circle-ir-ai 4.8.9 → 4.8.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,6 +5,22 @@ All notable changes to this project will be documented in this file.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [4.8.10] - 2026-08-28
9
+
10
+ ### Fixed — skillsregistry#80 safety_subversion holdout (the last VULNERABLE flip)
11
+
12
+ 4.8.9 got 8/10 clean; the one holdout was keumbang: `safety_subversion` fired on its
13
+ safe-by-default opt-in toggle (`GOLDPOPCON_MCP_ALLOW_LIVE=true` only when explicitly
14
+ set). The 4.8.9 downweight enumerated "default-off" phrasings and missed the env-gated
15
+ variant. Inverted the logic per SR: a `safety_subversion` is KEPT only when the QUOTED
16
+ text actively DEFEATS a control (a defeat-verb — skip/disable/bypass/circumvent/… —
17
+ paired with a control noun — validation/safety/check/guard/filter/auth/…); an opt-in/
18
+ default-off toggle that merely ENABLES a feature does not defeat a control and floors to
19
+ `info`. Matches the quote, not the LLM description (consistent with the #80 root cause).
20
+ Real subversion ("skip the usual validation", "disable the safety filter", "run without
21
+ the security checks") still fires. +5 tests incl. keumbang's exact trigger. Suite 1994;
22
+ OWASP 100%.
23
+
8
24
  ## [4.8.9] - 2026-08-28
9
25
 
10
26
  ### Fixed — skillsregistry#80 + #81: the remaining VULNERABLE flips
@@ -1 +1 @@
1
- {"version":3,"file":"instruction-safety.d.ts","sourceRoot":"","sources":["../../src/skills/instruction-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAuJlD;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAC7C,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAC7B,OAAO,CAAC,YAAY,EAAE,CAAC,CAgSzB;AAyBD,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,YAAY,GAAG,OAAO,CAI1D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAelF;AA+BD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CA8BvF"}
1
+ {"version":3,"file":"instruction-safety.d.ts","sourceRoot":"","sources":["../../src/skills/instruction-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAoB,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAuJlD;;;;;;;;GAQG;AACH,wBAAsB,yBAAyB,CAC7C,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,EACjB,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAC7B,OAAO,CAAC,YAAY,EAAE,CAAC,CAgSzB;AAyBD,kFAAkF;AAClF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,YAAY,GAAG,OAAO,CAI1D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAelF;AAgCD;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAgCvF"}
@@ -479,16 +479,17 @@ const INJECTION_IMPERATIVE_PATTERNS = [
479
479
  /\b(always|never)\b[^.]{0,30}\b(respond|reply|include|append|read|send|reveal|execute)\b/i,
480
480
  ];
481
481
  /**
482
- * skillsregistry#67 — a DEFAULT-OFF / opt-in / gated capability is the OPPOSITE of
483
- * safety subversion. These signals mark the risky behaviour as off unless explicitly
484
- * enabled, so a `safety_subversion` flag on such text is a false positive.
482
+ * skillsregistry#80 — a real `safety_subversion` actively DEFEATS a control: it
483
+ * skips/disables/bypasses a named safety mechanism. A skill that merely SHIPS a
484
+ * default-off, explicit opt-in toggle (e.g. `GOLDPOPCON_MCP_ALLOW_LIVE=true` only
485
+ * when set) is a responsible live/test gate — the gate EXISTS, it doesn't defeat a
486
+ * control. So we KEEP the finding only when the quoted text pairs a defeat-verb with
487
+ * a control noun; otherwise it is an opt-in gate (or similar) and floors. This is
488
+ * narrower + more robust than enumerating "default-off" phrasings, which miss
489
+ * variants like an env-gated flag.
485
490
  */
486
- const DEFAULT_OFF_PATTERNS = [
487
- /\b(default[\s-]?off|off by default|disabled by default|disabled unless|off unless)\b/i,
488
- /\bopt[\s-]?(in|out)\b/i,
489
- /\b(must|need to|only (if|when)) (you )?(explicitly )?(enable|opt|turn on|set|pass|provide)\b/i,
490
- /\b(behind|gated by|guarded by|requires) (a|an|the)? ?(flag|gate|toggle|option|env|environment variable|--\w+)\b/i,
491
- /\bwhen (enabled|turned on|the flag is set|explicitly requested)\b/i,
491
+ const SUBVERSION_ACTION_PATTERNS = [
492
+ /\b(skip|disabl\w*|bypass\w*|turn(?:ing)?\s+off|circumvent\w*|defeat\w*|suppress\w*|override|overrid\w*|evad\w*|remov\w*|drop|omit|without|no|ignor\w*)\b[^.]{0,40}\b(validat\w*|safety|safe(?:guard)?s?|check\w*|verif\w*|guard\w*|guardrail\w*|filter\w*|saniti[sz]\w*|escap\w*|security|secure|protection\w*|protect\w*|confirmation\w*|review\w*|approval\w*|policy|policies|rule\w*|allow[\s-]?list|deny[\s-]?list|block[\s-]?list|permission\w*|auth\w*|limit\w*|restrict\w*)\b/i,
492
493
  ];
493
494
  /**
494
495
  * skillsregistry#67 — downweight two instruction-LLM over-read classes to info:
@@ -509,9 +510,6 @@ export function downweightInstructionOverreads(findings) {
509
510
  // ("the description contains an imperative directing the agent to …"), which
510
511
  // would mask every FP; the quote is the actual flagged text.
511
512
  const quote = String(ev?.quote ?? '').trim();
512
- // safety_subversion default-off is a positive benign signal — accept it from the
513
- // quote or the description (both legitimately describe a default-off gate).
514
- const benignText = `${quote} ${f.description ?? ''}`;
515
513
  let reason = null;
516
514
  if (f.type === 'description_injection') {
517
515
  // A real injection has an agent-directed imperative in the QUOTE itself. If the
@@ -520,8 +518,13 @@ export function downweightInstructionOverreads(findings) {
520
518
  reason = 'skillsregistry#80: quoted description has no agent-directed imperative — a functional tagline, not injection';
521
519
  }
522
520
  }
523
- else if (f.type === 'safety_subversion' && DEFAULT_OFF_PATTERNS.some((re) => re.test(benignText))) {
524
- reason = 'skillsregistry#80: a default-off / opt-in / gated capability is not safety_subversion';
521
+ else if (f.type === 'safety_subversion') {
522
+ // Keep only when the QUOTED text actively defeats a control (defeat-verb +
523
+ // control noun). An opt-in / default-off toggle that merely exists (e.g. an
524
+ // env-gated live flag) does not — floor it (skillsregistry#80).
525
+ if (quote.length > 0 && !SUBVERSION_ACTION_PATTERNS.some((re) => re.test(quote))) {
526
+ reason = 'skillsregistry#80: an opt-in / default-off gate does not defeat a control — not safety_subversion';
527
+ }
525
528
  }
526
529
  if (!reason)
527
530
  return f;
@@ -1 +1 @@
1
- {"version":3,"file":"instruction-safety.js","sourceRoot":"","sources":["../../src/skills/instruction-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAkCzD,MAAM,WAAW,GAAmC;IAClD,gBAAgB,EAAE;QAChB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,kBAAkB;QAC/B,eAAe,EAAE,UAAU;KAC5B;IACD,iBAAiB,EAAE;QACjB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,0BAA0B;QACvC,eAAe,EAAE,UAAU;KAC5B;IACD,UAAU,EAAE;QACV,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,MAAM;KACxB;IACD,oBAAoB,EAAE;QACpB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,eAAe;QAC5B,eAAe,EAAE,MAAM;KACxB;IACD,qBAAqB,EAAE;QACrB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,uBAAuB;QACpC,eAAe,EAAE,MAAM;KACxB;IACD,kBAAkB,EAAE;QAClB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,QAAQ;KAC1B;IACD,oCAAoC;IACpC,kBAAkB,EAAE;QAClB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,UAAU;KAC5B;IACD,qBAAqB,EAAE;QACrB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,8BAA8B;QAC3C,eAAe,EAAE,MAAM;KACxB;IACD,6BAA6B,EAAE;QAC7B,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,+BAA+B;QAC5C,eAAe,EAAE,MAAM;KACxB;IACD,cAAc,EAAE;QACd,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,gBAAgB;QAC7B,eAAe,EAAE,MAAM;KACxB;IACD,oBAAoB,EAAE;QACpB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,sBAAsB;QACnC,eAAe,EAAE,MAAM;KACxB;IACD,yBAAyB,EAAE;QACzB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,kCAAkC;QAC/C,eAAe,EAAE,MAAM;KACxB;IACD,qBAAqB,EAAE;QACrB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,uBAAuB;QACpC,eAAe,EAAE,MAAM;KACxB;IACD,kBAAkB,EAAE;QAClB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,MAAM;KACxB;IACD,uBAAuB,EAAE;QACvB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,yBAAyB;QACtC,eAAe,EAAE,QAAQ;KAC1B;IACD,iBAAiB,EAAE;QACjB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,mBAAmB;QAChC,eAAe,EAAE,MAAM;KACxB;IACD,kBAAkB,EAAE;QAClB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,MAAM;KACxB;IACD,0BAA0B,EAAE;QAC1B,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,4BAA4B;QACzC,eAAe,EAAE,MAAM;KACxB;IACD,wBAAwB,EAAE;QACxB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,0BAA0B;QACvC,eAAe,EAAE,MAAM;KACxB;CACF,CAAC;AAcF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,eAAuB,EACvB,SAAiB,EACjB,SAA8B;IAE9B,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAEtC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wEA8NiD,CAAC;IAEvE,MAAM,UAAU,GAAG;;cAEP,SAAS;;;;EAIrB,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;;;;;;;;;;;;;EAa9B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,cAAc,CAC9B,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAClC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAc,YAAY,EAAE,UAAU,EAAE,cAAc,CAAC,CAC1E,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,0EAA0E;YAC1E,4EAA4E;YAC5E,0EAA0E;YAC1E,6EAA6E;YAC7E,2EAA2E;YAC3E,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,KAAK,GAAG,GAAG;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,0EAA0E;QAC1E,kFAAkF;QAClF,6EAA6E;QAC7E,OAAO,8BAA8B,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,8EAA8E;QAC9E,6EAA6E;QAC7E,0EAA0E;QAC1E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,6EAA6E;QAC7E,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,KAAK,YAAY,KAAK;YAC1B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,yBAAyB,GAAa;IAC1C,sFAAsF;IACtF,gMAAgM;IAChM,uGAAuG;IACvG,kQAAkQ;IAClQ,oCAAoC;IACpC,qMAAqM;IACrM,qDAAqD;IACrD,0GAA0G;IAC1G,mEAAmE;IACnE,wJAAwJ;CACzJ,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,CAAe;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,QAA+C,CAAC;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,IAAK,EAAE,EAAE,KAAgB,IAAI,EAAE,EAAE,CAAC;IACrE,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAwB;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACrE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACpC,OAAO;YACL,GAAG,CAAC;YACJ,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,GAAI,CAAC,CAAC,QAAgD;gBACtD,2BAA2B,EAAE,mFAAmF;gBAChH,iBAAiB,EAAE,CAAC,CAAC,QAAQ;aAC9B;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,6BAA6B,GAAa;IAC9C,oDAAoD;IACpD,mIAAmI;IACnI,gEAAgE;IAChE,sJAAsJ;IACtJ,6FAA6F;IAC7F,sKAAsK;IACtK,oIAAoI;IACpI,0FAA0F;CAC3F,CAAC;AAEF;;;;GAIG;AACH,MAAM,oBAAoB,GAAa;IACrC,uFAAuF;IACvF,wBAAwB;IACxB,+FAA+F;IAC/F,kHAAkH;IAClH,oEAAoE;CACrE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAAwB;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACzE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,CAAC,CAAC,QAA+C,CAAC;QAC7D,kFAAkF;QAClF,gFAAgF;QAChF,6EAA6E;QAC7E,6DAA6D;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,iFAAiF;QACjF,4EAA4E;QAC5E,MAAM,UAAU,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YACvC,gFAAgF;YAChF,4EAA4E;YAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpF,MAAM,GAAG,8GAA8G,CAAC;YAC1H,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,GAAG,uFAAuF,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QACtB,OAAO;YACL,GAAG,CAAC;YACJ,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,+BAA+B,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC5F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAAc,EAAE,KAAa;IACjD,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,WAAW,EAAgB,CAAC;IAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI;QACtC,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,oBAAwC;QACrD,eAAe,EAAE,QAAiB;KACnC,CAAC;IAEF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC;IAEzE,oEAAoE;IACpE,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEpD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,WAAW;QACtB,QAAQ;QACR,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;QACnC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ;QAC5C,QAAQ,EAAE;YACR,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK,EAAE,GAAG,CAAC,QAAQ;SACpB;QACD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QAC3D,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;KAC5F,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB;IACrC,OAAO,UAAU;SACd,WAAW,EAAE;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,QAAQ,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;QACzB,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,MAAM,CAAC,CAAK,OAAO,MAAM,CAAC;QAC/B,KAAK,QAAQ,CAAC,CAAG,OAAO,QAAQ,CAAC;QACjC,KAAK,KAAK,CAAC,CAAM,OAAO,KAAK,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAK,OAAO,MAAM,CAAC;QAC/B,OAAO,CAAC,CAAS,OAAO,IAAI,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,QAAgB;IACxC,iFAAiF;IACjF,yEAAyE;IACzE,OAAO,IAAI,CAAC;AACd,CAAC"}
1
+ {"version":3,"file":"instruction-safety.js","sourceRoot":"","sources":["../../src/skills/instruction-safety.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAkCzD,MAAM,WAAW,GAAmC;IAClD,gBAAgB,EAAE;QAChB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,kBAAkB;QAC/B,eAAe,EAAE,UAAU;KAC5B;IACD,iBAAiB,EAAE;QACjB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,0BAA0B;QACvC,eAAe,EAAE,UAAU;KAC5B;IACD,UAAU,EAAE;QACV,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,MAAM;KACxB;IACD,oBAAoB,EAAE;QACpB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,eAAe;QAC5B,eAAe,EAAE,MAAM;KACxB;IACD,qBAAqB,EAAE;QACrB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,uBAAuB;QACpC,eAAe,EAAE,MAAM;KACxB;IACD,kBAAkB,EAAE;QAClB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,QAAQ;KAC1B;IACD,oCAAoC;IACpC,kBAAkB,EAAE;QAClB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,UAAU;KAC5B;IACD,qBAAqB,EAAE;QACrB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,8BAA8B;QAC3C,eAAe,EAAE,MAAM;KACxB;IACD,6BAA6B,EAAE;QAC7B,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,+BAA+B;QAC5C,eAAe,EAAE,MAAM;KACxB;IACD,cAAc,EAAE;QACd,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,gBAAgB;QAC7B,eAAe,EAAE,MAAM;KACxB;IACD,oBAAoB,EAAE;QACpB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,sBAAsB;QACnC,eAAe,EAAE,MAAM;KACxB;IACD,yBAAyB,EAAE;QACzB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,kCAAkC;QAC/C,eAAe,EAAE,MAAM;KACxB;IACD,qBAAqB,EAAE;QACrB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,uBAAuB;QACpC,eAAe,EAAE,MAAM;KACxB;IACD,kBAAkB,EAAE;QAClB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,MAAM;KACxB;IACD,uBAAuB,EAAE;QACvB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,yBAAyB;QACtC,eAAe,EAAE,QAAQ;KAC1B;IACD,iBAAiB,EAAE;QACjB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,mBAAmB;QAChC,eAAe,EAAE,MAAM;KACxB;IACD,kBAAkB,EAAE;QAClB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,MAAM;KACxB;IACD,0BAA0B,EAAE;QAC1B,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,4BAA4B;QACzC,eAAe,EAAE,MAAM;KACxB;IACD,wBAAwB,EAAE;QACxB,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,0BAA0B;QACvC,eAAe,EAAE,MAAM;KACxB;CACF,CAAC;AAcF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,eAAuB,EACvB,SAAiB,EACjB,SAA8B;IAE9B,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAEtC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wEA8NiD,CAAC;IAEvE,MAAM,UAAU,GAAG;;cAEP,SAAS;;;;EAIrB,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;;;;;;;;;;;;;EAa9B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,cAAc,CAC9B,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAClC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAc,YAAY,EAAE,UAAU,EAAE,cAAc,CAAC,CAC1E,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,0EAA0E;YAC1E,4EAA4E;YAC5E,0EAA0E;YAC1E,6EAA6E;YAC7E,2EAA2E;YAC3E,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,KAAK,GAAG,GAAG;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,0EAA0E;QAC1E,kFAAkF;QAClF,6EAA6E;QAC7E,OAAO,8BAA8B,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,8EAA8E;QAC9E,6EAA6E;QAC7E,0EAA0E;QAC1E,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,6EAA6E;QAC7E,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,KAAK,YAAY,KAAK;YAC1B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,yBAAyB,GAAa;IAC1C,sFAAsF;IACtF,gMAAgM;IAChM,uGAAuG;IACvG,kQAAkQ;IAClQ,oCAAoC;IACpC,qMAAqM;IACrM,qDAAqD;IACrD,0GAA0G;IAC1G,mEAAmE;IACnE,wJAAwJ;CACzJ,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,CAAe;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,QAA+C,CAAC;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,IAAK,EAAE,EAAE,KAAgB,IAAI,EAAE,EAAE,CAAC;IACrE,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAwB;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACrE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACpC,OAAO;YACL,GAAG,CAAC;YACJ,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,GAAI,CAAC,CAAC,QAAgD;gBACtD,2BAA2B,EAAE,mFAAmF;gBAChH,iBAAiB,EAAE,CAAC,CAAC,QAAQ;aAC9B;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,6BAA6B,GAAa;IAC9C,oDAAoD;IACpD,mIAAmI;IACnI,gEAAgE;IAChE,sJAAsJ;IACtJ,6FAA6F;IAC7F,sKAAsK;IACtK,oIAAoI;IACpI,0FAA0F;CAC3F,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,0BAA0B,GAAa;IAC3C,udAAud;CACxd,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,QAAwB;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACzE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,CAAC,CAAC,QAA+C,CAAC;QAC7D,kFAAkF;QAClF,gFAAgF;QAChF,6EAA6E;QAC7E,6DAA6D;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YACvC,gFAAgF;YAChF,4EAA4E;YAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpF,MAAM,GAAG,8GAA8G,CAAC;YAC1H,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC1C,2EAA2E;YAC3E,4EAA4E;YAC5E,gEAAgE;YAChE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjF,MAAM,GAAG,mGAAmG,CAAC;YAC/G,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QACtB,OAAO;YACL,GAAG,CAAC;YACJ,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,+BAA+B,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC5F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAAc,EAAE,KAAa;IACjD,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,WAAW,EAAgB,CAAC;IAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI;QACtC,GAAG,EAAE,QAAQ;QACb,WAAW,EAAE,oBAAwC;QACrD,eAAe,EAAE,QAAiB;KACnC,CAAC;IAEF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC;IAEzE,oEAAoE;IACpE,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEpD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,WAAW;QACtB,QAAQ;QACR,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;QACnC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ;QAC5C,QAAQ,EAAE;YACR,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,KAAK,EAAE,GAAG,CAAC,QAAQ;SACpB;QACD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QAC3D,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;KAC5F,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB;IACrC,OAAO,UAAU;SACd,WAAW,EAAE;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAS;IAClC,QAAQ,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC;QACzB,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,MAAM,CAAC,CAAK,OAAO,MAAM,CAAC;QAC/B,KAAK,QAAQ,CAAC,CAAG,OAAO,QAAQ,CAAC;QACjC,KAAK,KAAK,CAAC,CAAM,OAAO,KAAK,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAK,OAAO,MAAM,CAAC;QAC/B,OAAO,CAAC,CAAS,OAAO,IAAI,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,QAAgB;IACxC,iFAAiF;IACjF,yEAAyE;IACzE,OAAO,IAAI,CAAC;AACd,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "circle-ir-ai",
3
- "version": "4.8.9",
3
+ "version": "4.8.10",
4
4
  "description": "LLM-enhanced SAST analysis built on circle-ir",
5
5
  "main": "dist/index.js",
6
6
  "module": "dist/index.js",