hex-audit 0.6.2 → 0.7.0

package/dashboard/components/DashboardLayout.tsx

@@ -188,6 +188,24 @@ function IconFlows(p: React.SVGProps<SVGSVGElement>) {
     </svg>
   );
 }
+function IconChanges(p: React.SVGProps<SVGSVGElement>) {
+  return (
+    <svg
+      {...p}
+      aria-hidden="true"
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth={1.5}
+    >
+      <path
+        strokeLinecap="round"
+        strokeLinejoin="round"
+        d="M7.5 21 3 16.5m0 0L7.5 12M3 16.5h13.5m0-13.5L21 7.5m0 0L16.5 12M21 7.5H7.5"
+      />
+    </svg>
+  );
+}
 function IconRobot(p: React.SVGProps<SVGSVGElement>) {
   return (
     <svg
@@ -321,6 +339,8 @@ const NAV_GROUPS = [
     label: 'Recon',
     items: [
       { href: '/', label: 'Home', icon: IconHome },
+      // Shown only in a differential audit (config.json project.mode === 'diff').
+      { href: '/changes', label: 'Changes', icon: IconChanges, diffOnly: true },
       { href: '/progress', label: 'Progress', icon: IconProgress },
       { href: '/stats', label: 'Stats', icon: IconStats },
     ],
@@ -385,9 +405,12 @@ function ThemeToggle() {
 export function DashboardLayout({
   children,
   version,
+  diffMode = false,
 }: {
   children: React.ReactNode;
   version: string;
+  /** Differential audit: show diff-only nav items (Changes). */
+  diffMode?: boolean;
 }) {
   const pathname = usePathname();
   const [sidebarOpen, setSidebarOpen] = useState(false);
@@ -439,24 +462,26 @@ export function DashboardLayout({
               <div className="mb-1.5 px-3 text-caption font-medium text-text-tertiary">
                 {group.label}
               </div>
-              {group.items.map((item) => {
-                const isActive = pathname === item.href;
-                return (
-                  <Link
-                    key={item.href}
-                    href={item.href}
-                    aria-current={isActive ? 'page' : undefined}
-                    className={`group flex items-center gap-2.5 rounded-md px-3 py-2 text-body ${
-                      isActive
-                        ? 'bg-accent-subtle text-accent font-medium'
-                        : 'text-text-secondary hover:bg-surface-2 hover:text-text-primary'
-                    }`}
-                  >
-                    <item.icon className="h-4 w-4 shrink-0" />
-                    <span>{item.label}</span>
-                  </Link>
-                );
-              })}
+              {group.items
+                .filter((item) => diffMode || !item.diffOnly)
+                .map((item) => {
+                  const isActive = pathname === item.href;
+                  return (
+                    <Link
+                      key={item.href}
+                      href={item.href}
+                      aria-current={isActive ? 'page' : undefined}
+                      className={`group flex items-center gap-2.5 rounded-md px-3 py-2 text-body ${
+                        isActive
+                          ? 'bg-accent-subtle text-accent font-medium'
+                          : 'text-text-secondary hover:bg-surface-2 hover:text-text-primary'
+                      }`}
+                    >
+                      <item.icon className="h-4 w-4 shrink-0" />
+                      <span>{item.label}</span>
+                    </Link>
+                  );
+                })}
             </div>
           ))}
         </div>

package/dist/analysis/code-model.d.ts

@@ -0,0 +1,113 @@
+/**
+ * A per-file "code model" built in one AST pass: everything the differential
+ * analysis needs to (a) compare two versions of a file entity by entity and
+ * (b) build an intra-scope call / state-coupling graph on the head version.
+ *
+ * Deliberately separate from `parsers/solidity-parser.ts` (which feeds the
+ * per-file stats/access/state analyses): this one keeps character ranges,
+ * normalized bodies, call references and state reads/writes per function.
+ */
+export type ContractKind = 'contract' | 'interface' | 'library' | 'abstract' | 'free';
+export interface CallRef {
+    /**
+     * internal  — `foo(...)`             (resolved in the caller's hierarchy, then free functions)
+     * super     — `super.foo(...)`       (resolved in the caller's bases)
+     * this      — `this.foo(...)`        (resolved in the caller's hierarchy)
+     * qualified — `Lib.foo(...)` / `Base.foo(...)` where the qualifier is a known contract name
+     * typed     — `x.foo(...)` where `x` is declared with a contract/interface type in scope
+     * member    — `x.foo(...)` where the receiver type is unknown (name-only, low confidence)
+     * base_ctor — a base-constructor invocation in a constructor's modifier list
+     */
+    kind: 'internal' | 'super' | 'this' | 'qualified' | 'typed' | 'member' | 'base_ctor';
+    name: string;
+    /** Contract/interface/library name for `qualified` / `typed` / `base_ctor`. */
+    target?: string;
+    argCount: number;
+}
+export interface CodeUnit {
+    contract: string;
+    kind: 'function' | 'modifier';
+    name: string;
+    /** `name(type1,type2)`; constructor/fallback/receive use those names. */
+    signature: string;
+    visibility: string;
+    stateMutability: string | null;
+    isConstructor: boolean;
+    isFallback: boolean;
+    isReceive: boolean;
+    modifiers: string[];
+    paramCount: number;
+    lineStart: number;
+    lineEnd: number;
+    /** Raw source of the whole definition. */
+    raw: string;
+    /** Comment- and whitespace-insensitive form of `raw`, for change detection. */
+    normalized: string;
+    calls: CallRef[];
+    /** State variables (of the declaring hierarchy) read / written in the body. */
+    reads: string[];
+    writes: string[];
+}
+export interface StateVarModel {
+    name: string;
+    type: string;
+    mutability: 'mutable' | 'constant' | 'immutable';
+    visibility: string;
+    /** Normalized initializer source ('' when none). */
+    initial: string;
+    lineStart: number;
+}
+export interface NamedSigModel {
+    name: string;
+    /** `name(type1,type2)` */
+    signature: string;
+    lineStart: number;
+}
+export interface StructModel {
+    name: string;
+    /** `type name` per member, in order. */
+    members: string[];
+    lineStart: number;
+}
+export interface ContractModel {
+    name: string;
+    kind: ContractKind;
+    file: string;
+    bases: string[];
+    lineStart: number;
+    lineEnd: number;
+    units: CodeUnit[];
+    stateVars: StateVarModel[];
+    events: NamedSigModel[];
+    errors: NamedSigModel[];
+    structs: StructModel[];
+}
+export interface FileModel {
+    file: string;
+    contracts: ContractModel[];
+    parseError?: string;
+}
+export declare function typeToString(t: unknown): string;
+/**
+ * Strip comments (outside string literals) and collapse whitespace, so a
+ * re-indented or re-commented body compares equal to the original.
+ */
+export declare function normalizeSource(src: string): string;
+/**
+ * Build the code model of one file. `contractNames` (all contract-like names in
+ * scope) lets the body walker tell type conversions and typed receivers apart.
+ * `inheritedStateVars` maps a contract name to the state vars of its whole
+ * linearized hierarchy (name → type); pass an empty map for a first pass.
+ */
+export declare function buildFileModel(source: string, file: string, contractNames?: Set<string>, inheritedStateVars?: Map<string, Map<string, string>>): FileModel;
+/** Contract-like names declared in a source (cheap first pass for buildFileModel). */
+export declare function collectContractNames(source: string): string[];
+/** Linearized base list (C3-ish, most-base last), restricted to known contracts. */
+export declare function ancestorsOf(name: string, byName: Map<string, ContractModel>): string[];
+/**
+ * Build models for a whole set of sources with inherited state vars resolved:
+ * pass 1 collects contract names and own state vars, pass 2 rebuilds each file
+ * with every contract's full visible state (own + ancestors).
+ */
+export declare function buildScopeModel(sources: Map<string, string>): FileModel[];
+//# sourceMappingURL=code-model.d.ts.map

package/dist/analysis/code-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-model.d.ts","sourceRoot":"","sources":["../../src/analysis/code-model.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAEtF,MAAM,WAAW,OAAO;IACtB;;;;;;;;OAQG;IACH,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAwBD,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAmB/C;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAqCnD;AA4MD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,aAAa,GAAE,GAAG,CAAC,MAAM,CAAa,EACtC,kBAAkB,GAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAa,GAC/D,SAAS,CA+KX;AAED,sFAAsF;AACtF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAW7D;AAED,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,MAAM,EAAE,CAetF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAAE,CAwBzE"}