@greenarmor/ges-mcp-server 1.5.0 → 1.5.2

package/dist/server.js

@@ -13,6 +13,7 @@ import { addFrameworkToConfig, removeFrameworkFromConfig, loadControlsFromDisk,
 import { loadGovernanceRecords, createGovernanceRecord, addGovernanceRecord, findGovernanceRecord, setGovernanceApproval, addGovernanceEvidence, createEvidenceRef, verifyGovernanceRecord, setGovernanceRiskAssessment, setGovernancePolicyBasis, setGovernanceReviewCycle, setGovernanceDataInventory, setGovernanceComplianceLinks, setGovernanceCommittee, } from "@greenarmor/ges-core";
 import { loadFixAssignments, createFixAssignment, addFixAssignment, resolveFixAssignment, findFixAssignmentsForRecord, } from "@greenarmor/ges-core";
 import { ProjectConfigSchema } from "@greenarmor/ges-core";
+import { safeWriteJson, safeWriteFile } from "@greenarmor/ges-core";
 import { generateComplianceDocs, generateSecurityDocs, generateConfigJson, generateMetadataJson, generateFrameworkVersionJson, generateScoreJson } from "@greenarmor/ges-doc-generator";
 import { generateAllWorkflows } from "@greenarmor/ges-cicd-generator";
 import { detectProject, runAllScansWithSbom, formatScanResults, formatSbomResults } from "@greenarmor/ges-scanner-integration";
@@ -1214,7 +1215,7 @@ export function applyAutoFixAction(root, action) {
                 const dir = path.dirname(fullPath);
                 if (!fs.existsSync(dir))
                     fs.mkdirSync(dir, { recursive: true });
-                fs.writeFileSync(fullPath, action.content || "", "utf-8");
+                safeWriteFile(fullPath, action.content || "");
                 return { applied: true, action };
             }
             case "modify": {
@@ -1225,7 +1226,7 @@ export function applyAutoFixAction(root, action) {
                 if (action.search && !content.includes(action.search)) {
                     return { applied: false, action, error: "Search string not found" };
                 }
-                fs.writeFileSync(fullPath, content.replace(action.search || "", action.replace || ""), "utf-8");
+                safeWriteFile(fullPath, content.replace(action.search || "", action.replace || ""));
                 return { applied: true, action };
             }
             case "append": {
@@ -2528,10 +2529,10 @@ export function handleRequest(request) {
                     const auditedControls = updateControlsFromFindings(overriddenControls, findings);
                     const score = generateScoreFile(auditedControls, frameworks, findings);
                     try {
-                        fs.writeFileSync(path.join(projectPath, ".ges", "last-audit.json"), JSON.stringify({
+                        safeWriteJson(path.join(projectPath, ".ges", "last-audit.json"), {
                             findings, scannedFiles, timestamp: new Date().toISOString(),
-                        }, null, 2));
-                        fs.writeFileSync(path.join(projectPath, ".ges", "score.json"), JSON.stringify(score, null, 2));
+                        });
+                        safeWriteJson(path.join(projectPath, ".ges", "score.json"), score);
                         const metaPath = path.join(projectPath, ".ges", "metadata.json");
                         let meta = {};
                         try {
@@ -2539,7 +2540,7 @@ export function handleRequest(request) {
                         }
                         catch { /* ignore */ }
                         meta.last_audit = new Date().toISOString();
-                        fs.writeFileSync(metaPath, JSON.stringify(meta, null, 2));
+                        safeWriteJson(metaPath, meta);
                     }
                     catch { /* ignore persistence errors */ }
                     const critical = findings.filter(f => f.severity === "critical");
@@ -2681,9 +2682,9 @@ export function handleRequest(request) {
                     const { findings: rawFindings, scannedFiles } = runAudit(projectPath);
                     const findings = deduplicateFindings(rawFindings);
                     try {
-                        fs.writeFileSync(path.join(projectPath, ".ges", "last-audit.json"), JSON.stringify({
+                        safeWriteJson(path.join(projectPath, ".ges", "last-audit.json"), {
                             findings, scannedFiles, timestamp: new Date().toISOString(),
-                        }, null, 2));
+                        });
                     }
                     catch { /* ignore persistence errors */ }
                     if (findings.length === 0) {
@@ -2885,7 +2886,7 @@ export function handleRequest(request) {
                     const dir = path.dirname(overridePath);
                     if (!fs.existsSync(dir))
                         fs.mkdirSync(dir, { recursive: true });
-                    fs.writeFileSync(overridePath, JSON.stringify(overrides, null, 2), "utf-8");
+                    safeWriteJson(overridePath, overrides);
                     const lines = [
                         `# Control Override Applied\n`,
                         `**Control**: ${controlId}`,
@@ -3031,7 +3032,7 @@ export function handleRequest(request) {
                     const outputName = args.output || "badge.svg";
                     const outputPath = path.resolve(projectPath, outputName);
                     fs.mkdirSync(path.dirname(outputPath), { recursive: true });
-                    fs.writeFileSync(outputPath, svg);
+                    safeWriteFile(outputPath, svg);
                     const explainer = generateScoreExplainer(score);
                     const lines = [];
                     lines.push(`# Compliance Badge Generated\n`);
@@ -3044,7 +3045,7 @@ export function handleRequest(request) {
                             const readmeContent = fs.readFileSync(readmePath, "utf-8");
                             const relativeBadgePath = path.relative(path.dirname(readmePath), outputPath);
                             const updated = injectBadgeIntoReadme(readmeContent, relativeBadgePath, explainer);
-                            fs.writeFileSync(readmePath, updated);
+                            safeWriteFile(readmePath, updated);
                             lines.push(`Badge injected into ${readmeName}`);
                         }
                         else {
@@ -3125,13 +3126,13 @@ export function handleRequest(request) {
                     };
                     fs.mkdirSync(gesDir, { recursive: true });
                     const configJson = generateConfigJson(config);
-                    fs.writeFileSync(path.join(gesDir, "config.json"), configJson.content);
+                    safeWriteFile(path.join(gesDir, "config.json"), configJson.content);
                     const metadataJson = generateMetadataJson(config);
-                    fs.writeFileSync(path.join(gesDir, "metadata.json"), metadataJson.content);
+                    safeWriteFile(path.join(gesDir, "metadata.json"), metadataJson.content);
                     const frameworkVersionJson = generateFrameworkVersionJson();
-                    fs.writeFileSync(path.join(gesDir, "framework-version.json"), frameworkVersionJson.content);
+                    safeWriteFile(path.join(gesDir, "framework-version.json"), frameworkVersionJson.content);
                     const scoreJson = generateScoreJson();
-                    fs.writeFileSync(path.join(gesDir, "score.json"), scoreJson.content);
+                    safeWriteFile(path.join(gesDir, "score.json"), scoreJson.content);
                     const dirs = [COMPLIANCE_DIR, SECURITY_DIR, CONTROLS_DIR, POLICIES_DIR, CHECKLISTS_DIR, DOCS_DIR, REPORTS_DIR, ".dev-logs"];
                     for (const dir of dirs) {
                         fs.mkdirSync(path.join(projectPath, dir), { recursive: true });
@@ -3145,20 +3146,20 @@ export function handleRequest(request) {
                         }
                     }
                     else {
-                        fs.writeFileSync(gitignorePath, `# GESF developer logs (developer-only, not for remote)\n${devLogsIgnore}\n`);
+                        safeWriteFile(gitignorePath, `# GESF developer logs (developer-only, not for remote)\n${devLogsIgnore}\n`);
                     }
-                    fs.writeFileSync(path.join(projectPath, ".dev-logs", "README.md"), `# Developer Logs\n\nThis directory is part of GESF — the Green Engineering Standard Framework.\n\nIt stores development notes, session logs, AI assistant recommendations, and release notes for your project.\n\n**This directory is gitignored and intended for developers only. Do not submit to remote.**\n`);
+                    safeWriteFile(path.join(projectPath, ".dev-logs", "README.md"), `# Developer Logs\n\nThis directory is part of GESF — the Green Engineering Standard Framework.\n\nIt stores development notes, session logs, AI assistant recommendations, and release notes for your project.\n\n**This directory is gitignored and intended for developers only. Do not submit to remote.**\n`);
                     const complianceDocs = generateComplianceDocs(projectName, projectType);
                     for (const doc of complianceDocs) {
                         const filePath = path.join(projectPath, COMPLIANCE_DIR, doc.filePath);
                         fs.mkdirSync(path.dirname(filePath), { recursive: true });
-                        fs.writeFileSync(filePath, doc.content);
+                        safeWriteFile(filePath, doc.content);
                     }
                     const securityDocs = generateSecurityDocs(projectName, projectType);
                     for (const doc of securityDocs) {
                         const filePath = path.join(projectPath, SECURITY_DIR, doc.filePath);
                         fs.mkdirSync(path.dirname(filePath), { recursive: true });
-                        fs.writeFileSync(filePath, doc.content);
+                        safeWriteFile(filePath, doc.content);
                     }
                     const installedPackIds = new Set();
                     // Domain packs from project type
@@ -3189,7 +3190,7 @@ export function handleRequest(request) {
                         if (pack) {
                             const packDir = path.join(projectPath, CONTROLS_DIR, pack.id);
                             fs.mkdirSync(packDir, { recursive: true });
-                            fs.writeFileSync(path.join(packDir, "controls.json"), JSON.stringify(pack.controls, null, 2));
+                            safeWriteFile(path.join(packDir, "controls.json"), JSON.stringify(pack.controls, null, 2));
                             packs.push(pack);
                         }
                     }
@@ -3197,7 +3198,7 @@ export function handleRequest(request) {
                     const workflowsDir = path.join(projectPath, ".github", "workflows");
                     fs.mkdirSync(workflowsDir, { recursive: true });
                     for (const wf of workflows) {
-                        fs.writeFileSync(path.join(workflowsDir, wf.filePath.replace(/^\.github\/workflows\//, "")), wf.content);
+                        safeWriteFile(path.join(workflowsDir, wf.filePath.replace(/^\.github\/workflows\//, "")), wf.content);
                     }
                     const lines = [];
                     lines.push(`# GESF Project Initialized\n`);
@@ -3628,7 +3629,7 @@ export function handleRequest(request) {
                     }
                     const packDir = path.join(projectPath, CONTROLS_DIR, pack.id);
                     fs.mkdirSync(packDir, { recursive: true });
-                    fs.writeFileSync(path.join(packDir, "controls.json"), JSON.stringify(pack.controls, null, 2));
+                    safeWriteJson(path.join(packDir, "controls.json"), pack.controls);
                     const frameworksAdded = [];
                     for (const fw of pack.frameworks) {
                         if (addFrameworkToConfig(projectPath, fw)) {
@@ -3731,7 +3732,7 @@ export function handleRequest(request) {
                         resultText = `A pre-commit hook already exists at ${hookPath}. Not overwriting.\nManually add 'npx ges audit --ci' to your pre-commit hook.`;
                         break;
                     }
-                    fs.writeFileSync(hookPath, hookContent);
+                    safeWriteFile(hookPath, hookContent);
                     fs.chmodSync(hookPath, 0o755);
                     resultText = `✅ Installed pre-commit hook at ${hookPath}\n\nThe hook will run 'ges audit --ci' before allowing commits.\n- To bypass: \`git commit --no-verify\`\n- To remove: use \`install_hooks\` with action: "uninstall"`;
                     recordActivity(projectPath, {

package/package.json

@@ -3,17 +3,17 @@
     "ges-mcp": "dist/server.js"
   },
   "dependencies": {
-    "@greenarmor/ges-audit-engine": "1.5.0",
-    "@greenarmor/ges-cicd-generator": "1.5.0",
-    "@greenarmor/ges-compliance-engine": "1.5.0",
-    "@greenarmor/ges-core": "1.5.0",
-    "@greenarmor/ges-doc-generator": "1.5.0",
-    "@greenarmor/ges-policy-engine": "1.5.0",
-    "@greenarmor/ges-report-generator": "1.5.0",
-    "@greenarmor/ges-rules-engine": "1.5.0",
-    "@greenarmor/ges-scanner-integration": "1.5.0",
-    "@greenarmor/ges-scoring-engine": "1.5.0",
-    "@greenarmor/ges-web-dashboard": "1.5.0"
+    "@greenarmor/ges-audit-engine": "1.5.2",
+    "@greenarmor/ges-cicd-generator": "1.5.2",
+    "@greenarmor/ges-compliance-engine": "1.5.2",
+    "@greenarmor/ges-core": "1.5.2",
+    "@greenarmor/ges-doc-generator": "1.5.2",
+    "@greenarmor/ges-policy-engine": "1.5.2",
+    "@greenarmor/ges-report-generator": "1.5.2",
+    "@greenarmor/ges-rules-engine": "1.5.2",
+    "@greenarmor/ges-scanner-integration": "1.5.2",
+    "@greenarmor/ges-scoring-engine": "1.5.2",
+    "@greenarmor/ges-web-dashboard": "1.5.2"
   },
   "description": "GESF MCP Server - AI Compliance Assistant for GDPR, OWASP, NIST, CIS. Check compliance, generate policies, assess risks via MCP protocol.",
   "devDependencies": {
@@ -67,7 +67,7 @@
   },
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist bundle tsconfig.tsbuildinfo",