@skillsmith/mcp-server 0.4.6 → 0.4.8

package/dist/src/tools/audit-tools.d.ts

@@ -0,0 +1,172 @@
+/**
+ * @fileoverview Enterprise audit MCP tools — query audit logs and export to SIEM
+ * @module @skillsmith/mcp-server/tools/audit-tools
+ * @see SMI-3894: Tier feature gap remediation (Wave 3)
+ *
+ * Bridges the existing EnterpriseAuditLogger backend to MCP tool handlers.
+ * Uses dynamic import() for @skillsmith/enterprise (optional peer dependency)
+ * to avoid crashing the MCP server for community users.
+ *
+ * Tier gate: Enterprise (audit_logging / siem_export feature flags).
+ */
+import { z } from 'zod';
+import type { ToolContext } from '../context.js';
+export declare const auditExportInputSchema: z.ZodObject<{
+    startDate: z.ZodOptional<z.ZodString>;
+    endDate: z.ZodOptional<z.ZodString>;
+    eventType: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    limit?: number | undefined;
+    startDate?: string | undefined;
+    endDate?: string | undefined;
+    eventType?: string | undefined;
+}, {
+    limit?: number | undefined;
+    startDate?: string | undefined;
+    endDate?: string | undefined;
+    eventType?: string | undefined;
+}>;
+export type AuditExportInput = z.infer<typeof auditExportInputSchema>;
+export declare const auditQueryInputSchema: z.ZodObject<{
+    actor: z.ZodOptional<z.ZodString>;
+    resource: z.ZodOptional<z.ZodString>;
+    eventType: z.ZodOptional<z.ZodString>;
+    result: z.ZodOptional<z.ZodEnum<["success", "failure", "warning"]>>;
+    startDate: z.ZodOptional<z.ZodString>;
+    endDate: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    limit?: number | undefined;
+    result?: "warning" | "success" | "failure" | undefined;
+    actor?: string | undefined;
+    resource?: string | undefined;
+    startDate?: string | undefined;
+    endDate?: string | undefined;
+    eventType?: string | undefined;
+}, {
+    limit?: number | undefined;
+    result?: "warning" | "success" | "failure" | undefined;
+    actor?: string | undefined;
+    resource?: string | undefined;
+    startDate?: string | undefined;
+    endDate?: string | undefined;
+    eventType?: string | undefined;
+}>;
+export type AuditQueryInput = z.infer<typeof auditQueryInputSchema>;
+export declare const siemExportInputSchema: z.ZodObject<{
+    startDate: z.ZodOptional<z.ZodString>;
+    endDate: z.ZodOptional<z.ZodString>;
+    format: z.ZodOptional<z.ZodEnum<["json", "syslog", "cef"]>>;
+}, "strip", z.ZodTypeAny, {
+    format?: "json" | "syslog" | "cef" | undefined;
+    startDate?: string | undefined;
+    endDate?: string | undefined;
+}, {
+    format?: "json" | "syslog" | "cef" | undefined;
+    startDate?: string | undefined;
+    endDate?: string | undefined;
+}>;
+export type SiemExportInput = z.infer<typeof siemExportInputSchema>;
+export declare const auditExportToolSchema: {
+    name: "audit_export";
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            startDate: {
+                type: string;
+                description: string;
+            };
+            endDate: {
+                type: string;
+                description: string;
+            };
+            eventType: {
+                type: string;
+                description: string;
+            };
+            limit: {
+                type: string;
+                description: string;
+            };
+        };
+    };
+};
+export declare const auditQueryToolSchema: {
+    name: "audit_query";
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            actor: {
+                type: string;
+                description: string;
+            };
+            resource: {
+                type: string;
+                description: string;
+            };
+            eventType: {
+                type: string;
+                description: string;
+            };
+            result: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            startDate: {
+                type: string;
+                description: string;
+            };
+            endDate: {
+                type: string;
+                description: string;
+            };
+            limit: {
+                type: string;
+                description: string;
+            };
+        };
+    };
+};
+export declare const siemExportToolSchema: {
+    name: "siem_export";
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            startDate: {
+                type: string;
+                description: string;
+            };
+            endDate: {
+                type: string;
+                description: string;
+            };
+            format: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+        };
+    };
+};
+export declare function executeAuditExport(input: AuditExportInput, toolContext: ToolContext): Promise<{
+    events: Record<string, unknown>[];
+    total: number;
+    returned: number;
+}>;
+export declare function executeAuditQuery(input: AuditQueryInput, toolContext: ToolContext): Promise<{
+    events: Record<string, unknown>[];
+    total: number;
+    returned: number;
+}>;
+export declare function executeSiemExport(input: SiemExportInput, toolContext: ToolContext): Promise<{
+    events: Record<string, unknown>[];
+    total: number;
+    format: "json" | "syslog" | "cef";
+    exportedAt: string;
+}>;
+//# sourceMappingURL=audit-tools.d.ts.map

package/dist/src/tools/audit-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-tools.d.ts","sourceRoot":"","sources":["../../../src/tools/audit-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAMhD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;EAoBjC,CAAA;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAErE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;EAQhC,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAOhC,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAMnE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;CAejC,CAAA;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqBhC,CAAA;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;CAkBhC,CAAA;AA8BD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW;;;;GAazF;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW;;;;GAgBvF;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW;;;;;GAgBvF"}

package/dist/src/tools/audit-tools.js

@@ -0,0 +1,187 @@
+/**
+ * @fileoverview Enterprise audit MCP tools — query audit logs and export to SIEM
+ * @module @skillsmith/mcp-server/tools/audit-tools
+ * @see SMI-3894: Tier feature gap remediation (Wave 3)
+ *
+ * Bridges the existing EnterpriseAuditLogger backend to MCP tool handlers.
+ * Uses dynamic import() for @skillsmith/enterprise (optional peer dependency)
+ * to avoid crashing the MCP server for community users.
+ *
+ * Tier gate: Enterprise (audit_logging / siem_export feature flags).
+ */
+import { z } from 'zod';
+// ============================================================================
+// Input schemas
+// ============================================================================
+export const auditExportInputSchema = z.object({
+    startDate: z
+        .string()
+        .optional()
+        .describe('ISO 8601 start date for export range (defaults to 24 hours ago)'),
+    endDate: z.string().optional().describe('ISO 8601 end date for export range (defaults to now)'),
+    eventType: z
+        .string()
+        .optional()
+        .describe('Filter by event type: sso_login, rbac_check, license_validation, ' +
+        'exporter_registered, exporter_unregistered, export_completed, export_failed'),
+    limit: z
+        .number()
+        .int()
+        .min(1)
+        .max(1000)
+        .optional()
+        .describe('Maximum number of events to return (default 100, max 1000)'),
+});
+export const auditQueryInputSchema = z.object({
+    actor: z.string().optional().describe('Filter by actor (user ID or email)'),
+    resource: z.string().optional().describe('Filter by resource name'),
+    eventType: z.string().optional().describe('Filter by event type'),
+    result: z.enum(['success', 'failure', 'warning']).optional().describe('Filter by result'),
+    startDate: z.string().optional().describe('ISO 8601 start date'),
+    endDate: z.string().optional().describe('ISO 8601 end date'),
+    limit: z.number().int().min(1).max(1000).optional().describe('Max results (default 100)'),
+});
+export const siemExportInputSchema = z.object({
+    startDate: z
+        .string()
+        .optional()
+        .describe('ISO 8601 start date for export range (defaults to 1 hour ago)'),
+    endDate: z.string().optional().describe('ISO 8601 end date (defaults to now)'),
+    format: z.enum(['json', 'syslog', 'cef']).optional().describe('Export format (default json)'),
+});
+// ============================================================================
+// Tool schemas
+// ============================================================================
+export const auditExportToolSchema = {
+    name: 'audit_export',
+    description: 'Export audit log events for a given time range. ' +
+        'Requires Enterprise tier (audit_logging feature). ' +
+        'Returns structured audit events in JSON format.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            startDate: { type: 'string', description: 'ISO 8601 start date (defaults to 24h ago)' },
+            endDate: { type: 'string', description: 'ISO 8601 end date (defaults to now)' },
+            eventType: { type: 'string', description: 'Filter by event type' },
+            limit: { type: 'number', description: 'Max events to return (default 100, max 1000)' },
+        },
+    },
+};
+export const auditQueryToolSchema = {
+    name: 'audit_query',
+    description: 'Query audit logs with filters (actor, resource, event type, result, date range). ' +
+        'Requires Enterprise tier (audit_logging feature).',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            actor: { type: 'string', description: 'Filter by actor (user ID or email)' },
+            resource: { type: 'string', description: 'Filter by resource name' },
+            eventType: { type: 'string', description: 'Filter by event type' },
+            result: {
+                type: 'string',
+                enum: ['success', 'failure', 'warning'],
+                description: 'Filter by result',
+            },
+            startDate: { type: 'string', description: 'ISO 8601 start date' },
+            endDate: { type: 'string', description: 'ISO 8601 end date' },
+            limit: { type: 'number', description: 'Max results (default 100, max 1000)' },
+        },
+    },
+};
+export const siemExportToolSchema = {
+    name: 'siem_export',
+    description: 'Export audit events for SIEM ingestion (CloudWatch, Splunk, Datadog). ' +
+        'Requires Enterprise tier (siem_export feature). ' +
+        'SIEM destination is configured via environment variables, not tool arguments.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            startDate: { type: 'string', description: 'ISO 8601 start date (defaults to 1h ago)' },
+            endDate: { type: 'string', description: 'ISO 8601 end date (defaults to now)' },
+            format: {
+                type: 'string',
+                enum: ['json', 'syslog', 'cef'],
+                description: 'Export format (default json)',
+            },
+        },
+    },
+};
+/**
+ * Dynamically load EnterpriseAuditLogger from the optional @skillsmith/enterprise package.
+ * Returns a logger with queryEnterprise() and dispose() methods.
+ */
+async function getAuditLogger(toolContext) {
+    try {
+        // @skillsmith/enterprise is an optional peer dep — suppress TS2307.
+        // @ts-expect-error -- optional peer dependency, may not be installed
+        const enterprise = await import('@skillsmith/enterprise');
+        return new enterprise.EnterpriseAuditLogger(toolContext.db);
+    }
+    catch {
+        throw new Error('Enterprise audit logging requires the @skillsmith/enterprise package. ' +
+            'This feature is available on the Enterprise tier.');
+    }
+}
+export async function executeAuditExport(input, toolContext) {
+    const logger = await getAuditLogger(toolContext);
+    try {
+        const filter = {};
+        if (input.startDate)
+            filter.startDate = input.startDate;
+        if (input.endDate)
+            filter.endDate = input.endDate;
+        if (input.eventType)
+            filter.enterpriseEventType = input.eventType;
+        const entries = logger.queryEnterprise(filter);
+        const limited = entries.slice(0, input.limit ?? 100);
+        return { events: limited, total: entries.length, returned: limited.length };
+    }
+    finally {
+        logger.dispose();
+    }
+}
+export async function executeAuditQuery(input, toolContext) {
+    const logger = await getAuditLogger(toolContext);
+    try {
+        const filter = {};
+        if (input.actor)
+            filter.actor = input.actor;
+        if (input.resource)
+            filter.resource = input.resource;
+        if (input.eventType)
+            filter.enterpriseEventType = input.eventType;
+        if (input.result)
+            filter.result = input.result;
+        if (input.startDate)
+            filter.startDate = input.startDate;
+        if (input.endDate)
+            filter.endDate = input.endDate;
+        const entries = logger.queryEnterprise(filter);
+        const limited = entries.slice(0, input.limit ?? 100);
+        return { events: limited, total: entries.length, returned: limited.length };
+    }
+    finally {
+        logger.dispose();
+    }
+}
+export async function executeSiemExport(input, toolContext) {
+    const logger = await getAuditLogger(toolContext);
+    try {
+        const filter = {};
+        if (input.startDate)
+            filter.startDate = input.startDate;
+        if (input.endDate)
+            filter.endDate = input.endDate;
+        const entries = logger.queryEnterprise(filter);
+        return {
+            events: entries,
+            total: entries.length,
+            format: input.format ?? 'json',
+            exportedAt: new Date().toISOString(),
+        };
+    }
+    finally {
+        logger.dispose();
+    }
+}
+//# sourceMappingURL=audit-tools.js.map

package/dist/src/tools/audit-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-tools.js","sourceRoot":"","sources":["../../../src/tools/audit-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iEAAiE,CAAC;IAC9E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAC/F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,mEAAmE;QACjE,6EAA6E,CAChF;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,4DAA4D,CAAC;CAC1E,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC3E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACnE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACjE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACzF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;CAC1F,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAC9F,CAAC,CAAA;AAIF,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,cAAuB;IAC7B,WAAW,EACT,kDAAkD;QAClD,oDAAoD;QACpD,iDAAiD;IACnD,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2CAA2C,EAAE;YACvF,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC/E,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;YAClE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;SACvF;KACF;CACF,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,aAAsB;IAC5B,WAAW,EACT,mFAAmF;QACnF,mDAAmD;IACrD,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;YAC5E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE;YACpE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;YAClE,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;gBACvC,WAAW,EAAE,kBAAkB;aAChC;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;YACjE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;YAC7D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;SAC9E;KACF;CACF,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,aAAsB;IAC5B,WAAW,EACT,wEAAwE;QACxE,kDAAkD;QAClD,+EAA+E;IACjF,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;YACtF,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;YAC/E,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;gBAC/B,WAAW,EAAE,8BAA8B;aAC5C;SACF;KACF;CACF,CAAA;AAYD;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,WAAwB;IACpD,IAAI,CAAC;QACH,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAA;QACzD,OAAO,IAAI,UAAU,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,CAAoB,CAAA;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,mDAAmD,CACtD,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAuB,EAAE,WAAwB;IACxF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;QACvD,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QACjD,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,SAAS,CAAA;QACjE,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,CAAA;QACpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;IAC7E,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAA;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAsB,EAAE,WAAwB;IACtF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,IAAI,KAAK,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;QAC3C,IAAI,KAAK,CAAC,QAAQ;YAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QACpD,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,SAAS,CAAA;QACjE,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC9C,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;QACvD,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QACjD,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,CAAA;QACpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;IAC7E,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAA;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAsB,EAAE,WAAwB;IACtF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,IAAI,KAAK,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;QACvD,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QACjD,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QAC9C,OAAO;YACL,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,MAAM;YAC9B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAA;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/src/tools/audit-tools.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @fileoverview Tests for enterprise audit MCP tools
+ * @see SMI-3894: Tier feature gap remediation (Wave 3)
+ *
+ * Tests the audit_export, audit_query, and siem_export tool handlers.
+ * Since @skillsmith/enterprise is an optional peer dep, we mock the
+ * dynamic import to test handler logic without requiring the package.
+ */
+export {};
+//# sourceMappingURL=audit-tools.test.d.ts.map

package/dist/src/tools/audit-tools.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-tools.test.d.ts","sourceRoot":"","sources":["../../../src/tools/audit-tools.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/src/tools/audit-tools.test.js

@@ -0,0 +1,147 @@
+/**
+ * @fileoverview Tests for enterprise audit MCP tools
+ * @see SMI-3894: Tier feature gap remediation (Wave 3)
+ *
+ * Tests the audit_export, audit_query, and siem_export tool handlers.
+ * Since @skillsmith/enterprise is an optional peer dep, we mock the
+ * dynamic import to test handler logic without requiring the package.
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { auditExportInputSchema, auditQueryInputSchema, siemExportInputSchema, executeAuditExport, executeAuditQuery, executeSiemExport, } from './audit-tools.js';
+// Mock enterprise package — dynamic import returns this
+const mockEntries = [
+    { id: '1', event_type: 'sso_login', actor: 'user@test.com', result: 'success' },
+    { id: '2', event_type: 'rbac_check', actor: 'admin@test.com', result: 'failure' },
+    { id: '3', event_type: 'license_validation', actor: 'user@test.com', result: 'success' },
+];
+const mockDispose = vi.fn();
+const mockQueryEnterprise = vi.fn().mockReturnValue(mockEntries);
+vi.mock('@skillsmith/enterprise', () => ({
+    EnterpriseAuditLogger: class MockAuditLogger {
+        queryEnterprise = mockQueryEnterprise;
+        dispose = mockDispose;
+    },
+}));
+const mockToolContext = { db: {} };
+describe('audit-tools', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        mockQueryEnterprise.mockReturnValue(mockEntries);
+    });
+    describe('input schemas', () => {
+        it('auditExportInputSchema accepts empty input', () => {
+            expect(auditExportInputSchema.parse({})).toEqual({});
+        });
+        it('auditExportInputSchema accepts all fields', () => {
+            const input = {
+                startDate: '2026-01-01T00:00:00Z',
+                endDate: '2026-01-02T00:00:00Z',
+                eventType: 'sso_login',
+                limit: 50,
+            };
+            expect(auditExportInputSchema.parse(input)).toEqual(input);
+        });
+        it('auditExportInputSchema rejects limit > 1000', () => {
+            expect(() => auditExportInputSchema.parse({ limit: 1001 })).toThrow();
+        });
+        it('auditExportInputSchema rejects limit < 1', () => {
+            expect(() => auditExportInputSchema.parse({ limit: 0 })).toThrow();
+        });
+        it('auditQueryInputSchema accepts result enum values', () => {
+            expect(auditQueryInputSchema.parse({ result: 'success' })).toEqual({ result: 'success' });
+            expect(auditQueryInputSchema.parse({ result: 'failure' })).toEqual({ result: 'failure' });
+            expect(auditQueryInputSchema.parse({ result: 'warning' })).toEqual({ result: 'warning' });
+        });
+        it('auditQueryInputSchema rejects invalid result', () => {
+            expect(() => auditQueryInputSchema.parse({ result: 'unknown' })).toThrow();
+        });
+        it('siemExportInputSchema accepts format enum', () => {
+            expect(siemExportInputSchema.parse({ format: 'json' })).toEqual({ format: 'json' });
+            expect(siemExportInputSchema.parse({ format: 'syslog' })).toEqual({ format: 'syslog' });
+            expect(siemExportInputSchema.parse({ format: 'cef' })).toEqual({ format: 'cef' });
+        });
+        it('siemExportInputSchema rejects invalid format', () => {
+            expect(() => siemExportInputSchema.parse({ format: 'xml' })).toThrow();
+        });
+    });
+    describe('executeAuditExport', () => {
+        it('returns all entries with no filters', async () => {
+            const result = await executeAuditExport({}, mockToolContext);
+            expect(result.total).toBe(3);
+            expect(result.returned).toBe(3);
+            expect(result.events).toHaveLength(3);
+            expect(mockDispose).toHaveBeenCalled();
+        });
+        it('passes filters to queryEnterprise', async () => {
+            await executeAuditExport({ startDate: '2026-01-01', eventType: 'sso_login' }, mockToolContext);
+            expect(mockQueryEnterprise).toHaveBeenCalledWith({
+                startDate: '2026-01-01',
+                enterpriseEventType: 'sso_login',
+            });
+        });
+        it('respects limit parameter', async () => {
+            const result = await executeAuditExport({ limit: 2 }, mockToolContext);
+            expect(result.returned).toBe(2);
+            expect(result.total).toBe(3);
+            expect(result.events).toHaveLength(2);
+        });
+        it('defaults limit to 100', async () => {
+            const manyEntries = Array.from({ length: 150 }, (_, i) => ({ id: String(i) }));
+            mockQueryEnterprise.mockReturnValue(manyEntries);
+            const result = await executeAuditExport({}, mockToolContext);
+            expect(result.returned).toBe(100);
+            expect(result.total).toBe(150);
+        });
+        it('disposes logger even on error', async () => {
+            mockQueryEnterprise.mockImplementation(() => {
+                throw new Error('query failed');
+            });
+            await expect(executeAuditExport({}, mockToolContext)).rejects.toThrow('query failed');
+            expect(mockDispose).toHaveBeenCalled();
+        });
+    });
+    describe('executeAuditQuery', () => {
+        it('passes all filter fields to queryEnterprise', async () => {
+            await executeAuditQuery({
+                actor: 'user@test.com',
+                resource: 'skills',
+                eventType: 'rbac_check',
+                result: 'failure',
+                startDate: '2026-01-01',
+                endDate: '2026-01-02',
+            }, mockToolContext);
+            expect(mockQueryEnterprise).toHaveBeenCalledWith({
+                actor: 'user@test.com',
+                resource: 'skills',
+                enterpriseEventType: 'rbac_check',
+                result: 'failure',
+                startDate: '2026-01-01',
+                endDate: '2026-01-02',
+            });
+        });
+        it('returns paginated results', async () => {
+            const result = await executeAuditQuery({ limit: 1 }, mockToolContext);
+            expect(result.returned).toBe(1);
+            expect(result.total).toBe(3);
+        });
+    });
+    describe('executeSiemExport', () => {
+        it('returns events with format and timestamp', async () => {
+            const result = await executeSiemExport({ format: 'syslog' }, mockToolContext);
+            expect(result.format).toBe('syslog');
+            expect(result.total).toBe(3);
+            expect(result.exportedAt).toBeDefined();
+            expect(new Date(result.exportedAt).getTime()).not.toBeNaN();
+        });
+        it('defaults format to json', async () => {
+            const result = await executeSiemExport({}, mockToolContext);
+            expect(result.format).toBe('json');
+        });
+        it('returns all events (no limit)', async () => {
+            const result = await executeSiemExport({}, mockToolContext);
+            expect(result.events).toHaveLength(3);
+            expect(result.total).toBe(3);
+        });
+    });
+});
+//# sourceMappingURL=audit-tools.test.js.map

package/dist/src/tools/audit-tools.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-tools.test.js","sourceRoot":"","sources":["../../../src/tools/audit-tools.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,kBAAkB,CAAA;AAGzB,wDAAwD;AACxD,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE;IAC/E,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE;IACjF,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE;CACzF,CAAA;AAED,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;AAC3B,MAAM,mBAAmB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;AAEhE,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,qBAAqB,EAAE,MAAM,eAAe;QAC1C,eAAe,GAAG,mBAAmB,CAAA;QACrC,OAAO,GAAG,WAAW,CAAA;KACtB;CACF,CAAC,CAAC,CAAA;AAEH,MAAM,eAAe,GAAG,EAAE,EAAE,EAAE,EAAE,EAA4B,CAAA;AAE5D,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;QAClB,mBAAmB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACtD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,KAAK,GAAG;gBACZ,SAAS,EAAE,sBAAsB;gBACjC,OAAO,EAAE,sBAAsB;gBAC/B,SAAS,EAAE,WAAW;gBACtB,KAAK,EAAE,EAAE;aACV,CAAA;YACD,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;QACvE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;QACpE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YACzF,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;YACzF,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;QAC3F,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;QAC5E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACnF,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YACvF,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QACnF,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;QACxE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YAC5D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC5B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACrC,MAAM,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,kBAAkB,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,eAAe,CAAC,CAAA;YAC9F,MAAM,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC;gBAC/C,SAAS,EAAE,YAAY;gBACvB,mBAAmB,EAAE,WAAW;aACjC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;YACrC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAC9E,mBAAmB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;YAChD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YAC5D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;YACjC,CAAC,CAAC,CAAA;YACF,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;YACrF,MAAM,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAA;QACxC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,iBAAiB,CACrB;gBACE,KAAK,EAAE,eAAe;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,YAAY;gBACvB,OAAO,EAAE,YAAY;aACtB,EACD,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC;gBAC/C,KAAK,EAAE,eAAe;gBACtB,QAAQ,EAAE,QAAQ;gBAClB,mBAAmB,EAAE,YAAY;gBACjC,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,YAAY;gBACvB,OAAO,EAAE,YAAY;aACtB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YACrE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC/B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,eAAe,CAAC,CAAA;YAC7E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC5B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;YACvC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QAC7D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YAC3D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YAC3D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/tools/compliance-tools.d.ts

@@ -0,0 +1,103 @@
+/**
+ * @fileoverview Compliance report MCP tool
+ * @module @skillsmith/mcp-server/tools/compliance-tools
+ * @see SMI-3906: Compliance Report MCP Tool
+ *
+ * Generates compliance reports in SOC2 (markdown), CycloneDX (JSON SBOM),
+ * or raw JSON format from local skill inventory and audit data.
+ *
+ * Scope: local inventory only. For server-side audit data, use audit_export.
+ *
+ * Tier gate: Enterprise (compliance_reports feature flag).
+ */
+import { z } from 'zod';
+import type { ToolContext } from '../context.js';
+export declare const complianceReportInputSchema: z.ZodObject<{
+    format: z.ZodEnum<["soc2", "cyclonedx", "json"]>;
+    period: z.ZodDefault<z.ZodOptional<z.ZodEnum<["30d", "90d", "365d"]>>>;
+    includeUserActivity: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    format: "json" | "soc2" | "cyclonedx";
+    period: "30d" | "90d" | "365d";
+    includeUserActivity: boolean;
+}, {
+    format: "json" | "soc2" | "cyclonedx";
+    period?: "30d" | "90d" | "365d" | undefined;
+    includeUserActivity?: boolean | undefined;
+}>;
+export type ComplianceReportInput = z.infer<typeof complianceReportInputSchema>;
+export declare const complianceReportToolSchema: {
+    name: "compliance_report";
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            format: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            period: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            includeUserActivity: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};
+export interface SkillInventoryItem {
+    skillId: string;
+    version: string;
+    trustTier: 'verified' | 'community' | 'experimental' | 'unknown';
+    installedAt: string;
+    lastUpdated: string;
+}
+export interface AuditSummary {
+    totalEvents: number;
+    installCount: number;
+    uninstallCount: number;
+    searchCount: number;
+    periodStart: string;
+    periodEnd: string;
+}
+export interface UserActivitySummary {
+    uniqueUsers: number;
+    topTools: Array<{
+        tool: string;
+        count: number;
+    }>;
+    activeDays: number;
+}
+export interface ComplianceData {
+    skills: SkillInventoryItem[];
+    auditSummary: AuditSummary;
+    userActivity: UserActivitySummary | null;
+    configState: {
+        ssoEnabled: boolean;
+        rbacEnabled: boolean;
+        auditLoggingEnabled: boolean;
+        webhooksConfigured: number;
+    };
+}
+export interface ComplianceService {
+    gatherData(periodDays: number, includeUserActivity: boolean): Promise<ComplianceData>;
+}
+/** @internal Exported for testing */
+export declare function createStubComplianceService(): ComplianceService;
+/** Replace the compliance service implementation */
+export declare function setComplianceService(svc: ComplianceService): void;
+export interface ComplianceReportResult {
+    format: 'soc2' | 'cyclonedx' | 'json';
+    dataSource: 'stub' | 'live';
+    generatedAt: string;
+    scope: 'local';
+    period: string;
+    report: string | Record<string, unknown>;
+}
+export declare function executeComplianceReport(input: ComplianceReportInput, context: ToolContext): Promise<ComplianceReportResult>;
+//# sourceMappingURL=compliance-tools.d.ts.map

package/dist/src/tools/compliance-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-tools.d.ts","sourceRoot":"","sources":["../../../src/tools/compliance-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAQhD,eAAO,MAAM,2BAA2B;;;;;;;;;;;;EAYtC,CAAA;AAEF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAM/E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;CA0BtC,CAAA;AAMD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,UAAU,GAAG,WAAW,GAAG,cAAc,GAAG,SAAS,CAAA;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChD,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,kBAAkB,EAAE,CAAA;IAC5B,YAAY,EAAE,YAAY,CAAA;IAC1B,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAAA;IACxC,WAAW,EAAE;QACX,UAAU,EAAE,OAAO,CAAA;QACnB,WAAW,EAAE,OAAO,CAAA;QACpB,mBAAmB,EAAE,OAAO,CAAA;QAC5B,kBAAkB,EAAE,MAAM,CAAA;KAC3B,CAAA;CACF;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;CACtF;AAMD,qCAAqC;AACrC,wBAAgB,2BAA2B,IAAI,iBAAiB,CAkD/D;AAKD,oDAAoD;AACpD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAEjE;AAMD,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAA;IACrC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACzC;AAsGD,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,qBAAqB,EAC5B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,sBAAsB,CAAC,CAgDjC"}