framework-mcp 2.4.6 → 2.5.6

package/src/interfaces/http/http-server.ts

@@ -106,7 +106,7 @@ export class FrameworkHttpServer {
       res.json({
         status: 'healthy',
         uptime: Math.round(process.uptime()),
-        version: '2.4.6',
+        version: '2.5.6',
         timestamp: new Date().toISOString()
       });
     });
@@ -117,54 +117,15 @@ export class FrameworkHttpServer {
         const allSafeguards = this.safeguardManager.getAllSafeguards();
         const safeguardIds = Object.keys(allSafeguards);
 
-        let totalValidated = 0;
-        let errors: string[] = [];
-        const expectedFields = [
-          'systemPromptFull',
-          'systemPromptPartial',
-          'systemPromptFacilitates',
-          'systemPromptGovernance',
-          'systemPromptValidates'
-        ];
-
-        for (const safeguardId of safeguardIds) {
-          const safeguard = allSafeguards[safeguardId];
-
-          // Check all five capability prompts exist and are complete
-          for (const field of expectedFields) {
-            const prompt = (safeguard as any)[field];
-            if (!prompt) {
-              errors.push(`${safeguardId}: Missing ${field}`);
-              continue;
-            }
-
-            if (!prompt.role || !prompt.context || !prompt.objective ||
-                !prompt.guidelines || !prompt.outputFormat) {
-              errors.push(`${safeguardId}.${field}: Incomplete structure`);
-            }
-          }
-
-          // Check deprecated field is gone
-          if ('systemPrompt' in safeguard) {
-            errors.push(`${safeguardId}: Deprecated systemPrompt field exists`);
-          }
-
-          totalValidated++;
-        }
+        const totalValidated = safeguardIds.length;
 
         res.json({
-          status: errors.length === 0 ? 'healthy' : 'unhealthy',
+          status: 'healthy',
           safeguards: {
             total: totalValidated,
             expected: 153,
-            complete: totalValidated === 153 && errors.length === 0
-          },
-          capabilityPrompts: {
-            expectedFields: expectedFields.length,
-            validatedFields: expectedFields.length
+            complete: totalValidated === 153
           },
-          errors: errors.length,
-          errorDetails: errors.slice(0, 10), // Show first 10 errors only
           timestamp: new Date().toISOString()
         });
 
@@ -222,7 +183,7 @@ export class FrameworkHttpServer {
     this.app.get('/api', (req, res) => {
       res.json({
         name: 'Framework MCP HTTP API',
-        version: '2.4.6',
+        version: '2.5.6',
         description: 'Pure Data Provider serving authentic CIS Controls Framework data',
         endpoints: {
           'GET /api/safeguards': 'List all available CIS safeguards',
@@ -273,7 +234,7 @@ export class FrameworkHttpServer {
 
   public start(): void {
     this.app.listen(this.port, '0.0.0.0', () => {
-      console.log(`🚀 Framework MCP HTTP Server v2.4.6 running on port ${this.port}`);
+      console.log(`🚀 Framework MCP HTTP Server v2.5.6 running on port ${this.port}`);
       console.log(`📊 Health check: http://localhost:${this.port}/health`);
       console.log(`📖 API docs: http://localhost:${this.port}/api`);
       console.log(`🔧 Environment: ${process.env.NODE_ENV || 'development'}`);

package/src/interfaces/mcp/mcp-server.ts

@@ -18,7 +18,7 @@ export class FrameworkMcpServer {
     this.server = new Server(
       {
         name: 'framework-analyzer',
-        version: '2.4.6',
+        version: '2.5.6',
       }
     );
 
@@ -129,7 +129,7 @@ export class FrameworkMcpServer {
             safeguards,
             total: safeguards.length,
             framework: 'CIS Controls v8.1',
-            version: '2.4.6'
+            version: '2.5.6'
           }, null, 2),
         },
       ],
@@ -153,7 +153,7 @@ export class FrameworkMcpServer {
     const transport = new StdioServerTransport();
     await this.server.connect(transport);
     
-    console.error('🤖 Framework MCP Server v2.4.6 running via stdio');
+    console.error('🤖 Framework MCP Server v2.5.6 running via stdio');
     console.error('📊 Pure Data Provider for CIS Controls v8.1');
   }
 }

package/src/shared/types.ts

@@ -43,43 +43,6 @@ export interface SafeguardElement {
 
   // Enhanced relationships - new optional field for rich relationship data
   enhancedRelationships?: SafeguardRelationship[];
-
-  // Capability-specific system prompts for different evaluation levels
-  systemPromptFull?: {
-    role: string;           // e.g., "asset_inventory_expert", "access_control_specialist"
-    context: string;        // Brief context about the safeguard for AI understanding
-    objective: string;      // What the AI should accomplish
-    guidelines: string[];   // Specific evaluation criteria and methods
-    outputFormat: string;   // Expected response structure for n8n processing
-  };
-  systemPromptPartial?: {
-    role: string;
-    context: string;
-    objective: string;
-    guidelines: string[];
-    outputFormat: string;
-  };
-  systemPromptFacilitates?: {
-    role: string;
-    context: string;
-    objective: string;
-    guidelines: string[];
-    outputFormat: string;
-  };
-  systemPromptGovernance?: {
-    role: string;
-    context: string;
-    objective: string;
-    guidelines: string[];
-    outputFormat: string;
-  };
-  systemPromptValidates?: {
-    role: string;
-    context: string;
-    objective: string;
-    guidelines: string[];
-    outputFormat: string;
-  };
 }
 
 export interface VendorAnalysis {

package/swagger.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Framework MCP API - Pure Data Provider",
-    "description": "Microsoft Copilot-compatible API providing authoritative CIS Controls Framework v8.1 data (153 safeguards). Pure Data Provider architecture empowers LLMs with structured safeguards data and AI-driven systemPrompts for sophisticated, context-aware vendor capability analysis and n8n workflow automation.",
+    "description": "Microsoft Copilot-compatible API providing authoritative CIS Controls Framework v8.1 data (153 safeguards). Pure Data Provider architecture empowers LLMs with structured safeguards data for sophisticated, context-aware vendor capability analysis.",
     "version": "2.0.0",
     "contact": {
       "name": "Framework MCP Support",
@@ -255,26 +255,6 @@
               "type": "string"
             },
             "description": "Implementation methods and suggestions (Gray elements)"
-          },
-          "systemPromptFull": {
-            "$ref": "#/components/schemas/SystemPromptStructure",
-            "description": "AI-driven system prompt for FULL capability evaluation"
-          },
-          "systemPromptPartial": {
-            "$ref": "#/components/schemas/SystemPromptStructure",
-            "description": "AI-driven system prompt for PARTIAL capability evaluation"
-          },
-          "systemPromptFacilitates": {
-            "$ref": "#/components/schemas/SystemPromptStructure",
-            "description": "AI-driven system prompt for FACILITATES capability evaluation"
-          },
-          "systemPromptGovernance": {
-            "$ref": "#/components/schemas/SystemPromptStructure",
-            "description": "AI-driven system prompt for GOVERNANCE capability evaluation"
-          },
-          "systemPromptValidates": {
-            "$ref": "#/components/schemas/SystemPromptStructure",
-            "description": "AI-driven system prompt for VALIDATES capability evaluation"
           }
         }
       },
@@ -299,7 +279,7 @@
           },
           "version": {
             "type": "string",
-            "example": "2.4.6"
+            "example": "2.5.6"
           },
           "timestamp": {
             "type": "string",
@@ -344,7 +324,7 @@
           },
           "version": {
             "type": "string",
-            "example": "2.4.6"
+            "example": "2.5.6"
           },
           "description": {
             "type": "string",
@@ -390,41 +370,6 @@
             "format": "date-time"
           }
         }
-      },
-      "SystemPromptStructure": {
-        "type": "object",
-        "description": "AI-driven system prompt structure for vendor capability analysis",
-        "properties": {
-          "role": {
-            "type": "string",
-            "description": "Expert role for the specific control type",
-            "example": "asset_inventory_expert"
-          },
-          "context": {
-            "type": "string",
-            "description": "Brief context about the safeguard for AI understanding",
-            "example": "You are evaluating enterprise asset inventory solutions against CIS Control 1.1 requirements"
-          },
-          "objective": {
-            "type": "string",
-            "description": "What the AI should accomplish",
-            "example": "Determine if vendor solution provides complete asset inventory capabilities"
-          },
-          "guidelines": {
-            "type": "array",
-            "items": {
-              "type": "string"
-            },
-            "description": "Specific evaluation criteria and methods",
-            "example": ["Verify coverage of all asset types", "Confirm data collection accuracy"]
-          },
-          "outputFormat": {
-            "type": "string",
-            "description": "Expected response structure for n8n processing",
-            "example": "Provide structured assessment with capability level (FULL/PARTIAL/FACILITATES/GOVERNANCE/VALIDATES), confidence score, and evidence summary"
-          }
-        },
-        "required": ["role", "context", "objective", "guidelines", "outputFormat"]
       }
     }
   },

package/scripts/standardize-prompts.js

@@ -1,325 +0,0 @@
-#!/usr/bin/env node
-
-import fs from 'fs';
-import path from 'path';
-import { fileURLToPath } from 'url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-class PromptStandardizer {
-  constructor() {
-    this.safeguardManagerPath = path.join(__dirname, '..', 'src/core/safeguard-manager.ts');
-    this.backupPath = `${this.safeguardManagerPath}.backup.${Date.now()}`;
-    this.dryRun = false;
-    this.verbose = false;
-  }
-
-  /**
-   * Extract template objectives from safeguard 10.2
-   */
-  extractTemplateObjectives() {
-    const content = fs.readFileSync(this.safeguardManagerPath, 'utf-8');
-
-    // Find safeguard 10.2 and extract the objectives
-    const safeguard10_2Match = content.match(/"10\.2":\s*{[\s\S]*?systemPromptValidates:\s*{[\s\S]*?}\s*}/);
-    if (!safeguard10_2Match) {
-      throw new Error('Could not find safeguard 10.2 definition');
-    }
-
-    const safeguard10_2Text = safeguard10_2Match[0];
-
-    // Extract objectives for each capability
-    const extractObjective = (capability) => {
-      const regex = new RegExp(`systemPrompt${capability}:[\\s\\S]*?objective:\\s*"([^"]*)"`, 'i');
-      const match = safeguard10_2Text.match(regex);
-      if (!match) {
-        throw new Error(`Could not find ${capability} objective in safeguard 10.2`);
-      }
-      return match[1];
-    };
-
-    const template = {
-      Full: extractObjective('Full'),
-      Partial: extractObjective('Partial'),
-      Facilitates: extractObjective('Facilitates'),
-      Governance: extractObjective('Governance'),
-      Validates: extractObjective('Validates')
-    };
-
-    if (this.verbose) {
-      console.log('📋 Extracted template objectives:');
-      Object.entries(template).forEach(([key, value]) => {
-        console.log(`  ${key}: ${value.substring(0, 80)}...`);
-      });
-    }
-
-    return template;
-  }
-
-  /**
-   * Apply standardization using global replacements
-   */
-  standardizeContent(template) {
-    let content = fs.readFileSync(this.safeguardManagerPath, 'utf-8');
-    let totalReplacements = 0;
-
-    // Track changes
-    const stats = {
-      objectiveReplacements: 0,
-      guidelineReplacements: 0,
-      outputFormatReplacements: 0,
-      implementationSimplifications: 0
-    };
-
-    // Step 1: Replace all objectives with template objectives
-    const capabilities = ['Full', 'Partial', 'Facilitates', 'Governance', 'Validates'];
-
-    for (const capability of capabilities) {
-      const templateObjective = template[capability];
-
-      // Replace all objectives for this capability (excluding 10.2)
-      const objectiveRegex = new RegExp(
-        `(systemPrompt${capability}:[\\s\\S]*?objective:\\s*)"[^"]*"`,
-        'g'
-      );
-
-      let matches = 0;
-      content = content.replace(objectiveRegex, (match, prefix, offset) => {
-        // Skip if this is within safeguard 10.2
-        const before = content.substring(Math.max(0, offset - 500), offset);
-        if (before.includes('"10.2":')) {
-          return match; // Don't replace template safeguard
-        }
-        matches++;
-        return `${prefix}"${templateObjective}"`;
-      });
-
-      stats.objectiveReplacements += matches;
-      if (this.verbose && matches > 0) {
-        console.log(`  ✅ Updated ${matches} ${capability} objectives`);
-      }
-    }
-
-    // Step 2: Replace all guidelines with ["Future Use"] (excluding 10.2)
-    const guidelineRegex = /(systemPrompt(?:Full|Partial|Facilitates|Governance|Validates):[\s\S]*?guidelines:\s*)\[[\s\S]*?\]/g;
-
-    content = content.replace(guidelineRegex, (match, prefix, offset) => {
-      // Skip if this is within safeguard 10.2
-      const before = content.substring(Math.max(0, offset - 500), offset);
-      if (before.includes('"10.2":')) {
-        return match; // Don't replace template safeguard
-      }
-      stats.guidelineReplacements++;
-      return `${prefix}[\n        "Future Use"\n      ]`;
-    });
-
-    // Step 3: Replace all outputFormat with standardized version (excluding 10.2)
-    const outputFormatRegex = /(systemPrompt(?:Full|Partial|Facilitates|Governance|Validates):[\s\S]*?outputFormat:\s*)"[^"]*"/g;
-    const standardOutputFormat = 'Provide a structured assessment, confidence score, and evidence summary';
-
-    content = content.replace(outputFormatRegex, (match, prefix, offset) => {
-      // Skip if this is within safeguard 10.2
-      const before = content.substring(Math.max(0, offset - 500), offset);
-      if (before.includes('"10.2":')) {
-        return match; // Don't replace template safeguard
-      }
-      stats.outputFormatReplacements++;
-      return `${prefix}"${standardOutputFormat}"`;
-    });
-
-    // Step 4: Simplify implementation suggestions (excluding 10.2)
-    const implRegex = /(implementationSuggestions:\s*\[\s*)((?:\s*"[^"]*",?\s*)+)(\s*\])/g;
-
-    content = content.replace(implRegex, (match, prefix, suggestions, suffix, offset) => {
-      // Skip if this is within safeguard 10.2
-      const before = content.substring(Math.max(0, offset - 500), offset);
-      if (before.includes('"10.2":')) {
-        return match; // Don't replace template safeguard
-      }
-
-      // Extract individual suggestions
-      const suggestionMatches = suggestions.match(/"[^"]+"/g) || [];
-
-      if (suggestionMatches.length > 3) {
-        stats.implementationSimplifications++;
-        const simplified = suggestionMatches.slice(0, 3).join(',\n      ');
-        return `${prefix} // Gray - Implementation suggestions\n      ${simplified}\n    ${suffix}`;
-      }
-
-      return match; // Keep as is if 3 or fewer suggestions
-    });
-
-    if (this.verbose) {
-      console.log('📊 Transformation statistics:');
-      console.log(`  - Objective replacements: ${stats.objectiveReplacements}`);
-      console.log(`  - Guideline replacements: ${stats.guidelineReplacements}`);
-      console.log(`  - Output format replacements: ${stats.outputFormatReplacements}`);
-      console.log(`  - Implementation simplifications: ${stats.implementationSimplifications}`);
-    }
-
-    return { content, stats };
-  }
-
-  /**
-   * Create backup of original safeguard-manager.ts
-   */
-  createBackup() {
-    if (this.verbose) {
-      console.log(`📁 Creating backup: ${this.backupPath}`);
-    }
-    fs.copyFileSync(this.safeguardManagerPath, this.backupPath);
-  }
-
-  /**
-   * Save updated content
-   */
-  saveContent(content) {
-    if (this.dryRun) {
-      console.log('🔍 DRY RUN: Would save updated content to file');
-      return;
-    }
-
-    if (this.verbose) {
-      console.log('💾 Saving updated content...');
-    }
-
-    fs.writeFileSync(this.safeguardManagerPath, content);
-
-    if (this.verbose) {
-      console.log('✅ File saved successfully');
-    }
-  }
-
-  /**
-   * Validate transformation results
-   */
-  validateTransformation(content) {
-    if (this.verbose) {
-      console.log('🔍 Validating transformation...');
-    }
-
-    let isValid = true;
-    const errors = [];
-
-    // Count "Future Use" guidelines
-    const futureUseMatches = content.match(/guidelines:\s*\[\s*"Future Use"\s*\]/g);
-    const futureUseCount = futureUseMatches ? futureUseMatches.length : 0;
-
-    // Expected: 153 safeguards × 5 capabilities = 765
-    // But safeguard 10.2 already has 5, so we should see 760 from transformation + 5 existing = 765 total
-    const expectedTotal = 765;
-
-    if (futureUseCount !== expectedTotal) {
-      errors.push(`Expected ${expectedTotal} "Future Use" guidelines, found ${futureUseCount}`);
-      isValid = false;
-    }
-
-    // Count standardized output formats
-    const outputFormatMatches = content.match(/outputFormat:\s*"Provide a structured assessment, confidence score, and evidence summary"/g);
-    const outputFormatCount = outputFormatMatches ? outputFormatMatches.length : 0;
-
-    if (outputFormatCount !== expectedTotal) {
-      errors.push(`Expected ${expectedTotal} standardized output formats, found ${outputFormatCount}`);
-      isValid = false;
-    }
-
-    // Verify template objectives are applied
-    const fullObjectiveMatches = content.match(/The vendor has taken an assessment and has been mapped to FULL.*?FULLY\./g);
-    const fullObjectiveCount = fullObjectiveMatches ? fullObjectiveMatches.length : 0;
-
-    if (fullObjectiveCount !== 153) {
-      errors.push(`Expected 153 FULL template objectives, found ${fullObjectiveCount}`);
-      isValid = false;
-    }
-
-    if (errors.length > 0) {
-      console.error('❌ Validation errors:');
-      errors.forEach(error => console.error(`  - ${error}`));
-    } else {
-      console.log('✅ Validation passed: All transformations applied successfully');
-    }
-
-    return isValid;
-  }
-
-  /**
-   * Main transformation process
-   */
-  async run(options = {}) {
-    this.dryRun = options.dryRun || false;
-    this.verbose = options.verbose || false;
-
-    try {
-      console.log('🚀 Starting prompt standardization...');
-
-      // Create backup unless dry run
-      if (!this.dryRun) {
-        this.createBackup();
-      }
-
-      // Extract template objectives from 10.2
-      console.log('📋 Extracting template from safeguard 10.2...');
-      const template = this.extractTemplateObjectives();
-
-      // Apply standardization
-      console.log('🔄 Applying standardization to all safeguards (excluding 10.2)...');
-      const { content, stats } = this.standardizeContent(template);
-
-      // Validate if requested
-      if (options.validate) {
-        const isValid = this.validateTransformation(content);
-        if (!isValid) {
-          throw new Error('Validation failed - transformation incomplete');
-        }
-      }
-
-      // Save results
-      this.saveContent(content);
-
-      console.log('🎉 Standardization complete!');
-      console.log('📊 Summary:');
-      console.log(`  - Objective updates: ${stats.objectiveReplacements}`);
-      console.log(`  - Guideline standardizations: ${stats.guidelineReplacements}`);
-      console.log(`  - Output format standardizations: ${stats.outputFormatReplacements}`);
-      console.log(`  - Implementation simplifications: ${stats.implementationSimplifications}`);
-      if (!this.dryRun) {
-        console.log(`  - Backup: ${this.backupPath}`);
-      }
-
-    } catch (error) {
-      console.error('❌ Error during standardization:', error);
-      process.exit(1);
-    }
-  }
-}
-
-// CLI interface
-if (import.meta.url === `file://${process.argv[1]}`) {
-  const args = process.argv.slice(2);
-  const options = {
-    dryRun: args.includes('--dry-run'),
-    validate: args.includes('--validate'),
-    verbose: args.includes('--verbose')
-  };
-
-  if (args.includes('--help')) {
-    console.log(`
-Usage: npm run standardize-prompts [options]
-
-Options:
-  --dry-run    Show what would be changed without making actual changes
-  --validate   Run validation after transformation
-  --verbose    Show detailed progress information
-  --help       Show this help message
-
-Examples:
-  npm run standardize-prompts --dry-run --verbose
-  npm run standardize-prompts --validate --verbose
-`);
-    process.exit(0);
-  }
-
-  const standardizer = new PromptStandardizer();
-  standardizer.run(options).catch(console.error);
-}

package/scripts/validate-capability-prompts.js

@@ -1,110 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Validate that all 153 safeguards have complete capability-specific prompts
- * This script verifies the transformation was successful
- */
-
-import { SafeguardManager } from '../dist/core/safeguard-manager.js';
-
-function validateCapabilityPrompts() {
-  console.log('🔍 Starting capability prompt validation...');
-
-  const safeguardManager = new SafeguardManager();
-  const allSafeguards = safeguardManager.getAllSafeguards();
-  const safeguardIds = Object.keys(allSafeguards);
-
-  console.log(`📊 Found ${safeguardIds.length} safeguards to validate`);
-
-  const expectedFields = [
-    'systemPromptFull',
-    'systemPromptPartial',
-    'systemPromptFacilitates',
-    'systemPromptGovernance',
-    'systemPromptValidates'
-  ];
-
-  const requiredSubfields = ['role', 'context', 'objective', 'guidelines', 'outputFormat'];
-
-  let totalValidated = 0;
-  let errors = [];
-
-  for (const safeguardId of safeguardIds) {
-    const safeguard = allSafeguards[safeguardId];
-
-    // Check if all five capability prompts exist
-    for (const field of expectedFields) {
-      if (!safeguard[field]) {
-        errors.push(`❌ ${safeguardId}: Missing ${field}`);
-        continue;
-      }
-
-      // Check if each prompt has the required structure
-      const prompt = safeguard[field];
-      for (const subfield of requiredSubfields) {
-        if (!prompt[subfield]) {
-          errors.push(`❌ ${safeguardId}.${field}: Missing ${subfield}`);
-        }
-
-        if (subfield === 'guidelines' && (!Array.isArray(prompt[subfield]) || prompt[subfield].length === 0)) {
-          errors.push(`❌ ${safeguardId}.${field}: Guidelines must be non-empty array`);
-        }
-
-        if (subfield !== 'guidelines' && (!prompt[subfield] || typeof prompt[subfield] !== 'string')) {
-          errors.push(`❌ ${safeguardId}.${field}: ${subfield} must be non-empty string`);
-        }
-      }
-    }
-
-    // Check that old systemPrompt field is gone
-    if ('systemPrompt' in safeguard) {
-      errors.push(`❌ ${safeguardId}: Deprecated systemPrompt field still exists`);
-    }
-
-    totalValidated++;
-  }
-
-  // Report results
-  console.log(`\n📊 Validation Results:`);
-  console.log(`✅ Safeguards validated: ${totalValidated}`);
-  console.log(`❌ Errors found: ${errors.length}`);
-
-  if (errors.length > 0) {
-    console.log(`\n🚨 Validation Errors:`);
-    errors.forEach(error => console.log(error));
-    process.exit(1);
-  } else {
-    console.log(`\n🎉 All ${totalValidated} safeguards have complete capability-specific prompts!`);
-    console.log(`✅ All safeguards properly transformed`);
-    console.log(`✅ No deprecated systemPrompt fields found`);
-    console.log(`✅ All capability prompts have complete structure`);
-  }
-}
-
-// Validate specific prompt structure
-function validatePromptStructure(prompt, safeguardId, fieldName) {
-  const requiredFields = ['role', 'context', 'objective', 'guidelines', 'outputFormat'];
-  const errors = [];
-
-  for (const field of requiredFields) {
-    if (!prompt[field]) {
-      errors.push(`Missing ${field}`);
-    } else if (field === 'guidelines') {
-      if (!Array.isArray(prompt[field]) || prompt[field].length === 0) {
-        errors.push(`Guidelines must be non-empty array`);
-      }
-    } else if (typeof prompt[field] !== 'string' || prompt[field].trim() === '') {
-      errors.push(`${field} must be non-empty string`);
-    }
-  }
-
-  return errors;
-}
-
-// Export for testing
-export { validateCapabilityPrompts, validatePromptStructure };
-
-// Run validation if this file is executed directly
-if (import.meta.url === `file://${process.argv[1]}`) {
-  validateCapabilityPrompts();
-}