fridayy 1.0.0

package/dist/core/discovery/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Fridayy - Discovery Exports
+ */
+export * from './project-scanner.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/discovery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/discovery/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,sBAAsB,CAAC"}

package/dist/core/discovery/index.js

@@ -0,0 +1,5 @@
+/**
+ * Fridayy - Discovery Exports
+ */
+export * from './project-scanner.js';
+//# sourceMappingURL=index.js.map

package/dist/core/discovery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/discovery/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,sBAAsB,CAAC"}

package/dist/core/discovery/project-scanner.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Fridayy - Project Scanner & Capability Discovery
+ * Analyzes projects, repositories, and APIs to detect capabilities, specs, and auth mechanisms.
+ */
+import { ScanResult } from '../schema/types.js';
+import { AdapterRegistry } from '../../adapters/registry.js';
+export declare class ProjectScanner {
+    private adapterRegistry;
+    private openApiParser;
+    private nodeJsScanner;
+    constructor(adapterRegistry?: AdapterRegistry);
+    /**
+     * Scans a root directory and returns comprehensive capability detection results.
+     */
+    scan(rootDir?: string): Promise<ScanResult>;
+    private findOpenApiFiles;
+    private countEndpoints;
+}
+export declare const defaultProjectScanner: ProjectScanner;
+//# sourceMappingURL=project-scanner.d.ts.map

package/dist/core/discovery/project-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-scanner.d.ts","sourceRoot":"","sources":["../../../src/core/discovery/project-scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,UAAU,EAAiB,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAA0B,MAAM,4BAA4B,CAAC;AAIrF,qBAAa,cAAc;IACzB,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,aAAa,CAAuB;gBAEhC,eAAe,GAAE,eAAwC;IAIrE;;OAEG;IACU,IAAI,CAAC,OAAO,GAAE,MAAsB,GAAG,OAAO,CAAC,UAAU,CAAC;IAyGvE,OAAO,CAAC,gBAAgB;IAuCxB,OAAO,CAAC,cAAc;CAcvB;AAED,eAAO,MAAM,qBAAqB,gBAAuB,CAAC"}

package/dist/core/discovery/project-scanner.js

@@ -0,0 +1,174 @@
+/**
+ * Fridayy - Project Scanner & Capability Discovery
+ * Analyzes projects, repositories, and APIs to detect capabilities, specs, and auth mechanisms.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { defaultAdapterRegistry } from '../../adapters/registry.js';
+import { OpenApiParser } from '../../adapters/openapi/parser.js';
+import { NodeJsScanner } from '../../adapters/nodejs/ast-scanner.js';
+export class ProjectScanner {
+    adapterRegistry;
+    openApiParser = new OpenApiParser();
+    nodeJsScanner = new NodeJsScanner();
+    constructor(adapterRegistry = defaultAdapterRegistry) {
+        this.adapterRegistry = adapterRegistry;
+    }
+    /**
+     * Scans a root directory and returns comprehensive capability detection results.
+     */
+    async scan(rootDir = process.cwd()) {
+        const absRoot = path.resolve(rootDir);
+        // 1. Scan for OpenAPI files
+        const openApiFiles = this.findOpenApiFiles(absRoot);
+        const hasOpenApi = openApiFiles.length > 0;
+        const openApiSpecsDetails = [];
+        const authSchemesDetected = new Set();
+        let totalEndpoints = 0;
+        for (const relFile of openApiFiles) {
+            try {
+                const parsed = await this.openApiParser.parse(relFile, absRoot);
+                const opCount = this.countEndpoints(parsed.paths);
+                totalEndpoints += opCount;
+                openApiSpecsDetails.push({
+                    path: relFile,
+                    version: parsed.version,
+                    title: parsed.title,
+                    endpointsCount: opCount
+                });
+                // Collect security schemes
+                if (parsed.securityDefinitions) {
+                    for (const [schemeName, schemeDef] of Object.entries(parsed.securityDefinitions)) {
+                        authSchemesDetected.add(schemeName);
+                    }
+                }
+            }
+            catch {
+                // Skip unparseable specs
+            }
+        }
+        // 2. Scan for Node.js routes & frameworks
+        const pkgJsonPath = path.join(absRoot, 'package.json');
+        let hasNodeJs = false;
+        let nodeJsFramework = 'none';
+        if (fs.existsSync(pkgJsonPath)) {
+            hasNodeJs = true;
+            try {
+                const pkg = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf-8'));
+                const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+                if (allDeps.express)
+                    nodeJsFramework = 'express';
+                else if (allDeps.fastify)
+                    nodeJsFramework = 'fastify';
+                else if (allDeps.koa)
+                    nodeJsFramework = 'koa';
+                else if (allDeps['@nestjs/core'])
+                    nodeJsFramework = 'nestjs';
+                else
+                    nodeJsFramework = 'custom';
+            }
+            catch {
+                nodeJsFramework = 'custom';
+            }
+        }
+        const discoveredRoutes = await this.nodeJsScanner.scanDirectory(absRoot, 100);
+        if (discoveredRoutes.length > 0 && !hasOpenApi) {
+            totalEndpoints += discoveredRoutes.length;
+        }
+        // 3. Formulate recommended configuration
+        const projectName = path.basename(absRoot);
+        const recommendedConfig = {
+            name: projectName,
+            version: '1.0.0',
+            source: hasOpenApi
+                ? {
+                    type: 'openapi',
+                    path: openApiFiles[0]
+                }
+                : hasNodeJs && discoveredRoutes.length > 0
+                    ? {
+                        type: 'nodejs',
+                        rootDir: './'
+                    }
+                    : {
+                        type: 'openapi',
+                        path: './openapi.yaml'
+                    },
+            server: {
+                name: `${projectName}-mcp`,
+                version: '1.0.0',
+                transport: 'stdio'
+            },
+            security: {
+                requireApprovalForDestructive: true,
+                autoApproveRead: true,
+                autoApproveWrite: false
+            }
+        };
+        return {
+            hasOpenApi,
+            openApiFiles,
+            hasNodeJs,
+            nodeJsFramework,
+            discoveredEndpointsCount: totalEndpoints,
+            authSchemesDetected: Array.from(authSchemesDetected),
+            recommendedConfig,
+            details: {
+                openApiSpecs: openApiSpecsDetails,
+                routes: discoveredRoutes
+            }
+        };
+    }
+    findOpenApiFiles(rootDir) {
+        const candidates = [
+            'openapi.yaml',
+            'openapi.yml',
+            'openapi.json',
+            'swagger.yaml',
+            'swagger.yml',
+            'swagger.json',
+            'api/openapi.yaml',
+            'api/openapi.json',
+            'docs/openapi.yaml',
+            'docs/openapi.json'
+        ];
+        const found = [];
+        for (const rel of candidates) {
+            if (fs.existsSync(path.join(rootDir, rel))) {
+                found.push(rel);
+            }
+        }
+        // Also search root for any *.openapi.json or *.swagger.yaml
+        try {
+            const files = fs.readdirSync(rootDir);
+            for (const file of files) {
+                if ((file.includes('openapi') || file.includes('swagger')) && !found.includes(file)) {
+                    const ext = path.extname(file).toLowerCase();
+                    if (['.json', '.yaml', '.yml'].includes(ext)) {
+                        found.push(file);
+                    }
+                }
+            }
+        }
+        catch {
+            // ignore
+        }
+        return found;
+    }
+    countEndpoints(paths) {
+        let count = 0;
+        const methods = ['get', 'post', 'put', 'patch', 'delete', 'head', 'options'];
+        for (const pathItem of Object.values(paths)) {
+            if (pathItem && typeof pathItem === 'object') {
+                for (const m of methods) {
+                    if (pathItem[m]) {
+                        count++;
+                    }
+                }
+            }
+        }
+        return count;
+    }
+}
+export const defaultProjectScanner = new ProjectScanner();
+//# sourceMappingURL=project-scanner.js.map

package/dist/core/discovery/project-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-scanner.js","sourceRoot":"","sources":["../../../src/core/discovery/project-scanner.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAmB,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErE,MAAM,OAAO,cAAc;IACjB,eAAe,CAAkB;IACjC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IACpC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAE5C,YAAY,kBAAmC,sBAAsB;QACnE,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,IAAI,CAAC,UAAkB,OAAO,CAAC,GAAG,EAAE;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtC,4BAA4B;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3C,MAAM,mBAAmB,GAAoF,EAAE,CAAC;QAChH,MAAM,mBAAmB,GAAgB,IAAI,GAAG,EAAE,CAAC;QACnD,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAClD,cAAc,IAAI,OAAO,CAAC;gBAE1B,mBAAmB,CAAC,IAAI,CAAC;oBACvB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,cAAc,EAAE,OAAO;iBACxB,CAAC,CAAC;gBAEH,2BAA2B;gBAC3B,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAC/B,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;wBACjF,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACtC,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACvD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,eAAe,GAAiE,MAAM,CAAC;QAE3F,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC9D,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;gBAChE,IAAI,OAAO,CAAC,OAAO;oBAAE,eAAe,GAAG,SAAS,CAAC;qBAC5C,IAAI,OAAO,CAAC,OAAO;oBAAE,eAAe,GAAG,SAAS,CAAC;qBACjD,IAAI,OAAO,CAAC,GAAG;oBAAE,eAAe,GAAG,KAAK,CAAC;qBACzC,IAAI,OAAO,CAAC,cAAc,CAAC;oBAAE,eAAe,GAAG,QAAQ,CAAC;;oBACxD,eAAe,GAAG,QAAQ,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe,GAAG,QAAQ,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/C,cAAc,IAAI,gBAAgB,CAAC,MAAM,CAAC;QAC5C,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,iBAAiB,GAA2B;YAChD,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,UAAU;gBAChB,CAAC,CAAC;oBACE,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;iBACtB;gBACH,CAAC,CAAC,SAAS,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;oBAC1C,CAAC,CAAC;wBACE,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,IAAI;qBACd;oBACH,CAAC,CAAC;wBACE,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,gBAAgB;qBACvB;YACL,MAAM,EAAE;gBACN,IAAI,EAAE,GAAG,WAAW,MAAM;gBAC1B,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,OAAO;aACnB;YACD,QAAQ,EAAE;gBACR,6BAA6B,EAAE,IAAI;gBACnC,eAAe,EAAE,IAAI;gBACrB,gBAAgB,EAAE,KAAK;aACxB;SACF,CAAC;QAEF,OAAO;YACL,UAAU;YACV,YAAY;YACZ,SAAS;YACT,eAAe;YACf,wBAAwB,EAAE,cAAc;YACxC,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACpD,iBAAiB;YACjB,OAAO,EAAE;gBACP,YAAY,EAAE,mBAAmB;gBACjC,MAAM,EAAE,gBAAgB;aACzB;SACF,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,OAAe;QACtC,MAAM,UAAU,GAAG;YACjB,cAAc;YACd,aAAa;YACb,cAAc;YACd,cAAc;YACd,aAAa;YACb,cAAc;YACd,kBAAkB;YAClB,kBAAkB;YAClB,mBAAmB;YACnB,mBAAmB;SACpB,CAAC;QAEF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,4DAA4D;QAC5D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;oBAC7C,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc,CAAC,KAA0B;QAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7E,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,IAAK,QAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzB,KAAK,EAAE,CAAC;oBACV,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,cAAc,EAAE,CAAC"}

package/dist/core/permissions/classifier.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Fridayy - Permission Classifier & Risk Assessment Engine
+ * Classifies API endpoints into READ, WRITE, and DESTRUCTIVE with risk scoring.
+ */
+import { ToolRiskLevel, ToolApprovalStatus, ToolPermissions, FridayyConfig } from '../schema/types.js';
+export interface ClassificationContext {
+    method?: string;
+    path?: string;
+    operationId?: string;
+    name?: string;
+    summary?: string;
+    description?: string;
+    tags?: string[];
+}
+export interface ClassificationResult {
+    permissions: ToolPermissions;
+    risk: ToolRiskLevel;
+    status: ToolApprovalStatus;
+    reason: string;
+}
+/**
+ * Classifies an operation based on HTTP method, path, operationId, and naming keywords.
+ */
+export declare function classifyOperation(ctx: ClassificationContext, config?: FridayyConfig): ClassificationResult;
+//# sourceMappingURL=classifier.d.ts.map

package/dist/core/permissions/classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../../src/core/permissions/classifier.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,aAAa,EACd,MAAM,oBAAoB,CAAC;AAqB5B,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,eAAe,CAAC;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,qBAAqB,EAC1B,MAAM,CAAC,EAAE,aAAa,GACrB,oBAAoB,CAqEtB"}

package/dist/core/permissions/classifier.js

@@ -0,0 +1,92 @@
+/**
+ * Fridayy - Permission Classifier & Risk Assessment Engine
+ * Classifies API endpoints into READ, WRITE, and DESTRUCTIVE with risk scoring.
+ */
+const DESTRUCTIVE_KEYWORDS = [
+    'delete',
+    'remove',
+    'destroy',
+    'purge',
+    'erase',
+    'drop',
+    'truncate',
+    'kill',
+    'terminate',
+    'wipe',
+    'reset',
+    'cancel',
+    'revoke',
+    'uninstall',
+    'expire',
+    'block'
+];
+/**
+ * Classifies an operation based on HTTP method, path, operationId, and naming keywords.
+ */
+export function classifyOperation(ctx, config) {
+    const method = (ctx.method || 'GET').toUpperCase();
+    const fullText = [
+        ctx.name || '',
+        ctx.operationId || '',
+        ctx.path || '',
+        ctx.summary || '',
+        ctx.description || ''
+    ]
+        .join(' ')
+        .toLowerCase();
+    // 1. Check for DESTRUCTIVE operations
+    const isDeleteMethod = method === 'DELETE';
+    const hasDestructiveKeyword = DESTRUCTIVE_KEYWORDS.some(kw => {
+        // Word boundary or underscore boundary check
+        const regex = new RegExp(`\\b${kw}\\b|_${kw}_|^${kw}_|_${kw}$`, 'i');
+        return regex.test(fullText);
+    });
+    if (isDeleteMethod || hasDestructiveKeyword) {
+        const isExplicitlyApproved = false;
+        return {
+            permissions: {
+                type: 'DESTRUCTIVE',
+                read: false,
+                write: true,
+                destructive: true,
+                requiresConfirmation: true
+            },
+            risk: 'high',
+            status: isExplicitlyApproved ? 'APPROVED' : 'BLOCKED',
+            reason: isDeleteMethod
+                ? 'DELETE HTTP method carries destructive risk.'
+                : `Operation contains destructive action keyword: "${hasDestructiveKeyword}".`
+        };
+    }
+    // 2. Check for READ operations
+    if (method === 'GET' || method === 'HEAD' || method === 'OPTIONS') {
+        const autoApproveRead = config?.security?.autoApproveRead ?? true;
+        return {
+            permissions: {
+                type: 'READ',
+                read: true,
+                write: false,
+                destructive: false,
+                requiresConfirmation: false
+            },
+            risk: 'low',
+            status: autoApproveRead ? 'APPROVED' : 'PENDING',
+            reason: `${method} HTTP method is a safe read-only operation.`
+        };
+    }
+    // 3. WRITE operations (POST, PUT, PATCH)
+    const autoApproveWrite = config?.security?.autoApproveWrite ?? false;
+    return {
+        permissions: {
+            type: 'WRITE',
+            read: false,
+            write: true,
+            destructive: false,
+            requiresConfirmation: false
+        },
+        risk: 'medium',
+        status: autoApproveWrite ? 'APPROVED' : 'PENDING',
+        reason: `${method} HTTP method mutates server state (WRITE operation).`
+    };
+}
+//# sourceMappingURL=classifier.js.map

package/dist/core/permissions/classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../../src/core/permissions/classifier.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,MAAM,oBAAoB,GAAG;IAC3B,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,MAAM;IACN,UAAU;IACV,MAAM;IACN,WAAW;IACX,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,OAAO;CACR,CAAC;AAmBF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAA0B,EAC1B,MAAsB;IAEtB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,IAAI,IAAI,EAAE;QACd,GAAG,CAAC,WAAW,IAAI,EAAE;QACrB,GAAG,CAAC,IAAI,IAAI,EAAE;QACd,GAAG,CAAC,OAAO,IAAI,EAAE;QACjB,GAAG,CAAC,WAAW,IAAI,EAAE;KACtB;SACE,IAAI,CAAC,GAAG,CAAC;SACT,WAAW,EAAE,CAAC;IAEjB,sCAAsC;IACtC,MAAM,cAAc,GAAG,MAAM,KAAK,QAAQ,CAAC;IAC3C,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAC3D,6CAA6C;QAC7C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAI,cAAc,IAAI,qBAAqB,EAAE,CAAC;QAC5C,MAAM,oBAAoB,GAAG,KAAK,CAAC;QACnC,OAAO;YACL,WAAW,EAAE;gBACX,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,IAAI;gBACX,WAAW,EAAE,IAAI;gBACjB,oBAAoB,EAAE,IAAI;aAC3B;YACD,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACrD,MAAM,EAAE,cAAc;gBACpB,CAAC,CAAC,8CAA8C;gBAChD,CAAC,CAAC,mDAAmD,qBAAqB,IAAI;SACjF,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,eAAe,GAAG,MAAM,EAAE,QAAQ,EAAE,eAAe,IAAI,IAAI,CAAC;QAClE,OAAO;YACL,WAAW,EAAE;gBACX,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,KAAK;gBAClB,oBAAoB,EAAE,KAAK;aAC5B;YACD,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAChD,MAAM,EAAE,GAAG,MAAM,6CAA6C;SAC/D,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,MAAM,gBAAgB,GAAG,MAAM,EAAE,QAAQ,EAAE,gBAAgB,IAAI,KAAK,CAAC;IACrE,OAAO;QACL,WAAW,EAAE;YACX,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,KAAK;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACjD,MAAM,EAAE,GAAG,MAAM,sDAAsD;KACxE,CAAC;AACJ,CAAC"}

package/dist/core/permissions/enforcer.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Fridayy - Permission & Security Enforcer
+ * Enforces permission gates, status checks, and access rules for MCP tool invocation.
+ */
+import { FridayyToolDefinition, FridayyConfig } from '../schema/types.js';
+export declare class PermissionDeniedError extends Error {
+    readonly code: string;
+    readonly toolName: string;
+    readonly details?: any;
+    constructor(message: string, toolName: string, code?: string, details?: any);
+}
+export declare class PermissionEnforcer {
+    private config?;
+    constructor(config?: FridayyConfig);
+    /**
+     * Checks if a tool should be visible and exposable to MCP clients.
+     */
+    isToolExposed(tool: FridayyToolDefinition): boolean;
+    /**
+     * Enforces permissions before executing a tool. Throws PermissionDeniedError if execution is not allowed.
+     */
+    validateExecution(tool: FridayyToolDefinition): void;
+}
+//# sourceMappingURL=enforcer.d.ts.map

package/dist/core/permissions/enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcer.d.ts","sourceRoot":"","sources":["../../../src/core/permissions/enforcer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE1E,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,OAAO,CAAC,EAAE,GAAG,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,SAAsB,EAAE,OAAO,CAAC,EAAE,GAAG;CAOzF;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAC,CAAgB;gBAEnB,MAAM,CAAC,EAAE,aAAa;IAIlC;;OAEG;IACI,aAAa,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO;IAsB1D;;OAEG;IACI,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI;CAyD5D"}

package/dist/core/permissions/enforcer.js

@@ -0,0 +1,71 @@
+/**
+ * Fridayy - Permission & Security Enforcer
+ * Enforces permission gates, status checks, and access rules for MCP tool invocation.
+ */
+export class PermissionDeniedError extends Error {
+    code;
+    toolName;
+    details;
+    constructor(message, toolName, code = 'PERMISSION_DENIED', details) {
+        super(message);
+        this.name = 'PermissionDeniedError';
+        this.code = code;
+        this.toolName = toolName;
+        this.details = details;
+    }
+}
+export class PermissionEnforcer {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Checks if a tool should be visible and exposable to MCP clients.
+     */
+    isToolExposed(tool) {
+        // 1. Must be APPROVED
+        if (tool.status !== 'APPROVED') {
+            return false;
+        }
+        // 2. Check allowlist / denylist from config
+        const toolName = tool.name;
+        const allowlist = this.config?.security?.allowlist;
+        const denylist = this.config?.security?.denylist;
+        if (denylist && denylist.includes(toolName)) {
+            return false;
+        }
+        if (allowlist && allowlist.length > 0 && !allowlist.includes(toolName) && !allowlist.includes('*')) {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Enforces permissions before executing a tool. Throws PermissionDeniedError if execution is not allowed.
+     */
+    validateExecution(tool) {
+        // Check status
+        if (tool.status === 'BLOCKED') {
+            throw new PermissionDeniedError(`Tool "${tool.name}" is BLOCKED. Destructive operations require explicit developer approval via 'fridayy review'.`, tool.name, 'TOOL_BLOCKED', { status: tool.status, permissions: tool.permissions });
+        }
+        if (tool.status === 'REJECTED') {
+            throw new PermissionDeniedError(`Tool "${tool.name}" is REJECTED and cannot be executed.`, tool.name, 'TOOL_REJECTED', { status: tool.status });
+        }
+        if (tool.status === 'PENDING') {
+            throw new PermissionDeniedError(`Tool "${tool.name}" is PENDING developer review. Run 'fridayy review' to approve it before invoking.`, tool.name, 'TOOL_PENDING_APPROVAL', { status: tool.status });
+        }
+        if (tool.status !== 'APPROVED') {
+            throw new PermissionDeniedError(`Tool "${tool.name}" has invalid status "${tool.status}" and cannot be executed.`, tool.name, 'TOOL_NOT_APPROVED');
+        }
+        // Denylist check
+        const denylist = this.config?.security?.denylist;
+        if (denylist && denylist.includes(tool.name)) {
+            throw new PermissionDeniedError(`Tool "${tool.name}" is explicitly denylisted in fridayy configuration.`, tool.name, 'TOOL_DENYLISTED');
+        }
+        // Allowlist check
+        const allowlist = this.config?.security?.allowlist;
+        if (allowlist && allowlist.length > 0 && !allowlist.includes(tool.name) && !allowlist.includes('*')) {
+            throw new PermissionDeniedError(`Tool "${tool.name}" is not included in the security allowlist.`, tool.name, 'TOOL_NOT_ALLOWLISTED');
+        }
+    }
+}
+//# sourceMappingURL=enforcer.js.map

package/dist/core/permissions/enforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcer.js","sourceRoot":"","sources":["../../../src/core/permissions/enforcer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9B,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,OAAO,CAAO;IAE9B,YAAY,OAAe,EAAE,QAAgB,EAAE,IAAI,GAAG,mBAAmB,EAAE,OAAa;QACtF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAiB;IAE/B,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACI,aAAa,CAAC,IAA2B;QAC9C,sBAAsB;QACtB,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAEjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnG,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,iBAAiB,CAAC,IAA2B;QAClD,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,qBAAqB,CAC7B,SAAS,IAAI,CAAC,IAAI,gGAAgG,EAClH,IAAI,CAAC,IAAI,EACT,cAAc,EACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CACvD,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,qBAAqB,CAC7B,SAAS,IAAI,CAAC,IAAI,uCAAuC,EACzD,IAAI,CAAC,IAAI,EACT,eAAe,EACf,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,qBAAqB,CAC7B,SAAS,IAAI,CAAC,IAAI,oFAAoF,EACtG,IAAI,CAAC,IAAI,EACT,uBAAuB,EACvB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CACxB,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,qBAAqB,CAC7B,SAAS,IAAI,CAAC,IAAI,yBAAyB,IAAI,CAAC,MAAM,2BAA2B,EACjF,IAAI,CAAC,IAAI,EACT,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,qBAAqB,CAC7B,SAAS,IAAI,CAAC,IAAI,sDAAsD,EACxE,IAAI,CAAC,IAAI,EACT,iBAAiB,CAClB,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;QACnD,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,qBAAqB,CAC7B,SAAS,IAAI,CAAC,IAAI,8CAA8C,EAChE,IAAI,CAAC,IAAI,EACT,sBAAsB,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/core/schema/json-schema.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Fridayy - JSON Schema Unifier and Normalizer
+ * Combines OpenAPI/REST path, query, header parameters and request bodies
+ * into a single unified JSON Schema for standard MCP tools.
+ */
+import { ParameterDefinition, RequestBodyDefinition } from './types.js';
+export interface UnifySchemaOptions {
+    parameters?: {
+        path?: ParameterDefinition[];
+        query?: ParameterDefinition[];
+        header?: ParameterDefinition[];
+        cookie?: ParameterDefinition[];
+    };
+    requestBody?: RequestBodyDefinition;
+}
+/**
+ * Normalizes an OpenAPI / JSON Schema type object into standard JSON Schema Draft-7 / 2020-12
+ */
+export declare function normalizeSchema(rawSchema: any): Record<string, any>;
+/**
+ * Unifies all parameters and request body into a top-level MCP Tool inputSchema object.
+ */
+export declare function buildUnifiedInputSchema(options: UnifySchemaOptions): {
+    type: 'object';
+    properties: Record<string, any>;
+    required: string[];
+    additionalProperties?: boolean;
+};
+//# sourceMappingURL=json-schema.d.ts.map

package/dist/core/schema/json-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../../../src/core/schema/json-schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExE,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,mBAAmB,EAAE,CAAC;QAC7B,KAAK,CAAC,EAAE,mBAAmB,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;QAC/B,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;KAChC,CAAC;IACF,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAmCnE;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,kBAAkB,GAAG;IACpE,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CA0FA"}

package/dist/core/schema/json-schema.js

@@ -0,0 +1,129 @@
+/**
+ * Fridayy - JSON Schema Unifier and Normalizer
+ * Combines OpenAPI/REST path, query, header parameters and request bodies
+ * into a single unified JSON Schema for standard MCP tools.
+ */
+/**
+ * Normalizes an OpenAPI / JSON Schema type object into standard JSON Schema Draft-7 / 2020-12
+ */
+export function normalizeSchema(rawSchema) {
+    if (!rawSchema || typeof rawSchema !== 'object') {
+        return { type: 'string' };
+    }
+    const schema = { ...rawSchema };
+    // Handle nullable
+    if (schema.nullable && schema.type) {
+        if (typeof schema.type === 'string') {
+            schema.type = [schema.type, 'null'];
+        }
+        delete schema.nullable;
+    }
+    // Handle recursive objects
+    if (schema.type === 'object' && schema.properties) {
+        const normalizedProps = {};
+        for (const [key, prop] of Object.entries(schema.properties)) {
+            normalizedProps[key] = normalizeSchema(prop);
+        }
+        schema.properties = normalizedProps;
+    }
+    // Handle arrays
+    if (schema.type === 'array' && schema.items) {
+        schema.items = normalizeSchema(schema.items);
+    }
+    // Clean up non-standard OpenAPI properties from tool input schema
+    delete schema.xml;
+    delete schema.externalDocs;
+    delete schema.example;
+    return schema;
+}
+/**
+ * Unifies all parameters and request body into a top-level MCP Tool inputSchema object.
+ */
+export function buildUnifiedInputSchema(options) {
+    const properties = {};
+    const requiredFields = new Set();
+    // 1. Process Path Parameters
+    if (options.parameters?.path) {
+        for (const param of options.parameters.path) {
+            const propSchema = normalizeSchema(param.schema);
+            if (param.description && !propSchema.description) {
+                propSchema.description = param.description;
+            }
+            properties[param.name] = propSchema;
+            // Path parameters are always required
+            requiredFields.add(param.name);
+        }
+    }
+    // 2. Process Query Parameters
+    if (options.parameters?.query) {
+        for (const param of options.parameters.query) {
+            const propSchema = normalizeSchema(param.schema);
+            if (param.description && !propSchema.description) {
+                propSchema.description = param.description;
+            }
+            properties[param.name] = propSchema;
+            if (param.required) {
+                requiredFields.add(param.name);
+            }
+        }
+    }
+    // 3. Process Header Parameters (skip standard auth headers to avoid exposing secrets)
+    if (options.parameters?.header) {
+        for (const param of options.parameters.header) {
+            const lower = param.name.toLowerCase();
+            if (lower === 'authorization' || lower === 'x-api-key') {
+                continue;
+            }
+            const propSchema = normalizeSchema(param.schema);
+            if (param.description && !propSchema.description) {
+                propSchema.description = param.description;
+            }
+            properties[param.name] = propSchema;
+            if (param.required) {
+                requiredFields.add(param.name);
+            }
+        }
+    }
+    // 4. Process Request Body
+    if (options.requestBody && options.requestBody.schema) {
+        const bodySchema = normalizeSchema(options.requestBody.schema);
+        if (bodySchema.type === 'object' && bodySchema.properties) {
+            // Flatten top-level properties if they don't collide with path/query params
+            for (const [propName, propVal] of Object.entries(bodySchema.properties)) {
+                if (!properties[propName]) {
+                    properties[propName] = propVal;
+                    if (Array.isArray(bodySchema.required) && bodySchema.required.includes(propName)) {
+                        if (options.requestBody.required) {
+                            requiredFields.add(propName);
+                        }
+                    }
+                }
+                else {
+                    // If collision, put into a nested body object
+                    properties['body'] = bodySchema;
+                    if (options.requestBody.required) {
+                        requiredFields.add('body');
+                    }
+                    break;
+                }
+            }
+        }
+        else {
+            // Primitive or array body
+            properties['body'] = {
+                ...bodySchema,
+                description: options.requestBody.description || 'Request payload'
+            };
+            if (options.requestBody.required) {
+                requiredFields.add('body');
+            }
+        }
+    }
+    return {
+        type: 'object',
+        properties,
+        required: Array.from(requiredFields),
+        additionalProperties: false
+    };
+}
+//# sourceMappingURL=json-schema.js.map

package/dist/core/schema/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","sourceRoot":"","sources":["../../../src/core/schema/json-schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAcH;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAc;IAC5C,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAwB,EAAE,GAAG,SAAS,EAAE,CAAC;IAErD,kBAAkB;IAClB,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,2BAA2B;IAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClD,MAAM,eAAe,GAAwB,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,eAAe,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC;IACtC,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,CAAC,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,kEAAkE;IAClE,OAAO,MAAM,CAAC,GAAG,CAAC;IAClB,OAAO,MAAM,CAAC,YAAY,CAAC;IAC3B,OAAO,MAAM,CAAC,OAAO,CAAC;IAEtB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA2B;IAMjE,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,cAAc,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE9C,6BAA6B;IAC7B,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBACjD,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC7C,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;YACpC,sCAAsC;YACtC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBACjD,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC7C,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;YACpC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,IAAI,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBACjD,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC7C,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;YACpC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE/D,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC1D,4EAA4E;YAC5E,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,UAAU,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;oBAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACjF,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;4BACjC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;wBAC/B,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,8CAA8C;oBAC9C,UAAU,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;oBAChC,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;wBACjC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC7B,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,0BAA0B;YAC1B,UAAU,CAAC,MAAM,CAAC,GAAG;gBACnB,GAAG,UAAU;gBACb,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,WAAW,IAAI,iBAAiB;aAClE,CAAC;YACF,IAAI,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;gBACjC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,UAAU;QACV,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;QACpC,oBAAoB,EAAE,KAAK;KAC5B,CAAC;AACJ,CAAC"}