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-run.d.ts","sourceRoot":"","sources":["../../../src/onboarding/first-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH;;GAEG;AACH,eAAO,MAAM,cAAc,QAAiC,CAAA;AAE5D;;GAEG;AACH,eAAO,MAAM,gBAAgB,QAA8C,CAAA;AAE3E;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAA;IACV,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAIpC,CAAA;AAEV;;;;;;;GAOG;AACH,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAK3C;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,eAAe,EAAE,MAAM,EAAE,GAAG,MAAM,CAWnE"}

package/dist/src/onboarding/first-run.js

@@ -0,0 +1,77 @@
+/**
+ * SMI-911: First Run Detection and Tier 1 Skill Auto-Installation
+ *
+ * Detects first run of Skillsmith MCP server and provides:
+ * - First run detection via marker file
+ * - Tier 1 skills list for auto-installation
+ * - Welcome message formatting
+ *
+ * Tier 1 skills (from research doc):
+ * - varlock (score: 95) - Security foundation
+ * - commit (score: 92) - Git workflow
+ * - governance (score: 88) - Code quality
+ */
+import { existsSync, mkdirSync, writeFileSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+/**
+ * Skillsmith configuration directory
+ */
+export const SKILLSMITH_DIR = join(homedir(), '.skillsmith');
+/**
+ * Marker file indicating first run is complete
+ */
+export const FIRST_RUN_MARKER = join(SKILLSMITH_DIR, '.first-run-complete');
+/**
+ * Tier 1 skills to auto-install on first run
+ *
+ * These are the highest-value, lowest-friction skills identified
+ * in the skill prioritization research.
+ */
+export const TIER1_SKILLS = [
+    { id: 'anthropic/varlock', name: 'varlock', score: 95 },
+    { id: 'anthropic/commit', name: 'commit', score: 92 },
+    { id: 'anthropic/governance', name: 'governance', score: 88 },
+];
+/**
+ * Check if this is the first run of Skillsmith
+ *
+ * First run is detected by the absence of the marker file
+ * at ~/.skillsmith/.first-run-complete
+ *
+ * @returns true if this is the first run, false otherwise
+ */
+export function isFirstRun() {
+    return !existsSync(FIRST_RUN_MARKER);
+}
+/**
+ * Mark first run as complete
+ *
+ * Creates the marker file at ~/.skillsmith/.first-run-complete
+ * with the current timestamp. Also ensures the .skillsmith
+ * directory exists.
+ */
+export function markFirstRunComplete() {
+    if (!existsSync(SKILLSMITH_DIR)) {
+        mkdirSync(SKILLSMITH_DIR, { recursive: true });
+    }
+    writeFileSync(FIRST_RUN_MARKER, new Date().toISOString());
+}
+/**
+ * Generate welcome message after first run setup
+ *
+ * @param installedSkills - List of skill names that were installed
+ * @returns Formatted welcome message
+ */
+export function getWelcomeMessage(installedSkills) {
+    const skillList = installedSkills.map((s) => `  - ${s}`).join('\n');
+    return `
+Welcome to Skillsmith!
+
+Essential skills installed:
+${skillList}
+
+Try: "Write a commit message" to see the commit skill in action.
+`.trim();
+}
+//# sourceMappingURL=first-run.js.map

package/dist/src/onboarding/first-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-run.js","sourceRoot":"","sources":["../../../src/onboarding/first-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AAE5B;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAA;AAE5D;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAA;AAc3E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;IACvD,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE;IACrD,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE;CACrD,CAAA;AAEV;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,aAAa,CAAC,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,eAAyB;IACzD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEnE,OAAO;;;;EAIP,SAAS;;;CAGV,CAAC,IAAI,EAAE,CAAA;AACR,CAAC"}

package/dist/src/onboarding/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * SMI-911: Onboarding Module
+ *
+ * Exports first-run detection and Tier 1 skill auto-installation functionality.
+ */
+export { SKILLSMITH_DIR, FIRST_RUN_MARKER, TIER1_SKILLS, isFirstRun, markFirstRunComplete, getWelcomeMessage, type Tier1Skill, } from './first-run.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/onboarding/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/onboarding/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,UAAU,GAChB,MAAM,gBAAgB,CAAA"}

package/dist/src/onboarding/index.js

@@ -0,0 +1,7 @@
+/**
+ * SMI-911: Onboarding Module
+ *
+ * Exports first-run detection and Tier 1 skill auto-installation functionality.
+ */
+export { SKILLSMITH_DIR, FIRST_RUN_MARKER, TIER1_SKILLS, isFirstRun, markFirstRunComplete, getWelcomeMessage, } from './first-run.js';
+//# sourceMappingURL=index.js.map

package/dist/src/onboarding/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/onboarding/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,oBAAoB,EACpB,iBAAiB,GAElB,MAAM,gBAAgB,CAAA"}

package/dist/src/suggestions/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @fileoverview Suggestion Module Exports
+ * @module @skillsmith/mcp-server/suggestions
+ * @see SMI-913: Contextual skill suggestions after first success
+ *
+ * Re-exports all suggestion-related types and the SuggestionEngine class.
+ *
+ * @example
+ * import {
+ *   SuggestionEngine,
+ *   type SkillSuggestion,
+ *   type SuggestionConfig,
+ *   type SuggestionState,
+ * } from './suggestions';
+ *
+ * const engine = new SuggestionEngine();
+ * const suggestions = engine.getSuggestions(context);
+ */
+export { SuggestionEngine } from './suggestion-engine.js';
+export type { SkillSuggestion, SuggestionConfig, SuggestionState } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/suggestions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/suggestions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAEzD,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA"}

package/dist/src/suggestions/index.js

@@ -0,0 +1,20 @@
+/**
+ * @fileoverview Suggestion Module Exports
+ * @module @skillsmith/mcp-server/suggestions
+ * @see SMI-913: Contextual skill suggestions after first success
+ *
+ * Re-exports all suggestion-related types and the SuggestionEngine class.
+ *
+ * @example
+ * import {
+ *   SuggestionEngine,
+ *   type SkillSuggestion,
+ *   type SuggestionConfig,
+ *   type SuggestionState,
+ * } from './suggestions';
+ *
+ * const engine = new SuggestionEngine();
+ * const suggestions = engine.getSuggestions(context);
+ */
+export { SuggestionEngine } from './suggestion-engine.js';
+//# sourceMappingURL=index.js.map

package/dist/src/suggestions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/suggestions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA"}