framework-mcp 1.3.7 → 1.5.0

package/src/index.ts

@@ -11,8 +11,7 @@ if (import.meta.url === `file://${process.argv[1]}`) {
 
 export { FrameworkMcpServer } from './interfaces/mcp/mcp-server.js';
 export { FrameworkHttpServer } from './interfaces/http/http-server.js';
-export { CapabilityAnalyzer } from './core/capability-analyzer.js';
 export { SafeguardManager } from './core/safeguard-manager.js';
 
-// Clean architecture - all safeguards data moved to SafeguardManager
+// Pure Data Provider architecture - authentic CIS Controls data via SafeguardManager
 

package/src/interfaces/http/http-server.ts

@@ -4,7 +4,6 @@ import express from 'express';
 import cors from 'cors';
 import helmet from 'helmet';
 import compression from 'compression';
-import { CapabilityAnalyzer } from '../../core/capability-analyzer.js';
 import { SafeguardManager } from '../../core/safeguard-manager.js';
 
 interface ErrorResponse {
@@ -15,13 +14,11 @@ interface ErrorResponse {
 
 export class FrameworkHttpServer {
   private app: express.Application;
-  private capabilityAnalyzer: CapabilityAnalyzer;
   private safeguardManager: SafeguardManager;
   private port: number;
 
   constructor(port: number = 8080) {
     this.app = express();
-    this.capabilityAnalyzer = new CapabilityAnalyzer();
     this.safeguardManager = new SafeguardManager();
     this.port = port;
     
@@ -68,45 +65,15 @@ export class FrameworkHttpServer {
   private setupRoutes(): void {
     // Health check endpoint (required for DigitalOcean App Services)
     this.app.get('/health', (req, res) => {
-      const metrics = this.capabilityAnalyzer.getPerformanceMetrics();
       res.json({
         status: 'healthy',
-        uptime: Math.round((Date.now() - metrics.uptime) / 1000),
-        totalRequests: metrics.totalRequests,
-        errorCount: metrics.errorCount,
-        version: '1.3.7',
+        uptime: Math.round(process.uptime()),
+        version: '1.4.0',
         timestamp: new Date().toISOString()
       });
     });
 
 
-    // Capability analysis endpoint
-    this.app.post('/api/analyze-vendor-response', async (req, res) => {
-      try {
-        const { vendor_name, safeguard_id, response_text } = req.body;
-
-        this.validateInput(req.body, ['vendor_name', 'safeguard_id', 'response_text']);
-        this.validateTextInput(response_text, 'Response text');
-        this.safeguardManager.validateSafeguardId(safeguard_id);
-
-        const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
-        if (!safeguard) {
-          return res.status(404).json(this.createErrorResponse('Safeguard not found'));
-        }
-
-        const result = this.capabilityAnalyzer.performCapabilityAnalysis(
-          vendor_name,
-          safeguard,
-          response_text
-        );
-
-        res.json(result);
-      } catch (error) {
-        console.error('[HTTP Server] analyze-vendor-response error:', error);
-        res.status(400).json(this.createErrorResponse(error instanceof Error ? error.message : 'Unknown error'));
-      }
-    });
-
 
     // Get safeguard details endpoint
     this.app.get('/api/safeguards/:safeguardId', (req, res) => {
@@ -145,47 +112,19 @@ export class FrameworkHttpServer {
       }
     });
 
-    // Performance metrics endpoint
-    this.app.get('/api/metrics', (req, res) => {
-      try {
-        const metrics = this.capabilityAnalyzer.getPerformanceMetrics();
-        
-        res.json({
-          uptime_seconds: Math.round((Date.now() - metrics.uptime) / 1000),
-          total_requests: metrics.totalRequests,
-          error_count: metrics.errorCount,
-          error_rate: metrics.totalRequests > 0 ? 
-            ((metrics.errorCount / metrics.totalRequests) * 100).toFixed(2) + '%' : '0%',
-          request_counts: Object.fromEntries(metrics.requestCounts),
-          timestamp: new Date().toISOString()
-        });
-      } catch (error) {
-        console.error('[HTTP Server] metrics error:', error);
-        res.status(500).json(this.createErrorResponse('Metrics unavailable'));
-      }
-    });
 
     // API documentation endpoint
     this.app.get('/api', (req, res) => {
       res.json({
         name: 'Framework MCP HTTP API',
-        version: '1.3.7',
-        description: 'Clean HTTP API for vendor capability assessment against CIS Controls Framework',
+        version: '1.4.0',
+        description: 'Pure Data Provider serving authentic CIS Controls Framework data',
         endpoints: {
-          'POST /api/analyze-vendor-response': 'Primary capability analysis for vendor responses',
           'GET /api/safeguards': 'List all available CIS safeguards',
           'GET /api/safeguards/:id': 'Get detailed safeguard breakdown',
           'GET /health': 'Health check endpoint',
-          'GET /api/metrics': 'Performance metrics',
           'GET /api': 'This documentation'
         },
-        capabilities: [
-          'FULL - Complete implementation of safeguard',
-          'PARTIAL - Limited scope implementation', 
-          'FACILITATES - Enhancement capabilities',
-          'GOVERNANCE - Policy/process management',
-          'VALIDATES - Evidence collection and reporting'
-        ],
         framework: 'CIS Controls v8.1 (153 safeguards)',
         deployment: 'DigitalOcean App Services compatible'
       });
@@ -219,40 +158,6 @@ export class FrameworkHttpServer {
     });
   }
 
-  private validateInput(body: any, requiredFields: string[]): void {
-    if (!body || typeof body !== 'object') {
-      throw new Error('Request body is required and must be valid JSON');
-    }
-
-    for (const field of requiredFields) {
-      if (!body[field] || typeof body[field] !== 'string') {
-        throw new Error(`Field '${field}' is required and must be a non-empty string`);
-      }
-    }
-  }
-
-  private validateTextInput(text: string, fieldName: string): void {
-    if (typeof text !== 'string') {
-      throw new Error(`${fieldName} must be a string`);
-    }
-    
-    if (text.length < 10) {
-      throw new Error(`${fieldName} must be at least 10 characters long`);
-    }
-    
-    if (text.length > 10000) {
-      throw new Error(`${fieldName} must be less than 10,000 characters`);
-    }
-  }
-
-  private validateCapability(capability: string): void {
-    const validCapabilities = ['full', 'partial', 'facilitates', 'governance', 'validates'];
-    
-    if (!validCapabilities.includes(capability.toLowerCase())) {
-      throw new Error(`Invalid capability '${capability}'. Valid options: ${validCapabilities.join(', ')}`);
-    }
-  }
-
   private createErrorResponse(error: string, details?: string): ErrorResponse {
     return {
       error,
@@ -263,11 +168,11 @@ export class FrameworkHttpServer {
 
   public start(): void {
     this.app.listen(this.port, '0.0.0.0', () => {
-      console.log(`🚀 Framework MCP HTTP Server v1.3.7 running on port ${this.port}`);
+      console.log(`🚀 Framework MCP HTTP Server v1.4.0 running on port ${this.port}`);
       console.log(`📊 Health check: http://localhost:${this.port}/health`);
       console.log(`📖 API docs: http://localhost:${this.port}/api`);
       console.log(`🔧 Environment: ${process.env.NODE_ENV || 'development'}`);
-      console.log(`⚡ Clean capability analysis - CIS Controls v8.1`);
+      console.log(`📊 Pure Data Provider - CIS Controls v8.1`);
     });
 
     // Graceful shutdown handling

package/src/interfaces/mcp/mcp-server.ts

@@ -8,23 +8,20 @@ import {
   Tool,
 } from '@modelcontextprotocol/sdk/types.js';
 
-import { CapabilityAnalyzer } from '../../core/capability-analyzer.js';
 import { SafeguardManager } from '../../core/safeguard-manager.js';
 
 export class FrameworkMcpServer {
   private server: Server;
-  private capabilityAnalyzer: CapabilityAnalyzer;
   private safeguardManager: SafeguardManager;
 
   constructor() {
     this.server = new Server(
       {
         name: 'framework-analyzer',
-        version: '1.3.7',
+        version: '1.4.0',
       }
     );
 
-    this.capabilityAnalyzer = new CapabilityAnalyzer();
     this.safeguardManager = new SafeguardManager();
 
     this.setupHandlers();
@@ -35,28 +32,6 @@ export class FrameworkMcpServer {
     this.server.setRequestHandler(ListToolsRequestSchema, async () => {
       return {
         tools: [
-          {
-            name: 'analyze_vendor_response',
-            description: 'Determine vendor tool capability role for specific safeguard',
-            inputSchema: {
-              type: 'object',
-              properties: {
-                vendor_name: {
-                  type: 'string',
-                  description: 'Name of the vendor'
-                },
-                safeguard_id: {
-                  type: 'string',
-                  description: 'CIS safeguard ID (e.g., "1.1", "5.1")'
-                },
-                response_text: {
-                  type: 'string',
-                  description: 'Vendor response text to analyze'
-                }
-              },
-              required: ['vendor_name', 'safeguard_id', 'response_text']
-            }
-          } as Tool,
           {
             name: 'get_safeguard_details',
             description: 'Get detailed safeguard breakdown',
@@ -94,9 +69,6 @@ export class FrameworkMcpServer {
 
       try {
         switch (name) {
-          case 'analyze_vendor_response':
-            return await this.analyzeVendorResponse(args);
-
           case 'get_safeguard_details':
             return await this.getSafeguardDetails(args);
 
@@ -126,29 +98,6 @@ export class FrameworkMcpServer {
   }
 
 
-  private async analyzeVendorResponse(args: any) {
-    const { vendor_name = 'Unknown Vendor', safeguard_id, response_text } = args;
-
-    this.validateTextInput(response_text, 'Response text');
-    this.safeguardManager.validateSafeguardId(safeguard_id);
-
-    const safeguard = this.safeguardManager.getSafeguardDetails(safeguard_id);
-    if (!safeguard) {
-      throw new Error(`Safeguard ${safeguard_id} not found`);
-    }
-
-    const analysis = this.capabilityAnalyzer.performCapabilityAnalysis(vendor_name, safeguard, response_text);
-
-    return {
-      content: [
-        {
-          type: 'text',
-          text: JSON.stringify(analysis, null, 2),
-        },
-      ],
-    };
-  }
-
   private async getSafeguardDetails(args: any) {
     const { safeguard_id, include_examples = false } = args;
 
@@ -180,35 +129,13 @@ export class FrameworkMcpServer {
             safeguards,
             total: safeguards.length,
             framework: 'CIS Controls v8.1',
-            version: '1.3.7'
+            version: '1.4.0'
           }, null, 2),
         },
       ],
     };
   }
 
-  private validateTextInput(text: string, fieldName: string): void {
-    if (typeof text !== 'string') {
-      throw new Error(`${fieldName} must be a string`);
-    }
-    
-    if (text.length < 10) {
-      throw new Error(`${fieldName} must be at least 10 characters long`);
-    }
-    
-    if (text.length > 10000) {
-      throw new Error(`${fieldName} must be less than 10,000 characters`);
-    }
-  }
-
-  private validateCapability(capability: string): void {
-    const validCapabilities = ['full', 'partial', 'facilitates', 'governance', 'validates'];
-    
-    if (!validCapabilities.includes(capability.toLowerCase())) {
-      throw new Error(`Invalid capability '${capability}'. Valid options: ${validCapabilities.join(', ')}`);
-    }
-  }
-
   private formatErrorMessage(error: unknown, toolName: string): string {
     if (error instanceof Error) {
       // Provide helpful guidance for common errors
@@ -216,14 +143,6 @@ export class FrameworkMcpServer {
         return `${error.message}. Use list_available_safeguards to see all available options.`;
       }
       
-      if (error.message.includes('Invalid capability')) {
-        return `${error.message}. Capability roles determine what function the vendor tool plays in safeguard implementation.`;
-      }
-      
-      if (error.message.includes('characters')) {
-        return `${error.message}. Ensure your input text is substantive enough for analysis.`;
-      }
-      
       return error.message;
     }
     
@@ -234,8 +153,8 @@ export class FrameworkMcpServer {
     const transport = new StdioServerTransport();
     await this.server.connect(transport);
     
-    console.error('🤖 Framework MCP Server v1.3.7 running via stdio');
-    console.error('📊 Clean capability assessment for CIS Controls v8.1');
+    console.error('🤖 Framework MCP Server v1.4.0 running via stdio');
+    console.error('📊 Pure Data Provider for CIS Controls v8.1');
   }
 }
 

package/src/shared/types.ts

@@ -14,6 +14,13 @@ export interface SafeguardElement {
   implementationSuggestions: string[]; // Gray - Suggestions for implementation
   relatedSafeguards: string[];
   keywords: string[];
+  systemPrompt?: {
+    role: string;           // e.g., "asset_inventory_expert", "access_control_specialist"
+    context: string;        // Brief context about the safeguard for AI understanding
+    objective: string;      // What the AI should accomplish
+    guidelines: string[];   // Specific evaluation criteria and methods
+    outputFormat: string;   // Expected response structure for n8n processing
+  };
 }
 
 export interface VendorAnalysis {

package/swagger.json

@@ -1,9 +1,9 @@
 {
   "openapi": "3.0.3",
   "info": {
-    "title": "Framework MCP API - CIS Controls Capability Assessment",
-    "description": "Microsoft Copilot-compatible API for vendor capability assessment against CIS Controls Framework v8.1 (153 safeguards). Features clean capability analysis architecture for accurate capability role determination (FULL, PARTIAL, FACILITATES, GOVERNANCE, VALIDATES).",
-    "version": "1.3.7",
+    "title": "Framework MCP API - Pure Data Provider",
+    "description": "Microsoft Copilot-compatible API providing authoritative CIS Controls Framework v8.1 data (153 safeguards). Pure Data Provider architecture empowers LLMs with structured safeguards data and AI-driven systemPrompts for sophisticated, context-aware vendor capability analysis and n8n workflow automation.",
+    "version": "1.5.0",
     "contact": {
       "name": "Framework MCP Support",
       "url": "https://github.com/therealcybermattlee/FrameworkMCP"
@@ -44,56 +44,6 @@
         }
       }
     },
-    "/api/analyze-vendor-response": {
-      "post": {
-        "summary": "Analyze Vendor Response (PRIMARY)",
-        "description": "Primary endpoint for analyzing vendor response text to determine appropriate capability role for CIS safeguards",
-        "operationId": "analyzeVendorResponse",
-        "tags": ["Capability Assessment"],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/AnalysisRequest"
-              }
-            }
-          }
-        },
-        "responses": {
-          "200": {
-            "description": "Analysis completed successfully",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/VendorAnalysisResponse"
-                }
-              }
-            }
-          },
-          "400": {
-            "description": "Invalid request parameters",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            }
-          },
-          "404": {
-            "description": "Safeguard not found",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/ErrorResponse"
-                }
-              }
-            }
-          }
-        }
-      }
-    },
     "/api/safeguards": {
       "get": {
         "summary": "List Available Safeguards",
@@ -117,7 +67,7 @@
     "/api/safeguards/{safeguardId}": {
       "get": {
         "summary": "Get Safeguard Details",
-        "description": "Get detailed information about a specific CIS safeguard including governance elements, core requirements, and implementation suggestions",
+        "description": "Get detailed information about a specific CIS safeguard including governance elements, core requirements, implementation suggestions, and AI-driven systemPrompt for n8n workflow integration",
         "operationId": "getSafeguardDetails",
         "tags": ["Safeguards"],
         "parameters": [
@@ -220,112 +170,6 @@
   },
   "components": {
     "schemas": {
-      "CapabilityRole": {
-        "type": "string",
-        "enum": ["full", "partial", "facilitates", "governance", "validates"],
-        "description": "Vendor tool capability roles:\n- FULL: Complete implementation of safeguard\n- PARTIAL: Limited scope implementation\n- FACILITATES: Enhancement capabilities that enable better/faster/stronger implementation\n- GOVERNANCE: Policy/process management and oversight\n- VALIDATES: Evidence collection, audit, and reporting"
-      },
-      "AnalysisRequest": {
-        "type": "object",
-        "required": ["vendor_name", "safeguard_id", "response_text"],
-        "properties": {
-          "vendor_name": {
-            "type": "string",
-            "description": "Name of the vendor",
-            "minLength": 1,
-            "maxLength": 100,
-            "example": "Microsoft Defender"
-          },
-          "safeguard_id": {
-            "type": "string",
-            "pattern": "^[0-9]+\\.[0-9]+$",
-            "description": "CIS safeguard ID",
-            "example": "5.1"
-          },
-          "response_text": {
-            "type": "string",
-            "description": "Vendor response text to analyze for capability determination",
-            "minLength": 10,
-            "maxLength": 10000,
-            "example": "We provide centralized account management with role-based access controls, automated provisioning and deprovisioning, and integration with Active Directory for enterprise identity management."
-          }
-        }
-      },
-      "VendorAnalysisResponse": {
-        "type": "object",
-        "properties": {
-          "vendor": {
-            "type": "string",
-            "description": "Name of the vendor or tool",
-            "example": "Microsoft Defender"
-          },
-          "safeguardId": {
-            "type": "string",
-            "description": "CIS safeguard ID",
-            "example": "5.1"
-          },
-          "safeguardTitle": {
-            "type": "string",
-            "description": "Title of the CIS safeguard",
-            "example": "Establish and Maintain an Inventory of Accounts"
-          },
-          "capability": {
-            "$ref": "#/components/schemas/CapabilityRole",
-            "description": "Primary capability categorization"
-          },
-          "capabilities": {
-            "type": "object",
-            "description": "Detailed capability breakdown",
-            "properties": {
-              "full": {
-                "type": "boolean",
-                "description": "Directly implements the core safeguard functionality"
-              },
-              "partial": {
-                "type": "boolean",
-                "description": "Implements limited aspects of the safeguard"
-              },
-              "facilitates": {
-                "type": "boolean",
-                "description": "Enhances or enables safeguard implementation by others"
-              },
-              "governance": {
-                "type": "boolean",
-                "description": "Provides policy, process, and oversight capabilities"
-              },
-              "validates": {
-                "type": "boolean",
-                "description": "Provides evidence, audit, and validation reporting"
-              }
-            }
-          },
-          "confidence": {
-            "type": "number",
-            "minimum": 0,
-            "maximum": 100,
-            "description": "Confidence score in the assessment"
-          },
-          "reasoning": {
-            "type": "string",
-            "description": "Detailed explanation of the capability determination"
-          },
-          "evidence": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            },
-            "description": "Evidence supporting the capability assessment"
-          },
-          "toolCapabilityDescription": {
-            "type": "string",
-            "description": "Description of what type of tool this is and its role"
-          },
-          "recommendedUse": {
-            "type": "string",
-            "description": "How practitioners should use this tool for the safeguard"
-          }
-        }
-      },
       "SafeguardListResponse": {
         "type": "object",
         "properties": {
@@ -411,6 +255,41 @@
               "type": "string"
             },
             "description": "Implementation methods and suggestions (Gray elements)"
+          },
+          "systemPrompt": {
+            "type": "object",
+            "description": "AI-driven system prompt for n8n workflow automation and vendor analysis",
+            "properties": {
+              "role": {
+                "type": "string",
+                "description": "Expert role for the specific control type",
+                "example": "asset_inventory_expert"
+              },
+              "context": {
+                "type": "string",
+                "description": "Brief context about the safeguard for AI understanding",
+                "example": "You are evaluating enterprise asset inventory solutions against CIS Control 1.1 requirements"
+              },
+              "objective": {
+                "type": "string", 
+                "description": "What the AI should accomplish",
+                "example": "Determine if vendor solution provides complete asset inventory capabilities"
+              },
+              "guidelines": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "description": "Specific evaluation criteria and methods",
+                "example": ["Verify coverage of all asset types", "Confirm data collection accuracy"]
+              },
+              "outputFormat": {
+                "type": "string",
+                "description": "Expected response structure for n8n processing",
+                "example": "Provide structured assessment with capability level (FULL/PARTIAL/FACILITATES/GOVERNANCE/VALIDATES), confidence score, and evidence summary"
+              }
+            },
+            "required": ["role", "context", "objective", "guidelines", "outputFormat"]
           }
         }
       },
@@ -435,7 +314,7 @@
           },
           "version": {
             "type": "string",
-            "example": "1.3.7"
+            "example": "1.5.0"
           },
           "timestamp": {
             "type": "string",
@@ -480,11 +359,11 @@
           },
           "version": {
             "type": "string",
-            "example": "1.3.7"
+            "example": "1.5.0"
           },
           "description": {
             "type": "string",
-            "example": "Clean HTTP API for vendor capability assessment against CIS Controls Framework"
+            "example": "Pure Data Provider API serving authoritative CIS Controls Framework data for LLM-driven analysis"
           },
           "endpoints": {
             "type": "object",
@@ -530,13 +409,9 @@
     }
   },
   "tags": [
-    {
-      "name": "Capability Assessment",
-      "description": "Primary API endpoints for vendor capability assessment against CIS Controls"
-    },
     {
       "name": "Safeguards",
-      "description": "CIS Controls safeguards information and details"
+      "description": "Authoritative CIS Controls safeguards data for LLM-driven analysis"
     },
     {
       "name": "Monitoring",

package/dist/core/capability-analyzer.d.ts

@@ -1,23 +0,0 @@
-import { SafeguardElement, VendorAnalysis, PerformanceMetrics } from '../shared/types.js';
-export declare class CapabilityAnalyzer {
-    private cache;
-    private performanceMetrics;
-    constructor();
-    performCapabilityAnalysis(vendorName: string, safeguard: SafeguardElement, responseText: string): VendorAnalysis;
-    private determineClaimedCapability;
-    private assessCapabilityQuality;
-    private assessImplementationQuality;
-    private assessFacilitationQuality;
-    private assessGovernanceQuality;
-    private assessValidationQuality;
-    private generateCapabilityAnalysis;
-    private generateToolCapabilityDescription;
-    private generateRecommendedUse;
-    private calculateKeywordScore;
-    private calculateElementCoverage;
-    private recordToolExecution;
-    private logPerformanceStats;
-    private cleanupExpiredCache;
-    getPerformanceMetrics(): PerformanceMetrics;
-}
-//# sourceMappingURL=capability-analyzer.d.ts.map

package/dist/core/capability-analyzer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"capability-analyzer.d.ts","sourceRoot":"","sources":["../../src/core/capability-analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAInB,MAAM,oBAAoB,CAAC;AAG5B,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,kBAAkB,CAAqB;;IAmBxC,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,GAAG,cAAc;IA4BvH,OAAO,CAAC,0BAA0B;IAwDlC,OAAO,CAAC,uBAAuB;IAoC/B,OAAO,CAAC,2BAA2B;IAmCnC,OAAO,CAAC,yBAAyB;IA6BjC,OAAO,CAAC,uBAAuB;IA6B/B,OAAO,CAAC,uBAAuB;IA6B/B,OAAO,CAAC,0BAA0B;IAgClC,OAAO,CAAC,iCAAiC;IAmBzC,OAAO,CAAC,sBAAsB;IAgB9B,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,wBAAwB;IAUhC,OAAO,CAAC,mBAAmB;IAoB3B,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,mBAAmB;IAkBpB,qBAAqB,IAAI,kBAAkB;CAGnD"}