@trynullsec/s1-zk 1.0.0

package/dist/rules/halo2/NS-H2-002-instance-not-bound.js

@@ -0,0 +1,32 @@
+import { buildIssue } from "../../core/issue-builder.js";
+import { halo2Graph, hasHalo2 } from "./halo2-rule-utils.js";
+export const halo2InstanceNotBoundRule = {
+    id: "NS-H2-002",
+    title: "Instance value not bound",
+    description: "Detects Halo2 instance/public values that are queried without an obvious constrain_instance binding.",
+    defaultSeverity: "HIGH",
+    tags: ["halo2", "instance", "public-input"],
+    analyze(context) {
+        if (!hasHalo2(context))
+            return [];
+        const graph = halo2Graph(context);
+        if (!graph)
+            return [];
+        return (context.halo2?.queries ?? [])
+            .filter((query) => query.queryType === "instance")
+            .filter((query) => !graph.instanceQueryIsBound(query.columnName, query.file))
+            .map((query) => buildIssue({
+            ruleId: "NS-H2-002",
+            title: "Instance value not bound",
+            severity: "HIGH",
+            confidence: "MEDIUM",
+            location: query,
+            signalName: query.columnName,
+            explanation: `The instance column/value \`${query.columnName}\` is queried but no matching constrain_instance binding was found in this file.`,
+            impact: "The circuit may read a public instance value without binding an assigned cell to the public statement.",
+            suggestedFix: "Use layouter.constrain_instance or an equivalent public input binding for the intended cell and instance row.",
+            tags: halo2InstanceNotBoundRule.tags
+        }));
+    }
+};
+//# sourceMappingURL=NS-H2-002-instance-not-bound.js.map

package/dist/rules/halo2/NS-H2-002-instance-not-bound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-H2-002-instance-not-bound.js","sourceRoot":"","sources":["../../../src/rules/halo2/NS-H2-002-instance-not-bound.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,CAAC,MAAM,yBAAyB,GAAS;IAC7C,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,0BAA0B;IACjC,WAAW,EAAE,sGAAsG;IACnH,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC;IAC3C,OAAO,CAAC,OAAO;QACb,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC;aACjD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;aAC5E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE,MAAM;YAChB,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,+BAA+B,KAAK,CAAC,UAAU,kFAAkF;YAC9I,MAAM,EAAE,wGAAwG;YAChH,YAAY,EAAE,+GAA+G;YAC7H,IAAI,EAAE,yBAAyB,CAAC,IAAI;SACrC,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/halo2/NS-H2-003-selector-risk.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../../types.js";
+export declare const halo2SelectorRiskRule: Rule;

package/dist/rules/halo2/NS-H2-003-selector-risk.js

@@ -0,0 +1,37 @@
+import { buildIssue } from "../../core/issue-builder.js";
+import { halo2Graph, hasHalo2 } from "./halo2-rule-utils.js";
+export const halo2SelectorRiskRule = {
+    id: "NS-H2-003",
+    title: "Selector discipline risk",
+    description: "Detects selectors used in Halo2 gates without clear enable usage.",
+    defaultSeverity: "MEDIUM",
+    tags: ["halo2", "selector", "gates"],
+    analyze(context) {
+        if (!hasHalo2(context))
+            return [];
+        const graph = halo2Graph(context);
+        if (!graph)
+            return [];
+        return (context.halo2?.selectors ?? [])
+            .filter((selector) => selector.usedInGates.length > 0 && !graph.selectorEnabled(selector.name))
+            .filter((selector) => graph.selectorUsedAsGateMultiplier(selector.name) || /selector|enable|swap|range|mul|bool|flag|q_/i.test(selector.name))
+            .map((selector) => buildIssue({
+            ruleId: "NS-H2-003",
+            title: "Selector discipline risk",
+            severity: selector.usedInGates.length > 1 ? "HIGH" : "MEDIUM",
+            confidence: "MEDIUM",
+            location: selector,
+            signalName: selector.name,
+            explanation: `Selector \`${selector.name}\` is queried in a gate and appears to gate a constraint, but no matching selector enable call was found in parsed regions.`,
+            impact: "Selectors control when Halo2 gates are active. Missing or unclear selector enable discipline can disable intended constraints.",
+            suggestedFix: "Ensure the selector is enabled on every row where the gate must apply and document the selector discipline.",
+            tags: halo2SelectorRiskRule.tags,
+            metadata: {
+                involvedSelector: selector.name,
+                usedInGates: selector.usedInGates,
+                selectorMultiplier: graph.selectorUsedAsGateMultiplier(selector.name)
+            }
+        }));
+    }
+};
+//# sourceMappingURL=NS-H2-003-selector-risk.js.map

package/dist/rules/halo2/NS-H2-003-selector-risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-H2-003-selector-risk.js","sourceRoot":"","sources":["../../../src/rules/halo2/NS-H2-003-selector-risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,CAAC,MAAM,qBAAqB,GAAS;IACzC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,0BAA0B;IACjC,WAAW,EAAE,mEAAmE;IAChF,eAAe,EAAE,QAAQ;IACzB,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC;IACpC,OAAO,CAAC,OAAO;QACb,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;aACpC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;aAC9F,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,8CAA8C,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;aAC7I,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAChB,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YAC7D,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,WAAW,EAAE,cAAc,QAAQ,CAAC,IAAI,6HAA6H;YACrK,MAAM,EAAE,gIAAgI;YACxI,YAAY,EAAE,6GAA6G;YAC3H,IAAI,EAAE,qBAAqB,CAAC,IAAI;YAChC,QAAQ,EAAE;gBACR,gBAAgB,EAAE,QAAQ,CAAC,IAAI;gBAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,kBAAkB,EAAE,KAAK,CAAC,4BAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC;aACtE;SACF,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/halo2/NS-H2-004-unsafe-inverse.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../../types.js";
+export declare const halo2UnsafeInverseRule: Rule;

package/dist/rules/halo2/NS-H2-004-unsafe-inverse.js

@@ -0,0 +1,43 @@
+import { buildIssue } from "../../core/issue-builder.js";
+import { fileHasSafeInverseGuard, hasHalo2 } from "./halo2-rule-utils.js";
+export const halo2UnsafeInverseRule = {
+    id: "NS-H2-004",
+    title: "Unsafe inverse or division",
+    description: "Detects Halo2 Rust inverse/division patterns without an obvious nonzero guard nearby.",
+    defaultSeverity: "HIGH",
+    tags: ["halo2", "inverse", "division", "nonzero"],
+    analyze(context) {
+        if (!hasHalo2(context))
+            return [];
+        const issues = [];
+        for (const file of context.halo2?.files ?? []) {
+            const lines = file.rawSource.split(/\r?\n/);
+            lines.forEach((lineText, index) => {
+                if (!/\.invert\s*\(|\.inverse\s*\(|\binvert\s*\(|\binverse\s*\(|\s\/\s/.test(lineText))
+                    return;
+                const location = {
+                    file: file.filePath,
+                    line: index + 1,
+                    column: Math.max(1, lineText.search(/invert|inverse|\//) + 1),
+                    snippet: lineText.trim()
+                };
+                const guarded = fileHasSafeInverseGuard(file.filePath, index + 1, context);
+                issues.push(buildIssue({
+                    ruleId: "NS-H2-004",
+                    title: "Unsafe inverse or division",
+                    severity: guarded ? "INFO" : "HIGH",
+                    confidence: guarded ? "LOW" : "MEDIUM",
+                    location,
+                    explanation: guarded
+                        ? "This Halo2 Rust code computes an inverse or division near an apparent nonzero guard or inverse relation. Review the guard to ensure both zero and nonzero branches are constrained."
+                        : "This Halo2 Rust code computes an inverse or division without an obvious nearby nonzero check or safe inversion gadget.",
+                    impact: "Inversion requires explicit zero handling. Missing guards can leave edge cases underconstrained or incorrectly assigned.",
+                    suggestedFix: "Add an explicit nonzero constraint, use a vetted IsZero/safe inversion gadget, and constrain both branches.",
+                    tags: halo2UnsafeInverseRule.tags
+                }));
+            });
+        }
+        return issues;
+    }
+};
+//# sourceMappingURL=NS-H2-004-unsafe-inverse.js.map

package/dist/rules/halo2/NS-H2-004-unsafe-inverse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-H2-004-unsafe-inverse.js","sourceRoot":"","sources":["../../../src/rules/halo2/NS-H2-004-unsafe-inverse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,OAAO,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE1E,MAAM,CAAC,MAAM,sBAAsB,GAAS;IAC1C,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE,uFAAuF;IACpG,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC;IACjD,OAAO,CAAC,OAAO;QACb,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;gBAChC,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,OAAO;gBAC/F,MAAM,QAAQ,GAAG;oBACf,IAAI,EAAE,IAAI,CAAC,QAAQ;oBACnB,IAAI,EAAE,KAAK,GAAG,CAAC;oBACf,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;oBAC7D,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;iBACzB,CAAC;gBACF,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC3E,MAAM,CAAC,IAAI,CACT,UAAU,CAAC;oBACT,MAAM,EAAE,WAAW;oBACnB,KAAK,EAAE,4BAA4B;oBACnC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;oBACnC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;oBACtC,QAAQ;oBACR,WAAW,EAAE,OAAO;wBAClB,CAAC,CAAC,qLAAqL;wBACvL,CAAC,CAAC,wHAAwH;oBAC5H,MAAM,EAAE,0HAA0H;oBAClI,YAAY,EAAE,6GAA6G;oBAC3H,IAAI,EAAE,sBAAsB,CAAC,IAAI;iBAClC,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAC"}

package/dist/rules/halo2/NS-H2-005-partial-ec-operation.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../../types.js";
+export declare const halo2PartialEcOperationRule: Rule;

package/dist/rules/halo2/NS-H2-005-partial-ec-operation.js

@@ -0,0 +1,43 @@
+import { buildIssue } from "../../core/issue-builder.js";
+import { unconstrainedEcAssignments } from "../../frontends/halo2/halo2-dataflow.js";
+import { isEcLikeName } from "../../frontends/halo2/halo2-patterns.js";
+import { halo2Graph, hasHalo2 } from "./halo2-rule-utils.js";
+export const halo2PartialEcOperationRule = {
+    id: "NS-H2-005",
+    title: "Partial elliptic-curve operation risk",
+    description: "Detects EC-related Halo2 assignments that do not appear connected to gates or equality constraints.",
+    defaultSeverity: "HIGH",
+    tags: ["halo2", "ecc", "orchard", "underconstraint"],
+    analyze(context) {
+        if (!hasHalo2(context))
+            return [];
+        const graph = halo2Graph(context);
+        if (!graph)
+            return [];
+        return unconstrainedEcAssignments(graph)
+            .filter((flow) => isEcLikeName(`${flow.assignment.expression} ${flow.assignment.target ?? ""}`))
+            .map((flow) => {
+            const assignment = flow.assignment;
+            const node = graph.assignmentNode(assignment);
+            return buildIssue({
+                ruleId: "NS-H2-005",
+                title: "Partial elliptic-curve operation risk",
+                severity: "HIGH",
+                confidence: /base|scalar|point|accumulator|output|x|y/i.test(`${assignment.label ?? ""} ${assignment.assignedVariable ?? ""}`) ? "HIGH" : "MEDIUM",
+                location: assignment,
+                signalName: assignment.label ?? assignment.columnName ?? assignment.target,
+                explanation: `The assigned advice value \`${assignment.label ?? assignment.columnName ?? "unknown"}\` appears in an elliptic-curve-related region but was not connected to any gate expression, equality constraint, lookup, copy edge, or public instance binding. This may indicate a partially constrained EC gadget.`,
+                impact: "Partial elliptic-curve operations can be soundness-critical. Unconstrained coordinates, scalars, or intermediate points may allow invalid curve arithmetic witnesses.",
+                suggestedFix: "Ensure every EC intermediate is bound by complete gate constraints, lookups, or equality constraints for the intended group law.",
+                tags: halo2PartialEcOperationRule.tags,
+                metadata: {
+                    regionName: node?.region?.name,
+                    columnName: node?.columnName,
+                    connectedBy: flow.connections,
+                    unconnectedValue: assignment.label ?? assignment.assignedVariable ?? assignment.columnName
+                }
+            });
+        });
+    }
+};
+//# sourceMappingURL=NS-H2-005-partial-ec-operation.js.map

package/dist/rules/halo2/NS-H2-005-partial-ec-operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-H2-005-partial-ec-operation.js","sourceRoot":"","sources":["../../../src/rules/halo2/NS-H2-005-partial-ec-operation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAEvE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,CAAC,MAAM,2BAA2B,GAAS;IAC/C,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,uCAAuC;IAC9C,WAAW,EAAE,qGAAqG;IAClH,eAAe,EAAE,MAAM;IACvB,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,CAAC;IACpD,OAAO,CAAC,OAAO;QACb,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,0BAA0B,CAAC,KAAK,CAAC;aACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;aAC/F,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YACnC,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAC9C,OAAO,UAAU,CAAC;gBAChB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,uCAAuC;gBAC9C,QAAQ,EAAE,MAAM;gBAChB,UAAU,EAAE,2CAA2C,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE,IAAI,UAAU,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBAClJ,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM;gBAC1E,WAAW,EAAE,+BAA+B,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,UAAU,IAAI,SAAS,uNAAuN;gBACzT,MAAM,EAAE,uKAAuK;gBAC/K,YAAY,EAAE,kIAAkI;gBAChJ,IAAI,EAAE,2BAA2B,CAAC,IAAI;gBACtC,QAAQ,EAAE;oBACR,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI;oBAC9B,UAAU,EAAE,IAAI,EAAE,UAAU;oBAC5B,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,gBAAgB,EAAE,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,gBAAgB,IAAI,UAAU,CAAC,UAAU;iBAC3F;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC"}

package/dist/rules/halo2/NS-H2-006-missing-enable-equality.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../../types.js";
+export declare const halo2MissingEnableEqualityRule: Rule;

package/dist/rules/halo2/NS-H2-006-missing-enable-equality.js

@@ -0,0 +1,31 @@
+import { buildIssue } from "../../core/issue-builder.js";
+import { halo2Graph, hasHalo2 } from "./halo2-rule-utils.js";
+export const halo2MissingEnableEqualityRule = {
+    id: "NS-H2-006",
+    title: "Missing enable_equality for copy constraints",
+    description: "Detects constrain_equal/copy-like usage on columns without an obvious enable_equality call.",
+    defaultSeverity: "MEDIUM",
+    tags: ["halo2", "equality", "copy-constraints"],
+    analyze(context) {
+        if (!hasHalo2(context))
+            return [];
+        const graph = halo2Graph(context);
+        if (!graph)
+            return [];
+        return (context.halo2?.equalityConstraints ?? [])
+            .filter((constraint) => !graph.equalityConstraintHasEnabledColumn(constraint.snippet))
+            .map((constraint) => buildIssue({
+            ruleId: "NS-H2-006",
+            title: "Missing enable_equality for copy constraints",
+            severity: "MEDIUM",
+            confidence: "MEDIUM",
+            location: constraint,
+            explanation: "A constrain_equal call was found, but no referenced parsed column has an obvious enable_equality call.",
+            impact: "Halo2 copy constraints require equality-enabled columns. Missing enable_equality can indicate broken copy-constraint assumptions or incomplete configuration.",
+            suggestedFix: "Call meta.enable_equality for every advice/instance column participating in copy constraints.",
+            tags: halo2MissingEnableEqualityRule.tags,
+            metadata: { referencedColumns: constraint.referencedColumns }
+        }));
+    }
+};
+//# sourceMappingURL=NS-H2-006-missing-enable-equality.js.map

package/dist/rules/halo2/NS-H2-006-missing-enable-equality.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NS-H2-006-missing-enable-equality.js","sourceRoot":"","sources":["../../../src/rules/halo2/NS-H2-006-missing-enable-equality.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,CAAC,MAAM,8BAA8B,GAAS;IAClD,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,8CAA8C;IACrD,WAAW,EAAE,6FAA6F;IAC1G,eAAe,EAAE,QAAQ;IACzB,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,kBAAkB,CAAC;IAC/C,OAAO,CAAC,OAAO;QACb,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,IAAI,EAAE,CAAC;aAC9C,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aACrF,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAClB,UAAU,CAAC;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,8CAA8C;YACrD,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,UAAU;YACpB,WAAW,EAAE,wGAAwG;YACrH,MAAM,EAAE,+JAA+J;YACvK,YAAY,EAAE,+FAA+F;YAC7G,IAAI,EAAE,8BAA8B,CAAC,IAAI;YACzC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE;SAC9D,CAAC,CACH,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/rules/halo2/halo2-rule-utils.d.ts

@@ -0,0 +1,8 @@
+import type { AuditContext } from "../../types.js";
+import type { Halo2Assignment } from "../../frontends/halo2/halo2-types.js";
+import { Halo2ConstraintGraph } from "../../frontends/halo2/halo2-constraint-graph.js";
+export declare function hasHalo2(context: AuditContext): boolean;
+export declare function assignmentIsConstrained(assignment: Halo2Assignment, context: AuditContext): boolean;
+export declare function columnHasEqualityEnabled(columnName: string, context: AuditContext): boolean;
+export declare function halo2Graph(context: AuditContext): Halo2ConstraintGraph | undefined;
+export declare function fileHasSafeInverseGuard(file: string, line: number, context: AuditContext): boolean;

package/dist/rules/halo2/halo2-rule-utils.js

@@ -0,0 +1,24 @@
+import { Halo2ConstraintGraph } from "../../frontends/halo2/halo2-constraint-graph.js";
+export function hasHalo2(context) {
+    return Boolean(context.halo2 && context.halo2.files.length > 0);
+}
+export function assignmentIsConstrained(assignment, context) {
+    if (!context.halo2)
+        return false;
+    return new Halo2ConstraintGraph(context.halo2).isAssignmentConnected(assignment);
+}
+export function columnHasEqualityEnabled(columnName, context) {
+    if (!context.halo2)
+        return false;
+    return new Halo2ConstraintGraph(context.halo2).columnHasEqualityEnabled(columnName);
+}
+export function halo2Graph(context) {
+    return context.halo2 ? new Halo2ConstraintGraph(context.halo2) : undefined;
+}
+export function fileHasSafeInverseGuard(file, line, context) {
+    const source = context.halo2?.files.find((candidate) => candidate.filePath === file)?.rawSource ?? "";
+    const lines = source.split(/\r?\n/);
+    const window = lines.slice(Math.max(0, line - 6), Math.min(lines.length, line + 5)).join("\n");
+    return /\bis_zero\b|\bnonzero\b|\bnot_zero\b|\bassert(?:!|\s*\()|\bsafe\b|\bchecked\b|\bconstrain_equal\b|\bzero_check\b/i.test(window);
+}
+//# sourceMappingURL=halo2-rule-utils.js.map

package/dist/rules/halo2/halo2-rule-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"halo2-rule-utils.js","sourceRoot":"","sources":["../../../src/rules/halo2/halo2-rule-utils.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAEvF,MAAM,UAAU,QAAQ,CAAC,OAAqB;IAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAA2B,EAAE,OAAqB;IACxF,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACjC,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,OAAqB;IAChF,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACjC,OAAO,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAqB;IAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,IAAY,EAAE,OAAqB;IACvF,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IACtG,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/F,OAAO,mHAAmH,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1I,CAAC"}

package/dist/rules/index.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from "../types.js";
+export declare const allRules: Rule[];

package/dist/rules/index.js

@@ -0,0 +1,39 @@
+import { dangerousHintAssignmentRule } from "./NS-ZK-001-dangerous-hint-assignment.js";
+import { assignedButUnconstrainedRule } from "./NS-ZK-002-assigned-but-unconstrained.js";
+import { unboundPublicInputRule } from "./NS-ZK-003-unbound-public-input.js";
+import { unconstrainedOutputRule } from "./NS-ZK-004-unconstrained-output.js";
+import { missingBooleanityRule } from "./NS-ZK-005-missing-booleanity.js";
+import { missingRangeCheckRule } from "./NS-ZK-006-missing-range-check.js";
+import { unsafeAssertionRule } from "./NS-ZK-007-unsafe-assertion.js";
+import { unsafeDivisionOrInverseRule } from "./NS-ZK-008-unsafe-division-or-inverse.js";
+import { unconstrainedComponentOutputRule } from "./NS-ZK-009-unconstrained-component-output.js";
+import { aliasOverflowRiskRule } from "./NS-ZK-010-alias-overflow-risk.js";
+import { unusedSignalRule } from "./NS-ZK-011-unused-signal.js";
+import { suspiciousSelectorRule } from "./NS-ZK-012-suspicious-selector.js";
+import { halo2AssignedAdviceNotConstrainedRule } from "./halo2/NS-H2-001-assigned-advice-not-constrained.js";
+import { halo2InstanceNotBoundRule } from "./halo2/NS-H2-002-instance-not-bound.js";
+import { halo2SelectorRiskRule } from "./halo2/NS-H2-003-selector-risk.js";
+import { halo2UnsafeInverseRule } from "./halo2/NS-H2-004-unsafe-inverse.js";
+import { halo2PartialEcOperationRule } from "./halo2/NS-H2-005-partial-ec-operation.js";
+import { halo2MissingEnableEqualityRule } from "./halo2/NS-H2-006-missing-enable-equality.js";
+export const allRules = [
+    dangerousHintAssignmentRule,
+    assignedButUnconstrainedRule,
+    unboundPublicInputRule,
+    unconstrainedOutputRule,
+    missingBooleanityRule,
+    missingRangeCheckRule,
+    unsafeAssertionRule,
+    unsafeDivisionOrInverseRule,
+    unconstrainedComponentOutputRule,
+    aliasOverflowRiskRule,
+    unusedSignalRule,
+    suspiciousSelectorRule,
+    halo2AssignedAdviceNotConstrainedRule,
+    halo2InstanceNotBoundRule,
+    halo2SelectorRiskRule,
+    halo2UnsafeInverseRule,
+    halo2PartialEcOperationRule,
+    halo2MissingEnableEqualityRule
+];
+//# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,4BAA4B,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,sDAAsD,CAAC;AAC7G,OAAO,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EAAE,8BAA8B,EAAE,MAAM,8CAA8C,CAAC;AAE9F,MAAM,CAAC,MAAM,QAAQ,GAAW;IAC9B,2BAA2B;IAC3B,4BAA4B;IAC5B,sBAAsB;IACtB,uBAAuB;IACvB,qBAAqB;IACrB,qBAAqB;IACrB,mBAAmB;IACnB,2BAA2B;IAC3B,gCAAgC;IAChC,qBAAqB;IACrB,gBAAgB;IAChB,sBAAsB;IACtB,qCAAqC;IACrC,yBAAyB;IACzB,qBAAqB;IACrB,sBAAsB;IACtB,2BAA2B;IAC3B,8BAA8B;CAC/B,CAAC"}

package/dist/scanner.d.ts

@@ -0,0 +1,8 @@
+import type { AuditResult, OutputFormat, ScanOptions } from "./types.js";
+export interface ScanRunResult {
+    result: AuditResult;
+    output: string;
+    exitCode: 0 | 1;
+}
+export declare function scanTarget(target: string, options?: ScanOptions): Promise<ScanRunResult>;
+export declare function renderReport(result: AuditResult, format: OutputFormat): string;

package/dist/scanner.js

@@ -0,0 +1,52 @@
+import { writeFile } from "node:fs/promises";
+import { loadConfig } from "./config.js";
+import { auditParsedFiles } from "./core/audit-engine.js";
+import { loadCircomFiles, loadRustFiles } from "./core/file-loader.js";
+import { isAtOrAbove, normalizeSeverity } from "./core/severity.js";
+import { parseCircomFile } from "./frontends/circom/circom-parser.js";
+import { parseHalo2File } from "./frontends/halo2/halo2-parser.js";
+import { isLikelyHalo2Source } from "./frontends/halo2/halo2-patterns.js";
+import { renderJsonReport } from "./report/json.js";
+import { renderMarkdownReport } from "./report/markdown.js";
+import { renderSarifReport } from "./report/sarif.js";
+import { renderTerminalReport } from "./report/terminal.js";
+export async function scanTarget(target, options = {}) {
+    const config = loadConfig(process.cwd(), options.configPath);
+    const format = options.format ?? options.report ?? config.format;
+    const failOn = normalizeSeverity(options.failOn, config.failOn);
+    const circomFiles = await loadCircomFiles(target, config.ignore);
+    const rustFiles = await loadRustFiles(target, config.ignore);
+    const parsed = circomFiles.map((file) => parseCircomFile(file.filePath, file.rawSource));
+    const halo2Parsed = rustFiles.filter((file) => isLikelyHalo2Source(file.rawSource)).map((file) => parseHalo2File(file.filePath, file.rawSource));
+    const result = auditParsedFiles(target, parsed, { ...config, failOn, format }, halo2Parsed);
+    const output = renderReport(result, format);
+    if (options.out || options.report) {
+        const outPath = options.out ?? defaultReportPath(format);
+        await writeFile(outPath, output);
+    }
+    const exitCode = result.issues.some((issue) => isAtOrAbove(issue.severity, failOn)) ? 1 : 0;
+    return { result, output, exitCode };
+}
+export function renderReport(result, format) {
+    switch (format) {
+        case "json":
+            return renderJsonReport(result);
+        case "markdown":
+            return renderMarkdownReport(result);
+        case "sarif":
+            return renderSarifReport(result);
+        case "terminal":
+        default:
+            return renderTerminalReport(result);
+    }
+}
+function defaultReportPath(format) {
+    if (format === "markdown")
+        return "nullsec-zk-report.md";
+    if (format === "sarif")
+        return "nullsec-zk-report.sarif";
+    if (format === "json")
+        return "nullsec-zk-report.json";
+    return "nullsec-zk-report.txt";
+}
+//# sourceMappingURL=scanner.js.map

package/dist/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAS5D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,UAAuB,EAAE;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,MAAoB;IACpE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,UAAU,CAAC;QAChB;YACE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,sBAAsB,CAAC;IACzD,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,yBAAyB,CAAC;IACzD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,wBAAwB,CAAC;IACvD,OAAO,uBAAuB,CAAC;AACjC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,171 @@
+export type Severity = "CRITICAL" | "HIGH" | "MEDIUM" | "LOW" | "INFO";
+export type Confidence = "HIGH" | "MEDIUM" | "LOW";
+export type SignalKind = "input" | "output" | "internal";
+export type SignalVisibility = "public" | "private" | "unknown";
+export type AssignmentOperator = "<--" | "<==";
+export type ConstraintOperator = "===" | "<==";
+export type OutputFormat = "terminal" | "json" | "markdown" | "sarif";
+export type FrontendName = "Circom" | "Halo2" | "Mixed";
+export interface SourceLocation {
+    file: string;
+    line: number;
+    column?: number;
+    snippet?: string;
+    templateName?: string;
+}
+export interface Issue {
+    id: string;
+    ruleId: string;
+    title: string;
+    severity: Severity;
+    confidence: Confidence;
+    file: string;
+    line: number;
+    column?: number;
+    snippet?: string;
+    templateName?: string;
+    signalName?: string;
+    explanation: string;
+    impact: string;
+    suggestedFix: string;
+    references?: string[];
+    tags: string[];
+    metadata?: Record<string, unknown>;
+}
+export interface ParserWarning extends SourceLocation {
+    message: string;
+}
+export interface TemplateDeclaration extends SourceLocation {
+    name: string;
+    params: string[];
+    startLine: number;
+    endLine?: number;
+}
+export interface SignalDeclaration extends SourceLocation {
+    name: string;
+    baseName: string;
+    kind: SignalKind;
+    visibility: SignalVisibility;
+    arrayDimensions: string[];
+    typeInfo?: string;
+}
+export interface Assignment extends SourceLocation {
+    lhs: string;
+    rhs: string;
+    operator: AssignmentOperator;
+    referencedSignals: string[];
+}
+export interface Constraint extends SourceLocation {
+    expression: string;
+    lhs?: string;
+    rhs?: string;
+    operator: ConstraintOperator;
+    referencedSignals: string[];
+}
+export interface Assertion extends SourceLocation {
+    expression: string;
+    referencedSignals: string[];
+}
+export interface ComponentDeclaration extends SourceLocation {
+    name: string;
+    templateType?: string;
+    params?: string;
+    inputs: string[];
+    outputs: string[];
+}
+export interface IncludeStatement extends SourceLocation {
+    path: string;
+}
+export interface ParsedCircuitFile {
+    filePath: string;
+    rawSource: string;
+    templates: TemplateDeclaration[];
+    signals: SignalDeclaration[];
+    components: ComponentDeclaration[];
+    assignments: Assignment[];
+    constraints: Constraint[];
+    assertions: Assertion[];
+    includes: IncludeStatement[];
+    parserWarnings: ParserWarning[];
+}
+export interface CircuitIR {
+    files: ParsedCircuitFile[];
+    signals: SignalDeclaration[];
+    components: ComponentDeclaration[];
+    assignments: Assignment[];
+    constraints: Constraint[];
+    assertions: Assertion[];
+    parserWarnings: ParserWarning[];
+}
+export interface Rule {
+    id: string;
+    title: string;
+    description: string;
+    defaultSeverity: Severity;
+    tags: string[];
+    analyze(context: AuditContext): Issue[];
+}
+export interface RuleConfig {
+    [ruleId: string]: "off" | "critical" | "high" | "medium" | "low" | "info" | Severity;
+}
+export interface NullsecConfig {
+    rules: RuleConfig;
+    ignore: string[];
+    failOn: Severity;
+    format: OutputFormat;
+    field: "BN254" | string;
+}
+export interface AuditContext {
+    target: string;
+    ir: CircuitIR;
+    graph: ConstraintGraphLike;
+    config: NullsecConfig;
+    halo2?: import("./frontends/halo2/halo2-types.js").Halo2IR;
+}
+export interface ConstraintGraphLike {
+    declaredSignals(): SignalDeclaration[];
+    inputSignals(): SignalDeclaration[];
+    publicInputSignals(): SignalDeclaration[];
+    outputSignals(): SignalDeclaration[];
+    assignedByHint(): Assignment[];
+    assignedByConstraint(): Assignment[];
+    constraintsForSignal(signalName: string): Constraint[];
+    assignmentsForSignal(signalName: string): Assignment[];
+    appearsInAnyConstraint(signalName: string): boolean;
+    appearsInEqualityConstraint(signalName: string): boolean;
+    onlyAssignedButNeverConstrained(): Assignment[];
+    unboundInputs(): SignalDeclaration[];
+    unconstrainedOutputs(): SignalDeclaration[];
+    hasBooleanityConstraint(signalName: string): boolean;
+    hasRangeCheck(signalName: string, templateName?: string): boolean;
+    isComponentOutputReference(reference: string): boolean;
+    isComponentOutputConstrained(reference: string): boolean;
+    signalReferences(signalName: string): SourceLocation[];
+}
+export interface AuditSummary {
+    CRITICAL: number;
+    HIGH: number;
+    MEDIUM: number;
+    LOW: number;
+    INFO: number;
+}
+export interface AuditResult {
+    tool: {
+        name: "Nullsec S1-ZK";
+        version: string;
+    };
+    target: string;
+    frontend: FrontendName;
+    filesScanned: number;
+    rulesExecuted: number;
+    summary: AuditSummary;
+    issues: Issue[];
+    parserWarnings: ParserWarning[];
+}
+export interface ScanOptions {
+    format?: OutputFormat;
+    report?: OutputFormat;
+    out?: string;
+    failOn?: Severity;
+    configPath?: string;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/examples/halo2/safe/bound-instance.rs

@@ -0,0 +1,23 @@
+use halo2_proofs::plonk::{Advice, Column, ConstraintSystem, Instance};
+
+struct Config {
+    advice: Column<Advice>,
+    instance: Column<Instance>,
+}
+
+fn configure(meta: &mut ConstraintSystem<Fp>) -> Config {
+    let advice = meta.advice_column();
+    let instance = meta.instance_column();
+    meta.enable_equality(advice);
+    meta.enable_equality(instance);
+    meta.create_gate("public input relation", |meta| {
+        let a = meta.query_advice(advice, Rotation::cur());
+        let public = meta.query_instance(instance, Rotation::cur());
+        vec![a - public]
+    });
+    Config { advice, instance }
+}
+
+fn expose_public(layouter: &mut impl Layouter<Fp>, config: Config, cell: AssignedCell<Fp, Fp>) {
+    layouter.constrain_instance(cell.cell(), config.instance, 0)?;
+}

package/examples/halo2/safe/constrained-advice.rs

@@ -0,0 +1,27 @@
+use halo2_proofs::plonk::{Advice, Column, ConstraintSystem, Selector};
+
+struct Config {
+    value: Column<Advice>,
+    q_enable: Selector,
+}
+
+fn configure(meta: &mut ConstraintSystem<Fp>) -> Config {
+    let value = meta.advice_column();
+    meta.enable_equality(value);
+    let q_enable = meta.selector();
+    meta.create_gate("value is constrained", |meta| {
+        let s = meta.query_selector(q_enable);
+        let v = meta.query_advice(value, Rotation::cur());
+        vec![s * v]
+    });
+    Config { value, q_enable }
+}
+
+fn synthesize(config: Config, mut layouter: impl Layouter<Fp>) {
+    layouter.assign_region(|| "constrained witness", |mut region| {
+        config.q_enable.enable(&mut region, 0)?;
+        let cell = region.assign_advice(|| "value", config.value, 0, || Value::known(value))?;
+        region.constrain_equal(cell.cell(), cell.cell())?;
+        Ok(())
+    });
+}