circle-ir-ai 2.55.1 → 2.56.0

package/CHANGELOG.md

@@ -5,6 +5,36 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.56.0] - 2026-07-20
+
+### Added — robust app-code prompt-injection recall in the trust layer (cognium-ai#211/#233)
+
+The ai_safety `prompt-injection` pass scanned only skill/prompt/manifest TEXT,
+so LLM01 in application code — untrusted input flowing into an LLM prompt — was
+a trust-layer miss. circle-ir 3.174.0+ emits a `prompt_injection` taint sink
+(CWE-1427) plus an unsanitized `taint.flows[]` entry when a source reaches it.
+The pass now consumes that **flow** directly (via `collectAppCodePromptInjection`):
+
+- Emits a HIGH finding per unsanitized `sink_type === 'prompt_injection'` flow,
+  attributed to `ir.meta.file` at the sink line. Also folds any explicit
+  `findings[].rule_id === 'prompt_injection'` (belt-and-suspenders), deduped.
+- **Robust, not flow-luck-dependent for recall / coverage:** previously LLM01
+  in app code rode solely on the L4 reachability haircut. Now the ai_safety pass
+  itself fires, scores, and validates the category.
+- **L6 preserved:** the `prompt_injection` *sink* is the applicability signal, so
+  a repo with no LLM-call surface (and no skill files) stays `applicable: false`
+  and ai_safety still drops out on non-AI repos. Verified live (Flask+OpenAI →
+  fires HIGH; plain util → inapplicable).
+
+Backward compatible: no `circleIRResults` → doc-scan-only behavior unchanged.
+9 new tests; full suite 1487 pass.
+
+### Changed — bump circle-ir 3.174.0 → 3.175.0
+
+Routine engine refresh; no API/behavior change in this layer. Fleet consumers
+(cognium-ai / mcp-server / circle-pack) bump to `^2.56.0` + circle-ir 3.175.0 in
+the same wave so npm dedupes to a single circle-ir 3.175.0.
+
 ## [2.55.1] - 2026-07-17
 
 ### Changed — bump circle-ir 3.173.0 → 3.174.0 (LLM01 app-code prompt-injection sink)

package/dist/trust/passes/prompt-injection.d.ts

@@ -10,7 +10,8 @@
  * 3. Hidden directives (role-switching, jailbreak patterns)
  * 4. Suspicious URL patterns (IP literals, shorteners, data URIs)
  */
-import { type TrustPassResult } from '../types.js';
+import type { CircleIR } from 'circle-ir';
+import { type TrustPassResult, type TrustFinding } from '../types.js';
 declare const INVISIBLE_CHARS: RegExp;
 declare const RTL_OVERRIDES: RegExp;
 declare const HIDDEN_DIRECTIVE_PATTERNS: {
@@ -27,7 +28,22 @@ export interface PromptInjectionOptions {
     additionalFiles?: string[];
     /** Skip the default file set */
     skipDefaultFiles?: boolean;
+    /**
+     * cognium-ai#211/#233 — pre-computed circle-ir results. When present, the
+     * pass also consumes app-code prompt-injection taint (untrusted input
+     * reaching an LLM prompt), not just static text in skill/prompt files.
+     */
+    circleIRResults?: CircleIR[];
 }
+/**
+ * Extract app-code prompt-injection findings from circle-ir taint. Returns the
+ * findings plus `hasSink` — whether any `prompt_injection` sink exists (the
+ * applicability signal, independent of whether a flow completed).
+ */
+export declare function collectAppCodePromptInjection(circleIRResults?: CircleIR[]): {
+    findings: TrustFinding[];
+    hasSink: boolean;
+};
 export declare function promptInjectionPass(projectPath: string, options?: PromptInjectionOptions): Promise<TrustPassResult>;
 export { INVISIBLE_CHARS, RTL_OVERRIDES, HIDDEN_DIRECTIVE_PATTERNS, SUSPICIOUS_URL_PATTERNS, DEFAULT_SCAN_FILES, };
 //# sourceMappingURL=prompt-injection.d.ts.map

package/dist/trust/passes/prompt-injection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-injection.d.ts","sourceRoot":"","sources":["../../../src/trust/passes/prompt-injection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,EACL,KAAK,eAAe,EAGrB,MAAM,aAAa,CAAC;AAMrB,QAAA,MAAM,eAAe,QAA0D,CAAC;AAChF,QAAA,MAAM,aAAa,QAAqB,CAAC;AASzC,QAAA,MAAM,yBAAyB,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAalE,CAAC;AAEF,QAAA,MAAM,uBAAuB,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAKhE,CAAC;AAEF,QAAA,MAAM,kBAAkB,UAMvB,CAAC;AAMF,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gCAAgC;IAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAwND,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,CAwC1B;AAGD,OAAO,EACL,eAAe,EACf,aAAa,EACb,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,GACnB,CAAC"}
+{"version":3,"file":"prompt-injection.d.ts","sourceRoot":"","sources":["../../../src/trust/passes/prompt-injection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,YAAY,EAGlB,MAAM,aAAa,CAAC;AAMrB,QAAA,MAAM,eAAe,QAA0D,CAAC;AAChF,QAAA,MAAM,aAAa,QAAqB,CAAC;AASzC,QAAA,MAAM,yBAAyB,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAalE,CAAC;AAEF,QAAA,MAAM,uBAAuB,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAKhE,CAAC;AAEF,QAAA,MAAM,kBAAkB,UAMvB,CAAC;AAMF,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gCAAgC;IAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;OAIG;IACH,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC;CAC9B;AAkPD;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,eAAe,CAAC,EAAE,QAAQ,EAAE,GAC3B;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAuDhD;AAMD,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,CA8C1B;AAGD,OAAO,EACL,eAAe,EACf,aAAa,EACb,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,GACnB,CAAC"}

package/dist/trust/passes/prompt-injection.js

@@ -227,6 +227,70 @@ function collectFiles(projectPath, options) {
     }
     return [...files];
 }
+function toSeverity(s) {
+    return s === 'critical' || s === 'high' || s === 'medium' || s === 'low' ? s : 'high';
+}
+/**
+ * Extract app-code prompt-injection findings from circle-ir taint. Returns the
+ * findings plus `hasSink` — whether any `prompt_injection` sink exists (the
+ * applicability signal, independent of whether a flow completed).
+ */
+export function collectAppCodePromptInjection(circleIRResults) {
+    const findings = [];
+    let hasSink = false;
+    if (!circleIRResults)
+        return { findings, hasSink };
+    for (const ir of circleIRResults) {
+        const anyIr = ir;
+        const file = anyIr.meta?.file ?? 'app-code';
+        const sinks = anyIr.taint?.sinks ?? [];
+        const flows = anyIr.taint?.flows ?? [];
+        if (sinks.some((s) => s.type === 'prompt_injection'))
+            hasSink = true;
+        const seen = new Set(); // dedupe multiple flows to the same sink line
+        for (const f of flows) {
+            if (f.sink_type !== 'prompt_injection' || f.sanitized === true)
+                continue;
+            const line = f.sink_line ?? -1;
+            if (seen.has(line))
+                continue;
+            seen.add(line);
+            findings.push({
+                pass: 'prompt-injection',
+                ruleId: 'prompt-injection-app-code-taint',
+                severity: 'high',
+                message: `Untrusted input (${f.source_type ?? 'source'} at line ${f.source_line ?? '?'}) reaches an LLM prompt without sanitization — potential prompt injection (CWE-1427)`,
+                location: { file, ...(line >= 0 ? { line } : {}) },
+                meta: {
+                    cwe: 'CWE-1427', category: 'app-code-taint',
+                    sourceLine: f.source_line, sinkLine: f.sink_line,
+                    sourceType: f.source_type, confidence: f.confidence,
+                },
+            });
+        }
+        // Belt-and-suspenders: fold any explicit prompt_injection SAST finding
+        // circle-ir may emit (rule_id/pass === 'prompt_injection'), deduped by line.
+        for (const sf of anyIr.findings ?? []) {
+            if (sf.rule_id !== 'prompt_injection' && sf.pass !== 'prompt_injection')
+                continue;
+            const line = sf.line ?? -1;
+            if (seen.has(line))
+                continue;
+            seen.add(line);
+            findings.push({
+                pass: 'prompt-injection',
+                ruleId: 'prompt-injection-app-code',
+                severity: toSeverity(sf.severity),
+                message: 'Prompt-injection taint flow into an LLM call (CWE-1427)',
+                location: { file: sf.file ?? file, ...(line >= 0 ? { line } : {}) },
+                meta: { cwe: 'CWE-1427', category: 'app-code-finding' },
+            });
+        }
+    }
+    if (findings.length > 0)
+        hasSink = true;
+    return { findings, hasSink };
+}
 // ---------------------------------------------------------------------------
 // Main pass
 // ---------------------------------------------------------------------------
@@ -245,6 +309,10 @@ export async function promptInjectionPass(projectPath, options = {}) {
         const relativePath = path.relative(projectPath, filePath);
         findings.push(...checkInvisibleUnicode(content, relativePath), ...checkBase64Payloads(content, relativePath), ...checkHiddenDirectives(content, relativePath), ...checkSuspiciousUrls(content, relativePath));
     }
+    // cognium-ai#211/#233 — app-code prompt-injection taint (untrusted input →
+    // LLM prompt), from circle-ir. Robustifies LLM01 recall beyond the doc scan.
+    const appCode = collectAppCodePromptInjection(options.circleIRResults);
+    findings.push(...appCode.findings);
     let deduction = 0;
     for (const f of findings) {
         deduction += SEVERITY_WEIGHTS[f.severity];
@@ -253,10 +321,11 @@ export async function promptInjectionPass(projectPath, options = {}) {
     return {
         pass: 'prompt-injection',
         score,
-        // cognium-ai#234 (L1) — applicable only if there was a skill/prompt/AI-
-        // config file to scan; on a repo with none, this is inapplicable, not a
-        // validated clean 100.
-        applicable: files.length > 0,
+        // cognium-ai#234 (L1/L6) — applicable if there was a skill/prompt/AI-config
+        // file to scan OR the code has an LLM-prompt surface (a `prompt_injection`
+        // sink). A repo with neither is inapplicable, not a validated clean 100 —
+        // so ai_safety still drops out on non-AI repos.
+        applicable: files.length > 0 || appCode.hasSink,
         findings,
         durationMs: Date.now() - start,
     };

package/dist/trust/passes/prompt-injection.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-injection.js","sourceRoot":"","sources":["../../../src/trust/passes/prompt-injection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,eAAe,GAAG,uDAAuD,CAAC;AAChF,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,MAAM,2BAA2B,GAAG;IAClC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ;IAC5D,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW;CAC9D,CAAC;AAEF,MAAM,yBAAyB,GAAyC;IACtE,EAAE,OAAO,EAAE,4CAA4C,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACnF,EAAE,OAAO,EAAE,sDAAsD,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC7F,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE;IAC9D,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE;IACzD,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,uBAAuB,EAAE;IAC/D,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE;IACrD,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE;IAC/C,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,EAAE;IAC1D,EAAE,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC7D,EAAE,OAAO,EAAE,oCAAoC,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAC1E,EAAE,OAAO,EAAE,uDAAuD,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC9F,EAAE,OAAO,EAAE,wDAAwD,EAAE,KAAK,EAAE,cAAc,EAAE;CAC7F,CAAC;AAEF,MAAM,uBAAuB,GAAyC;IACpE,EAAE,OAAO,EAAE,+CAA+C,EAAE,KAAK,EAAE,YAAY,EAAE;IACjF,EAAE,OAAO,EAAE,mEAAmE,EAAE,KAAK,EAAE,eAAe,EAAE;IACxG,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC5D,EAAE,OAAO,EAAE,uDAAuD,EAAE,KAAK,EAAE,gBAAgB,EAAE;CAC9F,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,UAAU,EAAE,UAAU;IACtB,iBAAiB,EAAE,iBAAiB;IACpC,WAAW,EAAE,WAAW;IACxB,UAAU;IACV,4BAA4B;CAC7B,CAAC;AAaF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa;IACnD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,YAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAE7C,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,+BAA+B;gBACvC,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,8CAA8C,CAAC,GAAG,CAAC,4BAA4B;gBACxF,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;gBAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;aAClE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,4CAA4C;gBACpD,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,yCAAyC,CAAC,GAAG,CAAC,qBAAqB;gBACtG,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;gBAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;aACxE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,oCAAoC;gBAC5C,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,0CAA0C,CAAC,GAAG,CAAC,EAAE;gBAC1D,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;gBAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAe,EACf,YAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,KAA6B,CAAC;IAElC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClE,8DAA8D;YAC9D,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACrE,IAAI,cAAc,GAAG,GAAG;gBAAE,SAAS,CAAC,wCAAwC;YAE5E,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5D,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CACxC,CAAC;YACF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAEjD,IAAI,aAAa,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,oCAAoC;oBAC5C,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,0DAA0D,IAAI,EAAE;oBACzE,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;oBACtC,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;wBAC1C,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;wBACxC,QAAQ,EAAE,QAAQ;qBACnB;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,iCAAiC;oBACzC,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,kCAAkC,IAAI,EAAE;oBACjD,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;oBACtC,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;wBAC1C,QAAQ,EAAE,QAAQ;qBACnB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,YAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,yBAAyB,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,mCAAmC;gBAC3C,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,+BAA+B,OAAO,aAAa,IAAI,EAAE;gBAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;gBACtC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAe,EACf,YAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,uBAAuB,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,iCAAiC;gBACzC,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,mBAAmB,KAAK,aAAa,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBAClF,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;gBACtC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,YAAY,CACnB,WAAmB,EACnB,OAA+B;IAE/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,0CAA0C;QAC1C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAmB,EACnB,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAEjD,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE1D,QAAQ,CAAC,IAAI,CACX,GAAG,qBAAqB,CAAC,OAAO,EAAE,YAAY,CAAC,EAC/C,GAAG,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,EAC7C,GAAG,qBAAqB,CAAC,OAAO,EAAE,YAAY,CAAC,EAC/C,GAAG,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,SAAS,IAAI,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,KAAK;QACL,wEAAwE;QACxE,wEAAwE;QACxE,uBAAuB;QACvB,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;QAC5B,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,sBAAsB;AACtB,OAAO,EACL,eAAe,EACf,aAAa,EACb,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,GACnB,CAAC"}
+{"version":3,"file":"prompt-injection.js","sourceRoot":"","sources":["../../../src/trust/passes/prompt-injection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAIL,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,eAAe,GAAG,uDAAuD,CAAC;AAChF,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,MAAM,2BAA2B,GAAG;IAClC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ;IAC5D,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW;CAC9D,CAAC;AAEF,MAAM,yBAAyB,GAAyC;IACtE,EAAE,OAAO,EAAE,4CAA4C,EAAE,KAAK,EAAE,iBAAiB,EAAE;IACnF,EAAE,OAAO,EAAE,sDAAsD,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC7F,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE;IAC9D,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE;IACzD,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,uBAAuB,EAAE;IAC/D,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE;IACrD,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE;IAC/C,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,YAAY,EAAE;IAC1D,EAAE,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC7D,EAAE,OAAO,EAAE,oCAAoC,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAC1E,EAAE,OAAO,EAAE,uDAAuD,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC9F,EAAE,OAAO,EAAE,wDAAwD,EAAE,KAAK,EAAE,cAAc,EAAE;CAC7F,CAAC;AAEF,MAAM,uBAAuB,GAAyC;IACpE,EAAE,OAAO,EAAE,+CAA+C,EAAE,KAAK,EAAE,YAAY,EAAE;IACjF,EAAE,OAAO,EAAE,mEAAmE,EAAE,KAAK,EAAE,eAAe,EAAE;IACxG,EAAE,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC5D,EAAE,OAAO,EAAE,uDAAuD,EAAE,KAAK,EAAE,gBAAgB,EAAE;CAC9F,CAAC;AAEF,MAAM,kBAAkB,GAAG;IACzB,UAAU,EAAE,UAAU;IACtB,iBAAiB,EAAE,iBAAiB;IACpC,WAAW,EAAE,WAAW;IACxB,UAAU;IACV,4BAA4B;CAC7B,CAAC;AAmBF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa;IACnD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,YAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAE7C,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,+BAA+B;gBACvC,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,8CAA8C,CAAC,GAAG,CAAC,4BAA4B;gBACxF,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;gBAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;aAClE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,4CAA4C;gBACpD,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,yCAAyC,CAAC,GAAG,CAAC,qBAAqB;gBACtG,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;gBAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;aACxE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,gBAAgB,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,oCAAoC;gBAC5C,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,0CAA0C,CAAC,GAAG,CAAC,EAAE;gBAC1D,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;gBAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,mBAAmB,EAAE;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAe,EACf,YAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,KAA6B,CAAC;IAElC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClE,8DAA8D;YAC9D,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACrE,IAAI,cAAc,GAAG,GAAG;gBAAE,SAAS,CAAC,wCAAwC;YAE5E,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5D,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CACxC,CAAC;YACF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAEjD,IAAI,aAAa,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,oCAAoC;oBAC5C,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,0DAA0D,IAAI,EAAE;oBACzE,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;oBACtC,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;wBAC1C,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;wBACxC,QAAQ,EAAE,QAAQ;qBACnB;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,iCAAiC;oBACzC,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,kCAAkC,IAAI,EAAE;oBACjD,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;oBACtC,IAAI,EAAE;wBACJ,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;wBAC1C,QAAQ,EAAE,QAAQ;qBACnB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,YAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,yBAAyB,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,mCAAmC;gBAC3C,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,+BAA+B,OAAO,aAAa,IAAI,EAAE;gBAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;gBACtC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAe,EACf,YAAoB;IAEpB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,uBAAuB,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,iCAAiC;gBACzC,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,mBAAmB,KAAK,aAAa,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBAClF,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;gBACtC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,YAAY,CACnB,WAAmB,EACnB,OAA+B;IAE/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,0CAA0C;QAC1C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;YAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACnD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;QAED,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AA4BD,SAAS,UAAU,CAAC,CAAqB;IACvC,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,eAA4B;IAE5B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAEnD,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,EAIb,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;QAErE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,8CAA8C;QAC9E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,SAAS,KAAK,kBAAkB,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;gBAAE,SAAS;YACzE,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,iCAAiC;gBACzC,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,oBAAoB,CAAC,CAAC,WAAW,IAAI,QAAQ,YAAY,CAAC,CAAC,WAAW,IAAI,GAAG,sFAAsF;gBAC5K,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBAClD,IAAI,EAAE;oBACJ,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB;oBAC3C,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS;oBAChD,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;iBACpD;aACF,CAAC,CAAC;QACL,CAAC;QAED,uEAAuE;QACvE,6EAA6E;QAC7E,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,EAAE,CAAC,OAAO,KAAK,kBAAkB,IAAI,EAAE,CAAC,IAAI,KAAK,kBAAkB;gBAAE,SAAS;YAClF,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,2BAA2B;gBACnC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC;gBACjC,OAAO,EAAE,yDAAyD;gBAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBACnE,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,EAAE;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,IAAI,CAAC;IACxC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAmB,EACnB,UAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAEjD,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE1D,QAAQ,CAAC,IAAI,CACX,GAAG,qBAAqB,CAAC,OAAO,EAAE,YAAY,CAAC,EAC/C,GAAG,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,EAC7C,GAAG,qBAAqB,CAAC,OAAO,EAAE,YAAY,CAAC,EAC/C,GAAG,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAC9C,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,6BAA6B,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,SAAS,IAAI,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,KAAK;QACL,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,gDAAgD;QAChD,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO;QAC/C,QAAQ;QACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,sBAAsB;AACtB,OAAO,EACL,eAAe,EACf,aAAa,EACb,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,GACnB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "circle-ir-ai",
-  "version": "2.55.1",
+  "version": "2.56.0",
   "description": "LLM-enhanced SAST analysis built on circle-ir",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -98,7 +98,7 @@
     "@ax-llm/ax": "^20.0.0",
     "@cognium/project-profile-detect": "^1.1.0",
     "@mastra/core": "^1.18.0",
-    "circle-ir": "3.174.0",
+    "circle-ir": "3.175.0",
     "minimatch": "^10.2.5",
     "p-queue": "^9.1.0"
   },