@clear-capabilities/agentic-security-scanner 0.195.23 → 0.195.24

package/dist/agentic-security.mjs.sha256

@@ -1 +1 @@
-c99c86a3f8172dcc3f6f1a23f6de0b955859ef9d8ea709e6d744e536f5676a15  agentic-security.mjs
+7a00dab21c958eb07e821a422efc871b2ceee9c84e4405ae9754390ec874c165  agentic-security.mjs

package/dist/{01087ded263953062654.json → daefda0819bb18309b75.json}

@@ -1,6 +1,6 @@
 {
   "name": "@clear-capabilities/agentic-security-scanner",
-  "version": "0.195.23",
+  "version": "0.195.24",
   "description": "Scanner engine for the agentic-security Claude Code plugin: SAST, SCA with reachability and CISA KEV, secrets, IaC, Haskell and Nix/NixOS, prompt-injection, MCP/agent-tool audit, authZ analysis, SBOM, compliance attestation, and more.",
   "type": "module",
   "main": "src/index.js",
@@ -90,7 +90,7 @@
     "test:dataflow": "node --test test/privacy-catalog.test.js test/privacy-deep-walker.test.js test/privacy-deep-e2e.test.js test/container-taint.test.js test/stored-taint-families.test.js test/py-annotation-sources.test.js test/fn-reach.test.js test/deep-taint.test.js test/calibration.test.js test/holdout-eval.test.js test/cross-lang-meta.test.js test/cross-lang-queues.test.js test/phase5-xlang.test.js test/phase5-coverage.test.js test/phase6-taint.test.js test/llm-validator-consistency.test.js test/llm-validator-default-on.test.js test/llm-validator-preset.test.js test/parser-py-cst.test.js test/chrome-probe.test.js test/parser-cs-kt.test.js test/parser-cs-annotations.test.js test/parser-cs-control-flow.test.js test/parser-kt-control-flow.test.js test/parser-js-annotations.test.js test/parser-java-annotations.test.js test/parser-java-control-flow.test.js test/parser-java-calls.test.js test/parser-go.test.js test/parser-rust.test.js test/rust-taint-flow.test.js test/parser-php-rb.test.js test/parser-php-control-flow.test.js test/interproc-k2.test.js test/proven-clean.test.js test/backward-default.test.js test/incremental-cache.test.js test/string-regex-lattice.test.js test/closure-capture.test.js test/points-to.test.js test/type-stubs.test.js test/soft-taint.test.js test/ifds.test.js test/symbolic-exec-proof.test.js test/ifds-summary-edges.test.js test/stub-aware-filter.test.js test/cross-repo.test.js test/proof-gate.test.js test/layer-recall.test.js test/java-taint-flow.test.js test/kt-taint-flow.test.js test/sanitizer-typed-flow.test.js test/sanitizer-gate-unit.test.js test/proof-safe.test.js test/collection-taint.test.js test/kcfa-context.test.js test/kcfa-callstring.test.js test/flow-parity.test.js test/callgraph-resolve.test.js test/import-reachability.test.js test/ir-stats.test.js test/parser-cpp.test.js test/parser-js-decorators.test.js test/parser-js-if-else-cfg.test.js test/cpp-integration.test.js test/engine-reconnect.test.js test/phase2-scoping.test.js test/engine-recall.test.js test/catalog-annotation-source.test.js test/catalog-cs-p1.test.js test/catalog-expanded.test.js test/builtin-summaries.test.js test/interproc-mutation-crash.test.js test/mutated-param-taint.test.js test/return-sink-check.test.js test/higher-order-inline-callback.test.js test/interproc-findings-discard.test.js test/runscan-deep-option.test.js test/summary-cache-convergence.test.js test/parser-rb-calls.test.js test/parser-rb-module-level.test.js test/balanced-call.test.js test/destructuring-taint.test.js test/computed-member-taint.test.js test/string-interpolation-taint.test.js test/dataflow-deadcode-severity.test.js test/catalog-dotted-callee-lookup.test.js test/builtin-summary-family-blind-kill.test.js test/deep-mode-annotator-pipeline.test.js test/receiver-type-and-nested-calls.test.js test/member-write-and-loop-taint.test.js test/parser-py-module-level.test.js test/parser-php-module-level.test.js test/r14b-module-level-e2e.test.js test/annotation-taint-engine.test.js test/interproc-nested-call-taint.test.js test/catalog-xpath-injection.test.js test/catalog-ldap-injection.test.js test/catalog-xxe.test.js test/catalog-response-splitting.test.js test/catalog-code-injection.test.js test/parser-rb-control-flow.test.js test/catalog-ruby-p1.test.js test/callee-receiver-taint.test.js test/catalog-command-injection-p4.test.js test/catalog-xss-p4.test.js test/catalog-path-ssrf-p3.test.js test/catalog-ai-model-provider-precision.test.js test/catalog-orm-write.test.js test/dataflow/provenance-pipeline-integration.test.js test/dataflow-progress.test.js test/scan-progress.test.js test/sard-leakage-pipeline.test.js test/sard-split-scoring.test.js test/sard-llm-isolation.test.js test/sard-mutation-adversarial.test.js test/sard-baseline-adaptive-tolerance.test.js test/sard-independent-holdout.test.js test/sard-flow-aware-scoring.test.js test/sard-macro-score-support-floor.test.js test/sard-php-split.test.js test/parser-java-nary-concat.test.js test/sard-naive-baseline.test.js test/field-taint-cross-method.test.js test/field-taint-engine-unit.test.js test/coercion-sanitizer-kill.test.js test/constant-propagation-path-sensitivity.test.js test/parser-java-assignments.test.js test/catalog-java-sard.test.js test/parser-cs-juliet-shapes.test.js test/catalog-cs-sard-p2.test.js test/sard-cwe-key-merge.test.js test/parser-php-backtick.test.js test/parser-php-include.test.js test/php-include-merge.test.js test/parser-php-array-field-taint.test.js test/parser-php-cond-assign.test.js test/parser-rust-redos.test.js test/multi-sink-taint-chain.test.js test/static-field-cross-class-call-string.test.js test/regex-guard-narrowing.test.js test/object-instance-field-taint.test.js test/param-type-inference.test.js test/smt-path-feasibility.test.js test/cross-service-taint.test.js test/dataflow-expr-taint-scaling.test.js test/evaluation/guard-dominance.test.js test/evaluation/engine-mechanisms.test.js test/rx-exec-receiver.test.js test/incremental-dependency.test.js test/incremental-integrity.test.js test/demand-query.test.js test/ir-cache.test.js test/canonicalize-parity.test.js test/dataflow-source-attribution.test.js",
     "test:mcp": "node --test test/mcp.test.js test/mcp-apply-fix-multifile.test.js test/mcp-protocol-smoke.test.js test/mcp-audit.test.js test/audit-cli.test.js test/mcp-scratchpad.test.js test/mcp-offload.test.js test/sca-upgrade.test.js test/lsp-server.test.js test/mcp-dataflow-tools.test.js test/cli/governance-propose-edit.test.js test/cli/remediation-open-update.test.js test/cli/remediation-verify-reopen.test.js test/cli/dataflow-observations.test.js test/cli/federate-declare-list.test.js test/capabilities/tools.test.js",
     "test:report": "node --test test/report-scan-invariants.test.js test/junit.test.js test/ci.test.js test/poc-generator.test.js test/verifier.test.js test/verifier-target.test.js test/annotator-errors.test.js test/git-history-batch.test.js test/default-scan-drift.test.js test/bundle-optional-deps.test.js test/scan-health.test.js test/finding-schema.test.js test/pipeline/finding-schema-provenance.test.js test/evidence-provenance.test.js test/report/provenance-output.test.js test/report/provenance-format-parity.test.js test/legacy-compat.test.js test/annotator-runner.test.js test/detector-runner.test.js test/detector-errors.test.js test/analyzer-supervisor.test.js test/cascade-worker-pool.test.js test/cascade-pool-wiring.test.js test/coverage-ledger.test.js test/coverage-ledger-completeness.test.js test/assurance-mode.test.js test/artifact-registry.test.js test/artifact-registry-completeness.test.js test/retention-policy.test.js test/state-lifecycle-report.test.js test/legal-hold.test.js test/production-feedback.test.js test/calibration-feedback.test.js test/encryption-provider.test.js test/grader-calibration.test.js test/pr-delta-gate.test.js test/vex.test.js test/report-render.test.js test/oscal-conformance.test.js test/cli-fix-apply.test.js test/apply-fix-service.test.js test/high-impact-approval-gate.test.js test/approver-registry.test.js test/suppression-exceptions.test.js test/fix-history.test.js test/producer-registry.test.js test/producer-collector.test.js test/enrichment-completion.test.js",
-    "test:lineage": "node --test test/lineage/analysis-completion.test.js test/lineage/schema.test.js test/lineage/ids.test.js test/lineage/protection.test.js test/lineage/classification.test.js test/lineage/validate.test.js test/lineage/json-schema-parity.test.js test/lineage/flagship-fixture.test.js test/lineage/flagship-fixture-semantics.test.js test/lineage/field-identity.test.js test/lineage/engine-expr-resolver.test.js test/lineage/engine-walker.test.js test/lineage/engine-integration.test.js test/lineage/engine-receiver-identity.test.js test/lineage/summaries.test.js test/lineage/driver.test.js test/lineage/engine-provenance.test.js test/lineage/engine-provenance-interprocedural.test.js test/lineage/path-store.test.js test/lineage/path-query.test.js test/lineage/flow-grade.test.js test/lineage/source-registry.test.js test/lineage/sink-registry.test.js test/lineage/transform-catalog.test.js test/lineage/handling-analyzer.test.js test/lineage/registry-real-code.test.js test/lineage/source-seeding.test.js test/lineage/graph-builder.test.js test/lineage/coverage.test.js test/lineage/resolve-destination.test.js test/lineage/queue-detail.test.js test/lineage/index.test.js test/lineage/obligation-mapping.test.js test/lineage/obligation-predicates.test.js test/lineage/obligation-predicates-walkthrough.test.js test/lineage/transit-protection.test.js test/lineage/at-rest-protection.test.js test/lineage/protection-summary.test.js test/lineage/ac01-multi-sink.test.js test/lineage/policy-verdict.test.js test/lineage/governance-refs.test.js test/lineage/export-privacy.test.js test/lineage/export-json.test.js test/lineage/export-csv.test.js test/lineage/decision-story.test.js test/lineage/export-briefing.test.js test/lineage/graph-snapshot.test.js test/lineage/graph-diff.test.js test/lineage/drift-policy.test.js test/lineage/recipient-profile.test.js test/lineage/recipient-registry.test.js test/lineage/recipient-wiring.test.js test/lineage/redact-graph.test.js test/lineage-scan-wiring.test.js test/lineage-artifact-write.test.js test/bench-data-lineage-runner.test.js test/bundle-frontend.test.js test/bundle-frontend-golden.test.js test/generate-html-report.test.js test/export-image.test.js test/lineage/scenario.test.js test/lineage/scenario-engine.test.js test/lineage/scenario-diff.test.js test/lineage/scenario-no-obligation-wiring.test.js test/lineage/impact-assessment.test.js test/lineage/impact-engine.test.js test/lineage/impact-no-obligation-wiring.test.js test/lineage/governance-edit.test.js test/lineage/remediation.test.js test/lineage/runtime-observation.test.js test/lineage/observation-correlation.test.js test/lineage/observation-adapters.test.js test/lineage/observation-store.test.js test/lineage/runtime-corroboration-wiring.test.js test/lineage/cross-repo-link.test.js test/lineage/federation-loader.test.js test/lineage/cross-repo-link-wiring.test.js test/lineage/runtime-assurance.test.js test/lineage/runtime-edge-states.test.js test/lineage/runtime-explorer-view.test.js test/cli/runtime-explorer-cli.test.js test/cli/runtime-identity-cli.test.js test/cli/runtime-twin-cli.test.js test/lineage/cut-planner.test.js test/lineage/scc.test.js test/lineage/scc-solver.test.js test/graph/graph-views.test.js test/lineage/dag07-completion.test.js test/lineage/owned-build.test.js test/dataflow/boundary-propagation.test.js test/lineage/boundary-contract.test.js test/lineage/correlation-v2.test.js test/lineage/path-control-evidence.test.js test/lineage/smt-z3-backend.test.js test/cli/dag-commands.test.js",
+    "test:lineage": "node --test test/lineage/analysis-completion.test.js test/lineage/schema.test.js test/lineage/ids.test.js test/lineage/protection.test.js test/lineage/classification.test.js test/lineage/validate.test.js test/lineage/json-schema-parity.test.js test/lineage/flagship-fixture.test.js test/lineage/flagship-fixture-semantics.test.js test/lineage/field-identity.test.js test/lineage/engine-expr-resolver.test.js test/lineage/engine-walker.test.js test/lineage/engine-integration.test.js test/lineage/engine-receiver-identity.test.js test/lineage/summaries.test.js test/lineage/driver.test.js test/lineage/engine-provenance.test.js test/lineage/engine-provenance-interprocedural.test.js test/lineage/path-store.test.js test/lineage/path-query.test.js test/lineage/flow-grade.test.js test/lineage/source-registry.test.js test/lineage/sink-registry.test.js test/lineage/transform-catalog.test.js test/lineage/handling-analyzer.test.js test/lineage/registry-real-code.test.js test/lineage/source-seeding.test.js test/lineage/seeding-across-calls.test.js test/lineage/graph-builder.test.js test/lineage/coverage.test.js test/lineage/resolve-destination.test.js test/lineage/queue-detail.test.js test/lineage/index.test.js test/lineage/obligation-mapping.test.js test/lineage/obligation-predicates.test.js test/lineage/obligation-predicates-walkthrough.test.js test/lineage/transit-protection.test.js test/lineage/at-rest-protection.test.js test/lineage/protection-summary.test.js test/lineage/ac01-multi-sink.test.js test/lineage/policy-verdict.test.js test/lineage/governance-refs.test.js test/lineage/export-privacy.test.js test/lineage/export-json.test.js test/lineage/export-csv.test.js test/lineage/decision-story.test.js test/lineage/export-briefing.test.js test/lineage/graph-snapshot.test.js test/lineage/graph-diff.test.js test/lineage/drift-policy.test.js test/lineage/recipient-profile.test.js test/lineage/recipient-registry.test.js test/lineage/recipient-wiring.test.js test/lineage/redact-graph.test.js test/lineage-scan-wiring.test.js test/lineage-artifact-write.test.js test/bench-data-lineage-runner.test.js test/bundle-frontend.test.js test/bundle-frontend-golden.test.js test/generate-html-report.test.js test/export-image.test.js test/lineage/scenario.test.js test/lineage/scenario-engine.test.js test/lineage/scenario-diff.test.js test/lineage/scenario-no-obligation-wiring.test.js test/lineage/impact-assessment.test.js test/lineage/impact-engine.test.js test/lineage/impact-no-obligation-wiring.test.js test/lineage/governance-edit.test.js test/lineage/remediation.test.js test/lineage/runtime-observation.test.js test/lineage/observation-correlation.test.js test/lineage/observation-adapters.test.js test/lineage/observation-store.test.js test/lineage/runtime-corroboration-wiring.test.js test/lineage/cross-repo-link.test.js test/lineage/federation-loader.test.js test/lineage/cross-repo-link-wiring.test.js test/lineage/runtime-assurance.test.js test/lineage/runtime-edge-states.test.js test/lineage/runtime-explorer-view.test.js test/cli/runtime-explorer-cli.test.js test/cli/runtime-identity-cli.test.js test/cli/runtime-twin-cli.test.js test/lineage/cut-planner.test.js test/lineage/scc.test.js test/lineage/scc-solver.test.js test/graph/graph-views.test.js test/lineage/dag07-completion.test.js test/lineage/owned-build.test.js test/dataflow/boundary-propagation.test.js test/lineage/boundary-contract.test.js test/lineage/correlation-v2.test.js test/lineage/path-control-evidence.test.js test/lineage/smt-z3-backend.test.js test/cli/dag-commands.test.js",
     "test:bench-modules": "node --test test/phase4-harness.test.js test/pipeline.test.js test/proof-corpus-lib.test.js test/proof-corpus-runner.test.js",
     "test:server": "node --test test/server/graph-loader.test.js test/server/security.test.js test/server/routes.test.js test/server/http-server.test.js test/server/cmd-explore.test.js test/server/cmd-dataflow-export.test.js test/server/static-assets.test.js test/server/dataflow-scenario-cli.test.js test/server/dataflow-impact-cli.test.js",
     "test:haskell": "node --test test/haskell/haskell-reachability.test.js test/haskell/haskell-real-code-shapes.test.js test/haskell/haskell-unseen-v5-shapes.test.js test/haskell/haskell-unseen-v4-shapes.test.js test/haskell/haskell-alias-taint.test.js test/haskell/haskell-weak-hash-names.test.js test/haskell/haskell-models-extended.test.js test/haskell/haskell-rules-extended.test.js test/haskell/haskell-injection.test.js test/haskell/haskell-ir.test.js test/haskell/haskell-manifests.test.js test/haskell/haskell-parser.test.js test/haskell/haskell-remediation.test.js test/haskell/haskell-remediation-0190.test.js test/haskell/haskell-remediation-kdf.test.js test/haskell/haskell-remediation-html-text.test.js test/haskell/haskell-remediation-scotty-body.test.js test/haskell/haskell-remediation-entropy.test.js test/haskell/haskell-remediation-text-command.test.js test/haskell/haskell-remediation-path-contain.test.js test/haskell/haskell-remediation-0195-16.test.js test/haskell/haskell-taint-shapes.test.js test/haskell/haskell-real-advisory-shapes.test.js test/haskell/haskell-discovery-shapes.test.js test/haskell/haskell-quasiquote-interp.test.js test/haskell/haskell-record-dot.test.js test/haskell/haskell-global-cell.test.js test/haskell/haskell-syntax-extensions.test.js test/haskell/haskell-rule-precision.test.js test/haskell/haskell-resolved-graph.test.js test/haskell/haskell-sca.test.js test/haskell/haskell-sca-severity.test.js test/haskell/haskell-web-guards.test.js test/haskell/haskell-advisory-feed.test.js test/haskell/haskell-security-rules.test.js test/haskell/haskell-taint.test.js test/haskell/haskell-boundaries.test.js test/haskell/haskell-live-feed-scan.test.js test/haskell/haskell-supply-bounds.test.js test/haskell/haskell-ir-scaling.test.js test/haskell/haskell-boundary-propagation.test.js test/haskell/haskell-generalization.test.js test/haskell/haskell-trust-boundary.test.js test/haskell/haskell-trust-fixed-file.test.js test/haskell/haskell-predictable-random-flow.test.js test/haskell/haskell-comment-invariance.test.js test/haskell/haskell-remediation-classes.test.js test/haskell/haskell-trust-boundary-frameworks.test.js test/haskell/haskell-generic-detectors.test.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clear-capabilities/agentic-security-scanner",
-  "version": "0.195.23",
+  "version": "0.195.24",
   "description": "Scanner engine for the agentic-security Claude Code plugin: SAST, SCA with reachability and CISA KEV, secrets, IaC, Haskell and Nix/NixOS, prompt-injection, MCP/agent-tool audit, authZ analysis, SBOM, compliance attestation, and more.",
   "type": "module",
   "main": "src/index.js",
@@ -90,7 +90,7 @@
     "test:dataflow": "node --test test/privacy-catalog.test.js test/privacy-deep-walker.test.js test/privacy-deep-e2e.test.js test/container-taint.test.js test/stored-taint-families.test.js test/py-annotation-sources.test.js test/fn-reach.test.js test/deep-taint.test.js test/calibration.test.js test/holdout-eval.test.js test/cross-lang-meta.test.js test/cross-lang-queues.test.js test/phase5-xlang.test.js test/phase5-coverage.test.js test/phase6-taint.test.js test/llm-validator-consistency.test.js test/llm-validator-default-on.test.js test/llm-validator-preset.test.js test/parser-py-cst.test.js test/chrome-probe.test.js test/parser-cs-kt.test.js test/parser-cs-annotations.test.js test/parser-cs-control-flow.test.js test/parser-kt-control-flow.test.js test/parser-js-annotations.test.js test/parser-java-annotations.test.js test/parser-java-control-flow.test.js test/parser-java-calls.test.js test/parser-go.test.js test/parser-rust.test.js test/rust-taint-flow.test.js test/parser-php-rb.test.js test/parser-php-control-flow.test.js test/interproc-k2.test.js test/proven-clean.test.js test/backward-default.test.js test/incremental-cache.test.js test/string-regex-lattice.test.js test/closure-capture.test.js test/points-to.test.js test/type-stubs.test.js test/soft-taint.test.js test/ifds.test.js test/symbolic-exec-proof.test.js test/ifds-summary-edges.test.js test/stub-aware-filter.test.js test/cross-repo.test.js test/proof-gate.test.js test/layer-recall.test.js test/java-taint-flow.test.js test/kt-taint-flow.test.js test/sanitizer-typed-flow.test.js test/sanitizer-gate-unit.test.js test/proof-safe.test.js test/collection-taint.test.js test/kcfa-context.test.js test/kcfa-callstring.test.js test/flow-parity.test.js test/callgraph-resolve.test.js test/import-reachability.test.js test/ir-stats.test.js test/parser-cpp.test.js test/parser-js-decorators.test.js test/parser-js-if-else-cfg.test.js test/cpp-integration.test.js test/engine-reconnect.test.js test/phase2-scoping.test.js test/engine-recall.test.js test/catalog-annotation-source.test.js test/catalog-cs-p1.test.js test/catalog-expanded.test.js test/builtin-summaries.test.js test/interproc-mutation-crash.test.js test/mutated-param-taint.test.js test/return-sink-check.test.js test/higher-order-inline-callback.test.js test/interproc-findings-discard.test.js test/runscan-deep-option.test.js test/summary-cache-convergence.test.js test/parser-rb-calls.test.js test/parser-rb-module-level.test.js test/balanced-call.test.js test/destructuring-taint.test.js test/computed-member-taint.test.js test/string-interpolation-taint.test.js test/dataflow-deadcode-severity.test.js test/catalog-dotted-callee-lookup.test.js test/builtin-summary-family-blind-kill.test.js test/deep-mode-annotator-pipeline.test.js test/receiver-type-and-nested-calls.test.js test/member-write-and-loop-taint.test.js test/parser-py-module-level.test.js test/parser-php-module-level.test.js test/r14b-module-level-e2e.test.js test/annotation-taint-engine.test.js test/interproc-nested-call-taint.test.js test/catalog-xpath-injection.test.js test/catalog-ldap-injection.test.js test/catalog-xxe.test.js test/catalog-response-splitting.test.js test/catalog-code-injection.test.js test/parser-rb-control-flow.test.js test/catalog-ruby-p1.test.js test/callee-receiver-taint.test.js test/catalog-command-injection-p4.test.js test/catalog-xss-p4.test.js test/catalog-path-ssrf-p3.test.js test/catalog-ai-model-provider-precision.test.js test/catalog-orm-write.test.js test/dataflow/provenance-pipeline-integration.test.js test/dataflow-progress.test.js test/scan-progress.test.js test/sard-leakage-pipeline.test.js test/sard-split-scoring.test.js test/sard-llm-isolation.test.js test/sard-mutation-adversarial.test.js test/sard-baseline-adaptive-tolerance.test.js test/sard-independent-holdout.test.js test/sard-flow-aware-scoring.test.js test/sard-macro-score-support-floor.test.js test/sard-php-split.test.js test/parser-java-nary-concat.test.js test/sard-naive-baseline.test.js test/field-taint-cross-method.test.js test/field-taint-engine-unit.test.js test/coercion-sanitizer-kill.test.js test/constant-propagation-path-sensitivity.test.js test/parser-java-assignments.test.js test/catalog-java-sard.test.js test/parser-cs-juliet-shapes.test.js test/catalog-cs-sard-p2.test.js test/sard-cwe-key-merge.test.js test/parser-php-backtick.test.js test/parser-php-include.test.js test/php-include-merge.test.js test/parser-php-array-field-taint.test.js test/parser-php-cond-assign.test.js test/parser-rust-redos.test.js test/multi-sink-taint-chain.test.js test/static-field-cross-class-call-string.test.js test/regex-guard-narrowing.test.js test/object-instance-field-taint.test.js test/param-type-inference.test.js test/smt-path-feasibility.test.js test/cross-service-taint.test.js test/dataflow-expr-taint-scaling.test.js test/evaluation/guard-dominance.test.js test/evaluation/engine-mechanisms.test.js test/rx-exec-receiver.test.js test/incremental-dependency.test.js test/incremental-integrity.test.js test/demand-query.test.js test/ir-cache.test.js test/canonicalize-parity.test.js test/dataflow-source-attribution.test.js",
     "test:mcp": "node --test test/mcp.test.js test/mcp-apply-fix-multifile.test.js test/mcp-protocol-smoke.test.js test/mcp-audit.test.js test/audit-cli.test.js test/mcp-scratchpad.test.js test/mcp-offload.test.js test/sca-upgrade.test.js test/lsp-server.test.js test/mcp-dataflow-tools.test.js test/cli/governance-propose-edit.test.js test/cli/remediation-open-update.test.js test/cli/remediation-verify-reopen.test.js test/cli/dataflow-observations.test.js test/cli/federate-declare-list.test.js test/capabilities/tools.test.js",
     "test:report": "node --test test/report-scan-invariants.test.js test/junit.test.js test/ci.test.js test/poc-generator.test.js test/verifier.test.js test/verifier-target.test.js test/annotator-errors.test.js test/git-history-batch.test.js test/default-scan-drift.test.js test/bundle-optional-deps.test.js test/scan-health.test.js test/finding-schema.test.js test/pipeline/finding-schema-provenance.test.js test/evidence-provenance.test.js test/report/provenance-output.test.js test/report/provenance-format-parity.test.js test/legacy-compat.test.js test/annotator-runner.test.js test/detector-runner.test.js test/detector-errors.test.js test/analyzer-supervisor.test.js test/cascade-worker-pool.test.js test/cascade-pool-wiring.test.js test/coverage-ledger.test.js test/coverage-ledger-completeness.test.js test/assurance-mode.test.js test/artifact-registry.test.js test/artifact-registry-completeness.test.js test/retention-policy.test.js test/state-lifecycle-report.test.js test/legal-hold.test.js test/production-feedback.test.js test/calibration-feedback.test.js test/encryption-provider.test.js test/grader-calibration.test.js test/pr-delta-gate.test.js test/vex.test.js test/report-render.test.js test/oscal-conformance.test.js test/cli-fix-apply.test.js test/apply-fix-service.test.js test/high-impact-approval-gate.test.js test/approver-registry.test.js test/suppression-exceptions.test.js test/fix-history.test.js test/producer-registry.test.js test/producer-collector.test.js test/enrichment-completion.test.js",
-    "test:lineage": "node --test test/lineage/analysis-completion.test.js test/lineage/schema.test.js test/lineage/ids.test.js test/lineage/protection.test.js test/lineage/classification.test.js test/lineage/validate.test.js test/lineage/json-schema-parity.test.js test/lineage/flagship-fixture.test.js test/lineage/flagship-fixture-semantics.test.js test/lineage/field-identity.test.js test/lineage/engine-expr-resolver.test.js test/lineage/engine-walker.test.js test/lineage/engine-integration.test.js test/lineage/engine-receiver-identity.test.js test/lineage/summaries.test.js test/lineage/driver.test.js test/lineage/engine-provenance.test.js test/lineage/engine-provenance-interprocedural.test.js test/lineage/path-store.test.js test/lineage/path-query.test.js test/lineage/flow-grade.test.js test/lineage/source-registry.test.js test/lineage/sink-registry.test.js test/lineage/transform-catalog.test.js test/lineage/handling-analyzer.test.js test/lineage/registry-real-code.test.js test/lineage/source-seeding.test.js test/lineage/graph-builder.test.js test/lineage/coverage.test.js test/lineage/resolve-destination.test.js test/lineage/queue-detail.test.js test/lineage/index.test.js test/lineage/obligation-mapping.test.js test/lineage/obligation-predicates.test.js test/lineage/obligation-predicates-walkthrough.test.js test/lineage/transit-protection.test.js test/lineage/at-rest-protection.test.js test/lineage/protection-summary.test.js test/lineage/ac01-multi-sink.test.js test/lineage/policy-verdict.test.js test/lineage/governance-refs.test.js test/lineage/export-privacy.test.js test/lineage/export-json.test.js test/lineage/export-csv.test.js test/lineage/decision-story.test.js test/lineage/export-briefing.test.js test/lineage/graph-snapshot.test.js test/lineage/graph-diff.test.js test/lineage/drift-policy.test.js test/lineage/recipient-profile.test.js test/lineage/recipient-registry.test.js test/lineage/recipient-wiring.test.js test/lineage/redact-graph.test.js test/lineage-scan-wiring.test.js test/lineage-artifact-write.test.js test/bench-data-lineage-runner.test.js test/bundle-frontend.test.js test/bundle-frontend-golden.test.js test/generate-html-report.test.js test/export-image.test.js test/lineage/scenario.test.js test/lineage/scenario-engine.test.js test/lineage/scenario-diff.test.js test/lineage/scenario-no-obligation-wiring.test.js test/lineage/impact-assessment.test.js test/lineage/impact-engine.test.js test/lineage/impact-no-obligation-wiring.test.js test/lineage/governance-edit.test.js test/lineage/remediation.test.js test/lineage/runtime-observation.test.js test/lineage/observation-correlation.test.js test/lineage/observation-adapters.test.js test/lineage/observation-store.test.js test/lineage/runtime-corroboration-wiring.test.js test/lineage/cross-repo-link.test.js test/lineage/federation-loader.test.js test/lineage/cross-repo-link-wiring.test.js test/lineage/runtime-assurance.test.js test/lineage/runtime-edge-states.test.js test/lineage/runtime-explorer-view.test.js test/cli/runtime-explorer-cli.test.js test/cli/runtime-identity-cli.test.js test/cli/runtime-twin-cli.test.js test/lineage/cut-planner.test.js test/lineage/scc.test.js test/lineage/scc-solver.test.js test/graph/graph-views.test.js test/lineage/dag07-completion.test.js test/lineage/owned-build.test.js test/dataflow/boundary-propagation.test.js test/lineage/boundary-contract.test.js test/lineage/correlation-v2.test.js test/lineage/path-control-evidence.test.js test/lineage/smt-z3-backend.test.js test/cli/dag-commands.test.js",
+    "test:lineage": "node --test test/lineage/analysis-completion.test.js test/lineage/schema.test.js test/lineage/ids.test.js test/lineage/protection.test.js test/lineage/classification.test.js test/lineage/validate.test.js test/lineage/json-schema-parity.test.js test/lineage/flagship-fixture.test.js test/lineage/flagship-fixture-semantics.test.js test/lineage/field-identity.test.js test/lineage/engine-expr-resolver.test.js test/lineage/engine-walker.test.js test/lineage/engine-integration.test.js test/lineage/engine-receiver-identity.test.js test/lineage/summaries.test.js test/lineage/driver.test.js test/lineage/engine-provenance.test.js test/lineage/engine-provenance-interprocedural.test.js test/lineage/path-store.test.js test/lineage/path-query.test.js test/lineage/flow-grade.test.js test/lineage/source-registry.test.js test/lineage/sink-registry.test.js test/lineage/transform-catalog.test.js test/lineage/handling-analyzer.test.js test/lineage/registry-real-code.test.js test/lineage/source-seeding.test.js test/lineage/seeding-across-calls.test.js test/lineage/graph-builder.test.js test/lineage/coverage.test.js test/lineage/resolve-destination.test.js test/lineage/queue-detail.test.js test/lineage/index.test.js test/lineage/obligation-mapping.test.js test/lineage/obligation-predicates.test.js test/lineage/obligation-predicates-walkthrough.test.js test/lineage/transit-protection.test.js test/lineage/at-rest-protection.test.js test/lineage/protection-summary.test.js test/lineage/ac01-multi-sink.test.js test/lineage/policy-verdict.test.js test/lineage/governance-refs.test.js test/lineage/export-privacy.test.js test/lineage/export-json.test.js test/lineage/export-csv.test.js test/lineage/decision-story.test.js test/lineage/export-briefing.test.js test/lineage/graph-snapshot.test.js test/lineage/graph-diff.test.js test/lineage/drift-policy.test.js test/lineage/recipient-profile.test.js test/lineage/recipient-registry.test.js test/lineage/recipient-wiring.test.js test/lineage/redact-graph.test.js test/lineage-scan-wiring.test.js test/lineage-artifact-write.test.js test/bench-data-lineage-runner.test.js test/bundle-frontend.test.js test/bundle-frontend-golden.test.js test/generate-html-report.test.js test/export-image.test.js test/lineage/scenario.test.js test/lineage/scenario-engine.test.js test/lineage/scenario-diff.test.js test/lineage/scenario-no-obligation-wiring.test.js test/lineage/impact-assessment.test.js test/lineage/impact-engine.test.js test/lineage/impact-no-obligation-wiring.test.js test/lineage/governance-edit.test.js test/lineage/remediation.test.js test/lineage/runtime-observation.test.js test/lineage/observation-correlation.test.js test/lineage/observation-adapters.test.js test/lineage/observation-store.test.js test/lineage/runtime-corroboration-wiring.test.js test/lineage/cross-repo-link.test.js test/lineage/federation-loader.test.js test/lineage/cross-repo-link-wiring.test.js test/lineage/runtime-assurance.test.js test/lineage/runtime-edge-states.test.js test/lineage/runtime-explorer-view.test.js test/cli/runtime-explorer-cli.test.js test/cli/runtime-identity-cli.test.js test/cli/runtime-twin-cli.test.js test/lineage/cut-planner.test.js test/lineage/scc.test.js test/lineage/scc-solver.test.js test/graph/graph-views.test.js test/lineage/dag07-completion.test.js test/lineage/owned-build.test.js test/dataflow/boundary-propagation.test.js test/lineage/boundary-contract.test.js test/lineage/correlation-v2.test.js test/lineage/path-control-evidence.test.js test/lineage/smt-z3-backend.test.js test/cli/dag-commands.test.js",
     "test:bench-modules": "node --test test/phase4-harness.test.js test/pipeline.test.js test/proof-corpus-lib.test.js test/proof-corpus-runner.test.js",
     "test:server": "node --test test/server/graph-loader.test.js test/server/security.test.js test/server/routes.test.js test/server/http-server.test.js test/server/cmd-explore.test.js test/server/cmd-dataflow-export.test.js test/server/static-assets.test.js test/server/dataflow-scenario-cli.test.js test/server/dataflow-impact-cli.test.js",
     "test:haskell": "node --test test/haskell/haskell-reachability.test.js test/haskell/haskell-real-code-shapes.test.js test/haskell/haskell-unseen-v5-shapes.test.js test/haskell/haskell-unseen-v4-shapes.test.js test/haskell/haskell-alias-taint.test.js test/haskell/haskell-weak-hash-names.test.js test/haskell/haskell-models-extended.test.js test/haskell/haskell-rules-extended.test.js test/haskell/haskell-injection.test.js test/haskell/haskell-ir.test.js test/haskell/haskell-manifests.test.js test/haskell/haskell-parser.test.js test/haskell/haskell-remediation.test.js test/haskell/haskell-remediation-0190.test.js test/haskell/haskell-remediation-kdf.test.js test/haskell/haskell-remediation-html-text.test.js test/haskell/haskell-remediation-scotty-body.test.js test/haskell/haskell-remediation-entropy.test.js test/haskell/haskell-remediation-text-command.test.js test/haskell/haskell-remediation-path-contain.test.js test/haskell/haskell-remediation-0195-16.test.js test/haskell/haskell-taint-shapes.test.js test/haskell/haskell-real-advisory-shapes.test.js test/haskell/haskell-discovery-shapes.test.js test/haskell/haskell-quasiquote-interp.test.js test/haskell/haskell-record-dot.test.js test/haskell/haskell-global-cell.test.js test/haskell/haskell-syntax-extensions.test.js test/haskell/haskell-rule-precision.test.js test/haskell/haskell-resolved-graph.test.js test/haskell/haskell-sca.test.js test/haskell/haskell-sca-severity.test.js test/haskell/haskell-web-guards.test.js test/haskell/haskell-advisory-feed.test.js test/haskell/haskell-security-rules.test.js test/haskell/haskell-taint.test.js test/haskell/haskell-boundaries.test.js test/haskell/haskell-live-feed-scan.test.js test/haskell/haskell-supply-bounds.test.js test/haskell/haskell-ir-scaling.test.js test/haskell/haskell-boundary-propagation.test.js test/haskell/haskell-generalization.test.js test/haskell/haskell-trust-boundary.test.js test/haskell/haskell-trust-fixed-file.test.js test/haskell/haskell-predictable-random-flow.test.js test/haskell/haskell-comment-invariance.test.js test/haskell/haskell-remediation-classes.test.js test/haskell/haskell-trust-boundary-frameworks.test.js test/haskell/haskell-generic-detectors.test.js",

package/src/lineage/CLAUDE.md

@@ -1328,3 +1328,15 @@ report would read as a real-code measurement. No taint-recall tier is borrowed.
 ## Runtime twin additions (PRD 2 gap closure)
 
 `runtime-edge-states.js` derives the six edge states and the identity / absent-from-static queries from the existing correlation, as a pure read: nothing is written into the static graph. `RUNTIME_EXPLOIT_CORRELATED` is never inferred from observation; it needs validated operator evidence. `identity-token.js` supplies a keyed-hash tokenizer injected into the adapters through `context.tokenizeIdentity`; the adapters stay zero-import and drop identity when no tokenizer is given. The attribute allowlist test pins `identity.token`; widen it deliberately, never by loosening the grammar.
+
+## Lineage sources across aliases and calls (GA-03.1, 0.195.24)
+
+The data-lineage corpus (`bench/data-lineage/`) went from 17 of 24 to 24 of 24, every fixture regression-tier, through three engine changes and one runner change. Each is measured by `test/lineage/seeding-across-calls.test.js`.
+
+| Module | Responsibility |
+|---|---|
+| `lineage-source-catalog.js` | Six JavaScript collection points that are lineage sources but NOT taint sources: `process.argv` (`cli-argument`), `req.file`/`req.files` (`http-upload`), `fs.readFileSync` (`storage-read`), bare `prompt()` and `readlineSync.question()` (`user-input`). The main taint catalog had no JavaScript entry for those four categories, and adding them there would make a file's contents or a console prompt attacker-controlled for every SAST finding. Same isolation as `dataflow/privacy-catalog.js`; imports nothing from `dataflow/`. `matchLineageSource(expr, file)` is consulted by `source-seeding.js` after `matchSource` and only for a JavaScript or TypeScript file; `LINEAGE_SOURCE_DECISIONS` proves at load time that every entry's `provenance` resolves through `source-registry.js`. The test pins that `matchSource` returns null for every shape here. |
+| `source-seeding.js` (extended) | Two seed kinds (`SEED_KINDS`). `entry` is §3's mechanism unchanged. `after-node` is a CALL-shaped source assigned straight to a variable (`const record = fs.readFileSync(p)`, `const data = res.json()`): the call has no access path, so the seed lands on the assignment target in the state LEAVING that CFG node, applied by `engine.js`'s worklist through `ctx.seedAfterNode(qid, nodeId)` (`seedAfterNodeFactory`). A call-shaped source anywhere else is still `unseedable[]`. `extendThroughAliases` follows a container alias within one function (`const body = req.body; body.card_number`): the alias assignment names `body`, every outermost pure member read rooted at an alias mints the field seed on the ORIGINAL path (`req.body.card_number`, classified `PCI`), sited where the data entered; chained aliases are followed for at most four rounds, a wildcard segment is never seeded, a parameter is never an alias. |
+| `summaries.js` (extended) | `createCallSummaryResolver(cache, lookupCallee, { seedEntryState })` joins the callee's OWN seeds onto the entry state derived from the call arguments: `req.body.card_number` read inside `extractCard` is a source wherever it is called from, so the caller's resolution of `extractCard(req)` returns the PCI element and the `call-resolved` hop joins the caller's path to the callee's return node. The cache key is the joined state, so the driver's analysis of the callee and a clean call site share one key; §3.6's rule (no seeded summary under the empty-entry key) stands, see `DESIGN_GRAPH_BUILDER.md` §3.8. Bind hops and the cap-degradation loss hops enumerate only the call-derived half. `ctx.seedAfterNode` is forwarded to the callee's ctx. `driver.js` memoises the hook per function and passes it to the resolver. |
+| `engine.js` (extended) | After `step()`, the worklist adds that node's `after-node` seeds to the outgoing state (idempotent on revisit, no hop: the first read creates the path node with no in-edges, an origin, as for an entry seed). **Disclosed gap:** a bare call statement is still never resolved through the summary, so a sink inside the callee never sees an argument's identity; resolving it was tried and reverted (it consumes a summary context per call site and under a tight cap degrades a later resolution, moving seven pinned provenance measurements). Pinned by `seeding-across-calls.test.js` IP/2. |
+| `bench/data-lineage/runner.mjs` (extended) | `expectUnsupportedSink: true` asserts a `kind: 'process'`, `subtype: null`, `coverageStatus: 'unsupported'` node with a reason (the `exec` fixture). An EMPTY `dataClass` label matches the flow on the two categories alone (a file's contents, a positional argument); a non-empty label is unchanged. |

package/src/lineage/DESIGN_GRAPH_BUILDER.md

@@ -215,6 +215,29 @@ empty one.
 `E1/driver-3` proves **both** directions: a local replica of the pre-fix loop
 (the mutant) fabricates; the shipped driver does not.
 
+### 3.8 Revision (GA-03.1, 0.195.24): a callee's seeds are facts about its body
+
+§3.6's table read "`[]` — correct" for the caller's local after
+`const v = helper(o)`. That was the right KEY and the wrong CONSEQUENCE.
+`helper`'s seed is `req.body.secret`, a source expression inside `helper`'s
+own body; it is read whoever calls `helper`, so the honest answer at every
+call site is that `v` carries it. Under the shipped resolver the caller
+resolved `helper` under the call-derived state alone, the seed was absent
+from it, and the lineage corpus's interprocedural fixture produced the right
+nodes, the right data element and zero flows.
+
+`createCallSummaryResolver` now joins the callee's own seeds
+(`seedEntryState(fn)`, the same hook the driver uses, memoised per function)
+onto the call-derived entry state before computing the summary. The rule
+§3.6 established is untouched: the cache key is the JOINED state, so nothing
+is ever written under the empty-entry key for a seeded function, and the
+driver's own analysis of the callee and a clean call site share one key and
+one summary. `E1/driver-3` now pins exactly that in both directions (the
+mutant still stores the seeded answer under the empty key; the shipped
+driver never does, and the caller receives the seed). Bind hops and the
+cap-degradation loss hops enumerate only the call-derived half: a seed is
+not an argument.
+
 ### 3.7 What real seeding measures
 
 | Project | seeds | hops | pnodes / pedges | node kinds reached |

package/src/lineage/driver.js

@@ -140,14 +140,31 @@ export function runFieldIdentityAnalysis(callGraph, opts = {}) {
   // seeding hook. `opts.seedEntryState(fn)` returns the entry state `fn` is
   // analyzed under; a falsy return means "no seed". With no hook, this IS
   // `emptyState()` and every output is byte-identical to the pre-hook driver.
-  const entryStateOf = (fn) => (opts.seedEntryState ? (opts.seedEntryState(fn) || emptyState()) : emptyState());
+  // GA-03.1 (0.195.24): the hook's answer is memoised per function, so it
+  // is still consulted exactly once per function even though the
+  // call-summary resolver below now reads it at every resolved call site.
+  const seedMemo = new Map();
+  const seedOf = opts.seedEntryState
+    ? (fn) => {
+        if (!seedMemo.has(fn.qid)) seedMemo.set(fn.qid, opts.seedEntryState(fn) || null);
+        return seedMemo.get(fn.qid);
+      }
+    : null;
+  const entryStateOf = (fn) => (seedOf ? (seedOf(fn) || emptyState()) : emptyState());
   const ctxFor = (fn) => {
     const lookupCallee = createCallGraphLookup(callGraph, fn.file);
-    const resolveCallSummary = createCallSummaryResolver(cache, lookupCallee);
+    // GA-03.1 (0.195.24): the resolver receives the same seeding hook the
+    // driver uses, so a callee's own source seeds hold under every call
+    // context (summaries.js, createCallSummaryResolver). Without a hook the
+    // resolver is built exactly as before.
+    const resolveCallSummary = createCallSummaryResolver(cache, lookupCallee, seedOf ? { seedEntryState: seedOf } : {});
     // Path provenance (Sub-project C, increment 3, section 13.7 item 14):
     // thread opts.recordHop CONDITIONALLY so a caller that supplies none gets
     // a byte-identical `{ resolveCallSummary }` object (Decision 7.2).
     const ctx = opts.recordHop ? { resolveCallSummary, recordHop: opts.recordHop } : { resolveCallSummary };
+    // GA-03.1: `opts.seedAfterNode(qid, nodeId)` (source-seeding.js's
+    // seedAfterNodeFactory), consulted by engine.js after every CFG node.
+    if (typeof opts.seedAfterNode === 'function') ctx.seedAfterNode = opts.seedAfterNode;
     // DAG-03: correlation version 2 labels hops with derivation, value-version
     // and invocation evidence. Off unless asked for; needs a recorder.
     if (opts.recordHop && resolveCorrelationVersion(opts.correlationVersion) === 2) ctx.correlationVersion = 2;

package/src/lineage/engine.js

@@ -923,6 +923,18 @@ function step(node, stateIn, widenings, ctx) {
           }
         }
       }
+      // Known, disclosed gap (GA-03.1, 0.195.24, measured): a bare call
+      // statement is never resolved through `ctx.resolveCallSummary`, so a
+      // sink INSIDE the callee (`emit(logger, req.body.card_number)` with
+      // `logger.info(v)` in emit) never sees the argument's identity; the
+      // value is an escape here and nothing more. Resolving it was tried
+      // and reverted in 0.195.24: the extra callee analysis consumes a
+      // summary context per call site, and under a tight context cap that
+      // degrades a later resolution to an empty summary (the §13.2a hazard
+      // of DESIGN_PATH_PROVENANCE.md, in the unsound direction), moving
+      // seven pinned provenance measurements. Closing it needs the cap to
+      // exempt bare-call contexts or a separate budget; pinned as a gap by
+      // test/lineage/seeding-across-calls.test.js (IP/2).
       return { state: stateIn, returnFact: null };
     }
 
@@ -1068,7 +1080,18 @@ export function analyzeFunctionFieldIdentity(fn, entryState, ctx) {
           recordHop: stepRecord,
         }
       : ctx;
-    const { state: out, returnFact } = step(node, incoming, widenings, stepCtx);
+    let { state: out, returnFact } = step(node, incoming, widenings, stepCtx);
+    // GA-03.1 (0.195.24): `after-node` seeds (source-seeding.js, SEED_KINDS).
+    // A call-shaped source assigned to a variable produces its identity in
+    // the TARGET once this node has run; the assignment's own strong update
+    // has already cleared the target, so this is a plain add, idempotent on
+    // a worklist revisit. Keyed by `(scope, nid)` so the same hook serves a
+    // callee analysed through the call-summary resolver. No hop is recorded
+    // here: the first read of the target creates the path node, which then
+    // has no in-edges and reconstructs as an origin, exactly as an entry
+    // seed's first read does.
+    const after = ctx?.seedAfterNode ? ctx.seedAfterNode(scope, nid) : undefined;
+    if (after) for (const s of after) out = addIdentity(out, s.path, s.id);
     if (returnFact && returnFact.size > 0) {
       // Union onto any existing fact for this node rather than pushing a
       // new array entry every visit — see Fix 2 in the final whole-branch

package/src/lineage/graph-builder.js

@@ -131,7 +131,7 @@ import { classifyHandling } from './handling-analyzer.js';
 import { emptyGraphEnvelope } from './schema.js';
 import { emptyProtection, aggregateVerdicts } from './protection.js';
 import * as ids from './ids.js';
-import { planSeeds, seedEntryStateFactory, exprRoots, walkExpr } from './source-seeding.js';
+import { planSeeds, seedEntryStateFactory, seedAfterNodeFactory, exprRoots, walkExpr } from './source-seeding.js';
 import { RECIPIENT_FACT_FIELDS } from './recipient-profile.js';
 import { pathEvidenceEnabled, evaluatePathEvidence, summarizeFlowEvidence } from './path-evidence.js';
 import { sinkFamilyOf } from './control-credit.js';
@@ -450,6 +450,8 @@ export function buildDataFlowGraph(callGraph, opts = {}) {
   const analysis = runFieldIdentityAnalysis(callGraph, {
     recordHop: (h) => hops.push(h),
     seedEntryState: seedEntryStateFactory(seeds),
+    // GA-03.1 (0.195.24): call-shaped sources assigned to a variable.
+    ...(seedAfterNodeFactory(seeds) ? { seedAfterNode: seedAfterNodeFactory(seeds) } : {}),
     ...(opts.maxContextsPerFn === undefined ? {} : { maxContextsPerFn: opts.maxContextsPerFn }),
     ...(opts.maxIterations === undefined ? {} : { maxIterations: opts.maxIterations }),
     // DAG-03: provenance correlation version 2 (off unless requested).

package/src/lineage/lineage-source-catalog.js

@@ -0,0 +1,143 @@
+//
+// lineage-source-catalog.js — JavaScript data collection points that are
+// lineage sources but NOT taint sources (GA plan, GA-03.1: "address
+// source-category omissions without broadening the main taint catalog
+// incorrectly").
+//
+// Four of the fourteen reachable `SOURCE_CATEGORIES` had no `language: 'js'`
+// entry in `dataflow/catalog.js` at all: `cli-argument` (only `py-sys-argv`
+// and the argparse entries), `http-upload` (only Django and Symfony),
+// `storage-read` (only `py-open-read` and the C `read`/`fread`/`fgets`
+// entries) and `user-input` (only `py-input`, `gets`, `scanf`). The lineage
+// corpus therefore could not mint a source node for any of them from a
+// JavaScript fixture, and the four corpus entries that name them were
+// written in Python syntax on purpose, as a disclosed limitation.
+//
+// Why these entries live HERE and not in `dataflow/catalog.js`'s `CATALOG`:
+// that catalog is the taint engine's source list, and every entry in it
+// becomes an attacker-controlled input for every SAST and taint finding the
+// engine emits. A file's contents (`fs.readFileSync`) and a console prompt
+// (`prompt()`, `readlineSync.question()`) are places personal data ENTERS a
+// program, which is what a lineage graph records, but treating them as
+// attacker-controlled would turn every configuration read into a taint
+// source and flood the SAST output with findings nobody asked for. The
+// Data Flow Explorer already keeps a second, isolated catalog for the same
+// reason (`dataflow/privacy-catalog.js`, never merged into `CATALOG`); this
+// module follows that precedent on the source side. `test/lineage/
+// lineage-source-catalog.test.js` pins that `dataflow/catalog.js`'s own
+// `matchSource` returns null for every shape listed here, so adding an
+// entry here can never widen the taint engine by accident.
+//
+// Reuse boundary: imports nothing from `dataflow/`. The matcher below is a
+// deliberately small structural match over the parser's expression shape
+// (`ident`/`member`/`call`), not a copy of `catalog.js`'s index machinery;
+// an entry that needs receiver types, keyword arguments or a language family
+// other than JavaScript belongs in the main catalog, with the taint
+// consequences weighed there.
+
+import { reclassifySource } from './source-registry.js';
+
+const JS_FILE = /\.(?:[cm]?js|jsx|tsx?)$/i;
+
+/**
+ * Each entry mirrors the main catalog's source shape (`kind`, `id`,
+ * `language`, `framework`, `match`, `label`, `provenance`) so
+ * `reclassifySource` reads it unchanged: `provenance` is the key the
+ * registry's `PROVENANCE_MAP` resolves to a `SOURCE_CATEGORIES` value.
+ * `lineageOnly: true` is the marker a reader greps for; nothing consults it.
+ */
+export const LINEAGE_SOURCE_CATALOG = Object.freeze([
+  {
+    kind: 'source', id: 'js-process-argv', language: 'js', framework: 'node', lineageOnly: true,
+    match: { type: 'member', object: 'process', prop: 'argv' }, label: 'process.argv', provenance: 'cli',
+    why: 'a positional command-line argument; the value is whatever the operator typed, not attacker-controlled in the taint sense, so it is a collection point for lineage only',
+  },
+  {
+    kind: 'source', id: 'js-multer-req-file', language: 'js', framework: 'express', lineageOnly: true,
+    match: { type: 'member', object: 'req', prop: 'file' }, label: 'req.file', provenance: 'upload',
+    why: 'the single uploaded file multer attaches to the request (name, type, buffer, path)',
+  },
+  {
+    kind: 'source', id: 'js-multer-req-files', language: 'js', framework: 'express', lineageOnly: true,
+    match: { type: 'member', object: 'req', prop: 'files' }, label: 'req.files', provenance: 'upload',
+    why: 'the uploaded files multer attaches to the request, keyed by field name',
+  },
+  {
+    kind: 'source', id: 'js-fs-readFileSync', language: 'js', framework: 'node', lineageOnly: true,
+    match: { type: 'call', callee: 'readFileSync' }, label: 'fs.readFileSync()', provenance: 'file-read',
+    why: 'the contents of a file; the callback form `fs.readFile(p, cb)` delivers its contents to a callback and is not seeded (its path argument is already a sink in the main catalog)',
+  },
+  {
+    kind: 'source', id: 'js-window-prompt', language: 'js', framework: 'browser', lineageOnly: true,
+    match: { type: 'call', callee: 'prompt', bare: true }, label: 'prompt()', provenance: 'stdin',
+    why: 'text a person typed into the browser prompt dialog; only the bare global, never `x.prompt()` (inquirer and friends return a promise of an answers object)',
+  },
+  {
+    kind: 'source', id: 'js-readline-sync-question', language: 'js', framework: 'node', lineageOnly: true,
+    match: { type: 'call', callee: 'question', receiver: 'readlineSync' }, label: 'readlineSync.question()', provenance: 'stdin',
+    why: 'text a person typed at the console; the readline module\'s own `rl.question(q, cb)` delivers the answer to a callback and is not seeded',
+  },
+]);
+
+/** The receiver chain of a member-call callee, outermost first (`a.b.c()` -> ['a', 'b']). */
+function receiverSegments(callee) {
+  const segs = [];
+  let cur = callee && callee.kind === 'member' ? callee.object : null;
+  let depth = 0;
+  while (cur && depth++ < 8) {
+    if (cur.kind === 'ident') { segs.unshift(cur.name); break; }
+    if (cur.kind === 'member') { if (typeof cur.prop === 'string') segs.unshift(cur.prop); cur = cur.object; continue; }
+    break;
+  }
+  return segs;
+}
+
+function calleeName(callee) {
+  if (!callee) return null;
+  if (typeof callee === 'string') return callee.slice(callee.lastIndexOf('.') + 1);
+  if (callee.kind === 'ident') return callee.name ?? null;
+  if (callee.kind === 'member') return typeof callee.prop === 'string' ? callee.prop : null;
+  return null;
+}
+
+function entryMatches(entry, expr) {
+  const m = entry.match;
+  if (m.type === 'member') {
+    return expr.kind === 'member' && expr.object?.kind === 'ident' && expr.object.name === m.object && expr.prop === m.prop;
+  }
+  if (m.type === 'call') {
+    if (expr.kind !== 'call') return false;
+    if (calleeName(expr.callee) !== m.callee) return false;
+    if (m.bare) return expr.callee && expr.callee.kind === 'ident';
+    if (m.receiver) return receiverSegments(expr.callee).includes(m.receiver);
+    return true;
+  }
+  return false;
+}
+
+/**
+ * The lineage-only counterpart of `dataflow/catalog.js`'s `matchSource`:
+ * returns the first catalog entry whose `match` fits `expr`, or null.
+ * Gated to JavaScript and TypeScript files (an entry here is JavaScript by
+ * construction); a missing `file` is permissive, matching `matchSource`.
+ * Never throws on a malformed expression.
+ */
+export function matchLineageSource(expr, file) {
+  if (!expr || typeof expr !== 'object') return null;
+  if (file && !JS_FILE.test(file)) return null;
+  for (const entry of LINEAGE_SOURCE_CATALOG) {
+    if (entryMatches(entry, expr)) return entry;
+  }
+  return null;
+}
+
+/** The registry decision for every entry, computed once: proves at load time that each `provenance` resolves. */
+export const LINEAGE_SOURCE_DECISIONS = Object.freeze(Object.fromEntries(
+  LINEAGE_SOURCE_CATALOG.map((e) => {
+    const d = reclassifySource(e);
+    if (!d || !d.category || d.coverageStatus === 'unsupported') {
+      throw new Error(`lineage-source-catalog: ${e.id} has a provenance (${e.provenance}) the source registry cannot classify`);
+    }
+    return [e.id, d];
+  }),
+));

package/src/lineage/source-seeding.js

@@ -30,6 +30,25 @@ import { emptyState, addIdentity } from './field-identity.js';
 import { reclassifySource } from './source-registry.js';
 import { classifyDataElementName } from './classification.js';
 import { dataElementId } from './ids.js';
+import { matchLineageSource } from './lineage-source-catalog.js';
+
+// ── Seed kinds (GA-03.1, 0.195.24) ──────────────────────────────────────────
+//
+// `entry`: the identity is placed in the function's ENTRY state at
+// `seedPath` (a member-shaped source such as `req.body.card_number`, whose
+// path is stable for the whole function). This is §3's original mechanism.
+//
+// `after-node`: the identity is placed at `seedPath` in the state leaving
+// CFG node `nodeId`, by `engine.js`'s worklist through `ctx.seedAfterNode`.
+// Used for a CALL-shaped source assigned straight to a variable
+// (`const record = fs.readFileSync(p)`, `const ssn = prompt('SSN')`,
+// `const data = res.json()`): the call has no access path, so an entry seed
+// has nowhere to land, and the value only exists in the target variable
+// AFTER the assignment (an entry seed at the target would be killed by the
+// assignment's own strong update). Before 0.195.24 every such match was
+// recorded in `unseedable[]`; a call-shaped source anywhere else (nested
+// inside another call's arguments, returned directly) still is.
+export const SEED_KINDS = Object.freeze(['entry', 'after-node']);
 
 // ── §3.1: where the matched expressions come from ──────────────────────────
 //
@@ -169,6 +188,26 @@ export function planSeeds(callGraph, { repository, maxSeeds, maxNodes, signal, d
     if (seeds.length >= seedCap) { stopReason = 'seeding-limit'; continue; }
     if (nodesVisited >= nodeCap) { stopReason = 'seeding-limit'; continue; }
     functionsScanned += 1;
+    const fnSeeds = [];
+    const mint = ({ nid, node, entry, decision, seedPath, seedKind }) => {
+      const canonicalName = seedPath.slice(seedPath.lastIndexOf('.') + 1);
+      const seed = {
+        file: fn.file, qid: fn.qid, nodeId: nid, line: node.line ?? null,
+        entryId: entry.id, seedPath, canonicalName, seedKind,
+        category: decision.category, coverageStatus: decision.coverageStatus,
+        externality: decision.externality, reason: decision.reason,
+        // §3.4's minting rule. `canonicalName` alone is forbidden by
+        // PRD §10.4; the discriminator carries the system proxy
+        // (repository + file), the access path, and the category.
+        // Function scope (`qid`) is deliberately NOT in the
+        // discriminator (§3.4).
+        dataElementId: dataElementId(canonicalName, [repository, fn.file, seedPath, decision.category ?? '']),
+        dataClasses: classifyDataElementName(canonicalName).classes,
+      };
+      seeds.push(seed);
+      fnSeeds.push(seed);
+      return seed;
+    };
     for (const [nid, node] of Object.entries(fn.cfg?.nodes ?? {})) {
       nodesVisited += 1;
       if (seeds.length >= seedCap) { stopReason = 'seeding-limit'; break; }
@@ -176,10 +215,21 @@ export function planSeeds(callGraph, { repository, maxSeeds, maxNodes, signal, d
       for (const root of exprRoots(node)) walkExpr(root, (e, p) => { if (p) parentOf.set(e, p); });
       for (const root of exprRoots(node)) {
         walkExpr(root, (e) => {
-          const entry = matchSource(e, fn.file);
+          // The main taint catalog first (unchanged), then the lineage-only
+          // catalog for the JavaScript collection points the main catalog
+          // deliberately does not treat as taint sources.
+          const entry = matchSource(e, fn.file) ?? matchLineageSource(e, fn.file);
           if (!entry) return;
           const decision = reclassifySource(entry);
-          const seedPath = seedPathFor(e, parentOf);
+          let seedPath = seedPathFor(e, parentOf);
+          let seedKind = 'entry';
+          if (!seedPath && node.kind === 'assign' && node.source === e && typeof node.target === 'string') {
+            // A call-shaped source that IS the whole right-hand side of an
+            // assignment: the value lands in the target, so seed the target
+            // once the node has run (see SEED_KINDS).
+            seedPath = node.target;
+            seedKind = 'after-node';
+          }
           if (!seedPath) {
             unseedable.push({
               file: fn.file, qid: fn.qid, nodeId: nid, line: node.line ?? null,
@@ -187,23 +237,24 @@ export function planSeeds(callGraph, { repository, maxSeeds, maxNodes, signal, d
             });
             return;
           }
-          const canonicalName = seedPath.slice(seedPath.lastIndexOf('.') + 1);
-          seeds.push({
-            file: fn.file, qid: fn.qid, nodeId: nid, line: node.line ?? null,
-            entryId: entry.id, seedPath, canonicalName,
-            category: decision.category, coverageStatus: decision.coverageStatus,
-            externality: decision.externality, reason: decision.reason,
-            // §3.4's minting rule. `canonicalName` alone is forbidden by
-            // PRD §10.4; the discriminator carries the system proxy
-            // (repository + file), the access path, and the category.
-            // Function scope (`qid`) is deliberately NOT in the
-            // discriminator (§3.4).
-            dataElementId: dataElementId(canonicalName, [repository, fn.file, seedPath, decision.category ?? '']),
-            dataClasses: classifyDataElementName(canonicalName).classes,
-          });
+          mint({ nid, node, entry, decision, seedPath, seedKind });
         });
       }
     }
+    // GA-03.1 (0.195.24): a container seed read through an ALIAS. §3.2's
+    // rule extends a match outward only through member accesses enclosing
+    // it in the SAME statement, so `const body = req.body;` seeds the
+    // container `req.body` (data element `body`, no classes) and the later
+    // `body.card_number` read is a field nothing seeded. Follow the alias
+    // within the function: an assignment of a pure access path that starts
+    // at a container seed (or at an earlier alias of one) names an alias,
+    // and every outermost pure member read rooted at an alias mints the
+    // field seed on the ORIGINAL container path. The alias assignment's own
+    // byPath forwarding (`engine.js`, the structure-preserving `ident` and
+    // `member` cases) then carries the field identity through the hop.
+    // Bounded: the alias table is rebuilt at most four rounds (one per
+    // hop of chained aliases) and a wildcard segment is never seeded.
+    if (fnSeeds.length) extendThroughAliases(fn, fnSeeds, mint);
   }
   const notScanned = functionsTotal - functionsScanned;
   const completion = {
@@ -219,6 +270,61 @@ export function planSeeds(callGraph, { repository, maxSeeds, maxNodes, signal, d
   return { seeds, unseedable, completion };
 }
 
+const MAX_ALIAS_ROUNDS = 4;
+
+/** `(fn, fnSeeds, mint)`: see the comment at the call site in `planSeeds`. */
+function extendThroughAliases(fn, fnSeeds, mint) {
+  const nodes = Object.entries(fn.cfg?.nodes ?? {});
+  const containers = fnSeeds.filter((s) => s.seedKind === 'entry');
+  if (!containers.length) return;
+  const containerFor = (p) => containers.find((s) => p === s.seedPath || p.startsWith(`${s.seedPath}.`)) ?? null;
+  // ident -> { basePath, seed }: the container path the alias stands for.
+  const aliases = new Map();
+  const resolve = (p) => {
+    if (!p || p.includes('*')) return null;
+    const root = p.slice(0, p.indexOf('.') === -1 ? p.length : p.indexOf('.'));
+    const a = aliases.get(root);
+    if (a) return { basePath: a.basePath + p.slice(root.length), seed: a.seed };
+    const c = containerFor(p);
+    return c ? { basePath: p, seed: c } : null;
+  };
+  for (let round = 0; round < MAX_ALIAS_ROUNDS; round++) {
+    let changed = false;
+    for (const [, node] of nodes) {
+      if (node.kind !== 'assign' || typeof node.target !== 'string' || node.target.includes('.') || node.target.includes('*')) continue;
+      if (aliases.has(node.target)) continue;
+      const r = resolve(accessPathOf(node.source));
+      if (!r) continue;
+      aliases.set(node.target, r);
+      changed = true;
+    }
+    if (!changed) break;
+  }
+  if (!aliases.size) return;
+  const minted = new Set(fnSeeds.map((s) => s.seedPath));
+  for (const [, node] of nodes) {
+    const parentOf = new Map();
+    for (const root of exprRoots(node)) walkExpr(root, (e, p) => { if (p) parentOf.set(e, p); });
+    for (const root of exprRoots(node)) {
+      walkExpr(root, (e) => {
+        if (e.kind !== 'member') return;
+        const parent = parentOf.get(e);
+        if (parent && parent.kind === 'member' && parent.object === e) return; // not outermost
+        const p = accessPathOf(e);
+        if (!p || p.includes('*')) return;
+        const root = p.slice(0, p.indexOf('.'));
+        const a = aliases.get(root);
+        if (!a) return;
+        const fieldPath = a.basePath + p.slice(root.length);
+        if (fieldPath === a.seed.seedPath || minted.has(fieldPath)) return;
+        minted.add(fieldPath);
+        const site = fn.cfg.nodes[a.seed.nodeId];
+        mint({ nid: a.seed.nodeId, node: site ?? node, entry: { id: a.seed.entryId }, decision: a.seed, seedPath: fieldPath, seedKind: 'entry' });
+      });
+    }
+  }
+}
+
 // ── §3.5: seedEntryStateFactory — the driver.js opts.seedEntryState hook ──
 
 /**
@@ -233,6 +339,7 @@ export function planSeeds(callGraph, { repository, maxSeeds, maxNodes, signal, d
 export function seedEntryStateFactory(seeds) {
   const byQid = new Map();
   for (const s of seeds) {
+    if (s.seedKind === 'after-node') continue;
     if (!byQid.has(s.qid)) byQid.set(s.qid, []);
     byQid.get(s.qid).push(s);
   }
@@ -244,3 +351,22 @@ export function seedEntryStateFactory(seeds) {
     return st;
   };
 }
+
+/**
+ * Builds the `ctx.seedAfterNode(qid, nodeId) -> [{path, id}] | undefined`
+ * function `engine.js`'s worklist consults after every CFG node (GA-03.1,
+ * 0.195.24): the `after-node` seeds of that function, grouped by node.
+ * Keyed by `qid` rather than bound to one function so the same function
+ * works for a callee analysed through `createCallSummaryResolver`.
+ */
+export function seedAfterNodeFactory(seeds) {
+  const byKey = new Map();
+  for (const s of seeds) {
+    if (s.seedKind !== 'after-node') continue;
+    const k = `${s.qid}\u0000${s.nodeId}`;
+    if (!byKey.has(k)) byKey.set(k, []);
+    byKey.get(k).push({ path: s.seedPath, id: s.dataElementId });
+  }
+  if (!byKey.size) return undefined;
+  return (qid, nodeId) => byKey.get(`${qid}\u0000${nodeId}`);
+}