IDSC-1440: Add site activity logs support to enterprise tool

[viratatwebflow]

Summary

• Add list_site_activity_logs action to data_enterprise_tool for retrieving site activity logs (GET /v2/sites/{site_id}/activity_logs)
• Implement per-action error handling so non-Enterprise site failures don't block results from Enterprise sites in the same batch
• Pin zod to 3.25.76 to fix zod/v3 subpath runtime resolution required by @modelcontextprotocol/sdk@1.25.2

Details

Activity logs are an Enterprise-only Webflow API. Workspaces commonly contain a mix of Enterprise and non-Enterprise sites. When an LLM requests logs for multiple sites in one batch, non-Enterprise sites return a 403 with body.code: "not_enterprise_plan_site". Without per-action error handling, the first 403 would abort the entire batch.

Changes in src/tools/enterprise.ts

• New listSiteActivityLogs helper calling getClient().sites.activityLogs.list()
• New list_site_activity_logs schema with site_id, optional limit, optional offset
• Per-action try/catch (documented with comment explaining the deviation from other tools)
• 403 detection using Webflow SDK's WebflowError.statusCode and body.code
• Generic errors delegated to existing formatErrorResponse utility
• MCP isError flag set when any action fails

Changes in package.json

• zod pinned to 3.25.76 (was ^3.24.2) — required for zod/v3 subpath to resolve at runtime

Testing performed

1. Build — npx tsup src/index.ts succeeds

2. Runtime — zod/v3 resolves correctly with zod@3.25.76

3. Mixed workspace — Tested against workspace with 10 sites (2 Enterprise, 8 non-Enterprise):

   • Enterprise sites returned activity log data (e.g., backup_created events)
   • Non-Enterprise sites returned {"error":true,"message":"This site does not have an Enterprise hosting plan. This action requires an Enterprise site plan."}
   • Enterprise results were not blocked by non-Enterprise failures

4. MCP protocol — Confirmed isError: true set on response when any action fails

5. Error shape verification — Confirmed Webflow API returns statusCode: 403 with body.code: "not_enterprise_plan_site" (not not_enterprise_plan_workspace)

6. Code review — Two rounds of 4-dimensional review (security, architecture, readability, simplicity), all blockers resolved