circle-ir-ai 4.7.0 → 4.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. package/CHANGELOG.md +30 -0
  2. package/dist/agents/mastra/agents.d.ts +88 -88
  3. package/dist/agents/mastra/agents.d.ts.map +1 -1
  4. package/dist/agents/mastra/instance.d.ts +88 -88
  5. package/dist/agents/mastra/steps.d.ts +87 -87
  6. package/dist/index.d.ts +1 -0
  7. package/dist/index.d.ts.map +1 -1
  8. package/dist/index.js +2 -0
  9. package/dist/index.js.map +1 -1
  10. package/dist/llm/schemas.d.ts +134 -504
  11. package/dist/llm/schemas.d.ts.map +1 -1
  12. package/dist/security-scan/scanner.d.ts +16 -0
  13. package/dist/security-scan/scanner.d.ts.map +1 -1
  14. package/dist/security-scan/scanner.js +41 -2
  15. package/dist/security-scan/scanner.js.map +1 -1
  16. package/dist/skills/code-threat-patterns.d.ts.map +1 -1
  17. package/dist/skills/code-threat-patterns.js +28 -1
  18. package/dist/skills/code-threat-patterns.js.map +1 -1
  19. package/dist/specifica/sink-suppression.d.ts +76 -0
  20. package/dist/specifica/sink-suppression.d.ts.map +1 -0
  21. package/dist/specifica/sink-suppression.js +148 -0
  22. package/dist/specifica/sink-suppression.js.map +1 -0
  23. package/package.json +2 -2
package/dist/agents/mastra/instance.d.ts CHANGED
@@ -33,80 +33,80 @@ export declare function createMastraInstance(options?: MastraInstanceOptions): {
33
33
  indicators: string[];
34
34
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "classify-role", unknown>;
35
35
  discoverSources: import("@mastra/core/tools").Tool<{
36
+ methodCode: string;
36
37
  methodName: string;
37
38
  classRole: string;
38
39
  existingSources: string;
39
- methodCode: string;
40
40
  }, {
41
41
  sources: {
42
- confidence: number;
43
- reasoning: string;
44
- type: string;
45
42
  line: number;
46
43
  variable: string;
44
+ type: string;
45
+ confidence: number;
46
+ reasoning: string;
47
47
  }[];
48
48
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sources", unknown>;
49
49
  discoverSinks: import("@mastra/core/tools").Tool<{
50
+ methodCode: string;
50
51
  methodName: string;
51
52
  methodCalls: string;
52
53
  existingSinks: string;
53
- methodCode: string;
54
54
  }, {
55
55
  sinks: {
56
- confidence: number;
57
- reasoning: string;
58
- type: string;
59
56
  line: number;
60
57
  method: string;
58
+ type: string;
61
59
  cwe: string;
62
60
  argPositions: number[];
61
+ confidence: number;
62
+ reasoning: string;
63
63
  }[];
64
64
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sinks", unknown>;
65
- }, undefined, unknown, import("@mastra/core/agent").AgentEditorConfig | undefined>;
65
+ }, undefined, any, import("@mastra/core/agent").AgentEditorConfig | undefined>;
66
66
  verification: import("@mastra/core/agent").Agent<"verification-agent", {
67
67
  verifyVulnerability: import("@mastra/core/tools").Tool<{
68
- cwe: string;
69
- sourceType: string;
70
- className: string;
71
- methodName: string;
72
- methodCode: string;
73
- sourceLine: number;
74
68
  sourceCode: string;
75
- sinkLine: number;
69
+ sourceLine: number;
70
+ sourceType: string;
76
71
  sinkCode: string;
72
+ sinkLine: number;
77
73
  sinkType: string;
74
+ cwe: string;
75
+ methodCode: string;
76
+ methodName: string;
77
+ className: string;
78
78
  sanitizersInPath: string[];
79
79
  }, {
80
+ verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
80
81
  confidence: number;
81
82
  reasoning: string;
82
- verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
83
83
  exploitability: "high" | "medium" | "low" | "none";
84
84
  sanitizersFound: string[];
85
85
  attackVector: string;
86
86
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "verify-vulnerability", unknown>;
87
- }, undefined, unknown, import("@mastra/core/agent").AgentEditorConfig | undefined>;
87
+ }, undefined, any, import("@mastra/core/agent").AgentEditorConfig | undefined>;
88
88
  crossFile: import("@mastra/core/agent").Agent<"cross-file-agent", {
89
89
  crossFileTaint: import("@mastra/core/tools").Tool<{
90
+ sourceFile: string;
90
91
  sourceCode: string;
91
92
  targetFile: string;
93
+ targetCode: string;
92
94
  exportedTaint: {
93
95
  symbol: string;
94
96
  type: string;
95
97
  line: number;
96
98
  }[];
97
- sourceFile: string;
98
- targetCode: string;
99
99
  importedSymbols: string[];
100
100
  }, {
101
- reasoning: string;
102
101
  taintFlows: {
103
- confidence: number;
104
102
  sourceSymbol: string;
105
103
  targetSymbol: string;
106
104
  flowType: "direct" | "transitive" | "conditional";
105
+ confidence: number;
107
106
  }[];
107
+ reasoning: string;
108
108
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "cross-file-taint", unknown>;
109
- }, undefined, unknown, import("@mastra/core/agent").AgentEditorConfig | undefined>;
109
+ }, undefined, any, import("@mastra/core/agent").AgentEditorConfig | undefined>;
110
110
  orchestrator: import("@mastra/core/agent").Agent<"orchestrator-agent", {
111
111
  classifyRole: import("@mastra/core/tools").Tool<{
112
112
  className: string;
@@ -120,76 +120,76 @@ export declare function createMastraInstance(options?: MastraInstanceOptions): {
120
120
  indicators: string[];
121
121
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "classify-role", unknown>;
122
122
  discoverSources: import("@mastra/core/tools").Tool<{
123
+ methodCode: string;
123
124
  methodName: string;
124
125
  classRole: string;
125
126
  existingSources: string;
126
- methodCode: string;
127
127
  }, {
128
128
  sources: {
129
- confidence: number;
130
- reasoning: string;
131
- type: string;
132
129
  line: number;
133
130
  variable: string;
131
+ type: string;
132
+ confidence: number;
133
+ reasoning: string;
134
134
  }[];
135
135
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sources", unknown>;
136
136
  discoverSinks: import("@mastra/core/tools").Tool<{
137
+ methodCode: string;
137
138
  methodName: string;
138
139
  methodCalls: string;
139
140
  existingSinks: string;
140
- methodCode: string;
141
141
  }, {
142
142
  sinks: {
143
- confidence: number;
144
- reasoning: string;
145
- type: string;
146
143
  line: number;
147
144
  method: string;
145
+ type: string;
148
146
  cwe: string;
149
147
  argPositions: number[];
148
+ confidence: number;
149
+ reasoning: string;
150
150
  }[];
151
151
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sinks", unknown>;
152
152
  verifyVulnerability: import("@mastra/core/tools").Tool<{
153
- cwe: string;
154
- sourceType: string;
155
- className: string;
156
- methodName: string;
157
- methodCode: string;
158
- sourceLine: number;
159
153
  sourceCode: string;
160
- sinkLine: number;
154
+ sourceLine: number;
155
+ sourceType: string;
161
156
  sinkCode: string;
157
+ sinkLine: number;
162
158
  sinkType: string;
159
+ cwe: string;
160
+ methodCode: string;
161
+ methodName: string;
162
+ className: string;
163
163
  sanitizersInPath: string[];
164
164
  }, {
165
+ verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
165
166
  confidence: number;
166
167
  reasoning: string;
167
- verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
168
168
  exploitability: "high" | "medium" | "low" | "none";
169
169
  sanitizersFound: string[];
170
170
  attackVector: string;
171
171
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "verify-vulnerability", unknown>;
172
172
  crossFileTaint: import("@mastra/core/tools").Tool<{
173
+ sourceFile: string;
173
174
  sourceCode: string;
174
175
  targetFile: string;
176
+ targetCode: string;
175
177
  exportedTaint: {
176
178
  symbol: string;
177
179
  type: string;
178
180
  line: number;
179
181
  }[];
180
- sourceFile: string;
181
- targetCode: string;
182
182
  importedSymbols: string[];
183
183
  }, {
184
- reasoning: string;
185
184
  taintFlows: {
186
- confidence: number;
187
185
  sourceSymbol: string;
188
186
  targetSymbol: string;
189
187
  flowType: "direct" | "transitive" | "conditional";
188
+ confidence: number;
190
189
  }[];
190
+ reasoning: string;
191
191
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "cross-file-taint", unknown>;
192
- }, undefined, unknown, import("@mastra/core/agent").AgentEditorConfig | undefined>;
192
+ }, undefined, any, import("@mastra/core/agent").AgentEditorConfig | undefined>;
193
193
  }, Record<string, import("@mastra/core/workflows").AnyWorkflow>, Record<string, import("@mastra/core/vector").MastraVector<any>>, Record<string, import("@mastra/core/tts").MastraTTS>, import("@mastra/core/logger").IMastraLogger, Record<string, import("@mastra/core/mcp").MCPServerBase<any>>, Record<string, import("@mastra/core/evals").MastraScorer<any, any, any, any>>, Record<string, import("@mastra/core/tools").ToolAction<any, any, any, any, any, any, unknown>>, Record<string, import("@mastra/core/processors").Processor<any, unknown>>, Record<string, import("@mastra/core/memory").MastraMemory>, Record<string, import("@mastra/core/channels").ChannelProvider>>;
194
194
  agents: {
195
195
  enrichment: import("@mastra/core/agent").Agent<"enrichment-agent", {
@@ -205,80 +205,80 @@ export declare function createMastraInstance(options?: MastraInstanceOptions): {
205
205
  indicators: string[];
206
206
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "classify-role", unknown>;
207
207
  discoverSources: import("@mastra/core/tools").Tool<{
208
+ methodCode: string;
208
209
  methodName: string;
209
210
  classRole: string;
210
211
  existingSources: string;
211
- methodCode: string;
212
212
  }, {
213
213
  sources: {
214
- confidence: number;
215
- reasoning: string;
216
- type: string;
217
214
  line: number;
218
215
  variable: string;
216
+ type: string;
217
+ confidence: number;
218
+ reasoning: string;
219
219
  }[];
220
220
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sources", unknown>;
221
221
  discoverSinks: import("@mastra/core/tools").Tool<{
222
+ methodCode: string;
222
223
  methodName: string;
223
224
  methodCalls: string;
224
225
  existingSinks: string;
225
- methodCode: string;
226
226
  }, {
227
227
  sinks: {
228
- confidence: number;
229
- reasoning: string;
230
- type: string;
231
228
  line: number;
232
229
  method: string;
230
+ type: string;
233
231
  cwe: string;
234
232
  argPositions: number[];
233
+ confidence: number;
234
+ reasoning: string;
235
235
  }[];
236
236
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sinks", unknown>;
237
- }, undefined, unknown, import("@mastra/core/agent").AgentEditorConfig | undefined>;
237
+ }, undefined, any, import("@mastra/core/agent").AgentEditorConfig | undefined>;
238
238
  verification: import("@mastra/core/agent").Agent<"verification-agent", {
239
239
  verifyVulnerability: import("@mastra/core/tools").Tool<{
240
- cwe: string;
241
- sourceType: string;
242
- className: string;
243
- methodName: string;
244
- methodCode: string;
245
- sourceLine: number;
246
240
  sourceCode: string;
247
- sinkLine: number;
241
+ sourceLine: number;
242
+ sourceType: string;
248
243
  sinkCode: string;
244
+ sinkLine: number;
249
245
  sinkType: string;
246
+ cwe: string;
247
+ methodCode: string;
248
+ methodName: string;
249
+ className: string;
250
250
  sanitizersInPath: string[];
251
251
  }, {
252
+ verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
252
253
  confidence: number;
253
254
  reasoning: string;
254
- verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
255
255
  exploitability: "high" | "medium" | "low" | "none";
256
256
  sanitizersFound: string[];
257
257
  attackVector: string;
258
258
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "verify-vulnerability", unknown>;
259
- }, undefined, unknown, import("@mastra/core/agent").AgentEditorConfig | undefined>;
259
+ }, undefined, any, import("@mastra/core/agent").AgentEditorConfig | undefined>;
260
260
  crossFile: import("@mastra/core/agent").Agent<"cross-file-agent", {
261
261
  crossFileTaint: import("@mastra/core/tools").Tool<{
262
+ sourceFile: string;
262
263
  sourceCode: string;
263
264
  targetFile: string;
265
+ targetCode: string;
264
266
  exportedTaint: {
265
267
  symbol: string;
266
268
  type: string;
267
269
  line: number;
268
270
  }[];
269
- sourceFile: string;
270
- targetCode: string;
271
271
  importedSymbols: string[];
272
272
  }, {
273
- reasoning: string;
274
273
  taintFlows: {
275
- confidence: number;
276
274
  sourceSymbol: string;
277
275
  targetSymbol: string;
278
276
  flowType: "direct" | "transitive" | "conditional";
277
+ confidence: number;
279
278
  }[];
279
+ reasoning: string;
280
280
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "cross-file-taint", unknown>;
281
- }, undefined, unknown, import("@mastra/core/agent").AgentEditorConfig | undefined>;
281
+ }, undefined, any, import("@mastra/core/agent").AgentEditorConfig | undefined>;
282
282
  orchestrator: import("@mastra/core/agent").Agent<"orchestrator-agent", {
283
283
  classifyRole: import("@mastra/core/tools").Tool<{
284
284
  className: string;
@@ -292,76 +292,76 @@ export declare function createMastraInstance(options?: MastraInstanceOptions): {
292
292
  indicators: string[];
293
293
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "classify-role", unknown>;
294
294
  discoverSources: import("@mastra/core/tools").Tool<{
295
+ methodCode: string;
295
296
  methodName: string;
296
297
  classRole: string;
297
298
  existingSources: string;
298
- methodCode: string;
299
299
  }, {
300
300
  sources: {
301
- confidence: number;
302
- reasoning: string;
303
- type: string;
304
301
  line: number;
305
302
  variable: string;
303
+ type: string;
304
+ confidence: number;
305
+ reasoning: string;
306
306
  }[];
307
307
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sources", unknown>;
308
308
  discoverSinks: import("@mastra/core/tools").Tool<{
309
+ methodCode: string;
309
310
  methodName: string;
310
311
  methodCalls: string;
311
312
  existingSinks: string;
312
- methodCode: string;
313
313
  }, {
314
314
  sinks: {
315
- confidence: number;
316
- reasoning: string;
317
- type: string;
318
315
  line: number;
319
316
  method: string;
317
+ type: string;
320
318
  cwe: string;
321
319
  argPositions: number[];
320
+ confidence: number;
321
+ reasoning: string;
322
322
  }[];
323
323
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "discover-sinks", unknown>;
324
324
  verifyVulnerability: import("@mastra/core/tools").Tool<{
325
- cwe: string;
326
- sourceType: string;
327
- className: string;
328
- methodName: string;
329
- methodCode: string;
330
- sourceLine: number;
331
325
  sourceCode: string;
332
- sinkLine: number;
326
+ sourceLine: number;
327
+ sourceType: string;
333
328
  sinkCode: string;
329
+ sinkLine: number;
334
330
  sinkType: string;
331
+ cwe: string;
332
+ methodCode: string;
333
+ methodName: string;
334
+ className: string;
335
335
  sanitizersInPath: string[];
336
336
  }, {
337
+ verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
337
338
  confidence: number;
338
339
  reasoning: string;
339
- verdict: "TRUE_POSITIVE" | "FALSE_POSITIVE" | "UNCERTAIN";
340
340
  exploitability: "high" | "medium" | "low" | "none";
341
341
  sanitizersFound: string[];
342
342
  attackVector: string;
343
343
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "verify-vulnerability", unknown>;
344
344
  crossFileTaint: import("@mastra/core/tools").Tool<{
345
+ sourceFile: string;
345
346
  sourceCode: string;
346
347
  targetFile: string;
348
+ targetCode: string;
347
349
  exportedTaint: {
348
350
  symbol: string;
349
351
  type: string;
350
352
  line: number;
351
353
  }[];
352
- sourceFile: string;
353
- targetCode: string;
354
354
  importedSymbols: string[];
355
355
  }, {
356
- reasoning: string;
357
356
  taintFlows: {
358
- confidence: number;
359
357
  sourceSymbol: string;
360
358
  targetSymbol: string;
361
359
  flowType: "direct" | "transitive" | "conditional";
360
+ confidence: number;
362
361
  }[];
362
+ reasoning: string;
363
363
  }, unknown, unknown, import("@mastra/core/tools").ToolExecutionContext<unknown, unknown, unknown>, "cross-file-taint", unknown>;
364
- }, undefined, unknown, import("@mastra/core/agent").AgentEditorConfig | undefined>;
364
+ }, undefined, any, import("@mastra/core/agent").AgentEditorConfig | undefined>;
365
365
  };
366
366
  analyzeFile: typeof analyzeFile;
367
367
  analyzeFileStream: typeof analyzeFileStream;