hex-audit 0.7.0 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CLAUDE.md +137 -77
- package/DEMO.md +40 -117
- package/README.md +200 -402
- package/dashboard/.next/BUILD_ID +1 -1
- package/dashboard/.next/app-build-manifest.json +56 -101
- package/dashboard/.next/app-path-routes-manifest.json +1 -1
- package/dashboard/.next/build-manifest.json +9 -9
- package/dashboard/.next/next-server.js.nft.json +1 -1
- package/dashboard/.next/prerender-manifest.json +1 -1
- package/dashboard/.next/react-loadable-manifest.json +436 -15
- package/dashboard/.next/routes-manifest.json +1 -1
- package/dashboard/.next/server/app/_not-found/page.js +1 -1
- package/dashboard/.next/server/app/_not-found/page.js.nft.json +1 -1
- package/dashboard/.next/server/app/_not-found/page_client-reference-manifest.js +1 -1
- package/dashboard/.next/server/app/api/code/route.js +1 -1
- package/dashboard/.next/server/app/api/code/route.js.nft.json +1 -1
- package/dashboard/.next/server/app/api/comments/route.js +1 -0
- package/dashboard/.next/server/app/api/comments/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/diagrams/[name]/export/route.js +1 -0
- package/dashboard/.next/server/app/api/diagrams/[name]/export/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/diagrams/[name]/resolve/route.js +1 -0
- package/dashboard/.next/server/app/api/diagrams/[name]/resolve/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/diagrams/[name]/route.js +1 -0
- package/dashboard/.next/server/app/api/diagrams/[name]/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/figures/[name]/route.js +1 -0
- package/dashboard/.next/server/app/api/figures/[name]/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/focus/route.js +1 -0
- package/dashboard/.next/server/app/api/focus/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/github-status/route.js +1 -1
- package/dashboard/.next/server/app/api/invariants/[id]/route.js +1 -0
- package/dashboard/.next/server/app/api/invariants/[id]/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/issues/[id]/revert-auto/route.js +1 -0
- package/dashboard/.next/server/app/api/issues/[id]/revert-auto/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/nav/route.js +1 -0
- package/dashboard/.next/server/app/api/nav/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/notes/done/route.js +1 -1
- package/dashboard/.next/server/app/api/notes/done/route.js.nft.json +1 -1
- package/dashboard/.next/server/app/api/notes/lead/route.js +1 -1
- package/dashboard/.next/server/app/api/notes/lead/route.js.nft.json +1 -1
- package/dashboard/.next/server/app/api/notes/question/route.js +1 -1
- package/dashboard/.next/server/app/api/notes/question/route.js.nft.json +1 -1
- package/dashboard/.next/server/app/api/notes/record/route.js +3 -3
- package/dashboard/.next/server/app/api/notes/route.js +2 -2
- package/dashboard/.next/server/app/api/palette/route.js +1 -0
- package/dashboard/.next/server/app/api/palette/route.js.nft.json +1 -0
- package/dashboard/.next/server/app/api/progress/route.js +1 -1
- package/dashboard/.next/server/app/api/progress/route.js.nft.json +1 -1
- package/dashboard/.next/server/app/api/watch/route.js +2 -2
- package/dashboard/.next/server/app/api/watch/route.js.nft.json +1 -1
- package/dashboard/.next/server/app/api/xref/route.js +1 -0
- package/dashboard/.next/server/app/changes/page.js +1 -20
- package/dashboard/.next/server/app/changes/page.js.nft.json +1 -1
- package/dashboard/.next/server/app/changes/page_client-reference-manifest.js +1 -1
- package/dashboard/.next/server/app/excalidraw-assets/[...path]/route.js +1 -0
- package/dashboard/.next/server/app/issues/page.js +5 -28
- package/dashboard/.next/server/app/issues/page.js.nft.json +1 -1
- package/dashboard/.next/server/app/issues/page_client-reference-manifest.js +1 -1
- package/dashboard/.next/server/app/model/page.js +1 -0
- package/dashboard/.next/server/app/{calls → model}/page.js.nft.json +1 -1
- package/dashboard/.next/server/app/model/page_client-reference-manifest.js +1 -0
- package/dashboard/.next/server/app/page.js +1 -20
- package/dashboard/.next/server/app/page.js.nft.json +1 -1
- package/dashboard/.next/server/app/page_client-reference-manifest.js +1 -1
- package/dashboard/.next/server/app/report/page.js +1 -1
- package/dashboard/.next/server/app/report/page.js.nft.json +1 -1
- package/dashboard/.next/server/app/report/page_client-reference-manifest.js +1 -1
- package/dashboard/.next/server/app/review/page.js +1 -0
- package/dashboard/.next/server/app/{access → review}/page.js.nft.json +1 -1
- package/dashboard/.next/server/app/review/page_client-reference-manifest.js +1 -0
- package/dashboard/.next/server/app-paths-manifest.json +19 -16
- package/dashboard/.next/server/chunks/310.js +4 -0
- package/dashboard/.next/server/chunks/370.js +1 -0
- package/dashboard/.next/server/chunks/42.js +1 -1
- package/dashboard/.next/server/chunks/624.js +14 -0
- package/dashboard/.next/server/chunks/645.js +1 -1
- package/dashboard/.next/server/chunks/649.js +1 -1
- package/dashboard/.next/server/chunks/653.js +1 -0
- package/dashboard/.next/server/functions-config-manifest.json +1 -1
- package/dashboard/.next/server/middleware-build-manifest.js +1 -1
- package/dashboard/.next/server/middleware-react-loadable-manifest.js +1 -1
- package/dashboard/.next/server/pages/500.html +1 -1
- package/dashboard/.next/server/pages/_error.js +1 -1
- package/dashboard/.next/server/server-reference-manifest.js +1 -1
- package/dashboard/.next/server/server-reference-manifest.json +1 -1
- package/dashboard/.next/static/chunks/0bbe10ee.8e7ffa06d2170dfe.js +84 -0
- package/dashboard/.next/static/chunks/1026.0ef689a305302427.js +1 -0
- package/dashboard/.next/static/chunks/1164.34eb76767ebea46f.js +8 -0
- package/dashboard/.next/static/chunks/119.a9a79633900a235f.js +5 -0
- package/dashboard/.next/static/chunks/1291.6c486c9b1d4b1b3a.js +1 -0
- package/dashboard/.next/static/chunks/139.4691848fc5a46253.js +10 -0
- package/dashboard/.next/static/chunks/145.1bf74fecdb4022e3.js +11 -0
- package/dashboard/.next/static/chunks/1517.8e7075f78e22b3a0.js +8 -0
- package/dashboard/.next/static/chunks/165.6f174060a0ce2db4.js +6 -0
- package/dashboard/.next/static/chunks/1741.5c370b7702d2eb40.js +8 -0
- package/dashboard/.next/static/chunks/1e36816c.5748c83adc8a6bd6.js +108 -0
- package/dashboard/.next/static/chunks/2061.eab75b3c1dfa068a.js +1 -0
- package/dashboard/.next/static/chunks/2148.3ce718f62d1b2f7c.js +10 -0
- package/dashboard/.next/static/chunks/217-1d5b680ffd10e3f9.js +1 -0
- package/dashboard/.next/static/chunks/2208.fb884379aa3ae968.js +1 -0
- package/dashboard/.next/static/chunks/2276.112c7855333fca5f.js +6 -0
- package/dashboard/.next/static/chunks/2374-8c6f137938f8518a.js +1 -0
- package/dashboard/.next/static/chunks/2445.18a86507d2996b95.js +1 -0
- package/dashboard/.next/static/chunks/2712.15dd8577973baf22.js +10 -0
- package/dashboard/.next/static/chunks/2759.533dec5317e0a1d1.js +1 -0
- package/dashboard/.next/static/chunks/2812.62b213bef580b69a.js +1 -0
- package/dashboard/.next/static/chunks/2895.bb57cacb7aaf42a1.js +9 -0
- package/dashboard/.next/static/chunks/2972.e5a9251b538dcf19.js +9 -0
- package/dashboard/.next/static/chunks/3206.8d9a10db2b04b93f.js +1 -0
- package/dashboard/.next/static/chunks/3485.36766504793b7237.js +9 -0
- package/dashboard/.next/static/chunks/3725.de9376dc994735d4.js +9 -0
- package/dashboard/.next/static/chunks/3774.1df377928e8387f7.js +9 -0
- package/dashboard/.next/static/chunks/3963.39d72b3875dfe2e9.js +13 -0
- package/dashboard/.next/static/chunks/4013.73884b23bfaebdde.js +11 -0
- package/dashboard/.next/static/chunks/4117.278aff1fa23fd36e.js +6 -0
- package/dashboard/.next/static/chunks/4210.cc8594110017c579.js +11 -0
- package/dashboard/.next/static/chunks/4282.28485875540886cc.js +7 -0
- package/dashboard/.next/static/chunks/4318.a2f469a88d88f6d0.js +8 -0
- package/dashboard/.next/static/chunks/4363.8999a6e727c48003.js +1 -0
- package/dashboard/.next/static/chunks/4641.e03d118fffebd580.js +5 -0
- package/dashboard/.next/static/chunks/483.a910dab7734a1074.js +8 -0
- package/dashboard/.next/static/chunks/4926.76693f542e9cc062.js +6 -0
- package/dashboard/.next/static/chunks/4938.03f6d04dabf38745.js +10 -0
- package/dashboard/.next/static/chunks/5112.0757c2b0c285e62e.js +1 -0
- package/dashboard/.next/static/chunks/5199.c83ea7efb0eec705.js +11 -0
- package/dashboard/.next/static/chunks/530.849957a8907eb288.js +1 -0
- package/dashboard/.next/static/chunks/5424.4e8ca0711a32bccf.js +7 -0
- package/dashboard/.next/static/chunks/55.a593a78be9714679.js +1 -0
- package/dashboard/.next/static/chunks/5535.6cd0bd8d368d8902.js +4 -0
- package/dashboard/.next/static/chunks/5626.7d4e93d7acbeffc9.js +10 -0
- package/dashboard/.next/static/chunks/5775.a0d7c1b1e89b9a93.js +9 -0
- package/dashboard/.next/static/chunks/6118.266956b3333b1d7a.js +9 -0
- package/dashboard/.next/static/chunks/6121.a2e6d93720b1205e.js +77 -0
- package/dashboard/.next/static/chunks/6853.d3ad43614e8ca0ab.js +1 -0
- package/dashboard/.next/static/chunks/6951.02a3a158d02158c9.js +5 -0
- package/dashboard/.next/static/chunks/6970.013f24568c87d918.js +11 -0
- package/dashboard/.next/static/chunks/7013.39d41e82b37be63b.js +9 -0
- package/dashboard/.next/static/chunks/7107.1c5412197912b8ed.js +8 -0
- package/dashboard/.next/static/chunks/7508.dd60e2d06d149f5f.js +9 -0
- package/dashboard/.next/static/chunks/7524.0fde4c61553d1491.js +3 -0
- package/dashboard/.next/static/chunks/7834-47f318a04a05688f.js +1 -0
- package/dashboard/.next/static/chunks/8317.d0b3eddef4cae0d5.js +1 -0
- package/dashboard/.next/static/chunks/838.2b2aa006519ba44c.js +10 -0
- package/dashboard/.next/static/chunks/8398.924fd8f4c83417c0.js +7 -0
- package/dashboard/.next/static/chunks/8428b36f.8ac4e67061c01307.js +34 -0
- package/dashboard/.next/static/chunks/8514.85ccbbea8ab21d04.js +5 -0
- package/dashboard/.next/static/chunks/8538.5f7ebe76c4b63162.js +1 -0
- package/dashboard/.next/static/chunks/8687.9406baa8b5601fd0.js +1 -0
- package/dashboard/.next/static/chunks/8721.47346e2cb6412376.js +10 -0
- package/dashboard/.next/static/chunks/8770.4f544bd1a6f03a62.js +8 -0
- package/dashboard/.next/static/chunks/8812.3d96fd54dba566f8.js +9 -0
- package/dashboard/.next/static/chunks/8962.d22aa67a97970dd8.js +1 -0
- package/dashboard/.next/static/chunks/8986.b327224b83f4399a.js +5 -0
- package/dashboard/.next/static/chunks/9271.5f66c19a8ee1ff36.js +10 -0
- package/dashboard/.next/static/chunks/9282.f8d01442bab4c0da.js +2 -0
- package/dashboard/.next/static/chunks/9366.0ec24a0791b9b00f.js +1 -0
- package/dashboard/.next/static/chunks/9707.5cd7d2ee933a4af5.js +6 -0
- package/dashboard/.next/static/chunks/9716.15fffc0b0038601d.js +4 -0
- package/dashboard/.next/static/chunks/9791.e3b3f5a367f63c8a.js +1 -0
- package/dashboard/.next/static/chunks/9820.8c1efad5260e8137.js +1 -0
- package/dashboard/.next/static/chunks/985.50150e9eaa4bde33.js +39 -0
- package/dashboard/.next/static/chunks/997.56901b86e1b8a87b.js +8 -0
- package/dashboard/.next/static/chunks/app/changes/page-f8a860034221cad4.js +1 -0
- package/dashboard/.next/static/chunks/app/issues/page-da4da93188c414a6.js +1 -0
- package/dashboard/.next/static/chunks/app/layout-27a9da4610423c1e.js +1 -0
- package/dashboard/.next/static/chunks/app/model/page-9680e22fdd6ddb81.js +1 -0
- package/dashboard/.next/static/chunks/app/page-0e67750d99fb2836.js +1 -0
- package/dashboard/.next/static/chunks/app/report/page-b56b1db9b9dcf2b6.js +1 -0
- package/dashboard/.next/static/chunks/app/review/page-3ef69f0e0badd333.js +1 -0
- package/dashboard/.next/static/chunks/c75e29e3.d91220f782934d80.js +1 -0
- package/dashboard/.next/static/chunks/{main-cc3a889b25e9aa68.js → main-9c95a7ffedc7afb4.js} +1 -1
- package/dashboard/.next/static/chunks/webpack-6da70e4f9fcf1799.js +1 -0
- package/dashboard/.next/static/css/ceafd91ca8dd753d.css +3 -0
- package/dashboard/.next/static/css/e4aad1f9c715b79a.css +1 -0
- package/dashboard/.next/static/media/Assistant-Bold.c8f39f24.woff2 +0 -0
- package/dashboard/.next/static/media/Assistant-Medium.1e75d8e6.woff2 +0 -0
- package/dashboard/.next/static/media/Assistant-Regular.7acbabb8.woff2 +0 -0
- package/dashboard/.next/static/media/Assistant-SemiBold.167acbf8.woff2 +0 -0
- package/dashboard/app/api/code/route.ts +26 -20
- package/dashboard/app/api/comments/route.ts +158 -0
- package/dashboard/app/api/diagrams/[name]/export/route.ts +26 -0
- package/dashboard/app/api/diagrams/[name]/resolve/route.ts +25 -0
- package/dashboard/app/api/diagrams/[name]/route.ts +37 -0
- package/dashboard/app/api/figures/[name]/route.ts +15 -0
- package/dashboard/app/api/focus/route.ts +35 -0
- package/dashboard/app/api/invariants/[id]/route.ts +35 -0
- package/dashboard/app/api/issues/[id]/revert-auto/route.ts +18 -0
- package/dashboard/app/api/nav/route.ts +120 -0
- package/dashboard/app/api/palette/route.ts +68 -0
- package/dashboard/app/api/progress/route.ts +54 -23
- package/dashboard/app/api/xref/route.ts +30 -0
- package/dashboard/app/changes/ChangesClient.tsx +730 -356
- package/dashboard/app/changes/page.tsx +27 -19
- package/dashboard/app/excalidraw-assets/[...path]/route.ts +56 -0
- package/dashboard/app/globals.css +231 -77
- package/dashboard/app/issues/BoardClient.tsx +817 -0
- package/dashboard/app/issues/page.tsx +27 -272
- package/dashboard/app/layout.tsx +32 -17
- package/dashboard/app/model/ModelClient.tsx +1303 -0
- package/dashboard/app/model/page.tsx +98 -0
- package/dashboard/app/page.tsx +191 -277
- package/dashboard/app/report/ReportClient.tsx +147 -74
- package/dashboard/app/report/page.tsx +25 -14
- package/dashboard/app/review/ReviewClient.tsx +1180 -0
- package/dashboard/app/review/page.tsx +93 -0
- package/dashboard/components/AutoRefresh.tsx +22 -19
- package/dashboard/components/CodeComments.tsx +303 -0
- package/dashboard/components/CodeNav.tsx +523 -0
- package/dashboard/components/CodeReference.tsx +92 -99
- package/dashboard/components/CodeViewer.tsx +526 -0
- package/dashboard/components/CommandPalette.tsx +141 -66
- package/dashboard/components/DiagramCanvas.tsx +275 -0
- package/dashboard/components/DianeNote.tsx +244 -0
- package/dashboard/components/LiveStatus.tsx +30 -68
- package/dashboard/components/MarkdownRenderer.tsx +34 -32
- package/dashboard/components/RecordButton.tsx +132 -0
- package/dashboard/components/ui/Button.tsx +39 -0
- package/dashboard/components/ui/Chip.tsx +37 -0
- package/dashboard/components/ui/EmptyState.tsx +31 -0
- package/dashboard/components/ui/Icons.tsx +126 -0
- package/dashboard/components/ui/Inspector.tsx +122 -0
- package/dashboard/components/ui/Kbd.tsx +15 -0
- package/dashboard/components/ui/ListRow.tsx +92 -0
- package/dashboard/components/ui/LocalTime.tsx +14 -0
- package/dashboard/components/ui/ProgressRing.tsx +54 -0
- package/dashboard/components/ui/ResizeHandle.tsx +93 -0
- package/dashboard/components/ui/RiskMeter.tsx +27 -0
- package/dashboard/components/ui/SearchField.tsx +55 -0
- package/dashboard/components/ui/SegmentedControl.tsx +71 -0
- package/dashboard/components/ui/SeverityDot.tsx +57 -0
- package/dashboard/components/ui/Sidebar.tsx +236 -0
- package/dashboard/components/ui/SplitView.tsx +122 -0
- package/dashboard/components/ui/StateGlyph.tsx +66 -0
- package/dashboard/components/ui/Toast.tsx +91 -0
- package/dashboard/lib/api.ts +17 -0
- package/dashboard/lib/cn.ts +4 -0
- package/dashboard/lib/data.ts +2 -21
- package/dashboard/lib/finding-markdown.ts +1 -1
- package/dashboard/lib/focus.ts +42 -0
- package/dashboard/lib/hotkeys.ts +41 -0
- package/dashboard/lib/inline-markdown.test.ts +11 -0
- package/dashboard/lib/live.ts +32 -0
- package/dashboard/lib/pane-width.ts +36 -0
- package/dashboard/lib/server/board.ts +229 -0
- package/dashboard/lib/server/diagrams.ts +191 -0
- package/dashboard/lib/server/safe-path.ts +28 -0
- package/dashboard/lib/server/workspace.ts +113 -0
- package/dashboard/lib/server/xref.ts +42 -0
- package/dashboard/lib/solidity.test.ts +37 -0
- package/dashboard/lib/solidity.ts +191 -0
- package/dashboard/lib/source.ts +28 -0
- package/dashboard/lib/types.ts +164 -0
- package/dashboard/lib/url.ts +18 -0
- package/dashboard/lib/watcher.ts +31 -22
- package/dashboard/tailwind.config.ts +6 -3
- package/dist/analysis/code-model.d.ts.map +1 -1
- package/dist/analysis/code-model.js +4 -1
- package/dist/analysis/code-model.js.map +1 -1
- package/dist/analysis/diff.d.ts +12 -1
- package/dist/analysis/diff.d.ts.map +1 -1
- package/dist/analysis/diff.js +143 -0
- package/dist/analysis/diff.js.map +1 -1
- package/dist/commands/analyze.d.ts.map +1 -1
- package/dist/commands/analyze.js +17 -48
- package/dist/commands/analyze.js.map +1 -1
- package/dist/commands/claude.d.ts.map +1 -1
- package/dist/commands/claude.js +5 -0
- package/dist/commands/claude.js.map +1 -1
- package/dist/commands/dashboard.d.ts.map +1 -1
- package/dist/commands/dashboard.js +10 -2
- package/dist/commands/dashboard.js.map +1 -1
- package/dist/commands/diagram.d.ts +3 -0
- package/dist/commands/diagram.d.ts.map +1 -0
- package/dist/commands/diagram.js +71 -0
- package/dist/commands/diagram.js.map +1 -0
- package/dist/commands/diff.d.ts +4 -5
- package/dist/commands/diff.d.ts.map +1 -1
- package/dist/commands/diff.js +56 -17
- package/dist/commands/diff.js.map +1 -1
- package/dist/commands/doctor.d.ts.map +1 -1
- package/dist/commands/doctor.js +5 -18
- package/dist/commands/doctor.js.map +1 -1
- package/dist/commands/facts.d.ts +23 -0
- package/dist/commands/facts.d.ts.map +1 -0
- package/dist/commands/facts.js +121 -0
- package/dist/commands/facts.js.map +1 -0
- package/dist/commands/fix-review.d.ts +9 -0
- package/dist/commands/fix-review.d.ts.map +1 -0
- package/dist/commands/fix-review.js +367 -0
- package/dist/commands/fix-review.js.map +1 -0
- package/dist/commands/init.d.ts.map +1 -1
- package/dist/commands/init.js +51 -47
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/issue.d.ts.map +1 -1
- package/dist/commands/issue.js +151 -2
- package/dist/commands/issue.js.map +1 -1
- package/dist/commands/mcp.d.ts +3 -0
- package/dist/commands/mcp.d.ts.map +1 -0
- package/dist/commands/mcp.js +11 -0
- package/dist/commands/mcp.js.map +1 -0
- package/dist/commands/model.d.ts +4 -0
- package/dist/commands/model.d.ts.map +1 -0
- package/dist/commands/model.js +275 -0
- package/dist/commands/model.js.map +1 -0
- package/dist/commands/note.d.ts.map +1 -1
- package/dist/commands/note.js +31 -1
- package/dist/commands/note.js.map +1 -1
- package/dist/commands/review.d.ts +4 -0
- package/dist/commands/review.d.ts.map +1 -0
- package/dist/commands/review.js +164 -0
- package/dist/commands/review.js.map +1 -0
- package/dist/core/comments.d.ts +59 -0
- package/dist/core/comments.d.ts.map +1 -0
- package/dist/core/comments.js +263 -0
- package/dist/core/comments.js.map +1 -0
- package/dist/core/config.d.ts.map +1 -1
- package/dist/core/config.js +0 -1
- package/dist/core/config.js.map +1 -1
- package/dist/core/dedup.d.ts +56 -0
- package/dist/core/dedup.d.ts.map +1 -0
- package/dist/core/dedup.js +208 -0
- package/dist/core/dedup.js.map +1 -0
- package/dist/core/errors.d.ts +1 -1
- package/dist/core/errors.d.ts.map +1 -1
- package/dist/core/errors.js +0 -15
- package/dist/core/errors.js.map +1 -1
- package/dist/core/external-tools.d.ts +0 -14
- package/dist/core/external-tools.d.ts.map +1 -1
- package/dist/core/external-tools.js +2 -52
- package/dist/core/external-tools.js.map +1 -1
- package/dist/core/fix-review.d.ts +54 -0
- package/dist/core/fix-review.d.ts.map +1 -0
- package/dist/core/fix-review.js +98 -0
- package/dist/core/fix-review.js.map +1 -0
- package/dist/core/fuzz-sync.d.ts +93 -0
- package/dist/core/fuzz-sync.d.ts.map +1 -0
- package/dist/core/fuzz-sync.js +516 -0
- package/dist/core/fuzz-sync.js.map +1 -0
- package/dist/core/git.d.ts +7 -0
- package/dist/core/git.d.ts.map +1 -1
- package/dist/core/git.js +42 -0
- package/dist/core/git.js.map +1 -1
- package/dist/core/issues.d.ts +32 -1
- package/dist/core/issues.d.ts.map +1 -1
- package/dist/core/issues.js +135 -3
- package/dist/core/issues.js.map +1 -1
- package/dist/core/mcp-config.d.ts +12 -0
- package/dist/core/mcp-config.d.ts.map +1 -0
- package/dist/core/mcp-config.js +29 -0
- package/dist/core/mcp-config.js.map +1 -0
- package/dist/core/model.d.ts +38 -0
- package/dist/core/model.d.ts.map +1 -0
- package/dist/core/model.js +160 -0
- package/dist/core/model.js.map +1 -0
- package/dist/core/notes.d.ts +2 -0
- package/dist/core/notes.d.ts.map +1 -1
- package/dist/core/notes.js +13 -3
- package/dist/core/notes.js.map +1 -1
- package/dist/core/review.d.ts +47 -0
- package/dist/core/review.d.ts.map +1 -1
- package/dist/core/review.js +177 -1
- package/dist/core/review.js.map +1 -1
- package/dist/core/rules.d.ts +12 -0
- package/dist/core/rules.d.ts.map +1 -0
- package/dist/core/rules.js +66 -0
- package/dist/core/rules.js.map +1 -0
- package/dist/core/schema.d.ts +4817 -2245
- package/dist/core/schema.d.ts.map +1 -1
- package/dist/core/schema.js +452 -113
- package/dist/core/schema.js.map +1 -1
- package/dist/core/scope.d.ts +8 -0
- package/dist/core/scope.d.ts.map +1 -0
- package/dist/core/scope.js +18 -0
- package/dist/core/scope.js.map +1 -0
- package/dist/diagrams/build.d.ts +18 -0
- package/dist/diagrams/build.d.ts.map +1 -0
- package/dist/diagrams/build.js +135 -0
- package/dist/diagrams/build.js.map +1 -0
- package/dist/diagrams/excalidraw.d.ts +27 -0
- package/dist/diagrams/excalidraw.d.ts.map +1 -0
- package/dist/diagrams/excalidraw.js +219 -0
- package/dist/diagrams/excalidraw.js.map +1 -0
- package/dist/diagrams/layout.d.ts +48 -0
- package/dist/diagrams/layout.d.ts.map +1 -0
- package/dist/diagrams/layout.js +686 -0
- package/dist/diagrams/layout.js.map +1 -0
- package/dist/facts/build.d.ts +23 -0
- package/dist/facts/build.d.ts.map +1 -0
- package/dist/facts/build.js +112 -0
- package/dist/facts/build.js.map +1 -0
- package/dist/facts/extract.d.ts +53 -0
- package/dist/facts/extract.d.ts.map +1 -0
- package/dist/facts/extract.js +635 -0
- package/dist/facts/extract.js.map +1 -0
- package/dist/facts/fallback.d.ts +7 -0
- package/dist/facts/fallback.d.ts.map +1 -0
- package/dist/facts/fallback.js +156 -0
- package/dist/facts/fallback.js.map +1 -0
- package/dist/facts/implementations.d.ts +29 -0
- package/dist/facts/implementations.d.ts.map +1 -0
- package/dist/facts/implementations.js +43 -0
- package/dist/facts/implementations.js.map +1 -0
- package/dist/facts/query.d.ts +35 -0
- package/dist/facts/query.d.ts.map +1 -0
- package/dist/facts/query.js +157 -0
- package/dist/facts/query.js.map +1 -0
- package/dist/facts/xref.d.ts +53 -0
- package/dist/facts/xref.d.ts.map +1 -0
- package/dist/facts/xref.js +282 -0
- package/dist/facts/xref.js.map +1 -0
- package/dist/index.js +14 -16
- package/dist/index.js.map +1 -1
- package/dist/mcp/server.d.ts +3 -0
- package/dist/mcp/server.d.ts.map +1 -0
- package/dist/mcp/server.js +400 -0
- package/dist/mcp/server.js.map +1 -0
- package/dist/skills/ai-audit/SKILL.md +16 -6
- package/dist/skills/ai-audit/UPSTREAM.md +9 -4
- package/dist/skills/ai-audit/references/hex-board.md +34 -46
- package/dist/skills/diane.md +26 -12
- package/dist/skills/fix-review.md +58 -0
- package/dist/skills/fuzz/LICENSE +21 -0
- package/dist/skills/fuzz/SKILL.md +655 -0
- package/dist/skills/fuzz/UPSTREAM.md +119 -0
- package/dist/skills/fuzz/agents/implementers/global-property-implementer.md +81 -0
- package/dist/skills/fuzz/agents/implementers/specific-property-implementer.md +121 -0
- package/dist/skills/fuzz/agents/invariant-discovery/adversarial-profit-maximizer.md +123 -0
- package/dist/skills/fuzz/agents/invariant-discovery/conservation-auditor.md +92 -0
- package/dist/skills/fuzz/agents/invariant-discovery/protocol-type-specialist.md +173 -0
- package/dist/skills/fuzz/agents/invariant-discovery/roundtrip-rounding-analyst.md +164 -0
- package/dist/skills/fuzz/agents/invariant-discovery/state-transition-mapper.md +92 -0
- package/dist/skills/fuzz/agents/invariant-discovery/synthesizer.md +261 -0
- package/dist/skills/fuzz/agents/protocol-analyzer.md +80 -0
- package/dist/skills/fuzz/agents/report-writer.md +135 -0
- package/dist/skills/fuzz/references/handler-patterns.md +222 -0
- package/dist/skills/fuzz/references/hex-invariants.md +102 -0
- package/dist/skills/fuzz/references/property-generation.md +149 -0
- package/dist/skills/fuzz/references/selection-policy.md +49 -0
- package/dist/skills/fuzz/references/setup-playbook.md +92 -0
- package/dist/skills/fuzz/references/template-map.md +121 -0
- package/dist/skills/fuzz/scripts/ensure_foundry.sh +125 -0
- package/dist/skills/fuzz/scripts/estimate_cost.js +157 -0
- package/dist/skills/fuzz/scripts/extract_abis.js +303 -0
- package/dist/skills/fuzz/scripts/fizz_sync.js +692 -0
- package/dist/skills/fuzz/scripts/generate_handlers.js +370 -0
- package/dist/skills/fuzz/scripts/generate_suite.js +254 -0
- package/dist/skills/fuzz/scripts/lib/log-viewer.js +332 -0
- package/dist/skills/fuzz/scripts/run_echidna.js +192 -0
- package/dist/skills/fuzz/scripts/run_medusa.js +329 -0
- package/dist/skills/fuzz/scripts/select_functions.js +637 -0
- package/dist/skills/fuzz/scripts/setup_fuzz_profile.sh +142 -0
- package/dist/skills/fuzz/templates/Actor.sol +63 -0
- package/dist/skills/fuzz/templates/Base.sol +121 -0
- package/dist/skills/fuzz/templates/FoundryTester.sol +29 -0
- package/dist/skills/fuzz/templates/FuzzTester.sol +11 -0
- package/dist/skills/fuzz/templates/Properties.sol +17 -0
- package/dist/skills/fuzz/templates/README.md +56 -0
- package/dist/skills/fuzz/templates/Snapshots.sol +26 -0
- package/dist/skills/fuzz/templates/echidna.yaml +18 -0
- package/dist/skills/fuzz/templates/handlers/Handlers.sol +13 -0
- package/dist/skills/fuzz/templates/medusa.json +93 -0
- package/dist/skills/fuzz/templates/utils/Clamp.sol +223 -0
- package/dist/skills/fuzz/templates/utils/DecimalPrinter.sol +63 -0
- package/dist/skills/fuzz/templates/utils/Deployer.sol +17 -0
- package/dist/skills/fuzz/templates/utils/EnumerableSet.sol +206 -0
- package/dist/skills/fuzz/templates/utils/Hevm.sol +62 -0
- package/dist/skills/fuzz/templates/utils/Logger.sol +619 -0
- package/dist/skills/fuzz/templates/utils/Math.sol +52 -0
- package/dist/skills/fuzz/templates/utils/MockERC20.sol +279 -0
- package/dist/skills/fuzz/templates/utils/PropertiesAsserts.sol +238 -0
- package/dist/skills/fuzz/templates/utils/StringUtils.sol +85 -0
- package/dist/skills/fuzz-convert/SKILL.md +249 -0
- package/dist/skills/fuzz-sync/SKILL.md +342 -0
- package/dist/skills/generate-poc.md +8 -26
- package/dist/skills/generate-report.md +17 -5
- package/dist/skills/ingest-aa-report.md +11 -30
- package/dist/skills/init-audit/SKILL.md +155 -0
- package/dist/skills/init-audit/references/agents/conformance-checker.md +36 -0
- package/dist/skills/init-audit/references/agents/contract-reader.md +59 -0
- package/dist/skills/init-audit/references/agents/diagram-composer.md +48 -0
- package/dist/skills/init-audit/references/agents/docs-extractor.md +26 -0
- package/dist/skills/init-audit/references/agents/prior-audit.md +32 -0
- package/dist/skills/init-audit/references/agents/regression-checker.md +28 -0
- package/dist/skills/init-audit/references/agents/skeptic.md +31 -0
- package/dist/skills/init-audit/references/agents/standards-checker.md +39 -0
- package/dist/skills/init-audit/references/agents/synthesizer.md +50 -0
- package/dist/skills/prevalidate.md +62 -0
- package/dist/skills/sync-issues.md +11 -25
- package/dist/skills/validate-all-findings.md +2 -2
- package/dist/skills/validate-finding.md +25 -24
- package/dist/skills/write-finding.md +6 -5
- package/dist/types/index.d.ts +16 -12
- package/dist/types/index.d.ts.map +1 -1
- package/package.json +5 -4
- package/dashboard/.next/server/app/access/page.js +0 -1
- package/dashboard/.next/server/app/access/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/app/api/flows/route.js +0 -1
- package/dashboard/.next/server/app/api/mermaid/route.js +0 -1
- package/dashboard/.next/server/app/calls/page.js +0 -1
- package/dashboard/.next/server/app/calls/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/app/conformance/page.js +0 -1
- package/dashboard/.next/server/app/conformance/page.js.nft.json +0 -1
- package/dashboard/.next/server/app/conformance/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/app/diagram/page.js +0 -1
- package/dashboard/.next/server/app/diagram/page.js.nft.json +0 -1
- package/dashboard/.next/server/app/diagram/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/app/flows/page.js +0 -1
- package/dashboard/.next/server/app/flows/page.js.nft.json +0 -1
- package/dashboard/.next/server/app/flows/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/app/functions/page.js +0 -1
- package/dashboard/.next/server/app/functions/page.js.nft.json +0 -1
- package/dashboard/.next/server/app/functions/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/app/notes/page.js +0 -22
- package/dashboard/.next/server/app/notes/page.js.nft.json +0 -1
- package/dashboard/.next/server/app/notes/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/app/progress/page.js +0 -1
- package/dashboard/.next/server/app/progress/page.js.nft.json +0 -1
- package/dashboard/.next/server/app/progress/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/app/stats/page.js +0 -1
- package/dashboard/.next/server/app/stats/page.js.nft.json +0 -1
- package/dashboard/.next/server/app/stats/page_client-reference-manifest.js +0 -1
- package/dashboard/.next/server/chunks/530.js +0 -1
- package/dashboard/.next/server/chunks/622.js +0 -3
- package/dashboard/.next/server/chunks/665.js +0 -13
- package/dashboard/.next/server/chunks/939.js +0 -1
- package/dashboard/.next/static/chunks/3017.4a5312e3c20a173f.js +0 -1
- package/dashboard/.next/static/chunks/7397-37adf76cad543297.js +0 -1
- package/dashboard/.next/static/chunks/7973.e34032723285a616.js +0 -79
- package/dashboard/.next/static/chunks/8452-6d77fa353402422c.js +0 -13
- package/dashboard/.next/static/chunks/8928-fc049decdfbdaa6d.js +0 -1
- package/dashboard/.next/static/chunks/app/access/page-f8403cbdfc1c176b.js +0 -1
- package/dashboard/.next/static/chunks/app/calls/page-41f20d01e12382ef.js +0 -1
- package/dashboard/.next/static/chunks/app/changes/page-82bf8b6f48cdc506.js +0 -1
- package/dashboard/.next/static/chunks/app/conformance/page-6bb8e3b372e38098.js +0 -1
- package/dashboard/.next/static/chunks/app/diagram/page-469cd7a6f183efba.js +0 -1
- package/dashboard/.next/static/chunks/app/flows/page-7872dd9141ba0b07.js +0 -1
- package/dashboard/.next/static/chunks/app/functions/page-5847bcb77a8e7edf.js +0 -1
- package/dashboard/.next/static/chunks/app/issues/page-1ffc64fe40439002.js +0 -1
- package/dashboard/.next/static/chunks/app/layout-6c6d2a0fd7c989d3.js +0 -1
- package/dashboard/.next/static/chunks/app/notes/page-8bcaa52304500098.js +0 -1
- package/dashboard/.next/static/chunks/app/page-d63800ddb072b77b.js +0 -1
- package/dashboard/.next/static/chunks/app/progress/page-e26554f655a62eef.js +0 -1
- package/dashboard/.next/static/chunks/app/report/page-18c04fb2f193b020.js +0 -1
- package/dashboard/.next/static/chunks/app/stats/page-67ff59fd69bed651.js +0 -1
- package/dashboard/.next/static/chunks/webpack-4de0e79bdd6a0418.js +0 -1
- package/dashboard/.next/static/css/1112cea2260b3926.css +0 -3
- package/dashboard/app/access/AccessClient.tsx +0 -402
- package/dashboard/app/access/ReadOnlyFunctions.tsx +0 -114
- package/dashboard/app/access/page.tsx +0 -125
- package/dashboard/app/api/flows/route.ts +0 -32
- package/dashboard/app/api/mermaid/route.ts +0 -25
- package/dashboard/app/calls/CallsClient.tsx +0 -170
- package/dashboard/app/calls/page.tsx +0 -57
- package/dashboard/app/conformance/ConformanceTable.tsx +0 -214
- package/dashboard/app/conformance/page.tsx +0 -186
- package/dashboard/app/diagram/page.tsx +0 -65
- package/dashboard/app/flows/page.tsx +0 -102
- package/dashboard/app/functions/FunctionsClient.tsx +0 -167
- package/dashboard/app/functions/page.tsx +0 -178
- package/dashboard/app/issues/IssuesBoardClient.tsx +0 -813
- package/dashboard/app/notes/NotesClient.tsx +0 -706
- package/dashboard/app/notes/page.tsx +0 -47
- package/dashboard/app/progress/ProgressClient.tsx +0 -354
- package/dashboard/app/progress/page.tsx +0 -127
- package/dashboard/app/stats/StatsClient.tsx +0 -452
- package/dashboard/app/stats/page.tsx +0 -50
- package/dashboard/components/ConfidenceBadge.tsx +0 -53
- package/dashboard/components/DashboardLayout.tsx +0 -510
- package/dashboard/components/FilterableTable.tsx +0 -293
- package/dashboard/components/MermaidViewer.tsx +0 -267
- package/dashboard/components/NotYetGenerated.tsx +0 -32
- package/dashboard/components/SeverityBadge.tsx +0 -28
- package/dashboard/components/SignalBars.tsx +0 -27
- package/dashboard/components/SortableTable.tsx +0 -122
- package/dashboard/lib/conformance-tokens.ts +0 -49
- package/dist/skills/init-audit.md +0 -386
- /package/dashboard/.next/server/app/api/{flows → xref}/route.js.nft.json +0 -0
- /package/dashboard/.next/server/app/{api/mermaid → excalidraw-assets/[...path]}/route.js.nft.json +0 -0
- /package/dashboard/.next/static/{z5XBev05xDAkDrxWxAjNu → bGV1ry1vvIbM5b506eVBR}/_buildManifest.js +0 -0
- /package/dashboard/.next/static/{z5XBev05xDAkDrxWxAjNu → bGV1ry1vvIbM5b506eVBR}/_ssgManifest.js +0 -0
- /package/dashboard/.next/static/chunks/{3205-47d09be47325709f.js → 3205-fd963acf2fdfd080.js} +0 -0
- /package/dashboard/.next/static/chunks/{3924-88d849290406ee6f.js → 3924-f1f85ccc7d59d7ab.js} +0 -0
- /package/dashboard/.next/static/chunks/{618f8807-69fc7bb97c2b87c1.js → 618f8807-fbb1466bc29c17c6.js} +0 -0
- /package/dashboard/.next/static/chunks/{7498-d1814d68ba346d13.js → 7498-7cf464d8af69cd0a.js} +0 -0
- /package/dashboard/.next/static/chunks/app/_not-found/{page-c299b935209993df.js → page-5ff5d54b6fd6f17e.js} +0 -0
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/core/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;EAKzB,CAAC;AAEH,eAAO,MAAM,gBAAgB,sCAAoC,CAAC;AAElE,eAAO,MAAM,cAAc,0DAAwD,CAAC;AAEpF,eAAO,MAAM,iBAAiB,gGAQ5B,CAAC;AAIH,eAAO,MAAM,YAAY;;;;;;;;;;;QAWrB,mFAAmF;;QAEnF,gGAAgG
|
|
1
|
+
{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/core/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;EAKzB,CAAC;AAEH,eAAO,MAAM,gBAAgB,sCAAoC,CAAC;AAElE,eAAO,MAAM,cAAc,0DAAwD,CAAC;AAEpF,eAAO,MAAM,iBAAiB,gGAQ5B,CAAC;AAIH,eAAO,MAAM,YAAY;;;;;;;;;;;QAWrB,mFAAmF;;QAEnF,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6ClG,CAAC;AAIH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;EAMpC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBjC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIhC,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBtB,CAAC;AAIH,eAAO,MAAM,qBAAqB;;;;;;;;;EAGhC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAM9B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO3B,CAAC;AAEH,eAAO,MAAM,gBAAgB,8EAM3B,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BxB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEzB,CAAC;AAIH,eAAO,MAAM,oBAAoB,sGAQ/B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB9B,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEzB,CAAC;AAIH,eAAO,MAAM,oBAAoB,iDAA+C,CAAC;AAEjF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAK7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMpC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;EAQhC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;EAGnC,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI3B,CAAC;AAIH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUzB,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBhC,CAAC;AAIH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;IAiBhC,kFAAkF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGlF,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;QAL7B,kFAAkF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWlF,CAAC;AAIH,eAAO,MAAM,mBAAmB,uGAS9B,CAAC;AAEH,eAAO,MAAM,mBAAmB;IAC9B,kEAAkE;;;;;;;;;;;;;IAalE,+CAA+C;;;IAG/C,0FAA0F;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAsBpF,8EAA8E;;;;;;;;;;;;;;;;IAQpF,0FAA0F;;;;IAI1F,gFAAgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGhF,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;IAM9B,0CAA0C;;IAE1C,gFAAgF;;;;;;;;;;;;;;;;;;;;;EAGhF,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS9B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;IAMjC,2DAA2D;;;;;;;;;;;;;;;;EAE3D,CAAC;AAEH,eAAO,MAAM,WAAW;;;IAGtB,2GAA2G;;;;;;;;;;;;IAG3G,yFAAyF;;;;;;;;;QAlCzF,0CAA0C;;QAE1C,gFAAgF;;;;;;;;;;;;;;;;;;;;;;;QA/DhF,kEAAkE;;;;;;;;;;;;;QAalE,+CAA+C;;;QAG/C,0FAA0F;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAsBpF,8EAA8E;;;;;;;;;;;;;;;;QAQpF,0FAA0F;;;;QAI1F,gFAAgF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAmChF,2DAA2D;;;;;;;;;;;;;;;;;IAiB3D,kGAAkG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAElG,CAAC;AAIH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAI5B,CAAC;AAWH,eAAO,MAAM,gBAAgB;;;;;IAM3B,4EAA4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG5E,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS3B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO/B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA2C,CAAC;AAEnF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOhC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAalC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAahC,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAe1B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;IAE9B,uDAAuD;;;;;;;QArFvD,4EAA4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+F5E,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmB1B,wGAAwG;;;;IAIxG,+EAA+E;;;QAI3E,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBxE,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA3B/B,wGAAwG;;;;QAIxG,+EAA+E;;;YAI3E,oEAAoE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBxE,CAAC;AAIH,eAAO,MAAM,yBAAyB,wDAAsD,CAAC;AAE7F,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;EAK/B,CAAC;AAIH,eAAO,MAAM,gBAAgB;;;;IAI3B,4EAA4E;;;;;;;;;;;;;;;;;;EAI5E,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;QANhC,4EAA4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMK,CAAC;AAIpF,eAAO,MAAM,gBAAgB;;;;;;;IAO3B,2EAA2E;;;;;;;;;;;;;;;;;;;;;EAG3E,CAAC;AAsBH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAb/B,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkChG,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IApCjC,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4ChG,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA9CpC,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8DhG,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAhElC,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6EhG,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA/EhC,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoGhG,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAtG5B,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAAhG,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAAhG,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAAhG,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAAhG,gGAAgG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA4GhG,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;IAOlC,kFAAkF;;IAElF,kGAAkG;;;;;;;;;;;;;;;;;;;;;;;EAGlG,CAAC;AAIH,eAAO,MAAM,mBAAmB;;;;;;IAM9B,kFAAkF;;;;QAK9E,0EAA0E;;QAE1E,mEAAmE;;;;;;;;;;;;;;;;;;;;;;;IAcvE,qEAAqE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAErE,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;QAzB1B,kFAAkF;;;;YAK9E,0EAA0E;;YAE1E,mEAAmE;;;;;;;;;;;;;;;;;;;;;;;QAcvE,qEAAqE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IASrE,qFAAqF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBrF,CAAC;AAIH,eAAO,MAAM,oBAAoB,wDAAsD,CAAC;AAExF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;EAMzB,CAAC;AAEH,eAAO,MAAM,oBAAoB,8GAS/B,CAAC;AAEH,eAAO,MAAM,oBAAoB,8DAA4D,CAAC;AAE9F,eAAO,MAAM,gBAAgB;;IAE3B,qFAAqF;;;;;;;;;;;;;;;;;;;;;;;;;;EAQrF,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;EAYpC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;IAE7B,oFAAoF;;;;;;;;EAEpF,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;IAMjC,2EAA2E;;;;QAV3E,oFAAoF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBpF,CAAC;AAEH,eAAO,MAAM,UAAU;;;;IAIrB,wFAAwF;;IAExF,iGAAiG;;IAEjG,0FAA0F;;;;;;;;;;;;;;;;;;;;;;;QApD1F,qFAAqF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoCrF,2EAA2E;;;;YAV3E,oFAAoF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2CpF,CAAC;AAIH,eAAO,MAAM,kBAAkB;;;;IAI7B,8EAA8E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa9E,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;QAf9B,8EAA8E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB9E,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;IAYhC,wDAAwD;;;;;;;;;;;;;;;;EAExD,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;QAJ5B,wDAAwD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOxD,CAAC;AAIH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;EAQ7B,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEzB,CAAC;AAIH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;EASjC,CAAC"}
|
package/dist/core/schema.js
CHANGED
|
@@ -47,7 +47,6 @@ export const ConfigSchema = z.object({
|
|
|
47
47
|
}),
|
|
48
48
|
settings: z.object({
|
|
49
49
|
output_dir: z.string().default('.hex'),
|
|
50
|
-
ai_model: z.string().default('claude-sonnet-4-20250514'),
|
|
51
50
|
finding_template: z.string().default('default'),
|
|
52
51
|
ai: z
|
|
53
52
|
.object({
|
|
@@ -142,118 +141,6 @@ export const StatsSchema = z.object({
|
|
|
142
141
|
test_coverage: TestCoverageSchema.nullable(),
|
|
143
142
|
per_contract: z.array(PerContractStatsSchema),
|
|
144
143
|
});
|
|
145
|
-
// ─── Dependencies Graph ─────────────────────────────────────────────
|
|
146
|
-
export const GraphNodeSchema = z.object({
|
|
147
|
-
inherits: z.array(z.string()),
|
|
148
|
-
imports: z.array(z.string()),
|
|
149
|
-
calls: z.array(z.string()),
|
|
150
|
-
});
|
|
151
|
-
export const ClusterSchema = z.object({
|
|
152
|
-
id: z.string(),
|
|
153
|
-
contracts: z.array(z.string()),
|
|
154
|
-
total_nsloc: z.number().int(),
|
|
155
|
-
});
|
|
156
|
-
export const DepsSchema = z.object({
|
|
157
|
-
graph: z.record(z.string(), GraphNodeSchema),
|
|
158
|
-
clusters: z.array(ClusterSchema),
|
|
159
|
-
inheritance_trees: z.array(z.array(z.string())),
|
|
160
|
-
topological_order: z.array(z.string()),
|
|
161
|
-
});
|
|
162
|
-
// ─── Access Control ─────────────────────────────────────────────────
|
|
163
|
-
export const AccessFunctionSchema = z.object({
|
|
164
|
-
contract: z.string(),
|
|
165
|
-
function: z.string(),
|
|
166
|
-
visibility: z.enum(['external', 'public', 'internal', 'private']),
|
|
167
|
-
state_mutability: z.enum(['pure', 'view', 'nonpayable', 'payable']).nullable(),
|
|
168
|
-
modifiers: z.array(z.string()),
|
|
169
|
-
evidence: EvidenceSchema,
|
|
170
|
-
inherited_from: z.string().optional(),
|
|
171
|
-
inheritance_depth: z.number().int().optional(),
|
|
172
|
-
});
|
|
173
|
-
export const RoleFunctionRefSchema = z.object({
|
|
174
|
-
contract: z.string(),
|
|
175
|
-
function: z.string(),
|
|
176
|
-
});
|
|
177
|
-
export const RoleKindSchema = z.enum(['access_control', 'state_check', 'guard', 'unknown']);
|
|
178
|
-
export const RoleSchema = z.object({
|
|
179
|
-
role: z.string(),
|
|
180
|
-
description: z.string(),
|
|
181
|
-
confidence: ConfidenceSchema,
|
|
182
|
-
derived_from: DerivedFromSchema,
|
|
183
|
-
reasoning: z.string(),
|
|
184
|
-
modifier: z.string().nullable(),
|
|
185
|
-
functions: z.array(RoleFunctionRefSchema),
|
|
186
|
-
warnings: z.array(z.string()),
|
|
187
|
-
kind: RoleKindSchema.default('access_control'),
|
|
188
|
-
is_likely_access_control: z.boolean().default(true),
|
|
189
|
-
});
|
|
190
|
-
export const AccessControlSchema = z.object({
|
|
191
|
-
functions: z.array(AccessFunctionSchema),
|
|
192
|
-
roles: z.array(RoleSchema),
|
|
193
|
-
});
|
|
194
|
-
// ─── State Variables ────────────────────────────────────────────────
|
|
195
|
-
export const ReadWriteInfoSchema = z.object({
|
|
196
|
-
functions: z.array(z.string()),
|
|
197
|
-
confidence: ConfidenceSchema,
|
|
198
|
-
derived_from: DerivedFromSchema,
|
|
199
|
-
warnings: z.array(z.string()).optional(),
|
|
200
|
-
});
|
|
201
|
-
export const StateVariableSchema = z.object({
|
|
202
|
-
contract: z.string(),
|
|
203
|
-
name: z.string(),
|
|
204
|
-
type: z.string(),
|
|
205
|
-
visibility: z.enum(['public', 'internal', 'private']),
|
|
206
|
-
mutability: z.enum(['mutable', 'constant', 'immutable']),
|
|
207
|
-
value: z.string().optional(),
|
|
208
|
-
evidence: EvidenceSchema,
|
|
209
|
-
written_by: ReadWriteInfoSchema,
|
|
210
|
-
read_by: ReadWriteInfoSchema,
|
|
211
|
-
has_setter: z.boolean(),
|
|
212
|
-
is_bounded: z.boolean(),
|
|
213
|
-
bound_description: z.string().nullable().optional(),
|
|
214
|
-
is_unused: z.boolean().optional(),
|
|
215
|
-
storage_slot: z.number().int().nullable().optional(),
|
|
216
|
-
});
|
|
217
|
-
export const StorageCollisionVariableSchema = z.object({
|
|
218
|
-
contract: z.string(),
|
|
219
|
-
name: z.string(),
|
|
220
|
-
type: z.string(),
|
|
221
|
-
});
|
|
222
|
-
export const StorageCollisionSchema = z.object({
|
|
223
|
-
slot: z.number().int(),
|
|
224
|
-
offset: z.number().int().default(0),
|
|
225
|
-
variables: z.array(StorageCollisionVariableSchema),
|
|
226
|
-
severity: SeveritySchema.default('Critical'),
|
|
227
|
-
description: z.string(),
|
|
228
|
-
});
|
|
229
|
-
export const StateVarsSchema = z.object({
|
|
230
|
-
variables: z.array(StateVariableSchema),
|
|
231
|
-
storage_layout_source: z.enum(['compiler-artifact']).nullable(),
|
|
232
|
-
storage_collisions: z.array(StorageCollisionSchema).default([]),
|
|
233
|
-
});
|
|
234
|
-
// ─── External Calls ─────────────────────────────────────────────────
|
|
235
|
-
export const ConfidenceValueSchema = z.object({
|
|
236
|
-
value: z.union([z.boolean(), z.string()]),
|
|
237
|
-
confidence: ConfidenceSchema,
|
|
238
|
-
derived_from: DerivedFromSchema,
|
|
239
|
-
reasoning: z.string().optional(),
|
|
240
|
-
warnings: z.array(z.string()).optional(),
|
|
241
|
-
guard_type: z.string().optional(),
|
|
242
|
-
});
|
|
243
|
-
export const ExternalCallSchema = z.object({
|
|
244
|
-
contract: z.string(),
|
|
245
|
-
function: z.string(),
|
|
246
|
-
evidence: EvidenceSchema,
|
|
247
|
-
target: z.string(),
|
|
248
|
-
method: z.string(),
|
|
249
|
-
return_checked: ConfidenceValueSchema,
|
|
250
|
-
inside_reentrancy_guard: ConfidenceValueSchema,
|
|
251
|
-
call_type: z.string(),
|
|
252
|
-
trust_level: ConfidenceValueSchema,
|
|
253
|
-
});
|
|
254
|
-
export const ExternalCallsSchema = z.object({
|
|
255
|
-
calls: z.array(ExternalCallSchema),
|
|
256
|
-
});
|
|
257
144
|
// ─── Findings ───────────────────────────────────────────────────────
|
|
258
145
|
export const FindingLocationSchema = z.object({
|
|
259
146
|
file: z.string(),
|
|
@@ -306,6 +193,7 @@ export const FindingSchema = z.object({
|
|
|
306
193
|
// Maps a uniform H-NNN id back to its origin record (conformance item id,
|
|
307
194
|
// auditagent finding id, or GitHub issue number) for materialization/dedup.
|
|
308
195
|
source_ref: z.string().nullable().optional(),
|
|
196
|
+
validation: z.record(z.string(), z.unknown()).optional(),
|
|
309
197
|
});
|
|
310
198
|
export const FindingsSchema = z.object({
|
|
311
199
|
findings: z.array(FindingSchema),
|
|
@@ -318,6 +206,7 @@ export const TrackingSourceSchema = z.enum([
|
|
|
318
206
|
'github',
|
|
319
207
|
'ai-audit',
|
|
320
208
|
'prior-audit',
|
|
209
|
+
'invariant',
|
|
321
210
|
]);
|
|
322
211
|
export const TrackingEntrySchema = z.object({
|
|
323
212
|
id: z.string(),
|
|
@@ -432,6 +321,452 @@ export const AiResultFileSchema = z.object({
|
|
|
432
321
|
total_findings: z.number(),
|
|
433
322
|
findings: z.array(AiResultFindingSchema),
|
|
434
323
|
});
|
|
324
|
+
// ─── Facts (exact, from the compiler AST) ───────────────────────────
|
|
325
|
+
export const FactsCallKindSchema = z.enum([
|
|
326
|
+
'internal', // `foo()` / `Base.foo()` resolved to a declaration in the hierarchy or a free function
|
|
327
|
+
'super', // `super.foo()`
|
|
328
|
+
'this', // `this.foo()` (external self-call)
|
|
329
|
+
'library', // `Lib.foo()` or `x.foo()` via `using Lib for`
|
|
330
|
+
'external', // `IFoo(addr).foo()` / `token.transfer()` on a contract-typed value
|
|
331
|
+
'virtual', // runtime dispatch to an override of the referenced function
|
|
332
|
+
'modifier', // the function applies this modifier
|
|
333
|
+
'constructor', // base-constructor invocation
|
|
334
|
+
]);
|
|
335
|
+
export const FactsFunctionSchema = z.object({
|
|
336
|
+
/** `Contract.name(type1,type2)`; modifiers use the same shape. */
|
|
337
|
+
id: z.string(),
|
|
338
|
+
contract: z.string(),
|
|
339
|
+
name: z.string(),
|
|
340
|
+
signature: z.string(),
|
|
341
|
+
kind: z.enum(['function', 'constructor', 'fallback', 'receive', 'modifier']),
|
|
342
|
+
visibility: z.string(),
|
|
343
|
+
mutability: z.string(),
|
|
344
|
+
file: z.string(),
|
|
345
|
+
line_start: z.number().int(),
|
|
346
|
+
line_end: z.number().int(),
|
|
347
|
+
nsloc: z.number().int(),
|
|
348
|
+
virtual: z.boolean().default(false),
|
|
349
|
+
/** Base functions this one overrides (ids). */
|
|
350
|
+
overrides: z.array(z.string()).default([]),
|
|
351
|
+
modifiers: z.array(z.string()).default([]),
|
|
352
|
+
/** `at`: the caller's lines that make the call (absent in facts written before 0.8.0). */
|
|
353
|
+
calls: z
|
|
354
|
+
.array(z.object({
|
|
355
|
+
to: z.string(),
|
|
356
|
+
kind: FactsCallKindSchema,
|
|
357
|
+
at: z.array(z.number().int()).optional(),
|
|
358
|
+
}))
|
|
359
|
+
.default([]),
|
|
360
|
+
called_by: z
|
|
361
|
+
.array(z.object({
|
|
362
|
+
from: z.string(),
|
|
363
|
+
kind: FactsCallKindSchema,
|
|
364
|
+
at: z.array(z.number().int()).optional(),
|
|
365
|
+
}))
|
|
366
|
+
.default([]),
|
|
367
|
+
external_calls: z
|
|
368
|
+
.array(z.object({
|
|
369
|
+
/** Contract/interface type for typed calls; `address` for low-level calls. */
|
|
370
|
+
target_type: z.string(),
|
|
371
|
+
member: z.string(),
|
|
372
|
+
kind: z.enum(['typed', 'low_level', 'create', 'transfer']),
|
|
373
|
+
line: z.number().int(),
|
|
374
|
+
}))
|
|
375
|
+
.default([]),
|
|
376
|
+
/** State variable ids (`Contract.var`) read / written, including via storage pointers. */
|
|
377
|
+
reads: z.array(z.string()).default([]),
|
|
378
|
+
writes: z.array(z.string()).default([]),
|
|
379
|
+
emits: z.array(z.string()).default([]),
|
|
380
|
+
/** external/public (or fallback/receive) on a contract or abstract contract. */
|
|
381
|
+
is_entry_point: z.boolean(),
|
|
382
|
+
in_scope: z.boolean(),
|
|
383
|
+
});
|
|
384
|
+
export const FactsContractSchema = z.object({
|
|
385
|
+
name: z.string(),
|
|
386
|
+
kind: z.enum(['contract', 'abstract', 'interface', 'library']),
|
|
387
|
+
file: z.string(),
|
|
388
|
+
line_start: z.number().int(),
|
|
389
|
+
line_end: z.number().int(),
|
|
390
|
+
/** Direct bases, in declaration order. */
|
|
391
|
+
bases: z.array(z.string()),
|
|
392
|
+
/** C3 linearization from the compiler, most-derived first (includes itself). */
|
|
393
|
+
linearization: z.array(z.string()),
|
|
394
|
+
in_scope: z.boolean(),
|
|
395
|
+
});
|
|
396
|
+
export const FactsStateVarSchema = z.object({
|
|
397
|
+
id: z.string(),
|
|
398
|
+
contract: z.string(),
|
|
399
|
+
name: z.string(),
|
|
400
|
+
type: z.string(),
|
|
401
|
+
mutability: z.enum(['mutable', 'constant', 'immutable']),
|
|
402
|
+
visibility: z.string(),
|
|
403
|
+
file: z.string(),
|
|
404
|
+
line: z.number().int(),
|
|
405
|
+
});
|
|
406
|
+
export const FactsStorageSlotSchema = z.object({
|
|
407
|
+
label: z.string(),
|
|
408
|
+
slot: z.string(),
|
|
409
|
+
offset: z.number().int(),
|
|
410
|
+
type: z.string(),
|
|
411
|
+
bytes: z.number().int().optional(),
|
|
412
|
+
/** Contract that declares the variable (may be a base). */
|
|
413
|
+
declared_in: z.string(),
|
|
414
|
+
});
|
|
415
|
+
export const FactsSchema = z.object({
|
|
416
|
+
generated_at: z.string(),
|
|
417
|
+
commit: z.string().optional(),
|
|
418
|
+
/** `solc-ast` = exact compiler data; `parser-fallback` = the build failed and a parser approximated it. */
|
|
419
|
+
source: z.enum(['solc-ast', 'parser-fallback']),
|
|
420
|
+
compiler: z.object({ version: z.string(), toolchain: z.enum(['foundry', 'hardhat']) }).optional(),
|
|
421
|
+
/** `compiler` = solc storageLayout; `declaration-order` = inferred from declarations. */
|
|
422
|
+
layout_source: z.enum(['compiler', 'declaration-order']),
|
|
423
|
+
warnings: z.array(z.string()).default([]),
|
|
424
|
+
contracts: z.array(FactsContractSchema),
|
|
425
|
+
functions: z.array(FactsFunctionSchema),
|
|
426
|
+
state_vars: z.array(FactsStateVarSchema),
|
|
427
|
+
storage_layouts: z.record(z.string(), z.array(FactsStorageSlotSchema)),
|
|
428
|
+
/** Deployable in-scope contract → the external/public functions it exposes (most-derived ids). */
|
|
429
|
+
entry_points: z.record(z.string(), z.array(z.string())),
|
|
430
|
+
});
|
|
431
|
+
// ─── Protocol model (agents; claims carry evidence + verification) ──
|
|
432
|
+
export const EvidenceRefSchema = z.object({
|
|
433
|
+
file: z.string(),
|
|
434
|
+
line_start: z.number().int(),
|
|
435
|
+
line_end: z.number().int().optional(),
|
|
436
|
+
});
|
|
437
|
+
/** Every model claim: evidence in the code, and whether a skeptic verified it. */
|
|
438
|
+
const claim = {
|
|
439
|
+
claim_id: z.string(),
|
|
440
|
+
evidence: z.array(EvidenceRefSchema).default([]),
|
|
441
|
+
status: z.enum(['unverified', 'verified', 'contested']).default('unverified'),
|
|
442
|
+
verified_by: z.string().optional(),
|
|
443
|
+
note: z.string().optional(),
|
|
444
|
+
};
|
|
445
|
+
export const ModelActorSchema = z.object({
|
|
446
|
+
...claim,
|
|
447
|
+
id: z.string(),
|
|
448
|
+
name: z.string(),
|
|
449
|
+
kind: z.enum(['user', 'admin', 'keeper', 'guardian', 'external_protocol', 'other']),
|
|
450
|
+
trust: z.enum(['trusted', 'semi_trusted', 'untrusted']),
|
|
451
|
+
/** Function ids (`Contract.sig`) this actor can call that others cannot. */
|
|
452
|
+
powers: z.array(z.string()).default([]),
|
|
453
|
+
description: z.string().default(''),
|
|
454
|
+
});
|
|
455
|
+
export const ModelAssetSchema = z.object({
|
|
456
|
+
...claim,
|
|
457
|
+
id: z.string(),
|
|
458
|
+
name: z.string(),
|
|
459
|
+
kind: z.enum(['erc20', 'native', 'nft', 'shares', 'debt', 'other']),
|
|
460
|
+
token: z.string().optional(),
|
|
461
|
+
held_by: z.array(z.string()).default([]),
|
|
462
|
+
moved_by: z.array(z.string()).default([]),
|
|
463
|
+
description: z.string().default(''),
|
|
464
|
+
});
|
|
465
|
+
export const ModelPrivilegeSchema = z.object({
|
|
466
|
+
...claim,
|
|
467
|
+
actor: z.string(),
|
|
468
|
+
function: z.string(),
|
|
469
|
+
effect: z.string(),
|
|
470
|
+
worst_case: z.string(),
|
|
471
|
+
timelock: z.string().optional(),
|
|
472
|
+
});
|
|
473
|
+
export const ModelTrustAssumptionSchema = z.object({ ...claim, text: z.string() });
|
|
474
|
+
export const ModelDependencySchema = z.object({
|
|
475
|
+
...claim,
|
|
476
|
+
id: z.string(),
|
|
477
|
+
name: z.string(),
|
|
478
|
+
kind: z.enum(['oracle', 'dex', 'bridge', 'lending', 'token', 'other']),
|
|
479
|
+
used_by: z.array(z.string()).default([]),
|
|
480
|
+
failure_modes: z.array(z.string()).default([]),
|
|
481
|
+
});
|
|
482
|
+
export const ModelStateMachineSchema = z.object({
|
|
483
|
+
...claim,
|
|
484
|
+
id: z.string(),
|
|
485
|
+
entity: z.string(),
|
|
486
|
+
states: z.array(z.string()),
|
|
487
|
+
transitions: z.array(z.object({
|
|
488
|
+
from: z.string(),
|
|
489
|
+
to: z.string(),
|
|
490
|
+
function: z.string(),
|
|
491
|
+
guard: z.string().optional(),
|
|
492
|
+
})),
|
|
493
|
+
});
|
|
494
|
+
export const ModelAccountingSchema = z.object({
|
|
495
|
+
...claim,
|
|
496
|
+
id: z.string(),
|
|
497
|
+
name: z.string(),
|
|
498
|
+
equation: z.string(),
|
|
499
|
+
terms: z.array(z.object({
|
|
500
|
+
term: z.string(),
|
|
501
|
+
updated_by: z.array(z.object({ function: z.string(), direction: z.enum(['increase', 'decrease', 'set']) })),
|
|
502
|
+
})),
|
|
503
|
+
});
|
|
504
|
+
export const ModelFlowSchema = z.object({
|
|
505
|
+
...claim,
|
|
506
|
+
id: z.string(),
|
|
507
|
+
name: z.string(),
|
|
508
|
+
entry: z.string(),
|
|
509
|
+
steps: z.array(z.object({
|
|
510
|
+
actor: z.string().optional(),
|
|
511
|
+
contract: z.string(),
|
|
512
|
+
function: z.string().optional(),
|
|
513
|
+
kind: z.enum(['call', 'callback', 'oracle', 'transfer', 'state']).default('call'),
|
|
514
|
+
note: z.string().optional(),
|
|
515
|
+
})),
|
|
516
|
+
risk: z.string().default(''),
|
|
517
|
+
});
|
|
518
|
+
export const ProtocolModelSchema = z.object({
|
|
519
|
+
generated_at: z.string(),
|
|
520
|
+
/** One paragraph: what the protocol does, for whom. */
|
|
521
|
+
summary: z.string().default(''),
|
|
522
|
+
actors: z.array(ModelActorSchema).default([]),
|
|
523
|
+
assets: z.array(ModelAssetSchema).default([]),
|
|
524
|
+
privileges: z.array(ModelPrivilegeSchema).default([]),
|
|
525
|
+
trust_assumptions: z.array(ModelTrustAssumptionSchema).default([]),
|
|
526
|
+
external_dependencies: z.array(ModelDependencySchema).default([]),
|
|
527
|
+
state_machines: z.array(ModelStateMachineSchema).default([]),
|
|
528
|
+
accounting: z.array(ModelAccountingSchema).default([]),
|
|
529
|
+
risky_flows: z.array(ModelFlowSchema).default([]),
|
|
530
|
+
});
|
|
531
|
+
export const InvariantSchema = z.object({
|
|
532
|
+
id: z.string(), // INV-NNN
|
|
533
|
+
statement: z.string(),
|
|
534
|
+
kind: z.enum([
|
|
535
|
+
'accounting',
|
|
536
|
+
'access',
|
|
537
|
+
'bound',
|
|
538
|
+
'monotonic',
|
|
539
|
+
'state-machine',
|
|
540
|
+
'liveness',
|
|
541
|
+
'economic',
|
|
542
|
+
]),
|
|
543
|
+
scope: z
|
|
544
|
+
.object({
|
|
545
|
+
contracts: z.array(z.string()).default([]),
|
|
546
|
+
functions: z.array(z.string()).default([]),
|
|
547
|
+
})
|
|
548
|
+
.default({ contracts: [], functions: [] }),
|
|
549
|
+
evidence: z.array(EvidenceRefSchema).default([]),
|
|
550
|
+
/** Does the code enforce it on-chain (require/assert)? `false` = it only holds if the code is right. */
|
|
551
|
+
on_chain_enforced: z.boolean().default(false),
|
|
552
|
+
status: z.enum(['proposed', 'accepted', 'rejected']).default('proposed'),
|
|
553
|
+
rationale: z.string().optional(),
|
|
554
|
+
/** The init-audit skeptic's check: does the code maintain it on every path? */
|
|
555
|
+
verification: z
|
|
556
|
+
.object({
|
|
557
|
+
status: z.enum(['verified', 'contested']),
|
|
558
|
+
/** For contested: the path that breaks it, or what is imprecise. */
|
|
559
|
+
note: z.string().optional(),
|
|
560
|
+
by: z.string().optional(),
|
|
561
|
+
})
|
|
562
|
+
.optional(),
|
|
563
|
+
test: z
|
|
564
|
+
.object({
|
|
565
|
+
tool: z.enum(['fizz', 'foundry']),
|
|
566
|
+
property_id: z.string().optional(),
|
|
567
|
+
file: z.string().optional(),
|
|
568
|
+
status: z.enum(['not_written', 'passing', 'failing', 'broken']).default('not_written'),
|
|
569
|
+
runs: z.number().int().optional(),
|
|
570
|
+
last_run_at: z.string().optional(),
|
|
571
|
+
repro_file: z.string().optional(),
|
|
572
|
+
})
|
|
573
|
+
.optional(),
|
|
574
|
+
issue_id: z.string().optional(),
|
|
575
|
+
});
|
|
576
|
+
export const InvariantsFileSchema = z.object({
|
|
577
|
+
updated_at: z.string(),
|
|
578
|
+
invariants: z.array(InvariantSchema),
|
|
579
|
+
});
|
|
580
|
+
// ─── Review map (progress.json v2) ──────────────────────────────────
|
|
581
|
+
export const FunctionReviewStateSchema = z.enum(['unread', 'read', 'questioned', 'cleared']);
|
|
582
|
+
export const FunctionReviewSchema = z.object({
|
|
583
|
+
state: FunctionReviewStateSchema,
|
|
584
|
+
by: z.enum(['auditor', 'diane', 'dashboard', 'agent']).default('auditor'),
|
|
585
|
+
updated_at: z.string(),
|
|
586
|
+
note: z.string().optional(),
|
|
587
|
+
});
|
|
588
|
+
// ─── Triage rules (feedback into AI runs) ───────────────────────────
|
|
589
|
+
export const TriageRuleSchema = z.object({
|
|
590
|
+
id: z.string(), // R-NNN
|
|
591
|
+
kind: z.enum(['out_of_scope', 'trusted_role', 'by_design', 'known_issue']),
|
|
592
|
+
text: z.string(),
|
|
593
|
+
/** Contracts / function ids the rule is limited to; empty = whole audit. */
|
|
594
|
+
scope: z.array(z.string()).default([]),
|
|
595
|
+
created_from: z.string().optional(),
|
|
596
|
+
created_at: z.string(),
|
|
597
|
+
});
|
|
598
|
+
export const TriageRulesFileSchema = z.object({ rules: z.array(TriageRuleSchema) });
|
|
599
|
+
// ─── Validation (recorded on cards) ─────────────────────────────────
|
|
600
|
+
export const ValidationSchema = z.object({
|
|
601
|
+
verdict: z.enum(['reproduced', 'refuted', 'uncertain', 'valid_no_poc']),
|
|
602
|
+
validated_by: z.enum(['auditor', 'agent']),
|
|
603
|
+
memo: z.string().optional(),
|
|
604
|
+
poc_file: z.string().optional(),
|
|
605
|
+
poc_status: z.enum(['passing', 'failing', 'not_started']).optional(),
|
|
606
|
+
refuters: z.number().int().optional(),
|
|
607
|
+
/** Set when an agent moved the card; cleared if the auditor reverts it. */
|
|
608
|
+
auto_moved_to: z.enum(['verified', 'rejected']).optional(),
|
|
609
|
+
at: z.string(),
|
|
610
|
+
});
|
|
611
|
+
// ─── Diagram specs (model → Excalidraw) ─────────────────────────────
|
|
612
|
+
const DiagramNodeRef = z.string().optional(); // facts function id / model id the node stands for
|
|
613
|
+
const DiagramBase = {
|
|
614
|
+
name: z.string().regex(/^[a-z0-9][a-z0-9-]*$/, 'kebab-case file name'),
|
|
615
|
+
title: z.string(),
|
|
616
|
+
/** One sentence: what this picture tells an auditor that the code does not show at a glance. */
|
|
617
|
+
takeaway: z.string().min(10),
|
|
618
|
+
annotations: z
|
|
619
|
+
.array(z.object({
|
|
620
|
+
target: z.string(),
|
|
621
|
+
text: z.string(),
|
|
622
|
+
kind: z.enum(['risk', 'note']).default('risk'),
|
|
623
|
+
}))
|
|
624
|
+
.default([]),
|
|
625
|
+
};
|
|
626
|
+
export const CustodyDiagramSchema = z.object({
|
|
627
|
+
...DiagramBase,
|
|
628
|
+
type: z.literal('custody'),
|
|
629
|
+
actors: z.array(z.object({ id: z.string(), label: z.string(), ref: DiagramNodeRef })),
|
|
630
|
+
holdings: z.array(z.object({
|
|
631
|
+
id: z.string(),
|
|
632
|
+
label: z.string(),
|
|
633
|
+
assets: z.array(z.string()).default([]),
|
|
634
|
+
ref: DiagramNodeRef,
|
|
635
|
+
})),
|
|
636
|
+
moves: z.array(z.object({
|
|
637
|
+
from: z.string(),
|
|
638
|
+
to: z.string(),
|
|
639
|
+
via: z.string(),
|
|
640
|
+
ref: DiagramNodeRef,
|
|
641
|
+
asset: z.string().optional(),
|
|
642
|
+
})),
|
|
643
|
+
});
|
|
644
|
+
export const PrivilegeDiagramSchema = z.object({
|
|
645
|
+
...DiagramBase,
|
|
646
|
+
type: z.literal('privilege'),
|
|
647
|
+
actors: z.array(z.object({ id: z.string(), label: z.string(), ref: DiagramNodeRef })),
|
|
648
|
+
powers: z.array(z.object({ id: z.string(), label: z.string(), ref: DiagramNodeRef, worst_case: z.string() })),
|
|
649
|
+
grants: z.array(z.object({ actor: z.string(), power: z.string() })),
|
|
650
|
+
});
|
|
651
|
+
export const StateMachineDiagramSchema = z.object({
|
|
652
|
+
...DiagramBase,
|
|
653
|
+
type: z.literal('state-machine'),
|
|
654
|
+
entity: z.string(),
|
|
655
|
+
states: z.array(z.object({ id: z.string(), label: z.string(), terminal: z.boolean().default(false) })),
|
|
656
|
+
transitions: z.array(z.object({
|
|
657
|
+
from: z.string(),
|
|
658
|
+
to: z.string(),
|
|
659
|
+
label: z.string(),
|
|
660
|
+
ref: DiagramNodeRef,
|
|
661
|
+
guard: z.string().optional(),
|
|
662
|
+
})),
|
|
663
|
+
});
|
|
664
|
+
export const AccountingDiagramSchema = z.object({
|
|
665
|
+
...DiagramBase,
|
|
666
|
+
type: z.literal('accounting'),
|
|
667
|
+
equation: z.string(),
|
|
668
|
+
terms: z.array(z.object({ id: z.string(), label: z.string() })),
|
|
669
|
+
updates: z.array(z.object({
|
|
670
|
+
term: z.string(),
|
|
671
|
+
function: z.string(),
|
|
672
|
+
ref: DiagramNodeRef,
|
|
673
|
+
direction: z.enum(['increase', 'decrease', 'set']),
|
|
674
|
+
})),
|
|
675
|
+
});
|
|
676
|
+
export const SequenceDiagramSchema = z.object({
|
|
677
|
+
...DiagramBase,
|
|
678
|
+
type: z.literal('sequence'),
|
|
679
|
+
participants: z.array(z.object({
|
|
680
|
+
id: z.string(),
|
|
681
|
+
label: z.string(),
|
|
682
|
+
kind: z.enum(['actor', 'contract', 'external']).default('contract'),
|
|
683
|
+
ref: DiagramNodeRef,
|
|
684
|
+
})),
|
|
685
|
+
messages: z.array(z.object({
|
|
686
|
+
from: z.string(),
|
|
687
|
+
to: z.string(),
|
|
688
|
+
label: z.string(),
|
|
689
|
+
kind: z.enum(['call', 'callback', 'oracle', 'transfer', 'state']).default('call'),
|
|
690
|
+
ref: DiagramNodeRef,
|
|
691
|
+
note: z.string().optional(),
|
|
692
|
+
})),
|
|
693
|
+
});
|
|
694
|
+
export const DiagramSpecSchema = z.discriminatedUnion('type', [
|
|
695
|
+
CustodyDiagramSchema,
|
|
696
|
+
PrivilegeDiagramSchema,
|
|
697
|
+
StateMachineDiagramSchema,
|
|
698
|
+
AccountingDiagramSchema,
|
|
699
|
+
SequenceDiagramSchema,
|
|
700
|
+
]);
|
|
701
|
+
export const DiagramIndexEntrySchema = z.object({
|
|
702
|
+
name: z.string(),
|
|
703
|
+
type: z.string(),
|
|
704
|
+
title: z.string(),
|
|
705
|
+
takeaway: z.string(),
|
|
706
|
+
spec_hash: z.string(),
|
|
707
|
+
built_at: z.string(),
|
|
708
|
+
/** The auditor edited the scene in the dashboard; rebuilds never overwrite it. */
|
|
709
|
+
edited: z.boolean().default(false),
|
|
710
|
+
/** A rebuild produced `<name>.regenerated.excalidraw` because the edited scene is out of date. */
|
|
711
|
+
stale: z.boolean().default(false),
|
|
712
|
+
in_report: z.boolean().default(false),
|
|
713
|
+
});
|
|
714
|
+
// ─── Fix review (.hex/fix-review/<to-sha>.json) ─────────────────────
|
|
715
|
+
export const FixReviewCardSchema = z.object({
|
|
716
|
+
id: z.string(),
|
|
717
|
+
title: z.string(),
|
|
718
|
+
severity: SeveritySchema,
|
|
719
|
+
github_issue: z.number().int().optional(),
|
|
720
|
+
status: z.enum(['fixed', 'partially_fixed', 'not_fixed', 'unaddressed', 'unknown']),
|
|
721
|
+
/** One or two sentences: why this status (PoC result, code path removed, ...). */
|
|
722
|
+
evidence: z.string().default(''),
|
|
723
|
+
poc: z
|
|
724
|
+
.object({
|
|
725
|
+
file: z.string().optional(),
|
|
726
|
+
/** PoC result at the audited commit (expected: passing = bug present). */
|
|
727
|
+
before: z.enum(['passing', 'failing', 'error', 'missing']).optional(),
|
|
728
|
+
/** PoC result at the fix commit (expected: failing = bug gone). */
|
|
729
|
+
after: z.enum(['passing', 'failing', 'error', 'missing']).optional(),
|
|
730
|
+
})
|
|
731
|
+
.default({}),
|
|
732
|
+
changed_functions: z.array(z.string()).default([]),
|
|
733
|
+
commits: z.array(z.string()).default([]),
|
|
734
|
+
proposed: z
|
|
735
|
+
.object({
|
|
736
|
+
resolution: z
|
|
737
|
+
.enum(['Fixed', 'Mitigated', 'Acknowledged', 'Not Fixed', 'Unresolved'])
|
|
738
|
+
.optional(),
|
|
739
|
+
update_from_client: z.string().optional(),
|
|
740
|
+
})
|
|
741
|
+
.default({}),
|
|
742
|
+
/** Set once the proposal was applied to GitHub (`gh issue edit`). */
|
|
743
|
+
applied_at: z.string().optional(),
|
|
744
|
+
});
|
|
745
|
+
export const FixReviewSchema = z.object({
|
|
746
|
+
generated_at: z.string(),
|
|
747
|
+
from_commit: z.string(),
|
|
748
|
+
to_commit: z.string(),
|
|
749
|
+
cards: z.array(FixReviewCardSchema),
|
|
750
|
+
/** Fix-commit code changes not tied to any card: they need a review of their own. */
|
|
751
|
+
unmapped_changes: z.array(z.object({
|
|
752
|
+
contract: z.string(),
|
|
753
|
+
entity: z.string(),
|
|
754
|
+
kind: z.string(),
|
|
755
|
+
change: z.string(),
|
|
756
|
+
file: z.string(),
|
|
757
|
+
impacted_entry_points: z.array(z.string()).default([]),
|
|
758
|
+
reviewed: z.boolean().default(false),
|
|
759
|
+
note: z.string().optional(),
|
|
760
|
+
})),
|
|
761
|
+
summary: z.object({
|
|
762
|
+
fixed: z.number().int(),
|
|
763
|
+
partially_fixed: z.number().int(),
|
|
764
|
+
not_fixed: z.number().int(),
|
|
765
|
+
unaddressed: z.number().int(),
|
|
766
|
+
unknown: z.number().int(),
|
|
767
|
+
unmapped: z.number().int(),
|
|
768
|
+
}),
|
|
769
|
+
});
|
|
435
770
|
// ─── Differential audit ─────────────────────────────────────────────
|
|
436
771
|
export const DiffFileStatusSchema = z.enum(['added', 'modified', 'deleted', 'renamed']);
|
|
437
772
|
export const DiffFileSchema = z.object({
|
|
@@ -498,6 +833,10 @@ export const DiffSchema = z.object({
|
|
|
498
833
|
generated_at: z.string(),
|
|
499
834
|
base_commit: z.string(),
|
|
500
835
|
head_commit: z.string(),
|
|
836
|
+
/** `compiler` = impact from exact compiler facts; `parser` = name-resolved fallback. */
|
|
837
|
+
analysis: z.enum(['compiler', 'parser']).default('parser'),
|
|
838
|
+
/** `compiler` = slot-exact layout diff of both commits; else inferred from declaration order. */
|
|
839
|
+
layout_analysis: z.enum(['compiler', 'declaration-order']).default('declaration-order'),
|
|
501
840
|
/** Set when the working tree HEAD is not head_commit (analyses read the working tree). */
|
|
502
841
|
warnings: z.array(z.string()).default([]),
|
|
503
842
|
files: z.array(DiffFileSchema),
|