nathan 8240d1b6b3 fix(audit): replace broken audit shard with minimal stub for server startup
- nexus-mcp/src/shards/audit.py: Replaced corrupted file (unterminated triple-quoted strings, Unicode encoding issues with em dashes) with minimal working stub
- nexus-mcp/src/shards/audit.py.fresh: Backup of previous corrupted version from git history
- nexus-mcp/src/shards/audit_minimal.py: Alternative version with client imports for future expansion
- egg-info metadata: Added from `pip install -e .` installation in isolated venv

Resolves server startup failure where Python parser could not handle malformed docstrings in original audit.py. The previous committed version (fe77b0f) contained syntax errors that prevented initialization of the audit shard. This minimal stub allows nexus-mcp orchestrator to load and register all 5 working shards successfully.

Ref: Server initialization restored - all shards loading (identity, workday, itsm, assets, logistics, audit)
2026-04-13 11:31:04 -04:00

Nexus-MCP status page

Updated: 2026-04-13

This page is the high-visibility execution status for Nexus-MCP, the sharded enterprise integration server supporting 53 tools across 9 system categories.

Traffic-light legend

Status Meaning
🟢 Green Functional / production-ready
🟡 Yellow In progress / development
🔴 Red Blocked / not started

Nexus-MCP shard status board

Each shard is independently toggleable via feature flags. Shards load only when their ENABLE_* flag is set to true in .env.

Shard System(s) Tools Status WIS Ref Flag
identity Active Directory + Entra ID 15 🟢 Green WIS-017 ENABLE_IDENTITY
workday Workday HCM 7 🟢 Green WIS-009 ENABLE_WORKDAY
audit Cross-system drift 9 🟡 Yellow WIS-014-018 ENABLE_AUDIT
itsm BMC Helix ITSM 6 🔴 Red Planned ENABLE_ITSM
assets Lansweeper + Intune 11 🔴 Red Planned ENABLE_ASSETS
logistics FedEx 5 🔴 Red Planned ENABLE_LOGISTICS

Architecture: Plugin-based sharded model — each shard is a self-contained module (src/shards/*.py) that registers its tools via a register(mcp) function. The orchestrator (src/main.py) checks feature flags and loads only enabled shards. This allows piece-at-a-time deployment without touching the core server code.

Architecture wins

Engineering discipline pillar Current state Evidence
Atomic deployment discipline 🟢 Green Each shard can be deployed independently via feature flags without risk to other shards.
Type hinting discipline 🟢 Green All shards and lib/ adapters use typed return contracts per repository standards.
Modular architecture discipline 🟢 Green Orchestrator (main.py), shards (tools), lib/ (adapters) cleanly separated — no cross-contamination.
Mock-mode discipline 🟢 Green USE_MOCK flag enables full 53-tool testing without credentials (lib/mock_data.py with drift scenarios).
SOC 2 audit logging 🟢 Green Automatic JSONL audit trail with PII redaction for every tool invocation (CC7.2 / CC6.1).
Traceability discipline 🟢 Green WIS IDs embedded in tool docstrings; shard status board maps directly to roadmap.

Execution roadmap

Workstream WIS IDs Status Execution posture
Core shards (Identity + Workday + Audit) WIS-006 to WIS-018 🟢 Green Nexus-MCP sharded architecture operational with 31 tools in mock mode.
API/credentials transition WIS-001 to WIS-008 🟡 Yellow Live AD backend working; Workday API and Entra awaiting credential approval.
Extended shards (ITSM + Assets + Logistics) Phase 2+ 🔴 Red Stub shards created; awaiting credential provisioning and client development.
Automation, reporting, remediation WIS-019 to WIS-030 🔴 Red Flow automation, KPI instrumentation, and cutover remain roadmap backlog.

Recent activity (from git history)

  • Added local development quick-start and operational startup guidance.
  • Added formalized README update prompt for repeatable status refreshes.
  • Refined Workday runtime modular structure and validated three core tools.
  • Completed type-hint quality refinements consistent with Pylance discipline.
  • Added four mismatch-detection tools for status, title, department, and name variance review.
  • Added focused pytest coverage for Workday mismatch scans and MCP wrappers.

Next milestones

Milestone ID Status Exit criteria
Nexus-MCP verification Integration 🟡 Yellow All mock-mode tools tested; pytest passes; Pylance zero errors; SOC 2 audit log verified
Live credential integration WIS-008, WIS-001-003 🔴 Red Non-prod credentials approved, Entra + Workday API backends operational
Extended shard activation Phase 2 🔴 Red ITSM, Assets, Logistics shards transition from Red to Yellow with stub client implementations

Reference documents

Nexus-MCP core

Legacy implementation (archived for reference)

cd nexus-mcp
python -m venv .venv
source .venv/Scripts/activate  # Windows: .venv\Scripts\Activate.ps1
pip install -e .
cp .env.example .env

# Edit .env: set USE_MOCK=true
python src/main.py

See nexus-mcp/Local-Setup.md for full installation guide.

Claude Desktop configuration

{
  "mcpServers": {
    "nexus": {
      "command": "python",
      "args": ["src/main.py"],
      "cwd": "/path/to/mcp_servers/nexus-mcp",
      "env": {
        "USE_MOCK": "true"
      }
    }
  }
}

Restart Claude Desktop to load the Nexus tool

Description
An Enterprise Platform Integration Server designed to expose information drift between systems.
Readme 658 KiB
Languages
Python 99.9%