fridayy 1.0.0

package/dist/mcp/server/fridayy-server.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Fridayy - Official Model Context Protocol (MCP) Server
+ * Implements standard MCP tools, resources, and prompts over Stdio and SSE transports.
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { FridayyConfig, FridayyToolDefinition } from '../../core/schema/types.js';
+import { ToolRegistry } from '../tools/tool-registry.js';
+import { AdapterRegistry } from '../../adapters/registry.js';
+export interface FridayyServerOptions {
+    config: FridayyConfig;
+    tools: FridayyToolDefinition[];
+    adapterRegistry?: AdapterRegistry;
+}
+export declare class FridayyMcpServer {
+    private server;
+    private config;
+    private toolRegistry;
+    private toolHandler;
+    private resourceRegistry;
+    private promptRegistry;
+    private sseTransports;
+    constructor(options: FridayyServerOptions);
+    private registerHandlers;
+    /**
+     * Starts the server on Stdio transport (default for Claude Desktop, Cursor, local tools).
+     */
+    startStdio(): Promise<void>;
+    /**
+     * Starts the server on HTTP / SSE transport (for remote or network clients).
+     */
+    startSse(port?: number, host?: string): Promise<{
+        app: any;
+        close: () => Promise<void>;
+    }>;
+    getToolRegistry(): ToolRegistry;
+    getUnderlyingServer(): Server;
+}
+//# sourceMappingURL=fridayy-server.d.ts.map

package/dist/mcp/server/fridayy-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fridayy-server.d.ts","sourceRoot":"","sources":["../../../src/mcp/server/fridayy-server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAYnE,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAIzD,OAAO,EAAE,eAAe,EAA0B,MAAM,4BAA4B,CAAC;AAErF,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,aAAa,CAA8C;gBAEvD,OAAO,EAAE,oBAAoB;IA8BzC,OAAO,CAAC,gBAAgB;IA4CxB;;OAEG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAKxC;;OAEG;IACU,QAAQ,CAAC,IAAI,SAAO,EAAE,IAAI,SAAc,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;IAmDlG,eAAe,IAAI,YAAY;IAI/B,mBAAmB,IAAI,MAAM;CAGrC"}

package/dist/mcp/server/fridayy-server.js

@@ -0,0 +1,143 @@
+/**
+ * Fridayy - Official Model Context Protocol (MCP) Server
+ * Implements standard MCP tools, resources, and prompts over Stdio and SSE transports.
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js';
+import { ListToolsRequestSchema, CallToolRequestSchema, ListResourcesRequestSchema, ReadResourceRequestSchema, ListPromptsRequestSchema, GetPromptRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import express from 'express';
+import { ToolRegistry } from '../tools/tool-registry.js';
+import { ToolHandler } from '../tools/tool-handler.js';
+import { ResourceRegistry } from '../resources/resource-registry.js';
+import { PromptRegistry } from '../prompts/prompt-registry.js';
+import { defaultAdapterRegistry } from '../../adapters/registry.js';
+export class FridayyMcpServer {
+    server;
+    config;
+    toolRegistry;
+    toolHandler;
+    resourceRegistry;
+    promptRegistry;
+    sseTransports = new Map();
+    constructor(options) {
+        this.config = options.config;
+        const serverName = options.config.server?.name || options.config.name || 'fridayy-mcp-server';
+        const serverVersion = options.config.server?.version || options.config.version || '1.0.0';
+        this.server = new Server({
+            name: serverName,
+            version: serverVersion
+        }, {
+            capabilities: {
+                tools: {},
+                resources: {},
+                prompts: {}
+            }
+        });
+        this.toolRegistry = new ToolRegistry(options.tools, options.config);
+        this.toolHandler = new ToolHandler({
+            config: options.config,
+            adapterRegistry: options.adapterRegistry || defaultAdapterRegistry
+        });
+        this.resourceRegistry = new ResourceRegistry(this.toolRegistry, options.config);
+        this.promptRegistry = new PromptRegistry();
+        this.registerHandlers();
+    }
+    registerHandlers() {
+        // 1. List Tools Handler
+        this.server.setRequestHandler(ListToolsRequestSchema, async () => {
+            const exposedTools = this.toolRegistry.getExposedTools();
+            return {
+                tools: exposedTools.map(tool => ({
+                    name: tool.name,
+                    description: tool.description,
+                    inputSchema: tool.inputSchema
+                }))
+            };
+        });
+        // 2. Call Tool Handler
+        this.server.setRequestHandler(CallToolRequestSchema, async (request) => {
+            const { name, arguments: args } = request.params;
+            return await this.toolHandler.handleCall(name, args || {}, this.toolRegistry);
+        });
+        // 3. List Resources Handler
+        this.server.setRequestHandler(ListResourcesRequestSchema, async () => {
+            return {
+                resources: this.resourceRegistry.listResources()
+            };
+        });
+        // 4. Read Resource Handler
+        this.server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
+            return this.resourceRegistry.readResource(request.params.uri);
+        });
+        // 5. List Prompts Handler
+        this.server.setRequestHandler(ListPromptsRequestSchema, async () => {
+            return {
+                prompts: this.promptRegistry.listPrompts()
+            };
+        });
+        // 6. Get Prompt Handler
+        this.server.setRequestHandler(GetPromptRequestSchema, async (request) => {
+            return this.promptRegistry.getPrompt(request.params.name, request.params.arguments);
+        });
+    }
+    /**
+     * Starts the server on Stdio transport (default for Claude Desktop, Cursor, local tools).
+     */
+    async startStdio() {
+        const transport = new StdioServerTransport();
+        await this.server.connect(transport);
+    }
+    /**
+     * Starts the server on HTTP / SSE transport (for remote or network clients).
+     */
+    async startSse(port = 3000, host = 'localhost') {
+        const app = express();
+        app.use(express.json());
+        // SSE endpoint
+        app.get('/sse', async (req, res) => {
+            const transport = new SSEServerTransport('/messages', res);
+            const sessionId = transport.sessionId;
+            this.sseTransports.set(sessionId, transport);
+            req.on('close', () => {
+                this.sseTransports.delete(sessionId);
+            });
+            await this.server.connect(transport);
+        });
+        // Message receiver endpoint
+        app.post('/messages', async (req, res) => {
+            const sessionId = req.query.sessionId;
+            const transport = this.sseTransports.get(sessionId);
+            if (!transport) {
+                res.status(404).json({ error: 'Session not found' });
+                return;
+            }
+            await transport.handlePostMessage(req, res);
+        });
+        // Health endpoint
+        app.get('/health', (req, res) => {
+            res.json({
+                status: 'healthy',
+                server: this.config.server?.name || this.config.name,
+                exposedToolsCount: this.toolRegistry.getExposedTools().length
+            });
+        });
+        return new Promise((resolve) => {
+            const serverInstance = app.listen(port, host, () => {
+                resolve({
+                    app,
+                    close: async () => {
+                        await new Promise((r) => serverInstance.close(() => r()));
+                    }
+                });
+            });
+        });
+    }
+    getToolRegistry() {
+        return this.toolRegistry;
+    }
+    getUnderlyingServer() {
+        return this.server;
+    }
+}
+//# sourceMappingURL=fridayy-server.js.map

package/dist/mcp/server/fridayy-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fridayy-server.js","sourceRoot":"","sources":["../../../src/mcp/server/fridayy-server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAmB,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAQrF,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAS;IACf,MAAM,CAAgB;IACtB,YAAY,CAAe;IAC3B,WAAW,CAAc;IACzB,gBAAgB,CAAmB;IACnC,cAAc,CAAiB;IAC/B,aAAa,GAAoC,IAAI,GAAG,EAAE,CAAC;IAEnE,YAAY,OAA6B;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,oBAAoB,CAAC;QAC9F,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC;QAE1F,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CACtB;YACE,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,aAAa;SACvB,EACD;YACE,YAAY,EAAE;gBACZ,KAAK,EAAE,EAAE;gBACT,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,EAAE;aACZ;SACF,CACF,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC;YACjC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,sBAAsB;SACnE,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;QAE3C,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAEO,gBAAgB;QACtB,wBAAwB;QACxB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;YACzD,OAAO;gBACL,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YACnE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YACjD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACnE,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE;aACjD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,2BAA2B;QAC3B,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YACvE,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;YACjE,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE;aAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,wBAAwB;QACxB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YACpE,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU;QACrB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,WAAW;QACnD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAExB,eAAe;QACf,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;YACtC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAE7C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,4BAA4B;QAC5B,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACvC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAmB,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAEpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,kBAAkB;QAClB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC9B,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI;gBACpD,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC,MAAM;aAC9D,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBACjD,OAAO,CAAC;oBACN,GAAG;oBACH,KAAK,EAAE,KAAK,IAAI,EAAE;wBAChB,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAClE,CAAC;iBACF,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,eAAe;QACpB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEM,mBAAmB;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}

package/dist/mcp/tools/tool-handler.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Fridayy - MCP Tool Call Invocation Handler
+ * Enforces permissions, validates input, checks rate limits, executes adapters, and logs audits.
+ */
+import { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import { FridayyConfig } from '../../core/schema/types.js';
+import { RateLimiter } from '../../security/rate-limiter.js';
+import { AuditLogger } from '../../security/audit-logger.js';
+import { AdapterRegistry } from '../../adapters/registry.js';
+import { ToolRegistry } from './tool-registry.js';
+export interface ToolHandlerOptions {
+    config?: FridayyConfig;
+    adapterRegistry?: AdapterRegistry;
+    rateLimiter?: RateLimiter;
+    auditLogger?: AuditLogger;
+}
+export declare class ToolHandler {
+    private config?;
+    private enforcer;
+    private adapterRegistry;
+    private rateLimiter;
+    private auditLogger;
+    constructor(options?: ToolHandlerOptions);
+    /**
+     * Handles a tool call from an MCP client.
+     */
+    handleCall(toolName: string, args: Record<string, any> | undefined, toolRegistry: ToolRegistry): Promise<CallToolResult>;
+}
+//# sourceMappingURL=tool-handler.d.ts.map

package/dist/mcp/tools/tool-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-handler.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/tool-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAEL,aAAa,EAEd,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,eAAe,EAA0B,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAC,CAAgB;IAC/B,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;gBAErB,OAAO,GAAE,kBAAuB;IAe5C;;OAEG;IACU,UAAU,CACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,YAAK,EAC9B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,cAAc,CAAC;CAsL3B"}

package/dist/mcp/tools/tool-handler.js

@@ -0,0 +1,206 @@
+/**
+ * Fridayy - MCP Tool Call Invocation Handler
+ * Enforces permissions, validates input, checks rate limits, executes adapters, and logs audits.
+ */
+import { PermissionEnforcer } from '../../core/permissions/enforcer.js';
+import { validateToolInput } from '../../core/validation/validator.js';
+import { RateLimiter } from '../../security/rate-limiter.js';
+import { AuditLogger } from '../../security/audit-logger.js';
+import { defaultAdapterRegistry } from '../../adapters/registry.js';
+export class ToolHandler {
+    config;
+    enforcer;
+    adapterRegistry;
+    rateLimiter;
+    auditLogger;
+    constructor(options = {}) {
+        this.config = options.config;
+        this.enforcer = new PermissionEnforcer(options.config);
+        this.adapterRegistry = options.adapterRegistry || defaultAdapterRegistry;
+        this.rateLimiter =
+            options.rateLimiter ||
+                new RateLimiter(options.config?.security?.rateLimit || { maxRequests: 60, windowSeconds: 60 });
+        this.auditLogger =
+            options.auditLogger ||
+                new AuditLogger({
+                    logFilePath: options.config?.logging?.auditLogPath,
+                    maskSecrets: options.config?.logging?.maskSecrets ?? true
+                });
+    }
+    /**
+     * Handles a tool call from an MCP client.
+     */
+    async handleCall(toolName, args = {}, toolRegistry) {
+        const startTime = Date.now();
+        const tool = toolRegistry.get(toolName);
+        // 1. Check if tool exists
+        if (!tool) {
+            this.auditLogger.log({
+                timestamp: new Date().toISOString(),
+                toolName,
+                input: args,
+                result: { success: false, durationMs: Date.now() - startTime, error: 'TOOL_NOT_FOUND' }
+            });
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            error: 'TOOL_NOT_FOUND',
+                            message: `Tool "${toolName}" is not registered in Fridayy.`
+                        }, null, 2)
+                    }
+                ]
+            };
+        }
+        // 2. Permission & Approval Enforcement
+        try {
+            this.enforcer.validateExecution(tool);
+        }
+        catch (permErr) {
+            this.auditLogger.log({
+                timestamp: new Date().toISOString(),
+                toolName,
+                input: args,
+                result: { success: false, durationMs: Date.now() - startTime, error: permErr.code || permErr.message }
+            });
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            error: permErr.code || 'PERMISSION_DENIED',
+                            message: permErr.message,
+                            toolStatus: tool.status,
+                            risk: tool.risk,
+                            permissions: tool.permissions
+                        }, null, 2)
+                    }
+                ]
+            };
+        }
+        // 3. Rate Limit Check
+        const rateLimitCheck = this.rateLimiter.checkLimit(toolName, tool.rateLimit);
+        if (!rateLimitCheck.allowed) {
+            this.auditLogger.log({
+                timestamp: new Date().toISOString(),
+                toolName,
+                input: args,
+                result: { success: false, durationMs: Date.now() - startTime, error: 'RATE_LIMIT_EXCEEDED' }
+            });
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            error: 'RATE_LIMIT_EXCEEDED',
+                            message: `Rate limit exceeded for tool "${toolName}". Retry in ${rateLimitCheck.retryAfterSeconds}s.`
+                        }, null, 2)
+                    }
+                ]
+            };
+        }
+        // 4. Input Validation
+        const validation = validateToolInput(tool, args);
+        if (!validation.valid) {
+            this.auditLogger.log({
+                timestamp: new Date().toISOString(),
+                toolName,
+                input: args,
+                result: { success: false, durationMs: Date.now() - startTime, error: 'INVALID_INPUT' }
+            });
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            error: 'INVALID_INPUT',
+                            message: `Invalid parameters provided for tool "${toolName}"`,
+                            details: validation.errors
+                        }, null, 2)
+                    }
+                ]
+            };
+        }
+        // 5. Select Adapter
+        const sourceType = tool.source.type || 'openapi';
+        const adapter = this.adapterRegistry.get(sourceType);
+        if (!adapter) {
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            error: 'ADAPTER_NOT_FOUND',
+                            message: `No adapter registered for source type "${sourceType}"`
+                        }, null, 2)
+                    }
+                ]
+            };
+        }
+        // 6. Execute Tool via Adapter
+        try {
+            const result = await adapter.executeTool(tool, args, {
+                config: this.config
+            });
+            const durationMs = Date.now() - startTime;
+            this.auditLogger.log({
+                timestamp: new Date().toISOString(),
+                toolName,
+                input: args,
+                result: {
+                    success: result.success,
+                    statusCode: result.metadata?.statusCode,
+                    durationMs,
+                    error: result.error?.message
+                }
+            });
+            if (!result.success) {
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: 'text',
+                            text: JSON.stringify(result.error || { message: 'Execution failed' }, null, 2)
+                        }
+                    ]
+                };
+            }
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: typeof result.data === 'string' ? result.data : JSON.stringify(result.data, null, 2)
+                    }
+                ]
+            };
+        }
+        catch (execErr) {
+            const durationMs = Date.now() - startTime;
+            this.auditLogger.log({
+                timestamp: new Date().toISOString(),
+                toolName,
+                input: args,
+                result: { success: false, durationMs, error: execErr.message }
+            });
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            error: 'EXECUTION_ERROR',
+                            message: execErr.message || 'An unexpected error occurred during execution'
+                        }, null, 2)
+                    }
+                ]
+            };
+        }
+    }
+}
+//# sourceMappingURL=tool-handler.js.map

package/dist/mcp/tools/tool-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-handler.js","sourceRoot":"","sources":["../../../src/mcp/tools/tool-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAmB,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAUrF,MAAM,OAAO,WAAW;IACd,MAAM,CAAiB;IACvB,QAAQ,CAAqB;IAC7B,eAAe,CAAkB;IACjC,WAAW,CAAc;IACzB,WAAW,CAAc;IAEjC,YAAY,UAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,sBAAsB,CAAC;QACzE,IAAI,CAAC,WAAW;YACd,OAAO,CAAC,WAAW;gBACnB,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QACjG,IAAI,CAAC,WAAW;YACd,OAAO,CAAC,WAAW;gBACnB,IAAI,WAAW,CAAC;oBACd,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY;oBAClD,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,IAAI,IAAI;iBAC1D,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CACrB,QAAgB,EAChB,OAA4B,EAAE,EAC9B,YAA0B;QAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,0BAA0B;QAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE;aACxF,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,KAAK,EAAE,gBAAgB;4BACvB,OAAO,EAAE,SAAS,QAAQ,iCAAiC;yBAC5D,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ;iBACF;aACF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,OAAY,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE;aACvG,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,mBAAmB;4BAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,UAAU,EAAE,IAAI,CAAC,MAAM;4BACvB,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,WAAW,EAAE,IAAI,CAAC,WAAW;yBAC9B,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ;iBACF;aACF,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE;aAC7F,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,KAAK,EAAE,qBAAqB;4BAC5B,OAAO,EAAE,iCAAiC,QAAQ,eAAe,cAAc,CAAC,iBAAiB,IAAI;yBACtG,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ;iBACF;aACF,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE;aACvF,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,KAAK,EAAE,eAAe;4BACtB,OAAO,EAAE,yCAAyC,QAAQ,GAAG;4BAC7D,OAAO,EAAE,UAAU,CAAC,MAAM;yBAC3B,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ;iBACF;aACF,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAErD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,KAAK,EAAE,mBAAmB;4BAC1B,OAAO,EAAE,0CAA0C,UAAU,GAAG;yBACjE,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ;iBACF;aACF,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAwB,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE;gBACxE,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE;oBACN,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU;oBACvC,UAAU;oBACV,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO;iBAC7B;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;yBAC/E;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC3F;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,OAAY,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ;gBACR,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE;aAC/D,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,KAAK,EAAE,iBAAiB;4BACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,+CAA+C;yBAC5E,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/mcp/tools/tool-registry.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Fridayy - Tool Registry for MCP Server
+ * Manages active tools, visibility filtering, and runtime lookups.
+ */
+import { FridayyToolDefinition, FridayyConfig } from '../../core/schema/types.js';
+export declare class ToolRegistry {
+    private toolsMap;
+    private enforcer;
+    constructor(tools?: FridayyToolDefinition[], config?: FridayyConfig);
+    setTools(tools: FridayyToolDefinition[]): void;
+    register(tool: FridayyToolDefinition): void;
+    get(name: string): FridayyToolDefinition | undefined;
+    getAll(): FridayyToolDefinition[];
+    /**
+     * Returns only tools that are approved and allowed to be exposed to MCP clients.
+     */
+    getExposedTools(): FridayyToolDefinition[];
+    size(): number;
+}
+//# sourceMappingURL=tool-registry.d.ts.map

package/dist/mcp/tools/tool-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/tool-registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAGlF,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAiD;IACjE,OAAO,CAAC,QAAQ,CAAqB;gBAEzB,KAAK,GAAE,qBAAqB,EAAO,EAAE,MAAM,CAAC,EAAE,aAAa;IAKhE,QAAQ,CAAC,KAAK,EAAE,qBAAqB,EAAE,GAAG,IAAI;IAO9C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI;IAI3C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS;IAIpD,MAAM,IAAI,qBAAqB,EAAE;IAIxC;;OAEG;IACI,eAAe,IAAI,qBAAqB,EAAE;IAI1C,IAAI,IAAI,MAAM;CAGtB"}

package/dist/mcp/tools/tool-registry.js

@@ -0,0 +1,38 @@
+/**
+ * Fridayy - Tool Registry for MCP Server
+ * Manages active tools, visibility filtering, and runtime lookups.
+ */
+import { PermissionEnforcer } from '../../core/permissions/enforcer.js';
+export class ToolRegistry {
+    toolsMap = new Map();
+    enforcer;
+    constructor(tools = [], config) {
+        this.enforcer = new PermissionEnforcer(config);
+        this.setTools(tools);
+    }
+    setTools(tools) {
+        this.toolsMap.clear();
+        for (const tool of tools) {
+            this.toolsMap.set(tool.name, tool);
+        }
+    }
+    register(tool) {
+        this.toolsMap.set(tool.name, tool);
+    }
+    get(name) {
+        return this.toolsMap.get(name);
+    }
+    getAll() {
+        return Array.from(this.toolsMap.values());
+    }
+    /**
+     * Returns only tools that are approved and allowed to be exposed to MCP clients.
+     */
+    getExposedTools() {
+        return this.getAll().filter(tool => this.enforcer.isToolExposed(tool));
+    }
+    size() {
+        return this.toolsMap.size;
+    }
+}
+//# sourceMappingURL=tool-registry.js.map

package/dist/mcp/tools/tool-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.js","sourceRoot":"","sources":["../../../src/mcp/tools/tool-registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE,MAAM,OAAO,YAAY;IACf,QAAQ,GAAuC,IAAI,GAAG,EAAE,CAAC;IACzD,QAAQ,CAAqB;IAErC,YAAY,QAAiC,EAAE,EAAE,MAAsB;QACrE,IAAI,CAAC,QAAQ,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAEM,QAAQ,CAAC,KAA8B;QAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAEM,QAAQ,CAAC,IAA2B;QACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAEM,GAAG,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAEM,MAAM;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACI,eAAe;QACpB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF"}

package/dist/security/allowlist.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Fridayy - Allowlist & Denylist Filter
+ * Filters candidate tools using exact names and wildcard patterns.
+ */
+export declare function matchesPattern(name: string, pattern: string): boolean;
+export declare function isToolAllowed(toolName: string, options?: {
+    allowlist?: string[];
+    denylist?: string[];
+}): boolean;
+//# sourceMappingURL=allowlist.d.ts.map

package/dist/security/allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.d.ts","sourceRoot":"","sources":["../../src/security/allowlist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAOrE;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAC1D,OAAO,CAkBT"}

package/dist/security/allowlist.js

@@ -0,0 +1,30 @@
+/**
+ * Fridayy - Allowlist & Denylist Filter
+ * Filters candidate tools using exact names and wildcard patterns.
+ */
+export function matchesPattern(name, pattern) {
+    if (pattern === '*')
+        return true;
+    if (pattern === name)
+        return true;
+    // Simple wildcard match (e.g. "get_*", "*_user")
+    const regexPattern = '^' + pattern.replace(/\*/g, '.*') + '$';
+    return new RegExp(regexPattern).test(name);
+}
+export function isToolAllowed(toolName, options = {}) {
+    const { allowlist, denylist } = options;
+    // Denylist has highest priority
+    if (denylist && denylist.length > 0) {
+        for (const pattern of denylist) {
+            if (matchesPattern(toolName, pattern)) {
+                return false;
+            }
+        }
+    }
+    // If allowlist is defined and non-empty, tool must match at least one pattern
+    if (allowlist && allowlist.length > 0) {
+        return allowlist.some(pattern => matchesPattern(toolName, pattern));
+    }
+    return true;
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/security/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/security/allowlist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAC1D,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAElC,iDAAiD;IACjD,MAAM,YAAY,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;IAC9D,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,UAAyD,EAAE;IAE3D,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAExC,gCAAgC;IAChC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/security/audit-logger.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Fridayy - Structured Audit Logger
+ * Records tool invocations, inputs, execution duration, and outcomes with secret masking.
+ */
+export interface AuditLogEntry {
+    timestamp: string;
+    toolName: string;
+    input: any;
+    result?: {
+        success: boolean;
+        statusCode?: number;
+        durationMs: number;
+        error?: string;
+    };
+    client?: {
+        id?: string;
+        ip?: string;
+        userAgent?: string;
+    };
+}
+export declare class AuditLogger {
+    private logFilePath?;
+    private maskSecrets;
+    private consoleLogging;
+    constructor(options?: {
+        logFilePath?: string;
+        maskSecrets?: boolean;
+        consoleLogging?: boolean;
+    });
+    /**
+     * Logs a tool invocation event.
+     */
+    log(entry: AuditLogEntry): void;
+}
+//# sourceMappingURL=audit-logger.d.ts.map

package/dist/security/audit-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.d.ts","sourceRoot":"","sources":["../../src/security/audit-logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,GAAG,CAAC;IACX,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,MAAM,CAAC,EAAE;QACP,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,WAAW,CAAU;IAC7B,OAAO,CAAC,cAAc,CAAU;gBAEpB,OAAO,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAO;IAanG;;OAEG;IACI,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;CA6BvC"}

package/dist/security/audit-logger.js

@@ -0,0 +1,52 @@
+/**
+ * Fridayy - Structured Audit Logger
+ * Records tool invocations, inputs, execution duration, and outcomes with secret masking.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import chalk from 'chalk';
+import { sanitizeData } from './sanitizer.js';
+export class AuditLogger {
+    logFilePath;
+    maskSecrets;
+    consoleLogging;
+    constructor(options = {}) {
+        this.logFilePath = options.logFilePath;
+        this.maskSecrets = options.maskSecrets ?? true;
+        this.consoleLogging = options.consoleLogging ?? false;
+        if (this.logFilePath) {
+            const dir = path.dirname(path.resolve(this.logFilePath));
+            if (!fs.existsSync(dir)) {
+                fs.mkdirSync(dir, { recursive: true });
+            }
+        }
+    }
+    /**
+     * Logs a tool invocation event.
+     */
+    log(entry) {
+        const sanitizedEntry = {
+            ...entry,
+            input: this.maskSecrets ? sanitizeData(entry.input) : entry.input
+        };
+        const jsonString = JSON.stringify(sanitizedEntry);
+        // File log
+        if (this.logFilePath) {
+            try {
+                fs.appendFileSync(this.logFilePath, jsonString + '\n', 'utf-8');
+            }
+            catch (err) {
+                // Fail silently on logging error to avoid breaking server
+            }
+        }
+        // Console log (if enabled or debug mode)
+        if (this.consoleLogging) {
+            const statusText = entry.result?.success
+                ? chalk.green('SUCCESS')
+                : chalk.red(`FAILED (${entry.result?.error || 'Unknown error'})`);
+            const duration = entry.result?.durationMs ? chalk.gray(`${entry.result.durationMs}ms`) : '';
+            console.error(`${chalk.gray(entry.timestamp)} ${chalk.cyan('[AUDIT]')} ${chalk.bold(entry.toolName)} → ${statusText} ${duration}`);
+        }
+    }
+}
+//# sourceMappingURL=audit-logger.js.map