framework-mcp 1.1.2 → 1.2.0

package/dist/interfaces/http/http-server.d.ts

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+export declare class FrameworkHttpServer {
+    private app;
+    private capabilityAnalyzer;
+    private safeguardManager;
+    private port;
+    constructor(port?: number);
+    private setupMiddleware;
+    private setupRoutes;
+    private setupErrorHandling;
+    private validateInput;
+    private validateTextInput;
+    private validateCapability;
+    private createErrorResponse;
+    start(): void;
+}
+//# sourceMappingURL=http-server.d.ts.map

package/dist/interfaces/http/http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../../src/interfaces/http/http-server.ts"],"names":[],"mappings":";AAeA,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,GAAG,CAAsB;IACjC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,IAAI,CAAS;gBAET,IAAI,GAAE,MAAa;IAW/B,OAAO,CAAC,eAAe;IAmCvB,OAAO,CAAC,WAAW;IAyMnB,OAAO,CAAC,kBAAkB;IAsB1B,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,mBAAmB;IAQpB,KAAK,IAAI,IAAI;CAoBrB"}

package/dist/interfaces/http/http-server.js

@@ -0,0 +1,285 @@
+#!/usr/bin/env node
+import express from 'express';
+import cors from 'cors';
+import helmet from 'helmet';
+import compression from 'compression';
+import { CapabilityAnalyzer } from '../../core/capability-analyzer.js';
+import { SafeguardManager } from '../../core/safeguard-manager.js';
+export class FrameworkHttpServer {
+    constructor(port = 8080) {
+        this.app = express();
+        this.capabilityAnalyzer = new CapabilityAnalyzer();
+        this.safeguardManager = new SafeguardManager();
+        this.port = port;
+        this.setupMiddleware();
+        this.setupRoutes();
+        this.setupErrorHandling();
+    }
+    setupMiddleware() {
+        // Security middleware
+        this.app.use(helmet({
+            contentSecurityPolicy: {
+                directives: {
+                    defaultSrc: ["'self'"],
+                    styleSrc: ["'self'", "'unsafe-inline'"],
+                    scriptSrc: ["'self'"],
+                    imgSrc: ["'self'", "data:", "https:"],
+                },
+            },
+        }));
+        // CORS configuration
+        this.app.use(cors({
+            origin: process.env.ALLOWED_ORIGINS?.split(',') || ['http://localhost:3000'],
+            methods: ['GET', 'POST', 'OPTIONS'],
+            allowedHeaders: ['Content-Type', 'Authorization', 'X-Requested-With'],
+            credentials: true
+        }));
+        // Compression and parsing
+        this.app.use(compression());
+        this.app.use(express.json({ limit: '10mb' }));
+        this.app.use(express.urlencoded({ extended: true, limit: '10mb' }));
+        // Request logging in production
+        if (process.env.NODE_ENV === 'production') {
+            this.app.use((req, res, next) => {
+                console.log(`[${new Date().toISOString()}] ${req.method} ${req.path}`);
+                next();
+            });
+        }
+    }
+    setupRoutes() {
+        // Health check endpoint (required for DigitalOcean App Services)
+        this.app.get('/health', (req, res) => {
+            const metrics = this.capabilityAnalyzer.getPerformanceMetrics();
+            res.json({
+                status: 'healthy',
+                uptime: Math.round((Date.now() - metrics.uptime) / 1000),
+                totalRequests: metrics.totalRequests,
+                errorCount: metrics.errorCount,
+                version: '1.2.0',
+                timestamp: new Date().toISOString()
+            });
+        });
+        // Primary validation endpoint
+        this.app.post('/api/validate-vendor-mapping', async (req, res) => {
+            try {
+                const { vendor_name, safeguard_id, claimed_capability, supporting_text } = req.body;
+                // Input validation
+                this.validateInput(req.body, [
+                    'vendor_name',
+                    'safeguard_id',
+                    'claimed_capability',
+                    'supporting_text'
+                ]);
+                this.validateTextInput(supporting_text, 'Supporting text');
+                this.validateCapability(claimed_capability);
+                this.safeguardManager.validateSafeguardId(safeguard_id);
+                const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
+                if (!safeguard) {
+                    return res.status(404).json(this.createErrorResponse('Safeguard not found'));
+                }
+                const result = this.capabilityAnalyzer.validateVendorMapping(vendor_name, safeguard_id, claimed_capability, supporting_text, safeguard);
+                res.json(result);
+            }
+            catch (error) {
+                console.error('[HTTP Server] validate-vendor-mapping error:', error);
+                res.status(400).json(this.createErrorResponse(error instanceof Error ? error.message : 'Unknown error'));
+            }
+        });
+        // Capability analysis endpoint
+        this.app.post('/api/analyze-vendor-response', async (req, res) => {
+            try {
+                const { vendor_name, safeguard_id, response_text } = req.body;
+                this.validateInput(req.body, ['vendor_name', 'safeguard_id', 'response_text']);
+                this.validateTextInput(response_text, 'Response text');
+                this.safeguardManager.validateSafeguardId(safeguard_id);
+                const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
+                if (!safeguard) {
+                    return res.status(404).json(this.createErrorResponse('Safeguard not found'));
+                }
+                const result = this.capabilityAnalyzer.performCapabilityAnalysis(vendor_name, safeguard, response_text);
+                res.json(result);
+            }
+            catch (error) {
+                console.error('[HTTP Server] analyze-vendor-response error:', error);
+                res.status(400).json(this.createErrorResponse(error instanceof Error ? error.message : 'Unknown error'));
+            }
+        });
+        // Coverage claim validation endpoint
+        this.app.post('/api/validate-coverage-claim', async (req, res) => {
+            try {
+                const { vendor_name, safeguard_id, claimed_capability, response_text } = req.body;
+                this.validateInput(req.body, ['vendor_name', 'safeguard_id', 'claimed_capability', 'response_text']);
+                this.validateTextInput(response_text, 'Response text');
+                this.validateCapability(claimed_capability);
+                this.safeguardManager.validateSafeguardId(safeguard_id);
+                const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
+                if (!safeguard) {
+                    return res.status(404).json(this.createErrorResponse('Safeguard not found'));
+                }
+                // Use the primary validation method for coverage claims
+                const result = this.capabilityAnalyzer.validateVendorMapping(vendor_name, safeguard_id, claimed_capability, response_text, safeguard);
+                res.json(result);
+            }
+            catch (error) {
+                console.error('[HTTP Server] validate-coverage-claim error:', error);
+                res.status(400).json(this.createErrorResponse(error instanceof Error ? error.message : 'Unknown error'));
+            }
+        });
+        // Get safeguard details endpoint
+        this.app.get('/api/safeguards/:safeguardId', (req, res) => {
+            try {
+                const { safeguardId } = req.params;
+                const includeExamples = req.query.include_examples === 'true';
+                this.safeguardManager.validateSafeguardId(safeguardId);
+                const safeguard = this.safeguardManager.getSafeguardDetails(safeguardId, includeExamples);
+                if (!safeguard) {
+                    return res.status(404).json(this.createErrorResponse('Safeguard not found'));
+                }
+                res.json(safeguard);
+            }
+            catch (error) {
+                console.error('[HTTP Server] get-safeguard-details error:', error);
+                res.status(400).json(this.createErrorResponse(error instanceof Error ? error.message : 'Unknown error'));
+            }
+        });
+        // List all safeguards endpoint
+        this.app.get('/api/safeguards', (req, res) => {
+            try {
+                const safeguards = this.safeguardManager.listAvailableSafeguards();
+                res.json({
+                    safeguards,
+                    total: safeguards.length,
+                    framework: 'CIS Controls v8.1',
+                    timestamp: new Date().toISOString()
+                });
+            }
+            catch (error) {
+                console.error('[HTTP Server] list-safeguards error:', error);
+                res.status(500).json(this.createErrorResponse('Internal server error'));
+            }
+        });
+        // Performance metrics endpoint
+        this.app.get('/api/metrics', (req, res) => {
+            try {
+                const metrics = this.capabilityAnalyzer.getPerformanceMetrics();
+                res.json({
+                    uptime_seconds: Math.round((Date.now() - metrics.uptime) / 1000),
+                    total_requests: metrics.totalRequests,
+                    error_count: metrics.errorCount,
+                    error_rate: metrics.totalRequests > 0 ?
+                        ((metrics.errorCount / metrics.totalRequests) * 100).toFixed(2) + '%' : '0%',
+                    request_counts: Object.fromEntries(metrics.requestCounts),
+                    timestamp: new Date().toISOString()
+                });
+            }
+            catch (error) {
+                console.error('[HTTP Server] metrics error:', error);
+                res.status(500).json(this.createErrorResponse('Metrics unavailable'));
+            }
+        });
+        // API documentation endpoint
+        this.app.get('/api', (req, res) => {
+            res.json({
+                name: 'Framework MCP HTTP API',
+                version: '1.2.0',
+                description: 'Dual-architecture HTTP API for vendor capability assessment against CIS Controls Framework',
+                endpoints: {
+                    'POST /api/validate-vendor-mapping': 'Primary capability validation with domain validation',
+                    'POST /api/analyze-vendor-response': 'Capability role determination for vendor responses',
+                    'POST /api/validate-coverage-claim': 'Validate FULL/PARTIAL implementation claims',
+                    'GET /api/safeguards': 'List all available CIS safeguards',
+                    'GET /api/safeguards/:id': 'Get detailed safeguard breakdown',
+                    'GET /health': 'Health check endpoint',
+                    'GET /api/metrics': 'Performance metrics',
+                    'GET /api': 'This documentation'
+                },
+                capabilities: [
+                    'FULL - Complete implementation of safeguard',
+                    'PARTIAL - Limited scope implementation',
+                    'FACILITATES - Enhancement capabilities',
+                    'GOVERNANCE - Policy/process management',
+                    'VALIDATES - Evidence collection and reporting'
+                ],
+                domain_validation: 'Auto-downgrade protection for inappropriate capability claims',
+                framework: 'CIS Controls v8.1 (153 safeguards)',
+                deployment: 'DigitalOcean App Services compatible'
+            });
+        });
+        // Root endpoint redirect
+        this.app.get('/', (req, res) => {
+            res.redirect('/api');
+        });
+    }
+    setupErrorHandling() {
+        // 404 handler
+        this.app.use('*', (req, res) => {
+            res.status(404).json(this.createErrorResponse(`Endpoint not found: ${req.method} ${req.originalUrl}`, 'Use GET /api for available endpoints'));
+        });
+        // Global error handler
+        this.app.use((error, req, res, next) => {
+            console.error('[HTTP Server] Unhandled error:', error);
+            if (!res.headersSent) {
+                res.status(500).json(this.createErrorResponse('Internal server error', process.env.NODE_ENV === 'development' ? error.message : undefined));
+            }
+        });
+    }
+    validateInput(body, requiredFields) {
+        if (!body || typeof body !== 'object') {
+            throw new Error('Request body is required and must be valid JSON');
+        }
+        for (const field of requiredFields) {
+            if (!body[field] || typeof body[field] !== 'string') {
+                throw new Error(`Field '${field}' is required and must be a non-empty string`);
+            }
+        }
+    }
+    validateTextInput(text, fieldName) {
+        if (typeof text !== 'string') {
+            throw new Error(`${fieldName} must be a string`);
+        }
+        if (text.length < 10) {
+            throw new Error(`${fieldName} must be at least 10 characters long`);
+        }
+        if (text.length > 10000) {
+            throw new Error(`${fieldName} must be less than 10,000 characters`);
+        }
+    }
+    validateCapability(capability) {
+        const validCapabilities = ['full', 'partial', 'facilitates', 'governance', 'validates'];
+        if (!validCapabilities.includes(capability.toLowerCase())) {
+            throw new Error(`Invalid capability '${capability}'. Valid options: ${validCapabilities.join(', ')}`);
+        }
+    }
+    createErrorResponse(error, details) {
+        return {
+            error,
+            details,
+            timestamp: new Date().toISOString()
+        };
+    }
+    start() {
+        this.app.listen(this.port, '0.0.0.0', () => {
+            console.log(`🚀 Framework MCP HTTP Server v1.2.0 running on port ${this.port}`);
+            console.log(`📊 Health check: http://localhost:${this.port}/health`);
+            console.log(`📖 API docs: http://localhost:${this.port}/api`);
+            console.log(`🔧 Environment: ${process.env.NODE_ENV || 'development'}`);
+            console.log(`⚡ DigitalOcean App Services compatible`);
+        });
+        // Graceful shutdown handling
+        process.on('SIGTERM', () => {
+            console.log('🔄 Received SIGTERM, shutting down gracefully...');
+            process.exit(0);
+        });
+        process.on('SIGINT', () => {
+            console.log('🔄 Received SIGINT, shutting down gracefully...');
+            process.exit(0);
+        });
+    }
+}
+// Start server if this file is run directly
+if (import.meta.url === `file://${process.argv[1]}`) {
+    const port = parseInt(process.env.PORT || '8080', 10);
+    const server = new FrameworkHttpServer(port);
+    server.start();
+}
+//# sourceMappingURL=http-server.js.map

package/dist/interfaces/http/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../../../src/interfaces/http/http-server.ts"],"names":[],"mappings":";AAEA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,WAAW,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAQnE,MAAM,OAAO,mBAAmB;IAM9B,YAAY,OAAe,IAAI;QAC7B,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACnD,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAEO,eAAe;QACrB,sBAAsB;QACtB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;YAClB,qBAAqB,EAAE;gBACrB,UAAU,EAAE;oBACV,UAAU,EAAE,CAAC,QAAQ,CAAC;oBACtB,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;oBACvC,SAAS,EAAE,CAAC,QAAQ,CAAC;oBACrB,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;iBACtC;aACF;SACF,CAAC,CAAC,CAAC;QAEJ,qBAAqB;QACrB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAChB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC;YAC5E,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC;YACnC,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,kBAAkB,CAAC;YACrE,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC,CAAC;QAEJ,0BAA0B;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAEpE,gCAAgC;QAChC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvE,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,iEAAiE;QACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;gBACxD,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,8BAA8B;QAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/D,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;gBAEpF,mBAAmB;gBACnB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE;oBAC3B,aAAa;oBACb,cAAc;oBACd,oBAAoB;oBACpB,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;gBAC3D,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAExD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAC/E,CAAC;gBAED,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAC1D,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,SAAS,CACV,CAAC;gBAEF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/D,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;gBAE9D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;gBACvD,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAExD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAC/E,CAAC;gBAED,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,CAC9D,WAAW,EACX,SAAS,EACT,aAAa,CACd,CAAC;gBAEF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,qCAAqC;QACrC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC/D,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;gBAElF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC,CAAC;gBACrG,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;gBACvD,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;gBAC5C,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAExD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;gBAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAC/E,CAAC;gBAED,wDAAwD;gBACxD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAC1D,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,SAAS,CACV,CAAC;gBAEF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,iCAAiC;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,8BAA8B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACxD,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gBACnC,MAAM,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC;gBAE9D,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBAEvD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;gBAC1F,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBAC/E,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;gBACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,uBAAuB,EAAE,CAAC;gBAEnE,GAAG,CAAC,IAAI,CAAC;oBACP,UAAU;oBACV,KAAK,EAAE,UAAU,CAAC,MAAM;oBACxB,SAAS,EAAE,mBAAmB;oBAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACxC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,EAAE,CAAC;gBAEhE,GAAG,CAAC,IAAI,CAAC;oBACP,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;oBAChE,cAAc,EAAE,OAAO,CAAC,aAAa;oBACrC,WAAW,EAAE,OAAO,CAAC,UAAU;oBAC/B,UAAU,EAAE,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;wBACrC,CAAC,CAAC,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI;oBAC9E,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC;oBACzD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;gBACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,6BAA6B;QAC7B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAChC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,4FAA4F;gBACzG,SAAS,EAAE;oBACT,mCAAmC,EAAE,sDAAsD;oBAC3F,mCAAmC,EAAE,oDAAoD;oBACzF,mCAAmC,EAAE,6CAA6C;oBAClF,qBAAqB,EAAE,mCAAmC;oBAC1D,yBAAyB,EAAE,kCAAkC;oBAC7D,aAAa,EAAE,uBAAuB;oBACtC,kBAAkB,EAAE,qBAAqB;oBACzC,UAAU,EAAE,oBAAoB;iBACjC;gBACD,YAAY,EAAE;oBACZ,6CAA6C;oBAC7C,wCAAwC;oBACxC,wCAAwC;oBACxC,wCAAwC;oBACxC,+CAA+C;iBAChD;gBACD,iBAAiB,EAAE,+DAA+D;gBAClF,SAAS,EAAE,oCAAoC;gBAC/C,UAAU,EAAE,sCAAsC;aACnD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,yBAAyB;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC7B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB;QACxB,cAAc;QACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAC3C,uBAAuB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,EACtD,sCAAsC,CACvC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAY,EAAE,GAAoB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;YACrG,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YAEvD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAC3C,uBAAuB,EACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CACnE,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,IAAS,EAAE,cAAwB;QACvD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,8CAA8C,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,IAAY,EAAE,SAAiB;QACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,mBAAmB,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,sCAAsC,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,sCAAsC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,UAAkB;QAC3C,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAExF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,qBAAqB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,OAAgB;QACzD,OAAO;YACL,KAAK;YACL,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAEM,KAAK;QACV,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;YACzC,OAAO,CAAC,GAAG,CAAC,uDAAuD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,6BAA6B;QAC7B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACzB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,4CAA4C;AAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC"}

package/dist/interfaces/mcp/mcp-server.d.ts

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+export declare class FrameworkMcpServer {
+    private server;
+    private capabilityAnalyzer;
+    private safeguardManager;
+    constructor();
+    private setupHandlers;
+    private validateVendorMapping;
+    private analyzeVendorResponse;
+    private validateCoverageClaim;
+    private getSafeguardDetails;
+    private listAvailableSafeguards;
+    private validateTextInput;
+    private validateCapability;
+    private formatErrorMessage;
+    run(): Promise<void>;
+}
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/interfaces/mcp/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../../../src/interfaces/mcp/mcp-server.ts"],"names":[],"mappings":";AAaA,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,gBAAgB,CAAmB;;IAgB3C,OAAO,CAAC,aAAa;YA2JP,qBAAqB;YA+BrB,qBAAqB;YAuBrB,qBAAqB;YA+BrB,mBAAmB;YAoBnB,uBAAuB;IAkBrC,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,kBAAkB;IAQ1B,OAAO,CAAC,kBAAkB;IAqBb,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAOlC"}

package/dist/interfaces/mcp/mcp-server.js

@@ -0,0 +1,299 @@
+#!/usr/bin/env node
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { CapabilityAnalyzer } from '../../core/capability-analyzer.js';
+import { SafeguardManager } from '../../core/safeguard-manager.js';
+export class FrameworkMcpServer {
+    constructor() {
+        this.server = new Server({
+            name: 'framework-analyzer',
+            version: '1.2.0',
+        });
+        this.capabilityAnalyzer = new CapabilityAnalyzer();
+        this.safeguardManager = new SafeguardManager();
+        this.setupHandlers();
+    }
+    setupHandlers() {
+        // List available tools
+        this.server.setRequestHandler(ListToolsRequestSchema, async () => {
+            return {
+                tools: [
+                    {
+                        name: 'validate_vendor_mapping',
+                        description: 'PRIMARY: Validate vendor capability claims with domain validation and evidence analysis',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                vendor_name: {
+                                    type: 'string',
+                                    description: 'Name of the vendor/tool being analyzed'
+                                },
+                                safeguard_id: {
+                                    type: 'string',
+                                    description: 'CIS safeguard ID (e.g., "1.1", "5.1")'
+                                },
+                                claimed_capability: {
+                                    type: 'string',
+                                    description: 'Claimed capability role',
+                                    enum: ['full', 'partial', 'facilitates', 'governance', 'validates']
+                                },
+                                supporting_text: {
+                                    type: 'string',
+                                    description: 'Vendor text supporting their capability claim'
+                                }
+                            },
+                            required: ['vendor_name', 'safeguard_id', 'claimed_capability', 'supporting_text']
+                        }
+                    },
+                    {
+                        name: 'analyze_vendor_response',
+                        description: 'Determine vendor tool capability role for specific safeguard',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                vendor_name: {
+                                    type: 'string',
+                                    description: 'Name of the vendor'
+                                },
+                                safeguard_id: {
+                                    type: 'string',
+                                    description: 'CIS safeguard ID (e.g., "1.1", "5.1")'
+                                },
+                                response_text: {
+                                    type: 'string',
+                                    description: 'Vendor response text to analyze'
+                                }
+                            },
+                            required: ['vendor_name', 'safeguard_id', 'response_text']
+                        }
+                    },
+                    {
+                        name: 'validate_coverage_claim',
+                        description: 'Validate FULL/PARTIAL implementation capability claims',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                vendor_name: {
+                                    type: 'string',
+                                    description: 'Name of the vendor'
+                                },
+                                safeguard_id: {
+                                    type: 'string',
+                                    description: 'CIS safeguard ID (e.g., "1.1", "5.1")'
+                                },
+                                claimed_capability: {
+                                    type: 'string',
+                                    description: 'Claimed capability (typically "full" or "partial")',
+                                    enum: ['full', 'partial', 'facilitates', 'governance', 'validates']
+                                },
+                                response_text: {
+                                    type: 'string',
+                                    description: 'Vendor response text supporting the claim'
+                                }
+                            },
+                            required: ['vendor_name', 'safeguard_id', 'claimed_capability', 'response_text']
+                        }
+                    },
+                    {
+                        name: 'get_safeguard_details',
+                        description: 'Get detailed safeguard breakdown',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {
+                                safeguard_id: {
+                                    type: 'string',
+                                    description: 'CIS safeguard ID (e.g., "1.1", "5.1")'
+                                },
+                                include_examples: {
+                                    type: 'boolean',
+                                    description: 'Include implementation examples (default: false)'
+                                }
+                            },
+                            required: ['safeguard_id']
+                        }
+                    },
+                    {
+                        name: 'list_available_safeguards',
+                        description: 'List all available CIS safeguards',
+                        inputSchema: {
+                            type: 'object',
+                            properties: {},
+                            additionalProperties: false
+                        }
+                    },
+                ],
+            };
+        });
+        // Handle tool calls
+        this.server.setRequestHandler(CallToolRequestSchema, async (request) => {
+            const { name, arguments: args } = request.params;
+            try {
+                switch (name) {
+                    case 'validate_vendor_mapping':
+                        return await this.validateVendorMapping(args);
+                    case 'analyze_vendor_response':
+                        return await this.analyzeVendorResponse(args);
+                    case 'validate_coverage_claim':
+                        return await this.validateCoverageClaim(args);
+                    case 'get_safeguard_details':
+                        return await this.getSafeguardDetails(args);
+                    case 'list_available_safeguards':
+                        return await this.listAvailableSafeguards();
+                    default:
+                        throw new Error(`Unknown tool: ${name}`);
+                }
+            }
+            catch (error) {
+                const errorMessage = this.formatErrorMessage(error, name);
+                console.error(`[Framework MCP] Tool execution error: ${name}`, error);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: JSON.stringify({
+                                error: errorMessage,
+                                timestamp: new Date().toISOString()
+                            }, null, 2),
+                        },
+                    ],
+                };
+            }
+        });
+    }
+    async validateVendorMapping(args) {
+        const { vendor_name = 'Unknown Vendor', safeguard_id, claimed_capability, supporting_text } = args;
+        // Input validation
+        this.validateTextInput(supporting_text, 'Supporting text');
+        this.validateCapability(claimed_capability);
+        this.safeguardManager.validateSafeguardId(safeguard_id);
+        const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
+        if (!safeguard) {
+            throw new Error(`Safeguard ${safeguard_id} not found`);
+        }
+        const validation = this.capabilityAnalyzer.validateVendorMapping(vendor_name, safeguard_id, claimed_capability, supporting_text, safeguard);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(validation, null, 2),
+                },
+            ],
+        };
+    }
+    async analyzeVendorResponse(args) {
+        const { vendor_name = 'Unknown Vendor', safeguard_id, response_text } = args;
+        this.validateTextInput(response_text, 'Response text');
+        this.safeguardManager.validateSafeguardId(safeguard_id);
+        const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
+        if (!safeguard) {
+            throw new Error(`Safeguard ${safeguard_id} not found`);
+        }
+        const analysis = this.capabilityAnalyzer.performCapabilityAnalysis(vendor_name, safeguard, response_text);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(analysis, null, 2),
+                },
+            ],
+        };
+    }
+    async validateCoverageClaim(args) {
+        const { vendor_name = 'Unknown Vendor', safeguard_id, claimed_capability, response_text } = args;
+        this.validateTextInput(response_text, 'Response text');
+        this.validateCapability(claimed_capability);
+        this.safeguardManager.validateSafeguardId(safeguard_id);
+        const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
+        if (!safeguard) {
+            throw new Error(`Safeguard ${safeguard_id} not found`);
+        }
+        // Use the primary validation method for coverage claims
+        const validation = this.capabilityAnalyzer.validateVendorMapping(vendor_name, safeguard_id, claimed_capability, response_text, safeguard);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(validation, null, 2),
+                },
+            ],
+        };
+    }
+    async getSafeguardDetails(args) {
+        const { safeguard_id, include_examples = false } = args;
+        this.safeguardManager.validateSafeguardId(safeguard_id);
+        const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id, include_examples);
+        if (!safeguard) {
+            throw new Error(`Safeguard ${safeguard_id} not found`);
+        }
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(safeguard, null, 2),
+                },
+            ],
+        };
+    }
+    async listAvailableSafeguards() {
+        const safeguards = this.safeguardManager.listAvailableSafeguards();
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        safeguards,
+                        total: safeguards.length,
+                        framework: 'CIS Controls v8.1',
+                        version: '1.2.0'
+                    }, null, 2),
+                },
+            ],
+        };
+    }
+    validateTextInput(text, fieldName) {
+        if (typeof text !== 'string') {
+            throw new Error(`${fieldName} must be a string`);
+        }
+        if (text.length < 10) {
+            throw new Error(`${fieldName} must be at least 10 characters long`);
+        }
+        if (text.length > 10000) {
+            throw new Error(`${fieldName} must be less than 10,000 characters`);
+        }
+    }
+    validateCapability(capability) {
+        const validCapabilities = ['full', 'partial', 'facilitates', 'governance', 'validates'];
+        if (!validCapabilities.includes(capability.toLowerCase())) {
+            throw new Error(`Invalid capability '${capability}'. Valid options: ${validCapabilities.join(', ')}`);
+        }
+    }
+    formatErrorMessage(error, toolName) {
+        if (error instanceof Error) {
+            // Provide helpful guidance for common errors
+            if (error.message.includes('Safeguard') && error.message.includes('not found')) {
+                return `${error.message}. Use list_available_safeguards to see all available options.`;
+            }
+            if (error.message.includes('Invalid capability')) {
+                return `${error.message}. Capability roles determine what function the vendor tool plays in safeguard implementation.`;
+            }
+            if (error.message.includes('characters')) {
+                return `${error.message}. Ensure your input text is substantive enough for analysis.`;
+            }
+            return error.message;
+        }
+        return `Unknown error in tool ${toolName}`;
+    }
+    async run() {
+        const transport = new StdioServerTransport();
+        await this.server.connect(transport);
+        console.error('🤖 Framework MCP Server v1.2.0 running via stdio');
+        console.error('📊 Capability assessment with domain validation enabled');
+    }
+}
+// Start server if this file is run directly
+if (import.meta.url === `file://${process.argv[1]}`) {
+    const server = new FrameworkMcpServer();
+    server.run().catch(console.error);
+}
+//# sourceMappingURL=mcp-server.js.map