recon-generate 0.0.6 → 0.0.8

package/README.md

@@ -69,6 +69,9 @@ recon-generate --mock "Morpho,Other" --force
 # Enable dynamic deploy helpers for Foo and Bar
 recon-generate --dynamic-deploy "Foo,Bar" --force
 
+# Generate coverage JSON from a Crytic tester (no scaffolding)
+recon-generate coverage --crytic-name CryticTester --name foo
+
 # Link subcommand
 
 After generating a suite you can update Echidna and Medusa configs with detected Foundry libraries:

package/dist/analyzer/call-tree-builder.d.ts

@@ -0,0 +1,14 @@
+import { ContractDefinition, Expression, FunctionCall, FunctionDefinition, ModifierDefinition, ModifierInvocation, Statement } from 'solc-typed-ast';
+import { CallTree } from '../types';
+export interface CallTreeBuilderContext {
+    nodeCounter: {
+        value: number;
+    };
+    contract: ContractDefinition;
+    callStack: number[];
+    activeNodes: Map<number, number>;
+}
+/**
+ * Build a call tree for a function or modifier
+ */
+export declare function buildCallTree(currentFunc: FunctionDefinition | ModifierDefinition, callArgs?: Expression[], fnCall?: FunctionCall | ModifierInvocation, callContext?: Statement, context?: CallTreeBuilderContext): CallTree;

package/dist/analyzer/call-tree-builder.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildCallTree = buildCallTree;
+const solc_typed_ast_1 = require("solc-typed-ast");
+const expression_analyzer_1 = require("./expression-analyzer");
+/**
+ * Build a call tree for a function or modifier
+ */
+function buildCallTree(currentFunc, callArgs = [], fnCall, callContext, context) {
+    if (!context) {
+        throw new Error('CallTreeBuilderContext is required');
+    }
+    const functionAstId = currentFunc.id;
+    const isRecursiveCall = context.callStack.includes(functionAstId);
+    const recursiveTargetNodeId = context.activeNodes.get(functionAstId);
+    const node = {
+        nodeId: context.nodeCounter.value++,
+        definition: currentFunc,
+        fnCall: fnCall,
+        callArgs: callArgs,
+        callContext: callContext,
+        children: [],
+        isRecursive: isRecursiveCall,
+        recursiveTargetNodeId: recursiveTargetNodeId
+    };
+    if (isRecursiveCall) {
+        return node;
+    }
+    context.callStack.push(functionAstId);
+    context.activeNodes.set(functionAstId, node.nodeId);
+    // For modifiers, process argument calls first (before modifier body)
+    if (currentFunc instanceof solc_typed_ast_1.ModifierDefinition && fnCall instanceof solc_typed_ast_1.ModifierInvocation) {
+        for (const arg of fnCall.vArguments) {
+            (0, expression_analyzer_1.collectCallsFromExpression)(arg, node.children, fnCall, undefined, (func, args, call, ctx) => buildCallTree(func, args, call, ctx, context), context.contract);
+        }
+    }
+    // For constructors, process argument calls first (before constructor body)
+    if (currentFunc instanceof solc_typed_ast_1.FunctionDefinition && currentFunc.isConstructor && fnCall instanceof solc_typed_ast_1.ModifierInvocation) {
+        for (const arg of fnCall.vArguments) {
+            (0, expression_analyzer_1.collectCallsFromExpression)(arg, node.children, fnCall, undefined, (func, args, call, ctx) => buildCallTree(func, args, call, ctx, context), context.contract);
+        }
+    }
+    // Process function body first - only direct statements
+    if (currentFunc.vBody) {
+        // For modifiers, create the context for parameter resolution
+        const modifierContext = currentFunc instanceof solc_typed_ast_1.ModifierDefinition ?
+            { modifier: currentFunc, resolvedArgs: callArgs } : undefined;
+        for (const stmt of currentFunc.vBody.vStatements) {
+            (0, expression_analyzer_1.collectCallsFromExpression)(stmt, node.children, stmt, modifierContext, (func, args, call, ctx) => buildCallTree(func, args, call, ctx, context), context.contract);
+        }
+    }
+    // Helper function to resolve modifier arguments based on function parameters
+    function resolveModifierArguments(func, modifierArgs, functionCallArgs) {
+        return modifierArgs.map(arg => {
+            // If the argument is an Identifier that matches a function parameter, replace it with the actual argument
+            if (arg instanceof solc_typed_ast_1.Identifier) {
+                const paramIndex = func.vParameters.vParameters.findIndex(param => param.name === arg.name);
+                if (paramIndex !== -1 && paramIndex < functionCallArgs.length) {
+                    return functionCallArgs[paramIndex];
+                }
+            }
+            return arg;
+        });
+    }
+    // Process modifiers last for ALL functions (at the end of the frame in reverse order)
+    if (currentFunc instanceof solc_typed_ast_1.FunctionDefinition && currentFunc.vModifiers.length > 0) {
+        // Reverse the order of modifiers and add them at the end
+        const reversedModifiers = [...currentFunc.vModifiers].reverse();
+        for (const modifierInvocation of reversedModifiers) {
+            if (modifierInvocation.vModifierName.vReferencedDeclaration instanceof solc_typed_ast_1.ModifierDefinition) {
+                const calledModifier = modifierInvocation.vModifierName.vReferencedDeclaration;
+                // Resolve modifier arguments based on the actual function call arguments
+                const resolvedArgs = resolveModifierArguments(currentFunc, modifierInvocation.vArguments, callArgs);
+                node.children.push(buildCallTree(calledModifier, resolvedArgs, modifierInvocation, undefined, context));
+            }
+            else if (modifierInvocation.vModifierName.vReferencedDeclaration instanceof solc_typed_ast_1.ContractDefinition) {
+                // Handle constructor calls like ERC20("ETH", 18)
+                const baseContract = modifierInvocation.vModifierName.vReferencedDeclaration;
+                // Find the constructor in the base contract
+                const constructor = baseContract.vFunctions.find(f => f.isConstructor);
+                if (constructor) {
+                    // Resolve constructor arguments as well
+                    const resolvedArgs = resolveModifierArguments(currentFunc, modifierInvocation.vArguments, callArgs);
+                    node.children.push(buildCallTree(constructor, resolvedArgs, modifierInvocation, undefined, context));
+                }
+            }
+        }
+    }
+    context.callStack.pop();
+    context.activeNodes.delete(functionAstId);
+    return node;
+}

package/dist/analyzer/expression-analyzer.d.ts

@@ -0,0 +1,14 @@
+import { ASTNode, ContractDefinition, Expression, FunctionCall, FunctionDefinition, ModifierDefinition, Statement } from 'solc-typed-ast';
+import { CallTree } from '../types';
+export interface ModifierContext {
+    modifier: ModifierDefinition;
+    resolvedArgs: Expression[];
+}
+/**
+ * Helper to resolve modifier parameters in expressions
+ */
+export declare function resolveModifierParams(expr: Expression, modifierContext?: ModifierContext): Expression;
+/**
+ * Helper to collect direct function/library calls from an expression
+ */
+export declare function collectCallsFromExpression(expr: ASTNode, childrenArr: CallTree[], context: Statement, modifierContext?: ModifierContext, buildCallTree?: (currentFunc: FunctionDefinition | ModifierDefinition, callArgs: Expression[], fnCall?: FunctionCall, callContext?: Statement) => CallTree, contract?: ContractDefinition): void;

package/dist/analyzer/expression-analyzer.js

@@ -0,0 +1,176 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveModifierParams = resolveModifierParams;
+exports.collectCallsFromExpression = collectCallsFromExpression;
+const solc_typed_ast_1 = require("solc-typed-ast");
+const utils_1 = require("../utils");
+const utils_2 = require("../utils");
+const utils_3 = require("../utils");
+/**
+ * Helper to resolve modifier parameters in expressions
+ */
+function resolveModifierParams(expr, modifierContext) {
+    if (!modifierContext)
+        return expr;
+    // If it's an identifier that matches a modifier parameter, replace it
+    if (expr instanceof solc_typed_ast_1.Identifier) {
+        const paramIndex = modifierContext.modifier.vParameters.vParameters.findIndex(param => param.name === expr.name);
+        if (paramIndex !== -1 && paramIndex < modifierContext.resolvedArgs.length) {
+            return modifierContext.resolvedArgs[paramIndex];
+        }
+    }
+    return expr;
+}
+/**
+ * Helper to collect direct function/library calls from an expression
+ */
+function collectCallsFromExpression(expr, childrenArr, context, modifierContext, buildCallTree, contract) {
+    if (!expr || !buildCallTree || !contract)
+        return;
+    // Find all function calls in this expression (include the root node itself if it is a call)
+    const rootCalls = [];
+    if (expr instanceof solc_typed_ast_1.FunctionCall) {
+        rootCalls.push(expr);
+    }
+    const allCalls = [...rootCalls, ...expr.getChildrenByType(solc_typed_ast_1.FunctionCall, true)].filter(c => !(0, utils_1.highLevelCall)(c) &&
+        !(0, utils_1.highLevelCallWithOptions)(c) &&
+        c.kind === solc_typed_ast_1.FunctionCallKind.FunctionCall &&
+        !!c.vReferencedDeclaration &&
+        (c.vReferencedDeclaration instanceof solc_typed_ast_1.FunctionDefinition || c.vReferencedDeclaration instanceof solc_typed_ast_1.ModifierDefinition));
+    // Deduplicate in case the root call also appears in children traversal
+    const uniqueCalls = Array.from(new Set(allCalls));
+    // Implement proper Solidity evaluation order
+    const evaluationOrder = [];
+    // Recursive function to traverse and collect calls in correct evaluation order
+    function collectInEvaluationOrder(node, visited = new Set()) {
+        if (!node)
+            return;
+        // If this is a function call we care about, process it
+        if (node instanceof solc_typed_ast_1.FunctionCall &&
+            !(0, utils_1.highLevelCall)(node) &&
+            !(0, utils_1.highLevelCallWithOptions)(node) &&
+            node.kind === solc_typed_ast_1.FunctionCallKind.FunctionCall &&
+            !!node.vReferencedDeclaration &&
+            (node.vReferencedDeclaration instanceof solc_typed_ast_1.FunctionDefinition || node.vReferencedDeclaration instanceof solc_typed_ast_1.ModifierDefinition) &&
+            uniqueCalls.includes(node) &&
+            !visited.has(node)) {
+            // First, evaluate all arguments (which may contain nested calls)
+            for (const arg of node.vArguments) {
+                collectInEvaluationOrder(arg, visited);
+            }
+            // Then add this call to the evaluation order
+            evaluationOrder.push(node);
+            visited.add(node);
+            return;
+        }
+        // For binary operations, evaluate right operand first, then left operand (Solidity stack-based evaluation)
+        if (node.type === 'BinaryOperation') {
+            const binaryOp = node;
+            // Access left and right operands through children array
+            const left = binaryOp.children && binaryOp.children[0];
+            const right = binaryOp.children && binaryOp.children[1];
+            if (right)
+                collectInEvaluationOrder(right, visited);
+            if (left)
+                collectInEvaluationOrder(left, visited);
+            return;
+        }
+        // For other nodes, recursively process children in order
+        const children = node.children || [];
+        for (const child of children) {
+            collectInEvaluationOrder(child, visited);
+        }
+    }
+    // Start the evaluation order collection from the root expression
+    collectInEvaluationOrder(expr);
+    // Use the collected evaluation order
+    const sortedCalls = evaluationOrder.length > 0 ? evaluationOrder : uniqueCalls;
+    // Filter to get only direct calls while preserving evaluation order
+    const directCalls = sortedCalls.filter(call => {
+        // A call is direct if no other call in this expression contains it
+        return !uniqueCalls.some(otherCall => otherCall !== call &&
+            otherCall.getChildrenByType(solc_typed_ast_1.FunctionCall, true).includes(call));
+    });
+    for (const call of directCalls) {
+        let callNode = null;
+        // Library call via MemberAccess
+        if (call.vExpression instanceof solc_typed_ast_1.MemberAccess) {
+            const memberAccess = call.vExpression;
+            if (memberAccess.vReferencedDeclaration instanceof solc_typed_ast_1.FunctionDefinition) {
+                const libraryFunc = memberAccess.vReferencedDeclaration;
+                if (memberAccess.vExpression instanceof solc_typed_ast_1.Identifier) {
+                    // Handle 'super' receiver first (special case)
+                    if (memberAccess.vExpression.name === 'super') {
+                        const currentContract = (0, utils_3.getEnclosingContract)(call);
+                        if (currentContract) {
+                            const targetFunc = (0, utils_3.resolveSuper)(contract, currentContract, (0, utils_2.getSignature)(libraryFunc));
+                            if (targetFunc && targetFunc.implemented) {
+                                const superArgs = call.vArguments.map((arg) => resolveModifierParams(arg, modifierContext));
+                                callNode = buildCallTree(targetFunc, superArgs, call, context);
+                            }
+                        }
+                        // Do NOT process further as library call
+                    }
+                    else {
+                        const receiverDeclaration = memberAccess.vExpression.vReferencedDeclaration;
+                        if (receiverDeclaration && receiverDeclaration instanceof solc_typed_ast_1.ContractDefinition) {
+                            // Direct library call: HelperLibrary.increase(10)
+                            if (libraryFunc.implemented) {
+                                const resolvedLibraryArgs = call.vArguments.map((arg) => resolveModifierParams(arg, modifierContext));
+                                callNode = buildCallTree(libraryFunc, resolvedLibraryArgs, call, context);
+                            }
+                        }
+                        else {
+                            // "Using for" call: result.increase()
+                            if (libraryFunc.implemented) {
+                                const resolvedReceiver = resolveModifierParams(memberAccess.vExpression, modifierContext);
+                                const resolvedArgs = call.vArguments.map((arg) => resolveModifierParams(arg, modifierContext));
+                                const libraryArgs = [resolvedReceiver, ...resolvedArgs];
+                                callNode = buildCallTree(libraryFunc, libraryArgs, call, context);
+                            }
+                        }
+                    }
+                }
+                else {
+                    // Complex receiver - collect receiver calls to add as children of this call
+                    const receiverCalls = [];
+                    collectCallsFromExpression(memberAccess.vExpression, receiverCalls, context, modifierContext, buildCallTree, contract);
+                    // Then add the library call with receiver calls as children
+                    if (libraryFunc.implemented) {
+                        const resolvedReceiver = resolveModifierParams(memberAccess.vExpression, modifierContext);
+                        const resolvedArgs = call.vArguments.map((arg) => resolveModifierParams(arg, modifierContext));
+                        const libraryArgs = [resolvedReceiver, ...resolvedArgs];
+                        callNode = buildCallTree(libraryFunc, libraryArgs, call, context);
+                        // Add receiver calls as children (before body calls)
+                        if (callNode) {
+                            callNode.children = [...receiverCalls, ...callNode.children];
+                        }
+                    }
+                }
+            }
+        }
+        else {
+            // Direct function call (could be internal/virtual and overridden)
+            const originalFunc = call.vReferencedDeclaration;
+            const resolved = (0, utils_3.resolveOverride)(contract, (0, utils_2.getSignature)(originalFunc)) || originalFunc;
+            if (resolved.implemented) {
+                // Resolve modifier parameters in call arguments
+                const resolvedCallArgs = call.vArguments.map((arg) => resolveModifierParams(arg, modifierContext));
+                callNode = buildCallTree(resolved, resolvedCallArgs, call, context);
+            }
+        }
+        // If we created a call node, process its arguments for nested calls
+        if (callNode) {
+            // First, recursively process arguments to find nested calls (these should come first)
+            const argumentCalls = [];
+            for (const arg of call.vArguments) {
+                collectCallsFromExpression(arg, argumentCalls, context, modifierContext, buildCallTree, contract);
+            }
+            // Then process function body calls (from buildCallTree)
+            const bodyCalls = callNode.children;
+            // Combine: argument calls first, then body calls
+            callNode.children = [...argumentCalls, ...bodyCalls];
+            childrenArr.push(callNode);
+        }
+    }
+}

package/dist/coverage.d.ts

@@ -0,0 +1 @@
+export declare const runCoverage: (foundryRoot: string, foundryConfigPath: string, cryticName: string, suiteNameSnake?: string) => Promise<void>;

package/dist/coverage.js

@@ -0,0 +1,221 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runCoverage = void 0;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+const solc_typed_ast_1 = require("solc-typed-ast");
+const processor_1 = require("./processor");
+const types_1 = require("./types");
+const utils_1 = require("./utils");
+const isSetupName = (name) => {
+    if (!name)
+        return false;
+    return name.toLowerCase() === 'setup';
+};
+const stripDataLocation = (raw) => {
+    if (!raw)
+        return '';
+    const noLocation = raw
+        .replace(/\s+(storage|memory|calldata)(\s+pointer)?/g, '')
+        .replace(/\s+pointer/g, '');
+    const noPrefix = noLocation
+        .replace(/^struct\s+/, '')
+        .replace(/^enum\s+/, '')
+        .replace(/^contract\s+/, '')
+        .trim();
+    return noPrefix;
+};
+const signatureFromFnDef = (fnDef) => {
+    const params = fnDef.vParameters.vParameters
+        .map((p) => { var _a; return stripDataLocation((_a = p.typeString) !== null && _a !== void 0 ? _a : ''); })
+        .join(',');
+    const name = fnDef.name
+        || (fnDef.kind === solc_typed_ast_1.FunctionKind.Constructor
+            ? 'constructor'
+            : fnDef.kind === solc_typed_ast_1.FunctionKind.Fallback
+                ? 'fallback'
+                : fnDef.kind === solc_typed_ast_1.FunctionKind.Receive
+                    ? 'receive'
+                    : '');
+    return `${name}(${params})`;
+};
+const runCmd = (cmd, cwd) => {
+    return new Promise((resolve, reject) => {
+        (0, child_process_1.exec)(cmd, { cwd, env: { ...process.env, PATH: (0, utils_1.getEnvPath)() } }, (err, _stdout, stderr) => {
+            if (err) {
+                reject(new Error(stderr || err.message));
+            }
+            else {
+                resolve();
+            }
+        });
+    });
+};
+const loadLatestSourceUnits = async (foundryRoot) => {
+    var _a;
+    const outDir = path.join(foundryRoot, '.recon', 'out');
+    const buildInfoDir = path.join(outDir, 'build-info');
+    let files = [];
+    try {
+        const entries = await fs.readdir(buildInfoDir);
+        const jsonFiles = entries.filter((f) => f.endsWith('.json'));
+        files = await Promise.all(jsonFiles.map(async (f) => ({
+            name: f,
+            path: path.join(buildInfoDir, f),
+            mtime: (await fs.stat(path.join(buildInfoDir, f))).mtime,
+        })));
+    }
+    catch (e) {
+        throw new Error(`No build-info directory found at ${buildInfoDir}: ${e}`);
+    }
+    if (files.length === 0) {
+        throw new Error(`No build-info JSON files found in ${buildInfoDir}.`);
+    }
+    const latestFile = files.sort((a, b) => b.mtime.getTime() - a.mtime.getTime())[0].path;
+    const fileContent = await fs.readFile(latestFile, 'utf-8');
+    const buildInfo = JSON.parse(fileContent);
+    const buildOutput = (_a = buildInfo.output) !== null && _a !== void 0 ? _a : buildInfo;
+    if (!buildOutput) {
+        throw new Error(`Build-info file ${latestFile} is missing output data.`);
+    }
+    const filteredAstData = { ...buildOutput };
+    if (filteredAstData.sources) {
+        const validSources = {};
+        for (const [key, content] of Object.entries(filteredAstData.sources)) {
+            const ast = content.ast || content.legacyAST || content.AST;
+            if (ast && (ast.nodeType === 'SourceUnit' || ast.name === 'SourceUnit')) {
+                validSources[key] = content;
+            }
+        }
+        filteredAstData.sources = validSources;
+    }
+    const reader = new solc_typed_ast_1.ASTReader();
+    return reader.read(filteredAstData);
+};
+const shouldIncludeFunction = (fnDef) => {
+    if (!fnDef.implemented)
+        return false;
+    if (isSetupName(fnDef.name))
+        return false;
+    if (fnDef.kind !== solc_typed_ast_1.FunctionKind.Function)
+        return false;
+    if (fnDef.visibility !== solc_typed_ast_1.FunctionVisibility.External &&
+        fnDef.visibility !== solc_typed_ast_1.FunctionVisibility.Public) {
+        return false;
+    }
+    if (fnDef.stateMutability === solc_typed_ast_1.FunctionStateMutability.View ||
+        fnDef.stateMutability === solc_typed_ast_1.FunctionStateMutability.Pure) {
+        return false;
+    }
+    return true;
+};
+const addFunction = (map, contractName, fnDef) => {
+    var _a;
+    const sig = signatureFromFnDef(fnDef);
+    if (!sig)
+        return;
+    const existing = (_a = map.get(contractName)) !== null && _a !== void 0 ? _a : new Set();
+    existing.add(sig);
+    map.set(contractName, existing);
+};
+const collectContractFunctions = (sourceUnits, cryticName) => {
+    var _a;
+    const functionsByContract = new Map();
+    const contracts = [];
+    for (const unit of sourceUnits) {
+        for (const contract of unit.getChildrenByType(solc_typed_ast_1.ContractDefinition)) {
+            if (contract.name === cryticName) {
+                contracts.push(contract);
+            }
+        }
+    }
+    if (contracts.length === 0) {
+        throw new Error(`Contract ${cryticName} not found in build output.`);
+    }
+    const contract = contracts[0];
+    const allFunctions = (0, utils_1.getDefinitions)(contract, 'vFunctions', true).reverse();
+    for (const fnDef of allFunctions) {
+        if (!shouldIncludeFunction(fnDef)) {
+            continue;
+        }
+        addFunction(functionsByContract, contract.name, fnDef);
+        for (const call of fnDef.getChildrenByType(solc_typed_ast_1.FunctionCall)) {
+            const callType = (0, utils_1.getCallType)(call);
+            if (callType === types_1.CallType.Internal) {
+                continue;
+            }
+            const ref = (_a = call.vExpression.vReferencedDeclaration) !== null && _a !== void 0 ? _a : call.vReferencedDeclaration;
+            if (!(ref instanceof solc_typed_ast_1.FunctionDefinition)) {
+                continue;
+            }
+            const targetContract = ref.getClosestParentByType(solc_typed_ast_1.ContractDefinition);
+            if (!targetContract) {
+                continue;
+            }
+            if (ref.stateMutability === solc_typed_ast_1.FunctionStateMutability.View ||
+                ref.stateMutability === solc_typed_ast_1.FunctionStateMutability.Pure) {
+                continue;
+            }
+            if (ref.kind === solc_typed_ast_1.FunctionKind.Constructor ||
+                ref.kind === solc_typed_ast_1.FunctionKind.Fallback ||
+                ref.kind === solc_typed_ast_1.FunctionKind.Receive) {
+                continue;
+            }
+            addFunction(functionsByContract, targetContract.name, ref);
+        }
+    }
+    return functionsByContract;
+};
+const runCoverage = async (foundryRoot, foundryConfigPath, cryticName, suiteNameSnake) => {
+    const outDir = path.join(foundryRoot, '.recon', 'out');
+    const buildCmd = `forge build --contracts ${cryticName} --build-info --out .recon/out`.replace(/\s+/g, ' ').trim();
+    await runCmd(buildCmd, foundryRoot);
+    const sourceUnits = await loadLatestSourceUnits(foundryRoot);
+    if (!sourceUnits || sourceUnits.length === 0) {
+        throw new Error('No source units were produced from the Crytic build; cannot generate coverage.');
+    }
+    const contractFunctions = collectContractFunctions(sourceUnits, cryticName);
+    if (contractFunctions.size === 0) {
+        throw new Error('No eligible functions found to include in coverage.');
+    }
+    const coverage = await (0, processor_1.buildCoverageMap)(sourceUnits, foundryRoot, contractFunctions);
+    const coverageName = suiteNameSnake ? `recon-${suiteNameSnake}-coverage.json` : 'recon-coverage.json';
+    const coveragePath = path.join(foundryRoot, coverageName);
+    await fs.writeFile(coveragePath, JSON.stringify(coverage, null, 2));
+    console.log(`[recon-generate] Wrote coverage file to ${coveragePath}`);
+};
+exports.runCoverage = runCoverage;

package/dist/generator.js

@@ -111,14 +111,14 @@ class ReconGenerator {
         if (await (0, utils_1.fileExists)(chimeraPath)) {
             return;
         }
-        await this.runCmd('forge install Recon-Fuzz/chimera --no-git', this.foundryRoot);
+        await this.runCmd('forge install Recon-Fuzz/chimera', this.foundryRoot);
     }
     async installSetupHelpers() {
         const setupPath = path.join(this.foundryRoot, 'lib', 'setup-helpers');
         if (await (0, utils_1.fileExists)(setupPath)) {
             return;
         }
-        await this.runCmd('forge install Recon-Fuzz/setup-helpers --no-git', this.foundryRoot);
+        await this.runCmd('forge install Recon-Fuzz/setup-helpers', this.foundryRoot);
     }
     async updateRemappings() {
         const remappingsPath = path.join(this.foundryRoot, 'remappings.txt');

package/dist/index.js

@@ -38,6 +38,8 @@ const commander_1 = require("commander");
 const path = __importStar(require("path"));
 const case_1 = require("case");
 const generator_1 = require("./generator");
+const coverage_1 = require("./coverage");
+const pathsGenerator_1 = require("./pathsGenerator");
 const utils_1 = require("./utils");
 const link_1 = require("./link");
 function parseFilter(input) {
@@ -122,6 +124,38 @@ async function main() {
         .option('--force', 'Replace existing generated suite output (under --output). Does not rebuild .recon/out.')
         .option('--force-build', 'Delete .recon/out to force a fresh forge build before generating')
         .option('--foundry-config <path>', 'Path to foundry.toml (defaults to ./foundry.toml)');
+    program
+        .command('coverage')
+        .description('Generate recon-coverage.json from a Crytic tester contract without scaffolding tests')
+        .option('--crytic-name <name>', 'Name of the Crytic tester contract to compile', 'CryticTester')
+        .option('--name <suite>', 'Suite name; affects coverage filename (recon-<name>-coverage.json)')
+        .option('--foundry-config <path>', 'Path to foundry.toml (defaults to ./foundry.toml)')
+        .action(async (opts, cmd) => {
+        var _a;
+        const workspaceRoot = process.cwd();
+        const foundryConfig = (0, utils_1.getFoundryConfigPath)(workspaceRoot, opts.foundryConfig);
+        const foundryRoot = path.dirname(foundryConfig);
+        const parentOpts = ((_a = cmd.parent) === null || _a === void 0 ? void 0 : _a.opts()) || {};
+        const suiteRaw = opts.name || parentOpts.name ? String(opts.name || parentOpts.name).trim() : '';
+        const suiteSnake = suiteRaw ? (0, case_1.snake)(suiteRaw) : '';
+        await (0, coverage_1.runCoverage)(foundryRoot, foundryConfig, opts.cryticName || 'CryticTester', suiteSnake);
+    });
+    program
+        .command('paths')
+        .description('Generate recon-paths.json from a Crytic tester contract without scaffolding tests')
+        .option('--crytic-name <name>', 'Name of the Crytic tester contract to compile', 'CryticTester')
+        .option('--name <suite>', 'Suite name; affects paths filename (recon-<name>-paths.json)')
+        .option('--foundry-config <path>', 'Path to foundry.toml (defaults to ./foundry.toml)')
+        .action(async (opts, cmd) => {
+        var _a;
+        const workspaceRoot = process.cwd();
+        const foundryConfig = (0, utils_1.getFoundryConfigPath)(workspaceRoot, opts.foundryConfig);
+        const foundryRoot = path.dirname(foundryConfig);
+        const parentOpts = ((_a = cmd.parent) === null || _a === void 0 ? void 0 : _a.opts()) || {};
+        const suiteRaw = opts.name || parentOpts.name ? String(opts.name || parentOpts.name).trim() : '';
+        const suiteSnake = suiteRaw ? (0, case_1.snake)(suiteRaw) : '';
+        await (0, pathsGenerator_1.runPaths)(foundryRoot, opts.cryticName || 'CryticTester', suiteSnake);
+    });
     program
         .command('link')
         .description('Link library addresses into echidna/medusa configs via crytic-compile')
@@ -129,11 +163,13 @@ async function main() {
         .option('--medusa-config <path>', 'Path to medusa json (defaults based on --name)')
         .option('--name <suite>', 'Suite name to pick config defaults (echidna-<name>.yaml / medusa-<name>.json)')
         .option('--foundry-config <path>', 'Path to foundry.toml (defaults to ./foundry.toml)')
-        .action(async (opts) => {
+        .action(async (opts, cmd) => {
+        var _a;
         const workspaceRoot = process.cwd();
         const foundryConfig = (0, utils_1.getFoundryConfigPath)(workspaceRoot, opts.foundryConfig);
         const foundryRoot = path.dirname(foundryConfig);
-        const suiteRaw = opts.name ? String(opts.name).trim() : '';
+        const parentOpts = ((_a = cmd.parent) === null || _a === void 0 ? void 0 : _a.opts()) || {};
+        const suiteRaw = opts.name || parentOpts.name ? String(opts.name || parentOpts.name).trim() : '';
         const suiteSnake = suiteRaw ? (0, case_1.snake)(suiteRaw) : '';
         const suffix = suiteSnake ? `-${suiteSnake}` : '';
         const echidnaDefault = `echidna${suffix}.yaml`;

package/dist/pathsGenerator.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Path Generator
+ *
+ * Generates minimal paths needed for 100% branch coverage.
+ * Output is optimized for LLM consumption.
+ */
+/** Simple output: function name -> array of path condition strings */
+export type PathOutput = Record<string, string[]>;
+export declare const runPaths: (foundryRoot: string, cryticName: string, suiteNameSnake?: string) => Promise<void>;