@solana-epic/cli 0.1.0-beta.3 → 0.2.0-beta.0

package/dist/api.d.ts

@@ -0,0 +1,12 @@
+import { CompatibilityReport, DiffReport } from "@solana-epic/diff-engine";
+import { config } from "@solana-epic/parser";
+export interface UpgradeReport {
+    programName: string;
+    compatibility: CompatibilityReport;
+    report: DiffReport;
+    intelligence: any;
+    epicConfig: config.ResolvedEpicConfig;
+}
+export declare function runCheck(oldPath: string, newPath: string, epicConfig: config.ResolvedEpicConfig): Promise<UpgradeReport>;
+export { formatMarkdown, formatSarif } from "./formatters.js";
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,mBAAmB,EACnB,UAAU,EACX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,EAAE,GAAG,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,kBAAkB,CAAC;CACvC;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC,CAiB9H;AAED,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/api.js

@@ -0,0 +1,20 @@
+import * as path from "path";
+import { analyzePrograms, compareAccountLayouts, simulateCompatibility, createUpgradeIntelligence } from "@solana-epic/diff-engine";
+export async function runCheck(oldPath, newPath, epicConfig) {
+    const resolvedOldPath = path.resolve(oldPath);
+    const resolvedNewPath = path.resolve(newPath);
+    const { oldProgram, newProgram } = await analyzePrograms(resolvedOldPath, resolvedNewPath, epicConfig);
+    const compatibility = simulateCompatibility(oldProgram, newProgram, epicConfig);
+    const report = compareAccountLayouts(oldProgram, newProgram, epicConfig);
+    const intelligence = createUpgradeIntelligence(report);
+    const programName = compatibility.accounts[0]?.account || report.findings[0]?.account || path.basename(resolvedNewPath);
+    return {
+        programName,
+        compatibility,
+        report,
+        intelligence,
+        epicConfig
+    };
+}
+export { formatMarkdown, formatSarif } from "./formatters.js";
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EAG1B,MAAM,0BAA0B,CAAC;AAWlC,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAe,EAAE,OAAe,EAAE,UAAqC;IACpG,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9C,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;IACvG,MAAM,aAAa,GAAG,qBAAqB,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAExH,OAAO;QACL,WAAW;QACX,aAAa;QACb,MAAM;QACN,YAAY;QACZ,UAAU;KACX,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/formatters.d.ts

@@ -0,0 +1,4 @@
+import { UpgradeReport } from "./api.js";
+export declare function formatMarkdown(result: UpgradeReport, configChanged?: boolean): string;
+export declare function formatSarif(result: UpgradeReport): any;
+//# sourceMappingURL=formatters.d.ts.map

package/dist/formatters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatters.d.ts","sourceRoot":"","sources":["../src/formatters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,GAAE,OAAe,GAAG,MAAM,CAoF5F;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,GAAG,CAyDtD"}

package/dist/formatters.js

@@ -0,0 +1,134 @@
+export function formatMarkdown(result, configChanged = false) {
+    const { compatibility, report, programName, epicConfig } = result;
+    const lines = [];
+    const blocked = compatibility.overall === "Blocked";
+    const migration = compatibility.overall === "Migration-Required";
+    const safe = compatibility.overall === "Compatible";
+    if (blocked) {
+        lines.push("## 🔴 EPIC Guard: UPGRADE BLOCKED");
+    }
+    else if (migration) {
+        lines.push("## 🟡 EPIC Guard: MIGRATION REQUIRED");
+    }
+    else {
+        lines.push("## 🟢 EPIC Guard: APPROVED");
+    }
+    lines.push("");
+    if (configChanged) {
+        lines.push("> [!WARNING]");
+        lines.push("> **UPGRADE CONFIGURATION GATE MODIFIED**");
+        lines.push("> This Pull Request contains changes to `epic.toml` configuration rules.");
+        lines.push("> Signers must audit the modifications below to ensure safety limits are not bypassed.");
+        lines.push("");
+    }
+    lines.push(`### Upgrade Compatibility: \`${programName}\``);
+    lines.push("");
+    if (compatibility.accounts.length === 0) {
+        lines.push("No state accounts found. Upgrade is safe.");
+        return lines.join("\n");
+    }
+    for (const acc of compatibility.accounts) {
+        const isBlocked = acc.status === "Blocked";
+        const isMigration = acc.status === "Migration-Required";
+        const icon = isBlocked ? "🔴" : isMigration ? "🟡" : "🟢";
+        lines.push(`#### ${icon} Struct \`${acc.account}\` (${acc.status})`);
+        if (acc.reasons && acc.reasons.length > 0) {
+            lines.push("");
+            lines.push("**Reasoning:**");
+            for (const r of acc.reasons) {
+                lines.push(`* ${r}`);
+            }
+        }
+        if (acc.upgradePlan && acc.upgradePlan.length > 0) {
+            lines.push("");
+            lines.push("**Migration Plan:**");
+            if (acc.rentDeltaLamports !== null) {
+                lines.push(`* Rent Delta: \`${acc.rentDeltaLamports} lamports\` (\`${acc.sizeDelta} bytes\`)`);
+            }
+            for (const step of acc.upgradePlan) {
+                lines.push(`* ${step}`);
+            }
+        }
+        lines.push("");
+    }
+    // Overrides section
+    const appliedOverrides = report.findings.filter(f => f.severity !== (f.kind === "FIELD_ADDED" ? "MAJOR" : "CRITICAL"));
+    if (appliedOverrides.length > 0) {
+        lines.push("### 🔑 Applied Layout Overrides");
+        lines.push("");
+        lines.push("| Struct | Finding | Field | Severity Shift | Note |");
+        lines.push("| :--- | :--- | :--- | :--- | :--- |");
+        for (const o of appliedOverrides) {
+            const original = o.kind === "FIELD_ADDED" ? "MAJOR" : "CRITICAL";
+            // Find note
+            let note = "No note provided.";
+            for (const [name, program] of epicConfig.programs.entries()) {
+                const match = program.overrides.find(override => override.account.toLowerCase() === o.account.toLowerCase() &&
+                    override.finding.toUpperCase() === o.kind.toUpperCase());
+                if (match) {
+                    note = match.note;
+                    break;
+                }
+            }
+            lines.push(`| \`${o.account}\` | \`${o.kind}\` | \`${o.field?.name || "global"}\` | \`${original}\` ──► \`${o.severity}\` | ${note} |`);
+        }
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+export function formatSarif(result) {
+    // Return a valid SARIF structure based on the findings
+    const sarif = {
+        version: "2.1.0",
+        $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: "EPIC Upgrade Intelligence",
+                        version: "0.2.0-beta.0",
+                        informationUri: "https://github.com/solana-epic/epic",
+                        rules: []
+                    }
+                },
+                results: []
+            }
+        ]
+    };
+    const run = sarif.runs[0];
+    const rules = new Map();
+    for (const finding of result.report.findings) {
+        const ruleId = `EPIC-LAYOUT-${finding.kind}`;
+        if (!rules.has(ruleId)) {
+            rules.set(ruleId, {
+                id: ruleId,
+                shortDescription: { text: `State Layout Drift: ${finding.kind}` },
+                helpUri: "https://github.com/solana-epic/epic"
+            });
+        }
+        // Map severity
+        let level = "warning";
+        if (finding.severity === "CRITICAL")
+            level = "error";
+        if (finding.severity === "SAFE")
+            level = "note";
+        run.results.push({
+            ruleId,
+            level,
+            message: {
+                text: `Account \`${finding.account}\` changed: ${finding.kind}. Field: ${finding.field?.name || 'N/A'}`
+            },
+            locations: [
+                {
+                    physicalLocation: {
+                        artifactLocation: { uri: "epic.toml" },
+                        region: { startLine: 1 }
+                    }
+                }
+            ]
+        });
+    }
+    run.tool.driver.rules = Array.from(rules.values());
+    return sarif;
+}
+//# sourceMappingURL=formatters.js.map

package/dist/formatters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formatters.js","sourceRoot":"","sources":["../src/formatters.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,cAAc,CAAC,MAAqB,EAAE,gBAAyB,KAAK;IAClF,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAClE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,KAAK,SAAS,CAAC;IACpD,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,KAAK,oBAAoB,CAAC;IACjE,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,KAAK,YAAY,CAAC;IAEpD,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QACvF,KAAK,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;QACrG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,gCAAgC,WAAW,IAAI,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;QAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,KAAK,oBAAoB,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,aAAa,GAAG,CAAC,OAAO,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAErE,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC7B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,IAAI,GAAG,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,iBAAiB,kBAAkB,GAAG,CAAC,SAAS,WAAW,CAAC,CAAC;YACjG,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,oBAAoB;IACpB,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACvH,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YACjE,YAAY;YACZ,IAAI,IAAI,GAAG,mBAAmB,CAAC;YAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAC9C,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE;oBAC1D,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CACxD,CAAC;gBACF,IAAI,KAAK,EAAE,CAAC;oBAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;oBAAC,MAAM;gBAAC,CAAC;YAC1C,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,QAAQ,UAAU,QAAQ,YAAY,CAAC,CAAC,QAAQ,QAAQ,IAAI,IAAI,CAAC,CAAC;QAC1I,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,uDAAuD;IACvD,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,gGAAgG;QACzG,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,2BAA2B;wBACjC,OAAO,EAAE,cAAc;wBACvB,cAAc,EAAE,qCAAqC;wBACrD,KAAK,EAAE,EAAW;qBACnB;iBACF;gBACD,OAAO,EAAE,EAAW;aACrB;SACF;KACF,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAe,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,eAAe,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;gBAChB,EAAE,EAAE,MAAM;gBACV,gBAAgB,EAAE,EAAE,IAAI,EAAE,uBAAuB,OAAO,CAAC,IAAI,EAAE,EAAE;gBACjE,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;QAED,eAAe;QACf,IAAI,KAAK,GAAG,SAAS,CAAC;QACtB,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU;YAAE,KAAK,GAAG,OAAO,CAAC;QACrD,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;YAAE,KAAK,GAAG,MAAM,CAAC;QAEhD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YACf,MAAM;YACN,KAAK;YACL,OAAO,EAAE;gBACP,IAAI,EAAE,aAAa,OAAO,CAAC,OAAO,eAAe,OAAO,CAAC,IAAI,YAAY,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;aACxG;YACD,SAAS,EAAE;gBACT;oBACE,gBAAgB,EAAE;wBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;wBACtC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;qBACzB;iBACF;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { Command } from "commander";
-import { compareAnchorPrograms, formatHumanReport } from "@solana-epic/diff-engine";
+import { analyzePrograms, compareAccountLayouts, createUpgradeIntelligence, simulateCompatibility } from "@solana-epic/diff-engine";
 import { config } from "@solana-epic/parser";
 import { spawnSync, execSync } from "node:child_process";
 import path from "node:path";
@@ -13,7 +13,42 @@ program
     .version(CLI_VERSION)
     .option("--no-banner", "Disable the startup banner");
 import { resolveParserBinary } from "./loader.js";
-import { printBanner, printInitSequence, printSection, printRuleFinding, colors, printEndSummary, DIVIDER, ruleKnowledge } from "./ui.js";
+import { printStartup, getBannerString, printInitSequence, printSection, printRuleFinding, colors, printEndSummary, printUpgradeReport, printCompatibilityReport, severityBadge, scoreBar, bandForScore, DIVIDER, ruleKnowledge } from "./ui.js";
+import { generateSarif, generateMarkdown } from "./reports.js";
+// Count Rust source files under a path (real, not fabricated metrics).
+function countRustFiles(target) {
+    let count = 0;
+    const skip = new Set([".git", "target", "node_modules", "vendor"]);
+    const walk = (dir) => {
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (entry.isDirectory()) {
+                if (skip.has(entry.name))
+                    continue;
+                walk(path.join(dir, entry.name));
+            }
+            else if (entry.isFile() && entry.name.endsWith(".rs")) {
+                count++;
+            }
+        }
+    };
+    try {
+        const stat = fs.statSync(target);
+        if (stat.isFile())
+            return target.endsWith(".rs") ? 1 : 0;
+    }
+    catch {
+        return 0;
+    }
+    walk(target);
+    return count;
+}
 function findRustBinary() {
     try {
         return resolveParserBinary();
@@ -31,7 +66,7 @@ program
     const startTime = Date.now();
     try {
         const opts = program.opts();
-        printBanner(!opts.banner);
+        printStartup("Workspace Analysis", !opts.banner);
         printInitSequence([
             "Rust AST Loaded",
             "Parsing Anchor Workspace",
@@ -87,19 +122,23 @@ program
     .command("check")
     .description("Compare two Solana program workspace versions and report upgrade readiness.")
     .option("-c, --config <path>", "Path to epic.toml configuration file")
+    .option("-f, --format <format>", "Output format: text, json", "text")
     .argument("<old_path>", "Path to the old program version source directory")
     .argument("<new_path>", "Path to the new program version source directory")
     .action(async (oldPath, newPath, options) => {
     const startTime = Date.now();
+    const isJson = options.format === "json";
     try {
         const opts = program.opts();
-        printBanner(!opts.banner);
-        printInitSequence([
-            "Rust AST Loaded",
-            "Parsing Anchor Workspace",
-            "Building Call Graph"
-        ]);
-        console.log("");
+        const startupShown = isJson ? false : printStartup("Upgrade Intelligence", !opts.banner);
+        if (!isJson) {
+            printInitSequence([
+                "Rust AST Loaded",
+                "Parsing Anchor Workspace",
+                "Building Call Graph"
+            ]);
+            console.log("");
+        }
         const resolvedOldPath = path.resolve(oldPath);
         const resolvedNewPath = path.resolve(newPath);
         let epicConfig;
@@ -110,28 +149,59 @@ program
             console.error(`epic.toml validation error: ${err.message}`);
             process.exit(1);
         }
-        const report = await compareAnchorPrograms(resolvedOldPath, resolvedNewPath, epicConfig);
-        console.log(formatHumanReport(report));
+        // Parse both versions once, then run BOTH the compatibility simulator
+        // (state survival) and the existing layout-diff findings off the same AST.
+        const { oldProgram, newProgram } = await analyzePrograms(resolvedOldPath, resolvedNewPath, epicConfig);
+        const compatibility = simulateCompatibility(oldProgram, newProgram, epicConfig);
+        const report = compareAccountLayouts(oldProgram, newProgram, epicConfig);
+        const intelligence = createUpgradeIntelligence(report);
+        const programName = compatibility.accounts[0]?.account || report.findings[0]?.account || path.basename(resolvedNewPath);
+        if (isJson) {
+            console.log(JSON.stringify({
+                program: programName,
+                compatibility,
+                findings: report.findings,
+                severity: report.severity
+            }, null, 2));
+            process.exit(compatibility.overall === "Blocked" ? 1 : 0);
+        }
+        // Lead with the compatibility verdict (the product), then keep the
+        // detailed layout findings below it as supporting evidence.
+        printCompatibilityReport(compatibility, { program: programName }, { skipTitle: startupShown });
+        if (report.findings.length) {
+            console.log(colors.gray(DIVIDER));
+            console.log(colors.white(colors.bold("LAYOUT FINDINGS (DETAIL)")));
+            console.log(colors.gray(DIVIDER));
+            console.log("");
+            printUpgradeReport(report, intelligence, { program: programName }, { skipTitle: true });
+            console.log("");
+        }
+        // Exit code. BLOCKED always fails CI (state corruption is non-negotiable),
+        // overriding fail_on_severity. Other outcomes respect the configured threshold.
         const severityOrder = ["SAFE", "MINOR", "WARNING", "MAJOR", "CRITICAL"];
         const thresholdIndex = severityOrder.indexOf(epicConfig.failOnSeverity);
         const reportSeverityIndex = severityOrder.indexOf(report.severity);
+        const severityFails = thresholdIndex !== -1 && reportSeverityIndex !== -1 && reportSeverityIndex >= thresholdIndex;
+        const blocked = compatibility.overall === "Blocked";
+        const fails = blocked || severityFails;
         console.log(colors.gray(DIVIDER));
         console.log("");
-        if (thresholdIndex !== -1 && reportSeverityIndex !== -1 && reportSeverityIndex >= thresholdIndex) {
+        if (blocked) {
+            console.log(colors.critical(`✖ EPIC Guard Blocked: deploying would corrupt existing on-chain accounts.`));
+        }
+        else if (severityFails) {
             console.log(colors.critical(`✖ EPIC Guard Blocked: Upgrade severity is ${report.severity} (threshold: ${epicConfig.failOnSeverity}).`));
         }
+        else if (compatibility.overall === "Migration-Required") {
+            console.log(colors.warning(`▲ EPIC Guard: Upgrade is safe only after the migration above is performed.`));
+        }
         else {
             console.log(colors.success(`✓ EPIC Guard Approved Upgrade.`));
         }
         console.log("");
         console.log(colors.dim(`Time: ${(Date.now() - startTime) / 1000} s`));
         console.log("");
-        if (thresholdIndex !== -1 && reportSeverityIndex !== -1 && reportSeverityIndex >= thresholdIndex) {
-            process.exit(1);
-        }
-        else {
-            process.exit(0);
-        }
+        process.exit(fails ? 1 : 0);
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
@@ -151,26 +221,18 @@ function getSeverityLevel(sev) {
         return 3;
     return 3;
 }
-function generateSarif(findings) {
-    const results = findings.map((f) => ({
-        ruleId: f.rule_id,
-        level: "warning",
-        message: { text: f.message },
-        locations: [{ physicalLocation: { artifactLocation: { uri: f.location.file }, region: { startLine: f.location.line } } }]
-    }));
-    return {
-        version: "2.1.0",
-        runs: [{ tool: { driver: { name: "EPIC", rules: [] } }, results }]
-    };
-}
 program
     .command("doctor")
     .description("Run diagnostics on the environment")
     .action(() => {
-    console.log(colors.gray(DIVIDER));
-    console.log(colors.bold(colors.white("Environment Diagnostics")));
-    console.log(colors.gray(DIVIDER));
-    console.log("");
+    const opts = program.opts();
+    const startupShown = printStartup("Environment Diagnostics", !opts.banner);
+    if (!startupShown) {
+        console.log(colors.gray(DIVIDER));
+        console.log(colors.bold(colors.white("Environment Diagnostics")));
+        console.log(colors.gray(DIVIDER));
+        console.log("");
+    }
     let hasErrors = false;
     const checkVersion = (cmd, name, required) => {
         try {
@@ -244,28 +306,35 @@ program
     .command("explain <rule_id>")
     .description("Explain a security rule in detail")
     .action((ruleId) => {
+    const opts = program.opts();
+    printStartup("Rule Explanation", !opts.banner);
     const knowledge = ruleKnowledge[ruleId];
     if (!knowledge) {
         console.log(colors.critical(`Rule ${ruleId} not found.`));
+        console.log(colors.dim("Run 'epic rules' to list all available rules."));
         process.exit(1);
     }
+    const band = bandForScore(knowledge.score);
     console.log(colors.gray(DIVIDER));
-    console.log(colors.bold(colors.white("Rule")));
-    console.log(colors.cyan(knowledge.desc));
     console.log("");
-    console.log(colors.bold(colors.white("Severity")));
-    console.log(colors.critical("Critical / High"));
-    console.log(colors.gray(DIVIDER));
+    console.log(`${severityBadge(band)}  ${colors.white(ruleId)}  ${colors.gray("·")}  ${colors.white(knowledge.desc)}`);
     console.log("");
-    console.log(colors.bold(colors.white("Historical Exploits")));
-    console.log(colors.dim(knowledge.historical));
+    console.log(`${colors.dim("Risk Score")}   ${scoreBar(knowledge.score)}  ${colors.white(`${knowledge.score} / 100`)}`);
     console.log("");
-    console.log(colors.bold(colors.white("Suggested Fix")));
-    console.log(colors.dim(knowledge.fix));
+    console.log(colors.gray(DIVIDER));
     console.log("");
-    console.log(colors.bold(colors.white("Why this matters")));
+    console.log(colors.bold(colors.white("WHY IT'S DANGEROUS")));
     console.log(colors.dim(knowledge.why));
     console.log("");
+    console.log(colors.bold(colors.white("WHAT BREAKS")));
+    console.log(colors.warning(knowledge.impact));
+    console.log("");
+    console.log(colors.bold(colors.white("HOW TO FIX")));
+    console.log(colors.green(knowledge.fix));
+    console.log("");
+    console.log(colors.bold(colors.white("HISTORICAL EXPLOITS")));
+    console.log(colors.dim(knowledge.historical));
+    console.log("");
     console.log(colors.gray(DIVIDER));
     console.log("");
 });
@@ -285,10 +354,12 @@ program
     try {
         const opts = program.opts();
         if (options.format === "text")
-            printBanner(!opts.banner);
+            printStartup("Security Audit", !opts.banner);
         const binary = findRustBinary();
         const resolvedPath = path.resolve(targetPath);
+        const auditStart = Date.now();
         const result = spawnSync(binary, ["audit", resolvedPath], { encoding: "utf-8" });
+        const ruleEngineMs = Date.now() - auditStart;
         if (result.status !== 0)
             throw new Error("Parser failed");
         const findings = JSON.parse(result.stdout.trim());
@@ -308,7 +379,24 @@ program
             return !builtinIgnore.some(p => relPath.includes(`/${p}/`) || relPath.startsWith(`${p}/`) || relPath === p);
         });
         if (options.format === "text") {
-            const fileCount = activeFindings.length > 0 ? 182 : 45;
+            // Real repository structure from the parser's analyze pass + filesystem.
+            const fileCount = countRustFiles(resolvedPath);
+            let structsFound = 0, enumsFound = 0, accountsFound = 0;
+            let analyzeMs = 0;
+            try {
+                const analyzeStart = Date.now();
+                const analyzeResult = spawnSync(binary, [resolvedPath], { encoding: "utf-8" });
+                analyzeMs = Date.now() - analyzeStart;
+                if (analyzeResult.status === 0 && analyzeResult.stdout) {
+                    const overview = JSON.parse(analyzeResult.stdout.trim());
+                    structsFound = overview.structs_found ?? 0;
+                    enumsFound = overview.enums_found ?? 0;
+                    accountsFound = Array.isArray(overview.accounts) ? overview.accounts.length : 0;
+                }
+            }
+            catch {
+                // Analyze enrichment is best-effort; the audit result is authoritative.
+            }
             const totalTimeMs = Date.now() - startTime;
             printInitSequence([
                 `Scanning Files\n${colors.cyan("█████████████████████████")} ${colors.dim(`${fileCount} / ${fileCount}`)}`,
@@ -319,28 +407,22 @@ program
             const projName = path.basename(resolvedPath) || ".";
             printSection("Workspace", {
                 "Project": projName,
-                "Rust Version": "1.88.0",
-                "Anchor": "0.31",
-                "Rules Loaded": 5,
+                "Rules Loaded": Object.keys(ruleKnowledge).length,
                 "Configuration": options.config || "epic.toml"
             });
             printSection("Repository Overview", {
                 "Rust Files": fileCount,
-                "Instructions": Math.round(fileCount * 0.35),
-                "Accounts": Math.round(fileCount * 0.95),
-                "CPIs": Math.round(fileCount * 0.28),
-                "PDAs": Math.round(fileCount * 0.22),
-                "Anchor Programs": 1
+                "Structs": structsFound,
+                "Enums": enumsFound,
+                "State Accounts": accountsFound
             });
             const criticalCount = activeFindings.filter((f) => getSeverityLevel(f.severity) === 3).length;
             const warningCount = activeFindings.filter((f) => getSeverityLevel(f.severity) < 3).length;
             const rulesTriggered = new Set(activeFindings.map((f) => f.rule_id)).size;
             printSection("Execution Metrics", {
                 "Indexed Files": fileCount,
-                "AST Build": `${Math.max(1, Math.round(totalTimeMs * 0.45))} ms`,
-                "Call Graph": `${Math.max(1, Math.round(totalTimeMs * 0.15))} ms`,
-                "Rule Engine": `${Math.max(1, Math.round(totalTimeMs * 0.35))} ms`,
-                "Rendering": `${Math.max(1, Math.round(totalTimeMs * 0.05))} ms`,
+                "Parse + AST": `${Math.max(1, analyzeMs)} ms`,
+                "Rule Engine": `${Math.max(1, ruleEngineMs)} ms`,
                 "Total": `${(totalTimeMs / 1000).toFixed(2)} s`
             });
             printSection("Security Summary", {
@@ -387,13 +469,10 @@ program
                 const knowledge = ruleKnowledge[mostCommonRule];
                 console.log(colors.bold(colors.white("Most Common Issue")));
                 console.log(colors.dim(`${knowledge.desc}`));
-                console.log(colors.cyan(`${highestOccurrences} occurrences`));
-                console.log("");
-                console.log(colors.dim("Estimated Fix Time"));
-                console.log(colors.white("~25-40 minutes"));
+                console.log(colors.cyan(`${highestOccurrences} occurrence${highestOccurrences === 1 ? "" : "s"}`));
                 console.log("");
                 console.log(colors.dim("Priority"));
-                console.log(colors.white(`Resolve this rule before investigating other issues.`));
+                console.log(colors.white(`Resolve this rule first — it accounts for the most findings.`));
                 console.log("");
             }
             printEndSummary(projName, 5, criticalCount, warningCount, Date.now() - startTime);
@@ -402,18 +481,13 @@ program
             console.log(JSON.stringify(activeFindings, null, 2));
         }
         else if (options.format === "sarif") {
-            // Implement SARIF if needed
+            console.log(JSON.stringify(generateSarif(activeFindings), null, 2));
         }
         else if (options.format === "markdown") {
-            console.log("# EPIC Security Report");
-            console.log(`Critical: ${activeFindings.filter((f) => getSeverityLevel(f.severity) === 3).length}`);
-            console.log(`High: ${activeFindings.filter((f) => getSeverityLevel(f.severity) < 3).length}`);
-            console.log("\n## Findings\n");
-            for (const finding of activeFindings) {
-                console.log(`### ${finding.rule_id}: ${finding.rule_name || finding.rule_id}`);
-                console.log(`**Location:** \`${finding.location.file}:${finding.location.line}\``);
-                console.log(`**Message:** ${finding.message}\n`);
-            }
+            console.log(generateMarkdown(activeFindings, {
+                project: path.basename(resolvedPath) || ".",
+                scanMs: Date.now() - startTime
+            }));
         }
         if (options.strict) {
             const threshold = epicConfig.failOnSeverity || "CRITICAL";
@@ -447,34 +521,42 @@ program
     .command("rules")
     .description("List all available security rules.")
     .action(() => {
-    console.log("EPIC-SEC-001");
-    console.log("Owner Validation");
-    console.log("Critical");
-    console.log("Implemented\n");
-    console.log("EPIC-SEC-002");
-    console.log("Missing Signer Validation");
-    console.log("Critical");
-    console.log("Implemented\n");
-    console.log("EPIC-SEC-003");
-    console.log("Missing Post-CPI Account Reload");
-    console.log("Critical");
-    console.log("Implemented\n");
-    console.log("EPIC-SEC-004");
-    console.log("PDA Cryptographic Seed Collision Risk");
-    console.log("High");
-    console.log("Implemented\n");
-    console.log("EPIC-SEC-005");
-    console.log("Arbitrary CPI Target Program Spoofing");
-    console.log("Critical");
-    console.log("Implemented");
+    const opts = program.opts();
+    const startupShown = printStartup("Security Rules", !opts.banner);
+    const rules = [
+        ["EPIC-SEC-001", "Owner Validation"],
+        ["EPIC-SEC-002", "Missing Signer Validation"],
+        ["EPIC-SEC-003", "Missing Post-CPI Account Reload"],
+        ["EPIC-SEC-004", "PDA Cryptographic Seed Collision Risk"],
+        ["EPIC-SEC-005", "Arbitrary CPI Target Program Spoofing"]
+    ];
+    if (!startupShown) {
+        console.log(colors.gray(DIVIDER));
+        console.log(colors.white(colors.bold("EPIC Security Rules")));
+        console.log(colors.gray(DIVIDER));
+        console.log("");
+    }
+    for (const [id, name] of rules) {
+        const kb = ruleKnowledge[id];
+        const score = kb ? kb.score : 50;
+        const band = bandForScore(score);
+        console.log(`${severityBadge(band)}  ${colors.white(id)}  ${colors.gray("·")}  ${colors.white(name)}`);
+        if (kb) {
+            console.log(`   ${scoreBar(score, 16)}  ${colors.dim(`${score} / 100`)}  ${colors.gray("Implemented")}`);
+        }
+        else {
+            console.log(`   ${colors.gray("Implemented")}`);
+        }
+        console.log("");
+    }
+    console.log(colors.dim("Run 'epic explain <RULE-ID>' for a full breakdown of any rule."));
+    console.log("");
 });
 program.configureHelp({
     formatHelp: (cmd, helper) => {
-        return `
-${colors.bold(colors.white("EPIC"))}
-${colors.dim("Security-first upgrade intelligence for Solana")}
-${colors.cyan("v" + CLI_VERSION)}
-
+        const noBannerFlag = !!cmd.opts().noBanner || process.argv.includes("--no-banner");
+        const header = getBannerString(noBannerFlag);
+        return `${header}
 ${colors.bold("Commands")}
   ${colors.white("audit".padEnd(14))} Run security rules against the repository.
   ${colors.white("doctor".padEnd(14))} Run diagnostics on the environment.