mcp-aws-manager 0.3.7 → 0.3.9

package/README.md

@@ -91,7 +91,7 @@ If AWS auth is not available, use manual fallback:
 mcp-aws-manager discover --manual-server-list ./servers.csv --pem-paths C:\keys\prod.pem --no-progress
 ```
 
-GUI report is generated by default (`./aws-inventory.html`):
+GUI report is generated by default (auto path: workspace/home `aws-inventory.html`):
 
 ```bash
 mcp-aws-manager discover --profiles default --no-progress
@@ -103,6 +103,8 @@ Custom path / open behavior:
 mcp-aws-manager discover --profiles default --html-out ./inventory.html --open-html --no-progress
 ```
 
+By default, HTML open is enabled. Use `--no-open-html` to disable.
+
 ## User Confirmation Required
 
 These are normally the only manual steps (agent-guided):
@@ -234,8 +236,8 @@ aws sts get-caller-identity --profile default
 - `--ssh-user <name>`
 - `--ssh-port <port>`
 - `--ssh-connect-timeout <seconds>`
-- `--html-out <path>` (default: `./aws-inventory.html`)
-- `--open-html` (force open)
+- `--html-out <path>` (default: auto path, workspace/home `aws-inventory.html`)
+- `--open-html` (open; default is on)
 - `--no-open-html` (disable auto-open)
 - `--auto-sso-login` / `--no-auto-sso-login`
 - `--format <json|csv>`

package/README_KO.md

@@ -19,7 +19,7 @@ mcp-aws-manager discover --profiles default --no-progress
 - SSM 상태 확인: managed/online
 - 런타임 스냅샷(선택), SSM 완화(선택)
 - AWS 인증이 안 될 때 수동 모드: JSON/CSV 서버 목록 + PEM SSH
-- GUI 리포트 기본 생성: `./aws-inventory.html` (검색/필터/CSV 다운로드 버튼 포함)
+- GUI 리포트 기본 생성: 워크스페이스/홈 자동 경로 `aws-inventory.html` (검색/필터/CSV 다운로드 버튼 포함)
 - 사람이 개입해야 할 상황을 `ACTION_REQUIRED`로 표준화
 
 ## 바이너리
@@ -73,9 +73,9 @@ mcp-aws-manager discover --manual-server-list ./servers.csv --pem-paths C:\keys\
 mcp-aws-manager discover --profiles default --no-progress
 ```
 
-- 기본 경로: `./aws-inventory.html`
+- 기본 경로: 워크스페이스/홈 자동 선택(`aws-inventory.html`)
 - `--html-out <path>`: 리포트 경로 변경
-- `--open-html`: 생성 후 브라우저 오픈 강제
+- `--open-html`: 생성 후 브라우저 오픈(기본값: 켜짐)
 - `--no-open-html`: 자동 오픈 비활성화
 - GUI에서 현재 뷰 기준 CSV 다운로드 가능
 

package/bin/mcp-aws-manager-mcp.js

@@ -137,7 +137,8 @@ function buildCliArgs(input) {
   if (input.sshPort != null) args.push("--ssh-port", String(input.sshPort));
   if (input.sshConnectTimeoutSec != null) args.push("--ssh-connect-timeout", String(input.sshConnectTimeoutSec));
   if (input.htmlOutPath) args.push("--html-out", input.htmlOutPath);
-  if (input.openHtml) args.push("--open-html");
+  if (input.openHtml === true) args.push("--open-html");
+  if (input.openHtml === false) args.push("--no-open-html");
 
   if (input.autoSsoLogin === false) args.push("--no-auto-sso-login");
   if (input.autoSsoLogin === true) args.push("--auto-sso-login");
@@ -829,7 +830,7 @@ function toolSchema() {
     sshPort: z.number().int().positive().optional().describe("Default SSH port for manual mode (default: 22)."),
     sshConnectTimeoutSec: z.number().positive().optional().describe("SSH connect timeout seconds (default: 8)."),
     htmlOutPath: z.string().min(1).optional().describe("Optional HTML GUI report output path."),
-    openHtml: z.boolean().optional().describe("If true, attempt to open the generated HTML report."),
+    openHtml: z.boolean().optional().describe("Control HTML auto-open (default: true)."),
     autoSsoLogin: z.boolean().optional().describe("Enable/disable automatic aws sso login retry."),
     noProgress: z.boolean().optional().describe("Suppress CLI progress logs."),
     timeoutSec: z.number().positive().max(3600).optional().describe("Wrapper timeout for CLI process."),

package/bin/mcp-aws-manager.js

@@ -207,6 +207,64 @@ function expandHome(input) {
   return value;
 }
 
+function isWritableDirectory(dirPath) {
+  try {
+    const resolved = path.resolve(String(dirPath || ""));
+    fs.mkdirSync(resolved, { recursive: true });
+    fs.accessSync(resolved, fs.constants.W_OK);
+    return true;
+  } catch (_error) {
+    return false;
+  }
+}
+
+function isLikelyProtectedInstallDir(dirPath) {
+  const resolved = path.resolve(String(dirPath || ""));
+  if (!resolved) return false;
+  const normalized = resolved.replace(/\//g, "\\").toLowerCase();
+  if (process.platform === "win32") {
+    if (normalized.includes("\\program files\\")) return true;
+    if (/^[a-z]:\\windows(\\|$)/.test(normalized)) return true;
+  } else {
+    if (normalized === "\\usr" || normalized.startsWith("\\usr\\")) return true;
+    if (normalized === "\\opt" || normalized.startsWith("\\opt\\")) return true;
+    if (normalized === "\\system" || normalized.startsWith("\\system\\")) return true;
+  }
+  return false;
+}
+
+function resolveDefaultHtmlOutPath() {
+  const explicit = envText("MCP_AWS_WORKSPACE_DIR");
+  if (explicit) {
+    const dir = path.resolve(expandHome(explicit));
+    if (isWritableDirectory(dir)) {
+      return path.join(dir, DEFAULT_HTML_REPORT_NAME);
+    }
+  }
+
+  const candidates = [
+    envText("PWD"),
+    envText("INIT_CWD"),
+    envText("WORKSPACE_DIR"),
+    envText("PROJECT_ROOT")
+  ];
+  for (const raw of candidates) {
+    if (!raw) continue;
+    const dir = path.resolve(expandHome(raw));
+    if (isLikelyProtectedInstallDir(dir)) continue;
+    if (isWritableDirectory(dir)) {
+      return path.join(dir, DEFAULT_HTML_REPORT_NAME);
+    }
+  }
+
+  const home = os.homedir();
+  if (isWritableDirectory(home)) {
+    return path.join(home, DEFAULT_HTML_REPORT_NAME);
+  }
+
+  return path.resolve(process.cwd(), DEFAULT_HTML_REPORT_NAME);
+}
+
 function usageText() {
   const clientList = Array.from(SUPPORTED_CLIENTS).join(",");
   return [
@@ -267,9 +325,9 @@ function usageText() {
     "  --ssh-user <name>                 (default: ec2-user)",
     "  --ssh-port <port>                 (default: 22)",
     "  --ssh-connect-timeout <seconds>   (default: 8)",
-    "  --html-out <path>                 (default: ./aws-inventory.html)",
-    "  --open-html                       (force opening HTML report after write)",
-    "  --no-open-html                    (disable auto-open of HTML report)",
+    "  --html-out <path>                 (default: auto -> workspace/home aws-inventory.html)",
+    "  --open-html                       (open HTML report after write; default: on)",
+    "  --no-open-html                    (disable HTML auto-open)",
     "  --auto-sso-login / --no-auto-sso-login",
     "  --format <json|csv>               (default: json)",
     "  --out <path>",
@@ -287,7 +345,7 @@ function usageText() {
     "  MCP_AWS_SNAPSHOT_MAX_KB, MCP_AWS_AUTO_SSO_LOGIN",
     "  MCP_AWS_MANUAL_SERVER_LIST, MCP_AWS_PEM_PATHS, MCP_AWS_SSH_USER, MCP_AWS_SSH_PORT",
     "  MCP_AWS_SSH_CONNECT_TIMEOUT",
-    "  MCP_AWS_HTML_OUT, MCP_AWS_OPEN_HTML, MCP_AWS_HEADLESS",
+    "  MCP_AWS_HTML_OUT, MCP_AWS_OPEN_HTML, MCP_AWS_HEADLESS, MCP_AWS_WORKSPACE_DIR",
     "  MCP_AWS_FORMAT, MCP_AWS_OUT, MCP_AWS_NO_PROGRESS",
     ""
   ].join("\n");
@@ -566,8 +624,8 @@ function parseDiscoverArgs(argv) {
     sshConnectTimeoutSec: Math.round(toPosNum(options.sshConnectTimeoutSec || envText("MCP_AWS_SSH_CONNECT_TIMEOUT") || "8", "--ssh-connect-timeout", 8)),
     htmlOutPath: options.htmlOutPath
       ? path.resolve(expandHome(options.htmlOutPath))
-      : (envText("MCP_AWS_HTML_OUT") ? path.resolve(expandHome(envText("MCP_AWS_HTML_OUT"))) : path.resolve(process.cwd(), DEFAULT_HTML_REPORT_NAME)),
-    openHtml: options.openHtml != null ? options.openHtml : (envOpenHtml != null ? envBool("MCP_AWS_OPEN_HTML") : null),
+      : (envText("MCP_AWS_HTML_OUT") ? path.resolve(expandHome(envText("MCP_AWS_HTML_OUT"))) : resolveDefaultHtmlOutPath()),
+    openHtml: options.openHtml != null ? options.openHtml : (envOpenHtml != null ? envBool("MCP_AWS_OPEN_HTML") : true),
     autoSsoLogin: options.autoSsoLogin != null ? options.autoSsoLogin : (envText("MCP_AWS_AUTO_SSO_LOGIN") != null ? envBool("MCP_AWS_AUTO_SSO_LOGIN") : true),
     format,
     outPath: options.outPath ? path.resolve(expandHome(options.outPath)) : (envText("MCP_AWS_OUT") ? path.resolve(expandHome(envText("MCP_AWS_OUT"))) : null),
@@ -2939,9 +2997,25 @@ function renderHtmlReport(records) {
 function writeHtmlReport(config, records) {
   if (!config.htmlOutPath) return null;
   const html = renderHtmlReport(records);
-  fs.writeFileSync(config.htmlOutPath, html, "utf8");
-  eprint(`Wrote HTML report to ${config.htmlOutPath}`);
-  return config.htmlOutPath;
+  try {
+    fs.writeFileSync(config.htmlOutPath, html, "utf8");
+    eprint(`Wrote HTML report to ${config.htmlOutPath}`);
+    return config.htmlOutPath;
+  } catch (error) {
+    const code = String(error && error.code ? error.code : "");
+    if (!["EACCES", "EPERM", "EROFS"].includes(code)) {
+      throw error;
+    }
+
+    const fallbackPath = path.join(os.homedir(), path.basename(config.htmlOutPath) || DEFAULT_HTML_REPORT_NAME);
+    if (path.resolve(fallbackPath) === path.resolve(config.htmlOutPath)) {
+      throw error;
+    }
+    fs.mkdirSync(path.dirname(fallbackPath), { recursive: true });
+    fs.writeFileSync(fallbackPath, html, "utf8");
+    eprint(`WARNING: failed to write HTML report to ${config.htmlOutPath} (${code}); wrote fallback to ${fallbackPath}`);
+    return fallbackPath;
+  }
 }
 
 function tryOpenFile(targetPath) {
@@ -3060,7 +3134,7 @@ async function runWorkflow(config) {
   if (htmlPath && shouldAutoOpenHtml(config)) {
     const opened = tryOpenFile(htmlPath);
     if (!opened.ok) {
-      warnings.push(`Failed to auto-open HTML report: ${opened.detail}`);
+      eprint(`NOTE: Failed to auto-open HTML report: ${opened.detail}`);
     } else {
       eprint(`Opened HTML report via ${opened.detail}`);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-aws-manager",
-  "version": "0.3.7",
+  "version": "0.3.9",
   "description": "AWS operations CLI and MCP server (SSM-only) for EC2/Lambda inventory, remediation, and runtime snapshots",
   "license": "MIT",
   "publishConfig": {