circle-ir-ai 1.1.0

package/dist/agents/mastra/agents.js

@@ -0,0 +1,347 @@
+/**
+ * Mastra AI Agents
+ *
+ * Defines Mastra Agent instances for security analysis operations.
+ * These agents wrap the existing ax-llm client for LLM operations.
+ */
+import { Agent } from '@mastra/core/agent';
+import { createTool } from '@mastra/core/tools';
+import { z } from 'zod';
+// ============================================================================
+// Default Model Configuration
+// ============================================================================
+/**
+ * Get the default model configuration from environment or use fallback
+ */
+function getDefaultModel() {
+    return process.env.MASTRA_MODEL || process.env.LLM_MODEL || 'cognium/gemini-pro-latest';
+}
+// ============================================================================
+// Tools for Agents
+// ============================================================================
+/**
+ * Tool: Classify Code Role
+ * Determines if a class is a controller, service, repository, etc.
+ */
+const classifyRoleTool = createTool({
+    id: 'classify-role',
+    description: 'Classify the architectural role of a Java class (controller, service, repository, utility, entity)',
+    inputSchema: z.object({
+        className: z.string().describe('Name of the class'),
+        methodNames: z.string().describe('Comma-separated list of method names'),
+        annotations: z.string().describe('Comma-separated list of annotations'),
+        imports: z.string().describe('Import statements'),
+    }),
+    outputSchema: z.object({
+        role: z.enum(['controller', 'service', 'repository', 'utility', 'entity', 'unknown']),
+        confidence: z.number(),
+        reasoning: z.string(),
+        indicators: z.array(z.string()),
+    }),
+    execute: async (inputData) => {
+        const { getAxLLMClient } = await import('../../llm/ax-client.js');
+        const client = getAxLLMClient();
+        return client.classifyRole({
+            className: inputData.className,
+            methodNames: inputData.methodNames,
+            annotations: inputData.annotations,
+            imports: inputData.imports,
+        });
+    },
+});
+/**
+ * Tool: Discover Taint Sources
+ * Finds additional user-controlled input sources in code
+ */
+const discoverSourcesTool = createTool({
+    id: 'discover-sources',
+    description: 'Discover additional taint sources (user-controlled inputs) in Java code',
+    inputSchema: z.object({
+        methodCode: z.string().describe('The method source code to analyze'),
+        methodName: z.string().describe('Name of the method'),
+        classRole: z.string().describe('Role of the class (controller, service, etc.)'),
+        existingSources: z.string().describe('Already identified sources'),
+    }),
+    outputSchema: z.object({
+        sources: z.array(z.object({
+            line: z.number(),
+            variable: z.string(),
+            type: z.string(),
+            confidence: z.number(),
+            reasoning: z.string(),
+        })),
+    }),
+    execute: async (inputData) => {
+        const { getAxLLMClient } = await import('../../llm/ax-client.js');
+        const client = getAxLLMClient();
+        const sources = await client.discoverSources({
+            methodCode: inputData.methodCode,
+            methodName: inputData.methodName,
+            classRole: inputData.classRole,
+            existingSources: inputData.existingSources,
+        });
+        return { sources };
+    },
+});
+/**
+ * Tool: Discover Taint Sinks
+ * Finds dangerous operations that could be vulnerable
+ */
+const discoverSinksTool = createTool({
+    id: 'discover-sinks',
+    description: 'Discover dangerous operations (sinks) that could be vulnerable in Java code',
+    inputSchema: z.object({
+        methodCode: z.string().describe('The method source code to analyze'),
+        methodName: z.string().describe('Name of the method'),
+        methodCalls: z.string().describe('List of method calls in the code'),
+        existingSinks: z.string().describe('Already identified sinks'),
+    }),
+    outputSchema: z.object({
+        sinks: z.array(z.object({
+            line: z.number(),
+            method: z.string(),
+            type: z.string(),
+            cwe: z.string(),
+            argPositions: z.array(z.number()),
+            confidence: z.number(),
+            reasoning: z.string(),
+        })),
+    }),
+    execute: async (inputData) => {
+        const { getAxLLMClient } = await import('../../llm/ax-client.js');
+        const client = getAxLLMClient();
+        const sinks = await client.discoverSinks({
+            methodCode: inputData.methodCode,
+            methodName: inputData.methodName,
+            methodCalls: inputData.methodCalls,
+            existingSinks: inputData.existingSinks,
+        });
+        return { sinks };
+    },
+});
+/**
+ * Tool: Verify Vulnerability
+ * Determines if a potential vulnerability is exploitable
+ */
+const verifyVulnerabilityTool = createTool({
+    id: 'verify-vulnerability',
+    description: 'Verify if a potential security vulnerability is actually exploitable',
+    inputSchema: z.object({
+        sourceCode: z.string().describe('Code at the taint source'),
+        sourceLine: z.number().describe('Line number of the source'),
+        sourceType: z.string().describe('Type of source (http_param, etc.)'),
+        sinkCode: z.string().describe('Code at the dangerous sink'),
+        sinkLine: z.number().describe('Line number of the sink'),
+        sinkType: z.string().describe('Type of sink (sql_injection, etc.)'),
+        cwe: z.string().describe('CWE identifier'),
+        methodCode: z.string().describe('Full method code for context'),
+        methodName: z.string().describe('Name of the method'),
+        className: z.string().describe('Name of the class'),
+        sanitizersInPath: z.array(z.string()).describe('Known sanitizers in the data flow path'),
+    }),
+    outputSchema: z.object({
+        verdict: z.enum(['TRUE_POSITIVE', 'FALSE_POSITIVE', 'UNCERTAIN']),
+        confidence: z.number(),
+        reasoning: z.string(),
+        exploitability: z.enum(['high', 'medium', 'low', 'none']),
+        sanitizersFound: z.array(z.string()),
+        attackVector: z.string(),
+    }),
+    execute: async (inputData) => {
+        const { getAxLLMClient } = await import('../../llm/ax-client.js');
+        const client = getAxLLMClient();
+        return client.verify({
+            sourceCode: inputData.sourceCode,
+            sourceLine: inputData.sourceLine,
+            sourceType: inputData.sourceType,
+            sinkCode: inputData.sinkCode,
+            sinkLine: inputData.sinkLine,
+            sinkType: inputData.sinkType,
+            cwe: inputData.cwe,
+            methodCode: inputData.methodCode,
+            methodName: inputData.methodName,
+            className: inputData.className,
+            sanitizersInPath: inputData.sanitizersInPath,
+        });
+    },
+});
+/**
+ * Tool: Analyze Cross-File Taint
+ * Tracks taint flow between files
+ */
+const crossFileTaintTool = createTool({
+    id: 'cross-file-taint',
+    description: 'Analyze taint flow between two source files',
+    inputSchema: z.object({
+        sourceFile: z.string().describe('Path of the source file'),
+        sourceCode: z.string().describe('Content of the source file'),
+        targetFile: z.string().describe('Path of the target file'),
+        targetCode: z.string().describe('Content of the target file'),
+        exportedTaint: z.array(z.object({
+            symbol: z.string(),
+            type: z.string(),
+            line: z.number(),
+        })).describe('Tainted data exported from source'),
+        importedSymbols: z.array(z.string()).describe('Symbols imported by target'),
+    }),
+    outputSchema: z.object({
+        taintFlows: z.array(z.object({
+            sourceSymbol: z.string(),
+            targetSymbol: z.string(),
+            flowType: z.enum(['direct', 'transitive', 'conditional']),
+            confidence: z.number(),
+        })),
+        reasoning: z.string(),
+    }),
+    execute: async (inputData) => {
+        const { getAxLLMClient } = await import('../../llm/ax-client.js');
+        const client = getAxLLMClient();
+        return client.analyzeCrossFileTaint({
+            sourceFile: inputData.sourceFile,
+            sourceCode: inputData.sourceCode,
+            targetFile: inputData.targetFile,
+            targetCode: inputData.targetCode,
+            exportedTaint: inputData.exportedTaint,
+            importedSymbols: inputData.importedSymbols,
+        });
+    },
+});
+// ============================================================================
+// Agents
+// ============================================================================
+/**
+ * Enrichment Agent
+ *
+ * Specializes in discovering additional security-relevant patterns in code
+ * that static analysis might miss.
+ */
+export const enrichmentAgent = new Agent({
+    id: 'enrichment-agent',
+    name: 'Security Enrichment Agent',
+    model: getDefaultModel(),
+    instructions: `You are a security expert specialized in code analysis.
+Your role is to discover additional taint sources and sinks that static pattern matching might miss.
+
+For SOURCES, look for:
+- HTTP request parameters, headers, cookies
+- File uploads and input streams
+- Database query results
+- Environment variables and system properties
+- User session data
+
+For SINKS, look for:
+- SQL query construction without parameterization
+- Command execution with string concatenation
+- File path construction with user input
+- Response output without encoding
+- Deserialization of untrusted data
+
+Always explain your reasoning and provide confidence scores.`,
+    tools: {
+        classifyRole: classifyRoleTool,
+        discoverSources: discoverSourcesTool,
+        discoverSinks: discoverSinksTool,
+    },
+});
+/**
+ * Verification Agent
+ *
+ * Specializes in determining whether potential vulnerabilities are actually
+ * exploitable by analyzing data flow and sanitization.
+ */
+export const verificationAgent = new Agent({
+    id: 'verification-agent',
+    name: 'Vulnerability Verification Agent',
+    model: getDefaultModel(),
+    instructions: `You are a security expert specialized in vulnerability verification.
+Your role is to determine whether potential vulnerabilities identified by static analysis are actually exploitable.
+
+When verifying a vulnerability:
+1. TRACE the data flow from source to sink step by step
+2. IDENTIFY any sanitization, encoding, or validation
+3. EVALUATE conditions that might prevent exploitation
+4. CONSIDER the context (is this test code, production code, etc.)
+
+Key sanitization patterns to recognize:
+- SQL: PreparedStatement, parameterized queries, ORMs
+- XSS: HTML encoding, escapeHtml, ESAPI
+- Command: Array-based exec, input validation
+- Path: Canonical path checks, whitelist validation
+
+Be conservative: only mark TRUE_POSITIVE if clearly exploitable.
+Mark FALSE_POSITIVE if any effective sanitization exists.
+Mark UNCERTAIN if you cannot determine with confidence.`,
+    tools: {
+        verifyVulnerability: verifyVulnerabilityTool,
+    },
+});
+/**
+ * Cross-File Analysis Agent
+ *
+ * Specializes in tracking taint flow across file boundaries.
+ */
+export const crossFileAgent = new Agent({
+    id: 'cross-file-agent',
+    name: 'Cross-File Taint Analysis Agent',
+    model: getDefaultModel(),
+    instructions: `You are a security expert specialized in cross-file taint analysis.
+Your role is to track how tainted data flows between source files through imports, exports, and method calls.
+
+When analyzing cross-file taint:
+1. IDENTIFY tainted data exported from the source file
+2. TRACE imports and dependencies in the target file
+3. DETERMINE if tainted data reaches dangerous sinks
+4. CONSIDER indirect flows through intermediate variables
+
+Pay attention to:
+- Method parameters that carry taint
+- Return values from tainted operations
+- Shared state and class fields
+- Dependency injection patterns`,
+    tools: {
+        crossFileTaint: crossFileTaintTool,
+    },
+});
+/**
+ * Orchestrator Agent
+ *
+ * Coordinates the analysis workflow and makes high-level decisions.
+ */
+export const orchestratorAgent = new Agent({
+    id: 'orchestrator-agent',
+    name: 'Security Analysis Orchestrator',
+    model: getDefaultModel(),
+    instructions: `You are the orchestrator for security analysis workflows.
+Your role is to coordinate enrichment and verification agents to analyze code for vulnerabilities.
+
+Workflow steps:
+1. Run static pattern matching first
+2. Use enrichment agent to discover additional sources/sinks
+3. Merge pattern and LLM results
+4. Prioritize verification targets by severity
+5. Use verification agent to confirm exploitability
+6. Generate final vulnerability report
+
+Make efficient decisions about which findings need verification based on:
+- Confidence levels from both tracks
+- Severity of the potential vulnerability
+- Code patterns that indicate real vs. test code`,
+    tools: {
+        classifyRole: classifyRoleTool,
+        discoverSources: discoverSourcesTool,
+        discoverSinks: discoverSinksTool,
+        verifyVulnerability: verifyVulnerabilityTool,
+        crossFileTaint: crossFileTaintTool,
+    },
+});
+// ============================================================================
+// Agent Registry
+// ============================================================================
+export const agents = {
+    enrichment: enrichmentAgent,
+    verification: verificationAgent,
+    crossFile: crossFileAgent,
+    orchestrator: orchestratorAgent,
+};
+export default agents;
+//# sourceMappingURL=agents.js.map

package/dist/agents/mastra/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../../src/agents/mastra/agents.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E;;GAEG;AACH,SAAS,eAAe;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,2BAA2B,CAAC;AAC1F,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,gBAAgB,GAAG,UAAU,CAAC;IAClC,EAAE,EAAE,eAAe;IACnB,WAAW,EAAE,oGAAoG;IACjH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACxE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QACvE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KAClD,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAChC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAEhC,OAAO,MAAM,CAAC,YAAY,CAAC;YACzB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,mBAAmB,GAAG,UAAU,CAAC;IACrC,EAAE,EAAE,kBAAkB;IACtB,WAAW,EAAE,yEAAyE;IACtF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACpE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QAC/E,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KACnE,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;SACtB,CAAC,CAAC;KACJ,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAEhC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;YAC3C,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,iBAAiB,GAAG,UAAU,CAAC;IACnC,EAAE,EAAE,gBAAgB;IACpB,WAAW,EAAE,6EAA6E;IAC1F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACpE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACpE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;KAC/D,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;YACf,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;SACtB,CAAC,CAAC;KACJ,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAEhC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YACvC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,uBAAuB,GAAG,UAAU,CAAC;IACzC,EAAE,EAAE,sBAAsB;IAC1B,WAAW,EAAE,sEAAsE;IACnF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC5D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QACnE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC/D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnD,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;KACzF,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;QACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACzD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;KACzB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAEhC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;SAC7C,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,kBAAkB,GAAG,UAAU,CAAC;IACpC,EAAE,EAAE,kBAAkB;IACtB,WAAW,EAAE,6CAA6C;IAC1D,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAC7D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAC7D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;SACjB,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACjD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;KAC5E,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;YACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;YACxB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;YACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;SACvB,CAAC,CAAC;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;QAC3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAEhC,OAAO,MAAM,CAAC,qBAAqB,CAAC;YAClC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC;AAEH,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,KAAK,CAAC;IACvC,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,eAAe,EAAE;IACxB,YAAY,EAAE;;;;;;;;;;;;;;;;;6DAiB6C;IAC3D,KAAK,EAAE;QACL,YAAY,EAAE,gBAAgB;QAC9B,eAAe,EAAE,mBAAmB;QACpC,aAAa,EAAE,iBAAiB;KACjC;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,KAAK,CAAC;IACzC,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,kCAAkC;IACxC,KAAK,EAAE,eAAe,EAAE;IACxB,YAAY,EAAE;;;;;;;;;;;;;;;;;wDAiBwC;IACtD,KAAK,EAAE;QACL,mBAAmB,EAAE,uBAAuB;KAC7C;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,KAAK,CAAC;IACtC,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;IACvC,KAAK,EAAE,eAAe,EAAE;IACxB,YAAY,EAAE;;;;;;;;;;;;;gCAagB;IAC9B,KAAK,EAAE;QACL,cAAc,EAAE,kBAAkB;KACnC;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,KAAK,CAAC;IACzC,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,gCAAgC;IACtC,KAAK,EAAE,eAAe,EAAE;IACxB,YAAY,EAAE;;;;;;;;;;;;;;iDAciC;IAC/C,KAAK,EAAE;QACL,YAAY,EAAE,gBAAgB;QAC9B,eAAe,EAAE,mBAAmB;QACpC,aAAa,EAAE,iBAAiB;QAChC,mBAAmB,EAAE,uBAAuB;QAC5C,cAAc,EAAE,kBAAkB;KACnC;CACF,CAAC,CAAC;AAEH,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,UAAU,EAAE,eAAe;IAC3B,YAAY,EAAE,iBAAiB;IAC/B,SAAS,EAAE,cAAc;IACzB,YAAY,EAAE,iBAAiB;CAChC,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/agents/mastra/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Mastra Integration Module
+ *
+ * Exports Mastra-based workflows, agents, and swarm capabilities
+ * for security analysis.
+ */
+export { patternMatchStep, enrichStep, mergeStep, verifyStep, reportStep, } from './steps.js';
+export { securityAnalysisWorkflow, analyzeFile, analyzeFileStream, } from './workflow.js';
+export { swarmAnalysisWorkflow, analyzeFilesSwarm, analyzeFilesSwarmStream, analyzeFilesInBatches, type FileInput, type SwarmOptions, } from './swarm.js';
+export { enrichmentAgent, verificationAgent, crossFileAgent, orchestratorAgent, agents, } from './agents.js';
+export { createMastraInstance } from './instance.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/mastra/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agents/mastra/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,UAAU,EACV,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,wBAAwB,EACxB,WAAW,EACX,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,MAAM,GACP,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/agents/mastra/index.js

@@ -0,0 +1,17 @@
+/**
+ * Mastra Integration Module
+ *
+ * Exports Mastra-based workflows, agents, and swarm capabilities
+ * for security analysis.
+ */
+// Steps
+export { patternMatchStep, enrichStep, mergeStep, verifyStep, reportStep, } from './steps.js';
+// Single-file workflow
+export { securityAnalysisWorkflow, analyzeFile, analyzeFileStream, } from './workflow.js';
+// Swarm (multi-file parallel) workflow
+export { swarmAnalysisWorkflow, analyzeFilesSwarm, analyzeFilesSwarmStream, analyzeFilesInBatches, } from './swarm.js';
+// Agents
+export { enrichmentAgent, verificationAgent, crossFileAgent, orchestratorAgent, agents, } from './agents.js';
+// Re-export Mastra instance setup
+export { createMastraInstance } from './instance.js';
+//# sourceMappingURL=index.js.map

package/dist/agents/mastra/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agents/mastra/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,QAAQ;AACR,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,UAAU,EACV,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,uBAAuB;AACvB,OAAO,EACL,wBAAwB,EACxB,WAAW,EACX,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,uCAAuC;AACvC,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GAGtB,MAAM,YAAY,CAAC;AAEpB,SAAS;AACT,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,MAAM,GACP,MAAM,aAAa,CAAC;AAErB,kCAAkC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}