circle-ir 3.168.0 → 3.174.0

package/dist/browser/circle-ir.js

@@ -7497,33 +7497,33 @@ function detectLanguage2(tree) {
   if (pythonScore > jsScore && pythonScore > javaScore) return "python";
   return jsScore > javaScore ? "javascript" : "java";
 }
-function extractImports(tree, language) {
+function extractImports(tree, language, cache) {
   const effectiveLanguage = language ?? detectLanguage2(tree);
   const isJavaScript = effectiveLanguage === "javascript" || effectiveLanguage === "typescript" || effectiveLanguage === "tsx";
   const isPython = effectiveLanguage === "python";
   const isRust = effectiveLanguage === "rust";
   if (effectiveLanguage === "go") {
-    return extractGoImports(tree);
+    return extractGoImports(tree, cache);
   }
   if (isRust) {
-    return extractRustImports(tree);
+    return extractRustImports(tree, cache);
   }
   if (isPython) {
-    return extractPythonImports(tree);
+    return extractPythonImports(tree, cache);
   }
   if (isJavaScript) {
-    return extractJavaScriptImports(tree);
+    return extractJavaScriptImports(tree, cache);
   }
-  return extractJavaImports(tree);
+  return extractJavaImports(tree, cache);
 }
-function extractJavaScriptImports(tree) {
+function extractJavaScriptImports(tree, cache) {
   const imports = [];
-  const importStatements = findNodes(tree.rootNode, "import_statement");
+  const importStatements = getNodesFromCache(tree.rootNode, "import_statement", cache);
   for (const importStmt of importStatements) {
     const importInfos = extractJSImportInfo(importStmt);
     imports.push(...importInfos);
   }
-  const exportStatements = findNodes(tree.rootNode, "export_statement");
+  const exportStatements = getNodesFromCache(tree.rootNode, "export_statement", cache);
   for (const exportStmt of exportStatements) {
     const sourceNode = exportStmt.childForFieldName("source");
     if (!sourceNode) continue;
@@ -7537,13 +7537,13 @@ function extractJavaScriptImports(tree) {
       line_number: exportStmt.startPosition.row + 1
     });
   }
-  const requireCalls = findRequireCalls(tree);
+  const requireCalls = findRequireCalls(tree, cache);
   imports.push(...requireCalls);
   return imports;
 }
-function extractJavaImports(tree) {
+function extractJavaImports(tree, cache) {
   const imports = [];
-  const importDecls = findNodes(tree.rootNode, "import_declaration");
+  const importDecls = getNodesFromCache(tree.rootNode, "import_declaration", cache);
   for (const importDecl of importDecls) {
     const importInfo = extractJavaImportInfo(importDecl);
     if (importInfo) {
@@ -7691,9 +7691,9 @@ function extractJSImportInfo(node) {
   }
   return imports;
 }
-function findRequireCalls(tree) {
+function findRequireCalls(tree, cache) {
   const imports = [];
-  const callExpressions = findNodes(tree.rootNode, "call_expression");
+  const callExpressions = getNodesFromCache(tree.rootNode, "call_expression", cache);
   for (const call of callExpressions) {
     const funcNode = call.childForFieldName("function");
     if (!funcNode || getNodeText(funcNode) !== "require") continue;
@@ -7807,14 +7807,14 @@ function parseImportPath(fullPath, isWildcard) {
     fromPackage: fullPath.substring(0, lastDot)
   };
 }
-function extractPythonImports(tree) {
+function extractPythonImports(tree, cache) {
   const imports = [];
-  const importStatements = findNodes(tree.rootNode, "import_statement");
+  const importStatements = getNodesFromCache(tree.rootNode, "import_statement", cache);
   for (const stmt of importStatements) {
     const importInfos = extractPythonImportStatement(stmt);
     imports.push(...importInfos);
   }
-  const importFromStatements = findNodes(tree.rootNode, "import_from_statement");
+  const importFromStatements = getNodesFromCache(tree.rootNode, "import_from_statement", cache);
   for (const stmt of importFromStatements) {
     const importInfos = extractPythonFromImportStatement(stmt);
     imports.push(...importInfos);
@@ -7908,9 +7908,9 @@ function extractPythonFromImportStatement(node) {
   }
   return imports;
 }
-function extractRustImports(tree) {
+function extractRustImports(tree, cache) {
   const imports = [];
-  const useDecls = findNodes(tree.rootNode, "use_declaration");
+  const useDecls = getNodesFromCache(tree.rootNode, "use_declaration", cache);
   for (const useDecl of useDecls) {
     const useImports = extractRustUseDecl(useDecl);
     imports.push(...useImports);
@@ -8052,9 +8052,9 @@ function extractRustScopedUseList(node, lineNumber) {
   }
   return imports;
 }
-function extractGoImports(tree) {
+function extractGoImports(tree, cache) {
   const imports = [];
-  const importDecls = findNodes(tree.rootNode, "import_declaration");
+  const importDecls = getNodesFromCache(tree.rootNode, "import_declaration", cache);
   for (const decl of importDecls) {
     const singleSpec = findGoChildByType(decl, "import_spec");
     if (singleSpec) {
@@ -8189,7 +8189,7 @@ function detectLanguage3(tree) {
   }
   return jsScore > javaScore ? "javascript" : "java";
 }
-function buildCFG(tree, language) {
+function buildCFG(tree, language, cache) {
   const effectiveLanguage = language ?? detectLanguage3(tree);
   const isJavaScript = effectiveLanguage === "javascript" || effectiveLanguage === "typescript" || effectiveLanguage === "tsx";
   const allBlocks = [];
@@ -8203,11 +8203,11 @@ function buildCFG(tree, language) {
   }
   if (isJavaScript) {
     const functions = [
-      ...findNodes(tree.rootNode, "function_declaration"),
-      ...findNodes(tree.rootNode, "arrow_function"),
-      ...findNodes(tree.rootNode, "method_definition"),
-      ...findNodes(tree.rootNode, "function"),
-      ...findNodes(tree.rootNode, "function_expression")
+      ...getNodesFromCache(tree.rootNode, "function_declaration", cache),
+      ...getNodesFromCache(tree.rootNode, "arrow_function", cache),
+      ...getNodesFromCache(tree.rootNode, "method_definition", cache),
+      ...getNodesFromCache(tree.rootNode, "function", cache),
+      ...getNodesFromCache(tree.rootNode, "function_expression", cache)
     ];
     for (const func2 of functions) {
       const body2 = func2.childForFieldName("body");
@@ -8229,8 +8229,8 @@ function buildCFG(tree, language) {
     }
   } else {
     const methods = [
-      ...findNodes(tree.rootNode, "method_declaration"),
-      ...findNodes(tree.rootNode, "constructor_declaration")
+      ...getNodesFromCache(tree.rootNode, "method_declaration", cache),
+      ...getNodesFromCache(tree.rootNode, "constructor_declaration", cache)
     ];
     for (const method of methods) {
       const body2 = method.childForFieldName("body");
@@ -11134,7 +11134,86 @@ var DEFAULT_SOURCES = [
   { method: "recv", class: "TcpStream", type: "network_input", severity: "high", return_tainted: true },
   { method: "read", class: "TcpStream", type: "network_input", severity: "high", return_tainted: true },
   { method: "read_to_end", class: "TcpStream", type: "network_input", severity: "high", return_tainted: true },
-  { method: "read_to_string", class: "TcpStream", type: "network_input", severity: "high", return_tainted: true }
+  { method: "read_to_string", class: "TcpStream", type: "network_input", severity: "high", return_tainted: true },
+  // =========================================================================
+  // Modern taint sources (cognium-dev #242 — 3.170.0)
+  // GraphQL resolver args, gRPC request metadata, cache reads (second-order
+  // taint), and JWT claims (unverified decode). These attacker-influenced
+  // surfaces were previously silent — a resolver that concatenated an
+  // `Args`-annotated field into a SQL string produced zero flows.
+  // =========================================================================
+  // --- GraphQL resolver argument sources (JS / TS — Apollo, TypeGraphQL, NestJS) ---
+  // TypeGraphQL / NestJS annotate query/mutation/subscription methods; every
+  // parameter on the annotated method carries attacker input from the GraphQL
+  // POST body's `variables` field.
+  { method_annotation: "Query", type: "http_body", severity: "high", languages: ["javascript", "typescript"] },
+  { method_annotation: "Mutation", type: "http_body", severity: "high", languages: ["javascript", "typescript"] },
+  { method_annotation: "Subscription", type: "http_body", severity: "high", languages: ["javascript", "typescript"] },
+  { method_annotation: "FieldResolver", type: "http_body", severity: "high", languages: ["javascript", "typescript"] },
+  { method_annotation: "ResolveField", type: "http_body", severity: "high", languages: ["javascript", "typescript"] },
+  // Parameter-level: `@Arg('id') id: string`, `@Args('input') input: FooDto`.
+  { annotation: "Arg", type: "http_param", severity: "high", param_tainted: true, languages: ["javascript", "typescript"] },
+  { annotation: "Args", type: "http_param", severity: "high", param_tainted: true, languages: ["javascript", "typescript"] },
+  // --- GraphQL resolver argument sources (Python — Strawberry, Graphene, Ariadne) ---
+  { method_annotation: "strawberry.field", type: "http_body", severity: "high", languages: ["python"] },
+  { method_annotation: "strawberry.mutation", type: "http_body", severity: "high", languages: ["python"] },
+  { method_annotation: "strawberry.subscription", type: "http_body", severity: "high", languages: ["python"] },
+  // --- GraphQL resolver argument sources (Java — Netflix DGS, SPQR, graphql-java-annotations) ---
+  { method_annotation: "DgsQuery", type: "http_body", severity: "high", languages: ["java"] },
+  { method_annotation: "DgsMutation", type: "http_body", severity: "high", languages: ["java"] },
+  { method_annotation: "DgsSubscription", type: "http_body", severity: "high", languages: ["java"] },
+  { method_annotation: "DgsData", type: "http_body", severity: "high", languages: ["java"] },
+  { method_annotation: "GraphQLQuery", type: "http_body", severity: "high", languages: ["java"] },
+  { method_annotation: "GraphQLMutation", type: "http_body", severity: "high", languages: ["java"] },
+  { annotation: "InputArgument", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  { annotation: "GraphQLArgument", type: "http_param", severity: "high", param_tainted: true, languages: ["java"] },
+  // --- gRPC request metadata (Python — grpcio) ---
+  // `context.invocation_metadata()` returns the caller-supplied metadata tuple.
+  // No `class` filter — receiver names vary (`context`, `ctx`, `servicer_context`).
+  { method: "invocation_metadata", type: "http_header", severity: "high", return_tainted: true, languages: ["python"] },
+  // --- gRPC request metadata (JS / TS — @grpc/grpc-js) ---
+  // `call.metadata.get(key)` / `call.metadata.getMap()` inside a service handler.
+  { method: "get", class: "Metadata", type: "http_header", severity: "high", return_tainted: true, languages: ["javascript", "typescript"] },
+  { method: "getMap", class: "Metadata", type: "http_header", severity: "high", return_tainted: true, languages: ["javascript", "typescript"] },
+  // --- gRPC request metadata (Go — google.golang.org/grpc/metadata) ---
+  // `md, _ := metadata.FromIncomingContext(ctx)` pulls the caller's headers.
+  { method: "FromIncomingContext", class: "metadata", type: "http_header", severity: "high", return_tainted: true, languages: ["go"] },
+  // --- gRPC request metadata (Java — io.grpc.Metadata) ---
+  // Server-side interceptor receives `Metadata headers`; `headers.get(KEY)`
+  // returns caller-supplied header values.
+  { method: "get", class: "Metadata", type: "http_header", severity: "high", return_tainted: true, languages: ["java"] },
+  // --- Cache reads (second-order taint — Redis / Memcached / Django cache) ---
+  // The cache round-trip is a canonical second-order sink: whatever was
+  // written previously (potentially attacker-controlled) resurfaces on read.
+  // Severity 'medium' — cache contents are usually filtered by the writer but
+  // the read side often forgets that guarantee. Class-scoped to `Redis`,
+  // `Jedis`, `cache` to avoid colliding with generic `Map.get()`.
+  { method: "get", class: "Redis", type: "db_input", severity: "medium", return_tainted: true, languages: ["python"] },
+  { method: "hget", class: "Redis", type: "db_input", severity: "medium", return_tainted: true, languages: ["python"] },
+  { method: "mget", class: "Redis", type: "db_input", severity: "medium", return_tainted: true, languages: ["python"] },
+  { method: "lrange", class: "Redis", type: "db_input", severity: "medium", return_tainted: true, languages: ["python"] },
+  { method: "get", class: "cache", type: "db_input", severity: "medium", return_tainted: true, languages: ["python"] },
+  { method: "get_many", class: "cache", type: "db_input", severity: "medium", return_tainted: true, languages: ["python"] },
+  { method: "get", class: "Redis", type: "db_input", severity: "medium", return_tainted: true, languages: ["javascript", "typescript"] },
+  { method: "hget", class: "Redis", type: "db_input", severity: "medium", return_tainted: true, languages: ["javascript", "typescript"] },
+  { method: "mget", class: "Redis", type: "db_input", severity: "medium", return_tainted: true, languages: ["javascript", "typescript"] },
+  { method: "get", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
+  { method: "hget", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
+  { method: "mget", class: "Jedis", type: "db_input", severity: "medium", return_tainted: true, languages: ["java"] },
+  // --- JWT claims (unverified decode — PyJWT / jose / jsonwebtoken / auth0 java-jwt / golang-jwt) ---
+  // A JWT's payload is *always* attacker-authored. Even after verification
+  // the *contents* of the claims (username, role, custom fields) are not
+  // trusted for downstream flows into SQL, HTML, shell, etc. The `decode`
+  // variants here return the parsed claims dictionary/object.
+  { method: "decode", class: "jwt", type: "http_header", severity: "high", return_tainted: true, languages: ["python"] },
+  { method: "get_unverified_claims", class: "jwt", type: "http_header", severity: "high", return_tainted: true, languages: ["python"] },
+  { method: "get_unverified_header", class: "jwt", type: "http_header", severity: "high", return_tainted: true, languages: ["python"] },
+  { method: "decode", class: "jwt", type: "http_header", severity: "high", return_tainted: true, languages: ["javascript", "typescript"] },
+  { method: "decode", class: "jsonwebtoken", type: "http_header", severity: "high", return_tainted: true, languages: ["javascript", "typescript"] },
+  { method: "decodeJwt", class: "jose", type: "http_header", severity: "high", return_tainted: true, languages: ["javascript", "typescript"] },
+  { method: "decodeProtectedHeader", class: "jose", type: "http_header", severity: "high", return_tainted: true, languages: ["javascript", "typescript"] },
+  { method: "decode", class: "JWT", type: "http_header", severity: "high", return_tainted: true, languages: ["java"] },
+  { method: "ParseUnverified", class: "jwt", type: "http_header", severity: "high", return_tainted: true, languages: ["go"] }
 ];
 var DEFAULT_SINKS = [
   // SQL Injection (CWE-89)
@@ -12703,7 +12782,85 @@ var DEFAULT_SINKS = [
   // they iterate after net/http entries and don't hijack `http.Get`.
   { method: "Do", class: "Client", type: "ssrf", cwe: "CWE-918", severity: "high", arg_positions: [0], languages: ["go"] },
   // *fasthttp.Client.Do(req)
-  { method: "DoTimeout", class: "Client", type: "ssrf", cwe: "CWE-918", severity: "high", arg_positions: [0], languages: ["go"] }
+  { method: "DoTimeout", class: "Client", type: "ssrf", cwe: "CWE-918", severity: "high", arg_positions: [0], languages: ["go"] },
+  // =========================================================================
+  // cognium-dev #248 — prompt-injection sinks (CWE-1427)
+  //
+  // Tainted data reaching a generative-model prompt-construction API is
+  // classified as `prompt_injection`. v1 uses broad positional matching
+  // (arg_positions [0..3]) because these APIs are kwarg-heavy: Python
+  // `openai.chat.completions.create(model=..., messages=...)` may pass the
+  // messages arg at position 0 or 1 depending on caller order, and JS/TS
+  // object-literal `{ messages: [...], model: '...' }` is a single
+  // positional arg whose taint is inherited from any tainted property.
+  // Argname-precise matching (messages=/prompt=/content=) and
+  // sanitizer credit for prompt-template libraries (PromptTemplate,
+  // ChatPromptTemplate) are follow-ups.
+  //
+  // Class-qualified entries prevent bare `create()` / `generate()` calls
+  // with no receiver from matching (per taint-matcher.ts:1696 guard).
+  // =========================================================================
+  // --- Python: openai (v1 SDK) --------------------------------------------
+  { method: "create", class: "Completions", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "create", class: "Responses", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  // openai <1.0 legacy top-level API — `openai.ChatCompletion.create(...)` / `openai.Completion.create(...)`
+  { method: "create", class: "ChatCompletion", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "create", class: "Completion", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  // --- Python: anthropic ---------------------------------------------------
+  { method: "create", class: "Messages", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "stream", class: "Messages", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  // --- Python: litellm (bare functions from the litellm module) -----------
+  { method: "completion", class: "litellm", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "acompletion", class: "litellm", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  // --- Python: langchain chat/llm models ----------------------------------
+  // Common concrete classes; matching the class name catches typical usage
+  // `ChatOpenAI().invoke(prompt)` where the receiver-type resolver identifies
+  // the class from the constructor.
+  { method: "invoke", class: "ChatOpenAI", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "predict", class: "ChatOpenAI", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "stream", class: "ChatOpenAI", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "generate", class: "ChatOpenAI", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "invoke", class: "ChatAnthropic", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "invoke", class: "ChatGoogleGenerativeAI", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "run", class: "LLMChain", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  { method: "invoke", class: "LLMChain", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["python"] },
+  // --- JS/TS: openai node SDK ---------------------------------------------
+  { method: "create", class: "Completions", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["javascript", "typescript"] },
+  { method: "create", class: "Responses", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["javascript", "typescript"] },
+  // --- JS/TS: @anthropic-ai/sdk -------------------------------------------
+  { method: "create", class: "Messages", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["javascript", "typescript"] },
+  { method: "stream", class: "Messages", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["javascript", "typescript"] },
+  // --- JS/TS: Vercel AI SDK (bare functions from the `ai` package) --------
+  // generateText/streamText/generateObject take a single options object;
+  // taint reaches the sink when a tainted variable flows into any property.
+  { method: "generateText", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "streamText", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "generateObject", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  { method: "streamObject", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0], languages: ["javascript", "typescript"] },
+  // --- JS/TS: langchain.js ------------------------------------------------
+  { method: "invoke", class: "ChatOpenAI", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["javascript", "typescript"] },
+  { method: "invoke", class: "ChatAnthropic", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["javascript", "typescript"] },
+  { method: "stream", class: "ChatOpenAI", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["javascript", "typescript"] },
+  // --- Java: LangChain4j --------------------------------------------------
+  { method: "generate", class: "ChatLanguageModel", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  { method: "chat", class: "ChatLanguageModel", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  { method: "generate", class: "StreamingChatLanguageModel", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  { method: "chat", class: "StreamingChatLanguageModel", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  // --- Java: Spring AI ----------------------------------------------------
+  { method: "prompt", class: "ChatClient", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  { method: "call", class: "ChatClient", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  { method: "call", class: "ChatModel", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  // --- Java: OpenAI Java SDK (theokanning) --------------------------------
+  { method: "createChatCompletion", class: "OpenAiService", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  { method: "createCompletion", class: "OpenAiService", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["java"] },
+  // --- Go: go-openai (sashabaranov/go-openai) -----------------------------
+  { method: "CreateChatCompletion", class: "Client", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["go"] },
+  { method: "CreateCompletion", class: "Client", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["go"] },
+  { method: "CreateChatCompletionStream", class: "Client", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["go"] },
+  // --- Go: langchaingo ----------------------------------------------------
+  { method: "Call", class: "LLM", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["go"] },
+  { method: "Generate", class: "LLM", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["go"] },
+  { method: "GenerateContent", class: "Model", type: "prompt_injection", cwe: "CWE-1427", severity: "high", arg_positions: [0, 1, 2, 3], languages: ["go"] }
 ];
 var DEFAULT_SANITIZERS = [
   // SQL Injection - proper parameter binding sanitizes input
@@ -13274,6 +13431,9 @@ function findSources(calls, types, patterns, sourceLines, language) {
       for (const param of method.parameters) {
         for (const pattern of patterns) {
           if (pattern.annotation && pattern.param_tainted) {
+            if (pattern.languages && pattern.languages.length > 0 && language !== void 0 && !pattern.languages.includes(language)) {
+              continue;
+            }
             if (matchesAnnotation(param.annotations, pattern.annotation)) {
               const paramLine = param.line ?? method.start_line;
               sources.push({
@@ -13294,6 +13454,9 @@ function findSources(calls, types, patterns, sourceLines, language) {
     for (const method of type.methods) {
       for (const pattern of patterns) {
         if (!pattern.method_annotation) continue;
+        if (pattern.languages && pattern.languages.length > 0 && language !== void 0 && !pattern.languages.includes(language)) {
+          continue;
+        }
         if (!matchesAnnotation(method.annotations, pattern.method_annotation)) continue;
         for (const param of method.parameters) {
           const paramLine = param.line ?? method.start_line;
@@ -13558,7 +13721,7 @@ function isParameterizedQueryCall(call, pattern) {
     const secondArg = call.arguments.find((a) => a.position === 1);
     if (secondArg?.expression) {
       const expr = secondArg.expression.trim();
-      if (expr.startsWith("[")) {
+      if (expr.startsWith("[") && !/^\[\s*\]$/.test(expr)) {
         return true;
       }
     }
@@ -13999,52 +14162,74 @@ function matchesSourcePattern(call, pattern) {
   }
   return false;
 }
+var JS_SOURCE_PATTERN_CACHE = /* @__PURE__ */ new WeakMap();
+var JS_FALLBACK_COMPILED = (() => {
+  const bases = [
+    { base: "req\\.params", sourceType: "http_param" },
+    { base: "req\\.query", sourceType: "http_param" },
+    { base: "req\\.body", sourceType: "http_body" },
+    { base: "req\\.headers", sourceType: "http_header" },
+    { base: "req\\.cookies", sourceType: "http_cookie" },
+    { base: "req\\.url", sourceType: "http_path" },
+    { base: "req\\.path", sourceType: "http_path" },
+    { base: "req\\.originalUrl", sourceType: "http_path" },
+    { base: "req\\.file", sourceType: "file_input" },
+    { base: "req\\.files", sourceType: "file_input" },
+    { base: "request\\.params", sourceType: "http_param" },
+    { base: "request\\.query", sourceType: "http_param" },
+    { base: "request\\.body", sourceType: "http_body" },
+    { base: "request\\.headers", sourceType: "http_header" },
+    { base: "process\\.env", sourceType: "env_input" },
+    { base: "process\\.argv", sourceType: "io_input" },
+    { base: "ctx\\.query", sourceType: "http_param" },
+    { base: "ctx\\.params", sourceType: "http_param" },
+    { base: "ctx\\.request", sourceType: "http_body" }
+  ];
+  const exact = [];
+  const contained = [];
+  for (const { base, sourceType } of bases) {
+    exact.push({ pattern: new RegExp(`^${base}\\b`), sourceType });
+    contained.push({ pattern: new RegExp(`\\b${base}\\b`), sourceType });
+  }
+  return { exact, contained };
+})();
+function compileJsSourcePatterns(sourcePatterns) {
+  const cached = JS_SOURCE_PATTERN_CACHE.get(sourcePatterns);
+  if (cached) return cached;
+  const exact = [];
+  const contained = [];
+  for (const sp of sourcePatterns) {
+    if (sp.property && sp.object && sp.property_tainted) {
+      exact.push({
+        pattern: new RegExp(`^${sp.object}\\.${sp.property}\\b`),
+        sourceType: sp.type
+      });
+      contained.push({
+        pattern: new RegExp(`\\b${sp.object}\\.${sp.property}\\b`),
+        sourceType: sp.type
+      });
+    }
+  }
+  const compiled = { exact, contained };
+  JS_SOURCE_PATTERN_CACHE.set(sourcePatterns, compiled);
+  return compiled;
+}
 function isJavaScriptTaintedArgument(argExpression, sourcePatterns) {
-  const exactPatterns = [];
-  const containedPatterns = [];
-  if (sourcePatterns) {
-    for (const sp of sourcePatterns) {
-      if (sp.property && sp.object && sp.property_tainted) {
-        const exactRegex = new RegExp(`^${sp.object}\\.${sp.property}\\b`);
-        exactPatterns.push({ pattern: exactRegex, sourceType: sp.type });
-        const containedRegex = new RegExp(`\\b${sp.object}\\.${sp.property}\\b`);
-        containedPatterns.push({ pattern: containedRegex, sourceType: sp.type });
-      }
-    }
-  }
-  if (exactPatterns.length === 0) {
-    const basePatterns = [
-      { base: "req\\.params", sourceType: "http_param" },
-      { base: "req\\.query", sourceType: "http_param" },
-      { base: "req\\.body", sourceType: "http_body" },
-      { base: "req\\.headers", sourceType: "http_header" },
-      { base: "req\\.cookies", sourceType: "http_cookie" },
-      { base: "req\\.url", sourceType: "http_path" },
-      { base: "req\\.path", sourceType: "http_path" },
-      { base: "req\\.originalUrl", sourceType: "http_path" },
-      { base: "req\\.file", sourceType: "file_input" },
-      { base: "req\\.files", sourceType: "file_input" },
-      { base: "request\\.params", sourceType: "http_param" },
-      { base: "request\\.query", sourceType: "http_param" },
-      { base: "request\\.body", sourceType: "http_body" },
-      { base: "request\\.headers", sourceType: "http_header" },
-      { base: "process\\.env", sourceType: "env_input" },
-      { base: "process\\.argv", sourceType: "io_input" },
-      { base: "ctx\\.query", sourceType: "http_param" },
-      { base: "ctx\\.params", sourceType: "http_param" },
-      { base: "ctx\\.request", sourceType: "http_body" }
-    ];
-    for (const { base, sourceType } of basePatterns) {
-      exactPatterns.push({ pattern: new RegExp(`^${base}\\b`), sourceType });
-      containedPatterns.push({ pattern: new RegExp(`\\b${base}\\b`), sourceType });
+  let compiled;
+  if (sourcePatterns && sourcePatterns.length > 0) {
+    compiled = compileJsSourcePatterns(sourcePatterns);
+    if (compiled.exact.length === 0) {
+      compiled = JS_FALLBACK_COMPILED;
     }
+  } else {
+    compiled = JS_FALLBACK_COMPILED;
   }
-  for (const { pattern, sourceType } of exactPatterns) {
+  for (const { pattern, sourceType } of compiled.exact) {
     if (pattern.test(argExpression)) {
       return { isTainted: true, sourceType };
     }
   }
-  for (const { pattern, sourceType } of containedPatterns) {
+  for (const { pattern, sourceType } of compiled.contained) {
     if (pattern.test(argExpression)) {
       return { isTainted: true, sourceType };
     }
@@ -16351,6 +16536,20 @@ function walkBackwardDefs(startDefId, chainsByToDef, defById, options = {}) {
   return { visited, lines, hopCapReached };
 }
 
+// src/analysis/sanitizer-index.ts
+var SANITIZER_SET_CACHE = /* @__PURE__ */ new WeakMap();
+function getSanitizesSet(san) {
+  let s = SANITIZER_SET_CACHE.get(san);
+  if (!s) {
+    s = new Set(san.sanitizes);
+    SANITIZER_SET_CACHE.set(san, s);
+  }
+  return s;
+}
+function sanitizerCoversSink(san, sinkType) {
+  return getSanitizesSet(san).has(sinkType);
+}
+
 // src/analysis/taint-propagation.ts
 function buildSanitizersByLine(sanitizers) {
   const out2 = /* @__PURE__ */ new Map();
@@ -16587,7 +16786,7 @@ function checkSanitized(fromLine, toLine, sinkType, sanitizersByLine, ctx) {
   if (sanitizersAtTarget && sanitizersAtTarget.length > 0) {
     for (const san of sanitizersAtTarget) {
       if (isKnownSinkType) {
-        if (san.sanitizes.includes(sinkType)) {
+        if (sanitizerCoversSink(san, sinkType)) {
           return { sanitized: true, sanitizer: san };
         }
       } else if (san.sanitizes.length > 0) {
@@ -16609,7 +16808,7 @@ function checkSanitized(fromLine, toLine, sinkType, sanitizersByLine, ctx) {
       if (!sansAtLine || sansAtLine.length === 0) continue;
       for (const san of sansAtLine) {
         if (isKnownSinkType) {
-          if (san.sanitizes.includes(sinkType)) {
+          if (sanitizerCoversSink(san, sinkType)) {
             return { sanitized: true, sanitizer: san };
           }
         } else if (san.sanitizes.length > 0) {
@@ -32194,7 +32393,7 @@ function filterSanitizedSinks(sinks, sanitizers, calls) {
     const lineSanitizers = sanitizersByLine.get(sink.line);
     if (!lineSanitizers || lineSanitizers.length === 0) return true;
     for (const san of lineSanitizers) {
-      if (san.sanitizes.includes(sink.type)) {
+      if (sanitizerCoversSink(san, sink.type)) {
         const lineCalls = callsByLine.get(sink.line) ?? [];
         for (const call of lineCalls) {
           for (const arg of call.arguments) {
@@ -32687,15 +32886,23 @@ var TaintPropagationPass = class {
       confidence: flow.confidence,
       sanitized: flow.sanitized
     }));
+    const flowKey = (x) => `${x.source_line}|${x.sink_line}|${x.sink_type}`;
+    const flowKeys = /* @__PURE__ */ new Set();
+    for (const x of flows) flowKeys.add(flowKey(x));
+    const pushIfNew = (f) => {
+      const k = flowKey(f);
+      if (flowKeys.has(k)) return false;
+      flowKeys.add(k);
+      flows.push(f);
+      return true;
+    };
     const arrayFlows = detectArrayElementFlows(calls, sources, sinks, constProp.taintedArrayElements, constProp.unreachableLines, types) ?? [];
     for (const f of arrayFlows) {
-      if (!flows.some((x) => x.source_line === f.source_line && x.sink_line === f.sink_line && x.sink_type === f.sink_type)) {
-        flows.push(f);
-      }
+      pushIfNew(f);
     }
     const collectionFlows = detectCollectionFlows(calls, sources, sinks, constProp.tainted, constProp.unreachableLines, ctx.code, types) ?? [];
     for (const f of collectionFlows) {
-      if (flows.some((x) => x.source_line === f.source_line && x.sink_line === f.sink_line && x.sink_type === f.sink_type)) continue;
+      if (flowKeys.has(flowKey(f))) continue;
       const flowForCheck = {
         source: { line: f.source_line },
         sink: { line: f.sink_line },
@@ -32710,19 +32917,15 @@ var TaintPropagationPass = class {
         }
       }
       if (isFP) continue;
-      flows.push(f);
+      pushIfNew(f);
     }
     const paramFlows = detectParameterSinkFlows(types, calls, sources, sinks, constProp.unreachableLines, constProp.tainted, ctx.code) ?? [];
     for (const f of paramFlows) {
-      if (!flows.some((x) => x.source_line === f.source_line && x.sink_line === f.sink_line && x.sink_type === f.sink_type)) {
-        flows.push(f);
-      }
+      pushIfNew(f);
     }
     const exprScanFlows = detectExpressionScanFlows(calls, sources, sinks, sanitizers, constProp.unreachableLines, constProp.tainted, ctx.code, ctx.language) ?? [];
     for (const f of exprScanFlows) {
-      if (flows.some(
-        (x) => x.source_line === f.source_line && x.sink_line === f.sink_line && x.sink_type === f.sink_type
-      )) continue;
+      if (flowKeys.has(flowKey(f))) continue;
       const flowForCheck = {
         source: { line: f.source_line },
         sink: { line: f.sink_line },
@@ -32737,7 +32940,7 @@ var TaintPropagationPass = class {
         }
       }
       if (isFP) continue;
-      flows.push(f);
+      pushIfNew(f);
     }
     const sanitizedNames = constProp.sanitizedVars;
     let finalFlows = sanitizedNames.size === 0 ? flows : flows.filter((f) => {
@@ -32765,7 +32968,7 @@ var TaintPropagationPass = class {
             const sansAtLine = sanitizersByLine.get(line);
             if (!sansAtLine) continue;
             for (const san of sansAtLine) {
-              if (san.sanitizes.includes(f.sink_type)) {
+              if (sanitizerCoversSink(san, f.sink_type)) {
                 return false;
               }
             }
@@ -32775,7 +32978,7 @@ var TaintPropagationPass = class {
         const sansAtSink = sanitizersByLine.get(f.sink_line);
         if (sansAtSink && sansAtSink.length > 0) {
           for (const san of sansAtSink) {
-            if (san.sanitizes.includes(f.sink_type)) {
+            if (sanitizerCoversSink(san, f.sink_type)) {
               return false;
             }
           }
@@ -32799,7 +33002,7 @@ var TaintPropagationPass = class {
             const sansAtLine = sanitizersByLine.get(line);
             if (!sansAtLine || sansAtLine.length === 0) continue;
             for (const san of sansAtLine) {
-              if (san.sanitizes.includes(f.sink_type)) {
+              if (sanitizerCoversSink(san, f.sink_type)) {
                 return false;
               }
             }
@@ -33764,7 +33967,7 @@ var InterproceduralPass = class {
             const sansAtLine = sanitizersByLine.get(line);
             if (!sansAtLine) continue;
             for (const san of sansAtLine) {
-              if (san.sanitizes.includes(f.sink_type)) {
+              if (sanitizerCoversSink(san, f.sink_type)) {
                 sanitizedSinkKeys.add(`${f.sink_line}:${f.sink_type}`);
                 return false;
               }
@@ -33775,7 +33978,7 @@ var InterproceduralPass = class {
         const sansAtSink = sanitizersByLine.get(f.sink_line);
         if (!sansAtSink || sansAtSink.length === 0) return true;
         for (const san of sansAtSink) {
-          if (san.sanitizes.includes(f.sink_type)) {
+          if (sanitizerCoversSink(san, f.sink_type)) {
             return false;
           }
         }
@@ -42186,7 +42389,13 @@ function getNodeTypesForLanguage(language) {
         "jsx_self_closing_element",
         "jsx_opening_element",
         "jsx_attribute",
-        "jsx_expression"
+        "jsx_expression",
+        // buildCFG containers (3.172.0 T2-A) — the two below are legacy
+        // tree-sitter-javascript node types for anonymous / expression
+        // functions; declaring them here lets `collectAllNodes` populate
+        // the cache in the same pass so `buildCFG` skips its per-type walk.
+        "function",
+        "function_expression"
       ]);
     case "bash":
       return /* @__PURE__ */ new Set([
@@ -42240,7 +42449,9 @@ function getNodeTypesForLanguage(language) {
         "field_declaration",
         "import_declaration",
         "interface_declaration",
-        "enum_declaration"
+        "enum_declaration",
+        "package_declaration",
+        "local_variable_declaration"
       ]);
   }
 }
@@ -42264,10 +42475,20 @@ async function analyze(code, filePath, language, options = {}) {
     }
   }
   logger.debug("Analyzing file", { filePath, language, parseGrammar, codeLength: code.length });
+  const phaseTimingEnabled = globalThis.__circleIrPassTiming === true;
+  const phaseStart = () => phaseTimingEnabled ? Date.now() : 0;
+  const phaseEnd = (label, t0) => {
+    if (!phaseTimingEnabled) return;
+    console.error(`[phase-timing] ${label} ${Date.now() - t0}ms file=${filePath}`);
+  };
+  const tParse = phaseStart();
   const tree = await parse(code, parseGrammar);
+  phaseEnd("parse", tParse);
   try {
     logger.trace("Parsed AST", { rootNodeType: tree.rootNode.type });
+    const tParseStatus = phaseStart();
     const parseStatus = extractParseStatus(tree);
+    phaseEnd("extractParseStatus", tParseStatus);
     if (parseStatus.has_errors) {
       logger.warn("Partial parse \u2014 IR may be incomplete", {
         filePath,
@@ -42276,18 +42497,37 @@ async function analyze(code, filePath, language, options = {}) {
         firstErrorLine: parseStatus.error_locations[0]?.line
       });
     }
+    const tCollect = phaseStart();
     const nodeCache = collectAllNodes(tree.rootNode, getNodeTypesForLanguage(language));
+    phaseEnd("collectAllNodes", tCollect);
+    const tMeta = phaseStart();
     const meta = extractMeta(code, tree, filePath, language);
     if (options.projectProfile !== void 0) {
       meta.projectProfile = makeProfileResolver(options.projectProfile)(filePath);
     }
+    phaseEnd("extractMeta", tMeta);
+    const tTypes = phaseStart();
     const types = extractTypes(tree, nodeCache, language);
+    phaseEnd("extractTypes", tTypes);
+    const tCalls = phaseStart();
     const calls = extractCalls(tree, nodeCache, language);
-    const imports = extractImports(tree, language);
+    phaseEnd("extractCalls", tCalls);
+    const tImports = phaseStart();
+    const imports = extractImports(tree, language, nodeCache);
+    phaseEnd("extractImports", tImports);
+    const tExports = phaseStart();
     const exports = extractExports(types);
-    const cfg = buildCFG(tree, language);
+    phaseEnd("extractExports", tExports);
+    const tCFG = phaseStart();
+    const cfg = buildCFG(tree, language, nodeCache);
+    phaseEnd("buildCFG", tCFG);
+    const tDFG = phaseStart();
     const dfg = buildDFG(tree, nodeCache, language);
+    phaseEnd("buildDFG", tDFG);
+    const tRuntime = phaseStart();
     const runtimeRegistrations = extractRuntimeRegistrations(tree, nodeCache, language, imports);
+    phaseEnd("extractRuntimeRegistrations", tRuntime);
+    const tGraph = phaseStart();
     const graph = new CodeGraph({
       meta,
       types,
@@ -42300,6 +42540,7 @@ async function analyze(code, filePath, language, options = {}) {
       unresolved: [],
       enriched: {}
     });
+    phaseEnd("buildCodeGraph", tGraph);
     const config = options.taintConfig ?? getDefaultConfig();
     const disabledPasses = new Set(options.disabledPasses ?? []);
     const passOpts = options.passOptions ?? {};