circle-ir-ai 1.1.0

package/dist/llm/prompts/index.js

@@ -0,0 +1,92 @@
+/**
+ * Language-specific LLM prompts for security analysis
+ */
+import { rustPrompts, getRustPrompt } from './rust.js';
+/**
+ * Java prompts (default/existing behavior)
+ */
+export const javaPrompts = {
+    system: 'You are a security expert analyzing Java code. Respond only in valid JSON format.',
+    classifyRole: `Classify the role of this Java class:
+Class: {className}
+Methods: {methodNames}
+Annotations: {annotations}
+Imports: {imports}
+
+Respond with JSON: {{"role": "controller|service|repository|utility|entity|unknown", "confidence": 0.0-1.0, "reasoning": "explanation", "indicators": ["list", "of", "indicators"]}}`,
+    discoverSources: `Find additional user-controlled input sources in this method:
+
+Method: {methodName}
+Class role: {classRole}
+Already identified sources: {existingSources}
+
+[CODE START]
+{code}
+[CODE END]
+
+Look for: HTTP parameters, headers, cookies, request body, file input, environment variables.
+Ignore: constants, internal config, hardcoded values.
+
+Respond with JSON: {{"additionalSources": [{{"line": 10, "variable": "param", "type": "http_param", "confidence": 0.9, "reasoning": "..."}}]}}`,
+    discoverSinks: `Find additional dangerous operations (sinks) in this method:
+
+Method: {methodName}
+Method calls: {methodCalls}
+Already identified sinks: {existingSinks}
+
+[CODE START]
+{code}
+[CODE END]
+
+Look for: SQL queries, command execution, file operations, XSS output, deserialization.
+Ignore: PreparedStatement with ?, logging, safe APIs.
+
+Respond with JSON: {{"additionalSinks": [{{"line": 15, "method": "executeQuery", "type": "sql_injection", "cwe": "CWE-89", "argPositions": [0], "confidence": 0.9, "reasoning": "..."}}]}}`,
+    verify: `Analyze this potential {cwe} vulnerability:
+
+SOURCE (line {sourceLine}): {sourceCode}
+SINK (line {sinkLine}): {sinkCode}
+
+FULL METHOD ({className}.{methodName}):
+[CODE START]
+{methodCode}
+[CODE END]
+
+Known sanitizers in path: {sanitizers}
+
+REQUIRED ANALYSIS STEPS:
+1. Identify the source of user-controlled data
+2. Trace the data flow to the sink
+3. Check for any sanitization, validation, or transformation
+4. Consider the vulnerability pattern for {cwe}
+5. Make a verdict with confidence level
+
+Respond with JSON: {{"verdict": "TRUE_POSITIVE|FALSE_POSITIVE|UNCERTAIN", "confidence": 0.0-1.0, "reasoning": "step-by-step analysis showing data flow and sanitization check", "exploitability": "high|medium|low|none", "sanitizersFound": [], "attackVector": "description if exploitable"}}`,
+};
+/**
+ * Get prompts for a specific language
+ */
+export function getLanguagePrompts(language) {
+    switch (language) {
+        case 'rust':
+            return rustPrompts;
+        case 'java':
+        default:
+            return javaPrompts;
+    }
+}
+/**
+ * Get a specific prompt for a language with variable substitution
+ */
+export function getPrompt(language, promptName, variables) {
+    const prompts = getLanguagePrompts(language);
+    let prompt = prompts[promptName];
+    if (variables) {
+        for (const [key, value] of Object.entries(variables)) {
+            prompt = prompt.replace(new RegExp(`\\{${key}\\}`, 'g'), value);
+        }
+    }
+    return prompt;
+}
+export { rustPrompts, getRustPrompt };
+//# sourceMappingURL=index.js.map

package/dist/llm/prompts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/llm/prompts/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAIvD;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,mFAAmF;IAE3F,YAAY,EAAE;;;;;;qLAMqK;IAEnL,eAAe,EAAE;;;;;;;;;;;;;+IAa4H;IAE7I,aAAa,EAAE;;;;;;;;;;;;;2LAa0K;IAEzL,MAAM,EAAE;;;;;;;;;;;;;;;;;;;gSAmBsR;CAC/R,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAA8B;IAC/D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CACvB,QAA8B,EAC9B,UAAsF,EACtF,SAAkC;IAElC,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEjC,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC"}

package/dist/llm/prompts/rust.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Rust-specific LLM prompts for security analysis
+ */
+export declare const rustPrompts: {
+    /**
+     * System prompt for Rust security analysis
+     */
+    system: string;
+    /**
+     * Role classification prompt for Rust modules
+     */
+    classifyRole: string;
+    /**
+     * Source discovery prompt for Rust
+     */
+    discoverSources: string;
+    /**
+     * Sink discovery prompt for Rust
+     */
+    discoverSinks: string;
+    /**
+     * Verification prompt for Rust vulnerabilities
+     */
+    verify: string;
+};
+/**
+ * Get Rust-specific prompt by name with variable substitution
+ */
+export declare function getRustPrompt(name: keyof typeof rustPrompts, variables?: Record<string, string>): string;
+//# sourceMappingURL=rust.d.ts.map

package/dist/llm/prompts/rust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rust.d.ts","sourceRoot":"","sources":["../../../src/llm/prompts/rust.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,WAAW;IACtB;;OAEG;;IAGH;;OAEG;;IAkBH;;OAEG;;IAyBH;;OAEG;;IAyBH;;OAEG;;CA0BJ,CAAC;AAEF;;GAEG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,OAAO,WAAW,EAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,MAAM,CAQR"}

package/dist/llm/prompts/rust.js

@@ -0,0 +1,121 @@
+/**
+ * Rust-specific LLM prompts for security analysis
+ */
+export const rustPrompts = {
+    /**
+     * System prompt for Rust security analysis
+     */
+    system: 'You are a security expert analyzing Rust code. Respond only in valid JSON format.',
+    /**
+     * Role classification prompt for Rust modules
+     */
+    classifyRole: `Classify the role of this Rust module/struct:
+
+Module: {moduleName}
+Functions: {functionNames}
+Derives/Attributes: {attributes}
+Uses: {uses}
+
+Roles for Rust:
+- handler: HTTP/API request handlers (actix-web, axum, rocket handlers)
+- service: Business logic, data processing
+- repository: Database access (diesel, sqlx, rusqlite)
+- utility: Helper functions, conversions
+- cli: Command-line interface handling
+- unknown: Cannot determine
+
+Respond with JSON: {{"role": "handler|service|repository|utility|cli|unknown", "confidence": 0.0-1.0, "reasoning": "explanation", "indicators": ["list", "of", "indicators"]}}`,
+    /**
+     * Source discovery prompt for Rust
+     */
+    discoverSources: `Find user-controlled input sources in this Rust code:
+
+Function: {functionName}
+Module role: {moduleRole}
+Already identified sources: {existingSources}
+
+[CODE START]
+{code}
+[CODE END]
+
+Look for Rust-specific sources:
+- std::env::args(), std::env::var() - CLI arguments, environment
+- std::io::stdin() - Standard input
+- actix_web::web::Path, Query, Json, Form - HTTP parameters
+- axum::extract::* - Axum extractors
+- rocket macros params - Rocket parameters
+- std::fs::read_to_string(), File::open() - File input
+- reqwest/hyper response bodies - External API responses
+- serde deserialization from untrusted input
+
+Ignore: constants, compile-time values, trusted internal data.
+
+Respond with JSON: {{"additionalSources": [{{"line": 10, "variable": "param", "type": "cli_arg|env_var|http_param|file_input|stdin", "confidence": 0.9, "reasoning": "..."}}]}}`,
+    /**
+     * Sink discovery prompt for Rust
+     */
+    discoverSinks: `Find dangerous operations (sinks) in this Rust code:
+
+Function: {functionName}
+Method calls: {methodCalls}
+Already identified sinks: {existingSinks}
+
+[CODE START]
+{code}
+[CODE END]
+
+Look for Rust-specific sinks:
+- std::process::Command - Command injection (CWE-78)
+- std::fs::* (read, write, remove, create_dir) - Path traversal (CWE-22)
+- SQL queries via diesel, sqlx, rusqlite - SQL injection (CWE-89)
+- format!() in HTML output - XSS (CWE-79)
+- serde_json/bincode deserialization - Deserialization (CWE-502)
+- reqwest/hyper with user URLs - SSRF (CWE-918)
+- unsafe blocks with user data - Memory safety issues
+- eval-like macros with user input - Code injection (CWE-94)
+
+Ignore: prepared statements with placeholders, sanitized inputs, safe APIs.
+
+Respond with JSON: {{"additionalSinks": [{{"line": 15, "method": "execute", "type": "sql_injection|command_injection|path_traversal|xss|ssrf", "cwe": "CWE-89", "argPositions": [0], "confidence": 0.9, "reasoning": "..."}}]}}`,
+    /**
+     * Verification prompt for Rust vulnerabilities
+     */
+    verify: `Analyze this potential {cwe} vulnerability in Rust code:
+
+SOURCE (line {sourceLine}): {sourceCode}
+SINK (line {sinkLine}): {sinkCode}
+
+FULL FUNCTION:
+[CODE START]
+{functionCode}
+[CODE END]
+
+Known sanitizers in path: {sanitizers}
+
+RUST-SPECIFIC CONSIDERATIONS:
+- Rust's ownership system may prevent some exploits
+- Check if data passes through sanitization functions
+- Consider if the code uses safe APIs (e.g., prepared statements)
+- Look for explicit validation or type conversion
+
+REQUIRED ANALYSIS:
+1. Trace the data flow from source to sink
+2. Check for any sanitization, validation, or type conversion
+3. Consider Rust's safety guarantees
+4. Make a verdict with confidence level
+
+Respond with JSON: {{"verdict": "TRUE_POSITIVE|FALSE_POSITIVE|UNCERTAIN", "confidence": 0.0-1.0, "reasoning": "step-by-step analysis", "exploitability": "high|medium|low|none", "sanitizersFound": [], "attackVector": "description if exploitable"}}`,
+};
+/**
+ * Get Rust-specific prompt by name with variable substitution
+ */
+export function getRustPrompt(name, variables) {
+    let prompt = rustPrompts[name];
+    if (variables) {
+        for (const [key, value] of Object.entries(variables)) {
+            prompt = prompt.replace(new RegExp(`\\{${key}\\}`, 'g'), value);
+        }
+    }
+    return prompt;
+}
+//# sourceMappingURL=rust.js.map

package/dist/llm/prompts/rust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rust.js","sourceRoot":"","sources":["../../../src/llm/prompts/rust.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;;OAEG;IACH,MAAM,EAAE,mFAAmF;IAE3F;;OAEG;IACH,YAAY,EAAE;;;;;;;;;;;;;;;+KAe+J;IAE7K;;OAEG;IACH,eAAe,EAAE;;;;;;;;;;;;;;;;;;;;;;gLAsB6J;IAE9K;;OAEG;IACH,aAAa,EAAE;;;;;;;;;;;;;;;;;;;;;;gOAsB+M;IAE9N;;OAEG;IACH,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;uPAwB6O;CACtP,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAA8B,EAC9B,SAAkC;IAElC,IAAI,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}