npm - audit-project-server - Versions diffs - 1.0.0 - Mend

audit-project-server 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/LICENSE +15 -0
package/README.md +175 -0
package/package.json +49 -0
package/src/index.js +31 -0
package/src/render/renderAuditResult.js +229 -0
package/src/render/renderAuditResultDashboard.js +466 -0
package/src/render/renderAuditResultHTML.js +408 -0
package/src/render/renderAuditResultTXT.js +185 -0
package/src/server.js +42 -0
package/src/utils.js +384 -0

package/src/render/renderAuditResultHTML.js ADDED Viewed

@@ -0,0 +1,408 @@
+import fs from "fs";
+/**
+ * 渲染npm audit结果到HTML格式
+ * @param {string} auditResult JSON格式的npm audit结果
+ * @param {Object} packageJsonInfo package.json文件内容
+ * @param {string} savePath 保存路径
+ * @returns {string} HTML格式的报告
+ */
+export async function renderAuditResultHTML(
+  auditResult,
+  packageJsonInfo,
+  savePath,
+) {
+  try {
+    const auditData = JSON.parse(auditResult);
+    // 检查是否有错误
+    if (auditData.error) {
+      const html = `<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>NPM Audit 报告 - 错误</title>
+    <style>
+        body { font-family: Arial, sans-serif; margin: 40px; line-height: 1.6; }
+        .error { color: #d32f2f; background: #ffebee; padding: 20px; border-radius: 5px; border-left: 5px solid #d32f2f; }
+        h1 { color: #333; }
+    </style>
+</head>
+<body>
+    <h1>NPM Audit 报告</h1>
+    <div class="error">
+        <h2>❌ 错误</h2>
+        <p>${auditData.error}</p>
+    </div>
+</body>
+</html>`;
+      await fs.promises.writeFile(savePath, html);
+      return;
+    }
+    // 获取项目显示名称
+    const getProjectDisplayName = (pkgInfo) => {
+      // 优先级 1: package.json 中的 name 属性
+      if (pkgInfo.name) {
+        return pkgInfo.name;
+      }
+      // 优先级 2: GitHub 仓库信息
+      if (pkgInfo._remote && pkgInfo._remote.repo) {
+        return pkgInfo._remote.repo;
+      }
+      // 优先级 3: 项目路径（如果是本地项目）
+      if (pkgInfo._localPath) {
+        const pathParts = pkgInfo._localPath.split('/');
+        return pathParts[pathParts.length - 1] || "未命名项目";
+      }
+      // 默认值
+      return "未命名项目";
+    };
+    const projectDisplayName = getProjectDisplayName(packageJsonInfo);
+    // 获取项目版本
+    const projectVersion = packageJsonInfo.version ||
+                          (packageJsonInfo._remote && packageJsonInfo._remote.branch) ||
+                          "未知";
+    // 准备HTML内容
+    let html = `<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>NPM Audit 安全审计报告 - ${projectDisplayName}</title>
+    <style>
+        * { box-sizing: border-box; }
+        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; margin: 0; padding: 20px; background: #f5f5f5; color: #333; line-height: 1.6; }
+        .container { max-width: 1200px; margin: 0 auto; background: white; padding: 30px; border-radius: 10px; box-shadow: 0 2px 10px rgba(0,0,0,0.1); }
+        h1 { color: #2c3e50; border-bottom: 3px solid #3498db; padding-bottom: 10px; }
+        h2 { color: #34495e; margin-top: 30px; padding-bottom: 5px; border-bottom: 2px solid #ecf0f1; }
+        h3 { color: #7f8c8d; }
+        .info-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(250px, 1fr)); gap: 15px; margin: 20px 0; }
+        .info-card { background: #f8f9fa; padding: 15px; border-radius: 5px; border-left: 4px solid #3498db; }
+        .stats-table { width: 100%; border-collapse: collapse; margin: 20px 0; }
+        .stats-table th, .stats-table td { padding: 12px; text-align: left; border-bottom: 1px solid #ddd; }
+        .stats-table th { background: #f8f9fa; font-weight: 600; }
+        .severity-critical { color: #d32f2f; font-weight: bold; }
+        .severity-high { color: #f57c00; font-weight: bold; }
+        .severity-moderate { color: #fbc02d; font-weight: bold; }
+        .severity-low { color: #388e3c; font-weight: bold; }
+        .severity-info { color: #1976d2; font-weight: bold; }
+        .vuln-card { background: #fff; border: 1px solid #e0e0e0; border-radius: 5px; padding: 20px; margin: 15px 0; }
+        .vuln-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 15px; }
+        .vuln-title { font-size: 1.2em; font-weight: 600; }
+        .vuln-severity { padding: 5px 10px; border-radius: 3px; font-size: 0.9em; }
+        .severity-critical-bg { background: #ffebee; color: #d32f2f; }
+        .severity-high-bg { background: #fff3e0; color: #f57c00; }
+        .severity-moderate-bg { background: #fffde7; color: #fbc02d; }
+        .severity-low-bg { background: #e8f5e9; color: #388e3c; }
+        .severity-info-bg { background: #e3f2fd; color: #1976d2; }
+        .details-table { width: 100%; border-collapse: collapse; margin: 10px 0; }
+        .details-table th, .details-table td { padding: 8px 12px; border: 1px solid #e0e0e0; }
+        .details-table th { background: #f5f5f5; font-weight: 500; }
+        .fix-commands { background: #f5f5f5; padding: 15px; border-radius: 5px; font-family: monospace; white-space: pre-wrap; }
+        .success { color: #388e3c; background: #e8f5e9; padding: 15px; border-radius: 5px; }
+        .warning { color: #f57c00; background: #fff3e0; padding: 15px; border-radius: 5px; }
+        .footer { margin-top: 40px; padding-top: 20px; border-top: 1px solid #e0e0e0; color: #666; font-size: 0.9em; }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <h1>NPM Audit 安全审计报告</h1>
+        <!-- 项目信息 -->
+        <section>
+            <h2>项目信息</h2>
+            <div class="info-grid">
+                <div class="info-card">
+                    <strong>项目名称:</strong> ${projectDisplayName}
+                </div>
+                <div class="info-card">
+                    <strong>项目版本:</strong> ${projectVersion}
+                </div>
+                <div class="info-card">
+                    <strong>审计时间:</strong> ${new Date().toLocaleString("zh-CN")}
+                </div>
+                <div class="info-card">
+                    <strong>审计工具:</strong> npm audit
+                </div>
+            </div>
+        </section>`;
+    // 漏洞统计摘要
+    const metadata = auditData.metadata;
+    if (metadata && metadata.vulnerabilities) {
+      const vulnStats = metadata.vulnerabilities;
+      html += `
+        <section>
+            <h2>漏洞统计摘要</h2>
+            <table class="stats-table">
+                <thead>
+                    <tr>
+                        <th>严重级别</th>
+                        <th>数量</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <tr>
+                        <td class="severity-critical">严重 (critical)</td>
+                        <td>${vulnStats.critical || 0}</td>
+                    </tr>
+                    <tr>
+                        <td class="severity-high">高 (high)</td>
+                        <td>${vulnStats.high || 0}</td>
+                    </tr>
+                    <tr>
+                        <td class="severity-moderate">中 (moderate)</td>
+                        <td>${vulnStats.moderate || 0}</td>
+                    </tr>
+                    <tr>
+                        <td class="severity-low">低 (low)</td>
+                        <td>${vulnStats.low || 0}</td>
+                    </tr>
+                    <tr>
+                        <td class="severity-info">信息 (info)</td>
+                        <td>${vulnStats.info || 0}</td>
+                    </tr>
+                    <tr>
+                        <td><strong>总计</strong></td>
+                        <td><strong>${vulnStats.total || 0}</strong></td>
+                    </tr>
+                </tbody>
+            </table>
+        </section>`;
+      // 依赖统计
+      const depStats = metadata.dependencies;
+      if (depStats) {
+        html += `
+        <section>
+            <h2>依赖统计</h2>
+            <div class="info-grid">
+                <div class="info-card">
+                    <strong>生产依赖:</strong> ${depStats.prod || 0}
+                </div>
+                <div class="info-card">
+                    <strong>开发依赖:</strong> ${depStats.dev || 0}
+                </div>
+                <div class="info-card">
+                    <strong>可选依赖:</strong> ${depStats.optional || 0}
+                </div>
+                <div class="info-card">
+                    <strong>Peer依赖:</strong> ${depStats.peer || 0}
+                </div>
+                <div class="info-card">
+                    <strong>总依赖数:</strong> ${depStats.total || 0}
+                </div>
+            </div>
+        </section>`;
+      }
+    }
+    // 详细漏洞列表
+    const vulnerabilities = auditData.vulnerabilities;
+    if (vulnerabilities && Object.keys(vulnerabilities).length > 0) {
+      html += `
+        <section>
+            <h2>详细漏洞列表</h2>`;
+      Object.entries(vulnerabilities).forEach(([pkgName, vuln]) => {
+        const severity = vuln.severity || "unknown";
+        const severityClass = `severity-${severity}`;
+        const severityBgClass = `severity-${severity}-bg`;
+        html += `
+            <div class="vuln-card">
+                <div class="vuln-header">
+                    <div class="vuln-title">${pkgName}</div>
+                    <div class="vuln-severity ${severityBgClass}">${severity.toUpperCase()}</div>
+                </div>
+                <table class="details-table">
+                    <tr>
+                        <th>严重级别</th>
+                        <td class="${severityClass}">${severity}</td>
+                    </tr>
+                    <tr>
+                        <th>是否直接依赖</th>
+                        <td>${vuln.isDirect ? "是" : "否"}</td>
+                    </tr>
+                    <tr>
+                        <th>受影响版本</th>
+                        <td>${vuln.range || "未知"}</td>
+                    </tr>
+                    <tr>
+                        <th>修复建议</th>
+                        <td>`;
+        if (vuln.fixAvailable) {
+          if (vuln.fixAvailable === false) {
+            html += `暂无可用修复`;
+          } else {
+            html += `升级到 ${vuln.fixAvailable.version || "最新版本"}`;
+          }
+        } else {
+          html += `检查更新`;
+        }
+        html += `</td>
+                    </tr>
+                </table>`;
+        // 漏洞详情
+        if (vuln.via && Array.isArray(vuln.via)) {
+          html += `
+                <h3>漏洞详情</h3>`;
+          vuln.via.forEach((issue, index) => {
+            if (typeof issue === "string") {
+              html += `<p><strong>${index + 1}. 间接漏洞:</strong> ${issue}</p>`;
+            } else {
+              html += `<p><strong>${index + 1}. ${issue.title || "未知漏洞"}</strong></p>
+                      <ul>
+                          <li><strong>严重级别:</strong> ${issue.severity || "未知"}</li>`;
+              if (issue.url) {
+                html += `<li><strong>参考链接:</strong> <a href="${issue.url}" target="_blank">${issue.url}</a></li>`;
+              }
+              if (issue.range) {
+                html += `<li><strong>受影响版本:</strong> ${issue.range}</li>`;
+              }
+              if (issue.cvss && issue.cvss.score !== undefined) {
+                html += `<li><strong>CVSS 评分:</strong> ${issue.cvss.score}</li>`;
+              }
+              if (issue.cwe && issue.cwe.length > 0) {
+                html += `<li><strong>CWE:</strong> ${issue.cwe.join(", ")}</li>`;
+              }
+              html += `</ul>`;
+            }
+          });
+        }
+        html += `
+            </div>`;
+      });
+      html += `
+        </section>`;
+    } else {
+      html += `
+        <section>
+            <h2>详细漏洞列表</h2>
+            <div class="success">
+                ✅ <strong>恭喜！未发现任何安全漏洞。</strong>
+            </div>
+        </section>`;
+    }
+    // 修复建议总结
+    html += `
+        <section>
+            <h2>修复建议总结</h2>`;
+    const vulnerabilitiesObj = auditData.vulnerabilities || {};
+    const hasFixAvailable = Object.values(vulnerabilitiesObj).some(
+      (vuln) => vuln.fixAvailable && vuln.fixAvailable !== false,
+    );
+    if (hasFixAvailable) {
+      html += `
+            <p>以下依赖有可用修复：</p>
+            <ul>`;
+      Object.entries(vulnerabilitiesObj).forEach(([pkgName, vuln]) => {
+        if (vuln.fixAvailable && vuln.fixAvailable !== false) {
+          const fixVersion = vuln.fixAvailable.version || "最新版本";
+          html += `<li><strong>${pkgName}:</strong> 升级到版本 ${fixVersion}</li>`;
+        }
+      });
+      html += `
+            </ul>
+            <p><strong>执行以下命令修复漏洞：</strong></p>
+            <div class="fix-commands">`;
+      Object.entries(vulnerabilitiesObj).forEach(([pkgName, vuln]) => {
+        if (
+          vuln.fixAvailable &&
+          vuln.fixAvailable !== false &&
+          vuln.fixAvailable.name
+        ) {
+          const fixVersion = vuln.fixAvailable.version || "latest";
+          html += `npm install ${vuln.fixAvailable.name}@${fixVersion}\n`;
+        }
+      });
+      html += `
+            </div>`;
+    } else if (Object.keys(vulnerabilitiesObj).length > 0) {
+      html += `
+            <div class="warning">
+                ⚠️ <strong>注意:</strong> 发现漏洞但暂无直接修复方案，请考虑以下替代方案：
+                <ol>
+                    <li>查看是否有可用的次要版本更新</li>
+                    <li>考虑使用替代包</li>
+                    <li>评估风险是否可接受</li>
+                </ol>
+            </div>`;
+    } else {
+      html += `
+            <div class="success">
+                ✅ <strong>无需修复</strong> - 项目目前没有安全漏洞。
+            </div>`;
+    }
+    // 结尾
+    html += `
+        </section>
+        <div class="footer">
+            <h3>报告说明</h3>
+            <ul>
+                <li>本报告基于 <code>npm audit --json</code> 命令生成</li>
+                <li>CVSS (Common Vulnerability Scoring System) 分数范围 0-10，分数越高风险越大</li>
+                <li>建议定期运行 <code>npm audit</code> 检查项目安全状况</li>
+                <li>更多信息请参考 <a href="https://docs.npmjs.com/auditing-package-dependencies-for-security-vulnerabilities" target="_blank">npm 安全文档</a></li>
+            </ul>
+        </div>
+    </div>
+</body>
+</html>`;
+    // 将生成的HTML写入文件
+    await fs.promises.writeFile(savePath, html);
+  } catch (error) {
+    console.error(`Error rendering HTML audit result: ${error.message}`);
+    const errorHtml = `<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>NPM Audit 报告渲染错误</title>
+    <style>
+        body { font-family: Arial, sans-serif; margin: 40px; line-height: 1.6; }
+        .error { color: #d32f2f; background: #ffebee; padding: 20px; border-radius: 5px; border-left: 5px solid #d32f2f; }
+        h1 { color: #333; }
+        pre { background: #f5f5f5; padding: 15px; border-radius: 5px; overflow: auto; }
+    </style>
+</head>
+<body>
+    <h1>NPM Audit 报告渲染错误</h1>
+    <div class="error">
+        <h2>❌ 错误</h2>
+        <p>${error.message}</p>
+    </div>
+    <h3>原始结果（前1000字符）:</h3>
+    <pre>${auditResult.substring(0, 1000)}</pre>
+</body>
+</html>`;
+    await fs.promises.writeFile(savePath, errorHtml);
+  }
+}

package/src/render/renderAuditResultTXT.js ADDED Viewed

@@ -0,0 +1,185 @@
+import fs from "fs";
+/**
+ * 渲染npm audit结果到纯文本格式
+ * @param {string} auditResult JSON格式的npm audit结果
+ * @param {Object} packageJsonInfo package.json文件内容
+ * @param {string} savePath 保存路径
+ * @returns {string} 纯文本格式的报告
+ */
+export async function renderAuditResultTXT(
+  auditResult,
+  packageJsonInfo,
+  savePath,
+) {
+  try {
+    const auditData = JSON.parse(auditResult);
+    // 检查是否有错误
+    if (auditData.error) {
+      const txt = `NPM Audit 报告\n\n❌ 错误: ${auditData.error}\n\n`;
+      await fs.promises.writeFile(savePath, txt);
+      return;
+    }
+    // 准备纯文本内容
+    let txt = `NPM Audit 安全审计报告\n`;
+    txt += `========================================\n\n`;
+    // 项目信息
+    txt += `项目信息\n`;
+    txt += `--------\n`;
+    txt += `项目名称: ${packageJsonInfo.name || "未知"}\n`;
+    txt += `项目版本: ${packageJsonInfo.version || "未知"}\n`;
+    txt += `审计时间: ${new Date().toLocaleString("zh-CN")}\n`;
+    txt += `审计工具: npm audit\n\n`;
+    // 漏洞统计摘要
+    const metadata = auditData.metadata;
+    if (metadata && metadata.vulnerabilities) {
+      const vulnStats = metadata.vulnerabilities;
+      txt += `漏洞统计摘要\n`;
+      txt += `------------\n`;
+      txt += `严重级别        数量\n`;
+      txt += `----------------------\n`;
+      txt += `严重 (critical)  ${vulnStats.critical || 0}\n`;
+      txt += `高 (high)        ${vulnStats.high || 0}\n`;
+      txt += `中 (moderate)    ${vulnStats.moderate || 0}\n`;
+      txt += `低 (low)         ${vulnStats.low || 0}\n`;
+      txt += `信息 (info)      ${vulnStats.info || 0}\n`;
+      txt += `----------------------\n`;
+      txt += `总计            ${vulnStats.total || 0}\n\n`;
+      // 依赖统计
+      const depStats = metadata.dependencies;
+      if (depStats) {
+        txt += `依赖统计\n`;
+        txt += `--------\n`;
+        txt += `生产依赖: ${depStats.prod || 0}\n`;
+        txt += `开发依赖: ${depStats.dev || 0}\n`;
+        txt += `可选依赖: ${depStats.optional || 0}\n`;
+        txt += `Peer依赖: ${depStats.peer || 0}\n`;
+        txt += `总依赖数: ${depStats.total || 0}\n\n`;
+      }
+    }
+    // 详细漏洞列表
+    const vulnerabilities = auditData.vulnerabilities;
+    if (vulnerabilities && Object.keys(vulnerabilities).length > 0) {
+      txt += `详细漏洞列表\n`;
+      txt += `------------\n\n`;
+      Object.entries(vulnerabilities).forEach(([pkgName, vuln]) => {
+        const severity = vuln.severity || "unknown";
+        const severitySymbol = {
+          critical: "[CRITICAL]",
+          high: "[HIGH]",
+          moderate: "[MODERATE]",
+          low: "[LOW]",
+          info: "[INFO]",
+        }[severity] || "[UNKNOWN]";
+        txt += `${severitySymbol} ${pkgName}\n`;
+        txt += `严重级别: ${severity}\n`;
+        txt += `是否直接依赖: ${vuln.isDirect ? "是" : "否"}\n`;
+        txt += `受影响版本: ${vuln.range || "未知"}\n`;
+        // 修复建议
+        if (vuln.fixAvailable) {
+          if (vuln.fixAvailable === false) {
+            txt += `修复建议: 暂无可用修复\n`;
+          } else {
+            txt += `修复建议: 升级到 ${vuln.fixAvailable.version || "最新版本"}\n`;
+          }
+        } else {
+          txt += `修复建议: 检查更新\n`;
+        }
+        txt += `\n`;
+        // 漏洞详情
+        if (vuln.via && Array.isArray(vuln.via)) {
+          txt += `漏洞详情:\n`;
+          vuln.via.forEach((issue, index) => {
+            if (typeof issue === "string") {
+              txt += `  ${index + 1}. 间接漏洞: ${issue}\n`;
+            } else {
+              txt += `  ${index + 1}. ${issue.title || "未知漏洞"}\n`;
+              txt += `     严重级别: ${issue.severity || "未知"}\n`;
+              if (issue.url) {
+                txt += `     参考链接: ${issue.url}\n`;
+              }
+              if (issue.range) {
+                txt += `     受影响版本: ${issue.range}\n`;
+              }
+              if (issue.cvss && issue.cvss.score !== undefined) {
+                txt += `     CVSS 评分: ${issue.cvss.score}\n`;
+              }
+              if (issue.cwe && issue.cwe.length > 0) {
+                txt += `     CWE: ${issue.cwe.join(", ")}\n`;
+              }
+            }
+            txt += `\n`;
+          });
+        }
+        txt += `----------------------------------------\n\n`;
+      });
+    } else {
+      txt += `详细漏洞列表\n`;
+      txt += `------------\n`;
+      txt += `✅ 恭喜！未发现任何安全漏洞。\n\n`;
+    }
+    // 修复建议总结
+    txt += `修复建议总结\n`;
+    txt += `------------\n`;
+    const vulnerabilitiesObj = auditData.vulnerabilities || {};
+    const hasFixAvailable = Object.values(vulnerabilitiesObj).some(
+      (vuln) => vuln.fixAvailable && vuln.fixAvailable !== false,
+    );
+    if (hasFixAvailable) {
+      txt += `以下依赖有可用修复：\n\n`;
+      Object.entries(vulnerabilitiesObj).forEach(([pkgName, vuln]) => {
+        if (vuln.fixAvailable && vuln.fixAvailable !== false) {
+          const fixVersion = vuln.fixAvailable.version || "最新版本";
+          txt += `- ${pkgName}: 升级到版本 ${fixVersion}\n`;
+        }
+      });
+      txt += `\n`;
+      txt += `执行以下命令修复漏洞：\n\n`;
+      Object.entries(vulnerabilitiesObj).forEach(([pkgName, vuln]) => {
+        if (
+          vuln.fixAvailable &&
+          vuln.fixAvailable !== false &&
+          vuln.fixAvailable.name
+        ) {
+          const fixVersion = vuln.fixAvailable.version || "latest";
+          txt += `npm install ${vuln.fixAvailable.name}@${fixVersion}\n`;
+        }
+      });
+      txt += `\n`;
+    } else if (Object.keys(vulnerabilitiesObj).length > 0) {
+      txt += `⚠️ 注意: 发现漏洞但暂无直接修复方案，请考虑以下替代方案：\n`;
+      txt += `1. 查看是否有可用的次要版本更新\n`;
+      txt += `2. 考虑使用替代包\n`;
+      txt += `3. 评估风险是否可接受\n\n`;
+    } else {
+      txt += `✅ 无需修复 - 项目目前没有安全漏洞。\n\n`;
+    }
+    // 结尾
+    txt += `报告说明\n`;
+    txt += `--------\n`;
+    txt += `- 本报告基于 'npm audit --json' 命令生成\n`;
+    txt += `- CVSS (Common Vulnerability Scoring System) 分数范围 0-10，分数越高风险越大\n`;
+    txt += `- 建议定期运行 'npm audit' 检查项目安全状况\n`;
+    txt += `- 更多信息请参考 https://docs.npmjs.com/auditing-package-dependencies-for-security-vulnerabilities\n`;
+    // 将生成的纯文本写入文件
+    await fs.promises.writeFile(savePath, txt);
+  } catch (error) {
+    console.error(`Error rendering TXT audit result: ${error.message}`);
+    const errorTxt = `NPM Audit 报告渲染错误\n\n❌ 错误: ${error.message}\n\n原始结果（前1000字符）:\n\n${auditResult.substring(0, 1000)}`;
+    await fs.promises.writeFile(savePath, errorTxt);
+  }
+}

package/src/server.js ADDED Viewed

@@ -0,0 +1,42 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { auditProject } from "./index.js";
+import { z } from "zod";
+const server = new McpServer({
+  name: "project-audit-server",
+  title: "项目审计服务",
+  version: "1.0.0",
+})
+// auditProject("https://github.com/facebook/react/tree/v19.2.3", "./audit-result.md", "md");
+server.registerTool(
+  "auditProject",
+  {
+    title: "auditProject",
+    description: "审计项目",
+    inputSchema: {
+      projectPath: z.string().describe("当前项目路径（支持本地和远程项目）"),
+      savePath: z.string().describe("审计结果保存路径（当前项目根目录，不含扩展名，将根据格式自动添加）"),
+      outputFormat: z
+        .enum(["md", "html", "txt", "dashboard"])
+        .default("md")
+        .describe("输出格式：md(Markdown)、html(HTML页面)、txt(纯文本)、dashboard(带图表的可视化页面)"),
+    },
+  },
+  async ({ projectPath, savePath, outputFormat = "md" }) => {
+    const result = await auditProject(projectPath, savePath, outputFormat);
+    return {
+      content: [
+        {
+          type: "text",
+          text: `项目审计完成，输出格式：${outputFormat}，文件路径：${result.filePath}`,
+        },
+      ],
+    };
+  },
+);
+const transport = new StdioServerTransport();
+server.connect(transport);