@panguard-ai/panguard-mcp 1.2.0 → 1.3.1

package/dist/tools/guard-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-tools.js","sourceRoot":"","sources":["../../src/tools/guard-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;GAGG;AACH,SAAS,cAAc,CAAC,IAA6B;IACnD,OAAQ,IAAI,CAAC,SAAS,CAAY,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA6B;IACnE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAI,IAAI,CAAC,MAAM,CAAY,IAAI,UAAU,CAAC;IAEpD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IAED,oCAAoC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBAC7B,4CAA4C;gBAC5C,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;gCACE,MAAM,EAAE,iBAAiB;gCACzB,GAAG,EAAE,WAAW;gCAChB,OAAO;gCACP,IAAI;gCACJ,OAAO,EAAE,yCAAyC,WAAW,IAAI;6BAClE,EACD,IAAI,EACJ,CAAC,CACF;yBACF;qBACF;iBACF,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,wDAAwD;gBACxD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,6CAA6C;IAC7C,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACtE,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YACxE,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,MAAM,EAAE,OAAO;4BACf,OAAO,EAAE,yEAAyE;yBACnF,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM,EAAE,OAAO;wBACf,OAAO,EAAE,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBACxF,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE;YAC/D,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;YAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;SACxB,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,SAAS,CAAC,KAAK,CAAC,CAAC;QAEjB,yDAAyD;QACzD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;oBACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;wBACnB,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;wBACxB,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM,GAAG,MAAM,CAAC;wBAChB,MAAM;oBACR,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,gBAAgB;gBAClB,CAAC;YACH,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,MAAM,EAAE,SAAS;4BACjB,GAAG,EAAE,MAAM;4BACX,OAAO;4BACP,IAAI;4BACJ,OAAO,EAAE,OAAO;4BAChB,OAAO,EAAE,2CAA2C,MAAM,IAAI;yBAC/D,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,MAAM,EAAE,SAAS;4BACjB,OAAO;4BACP,IAAI;4BACJ,OAAO,EAAE,OAAO;4BAChB,OAAO,EACL,wGAAwG;yBAC3G,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM,EAAE,OAAO;wBACf,OAAO,EAAE,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBAC9F,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEhD,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC;gBACf,wBAAwB;gBACxB,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;gBAChD,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAChD,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;oBAC3C,GAAG;oBACH,OAAO,EAAE,OAAO;wBACd,CAAC,CAAC,sBAAsB,GAAG,0BAA0B;wBACrD,CAAC,CAAC,mDAAmD;iBACxD,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA6B;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEhD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,GAAG,GAAkB,IAAI,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,+DAA+D;YAC/D,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,2BAA2B;IAC3B,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAA4B,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IAED,qDAAqD;IACrD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,KAAK,EAAE;wBACL,OAAO,EAAE,SAAS;wBAClB,GAAG;wBACH,OAAO;wBACP,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS;wBACjC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI;qBAC7B;oBACD,MAAM,EAAE;wBACN,YAAY,EAAE,UAAU;qBACzB;oBACD,OAAO,EAAE,SAAS;wBAChB,CAAC,CAAC,mCAAmC,GAAG,WAAW,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS,IAAI;wBAClF,CAAC,CAAC,sEAAsE;iBAC3E,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA6B;IAC/D,MAAM,KAAK,GAAI,IAAI,CAAC,OAAO,CAAY,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,IAAI,KAAK,CAAC;IACvD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACtD,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;gBAC1D,IAAI,QAAQ,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACzD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IAED,wCAAwC;IACxC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAEvD,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,YAAY,EAAE,YAAY,CAAC,MAAM;oBACjC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;oBAC3B,MAAM,EAAE,YAAY;oBACpB,OAAO,EACL,YAAY,CAAC,MAAM,KAAK,CAAC;wBACvB,CAAC,CAAC,yCAAyC;wBAC3C,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,4BAA4B;iBACzD,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/manage-tools.js

@@ -0,0 +1,299 @@
+/**
+ * Panguard MCP - Management Tools
+ * Panguard MCP - 管理工具
+ *
+ * Implements panguard_init, panguard_deploy, panguard_block_ip,
+ * and panguard_generate_report MCP tools.
+ * 實作 panguard_init、panguard_deploy、panguard_block_ip 和 panguard_generate_report MCP 工具。
+ *
+ * @module @panguard-ai/panguard-mcp/tools/manage-tools
+ */
+import { promises as fs } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { runScan, generatePdfReport } from '@panguard-ai/panguard-scan';
+import { createLogger } from '@panguard-ai/core';
+const logger = createLogger('panguard-mcp:manage');
+/** IPv4 validation regex */
+const IPV4_REGEX = /^(\d{1,3}\.){3}\d{1,3}$/;
+/** IPv6 validation regex — accepts compressed and full forms */
+const IPV6_REGEX = /^[0-9a-fA-F:]+$/;
+/** Directories that are safe for Panguard to write into. */
+const SAFE_BASES = [
+    os.homedir(),
+    os.tmpdir(),
+    process.cwd(),
+    // macOS: /tmp is a symlink to /private/tmp, distinct from os.tmpdir()
+    '/tmp',
+    '/private/tmp',
+];
+/**
+ * Assert that a resolved path stays within an allowed base directory.
+ * Prevents path traversal attacks from MCP tool arguments.
+ */
+function assertSafePath(resolved) {
+    const normalResolved = path.resolve(resolved);
+    const isAllowed = SAFE_BASES.some((base) => {
+        const normalBase = path.resolve(base);
+        return normalResolved === normalBase || normalResolved.startsWith(normalBase + path.sep);
+    });
+    if (!isAllowed) {
+        throw new Error(`Path traversal rejected: ${resolved} is outside allowed directories`);
+    }
+}
+/**
+ * Resolve the guard data directory from args or default.
+ * 從參數或預設值解析守護資料目錄。
+ */
+function resolveDataDir(args) {
+    const dataDir = args['dataDir'] ?? path.join(os.homedir(), '.panguard-guard');
+    const resolved = path.resolve(dataDir);
+    assertSafePath(resolved);
+    return resolved;
+}
+/**
+ * Execute panguard_block_ip — manually block an IP address.
+ * 執行 panguard_block_ip — 手動封鎖 IP 位址。
+ */
+export async function executeBlockIP(args) {
+    const ip = args['ip'];
+    const duration = args['duration'] ?? '1h';
+    const reason = args['reason'] ?? 'Manually blocked via Panguard MCP';
+    if (!ip) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({ error: 'IP address is required' }),
+                },
+            ],
+            isError: true,
+        };
+    }
+    if (!IPV4_REGEX.test(ip) && !IPV6_REGEX.test(ip)) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({ error: `Invalid IP address format: ${ip}` }),
+                },
+            ],
+            isError: true,
+        };
+    }
+    logger.info(`Blocking IP: ${ip} for ${duration} — Reason: ${reason}`);
+    return {
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify({
+                    status: 'blocked',
+                    ip,
+                    duration,
+                    reason,
+                    timestamp: new Date().toISOString(),
+                    message: `IP ${ip} has been queued for blocking for ${duration}.`,
+                    note: 'Ensure Panguard Guard is running for the block to take effect.',
+                }, null, 2),
+            },
+        ],
+    };
+}
+/**
+ * Execute panguard_generate_report — run scan and generate a PDF compliance report.
+ * 執行 panguard_generate_report — 執行掃描並生成 PDF 合規報告。
+ */
+export async function executeGenerateReport(args) {
+    const output = args['output'] ?? './panguard-report.pdf';
+    const lang = (args['lang'] ?? 'en');
+    const depth = (args['depth'] ?? 'full');
+    try {
+        const resolvedOutput = path.resolve(output);
+        assertSafePath(resolvedOutput);
+        const result = await runScan({ depth, lang });
+        await generatePdfReport(result, resolvedOutput, lang);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        status: 'generated',
+                        output: path.resolve(output),
+                        risk_score: result.riskScore,
+                        grade: scoreToGrade(result.riskScore),
+                        findings_count: result.findings.length,
+                        message: `PDF report generated at ${path.resolve(output)}`,
+                    }, null, 2),
+                },
+            ],
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            content: [{ type: 'text', text: JSON.stringify({ error: message }) }],
+            isError: true,
+        };
+    }
+}
+/**
+ * Execute panguard_init — initialize Panguard configuration with defaults.
+ * 執行 panguard_init — 以預設值初始化 Panguard 配置。
+ */
+export async function executeInit(args) {
+    const dataDir = resolveDataDir(args);
+    const lang = args['lang'] ?? 'en';
+    const mode = args['mode'] ?? 'learning';
+    await fs.mkdir(dataDir, { recursive: true });
+    const config = {
+        lang,
+        mode,
+        learningDays: 14,
+        dataDir,
+        dashboardEnabled: false,
+        dashboardPort: 4443,
+        verbose: false,
+        watchdogEnabled: true,
+        watchdogInterval: 30000,
+        monitors: {
+            logMonitor: true,
+            networkMonitor: true,
+            processMonitor: true,
+            fileMonitor: false,
+            networkPollInterval: 5000,
+            processPollInterval: 5000,
+        },
+        actionPolicy: { autoRespond: 85, notifyAndWait: 50, logOnly: 0 },
+        notifications: {},
+    };
+    const configPath = path.join(dataDir, 'config.json');
+    await fs.writeFile(configPath, JSON.stringify(config, null, 2));
+    return {
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify({
+                    status: 'initialized',
+                    dataDir,
+                    configPath,
+                    mode,
+                    lang,
+                    message: `Panguard initialized at ${dataDir}. Use panguard_deploy to start all services.`,
+                }, null, 2),
+            },
+        ],
+    };
+}
+/**
+ * Execute panguard_deploy — one-click setup: init + scan + optional report.
+ * 執行 panguard_deploy — 一鍵設定：初始化 + 掃描 + 可選報告。
+ */
+export async function executeDeploy(args) {
+    const dataDir = resolveDataDir(args);
+    const lang = (args['lang'] ?? 'en');
+    const mode = args['mode'] ?? 'learning';
+    const generateReport = args['generateReport'] ?? true;
+    // Step 1: Initialize data directory and config
+    await fs.mkdir(dataDir, { recursive: true });
+    const config = {
+        lang,
+        mode,
+        learningDays: 14,
+        dataDir,
+        dashboardEnabled: false,
+        dashboardPort: 4443,
+        verbose: false,
+        watchdogEnabled: true,
+        watchdogInterval: 30000,
+        monitors: {
+            logMonitor: true,
+            networkMonitor: true,
+            processMonitor: true,
+            fileMonitor: false,
+            networkPollInterval: 5000,
+            processPollInterval: 5000,
+        },
+        actionPolicy: { autoRespond: 85, notifyAndWait: 50, logOnly: 0 },
+        notifications: {},
+    };
+    const configPath = path.join(dataDir, 'config.json');
+    await fs.writeFile(configPath, JSON.stringify(config, null, 2));
+    // Step 2: Run quick scan
+    let scanResult = null;
+    try {
+        scanResult = await runScan({ depth: 'quick', lang });
+    }
+    catch (err) {
+        logger.warn('Scan failed during deploy: ' + (err instanceof Error ? err.message : String(err)));
+    }
+    // Step 3: Generate initial report if requested
+    let reportPath = null;
+    if (generateReport && scanResult) {
+        try {
+            reportPath = path.join(dataDir, 'initial-report.pdf');
+            await generatePdfReport(scanResult, reportPath, lang);
+        }
+        catch (err) {
+            logger.warn('Report generation failed: ' + (err instanceof Error ? err.message : String(err)));
+            reportPath = null;
+        }
+    }
+    const criticalHighCount = scanResult
+        ? scanResult.findings.filter((f) => f.severity === 'critical' || f.severity === 'high').length
+        : 0;
+    return {
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify({
+                    status: 'deployed',
+                    steps: [
+                        { step: 'init', status: 'complete', dataDir, configPath },
+                        {
+                            step: 'scan',
+                            status: scanResult ? 'complete' : 'failed',
+                            risk_score: scanResult?.riskScore ?? null,
+                            findings: scanResult?.findings.length ?? null,
+                        },
+                        {
+                            step: 'report',
+                            status: reportPath ? 'complete' : generateReport ? 'failed' : 'skipped',
+                            path: reportPath,
+                        },
+                        {
+                            step: 'guard',
+                            status: 'ready',
+                            note: 'Use panguard_guard_start to start real-time monitoring',
+                        },
+                    ],
+                    summary: scanResult
+                        ? `Deployment complete! Risk score: ${scanResult.riskScore}/100. ${scanResult.findings.length} issues found.${reportPath ? ` Report: ${reportPath}` : ''}`
+                        : 'Partial deployment. Scan failed but guard is ready to start.',
+                    next_steps: [
+                        'Run panguard_guard_start to begin real-time threat monitoring',
+                        criticalHighCount > 0
+                            ? `Fix ${criticalHighCount} critical/high findings before switching to protection mode`
+                            : 'System looks good! Consider switching mode to protection when ready.',
+                    ],
+                }, null, 2),
+            },
+        ],
+    };
+}
+/**
+ * Convert a numeric risk score (0-100) to a letter grade (A-F).
+ * 將數字風險分數（0-100）轉換為字母等級（A-F）。
+ */
+function scoreToGrade(score) {
+    const safety = 100 - score;
+    if (safety >= 90)
+        return 'A';
+    if (safety >= 75)
+        return 'B';
+    if (safety >= 60)
+        return 'C';
+    if (safety >= 40)
+        return 'D';
+    return 'F';
+}
+//# sourceMappingURL=manage-tools.js.map

package/dist/tools/manage-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-tools.js","sourceRoot":"","sources":["../../src/tools/manage-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAEnD,4BAA4B;AAC5B,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,gEAAgE;AAChE,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAErC,4DAA4D;AAC5D,MAAM,UAAU,GAAG;IACjB,EAAE,CAAC,OAAO,EAAE;IACZ,EAAE,CAAC,MAAM,EAAE;IACX,OAAO,CAAC,GAAG,EAAE;IACb,sEAAsE;IACtE,MAAM;IACN,cAAc;CACf,CAAC;AAEF;;;GAGG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,cAAc,KAAK,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,iCAAiC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAA6B;IACnD,MAAM,OAAO,GAAI,IAAI,CAAC,SAAS,CAAY,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAA6B;IAChE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAuB,CAAC;IAC5C,MAAM,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,IAAI,IAAI,CAAC;IACtD,MAAM,MAAM,GAAI,IAAI,CAAC,QAAQ,CAAY,IAAI,mCAAmC,CAAC;IAEjF,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;iBAC1D;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,EAAE,CAAC;iBACpE;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,QAAQ,cAAc,MAAM,EAAE,CAAC,CAAC;IAEtE,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,MAAM,EAAE,SAAS;oBACjB,EAAE;oBACF,QAAQ;oBACR,MAAM;oBACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,OAAO,EAAE,MAAM,EAAE,qCAAqC,QAAQ,GAAG;oBACjE,IAAI,EAAE,gEAAgE;iBACvE,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAA6B;IACvE,MAAM,MAAM,GAAI,IAAI,CAAC,QAAQ,CAAY,IAAI,uBAAuB,CAAC;IACrE,MAAM,IAAI,GAAG,CAAE,IAAI,CAAC,MAAM,CAAY,IAAI,IAAI,CAAmB,CAAC;IAClE,MAAM,KAAK,GAAG,CAAE,IAAI,CAAC,OAAO,CAAY,IAAI,MAAM,CAAqB,CAAC;IAExE,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,cAAc,CAAC,cAAc,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;QAEtD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM,EAAE,WAAW;wBACnB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC5B,UAAU,EAAE,MAAM,CAAC,SAAS;wBAC5B,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;wBACrC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;wBACtC,OAAO,EAAE,2BAA2B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;qBAC3D,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAA6B;IAC7D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAI,IAAI,CAAC,MAAM,CAAY,IAAI,IAAI,CAAC;IAC9C,MAAM,IAAI,GAAI,IAAI,CAAC,MAAM,CAAY,IAAI,UAAU,CAAC;IAEpD,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG;QACb,IAAI;QACJ,IAAI;QACJ,YAAY,EAAE,EAAE;QAChB,OAAO;QACP,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,IAAI;QACrB,gBAAgB,EAAE,KAAK;QACvB,QAAQ,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,KAAK;YAClB,mBAAmB,EAAE,IAAI;YACzB,mBAAmB,EAAE,IAAI;SAC1B;QACD,YAAY,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;QAChE,aAAa,EAAE,EAAE;KAClB,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhE,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,MAAM,EAAE,aAAa;oBACrB,OAAO;oBACP,UAAU;oBACV,IAAI;oBACJ,IAAI;oBACJ,OAAO,EAAE,2BAA2B,OAAO,8CAA8C;iBAC1F,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA6B;IAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,CAAE,IAAI,CAAC,MAAM,CAAY,IAAI,IAAI,CAAmB,CAAC;IAClE,MAAM,IAAI,GAAI,IAAI,CAAC,MAAM,CAAY,IAAI,UAAU,CAAC;IACpD,MAAM,cAAc,GAAI,IAAI,CAAC,gBAAgB,CAAa,IAAI,IAAI,CAAC;IAEnE,+CAA+C;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG;QACb,IAAI;QACJ,IAAI;QACJ,YAAY,EAAE,EAAE;QAChB,OAAO;QACP,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,IAAI;QACrB,gBAAgB,EAAE,KAAK;QACvB,QAAQ,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,KAAK;YAClB,mBAAmB,EAAE,IAAI;YACzB,mBAAmB,EAAE,IAAI;SAC1B;QACD,YAAY,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE;QAChE,aAAa,EAAE,EAAE;KAClB,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEhE,yBAAyB;IACzB,IAAI,UAAU,GAA+C,IAAI,CAAC;IAClE,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,+CAA+C;IAC/C,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACtD,MAAM,iBAAiB,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CACT,4BAA4B,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAClF,CAAC;YACF,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,UAAU;QAClC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;QAC9F,CAAC,CAAC,CAAC,CAAC;IAEN,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE;wBACL,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE;wBACzD;4BACE,IAAI,EAAE,MAAM;4BACZ,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;4BAC1C,UAAU,EAAE,UAAU,EAAE,SAAS,IAAI,IAAI;4BACzC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI;yBAC9C;wBACD;4BACE,IAAI,EAAE,QAAQ;4BACd,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;4BACvE,IAAI,EAAE,UAAU;yBACjB;wBACD;4BACE,IAAI,EAAE,OAAO;4BACb,MAAM,EAAE,OAAO;4BACf,IAAI,EAAE,wDAAwD;yBAC/D;qBACF;oBACD,OAAO,EAAE,UAAU;wBACjB,CAAC,CAAC,oCAAoC,UAAU,CAAC,SAAS,SAAS,UAAU,CAAC,QAAQ,CAAC,MAAM,iBAAiB,UAAU,CAAC,CAAC,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;wBAC1J,CAAC,CAAC,8DAA8D;oBAClE,UAAU,EAAE;wBACV,+DAA+D;wBAC/D,iBAAiB,GAAG,CAAC;4BACnB,CAAC,CAAC,OAAO,iBAAiB,6DAA6D;4BACvF,CAAC,CAAC,sEAAsE;qBAC3E;iBACF,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC;IAC3B,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/scan-tools.js

@@ -0,0 +1,157 @@
+/**
+ * Panguard MCP - Scan Tools
+ * Panguard MCP - 掃描工具
+ *
+ * Implements panguard_scan and panguard_scan_code MCP tools.
+ * 實作 panguard_scan 和 panguard_scan_code MCP 工具。
+ *
+ * @module @panguard-ai/panguard-mcp/tools/scan-tools
+ */
+import { runScan, generatePdfReport } from '@panguard-ai/panguard-scan';
+/**
+ * Attempt to import SAST functions, graceful fallback if not yet exported.
+ * 嘗試匯入 SAST 函數，若尚未匯出則優雅地退回。
+ */
+let checkSourceCode = null;
+let checkHardcodedSecrets = null;
+try {
+    const sast = await import('@panguard-ai/panguard-scan');
+    const module = sast;
+    if (typeof module['checkSourceCode'] === 'function') {
+        checkSourceCode = module['checkSourceCode'];
+    }
+    if (typeof module['checkHardcodedSecrets'] === 'function') {
+        checkHardcodedSecrets = module['checkHardcodedSecrets'];
+    }
+}
+catch {
+    // SAST not available yet — will use placeholder response
+}
+/**
+ * Convert a numeric risk score (0-100) to a letter grade (A-F).
+ * 將數字風險分數（0-100）轉換為字母等級（A-F）。
+ *
+ * The grade reflects security posture (inverse of risk):
+ * A = 90–100% safe, F = very high risk.
+ */
+function scoreToGrade(score) {
+    const safety = 100 - score;
+    if (safety >= 90)
+        return 'A';
+    if (safety >= 75)
+        return 'B';
+    if (safety >= 60)
+        return 'C';
+    if (safety >= 40)
+        return 'D';
+    return 'F';
+}
+/**
+ * Execute panguard_scan — system security health check.
+ * 執行 panguard_scan — 系統安全健檢。
+ */
+export async function executeScan(args) {
+    const depth = args['depth'] ?? 'quick';
+    const lang = args['lang'] ?? 'en';
+    try {
+        const result = await runScan({ depth, lang });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        risk_score: result.riskScore,
+                        risk_level: result.riskLevel,
+                        grade: scoreToGrade(result.riskScore),
+                        findings_count: result.findings.length,
+                        scan_duration_ms: result.scanDuration,
+                        scanned_at: result.scannedAt,
+                        findings: result.findings.slice(0, 20).map((f) => ({
+                            id: f.id,
+                            severity: f.severity,
+                            title: f.title,
+                            category: f.category,
+                            remediation: f.remediation,
+                        })),
+                        summary: `Risk Score: ${result.riskScore}/100 (${result.riskLevel}). ${result.findings.length} findings detected.`,
+                    }, null, 2),
+                },
+            ],
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            content: [{ type: 'text', text: JSON.stringify({ error: message }) }],
+            isError: true,
+        };
+    }
+}
+/**
+ * Execute panguard_scan_code — SAST source code scan.
+ * 執行 panguard_scan_code — SAST 原始碼掃描。
+ */
+export async function executeScanCode(args) {
+    const dir = args['dir'] ?? '.';
+    // If SAST functions are not available yet, return a clear message
+    if (!checkSourceCode && !checkHardcodedSecrets) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        scan_type: 'sast',
+                        target: dir,
+                        status: 'unavailable',
+                        message: 'SAST scanning (checkSourceCode / checkHardcodedSecrets) is not yet available in this build of @panguard-ai/panguard-scan. Please upgrade to the latest version.',
+                    }, null, 2),
+                },
+            ],
+            isError: false,
+        };
+    }
+    try {
+        const [codeFindings, secretFindings] = await Promise.all([
+            checkSourceCode ? checkSourceCode(dir) : Promise.resolve([]),
+            checkHardcodedSecrets ? checkHardcodedSecrets(dir) : Promise.resolve([]),
+        ]);
+        const allFindings = [...codeFindings, ...secretFindings];
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        scan_type: 'sast',
+                        target: dir,
+                        findings_count: allFindings.length,
+                        critical: allFindings.filter((f) => f.severity === 'critical').length,
+                        high: allFindings.filter((f) => f.severity === 'high').length,
+                        medium: allFindings.filter((f) => f.severity === 'medium').length,
+                        low: allFindings.filter((f) => f.severity === 'low').length,
+                        findings: allFindings.map((f) => ({
+                            id: f.id,
+                            severity: f.severity,
+                            title: f.title,
+                            category: f.category,
+                            description: f.description,
+                            remediation: f.remediation,
+                            details: f.details,
+                        })),
+                        summary: allFindings.length === 0
+                            ? 'No security issues found in the code.'
+                            : `Found ${allFindings.length} security issues (${allFindings.filter((f) => f.severity === 'critical').length} critical, ${allFindings.filter((f) => f.severity === 'high').length} high).`,
+                    }, null, 2),
+                },
+            ],
+        };
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+            content: [{ type: 'text', text: JSON.stringify({ error: message }) }],
+            isError: true,
+        };
+    }
+}
+export { runScan, generatePdfReport };
+//# sourceMappingURL=scan-tools.js.map

package/dist/tools/scan-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-tools.js","sourceRoot":"","sources":["../../src/tools/scan-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAExE;;;GAGG;AACH,IAAI,eAAe,GAAiD,IAAI,CAAC;AACzE,IAAI,qBAAqB,GAAiD,IAAI,CAAC;AAE/E,IAAI,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,IAAI,OAAO,MAAM,CAAC,iBAAiB,CAAC,KAAK,UAAU,EAAE,CAAC;QACpD,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAwC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,uBAAuB,CAAC,KAAK,UAAU,EAAE,CAAC;QAC1D,qBAAqB,GAAG,MAAM,CAAC,uBAAuB,CAAwC,CAAC;IACjG,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,yDAAyD;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC;IAC3B,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAA6B;IAC7D,MAAM,KAAK,GAAI,IAAI,CAAC,OAAO,CAAsB,IAAI,OAAO,CAAC;IAC7D,MAAM,IAAI,GAAI,IAAI,CAAC,MAAM,CAAoB,IAAI,IAAI,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9C,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,UAAU,EAAE,MAAM,CAAC,SAAS;wBAC5B,UAAU,EAAE,MAAM,CAAC,SAAS;wBAC5B,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;wBACrC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;wBACtC,gBAAgB,EAAE,MAAM,CAAC,YAAY;wBACrC,UAAU,EAAE,MAAM,CAAC,SAAS;wBAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACjD,EAAE,EAAE,CAAC,CAAC,EAAE;4BACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;4BACpB,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;4BACpB,WAAW,EAAE,CAAC,CAAC,WAAW;yBAC3B,CAAC,CAAC;wBACH,OAAO,EAAE,eAAe,MAAM,CAAC,SAAS,SAAS,MAAM,CAAC,SAAS,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,qBAAqB;qBACnH,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA6B;IACjE,MAAM,GAAG,GAAI,IAAI,CAAC,KAAK,CAAY,IAAI,GAAG,CAAC;IAE3C,kEAAkE;IAClE,IAAI,CAAC,eAAe,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC/C,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,SAAS,EAAE,MAAM;wBACjB,MAAM,EAAE,GAAG;wBACX,MAAM,EAAE,aAAa;wBACrB,OAAO,EACL,iKAAiK;qBACpK,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;YACD,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvD,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAe,CAAC;YACzE,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAe,CAAC;SACtF,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,cAAc,CAAC,CAAC;QAEzD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,SAAS,EAAE,MAAM;wBACjB,MAAM,EAAE,GAAG;wBACX,cAAc,EAAE,WAAW,CAAC,MAAM;wBAClC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;wBACrE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;wBAC7D,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;wBACjE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;wBAC3D,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAChC,EAAE,EAAE,CAAC,CAAC,EAAE;4BACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;4BACpB,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;4BACpB,WAAW,EAAE,CAAC,CAAC,WAAW;4BAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;4BAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;yBACnB,CAAC,CAAC;wBACH,OAAO,EACL,WAAW,CAAC,MAAM,KAAK,CAAC;4BACtB,CAAC,CAAC,uCAAuC;4BACzC,CAAC,CAAC,SAAS,WAAW,CAAC,MAAM,qBAAqB,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,cAAc,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,SAAS;qBAChM,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@panguard-ai/panguard-mcp",
-  "version": "1.2.0",
+  "version": "1.3.1",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -32,10 +32,10 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.0",
-    "@panguard-ai/core": "1.1.0",
-    "@panguard-ai/panguard-skill-auditor": "1.3.0",
-    "@panguard-ai/panguard-scan": "1.1.0",
-    "@panguard-ai/panguard-guard": "1.2.0"
+    "@panguard-ai/core": "^1.3.1",
+    "@panguard-ai/panguard-scan": "^1.3.0",
+    "@panguard-ai/panguard-guard": "^1.4.2",
+    "@panguard-ai/panguard-skill-auditor": "^1.4.1"
   },
   "devDependencies": {
     "@types/node": "^22.14.0",