hex-audit 0.7.0 → 0.8.0

package/dist/core/rules.js

@@ -0,0 +1,66 @@
+/**
+ * Triage rules (`.hex/triage-rules.json`): the auditor's standing decisions
+ * ("admin is trusted", "fee-on-transfer tokens are out of scope", known issues).
+ * Fed into every AI run so the same false-positive classes stop resurfacing.
+ * Node builtins only.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+const file = (outputDir) => path.join(outputDir, 'triage-rules.json');
+export function readRules(outputDir) {
+    try {
+        return (JSON.parse(fs.readFileSync(file(outputDir), 'utf-8')).rules ?? []);
+    }
+    catch {
+        return [];
+    }
+}
+function writeRules(outputDir, rules) {
+    const p = file(outputDir);
+    const tmp = p + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify({ rules }, null, 2) + '\n', 'utf-8');
+    fs.renameSync(tmp, p);
+}
+export function addRule(outputDir, input) {
+    const rules = readRules(outputDir);
+    const max = rules.reduce((m, r) => Math.max(m, parseInt(r.id.replace(/^R-/, ''), 10) || 0), 0);
+    const rule = {
+        id: `R-${String(max + 1).padStart(3, '0')}`,
+        kind: input.kind,
+        text: input.text.trim(),
+        scope: input.scope ?? [],
+        ...(input.created_from ? { created_from: input.created_from } : {}),
+        created_at: new Date().toISOString(),
+    };
+    rules.push(rule);
+    writeRules(outputDir, rules);
+    return rule;
+}
+export function removeRule(outputDir, id) {
+    const rules = readRules(outputDir);
+    if (!rules.some((r) => r.id === id))
+        throw new Error(`No triage rule ${id}`);
+    writeRules(outputDir, rules.filter((r) => r.id !== id));
+}
+const KIND_LABEL = {
+    out_of_scope: 'Out of scope',
+    trusted_role: 'Trusted role',
+    by_design: 'By design',
+    known_issue: 'Known issue',
+};
+/** Markdown for agent bundles: what the auditor already decided not to report. */
+export function rulesMarkdown(rules) {
+    if (rules.length === 0)
+        return '';
+    const out = [
+        '# Triage rules — the auditor already decided these',
+        '',
+        'Do not report a finding whose whole impact depends on one of these. If a finding matches a rule only partly, report it and say which part the rule does not cover.',
+        '',
+    ];
+    for (const r of rules) {
+        out.push(`- **${r.id}** (${KIND_LABEL[r.kind]}${r.scope.length ? `; ${r.scope.join(', ')}` : ''}): ${r.text}`);
+    }
+    return out.join('\n') + '\n';
+}
+//# sourceMappingURL=rules.js.map

package/dist/core/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/core/rules.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAE9E,MAAM,UAAU,SAAS,CAAC,SAAiB;IACzC,IAAI,CAAC;QACH,OAAO,CACJ,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAA6B,CAAC,KAAK,IAAI,EAAE,CAC/F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,KAAmB;IACxD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,SAAiB,EACjB,KAA0F;IAE1F,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAe;QACvB,EAAE,EAAE,KAAK,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;QAC3C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QACvB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,EAAU;IACtD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC7E,UAAU,CACR,SAAS,EACT,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAuC;IACrD,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG;QACV,oDAAoD;QACpD,EAAE;QACF,oKAAoK;QACpK,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CACN,OAAO,CAAC,CAAC,EAAE,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAC/B,CAAC"}