@trynullsec/s1-zk 1.0.0

package/dist/report/summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../src/report/summary.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACjB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC;IACjB,CAAC,EACD,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CACrD,CAAC;AACJ,CAAC"}

package/dist/report/terminal.d.ts

@@ -0,0 +1,2 @@
+import type { AuditResult } from "../types.js";
+export declare function renderTerminalReport(result: AuditResult): string;

package/dist/report/terminal.js

@@ -0,0 +1,50 @@
+import chalk from "chalk";
+const colorBySeverity = {
+    CRITICAL: chalk.redBright.bold,
+    HIGH: chalk.red,
+    MEDIUM: chalk.yellow,
+    LOW: chalk.blue,
+    INFO: chalk.gray
+};
+function renderIssue(issue) {
+    const color = colorBySeverity[issue.severity];
+    return `${color(`[${issue.severity}]`)} ${issue.ruleId} ${issue.title}
+File: ${issue.file}:${issue.line}
+Template: ${issue.templateName ?? "unknown"}
+
+  ${issue.snippet ?? ""}
+
+Why this matters:
+${issue.explanation}
+
+Impact:
+${issue.impact}
+
+Suggested fix:
+${issue.suggestedFix}
+
+Confidence:
+${issue.confidence}
+`;
+}
+export function renderTerminalReport(result) {
+    return `${chalk.bold("Nullsec S1-ZK")}
+AI-native auditing for zero-knowledge circuits
+
+Target: ${result.target}
+Frontend: ${result.frontend}
+Files scanned: ${result.filesScanned}
+Rules executed: ${result.rulesExecuted}
+Issues found: ${result.issues.length}
+
+Severity summary:
+CRITICAL  ${result.summary.CRITICAL}
+HIGH      ${result.summary.HIGH}
+MEDIUM    ${result.summary.MEDIUM}
+LOW       ${result.summary.LOW}
+INFO      ${result.summary.INFO}
+
+${result.issues.map(renderIssue).join("\n")}
+${result.parserWarnings.length > 0 ? `Parser warnings: ${result.parserWarnings.length}\n` : ""}`;
+}
+//# sourceMappingURL=terminal.js.map

package/dist/report/terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../src/report/terminal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,eAAe,GAAgD;IACnE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;IAC9B,IAAI,EAAE,KAAK,CAAC,GAAG;IACf,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,EAAE,KAAK,CAAC,IAAI;IACf,IAAI,EAAE,KAAK,CAAC,IAAI;CACjB,CAAC;AAEF,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK;QAC/D,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;YACpB,KAAK,CAAC,YAAY,IAAI,SAAS;;IAEvC,KAAK,CAAC,OAAO,IAAI,EAAE;;;EAGrB,KAAK,CAAC,WAAW;;;EAGjB,KAAK,CAAC,MAAM;;;EAGZ,KAAK,CAAC,YAAY;;;EAGlB,KAAK,CAAC,UAAU;CACjB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC;;;UAG7B,MAAM,CAAC,MAAM;YACX,MAAM,CAAC,QAAQ;iBACV,MAAM,CAAC,YAAY;kBAClB,MAAM,CAAC,aAAa;gBACtB,MAAM,CAAC,MAAM,CAAC,MAAM;;;YAGxB,MAAM,CAAC,OAAO,CAAC,QAAQ;YACvB,MAAM,CAAC,OAAO,CAAC,IAAI;YACnB,MAAM,CAAC,OAAO,CAAC,MAAM;YACrB,MAAM,CAAC,OAAO,CAAC,GAAG;YAClB,MAAM,CAAC,OAAO,CAAC,IAAI;;EAE7B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;EACzC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjG,CAAC"}

package/dist/rules/NS-ZK-001-dangerous-hint-assignment.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const dangerousHintAssignmentRule: Rule;

package/dist/rules/NS-ZK-001-dangerous-hint-assignment.js

@@ -0,0 +1,27 @@
+import { buildIssue } from "../core/issue-builder.js";
+export const dangerousHintAssignmentRule = {
+    id: "NS-ZK-001",
+    title: "Dangerous hint assignment",
+    description: "Detects Circom <-- assignments, which assign witness values without creating constraints.",
+    defaultSeverity: "CRITICAL",
+    tags: ["circom", "hints", "underconstraint"],
+    analyze(context) {
+        return context.graph.assignedByHint().map((assignment) => {
+            const constrained = context.graph.appearsInAnyConstraint(assignment.lhs);
+            return buildIssue({
+                ruleId: "NS-ZK-001",
+                title: "Dangerous hint assignment",
+                severity: constrained ? "MEDIUM" : "CRITICAL",
+                confidence: constrained ? "MEDIUM" : "HIGH",
+                location: assignment,
+                signalName: assignment.lhs,
+                explanation: `The signal \`${assignment.lhs}\` is assigned with <-- from \`${assignment.rhs}\`. In Circom, <-- computes a witness value but does not create a constraint.${constrained ? " The signal appears in a later constraint, so the immediate risk is lower but should still be reviewed." : " The signal was not later constrained with === or <==."}`,
+                impact: "A malicious prover may choose arbitrary witness values unless the assignment is independently constrained.",
+                suggestedFix: `Prefer <== when possible, or add an explicit equality constraint such as \`${assignment.lhs} === ${assignment.rhs}\`.`,
+                tags: dangerousHintAssignmentRule.tags,
+                metadata: { rhs: assignment.rhs, constrained }
+            });
+        });
+    }
+};
+//# sourceMappingURL=NS-ZK-001-dangerous-hint-assignment.js.map

package/dist/rules/NS-ZK-001-dangerous-hint-assignment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-001-dangerous-hint-assignment.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-001-dangerous-hint-assignment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,2BAA2B;IAClC,WAAW,EAAE,2FAA2F;IACxG,eAAe,EAAE,UAAU;IAC3B,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC;IAC5C,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YACvD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACzE,OAAO,UAAU,CAAC;gBAChB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,2BAA2B;gBAClC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;gBAC7C,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;gBAC3C,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,UAAU,CAAC,GAAG;gBAC1B,WAAW,EAAE,gBAAgB,UAAU,CAAC,GAAG,kCAAkC,UAAU,CAAC,GAAG,gFAAgF,WAAW,CAAC,CAAC,CAAC,yGAAyG,CAAC,CAAC,CAAC,wDAAwD,EAAE;gBAC/V,MAAM,EAAE,4GAA4G;gBACpH,YAAY,EAAE,8EAA8E,UAAU,CAAC,GAAG,QAAQ,UAAU,CAAC,GAAG,KAAK;gBACrI,IAAI,EAAE,2BAA2B,CAAC,IAAI;gBACtC,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-002-assigned-but-unconstrained.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const assignedButUnconstrainedRule: Rule;

package/dist/rules/NS-ZK-002-assigned-but-unconstrained.js

@@ -0,0 +1,22 @@
+import { buildIssue } from "../core/issue-builder.js";
+export const assignedButUnconstrainedRule = {
+    id: "NS-ZK-002",
+    title: "Assigned but unconstrained signal",
+    description: "Detects signals assigned with <-- that are not constrained with === or <==.",
+    defaultSeverity: "CRITICAL",
+    tags: ["circom", "underconstraint", "soundness"],
+    analyze(context) {
+        return context.graph.onlyAssignedButNeverConstrained().map((assignment) => buildIssue({
+            ruleId: "NS-ZK-002",
+            title: "Assigned but unconstrained signal",
+            severity: "CRITICAL",
+            location: assignment,
+            signalName: assignment.lhs,
+            explanation: `The signal \`${assignment.lhs}\` is assigned with <--, which does not create a constraint. The signal was not later constrained with === or <==.`,
+            impact: "A malicious prover may choose arbitrary witness values while still satisfying the circuit.",
+            suggestedFix: `Use <== when possible, or add an explicit constraint such as \`${assignment.lhs} === ${assignment.rhs}\`.`,
+            tags: assignedButUnconstrainedRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-ZK-002-assigned-but-unconstrained.js.map

package/dist/rules/NS-ZK-002-assigned-but-unconstrained.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-002-assigned-but-unconstrained.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-002-assigned-but-unconstrained.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,4BAA4B,GAAS;IAChD,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,mCAAmC;IAC1C,WAAW,EAAE,6EAA6E;IAC1F,eAAe,EAAE,UAAU;IAC3B,IAAI,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,WAAW,CAAC;IAChD,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACxE,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,mCAAmC;YAC1C,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU,CAAC,GAAG;YAC1B,WAAW,EAAE,gBAAgB,UAAU,CAAC,GAAG,oHAAoH;YAC/J,MAAM,EAAE,4FAA4F;YACpG,YAAY,EAAE,kEAAkE,UAAU,CAAC,GAAG,QAAQ,UAAU,CAAC,GAAG,KAAK;YACzH,IAAI,EAAE,4BAA4B,CAAC,IAAI;SACxC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-003-unbound-public-input.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const unboundPublicInputRule: Rule;

package/dist/rules/NS-ZK-003-unbound-public-input.js

@@ -0,0 +1,22 @@
+import { buildIssue } from "../core/issue-builder.js";
+export const unboundPublicInputRule = {
+    id: "NS-ZK-003",
+    title: "Unbound input signal",
+    description: "Detects input signals that never appear in constraints.",
+    defaultSeverity: "HIGH",
+    tags: ["inputs", "public-inputs", "binding"],
+    analyze(context) {
+        return context.graph.unboundInputs().map((signal) => buildIssue({
+            ruleId: "NS-ZK-003",
+            title: "Unbound input signal",
+            severity: "HIGH",
+            location: signal,
+            signalName: signal.name,
+            explanation: `The input signal \`${signal.name}\` does not appear in any parsed constraint.`,
+            impact: "The proof may not bind the claimed input to the statement being proven.",
+            suggestedFix: "Reference the input inside a constraint that enforces the intended relation.",
+            tags: unboundPublicInputRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-ZK-003-unbound-public-input.js.map

package/dist/rules/NS-ZK-003-unbound-public-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-003-unbound-public-input.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-003-unbound-public-input.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,yDAAyD;IACtE,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC;IAC5C,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAClD,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,sBAAsB;YAC7B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,WAAW,EAAE,sBAAsB,MAAM,CAAC,IAAI,8CAA8C;YAC5F,MAAM,EAAE,yEAAyE;YACjF,YAAY,EAAE,8EAA8E;YAC5F,IAAI,EAAE,sBAAsB,CAAC,IAAI;SAClC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-004-unconstrained-output.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const unconstrainedOutputRule: Rule;

package/dist/rules/NS-ZK-004-unconstrained-output.js

@@ -0,0 +1,27 @@
+import { buildIssue } from "../core/issue-builder.js";
+export const unconstrainedOutputRule = {
+    id: "NS-ZK-004",
+    title: "Unconstrained output",
+    description: "Detects output signals that are assigned unsafely or do not participate in constraints.",
+    defaultSeverity: "HIGH",
+    tags: ["outputs", "underconstraint"],
+    analyze(context) {
+        return context.graph.unconstrainedOutputs().map((signal) => {
+            const hintAssignment = context.graph.assignmentsForSignal(signal.name).find((assignment) => assignment.operator === "<--");
+            return buildIssue({
+                ruleId: "NS-ZK-004",
+                title: "Unconstrained output",
+                severity: hintAssignment ? "CRITICAL" : "HIGH",
+                location: hintAssignment ?? signal,
+                signalName: signal.name,
+                explanation: hintAssignment
+                    ? `The output \`${signal.name}\` is assigned with <-- and is not safely bound as an output constraint.`
+                    : `The output \`${signal.name}\` does not appear in any parsed constraint.`,
+                impact: "The circuit may output a value that was not proven to be correctly derived.",
+                suggestedFix: "Constrain outputs with <== or an explicit === relation to the intended expression.",
+                tags: unconstrainedOutputRule.tags
+            });
+        });
+    }
+};
+//# sourceMappingURL=NS-ZK-004-unconstrained-output.js.map

package/dist/rules/NS-ZK-004-unconstrained-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-004-unconstrained-output.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-004-unconstrained-output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,uBAAuB,GAAS;IAC3C,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,yFAAyF;IACtG,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACpC,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACzD,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;YAC3H,OAAO,UAAU,CAAC;gBAChB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,sBAAsB;gBAC7B,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;gBAC9C,QAAQ,EAAE,cAAc,IAAI,MAAM;gBAClC,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,WAAW,EAAE,cAAc;oBACzB,CAAC,CAAC,gBAAgB,MAAM,CAAC,IAAI,0EAA0E;oBACvG,CAAC,CAAC,gBAAgB,MAAM,CAAC,IAAI,8CAA8C;gBAC7E,MAAM,EAAE,6EAA6E;gBACrF,YAAY,EAAE,oFAAoF;gBAClG,IAAI,EAAE,uBAAuB,CAAC,IAAI;aACnC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-005-missing-booleanity.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const missingBooleanityRule: Rule;

package/dist/rules/NS-ZK-005-missing-booleanity.js

@@ -0,0 +1,26 @@
+import { buildIssue } from "../core/issue-builder.js";
+import { isBooleanLikeName } from "../frontends/circom/circom-utils.js";
+export const missingBooleanityRule = {
+    id: "NS-ZK-005",
+    title: "Missing booleanity constraint",
+    description: "Detects boolean-like signals that are not constrained to 0 or 1.",
+    defaultSeverity: "HIGH",
+    tags: ["booleanity", "selectors", "authorization"],
+    analyze(context) {
+        return context.graph
+            .declaredSignals()
+            .filter((signal) => isBooleanLikeName(signal.baseName) && context.graph.signalReferences(signal.name).length > 0 && !context.graph.hasBooleanityConstraint(signal.name))
+            .map((signal) => buildIssue({
+            ruleId: "NS-ZK-005",
+            title: "Missing booleanity constraint",
+            severity: "HIGH",
+            location: signal,
+            signalName: signal.name,
+            explanation: `The signal \`${signal.name}\` looks boolean or selector-like, but no x * (x - 1) === 0 style constraint was found.`,
+            impact: "A prover may use arbitrary field values instead of 0 or 1, breaking selector logic, path selection, authorization checks, or branching constraints.",
+            suggestedFix: `Add a booleanity constraint: \`${signal.name} * (${signal.name} - 1) === 0;\`.`,
+            tags: missingBooleanityRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-ZK-005-missing-booleanity.js.map

package/dist/rules/NS-ZK-005-missing-booleanity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-005-missing-booleanity.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-005-missing-booleanity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,+BAA+B;IACtC,WAAW,EAAE,kEAAkE;IAC/E,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,eAAe,CAAC;IAClD,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,KAAK;aACjB,eAAe,EAAE;aACjB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aACvK,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACd,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,+BAA+B;YACtC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,WAAW,EAAE,gBAAgB,MAAM,CAAC,IAAI,yFAAyF;YACjI,MAAM,EAAE,qJAAqJ;YAC7J,YAAY,EAAE,kCAAkC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,iBAAiB;YAC9F,IAAI,EAAE,qBAAqB,CAAC,IAAI;SACjC,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-006-missing-range-check.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const missingRangeCheckRule: Rule;

package/dist/rules/NS-ZK-006-missing-range-check.js

@@ -0,0 +1,32 @@
+import { buildIssue } from "../core/issue-builder.js";
+import { assessRangeCheckRisk } from "../core/range-check-classifier.js";
+export const missingRangeCheckRule = {
+    id: "NS-ZK-006",
+    title: "Missing range check",
+    description: "Detects bounded-integer signals without obvious range-checking mechanisms.",
+    defaultSeverity: "MEDIUM",
+    tags: ["range", "overflow", "aliasing"],
+    analyze(context) {
+        const issues = [];
+        for (const signal of context.graph.declaredSignals()) {
+            const assessment = assessRangeCheckRisk(signal, context);
+            if (!assessment.shouldReport)
+                continue;
+            issues.push(buildIssue({
+                ruleId: "NS-ZK-006",
+                title: "Missing range check",
+                severity: assessment.severity,
+                confidence: assessment.confidence,
+                location: signal,
+                signalName: signal.name,
+                explanation: assessment.explanation,
+                impact: "Field elements are not naturally bounded integers. Missing range checks can cause overflows, aliasing, invalid comparisons, or inconsistent protocol semantics.",
+                suggestedFix: "Constrain the value with an explicit bit decomposition, range-check gadget, comparator, or protocol-specific bounded representation.",
+                tags: missingRangeCheckRule.tags,
+                metadata: { category: assessment.category }
+            }));
+        }
+        return issues;
+    }
+};
+//# sourceMappingURL=NS-ZK-006-missing-range-check.js.map

package/dist/rules/NS-ZK-006-missing-range-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-006-missing-range-check.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-006-missing-range-check.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EAAE,4EAA4E;IACzF,eAAe,EAAE,QAAQ;IACzB,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;IACvC,OAAO,CAAC,OAAO;QACb,MAAM,MAAM,GAAG,EAAE,CAAC;QAElB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,CAAC,UAAU,CAAC,YAAY;gBAAE,SAAS;YAEvC,MAAM,CAAC,IAAI,CACT,UAAU,CAAC;gBACT,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,qBAAqB;gBAC5B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,MAAM,EACJ,iKAAiK;gBACnK,YAAY,EACV,sIAAsI;gBACxI,IAAI,EAAE,qBAAqB,CAAC,IAAI;gBAChC,QAAQ,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE;aAC5C,CAAC,CACH,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-007-unsafe-assertion.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const unsafeAssertionRule: Rule;

package/dist/rules/NS-ZK-007-unsafe-assertion.js

@@ -0,0 +1,24 @@
+import { buildIssue } from "../core/issue-builder.js";
+export const unsafeAssertionRule = {
+    id: "NS-ZK-007",
+    title: "Unsafe assertion over signals",
+    description: "Detects assert(...) expressions involving circuit signals.",
+    defaultSeverity: "HIGH",
+    tags: ["assert", "circom", "constraints"],
+    analyze(context) {
+        return context.ir.assertions
+            .filter((assertion) => assertion.referencedSignals.length > 0)
+            .map((assertion) => buildIssue({
+            ruleId: "NS-ZK-007",
+            title: "Unsafe assertion over signals",
+            severity: "HIGH",
+            location: assertion,
+            signalName: assertion.referencedSignals[0],
+            explanation: `The assertion \`assert(${assertion.expression})\` references circuit signals. Circom assertions are not a substitute for proof constraints.`,
+            impact: "A circuit may rely on a condition that is not actually enforced in the constraint system.",
+            suggestedFix: "Replace signal assertions with constraints using === or equivalent constraint gadgets.",
+            tags: unsafeAssertionRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-ZK-007-unsafe-assertion.js.map

package/dist/rules/NS-ZK-007-unsafe-assertion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-007-unsafe-assertion.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-007-unsafe-assertion.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,mBAAmB,GAAS;IACvC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,+BAA+B;IACtC,WAAW,EAAE,4DAA4D;IACzE,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC;IACzC,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,EAAE,CAAC,UAAU;aACzB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;aAC7D,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjB,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,+BAA+B;YACtC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC1C,WAAW,EAAE,0BAA0B,SAAS,CAAC,UAAU,+FAA+F;YAC1J,MAAM,EAAE,2FAA2F;YACnG,YAAY,EAAE,wFAAwF;YACtG,IAAI,EAAE,mBAAmB,CAAC,IAAI;SAC/B,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-008-unsafe-division-or-inverse.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const unsafeDivisionOrInverseRule: Rule;

package/dist/rules/NS-ZK-008-unsafe-division-or-inverse.js

@@ -0,0 +1,39 @@
+import { buildIssue } from "../core/issue-builder.js";
+import { expressionHasDivisionOrInverse } from "../frontends/circom/circom-utils.js";
+function denominatorOf(expression) {
+    const match = expression.match(/\/\s*([A-Za-z_][A-Za-z0-9_.\[\]]*)/);
+    return match?.[1];
+}
+function hasNonzeroGuard(assignment, denominator, context) {
+    if (!denominator)
+        return /Safe|NonZero|AssertNonZero/i.test(assignment.rhs);
+    return context.ir.constraints.some((constraint) => {
+        const compact = constraint.expression.replace(/\s+/g, "");
+        return compact.includes(`${denominator}*`) && compact.includes("===1");
+    });
+}
+export const unsafeDivisionOrInverseRule = {
+    id: "NS-ZK-008",
+    title: "Unsafe division or inverse",
+    description: "Detects division, inverse, and IsZero-like patterns without clear nonzero guards.",
+    defaultSeverity: "HIGH",
+    tags: ["division", "inverse", "nonzero"],
+    analyze(context) {
+        return context.ir.assignments
+            .filter((assignment) => expressionHasDivisionOrInverse(assignment.rhs))
+            .filter((assignment) => !hasNonzeroGuard(assignment, denominatorOf(assignment.rhs), context))
+            .map((assignment) => buildIssue({
+            ruleId: "NS-ZK-008",
+            title: "Unsafe division or inverse",
+            severity: assignment.rhs.includes("/") ? "HIGH" : "MEDIUM",
+            confidence: assignment.rhs.includes("/") ? "HIGH" : "MEDIUM",
+            location: assignment,
+            signalName: assignment.lhs,
+            explanation: `The expression \`${assignment.rhs}\` uses division or inversion without an obvious nonzero guard.`,
+            impact: "Division and inversion require careful nonzero constraints. Missing guards can create unsound edge cases.",
+            suggestedFix: "Add explicit nonzero constraints or use a vetted safe inversion/IsZero gadget.",
+            tags: unsafeDivisionOrInverseRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-ZK-008-unsafe-division-or-inverse.js.map

package/dist/rules/NS-ZK-008-unsafe-division-or-inverse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-008-unsafe-division-or-inverse.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-008-unsafe-division-or-inverse.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,SAAS,aAAa,CAAC,UAAkB;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrE,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,UAAsB,EAAE,WAA+B,EAAE,OAAuC;IACvH,IAAI,CAAC,WAAW;QAAE,OAAO,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5E,OAAO,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;QAChD,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE,mFAAmF;IAChG,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;IACxC,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,EAAE,CAAC,WAAW;aAC1B,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,8BAA8B,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aACtE,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;aAC5F,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAClB,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,4BAA4B;YACnC,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YAC1D,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YAC5D,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU,CAAC,GAAG;YAC1B,WAAW,EAAE,oBAAoB,UAAU,CAAC,GAAG,iEAAiE;YAChH,MAAM,EAAE,2GAA2G;YACnH,YAAY,EAAE,gFAAgF;YAC9F,IAAI,EAAE,2BAA2B,CAAC,IAAI;SACvC,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-009-unconstrained-component-output.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const unconstrainedComponentOutputRule: Rule;

package/dist/rules/NS-ZK-009-unconstrained-component-output.js

@@ -0,0 +1,25 @@
+import { buildIssue } from "../core/issue-builder.js";
+export const unconstrainedComponentOutputRule = {
+    id: "NS-ZK-009",
+    title: "Unconstrained component output",
+    description: "Detects component outputs copied through unsafe hint assignments.",
+    defaultSeverity: "CRITICAL",
+    tags: ["components", "outputs", "underconstraint"],
+    analyze(context) {
+        return context.graph
+            .assignedByHint()
+            .filter((assignment) => assignment.referencedSignals.some((ref) => context.graph.isComponentOutputReference(ref)) && !context.graph.appearsInAnyConstraint(assignment.lhs))
+            .map((assignment) => buildIssue({
+            ruleId: "NS-ZK-009",
+            title: "Unconstrained component output",
+            severity: "CRITICAL",
+            location: assignment,
+            signalName: assignment.lhs,
+            explanation: `The signal \`${assignment.lhs}\` is assigned from component output \`${assignment.rhs}\` using <-- and is not constrained afterward.`,
+            impact: "Component outputs must be bound into the constraint system. Otherwise the witness can choose arbitrary downstream values.",
+            suggestedFix: `Use \`${assignment.lhs} <== ${assignment.rhs}\` or add \`${assignment.lhs} === ${assignment.rhs}\`.`,
+            tags: unconstrainedComponentOutputRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-ZK-009-unconstrained-component-output.js.map

package/dist/rules/NS-ZK-009-unconstrained-component-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-009-unconstrained-component-output.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-009-unconstrained-component-output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,gCAAgC,GAAS;IACpD,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,gCAAgC;IACvC,WAAW,EAAE,mEAAmE;IAChF,eAAe,EAAE,UAAU;IAC3B,IAAI,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,iBAAiB,CAAC;IAClD,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,KAAK;aACjB,cAAc,EAAE;aAChB,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aAC1K,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAClB,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,gCAAgC;YACvC,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU,CAAC,GAAG;YAC1B,WAAW,EAAE,gBAAgB,UAAU,CAAC,GAAG,0CAA0C,UAAU,CAAC,GAAG,gDAAgD;YACnJ,MAAM,EAAE,2HAA2H;YACnI,YAAY,EAAE,SAAS,UAAU,CAAC,GAAG,QAAQ,UAAU,CAAC,GAAG,eAAe,UAAU,CAAC,GAAG,QAAQ,UAAU,CAAC,GAAG,KAAK;YACnH,IAAI,EAAE,gCAAgC,CAAC,IAAI;SAC5C,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-010-alias-overflow-risk.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const aliasOverflowRiskRule: Rule;

package/dist/rules/NS-ZK-010-alias-overflow-risk.js

@@ -0,0 +1,48 @@
+import { buildIssue } from "../core/issue-builder.js";
+const BN254_SAFE_BITS = 253;
+export const aliasOverflowRiskRule = {
+    id: "NS-ZK-010",
+    title: "Alias or overflow risk",
+    description: "Detects suspicious bit decompositions and limb arrays that may allow aliasing.",
+    defaultSeverity: "MEDIUM",
+    tags: ["aliasing", "overflow", "range"],
+    analyze(context) {
+        const issues = [];
+        for (const component of context.ir.components) {
+            const width = Number(component.params?.match(/\d+/)?.[0]);
+            if (/Num2Bits|Bits2Num|Decompose/.test(component.templateType ?? "") && width >= BN254_SAFE_BITS) {
+                const hasAliasCheck = context.ir.components.some((candidate) => /AliasCheck/.test(candidate.templateType ?? ""));
+                if (!hasAliasCheck) {
+                    issues.push(buildIssue({
+                        ruleId: "NS-ZK-010",
+                        title: "Alias or overflow risk",
+                        severity: width >= 254 ? "HIGH" : "MEDIUM",
+                        confidence: "MEDIUM",
+                        location: component,
+                        signalName: component.name,
+                        explanation: `The component \`${component.name}\` uses ${component.templateType}(${width}) near or above the BN254 scalar field bit length without an obvious AliasCheck.`,
+                        impact: "Values may have multiple field representations or exceed intended integer ranges.",
+                        suggestedFix: "Use a safe bit width for the field, add AliasCheck for large decompositions, and document the intended integer domain.",
+                        tags: aliasOverflowRiskRule.tags
+                    }));
+                }
+            }
+        }
+        for (const signal of context.ir.signals.filter((signal) => signal.arrayDimensions.length > 0 && /limb/i.test(signal.name) && !context.graph.hasRangeCheck(signal.name))) {
+            issues.push(buildIssue({
+                ruleId: "NS-ZK-010",
+                title: "Alias or overflow risk",
+                severity: "MEDIUM",
+                confidence: "LOW",
+                location: signal,
+                signalName: signal.name,
+                explanation: `The limb array \`${signal.name}\` does not have an obvious per-limb bound in the parsed constraints.`,
+                impact: "Unbounded limbs can overflow their intended representation or admit multiple encodings.",
+                suggestedFix: "Add explicit per-limb range checks and recomposition constraints.",
+                tags: aliasOverflowRiskRule.tags
+            }));
+        }
+        return issues;
+    }
+};
+//# sourceMappingURL=NS-ZK-010-alias-overflow-risk.js.map

package/dist/rules/NS-ZK-010-alias-overflow-risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-010-alias-overflow-risk.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-010-alias-overflow-risk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EAAE,gFAAgF;IAC7F,eAAe,EAAE,QAAQ;IACzB,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC;IACvC,OAAO,CAAC,OAAO;QACb,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,IAAI,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,IAAI,KAAK,IAAI,eAAe,EAAE,CAAC;gBACjG,MAAM,aAAa,GAAG,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;gBACjH,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CACT,UAAU,CAAC;wBACT,MAAM,EAAE,WAAW;wBACnB,KAAK,EAAE,wBAAwB;wBAC/B,QAAQ,EAAE,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;wBAC1C,UAAU,EAAE,QAAQ;wBACpB,QAAQ,EAAE,SAAS;wBACnB,UAAU,EAAE,SAAS,CAAC,IAAI;wBAC1B,WAAW,EAAE,mBAAmB,SAAS,CAAC,IAAI,WAAW,SAAS,CAAC,YAAY,IAAI,KAAK,kFAAkF;wBAC1K,MAAM,EAAE,mFAAmF;wBAC3F,YAAY,EAAE,wHAAwH;wBACtI,IAAI,EAAE,qBAAqB,CAAC,IAAI;qBACjC,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxK,MAAM,CAAC,IAAI,CACT,UAAU,CAAC;gBACT,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,wBAAwB;gBAC/B,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,KAAK;gBACjB,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,WAAW,EAAE,oBAAoB,MAAM,CAAC,IAAI,uEAAuE;gBACnH,MAAM,EAAE,yFAAyF;gBACjG,YAAY,EAAE,mEAAmE;gBACjF,IAAI,EAAE,qBAAqB,CAAC,IAAI;aACjC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-011-unused-signal.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const unusedSignalRule: Rule;

package/dist/rules/NS-ZK-011-unused-signal.js

@@ -0,0 +1,26 @@
+import { buildIssue } from "../core/issue-builder.js";
+export const unusedSignalRule = {
+    id: "NS-ZK-011",
+    title: "Unused signal",
+    description: "Detects declared signals that are never assigned and never constrained.",
+    defaultSeverity: "LOW",
+    tags: ["dead-code", "completeness"],
+    analyze(context) {
+        return context.ir.signals
+            .filter((signal) => signal.kind !== "output")
+            .filter((signal) => context.graph.assignmentsForSignal(signal.name).length === 0 && !context.graph.appearsInAnyConstraint(signal.name))
+            .map((signal) => buildIssue({
+            ruleId: "NS-ZK-011",
+            title: "Unused signal",
+            severity: "LOW",
+            confidence: "MEDIUM",
+            location: signal,
+            signalName: signal.name,
+            explanation: `The signal \`${signal.name}\` is declared but was not assigned or constrained in the parsed circuit.`,
+            impact: "Unused signals may indicate incomplete constraints or dead circuit logic.",
+            suggestedFix: "Remove the signal if it is dead, or add the intended assignment and constraints.",
+            tags: unusedSignalRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-ZK-011-unused-signal.js.map

package/dist/rules/NS-ZK-011-unused-signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-011-unused-signal.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-011-unused-signal.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAS;IACpC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,eAAe;IACtB,WAAW,EAAE,yEAAyE;IACtF,eAAe,EAAE,KAAK;IACtB,IAAI,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC;IACnC,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,EAAE,CAAC,OAAO;aACtB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;aAC5C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aACtI,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACd,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,WAAW,EAAE,gBAAgB,MAAM,CAAC,IAAI,2EAA2E;YACnH,MAAM,EAAE,2EAA2E;YACnF,YAAY,EAAE,kFAAkF;YAChG,IAAI,EAAE,gBAAgB,CAAC,IAAI;SAC5B,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/NS-ZK-012-suspicious-selector.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const suspiciousSelectorRule: Rule;

package/dist/rules/NS-ZK-012-suspicious-selector.js

@@ -0,0 +1,33 @@
+import { buildIssue } from "../core/issue-builder.js";
+import { isSelectorLikeName } from "../frontends/circom/circom-utils.js";
+function looksLikeMux(snippet, signalName) {
+    if (!snippet)
+        return false;
+    const lower = snippet.toLowerCase();
+    return lower.includes(signalName.toLowerCase()) && (lower.includes("(1-") || lower.includes("1 -") || lower.includes("?") || lower.includes("*"));
+}
+export const suspiciousSelectorRule = {
+    id: "NS-ZK-012",
+    title: "Suspicious selector without booleanity",
+    description: "Detects selector-like signals used in conditional formulas without booleanity constraints.",
+    defaultSeverity: "HIGH",
+    tags: ["selectors", "booleanity", "branching"],
+    analyze(context) {
+        return context.ir.signals
+            .filter((signal) => isSelectorLikeName(signal.baseName))
+            .filter((signal) => !context.graph.hasBooleanityConstraint(signal.name))
+            .filter((signal) => context.graph.signalReferences(signal.name).some((ref) => looksLikeMux(ref.snippet, signal.baseName)))
+            .map((signal) => buildIssue({
+            ruleId: "NS-ZK-012",
+            title: "Suspicious selector without booleanity",
+            severity: "HIGH",
+            location: signal,
+            signalName: signal.name,
+            explanation: `The selector-like signal \`${signal.name}\` appears in conditional or multiplexer-style arithmetic without a booleanity constraint.`,
+            impact: "Selectors must usually be boolean. If not constrained to 0/1, a prover can create invalid linear combinations or bypass branches.",
+            suggestedFix: `Add \`${signal.name} * (${signal.name} - 1) === 0;\` or use a vetted selector gadget.`,
+            tags: suspiciousSelectorRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-ZK-012-suspicious-selector.js.map

package/dist/rules/NS-ZK-012-suspicious-selector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-ZK-012-suspicious-selector.js","sourceRoot":"","sources":["../../src/rules/NS-ZK-012-suspicious-selector.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,SAAS,YAAY,CAAC,OAA2B,EAAE,UAAkB;IACnE,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACpJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,wCAAwC;IAC/C,WAAW,EAAE,4FAA4F;IACzG,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC;IAC9C,OAAO,CAAC,OAAO;QACb,OAAO,OAAO,CAAC,EAAE,CAAC,OAAO;aACtB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aACvD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;aACvE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;aACzH,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACd,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,wCAAwC;YAC/C,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,WAAW,EAAE,8BAA8B,MAAM,CAAC,IAAI,4FAA4F;YAClJ,MAAM,EAAE,mIAAmI;YAC3I,YAAY,EAAE,SAAS,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,iDAAiD;YACrG,IAAI,EAAE,sBAAsB,CAAC,IAAI;SAClC,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/halo2/NS-H2-001-assigned-advice-not-constrained.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../../types.js";
+export declare const halo2AssignedAdviceNotConstrainedRule: Rule;

package/dist/rules/halo2/NS-H2-001-assigned-advice-not-constrained.js

@@ -0,0 +1,40 @@
+import { buildIssue } from "../../core/issue-builder.js";
+import { halo2Graph, hasHalo2 } from "./halo2-rule-utils.js";
+export const halo2AssignedAdviceNotConstrainedRule = {
+    id: "NS-H2-001",
+    title: "Assigned advice not constrained",
+    description: "Detects Halo2 advice assignments that do not appear connected to gates, equality constraints, instance constraints, or lookups.",
+    defaultSeverity: "HIGH",
+    tags: ["halo2", "advice", "underconstraint"],
+    analyze(context) {
+        if (!hasHalo2(context))
+            return [];
+        const graph = halo2Graph(context);
+        if (!graph)
+            return [];
+        return (context.halo2?.assignments ?? [])
+            .filter((assignment) => assignment.assignmentType === "advice")
+            .filter((assignment) => !graph.isAssignmentConnected(assignment))
+            .map((assignment) => {
+            const node = graph.assignmentNode(assignment);
+            return buildIssue({
+                ruleId: "NS-H2-001",
+                title: "Assigned advice not constrained",
+                severity: /output|commit|root|instance|public/i.test(assignment.expression) ? "CRITICAL" : "HIGH",
+                confidence: "MEDIUM",
+                location: assignment,
+                signalName: assignment.label ?? assignment.columnName ?? assignment.target,
+                explanation: `The assigned advice value \`${assignment.label ?? assignment.columnName ?? "unknown"}\` was not connected to any parsed gate expression, equality edge, copy constraint, lookup, or public instance binding.`,
+                impact: "A prover-controlled advice value may be assigned in a region without being bound by the constraint system.",
+                suggestedFix: "Reference the assigned cell in a gate expression, lookup, constrain_equal call, or constrain_instance call as intended.",
+                tags: halo2AssignedAdviceNotConstrainedRule.tags,
+                metadata: {
+                    regionName: node?.region?.name,
+                    columnName: node?.columnName,
+                    connectedBy: []
+                }
+            });
+        });
+    }
+};
+//# sourceMappingURL=NS-H2-001-assigned-advice-not-constrained.js.map

package/dist/rules/halo2/NS-H2-001-assigned-advice-not-constrained.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-H2-001-assigned-advice-not-constrained.js","sourceRoot":"","sources":["../../../src/rules/halo2/NS-H2-001-assigned-advice-not-constrained.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,CAAC,MAAM,qCAAqC,GAAS;IACzD,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,iCAAiC;IACxC,WAAW,EAAE,iIAAiI;IAC9I,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,CAAC;IAC5C,OAAO,CAAC,OAAO;QACb,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,KAAK,QAAQ,CAAC;aAC9D,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;aAChE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;YAClB,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAC9C,OAAO,UAAU,CAAC;gBAChB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,iCAAiC;gBACxC,QAAQ,EAAE,qCAAqC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;gBACjG,UAAU,EAAE,QAAQ;gBACpB,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM;gBAC1E,WAAW,EAAE,+BAA+B,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,UAAU,IAAI,SAAS,yHAAyH;gBAC3N,MAAM,EAAE,4GAA4G;gBACpH,YAAY,EAAE,yHAAyH;gBACvI,IAAI,EAAE,qCAAqC,CAAC,IAAI;gBAChD,QAAQ,EAAE;oBACR,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI;oBAC9B,UAAU,EAAE,IAAI,EAAE,UAAU;oBAC5B,WAAW,EAAE,EAAE;iBAChB;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC"}

package/dist/rules/halo2/NS-H2-002-instance-not-bound.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../../types.js";
+export declare const halo2InstanceNotBoundRule: Rule;