fullshield 0.1.1 → 0.1.3

package/dist/compliance.js

@@ -29,6 +29,8 @@ var RULE_MAP = [
   ROW("SECRET-PRIVKEY-001", "A02:2021 Cryptographic Failures", "CWE-321", "V6.4.1", "PCI DSS 3.5 / 4.2"),
   ROW("SECRET-DBURL-001", "A02:2021 Cryptographic Failures", "CWE-798", "V6.4.1", "PCI DSS 3.2 / 8.3"),
   ROW("SECRET-JWT-001", "A02:2021 Cryptographic Failures", "CWE-798", "V6.4.1", "PCI DSS 3.5"),
+  ROW("SECRET-SESSION-001", "A02:2021 Cryptographic Failures", "CWE-798", "V6.4.1", "PCI DSS 3.5 / 6.2.4"),
+  ROW("CONFIG-DIRLIST-001", "A05:2021 Security Misconfiguration", "CWE-548", "V12.1.1", "PCI DSS 2.2 / 6.4.3"),
   ROW("SECRET-ENVFILE-001", "A02:2021 Cryptographic Failures", "CWE-312", "V8.3.4", "PCI DSS 3.2"),
   ROW("SECRET-ENTROPY-001", "A02:2021 Cryptographic Failures", "CWE-798", "V6.4.1", "PCI DSS 8.3"),
   ROW("DEPS-VULN-001", "A06:2021 Vulnerable Components", "CWE-1104", "V14.2.1", "PCI DSS 6.3.3"),
@@ -73,6 +75,8 @@ var RULE_MAP = [
   ROW("SUPPLY-LOCKURL-001", "A08:2021 Integrity Failures", "CWE-494", "V14.2.3", "PCI DSS 6.3.3"),
   ROW("SUPPLY-CONFUSION-001", "A08:2021 Integrity Failures", "CWE-494", "V14.2.3", "PCI DSS 6.3.3"),
   ROW("SUPPLY-PROVENANCE-001", "A08:2021 Integrity Failures", "CWE-494", "V14.2.3", "PCI DSS 6.3.3"),
+  ROW("SUPPLY-WORM-001", "A06:2021 Vulnerable Components", "CWE-506", "V14.2.1", "PCI DSS 6.3.3 / 12.10"),
+  ROW("SUPPLY-WORKFLOW-001", "A08:2021 Integrity Failures", "CWE-829", "V14.2.3", "PCI DSS 6.3.3"),
   ROW("IAC-GHA-UNPINNED-001", "A08:2021 Integrity Failures", "CWE-494", "V14.2.3", "PCI DSS 6.3.3"),
   ROW("IAC-GHA-PRTARGET-001", "A01:2021 Broken Access Control", "CWE-269", "V4.1.1", "PCI DSS 7.2"),
   ROW("IAC-GHA-PERMS-001", "A01:2021 Broken Access Control", "CWE-250", "V4.1.1", "PCI DSS 7.2"),
@@ -92,7 +96,32 @@ var RULE_MAP = [
   ROW("RUNTIME-BODY-001", "A05:2021 Security Misconfiguration", "CWE-400", "V13.1.1", "PCI DSS 6.2.4"),
   ROW("RUNTIME-ANOMALY-001", "A04:2021 Insecure Design", "CWE-754", "V14.4.3", "PCI DSS 10.2"),
   ROW("AI-IDOR-001", "A01:2021 Broken Access Control", "CWE-639", "V4.1.1", "PCI DSS 7.2"),
-  ROW("AI-MASSASSIGN-001", "A01:2021 Broken Access Control", "CWE-915", "V5.1.1", "PCI DSS 6.2.4")
+  ROW("AI-MASSASSIGN-001", "A01:2021 Broken Access Control", "CWE-915", "V5.1.1", "PCI DSS 6.2.4"),
+  ROW("SAST-REDOS-001", "A05:2021 Security Misconfiguration", "CWE-1333", "V5.1.5", "PCI DSS 6.2.4"),
+  ROW("SAST-DESER-001", "A08:2021 Integrity Failures", "CWE-502", "V5.5.3", "PCI DSS 6.2.4"),
+  ROW("SAST-XXE-001", "A05:2021 Security Misconfiguration", "CWE-611", "V5.5.2", "PCI DSS 6.2.4"),
+  ROW("SAST-UPLOAD-001", "A04:2021 Insecure Design", "CWE-434", "V12.5.1", "PCI DSS 6.2.4"),
+  ROW("SAST-COOKIE-001", "A05:2021 Security Misconfiguration", "CWE-614/1004", "V3.4.2", "PCI DSS 6.2.4"),
+  ROW("SAST-CSRF-001", "A01:2021 Broken Access Control", "CWE-352", "V4.2.2", "PCI DSS 6.4.3"),
+  ROW("SAST-MASSASSIGN-001", "A01:2021 Broken Access Control", "CWE-915", "V5.1.1", "PCI DSS 6.2.4"),
+  ROW("SAST-TIMING-001", "A07:2021 Identification Failures", "CWE-208", "V2.10.3", "PCI DSS 8.3"),
+  ROW("SAST-HASH-001", "A02:2021 Cryptographic Failures", "CWE-916", "V6.2.2", "PCI DSS 8.3.1"),
+  ROW("SAST-GQL-001", "A04:2021 Insecure Design", "CWE-770/200", "V13.1.1", "PCI DSS 6.2.4"),
+  ROW("CONFIG-TRUSTPROXY-001", "A07:2021 Identification Failures", "CWE-290", "V2.2.1", "PCI DSS 8.3.4"),
+  ROW("SECRET-BUNDLE-001", "A02:2021 Cryptographic Failures", "CWE-798", "V6.4.1", "PCI DSS 3.2 / 8.3"),
+  ROW("DLP-SECRET-001", "A02:2021 Cryptographic Failures", "CWE-200", "V8.3.4", "PCI DSS 3.2 / 8.3"),
+  ROW("DLP-STACK-001", "A04:2021 Insecure Design", "CWE-209", "V7.4.1", "PCI DSS 6.2.4"),
+  ROW("DLP-INTERNAL-001", "A01:2021 Broken Access Control", "CWE-200", "V8.3.4", "PCI DSS 1.3 / 2.2"),
+  ROW("DLP-CARD-001", "A02:2021 Cryptographic Failures", "CWE-359", "V8.3.4", "PCI DSS 3.3 / 3.4"),
+  ROW("DLP-PII-001", "A01:2021 Broken Access Control", "CWE-359", "V8.3.4", "PCI DSS 3.2 / 6.4.2"),
+  ROW("MCP-001", "A02:2021 Cryptographic Failures", "CWE-798", "V6.4.1", "PCI DSS 3.2 / 8.3"),
+  ROW("MCP-002", "A08:2021 Integrity Failures", "CWE-494", "V14.2.3", "PCI DSS 6.3.3"),
+  ROW("MCP-003", "A01:2021 Broken Access Control", "CWE-250", "V4.1.1", "PCI DSS 7.2"),
+  ROW("MCP-004", "A03:2021 Injection", "CWE-74", "V5.3.3", "PCI DSS 6.2.4"),
+  ROW("MCP-005", "A02:2021 Cryptographic Failures", "CWE-319", "V9.1.1", "PCI DSS 4.2"),
+  ROW("HOST-SSH-001", "A06:2021 Vulnerable Components", "CWE-364", "V14.2.1", "PCI DSS 6.3.3"),
+  ROW("HOST-SSH-002", "A05:2021 Security Misconfiguration", "CWE-693", "V14.4.3", "PCI DSS 2.2"),
+  ROW("HOST-SSH-003", "A07:2021 Identification Failures", "CWE-307", "V7.1.1", "PCI DSS 10.2 / 11.5")
 ];
 var byId = new Map(RULE_MAP.map((r) => [r.ruleId, r]));
 function mappingFor(ruleId) {
@@ -115,7 +144,7 @@ function renderCompliance(findings, standard = "pci") {
 }
 function collectRuleIdsFromSources(texts) {
   const ids = /* @__PURE__ */ new Set();
-  const re = /\b((?:SAST|SECRET|DEPS|CONFIG|EDGE|AI|LLM|SUPPLY|IAC|RASP|RUNTIME)-[A-Z0-9]+-\d{3})\b/g;
+  const re = /\b((?:SAST|SECRET|DEPS|CONFIG|EDGE|AI|LLM|SUPPLY|IAC|RASP|RUNTIME|DLP|MCP|HOST)(?:-[A-Z0-9]+)*-\d{3})\b/g;
   for (const text of texts) {
     let m;
     while ((m = re.exec(text)) !== null) ids.add(m[1] ?? "");

package/dist/dashboard.js

@@ -13,6 +13,9 @@ function sqliteDb(file) {
     db.exec(
       "CREATE TABLE IF NOT EXISTS scans (scannedAt TEXT NOT NULL, total INTEGER NOT NULL, highCrit INTEGER NOT NULL)"
     );
+    db.exec(
+      "CREATE TABLE IF NOT EXISTS provenance (scannedAt TEXT NOT NULL, percent REAL NOT NULL, withProvenance INTEGER NOT NULL, total INTEGER NOT NULL)"
+    );
   } catch (error) {
     try {
       db?.close();
@@ -33,6 +36,16 @@ function sqliteDb(file) {
         row.highCrit
       );
     },
+    listProvenance() {
+      return handle.prepare(
+        "SELECT scannedAt, percent, withProvenance, total FROM provenance ORDER BY scannedAt"
+      ).all();
+    },
+    insertProvenance(row) {
+      handle.prepare(
+        "INSERT INTO provenance (scannedAt, percent, withProvenance, total) VALUES (?, ?, ?, ?)"
+      ).run(row.scannedAt, row.percent, row.withProvenance, row.total);
+    },
     close() {
       if (closed) return;
       closed = true;
@@ -51,6 +64,12 @@ function openHistory(dir) {
 function recordHistory(db, row) {
   db.insert(row);
 }
+function recordProvenance(db, row) {
+  db.insertProvenance(row);
+}
+function listProvenance(db) {
+  return db.listProvenance();
+}
 function assertDashboardHost(host) {
   if (host === void 0 || host.length === 0) return false;
   const h = host.split(":")[0]?.toLowerCase() ?? "";
@@ -140,4 +159,4 @@ function startDashboard(opts) {
   });
 }
 
-export { assertDashboardHost, createDashboardHandler, openHistory, recordHistory, startDashboard };
+export { assertDashboardHost, createDashboardHandler, listProvenance, openHistory, recordHistory, recordProvenance, startDashboard };

package/dist/index.d.ts

@@ -1,10 +1,12 @@
+import * as zod from 'zod';
+
 declare const SEVERITIES: readonly ["info", "low", "medium", "high", "critical"];
 type Severity = (typeof SEVERITIES)[number];
 declare const MODULE_NAMES: readonly ["deps", "secrets", "sast", "config"];
 type ModuleName = (typeof MODULE_NAMES)[number];
 type Confidence = 'low' | 'medium' | 'high';
 interface FixProposal {
-    kind: 'dependency-bump' | 'code-patch' | 'config-add';
+    kind: 'dependency-bump' | 'code-patch' | 'config-add' | 'dependency-override';
     /** Only safe fixes apply without --unsafe. */
     safe: boolean;
     /** Unified diff. */
@@ -49,6 +51,12 @@ interface Finding {
     aiReasoning?: string;
     exploitScenario?: string;
     explanation?: string;
+    /** Git commit that first introduced this secret (`scan --history`). */
+    introducedIn?: string;
+    /** Whether the secret still exists at HEAD (`scan --history`). */
+    stillAtHead?: boolean;
+    /** Read-only identity check (`scan --verify-secrets`). Never includes the secret. */
+    verification?: 'live' | 'revoked' | 'unknown';
 }
 interface FindingSummary {
     total: number;
@@ -103,6 +111,61 @@ declare class ConfigError extends Error {
  */
 declare function loadConfig(cwd: string, configPath?: string): Promise<ResolvedConfig>;
 
+/** Stable GitHub URL for a shipped rule doc (also valid as a GitLab-comment link). */
+declare function ruleDocsUrl(ruleId: string): string;
+/**
+ * Deterministic Markdown for a GitHub/GitLab PR comment: new findings versus
+ * baseline (callers pass `applyBaseline` / `diffNewFindings` results). No AI.
+ */
+declare function renderPrSummary(findings: readonly Finding[], opts?: {
+    baseLabel?: string;
+}): string;
+
+declare const POLICY_FILE_NAME = "fullshield.policy.json";
+declare const POLICY_FLAG = "FULLSHIELD_EXPERIMENTAL_POLICY";
+declare const POLICY_PEER_ERROR = "fullshield policy requires optional peer zod. Install with: npm i -D zod";
+declare class PolicyError extends Error {
+}
+interface PolicyException {
+    ruleId: string;
+    file?: string;
+    id?: string;
+    owner: string;
+    reason: string;
+    /** ISO date (`YYYY-MM-DD`) or datetime. */
+    expires: string;
+}
+interface FullShieldPolicy {
+    requiredModules?: ModuleName[];
+    severityOverrides?: Partial<Record<string, Severity>>;
+    failOn?: Record<string, Severity>;
+    exceptions?: PolicyException[];
+}
+interface PolicyLoadOptions {
+    experimental?: boolean;
+}
+interface ApplyPolicyContext {
+    branch?: string;
+    modulesRun?: readonly ModuleName[];
+    now?: Date;
+}
+interface AppliedPolicy {
+    findings: Finding[];
+    failOn?: Severity;
+    errors: string[];
+}
+type ZodNamespace = typeof zod.z;
+type ZodLoader = () => Promise<{
+    z: ZodNamespace;
+}>;
+declare function isPolicyEnabled(opts?: PolicyLoadOptions): boolean;
+/** Parse and validate a policy document with the optional zod peer (lazy-imported). */
+declare function parsePolicy(raw: unknown, source?: string, loadZod?: ZodLoader): Promise<FullShieldPolicy>;
+/** Load `fullshield.policy.json` when the experimental flag is on. Missing file → undefined. */
+declare function loadPolicy(cwd: string, opts?: PolicyLoadOptions, loadZod?: ZodLoader): Promise<FullShieldPolicy | undefined>;
+/** Apply severity overrides, branch failOn, and exceptions. Expired exceptions become CI errors. */
+declare function applyPolicy(findings: readonly Finding[], policy: FullShieldPolicy, ctx?: ApplyPolicyContext): AppliedPolicy;
+
 interface ModuleContext {
     cwd: string;
     /** Posix-style relative paths of every scannable file under cwd. */
@@ -133,6 +196,21 @@ interface ScanOptions {
     since?: string;
     experimentalIncremental?: boolean;
     changedFiles?: string[];
+    /** Phase 30: scan git history for secrets (`FULLSHIELD_EXPERIMENTAL_SECRETS_ADV=1`). */
+    history?: boolean;
+    /** Phase 30: scan a built client bundle directory. */
+    bundle?: string;
+    /** Phase 30: opt-in live identity check. Never default. Requires iOwnTheseCredentials. */
+    verifySecrets?: boolean;
+    iOwnTheseCredentials?: boolean;
+    /** Injected fetch for --verify-secrets tests. */
+    verifyFetch?: typeof fetch;
+    /** Phase 33: scan MCP configs under the user home (requires FULLSHIELD_EXPERIMENTAL_MCPCFG=1). */
+    includeHome?: boolean;
+    /** Phase 34 policy-as-code (`FULLSHIELD_EXPERIMENTAL_POLICY=1`). */
+    experimentalPolicy?: boolean;
+    /** Override git/CI branch when applying `failOn` per branch. */
+    policyBranch?: string;
 }
 interface ScanMetadata {
     version: string;
@@ -144,11 +222,20 @@ interface ScanMetadata {
     /** Requested modules that are actually implemented and ran. */
     modulesRun: ModuleName[];
 }
+interface PolicyScanResult {
+    enabled: true;
+    file: string;
+    failOn?: Severity;
+    errors: string[];
+    policy: FullShieldPolicy;
+}
 interface ScanResult {
     findings: Finding[];
     summary: FindingSummary;
     metadata: ScanMetadata;
     config: ResolvedConfig;
+    /** Present only when experimental policy was loaded from `fullshield.policy.json`. */
+    policy?: PolicyScanResult;
 }
 /**
  * Scanner modules register here as their phases are built.
@@ -203,6 +290,8 @@ interface FixResult {
     branch?: string;
     patches: FixPatch[];
     findings: Finding[];
+    /** Set when an override was written to package.json. The lockfile is left unchanged. */
+    notice?: string;
 }
 declare function runFix(options?: FixOptions): Promise<FixResult>;
 
@@ -254,6 +343,35 @@ declare function createAiClient(options: AiClientOptions): AiClient;
 /** Scan one file's text with every secrets rule. Secrets are always masked. */
 declare function scanTextForSecrets(path: string, text: string): Finding[];
 
+declare function mcpCfgEnabled(): boolean;
+interface McpScanOptions {
+    experimental?: boolean;
+    includeHome?: boolean;
+}
+/** Home MCP client config paths. Call only when `--include-home` is set. */
+declare function mcpHomeConfigPaths(home: string): string[];
+/** Experimental MCP client-config + server-code rules. Off unless experimental. No network. */
+declare function scanMcpConfig(dir: string, opts?: McpScanOptions): Finding[];
+interface GuardToolCall {
+    tool: string;
+    args: unknown;
+    result: 'ok' | 'denied' | 'unconfirmed';
+}
+interface GuardTool {
+    name: string;
+    description?: string;
+    execute: (...args: unknown[]) => unknown;
+}
+/**
+ * Optional runtime wrapper for LLM/MCP tools: deny-list dangerous capabilities,
+ * require `confirm` for writes/payments, and log every call.
+ */
+declare function guardTools(tools: readonly GuardTool[], opts?: {
+    allow?: readonly string[];
+    confirm?: (tool: string, args: unknown) => boolean | Promise<boolean>;
+    log?: (event: GuardToolCall) => void;
+}): GuardTool[];
+
 interface AiFixResult {
     accepted: boolean;
     attempts: number;
@@ -331,4 +449,36 @@ interface SbomInput {
 declare function validateCycloneDx15(doc: unknown): string[];
 declare function renderCycloneDx(input: SbomInput): Record<string, unknown>;
 
-export { type AiConfig, type BaselineFile, CONFIG_FILE_NAME, type Confidence, ConfigError, DEFAULT_CONFIG, type DepsConfig, type Finding, type FindingSummary, type FixOptions, type FixPatch, type FixProposal, type FixResult, IMPLEMENTED_MODULES, MODULE_NAMES, type ModuleContext, type ModuleName, type NotifyConfig, type ResolvedConfig, SEVERITIES, type SbomComponent, type SbomInput, type ScanMetadata, type ScanModule, type ScanOptions, type ScanResult, type Severity, type WalkOptions, applyBaseline, applyInlineSuppressions, buildSbom, builtinModules, createAiClient, failsCi, isInternalAi, isLiveAi, isModuleName, isSeverity, loadConfig, makeFindingId, meetsThreshold, packageVersion, parseIgnore, readBaseline, renderConsoleReport, renderCycloneDx, renderHtmlReport, renderJsonReport, renderMarkdownReport, renderSarifReport, runAiFix, runFix, runScan, scan, scanTextForSecrets, severityRank, sortFindings, summarize, validateCycloneDx15, validateSarif21, walkFiles, writeBaseline };
+type VexFormat = 'openvex' | 'cyclonedx';
+declare function buildOpenVex(findings: readonly Finding[]): Record<string, unknown>;
+declare function validateOpenVex(doc: unknown): string[];
+declare function buildCycloneDxVex(meta: {
+    name: string;
+    version: string;
+}, findings: readonly Finding[]): Record<string, unknown>;
+declare function validateCycloneDxVex(doc: unknown): string[];
+declare function buildVex(findings: readonly Finding[], format: VexFormat, meta?: {
+    name: string;
+    version: string;
+}): Record<string, unknown>;
+
+/** Phase 31 worm / VEX / overrides / provenance. Off unless the env flag or CLI option is set. */
+declare function experimentalVex(): boolean;
+
+/** Static worm indicators: token read + publish / registry PUT / GitHub create / workflow write. */
+declare function analyzeWormIndicators(dir: string): Finding[];
+/** Static: install scripts or code writing .github/, .git/hooks/, or CI config. */
+declare function analyzeWorkflowTampering(dir: string): Finding[];
+interface ProvenanceScore {
+    total: number;
+    withProvenance: number;
+    percent: number;
+    unknown: number;
+}
+/** Percent of deps published with provenance. Unknown is not counted as present (never guess). */
+declare function provenanceCoverage(packages: readonly {
+    name: string;
+    version: string;
+}[], known: ReadonlyMap<string, boolean>): ProvenanceScore;
+
+export { type AiConfig, type AppliedPolicy, type BaselineFile, CONFIG_FILE_NAME, type Confidence, ConfigError, DEFAULT_CONFIG, type DepsConfig, type Finding, type FindingSummary, type FixOptions, type FixPatch, type FixProposal, type FixResult, type FullShieldPolicy, type GuardTool, type GuardToolCall, IMPLEMENTED_MODULES, MODULE_NAMES, type McpScanOptions, type ModuleContext, type ModuleName, type NotifyConfig, POLICY_FILE_NAME, POLICY_FLAG, POLICY_PEER_ERROR, PolicyError, type PolicyException, type PolicyScanResult, type ResolvedConfig, SEVERITIES, type SbomComponent, type SbomInput, type ScanMetadata, type ScanModule, type ScanOptions, type ScanResult, type Severity, type WalkOptions, analyzeWorkflowTampering, analyzeWormIndicators, applyBaseline, applyInlineSuppressions, applyPolicy, buildCycloneDxVex, buildOpenVex, buildSbom, buildVex, builtinModules, createAiClient, experimentalVex, failsCi, guardTools, isInternalAi, isLiveAi, isModuleName, isPolicyEnabled, isSeverity, loadConfig, loadPolicy, makeFindingId, mcpCfgEnabled, mcpHomeConfigPaths, meetsThreshold, packageVersion, parseIgnore, parsePolicy, provenanceCoverage, readBaseline, renderConsoleReport, renderCycloneDx, renderHtmlReport, renderJsonReport, renderMarkdownReport, renderPrSummary, renderSarifReport, ruleDocsUrl, runAiFix, runFix, runScan, scan, scanMcpConfig, scanTextForSecrets, severityRank, sortFindings, summarize, validateCycloneDx15, validateCycloneDxVex, validateOpenVex, validateSarif21, walkFiles, writeBaseline };