Skip to content

fix(website): correct pricing.astro Audit Logging/SIEM roadmap staleness#1998

Merged
wrsmith108 merged 2 commits into
mainfrom
fix/smi-5735-pricing-roadmap-audit
Jul 21, 2026
Merged

fix(website): correct pricing.astro Audit Logging/SIEM roadmap staleness#1998
wrsmith108 merged 2 commits into
mainfrom
fix/smi-5735-pricing-roadmap-audit

Conversation

@wrsmith108

Copy link
Copy Markdown
Member

Business Summary

What shipped: packages/website/src/pages/pricing.astro's Enterprise "On the roadmap" list incorrectly showed Audit Logging and SIEM export as unshipped, and the comparison table's Audit Logging row showed a roadmap clock instead of a checkmark. Both are actually shipped, Enterprise-only gated MCP tools (audit_export, audit_query, siem_export) — verified directly against toolFeatureMapping.ts, not inferred. Fixed the table row, added the missing SIEM Export table row, and removed the two stale roadmap bullets.

Quality bar: astro check clean (169 files, 0 errors/warnings/hints). Independent cross-provider review (Sol/Codex via NEEDLE) of the diff: PASS, 0 defects. Followed up on Sol's one recommendation (verify no other page text — JSON-LD, FAQ — still references these as roadmap-only): confirmed clean via full-file grep, only the two table rows reference either term.

Found along the way: SSO/SAML and RBAC were investigated in the same pass and confirmed genuinely still unshipped (stub-only backing services, createStubSSOService()/createStubRBACService(), no production caller ever swaps in a real implementation) — correctly left as roadmap, not touched.

Net result: Pricing page now accurately reflects shipped Enterprise capabilities for audit/SIEM tooling.


Technical detail

  • Comparison table: Audit Logging row's Enterprise cell changed from roadmap-clock to check (Enterprise-only — NOT Team+Enterprise, unlike the neighboring Compliance Reports row). New SIEM Export row added, same Enterprise-only pattern.
  • Roadmap <li> list: removed "Audit logging (MCP tools)" and "SIEM export"; left SSO/SAML and RBAC untouched (verified separately as genuinely unshipped).
  • Evidence chain (tool-dispatch.ts, audit-tools.ts, toolFeatureMapping.ts:145/146, TierMapping.ts:59/60) confirms Enterprise-only gating for all three tools.

Pre-existing issue exception (CLAUDE.md zero-deferral exception clause)

Pushed via --no-verify with explicit consent — pre-push's npm audit check fails on SMI-5775 (brace-expansion High/DoS + astro Moderate/XSS + others on main), a pre-existing, already-tracked, unrelated dependency vulnerability independently discovered by a concurrent session ~30 min before this PR. This diff touches only pricing.astro content — no package.json/package-lock.json changes. Every other pre-push check (format, tests, secrets, typecheck, astro check) passed clean before hitting the audit gate. SMI-5775's actual fix requires npm audit fix inside the long-lived skillsmith-dev-1 container (worktree containers structurally can't run it — read-only node_modules mounts by design), which was contended by other concurrent sessions at push time.

Refs SMI-5735, SMI-3140, SMI-5688, SMI-5775.

@github-actions

github-actions Bot commented Jul 21, 2026

Copy link
Copy Markdown

Website Preview

Preview URL https://website-7bsf6smj6-smithhorngroup.vercel.app
Commit 57ab019
Actions run View logs

@wrsmith108
wrsmith108 force-pushed the fix/smi-5735-pricing-roadmap-audit branch from 5210ac6 to 21a9950 Compare July 21, 2026 02:53
@github-actions

Copy link
Copy Markdown

E2E Test Results

Phase Status
CLI E2E ❌ cancelled
MCP E2E ❌ cancelled

@github-actions

Copy link
Copy Markdown

E2E Test Results

E2E Test Results - July 21, 2026

Summary

  • Status: ✅ PASSED
  • Total Duration: 0.00s
  • Generated: 2026-07-21T03:18:26.489Z

Test Results

Phase Status Duration
CLI E2E ⏭️ Skipped -
MCP E2E ⏭️ Skipped -

Generated by skillsmith E2E test suite

wrsmith108 and others added 2 commits July 20, 2026 20:29
audit_export, audit_query, and siem_export are shipped, Enterprise-only
gated MCP tools (toolFeatureMapping.ts: audit_logging -> 'enterprise'),
not roadmap items. The Audit Logging comparison-table row was showing a
roadmap clock instead of a check, and 'Audit logging (MCP tools)' /
'SIEM export' were listed as unshipped Enterprise roadmap bullets.

Fixes the table row's Enterprise cell, adds a missing SIEM Export row
(same Enterprise-only pattern, distinct from the Team+Enterprise
Compliance Reports row), and removes the two now-inaccurate roadmap
bullets. SSO/SAML and RBAC were verified separately as genuinely
still-unshipped stub implementations and are left untouched.

Refs SMI-5735, SMI-3140, SMI-5688
Co-Authored-By: claude-flow <ruv@ruv.net>
Co-Authored-By: Claude <noreply@anthropic.com>
Refs SMI-5735
Co-Authored-By: claude-flow <ruv@ruv.net>
Co-Authored-By: Claude <noreply@anthropic.com>
@wrsmith108
wrsmith108 force-pushed the fix/smi-5735-pricing-roadmap-audit branch from 21a9950 to 57ab019 Compare July 21, 2026 04:40
@github-actions

Copy link
Copy Markdown

E2E Test Results

E2E Test Results - July 21, 2026

Summary

  • Status: ✅ PASSED
  • Total Duration: 0.00s
  • Generated: 2026-07-21T05:01:34.007Z

Test Results

Phase Status Duration
CLI E2E ⏭️ Skipped -
MCP E2E ⏭️ Skipped -

Generated by skillsmith E2E test suite

@wrsmith108
wrsmith108 merged commit a5efdd4 into main Jul 21, 2026
38 checks passed
@wrsmith108
wrsmith108 deleted the fix/smi-5735-pricing-roadmap-audit branch July 21, 2026 05:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant