circle-ir-ai 4.0.6 → 4.0.7

package/CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.0.7] - 2026-08-16
+
+### Changed — bump circle-ir 4.7.0 → 4.7.1
+
+Engine pin bump to latest 4.x. No source changes. Single copy verified; typecheck
+clean, 1808 tests pass. Static regression spot-check clean: OWASP 100%, Rust 92.3%,
+Bash 100%, HTML 100%, Go 78.9% (all match baseline).
+
 ## [4.0.6] - 2026-08-14
 
 ### Added — export the parse-isolation pool helpers (cognium-ai#58 completeness)

package/dist/skills/precision.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Shared skill-scan precision layer (cognium-ai#68).
+ *
+ * ## Why this exists
+ *
+ * The skill-scan false-positive fixes (skillsregistry #52/#53/#55/#57/#59/#63/#66)
+ * originally shipped inside `circle-pack/src/api/analysis/skill-runner.ts` — the
+ * HTTP handler for `POST /api/analyze/skill`. But the CLI (`cognium-ai
+ * analyze-skill`), the MCP tools, and the skills-validation gate adapter all go
+ * through `analyzeSkillBundle` in this package, which never had any of them. So
+ * two entry points returned two different verdicts for the same skill on the
+ * same engine (#68), and the validation gate scored a path with none of the
+ * precision work.
+ *
+ * The fix belongs in the inner layer: CLI / HTTP / MCP are just interfaces.
+ * These passes operate on `SkillFinding` (this package's model) so every
+ * interface inherits the same precision + verdict by construction.
+ *
+ * ## The two FP definitions
+ *
+ * - **Verdict FP** (product API): a skill is `VULNERABLE`. Severity caps fix
+ *   this — capped-to-`low` findings fold into `trust_score` and never flip the
+ *   verdict.
+ * - **Presence FP** (validation gate): a finding of a threat type *appears* on a
+ *   safe fixture. Caps don't help (the finding still exists); only the
+ *   suppressors (which DROP the finding) and genuine detector precision do.
+ *
+ * `finalizeSkillAnalysis` returns both the capped/suppressed `findings` and a
+ * `verdict` + `trust_score`, so a presence-based consumer can switch to the
+ * verdict (the cognium-ai-owned contract, skillsregistry#64) and a
+ * verdict-based consumer works directly.
+ */
+import type { SkillFinding } from './types.js';
+type Severity = SkillFinding['severity'];
+/**
+ * skillsregistry#52 — CWE-117 (log injection) is emitted for any user input
+ * reaching a logger; on a stdio skill server it's low real-world risk but was
+ * the biggest single driver of false VULNERABLE verdicts. Cap to `low`. Opt out
+ * with SKILL_KEEP_LOG_INJECTION_SEVERITY=1. Mutates in place.
+ */
+export declare function capLogInjectionSeverity(findings: SkillFinding[]): void;
+/**
+ * skillsregistry#66 — the biggest FP driver. circle-ir's taint analyzer marks an
+ * MCP tool's OWN parameters as untrusted attacker input, so a tool acting on its
+ * declared arguments (a shell tool running its command arg, a DB tool querying
+ * its arg) is flagged as injection. In a skill/MCP scan EVERY taint finding is
+ * the tool acting on its declared parameter — declared capability, not an
+ * attacker flow — so cap the whole taint population to `low`. Genuine
+ * *undeclared* over-reach is the job of the capability-mismatch finding, and
+ * behavioral-malware findings (`ransomware`, `fetch_and_execute`, …) carry their
+ * own type and are untouched. `SkillFindingType 'vulnerability'` is exactly the
+ * SAST taint set. Opt out with SKILL_KEEP_PARAM_SOURCE_SEVERITY=1. Mutates.
+ */
+export declare function capTaintCapabilitySeverity(findings: SkillFinding[]): void;
+export declare function suppressPlaceholderSecrets(findings: SkillFinding[]): SkillFinding[];
+/**
+ * skillsregistry#55 — CWE-601 open-redirect is a code-flow vuln (user URL → a
+ * redirect/`Location` sink); it can't be established from instruction TEXT. The
+ * instruction-safety phase was emitting it for a SKILL.md that merely NAMES a
+ * data-source URL. Drop CWE-601 findings that don't come from a real code sink
+ * (no code `location.line`). Opt out with SKILL_KEEP_INSTRUCTION_OPEN_REDIRECT=1.
+ */
+export declare function suppressInstructionOpenRedirect(findings: SkillFinding[]): SkillFinding[];
+/**
+ * skillsregistry#63 — collapse duplicate finding rows, keeping the
+ * highest-confidence instance. Identity: (type, cwe, normalized artifact, line).
+ */
+export declare function dedupFindings(findings: SkillFinding[]): SkillFinding[];
+/** Coverage / mode inputs the verdict needs, supplied by the pipeline. */
+export interface SkillVerdictContext {
+    /** Code files that actually produced a SAST result (not merely queued). */
+    codeFilesAnalyzed: number;
+    /** True only if the instruction-safety phase actually ran on a real SKILL.md. */
+    instructionAnalyzed: boolean;
+    /** True when the analyzed SKILL.md is the caller's description echo, not fetched content. */
+    skillMdIsDescriptionEcho?: boolean;
+    /** Severity floor for a finding to be "substantive" (default medium). */
+    verdictMinSeverity?: Severity;
+}
+export type SkillVerdict = 'SAFE' | 'VULNERABLE' | 'UNKNOWN';
+export interface SkillFinalizeResult {
+    findings: SkillFinding[];
+    verdict: SkillVerdict;
+    trustScore: number;
+    scanCoverage: 'none' | 'partial' | 'full';
+}
+/**
+ * Run the full precision layer + compute the cognium-ai-owned verdict/trust from
+ * a raw `SkillFinding[]`. Order: dedup → caps → suppressors → verdict.
+ *
+ * - skillsregistry#57: at trust ≥ 0.9 only HIGH/CRITICAL flips the verdict.
+ * - skillsregistry#59: no analyzed code AND no real instruction analysis ⇒
+ *   UNKNOWN / trust 0 (unscannable content is not "scanned clean").
+ */
+export declare function finalizeSkillAnalysis(raw: SkillFinding[], ctx: SkillVerdictContext): SkillFinalizeResult;
+export {};
+//# sourceMappingURL=precision.d.ts.map

package/dist/skills/precision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"precision.d.ts","sourceRoot":"","sources":["../../src/skills/precision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,KAAK,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAWzC;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAQtE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CASzE;AAaD,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAYnF;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAQxF;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAetE;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,6FAA6F;IAC7F,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,yEAAyE;IACzE,kBAAkB,CAAC,EAAE,QAAQ,CAAC;CAC/B;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,OAAO,EAAE,YAAY,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,YAAY,EAAE,EACnB,GAAG,EAAE,mBAAmB,GACvB,mBAAmB,CAmCrB"}

package/dist/skills/precision.js

@@ -0,0 +1,182 @@
+/**
+ * Shared skill-scan precision layer (cognium-ai#68).
+ *
+ * ## Why this exists
+ *
+ * The skill-scan false-positive fixes (skillsregistry #52/#53/#55/#57/#59/#63/#66)
+ * originally shipped inside `circle-pack/src/api/analysis/skill-runner.ts` — the
+ * HTTP handler for `POST /api/analyze/skill`. But the CLI (`cognium-ai
+ * analyze-skill`), the MCP tools, and the skills-validation gate adapter all go
+ * through `analyzeSkillBundle` in this package, which never had any of them. So
+ * two entry points returned two different verdicts for the same skill on the
+ * same engine (#68), and the validation gate scored a path with none of the
+ * precision work.
+ *
+ * The fix belongs in the inner layer: CLI / HTTP / MCP are just interfaces.
+ * These passes operate on `SkillFinding` (this package's model) so every
+ * interface inherits the same precision + verdict by construction.
+ *
+ * ## The two FP definitions
+ *
+ * - **Verdict FP** (product API): a skill is `VULNERABLE`. Severity caps fix
+ *   this — capped-to-`low` findings fold into `trust_score` and never flip the
+ *   verdict.
+ * - **Presence FP** (validation gate): a finding of a threat type *appears* on a
+ *   safe fixture. Caps don't help (the finding still exists); only the
+ *   suppressors (which DROP the finding) and genuine detector precision do.
+ *
+ * `finalizeSkillAnalysis` returns both the capped/suppressed `findings` and a
+ * `verdict` + `trust_score`, so a presence-based consumer can switch to the
+ * verdict (the cognium-ai-owned contract, skillsregistry#64) and a
+ * verdict-based consumer works directly.
+ */
+const SEVERITY_RANK = { info: 0, low: 1, medium: 2, high: 3, critical: 4 };
+/** Normalize a CWE id to the `CWE-<n>` form used by the sets below. */
+function cweId(f) {
+    const c = f.cwe;
+    if (!c)
+        return undefined;
+    return /^cwe-/i.test(c) ? c.toUpperCase() : `CWE-${c}`;
+}
+/**
+ * skillsregistry#52 — CWE-117 (log injection) is emitted for any user input
+ * reaching a logger; on a stdio skill server it's low real-world risk but was
+ * the biggest single driver of false VULNERABLE verdicts. Cap to `low`. Opt out
+ * with SKILL_KEEP_LOG_INJECTION_SEVERITY=1. Mutates in place.
+ */
+export function capLogInjectionSeverity(findings) {
+    if (process.env.SKILL_KEEP_LOG_INJECTION_SEVERITY === '1')
+        return;
+    for (const f of findings) {
+        if (cweId(f) === 'CWE-117' && f.severity !== 'low') {
+            (f.evidence ??= {}).originalSeverity = f.severity;
+            f.severity = 'low';
+        }
+    }
+}
+/**
+ * skillsregistry#66 — the biggest FP driver. circle-ir's taint analyzer marks an
+ * MCP tool's OWN parameters as untrusted attacker input, so a tool acting on its
+ * declared arguments (a shell tool running its command arg, a DB tool querying
+ * its arg) is flagged as injection. In a skill/MCP scan EVERY taint finding is
+ * the tool acting on its declared parameter — declared capability, not an
+ * attacker flow — so cap the whole taint population to `low`. Genuine
+ * *undeclared* over-reach is the job of the capability-mismatch finding, and
+ * behavioral-malware findings (`ransomware`, `fetch_and_execute`, …) carry their
+ * own type and are untouched. `SkillFindingType 'vulnerability'` is exactly the
+ * SAST taint set. Opt out with SKILL_KEEP_PARAM_SOURCE_SEVERITY=1. Mutates.
+ */
+export function capTaintCapabilitySeverity(findings) {
+    if (process.env.SKILL_KEEP_PARAM_SOURCE_SEVERITY === '1')
+        return;
+    for (const f of findings) {
+        if (f.type === 'vulnerability' && f.severity !== 'low') {
+            (f.evidence ??= {}).originalSeverity = f.severity;
+            (f.evidence).capability_declared = true;
+            f.severity = 'low';
+        }
+    }
+}
+/**
+ * skillsregistry#53 — hardcoded-secret (CWE-798) false-positives on placeholder
+ * strings (`YOUR_API_KEY`, `sk_live_xxxxx`, `<your-key>`, `process.env.X`) in
+ * READMEs / help text / .env.example. A real embedded credential (PEM key, a
+ * live-shaped literal) still fires. Drop placeholder-shaped / doc-file findings.
+ * Opt out with SKILL_KEEP_PLACEHOLDER_SECRETS=1.
+ */
+const PLACEHOLDER_SECRET_RE = /YOUR[_-]?[A-Z0-9]|your[_-]?(?:api|token|key|secret|pass)|x{5,}|<[^>]{0,40}(?:key|token|secret|password|api|pat)[^>]{0,40}>|\$\{[^}]+\}|process\.env\.|import\.meta\.env|os\.environ|changeme|placeholder|redacted/i;
+const DOC_OR_EXAMPLE_FILE_RE = /(?:^|\/)(?:readme|changelog)|\.md$|\.env\.example$|\.example(?:\.[a-z0-9]+)?$|example\.env$/i;
+export function suppressPlaceholderSecrets(findings) {
+    if (process.env.SKILL_KEEP_PLACEHOLDER_SECRETS === '1')
+        return findings;
+    return findings.filter((f) => {
+        if (cweId(f) !== 'CWE-798' && f.type !== 'hardcoded_secret')
+            return true;
+        if (DOC_OR_EXAMPLE_FILE_RE.test(f.artifact || ''))
+            return false;
+        const snippet = f.location?.snippet ||
+            f.evidence?.quote ||
+            f.description ||
+            '';
+        return !PLACEHOLDER_SECRET_RE.test(snippet);
+    });
+}
+/**
+ * skillsregistry#55 — CWE-601 open-redirect is a code-flow vuln (user URL → a
+ * redirect/`Location` sink); it can't be established from instruction TEXT. The
+ * instruction-safety phase was emitting it for a SKILL.md that merely NAMES a
+ * data-source URL. Drop CWE-601 findings that don't come from a real code sink
+ * (no code `location.line`). Opt out with SKILL_KEEP_INSTRUCTION_OPEN_REDIRECT=1.
+ */
+export function suppressInstructionOpenRedirect(findings) {
+    if (process.env.SKILL_KEEP_INSTRUCTION_OPEN_REDIRECT === '1')
+        return findings;
+    return findings.filter((f) => {
+        if (cweId(f) !== 'CWE-601')
+            return true;
+        // A real open-redirect comes from a code sink (has a code artifact + line).
+        const fromCodeSink = !!f.location?.line && !/skill\.md$/i.test(f.artifact || '');
+        return fromCodeSink;
+    });
+}
+/**
+ * skillsregistry#63 — collapse duplicate finding rows, keeping the
+ * highest-confidence instance. Identity: (type, cwe, normalized artifact, line).
+ */
+export function dedupFindings(findings) {
+    const norm = (p) => (p || '').replace(/\\/g, '/').replace(/^\.\//, '').toLowerCase();
+    const ordered = findings
+        .map((f, i) => ({ f, i }))
+        .sort((a, b) => (b.f.confidence ?? 0) - (a.f.confidence ?? 0) || a.i - b.i);
+    const seen = new Set();
+    const kept = new Set();
+    for (const { f } of ordered) {
+        const key = `${f.type}|${cweId(f) ?? ''}|${norm(f.artifact)}|${f.location?.line ?? ''}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        kept.add(f);
+    }
+    return findings.filter((f) => kept.has(f));
+}
+/**
+ * Run the full precision layer + compute the cognium-ai-owned verdict/trust from
+ * a raw `SkillFinding[]`. Order: dedup → caps → suppressors → verdict.
+ *
+ * - skillsregistry#57: at trust ≥ 0.9 only HIGH/CRITICAL flips the verdict.
+ * - skillsregistry#59: no analyzed code AND no real instruction analysis ⇒
+ *   UNKNOWN / trust 0 (unscannable content is not "scanned clean").
+ */
+export function finalizeSkillAnalysis(raw, ctx) {
+    let findings = dedupFindings(raw);
+    capLogInjectionSeverity(findings);
+    capTaintCapabilitySeverity(findings);
+    findings = suppressPlaceholderSecrets(findings);
+    findings = suppressInstructionOpenRedirect(findings);
+    // Trust score — weighted severity penalty (mirrors the historical formula).
+    const weights = { critical: 1.0, high: 0.7, medium: 0.4, low: 0.2, info: 0.1 };
+    let penalty = 0;
+    for (const f of findings)
+        penalty += (weights[f.severity] ?? 0.2) * (f.confidence ?? 0.7);
+    const trustScore = Math.round(Math.max(0, 1 - penalty / 10) * 100) / 100;
+    // Coverage (skillsregistry#59) — fail-closed when nothing was actually analyzed.
+    const hasCodeCoverage = ctx.codeFilesAnalyzed > 0;
+    const hasInstructionCoverage = ctx.instructionAnalyzed && !ctx.skillMdIsDescriptionEcho;
+    const hasAnyCoverage = hasCodeCoverage || hasInstructionCoverage;
+    // Verdict (skillsregistry#57) — near-clean trust only flips on HIGH/CRITICAL.
+    const floor = ctx.verdictMinSeverity ?? 'medium';
+    const floorRank = SEVERITY_RANK[floor] ?? 2;
+    const substantive = findings.filter((f) => (SEVERITY_RANK[f.severity] ?? 1) >= floorRank);
+    const hasHighCrit = findings.some((f) => f.severity === 'high' || f.severity === 'critical');
+    const NEAR_CLEAN = 0.9;
+    const substantiveEnough = hasHighCrit || (trustScore < NEAR_CLEAN && substantive.length >= 1);
+    const verdict = !hasAnyCoverage ? 'UNKNOWN' : substantiveEnough ? 'VULNERABLE' : 'SAFE';
+    const effectiveTrust = hasAnyCoverage ? trustScore : 0;
+    const scanCoverage = !hasAnyCoverage
+        ? 'none'
+        : hasCodeCoverage && hasInstructionCoverage
+            ? 'full'
+            : 'partial';
+    return { findings, verdict, trustScore: effectiveTrust, scanCoverage };
+}
+//# sourceMappingURL=precision.js.map

package/dist/skills/precision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"precision.js","sourceRoot":"","sources":["../../src/skills/precision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAMH,MAAM,aAAa,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAEnG,uEAAuE;AACvE,SAAS,KAAK,CAAC,CAAe;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;IAChB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAwB;IAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,GAAG;QAAE,OAAO;IAClE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACnD,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,QAAQ,CAAC;YAClD,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAwB;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,GAAG;QAAE,OAAO;IACjE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvD,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,QAAQ,CAAC;YAClD,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,mBAAmB,GAAG,IAAI,CAAC;YACxC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,qBAAqB,GACzB,oNAAoN,CAAC;AACvN,MAAM,sBAAsB,GAC1B,8FAA8F,CAAC;AACjG,MAAM,UAAU,0BAA0B,CAAC,QAAwB;IACjE,IAAI,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACxE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAC;QACzE,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,OAAO,GACV,CAAC,CAAC,QAAQ,EAAE,OAA8B;YAC1C,CAAC,CAAC,QAAQ,EAAE,KAA4B;YACzC,CAAC,CAAC,WAAW;YACb,EAAE,CAAC;QACL,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,QAAwB;IACtE,IAAI,OAAO,CAAC,GAAG,CAAC,oCAAoC,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC9E,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACxC,4EAA4E;QAC5E,MAAM,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACjF,OAAO,YAAY,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAwB;IACpD,MAAM,IAAI,GAAG,CAAC,CAAqB,EAAE,EAAE,CACrC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,QAAQ;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SACzB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgB,CAAC;IACrC,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACxF,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAuBD;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAmB,EACnB,GAAwB;IAExB,IAAI,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAChD,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAErD,4EAA4E;IAC5E,MAAM,OAAO,GAA2B,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvG,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IAEzE,iFAAiF;IACjF,MAAM,eAAe,GAAG,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAClD,MAAM,sBAAsB,GAAG,GAAG,CAAC,mBAAmB,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC;IACxF,MAAM,cAAc,GAAG,eAAe,IAAI,sBAAsB,CAAC;IAEjE,8EAA8E;IAC9E,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC;IACjD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,GAAG,CAAC;IACvB,MAAM,iBAAiB,GAAG,WAAW,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAE9F,MAAM,OAAO,GAAiB,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;IACtG,MAAM,cAAc,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,YAAY,GAAgC,CAAC,cAAc;QAC/D,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,eAAe,IAAI,sBAAsB;YACzC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACzE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "circle-ir-ai",
-  "version": "4.0.6",
+  "version": "4.0.7",
   "description": "LLM-enhanced SAST analysis built on circle-ir",
   "main": "dist/index.js",
   "module": "dist/index.js",
@@ -100,7 +100,7 @@
     "@ax-llm/ax": "^20.0.0",
     "@cognium/project-profile-detect": "^1.1.0",
     "@mastra/core": "^1.18.0",
-    "circle-ir": "4.7.0",
+    "circle-ir": "4.7.1",
     "minimatch": "^10.2.5",
     "p-queue": "^9.1.0"
   },