apps/web                 Dashboard / 落地页（Week 3 升级 Next.js）
packages/gateway         本地 MCP 代理 CLI
packages/policy-engine   策略评估
packages/shared          共享类型
packages/demo-servers    红队演示 MCP Server
policies/                默认 fail-closed 策略

pnpm install
pnpm lint && pnpm typecheck && pnpm test
pnpm build

# A1/A2：允许工作区读 / 拒绝系统写
pnpm guardian eval --policy policies/default.fail-closed.yaml \
  --server demo-fs --tool read_file --args '{"path":"/workspace/a.txt"}'

bash scenarios/a1-a2.sh

{
  "mcpServers": {
    "guardian-demo-fs": {
      "command": "node",
      "args": [
        "/ABS/PATH/mcp-guardian/packages/gateway/dist/cli.js",
        "start",
        "--config",
        "/ABS/PATH/mcp-guardian/mcp-guardian.config.yaml"
      ]
    }
  }
}