framework-mcp 1.3.6 → 1.4.0

package/src/index.ts

@@ -11,8 +11,7 @@ if (import.meta.url === `file://${process.argv[1]}`) {
 
 export { FrameworkMcpServer } from './interfaces/mcp/mcp-server.js';
 export { FrameworkHttpServer } from './interfaces/http/http-server.js';
-export { CapabilityAnalyzer } from './core/capability-analyzer.js';
 export { SafeguardManager } from './core/safeguard-manager.js';
 
-// Clean architecture - all safeguards data moved to SafeguardManager
+// Pure Data Provider architecture - authentic CIS Controls data via SafeguardManager
 

package/src/interfaces/http/http-server.ts

@@ -4,7 +4,6 @@ import express from 'express';
 import cors from 'cors';
 import helmet from 'helmet';
 import compression from 'compression';
-import { CapabilityAnalyzer } from '../../core/capability-analyzer.js';
 import { SafeguardManager } from '../../core/safeguard-manager.js';
 
 interface ErrorResponse {
@@ -15,13 +14,11 @@ interface ErrorResponse {
 
 export class FrameworkHttpServer {
   private app: express.Application;
-  private capabilityAnalyzer: CapabilityAnalyzer;
   private safeguardManager: SafeguardManager;
   private port: number;
 
   constructor(port: number = 8080) {
     this.app = express();
-    this.capabilityAnalyzer = new CapabilityAnalyzer();
     this.safeguardManager = new SafeguardManager();
     this.port = port;
     
@@ -68,80 +65,14 @@ export class FrameworkHttpServer {
   private setupRoutes(): void {
     // Health check endpoint (required for DigitalOcean App Services)
     this.app.get('/health', (req, res) => {
-      const metrics = this.capabilityAnalyzer.getPerformanceMetrics();
       res.json({
         status: 'healthy',
-        uptime: Math.round((Date.now() - metrics.uptime) / 1000),
-        totalRequests: metrics.totalRequests,
-        errorCount: metrics.errorCount,
-        version: '1.3.6',
+        uptime: Math.round(process.uptime()),
+        version: '1.4.0',
         timestamp: new Date().toISOString()
       });
     });
 
-    // Primary validation endpoint
-    this.app.post('/api/validate-vendor-mapping', async (req, res) => {
-      try {
-        const { vendor_name, safeguard_id, claimed_capability, supporting_text } = req.body;
-
-        // Input validation
-        this.validateInput(req.body, [
-          'vendor_name',
-          'safeguard_id', 
-          'claimed_capability',
-          'supporting_text'
-        ]);
-
-        this.validateTextInput(supporting_text, 'Supporting text');
-        this.validateCapability(claimed_capability);
-        this.safeguardManager.validateSafeguardId(safeguard_id);
-
-        const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
-        if (!safeguard) {
-          return res.status(404).json(this.createErrorResponse('Safeguard not found'));
-        }
-
-        const result = this.capabilityAnalyzer.validateVendorMapping(
-          vendor_name,
-          safeguard_id,
-          claimed_capability,
-          supporting_text,
-          safeguard
-        );
-
-        res.json(result);
-      } catch (error) {
-        console.error('[HTTP Server] validate-vendor-mapping error:', error);
-        res.status(400).json(this.createErrorResponse(error instanceof Error ? error.message : 'Unknown error'));
-      }
-    });
-
-    // Capability analysis endpoint
-    this.app.post('/api/analyze-vendor-response', async (req, res) => {
-      try {
-        const { vendor_name, safeguard_id, response_text } = req.body;
-
-        this.validateInput(req.body, ['vendor_name', 'safeguard_id', 'response_text']);
-        this.validateTextInput(response_text, 'Response text');
-        this.safeguardManager.validateSafeguardId(safeguard_id);
-
-        const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
-        if (!safeguard) {
-          return res.status(404).json(this.createErrorResponse('Safeguard not found'));
-        }
-
-        const result = this.capabilityAnalyzer.performCapabilityAnalysis(
-          vendor_name,
-          safeguard,
-          response_text
-        );
-
-        res.json(result);
-      } catch (error) {
-        console.error('[HTTP Server] analyze-vendor-response error:', error);
-        res.status(400).json(this.createErrorResponse(error instanceof Error ? error.message : 'Unknown error'));
-      }
-    });
 
 
     // Get safeguard details endpoint
@@ -181,49 +112,19 @@ export class FrameworkHttpServer {
       }
     });
 
-    // Performance metrics endpoint
-    this.app.get('/api/metrics', (req, res) => {
-      try {
-        const metrics = this.capabilityAnalyzer.getPerformanceMetrics();
-        
-        res.json({
-          uptime_seconds: Math.round((Date.now() - metrics.uptime) / 1000),
-          total_requests: metrics.totalRequests,
-          error_count: metrics.errorCount,
-          error_rate: metrics.totalRequests > 0 ? 
-            ((metrics.errorCount / metrics.totalRequests) * 100).toFixed(2) + '%' : '0%',
-          request_counts: Object.fromEntries(metrics.requestCounts),
-          timestamp: new Date().toISOString()
-        });
-      } catch (error) {
-        console.error('[HTTP Server] metrics error:', error);
-        res.status(500).json(this.createErrorResponse('Metrics unavailable'));
-      }
-    });
 
     // API documentation endpoint
     this.app.get('/api', (req, res) => {
       res.json({
         name: 'Framework MCP HTTP API',
-        version: '1.3.6',
-        description: 'Dual-architecture HTTP API for vendor capability assessment against CIS Controls Framework',
+        version: '1.4.0',
+        description: 'Pure Data Provider serving authentic CIS Controls Framework data',
         endpoints: {
-          'POST /api/validate-vendor-mapping': 'Primary capability validation with domain validation',
-          'POST /api/analyze-vendor-response': 'Capability role determination for vendor responses',
           'GET /api/safeguards': 'List all available CIS safeguards',
           'GET /api/safeguards/:id': 'Get detailed safeguard breakdown',
           'GET /health': 'Health check endpoint',
-          'GET /api/metrics': 'Performance metrics',
           'GET /api': 'This documentation'
         },
-        capabilities: [
-          'FULL - Complete implementation of safeguard',
-          'PARTIAL - Limited scope implementation', 
-          'FACILITATES - Enhancement capabilities',
-          'GOVERNANCE - Policy/process management',
-          'VALIDATES - Evidence collection and reporting'
-        ],
-        domain_validation: 'Auto-downgrade protection for inappropriate capability claims',
         framework: 'CIS Controls v8.1 (153 safeguards)',
         deployment: 'DigitalOcean App Services compatible'
       });
@@ -257,40 +158,6 @@ export class FrameworkHttpServer {
     });
   }
 
-  private validateInput(body: any, requiredFields: string[]): void {
-    if (!body || typeof body !== 'object') {
-      throw new Error('Request body is required and must be valid JSON');
-    }
-
-    for (const field of requiredFields) {
-      if (!body[field] || typeof body[field] !== 'string') {
-        throw new Error(`Field '${field}' is required and must be a non-empty string`);
-      }
-    }
-  }
-
-  private validateTextInput(text: string, fieldName: string): void {
-    if (typeof text !== 'string') {
-      throw new Error(`${fieldName} must be a string`);
-    }
-    
-    if (text.length < 10) {
-      throw new Error(`${fieldName} must be at least 10 characters long`);
-    }
-    
-    if (text.length > 10000) {
-      throw new Error(`${fieldName} must be less than 10,000 characters`);
-    }
-  }
-
-  private validateCapability(capability: string): void {
-    const validCapabilities = ['full', 'partial', 'facilitates', 'governance', 'validates'];
-    
-    if (!validCapabilities.includes(capability.toLowerCase())) {
-      throw new Error(`Invalid capability '${capability}'. Valid options: ${validCapabilities.join(', ')}`);
-    }
-  }
-
   private createErrorResponse(error: string, details?: string): ErrorResponse {
     return {
       error,
@@ -301,11 +168,11 @@ export class FrameworkHttpServer {
 
   public start(): void {
     this.app.listen(this.port, '0.0.0.0', () => {
-      console.log(`🚀 Framework MCP HTTP Server v1.3.4 running on port ${this.port}`);
+      console.log(`🚀 Framework MCP HTTP Server v1.4.0 running on port ${this.port}`);
       console.log(`📊 Health check: http://localhost:${this.port}/health`);
       console.log(`📖 API docs: http://localhost:${this.port}/api`);
       console.log(`🔧 Environment: ${process.env.NODE_ENV || 'development'}`);
-      console.log(`⚡ DigitalOcean App Services compatible`);
+      console.log(`📊 Pure Data Provider - CIS Controls v8.1`);
     });
 
     // Graceful shutdown handling

package/src/interfaces/mcp/mcp-server.ts

@@ -8,23 +8,20 @@ import {
   Tool,
 } from '@modelcontextprotocol/sdk/types.js';
 
-import { CapabilityAnalyzer } from '../../core/capability-analyzer.js';
 import { SafeguardManager } from '../../core/safeguard-manager.js';
 
 export class FrameworkMcpServer {
   private server: Server;
-  private capabilityAnalyzer: CapabilityAnalyzer;
   private safeguardManager: SafeguardManager;
 
   constructor() {
     this.server = new Server(
       {
         name: 'framework-analyzer',
-        version: '1.3.6',
+        version: '1.4.0',
       }
     );
 
-    this.capabilityAnalyzer = new CapabilityAnalyzer();
     this.safeguardManager = new SafeguardManager();
 
     this.setupHandlers();
@@ -35,55 +32,6 @@ export class FrameworkMcpServer {
     this.server.setRequestHandler(ListToolsRequestSchema, async () => {
       return {
         tools: [
-          {
-            name: 'validate_vendor_mapping',
-            description: 'PRIMARY: Validate vendor capability claims with domain validation and evidence analysis',
-            inputSchema: {
-              type: 'object',
-              properties: {
-                vendor_name: {
-                  type: 'string',
-                  description: 'Name of the vendor/tool being analyzed'
-                },
-                safeguard_id: {
-                  type: 'string',
-                  description: 'CIS safeguard ID (e.g., "1.1", "5.1")'
-                },
-                claimed_capability: {
-                  type: 'string',
-                  description: 'Claimed capability role',
-                  enum: ['full', 'partial', 'facilitates', 'governance', 'validates']
-                },
-                supporting_text: {
-                  type: 'string',
-                  description: 'Vendor text supporting their capability claim'
-                }
-              },
-              required: ['vendor_name', 'safeguard_id', 'claimed_capability', 'supporting_text']
-            }
-          } as Tool,
-          {
-            name: 'analyze_vendor_response',
-            description: 'Determine vendor tool capability role for specific safeguard',
-            inputSchema: {
-              type: 'object',
-              properties: {
-                vendor_name: {
-                  type: 'string',
-                  description: 'Name of the vendor'
-                },
-                safeguard_id: {
-                  type: 'string',
-                  description: 'CIS safeguard ID (e.g., "1.1", "5.1")'
-                },
-                response_text: {
-                  type: 'string',
-                  description: 'Vendor response text to analyze'
-                }
-              },
-              required: ['vendor_name', 'safeguard_id', 'response_text']
-            }
-          } as Tool,
           {
             name: 'get_safeguard_details',
             description: 'Get detailed safeguard breakdown',
@@ -121,12 +69,6 @@ export class FrameworkMcpServer {
 
       try {
         switch (name) {
-          case 'validate_vendor_mapping':
-            return await this.validateVendorMapping(args);
-
-          case 'analyze_vendor_response':
-            return await this.analyzeVendorResponse(args);
-
           case 'get_safeguard_details':
             return await this.getSafeguardDetails(args);
 
@@ -155,59 +97,6 @@ export class FrameworkMcpServer {
     });
   }
 
-  private async validateVendorMapping(args: any) {
-    const { vendor_name = 'Unknown Vendor', safeguard_id, claimed_capability, supporting_text } = args;
-
-    // Input validation
-    this.validateTextInput(supporting_text, 'Supporting text');
-    this.validateCapability(claimed_capability);
-    this.safeguardManager.validateSafeguardId(safeguard_id);
-
-    const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
-    if (!safeguard) {
-      throw new Error(`Safeguard ${safeguard_id} not found`);
-    }
-
-    const validation = this.capabilityAnalyzer.validateVendorMapping(
-      vendor_name, 
-      safeguard_id,
-      claimed_capability,
-      supporting_text,
-      safeguard
-    );
-
-    return {
-      content: [
-        {
-          type: 'text',
-          text: JSON.stringify(validation, null, 2),
-        },
-      ],
-    };
-  }
-
-  private async analyzeVendorResponse(args: any) {
-    const { vendor_name = 'Unknown Vendor', safeguard_id, response_text } = args;
-
-    this.validateTextInput(response_text, 'Response text');
-    this.safeguardManager.validateSafeguardId(safeguard_id);
-
-    const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
-    if (!safeguard) {
-      throw new Error(`Safeguard ${safeguard_id} not found`);
-    }
-
-    const analysis = this.capabilityAnalyzer.performCapabilityAnalysis(vendor_name, safeguard, response_text);
-
-    return {
-      content: [
-        {
-          type: 'text',
-          text: JSON.stringify(analysis, null, 2),
-        },
-      ],
-    };
-  }
 
   private async getSafeguardDetails(args: any) {
     const { safeguard_id, include_examples = false } = args;
@@ -240,35 +129,13 @@ export class FrameworkMcpServer {
             safeguards,
             total: safeguards.length,
             framework: 'CIS Controls v8.1',
-            version: '1.3.4'
+            version: '1.4.0'
           }, null, 2),
         },
       ],
     };
   }
 
-  private validateTextInput(text: string, fieldName: string): void {
-    if (typeof text !== 'string') {
-      throw new Error(`${fieldName} must be a string`);
-    }
-    
-    if (text.length < 10) {
-      throw new Error(`${fieldName} must be at least 10 characters long`);
-    }
-    
-    if (text.length > 10000) {
-      throw new Error(`${fieldName} must be less than 10,000 characters`);
-    }
-  }
-
-  private validateCapability(capability: string): void {
-    const validCapabilities = ['full', 'partial', 'facilitates', 'governance', 'validates'];
-    
-    if (!validCapabilities.includes(capability.toLowerCase())) {
-      throw new Error(`Invalid capability '${capability}'. Valid options: ${validCapabilities.join(', ')}`);
-    }
-  }
-
   private formatErrorMessage(error: unknown, toolName: string): string {
     if (error instanceof Error) {
       // Provide helpful guidance for common errors
@@ -276,14 +143,6 @@ export class FrameworkMcpServer {
         return `${error.message}. Use list_available_safeguards to see all available options.`;
       }
       
-      if (error.message.includes('Invalid capability')) {
-        return `${error.message}. Capability roles determine what function the vendor tool plays in safeguard implementation.`;
-      }
-      
-      if (error.message.includes('characters')) {
-        return `${error.message}. Ensure your input text is substantive enough for analysis.`;
-      }
-      
       return error.message;
     }
     
@@ -294,8 +153,8 @@ export class FrameworkMcpServer {
     const transport = new StdioServerTransport();
     await this.server.connect(transport);
     
-    console.error('🤖 Framework MCP Server v1.3.4 running via stdio');
-    console.error('📊 Capability assessment with domain validation enabled');
+    console.error('🤖 Framework MCP Server v1.4.0 running via stdio');
+    console.error('📊 Pure Data Provider for CIS Controls v8.1');
   }
 }
 

package/src/shared/types.ts

@@ -38,31 +38,6 @@ export interface VendorAnalysis {
   recommendedUse: string;             // How practitioners should use this tool
 }
 
-export interface DomainValidationResult {
-  vendor: string;
-  safeguard_id: string;
-  safeguard_title: string;
-  claimed_capability: string;
-  validation_status: 'SUPPORTED' | 'QUESTIONABLE' | 'UNSUPPORTED';
-  confidence_score: number;
-  evidence_analysis: {
-    core_requirements_coverage: number;
-    sub_elements_coverage: number;
-    governance_alignment: number;
-    language_consistency: number;
-  };
-  domain_validation: {
-    required_tool_type: string;
-    detected_tool_type: string;
-    domain_match: boolean;
-    capability_adjusted: boolean;
-    original_claim?: string;
-  };
-  gaps_identified: string[];
-  strengths_identified: string[];
-  recommendations: string[];
-  detailed_feedback: string;
-}
 
 export interface PerformanceMetrics {
   uptime: number;
@@ -87,18 +62,3 @@ export interface QualityAssessment {
 
 export type CapabilityType = 'full' | 'partial' | 'facilitates' | 'governance' | 'validates';
 
-// Domain-specific validation mapping
-export interface DomainRequirement {
-  domain: string;
-  required_tool_types: string[];
-  description: string;
-}
-
-// Tool type detection weights
-export interface ToolTypeWeights {
-  [toolType: string]: {
-    keywords: string[];
-    baseWeight: number;
-    contextBonuses: string[];
-  };
-}