@trynullsec/s1-zk 1.0.0

package/dist/frontends/halo2/halo2-patterns.js

@@ -0,0 +1,54 @@
+export const halo2DetectionPatterns = [
+    "halo2_proofs",
+    "ConstraintSystem",
+    "create_gate",
+    "query_advice",
+    "query_instance",
+    "assign_advice",
+    "constrain_equal",
+    "constrain_instance",
+    "enable_equality",
+    "Selector",
+    "Advice",
+    "Instance",
+    "Fixed"
+];
+export const halo2DetectionRegex = new RegExp(halo2DetectionPatterns.join("|"));
+export function isLikelyHalo2Source(source) {
+    return halo2DetectionRegex.test(source);
+}
+export function extractRustSymbols(expression) {
+    const reserved = new Set([
+        "self",
+        "meta",
+        "region",
+        "layouter",
+        "Value",
+        "Rotation",
+        "cur",
+        "prev",
+        "next",
+        "Ok",
+        "Err",
+        "Some",
+        "None",
+        "let",
+        "mut",
+        "move",
+        "return",
+        "assign_advice",
+        "assign_fixed",
+        "constrain_equal",
+        "constrain_instance",
+        "enable_selector"
+    ]);
+    const matches = expression.match(/\b[A-Za-z_][A-Za-z0-9_]*(?:\.[A-Za-z_][A-Za-z0-9_]*)*\b/g) ?? [];
+    return [...new Set(matches.filter((symbol) => !reserved.has(symbol.split(".")[0] ?? symbol) && !/^\d+$/.test(symbol)))];
+}
+export function isHashOrSafeInverseContext(snippet) {
+    return /is_zero|nonzero|not_zero|checked|safe|assert|constrain_equal|zero_check/i.test(snippet);
+}
+export function isEcLikeName(value) {
+    return /curve|point|scalar|base|fixed_base|variable_base|ecc|ec_|mul|window|endo/i.test(value);
+}
+//# sourceMappingURL=halo2-patterns.js.map

package/dist/frontends/halo2/halo2-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"halo2-patterns.js","sourceRoot":"","sources":["../../../src/frontends/halo2/halo2-patterns.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,UAAU;IACV,QAAQ;IACR,UAAU;IACV,OAAO;CACR,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEhF,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACvB,MAAM;QACN,MAAM;QACN,QAAQ;QACR,UAAU;QACV,OAAO;QACP,UAAU;QACV,KAAK;QACL,MAAM;QACN,MAAM;QACN,IAAI;QACJ,KAAK;QACL,MAAM;QACN,MAAM;QACN,KAAK;QACL,KAAK;QACL,MAAM;QACN,QAAQ;QACR,eAAe;QACf,cAAc;QACd,iBAAiB;QACjB,oBAAoB;QACpB,iBAAiB;KAClB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,0DAA0D,CAAC,IAAI,EAAE,CAAC;IACnG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1H,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,2EAA2E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjG,CAAC"}

package/dist/frontends/halo2/halo2-types.d.ts

@@ -0,0 +1,100 @@
+import type { ParserWarning, SourceLocation } from "../../types.js";
+export interface Halo2Column extends SourceLocation {
+    name: string;
+    columnType: "advice" | "fixed" | "instance" | "unknown";
+    equalityEnabled: boolean;
+}
+export interface Halo2Selector extends SourceLocation {
+    name: string;
+    enabledLines: number[];
+    usedInGates: string[];
+}
+export interface Halo2Query extends SourceLocation {
+    queryType: "advice" | "fixed" | "instance" | "selector";
+    columnName: string;
+    rotation?: string;
+    gateName?: string;
+}
+export interface Halo2Gate extends SourceLocation {
+    name: string;
+    body: string;
+    queries: Halo2Query[];
+    selectors: string[];
+    expressions: string[];
+    returnedExpressions?: string[];
+    variableReferences?: string[];
+    selectorAliases?: Record<string, string>;
+    adviceAliases?: Record<string, string>;
+    instanceAliases?: Record<string, string>;
+    fixedAliases?: Record<string, string>;
+}
+export interface Halo2Assignment extends SourceLocation {
+    assignmentType: "advice" | "fixed";
+    target?: string;
+    columnName?: string;
+    label?: string;
+    rowOffset?: string;
+    assignedVariable?: string;
+    cellVariable?: string;
+    regionName?: string;
+    expression: string;
+    referencedSymbols: string[];
+}
+export interface Halo2EqualityConstraint extends SourceLocation {
+    lhs: string;
+    rhs: string;
+    referencedColumns: string[];
+}
+export interface Halo2InstanceConstraint extends SourceLocation {
+    cell: string;
+    instanceColumn: string;
+    row?: string;
+}
+export interface Halo2Lookup extends SourceLocation {
+    expression: string;
+    referencedSymbols: string[];
+}
+export interface Halo2Region extends SourceLocation {
+    name: string;
+    assignments: Halo2Assignment[];
+    selectorEnables: string[];
+    copyAdvice: Halo2CopyConstraint[];
+    equalityConstraints: Halo2EqualityConstraint[];
+    instanceConstraints: Halo2InstanceConstraint[];
+}
+export interface Halo2CopyConstraint extends SourceLocation {
+    source: string;
+    targetColumn?: string;
+    targetOffset?: string;
+    referencedSymbols: string[];
+}
+export interface Halo2CircuitFile {
+    filePath: string;
+    rawSource: string;
+    columns: Halo2Column[];
+    selectors: Halo2Selector[];
+    gates: Halo2Gate[];
+    queries: Halo2Query[];
+    assignments: Halo2Assignment[];
+    equalityConstraints: Halo2EqualityConstraint[];
+    instanceConstraints: Halo2InstanceConstraint[];
+    lookups: Halo2Lookup[];
+    regions: Halo2Region[];
+    copyConstraints: Halo2CopyConstraint[];
+    parserWarnings: ParserWarning[];
+    detectedPatterns: string[];
+}
+export interface Halo2IR {
+    files: Halo2CircuitFile[];
+    columns: Halo2Column[];
+    selectors: Halo2Selector[];
+    gates: Halo2Gate[];
+    queries: Halo2Query[];
+    assignments: Halo2Assignment[];
+    equalityConstraints: Halo2EqualityConstraint[];
+    instanceConstraints: Halo2InstanceConstraint[];
+    lookups: Halo2Lookup[];
+    regions: Halo2Region[];
+    copyConstraints: Halo2CopyConstraint[];
+    parserWarnings: ParserWarning[];
+}

package/dist/frontends/halo2/halo2-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=halo2-types.js.map

package/dist/frontends/halo2/halo2-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"halo2-types.js","sourceRoot":"","sources":["../../../src/frontends/halo2/halo2-types.ts"],"names":[],"mappings":""}

package/dist/frontends/noir/noir-adapter.d.ts

@@ -0,0 +1,5 @@
+export interface NoirAdapter {
+    readonly frontend: "Noir";
+    parse(): never;
+}
+export declare const noirAdapter: NoirAdapter;

package/dist/frontends/noir/noir-adapter.js

@@ -0,0 +1,7 @@
+export const noirAdapter = {
+    frontend: "Noir",
+    parse() {
+        throw new Error("Noir frontend is planned but not implemented in v1.");
+    }
+};
+//# sourceMappingURL=noir-adapter.js.map

package/dist/frontends/noir/noir-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noir-adapter.js","sourceRoot":"","sources":["../../../src/frontends/noir/noir-adapter.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,QAAQ,EAAE,MAAM;IAChB,KAAK;QACH,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { scanTarget, renderReport } from "./scanner.js";
+export { loadConfig, writeDefaultConfig } from "./config.js";
+export { allRules } from "./rules/index.js";
+export type * from "./types.js";

package/dist/index.js

@@ -0,0 +1,4 @@
+export { scanTarget, renderReport } from "./scanner.js";
+export { loadConfig, writeDefaultConfig } from "./config.js";
+export { allRules } from "./rules/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/ir/circuit-ir.d.ts

@@ -0,0 +1 @@
+export type { Assertion, Assignment, CircuitIR, ComponentDeclaration, Constraint, IncludeStatement, ParsedCircuitFile, ParserWarning, SignalDeclaration, TemplateDeclaration } from "../types.js";

package/dist/ir/circuit-ir.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=circuit-ir.js.map

package/dist/ir/circuit-ir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-ir.js","sourceRoot":"","sources":["../../src/ir/circuit-ir.ts"],"names":[],"mappings":""}

package/dist/ir/component-table.d.ts

@@ -0,0 +1,6 @@
+import type { ComponentDeclaration } from "../types.js";
+export declare class ComponentTable {
+    private readonly byName;
+    constructor(components: ComponentDeclaration[]);
+    get(name: string): ComponentDeclaration | undefined;
+}

package/dist/ir/component-table.js

@@ -0,0 +1,11 @@
+export class ComponentTable {
+    byName = new Map();
+    constructor(components) {
+        for (const component of components)
+            this.byName.set(component.name, component);
+    }
+    get(name) {
+        return this.byName.get(name);
+    }
+}
+//# sourceMappingURL=component-table.js.map

package/dist/ir/component-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component-table.js","sourceRoot":"","sources":["../../src/ir/component-table.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,cAAc;IACR,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IAElE,YAAY,UAAkC;QAC5C,KAAK,MAAM,SAAS,IAAI,UAAU;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjF,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/ir/constraint-graph.d.ts

@@ -0,0 +1,26 @@
+import type { Assignment, CircuitIR, Constraint, SignalDeclaration, SourceLocation } from "../types.js";
+export declare class ConstraintGraph {
+    private readonly ir;
+    private constraintSignals;
+    private equalitySignals;
+    private assignmentMap;
+    constructor(ir: CircuitIR);
+    declaredSignals(): SignalDeclaration[];
+    inputSignals(): SignalDeclaration[];
+    publicInputSignals(): SignalDeclaration[];
+    outputSignals(): SignalDeclaration[];
+    assignedByHint(): Assignment[];
+    assignedByConstraint(): Assignment[];
+    constraintsForSignal(signalName: string): Constraint[];
+    assignmentsForSignal(signalName: string): Assignment[];
+    appearsInAnyConstraint(signalName: string): boolean;
+    appearsInEqualityConstraint(signalName: string): boolean;
+    onlyAssignedButNeverConstrained(): Assignment[];
+    unboundInputs(): SignalDeclaration[];
+    unconstrainedOutputs(): SignalDeclaration[];
+    hasBooleanityConstraint(signalName: string): boolean;
+    hasRangeCheck(signalName: string, templateName?: string): boolean;
+    isComponentOutputReference(reference: string): boolean;
+    isComponentOutputConstrained(reference: string): boolean;
+    signalReferences(signalName: string): SourceLocation[];
+}

package/dist/ir/constraint-graph.js

@@ -0,0 +1,130 @@
+import { baseSignalName, extractSignalReferences, normalizeSignalReference } from "../frontends/circom/circom-utils.js";
+function namesEquivalent(reference, signalName) {
+    const ref = normalizeSignalReference(reference);
+    const sig = normalizeSignalReference(signalName);
+    return ref === sig || baseSignalName(ref) === baseSignalName(sig);
+}
+function expressionMentionsSignal(expression, signalName) {
+    return extractSignalReferences(expression).some((ref) => namesEquivalent(ref, signalName));
+}
+export class ConstraintGraph {
+    ir;
+    constraintSignals = new Set();
+    equalitySignals = new Set();
+    assignmentMap = new Map();
+    constructor(ir) {
+        this.ir = ir;
+        for (const assignment of ir.assignments) {
+            const key = baseSignalName(assignment.lhs);
+            const existing = this.assignmentMap.get(key) ?? [];
+            existing.push(assignment);
+            this.assignmentMap.set(key, existing);
+        }
+        for (const constraint of ir.constraints) {
+            for (const ref of constraint.referencedSignals) {
+                this.constraintSignals.add(baseSignalName(ref));
+                if (constraint.operator === "===")
+                    this.equalitySignals.add(baseSignalName(ref));
+            }
+            if (constraint.lhs)
+                this.constraintSignals.add(baseSignalName(constraint.lhs));
+        }
+    }
+    declaredSignals() {
+        return this.ir.signals;
+    }
+    inputSignals() {
+        return this.ir.signals.filter((signal) => signal.kind === "input");
+    }
+    publicInputSignals() {
+        return this.inputSignals();
+    }
+    outputSignals() {
+        return this.ir.signals.filter((signal) => signal.kind === "output");
+    }
+    assignedByHint() {
+        return this.ir.assignments.filter((assignment) => assignment.operator === "<--");
+    }
+    assignedByConstraint() {
+        return this.ir.assignments.filter((assignment) => assignment.operator === "<==");
+    }
+    constraintsForSignal(signalName) {
+        return this.ir.constraints.filter((constraint) => {
+            if (constraint.lhs && namesEquivalent(constraint.lhs, signalName))
+                return true;
+            return constraint.referencedSignals.some((ref) => namesEquivalent(ref, signalName));
+        });
+    }
+    assignmentsForSignal(signalName) {
+        return this.ir.assignments.filter((assignment) => namesEquivalent(assignment.lhs, signalName));
+    }
+    appearsInAnyConstraint(signalName) {
+        return this.constraintSignals.has(baseSignalName(signalName)) || this.constraintsForSignal(signalName).length > 0;
+    }
+    appearsInEqualityConstraint(signalName) {
+        return this.equalitySignals.has(baseSignalName(signalName)) || this.constraintsForSignal(signalName).some((constraint) => constraint.operator === "===");
+    }
+    onlyAssignedButNeverConstrained() {
+        return this.assignedByHint().filter((assignment) => !this.appearsInAnyConstraint(assignment.lhs));
+    }
+    unboundInputs() {
+        return this.inputSignals().filter((signal) => !this.appearsInAnyConstraint(signal.name));
+    }
+    unconstrainedOutputs() {
+        return this.outputSignals().filter((signal) => {
+            const assignments = this.assignmentsForSignal(signal.name);
+            return assignments.some((assignment) => assignment.operator === "<--") || !this.appearsInAnyConstraint(signal.name);
+        });
+    }
+    hasBooleanityConstraint(signalName) {
+        const escaped = signalName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").replace(/\\\[\\\]/g, "(?:\\[[^\\]]+\\])?");
+        const compactPatterns = [
+            new RegExp(`${escaped}\\*\\(${escaped}-1\\)===0`),
+            new RegExp(`${escaped}\\*\\(1-${escaped}\\)===0`),
+            new RegExp(`\\(${escaped}-1\\)\\*${escaped}===0`)
+        ];
+        return this.ir.constraints.some((constraint) => {
+            const compact = constraint.expression.replace(/\s+/g, "");
+            if (compactPatterns.some((pattern) => pattern.test(compact)))
+                return true;
+            return /Num2Bits|Bits2Num/.test(constraint.expression) && expressionMentionsSignal(constraint.expression, signalName);
+        });
+    }
+    hasRangeCheck(signalName, templateName) {
+        const rangePattern = /Num2Bits|Bits2Num|LessThan|LessEqThan|GreaterThan|GreaterEqThan|RangeCheck|rangeCheck|Decompose|AliasCheck|bits?\[/;
+        const inScope = (node) => !templateName || !node.templateName || node.templateName === templateName;
+        const rangeComponents = this.ir.components.filter((component) => inScope(component) && rangePattern.test(`${component.templateType ?? ""}${component.name}`));
+        const rangeComponentNames = new Set(rangeComponents.map((component) => component.name));
+        return (rangeComponents.some((component) => component.inputs.some((input) => expressionMentionsSignal(input, signalName))) ||
+            this.ir.constraints.some((constraint) => inScope(constraint) &&
+                constraint.lhs !== undefined &&
+                rangeComponentNames.has(constraint.lhs.split(".")[0] ?? "") &&
+                constraint.referencedSignals.some((ref) => namesEquivalent(ref, signalName))) ||
+            this.ir.constraints.some((constraint) => inScope(constraint) && rangePattern.test(constraint.expression) && expressionMentionsSignal(constraint.expression, signalName)) ||
+            this.ir.assignments.some((assignment) => inScope(assignment) && rangePattern.test(`${assignment.rhs} ${assignment.lhs}`) && assignment.referencedSignals.some((ref) => namesEquivalent(ref, signalName))));
+    }
+    isComponentOutputReference(reference) {
+        const normalized = normalizeSignalReference(reference);
+        return this.ir.components.some((component) => normalized.startsWith(`${component.name}.`));
+    }
+    isComponentOutputConstrained(reference) {
+        return this.ir.constraints.some((constraint) => expressionMentionsSignal(constraint.expression, reference));
+    }
+    signalReferences(signalName) {
+        const refs = [];
+        for (const assignment of this.ir.assignments) {
+            if (assignment.referencedSignals.some((ref) => namesEquivalent(ref, signalName)) || namesEquivalent(assignment.lhs, signalName))
+                refs.push(assignment);
+        }
+        for (const constraint of this.ir.constraints) {
+            if (constraint.referencedSignals.some((ref) => namesEquivalent(ref, signalName)))
+                refs.push(constraint);
+        }
+        for (const assertion of this.ir.assertions) {
+            if (assertion.referencedSignals.some((ref) => namesEquivalent(ref, signalName)))
+                refs.push(assertion);
+        }
+        return refs;
+    }
+}
+//# sourceMappingURL=constraint-graph.js.map

package/dist/ir/constraint-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraint-graph.js","sourceRoot":"","sources":["../../src/ir/constraint-graph.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAExH,SAAS,eAAe,CAAC,SAAiB,EAAE,UAAkB;IAC5D,MAAM,GAAG,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACjD,OAAO,GAAG,KAAK,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAkB,EAAE,UAAkB;IACtE,OAAO,uBAAuB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,OAAO,eAAe;IAKG;IAJrB,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,aAAa,GAAG,IAAI,GAAG,EAAwB,CAAC;IAExD,YAA6B,EAAa;QAAb,OAAE,GAAF,EAAE,CAAW;QACxC,KAAK,MAAM,UAAU,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;gBAC/C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChD,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK;oBAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,UAAU,CAAC,GAAG;gBAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACtE,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IACnF,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IACnF,CAAC;IAED,oBAAoB,CAAC,UAAkB;QACrC,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE;YAC/C,IAAI,UAAU,CAAC,GAAG,IAAI,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/E,OAAO,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,UAAkB;QACrC,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,sBAAsB,CAAC,UAAkB;QACvC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACpH,CAAC;IAED,2BAA2B,CAAC,UAAkB;QAC5C,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IAC3J,CAAC;IAED,+BAA+B;QAC7B,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB,CAAC,UAAkB;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;QAC7G,MAAM,eAAe,GAAG;YACtB,IAAI,MAAM,CAAC,GAAG,OAAO,SAAS,OAAO,WAAW,CAAC;YACjD,IAAI,MAAM,CAAC,GAAG,OAAO,WAAW,OAAO,SAAS,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,OAAO,WAAW,OAAO,MAAM,CAAC;SAClD,CAAC;QACF,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1E,OAAO,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,wBAAwB,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACxH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,UAAkB,EAAE,YAAqB;QACrD,MAAM,YAAY,GAAG,oHAAoH,CAAC;QAC1I,MAAM,OAAO,GAAG,CAAsC,IAAO,EAAW,EAAE,CACxE,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,CAAC;QAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAC/C,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,YAAY,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAC3G,CAAC;QACF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAExF,OAAO,CACL,eAAe,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YAClH,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC,UAAU,EAAE,EAAE,CACb,OAAO,CAAC,UAAU,CAAC;gBACnB,UAAU,CAAC,GAAG,KAAK,SAAS;gBAC5B,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3D,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAC/E;YACD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,wBAAwB,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,CAC/I;YACD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CACtB,CAAC,UAAU,EAAE,EAAE,CACb,OAAO,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAClK,CACF,CAAC;IACJ,CAAC;IAED,0BAA0B,CAAC,SAAiB;QAC1C,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,4BAA4B,CAAC,SAAiB;QAC5C,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,wBAAwB,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9G,CAAC;IAED,gBAAgB,CAAC,UAAkB;QACjC,MAAM,IAAI,GAAqB,EAAE,CAAC;QAClC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzJ,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1G,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;YAC3C,IAAI,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/ir/dataflow.d.ts

@@ -0,0 +1,3 @@
+import type { Assignment, CircuitIR } from "../types.js";
+export declare function assignmentsInto(signalName: string, ir: CircuitIR): Assignment[];
+export declare function downstreamAssignments(signalName: string, ir: CircuitIR): Assignment[];

package/dist/ir/dataflow.js

@@ -0,0 +1,10 @@
+import { baseSignalName } from "../frontends/circom/circom-utils.js";
+export function assignmentsInto(signalName, ir) {
+    const target = baseSignalName(signalName);
+    return ir.assignments.filter((assignment) => baseSignalName(assignment.lhs) === target);
+}
+export function downstreamAssignments(signalName, ir) {
+    const target = baseSignalName(signalName);
+    return ir.assignments.filter((assignment) => assignment.referencedSignals.some((ref) => baseSignalName(ref) === target));
+}
+//# sourceMappingURL=dataflow.js.map

package/dist/ir/dataflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataflow.js","sourceRoot":"","sources":["../../src/ir/dataflow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAErE,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,EAAa;IAC/D,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,EAAa;IACrE,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;AAC3H,CAAC"}

package/dist/ir/reference-index.d.ts

@@ -0,0 +1,6 @@
+import type { CircuitIR, SourceLocation } from "../types.js";
+export declare class ReferenceIndex {
+    private readonly locations;
+    constructor(ir: CircuitIR);
+    get(signalName: string): SourceLocation[];
+}

package/dist/ir/reference-index.js

@@ -0,0 +1,18 @@
+import { baseSignalName } from "../frontends/circom/circom-utils.js";
+export class ReferenceIndex {
+    locations = new Map();
+    constructor(ir) {
+        for (const node of [...ir.assignments, ...ir.constraints, ...ir.assertions]) {
+            for (const ref of node.referencedSignals) {
+                const key = baseSignalName(ref);
+                const existing = this.locations.get(key) ?? [];
+                existing.push(node);
+                this.locations.set(key, existing);
+            }
+        }
+    }
+    get(signalName) {
+        return this.locations.get(baseSignalName(signalName)) ?? [];
+    }
+}
+//# sourceMappingURL=reference-index.js.map

package/dist/ir/reference-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-index.js","sourceRoot":"","sources":["../../src/ir/reference-index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAErE,MAAM,OAAO,cAAc;IACR,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEjE,YAAY,EAAa;QACvB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACzC,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,CAAC;CACF"}

package/dist/ir/signal-table.d.ts

@@ -0,0 +1,6 @@
+import type { SignalDeclaration } from "../types.js";
+export declare class SignalTable {
+    private readonly byBaseName;
+    constructor(signals: SignalDeclaration[]);
+    get(name: string): SignalDeclaration[];
+}

package/dist/ir/signal-table.js

@@ -0,0 +1,16 @@
+import { baseSignalName } from "../frontends/circom/circom-utils.js";
+export class SignalTable {
+    byBaseName = new Map();
+    constructor(signals) {
+        for (const signal of signals) {
+            const key = baseSignalName(signal.name);
+            const existing = this.byBaseName.get(key) ?? [];
+            existing.push(signal);
+            this.byBaseName.set(key, existing);
+        }
+    }
+    get(name) {
+        return this.byBaseName.get(baseSignalName(name)) ?? [];
+    }
+}
+//# sourceMappingURL=signal-table.js.map

package/dist/ir/signal-table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal-table.js","sourceRoot":"","sources":["../../src/ir/signal-table.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAErE,MAAM,OAAO,WAAW;IACL,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAErE,YAAY,OAA4B;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;CACF"}

package/dist/report/json.d.ts

@@ -0,0 +1,2 @@
+import type { AuditResult } from "../types.js";
+export declare function renderJsonReport(result: AuditResult): string;

package/dist/report/json.js

@@ -0,0 +1,4 @@
+export function renderJsonReport(result) {
+    return `${JSON.stringify(result, null, 2)}\n`;
+}
+//# sourceMappingURL=json.js.map

package/dist/report/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/report/json.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC"}

package/dist/report/markdown.d.ts

@@ -0,0 +1,2 @@
+import type { AuditResult } from "../types.js";
+export declare function renderMarkdownReport(result: AuditResult): string;

package/dist/report/markdown.js

@@ -0,0 +1,45 @@
+function renderIssue(issue) {
+    return `## [${issue.severity}] ${issue.ruleId} ${issue.title}
+
+**File:** \`${issue.file}:${issue.line}\`  
+**Template:** ${issue.templateName ? `\`${issue.templateName}\`` : "unknown"}  
+**Confidence:** ${issue.confidence}
+
+\`\`\`circom
+${issue.snippet ?? ""}
+\`\`\`
+
+### Why This Matters
+${issue.explanation}
+
+### Impact
+${issue.impact}
+
+### Suggested Fix
+${issue.suggestedFix}
+`;
+}
+export function renderMarkdownReport(result) {
+    return `# Nullsec S1-ZK Report
+
+AI-native auditing for zero-knowledge circuits. Find underconstraints before they mint infinite money.
+
+**Target:** \`${result.target}\`  
+**Frontend:** ${result.frontend}  
+**Files scanned:** ${result.filesScanned}  
+**Rules executed:** ${result.rulesExecuted}  
+**Issues found:** ${result.issues.length}
+
+## Severity Summary
+
+- CRITICAL: ${result.summary.CRITICAL}
+- HIGH: ${result.summary.HIGH}
+- MEDIUM: ${result.summary.MEDIUM}
+- LOW: ${result.summary.LOW}
+- INFO: ${result.summary.INFO}
+
+${result.issues.map(renderIssue).join("\n")}
+${result.parserWarnings.length > 0 ? `\n## Parser Warnings\n\n${result.parserWarnings.map((warning) => `- \`${warning.file}:${warning.line}\` ${warning.message}`).join("\n")}\n` : ""}
+`;
+}
+//# sourceMappingURL=markdown.js.map

package/dist/report/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/report/markdown.ts"],"names":[],"mappings":"AAEA,SAAS,WAAW,CAAC,KAAY;IAC/B,OAAO,OAAO,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;;cAEhD,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;gBACtB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,SAAS;kBAC1D,KAAK,CAAC,UAAU;;;EAGhC,KAAK,CAAC,OAAO,IAAI,EAAE;;;;EAInB,KAAK,CAAC,WAAW;;;EAGjB,KAAK,CAAC,MAAM;;;EAGZ,KAAK,CAAC,YAAY;CACnB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO;;;;gBAIO,MAAM,CAAC,MAAM;gBACb,MAAM,CAAC,QAAQ;qBACV,MAAM,CAAC,YAAY;sBAClB,MAAM,CAAC,aAAa;oBACtB,MAAM,CAAC,MAAM,CAAC,MAAM;;;;cAI1B,MAAM,CAAC,OAAO,CAAC,QAAQ;UAC3B,MAAM,CAAC,OAAO,CAAC,IAAI;YACjB,MAAM,CAAC,OAAO,CAAC,MAAM;SACxB,MAAM,CAAC,OAAO,CAAC,GAAG;UACjB,MAAM,CAAC,OAAO,CAAC,IAAI;;EAE3B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EACzC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,2BAA2B,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;CACrL,CAAC;AACF,CAAC"}

package/dist/report/sarif.d.ts

@@ -0,0 +1,2 @@
+import type { AuditResult } from "../types.js";
+export declare function renderSarifReport(result: AuditResult): string;

package/dist/report/sarif.js

@@ -0,0 +1,52 @@
+import { allRules } from "../rules/index.js";
+export function renderSarifReport(result) {
+    const sarif = {
+        version: "2.1.0",
+        $schema: "https://json.schemastore.org/sarif-2.1.0.json",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: result.tool.name,
+                        version: result.tool.version,
+                        informationUri: "https://nullsec.dev/s1-zk",
+                        rules: allRules.map((rule) => ({
+                            id: rule.id,
+                            name: rule.title,
+                            shortDescription: { text: rule.title },
+                            fullDescription: { text: rule.description },
+                            defaultConfiguration: { level: rule.defaultSeverity === "CRITICAL" || rule.defaultSeverity === "HIGH" ? "error" : "warning" },
+                            properties: { tags: rule.tags }
+                        }))
+                    }
+                },
+                results: result.issues.map((issue) => ({
+                    ruleId: issue.ruleId,
+                    level: issue.severity === "CRITICAL" || issue.severity === "HIGH" ? "error" : issue.severity === "INFO" ? "note" : "warning",
+                    message: { text: `${issue.title}: ${issue.explanation}` },
+                    locations: [
+                        {
+                            physicalLocation: {
+                                artifactLocation: { uri: issue.file },
+                                region: {
+                                    startLine: issue.line,
+                                    startColumn: issue.column ?? 1,
+                                    snippet: { text: issue.snippet ?? "" }
+                                }
+                            }
+                        }
+                    ],
+                    properties: {
+                        severity: issue.severity,
+                        confidence: issue.confidence,
+                        impact: issue.impact,
+                        suggestedFix: issue.suggestedFix,
+                        tags: issue.tags
+                    }
+                }))
+            }
+        ]
+    };
+    return `${JSON.stringify(sarif, null, 2)}\n`;
+}
+//# sourceMappingURL=sarif.js.map

package/dist/report/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/report/sarif.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,KAAK,GAAG;QACZ,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,+CAA+C;QACxD,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;wBACtB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;wBAC5B,cAAc,EAAE,2BAA2B;wBAC3C,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;4BAC7B,EAAE,EAAE,IAAI,CAAC,EAAE;4BACX,IAAI,EAAE,IAAI,CAAC,KAAK;4BAChB,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE;4BACtC,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;4BAC3C,oBAAoB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,KAAK,UAAU,IAAI,IAAI,CAAC,eAAe,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE;4BAC7H,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;yBAChC,CAAC,CAAC;qBACJ;iBACF;gBACD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACrC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,KAAK,EAAE,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;oBAC5H,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE,EAAE;oBACzD,SAAS,EAAE;wBACT;4BACE,gBAAgB,EAAE;gCAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE;gCACrC,MAAM,EAAE;oCACN,SAAS,EAAE,KAAK,CAAC,IAAI;oCACrB,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;oCAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE;iCACvC;6BACF;yBACF;qBACF;oBACD,UAAU,EAAE;wBACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,YAAY,EAAE,KAAK,CAAC,YAAY;wBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB;iBACF,CAAC,CAAC;aACJ;SACF;KACF,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC"}

package/dist/report/summary.d.ts

@@ -0,0 +1,2 @@
+import type { AuditSummary, Issue } from "../types.js";
+export declare function summarizeIssues(issues: Issue[]): AuditSummary;

package/dist/report/summary.js

@@ -0,0 +1,7 @@
+export function summarizeIssues(issues) {
+    return issues.reduce((summary, issue) => {
+        summary[issue.severity] += 1;
+        return summary;
+    }, { CRITICAL: 0, HIGH: 0, MEDIUM: 0, LOW: 0, INFO: 0 });
+}
+//# sourceMappingURL=summary.js.map