fullshield 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -4,9 +4,19 @@ All notable changes to FullShield are documented here.
 
 ## Unreleased
 
-- Runtime requirement is Node.js **>= 22.13** (Node 20 is EOL). CI matrix is Node 22 and 24 on Linux, macOS, and Windows. `node:sqlite` is unflagged from 22.13.0 and is loaded only when history/confirm actually open a database — `node --import fullshield/runtime/register -e "1"` must not emit a SQLite `ExperimentalWarning`.
-- Dashboard `HistoryDb.close()` releases `history.db` (Windows cannot unlink an open SQLite handle).
-- Remediation agent runs `npm.cmd` on Windows and restores untracked files without `git checkout --`.
+## 0.1.1 — 2026-10-15
+
+### Phase 25 — 0.1.1 hardening (Windows + lazy SQLite)
+
+- CI matrix is Linux, macOS, and Windows × Node 22 and 24.
+- `node:sqlite` is loaded only when history/confirm open a database. `node --import fullshield/runtime/register -e "1"` prints nothing on stderr. Runtime entry points do not statically import sqlite.
+- Dashboard `HistoryDb.close()` is idempotent and uses try/finally so Windows can unlink `history.db`.
+- Fixer/agent diffs are `core.autocrlf`-independent: normalize to `\n` for compare, restore the file's original EOL on apply. Git pathspecs use POSIX slashes.
+- `--import` child processes use `pathToFileURL(...).href` (`importHref`), never a bare absolute path.
+- Flood test measures retained-heap delta after GC (< 10 MB) and asserts LRU sizes (512 / 64 / 128). Rate limiter covers the exact window edge and empty-then-refill.
+- CI pins `ubuntu-24.04` and uses checkout/setup-node/upload-artifact v7 (Node 24 runtime).
+- `@modelcontextprotocol/sdk` and `zod` are optional peerDependencies, lazy-imported only by `fullshield mcp`. Other scan/runtime deps stay required.
+- `npm pack` ships `README.md` at the tarball root. `package.json` has no empty `readme` field (that left the npm packument as `"readme": ""`).
 
 ## 0.1.0 — 2026-10-14
 

package/README.md

@@ -1,6 +1,6 @@
 # FullShield
 
-**v0.1.0 / alpha.** One install for Node.js/TypeScript backends: detect → classify → report → notify → fix → gate (CI `--fail-on` + runtime monitor). It does not stop attacks by itself.
+**v0.1.1 / alpha.** One install for Node.js/TypeScript backends: detect → classify → report → notify → fix → gate (CI `--fail-on` + runtime monitor). It does not stop attacks by itself.
 
 **Headline: dependency reachability.** A lockfile CVE is not the same as an unused package. FullShield classifies each OSV hit as `reachable` (imported and called), `imported-not-called` (−1), `reachable-via-dependency` (lockfile path from an imported direct dep — **severity kept**, path shown, e.g. `express > body-parser > qs`), `not-imported` (−2, only when no such path exists), or `reachability-unknown` (severity kept) when the lockfile format has no parsed dependency edges. DevDependency-only vulns are `info` with a `dev-only` note unless production sources import the package. Pair it with `fullshield sbom --format cyclonedx`.
 
@@ -60,6 +60,10 @@ This is a `0.x` release. APIs may change. Do not treat it as a penetration test.
 
 ## Known limitations
 
+- Platforms: Linux, macOS, and Windows on Node 22.13+. Quoted filenames in dirty-tree tests are POSIX-only (Windows forbids `"` in names).
+- `node:sqlite` is loaded only by history/confirm, not by `--import fullshield/runtime/register`. Dashboard closes every handle in `try/finally` (Windows cannot delete an open `history.db`).
+- FullShield does not stop OS or SSH exploits (including regreSSHion). It scans Node/TS apps you own.
+
 Experimental RASP structure-change scoring on the vendored PayloadsAllTheThings corpus (not a claim that live attacks are blocked):
 
 - **SQL 42/42.** Quote-breakouts inside `'…'` (`' OR 1=1 --`, `'; DROP TABLE x; --`) are detected. Payloads `"-"`, `" "`, `"&"`, `"^"` were moved to the benign set: they stay inside one single-quoted string token and are not exploitable in that sink.
@@ -113,7 +117,7 @@ app.use(shieldGuard({ mode: 'monitor', authRoutes: ['/login'] }));
 | `edge` | GET/HEAD posture check on a URL you pass: CDN/WAF, HTTPS redirect, security headers, `/.env` / `/.git` exposure. No crawl, no payloads. |
 | `install` | **Experimental** install-guard (`FULLSHIELD_EXPERIMENTAL_SUPPLY=1`). Static analysis only; never runs package scripts. Registry reads are `registry.npmjs.org` only. |
 | `confirm` | **Experimental** exploit confirm (`FULLSHIELD_EXPERIMENTAL_CONFIRM=1`). localhost / 127.0.0.1 / FullShield-started container only. Harmless canaries only. |
-| `mcp` | **Experimental** MCP server (`FULLSHIELD_EXPERIMENTAL_MCP=1`). Official `@modelcontextprotocol/sdk` stdio: `fullshield mcp --stdio`. Read-only tools: `scan`, `get_findings`, `explain_finding`, `propose_fix` (diff only, never writes), `verify_fix` (temp copy). |
+| `mcp` | **Experimental** MCP server (`FULLSHIELD_EXPERIMENTAL_MCP=1`). Official SDK stdio: `fullshield mcp --stdio`. Requires optional peers `@modelcontextprotocol/sdk` and `zod` (`npm i -D @modelcontextprotocol/sdk zod`); missing peers print an install hint, not a stack dump. Read-only tools: `scan`, `get_findings`, `explain_finding`, `propose_fix` (diff only, never writes), `verify_fix` (temp copy). |
 | `honey init` | **Experimental** honeytokens (`FULLSHIELD_EXPERIMENTAL_HONEY=1`). Decoy routes are **low** severity and aggregated per IP; only use of a canary **credential** is critical. Auto-block is off unless `threatAutoBlock` is set (shared-IP / NAT risk; max duration applies). Decoys are fake values added to `.gitignore`. |
 | `threat-model` | **Experimental** STRIDE + Mermaid (`FULLSHIELD_EXPERIMENTAL_PLATFORM=1`). |
 | `report --serve` | **Experimental** local dashboard (`FULLSHIELD_EXPERIMENTAL_PLATFORM=1`). Binds **127.0.0.1 only** and rejects any `Host` other than localhost/127.0.0.1 (DNS rebinding). No state-changing GET. |

package/dist/agent.js

@@ -5489,11 +5489,25 @@ function scan(options = {}) {
   return runScan(options);
 }
 
+// src/fixer/eol.ts
+function detectEol(text) {
+  return text.includes("\r\n") ? "\r\n" : "\n";
+}
+function normalizeNewlines(text) {
+  return text.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+function applyEol(text, eol) {
+  const normalized = normalizeNewlines(text);
+  return eol === "\n" ? normalized : normalized.replace(/\n/g, "\r\n");
+}
+
 // src/fixer/diff.ts
 function unifiedDiff(filename, before, after) {
-  if (before === after) return "";
-  const oldLines = before.split("\n");
-  const newLines = after.split("\n");
+  const oldNorm = normalizeNewlines(before);
+  const newNorm = normalizeNewlines(after);
+  if (oldNorm === newNorm) return "";
+  const oldLines = oldNorm.split("\n");
+  const newLines = newNorm.split("\n");
   const hunks = [`--- a/${filename}`, `+++ b/${filename}`];
   hunks.push(`@@ -1,${oldLines.length} +1,${newLines.length} @@`);
   for (const line of oldLines) hunks.push(`-${line}`);
@@ -5515,8 +5529,9 @@ function proposeFix(finding, source) {
   return void 0;
 }
 function helmetFix(file, source) {
-  if (/helmet\s*\(/.test(source)) return void 0;
-  let after = source;
+  const normalized = normalizeNewlines(source);
+  if (/helmet\s*\(/.test(normalized)) return void 0;
+  let after = normalized;
   if (!/require\(\s*['"]helmet['"]\s*\)|from\s+['"]helmet['"]/.test(after)) {
     after = `const helmet = require('helmet');
 ${after}`;
@@ -5525,17 +5540,19 @@ ${after}`;
     after = after.replace(/const app = express\(\s*\);/, (m) => `${m}
 app.use(helmet());`);
   }
-  if (after === source) return void 0;
-  return { kind: "config-add", safe: false, diff: unifiedDiff(file, source, after) };
+  if (after === normalized) return void 0;
+  return { kind: "config-add", safe: false, diff: unifiedDiff(file, normalized, after) };
 }
 function bodyLimitFix(file, source) {
-  if (!/express\.json\(\s*\)/.test(source)) return void 0;
-  const after = source.replace(/express\.json\(\s*\)/g, "express.json({ limit: '100kb' })");
-  return { kind: "config-add", safe: true, diff: unifiedDiff(file, source, after) };
+  const normalized = normalizeNewlines(source);
+  if (!/express\.json\(\s*\)/.test(normalized)) return void 0;
+  const after = normalized.replace(/express\.json\(\s*\)/g, "express.json({ limit: '100kb' })");
+  return { kind: "config-add", safe: true, diff: unifiedDiff(file, normalized, after) };
 }
 function cryptoFix(file, source) {
-  if (!/Math\.random\(\)/.test(source)) return void 0;
-  let after = source;
+  const normalized = normalizeNewlines(source);
+  if (!/Math\.random\(\)/.test(normalized)) return void 0;
+  let after = normalized;
   if (!/require\(\s*['"]crypto['"]\s*\)|from\s+['"]crypto['"]/.test(after)) {
     after = `const crypto = require('crypto');
 ${after}`;
@@ -5544,21 +5561,23 @@ ${after}`;
     /Math\.random\(\)\.toString\(\s*36\s*\)(?:\.slice\(\s*2\s*\))?/g,
     "crypto.randomUUID()"
   );
-  if (after === source) return void 0;
-  return { kind: "code-patch", safe: true, diff: unifiedDiff(file, source, after) };
+  if (after === normalized) return void 0;
+  return { kind: "code-patch", safe: true, diff: unifiedDiff(file, normalized, after) };
 }
 function gitignoreFix(file, source) {
   const target = file.endsWith(".gitignore") ? file : ".gitignore";
-  if (/(^|[\r\n])\.env(\r?\n|$)/.test(source)) return void 0;
-  const after = source.length === 0 || source.endsWith("\n") || source.endsWith("\r") ? `${source}.env
-` : `${source}
+  const normalized = normalizeNewlines(source);
+  if (/(^|\n)\.env(\n|$)/.test(normalized)) return void 0;
+  const after = normalized.length === 0 || normalized.endsWith("\n") ? `${normalized}.env
+` : `${normalized}
 .env
 `;
-  return { kind: "config-add", safe: true, diff: unifiedDiff(target, source, after) };
+  return { kind: "config-add", safe: true, diff: unifiedDiff(target, normalized, after) };
 }
 function secretEnvFix(file, source, finding) {
   const envName = envNameFor(finding.ruleId);
-  const lines = source.split("\n");
+  const normalized = normalizeNewlines(source);
+  const lines = normalized.split("\n");
   const idx = (finding.line ?? 1) - 1;
   const line = lines[idx];
   if (line === void 0) return void 0;
@@ -5569,7 +5588,7 @@ function secretEnvFix(file, source, finding) {
   if (replaced === line) return void 0;
   const afterLines = [...lines];
   afterLines[idx] = replaced;
-  return { kind: "code-patch", safe: false, diff: unifiedDiff(file, source, afterLines.join("\n")) };
+  return { kind: "code-patch", safe: false, diff: unifiedDiff(file, normalized, afterLines.join("\n")) };
 }
 function envNameFor(ruleId) {
   if (ruleId.includes("AWS")) return "AWS_ACCESS_KEY_ID";
@@ -5583,9 +5602,9 @@ function envNameFor(ruleId) {
   return "SECRET";
 }
 function applyUnifiedDiff(source, diff) {
-  const plus = diff.split("\n").filter((line) => line.startsWith("+") && !line.startsWith("+++")).map((line) => line.slice(1));
+  const plus = normalizeNewlines(diff).split("\n").filter((line) => line.startsWith("+") && !line.startsWith("+++")).map((line) => line.slice(1));
   if (plus.length === 0) return source;
-  return plus.join("\n");
+  return applyEol(plus.join("\n"), detectEol(source));
 }
 
 // src/agent/index.ts
@@ -5606,6 +5625,9 @@ function assertLocalAgentApi(url) {
 function npmBin() {
   return process.platform === "win32" ? "npm.cmd" : "npm";
 }
+function gitPath(file) {
+  return file.replace(/\\/g, "/");
+}
 function git(cwd, args) {
   return execFileSync("git", args, { cwd, encoding: "utf8" }).trim();
 }
@@ -5710,7 +5732,7 @@ async function runAgent(options = {}) {
       stoppedOnTestFailure = true;
       break;
     }
-    git(cwd, ["add", "--", ...files]);
+    git(cwd, ["add", "--", ...files.map(gitPath)]);
     git(cwd, ["-c", "user.email=agent@fullshield.local", "-c", "user.name=FullShield Agent", "commit", "-m", `fix: ${finding.ruleId}`]);
     git(cwd, ["push", remote, `HEAD:${branch}`]);
     if (PROTECTED.has(branch)) {

package/dist/cli/index.js

@@ -11,9 +11,6 @@ import { fileURLToPath } from 'url';
 import { performance } from 'perf_hooks';
 import { createRequire } from 'module';
 import { createServer } from 'http';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { z } from 'zod';
 import { Command } from 'commander';
 import { createConnection } from 'net';
 import pc from 'picocolors';
@@ -5898,11 +5895,29 @@ var init_engine2 = __esm({
   }
 });
 
+// src/fixer/eol.ts
+function detectEol(text) {
+  return text.includes("\r\n") ? "\r\n" : "\n";
+}
+function normalizeNewlines(text) {
+  return text.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+function applyEol(text, eol) {
+  const normalized = normalizeNewlines(text);
+  return eol === "\n" ? normalized : normalized.replace(/\n/g, "\r\n");
+}
+var init_eol = __esm({
+  "src/fixer/eol.ts"() {
+  }
+});
+
 // src/fixer/diff.ts
 function unifiedDiff(filename, before, after) {
-  if (before === after) return "";
-  const oldLines = before.split("\n");
-  const newLines = after.split("\n");
+  const oldNorm = normalizeNewlines(before);
+  const newNorm = normalizeNewlines(after);
+  if (oldNorm === newNorm) return "";
+  const oldLines = oldNorm.split("\n");
+  const newLines = newNorm.split("\n");
   const hunks = [`--- a/${filename}`, `+++ b/${filename}`];
   hunks.push(`@@ -1,${oldLines.length} +1,${newLines.length} @@`);
   for (const line of oldLines) hunks.push(`-${line}`);
@@ -5911,6 +5926,7 @@ function unifiedDiff(filename, before, after) {
 }
 var init_diff = __esm({
   "src/fixer/diff.ts"() {
+    init_eol();
   }
 });
 
@@ -5928,8 +5944,9 @@ function proposeFix(finding5, source) {
   return void 0;
 }
 function helmetFix(file, source) {
-  if (/helmet\s*\(/.test(source)) return void 0;
-  let after = source;
+  const normalized = normalizeNewlines(source);
+  if (/helmet\s*\(/.test(normalized)) return void 0;
+  let after = normalized;
   if (!/require\(\s*['"]helmet['"]\s*\)|from\s+['"]helmet['"]/.test(after)) {
     after = `const helmet = require('helmet');
 ${after}`;
@@ -5938,17 +5955,19 @@ ${after}`;
     after = after.replace(/const app = express\(\s*\);/, (m) => `${m}
 app.use(helmet());`);
   }
-  if (after === source) return void 0;
-  return { kind: "config-add", safe: false, diff: unifiedDiff(file, source, after) };
+  if (after === normalized) return void 0;
+  return { kind: "config-add", safe: false, diff: unifiedDiff(file, normalized, after) };
 }
 function bodyLimitFix(file, source) {
-  if (!/express\.json\(\s*\)/.test(source)) return void 0;
-  const after = source.replace(/express\.json\(\s*\)/g, "express.json({ limit: '100kb' })");
-  return { kind: "config-add", safe: true, diff: unifiedDiff(file, source, after) };
+  const normalized = normalizeNewlines(source);
+  if (!/express\.json\(\s*\)/.test(normalized)) return void 0;
+  const after = normalized.replace(/express\.json\(\s*\)/g, "express.json({ limit: '100kb' })");
+  return { kind: "config-add", safe: true, diff: unifiedDiff(file, normalized, after) };
 }
 function cryptoFix(file, source) {
-  if (!/Math\.random\(\)/.test(source)) return void 0;
-  let after = source;
+  const normalized = normalizeNewlines(source);
+  if (!/Math\.random\(\)/.test(normalized)) return void 0;
+  let after = normalized;
   if (!/require\(\s*['"]crypto['"]\s*\)|from\s+['"]crypto['"]/.test(after)) {
     after = `const crypto = require('crypto');
 ${after}`;
@@ -5957,21 +5976,23 @@ ${after}`;
     /Math\.random\(\)\.toString\(\s*36\s*\)(?:\.slice\(\s*2\s*\))?/g,
     "crypto.randomUUID()"
   );
-  if (after === source) return void 0;
-  return { kind: "code-patch", safe: true, diff: unifiedDiff(file, source, after) };
+  if (after === normalized) return void 0;
+  return { kind: "code-patch", safe: true, diff: unifiedDiff(file, normalized, after) };
 }
 function gitignoreFix(file, source) {
   const target = file.endsWith(".gitignore") ? file : ".gitignore";
-  if (/(^|[\r\n])\.env(\r?\n|$)/.test(source)) return void 0;
-  const after = source.length === 0 || source.endsWith("\n") || source.endsWith("\r") ? `${source}.env
-` : `${source}
+  const normalized = normalizeNewlines(source);
+  if (/(^|\n)\.env(\n|$)/.test(normalized)) return void 0;
+  const after = normalized.length === 0 || normalized.endsWith("\n") ? `${normalized}.env
+` : `${normalized}
 .env
 `;
-  return { kind: "config-add", safe: true, diff: unifiedDiff(target, source, after) };
+  return { kind: "config-add", safe: true, diff: unifiedDiff(target, normalized, after) };
 }
 function secretEnvFix(file, source, finding5) {
   const envName = envNameFor(finding5.ruleId);
-  const lines = source.split("\n");
+  const normalized = normalizeNewlines(source);
+  const lines = normalized.split("\n");
   const idx = (finding5.line ?? 1) - 1;
   const line = lines[idx];
   if (line === void 0) return void 0;
@@ -5982,7 +6003,7 @@ function secretEnvFix(file, source, finding5) {
   if (replaced === line) return void 0;
   const afterLines = [...lines];
   afterLines[idx] = replaced;
-  return { kind: "code-patch", safe: false, diff: unifiedDiff(file, source, afterLines.join("\n")) };
+  return { kind: "code-patch", safe: false, diff: unifiedDiff(file, normalized, afterLines.join("\n")) };
 }
 function envNameFor(ruleId) {
   if (ruleId.includes("AWS")) return "AWS_ACCESS_KEY_ID";
@@ -5996,13 +6017,14 @@ function envNameFor(ruleId) {
   return "SECRET";
 }
 function applyUnifiedDiff(source, diff) {
-  const plus = diff.split("\n").filter((line) => line.startsWith("+") && !line.startsWith("+++")).map((line) => line.slice(1));
+  const plus = normalizeNewlines(diff).split("\n").filter((line) => line.startsWith("+") && !line.startsWith("+++")).map((line) => line.slice(1));
   if (plus.length === 0) return source;
-  return plus.join("\n");
+  return applyEol(plus.join("\n"), detectEol(source));
 }
 var init_patches = __esm({
   "src/fixer/patches.ts"() {
     init_diff();
+    init_eol();
   }
 });
 
@@ -6365,23 +6387,39 @@ __export(dashboard_exports, {
 });
 function sqliteDb(file) {
   const { DatabaseSync } = require2("node:sqlite");
-  const db = new DatabaseSync(file);
-  db.exec(
-    "CREATE TABLE IF NOT EXISTS scans (scannedAt TEXT NOT NULL, total INTEGER NOT NULL, highCrit INTEGER NOT NULL)"
-  );
+  let db;
+  try {
+    db = new DatabaseSync(file);
+    db.exec(
+      "CREATE TABLE IF NOT EXISTS scans (scannedAt TEXT NOT NULL, total INTEGER NOT NULL, highCrit INTEGER NOT NULL)"
+    );
+  } catch (error) {
+    try {
+      db?.close();
+    } catch {
+    }
+    throw error;
+  }
+  let closed = false;
+  const handle = db;
   return {
     list() {
-      return db.prepare("SELECT scannedAt, total, highCrit FROM scans ORDER BY scannedAt").all();
+      return handle.prepare("SELECT scannedAt, total, highCrit FROM scans ORDER BY scannedAt").all();
     },
     insert(row) {
-      db.prepare("INSERT INTO scans (scannedAt, total, highCrit) VALUES (?, ?, ?)").run(
+      handle.prepare("INSERT INTO scans (scannedAt, total, highCrit) VALUES (?, ?, ?)").run(
         row.scannedAt,
         row.total,
         row.highCrit
       );
     },
     close() {
-      db.close();
+      if (closed) return;
+      closed = true;
+      try {
+        handle.close();
+      } catch {
+      }
     }
   };
 }
@@ -6472,7 +6510,13 @@ function startDashboard(opts) {
         })
       });
     });
-    server.on("error", reject);
+    server.on("error", (err) => {
+      try {
+        db.close();
+      } catch {
+      }
+      reject(err);
+    });
   });
 }
 var require2;
@@ -6582,11 +6626,13 @@ var init_llm = __esm({
 // src/mcp/index.ts
 var mcp_exports = {};
 __export(mcp_exports, {
+  MCP_PEER_ERROR: () => MCP_PEER_ERROR,
   callMcpTool: () => callMcpTool,
   createMcpSession: () => createMcpSession,
   createOfficialMcpServer: () => createOfficialMcpServer,
   handleMcpRequest: () => handleMcpRequest,
   listMcpTools: () => listMcpTools,
+  loadMcpPeers: () => loadMcpPeers,
   startMcpStdio: () => startMcpStdio
 });
 function createMcpSession(opts = {}) {
@@ -6680,7 +6726,15 @@ async function handleMcpRequest(session, req) {
 function textResult(value) {
   return { content: [{ type: "text", text: JSON.stringify(value) }] };
 }
-function createOfficialMcpServer(opts = {}) {
+async function loadMcpPeers(importer = defaultMcpPeerImporter) {
+  try {
+    return await importer();
+  } catch {
+    throw new Error(MCP_PEER_ERROR);
+  }
+}
+async function createOfficialMcpServer(opts = {}) {
+  const { McpServer, z } = await loadMcpPeers(opts.loadPeers);
   const session = createMcpSession(opts);
   const server = new McpServer({ name: "fullshield", version: "0.1.0" });
   const modulesSchema = z.array(z.enum(["deps", "secrets", "sast", "config"])).optional();
@@ -6728,15 +6782,30 @@ function createOfficialMcpServer(opts = {}) {
   return server;
 }
 async function startMcpStdio(opts = {}) {
-  const server = createOfficialMcpServer(opts);
+  const { StdioServerTransport } = await loadMcpPeers(opts.loadPeers);
+  const server = await createOfficialMcpServer(opts);
   const transport = new StdioServerTransport();
   await server.connect(transport);
 }
+var MCP_PEER_ERROR, defaultMcpPeerImporter;
 var init_mcp = __esm({
   "src/mcp/index.ts"() {
     init_engine2();
     init_patches();
     init_llm();
+    MCP_PEER_ERROR = "fullshield mcp requires optional peers @modelcontextprotocol/sdk and zod. Install with: npm i -D @modelcontextprotocol/sdk zod";
+    defaultMcpPeerImporter = async () => {
+      const [serverMod, stdioMod, zodMod] = await Promise.all([
+        import('@modelcontextprotocol/sdk/server/mcp.js'),
+        import('@modelcontextprotocol/sdk/server/stdio.js'),
+        import('zod')
+      ]);
+      return {
+        McpServer: serverMod.McpServer,
+        StdioServerTransport: stdioMod.StdioServerTransport,
+        z: zodMod.z
+      };
+    };
   }
 });
 
@@ -7155,6 +7224,9 @@ function assertLocalAgentApi(url) {
 function npmBin() {
   return process.platform === "win32" ? "npm.cmd" : "npm";
 }
+function gitPath(file) {
+  return file.replace(/\\/g, "/");
+}
 function git(cwd, args) {
   return execFileSync("git", args, { cwd, encoding: "utf8" }).trim();
 }
@@ -7259,7 +7331,7 @@ async function runAgent(options = {}) {
       stoppedOnTestFailure = true;
       break;
     }
-    git(cwd, ["add", "--", ...files]);
+    git(cwd, ["add", "--", ...files.map(gitPath)]);
     git(cwd, ["-c", "user.email=agent@fullshield.local", "-c", "user.name=FullShield Agent", "commit", "-m", `fix: ${finding5.ruleId}`]);
     git(cwd, ["push", remote, `HEAD:${branch}`]);
     if (PROTECTED.has(branch)) {

package/dist/dashboard.js

@@ -7,23 +7,39 @@ import { join } from 'path';
 var require2 = createRequire(import.meta.url);
 function sqliteDb(file) {
   const { DatabaseSync } = require2("node:sqlite");
-  const db = new DatabaseSync(file);
-  db.exec(
-    "CREATE TABLE IF NOT EXISTS scans (scannedAt TEXT NOT NULL, total INTEGER NOT NULL, highCrit INTEGER NOT NULL)"
-  );
+  let db;
+  try {
+    db = new DatabaseSync(file);
+    db.exec(
+      "CREATE TABLE IF NOT EXISTS scans (scannedAt TEXT NOT NULL, total INTEGER NOT NULL, highCrit INTEGER NOT NULL)"
+    );
+  } catch (error) {
+    try {
+      db?.close();
+    } catch {
+    }
+    throw error;
+  }
+  let closed = false;
+  const handle = db;
   return {
     list() {
-      return db.prepare("SELECT scannedAt, total, highCrit FROM scans ORDER BY scannedAt").all();
+      return handle.prepare("SELECT scannedAt, total, highCrit FROM scans ORDER BY scannedAt").all();
     },
     insert(row) {
-      db.prepare("INSERT INTO scans (scannedAt, total, highCrit) VALUES (?, ?, ?)").run(
+      handle.prepare("INSERT INTO scans (scannedAt, total, highCrit) VALUES (?, ?, ?)").run(
         row.scannedAt,
         row.total,
         row.highCrit
       );
     },
     close() {
-      db.close();
+      if (closed) return;
+      closed = true;
+      try {
+        handle.close();
+      } catch {
+      }
     }
   };
 }
@@ -114,7 +130,13 @@ function startDashboard(opts) {
         })
       });
     });
-    server.on("error", reject);
+    server.on("error", (err) => {
+      try {
+        db.close();
+      } catch {
+      }
+      reject(err);
+    });
   });
 }
 

package/dist/index.js

@@ -5558,11 +5558,25 @@ async function createFixBranch(cwd) {
   return name;
 }
 
+// src/fixer/eol.ts
+function detectEol(text) {
+  return text.includes("\r\n") ? "\r\n" : "\n";
+}
+function normalizeNewlines(text) {
+  return text.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+function applyEol(text, eol) {
+  const normalized = normalizeNewlines(text);
+  return eol === "\n" ? normalized : normalized.replace(/\n/g, "\r\n");
+}
+
 // src/fixer/diff.ts
 function unifiedDiff(filename, before, after) {
-  if (before === after) return "";
-  const oldLines = before.split("\n");
-  const newLines = after.split("\n");
+  const oldNorm = normalizeNewlines(before);
+  const newNorm = normalizeNewlines(after);
+  if (oldNorm === newNorm) return "";
+  const oldLines = oldNorm.split("\n");
+  const newLines = newNorm.split("\n");
   const hunks = [`--- a/${filename}`, `+++ b/${filename}`];
   hunks.push(`@@ -1,${oldLines.length} +1,${newLines.length} @@`);
   for (const line of oldLines) hunks.push(`-${line}`);
@@ -5584,8 +5598,9 @@ function proposeFix(finding, source) {
   return void 0;
 }
 function helmetFix(file, source) {
-  if (/helmet\s*\(/.test(source)) return void 0;
-  let after = source;
+  const normalized = normalizeNewlines(source);
+  if (/helmet\s*\(/.test(normalized)) return void 0;
+  let after = normalized;
   if (!/require\(\s*['"]helmet['"]\s*\)|from\s+['"]helmet['"]/.test(after)) {
     after = `const helmet = require('helmet');
 ${after}`;
@@ -5594,17 +5609,19 @@ ${after}`;
     after = after.replace(/const app = express\(\s*\);/, (m) => `${m}
 app.use(helmet());`);
   }
-  if (after === source) return void 0;
-  return { kind: "config-add", safe: false, diff: unifiedDiff(file, source, after) };
+  if (after === normalized) return void 0;
+  return { kind: "config-add", safe: false, diff: unifiedDiff(file, normalized, after) };
 }
 function bodyLimitFix(file, source) {
-  if (!/express\.json\(\s*\)/.test(source)) return void 0;
-  const after = source.replace(/express\.json\(\s*\)/g, "express.json({ limit: '100kb' })");
-  return { kind: "config-add", safe: true, diff: unifiedDiff(file, source, after) };
+  const normalized = normalizeNewlines(source);
+  if (!/express\.json\(\s*\)/.test(normalized)) return void 0;
+  const after = normalized.replace(/express\.json\(\s*\)/g, "express.json({ limit: '100kb' })");
+  return { kind: "config-add", safe: true, diff: unifiedDiff(file, normalized, after) };
 }
 function cryptoFix(file, source) {
-  if (!/Math\.random\(\)/.test(source)) return void 0;
-  let after = source;
+  const normalized = normalizeNewlines(source);
+  if (!/Math\.random\(\)/.test(normalized)) return void 0;
+  let after = normalized;
   if (!/require\(\s*['"]crypto['"]\s*\)|from\s+['"]crypto['"]/.test(after)) {
     after = `const crypto = require('crypto');
 ${after}`;
@@ -5613,21 +5630,23 @@ ${after}`;
     /Math\.random\(\)\.toString\(\s*36\s*\)(?:\.slice\(\s*2\s*\))?/g,
     "crypto.randomUUID()"
   );
-  if (after === source) return void 0;
-  return { kind: "code-patch", safe: true, diff: unifiedDiff(file, source, after) };
+  if (after === normalized) return void 0;
+  return { kind: "code-patch", safe: true, diff: unifiedDiff(file, normalized, after) };
 }
 function gitignoreFix(file, source) {
   const target = file.endsWith(".gitignore") ? file : ".gitignore";
-  if (/(^|[\r\n])\.env(\r?\n|$)/.test(source)) return void 0;
-  const after = source.length === 0 || source.endsWith("\n") || source.endsWith("\r") ? `${source}.env
-` : `${source}
+  const normalized = normalizeNewlines(source);
+  if (/(^|\n)\.env(\n|$)/.test(normalized)) return void 0;
+  const after = normalized.length === 0 || normalized.endsWith("\n") ? `${normalized}.env
+` : `${normalized}
 .env
 `;
-  return { kind: "config-add", safe: true, diff: unifiedDiff(target, source, after) };
+  return { kind: "config-add", safe: true, diff: unifiedDiff(target, normalized, after) };
 }
 function secretEnvFix(file, source, finding) {
   const envName = envNameFor(finding.ruleId);
-  const lines = source.split("\n");
+  const normalized = normalizeNewlines(source);
+  const lines = normalized.split("\n");
   const idx = (finding.line ?? 1) - 1;
   const line = lines[idx];
   if (line === void 0) return void 0;
@@ -5638,7 +5657,7 @@ function secretEnvFix(file, source, finding) {
   if (replaced === line) return void 0;
   const afterLines = [...lines];
   afterLines[idx] = replaced;
-  return { kind: "code-patch", safe: false, diff: unifiedDiff(file, source, afterLines.join("\n")) };
+  return { kind: "code-patch", safe: false, diff: unifiedDiff(file, normalized, afterLines.join("\n")) };
 }
 function envNameFor(ruleId) {
   if (ruleId.includes("AWS")) return "AWS_ACCESS_KEY_ID";
@@ -5652,9 +5671,9 @@ function envNameFor(ruleId) {
   return "SECRET";
 }
 function applyUnifiedDiff(source, diff) {
-  const plus = diff.split("\n").filter((line) => line.startsWith("+") && !line.startsWith("+++")).map((line) => line.slice(1));
+  const plus = normalizeNewlines(diff).split("\n").filter((line) => line.startsWith("+") && !line.startsWith("+++")).map((line) => line.slice(1));
   if (plus.length === 0) return source;
-  return plus.join("\n");
+  return applyEol(plus.join("\n"), detectEol(source));
 }
 
 // src/fixer/index.ts

package/dist/mcp.js

@@ -2,9 +2,6 @@ import { execFile, spawnSync } from 'child_process';
 import { readFileSync, statSync, mkdtempSync, cpSync, writeFileSync, rmSync, existsSync, readdirSync } from 'fs';
 import { homedir, tmpdir } from 'os';
 import { resolve, join, basename, dirname, posix, relative } from 'path';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { z } from 'zod';
 import { readFile, mkdir, writeFile, stat, readdir } from 'fs/promises';
 import { performance } from 'perf_hooks';
 import { createHash } from 'crypto';
@@ -5492,11 +5489,25 @@ function scan(options = {}) {
   return runScan(options);
 }
 
+// src/fixer/eol.ts
+function detectEol(text) {
+  return text.includes("\r\n") ? "\r\n" : "\n";
+}
+function normalizeNewlines(text) {
+  return text.replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+}
+function applyEol(text, eol) {
+  const normalized = normalizeNewlines(text);
+  return eol === "\n" ? normalized : normalized.replace(/\n/g, "\r\n");
+}
+
 // src/fixer/diff.ts
 function unifiedDiff(filename, before, after) {
-  if (before === after) return "";
-  const oldLines = before.split("\n");
-  const newLines = after.split("\n");
+  const oldNorm = normalizeNewlines(before);
+  const newNorm = normalizeNewlines(after);
+  if (oldNorm === newNorm) return "";
+  const oldLines = oldNorm.split("\n");
+  const newLines = newNorm.split("\n");
   const hunks = [`--- a/${filename}`, `+++ b/${filename}`];
   hunks.push(`@@ -1,${oldLines.length} +1,${newLines.length} @@`);
   for (const line of oldLines) hunks.push(`-${line}`);
@@ -5518,8 +5529,9 @@ function proposeFix(finding2, source) {
   return void 0;
 }
 function helmetFix(file, source) {
-  if (/helmet\s*\(/.test(source)) return void 0;
-  let after = source;
+  const normalized = normalizeNewlines(source);
+  if (/helmet\s*\(/.test(normalized)) return void 0;
+  let after = normalized;
   if (!/require\(\s*['"]helmet['"]\s*\)|from\s+['"]helmet['"]/.test(after)) {
     after = `const helmet = require('helmet');
 ${after}`;
@@ -5528,17 +5540,19 @@ ${after}`;
     after = after.replace(/const app = express\(\s*\);/, (m) => `${m}
 app.use(helmet());`);
   }
-  if (after === source) return void 0;
-  return { kind: "config-add", safe: false, diff: unifiedDiff(file, source, after) };
+  if (after === normalized) return void 0;
+  return { kind: "config-add", safe: false, diff: unifiedDiff(file, normalized, after) };
 }
 function bodyLimitFix(file, source) {
-  if (!/express\.json\(\s*\)/.test(source)) return void 0;
-  const after = source.replace(/express\.json\(\s*\)/g, "express.json({ limit: '100kb' })");
-  return { kind: "config-add", safe: true, diff: unifiedDiff(file, source, after) };
+  const normalized = normalizeNewlines(source);
+  if (!/express\.json\(\s*\)/.test(normalized)) return void 0;
+  const after = normalized.replace(/express\.json\(\s*\)/g, "express.json({ limit: '100kb' })");
+  return { kind: "config-add", safe: true, diff: unifiedDiff(file, normalized, after) };
 }
 function cryptoFix(file, source) {
-  if (!/Math\.random\(\)/.test(source)) return void 0;
-  let after = source;
+  const normalized = normalizeNewlines(source);
+  if (!/Math\.random\(\)/.test(normalized)) return void 0;
+  let after = normalized;
   if (!/require\(\s*['"]crypto['"]\s*\)|from\s+['"]crypto['"]/.test(after)) {
     after = `const crypto = require('crypto');
 ${after}`;
@@ -5547,21 +5561,23 @@ ${after}`;
     /Math\.random\(\)\.toString\(\s*36\s*\)(?:\.slice\(\s*2\s*\))?/g,
     "crypto.randomUUID()"
   );
-  if (after === source) return void 0;
-  return { kind: "code-patch", safe: true, diff: unifiedDiff(file, source, after) };
+  if (after === normalized) return void 0;
+  return { kind: "code-patch", safe: true, diff: unifiedDiff(file, normalized, after) };
 }
 function gitignoreFix(file, source) {
   const target = file.endsWith(".gitignore") ? file : ".gitignore";
-  if (/(^|[\r\n])\.env(\r?\n|$)/.test(source)) return void 0;
-  const after = source.length === 0 || source.endsWith("\n") || source.endsWith("\r") ? `${source}.env
-` : `${source}
+  const normalized = normalizeNewlines(source);
+  if (/(^|\n)\.env(\n|$)/.test(normalized)) return void 0;
+  const after = normalized.length === 0 || normalized.endsWith("\n") ? `${normalized}.env
+` : `${normalized}
 .env
 `;
-  return { kind: "config-add", safe: true, diff: unifiedDiff(target, source, after) };
+  return { kind: "config-add", safe: true, diff: unifiedDiff(target, normalized, after) };
 }
 function secretEnvFix(file, source, finding2) {
   const envName = envNameFor(finding2.ruleId);
-  const lines = source.split("\n");
+  const normalized = normalizeNewlines(source);
+  const lines = normalized.split("\n");
   const idx = (finding2.line ?? 1) - 1;
   const line = lines[idx];
   if (line === void 0) return void 0;
@@ -5572,7 +5588,7 @@ function secretEnvFix(file, source, finding2) {
   if (replaced === line) return void 0;
   const afterLines = [...lines];
   afterLines[idx] = replaced;
-  return { kind: "code-patch", safe: false, diff: unifiedDiff(file, source, afterLines.join("\n")) };
+  return { kind: "code-patch", safe: false, diff: unifiedDiff(file, normalized, afterLines.join("\n")) };
 }
 function envNameFor(ruleId) {
   if (ruleId.includes("AWS")) return "AWS_ACCESS_KEY_ID";
@@ -5586,9 +5602,9 @@ function envNameFor(ruleId) {
   return "SECRET";
 }
 function applyUnifiedDiff(source, diff) {
-  const plus = diff.split("\n").filter((line) => line.startsWith("+") && !line.startsWith("+++")).map((line) => line.slice(1));
+  const plus = normalizeNewlines(diff).split("\n").filter((line) => line.startsWith("+") && !line.startsWith("+++")).map((line) => line.slice(1));
   if (plus.length === 0) return source;
-  return plus.join("\n");
+  return applyEol(plus.join("\n"), detectEol(source));
 }
 function finding(ruleId, title, message, file, severity = "high") {
   return {
@@ -5775,7 +5791,28 @@ async function handleMcpRequest(session, req) {
 function textResult(value) {
   return { content: [{ type: "text", text: JSON.stringify(value) }] };
 }
-function createOfficialMcpServer(opts = {}) {
+var MCP_PEER_ERROR = "fullshield mcp requires optional peers @modelcontextprotocol/sdk and zod. Install with: npm i -D @modelcontextprotocol/sdk zod";
+var defaultMcpPeerImporter = async () => {
+  const [serverMod, stdioMod, zodMod] = await Promise.all([
+    import('@modelcontextprotocol/sdk/server/mcp.js'),
+    import('@modelcontextprotocol/sdk/server/stdio.js'),
+    import('zod')
+  ]);
+  return {
+    McpServer: serverMod.McpServer,
+    StdioServerTransport: stdioMod.StdioServerTransport,
+    z: zodMod.z
+  };
+};
+async function loadMcpPeers(importer = defaultMcpPeerImporter) {
+  try {
+    return await importer();
+  } catch {
+    throw new Error(MCP_PEER_ERROR);
+  }
+}
+async function createOfficialMcpServer(opts = {}) {
+  const { McpServer, z } = await loadMcpPeers(opts.loadPeers);
   const session = createMcpSession(opts);
   const server = new McpServer({ name: "fullshield", version: "0.1.0" });
   const modulesSchema = z.array(z.enum(["deps", "secrets", "sast", "config"])).optional();
@@ -5823,9 +5860,10 @@ function createOfficialMcpServer(opts = {}) {
   return server;
 }
 async function startMcpStdio(opts = {}) {
-  const server = createOfficialMcpServer(opts);
+  const { StdioServerTransport } = await loadMcpPeers(opts.loadPeers);
+  const server = await createOfficialMcpServer(opts);
   const transport = new StdioServerTransport();
   await server.connect(transport);
 }
 
-export { callMcpTool, createMcpSession, createOfficialMcpServer, handleMcpRequest, listMcpTools, startMcpStdio };
+export { MCP_PEER_ERROR, callMcpTool, createMcpSession, createOfficialMcpServer, handleMcpRequest, listMcpTools, loadMcpPeers, startMcpStdio };

package/dist/runtime/express.js

@@ -74,7 +74,20 @@ function createRateLimiter(options) {
   return {
     allow(key, now = Date.now()) {
       const windowStart = now - options.windowMs;
-      const prev = (hits.get(key) ?? []).filter((t) => t > windowStart);
+      const prev = hits.get(key);
+      if (prev === void 0) {
+        hits.set(key, [now]);
+        return true;
+      }
+      let keep = 0;
+      for (let i = 0; i < prev.length; i += 1) {
+        const t = prev[i];
+        if (t !== void 0 && t > windowStart) {
+          prev[keep] = t;
+          keep += 1;
+        }
+      }
+      prev.length = keep;
       if (prev.length >= options.max) {
         hits.set(key, prev);
         return false;

package/dist/runtime/fastify.js

@@ -74,7 +74,20 @@ function createRateLimiter(options) {
   return {
     allow(key, now = Date.now()) {
       const windowStart = now - options.windowMs;
-      const prev = (hits.get(key) ?? []).filter((t) => t > windowStart);
+      const prev = hits.get(key);
+      if (prev === void 0) {
+        hits.set(key, [now]);
+        return true;
+      }
+      let keep = 0;
+      for (let i = 0; i < prev.length; i += 1) {
+        const t = prev[i];
+        if (t !== void 0 && t > windowStart) {
+          prev[keep] = t;
+          keep += 1;
+        }
+      }
+      prev.length = keep;
       if (prev.length >= options.max) {
         hits.set(key, prev);
         return false;

package/dist/runtime/index.js

@@ -74,7 +74,20 @@ function createRateLimiter(options) {
   return {
     allow(key, now = Date.now()) {
       const windowStart = now - options.windowMs;
-      const prev = (hits.get(key) ?? []).filter((t) => t > windowStart);
+      const prev = hits.get(key);
+      if (prev === void 0) {
+        hits.set(key, [now]);
+        return true;
+      }
+      let keep = 0;
+      for (let i = 0; i < prev.length; i += 1) {
+        const t = prev[i];
+        if (t !== void 0 && t > windowStart) {
+          prev[keep] = t;
+          keep += 1;
+        }
+      }
+      prev.length = keep;
       if (prev.length >= options.max) {
         hits.set(key, prev);
         return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullshield",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Full-cycle security scanner for Node.js/TypeScript backends: detect, classify, report, notify, fix, prevent.",
   "license": "MIT",
   "type": "module",
@@ -32,7 +32,9 @@
   },
   "peerDependencies": {
     "express": "*",
-    "fastify": "*"
+    "fastify": "*",
+    "@modelcontextprotocol/sdk": "^1.32.1",
+    "zod": "^4.6.7"
   },
   "peerDependenciesMeta": {
     "express": {
@@ -40,6 +42,12 @@
     },
     "fastify": {
       "optional": true
+    },
+    "@modelcontextprotocol/sdk": {
+      "optional": true
+    },
+    "zod": {
+      "optional": true
     }
   },
   "files": [
@@ -68,14 +76,13 @@
     "verify:phase": "node scripts/verify.mjs --phase"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.32.1",
     "@typescript-eslint/typescript-estree": "^8.71.2",
     "commander": "^12.1.0",
     "ignore": "^5.3.2",
-    "picocolors": "^1.1.1",
-    "zod": "^4.6.7"
+    "picocolors": "^1.1.1"
   },
   "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.32.1",
     "@eslint/js": "^9.14.0",
     "@types/node": "^22.9.0",
     "@vitest/coverage-v8": "^2.1.4",
@@ -85,6 +92,7 @@
     "tsup": "^8.3.5",
     "typescript": "^5.6.3",
     "typescript-eslint": "^8.13.0",
-    "vitest": "^2.1.4"
+    "vitest": "^2.1.4",
+    "zod": "^4.6.7"
   }
 }

package/templates/github-watch.yml

@@ -5,10 +5,10 @@ on:
   workflow_dispatch:
 jobs:
   watch:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: '22'
       - run: npm ci

package/templates/github-workflow.yml

@@ -5,10 +5,10 @@ on:
     branches: [main]
 jobs:
   scan:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: '22'
       - run: npm ci