circle-ir-ai 1.1.0

package/dist/agents/enrichment-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrichment-agent.d.ts","sourceRoot":"","sources":["../../src/agents/enrichment-agent.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EAChB,MAAM,YAAY,CAAC;AAMpB;;GAEG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CA8BhC;AA4ED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,qBAAqB,GAC5B,eAAe,CAKjB"}

package/dist/agents/enrichment-agent.js

@@ -0,0 +1,102 @@
+/**
+ * Enrichment Agent
+ *
+ * Uses Phase 1 LLM (fast/cheap) to discover additional sources and sinks
+ * beyond pattern matching.
+ */
+import { getEnrichmentEngine } from '../llm/index.js';
+// ============================================================================
+// Enrichment Logic
+// ============================================================================
+/**
+ * Run enrichment on an analysis context
+ */
+export async function runEnrichment(input) {
+    const startTime = Date.now();
+    const engine = getEnrichmentEngine();
+    const enrichmentResults = [];
+    // Process each type in the context
+    for (const type of input.context.types) {
+        const result = await engine.enrichType(type, input.context.sourceCode, input.context.imports, input.context.patternSources, input.context.patternSinks);
+        enrichmentResults.push(result);
+    }
+    // Merge all enrichment results
+    const mergedResult = mergeEnrichmentResults(enrichmentResults);
+    const processingTimeMs = Date.now() - startTime;
+    return {
+        enrichmentResult: mergedResult,
+        additionalSourcesCount: mergedResult.additionalSources.length,
+        additionalSinksCount: mergedResult.additionalSinks.length,
+        processingTimeMs,
+    };
+}
+/**
+ * Merge multiple enrichment results into one
+ */
+function mergeEnrichmentResults(results) {
+    if (results.length === 0) {
+        return {
+            additionalSources: [],
+            additionalSinks: [],
+            virtualCallResolutions: [],
+            enrichedAt: new Date().toISOString(),
+            modelUsed: 'none',
+        };
+    }
+    if (results.length === 1) {
+        return results[0];
+    }
+    // Merge all results
+    const merged = {
+        additionalSources: [],
+        additionalSinks: [],
+        virtualCallResolutions: [],
+        enrichedAt: new Date().toISOString(),
+        modelUsed: results[0].modelUsed,
+    };
+    for (const result of results) {
+        merged.additionalSources.push(...result.additionalSources);
+        merged.additionalSinks.push(...result.additionalSinks);
+        merged.virtualCallResolutions.push(...result.virtualCallResolutions);
+        // Keep highest confidence framework detection
+        if (result.framework) {
+            if (!merged.framework || result.framework.confidence > merged.framework.confidence) {
+                merged.framework = result.framework;
+            }
+        }
+        // Keep any role classification
+        if (result.role && !merged.role) {
+            merged.role = result.role;
+        }
+    }
+    // Deduplicate sources by line number
+    merged.additionalSources = deduplicateByLine(merged.additionalSources);
+    merged.additionalSinks = deduplicateByLine(merged.additionalSinks);
+    return merged;
+}
+/**
+ * Deduplicate items by line number, keeping highest confidence
+ */
+function deduplicateByLine(items) {
+    const byLine = new Map();
+    for (const item of items) {
+        const existing = byLine.get(item.line);
+        if (!existing || item.confidence > existing.confidence) {
+            byLine.set(item.line, item);
+        }
+    }
+    return Array.from(byLine.values());
+}
+// ============================================================================
+// Context Update Helper
+// ============================================================================
+/**
+ * Update analysis context with enrichment results
+ */
+export function applyEnrichmentToContext(context, output) {
+    return {
+        ...context,
+        enrichmentResult: output.enrichmentResult,
+    };
+}
+//# sourceMappingURL=enrichment-agent.js.map

package/dist/agents/enrichment-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrichment-agent.js","sourceRoot":"","sources":["../../src/agents/enrichment-agent.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAyB,MAAM,iBAAiB,CAAC;AAO7E,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IAErC,MAAM,iBAAiB,GAAuB,EAAE,CAAC;IAEjD,mCAAmC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CACpC,IAAI,EACJ,KAAK,CAAC,OAAO,CAAC,UAAU,EACxB,KAAK,CAAC,OAAO,CAAC,OAAO,EACrB,KAAK,CAAC,OAAO,CAAC,cAAc,EAC5B,KAAK,CAAC,OAAO,CAAC,YAAY,CAC3B,CAAC;QAEF,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,+BAA+B;IAC/B,MAAM,YAAY,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IAE/D,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAEhD,OAAO;QACL,gBAAgB,EAAE,YAAY;QAC9B,sBAAsB,EAAE,YAAY,CAAC,iBAAiB,CAAC,MAAM;QAC7D,oBAAoB,EAAE,YAAY,CAAC,eAAe,CAAC,MAAM;QACzD,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,OAA2B;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,iBAAiB,EAAE,EAAE;YACrB,eAAe,EAAE,EAAE;YACnB,sBAAsB,EAAE,EAAE;YAC1B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAAqB;QAC/B,iBAAiB,EAAE,EAAE;QACrB,eAAe,EAAE,EAAE;QACnB,sBAAsB,EAAE,EAAE;QAC1B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KAChC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC3D,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;QACvD,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAErE,8CAA8C;QAC9C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;gBACnF,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACtC,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,CAAC,iBAAiB,GAAG,iBAAiB,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACvE,MAAM,CAAC,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAEnE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CACxB,KAAU;IAEV,MAAM,MAAM,GAAG,IAAI,GAAG,EAAa,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;YACvD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAwB,EACxB,MAA6B;IAE7B,OAAO;QACL,GAAG,OAAO;QACV,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC"}

package/dist/agents/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Agent Orchestration Module
+ *
+ * Provides agents and workflows for hybrid security analysis.
+ */
+export type { AgentStatus, AgentState, AnalysisContext, EnrichmentAgentInput, EnrichmentAgentOutput, VerificationTarget, VerificationAgentInput, VerificationAgentOutput, SecurityAgentInput, SecurityAgentOutput, SecurityAgentOptions, VerifiedVulnerability, AnalysisStats, WorkflowPhase, WorkflowStep, WorkflowState, ConfidenceLevel, DecisionMatrix, } from './types.js';
+export { defaultDecisionMatrix } from './types.js';
+export { runEnrichment, applyEnrichmentToContext, } from './enrichment-agent.js';
+export { runVerification, generateVerificationTargets, applyVerificationToContext, } from './verification-agent.js';
+export { runSecurityAnalysis, } from './security-agent.js';
+export { runHybridAnalysis, createWorkflowState, updateWorkflowState, } from './workflow.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,WAAW,EACX,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,aAAa,EACb,eAAe,EACf,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAGnD,OAAO,EACL,aAAa,EACb,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,eAAe,EACf,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,eAAe,CAAC"}

package/dist/agents/index.js

@@ -0,0 +1,15 @@
+/**
+ * Agent Orchestration Module
+ *
+ * Provides agents and workflows for hybrid security analysis.
+ */
+export { defaultDecisionMatrix } from './types.js';
+// Enrichment Agent
+export { runEnrichment, applyEnrichmentToContext, } from './enrichment-agent.js';
+// Verification Agent
+export { runVerification, generateVerificationTargets, applyVerificationToContext, } from './verification-agent.js';
+// Security Agent (Orchestrator)
+export { runSecurityAnalysis, } from './security-agent.js';
+// Workflow
+export { runHybridAnalysis, createWorkflowState, updateWorkflowState, } from './workflow.js';
+//# sourceMappingURL=index.js.map

package/dist/agents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwBH,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,mBAAmB;AACnB,OAAO,EACL,aAAa,EACb,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAE/B,qBAAqB;AACrB,OAAO,EACL,eAAe,EACf,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AAEjC,gCAAgC;AAChC,OAAO,EACL,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAE7B,WAAW;AACX,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,eAAe,CAAC"}

package/dist/agents/mastra/agents.d.ts

@@ -0,0 +1,373 @@
+/**
+ * Mastra AI Agents
+ *
+ * Defines Mastra Agent instances for security analysis operations.
+ * These agents wrap the existing ax-llm client for LLM operations.
+ */
+import { Agent } from '@mastra/core/agent';
+/**
+ * Enrichment Agent
+ *
+ * Specializes in discovering additional security-relevant patterns in code
+ * that static analysis might miss.
+ */
+export declare const enrichmentAgent: Agent<"enrichment-agent", {
+    classifyRole: import("@mastra/core/tools").Tool<{
+        className: string;
+        methodNames: string;
+        annotations: string;
+        imports: string;
+    }, {
+        role: "controller" | "service" | "repository" | "utility" | "entity" | "unknown";
+        confidence: number;
+        reasoning: string;
+        indicators: string[];
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "classify-role", unknown>;
+    discoverSources: import("@mastra/core/tools").Tool<{
+        methodName: string;
+        classRole: string;
+        existingSources: string;
+        methodCode: string;
+    }, {
+        sources: {
+            line: number;
+            variable: string;
+            type: string;
+            confidence: number;
+            reasoning: string;
+        }[];
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sources", unknown>;
+    discoverSinks: import("@mastra/core/tools").Tool<{
+        methodName: string;
+        methodCalls: string;
+        existingSinks: string;
+        methodCode: string;
+    }, {
+        sinks: {
+            line: number;
+            method: string;
+            type: string;
+            cwe: string;
+            argPositions: number[];
+            confidence: number;
+            reasoning: string;
+        }[];
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sinks", unknown>;
+}, undefined, unknown>;
+/**
+ * Verification Agent
+ *
+ * Specializes in determining whether potential vulnerabilities are actually
+ * exploitable by analyzing data flow and sanitization.
+ */
+export declare const verificationAgent: Agent<"verification-agent", {
+    verifyVulnerability: import("@mastra/core/tools").Tool<{
+        cwe: string;
+        sourceType: string;
+        className: string;
+        methodName: string;
+        methodCode: string;
+        sourceLine: number;
+        sourceCode: string;
+        sinkLine: number;
+        sinkCode: string;
+        sinkType: string;
+        sanitizersInPath: string[];
+    }, {
+        verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
+        confidence: number;
+        reasoning: string;
+        exploitability: "high" | "medium" | "low" | "none";
+        sanitizersFound: string[];
+        attackVector: string;
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "verify-vulnerability", unknown>;
+}, undefined, unknown>;
+/**
+ * Cross-File Analysis Agent
+ *
+ * Specializes in tracking taint flow across file boundaries.
+ */
+export declare const crossFileAgent: Agent<"cross-file-agent", {
+    crossFileTaint: import("@mastra/core/tools").Tool<{
+        sourceCode: string;
+        sourceFile: string;
+        targetFile: string;
+        targetCode: string;
+        exportedTaint: {
+            symbol: string;
+            type: string;
+            line: number;
+        }[];
+        importedSymbols: string[];
+    }, {
+        taintFlows: Array<{
+            sourceSymbol: string;
+            targetSymbol: string;
+            flowType: "direct" | "transitive" | "conditional";
+            confidence: number;
+        }>;
+        reasoning: string;
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "cross-file-taint", unknown>;
+}, undefined, unknown>;
+/**
+ * Orchestrator Agent
+ *
+ * Coordinates the analysis workflow and makes high-level decisions.
+ */
+export declare const orchestratorAgent: Agent<"orchestrator-agent", {
+    classifyRole: import("@mastra/core/tools").Tool<{
+        className: string;
+        methodNames: string;
+        annotations: string;
+        imports: string;
+    }, {
+        role: "controller" | "service" | "repository" | "utility" | "entity" | "unknown";
+        confidence: number;
+        reasoning: string;
+        indicators: string[];
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "classify-role", unknown>;
+    discoverSources: import("@mastra/core/tools").Tool<{
+        methodName: string;
+        classRole: string;
+        existingSources: string;
+        methodCode: string;
+    }, {
+        sources: {
+            line: number;
+            variable: string;
+            type: string;
+            confidence: number;
+            reasoning: string;
+        }[];
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sources", unknown>;
+    discoverSinks: import("@mastra/core/tools").Tool<{
+        methodName: string;
+        methodCalls: string;
+        existingSinks: string;
+        methodCode: string;
+    }, {
+        sinks: {
+            line: number;
+            method: string;
+            type: string;
+            cwe: string;
+            argPositions: number[];
+            confidence: number;
+            reasoning: string;
+        }[];
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sinks", unknown>;
+    verifyVulnerability: import("@mastra/core/tools").Tool<{
+        cwe: string;
+        sourceType: string;
+        className: string;
+        methodName: string;
+        methodCode: string;
+        sourceLine: number;
+        sourceCode: string;
+        sinkLine: number;
+        sinkCode: string;
+        sinkType: string;
+        sanitizersInPath: string[];
+    }, {
+        verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
+        confidence: number;
+        reasoning: string;
+        exploitability: "high" | "medium" | "low" | "none";
+        sanitizersFound: string[];
+        attackVector: string;
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "verify-vulnerability", unknown>;
+    crossFileTaint: import("@mastra/core/tools").Tool<{
+        sourceCode: string;
+        sourceFile: string;
+        targetFile: string;
+        targetCode: string;
+        exportedTaint: {
+            symbol: string;
+            type: string;
+            line: number;
+        }[];
+        importedSymbols: string[];
+    }, {
+        taintFlows: Array<{
+            sourceSymbol: string;
+            targetSymbol: string;
+            flowType: "direct" | "transitive" | "conditional";
+            confidence: number;
+        }>;
+        reasoning: string;
+    }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "cross-file-taint", unknown>;
+}, undefined, unknown>;
+export declare const agents: {
+    enrichment: Agent<"enrichment-agent", {
+        classifyRole: import("@mastra/core/tools").Tool<{
+            className: string;
+            methodNames: string;
+            annotations: string;
+            imports: string;
+        }, {
+            role: "controller" | "service" | "repository" | "utility" | "entity" | "unknown";
+            confidence: number;
+            reasoning: string;
+            indicators: string[];
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "classify-role", unknown>;
+        discoverSources: import("@mastra/core/tools").Tool<{
+            methodName: string;
+            classRole: string;
+            existingSources: string;
+            methodCode: string;
+        }, {
+            sources: {
+                line: number;
+                variable: string;
+                type: string;
+                confidence: number;
+                reasoning: string;
+            }[];
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sources", unknown>;
+        discoverSinks: import("@mastra/core/tools").Tool<{
+            methodName: string;
+            methodCalls: string;
+            existingSinks: string;
+            methodCode: string;
+        }, {
+            sinks: {
+                line: number;
+                method: string;
+                type: string;
+                cwe: string;
+                argPositions: number[];
+                confidence: number;
+                reasoning: string;
+            }[];
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sinks", unknown>;
+    }, undefined, unknown>;
+    verification: Agent<"verification-agent", {
+        verifyVulnerability: import("@mastra/core/tools").Tool<{
+            cwe: string;
+            sourceType: string;
+            className: string;
+            methodName: string;
+            methodCode: string;
+            sourceLine: number;
+            sourceCode: string;
+            sinkLine: number;
+            sinkCode: string;
+            sinkType: string;
+            sanitizersInPath: string[];
+        }, {
+            verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
+            confidence: number;
+            reasoning: string;
+            exploitability: "high" | "medium" | "low" | "none";
+            sanitizersFound: string[];
+            attackVector: string;
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "verify-vulnerability", unknown>;
+    }, undefined, unknown>;
+    crossFile: Agent<"cross-file-agent", {
+        crossFileTaint: import("@mastra/core/tools").Tool<{
+            sourceCode: string;
+            sourceFile: string;
+            targetFile: string;
+            targetCode: string;
+            exportedTaint: {
+                symbol: string;
+                type: string;
+                line: number;
+            }[];
+            importedSymbols: string[];
+        }, {
+            taintFlows: Array<{
+                sourceSymbol: string;
+                targetSymbol: string;
+                flowType: "direct" | "transitive" | "conditional";
+                confidence: number;
+            }>;
+            reasoning: string;
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "cross-file-taint", unknown>;
+    }, undefined, unknown>;
+    orchestrator: Agent<"orchestrator-agent", {
+        classifyRole: import("@mastra/core/tools").Tool<{
+            className: string;
+            methodNames: string;
+            annotations: string;
+            imports: string;
+        }, {
+            role: "controller" | "service" | "repository" | "utility" | "entity" | "unknown";
+            confidence: number;
+            reasoning: string;
+            indicators: string[];
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "classify-role", unknown>;
+        discoverSources: import("@mastra/core/tools").Tool<{
+            methodName: string;
+            classRole: string;
+            existingSources: string;
+            methodCode: string;
+        }, {
+            sources: {
+                line: number;
+                variable: string;
+                type: string;
+                confidence: number;
+                reasoning: string;
+            }[];
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sources", unknown>;
+        discoverSinks: import("@mastra/core/tools").Tool<{
+            methodName: string;
+            methodCalls: string;
+            existingSinks: string;
+            methodCode: string;
+        }, {
+            sinks: {
+                line: number;
+                method: string;
+                type: string;
+                cwe: string;
+                argPositions: number[];
+                confidence: number;
+                reasoning: string;
+            }[];
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sinks", unknown>;
+        verifyVulnerability: import("@mastra/core/tools").Tool<{
+            cwe: string;
+            sourceType: string;
+            className: string;
+            methodName: string;
+            methodCode: string;
+            sourceLine: number;
+            sourceCode: string;
+            sinkLine: number;
+            sinkCode: string;
+            sinkType: string;
+            sanitizersInPath: string[];
+        }, {
+            verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
+            confidence: number;
+            reasoning: string;
+            exploitability: "high" | "medium" | "low" | "none";
+            sanitizersFound: string[];
+            attackVector: string;
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "verify-vulnerability", unknown>;
+        crossFileTaint: import("@mastra/core/tools").Tool<{
+            sourceCode: string;
+            sourceFile: string;
+            targetFile: string;
+            targetCode: string;
+            exportedTaint: {
+                symbol: string;
+                type: string;
+                line: number;
+            }[];
+            importedSymbols: string[];
+        }, {
+            taintFlows: Array<{
+                sourceSymbol: string;
+                targetSymbol: string;
+                flowType: "direct" | "transitive" | "conditional";
+                confidence: number;
+            }>;
+            reasoning: string;
+        }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "cross-file-taint", unknown>;
+    }, undefined, unknown>;
+};
+export default agents;
+//# sourceMappingURL=agents.d.ts.map

package/dist/agents/mastra/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/agents/mastra/agents.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AA8N3C;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA2B1B,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;sBAyB5B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;sBAqBzB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA0B5B,CAAC;AAMH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAKlB,CAAC;AAEF,eAAe,MAAM,CAAC"}