kb-audit-query

Audit Log Query

Lightweight: This skill reads only index metadata (timestamps / audit log entries). Inline execution is acceptable.

Filter and summarise events from library/audit.log for the current project. The audit log is project-scope (lives in the project's library directory) and append-only; this skill is read-only.

Arguments

All optional:

• --since <ISO-date> — events at or after this timestamp (e.g., 2026-01-01T00:00:00Z)
• --until <ISO-date> — events at or before this timestamp
• --event-type <type> — one of: attribution_drop_retrieval, synthesis_aborted_attribution, synthesis_aborted_dispatcher_error, source_dispatch_failed, no_evidence_marker, cross_library_promotion
• --source <handle> — events for this library handle only
• --summary — emit count-by-type summary instead of detailed event list

Steps

Preflight: verify scripts package importable

python3 -c "
import sys, os, importlib.util
PLUGIN_ROOT = os.environ.get('CLAUDE_PLUGIN_ROOT', '')
SCRIPTS = os.path.join(PLUGIN_ROOT, 'scripts')
INIT = os.path.join(SCRIPTS, '__init__.py')
if os.path.isfile(INIT) and 'sdlc_knowledge_base_scripts' not in sys.modules:
    spec = importlib.util.spec_from_file_location(
        'sdlc_knowledge_base_scripts',
        INIT,
        submodule_search_locations=[SCRIPTS],
    )
    if spec and spec.loader:
        module = importlib.util.module_from_spec(spec)
        sys.modules['sdlc_knowledge_base_scripts'] = module
        spec.loader.exec_module(module)
try:
    import sdlc_knowledge_base_scripts.audit  # noqa: F401
    print('OK')
except ImportError:
    print('MISSING')
"

If output is MISSING, see kb-query for the install fallback. Otherwise prepend the importlib preamble to subsequent snippets.

1. Read and filter

python3 -c "
import sys, os, importlib.util, json
PLUGIN_ROOT = os.environ.get('CLAUDE_PLUGIN_ROOT', '')
SCRIPTS = os.path.join(PLUGIN_ROOT, 'scripts')
INIT = os.path.join(SCRIPTS, '__init__.py')
if os.path.isfile(INIT) and 'sdlc_knowledge_base_scripts' not in sys.modules:
    spec = importlib.util.spec_from_file_location(
        'sdlc_knowledge_base_scripts',
        INIT,
        submodule_search_locations=[SCRIPTS],
    )
    if spec and spec.loader:
        module = importlib.util.module_from_spec(spec)
        sys.modules['sdlc_knowledge_base_scripts'] = module
        spec.loader.exec_module(module)

from pathlib import Path
from sdlc_knowledge_base_scripts.audit import read_log

events = read_log(
    Path('library/audit.log'),
    event_type=<event-type or None>,
    source_handle=<source or None>,
    since=<since or None>,
    until=<until or None>,
)
print(json.dumps([e.__dict__ for e in events], indent=2))
"