hex-audit 0.6.3 → 0.8.0

package/dist/commands/note.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"note.d.ts","sourceRoot":"","sources":["../../src/commands/note.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+MpC,eAAO,MAAM,WAAW,SAUC,CAAC"}
+{"version":3,"file":"note.d.ts","sourceRoot":"","sources":["../../src/commands/note.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqRpC,eAAO,MAAM,WAAW,SAYC,CAAC"}

package/dist/commands/note.js

@@ -4,8 +4,9 @@ import path from 'node:path';
 import { logger } from '../core/logger.js';
 import { loadProjectContext } from '../core/config.js';
 import { reportError } from '../core/errors.js';
-import { readNote, writeNote, appendNote, readNotesIndex, setActiveContract, createSession, latestUnprocessedSession, markSessionProcessed, readContractNote, writeContractNote, setMarkedDone, } from '../core/notes.js';
+import { readNote, writeNote, appendNote, readNotesIndex, setActiveContract, createSession, latestUnprocessedSession, markSessionProcessed, readContractNote, writeContractNote, setMarkedDone, addLeadIdempotent, resolveNoteTarget, } from '../core/notes.js';
 import { recomputeReview } from '../core/review.js';
+import { commentsForFile, commentsMarkdown, readComments } from '../core/comments.js';
 function resolveOutputDir(opts) {
     return loadProjectContext(opts.project ?? process.cwd()).outputDir;
 }
@@ -88,7 +89,10 @@ const showCmd = new Command('show')
     .option('--project <dir>', 'Project directory')
     .action((contract, opts) => {
     try {
-        console.log(JSON.stringify(readContractNote(resolveOutputDir(opts), contract), null, 2));
+        // `Vault` and `Vault.sol` are the same note: resolve like `note lead` does.
+        const outputDir = resolveOutputDir(opts);
+        const note = readContractNote(outputDir, resolveNoteTarget(outputDir, contract));
+        console.log(JSON.stringify(note, null, 2));
     }
     catch (err) {
         reportError(err);
@@ -130,6 +134,33 @@ const doneCmd = new Command('done')
         process.exit(1);
     }
 });
+const leadCmd = new Command('lead')
+    .description('Add an open lead to a contract note (idempotent on --source + --source-ref)')
+    .argument('<contract>', 'Contract name (e.g. Vault); matched to an existing note target if any')
+    .requiredOption('--text <text>', 'Lead text (inline markdown)')
+    .option('--source <source>', 'Who raised it, e.g. ai-audit')
+    .option('--source-ref <ref>', 'Origin key; a second call with the same key is a no-op')
+    .option('--project <dir>', 'Project directory')
+    .action((contract, opts) => {
+    try {
+        const outputDir = resolveOutputDir(opts);
+        const target = resolveNoteTarget(outputDir, contract);
+        const { lead, created } = addLeadIdempotent(outputDir, target, opts.text, {
+            source: opts.source,
+            source_ref: opts.sourceRef,
+        });
+        if (created)
+            recomputeReview(outputDir, target);
+        // Bare id on stdout so skills can capture it.
+        console.log(lead.id);
+        if (!created)
+            process.stderr.write(`(exists on ${target}; not added again)\n`);
+    }
+    catch (err) {
+        reportError(err);
+        process.exit(1);
+    }
+});
 // ─── session subcommands ────────────────────────────────────────────
 const sessionLatestCmd = new Command('latest')
     .description('Print the latest unprocessed narration session (with transcript) as JSON, for /diane')
@@ -184,9 +215,36 @@ const sessionCmd = new Command('session')
     .addCommand(sessionLatestCmd)
     .addCommand(sessionAddCmd)
     .addCommand(sessionMarkCmd);
+// ─── code comments (written in the dashboard's code viewer) ────────
+const commentsCmd = new Command('comments')
+    .description("The auditor's code comments from the dashboard, at their current lines")
+    .argument('[file]', 'Only this file (e.g. src/Vault.sol)')
+    .option('--json', 'JSON output')
+    .option('--project <dir>', 'Project directory')
+    .action((file, opts) => {
+    try {
+        const outputDir = resolveOutputDir(opts);
+        if (opts.json) {
+            const files = file
+                ? [file]
+                : [...new Set(readComments(outputDir).map((c) => c.file))].sort();
+            const all = files.flatMap((f) => commentsForFile(outputDir, f));
+            console.log(JSON.stringify(all, null, 2));
+            return;
+        }
+        const md = commentsMarkdown(outputDir, file ? [file] : undefined);
+        console.log(md || 'No code comments yet.');
+    }
+    catch (err) {
+        reportError(err);
+        process.exit(1);
+    }
+});
 export const noteCommand = new Command('note')
-    .description('Read and write Diane audit notes (show / set / done / list / active / session)')
+    .description('Read and write audit notes (show / set / done / lead / list / active / session)')
     .addCommand(showCmd)
+    .addCommand(commentsCmd)
+    .addCommand(leadCmd)
     .addCommand(setCmd)
     .addCommand(doneCmd)
     .addCommand(readCmd)

package/dist/commands/note.js.map

@@ -1 +1 @@
-{"version":3,"file":"note.js","sourceRoot":"","sources":["../../src/commands/note.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,QAAQ,EACR,SAAS,EACT,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GAEd,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,SAAS,gBAAgB,CAAC,IAA0B;IAClD,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,yDAAyD,CAAC;KACtE,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;KACpD,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,MAAc,EAAE,IAA0B,EAAE,EAAE;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAClC,WAAW,CAAC,gDAAgD,CAAC;KAC7D,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;KACpD,cAAc,CAAC,oBAAoB,EAAE,mCAAmC,CAAC;KACzE,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,MAAc,EAAE,IAA4C,EAAE,EAAE;IACvE,IAAI,CAAC;QACH,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACpC,WAAW,CAAC,8DAA8D,CAAC;KAC3E,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;KACpD,cAAc,CAAC,oBAAoB,EAAE,yCAAyC,CAAC;KAC/E,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,MAAc,EAAE,IAA4C,EAAE,EAAE;IACvE,IAAI,CAAC;QACH,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,sEAAsE,CAAC;KACnF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAA0B,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACpC,WAAW,CAAC,kDAAkD,CAAC;KAC/D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;KACnC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAAY,EAAE,IAA0B,EAAE,EAAE;IACnD,IAAI,CAAC;QACH,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,sEAAsE;AAEtE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,8EAA8E,CAAC;KAC3F,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;KACxD,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,QAAgB,EAAE,IAA0B,EAAE,EAAE;IACvD,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAC9B,WAAW,CAAC,uFAAuF,CAAC;KACpG,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;KACxD,cAAc,CAAC,oBAAoB,EAAE,yCAAyC,CAAC;KAC/E,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,QAAgB,EAAE,IAA4C,EAAE,EAAE;IACzE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAiB,CAAC;QAC/F,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,eAAe,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,iFAAiF,CAAC;KAC9F,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;KACxD,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC;KACvC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,QAAgB,EAAE,IAA0C,EAAE,EAAE;IACvE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CACZ,GAAG,QAAQ,WAAW,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,uEAAuE;AAEvE,MAAM,gBAAgB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC3C,WAAW,CAAC,sFAAsF,CAAC;KACnG,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAA0B,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KACrC,WAAW,CAAC,6FAA6F,CAAC;KAC1G,cAAc,CAAC,0BAA0B,EAAE,sBAAsB,CAAC;KAClE,cAAc,CAAC,mBAAmB,EAAE,8BAA8B,CAAC;KACnE,MAAM,CAAC,YAAY,EAAE,6BAA6B,CAAC;KACnD,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAAiF,EAAE,EAAE;IAC5F,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE;YACpD,EAAE;YACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC;SAC9C,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,OAAO,CAAC,IAAI,eAAe,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC;KACjD,WAAW,CAAC,qCAAqC,CAAC;KAClD,QAAQ,CAAC,QAAQ,EAAE,6DAA6D,CAAC;KACjF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAAY,EAAE,IAA0B,EAAE,EAAE;IACnD,IAAI,CAAC;QACH,oBAAoB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;KACtC,WAAW,CAAC,2DAA2D,CAAC;KACxE,UAAU,CAAC,gBAAgB,CAAC;KAC5B,UAAU,CAAC,aAAa,CAAC;KACzB,UAAU,CAAC,cAAc,CAAC,CAAC;AAE9B,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAC3C,WAAW,CAAC,gFAAgF,CAAC;KAC7F,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,MAAM,CAAC;KAClB,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,QAAQ,CAAC;KACpB,UAAU,CAAC,SAAS,CAAC;KACrB,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,SAAS,CAAC;KACrB,UAAU,CAAC,UAAU,CAAC,CAAC"}
+{"version":3,"file":"note.js","sourceRoot":"","sources":["../../src/commands/note.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,QAAQ,EACR,SAAS,EACT,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEtF,SAAS,gBAAgB,CAAC,IAA0B;IAClD,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,yDAAyD,CAAC;KACtE,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;KACpD,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,MAAc,EAAE,IAA0B,EAAE,EAAE;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAClC,WAAW,CAAC,gDAAgD,CAAC;KAC7D,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;KACpD,cAAc,CAAC,oBAAoB,EAAE,mCAAmC,CAAC;KACzE,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,MAAc,EAAE,IAA4C,EAAE,EAAE;IACvE,IAAI,CAAC;QACH,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACpC,WAAW,CAAC,8DAA8D,CAAC;KAC3E,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;KACpD,cAAc,CAAC,oBAAoB,EAAE,yCAAyC,CAAC;KAC/E,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,MAAc,EAAE,IAA4C,EAAE,EAAE;IACvE,IAAI,CAAC;QACH,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,sEAAsE,CAAC;KACnF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAA0B,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACpC,WAAW,CAAC,kDAAkD,CAAC;KAC/D,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;KACnC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAAY,EAAE,IAA0B,EAAE,EAAE;IACnD,IAAI,CAAC;QACH,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,sEAAsE;AAEtE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,8EAA8E,CAAC;KAC3F,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;KACxD,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,QAAgB,EAAE,IAA0B,EAAE,EAAE;IACvD,IAAI,CAAC;QACH,4EAA4E;QAC5E,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,EAAE,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAC9B,WAAW,CACV,uFAAuF,CACxF;KACA,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;KACxD,cAAc,CAAC,oBAAoB,EAAE,yCAAyC,CAAC;KAC/E,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,QAAgB,EAAE,IAA4C,EAAE,EAAE;IACzE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CACtC,CAAC;QAClB,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,eAAe,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,iFAAiF,CAAC;KAC9F,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;KACxD,MAAM,CAAC,QAAQ,EAAE,qBAAqB,CAAC;KACvC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,QAAgB,EAAE,IAA0C,EAAE,EAAE;IACvE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CACZ,GAAG,QAAQ,WAAW,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CAAC,6EAA6E,CAAC;KAC1F,QAAQ,CAAC,YAAY,EAAE,uEAAuE,CAAC;KAC/F,cAAc,CAAC,eAAe,EAAE,6BAA6B,CAAC;KAC9D,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,CAAC;KAC3D,MAAM,CAAC,oBAAoB,EAAE,wDAAwD,CAAC;KACtF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CACL,CACE,QAAgB,EAChB,IAA6E,EAC7E,EAAE;IACF,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;YACxE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,OAAO;YAAE,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAChD,8CAA8C;QAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,MAAM,sBAAsB,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CACF,CAAC;AAEJ,uEAAuE;AAEvE,MAAM,gBAAgB,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC3C,WAAW,CACV,sFAAsF,CACvF;KACA,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAA0B,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KACrC,WAAW,CACV,6FAA6F,CAC9F;KACA,cAAc,CAAC,0BAA0B,EAAE,sBAAsB,CAAC;KAClE,cAAc,CAAC,mBAAmB,EAAE,8BAA8B,CAAC;KACnE,MAAM,CAAC,YAAY,EAAE,6BAA6B,CAAC;KACnD,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAAiF,EAAE,EAAE;IAC5F,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE;YACpD,EAAE;YACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC;SAC9C,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,kBAAkB,OAAO,CAAC,IAAI,eAAe,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,gBAAgB,CAAC;KACjD,WAAW,CAAC,qCAAqC,CAAC;KAClD,QAAQ,CAAC,QAAQ,EAAE,6DAA6D,CAAC;KACjF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAAY,EAAE,IAA0B,EAAE,EAAE;IACnD,IAAI,CAAC;QACH,oBAAoB,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;KACtC,WAAW,CAAC,2DAA2D,CAAC;KACxE,UAAU,CAAC,gBAAgB,CAAC;KAC5B,UAAU,CAAC,aAAa,CAAC;KACzB,UAAU,CAAC,cAAc,CAAC,CAAC;AAE9B,sEAAsE;AAEtE,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;KACxC,WAAW,CAAC,wEAAwE,CAAC;KACrF,QAAQ,CAAC,QAAQ,EAAE,qCAAqC,CAAC;KACzD,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAAwB,EAAE,IAA0C,EAAE,EAAE;IAC/E,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,IAAI;gBAChB,CAAC,CAAC,CAAC,IAAI,CAAC;gBACR,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAC3C,WAAW,CAAC,iFAAiF,CAAC;KAC9F,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,WAAW,CAAC;KACvB,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,MAAM,CAAC;KAClB,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,QAAQ,CAAC;KACpB,UAAU,CAAC,SAAS,CAAC;KACrB,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,SAAS,CAAC;KACrB,UAAU,CAAC,UAAU,CAAC,CAAC"}

package/dist/commands/review.d.ts

@@ -0,0 +1,4 @@
+import { Command } from 'commander';
+export declare const reviewCommand: Command;
+export declare const rulesCommand: Command;
+//# sourceMappingURL=review.d.ts.map

package/dist/commands/review.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.d.ts","sourceRoot":"","sources":["../../src/commands/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0FpC,eAAO,MAAM,aAAa,SAMH,CAAC;AAwExB,eAAO,MAAM,YAAY,SAKC,CAAC"}

package/dist/commands/review.js

@@ -0,0 +1,164 @@
+import { Command } from 'commander';
+import { logger } from '../core/logger.js';
+import { loadProjectContext } from '../core/config.js';
+import { reportError } from '../core/errors.js';
+import { markFunctions, REVIEW_STATES, reviewSummary } from '../core/review.js';
+import { loadFacts, resolveFunctions } from '../facts/query.js';
+import { addRule, readRules, removeRule, rulesMarkdown } from '../core/rules.js';
+const outDir = (opts) => loadProjectContext(opts.project ?? process.cwd()).outputDir;
+const fail = (err) => {
+    reportError(err);
+    process.exit(1);
+};
+const markCmd = new Command('mark')
+    .description('Set the review state of functions (Vault.withdraw, Vault.withdraw(uint256), or a whole contract: Vault)')
+    .argument('<refs...>', 'Function refs or contract names')
+    .requiredOption('--state <state>', REVIEW_STATES.join(' | '))
+    .option('--by <who>', 'auditor | diane | dashboard | agent', 'auditor')
+    .option('--note <text>', 'Short note (e.g. the open question)')
+    .option('--project <dir>', 'Project directory')
+    .action((refs, opts) => {
+    try {
+        if (!REVIEW_STATES.includes(opts.state)) {
+            throw new Error(`--state must be one of ${REVIEW_STATES.join(', ')}`);
+        }
+        const dir = outDir(opts);
+        const facts = loadFacts(dir);
+        if (!facts)
+            throw new Error('No .hex/facts.json yet. Run `hex facts` first.');
+        const ids = new Set();
+        const unresolved = [];
+        for (const ref of refs) {
+            const contractFns = facts.functions.filter((f) => f.contract === ref && f.in_scope);
+            const hits = contractFns.length
+                ? contractFns
+                : resolveFunctions(facts, ref).filter((f) => f.in_scope);
+            if (!hits.length)
+                unresolved.push(ref);
+            for (const f of hits)
+                ids.add(f.id);
+        }
+        if (unresolved.length)
+            throw new Error(`Unknown function(s): ${unresolved.join(', ')}`);
+        markFunctions(dir, [...ids], opts.state, opts.by, opts.note);
+        logger.success(`${[...ids].join(', ')} → ${opts.state}`);
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+const statusCmd = new Command('status')
+    .description('Review progress: cleared nSLOC and per-state counts')
+    .option('--json', 'Full review map as JSON')
+    .option('--project <dir>', 'Project directory')
+    .action((opts) => {
+    try {
+        const s = reviewSummary(outDir(opts));
+        if (opts.json)
+            return void console.log(JSON.stringify(s, null, 2));
+        console.log(`${s.pct}% cleared (${s.cleared_nsloc}/${s.total_nsloc} nSLOC)`);
+        console.log(`cleared ${s.counts.cleared} · questioned ${s.counts.questioned} · read ${s.counts.read} · unread ${s.counts.unread}`);
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+const blindCmd = new Command('blind-spots')
+    .description('Riskiest code nobody (human or AI) has looked at hard yet')
+    .option('--limit <n>', 'How many', '10')
+    .option('--json', 'JSON output')
+    .option('--project <dir>', 'Project directory')
+    .action((opts) => {
+    try {
+        const s = reviewSummary(outDir(opts), { blindSpots: parseInt(opts.limit, 10) });
+        if (opts.json)
+            return void console.log(JSON.stringify(s.blind_spots, null, 2));
+        if (!s.blind_spots.length)
+            return void console.log('No blind spots: everything is cleared or questioned.');
+        for (const r of s.blind_spots) {
+            console.log(`${String(r.risk).padStart(3)}  ${r.id}  ${r.file}:${r.line_start}  ${r.state}${r.ai_seen ? ', AI-seen' : ''}  (${r.risk_reasons.join(', ')})`);
+        }
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+export const reviewCommand = new Command('review')
+    .description('Per-function review map: mark functions read / questioned / cleared, see blind spots')
+    .addCommand(markCmd)
+    .addCommand(statusCmd)
+    .addCommand(blindCmd);
+// ─── hex rules ──────────────────────────────────────────────────────
+const rulesList = new Command('list')
+    .description('List triage rules')
+    .option('--json', 'JSON output')
+    .option('--project <dir>', 'Project directory')
+    .action((opts) => {
+    try {
+        const rules = readRules(outDir(opts));
+        if (opts.json)
+            return void console.log(JSON.stringify(rules, null, 2));
+        if (!rules.length)
+            return void console.log('No triage rules.');
+        for (const r of rules)
+            console.log(`${r.id} ${r.kind.padEnd(13)} ${r.text}${r.scope.length ? ` [${r.scope.join(', ')}]` : ''}`);
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+const rulesAdd = new Command('add')
+    .description('Add a triage rule (fed into /ai-audit, AuditAgent ingest and pre-validation)')
+    .requiredOption('--kind <kind>', 'out_of_scope | trusted_role | by_design | known_issue')
+    .requiredOption('--text <text>', 'The rule, as one sentence')
+    .option('--scope <refs...>', 'Contracts / function ids it is limited to')
+    .option('--from <id>', 'The card that prompted it (H-NNN)')
+    .option('--project <dir>', 'Project directory')
+    .action((opts) => {
+    try {
+        const kinds = ['out_of_scope', 'trusted_role', 'by_design', 'known_issue'];
+        if (!kinds.includes(opts.kind))
+            throw new Error(`--kind must be one of ${kinds.join(', ')}`);
+        const rule = addRule(outDir(opts), {
+            kind: opts.kind,
+            text: opts.text,
+            scope: opts.scope,
+            created_from: opts.from,
+        });
+        console.log(rule.id);
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+const rulesRemove = new Command('remove')
+    .description('Remove a triage rule')
+    .argument('<id>', 'R-NNN')
+    .option('--project <dir>', 'Project directory')
+    .action((id, opts) => {
+    try {
+        removeRule(outDir(opts), id);
+        logger.success(`Removed ${id}`);
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+const rulesExport = new Command('export')
+    .description('Print the rules as markdown for agent bundles (empty when there are none)')
+    .option('--project <dir>', 'Project directory')
+    .action((opts) => {
+    try {
+        process.stdout.write(rulesMarkdown(readRules(outDir(opts))));
+    }
+    catch (err) {
+        fail(err);
+    }
+});
+export const rulesCommand = new Command('rules')
+    .description("Triage rules: the auditor's standing decisions, fed into every AI run")
+    .addCommand(rulesList)
+    .addCommand(rulesAdd)
+    .addCommand(rulesRemove)
+    .addCommand(rulesExport);
+//# sourceMappingURL=review.js.map

package/dist/commands/review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review.js","sourceRoot":"","sources":["../../src/commands/review.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAoB,MAAM,mBAAmB,CAAC;AAClG,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjF,MAAM,MAAM,GAAG,CAAC,IAA0B,EAAE,EAAE,CAC5C,kBAAkB,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC;AAC9D,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,EAAE;IAC5B,WAAW,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAChC,WAAW,CACV,yGAAyG,CAC1G;KACA,QAAQ,CAAC,WAAW,EAAE,iCAAiC,CAAC;KACxD,cAAc,CAAC,iBAAiB,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KAC5D,MAAM,CAAC,YAAY,EAAE,qCAAqC,EAAE,SAAS,CAAC;KACtE,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC;KAC9D,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CACL,CAAC,IAAc,EAAE,IAAoE,EAAE,EAAE;IACvF,IAAI,CAAC;QACH,IAAI,CAAE,aAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,0BAA0B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;YACpF,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM;gBAC7B,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,UAAU,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,aAAa,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,KAAoB,EAAE,IAAI,CAAC,EAAe,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACzF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC;AACH,CAAC,CACF,CAAC;AAEJ,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACpC,WAAW,CAAC,qDAAqD,CAAC;KAClE,MAAM,CAAC,QAAQ,EAAE,yBAAyB,CAAC;KAC3C,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAA0C,EAAE,EAAE;IACrD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CACT,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,UAAU,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CACtH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC;KACxC,WAAW,CAAC,2DAA2D,CAAC;KACxE,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC;KACvC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAAyD,EAAE,EAAE;IACpE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM;YACvB,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QAClF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/I,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CACV,sFAAsF,CACvF;KACA,UAAU,CAAC,OAAO,CAAC;KACnB,UAAU,CAAC,SAAS,CAAC;KACrB,UAAU,CAAC,QAAQ,CAAC,CAAC;AAExB,uEAAuE;AAEvE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAClC,WAAW,CAAC,mBAAmB,CAAC;KAChC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;KAC/B,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAA0C,EAAE,EAAE;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,KAAK;YACnB,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5F,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAChC,WAAW,CAAC,8EAA8E,CAAC;KAC3F,cAAc,CAAC,eAAe,EAAE,uDAAuD,CAAC;KACxF,cAAc,CAAC,eAAe,EAAE,2BAA2B,CAAC;KAC5D,MAAM,CAAC,mBAAmB,EAAE,2CAA2C,CAAC;KACxE,MAAM,CAAC,aAAa,EAAE,mCAAmC,CAAC;KAC1D,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CACL,CAAC,IAAuF,EAAE,EAAE;IAC1F,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACjC,IAAI,EAAE,IAAI,CAAC,IAAsB;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,IAAI;SACxB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC;AACH,CAAC,CACF,CAAC;AAEJ,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACtC,WAAW,CAAC,sBAAsB,CAAC;KACnC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;KACzB,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,EAAU,EAAE,IAA0B,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;KACtC,WAAW,CAAC,2EAA2E,CAAC;KACxF,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;KAC9C,MAAM,CAAC,CAAC,IAA0B,EAAE,EAAE;IACrC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,uEAAuE,CAAC;KACpF,UAAU,CAAC,SAAS,CAAC;KACrB,UAAU,CAAC,QAAQ,CAAC;KACpB,UAAU,CAAC,WAAW,CAAC;KACvB,UAAU,CAAC,WAAW,CAAC,CAAC"}

package/dist/core/comments.d.ts

@@ -0,0 +1,59 @@
+export interface CodeComment {
+    /** `C-001`, `C-002`, … */
+    id: string;
+    file: string;
+    line_start: number;
+    line_end: number;
+    /** The code the comment was written on; the anchor that finds it again. */
+    snippet: string;
+    text: string;
+    by: 'auditor' | 'diane' | 'agent';
+    created_at: string;
+    updated_at?: string;
+    /** Present while the comment also sits in the file as `// @audit` lines. */
+    in_source?: {
+        line: number;
+        inserted: string[];
+        at: string;
+    };
+}
+/** A comment as the viewer shows it: `stale` when its code is no longer in the file. */
+export interface CodeCommentView extends CodeComment {
+    stale?: boolean;
+}
+export declare function readComments(outputDir: string): CodeComment[];
+/**
+ * Where the comment's code is now: where it was, else the nearest exact match
+ * of the same lines; null when the code is gone.
+ */
+export declare function locate(lines: string[], c: Pick<CodeComment, 'line_start' | 'line_end' | 'snippet'>): {
+    start: number;
+    end: number;
+} | null;
+/**
+ * The comments on one file, at the lines their code sits on now. Comments whose
+ * code moved are re-anchored on disk; comments whose code is gone come back
+ * `stale` at their last known lines.
+ */
+export declare function commentsForFile(outputDir: string, file: string): CodeCommentView[];
+export declare function addComment(outputDir: string, input: {
+    file: string;
+    line_start: number;
+    line_end: number;
+    text: string;
+    by?: CodeComment['by'];
+}): CodeComment;
+/** Put back a deleted comment exactly as it was (undo). */
+export declare function restoreComment(outputDir: string, comment: CodeComment): CodeComment;
+export declare function deleteComment(outputDir: string, id: string): CodeComment;
+/** Edit the text; a comment that sits in the file is rewritten there too. */
+export declare function editComment(outputDir: string, id: string, text: string): CodeComment;
+/** The `// @audit` lines for a comment, indented like the code under them. */
+export declare function auditLines(text: string, indent: string): string[];
+/** Insert the comment above its code as `// @audit` lines. */
+export declare function writeCommentToSource(outputDir: string, id: string): CodeComment;
+/** Take the comment's `// @audit` lines out of the file again. */
+export declare function removeCommentFromSource(outputDir: string, id: string): CodeComment;
+/** Markdown for agents (Diane, /ai-audit bundles): the auditor's comments by file. */
+export declare function commentsMarkdown(outputDir: string, files?: string[]): string;
+//# sourceMappingURL=comments.d.ts.map

package/dist/core/comments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comments.d.ts","sourceRoot":"","sources":["../../src/core/comments.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAID,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAS7D;AA6CD;;;GAGG;AACH,wBAAgB,MAAM,CACpB,KAAK,EAAE,MAAM,EAAE,EACf,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,GAAG,UAAU,GAAG,SAAS,CAAC,GAC1D;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAcvC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CA6BlF;AAED,wBAAgB,UAAU,CACxB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;CACxB,GACA,WAAW,CAsBb;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,WAAW,CAKnF;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,WAAW,CAUxE;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAapF;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAKjE;AAYD,8DAA8D;AAC9D,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,WAAW,CAmB/E;AAED,kEAAkE;AAClE,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,WAAW,CA2BlF;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAmB5E"}

package/dist/core/comments.js

@@ -0,0 +1,263 @@
+/**
+ * Code comments: the auditor's notes pinned to lines of source, written from
+ * the dashboard's code viewer the way one comments on a pull request. Stored in
+ * `.hex/notes/comments.json` and anchored by the code they were written on, so
+ * they follow that code when lines move. A comment can also be written into the
+ * file itself as `// @audit` lines (and taken out again).
+ *
+ * Node builtins only: the dashboard imports this module.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+const commentsPath = (outputDir) => path.join(outputDir, 'notes', 'comments.json');
+export function readComments(outputDir) {
+    try {
+        const data = JSON.parse(fs.readFileSync(commentsPath(outputDir), 'utf-8'));
+        return data.comments ?? [];
+    }
+    catch {
+        return [];
+    }
+}
+function writeComments(outputDir, comments) {
+    const p = commentsPath(outputDir);
+    fs.mkdirSync(path.dirname(p), { recursive: true });
+    const tmp = `${p}.tmp`;
+    fs.writeFileSync(tmp, JSON.stringify({ comments }, null, 2) + '\n', 'utf-8');
+    fs.renameSync(tmp, p);
+}
+/**
+ * The project root is the folder that holds `.hex/`, the same root the
+ * dashboard's code viewer reads from (config's `project_dir` goes stale when a
+ * project is copied or moved, and comments must land in the file on screen).
+ */
+function projectDir(outputDir) {
+    return path.dirname(path.resolve(outputDir));
+}
+function readSource(outputDir, file) {
+    const abs = path.resolve(projectDir(outputDir), file);
+    const raw = fs.readFileSync(abs, 'utf-8');
+    const eol = raw.includes('\r\n') ? '\r\n' : '\n';
+    return { abs, lines: raw.split(/\r?\n/), eol };
+}
+function writeSource(src) {
+    const tmp = `${src.abs}.hex-tmp`;
+    const mode = fs.statSync(src.abs).mode;
+    fs.writeFileSync(tmp, src.lines.join(src.eol), { encoding: 'utf-8', mode });
+    fs.renameSync(tmp, src.abs);
+}
+const norm = (s) => s
+    .split(/\r?\n/)
+    .map((l) => l.trim())
+    .join('\n');
+/**
+ * Where the comment's code is now: where it was, else the nearest exact match
+ * of the same lines; null when the code is gone.
+ */
+export function locate(lines, c) {
+    const n = c.line_end - c.line_start + 1;
+    const want = norm(c.snippet);
+    const matchesAt = (s) => norm(lines.slice(s - 1, s - 1 + n).join('\n')) === want;
+    if (matchesAt(c.line_start))
+        return { start: c.line_start, end: c.line_end };
+    let best = null;
+    for (let s = 1; s + n - 1 <= lines.length; s++) {
+        if (matchesAt(s) &&
+            (best === null || Math.abs(s - c.line_start) < Math.abs(best - c.line_start)))
+            best = s;
+    }
+    return best === null ? null : { start: best, end: best + n - 1 };
+}
+/**
+ * The comments on one file, at the lines their code sits on now. Comments whose
+ * code moved are re-anchored on disk; comments whose code is gone come back
+ * `stale` at their last known lines.
+ */
+export function commentsForFile(outputDir, file) {
+    const all = readComments(outputDir);
+    const mine = all.filter((c) => c.file === file);
+    if (mine.length === 0)
+        return [];
+    let lines;
+    try {
+        lines = readSource(outputDir, file).lines;
+    }
+    catch {
+        return mine.map((c) => ({ ...c, stale: true }));
+    }
+    let moved = false;
+    const out = [];
+    for (const c of mine) {
+        const at = locate(lines, c);
+        if (!at) {
+            out.push({ ...c, stale: true });
+            continue;
+        }
+        if (at.start !== c.line_start) {
+            const shift = at.start - c.line_start;
+            c.line_start = at.start;
+            c.line_end = at.end;
+            if (c.in_source)
+                c.in_source.line += shift;
+            moved = true;
+        }
+        out.push({ ...c });
+    }
+    if (moved)
+        writeComments(outputDir, all);
+    return out.sort((a, b) => a.line_end - b.line_end || a.created_at.localeCompare(b.created_at));
+}
+export function addComment(outputDir, input) {
+    const text = input.text.trim();
+    if (!text)
+        throw new Error('A comment needs text');
+    const { lines } = readSource(outputDir, input.file);
+    const start = Math.max(1, Math.min(input.line_start, input.line_end));
+    const end = Math.min(lines.length, Math.max(input.line_start, input.line_end));
+    if (start > lines.length)
+        throw new Error(`${input.file} has only ${lines.length} lines`);
+    const all = readComments(outputDir);
+    const max = all.reduce((m, c) => Math.max(m, parseInt(c.id.replace(/^C-/, ''), 10) || 0), 0);
+    const comment = {
+        id: `C-${String(max + 1).padStart(3, '0')}`,
+        file: input.file,
+        line_start: start,
+        line_end: end,
+        snippet: lines.slice(start - 1, end).join('\n'),
+        text,
+        by: input.by ?? 'auditor',
+        created_at: new Date().toISOString(),
+    };
+    all.push(comment);
+    writeComments(outputDir, all);
+    return comment;
+}
+/** Put back a deleted comment exactly as it was (undo). */
+export function restoreComment(outputDir, comment) {
+    const all = readComments(outputDir).filter((c) => c.id !== comment.id);
+    all.push(comment);
+    writeComments(outputDir, all);
+    return comment;
+}
+export function deleteComment(outputDir, id) {
+    const found = readComments(outputDir).find((x) => x.id === id);
+    if (!found)
+        throw new Error(`No comment ${id}`);
+    // A comment that sits in the file leaves the file with it.
+    const c = found.in_source ? removeCommentFromSource(outputDir, id) : found;
+    writeComments(outputDir, readComments(outputDir).filter((x) => x.id !== id));
+    return c;
+}
+/** Edit the text; a comment that sits in the file is rewritten there too. */
+export function editComment(outputDir, id, text) {
+    const t = text.trim();
+    if (!t)
+        throw new Error('A comment needs text');
+    const before = readComments(outputDir).find((x) => x.id === id);
+    if (!before)
+        throw new Error(`No comment ${id}`);
+    const inSource = Boolean(before.in_source);
+    if (inSource)
+        removeCommentFromSource(outputDir, id);
+    const all = readComments(outputDir);
+    const c = all.find((x) => x.id === id);
+    c.text = t;
+    c.updated_at = new Date().toISOString();
+    writeComments(outputDir, all);
+    return inSource ? writeCommentToSource(outputDir, id) : c;
+}
+/** The `// @audit` lines for a comment, indented like the code under them. */
+export function auditLines(text, indent) {
+    return text
+        .trim()
+        .split(/\r?\n/)
+        .map((l, i) => `${indent}// ${i === 0 ? '@audit ' : ''}${l.trimEnd()}`.trimEnd());
+}
+/** Shift the stored lines of every other comment in `file` at or below `from`. */
+function shiftOthers(all, file, id, from, by) {
+    for (const o of all) {
+        if (o.id === id || o.file !== file || o.line_start < from)
+            continue;
+        o.line_start += by;
+        o.line_end += by;
+        if (o.in_source)
+            o.in_source.line += by;
+    }
+}
+/** Insert the comment above its code as `// @audit` lines. */
+export function writeCommentToSource(outputDir, id) {
+    const all = readComments(outputDir);
+    const c = all.find((x) => x.id === id);
+    if (!c)
+        throw new Error(`No comment ${id}`);
+    if (c.in_source)
+        return c;
+    if (!c.file.endsWith('.sol'))
+        throw new Error('Only Solidity files take @audit comments');
+    const src = readSource(outputDir, c.file);
+    const at = locate(src.lines, c);
+    if (!at)
+        throw new Error('The code this comment was written on is no longer in the file');
+    const indent = /^\s*/.exec(src.lines[at.start - 1] ?? '')?.[0] ?? '';
+    const inserted = auditLines(c.text, indent);
+    src.lines.splice(at.start - 1, 0, ...inserted);
+    writeSource(src);
+    shiftOthers(all, c.file, c.id, at.start, inserted.length);
+    c.in_source = { line: at.start, inserted, at: new Date().toISOString() };
+    c.line_start = at.start + inserted.length;
+    c.line_end = at.end + inserted.length;
+    writeComments(outputDir, all);
+    return c;
+}
+/** Take the comment's `// @audit` lines out of the file again. */
+export function removeCommentFromSource(outputDir, id) {
+    const all = readComments(outputDir);
+    const c = all.find((x) => x.id === id);
+    if (!c)
+        throw new Error(`No comment ${id}`);
+    if (!c.in_source)
+        return c;
+    const src = readSource(outputDir, c.file);
+    const { inserted } = c.in_source;
+    const want = norm(inserted.join('\n'));
+    // The lines sit right above the comment's code; look there first, then nearby.
+    const at = locate(src.lines, {
+        line_start: c.in_source.line,
+        line_end: c.in_source.line + inserted.length - 1,
+        snippet: inserted.join('\n'),
+    });
+    if (!at || norm(src.lines.slice(at.start - 1, at.end).join('\n')) !== want) {
+        throw new Error('The @audit lines were changed in the file, so Hex will not remove them; edit the file directly.');
+    }
+    src.lines.splice(at.start - 1, inserted.length);
+    writeSource(src);
+    shiftOthers(all, c.file, c.id, at.start, -inserted.length);
+    c.line_start -= inserted.length;
+    c.line_end -= inserted.length;
+    delete c.in_source;
+    writeComments(outputDir, all);
+    return c;
+}
+/** Markdown for agents (Diane, /ai-audit bundles): the auditor's comments by file. */
+export function commentsMarkdown(outputDir, files) {
+    const all = readComments(outputDir);
+    const byFile = new Map();
+    for (const f of [...new Set(all.map((c) => c.file))].sort()) {
+        if (files && !files.includes(f))
+            continue;
+        byFile.set(f, commentsForFile(outputDir, f));
+    }
+    if (byFile.size === 0)
+        return '';
+    const out = ["# The auditor's code comments", ''];
+    for (const [f, cs] of byFile) {
+        out.push(`## ${f}`, '');
+        for (const c of cs) {
+            const where = c.line_start === c.line_end ? `${c.line_start}` : `${c.line_start}-${c.line_end}`;
+            out.push(`- **${c.id}** (lines ${where}${c.stale ? ', code since changed' : ''}): ${c.text}`);
+        }
+        out.push('');
+    }
+    return out.join('\n');
+}
+//# sourceMappingURL=comments.js.map