cognium-dev 3.198.0 → 3.199.0

package/dist/cli.js

@@ -3651,6 +3651,10 @@ function extractJavaScriptTypes(tree, cache) {
   for (const cls of classes) {
     types.push(extractJSClassInfo(cls));
   }
+  const interfaces = getNodesFromCache(tree.rootNode, "interface_declaration", cache);
+  for (const iface of interfaces) {
+    types.push(extractTSInterfaceInfo(iface));
+  }
   const functions = getNodesFromCache(tree.rootNode, "function_declaration", cache);
   if (functions.length > 0) {
     const moduleFunctions = [];
@@ -3997,6 +4001,76 @@ function extractSelfAssignments(body2, fields, fieldNames) {
     }
   }
 }
+function extractTSInterfaceInfo(node) {
+  const name2 = getIdentifier(node, "name") ?? "Anonymous";
+  const parents = [];
+  for (let i2 = 0;i2 < node.childCount; i2++) {
+    const child = node.child(i2);
+    if (!child || child.type !== "extends_type_clause")
+      continue;
+    for (let j = 0;j < child.childCount; j++) {
+      const gc = child.child(j);
+      if (!gc)
+        continue;
+      if (gc.type === "type_identifier" || gc.type === "generic_type" || gc.type === "nested_type_identifier") {
+        parents.push(getNodeText(gc));
+      }
+    }
+  }
+  const body2 = node.childForFieldName("body");
+  const methods = [];
+  const fields = [];
+  if (body2) {
+    for (let i2 = 0;i2 < body2.childCount; i2++) {
+      const member = body2.child(i2);
+      if (!member)
+        continue;
+      if (member.type === "method_signature") {
+        const methodName = getIdentifier(member, "name") ?? getNodeText(member.child(0) ?? member);
+        const params = member.childForFieldName("parameters");
+        const returnType = member.childForFieldName("return_type");
+        methods.push({
+          name: methodName,
+          return_type: returnType ? getNodeText(returnType).replace(/^:\s*/, "") : null,
+          parameters: params ? extractJSParameters(params) : [],
+          annotations: [],
+          modifiers: [],
+          start_line: member.startPosition.row + 1,
+          end_line: member.endPosition.row + 1
+        });
+        continue;
+      }
+      if (member.type === "property_signature") {
+        const fieldName = getIdentifier(member, "name") ?? getNodeText(member.child(0) ?? member);
+        const typeNode = member.childForFieldName("type");
+        const modifiers = [];
+        const text = getNodeText(member);
+        if (/^\s*readonly\b/.test(text))
+          modifiers.push("readonly");
+        if (/\?\s*:/.test(text))
+          modifiers.push("optional");
+        fields.push({
+          name: fieldName,
+          type: typeNode ? getNodeText(typeNode).replace(/^:\s*/, "") : null,
+          modifiers,
+          annotations: []
+        });
+      }
+    }
+  }
+  return {
+    name: name2,
+    kind: "interface",
+    package: null,
+    extends: parents[0] ?? null,
+    implements: parents.slice(1),
+    annotations: [],
+    methods,
+    fields,
+    start_line: node.startPosition.row + 1,
+    end_line: node.endPosition.row + 1
+  };
+}
 function extractJSClassInfo(node) {
   const name2 = getIdentifier(node, "name") ?? "Anonymous";
   let extendsType = null;
@@ -46420,7 +46494,7 @@ var colors = {
 };
 
 // src/version.ts
-var version = "3.198.0";
+var version = "3.199.0";
 
 // src/formatters.ts
 var LIBRARY_API_SURFACE_TAG2 = "library-api-surface:caller-responsibility";
@@ -46456,7 +46530,11 @@ var SINK_SEVERITY = {
   format_string: "high",
   crlf: "medium",
   mass_assignment: "high",
-  prompt_injection: "high"
+  prompt_injection: "high",
+  insecure_storage: "medium",
+  prototype_pollution: "high",
+  regex_dos: "high",
+  unsafe_memory: "high"
 };
 var SINK_CWE = {
   sql_injection: "CWE-89",
@@ -46483,7 +46561,11 @@ var SINK_CWE = {
   format_string: "CWE-134",
   crlf: "CWE-113",
   mass_assignment: "CWE-915",
-  prompt_injection: "CWE-1427"
+  prompt_injection: "CWE-1427",
+  insecure_storage: "CWE-922",
+  prototype_pollution: "CWE-1321",
+  regex_dos: "CWE-1333",
+  unsafe_memory: "CWE-119"
 };
 var VULNERABILITY_HELP = {
   sql_injection: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognium-dev",
-  "version": "3.198.0",
+  "version": "3.199.0",
   "description": "Static Application Security Testing CLI for detecting security vulnerabilities via taint tracking",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@cognium/project-profile-detect": "^1.1.0",
-    "circle-ir": "^3.198.0"
+    "circle-ir": "^3.199.0"
   },
   "devDependencies": {
     "@types/node": "^25.5.0",