@skillsmith/mcp-server 0.4.7 → 0.4.8

package/dist/src/tools/compliance-tools.js

@@ -0,0 +1,257 @@
+/**
+ * @fileoverview Compliance report MCP tool
+ * @module @skillsmith/mcp-server/tools/compliance-tools
+ * @see SMI-3906: Compliance Report MCP Tool
+ *
+ * Generates compliance reports in SOC2 (markdown), CycloneDX (JSON SBOM),
+ * or raw JSON format from local skill inventory and audit data.
+ *
+ * Scope: local inventory only. For server-side audit data, use audit_export.
+ *
+ * Tier gate: Enterprise (compliance_reports feature flag).
+ */
+import { z } from 'zod';
+import { isSupabaseConfigured } from '../supabase-client.js';
+import { createRealComplianceService } from './compliance-tools.service.js';
+// ============================================================================
+// Input schemas
+// ============================================================================
+export const complianceReportInputSchema = z.object({
+    format: z.enum(['soc2', 'cyclonedx', 'json']),
+    period: z
+        .enum(['30d', '90d', '365d'])
+        .optional()
+        .default('90d')
+        .describe('Reporting period (default: 90d)'),
+    includeUserActivity: z
+        .boolean()
+        .optional()
+        .default(true)
+        .describe('Include user activity summary (default: true)'),
+});
+// ============================================================================
+// Tool schema for MCP registration
+// ============================================================================
+export const complianceReportToolSchema = {
+    name: 'compliance_report',
+    description: 'Generate compliance reports: SOC2 (markdown), CycloneDX (JSON SBOM), or raw JSON. ' +
+        'Scoped to local skill inventory. ' +
+        'Requires Enterprise tier (compliance_reports feature).',
+    inputSchema: {
+        type: 'object',
+        properties: {
+            format: {
+                type: 'string',
+                enum: ['soc2', 'cyclonedx', 'json'],
+                description: 'Report format: soc2, cyclonedx, or json',
+            },
+            period: {
+                type: 'string',
+                enum: ['30d', '90d', '365d'],
+                description: 'Reporting period (default: 90d)',
+            },
+            includeUserActivity: {
+                type: 'boolean',
+                description: 'Include user activity summary (default: true)',
+            },
+        },
+        required: ['format'],
+    },
+};
+// ============================================================================
+// Stub service
+// ============================================================================
+/** @internal Exported for testing */
+export function createStubComplianceService() {
+    return {
+        async gatherData(periodDays, includeUserActivity) {
+            const now = new Date();
+            const periodStart = new Date(now.getTime() - periodDays * 24 * 60 * 60 * 1000);
+            return {
+                skills: [
+                    {
+                        skillId: 'skillsmith/commit',
+                        version: '1.2.0',
+                        trustTier: 'verified',
+                        installedAt: '2026-02-15T10:00:00.000Z',
+                        lastUpdated: '2026-03-20T14:30:00.000Z',
+                    },
+                    {
+                        skillId: 'community/testing-helper',
+                        version: '0.8.3',
+                        trustTier: 'community',
+                        installedAt: '2026-03-01T09:00:00.000Z',
+                        lastUpdated: '2026-03-01T09:00:00.000Z',
+                    },
+                ],
+                auditSummary: {
+                    totalEvents: 1247,
+                    installCount: 34,
+                    uninstallCount: 8,
+                    searchCount: 892,
+                    periodStart: periodStart.toISOString(),
+                    periodEnd: now.toISOString(),
+                },
+                userActivity: includeUserActivity
+                    ? {
+                        uniqueUsers: 12,
+                        topTools: [
+                            { tool: 'search', count: 892 },
+                            { tool: 'install_skill', count: 34 },
+                            { tool: 'skill_validate', count: 156 },
+                        ],
+                        activeDays: Math.min(periodDays, 67),
+                    }
+                    : null,
+                configState: {
+                    ssoEnabled: false,
+                    rbacEnabled: false,
+                    auditLoggingEnabled: true,
+                    webhooksConfigured: 0,
+                },
+            };
+        },
+    };
+}
+// Module-level singleton
+let service = createStubComplianceService();
+/** Replace the compliance service implementation */
+export function setComplianceService(svc) {
+    service = svc;
+}
+// ============================================================================
+// Formatters
+// ============================================================================
+function periodToDays(period) {
+    const match = period.match(/^(\d+)d$/);
+    return match ? parseInt(match[1], 10) : 90;
+}
+function formatSoc2(data, period) {
+    const lines = [
+        '# SOC 2 Compliance Report',
+        '',
+        `**Generated:** ${new Date().toISOString()}`,
+        `**Scope:** Local skill inventory`,
+        `**Period:** ${period}`,
+        '',
+        '---',
+        '',
+        '## 1. Access Controls',
+        '',
+        `- SSO Enabled: ${data.configState.ssoEnabled ? 'Yes' : 'No'}`,
+        `- RBAC Enabled: ${data.configState.rbacEnabled ? 'Yes' : 'No'}`,
+        `- Audit Logging: ${data.configState.auditLoggingEnabled ? 'Enabled' : 'Disabled'}`,
+        `- Webhooks Configured: ${data.configState.webhooksConfigured}`,
+        '',
+        '## 2. Skill Inventory',
+        '',
+        `| Skill | Version | Trust Tier | Installed | Last Updated |`,
+        `|-------|---------|------------|-----------|--------------|`,
+    ];
+    for (const s of data.skills) {
+        lines.push(`| ${s.skillId} | ${s.version} | ${s.trustTier} | ${s.installedAt} | ${s.lastUpdated} |`);
+    }
+    lines.push('', '## 3. Audit Summary', '');
+    lines.push(`- Total audit events: ${data.auditSummary.totalEvents}`);
+    lines.push(`- Skill installs: ${data.auditSummary.installCount}`);
+    lines.push(`- Skill uninstalls: ${data.auditSummary.uninstallCount}`);
+    lines.push(`- Search queries: ${data.auditSummary.searchCount}`);
+    lines.push(`- Period: ${data.auditSummary.periodStart} to ${data.auditSummary.periodEnd}`);
+    if (data.userActivity) {
+        lines.push('', '## 4. User Activity', '');
+        lines.push(`- Unique users: ${data.userActivity.uniqueUsers}`);
+        lines.push(`- Active days: ${data.userActivity.activeDays}`);
+        lines.push(`- Top tools:`);
+        for (const t of data.userActivity.topTools) {
+            lines.push(`  - ${t.tool}: ${t.count} invocations`);
+        }
+    }
+    return lines.join('\n');
+}
+function formatCycloneDx(data) {
+    return {
+        bomFormat: 'CycloneDX',
+        specVersion: '1.5',
+        version: 1,
+        metadata: {
+            timestamp: new Date().toISOString(),
+            tools: [{ vendor: 'Skillsmith', name: 'compliance-report', version: '1.0.0' }],
+            component: {
+                type: 'application',
+                name: 'skillsmith-local-inventory',
+                version: '1.0.0',
+            },
+        },
+        components: data.skills.map((s) => ({
+            type: 'library',
+            name: s.skillId,
+            version: s.version,
+            properties: [
+                { name: 'skillsmith:trustTier', value: s.trustTier },
+                { name: 'skillsmith:installedAt', value: s.installedAt },
+            ],
+        })),
+    };
+}
+function formatJson(data, period) {
+    return {
+        generatedAt: new Date().toISOString(),
+        scope: 'local',
+        period,
+        skills: data.skills,
+        auditSummary: data.auditSummary,
+        userActivity: data.userActivity,
+        configState: data.configState,
+    };
+}
+// ============================================================================
+// Handler
+// ============================================================================
+export async function executeComplianceReport(input, context) {
+    const period = input.period ?? '90d';
+    const days = periodToDays(period);
+    // Use real service when db is available, otherwise fall back to stub
+    let activeService = service;
+    let dataSource = isSupabaseConfigured() ? 'live' : 'stub';
+    try {
+        if (context.db && context.db.open) {
+            activeService = createRealComplianceService(context.db);
+            dataSource = 'live';
+        }
+    }
+    catch {
+        // Fall through to stub service
+    }
+    const data = await activeService.gatherData(days, input.includeUserActivity ?? true);
+    const generatedAt = new Date().toISOString();
+    switch (input.format) {
+        case 'soc2':
+            return {
+                format: 'soc2',
+                dataSource,
+                generatedAt,
+                scope: 'local',
+                period,
+                report: formatSoc2(data, period),
+            };
+        case 'cyclonedx':
+            return {
+                format: 'cyclonedx',
+                dataSource,
+                generatedAt,
+                scope: 'local',
+                period,
+                report: formatCycloneDx(data),
+            };
+        case 'json':
+            return {
+                format: 'json',
+                dataSource,
+                generatedAt,
+                scope: 'local',
+                period,
+                report: formatJson(data, period),
+            };
+    }
+}
+//# sourceMappingURL=compliance-tools.js.map

package/dist/src/tools/compliance-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-tools.js","sourceRoot":"","sources":["../../../src/tools/compliance-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAA;AAE3E,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;SAC5B,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,iCAAiC,CAAC;IAC9C,mBAAmB,EAAE,CAAC;SACnB,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC,CAAA;AAIF,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,IAAI,EAAE,mBAA4B;IAClC,WAAW,EACT,oFAAoF;QACpF,mCAAmC;QACnC,wDAAwD;IAC1D,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;gBACnC,WAAW,EAAE,yCAAyC;aACvD;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC;gBAC5B,WAAW,EAAE,iCAAiC;aAC/C;YACD,mBAAmB,EAAE;gBACnB,IAAI,EAAE,SAAS;gBACf,WAAW,EAAE,+CAA+C;aAC7D;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;CACF,CAAA;AA6CD,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,qCAAqC;AACrC,MAAM,UAAU,2BAA2B;IACzC,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,mBAAmB;YAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;YAC9E,OAAO;gBACL,MAAM,EAAE;oBACN;wBACE,OAAO,EAAE,mBAAmB;wBAC5B,OAAO,EAAE,OAAO;wBAChB,SAAS,EAAE,UAAmB;wBAC9B,WAAW,EAAE,0BAA0B;wBACvC,WAAW,EAAE,0BAA0B;qBACxC;oBACD;wBACE,OAAO,EAAE,0BAA0B;wBACnC,OAAO,EAAE,OAAO;wBAChB,SAAS,EAAE,WAAoB;wBAC/B,WAAW,EAAE,0BAA0B;wBACvC,WAAW,EAAE,0BAA0B;qBACxC;iBACF;gBACD,YAAY,EAAE;oBACZ,WAAW,EAAE,IAAI;oBACjB,YAAY,EAAE,EAAE;oBAChB,cAAc,EAAE,CAAC;oBACjB,WAAW,EAAE,GAAG;oBAChB,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;oBACtC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;iBAC7B;gBACD,YAAY,EAAE,mBAAmB;oBAC/B,CAAC,CAAC;wBACE,WAAW,EAAE,EAAE;wBACf,QAAQ,EAAE;4BACR,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;4BAC9B,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE;4BACpC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE;yBACvC;wBACD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;qBACrC;oBACH,CAAC,CAAC,IAAI;gBACR,WAAW,EAAE;oBACX,UAAU,EAAE,KAAK;oBACjB,WAAW,EAAE,KAAK;oBAClB,mBAAmB,EAAE,IAAI;oBACzB,kBAAkB,EAAE,CAAC;iBACtB;aACF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,yBAAyB;AACzB,IAAI,OAAO,GAAsB,2BAA2B,EAAE,CAAA;AAE9D,oDAAoD;AACpD,MAAM,UAAU,oBAAoB,CAAC,GAAsB;IACzD,OAAO,GAAG,GAAG,CAAA;AACf,CAAC;AAeD,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IACtC,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,IAAoB,EAAE,MAAc;IACtD,MAAM,KAAK,GAAa;QACtB,2BAA2B;QAC3B,EAAE;QACF,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;QAC5C,kCAAkC;QAClC,eAAe,MAAM,EAAE;QACvB,EAAE;QACF,KAAK;QACL,EAAE;QACF,uBAAuB;QACvB,EAAE;QACF,kBAAkB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAC9D,mBAAmB,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAChE,oBAAoB,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;QACnF,0BAA0B,IAAI,CAAC,WAAW,CAAC,kBAAkB,EAAE;QAC/D,EAAE;QACF,uBAAuB;QACvB,EAAE;QACF,6DAA6D;QAC7D,6DAA6D;KAC9D,CAAA;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,WAAW,IAAI,CACzF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAA;IACzC,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAA;IACpE,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC,CAAA;IACjE,KAAK,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAA;IACrE,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAA;IAChE,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,CAAC,WAAW,OAAO,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,CAAA;IAE1F,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAA;QACzC,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAA;QAC9D,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,CAAA;QAC5D,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC1B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,cAAc,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,IAAoB;IAC3C,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAC9E,SAAS,EAAE;gBACT,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,OAAO;aACjB;SACF;QACD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE;gBACpD,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE;aACzD;SACF,CAAC,CAAC;KACJ,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAoB,EAAE,MAAc;IACtD,OAAO;QACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK,EAAE,OAAO;QACd,MAAM;QACN,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAA;AACH,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA4B,EAC5B,OAAoB;IAEpB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAA;IACpC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IAEjC,qEAAqE;IACrE,IAAI,aAAa,GAAsB,OAAO,CAAA;IAC9C,IAAI,UAAU,GAAoB,oBAAoB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC1E,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAClC,aAAa,GAAG,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACvD,UAAU,GAAG,MAAM,CAAA;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAAA;IACpF,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE5C,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,UAAU;gBACV,WAAW;gBACX,KAAK,EAAE,OAAO;gBACd,MAAM;gBACN,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;aACjC,CAAA;QACH,KAAK,WAAW;YACd,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,UAAU;gBACV,WAAW;gBACX,KAAK,EAAE,OAAO;gBACd,MAAM;gBACN,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC;aAC9B,CAAA;QACH,KAAK,MAAM;YACT,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,UAAU;gBACV,WAAW;gBACX,KAAK,EAAE,OAAO;gBACd,MAAM;gBACN,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;aACjC,CAAA;IACL,CAAC;AACH,CAAC"}

package/dist/src/tools/compliance-tools.service.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @fileoverview Real compliance service — queries audit_logs + skills SQLite tables
+ * @module @skillsmith/mcp-server/tools/compliance-tools.service
+ * @see SMI-3916: Wave 2 — Compliance real queries
+ *
+ * Replaces stub compliance data with actual SQL queries against local
+ * audit_logs and skills tables. Returns data conforming to ComplianceData.
+ */
+import type { Database } from '@skillsmith/core';
+import type { ComplianceService } from './compliance-tools.js';
+/**
+ * Create a compliance service backed by real SQLite queries.
+ *
+ * Tables queried:
+ * - audit_logs: event_type, timestamp, actor, resource, result
+ * - skills: id, name, author, version, trust_tier, quality_score, created_at, updated_at
+ */
+export declare function createRealComplianceService(db: Database): ComplianceService;
+//# sourceMappingURL=compliance-tools.service.d.ts.map

package/dist/src/tools/compliance-tools.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-tools.service.d.ts","sourceRoot":"","sources":["../../../src/tools/compliance-tools.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAkB,MAAM,uBAAuB,CAAA;AAoC9E;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,EAAE,EAAE,QAAQ,GAAG,iBAAiB,CAiH3E"}

package/dist/src/tools/compliance-tools.service.js

@@ -0,0 +1,107 @@
+/**
+ * @fileoverview Real compliance service — queries audit_logs + skills SQLite tables
+ * @module @skillsmith/mcp-server/tools/compliance-tools.service
+ * @see SMI-3916: Wave 2 — Compliance real queries
+ *
+ * Replaces stub compliance data with actual SQL queries against local
+ * audit_logs and skills tables. Returns data conforming to ComplianceData.
+ */
+// ============================================================================
+// Service factory
+// ============================================================================
+/**
+ * Create a compliance service backed by real SQLite queries.
+ *
+ * Tables queried:
+ * - audit_logs: event_type, timestamp, actor, resource, result
+ * - skills: id, name, author, version, trust_tier, quality_score, created_at, updated_at
+ */
+export function createRealComplianceService(db) {
+    return {
+        async gatherData(periodDays, includeUserActivity) {
+            const now = new Date();
+            const periodStart = new Date(now.getTime() - periodDays * 86_400_000);
+            const since = periodStart.toISOString();
+            // ----------------------------------------------------------------
+            // Audit summary from audit_logs
+            // ----------------------------------------------------------------
+            const totalEventsRow = db
+                .prepare('SELECT COUNT(*) as c FROM audit_logs WHERE timestamp >= ?')
+                .get(since);
+            const totalEvents = totalEventsRow?.c ?? 0;
+            const byEventType = db
+                .prepare('SELECT event_type, COUNT(*) as count FROM audit_logs ' +
+                'WHERE timestamp >= ? GROUP BY event_type ORDER BY count DESC')
+                .all(since);
+            // Derive install/uninstall/search counts from event_type
+            const eventCounts = new Map(byEventType.map((r) => [r.event_type, r.count]));
+            const installCount = eventCounts.get('skill.install') ?? 0;
+            const uninstallCount = eventCounts.get('skill.uninstall') ?? 0;
+            const searchCount = eventCounts.get('skill.search') ?? 0;
+            // ----------------------------------------------------------------
+            // Skill inventory from skills table
+            // ----------------------------------------------------------------
+            const skills = db
+                .prepare('SELECT id, name, author, trust_tier, quality_score, ' +
+                'created_at, updated_at FROM skills ORDER BY author, name')
+                .all()
+                .map((s) => ({
+                skillId: s.author ? `${s.author}/${s.name}` : s.id,
+                version: '0.0.0', // version lives in skill_versions table, not skills
+                trustTier: (s.trust_tier ?? 'unknown'),
+                installedAt: s.created_at,
+                lastUpdated: s.updated_at,
+            }));
+            // ----------------------------------------------------------------
+            // User activity (optional)
+            // ----------------------------------------------------------------
+            let userActivity = null;
+            if (includeUserActivity) {
+                const actors = db
+                    .prepare('SELECT actor, COUNT(*) as actions, MAX(timestamp) as last_active ' +
+                    'FROM audit_logs WHERE timestamp >= ? AND actor IS NOT NULL ' +
+                    'GROUP BY actor ORDER BY actions DESC')
+                    .all(since);
+                const topTools = db
+                    .prepare('SELECT resource, COUNT(*) as count FROM audit_logs ' +
+                    'WHERE timestamp >= ? AND resource IS NOT NULL ' +
+                    'GROUP BY resource ORDER BY count DESC LIMIT 10')
+                    .all(since)
+                    .map((r) => ({ tool: r.resource, count: r.count }));
+                // Count distinct days with activity
+                const activeDaysRow = db
+                    .prepare('SELECT COUNT(DISTINCT DATE(timestamp)) as days FROM audit_logs ' +
+                    'WHERE timestamp >= ?')
+                    .get(since);
+                userActivity = {
+                    uniqueUsers: actors.length,
+                    topTools,
+                    activeDays: activeDaysRow?.days ?? 0,
+                };
+            }
+            // ----------------------------------------------------------------
+            // Config state (static for now — SSO/RBAC tables don't exist locally)
+            // ----------------------------------------------------------------
+            const configState = {
+                ssoEnabled: false,
+                rbacEnabled: false,
+                auditLoggingEnabled: true,
+                webhooksConfigured: 0,
+            };
+            return {
+                skills,
+                auditSummary: {
+                    totalEvents,
+                    installCount,
+                    uninstallCount,
+                    searchCount,
+                    periodStart: periodStart.toISOString(),
+                    periodEnd: now.toISOString(),
+                },
+                userActivity,
+                configState,
+            };
+        },
+    };
+}
+//# sourceMappingURL=compliance-tools.service.js.map

package/dist/src/tools/compliance-tools.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-tools.service.js","sourceRoot":"","sources":["../../../src/tools/compliance-tools.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmCH,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAAY;IACtD,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,mBAA4B;YAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,GAAG,UAAU,CAAC,CAAA;YACrE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAA;YAEvC,mEAAmE;YACnE,gCAAgC;YAChC,mEAAmE;YACnE,MAAM,cAAc,GAAG,EAAE;iBACtB,OAAO,CAAgB,2DAA2D,CAAC;iBACnF,GAAG,CAAC,KAAK,CAAC,CAAA;YACb,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,CAAA;YAE1C,MAAM,WAAW,GAAG,EAAE;iBACnB,OAAO,CACN,uDAAuD;gBACrD,8DAA8D,CACjE;iBACA,GAAG,CAAC,KAAK,CAAC,CAAA;YAEb,yDAAyD;YACzD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC5E,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;YAC1D,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;YAC9D,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;YAExD,mEAAmE;YACnE,oCAAoC;YACpC,mEAAmE;YACnE,MAAM,MAAM,GAAG,EAAE;iBACd,OAAO,CACN,sDAAsD;gBACpD,0DAA0D,CAC7D;iBACA,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACX,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;gBAClD,OAAO,EAAE,OAAO,EAAE,oDAAoD;gBACtE,SAAS,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,SAAS,CAIxB;gBACb,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,WAAW,EAAE,CAAC,CAAC,UAAU;aAC1B,CAAC,CAAC,CAAA;YAEL,mEAAmE;YACnE,2BAA2B;YAC3B,mEAAmE;YACnE,IAAI,YAAY,GAAG,IAAI,CAAA;YACvB,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,EAAE;qBACd,OAAO,CACN,mEAAmE;oBACjE,6DAA6D;oBAC7D,sCAAsC,CACzC;qBACA,GAAG,CAAC,KAAK,CAAC,CAAA;gBAEb,MAAM,QAAQ,GAAG,EAAE;qBAChB,OAAO,CACN,qDAAqD;oBACnD,gDAAgD;oBAChD,gDAAgD,CACnD;qBACA,GAAG,CAAC,KAAK,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;gBAErD,oCAAoC;gBACpC,MAAM,aAAa,GAAG,EAAE;qBACrB,OAAO,CAGN,iEAAiE;oBAC/D,sBAAsB,CACzB;qBACA,GAAG,CAAC,KAAK,CAAC,CAAA;gBAEb,YAAY,GAAG;oBACb,WAAW,EAAE,MAAM,CAAC,MAAM;oBAC1B,QAAQ;oBACR,UAAU,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC;iBACrC,CAAA;YACH,CAAC;YAED,mEAAmE;YACnE,sEAAsE;YACtE,mEAAmE;YACnE,MAAM,WAAW,GAAG;gBAClB,UAAU,EAAE,KAAK;gBACjB,WAAW,EAAE,KAAK;gBAClB,mBAAmB,EAAE,IAAI;gBACzB,kBAAkB,EAAE,CAAC;aACtB,CAAA;YAED,OAAO;gBACL,MAAM;gBACN,YAAY,EAAE;oBACZ,WAAW;oBACX,YAAY;oBACZ,cAAc;oBACd,WAAW;oBACX,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;oBACtC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;iBAC7B;gBACD,YAAY;gBACZ,WAAW;aACZ,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/tools/compliance-tools.service.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @fileoverview Tests for real compliance service (SQLite-backed)
+ * @see SMI-3916: Wave 2 — Compliance real queries
+ */
+export {};
+//# sourceMappingURL=compliance-tools.service.test.d.ts.map

package/dist/src/tools/compliance-tools.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-tools.service.test.d.ts","sourceRoot":"","sources":["../../../src/tools/compliance-tools.service.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/src/tools/compliance-tools.service.test.js

@@ -0,0 +1,140 @@
+/**
+ * @fileoverview Tests for real compliance service (SQLite-backed)
+ * @see SMI-3916: Wave 2 — Compliance real queries
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { createDatabase } from '@skillsmith/core';
+import { createRealComplianceService } from './compliance-tools.service.js';
+// ============================================================================
+// Test helpers
+// ============================================================================
+function seedAuditLogs(db, rows) {
+    const stmt = db.prepare('INSERT INTO audit_logs (id, event_type, timestamp, actor, resource, action, result) ' +
+        'VALUES (?, ?, ?, ?, ?, ?, ?)');
+    for (const row of rows) {
+        stmt.run(crypto.randomUUID(), row.event_type ?? 'tool.call', row.timestamp ?? new Date().toISOString(), row.actor ?? null, row.resource ?? null, 'execute', row.result ?? 'success');
+    }
+}
+function seedSkills(db, skills) {
+    const stmt = db.prepare('INSERT INTO skills (id, name, author, trust_tier) VALUES (?, ?, ?, ?)');
+    for (const s of skills) {
+        stmt.run(s.id, s.name, s.author ?? null, s.trust_tier ?? 'unknown');
+    }
+}
+function daysAgo(n) {
+    return new Date(Date.now() - n * 86_400_000).toISOString();
+}
+// ============================================================================
+// Tests
+// ============================================================================
+describe('createRealComplianceService', () => {
+    let db;
+    let svc;
+    beforeEach(() => {
+        db = createDatabase(':memory:');
+        svc = createRealComplianceService(db);
+    });
+    afterEach(() => {
+        db.close();
+    });
+    describe('gatherData', () => {
+        it('returns empty data for an empty database', async () => {
+            const data = await svc.gatherData(90, false);
+            expect(data.skills).toEqual([]);
+            expect(data.auditSummary.totalEvents).toBe(0);
+            expect(data.auditSummary.installCount).toBe(0);
+            expect(data.auditSummary.uninstallCount).toBe(0);
+            expect(data.auditSummary.searchCount).toBe(0);
+            expect(data.userActivity).toBeNull();
+            expect(data.configState.auditLoggingEnabled).toBe(true);
+        });
+        it('counts audit events by type', async () => {
+            seedAuditLogs(db, [
+                { event_type: 'skill.install', timestamp: daysAgo(5) },
+                { event_type: 'skill.install', timestamp: daysAgo(10) },
+                { event_type: 'skill.uninstall', timestamp: daysAgo(3) },
+                { event_type: 'skill.search', timestamp: daysAgo(1) },
+                { event_type: 'skill.search', timestamp: daysAgo(2) },
+                { event_type: 'skill.search', timestamp: daysAgo(3) },
+                { event_type: 'skill.install', timestamp: daysAgo(100) }, // outside 90d
+            ]);
+            const data = await svc.gatherData(90, false);
+            expect(data.auditSummary.totalEvents).toBe(6); // 6 within 90d
+            expect(data.auditSummary.installCount).toBe(2); // 2 installs within 90d
+            expect(data.auditSummary.uninstallCount).toBe(1);
+            expect(data.auditSummary.searchCount).toBe(3);
+        });
+        it('returns skill inventory from skills table', async () => {
+            seedSkills(db, [
+                { id: 'skillsmith/commit', name: 'commit', author: 'skillsmith', trust_tier: 'verified' },
+                { id: 'community/test', name: 'test', author: 'community', trust_tier: 'community' },
+            ]);
+            const data = await svc.gatherData(90, false);
+            expect(data.skills).toHaveLength(2);
+            expect(data.skills[0].skillId).toBe('community/test');
+            expect(data.skills[0].trustTier).toBe('community');
+            expect(data.skills[1].skillId).toBe('skillsmith/commit');
+            expect(data.skills[1].trustTier).toBe('verified');
+        });
+        it('returns null userActivity when includeUserActivity=false', async () => {
+            seedAuditLogs(db, [{ actor: 'alice', resource: 'search', timestamp: daysAgo(1) }]);
+            const data = await svc.gatherData(90, false);
+            expect(data.userActivity).toBeNull();
+        });
+        it('returns user activity when includeUserActivity=true', async () => {
+            seedAuditLogs(db, [
+                { actor: 'alice', resource: 'search', timestamp: daysAgo(1) },
+                { actor: 'alice', resource: 'search', timestamp: daysAgo(2) },
+                { actor: 'bob', resource: 'install', timestamp: daysAgo(3) },
+                { actor: null, resource: 'search', timestamp: daysAgo(1) },
+            ]);
+            const data = await svc.gatherData(90, true);
+            expect(data.userActivity).not.toBeNull();
+            expect(data.userActivity.uniqueUsers).toBe(2); // alice and bob
+            expect(data.userActivity.topTools.length).toBeGreaterThanOrEqual(1);
+            expect(data.userActivity.activeDays).toBeGreaterThanOrEqual(1);
+        });
+        it('counts active days correctly', async () => {
+            // Events on 3 distinct days
+            seedAuditLogs(db, [
+                { actor: 'alice', timestamp: daysAgo(1) },
+                { actor: 'alice', timestamp: daysAgo(1) }, // same day
+                { actor: 'bob', timestamp: daysAgo(3) },
+                { actor: 'carol', timestamp: daysAgo(5) },
+            ]);
+            const data = await svc.gatherData(30, true);
+            expect(data.userActivity.activeDays).toBe(3);
+        });
+        it('includes period boundaries in audit summary', async () => {
+            const data = await svc.gatherData(30, false);
+            expect(data.auditSummary.periodStart).toBeDefined();
+            expect(data.auditSummary.periodEnd).toBeDefined();
+            const start = new Date(data.auditSummary.periodStart);
+            const end = new Date(data.auditSummary.periodEnd);
+            const diffDays = (end.getTime() - start.getTime()) / 86_400_000;
+            // Should be approximately 30 days
+            expect(diffDays).toBeGreaterThanOrEqual(29);
+            expect(diffDays).toBeLessThanOrEqual(31);
+        });
+        it('configState has expected defaults', async () => {
+            const data = await svc.gatherData(90, false);
+            expect(data.configState).toEqual({
+                ssoEnabled: false,
+                rbacEnabled: false,
+                auditLoggingEnabled: true,
+                webhooksConfigured: 0,
+            });
+        });
+        it('builds skillId from author/name when author is present', async () => {
+            seedSkills(db, [{ id: 'some-uuid', name: 'my-skill', author: 'acme' }]);
+            const data = await svc.gatherData(90, false);
+            expect(data.skills[0].skillId).toBe('acme/my-skill');
+        });
+        it('falls back to id when author is null', async () => {
+            seedSkills(db, [{ id: 'orphan-skill-id', name: 'orphan', author: undefined }]);
+            const data = await svc.gatherData(90, false);
+            expect(data.skills[0].skillId).toBe('orphan-skill-id');
+        });
+    });
+});
+//# sourceMappingURL=compliance-tools.service.test.js.map

package/dist/src/tools/compliance-tools.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-tools.service.test.js","sourceRoot":"","sources":["../../../src/tools/compliance-tools.service.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAA;AAG3E,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,SAAS,aAAa,CACpB,EAAY,EACZ,IAME;IAEF,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,sFAAsF;QACpF,8BAA8B,CACjC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CACN,MAAM,CAAC,UAAU,EAAE,EACnB,GAAG,CAAC,UAAU,IAAI,WAAW,EAC7B,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACzC,GAAG,CAAC,KAAK,IAAI,IAAI,EACjB,GAAG,CAAC,QAAQ,IAAI,IAAI,EACpB,SAAS,EACT,GAAG,CAAC,MAAM,IAAI,SAAS,CACxB,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,EAAY,EACZ,MAKE;IAEF,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAA;IAChG,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,SAAS,CAAC,CAAA;IACrE,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;AAC5D,CAAC;AAED,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,IAAI,EAAY,CAAA;IAChB,IAAI,GAAsB,CAAA;IAE1B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;QAC/B,GAAG,GAAG,2BAA2B,CAAC,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,KAAK,EAAE,CAAA;IACZ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAE5C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC/B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC7C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC9C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC7C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAA;YACpC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,aAAa,CAAC,EAAE,EAAE;gBAChB,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBACtD,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE;gBACvD,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBACxD,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBACrD,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBACrD,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBACrD,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc;aACzE,CAAC,CAAA;YAEF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAC5C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,eAAe;YAC7D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,wBAAwB;YACvE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,UAAU,CAAC,EAAE,EAAE;gBACb,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE;gBACzF,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE;aACrF,CAAC,CAAA;YAEF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAC5C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YAClD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;YACxD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YAElF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAC5C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,aAAa,CAAC,EAAE,EAAE;gBAChB,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBAC7D,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBAC7D,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBAC5D,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;aAC3D,CAAC,CAAA;YAEF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;YACxC,MAAM,CAAC,IAAI,CAAC,YAAa,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA,CAAC,gBAAgB;YAC/D,MAAM,CAAC,IAAI,CAAC,YAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;YACpE,MAAM,CAAC,IAAI,CAAC,YAAa,CAAC,UAAU,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAA;QACjE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,4BAA4B;YAC5B,aAAa,CAAC,EAAE,EAAE;gBAChB,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBACzC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW;gBACtD,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;gBACvC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;aAC1C,CAAC,CAAA;YAEF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,CAAC,IAAI,CAAC,YAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAE5C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;YACnD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAA;YACjD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;YACrD,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;YACjD,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,UAAU,CAAA;YAC/D,kCAAkC;YAClC,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAA;YAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAC5C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;gBAC/B,UAAU,EAAE,KAAK;gBACjB,WAAW,EAAE,KAAK;gBAClB,mBAAmB,EAAE,IAAI;gBACzB,kBAAkB,EAAE,CAAC;aACtB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;YAEvE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAC5C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACtD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;YAE9E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;YAC5C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/tools/compliance-tools.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @fileoverview Tests for compliance report MCP tool
+ * @see SMI-3906: Compliance Report MCP Tool
+ */
+export {};
+//# sourceMappingURL=compliance-tools.test.d.ts.map

package/dist/src/tools/compliance-tools.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-tools.test.d.ts","sourceRoot":"","sources":["../../../src/tools/compliance-tools.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}