framework-mcp 1.3.6 → 1.4.0

package/swagger.json

@@ -1,9 +1,9 @@
 {
   "openapi": "3.0.3",
   "info": {
-    "title": "Framework MCP API - CIS Controls Capability Assessment",
-    "description": "Microsoft Copilot-compatible API for vendor capability assessment against CIS Controls Framework v8.1 (153 safeguards). Features consolidated tool architecture with domain validation and auto-downgrade protection for accurate capability role determination (FULL, PARTIAL, FACILITATES, GOVERNANCE, VALIDATES).",
-    "version": "1.3.6",
+    "title": "Framework MCP API - Pure Data Provider",
+    "description": "Microsoft Copilot-compatible API providing authoritative CIS Controls Framework v8.1 data (153 safeguards). Pure Data Provider architecture empowers LLMs with structured safeguards data for sophisticated, context-aware vendor capability analysis.",
+    "version": "1.4.0",
     "contact": {
       "name": "Framework MCP Support",
       "url": "https://github.com/therealcybermattlee/FrameworkMCP"
@@ -44,106 +44,6 @@
         }
       }
     },
-    "/api/validate-vendor-mapping": {
-      "post": {
-        "summary": "Validate Vendor Capability Mapping (PRIMARY)",
-        "description": "Primary endpoint for validating vendor capability claims against CIS safeguards with domain validation and auto-downgrade protection. Use this for evidence-based capability assessment.",
-        "operationId": "validateVendorMapping",
-        "tags": ["Capability Assessment"],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/VendorMappingRequest"
-              }
-            }
-          }
-        },
-        "responses": {
-          "200": {
-            "description": "Validation completed successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ValidationResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "description": "Invalid request parameters",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            }
-          },
-          "404": {
-            "description": "Safeguard not found",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            }
-          }
-        }
-      }
-    },
-    "/api/analyze-vendor-response": {
-      "post": {
-        "summary": "Analyze Vendor Response",
-        "description": "Analyze vendor response text to determine appropriate capability role with domain validation",
-        "operationId": "analyzeVendorResponse",
-        "tags": ["Capability Assessment"],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/AnalysisRequest"
-              }
-            }
-          }
-        },
-        "responses": {
-          "200": {
-            "description": "Analysis completed successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/AnalysisResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "description": "Invalid request parameters",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            }
-          },
-          "404": {
-            "description": "Safeguard not found",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            }
-          }
-        }
-      }
-    },
     "/api/safeguards": {
       "get": {
         "summary": "List Available Safeguards",
@@ -246,214 +146,30 @@
           }
         }
       }
-    }
-  },
-  "components": {
-    "schemas": {
-      "CapabilityRole": {
-        "type": "string",
-        "enum": ["full", "partial", "facilitates", "governance", "validates"],
-        "description": "Vendor tool capability roles:\n- FULL: Complete implementation of safeguard (requires domain-appropriate tool)\n- PARTIAL: Limited scope implementation (requires domain-appropriate tool)\n- FACILITATES: Enhancement capabilities (no tool type restrictions)\n- GOVERNANCE: Policy/process management (no tool type restrictions)\n- VALIDATES: Evidence collection and reporting (no tool type restrictions)"
-      },
-      "VendorMappingRequest": {
-        "type": "object",
-        "required": ["vendor_name", "safeguard_id", "claimed_capability", "supporting_text"],
-        "properties": {
-          "vendor_name": {
-            "type": "string",
-            "description": "Name of the vendor or tool being analyzed",
-            "minLength": 1,
-            "maxLength": 100,
-            "example": "CrowdStrike Falcon"
-          },
-          "safeguard_id": {
-            "type": "string",
-            "pattern": "^[0-9]+\\.[0-9]+$",
-            "description": "CIS safeguard ID (format: X.Y)",
-            "example": "1.1"
-          },
-          "claimed_capability": {
-            "$ref": "#/components/schemas/CapabilityRole"
-          },
-          "supporting_text": {
-            "type": "string",
-            "description": "Vendor response or documentation supporting their capability claim",
-            "minLength": 10,
-            "maxLength": 10000,
-            "example": "Our platform provides comprehensive enterprise asset inventory with real-time discovery, automated classification, and continuous monitoring of all hardware and software assets across the organization."
-          }
-        }
-      },
-      "AnalysisRequest": {
-        "type": "object",
-        "required": ["vendor_name", "safeguard_id", "response_text"],
-        "properties": {
-          "vendor_name": {
-            "type": "string",
-            "description": "Name of the vendor",
-            "minLength": 1,
-            "maxLength": 100,
-            "example": "Microsoft Defender"
-          },
-          "safeguard_id": {
-            "type": "string",
-            "pattern": "^[0-9]+\\.[0-9]+$",
-            "description": "CIS safeguard ID",
-            "example": "5.1"
-          },
-          "response_text": {
-            "type": "string",
-            "description": "Vendor response text to analyze for capability determination",
-            "minLength": 10,
-            "maxLength": 10000,
-            "example": "We provide centralized account management with role-based access controls, automated provisioning and deprovisioning, and integration with Active Directory for enterprise identity management."
-          }
-        }
-      },
-      "ValidationResponse": {
-        "type": "object",
-        "properties": {
-          "vendor_name": {
-            "type": "string",
-            "example": "CrowdStrike Falcon"
-          },
-          "safeguard_id": {
-            "type": "string",
-            "example": "1.1"
-          },
-          "claimed_capability": {
-            "$ref": "#/components/schemas/CapabilityRole"
-          },
-          "validated_capability": {
-            "$ref": "#/components/schemas/CapabilityRole"
-          },
-          "validation_status": {
-            "type": "string",
-            "enum": ["SUPPORTED", "QUESTIONABLE", "UNSUPPORTED"],
-            "description": "Overall validation result"
-          },
-          "confidence_score": {
-            "type": "number",
-            "minimum": 0,
-            "maximum": 100,
-            "description": "Confidence percentage in the assessment"
-          },
-          "domain_validation": {
-            "type": "object",
-            "properties": {
-              "tool_type": {
-                "type": "string",
-                "description": "Detected tool type category"
-              },
-              "domain_appropriate": {
-                "type": "boolean",
-                "description": "Whether tool type is appropriate for claimed capability"
-              },
-              "auto_downgrade_applied": {
-                "type": "boolean",
-                "description": "Whether capability was auto-downgraded due to domain mismatch"
-              }
-            }
-          },
-          "evidence_analysis": {
-            "type": "object",
-            "properties": {
-              "core_requirements_score": {
-                "type": "number",
-                "minimum": 0,
-                "maximum": 100
-              },
-              "governance_elements_score": {
-                "type": "number",
-                "minimum": 0,
-                "maximum": 100
-              },
-              "sub_elements_score": {
-                "type": "number",
-                "minimum": 0,
-                "maximum": 100
-              },
-              "language_consistency_score": {
-                "type": "number",
-                "minimum": 0,
-                "maximum": 100
-              }
-            }
-          },
-          "reasoning": {
-            "type": "string",
-            "description": "Detailed explanation of the validation decision"
-          },
-          "recommendations": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            },
-            "description": "Actionable recommendations for capability improvement"
-          },
-          "timestamp": {
-            "type": "string",
-            "format": "date-time"
-          }
-        }
-      },
-      "AnalysisResponse": {
-        "type": "object",
-        "properties": {
-          "vendor_name": {
-            "type": "string"
-          },
-          "safeguard_id": {
-            "type": "string"
-          },
-          "determined_capability": {
-            "$ref": "#/components/schemas/CapabilityRole"
-          },
-          "confidence_score": {
-            "type": "number",
-            "minimum": 0,
-            "maximum": 100
-          },
-          "domain_validation": {
-            "type": "object",
-            "properties": {
-              "tool_type": {
-                "type": "string"
-              },
-              "domain_appropriate": {
-                "type": "boolean"
-              }
-            }
-          },
-          "analysis_details": {
-            "type": "object",
-            "properties": {
-              "core_coverage": {
-                "type": "number",
-                "minimum": 0,
-                "maximum": 100
-              },
-              "implementation_depth": {
-                "type": "number",
-                "minimum": 0,
-                "maximum": 100
-              },
-              "governance_support": {
-                "type": "number",
-                "minimum": 0,
-                "maximum": 100
+    },
+    "/api": {
+      "get": {
+        "summary": "API Documentation",
+        "description": "Get API documentation and available endpoints information",
+        "operationId": "getApiDocumentation",
+        "tags": ["Monitoring"],
+        "responses": {
+          "200": {
+            "description": "API documentation and endpoints",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ApiDocumentationResponse"
+                }
               }
             }
-          },
-          "reasoning": {
-            "type": "string"
-          },
-          "timestamp": {
-            "type": "string",
-            "format": "date-time"
           }
         }
-      },
+      }
+    }
+  },
+  "components": {
+    "schemas": {
       "SafeguardListResponse": {
         "type": "object",
         "properties": {
@@ -563,7 +279,7 @@
           },
           "version": {
             "type": "string",
-            "example": "1.3.4"
+            "example": "1.4.0"
           },
           "timestamp": {
             "type": "string",
@@ -599,6 +315,45 @@
           }
         }
       },
+      "ApiDocumentationResponse": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "example": "Framework MCP HTTP API"
+          },
+          "version": {
+            "type": "string",
+            "example": "1.4.0"
+          },
+          "description": {
+            "type": "string",
+            "example": "Pure Data Provider API serving authoritative CIS Controls Framework data for LLM-driven analysis"
+          },
+          "endpoints": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "string"
+            },
+            "description": "Available API endpoints and their descriptions"
+          },
+          "capabilities": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Supported capability types"
+          },
+          "framework": {
+            "type": "string",
+            "example": "CIS Controls v8.1 (153 safeguards)"
+          },
+          "deployment": {
+            "type": "string",
+            "example": "DigitalOcean App Services compatible"
+          }
+        }
+      },
       "ErrorResponse": {
         "type": "object",
         "properties": {
@@ -619,13 +374,9 @@
     }
   },
   "tags": [
-    {
-      "name": "Capability Assessment",
-      "description": "Primary API endpoints for vendor capability assessment against CIS Controls"
-    },
     {
       "name": "Safeguards",
-      "description": "CIS Controls safeguards information and details"
+      "description": "Authoritative CIS Controls safeguards data for LLM-driven analysis"
     },
     {
       "name": "Monitoring",

package/dist/core/capability-analyzer.d.ts

@@ -1,29 +0,0 @@
-import { SafeguardElement, VendorAnalysis, DomainValidationResult, PerformanceMetrics } from '../shared/types.js';
-export declare class CapabilityAnalyzer {
-    private cache;
-    private performanceMetrics;
-    constructor();
-    performCapabilityAnalysis(vendorName: string, safeguard: SafeguardElement, responseText: string): VendorAnalysis;
-    validateVendorMapping(vendorName: string, safeguardId: string, claimedCapability: string, supportingText: string, safeguard: SafeguardElement): DomainValidationResult;
-    private determineClaimedCapability;
-    private getImplementationIndicators;
-    private assessCapabilityQuality;
-    private assessImplementationQuality;
-    private assessFacilitationQuality;
-    private assessGovernanceQuality;
-    private assessValidationQuality;
-    private generateCapabilityAnalysis;
-    private generateToolCapabilityDescription;
-    private generateRecommendedUse;
-    private detectToolType;
-    private validateDomainMatch;
-    private assessCapabilityClaimAlignment;
-    private generateValidationFeedback;
-    private calculateKeywordScore;
-    private calculateElementCoverage;
-    private recordToolExecution;
-    private logPerformanceStats;
-    private cleanupExpiredCache;
-    getPerformanceMetrics(): PerformanceMetrics;
-}
-//# sourceMappingURL=capability-analyzer.d.ts.map

package/dist/core/capability-analyzer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"capability-analyzer.d.ts","sourceRoot":"","sources":["../../src/core/capability-analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAMnB,MAAM,oBAAoB,CAAC;AAiE5B,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,kBAAkB,CAAqB;;IAmBxC,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,GAAG,cAAc;IA2BhH,qBAAqB,CAC1B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,gBAAgB,GAC1B,sBAAsB;IA6EzB,OAAO,CAAC,0BAA0B;IAmDlC,OAAO,CAAC,2BAA2B;IAanC,OAAO,CAAC,uBAAuB;IAoC/B,OAAO,CAAC,2BAA2B;IAmCnC,OAAO,CAAC,yBAAyB;IA6BjC,OAAO,CAAC,uBAAuB;IA6B/B,OAAO,CAAC,uBAAuB;IA6B/B,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,iCAAiC;IAmBzC,OAAO,CAAC,sBAAsB;IAY9B,OAAO,CAAC,cAAc;IA+BtB,OAAO,CAAC,mBAAmB;IAoC3B,OAAO,CAAC,8BAA8B;IA8CtC,OAAO,CAAC,0BAA0B;IA2BlC,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,wBAAwB;IAUhC,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,mBAAmB;IAkBpB,qBAAqB,IAAI,kBAAkB;CAGnD"}