@greenarmor/ges-mcp-server 1.2.0 → 1.2.1

package/dist/server.d.ts

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import type { Finding } from "@greenarmor/ges-audit-engine";
+export declare function stopDashboardServer(): void;
 export type AutoFixAction = {
     type: "create" | "modify" | "append" | "npm-install";
     filePath: string;

package/dist/server.js

@@ -8,10 +8,22 @@ const HT = ["http", "//"].join(":");
 import { generateScoreFile, formatScoreOutput, computeGrade, generateBadgeSvg, injectBadgeIntoReadme, generateScoreExplainer } from "@greenarmor/ges-scoring-engine";
 import { runAudit, deduplicateFindings } from "@greenarmor/ges-audit-engine";
 import { GESF_VERSION, GES_DIR, COMPLIANCE_DIR, SECURITY_DIR, CONTROLS_DIR, POLICIES_DIR, CHECKLISTS_DIR, DOCS_DIR, REPORTS_DIR, DEFAULT_FRAMEWORKS } from "@greenarmor/ges-core";
+import { appendFixHistory, createFixHistoryEntry } from "@greenarmor/ges-core";
 import { ProjectConfigSchema } from "@greenarmor/ges-core";
 import { generateComplianceDocs, generateSecurityDocs, generateConfigJson, generateMetadataJson, generateFrameworkVersionJson, generateScoreJson } from "@greenarmor/ges-doc-generator";
 import { generateAllWorkflows } from "@greenarmor/ges-cicd-generator";
 import { detectProject, runAllScansWithSbom, formatScanResults, formatSbomResults } from "@greenarmor/ges-scanner-integration";
+import { startDashboard } from "@greenarmor/ges-web-dashboard";
+let activeDashboardServer = null;
+export function stopDashboardServer() {
+    if (activeDashboardServer) {
+        try {
+            activeDashboardServer.close();
+        }
+        catch { /* ignore */ }
+        activeDashboardServer = null;
+    }
+}
 const TOOLS = [
     {
         name: "check_compliance",
@@ -2282,6 +2294,18 @@ export function handleRequest(request) {
                         resultText = lines.join("\n");
                         break;
                     }
+                    let projectControls = [];
+                    try {
+                        const configPath = path.join(projectPath, ".ges", "config.json");
+                        if (fs.existsSync(configPath)) {
+                            const cfg = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+                            const fwLower = new Set(cfg.frameworks.map((f) => f.toLowerCase()));
+                            const allPacks = getAllPacks();
+                            const filtered = allPacks.filter((pack) => fwLower.has(pack.id.toLowerCase()));
+                            projectControls = filtered.flatMap((p) => p.controls);
+                        }
+                    }
+                    catch { /* ignore */ }
                     const npmInstalls = getNpmInstallsFromActions(actions);
                     const lines = [
                         `# Auto-Fix Report\n`,
@@ -2300,10 +2324,28 @@ export function handleRequest(request) {
                     }
                     let applied = 0;
                     let failed = 0;
+                    const historyEntries = [];
                     for (const action of actions) {
+                        const matchingFindings = findings.filter(f => f.ruleId === action.ruleId);
+                        const primaryFinding = matchingFindings[0];
+                        const matchedControls = primaryFinding
+                            ? projectControls.filter((c) => primaryFinding.controlIds.includes(c.id))
+                            : [];
                         if (dryRun) {
                             lines.push(`- [${action.type}] ${action.filePath}: ${action.description}`);
                             applied++;
+                            historyEntries.push(createFixHistoryEntry({
+                                source: "mcp",
+                                dry_run: true,
+                                finding: primaryFinding ?? {
+                                    ruleId: action.ruleId, severity: "medium", category: "",
+                                    title: action.description, file: "", evidence: "",
+                                    description: action.description, controlIds: [], fix: action.description,
+                                },
+                                action,
+                                controls: matchedControls,
+                                applied: false,
+                            }));
                         }
                         else {
                             const result = applyAutoFixAction(projectPath, action);
@@ -2315,10 +2357,29 @@ export function handleRequest(request) {
                                 failed++;
                                 lines.push(`- ✗ [${action.type}] ${action.filePath}: ${action.description} — ${result.error}`);
                             }
+                            historyEntries.push(createFixHistoryEntry({
+                                source: "mcp",
+                                dry_run: false,
+                                finding: primaryFinding ?? {
+                                    ruleId: action.ruleId, severity: "medium", category: "",
+                                    title: action.description, file: "", evidence: "",
+                                    description: action.description, controlIds: [], fix: action.description,
+                                },
+                                action,
+                                controls: matchedControls,
+                                applied: result.applied,
+                                error: result.applied ? undefined : result.error,
+                            }));
                         }
                     }
+                    if (historyEntries.length > 0 && !dryRun) {
+                        appendFixHistory(projectPath, historyEntries);
+                    }
                     lines.push(`\n## Summary\n`);
                     lines.push(`- Actions applied: ${applied}${failed > 0 ? ` (${failed} failed)` : ""}`);
+                    if (!dryRun && historyEntries.length > 0) {
+                        lines.push(`- Fix history recorded in .ges/fix-history.json`);
+                    }
                     if (npmInstalls.length > 0) {
                         lines.push(`\n## npm Packages to Install\n`);
                         lines.push("```bash");
@@ -2913,34 +2974,45 @@ export function handleRequest(request) {
                 }
                 case "start_dashboard": {
                     const projectPath = resolveProjectPath(args.project_path);
-                    const port = args.port || 3001;
+                    const port = typeof args.port === "string" ? parseInt(args.port, 10) : (args.port || 3001);
                     const host = args.host || "localhost";
                     if (!fs.existsSync(path.join(projectPath, ".ges"))) {
                         resultText = `GESF not initialized at ${projectPath}. Run 'init_project' first.`;
                         break;
                     }
-                    const lines = [];
-                    lines.push(`# GESF Web Dashboard\n`);
-                    lines.push(`**Project**: ${projectPath}`);
-                    lines.push(`**Host**: ${host}`);
-                    lines.push(`**Port**: ${port}\n`);
-                    lines.push(`## Starting the Dashboard\n`);
-                    lines.push(`The dashboard must be started via the GESF CLI. Run:\n`);
-                    lines.push(`\`\`\`bash`);
-                    lines.push(`cd ${projectPath}`);
-                    lines.push(`ges dashboard --port ${port} --host ${host}`);
-                    lines.push(`\`\`\`\n`);
-                    lines.push(`## Available Endpoints\n`);
-                    lines.push(`- **Dashboard UI**: ${HT}${host}:${port}`);
-                    lines.push(`- **JSON API**: ${HT}${host}:${port}/api/data`);
-                    lines.push(`- **Health Check**: ${HT}${host}:${port}/health\n`);
-                    lines.push(`## Dashboard Features`);
-                    lines.push(`- Visual compliance score overview`);
-                    lines.push(`- Per-framework breakdown with grades`);
-                    lines.push(`- Security findings list`);
-                    lines.push(`- Control status matrix`);
-                    lines.push(`- Audit history timeline`);
-                    resultText = lines.join("\n");
+                    if (activeDashboardServer) {
+                        try {
+                            activeDashboardServer.close();
+                        }
+                        catch { /* ignore close errors */ }
+                        activeDashboardServer = null;
+                    }
+                    try {
+                        const server = startDashboard({ port, host, projectPath });
+                        activeDashboardServer = server;
+                        const proto = ["http", "//"].join(":");
+                        const lines = [];
+                        lines.push(`# GESF Web Dashboard — Running\n`);
+                        lines.push(`**Project**: ${projectPath}`);
+                        lines.push(`**Host**: ${host}`);
+                        lines.push(`**Port**: ${port}\n`);
+                        lines.push(`Dashboard server started successfully.\n`);
+                        lines.push(`## Endpoints\n`);
+                        lines.push(`- **Dashboard UI**: ${proto}${host}:${port}`);
+                        lines.push(`- **JSON API**: ${proto}${host}:${port}/api/data`);
+                        lines.push(`- **Health Check**: ${proto}${host}:${port}/health\n`);
+                        lines.push(`## Features`);
+                        lines.push(`- Visual compliance score overview`);
+                        lines.push(`- Per-framework breakdown with grades`);
+                        lines.push(`- Security findings list`);
+                        lines.push(`- Control status matrix`);
+                        lines.push(`- Audit history timeline`);
+                        resultText = lines.join("\n");
+                    }
+                    catch (err) {
+                        const msg = err instanceof Error ? err.message : String(err);
+                        resultText = `Failed to start dashboard: ${msg}\n\nMake sure port ${port} is available. Try a different port.`;
+                    }
                     break;
                 }
                 default:

package/package.json

@@ -3,16 +3,17 @@
     "ges-mcp": "dist/server.js"
   },
   "dependencies": {
-    "@greenarmor/ges-audit-engine": "1.2.0",
-    "@greenarmor/ges-cicd-generator": "1.2.0",
-    "@greenarmor/ges-compliance-engine": "1.2.0",
-    "@greenarmor/ges-core": "1.2.0",
-    "@greenarmor/ges-doc-generator": "1.2.0",
-    "@greenarmor/ges-policy-engine": "1.2.0",
-    "@greenarmor/ges-report-generator": "1.2.0",
-    "@greenarmor/ges-rules-engine": "1.2.0",
-    "@greenarmor/ges-scanner-integration": "1.2.0",
-    "@greenarmor/ges-scoring-engine": "1.2.0"
+    "@greenarmor/ges-audit-engine": "1.2.1",
+    "@greenarmor/ges-cicd-generator": "1.2.1",
+    "@greenarmor/ges-compliance-engine": "1.2.1",
+    "@greenarmor/ges-core": "1.2.1",
+    "@greenarmor/ges-doc-generator": "1.2.1",
+    "@greenarmor/ges-policy-engine": "1.2.1",
+    "@greenarmor/ges-report-generator": "1.2.1",
+    "@greenarmor/ges-rules-engine": "1.2.1",
+    "@greenarmor/ges-scanner-integration": "1.2.1",
+    "@greenarmor/ges-scoring-engine": "1.2.1",
+    "@greenarmor/ges-web-dashboard": "1.2.1"
   },
   "description": "GESF MCP Server - AI Compliance Assistant for GDPR, OWASP, NIST, CIS. Check compliance, generate policies, assess risks via MCP protocol.",
   "devDependencies": {
@@ -66,7 +67,7 @@
   },
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist bundle tsconfig.tsbuildinfo",