fridayy 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sabari Vasan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,283 @@
+# fridayy
+
+> **fridayy — Turn existing applications into AI-ready tools.**
+
+[![Build Status](https://img.shields.io/badge/build-passing-brightgreen.svg)](https://github.com/fridayy/fridayy)
+[![MCP Compatible](https://img.shields.io/badge/MCP-Standards--Compliant-blue.svg)](https://modelcontextprotocol.io)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+---
+
+## 🌟 What is fridayy?
+
+**fridayy** is a developer-focused, local-first platform that converts existing APIs and applications into **Model Context Protocol (MCP) servers and tools**.
+
+Instead of rewriting backend code or exposing raw endpoints to AI agents without safeguards, fridayy discovers existing application interfaces, standardizes them into structured tool definitions, applies granular security and permission gates, and serves them over standard MCP transports (Stdio & SSE).
+
+```
+┌───────────────────────────────┐
+│     Existing Application      │
+│  (OpenAPI / REST / Node.js)   │
+└───────────────┬───────────────┘
+                │
+                ▼
+┌───────────────────────────────┐
+│            fridayy            │
+│  • Capability Discovery       │
+│  • Schema Normalization       │
+│  • Permission & Risk Engine   │
+│  • Developer Review Workflow  │
+│  • Zero-Leak Secret Isolation │
+└───────────────┬───────────────┘
+                │
+                ▼
+┌───────────────────────────────┐
+│     Standard MCP Server       │
+│      (Stdio / SSE / HTTP)     │
+└───────────────┬───────────────┘
+                │
+    ┌───────────┼───────────┐
+    ▼           ▼           ▼
+ Claude      ChatGPT     Cursor / Gemini
+```
+
+---
+
+## 💡 Why fridayy Exists
+
+Connecting existing production software to LLMs presents three major challenges:
+
+1. **Protocol Impedance**: Large language models expect clean semantic descriptions and JSON Schemas, while legacy APIs have complex query strings, URL parameters, authentication headers, and nested payloads.
+2. **Security & Destructive Risk**: Directly giving an AI agent unrestricted access to write or delete endpoints (`DELETE /users/{id}`, `POST /orders/refund`) is dangerous.
+3. **Developer Friction**: Manually writing MCP servers for dozens of microservices and hundreds of endpoints is tedious and prone to maintenance drift.
+
+**fridayy solves this by introducing a human-in-the-loop, secure abstraction layer.**
+
+---
+
+## 🚀 Quick Start
+
+### 1. Installation
+
+Install globally via npm:
+
+```bash
+npm install -g fridayy
+```
+
+Or run directly in any project:
+
+```bash
+npx fridayy init
+```
+
+---
+
+### 2. The 4-Step Developer Experience
+
+```bash
+# Step 1: Initialize Fridayy configuration in your project
+fridayy init
+
+# Step 2: Scan the workspace for APIs, OpenAPI specs, routes, and auth
+fridayy scan
+
+# Step 3: Generate candidate MCP tools
+fridayy generate
+
+# Step 4: Review and approve tools before exposing to AI
+fridayy review
+
+# Step 5: Start the standards-compliant MCP server
+fridayy start
+```
+
+---
+
+## 🏗️ Architecture
+
+fridayy is built with a modular, extensible architecture designed for future pluggability:
+
+```text
+fridayy/
+│
+├── cli/                 # Command-line interface & interactive prompts
+│   ├── commands/        # init, scan, generate, review, start, tools, config, doctor
+│   └── ui/              # Rich tables, badges, ascii banners
+│
+├── core/                # Core domain logic
+│   ├── discovery/       # Project scanner & capability detection
+│   ├── tool-generator/  # Tool name sanitization & description building
+│   ├── schema/          # Unified JSON Schema converter & types
+│   ├── permissions/     # READ / WRITE / DESTRUCTIVE classifier & enforcer
+│   ├── authentication/  # API key, Bearer, Basic auth & secret isolation
+│   └── validation/      # Input validation & config schemas (Zod)
+│
+├── adapters/            # Pluggable source adapters
+│   ├── openapi/         # OpenAPI 3.0, 3.1 & Swagger 2.0 parser & request builder
+│   ├── rest/            # Generic HTTP / REST executor
+│   ├── nodejs/          # Express / Fastify / Koa AST route scanner
+│   ├── manual/          # Custom user-defined tools
+│   └── registry.ts      # Adapter Registry (extensible to GraphQL, SQL, etc.)
+│
+├── mcp/                 # Official Model Context Protocol integration
+│   ├── server/          # Stdio & SSE MCP Server (@modelcontextprotocol/sdk)
+│   ├── tools/           # Tool registry & execution handler
+│   ├── resources/       # MCP resource providers (config, catalog, health)
+│   └── prompts/         # Pre-configured guided prompt templates
+│
+├── config/              # Configuration & tools file manager
+├── security/            # Rate limiting, audit logger, sanitizer, allowlists
+└── examples/            # Working example e-commerce API & test suites
+```
+
+---
+
+## 🛡️ Security Model
+
+Security is a first-class citizen in fridayy. AI models are **never** granted unrestricted access by default.
+
+### 1. Permission Classification & Risk Assessment
+
+Every operation is automatically classified:
+
+| Classification | Typical Operations | Default Status | Risk Level |
+|---|---|---|---|
+| `READ` | `GET /users`, `GET /products/{id}` | `APPROVED` | `low` |
+| `WRITE` | `POST /orders`, `PUT /profile` | `PENDING` | `medium` |
+| `DESTRUCTIVE` | `DELETE /users/{id}`, `POST /cache/purge` | `BLOCKED` | `high` |
+
+> [!CAUTION]
+> **Destructive operations default to `BLOCKED`.** They cannot be discovered or invoked by LLMs until the developer explicitly reviews and approves them via `fridayy review`.
+
+### 2. Zero-Leak Secret Isolation
+- Secrets and tokens are **never** embedded in tool schemas, descriptions, or LLM-visible payloads.
+- Authentication tokens are resolved strictly from environment variables at execution time:
+  ```env
+  FRIDAYY_API_KEY=your_api_key_here
+  FRIDAYY_BEARER_TOKEN=your_bearer_token_here
+  FRIDAYY_API_URL=http://localhost:4000
+  ```
+- Sensitive headers (`Authorization`, `x-api-key`, `Cookie`) and payload fields (`password`, `token`, `secret`) are automatically redacted in audit logs and error messages.
+
+### 3. Dynamic Schema Validation
+All input arguments provided by AI agents are validated against the tool's JSON Schema (types, required fields, ranges, and enum constraints) prior to dispatching HTTP requests.
+
+### 4. Rate Limiting & Audit Logging
+- **Rate Limiting**: Sliding-window rate limiter prevents runaway agent loops from overwhelming backend services.
+- **Audit Logging**: Every invocation is recorded with timestamps, tool name, sanitized inputs, duration, and HTTP status codes.
+
+---
+
+## 📋 CLI Reference
+
+| Command | Description | Example |
+|---|---|---|
+| `fridayy init` | Initializes `fridayy.config.json` | `fridayy init --spec ./openapi.yaml` |
+| `fridayy scan` | Analyzes workspace and detects endpoints/auth | `fridayy scan` |
+| `fridayy generate` | Generates `fridayy.tools.json` from sources | `fridayy generate --force` |
+| `fridayy review` | Review, approve, reject, or block candidate tools | `fridayy review --approve-read` |
+| `fridayy start` | Boots standard MCP server (Stdio or SSE) | `fridayy start --transport sse --port 3000` |
+| `fridayy tools` | Lists tool statuses and permission types | `fridayy tools --approved` |
+| `fridayy config` | Displays or updates configuration | `fridayy config get source.baseUrl` |
+| `fridayy doctor` | Runs diagnostics on config, secrets, and API | `fridayy doctor` |
+
+---
+
+## ⚙️ Configuration Files
+
+### `fridayy.config.json`
+
+```json
+{
+  "name": "my-ecommerce-app",
+  "version": "1.0.0",
+  "source": {
+    "type": "openapi",
+    "path": "./openapi.yaml",
+    "baseUrl": "https://api.example.com"
+  },
+  "server": {
+    "name": "ecommerce-mcp",
+    "transport": "stdio"
+  },
+  "security": {
+    "requireApprovalForDestructive": true,
+    "autoApproveRead": true,
+    "autoApproveWrite": false,
+    "allowlist": ["*"]
+  },
+  "auth": {
+    "ApiKeyAuth": {
+      "type": "apiKey",
+      "headerName": "x-api-key",
+      "envKey": "FRIDAYY_API_KEY"
+    }
+  }
+}
+```
+
+---
+
+## 🤖 Connecting to MCP Clients
+
+### Claude Desktop
+
+Add to your `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "fridayy-api": {
+      "command": "npx",
+      "args": ["fridayy", "start"],
+      "env": {
+        "FRIDAYY_API_KEY": "your-api-key"
+      }
+    }
+  }
+}
+```
+
+### Cursor IDE
+
+In Cursor Settings → Features → MCP:
+- **Type**: `command`
+- **Command**: `npx fridayy start`
+
+---
+
+## 🧪 Testing
+
+Run the comprehensive test suite (12 suites, 41 unit & integration tests):
+
+```bash
+npm test
+```
+
+Run the live E-Commerce end-to-end client demo:
+
+```bash
+npm run example:demo
+```
+
+---
+
+## 🗺️ Roadmap
+
+- [x] OpenAPI 3.0, 3.1 & Swagger 2.0 support
+- [x] Node.js / Express / Fastify route discovery
+- [x] Stdio & SSE Transport support
+- [x] Granular permission classifier & destructive blocking
+- [x] Zero-leak secret isolation
+- [x] Interactive CLI review workflow
+- [ ] GraphQL Adapter
+- [ ] PostgreSQL / MySQL / MongoDB direct query adapters
+- [ ] Python / FastAPI / Django route scanner
+- [ ] Webhook trigger tools
+
+---
+
+## 📄 License
+
+MIT © fridayy

package/bin/fridayy.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+
+/**
+ * Fridayy CLI Binary Runner
+ */
+
+import { run } from '../dist/cli/index.js';
+
+run().catch((err) => {
+  console.error('Fridayy Error:', err);
+  process.exit(1);
+});

package/dist/adapters/base.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Fridayy - Base Adapter Interface
+ * Provides the foundational abstraction for all application and API adapters.
+ */
+import { FridayyToolDefinition, FridayyConfig, ToolExecutionResult } from '../core/schema/types.js';
+export interface AdapterScanContext {
+    rootDir: string;
+    config?: FridayyConfig;
+}
+export interface AdapterGenerationContext {
+    rootDir: string;
+    config?: FridayyConfig;
+    sourcePath?: string;
+    sourceUrl?: string;
+}
+export interface AdapterExecutionContext {
+    config?: FridayyConfig;
+    headers?: Record<string, string>;
+    timeoutMs?: number;
+}
+export declare abstract class BaseAdapter {
+    abstract readonly name: string;
+    abstract readonly description: string;
+    /**
+     * Detects whether the current workspace/target contains assets supported by this adapter.
+     */
+    abstract detect(context: AdapterScanContext): Promise<{
+        detected: boolean;
+        details?: any;
+    }>;
+    /**
+     * Generates standardized FridayyToolDefinitions from the target source.
+     */
+    abstract generateTools(context: AdapterGenerationContext): Promise<FridayyToolDefinition[]>;
+    /**
+     * Executes a tool invocation against the underlying system.
+     */
+    abstract executeTool(tool: FridayyToolDefinition, input: Record<string, any>, context?: AdapterExecutionContext): Promise<ToolExecutionResult>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/adapters/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/adapters/base.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EAEpB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,8BAAsB,WAAW;IAC/B,kBAAyB,IAAI,EAAE,MAAM,CAAC;IACtC,kBAAyB,WAAW,EAAE,MAAM,CAAC;IAE7C;;OAEG;aACa,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IAElG;;OAEG;aACa,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAElG;;OAEG;aACa,WAAW,CACzB,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,mBAAmB,CAAC;CAChC"}

package/dist/adapters/base.js

@@ -0,0 +1,7 @@
+/**
+ * Fridayy - Base Adapter Interface
+ * Provides the foundational abstraction for all application and API adapters.
+ */
+export class BaseAdapter {
+}
+//# sourceMappingURL=base.js.map

package/dist/adapters/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/adapters/base.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2BH,MAAM,OAAgB,WAAW;CAsBhC"}

package/dist/adapters/manual/adapter.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Fridayy - Manual Custom Tools Adapter
+ * Supports custom defined tools with manual configurations or handlers.
+ */
+import { BaseAdapter, AdapterScanContext, AdapterGenerationContext, AdapterExecutionContext } from '../base.js';
+import { FridayyToolDefinition, ToolExecutionResult } from '../../core/schema/types.js';
+export declare class ManualAdapter extends BaseAdapter {
+    readonly name = "manual";
+    readonly description = "Adapter for manually defined tools and handlers";
+    private restExecutor;
+    detect(context: AdapterScanContext): Promise<{
+        detected: boolean;
+        details?: any;
+    }>;
+    generateTools(context: AdapterGenerationContext): Promise<FridayyToolDefinition[]>;
+    executeTool(tool: FridayyToolDefinition, input: Record<string, any>, context?: AdapterExecutionContext): Promise<ToolExecutionResult>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapters/manual/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/manual/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAMpC,qBAAa,aAAc,SAAQ,WAAW;IAC5C,SAAgB,IAAI,YAAY;IAChC,SAAgB,WAAW,qDAAqD;IAEhF,OAAO,CAAC,YAAY,CAAuB;IAE9B,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IAIlF,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAIlF,WAAW,CACtB,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,mBAAmB,CAAC;CAmChC"}

package/dist/adapters/manual/adapter.js

@@ -0,0 +1,52 @@
+/**
+ * Fridayy - Manual Custom Tools Adapter
+ * Supports custom defined tools with manual configurations or handlers.
+ */
+import { BaseAdapter } from '../base.js';
+import { buildHttpRequest } from '../openapi/request-builder.js';
+import { defaultRestExecutor } from '../rest/executor.js';
+import { AuthenticationManager } from '../../core/authentication/manager.js';
+import { defaultSecretResolver } from '../../core/authentication/secret-resolver.js';
+export class ManualAdapter extends BaseAdapter {
+    name = 'manual';
+    description = 'Adapter for manually defined tools and handlers';
+    restExecutor = defaultRestExecutor;
+    async detect(context) {
+        return { detected: false };
+    }
+    async generateTools(context) {
+        return [];
+    }
+    async executeTool(tool, input, context = {}) {
+        // If tool defines an HTTP endpoint, execute it
+        if (tool.source.url || tool.source.path) {
+            const authManager = new AuthenticationManager(context.config);
+            const baseUrl = defaultSecretResolver.resolveBaseUrl(context.config?.source?.baseUrl);
+            const preparedReq = buildHttpRequest(tool, input, baseUrl);
+            if (context.headers) {
+                Object.assign(preparedReq.headers, context.headers);
+            }
+            authManager.applyAuth(tool.authentication, {
+                headers: preparedReq.headers,
+                queryParams: {}
+            });
+            return await this.restExecutor.execute(preparedReq, tool.name, {
+                timeoutMs: context.timeoutMs
+            });
+        }
+        // Otherwise return echo/manual data
+        return {
+            success: true,
+            data: {
+                message: `Executed manual tool "${tool.name}"`,
+                input
+            },
+            metadata: {
+                durationMs: 1,
+                timestamp: new Date().toISOString(),
+                toolName: tool.name
+            }
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/adapters/manual/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/adapters/manual/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,WAAW,EAIZ,MAAM,YAAY,CAAC;AAKpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAErF,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5B,IAAI,GAAG,QAAQ,CAAC;IAChB,WAAW,GAAG,iDAAiD,CAAC;IAExE,YAAY,GAAG,mBAAmB,CAAC;IAEpC,KAAK,CAAC,MAAM,CAAC,OAA2B;QAC7C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,OAAiC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,IAA2B,EAC3B,KAA0B,EAC1B,UAAmC,EAAE;QAErC,+CAA+C;QAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,qBAAqB,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAEtF,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACtD,CAAC;YAED,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE;gBACzC,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,WAAW,EAAE,EAAE;aAChB,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;gBAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,oCAAoC;QACpC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACJ,OAAO,EAAE,yBAAyB,IAAI,CAAC,IAAI,GAAG;gBAC9C,KAAK;aACN;YACD,QAAQ,EAAE;gBACR,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,IAAI;aACpB;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/adapters/nodejs/adapter.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Fridayy - Node.js Framework Adapter
+ * Discovers endpoints directly from Express / Fastify / Koa applications.
+ */
+import { BaseAdapter, AdapterScanContext, AdapterGenerationContext, AdapterExecutionContext } from '../base.js';
+import { FridayyToolDefinition, ToolExecutionResult } from '../../core/schema/types.js';
+export declare class NodeJsAdapter extends BaseAdapter {
+    readonly name = "nodejs";
+    readonly description = "Adapter for Express, Fastify, and Node.js web applications";
+    private scanner;
+    private restExecutor;
+    detect(context: AdapterScanContext): Promise<{
+        detected: boolean;
+        details?: any;
+    }>;
+    generateTools(context: AdapterGenerationContext): Promise<FridayyToolDefinition[]>;
+    executeTool(tool: FridayyToolDefinition, input: Record<string, any>, context?: AdapterExecutionContext): Promise<ToolExecutionResult>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapters/nodejs/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/adapters/nodejs/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EAEpB,MAAM,4BAA4B,CAAC;AAWpC,qBAAa,aAAc,SAAQ,WAAW;IAC5C,SAAgB,IAAI,YAAY;IAChC,SAAgB,WAAW,gEAAgE;IAE3F,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,YAAY,CAAuB;IAE9B,MAAM,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IA8BlF,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAgFlF,WAAW,CACtB,IAAI,EAAE,qBAAqB,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,mBAAmB,CAAC;CAmBhC"}

package/dist/adapters/nodejs/adapter.js

@@ -0,0 +1,135 @@
+/**
+ * Fridayy - Node.js Framework Adapter
+ * Discovers endpoints directly from Express / Fastify / Koa applications.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { BaseAdapter } from '../base.js';
+import { NodeJsScanner } from './ast-scanner.js';
+import { generateToolNameFromRoute } from '../../core/tool-generator/name-sanitizer.js';
+import { classifyOperation } from '../../core/permissions/classifier.js';
+import { buildToolDescription } from '../../core/tool-generator/description-builder.js';
+import { buildUnifiedInputSchema } from '../../core/schema/json-schema.js';
+import { defaultRestExecutor } from '../rest/executor.js';
+import { buildHttpRequest } from '../openapi/request-builder.js';
+import { AuthenticationManager } from '../../core/authentication/manager.js';
+import { defaultSecretResolver } from '../../core/authentication/secret-resolver.js';
+export class NodeJsAdapter extends BaseAdapter {
+    name = 'nodejs';
+    description = 'Adapter for Express, Fastify, and Node.js web applications';
+    scanner = new NodeJsScanner();
+    restExecutor = defaultRestExecutor;
+    async detect(context) {
+        const rootDir = context.rootDir;
+        const pkgJsonPath = path.resolve(rootDir, 'package.json');
+        let detectedFramework;
+        if (fs.existsSync(pkgJsonPath)) {
+            try {
+                const pkg = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf-8'));
+                const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+                if (allDeps.express)
+                    detectedFramework = 'express';
+                else if (allDeps.fastify)
+                    detectedFramework = 'fastify';
+                else if (allDeps.koa)
+                    detectedFramework = 'koa';
+                else if (allDeps['@nestjs/core'])
+                    detectedFramework = 'nestjs';
+            }
+            catch {
+                // ignore
+            }
+        }
+        const routes = await this.scanner.scanDirectory(rootDir, 50);
+        return {
+            detected: Boolean(detectedFramework || routes.length > 0),
+            details: {
+                framework: detectedFramework || (routes.length > 0 ? 'custom' : undefined),
+                discoveredRoutesCount: routes.length
+            }
+        };
+    }
+    async generateTools(context) {
+        const rootDir = context.rootDir || process.cwd();
+        const routes = await this.scanner.scanDirectory(rootDir);
+        const tools = [];
+        const usedToolNames = new Set();
+        const baseUrl = defaultSecretResolver.resolveBaseUrl(context.config?.source?.baseUrl) ||
+            'http://localhost:3000';
+        for (const r of routes) {
+            let toolName = generateToolNameFromRoute(r.method, r.path);
+            if (usedToolNames.has(toolName)) {
+                let suffix = 2;
+                while (usedToolNames.has(`${toolName}_${suffix}`))
+                    suffix++;
+                toolName = `${toolName}_${suffix}`;
+            }
+            usedToolNames.add(toolName);
+            const pathParams = r.pathParams.map(name => ({
+                name,
+                in: 'path',
+                required: true,
+                schema: { type: 'string' },
+                description: `Path parameter ${name}`
+            }));
+            const classification = classifyOperation({
+                method: r.method,
+                path: r.path,
+                name: toolName,
+                summary: r.description
+            }, context.config);
+            const description = buildToolDescription({
+                summary: r.description,
+                method: r.method,
+                path: r.path,
+                permissionType: classification.permissions.type,
+                risk: classification.risk
+            });
+            const inputSchema = buildUnifiedInputSchema({
+                parameters: { path: pathParams }
+            });
+            const tool = {
+                id: `tool_${toolName}`,
+                name: toolName,
+                description,
+                inputSchema,
+                source: {
+                    type: 'nodejs',
+                    method: r.method,
+                    path: r.path,
+                    baseUrl
+                },
+                parameters: {
+                    path: pathParams
+                },
+                permissions: classification.permissions,
+                risk: classification.risk,
+                status: classification.status,
+                metadata: {
+                    createdAt: new Date().toISOString(),
+                    autoGenerated: true,
+                    sourceFile: r.file,
+                    line: r.line
+                }
+            };
+            tools.push(tool);
+        }
+        return tools;
+    }
+    async executeTool(tool, input, context = {}) {
+        const authManager = new AuthenticationManager(context.config);
+        const baseUrl = defaultSecretResolver.resolveBaseUrl(context.config?.source?.baseUrl);
+        const preparedReq = buildHttpRequest(tool, input, baseUrl);
+        if (context.headers) {
+            Object.assign(preparedReq.headers, context.headers);
+        }
+        authManager.applyAuth(tool.authentication, {
+            headers: preparedReq.headers,
+            queryParams: {}
+        });
+        return await this.restExecutor.execute(preparedReq, tool.name, {
+            timeoutMs: context.timeoutMs
+        });
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/adapters/nodejs/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/adapters/nodejs/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,WAAW,EAIZ,MAAM,YAAY,CAAC;AAMpB,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8CAA8C,CAAC;AAErF,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5B,IAAI,GAAG,QAAQ,CAAC;IAChB,WAAW,GAAG,4DAA4D,CAAC;IAEnF,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;IAC9B,YAAY,GAAG,mBAAmB,CAAC;IAEpC,KAAK,CAAC,MAAM,CAAC,OAA2B;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAE1D,IAAI,iBAAqC,CAAC;QAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC9D,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;gBAEhE,IAAI,OAAO,CAAC,OAAO;oBAAE,iBAAiB,GAAG,SAAS,CAAC;qBAC9C,IAAI,OAAO,CAAC,OAAO;oBAAE,iBAAiB,GAAG,SAAS,CAAC;qBACnD,IAAI,OAAO,CAAC,GAAG;oBAAE,iBAAiB,GAAG,KAAK,CAAC;qBAC3C,IAAI,OAAO,CAAC,cAAc,CAAC;oBAAE,iBAAiB,GAAG,QAAQ,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAE7D,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YACzD,OAAO,EAAE;gBACP,SAAS,EAAE,iBAAiB,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1E,qBAAqB,EAAE,MAAM,CAAC,MAAM;aACrC;SACF,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,OAAiC;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QAExC,MAAM,OAAO,GACX,qBAAqB,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;YACrE,uBAAuB,CAAC;QAE1B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,QAAQ,GAAG,yBAAyB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChC,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC;oBAAE,MAAM,EAAE,CAAC;gBAC5D,QAAQ,GAAG,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC;YACrC,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE5B,MAAM,UAAU,GAA0B,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClE,IAAI;gBACJ,EAAE,EAAE,MAAM;gBACV,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,WAAW,EAAE,kBAAkB,IAAI,EAAE;aACtC,CAAC,CAAC,CAAC;YAEJ,MAAM,cAAc,GAAG,iBAAiB,CACtC;gBACE,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC,CAAC,WAAW;aACvB,EACD,OAAO,CAAC,MAAM,CACf,CAAC;YAEF,MAAM,WAAW,GAAG,oBAAoB,CAAC;gBACvC,OAAO,EAAE,CAAC,CAAC,WAAW;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,cAAc,EAAE,cAAc,CAAC,WAAW,CAAC,IAAI;gBAC/C,IAAI,EAAE,cAAc,CAAC,IAAI;aAC1B,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,uBAAuB,CAAC;gBAC1C,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;aACjC,CAAC,CAAC;YAEH,MAAM,IAAI,GAA0B;gBAClC,EAAE,EAAE,QAAQ,QAAQ,EAAE;gBACtB,IAAI,EAAE,QAAQ;gBACd,WAAW;gBACX,WAAW;gBACX,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO;iBACR;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,UAAU;iBACjB;gBACD,WAAW,EAAE,cAAc,CAAC,WAAW;gBACvC,IAAI,EAAE,cAAc,CAAC,IAAI;gBACzB,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,QAAQ,EAAE;oBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,aAAa,EAAE,IAAI;oBACnB,UAAU,EAAE,CAAC,CAAC,IAAI;oBAClB,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb;aACF,CAAC;YAEF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,IAA2B,EAC3B,KAA0B,EAC1B,UAAmC,EAAE;QAErC,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,qBAAqB,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEtF,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAE3D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE;YACzC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,WAAW,EAAE,EAAE;SAChB,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;YAC7D,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/adapters/nodejs/ast-scanner.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Fridayy - Node.js Route Scanner
+ * Scans JavaScript and TypeScript files for Express/Fastify/Koa route declarations.
+ */
+export interface DiscoveredRoute {
+    method: string;
+    path: string;
+    file: string;
+    line: number;
+    description?: string;
+    pathParams: string[];
+}
+export declare class NodeJsScanner {
+    /**
+     * Scans a directory recursively for Express/Fastify routes.
+     */
+    scanDirectory(rootDir: string, maxFiles?: number): Promise<DiscoveredRoute[]>;
+    scanFileContent(content: string, filePath: string): DiscoveredRoute[];
+    private collectSourceFiles;
+}
+//# sourceMappingURL=ast-scanner.d.ts.map

package/dist/adapters/nodejs/ast-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ast-scanner.d.ts","sourceRoot":"","sources":["../../../src/adapters/nodejs/ast-scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAID,qBAAa,aAAa;IACxB;;OAEG;IACU,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAiBhF,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,EAAE;IAkD5E,OAAO,CAAC,kBAAkB;CA8B3B"}