@skillsmith/mcp-server 0.4.7 → 0.4.8

package/dist/src/tools/team-workspace.js

@@ -0,0 +1,243 @@
+/**
+ * @fileoverview team_workspace and share_skill MCP tools
+ * @module @skillsmith/mcp-server/tools/team-workspace
+ * @see SMI-3895: Team Workspace + Share Skill MCP Tools
+ * @see SMI-3898: Skill Sharing Controls
+ *
+ * Registry-mediated architecture: workspace metadata lives in Supabase
+ * (server-side), not local SQLite. MCP tools call Supabase RPCs for
+ * workspace CRUD. License key resolves to team_id for auth.
+ *
+ * Tier gate: Team (team_workspaces feature flag).
+ */
+import { z } from 'zod';
+import { isSupabaseConfigured } from '../supabase-client.js';
+import { createStubService } from './team-workspace.stub.js';
+// Re-export stub factory for external consumers and tests
+export { createStubService } from './team-workspace.stub.js';
+// ============================================================================
+// Input schemas
+// ============================================================================
+export const teamWorkspaceInputSchema = z.object({
+    action: z.enum(['create', 'list', 'get', 'delete']),
+    name: z.string().min(1).max(100).optional(),
+    description: z.string().max(500).optional(),
+    workspaceId: z.string().uuid().optional(),
+});
+export const shareSkillInputSchema = z.object({
+    action: z.enum(['add', 'remove', 'list']),
+    workspaceId: z.string().uuid(),
+    skillId: z
+        .string()
+        .regex(/^[^/]+\/[^/]+$/, 'Must be author/name format')
+        .optional(),
+});
+// ============================================================================
+// Tool schemas for MCP registration
+// ============================================================================
+export const teamWorkspaceToolSchema = {
+    name: 'team_workspace',
+    description: 'Manage team workspaces (create, list, get, delete). Requires Team tier license.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            action: {
+                type: 'string',
+                enum: ['create', 'list', 'get', 'delete'],
+                description: 'Workspace operation to perform',
+            },
+            name: {
+                type: 'string',
+                description: 'Workspace name (required for create)',
+            },
+            description: {
+                type: 'string',
+                description: 'Workspace description (optional for create)',
+            },
+            workspaceId: {
+                type: 'string',
+                description: 'Workspace ID (required for get/delete)',
+            },
+        },
+        required: ['action'],
+    },
+};
+export const shareSkillToolSchema = {
+    name: 'share_skill',
+    description: 'Add, remove, or list skills in a team workspace. Requires Team tier license.',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            action: {
+                type: 'string',
+                enum: ['add', 'remove', 'list'],
+                description: 'Sharing operation to perform',
+            },
+            workspaceId: {
+                type: 'string',
+                description: 'Workspace ID to share skill with',
+            },
+            skillId: {
+                type: 'string',
+                description: 'Skill ID in author/name format (required for add/remove)',
+            },
+        },
+        required: ['action', 'workspaceId'],
+    },
+};
+// ============================================================================
+// SMI-3898: Sharing policy enforcement
+// ============================================================================
+/**
+ * Match a skill ID against a glob-like pattern.
+ * Supports star as a wildcard segment (e.g. "author/star", "star/name").
+ */
+export function matchesPattern(skillId, pattern) {
+    const [skillAuthor, skillName] = skillId.split('/');
+    const [patternAuthor, patternName] = pattern.split('/');
+    if (!patternAuthor || !patternName)
+        return false;
+    const authorMatch = patternAuthor === '*' || patternAuthor === skillAuthor;
+    const nameMatch = patternName === '*' || patternName === skillName;
+    return authorMatch && nameMatch;
+}
+/**
+ * Check if a skill ID is allowed by the sharing policy.
+ * Returns an error message if denied, or null if allowed.
+ */
+export function checkSharingPolicy(skillId, policy) {
+    if (!policy)
+        return null;
+    // Deny list takes precedence
+    if (policy.denyList.length > 0) {
+        const denied = policy.denyList.some((pattern) => matchesPattern(skillId, pattern));
+        if (denied) {
+            return `Skill "${skillId}" is blocked by the workspace deny list.`;
+        }
+    }
+    // If allow list is non-empty, skill must match at least one pattern
+    if (policy.allowList.length > 0) {
+        const allowed = policy.allowList.some((pattern) => matchesPattern(skillId, pattern));
+        if (!allowed) {
+            return `Skill "${skillId}" is not in the workspace allow list.`;
+        }
+    }
+    return null;
+}
+// Module-level singleton (swapped when Supabase RPCs are ready)
+let service = createStubService();
+/** Replace the workspace service implementation (for testing or Supabase swap) */
+export function setTeamWorkspaceService(svc) {
+    service = svc;
+}
+/** Get the current workspace service instance */
+export function getTeamWorkspaceService() {
+    return service;
+}
+// ============================================================================
+// Handlers
+// ============================================================================
+/**
+ * Execute a team_workspace operation.
+ *
+ * @param input - Validated workspace input
+ * @param _context - Tool context (unused until Supabase integration)
+ */
+export async function executeTeamWorkspace(input, _context) {
+    const dataSource = isSupabaseConfigured() ? 'live' : 'stub';
+    // TODO: Extract license key from context/env and resolve team_id via Supabase
+    const licenseKey = process.env.SKILLSMITH_LICENSE_KEY ?? '';
+    const teamId = await service.resolveTeamId(licenseKey);
+    switch (input.action) {
+        case 'create': {
+            if (!input.name) {
+                return { success: false, dataSource, error: 'Name is required for workspace creation.' };
+            }
+            const ws = await service.createWorkspace(teamId, input.name, input.description);
+            return {
+                success: true,
+                dataSource,
+                workspace: ws,
+                message: `Workspace "${ws.name}" created.`,
+            };
+        }
+        case 'list': {
+            const list = await service.listWorkspaces(teamId);
+            return {
+                success: true,
+                dataSource,
+                workspaces: list,
+                message: `Found ${list.length} workspace(s).`,
+            };
+        }
+        case 'get': {
+            if (!input.workspaceId) {
+                return { success: false, dataSource, error: 'workspaceId is required for get.' };
+            }
+            const ws = await service.getWorkspace(teamId, input.workspaceId);
+            if (!ws)
+                return { success: false, dataSource, error: 'Workspace not found.' };
+            return { success: true, dataSource, workspace: ws };
+        }
+        case 'delete': {
+            if (!input.workspaceId) {
+                return { success: false, dataSource, error: 'workspaceId is required for delete.' };
+            }
+            const deleted = await service.deleteWorkspace(teamId, input.workspaceId);
+            if (!deleted)
+                return { success: false, dataSource, error: 'Workspace not found.' };
+            return { success: true, dataSource, message: 'Workspace deleted.' };
+        }
+    }
+}
+/**
+ * Execute a share_skill operation.
+ *
+ * SMI-3898: Checks allowList/denyList before adding a skill.
+ *
+ * @param input - Validated share input
+ * @param _context - Tool context (unused until Supabase integration)
+ */
+export async function executeShareSkill(input, _context) {
+    const dataSource = isSupabaseConfigured() ? 'live' : 'stub';
+    const licenseKey = process.env.SKILLSMITH_LICENSE_KEY ?? '';
+    const teamId = await service.resolveTeamId(licenseKey);
+    switch (input.action) {
+        case 'add': {
+            if (!input.skillId) {
+                return { success: false, dataSource, error: 'skillId is required for add.' };
+            }
+            // SMI-3898: Check sharing policy before adding
+            const settings = await service.getWorkspaceSettings(teamId, input.workspaceId);
+            const policyError = checkSharingPolicy(input.skillId, settings.sharing);
+            if (policyError) {
+                return { success: false, dataSource, error: policyError };
+            }
+            const skill = await service.addSkill(teamId, input.workspaceId, input.skillId);
+            return {
+                success: true,
+                dataSource,
+                skills: [skill],
+                message: `Skill "${input.skillId}" shared to workspace.`,
+            };
+        }
+        case 'remove': {
+            if (!input.skillId) {
+                return { success: false, dataSource, error: 'skillId is required for remove.' };
+            }
+            const removed = await service.removeSkill(teamId, input.workspaceId, input.skillId);
+            if (!removed)
+                return { success: false, dataSource, error: 'Skill not found in workspace.' };
+            return {
+                success: true,
+                dataSource,
+                message: `Skill "${input.skillId}" removed from workspace.`,
+            };
+        }
+        case 'list': {
+            const list = await service.listSkills(teamId, input.workspaceId);
+            return { success: true, dataSource, skills: list, message: `${list.length} shared skill(s).` };
+        }
+    }
+}
+//# sourceMappingURL=team-workspace.js.map

package/dist/src/tools/team-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workspace.js","sourceRoot":"","sources":["../../../src/tools/team-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,0DAA0D;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC9B,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;SACrD,QAAQ,EAAE;CACd,CAAC,CAAA;AAuDF,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,iFAAiF;IAC9F,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;gBACzC,WAAW,EAAE,gCAAgC;aAC9C;YACD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sCAAsC;aACpD;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,6CAA6C;aAC3D;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,wCAAwC;aACtD;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;CACF,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,8EAA8E;IAC3F,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;gBAC/B,WAAW,EAAE,8BAA8B;aAC5C;YACD,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,kCAAkC;aAChD;YACD,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,0DAA0D;aACxE;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;KACpC;CACF,CAAA;AAkBD,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,OAAe;IAC7D,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnD,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IAChD,MAAM,WAAW,GAAG,aAAa,KAAK,GAAG,IAAI,aAAa,KAAK,WAAW,CAAA;IAC1E,MAAM,SAAS,GAAG,WAAW,KAAK,GAAG,IAAI,WAAW,KAAK,SAAS,CAAA;IAClE,OAAO,WAAW,IAAI,SAAS,CAAA;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,MAAiC;IAEjC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAExB,6BAA6B;IAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAClF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,UAAU,OAAO,0CAA0C,CAAA;QACpE,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QACpF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,UAAU,OAAO,uCAAuC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,gEAAgE;AAChE,IAAI,OAAO,GAAyB,iBAAiB,EAAE,CAAA;AAEvD,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,GAAyB;IAC/D,OAAO,GAAG,GAAG,CAAA;AACf,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,uBAAuB;IACrC,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,+EAA+E;AAC/E,WAAW;AACX,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAyB,EACzB,QAAqB;IAErB,MAAM,UAAU,GAAoB,oBAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5E,8EAA8E;IAC9E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAA;IAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAEtD,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAA;YAC1F,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAC/E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,cAAc,EAAE,CAAC,IAAI,YAAY;aAC3C,CAAA;QACH,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YACjD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,SAAS,IAAI,CAAC,MAAM,gBAAgB;aAC9C,CAAA;QACH,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAA;YAClF,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAChE,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;YAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;QACrD,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAA;YACrF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YACxE,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAA;YAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAA;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAsB,EACtB,QAAqB;IAErB,MAAM,UAAU,GAAoB,oBAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC5E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAA;IAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAEtD,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAA;YAC9E,CAAC;YAED,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAC9E,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;YACvE,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;YAC3D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9E,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,MAAM,EAAE,CAAC,KAAK,CAAC;gBACf,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,wBAAwB;aACzD,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAA;YACjF,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YACnF,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;YAC3F,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,2BAA2B;aAC5D,CAAA;QACH,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAA;QAChG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/tools/team-workspace.stub.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Stub service for team workspace MCP tools
+ * @module @skillsmith/mcp-server/tools/team-workspace.stub
+ * @see SMI-3895: Team Workspace + Share Skill MCP Tools
+ * @see SMI-3914: Wave 0 stub extraction
+ *
+ * Extracted from team-workspace.ts for file-size compliance.
+ * Provides in-memory stub implementation for workspace CRUD and skill sharing.
+ */
+import type { TeamWorkspaceService } from './team-workspace.js';
+/** @internal Exported for testing */
+export declare function createStubService(): TeamWorkspaceService;
+//# sourceMappingURL=team-workspace.stub.d.ts.map

package/dist/src/tools/team-workspace.stub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workspace.stub.d.ts","sourceRoot":"","sources":["../../../src/tools/team-workspace.stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,oBAAoB,EAIrB,MAAM,qBAAqB,CAAA;AAM5B,qCAAqC;AACrC,wBAAgB,iBAAiB,IAAI,oBAAoB,CAsExD"}

package/dist/src/tools/team-workspace.stub.js

@@ -0,0 +1,76 @@
+/**
+ * @fileoverview Stub service for team workspace MCP tools
+ * @module @skillsmith/mcp-server/tools/team-workspace.stub
+ * @see SMI-3895: Team Workspace + Share Skill MCP Tools
+ * @see SMI-3914: Wave 0 stub extraction
+ *
+ * Extracted from team-workspace.ts for file-size compliance.
+ * Provides in-memory stub implementation for workspace CRUD and skill sharing.
+ */
+// ============================================================================
+// Stub service factory
+// ============================================================================
+/** @internal Exported for testing */
+export function createStubService() {
+    // In-memory store for stub data
+    const workspaces = new Map();
+    const skills = new Map();
+    return {
+        async resolveTeamId(_licenseKey) {
+            // TODO: Replace with Supabase RPC: license_key -> subscription -> team_id
+            return 'team_stub_00000000-0000-0000-0000-000000000000';
+        },
+        async createWorkspace(teamId, name, description) {
+            const id = crypto.randomUUID();
+            const now = new Date().toISOString();
+            const ws = {
+                id,
+                name,
+                description: description ?? null,
+                teamId,
+                settings: {},
+                createdAt: now,
+                updatedAt: now,
+            };
+            workspaces.set(id, ws);
+            return ws;
+        },
+        async listWorkspaces(teamId) {
+            return [...workspaces.values()].filter((ws) => ws.teamId === teamId);
+        },
+        async getWorkspace(_teamId, workspaceId) {
+            return workspaces.get(workspaceId) ?? null;
+        },
+        async deleteWorkspace(_teamId, workspaceId) {
+            const existed = workspaces.has(workspaceId);
+            workspaces.delete(workspaceId);
+            skills.delete(workspaceId);
+            return existed;
+        },
+        async addSkill(_teamId, workspaceId, skillId) {
+            const entry = {
+                skillId,
+                addedBy: 'current-user',
+                addedAt: new Date().toISOString(),
+            };
+            const list = skills.get(workspaceId) ?? [];
+            list.push(entry);
+            skills.set(workspaceId, list);
+            return entry;
+        },
+        async removeSkill(_teamId, workspaceId, skillId) {
+            const list = skills.get(workspaceId) ?? [];
+            const filtered = list.filter((s) => s.skillId !== skillId);
+            skills.set(workspaceId, filtered);
+            return filtered.length < list.length;
+        },
+        async listSkills(_teamId, workspaceId) {
+            return skills.get(workspaceId) ?? [];
+        },
+        async getWorkspaceSettings(_teamId, workspaceId) {
+            const ws = workspaces.get(workspaceId);
+            return ws?.settings ?? {};
+        },
+    };
+}
+//# sourceMappingURL=team-workspace.stub.js.map

package/dist/src/tools/team-workspace.stub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workspace.stub.js","sourceRoot":"","sources":["../../../src/tools/team-workspace.stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,qCAAqC;AACrC,MAAM,UAAU,iBAAiB;IAC/B,gCAAgC;IAChC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAA;IAE/C,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,WAAmB;YACrC,0EAA0E;YAC1E,OAAO,gDAAgD,CAAA;QACzD,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,IAAY,EAAE,WAAoB;YACtE,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YACpC,MAAM,EAAE,GAAc;gBACpB,EAAE;gBACF,IAAI;gBACJ,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,MAAM;gBACN,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAA;YACD,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YACtB,OAAO,EAAE,CAAA;QACX,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAc;YACjC,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QACtE,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,WAAmB;YACrD,OAAO,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAA;QAC5C,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,WAAmB;YACxD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YAC3C,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC9B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC1B,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,WAAmB,EAAE,OAAe;YAClE,MAAM,KAAK,GAAgB;gBACzB,OAAO;gBACP,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAClC,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;YAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAChB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAA;YAC7B,OAAO,KAAK,CAAA;QACd,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,WAAmB,EAAE,OAAe;YACrE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA;YAC1D,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;YACjC,OAAO,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACtC,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,WAAmB;YACnD,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;QACtC,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,OAAe,EAAE,WAAmB;YAC7D,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;YACtC,OAAO,EAAE,EAAE,QAAQ,IAAI,EAAE,CAAA;QAC3B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/tools/team-workspace.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @fileoverview Unit tests for team_workspace and share_skill MCP tools
+ * @see SMI-3895: Team Workspace + Share Skill MCP Tools
+ * @see SMI-3898: Skill Sharing Controls
+ */
+export {};
+//# sourceMappingURL=team-workspace.test.d.ts.map

package/dist/src/tools/team-workspace.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-workspace.test.d.ts","sourceRoot":"","sources":["../../../src/tools/team-workspace.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/src/tools/team-workspace.test.js

@@ -0,0 +1,273 @@
+/**
+ * @fileoverview Unit tests for team_workspace and share_skill MCP tools
+ * @see SMI-3895: Team Workspace + Share Skill MCP Tools
+ * @see SMI-3898: Skill Sharing Controls
+ */
+import { describe, it, expect, beforeEach } from 'vitest';
+import { teamWorkspaceInputSchema, shareSkillInputSchema, executeTeamWorkspace, executeShareSkill, createStubService, setTeamWorkspaceService, matchesPattern, checkSharingPolicy, } from './team-workspace.js';
+// ============================================================================
+// Helpers
+// ============================================================================
+function makeContext() {
+    return {};
+}
+// ============================================================================
+// Schema validation
+// ============================================================================
+describe('teamWorkspaceInputSchema', () => {
+    it('accepts valid create input', () => {
+        const result = teamWorkspaceInputSchema.parse({
+            action: 'create',
+            name: 'My Workspace',
+            description: 'A test workspace',
+        });
+        expect(result.action).toBe('create');
+        expect(result.name).toBe('My Workspace');
+    });
+    it('accepts list action with no extra fields', () => {
+        const result = teamWorkspaceInputSchema.parse({ action: 'list' });
+        expect(result.action).toBe('list');
+    });
+    it('accepts get action with workspaceId', () => {
+        const result = teamWorkspaceInputSchema.parse({
+            action: 'get',
+            workspaceId: '00000000-0000-0000-0000-000000000001',
+        });
+        expect(result.workspaceId).toBeDefined();
+    });
+    it('rejects invalid action', () => {
+        expect(() => teamWorkspaceInputSchema.parse({ action: 'invalid' })).toThrow();
+    });
+    it('rejects non-UUID workspaceId', () => {
+        expect(() => teamWorkspaceInputSchema.parse({ action: 'get', workspaceId: 'not-a-uuid' })).toThrow();
+    });
+});
+describe('shareSkillInputSchema', () => {
+    it('accepts valid add input', () => {
+        const result = shareSkillInputSchema.parse({
+            action: 'add',
+            workspaceId: '00000000-0000-0000-0000-000000000001',
+            skillId: 'author/skill-name',
+        });
+        expect(result.action).toBe('add');
+        expect(result.skillId).toBe('author/skill-name');
+    });
+    it('accepts list action without skillId', () => {
+        const result = shareSkillInputSchema.parse({
+            action: 'list',
+            workspaceId: '00000000-0000-0000-0000-000000000001',
+        });
+        expect(result.action).toBe('list');
+    });
+    it('rejects invalid skillId format', () => {
+        expect(() => shareSkillInputSchema.parse({
+            action: 'add',
+            workspaceId: '00000000-0000-0000-0000-000000000001',
+            skillId: 'no-slash',
+        })).toThrow();
+    });
+    it('rejects missing workspaceId', () => {
+        expect(() => shareSkillInputSchema.parse({ action: 'list' })).toThrow();
+    });
+});
+// ============================================================================
+// Pattern matching (SMI-3898)
+// ============================================================================
+describe('matchesPattern', () => {
+    it('matches exact skill ID', () => {
+        expect(matchesPattern('author/skill', 'author/skill')).toBe(true);
+    });
+    it('matches wildcard author', () => {
+        expect(matchesPattern('author/skill', '*/skill')).toBe(true);
+    });
+    it('matches wildcard name', () => {
+        expect(matchesPattern('author/skill', 'author/*')).toBe(true);
+    });
+    it('matches double wildcard', () => {
+        expect(matchesPattern('author/skill', '*/*')).toBe(true);
+    });
+    it('rejects mismatched author', () => {
+        expect(matchesPattern('author/skill', 'other/skill')).toBe(false);
+    });
+    it('rejects mismatched name', () => {
+        expect(matchesPattern('author/skill', 'author/other')).toBe(false);
+    });
+    it('rejects malformed pattern', () => {
+        expect(matchesPattern('author/skill', 'noslash')).toBe(false);
+    });
+});
+describe('checkSharingPolicy', () => {
+    it('returns null when no policy', () => {
+        expect(checkSharingPolicy('author/skill', undefined)).toBeNull();
+    });
+    it('returns null when policy has empty lists', () => {
+        const policy = { requireApproval: false, allowList: [], denyList: [] };
+        expect(checkSharingPolicy('author/skill', policy)).toBeNull();
+    });
+    it('returns error when skill matches deny list', () => {
+        const policy = {
+            requireApproval: false,
+            allowList: [],
+            denyList: ['untrusted/*'],
+        };
+        const result = checkSharingPolicy('untrusted/evil-skill', policy);
+        expect(result).toContain('blocked by the workspace deny list');
+    });
+    it('returns null when skill does NOT match deny list', () => {
+        const policy = {
+            requireApproval: false,
+            allowList: [],
+            denyList: ['untrusted/*'],
+        };
+        expect(checkSharingPolicy('trusted/good-skill', policy)).toBeNull();
+    });
+    it('returns error when skill not in allow list', () => {
+        const policy = {
+            requireApproval: false,
+            allowList: ['approved/*'],
+            denyList: [],
+        };
+        const result = checkSharingPolicy('other/skill', policy);
+        expect(result).toContain('not in the workspace allow list');
+    });
+    it('returns null when skill matches allow list', () => {
+        const policy = {
+            requireApproval: false,
+            allowList: ['approved/*'],
+            denyList: [],
+        };
+        expect(checkSharingPolicy('approved/skill', policy)).toBeNull();
+    });
+    it('deny list takes precedence over allow list', () => {
+        const policy = {
+            requireApproval: false,
+            allowList: ['*/*'],
+            denyList: ['evil/*'],
+        };
+        const result = checkSharingPolicy('evil/skill', policy);
+        expect(result).toContain('blocked by the workspace deny list');
+    });
+});
+// ============================================================================
+// executeTeamWorkspace
+// ============================================================================
+describe('executeTeamWorkspace', () => {
+    beforeEach(() => {
+        setTeamWorkspaceService(createStubService());
+    });
+    it('creates a workspace', async () => {
+        const result = await executeTeamWorkspace({ action: 'create', name: 'Dev Team' }, makeContext());
+        expect(result.success).toBe(true);
+        expect(result.workspace).toBeDefined();
+        expect(result.workspace.name).toBe('Dev Team');
+    });
+    it('returns error when create missing name', async () => {
+        const result = await executeTeamWorkspace({ action: 'create' }, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('Name is required');
+    });
+    it('lists workspaces', async () => {
+        await executeTeamWorkspace({ action: 'create', name: 'WS1' }, makeContext());
+        await executeTeamWorkspace({ action: 'create', name: 'WS2' }, makeContext());
+        const result = await executeTeamWorkspace({ action: 'list' }, makeContext());
+        expect(result.success).toBe(true);
+        expect(result.workspaces).toHaveLength(2);
+    });
+    it('gets a workspace by ID', async () => {
+        const created = await executeTeamWorkspace({ action: 'create', name: 'Test' }, makeContext());
+        const result = await executeTeamWorkspace({ action: 'get', workspaceId: created.workspace.id }, makeContext());
+        expect(result.success).toBe(true);
+        expect(result.workspace.name).toBe('Test');
+    });
+    it('returns error for get without workspaceId', async () => {
+        const result = await executeTeamWorkspace({ action: 'get' }, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('workspaceId is required');
+    });
+    it('returns error for nonexistent workspace', async () => {
+        const result = await executeTeamWorkspace({ action: 'get', workspaceId: '00000000-0000-0000-0000-000000000099' }, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('not found');
+    });
+    it('deletes a workspace', async () => {
+        const created = await executeTeamWorkspace({ action: 'create', name: 'ToDelete' }, makeContext());
+        const result = await executeTeamWorkspace({ action: 'delete', workspaceId: created.workspace.id }, makeContext());
+        expect(result.success).toBe(true);
+        expect(result.message).toContain('deleted');
+    });
+    it('returns error deleting nonexistent workspace', async () => {
+        const result = await executeTeamWorkspace({ action: 'delete', workspaceId: '00000000-0000-0000-0000-000000000099' }, makeContext());
+        expect(result.success).toBe(false);
+    });
+});
+// ============================================================================
+// executeShareSkill
+// ============================================================================
+describe('executeShareSkill', () => {
+    let wsId;
+    beforeEach(async () => {
+        setTeamWorkspaceService(createStubService());
+        // Create a workspace for sharing tests
+        const ws = await executeTeamWorkspace({ action: 'create', name: 'Share Test' }, makeContext());
+        wsId = ws.workspace.id;
+    });
+    it('adds a skill to workspace', async () => {
+        const result = await executeShareSkill({ action: 'add', workspaceId: wsId, skillId: 'author/my-skill' }, makeContext());
+        expect(result.success).toBe(true);
+        expect(result.skills).toHaveLength(1);
+        expect(result.skills[0].skillId).toBe('author/my-skill');
+    });
+    it('returns error when add missing skillId', async () => {
+        const result = await executeShareSkill({ action: 'add', workspaceId: wsId }, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('skillId is required');
+    });
+    it('lists shared skills', async () => {
+        await executeShareSkill({ action: 'add', workspaceId: wsId, skillId: 'a/one' }, makeContext());
+        await executeShareSkill({ action: 'add', workspaceId: wsId, skillId: 'b/two' }, makeContext());
+        const result = await executeShareSkill({ action: 'list', workspaceId: wsId }, makeContext());
+        expect(result.success).toBe(true);
+        expect(result.skills).toHaveLength(2);
+    });
+    it('removes a skill from workspace', async () => {
+        await executeShareSkill({ action: 'add', workspaceId: wsId, skillId: 'a/one' }, makeContext());
+        const result = await executeShareSkill({ action: 'remove', workspaceId: wsId, skillId: 'a/one' }, makeContext());
+        expect(result.success).toBe(true);
+        expect(result.message).toContain('removed');
+    });
+    it('returns error removing nonexistent skill', async () => {
+        const result = await executeShareSkill({ action: 'remove', workspaceId: wsId, skillId: 'a/nonexistent' }, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('not found');
+    });
+    // SMI-3898: Deny list enforcement
+    it('rejects skill matching deny list pattern', async () => {
+        // Create a service with deny list
+        const svc = createStubService();
+        // Override getWorkspaceSettings to return a deny list
+        const origCreate = svc.createWorkspace.bind(svc);
+        const origGetSettings = svc.getWorkspaceSettings.bind(svc);
+        // We need a custom service that returns settings with a deny list
+        const customSvc = {
+            ...svc,
+            createWorkspace: origCreate,
+            async getWorkspaceSettings(teamId, workspaceId) {
+                const base = await origGetSettings(teamId, workspaceId);
+                return {
+                    ...base,
+                    sharing: {
+                        requireApproval: false,
+                        allowList: [],
+                        denyList: ['evil-author/*'],
+                    },
+                };
+            },
+        };
+        setTeamWorkspaceService(customSvc);
+        const ws = await executeTeamWorkspace({ action: 'create', name: 'Policy Test' }, makeContext());
+        const result = await executeShareSkill({ action: 'add', workspaceId: ws.workspace.id, skillId: 'evil-author/bad-skill' }, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('blocked by the workspace deny list');
+    });
+});
+//# sourceMappingURL=team-workspace.test.js.map