mcp-aws-manager 0.3.6 → 0.3.8

package/README.md

@@ -91,10 +91,16 @@ If AWS auth is not available, use manual fallback:
 mcp-aws-manager discover --manual-server-list ./servers.csv --pem-paths C:\keys\prod.pem --no-progress
 ```
 
-Generate GUI report (interactive HTML):
+GUI report is generated by default (auto path: workspace/home `aws-inventory.html`):
 
 ```bash
-mcp-aws-manager discover --profiles default --html-out ./inventory.html --no-progress
+mcp-aws-manager discover --profiles default --no-progress
+```
+
+Custom path / open behavior:
+
+```bash
+mcp-aws-manager discover --profiles default --html-out ./inventory.html --open-html --no-progress
 ```
 
 ## User Confirmation Required
@@ -228,8 +234,9 @@ aws sts get-caller-identity --profile default
 - `--ssh-user <name>`
 - `--ssh-port <port>`
 - `--ssh-connect-timeout <seconds>`
-- `--html-out <path>`
-- `--open-html`
+- `--html-out <path>` (default: auto path, workspace/home `aws-inventory.html`)
+- `--open-html` (force open)
+- `--no-open-html` (disable auto-open)
 - `--auto-sso-login` / `--no-auto-sso-login`
 - `--format <json|csv>`
 - `--out <path>`

package/README_KO.md

@@ -19,7 +19,7 @@ mcp-aws-manager discover --profiles default --no-progress
 - SSM 상태 확인: managed/online
 - 런타임 스냅샷(선택), SSM 완화(선택)
 - AWS 인증이 안 될 때 수동 모드: JSON/CSV 서버 목록 + PEM SSH
-- GUI 리포트 생성: `--html-out` (검색/필터/CSV 다운로드 버튼 포함)
+- GUI 리포트 기본 생성: 워크스페이스/홈 자동 경로 `aws-inventory.html` (검색/필터/CSV 다운로드 버튼 포함)
 - 사람이 개입해야 할 상황을 `ACTION_REQUIRED`로 표준화
 
 ## 바이너리
@@ -70,11 +70,13 @@ mcp-aws-manager discover --manual-server-list ./servers.csv --pem-paths C:\keys\
 ## GUI 리포트
 
 ```bash
-mcp-aws-manager discover --profiles default --html-out ./inventory.html --open-html --no-progress
+mcp-aws-manager discover --profiles default --no-progress
 ```
 
-- `--html-out <path>`: 인터랙티브 HTML 리포트 생성
-- `--open-html`: 생성 후 브라우저 자동 오픈 시도
+- 기본 경로: 워크스페이스/홈 자동 선택(`aws-inventory.html`)
+- `--html-out <path>`: 리포트 경로 변경
+- `--open-html`: 생성 후 브라우저 오픈 강제
+- `--no-open-html`: 자동 오픈 비활성화
 - GUI에서 현재 뷰 기준 CSV 다운로드 가능
 
 ## MCP 도구

package/bin/mcp-aws-manager-mcp.js

@@ -1,4 +1,4 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 "use strict";
 
 const path = require("node:path");

package/bin/mcp-aws-manager.js

@@ -11,6 +11,7 @@ const DEFAULT_SNAPSHOT_CONCURRENCY = 3;
 const MAX_SSM_FILTER_IDS = 50;
 const DEFAULT_SERVER_NAME = "mcp-aws-manager";
 const DEFAULT_MCP_COMMAND = "mcp-aws-manager-mcp";
+const DEFAULT_HTML_REPORT_NAME = "aws-inventory.html";
 const SUPPORTED_CLIENTS = new Set(["codex", "claude", "cursor", "windsurf", "antigravity"]);
 const INTERNAL_BACKEND_ID = "internal";
 
@@ -206,6 +207,64 @@ function expandHome(input) {
   return value;
 }
 
+function isWritableDirectory(dirPath) {
+  try {
+    const resolved = path.resolve(String(dirPath || ""));
+    fs.mkdirSync(resolved, { recursive: true });
+    fs.accessSync(resolved, fs.constants.W_OK);
+    return true;
+  } catch (_error) {
+    return false;
+  }
+}
+
+function isLikelyProtectedInstallDir(dirPath) {
+  const resolved = path.resolve(String(dirPath || ""));
+  if (!resolved) return false;
+  const normalized = resolved.replace(/\//g, "\\").toLowerCase();
+  if (process.platform === "win32") {
+    if (normalized.includes("\\program files\\")) return true;
+    if (/^[a-z]:\\windows(\\|$)/.test(normalized)) return true;
+  } else {
+    if (normalized === "\\usr" || normalized.startsWith("\\usr\\")) return true;
+    if (normalized === "\\opt" || normalized.startsWith("\\opt\\")) return true;
+    if (normalized === "\\system" || normalized.startsWith("\\system\\")) return true;
+  }
+  return false;
+}
+
+function resolveDefaultHtmlOutPath() {
+  const explicit = envText("MCP_AWS_WORKSPACE_DIR");
+  if (explicit) {
+    const dir = path.resolve(expandHome(explicit));
+    if (isWritableDirectory(dir)) {
+      return path.join(dir, DEFAULT_HTML_REPORT_NAME);
+    }
+  }
+
+  const candidates = [
+    envText("PWD"),
+    envText("INIT_CWD"),
+    envText("WORKSPACE_DIR"),
+    envText("PROJECT_ROOT")
+  ];
+  for (const raw of candidates) {
+    if (!raw) continue;
+    const dir = path.resolve(expandHome(raw));
+    if (isLikelyProtectedInstallDir(dir)) continue;
+    if (isWritableDirectory(dir)) {
+      return path.join(dir, DEFAULT_HTML_REPORT_NAME);
+    }
+  }
+
+  const home = os.homedir();
+  if (isWritableDirectory(home)) {
+    return path.join(home, DEFAULT_HTML_REPORT_NAME);
+  }
+
+  return path.resolve(process.cwd(), DEFAULT_HTML_REPORT_NAME);
+}
+
 function usageText() {
   const clientList = Array.from(SUPPORTED_CLIENTS).join(",");
   return [
@@ -266,8 +325,9 @@ function usageText() {
     "  --ssh-user <name>                 (default: ec2-user)",
     "  --ssh-port <port>                 (default: 22)",
     "  --ssh-connect-timeout <seconds>   (default: 8)",
-    "  --html-out <path>                 (optional interactive HTML report output path)",
-    "  --open-html                       (try opening HTML report after write)",
+    "  --html-out <path>                 (default: auto -> workspace/home aws-inventory.html)",
+    "  --open-html                       (force opening HTML report after write)",
+    "  --no-open-html                    (disable auto-open of HTML report)",
     "  --auto-sso-login / --no-auto-sso-login",
     "  --format <json|csv>               (default: json)",
     "  --out <path>",
@@ -285,7 +345,7 @@ function usageText() {
     "  MCP_AWS_SNAPSHOT_MAX_KB, MCP_AWS_AUTO_SSO_LOGIN",
     "  MCP_AWS_MANUAL_SERVER_LIST, MCP_AWS_PEM_PATHS, MCP_AWS_SSH_USER, MCP_AWS_SSH_PORT",
     "  MCP_AWS_SSH_CONNECT_TIMEOUT",
-    "  MCP_AWS_HTML_OUT, MCP_AWS_OPEN_HTML",
+    "  MCP_AWS_HTML_OUT, MCP_AWS_OPEN_HTML, MCP_AWS_HEADLESS, MCP_AWS_WORKSPACE_DIR",
     "  MCP_AWS_FORMAT, MCP_AWS_OUT, MCP_AWS_NO_PROGRESS",
     ""
   ].join("\n");
@@ -502,6 +562,7 @@ function parseDiscoverArgs(argv) {
     if (arg === "--auto-sso-login") { options.autoSsoLogin = true; continue; }
     if (arg === "--no-auto-sso-login") { options.autoSsoLogin = false; continue; }
     if (arg === "--open-html") { options.openHtml = true; continue; }
+    if (arg === "--no-open-html") { options.openHtml = false; continue; }
     if (arg === "--progress") { options.noProgress = false; continue; }
     if (arg === "--no-progress") { options.noProgress = true; continue; }
     if (!arg.startsWith("--")) throw new Error(`Unexpected argument: ${arg}`);
@@ -529,6 +590,8 @@ function parseDiscoverArgs(argv) {
 
   const envNoProgress = envText("MCP_AWS_NO_PROGRESS");
 
+  const envOpenHtml = envText("MCP_AWS_OPEN_HTML");
+
   return {
     help: false,
     profiles: parseCsv(options.profiles) || parseCsv(envText("MCP_AWS_PROFILES")),
@@ -561,8 +624,8 @@ function parseDiscoverArgs(argv) {
     sshConnectTimeoutSec: Math.round(toPosNum(options.sshConnectTimeoutSec || envText("MCP_AWS_SSH_CONNECT_TIMEOUT") || "8", "--ssh-connect-timeout", 8)),
     htmlOutPath: options.htmlOutPath
       ? path.resolve(expandHome(options.htmlOutPath))
-      : (envText("MCP_AWS_HTML_OUT") ? path.resolve(expandHome(envText("MCP_AWS_HTML_OUT"))) : null),
-    openHtml: options.openHtml != null ? options.openHtml : envBool("MCP_AWS_OPEN_HTML"),
+      : (envText("MCP_AWS_HTML_OUT") ? path.resolve(expandHome(envText("MCP_AWS_HTML_OUT"))) : resolveDefaultHtmlOutPath()),
+    openHtml: options.openHtml != null ? options.openHtml : (envOpenHtml != null ? envBool("MCP_AWS_OPEN_HTML") : null),
     autoSsoLogin: options.autoSsoLogin != null ? options.autoSsoLogin : (envText("MCP_AWS_AUTO_SSO_LOGIN") != null ? envBool("MCP_AWS_AUTO_SSO_LOGIN") : true),
     format,
     outPath: options.outPath ? path.resolve(expandHome(options.outPath)) : (envText("MCP_AWS_OUT") ? path.resolve(expandHome(envText("MCP_AWS_OUT"))) : null),
@@ -2934,9 +2997,25 @@ function renderHtmlReport(records) {
 function writeHtmlReport(config, records) {
   if (!config.htmlOutPath) return null;
   const html = renderHtmlReport(records);
-  fs.writeFileSync(config.htmlOutPath, html, "utf8");
-  eprint(`Wrote HTML report to ${config.htmlOutPath}`);
-  return config.htmlOutPath;
+  try {
+    fs.writeFileSync(config.htmlOutPath, html, "utf8");
+    eprint(`Wrote HTML report to ${config.htmlOutPath}`);
+    return config.htmlOutPath;
+  } catch (error) {
+    const code = String(error && error.code ? error.code : "");
+    if (!["EACCES", "EPERM", "EROFS"].includes(code)) {
+      throw error;
+    }
+
+    const fallbackPath = path.join(os.homedir(), path.basename(config.htmlOutPath) || DEFAULT_HTML_REPORT_NAME);
+    if (path.resolve(fallbackPath) === path.resolve(config.htmlOutPath)) {
+      throw error;
+    }
+    fs.mkdirSync(path.dirname(fallbackPath), { recursive: true });
+    fs.writeFileSync(fallbackPath, html, "utf8");
+    eprint(`WARNING: failed to write HTML report to ${config.htmlOutPath} (${code}); wrote fallback to ${fallbackPath}`);
+    return fallbackPath;
+  }
 }
 
 function tryOpenFile(targetPath) {
@@ -2961,6 +3040,19 @@ function tryOpenFile(targetPath) {
   }
 }
 
+function shouldAutoOpenHtml(config) {
+  if (config.openHtml === true) return true;
+  if (config.openHtml === false) return false;
+
+  // Auto mode: only try in likely local desktop sessions.
+  if (envBool("MCP_AWS_HEADLESS")) return false;
+  if (envBool("CI")) return false;
+  if (envText("SSH_CONNECTION") || envText("SSH_CLIENT") || envText("SSH_TTY")) return false;
+  if (!(process.stdout && process.stdout.isTTY)) return false;
+  if (process.platform === "linux" && !envText("DISPLAY") && !envText("WAYLAND_DISPLAY")) return false;
+  return true;
+}
+
 function writeOutput(config, content) {
   if (config.outPath) {
     fs.writeFileSync(config.outPath, content, "utf8");
@@ -2976,7 +3068,7 @@ async function runWorkflow(config) {
   const requiredActions = [];
 
   progress(config, 1, "orchestrator: parse user request and operation scope");
-  eprint(`Inputs: execution_mode=${INTERNAL_BACKEND_ID}, profiles=${config.profiles ? config.profiles.join(",") : "auto"}, regions=${config.regions ? config.regions.join(",") : "auto"}, include_ec2=${config.includeEc2 ? "on" : "off"}, include_lambda=${config.includeLambda ? "on" : "off"}, include_alb=${config.includeAlb ? "on" : "off"}, include_asg=${config.includeAsg ? "on" : "off"}, include_rds=${config.includeRds ? "on" : "off"}, include_elasticache=${config.includeElastiCache ? "on" : "off"}, include_route53=${config.includeRoute53 ? "on" : "off"}, public_only=${config.publicOnly ? "on" : "off"}, managed_only=${config.managedOnly ? "on" : "off"}, auto_remediate_ssm=${config.autoRemediateSsm ? "on" : "off"}, runtime_snapshot=${config.runtimeSnapshot ? "on" : "off"}, manual_server_list=${config.manualServerListPath || "off"}, pem_paths=${config.pemPaths && config.pemPaths.length ? config.pemPaths.length : 0}, ssh_user=${config.sshUser}, ssh_port=${config.sshPort}, html_out=${config.htmlOutPath || "off"}, open_html=${config.openHtml ? "on" : "off"}, auto_sso_login=${config.autoSsoLogin ? "on" : "off"}`);
+  eprint(`Inputs: execution_mode=${INTERNAL_BACKEND_ID}, profiles=${config.profiles ? config.profiles.join(",") : "auto"}, regions=${config.regions ? config.regions.join(",") : "auto"}, include_ec2=${config.includeEc2 ? "on" : "off"}, include_lambda=${config.includeLambda ? "on" : "off"}, include_alb=${config.includeAlb ? "on" : "off"}, include_asg=${config.includeAsg ? "on" : "off"}, include_rds=${config.includeRds ? "on" : "off"}, include_elasticache=${config.includeElastiCache ? "on" : "off"}, include_route53=${config.includeRoute53 ? "on" : "off"}, public_only=${config.publicOnly ? "on" : "off"}, managed_only=${config.managedOnly ? "on" : "off"}, auto_remediate_ssm=${config.autoRemediateSsm ? "on" : "off"}, runtime_snapshot=${config.runtimeSnapshot ? "on" : "off"}, manual_server_list=${config.manualServerListPath || "off"}, pem_paths=${config.pemPaths && config.pemPaths.length ? config.pemPaths.length : 0}, ssh_user=${config.sshUser}, ssh_port=${config.sshPort}, html_out=${config.htmlOutPath || "off"}, open_html=${config.openHtml == null ? "auto" : (config.openHtml ? "on" : "off")}, auto_sso_login=${config.autoSsoLogin ? "on" : "off"}`);
 
   progress(config, 2, "config_validator: validate settings and output path");
   validateConfig(config, warnings, requiredActions);
@@ -3039,7 +3131,7 @@ async function runWorkflow(config) {
   progress(config, 8, "cli_output_formatter: render JSON/CSV and guidance payload");
   writeOutput(config, renderOutput(config, outputRecords));
   const htmlPath = writeHtmlReport(config, outputRecords);
-  if (htmlPath && config.openHtml) {
+  if (htmlPath && shouldAutoOpenHtml(config)) {
     const opened = tryOpenFile(htmlPath);
     if (!opened.ok) {
       warnings.push(`Failed to auto-open HTML report: ${opened.detail}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-aws-manager",
-  "version": "0.3.6",
+  "version": "0.3.8",
   "description": "AWS operations CLI and MCP server (SSM-only) for EC2/Lambda inventory, remediation, and runtime snapshots",
   "license": "MIT",
   "publishConfig": {