Merge pull request #76 from Gerifield/feat/audit-logging-mcp-skills

feat: add audit logging to mcp-skills tool handlers

Author: Gerifield

cmd/server-mcp-skills/tools.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"fmt"
 	"io/fs"
+	"log/slog"
 	"os"
 	"os/exec"
 	"path/filepath"
@@ -48,6 +49,7 @@ func ensureSafePath(baseDir, reqPath string) (string, error) {
 func handleListFiles(baseDir string) func(context.Context, mcp.CallToolRequest) (*mcp.CallToolResult, error) {
 	return func(ctx context.Context, req mcp.CallToolRequest) (*mcp.CallToolResult, error) {
 		pathArg := req.GetString("path", ".")
+		slog.InfoContext(ctx, "audit: list_files called", slog.String("path", pathArg))
 
 		safePath, err := ensureSafePath(baseDir, pathArg)
 		if err != nil {
@@ -94,6 +96,7 @@ func handleReadFile(baseDir string) func(context.Context, mcp.CallToolRequest) (
 		if pathArg == "" {
 			return mcp.NewToolResultError("path parameter is required"), nil
 		}
+		slog.InfoContext(ctx, "audit: read_file called", slog.String("path", pathArg))
 
 		safePath, err := ensureSafePath(baseDir, pathArg)
 		if err != nil {
@@ -118,6 +121,7 @@ func handleWriteFile(baseDir string) func(context.Context, mcp.CallToolRequest)
 		}
 
 		contentArg := req.GetString("content", "")
+		slog.InfoContext(ctx, "audit: write_file called", slog.String("path", pathArg), slog.Int("content_len", len(contentArg)))
 
 		safePath, err := ensureSafePath(baseDir, pathArg)
 		if err != nil {
@@ -146,6 +150,7 @@ func handleExecuteCommand(baseDir string) func(context.Context, mcp.CallToolRequ
 		if cmdArg == "" {
 			return mcp.NewToolResultError("command parameter is required"), nil
 		}
+		slog.InfoContext(ctx, "audit: execute_command called", slog.String("command", cmdArg))
 
 		absBase, err := filepath.Abs(baseDir)
 		if err != nil {