fridayy 1.0.0

package/dist/security/audit-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.js","sourceRoot":"","sources":["../../src/security/audit-logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAmB9C,MAAM,OAAO,WAAW;IACd,WAAW,CAAU;IACrB,WAAW,CAAU;IACrB,cAAc,CAAU;IAEhC,YAAY,UAAqF,EAAE;QACjG,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAC/C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;QAEtD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACI,GAAG,CAAC,KAAoB;QAC7B,MAAM,cAAc,GAAkB;YACpC,GAAG,KAAK;YACR,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;SAClE,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAElD,WAAW;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,0DAA0D;YAC5D,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO;gBACtC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBACxB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,eAAe,GAAG,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE5F,OAAO,CAAC,KAAK,CACX,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,UAAU,IAAI,QAAQ,EAAE,CACpH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/security/rate-limiter.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Fridayy - Rate Limiting Engine
+ * Protects backend services from runaway agent loops using a sliding window.
+ */
+export interface RateLimitConfig {
+    maxRequests: number;
+    windowSeconds: number;
+}
+export declare class RateLimiter {
+    private requestLog;
+    private defaultConfig;
+    constructor(defaultConfig?: RateLimitConfig);
+    /**
+     * Checks if a request is allowed under the rate limit.
+     * Returns { allowed: true } or { allowed: false, retryAfterSeconds: number }.
+     */
+    checkLimit(key: string, customLimit?: RateLimitConfig): {
+        allowed: boolean;
+        retryAfterSeconds?: number;
+        currentCount: number;
+    };
+    /**
+     * Cleans up expired entries periodically to prevent memory growth.
+     */
+    cleanup(): void;
+    reset(key?: string): void;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/security/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/security/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,UAAU,CAAoC;IACtD,OAAO,CAAC,aAAa,CAAkB;gBAE3B,aAAa,GAAE,eAAwD;IAInF;;;OAGG;IACI,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,eAAe,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE;IA+BrI;;OAEG;IACI,OAAO,IAAI,IAAI;IAYf,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;CAOjC"}

package/dist/security/rate-limiter.js

@@ -0,0 +1,64 @@
+/**
+ * Fridayy - Rate Limiting Engine
+ * Protects backend services from runaway agent loops using a sliding window.
+ */
+export class RateLimiter {
+    requestLog = new Map();
+    defaultConfig;
+    constructor(defaultConfig = { maxRequests: 60, windowSeconds: 60 }) {
+        this.defaultConfig = defaultConfig;
+    }
+    /**
+     * Checks if a request is allowed under the rate limit.
+     * Returns { allowed: true } or { allowed: false, retryAfterSeconds: number }.
+     */
+    checkLimit(key, customLimit) {
+        const config = customLimit || this.defaultConfig;
+        const now = Date.now();
+        const windowMs = config.windowSeconds * 1000;
+        const cutoff = now - windowMs;
+        const timestamps = this.requestLog.get(key) || [];
+        const validTimestamps = timestamps.filter(t => t > cutoff);
+        if (validTimestamps.length >= config.maxRequests) {
+            const oldestValid = validTimestamps[0];
+            const retryAfterMs = oldestValid + windowMs - now;
+            const retryAfterSeconds = Math.max(1, Math.ceil(retryAfterMs / 1000));
+            this.requestLog.set(key, validTimestamps);
+            return {
+                allowed: false,
+                retryAfterSeconds,
+                currentCount: validTimestamps.length
+            };
+        }
+        validTimestamps.push(now);
+        this.requestLog.set(key, validTimestamps);
+        return {
+            allowed: true,
+            currentCount: validTimestamps.length
+        };
+    }
+    /**
+     * Cleans up expired entries periodically to prevent memory growth.
+     */
+    cleanup() {
+        const now = Date.now();
+        for (const [key, timestamps] of this.requestLog.entries()) {
+            const valid = timestamps.filter(t => t > now - 3600000); // 1 hour max
+            if (valid.length === 0) {
+                this.requestLog.delete(key);
+            }
+            else {
+                this.requestLog.set(key, valid);
+            }
+        }
+    }
+    reset(key) {
+        if (key) {
+            this.requestLog.delete(key);
+        }
+        else {
+            this.requestLog.clear();
+        }
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/security/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/security/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,OAAO,WAAW;IACd,UAAU,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC9C,aAAa,CAAkB;IAEvC,YAAY,gBAAiC,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACjF,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;;OAGG;IACI,UAAU,CAAC,GAAW,EAAE,WAA6B;QAC1D,MAAM,MAAM,GAAG,WAAW,IAAI,IAAI,CAAC,aAAa,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;QAE9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAE3D,IAAI,eAAe,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,GAAG,CAAC;YAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC;YAEtE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,iBAAiB;gBACjB,YAAY,EAAE,eAAe,CAAC,MAAM;aACrC,CAAC;QACJ,CAAC;QAED,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAE1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,eAAe,CAAC,MAAM;SACrC,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,OAAO;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa;YACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,GAAY;QACvB,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;CACF"}

package/dist/security/sanitizer.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Fridayy - Data & Secret Sanitizer
+ * Redacts passwords, bearer tokens, and sensitive headers from logs, errors, and responses.
+ */
+/**
+ * Checks if a key name matches common sensitive parameter naming patterns.
+ */
+export declare function isSensitiveKey(key: string): boolean;
+/**
+ * Deeply sanitizes an object, replacing sensitive values with '[REDACTED]'.
+ */
+export declare function sanitizeData(data: any): any;
+/**
+ * Sanitizes HTTP headers.
+ */
+export declare function sanitizeHeaders(headers: Record<string, string>): Record<string, string>;
+//# sourceMappingURL=sanitizer.d.ts.map

package/dist/security/sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../../src/security/sanitizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,GAAG,GAAG,GAAG,CA8B3C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWvF"}

package/dist/security/sanitizer.js

@@ -0,0 +1,70 @@
+/**
+ * Fridayy - Data & Secret Sanitizer
+ * Redacts passwords, bearer tokens, and sensitive headers from logs, errors, and responses.
+ */
+const SENSITIVE_KEY_PATTERNS = [
+    /password/i,
+    /secret/i,
+    /token/i,
+    /api[_-]?key/i,
+    /auth/i,
+    /credential/i,
+    /private[_-]?key/i,
+    /bearer/i,
+    /cookie/i,
+    /session/i
+];
+/**
+ * Checks if a key name matches common sensitive parameter naming patterns.
+ */
+export function isSensitiveKey(key) {
+    return SENSITIVE_KEY_PATTERNS.some(pattern => pattern.test(key));
+}
+/**
+ * Deeply sanitizes an object, replacing sensitive values with '[REDACTED]'.
+ */
+export function sanitizeData(data) {
+    if (data === null || data === undefined) {
+        return data;
+    }
+    if (typeof data === 'string') {
+        // Check if looks like a JWT or Bearer token
+        if (data.startsWith('Bearer ') || data.startsWith('bearer ')) {
+            return 'Bearer [REDACTED]';
+        }
+        return data;
+    }
+    if (Array.isArray(data)) {
+        return data.map(item => sanitizeData(item));
+    }
+    if (typeof data === 'object') {
+        const clean = {};
+        for (const [key, value] of Object.entries(data)) {
+            if (isSensitiveKey(key)) {
+                clean[key] = '[REDACTED]';
+            }
+            else {
+                clean[key] = sanitizeData(value);
+            }
+        }
+        return clean;
+    }
+    return data;
+}
+/**
+ * Sanitizes HTTP headers.
+ */
+export function sanitizeHeaders(headers) {
+    const clean = {};
+    for (const [key, val] of Object.entries(headers)) {
+        const lower = key.toLowerCase();
+        if (lower === 'authorization' || lower === 'x-api-key' || lower === 'cookie' || isSensitiveKey(key)) {
+            clean[key] = '[REDACTED]';
+        }
+        else {
+            clean[key] = val;
+        }
+    }
+    return clean;
+}
+//# sourceMappingURL=sanitizer.js.map

package/dist/security/sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.js","sourceRoot":"","sources":["../../src/security/sanitizer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,sBAAsB,GAAG;IAC7B,WAAW;IACX,SAAS;IACT,QAAQ;IACR,cAAc;IACd,OAAO;IACP,aAAa;IACb,kBAAkB;IAClB,SAAS;IACT,SAAS;IACT,UAAU;CACX,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAS;IACpC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,4CAA4C;QAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAwB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACpG,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -0,0 +1,77 @@
+{
+  "name": "fridayy",
+  "version": "1.0.0",
+  "description": "Universal Application-to-MCP Platform — Turn existing applications and APIs into AI-ready MCP tools",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "type": "module",
+  "bin": {
+    "fridayy": "bin/fridayy.js"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "watch": "tsc --watch",
+    "prepublishOnly": "npm run build && npm test",
+    "start": "node bin/fridayy.js start",
+    "dev": "tsx src/cli/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "example:server": "tsx examples/ecommerce/api.ts",
+    "example:demo": "tsx examples/ecommerce/client-demo.ts"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Sabari-Vasan-SM/fridayy.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Sabari-Vasan-SM/fridayy/issues"
+  },
+  "homepage": "https://github.com/Sabari-Vasan-SM/fridayy#readme",
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "ai",
+    "llm",
+    "claude",
+    "chatgpt",
+    "gemini",
+    "cursor",
+    "openapi",
+    "swagger",
+    "rest",
+    "tools",
+    "agent"
+  ],
+  "author": "Sabari Vasan",
+  "license": "MIT",
+  "dependencies": {
+    "@inquirer/prompts": "^7.3.2",
+    "@modelcontextprotocol/sdk": "^1.6.1",
+    "chalk": "^5.4.1",
+    "cli-table3": "^0.6.5",
+    "commander": "^13.1.0",
+    "dotenv": "^16.4.7",
+    "express": "^4.21.2",
+    "ora": "^8.2.0",
+    "undici": "^7.4.0",
+    "yaml": "^2.7.0",
+    "zod": "^3.24.2",
+    "zod-to-json-schema": "^3.24.3"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.13.9",
+    "tsx": "^4.19.3",
+    "typescript": "^5.7.3",
+    "vitest": "^3.0.7"
+  }
+}