hex-audit 0.4.3 → 0.4.5

package/dashboard/app/issues/page.tsx

@@ -2,6 +2,12 @@ import { readJsonFile, readNestedJsonFile, listSubdirs } from '@/lib/data';
 import { NotYetGenerated } from '@/components/NotYetGenerated';
 import { IssuesBoardClient, type BoardIssue } from './IssuesBoardClient';
 
+// Read .hex/ at request time, not at build time. Without this, next build
+// prerenders this page with whatever .hex/ data was available in the build
+// environment and ships static HTML — the dashboard then renders that
+// stale (or empty) HTML for every audit project, ignoring the runtime cwd.
+export const dynamic = 'force-dynamic';
+
 interface FindingsFile {
   findings: Array<{
     id: string;
@@ -13,11 +19,17 @@ interface FindingsFile {
     update_from_client?: string;
     root_cause?: { locations?: Array<{ file: string; snippet?: string }> };
     poc?: { status?: string; file?: string | null; validation_memo?: string | null };
-    github?: { issue_number?: number; issue_url?: string; state?: string };
+    github?: { issue_number?: number; issue_url?: string; state?: string; sync_status?: string };
     category?: string;
   }>;
 }
 
+interface ConfigFile {
+  settings?: {
+    report?: { repository_url?: string; initial_commit?: string };
+  };
+}
+
 interface TrackingFile {
   findings: Array<{
     id: string;
@@ -67,6 +79,26 @@ interface SpecConformanceFile {
   }>;
 }
 
+/**
+ * Derive the GitHub sync chip state. Only verified findings are push
+ * candidates, so anything else returns 'none' (no chip).
+ */
+function computeSyncState(
+  status: string | undefined,
+  github: { issue_number?: number; state?: string; sync_status?: string } | undefined,
+): BoardIssue['sync_state'] {
+  if (status !== 'verified') return 'none';
+  if (!github?.issue_number) return 'unsynced';
+  if (
+    github.sync_status === 'conflict' ||
+    github.sync_status === 'local_ahead' ||
+    github.sync_status === 'remote_ahead'
+  ) {
+    return 'conflict';
+  }
+  return github.state === 'closed' ? 'synced_closed' : 'synced_open';
+}
+
 function statusToColumn(status: string | undefined): BoardIssue['column'] {
   switch (status) {
     case 'verified':
@@ -172,7 +204,9 @@ function buildBoardIssues(): BoardIssue[] {
       code_locations: locations,
       github_synced: Boolean(finding?.github?.issue_number),
       github_issue_url: finding?.github?.issue_url,
+      github_issue_number: finding?.github?.issue_number,
       github_state: finding?.github?.state,
+      sync_state: computeSyncState(t.status, finding?.github),
       duplicate_of: t.duplicate_of ?? dup?.matches ?? null,
       match_signals: matchSignals,
       reasoning: dup?.reasoning,
@@ -203,7 +237,9 @@ function buildBoardIssues(): BoardIssue[] {
       code_locations: f.root_cause?.locations ?? [],
       github_synced: Boolean(f.github?.issue_number),
       github_issue_url: f.github?.issue_url,
+      github_issue_number: f.github?.issue_number,
       github_state: f.github?.state,
+      sync_state: computeSyncState('verified', f.github),
       duplicate_of: null,
       match_signals: undefined,
       reasoning: undefined,
@@ -220,6 +256,11 @@ function buildBoardIssues(): BoardIssue[] {
 
 export default function IssuesPage() {
   const issues = buildBoardIssues();
+  const config = readJsonFile<ConfigFile>('config.json');
+  const formatCtx = {
+    repositoryUrl: config?.settings?.report?.repository_url,
+    commit: config?.settings?.report?.initial_commit,
+  };
 
   if (issues.length === 0) {
     return (
@@ -235,5 +276,5 @@ export default function IssuesPage() {
     );
   }
 
-  return <IssuesBoardClient issues={issues} />;
+  return <IssuesBoardClient issues={issues} formatCtx={formatCtx} />;
 }

package/dashboard/app/overleaf/OverleafClient.tsx

@@ -0,0 +1,97 @@
+'use client';
+
+import { useState } from 'react';
+
+export interface OverleafSections {
+  executive_summary: string | null;
+  audited_files: string | null;
+  summary_of_findings: string | null;
+  findings: string | null;
+}
+
+type SectionKey = keyof OverleafSections;
+
+const TABS: Array<{ key: SectionKey; label: string; file: string }> = [
+  { key: 'executive_summary', label: 'Executive Summary', file: 'executive_summary.txt' },
+  { key: 'audited_files', label: 'Audited Files', file: 'audited_files.txt' },
+  { key: 'summary_of_findings', label: 'Summary of Issues', file: 'summary_of_findings.txt' },
+  { key: 'findings', label: 'Issues', file: 'findings.txt' },
+];
+
+export function OverleafClient({ sections }: { sections: OverleafSections }) {
+  const [active, setActive] = useState<SectionKey>('executive_summary');
+  const [copied, setCopied] = useState(false);
+
+  const content = sections[active];
+
+  const copy = async () => {
+    if (!content) return;
+    try {
+      await navigator.clipboard.writeText(content);
+      setCopied(true);
+      setTimeout(() => setCopied(false), 1500);
+    } catch {
+      /* clipboard blocked (insecure context) — no-op */
+    }
+  };
+
+  return (
+    <div>
+      <header className="mb-6">
+        <h1 className="text-title font-semibold text-text-primary">Overleaf</h1>
+        <p className="mt-1 text-body text-text-secondary">
+          LaTeX report sections from <span className="font-mono text-caption">.hex/overleaf/</span>.
+          Copy each into the matching slot of the Nethermind Overleaf template.
+        </p>
+      </header>
+
+      {/* Segmented control */}
+      <div className="mb-4 flex flex-wrap gap-1.5">
+        {TABS.map((tab) => {
+          const isActive = tab.key === active;
+          const present = Boolean(sections[tab.key]);
+          return (
+            <button
+              key={tab.key}
+              type="button"
+              onClick={() => setActive(tab.key)}
+              className={`rounded-md px-3 py-1.5 text-caption font-medium ${
+                isActive
+                  ? 'bg-accent text-surface-0'
+                  : 'bg-surface-2 text-text-secondary hover:text-text-primary'
+              } ${present ? '' : 'opacity-50'}`}
+            >
+              {tab.label}
+            </button>
+          );
+        })}
+      </div>
+
+      <div className="rounded-lg border border-border-subtle bg-surface-1">
+        <div className="flex items-center justify-between border-b border-border-subtle px-4 py-2.5">
+          <span className="font-mono text-caption text-text-tertiary">
+            {TABS.find((t) => t.key === active)?.file}
+          </span>
+          <button
+            type="button"
+            onClick={copy}
+            disabled={!content}
+            className="rounded-md border border-border-default px-2.5 py-1 text-caption text-text-secondary hover:bg-surface-2 hover:text-text-primary disabled:opacity-50"
+          >
+            {copied ? 'Copied!' : 'Copy'}
+          </button>
+        </div>
+        {content ? (
+          <pre className="max-h-[70vh] overflow-auto p-4 font-mono text-caption leading-relaxed text-text-secondary whitespace-pre-wrap break-words">
+            {content}
+          </pre>
+        ) : (
+          <p className="p-4 text-body text-text-tertiary">
+            This section has not been generated yet. Run{' '}
+            <span className="font-mono text-caption">/generate-overleaf</span>.
+          </p>
+        )}
+      </div>
+    </div>
+  );
+}

package/dashboard/app/overleaf/page.tsx

@@ -0,0 +1,32 @@
+import { readMarkdownFile } from '@/lib/data';
+import { NotYetGenerated } from '@/components/NotYetGenerated';
+import { OverleafClient, type OverleafSections } from './OverleafClient';
+
+// Read .hex/overleaf/ at request time, not at build time.
+export const dynamic = 'force-dynamic';
+
+export default function OverleafPage() {
+  const sections: OverleafSections = {
+    executive_summary: readMarkdownFile('overleaf/executive_summary.txt'),
+    audited_files: readMarkdownFile('overleaf/audited_files.txt'),
+    summary_of_findings: readMarkdownFile('overleaf/summary_of_findings.txt'),
+    findings: readMarkdownFile('overleaf/findings.txt'),
+  };
+
+  const anyPresent = Object.values(sections).some(Boolean);
+  if (!anyPresent) {
+    return (
+      <div>
+        <header className="mb-6">
+          <h1 className="text-title font-semibold text-text-primary">Overleaf</h1>
+          <p className="mt-1 text-body text-text-secondary">
+            LaTeX report sections, ready to paste into the Nethermind Overleaf template.
+          </p>
+        </header>
+        <NotYetGenerated command="/generate-overleaf" />
+      </div>
+    );
+  }
+
+  return <OverleafClient sections={sections} />;
+}

package/dashboard/app/page.tsx

@@ -3,6 +3,13 @@ import { readJsonFile, readMarkdownFile } from '@/lib/data';
 import { NotYetGenerated } from '@/components/NotYetGenerated';
 import { MarkdownRenderer } from '@/components/MarkdownRenderer';
 
+// Read .hex/ at request time, not at build time. Without this, next build
+// prerenders this page with whatever .hex/ data was available in the build
+// environment and ships static HTML — the dashboard then renders that
+// stale (or empty) HTML for every audit project, ignoring the runtime cwd.
+export const dynamic = 'force-dynamic';
+
+
 interface ProjectConfig {
   project: {
     name: string;

package/dashboard/app/progress/page.tsx

@@ -2,6 +2,13 @@ import { readJsonFile, fileExists } from '@/lib/data';
 import { NotYetGenerated } from '@/components/NotYetGenerated';
 import { ProgressClient, type ProgressClientProps } from './ProgressClient';
 
+// Read .hex/ at request time, not at build time. Without this, next build
+// prerenders this page with whatever .hex/ data was available in the build
+// environment and ships static HTML — the dashboard then renders that
+// stale (or empty) HTML for every audit project, ignoring the runtime cwd.
+export const dynamic = 'force-dynamic';
+
+
 // ─── Types ──────────────────────────────────────────────────────────
 
 interface PerContractStats {

package/dashboard/app/stats/page.tsx

@@ -2,6 +2,13 @@ import { readJsonFile } from '@/lib/data';
 import { NotYetGenerated } from '@/components/NotYetGenerated';
 import { StatsClient, type StatsClientProps } from './StatsClient';
 
+// Read .hex/ at request time, not at build time. Without this, next build
+// prerenders this page with whatever .hex/ data was available in the build
+// environment and ships static HTML — the dashboard then renders that
+// stale (or empty) HTML for every audit project, ignoring the runtime cwd.
+export const dynamic = 'force-dynamic';
+
+
 // ─── Types ──────────────────────────────────────────────────────────
 
 interface Stats {

package/dashboard/components/DashboardLayout.tsx

@@ -326,7 +326,13 @@ const NAV_GROUPS = [
       { href: '/flows', label: 'Flows', icon: IconFlows },
     ],
   },
-  { label: 'Issues', items: [{ href: '/issues', label: 'Board', icon: IconFindings }] },
+  {
+    label: 'Issues',
+    items: [
+      { href: '/issues', label: 'Board', icon: IconFindings },
+      { href: '/overleaf', label: 'Overleaf', icon: IconReport },
+    ],
+  },
 ];
 
 export { NAV_GROUPS };
@@ -395,7 +401,7 @@ export function DashboardLayout({ children }: { children: React.ReactNode }) {
         <div className="px-5 pb-4 pt-6">
           <div className="flex items-baseline gap-2">
             <span className="text-title font-semibold text-text-primary">Hex</span>
-            <span className="text-caption text-text-tertiary">v0.4.3</span>
+            <span className="text-caption text-text-tertiary">v0.4.5</span>
           </div>
         </div>
 

package/dashboard/lib/data.ts

@@ -2,7 +2,10 @@ import fs from 'node:fs';
 import path from 'node:path';
 
 function getProjectDir(): string {
-  return process.env.HEX_PROJECT_DIR ?? process.env.SOLAUDIT_PROJECT_DIR ?? process.cwd();
+  // The `hex dashboard` CLI spawns Next.js with cwd = the user's audit project,
+  // so process.cwd() is authoritative. (The HEX_PROJECT_DIR env var was a
+  // vestige from the old monorepo layout and has been removed.)
+  return process.cwd();
 }
 
 function getOutputDir(): string {

package/dashboard/lib/finding-markdown.ts

@@ -0,0 +1,59 @@
+import type { BoardIssue } from '@/app/issues/IssuesBoardClient';
+
+/**
+ * Single source of truth for the finding markdown format used by the board's
+ * "Copy as HackMD" button (and matching the GitHub issue body the /sync-issues
+ * skill renders). Keep this aligned with src/skills/sync-issues.md.
+ */
+export interface FormatContext {
+  /** config.json settings.report.repository_url, if set */
+  repositoryUrl?: string;
+  /** config.json settings.report.initial_commit, if set */
+  commit?: string;
+}
+
+function fileLink(file: string, ctx: FormatContext): string {
+  if (ctx.repositoryUrl && ctx.commit) {
+    const base = ctx.repositoryUrl.replace(/\/+$/, '');
+    return `[\`${file}\`](${base}/blob/${ctx.commit}/${file})`;
+  }
+  // Empty link target — explicit, matches the GitHub issue template.
+  return `[\`${file}\`]()`;
+}
+
+/** The five-field body shared by HackMD copy and the GitHub issue body. */
+function bodyFields(issue: BoardIssue, ctx: FormatContext): string {
+  const seen = new Set<string>();
+  const files = issue.code_locations
+    .map((l) => l.file)
+    .filter((f) => f && !seen.has(f) && seen.add(f))
+    .map((f) => fileLink(f, ctx))
+    .join(', ');
+  const status = issue.resolution || 'Unresolved';
+  const update = issue.update_from_client ?? '';
+  return [
+    `**File(s)**: ${files}`,
+    ``,
+    `**Description**: ${issue.description}`,
+    ``,
+    `**Recommendation(s)**: ${issue.recommendation}`,
+    ``,
+    `**Status**: ${status}`,
+    ``,
+    `**Update from the client**: ${update}`,
+  ].join('\n');
+}
+
+/** HackMD-style: leading `## [Severity] Title` heading, then the body. */
+export function findingToHackmd(issue: BoardIssue, ctx: FormatContext = {}): string {
+  return `## [${issue.severity}] ${issue.title}\n\n${bodyFields(issue, ctx)}\n`;
+}
+
+/**
+ * GitHub issue body: no heading (the GH issue title carries `[Severity] Title`),
+ * no trailing attribution. Returns the body WITHOUT the round-trip footer; the
+ * sync caller appends `<!-- hex-finding-id: <id> -->` separately.
+ */
+export function findingToGithubBody(issue: BoardIssue, ctx: FormatContext = {}): string {
+  return bodyFields(issue, ctx);
+}

package/dashboard/next.config.mjs

@@ -3,6 +3,10 @@ const nextConfig = {
   reactStrictMode: true,
   experimental: {
     serverComponentsExternalPackages: ['chokidar'],
+    // Allow importing the canonical issue-mutation module from ../src/core/
+    // (shared with the `hex issue` CLI). The module depends only on node
+    // builtins, so nothing heavy leaks into the bundle.
+    externalDir: true,
   },
 };
 

package/dist/analysis/external-calls.d.ts

@@ -1,8 +1,15 @@
 import type { SlitherDetectorResult } from '../parsers/slither.js';
 import type { ASTExternalCall } from '../parsers/solidity-parser.js';
 import type { ExternalCall } from '../types/index.js';
+/**
+ * Whether Slither enrichment ran, and what it found:
+ *  - 'with-findings': Slither ran and reported detector results (most authoritative)
+ *  - 'clean':         Slither ran but reported nothing for this codebase
+ *  - 'unavailable':   Slither did not run (binary missing, parse error, etc.)
+ */
+export type SlitherState = 'with-findings' | 'clean' | 'unavailable';
 /**
  * Build external calls from AST-extracted calls, optionally enriched with Slither data.
  */
-export declare function buildExternalCalls(astCalls: ASTExternalCall[], stateVarsImmutability: Map<string, boolean>, scopeContracts: Set<string>, accessControlledSetters: Map<string, string>, slitherDetectors?: SlitherDetectorResult[]): ExternalCall[];
+export declare function buildExternalCalls(astCalls: ASTExternalCall[], stateVarsImmutability: Map<string, boolean>, scopeContracts: Set<string>, accessControlledSetters: Map<string, string>, slitherDetectors?: SlitherDetectorResult[], slitherState?: SlitherState): ExternalCall[];
 //# sourceMappingURL=external-calls.d.ts.map

package/dist/analysis/external-calls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-calls.d.ts","sourceRoot":"","sources":["../../src/analysis/external-calls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAatD;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,eAAe,EAAE,EAC3B,qBAAqB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3C,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,EAC3B,uBAAuB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5C,gBAAgB,CAAC,EAAE,qBAAqB,EAAE,GACzC,YAAY,EAAE,CAkEhB"}
+{"version":3,"file":"external-calls.d.ts","sourceRoot":"","sources":["../../src/analysis/external-calls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAiCtD;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,OAAO,GAAG,aAAa,CAAC;AAErE;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,eAAe,EAAE,EAC3B,qBAAqB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3C,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,EAC3B,uBAAuB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5C,gBAAgB,CAAC,EAAE,qBAAqB,EAAE,EAC1C,YAAY,GAAE,YAIG,GAChB,YAAY,EAAE,CA8FhB"}

package/dist/analysis/external-calls.js

@@ -1,9 +1,29 @@
 // Call type classification heuristics
 const CALL_TYPE_PATTERNS = {
-    token_transfer: ['transfer', 'transferFrom', 'safeTransfer', 'safeTransferFrom', 'approve', 'send'],
-    oracle_read: ['getPrice', 'latestRoundData', 'latestAnswer', 'getRoundData', 'consult', 'observe'],
+    token_transfer: [
+        'transfer',
+        'transferFrom',
+        'safeTransfer',
+        'safeTransferFrom',
+        'approve',
+        'send',
+    ],
+    oracle_read: [
+        'getPrice',
+        'latestRoundData',
+        'latestAnswer',
+        'getRoundData',
+        'consult',
+        'observe',
+    ],
     flash_loan: ['flashLoan', 'flash', 'flashBorrow'],
-    swap: ['swap', 'swapExactTokensForTokens', 'swapTokensForExactTokens', 'exactInputSingle', 'exactInput'],
+    swap: [
+        'swap',
+        'swapExactTokensForTokens',
+        'swapTokensForExactTokens',
+        'exactInputSingle',
+        'exactInput',
+    ],
     liquidity: ['addLiquidity', 'removeLiquidity', 'mint', 'burn'],
     delegate_call: ['delegatecall'],
     low_level: ['call', 'staticcall'],
@@ -11,7 +31,11 @@ const CALL_TYPE_PATTERNS = {
 /**
  * Build external calls from AST-extracted calls, optionally enriched with Slither data.
  */
-export function buildExternalCalls(astCalls, stateVarsImmutability, scopeContracts, accessControlledSetters, slitherDetectors) {
+export function buildExternalCalls(astCalls, stateVarsImmutability, scopeContracts, accessControlledSetters, slitherDetectors, slitherState = slitherDetectors != null
+    ? slitherDetectors.length > 0
+        ? 'with-findings'
+        : 'clean'
+    : 'unavailable') {
     // Build Slither enrichment maps if available
     const slitherUnchecked = new Set();
     const slitherReentrancy = new Set();
@@ -41,9 +65,29 @@ export function buildExternalCalls(astCalls, stateVarsImmutability, scopeContrac
         const trustLevel = classifyTrustLevel(ac.target, stateVarsImmutability, scopeContracts, accessControlledSetters);
         // Slither enrichment
         const lineKey = `${ac.file}:${ac.lineStart}`;
-        const hasSlither = slitherDetectors != null;
+        const ran = slitherState !== 'unavailable';
         const isUnchecked = slitherUnchecked.has(lineKey);
         const isReentrancy = slitherReentrancy.has(lineKey);
+        // Confidence: a detector that actually fired on this call is the strongest
+        // signal; a clean Slither run that simply didn't flag it is medium; no
+        // Slither run at all is a low-confidence heuristic default.
+        const returnCheckedConfidence = isUnchecked
+            ? 'high'
+            : slitherState === 'with-findings'
+                ? 'high'
+                : slitherState === 'clean'
+                    ? 'medium'
+                    : 'low';
+        const reentrancyConfidence = isReentrancy
+            ? 'high'
+            : slitherState === 'with-findings'
+                ? 'high'
+                : slitherState === 'clean'
+                    ? 'medium'
+                    : 'low';
+        const ranReasoning = 'Slither ran without flagging this call';
+        const unavailableReturnReasoning = 'Slither unavailable — assuming checked (heuristic default)';
+        const unavailableReentrancyReasoning = 'Slither unavailable — reentrancy guard status unknown (heuristic default)';
         calls.push({
             contract: ac.contract,
             function: ac.function,
@@ -56,16 +100,16 @@ export function buildExternalCalls(astCalls, stateVarsImmutability, scopeContrac
             target: ac.target,
             method: ac.method,
             return_checked: {
-                value: hasSlither ? !isUnchecked : true,
-                confidence: hasSlither ? 'high' : 'low',
-                derived_from: hasSlither ? 'slither' : 'heuristic',
-                ...(hasSlither ? {} : { reasoning: 'No Slither data — assuming checked' }),
+                value: ran ? !isUnchecked : true,
+                confidence: returnCheckedConfidence,
+                derived_from: isUnchecked ? 'slither' : ran ? 'slither' : 'heuristic',
+                ...(isUnchecked ? {} : { reasoning: ran ? ranReasoning : unavailableReturnReasoning }),
             },
             inside_reentrancy_guard: {
-                value: hasSlither ? !isReentrancy : false,
-                confidence: hasSlither ? (isReentrancy ? 'high' : 'medium') : 'low',
-                derived_from: hasSlither ? 'slither' : 'heuristic',
-                ...(hasSlither ? {} : { reasoning: 'No Slither data — reentrancy guard status unknown' }),
+                value: ran ? !isReentrancy : false,
+                confidence: reentrancyConfidence,
+                derived_from: isReentrancy ? 'slither' : ran ? 'slither' : 'heuristic',
+                ...(isReentrancy ? {} : { reasoning: ran ? ranReasoning : unavailableReentrancyReasoning }),
             },
             call_type: callType,
             trust_level: trustLevel,

package/dist/analysis/external-calls.js.map

@@ -1 +1 @@
-{"version":3,"file":"external-calls.js","sourceRoot":"","sources":["../../src/analysis/external-calls.ts"],"names":[],"mappings":"AAIA,sCAAsC;AACtC,MAAM,kBAAkB,GAA6B;IACnD,cAAc,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC;IACnG,WAAW,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,CAAC;IAClG,UAAU,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC;IACjD,IAAI,EAAE,CAAC,MAAM,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,YAAY,CAAC;IACxG,SAAS,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC;IAC9D,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;CAClC,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,qBAA2C,EAC3C,cAA2B,EAC3B,uBAA4C,EAC5C,gBAA0C;IAE1C,6CAA6C;IAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACnC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,IAAI,GAAG,CAAC,KAAK,KAAK,oBAAoB,IAAI,GAAG,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;oBAC7E,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC5B,CAAC;gBACD,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;QAEjH,qBAAqB;QACrB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,gBAAgB,IAAI,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEpD,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,UAAU,EAAE,EAAE,CAAC,SAAS;gBACxB,QAAQ,EAAE,EAAE,CAAC,OAAO;gBACpB,OAAO,EAAE,EAAE,CAAC,OAAO;aACpB;YACD,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,cAAc,EAAE;gBACd,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;gBACvC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;gBACvC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;gBAClD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,oCAAoC,EAAE,CAAC;aAC3E;YACD,uBAAuB,EAAE;gBACvB,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK;gBACzC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK;gBACnE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;gBAClD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,mDAAmD,EAAE,CAAC;aAC1F;YACD,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAClE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAc,EACd,qBAA2C,EAC3C,cAA2B,EAC3B,uBAA4C;IAE5C,gDAAgD;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAExC,0CAA0C;IAC1C,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,MAAM;YAClB,YAAY,EAAE,UAAU;YACxB,SAAS,EAAE,gCAAgC;SAC5C,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,mDAAmD;YAC9D,QAAQ,EAAE,CAAC,2CAA2C,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,8BAA8B,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;YACpF,QAAQ,EAAE,CAAC,6CAA6C,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,mEAAmE;KAC/E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"external-calls.js","sourceRoot":"","sources":["../../src/analysis/external-calls.ts"],"names":[],"mappings":"AAIA,sCAAsC;AACtC,MAAM,kBAAkB,GAA6B;IACnD,cAAc,EAAE;QACd,UAAU;QACV,cAAc;QACd,cAAc;QACd,kBAAkB;QAClB,SAAS;QACT,MAAM;KACP;IACD,WAAW,EAAE;QACX,UAAU;QACV,iBAAiB;QACjB,cAAc;QACd,cAAc;QACd,SAAS;QACT,SAAS;KACV;IACD,UAAU,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC;IACjD,IAAI,EAAE;QACJ,MAAM;QACN,0BAA0B;QAC1B,0BAA0B;QAC1B,kBAAkB;QAClB,YAAY;KACb;IACD,SAAS,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC;IAC9D,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;CAClC,CAAC;AAUF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA2B,EAC3B,qBAA2C,EAC3C,cAA2B,EAC3B,uBAA4C,EAC5C,gBAA0C,EAC1C,eAA6B,gBAAgB,IAAI,IAAI;IACnD,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC3B,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,OAAO;IACX,CAAC,CAAC,aAAa;IAEjB,6CAA6C;IAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACnC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,IAAI,GAAG,CAAC,KAAK,KAAK,oBAAoB,IAAI,GAAG,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;oBAC7E,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC5B,CAAC;gBACD,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBACvC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,kBAAkB,CACnC,EAAE,CAAC,MAAM,EACT,qBAAqB,EACrB,cAAc,EACd,uBAAuB,CACxB,CAAC;QAEF,qBAAqB;QACrB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,YAAY,KAAK,aAAa,CAAC;QAC3C,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEpD,2EAA2E;QAC3E,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,uBAAuB,GAAG,WAAW;YACzC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,YAAY,KAAK,eAAe;gBAChC,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,YAAY,KAAK,OAAO;oBACxB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,KAAK,CAAC;QACd,MAAM,oBAAoB,GAAG,YAAY;YACvC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,YAAY,KAAK,eAAe;gBAChC,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,YAAY,KAAK,OAAO;oBACxB,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,KAAK,CAAC;QAEd,MAAM,YAAY,GAAG,wCAAwC,CAAC;QAC9D,MAAM,0BAA0B,GAAG,4DAA4D,CAAC;QAChG,MAAM,8BAA8B,GAClC,2EAA2E,CAAC;QAE9E,KAAK,CAAC,IAAI,CAAC;YACT,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,UAAU,EAAE,EAAE,CAAC,SAAS;gBACxB,QAAQ,EAAE,EAAE,CAAC,OAAO;gBACpB,OAAO,EAAE,EAAE,CAAC,OAAO;aACpB;YACD,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,cAAc,EAAE;gBACd,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;gBAChC,UAAU,EAAE,uBAAuB;gBACnC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;gBACrE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC;aACvF;YACD,uBAAuB,EAAE;gBACvB,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK;gBAClC,UAAU,EAAE,oBAAoB;gBAChC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;gBACtE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC;aAC5F;YACD,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAClE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAc,EACd,qBAA2C,EAC3C,cAA2B,EAC3B,uBAA4C;IAE5C,gDAAgD;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAExC,0CAA0C;IAC1C,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,UAAU,EAAE,MAAM;YAClB,YAAY,EAAE,UAAU;YACxB,SAAS,EAAE,gCAAgC;SAC5C,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,mDAAmD;YAC9D,QAAQ,EAAE,CAAC,2CAA2C,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,8BAA8B,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO;YACpF,QAAQ,EAAE,CAAC,6CAA6C,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,QAAQ;QACpB,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,mEAAmE;KAC/E,CAAC;AACJ,CAAC"}

package/dist/commands/calls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"calls.d.ts","sourceRoot":"","sources":["../../src/commands/calls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,eAAO,MAAM,YAAY,SA+FrB,CAAC"}
+{"version":3,"file":"calls.d.ts","sourceRoot":"","sources":["../../src/commands/calls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,eAAO,MAAM,YAAY,SA+GrB,CAAC"}

package/dist/commands/calls.js

@@ -30,19 +30,28 @@ export const callsCommand = new Command('calls')
             allAstCalls.push(...calls);
         }
         logger.info(`AST extraction found ${allAstCalls.length} external calls`);
-        // Tier 2: Try Slither for enrichment (unchecked returns, reentrancy)
-        let slitherDetectors = undefined;
+        // Tier 2: Try Slither for enrichment (unchecked returns, reentrancy).
+        // Track three states explicitly so the analyzer can distinguish "Slither
+        // ran clean" (medium confidence) from "Slither never ran" (low confidence).
+        let slitherDetectors = [];
+        let slitherState = 'unavailable';
         try {
             spin.text = 'Running Slither detectors for enrichment...';
             const result = await runSlither(config.project.project_dir, [
                 '.',
                 '--detect',
                 'unchecked-transfer,unchecked-lowlevel,reentrancy-eth,reentrancy-no-eth,reentrancy-benign,reentrancy-events,calls-loop',
-                '--json', '-',
+                '--json',
+                '-',
             ]);
-            if (result.exitCode === 0 && result.stdout) {
+            // Slither exits non-zero when it finds issues, so gate on parseable JSON
+            // output rather than exit code.
+            if (result.stdout) {
                 slitherDetectors = parseDetectors(JSON.parse(result.stdout));
-                logger.info('Slither enrichment available — enhanced return check and reentrancy data');
+                slitherState = slitherDetectors.length > 0 ? 'with-findings' : 'clean';
+                logger.info(slitherState === 'clean'
+                    ? 'Slither ran clean (no detector findings) — Tier 2 fields use medium-confidence defaults'
+                    : 'Slither enrichment available — enhanced return check and reentrancy data');
             }
         }
         catch {
@@ -76,7 +85,7 @@ export const callsCommand = new Command('calls')
                 }
             }
         }
-        const calls = buildExternalCalls(allAstCalls, immutabilityMap, scopeContracts, accessControlledSetters, slitherDetectors);
+        const calls = buildExternalCalls(allAstCalls, immutabilityMap, scopeContracts, accessControlledSetters, slitherDetectors, slitherState);
         const externalCalls = { calls };
         const outPath = writeJsonOutput(outputDir, 'external-calls.json', externalCalls);
         spin.succeed('External call analysis complete');

package/dist/commands/calls.js.map

@@ -1 +1 @@
-{"version":3,"file":"calls.js","sourceRoot":"","sources":["../../src/commands/calls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,2BAA2B,CAAC;KACxC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAE3D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvF,6CAA6C;QAC7C,IAAI,CAAC,IAAI,GAAG,+CAA+C,CAAC;QAC5D,MAAM,WAAW,GAA4C,EAAE,CAAC;QAEhE,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;YACrE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,wBAAwB,WAAW,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAEzE,qEAAqE;QACrE,IAAI,gBAAgB,GAAG,SAAS,CAAC;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,GAAG,6CAA6C,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;gBAC1D,GAAG;gBACH,UAAU;gBACV,uHAAuH;gBACvH,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC3C,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;QACzG,CAAC;QAED,yDAAyD;QACzD,MAAM,SAAS,GAAG,YAAY,CAAY,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACnF,MAAM,aAAa,GAAG,YAAY,CAAgB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAE/F,yBAAyB;QACzB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAmB,CAAC;QACnD,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACpC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACpC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1D,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBAClC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,kBAAkB,CAC9B,WAAW,EACX,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,gBAAgB,CACjB,CAAC;QAEF,MAAM,aAAa,GAAkB,EAAE,KAAK,EAAE,CAAC;QAE/C,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,qBAAqB,EAAE,aAAa,CAAC,CAAC;QACjF,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"calls.js","sourceRoot":"","sources":["../../src/commands/calls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAqB,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,2BAA2B,CAAC;KACxC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAE3D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAEvF,6CAA6C;QAC7C,IAAI,CAAC,IAAI,GAAG,+CAA+C,CAAC;QAC5D,MAAM,WAAW,GAA4C,EAAE,CAAC;QAEhE,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;YACrE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,wBAAwB,WAAW,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAEzE,sEAAsE;QACtE,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI,gBAAgB,GAA4B,EAAE,CAAC;QACnD,IAAI,YAAY,GAAiB,aAAa,CAAC;QAC/C,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,GAAG,6CAA6C,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;gBAC1D,GAAG;gBACH,UAAU;gBACV,uHAAuH;gBACvH,QAAQ;gBACR,GAAG;aACJ,CAAC,CAAC;YAEH,yEAAyE;YACzE,gCAAgC;YAChC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC7D,YAAY,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;gBACvE,MAAM,CAAC,IAAI,CACT,YAAY,KAAK,OAAO;oBACtB,CAAC,CAAC,yFAAyF;oBAC3F,CAAC,CAAC,0EAA0E,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CACT,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,MAAM,SAAS,GAAG,YAAY,CAAY,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACnF,MAAM,aAAa,GAAG,YAAY,CAChC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAC5C,CAAC;QAEF,yBAAyB;QACzB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAmB,CAAC;QACnD,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACpC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACpC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1D,IAAI,aAAa,EAAE,CAAC;YAClB,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACrC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBAClC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,kBAAkB,CAC9B,WAAW,EACX,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,YAAY,CACb,CAAC;QAEF,MAAM,aAAa,GAAkB,EAAE,KAAK,EAAE,CAAC;QAE/C,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,qBAAqB,EAAE,aAAa,CAAC,CAAC;QACjF,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/dashboard.js

@@ -34,15 +34,15 @@ export const dashboardCommand = new Command('dashboard')
     }
     // Use the next binary that ships with this package.
     const nextBin = resolveNextBin(dashboardDir);
+    // Set cwd to the audit project so the dashboard's data loaders find .hex/
+    // via process.cwd(). This replaces the old HEX_PROJECT_DIR env-var bridge,
+    // which was a vestige from the monorepo days when the dashboard was started
+    // from a different working directory.
     const child = spawn(nextBin, [mode, dashboardDir, '--port', port], {
         stdio: 'inherit',
         shell: true,
-        env: {
-            ...process.env,
-            HEX_PROJECT_DIR: projectDir,
-            SOLAUDIT_PROJECT_DIR: projectDir,
-            PORT: port,
-        },
+        cwd: projectDir,
+        env: { ...process.env, PORT: port },
     });
     if (opts.open !== false) {
         setTimeout(() => {