@kevinrabun/judges-cli 3.124.0

package/dist/commands/finding-trend.js

@@ -0,0 +1,118 @@
+/**
+ * Finding-trend — Show finding trends over time.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { dirname } from "path";
+// ─── Storage ────────────────────────────────────────────────────────────────
+const TREND_FILE = ".judges/finding-trends.json";
+function loadStore() {
+    if (!existsSync(TREND_FILE)) {
+        return { version: "1.0.0", snapshots: [] };
+    }
+    try {
+        return JSON.parse(readFileSync(TREND_FILE, "utf-8"));
+    }
+    catch {
+        return { version: "1.0.0", snapshots: [] };
+    }
+}
+function saveStore(store) {
+    mkdirSync(dirname(TREND_FILE), { recursive: true });
+    writeFileSync(TREND_FILE, JSON.stringify(store, null, 2), "utf-8");
+}
+// ─── Helpers ────────────────────────────────────────────────────────────────
+function countFromResults(file) {
+    const counts = { total: 0, critical: 0, high: 0, medium: 0, low: 0 };
+    if (!existsSync(file))
+        return counts;
+    try {
+        const data = JSON.parse(readFileSync(file, "utf-8"));
+        const findings = Array.isArray(data) ? data : data.findings || [];
+        for (const f of findings) {
+            counts.total++;
+            const sev = (f.severity || "medium").toLowerCase();
+            if (sev === "critical")
+                counts.critical++;
+            else if (sev === "high")
+                counts.high++;
+            else if (sev === "medium")
+                counts.medium++;
+            else
+                counts.low++;
+        }
+    }
+    catch {
+        // ignore
+    }
+    return counts;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingTrend(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-trend — Show finding trends over time
+
+Usage:
+  judges finding-trend                     Show trend summary
+  judges finding-trend record --file <f>   Record a snapshot from results file
+  judges finding-trend list                List all snapshots
+  judges finding-trend clear               Clear all trend data
+
+Options:
+  --file <path>     Results file to snapshot
+  --last <n>        Show last N snapshots (default: 10)
+  --format json     JSON output
+  --help, -h        Show this help
+`);
+        return;
+    }
+    const subcommand = argv.find((a) => ["record", "list", "clear"].includes(a));
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const store = loadStore();
+    if (subcommand === "record") {
+        const file = argv.find((_a, i) => argv[i - 1] === "--file");
+        if (!file) {
+            console.error("Error: --file required");
+            process.exitCode = 1;
+            return;
+        }
+        const counts = countFromResults(file);
+        const snapshot = { timestamp: new Date().toISOString(), ...counts };
+        store.snapshots.push(snapshot);
+        saveStore(store);
+        console.log(`Recorded: ${counts.total} findings (${counts.critical}C/${counts.high}H/${counts.medium}M/${counts.low}L)`);
+        return;
+    }
+    if (subcommand === "clear") {
+        saveStore({ version: "1.0.0", snapshots: [] });
+        console.log("Trend data cleared.");
+        return;
+    }
+    // Default / list: show trend
+    const lastN = parseInt(argv.find((_a, i) => argv[i - 1] === "--last") || "10", 10);
+    const recent = store.snapshots.slice(-lastN);
+    if (recent.length === 0) {
+        console.log("No trend data. Use 'judges finding-trend record --file <f>' to start tracking.");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(recent, null, 2));
+        return;
+    }
+    console.log("\nFinding Trends:");
+    console.log("═".repeat(70));
+    console.log("  Date                  Total   Crit   High   Med    Low");
+    console.log("─".repeat(70));
+    for (const s of recent) {
+        const d = s.timestamp.slice(0, 19).replace("T", " ");
+        console.log(`  ${d}  ${String(s.total).padStart(5)}  ${String(s.critical).padStart(5)}  ${String(s.high).padStart(5)}  ${String(s.medium).padStart(5)}  ${String(s.low).padStart(5)}`);
+    }
+    console.log("═".repeat(70));
+    if (recent.length >= 2) {
+        const first = recent[0];
+        const last = recent[recent.length - 1];
+        const delta = last.total - first.total;
+        const direction = delta > 0 ? "↑ increasing" : delta < 0 ? "↓ decreasing" : "→ stable";
+        console.log(`  Trend: ${direction} (${delta >= 0 ? "+" : ""}${delta} findings)`);
+    }
+}

package/dist/commands/fix-pr.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `judges fix-pr` — Create a GitHub PR with auto-fix patches.
+ *
+ * Evaluates files, collects findings with patches, applies them on a new branch,
+ * and opens a pull request — like Dependabot but for code quality.
+ *
+ * Usage:
+ *   judges fix-pr src/                                 # Fix all files in src/
+ *   judges fix-pr src/app.ts                           # Fix a single file
+ *   judges fix-pr . --branch judges/auto-fix           # Custom branch name
+ *   judges fix-pr . --severity high                    # Only high+ fixes
+ *   judges fix-pr . --dry-run                          # Preview without creating PR
+ *
+ * Requires: GITHUB_TOKEN or `gh` CLI authenticated.
+ */
+export interface FixPrResult {
+    filesFixed: number;
+    patchesApplied: number;
+    branch: string;
+    prUrl?: string;
+}
+export declare function runFixPr(argv: string[]): Promise<void>;

package/dist/commands/fix-pr.js

@@ -0,0 +1,286 @@
+/**
+ * `judges fix-pr` — Create a GitHub PR with auto-fix patches.
+ *
+ * Evaluates files, collects findings with patches, applies them on a new branch,
+ * and opens a pull request — like Dependabot but for code quality.
+ *
+ * Usage:
+ *   judges fix-pr src/                                 # Fix all files in src/
+ *   judges fix-pr src/app.ts                           # Fix a single file
+ *   judges fix-pr . --branch judges/auto-fix           # Custom branch name
+ *   judges fix-pr . --severity high                    # Only high+ fixes
+ *   judges fix-pr . --dry-run                          # Preview without creating PR
+ *
+ * Requires: GITHUB_TOKEN or `gh` CLI authenticated.
+ */
+import { execFileSync } from "child_process";
+import { readFileSync, writeFileSync, readdirSync, statSync } from "fs";
+import { resolve, extname, relative, join } from "path";
+import { tmpdir } from "os";
+import { evaluateWithTribunal } from "../evaluators/index.js";
+import { applyPatches } from "./fix.js";
+import { parseGitHubRepo, runGit, tryRunGit } from "../tools/command-safety.js";
+import { detectLanguageFromPath, SUPPORTED_EXTENSIONS } from "../ext-to-lang.js";
+function detectLanguage(filePath) {
+    return detectLanguageFromPath(filePath) ?? "typescript";
+}
+// ─── File Collection ────────────────────────────────────────────────────────
+function collectFiles(dir, maxFiles = 200) {
+    const files = [];
+    const stack = [resolve(dir)];
+    while (stack.length > 0 && files.length < maxFiles) {
+        const current = stack.pop();
+        let entries;
+        try {
+            entries = readdirSync(current);
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            if (entry.startsWith(".") || entry === "node_modules" || entry === "dist" || entry === "build")
+                continue;
+            const fullPath = join(current, entry);
+            try {
+                const stat = statSync(fullPath);
+                if (stat.isDirectory()) {
+                    stack.push(fullPath);
+                }
+                else if (SUPPORTED_EXTENSIONS.has(extname(entry).toLowerCase())) {
+                    files.push(fullPath);
+                    if (files.length >= maxFiles)
+                        break;
+                }
+            }
+            catch {
+                continue;
+            }
+        }
+    }
+    return files;
+}
+// ─── GitHub Helpers ─────────────────────────────────────────────────────────
+function getToken() {
+    return process.env.GITHUB_TOKEN || process.env.GH_TOKEN;
+}
+function detectRepo() {
+    const remote = tryRunGit(["remote", "get-url", "origin"]);
+    return remote ? parseGitHubRepo(remote) : undefined;
+}
+function getCurrentBranch() {
+    return tryRunGit(["rev-parse", "--abbrev-ref", "HEAD"]) ?? "main";
+}
+function ghCliAvailable() {
+    try {
+        execFileSync("gh", ["--version"], { stdio: "ignore" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// ─── Severity Filter ────────────────────────────────────────────────────────
+const SEVERITY_RANK = { critical: 5, high: 4, medium: 3, low: 2, info: 1 };
+function meetsMinSeverity(severity, minSeverity) {
+    return (SEVERITY_RANK[severity] ?? 0) >= (SEVERITY_RANK[minSeverity] ?? 0);
+}
+export async function runFixPr(argv) {
+    // Parse args
+    const target = argv.find((a, i) => i > 1 &&
+        !a.startsWith("-") &&
+        argv[i - 1] !== "--branch" &&
+        argv[i - 1] !== "--severity" &&
+        argv[i - 1] !== "--repo") || ".";
+    const branch = argv.find((_a, i) => argv[i - 1] === "--branch") || `judges/auto-fix-${Date.now()}`;
+    const minSeverity = argv.find((_a, i) => argv[i - 1] === "--severity") || "low";
+    const repo = argv.find((_a, i) => argv[i - 1] === "--repo") || detectRepo();
+    const dryRun = argv.includes("--dry-run") || argv.includes("-n");
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges fix-pr — Create a PR with auto-fix patches
+
+Usage:
+  judges fix-pr <path>                        Fix all files and create PR
+  judges fix-pr <path> --dry-run              Preview fixes without creating PR
+  judges fix-pr <path> --branch <name>        Custom branch name
+  judges fix-pr <path> --severity <level>     Only apply fixes at or above severity
+  judges fix-pr <path> --repo <owner/repo>    Target repository
+
+Options:
+  --dry-run, -n          Preview changes without pushing
+  --branch <name>        Branch name (default: judges/auto-fix-<timestamp>)
+  --severity <level>     Minimum severity: critical, high, medium, low, info
+  --repo <owner/repo>    GitHub repository (auto-detected from git remote)
+  --help, -h             Show this help
+
+Environment:
+  GITHUB_TOKEN           GitHub token for API access
+  GH_TOKEN               Alternative token variable
+
+Requires: git, and either GITHUB_TOKEN or gh CLI authenticated.
+`);
+        return;
+    }
+    const token = getToken();
+    if (!token && !ghCliAvailable() && !dryRun) {
+        console.error("Error: GITHUB_TOKEN not set and gh CLI not available.");
+        console.error("Set GITHUB_TOKEN or authenticate with: gh auth login");
+        process.exit(1);
+    }
+    if (!repo && !dryRun) {
+        console.error("Error: Could not detect GitHub repository. Use --repo owner/repo.");
+        process.exit(1);
+    }
+    // Collect files
+    const resolvedTarget = resolve(target);
+    let files;
+    if (statSync(resolvedTarget).isDirectory()) {
+        files = collectFiles(resolvedTarget);
+    }
+    else {
+        files = [resolvedTarget];
+    }
+    console.log(`\n  Scanning ${files.length} file(s) for auto-fixable findings...\n`);
+    // Evaluate and collect patches per file
+    const fileFixes = [];
+    let totalPatches = 0;
+    for (const filePath of files) {
+        const code = readFileSync(filePath, "utf-8");
+        const lang = detectLanguage(filePath);
+        const verdict = evaluateWithTribunal(code, lang);
+        const fixable = verdict.findings
+            .filter((f) => f.patch && meetsMinSeverity(f.severity, minSeverity))
+            .map((f) => ({
+            ruleId: f.ruleId,
+            title: f.title,
+            severity: f.severity,
+            patch: f.patch,
+            lineNumbers: f.lineNumbers,
+        }));
+        if (fixable.length === 0)
+            continue;
+        const result = applyPatches(code, fixable);
+        if (result.applied === 0)
+            continue;
+        const relPath = relative(process.cwd(), filePath);
+        fileFixes.push({
+            path: filePath,
+            relPath,
+            originalCode: code,
+            fixedCode: result.result,
+            applied: result.applied,
+        });
+        totalPatches += result.applied;
+        console.log(`  ✓ ${relPath}: ${result.applied} fix(es) applied`);
+    }
+    if (fileFixes.length === 0) {
+        console.log("\n  No auto-fixable findings found. Nothing to do.\n");
+        return;
+    }
+    console.log(`\n  Total: ${totalPatches} fix(es) across ${fileFixes.length} file(s)\n`);
+    if (dryRun) {
+        console.log("  --dry-run: No PR will be created.\n");
+        // Show diff preview
+        for (const fix of fileFixes) {
+            console.log(`  --- ${fix.relPath}`);
+            console.log(`  +++ ${fix.relPath} (${fix.applied} fixes)`);
+        }
+        return;
+    }
+    // Create branch, apply fixes, commit, push, create PR
+    const baseBranch = getCurrentBranch();
+    try {
+        // Create and checkout new branch
+        runGit(["checkout", "-b", branch]);
+        // Write fixed files
+        for (const fix of fileFixes) {
+            writeFileSync(fix.path, fix.fixedCode, "utf-8");
+        }
+        // Stage and commit
+        runGit(["add", "-A"]);
+        const commitMsg = `fix: auto-fix ${totalPatches} finding(s) across ${fileFixes.length} file(s)\n\nApplied by Judges Panel auto-fix.\n\nFixes applied:\n${fileFixes.map((f) => `- ${f.relPath}: ${f.applied} fix(es)`).join("\n")}`;
+        runGit(["commit", "-m", commitMsg]);
+        // Push
+        runGit(["push", "origin", branch]);
+        console.log(`  ✓ Pushed branch: ${branch}`);
+        // Create PR
+        const prTitle = `fix: Judges Panel auto-fix — ${totalPatches} finding(s)`;
+        const prBody = [
+            "## 🔧 Auto-Fix by Judges Panel",
+            "",
+            `Applied **${totalPatches}** automated fix(es) across **${fileFixes.length}** file(s).`,
+            "",
+            "### Files Fixed",
+            "",
+            ...fileFixes.map((f) => `- \`${f.relPath}\` — ${f.applied} fix(es)`),
+            "",
+            "---",
+            "",
+            "*This PR was generated automatically by [Judges Panel](https://github.com/KevinRabun/judges). Review the changes before merging.*",
+        ].join("\n");
+        if (ghCliAvailable()) {
+            try {
+                const output = execFileSync("gh", ["pr", "create", "--title", prTitle, "--body", prBody, "--base", baseBranch, "--head", branch], { encoding: "utf-8" }).trim();
+                console.log(`  ✓ PR created: ${output}`);
+            }
+            catch (err) {
+                console.error(`  ✗ Failed to create PR via gh CLI: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        else if (token && repo) {
+            const tmpFile = join(tmpdir(), `.judges-fix-pr-${process.pid}.json`);
+            const body = { title: prTitle, body: prBody, head: branch, base: baseBranch };
+            writeFileSync(tmpFile, JSON.stringify(body), "utf-8");
+            try {
+                const curlArgs = [
+                    "-s",
+                    "-X",
+                    "POST",
+                    "-H",
+                    `Authorization: Bearer ${token}`,
+                    "-H",
+                    "Accept: application/vnd.github.v3+json",
+                    "-H",
+                    "Content-Type: application/json",
+                    "-d",
+                    `@${tmpFile}`,
+                    `https://api.github.com/repos/${repo}/pulls`,
+                ];
+                const output = execFileSync("curl", curlArgs, { encoding: "utf-8" }).trim();
+                try {
+                    const parsed = JSON.parse(output);
+                    if (parsed.html_url) {
+                        console.log(`  ✓ PR created: ${parsed.html_url}`);
+                    }
+                    else {
+                        console.error(`  ✗ PR creation response: ${output.slice(0, 300)}`);
+                    }
+                }
+                catch {
+                    console.error(`  ✗ Failed to parse PR response`);
+                }
+            }
+            finally {
+                try {
+                    const { unlinkSync } = await import("fs");
+                    unlinkSync(tmpFile);
+                }
+                catch {
+                    // ignore cleanup
+                }
+            }
+        }
+    }
+    catch (err) {
+        console.error(`  ✗ Git error: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    finally {
+        // Return to original branch
+        try {
+            runGit(["checkout", baseBranch]);
+        }
+        catch {
+            // If checkout fails, we're still on the fix branch
+        }
+    }
+}

package/dist/commands/fix-suggest.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Fix-suggest — Generate concrete code fix suggestions for findings.
+ */
+export declare function runFixSuggest(argv: string[]): void;

package/dist/commands/fix-suggest.js

@@ -0,0 +1,171 @@
+/**
+ * Fix-suggest — Generate concrete code fix suggestions for findings.
+ */
+import { readFileSync } from "fs";
+// ─── Fix patterns database ──────────────────────────────────────────────────
+const FIX_PATTERNS = {
+    "sql-injection": {
+        problem: "User input concatenated directly into SQL query string",
+        fixDesc: "Use parameterized queries with placeholders",
+        before: "db.query(`SELECT * FROM users WHERE id = ${userId}`)",
+        after: 'db.query("SELECT * FROM users WHERE id = ?", [userId])',
+        refs: ["https://cheatsheetseries.owasp.org/cheatsheets/Query_Parameterization_Cheat_Sheet.html"],
+    },
+    "xss-vulnerability": {
+        problem: "User-supplied data rendered without escaping",
+        fixDesc: "Sanitize output using context-appropriate encoding",
+        before: "element.innerHTML = userInput;",
+        after: "element.textContent = userInput;",
+        refs: ["https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html"],
+    },
+    "hardcoded-secret": {
+        problem: "Secret value hardcoded in source file",
+        fixDesc: "Move secret to environment variable or secrets manager",
+        before: 'const API_KEY = "sk-abc123...";',
+        after: "const API_KEY = process.env.API_KEY;",
+        refs: ["https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html"],
+    },
+    "path-traversal": {
+        problem: "File path constructed from user input without validation",
+        fixDesc: "Normalize path and validate it stays within allowed directory",
+        before: "const file = path.join(uploadDir, req.params.filename);",
+        after: "const file = path.join(uploadDir, path.basename(req.params.filename));",
+        refs: ["https://owasp.org/www-community/attacks/Path_Traversal"],
+    },
+    "insecure-random": {
+        problem: "Math.random() used for security-sensitive value",
+        fixDesc: "Use cryptographically secure random number generator",
+        before: "const token = Math.random().toString(36);",
+        after: 'const token = crypto.randomBytes(32).toString("hex");',
+        refs: ["CWE-338: Use of Cryptographically Weak PRNG"],
+    },
+    "missing-auth": {
+        problem: "Endpoint lacks authentication check",
+        fixDesc: "Add authentication middleware before handler",
+        before: "app.get('/api/data', handler);",
+        after: "app.get('/api/data', authMiddleware, handler);",
+        refs: ["https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html"],
+    },
+    "error-info-leak": {
+        problem: "Detailed error information sent to client",
+        fixDesc: "Return generic error response, log details server-side",
+        before: "res.status(500).json({ error: err.stack });",
+        after: 'res.status(500).json({ error: "Internal server error" });',
+        refs: ["https://cheatsheetseries.owasp.org/cheatsheets/Error_Handling_Cheat_Sheet.html"],
+    },
+    "unsafe-deserialization": {
+        problem: "Deserialization of untrusted data",
+        fixDesc: "Validate input format and use safe deserialization",
+        before: "const obj = eval('(' + input + ')');",
+        after: "const obj = JSON.parse(input);",
+        refs: ["https://cheatsheetseries.owasp.org/cheatsheets/Deserialization_Cheat_Sheet.html"],
+    },
+};
+// ─── Suggestion engine ─────────────────────────────────────────────────────
+function suggestFix(finding) {
+    const ruleId = finding.ruleId || "unknown";
+    const known = FIX_PATTERNS[ruleId];
+    if (known) {
+        return {
+            ruleId,
+            severity: finding.severity || "medium",
+            title: finding.title,
+            problem: known.problem,
+            fixDescription: known.fixDesc,
+            beforePattern: known.before,
+            afterPattern: known.after,
+            confidence: "high",
+            references: known.refs,
+        };
+    }
+    // Generate generic suggestion from finding data
+    return {
+        ruleId,
+        severity: finding.severity || "medium",
+        title: finding.title,
+        problem: finding.description || "Code pattern flagged for review",
+        fixDescription: finding.recommendation || "Apply the recommended fix pattern",
+        beforePattern: "",
+        afterPattern: "",
+        confidence: "medium",
+        references: [],
+    };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFixSuggest(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges fix-suggest — Generate concrete fix suggestions
+
+Usage:
+  judges fix-suggest --input verdict.json
+  judges fix-suggest --input verdict.json --rule sql-injection
+  judges fix-suggest --input verdict.json --severity critical
+  judges fix-suggest --format json
+
+Options:
+  --input <file>       TribunalVerdict JSON file (required)
+  --rule <id>          Suggest fixes only for a specific rule
+  --severity <level>   Filter by severity
+  --limit <n>          Maximum suggestions (default: 20)
+  --format json        JSON output
+  --help, -h           Show this help
+
+Generates concrete before/after code patterns for each finding,
+with links to OWASP/CWE references where applicable.
+`);
+        return;
+    }
+    const inputPath = argv.find((_a, i) => argv[i - 1] === "--input");
+    const ruleFilter = argv.find((_a, i) => argv[i - 1] === "--rule");
+    const sevFilter = argv.find((_a, i) => argv[i - 1] === "--severity");
+    const limitStr = argv.find((_a, i) => argv[i - 1] === "--limit");
+    const limit = limitStr ? parseInt(limitStr, 10) : 20;
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    if (!inputPath) {
+        console.error("Error: --input is required. Provide a verdict JSON file.");
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(inputPath, "utf-8"));
+    }
+    catch {
+        console.error(`Error: Cannot read or parse ${inputPath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let findings = verdict.findings || [];
+    if (ruleFilter)
+        findings = findings.filter((f) => f.ruleId === ruleFilter);
+    if (sevFilter)
+        findings = findings.filter((f) => f.severity === sevFilter);
+    findings = findings.slice(0, limit);
+    if (findings.length === 0) {
+        console.log("No findings to suggest fixes for.");
+        return;
+    }
+    const suggestions = findings.map(suggestFix);
+    if (format === "json") {
+        console.log(JSON.stringify({ count: suggestions.length, suggestions }, null, 2));
+        return;
+    }
+    console.log(`\n  Fix Suggestions (${suggestions.length})\n  ─────────────────────────────`);
+    for (const s of suggestions) {
+        const sevIcon = { critical: "🔴", high: "🟠", medium: "🟡", low: "🔵" };
+        const icon = sevIcon[s.severity] || "⬜";
+        console.log(`\n    ${icon} [${s.severity}] ${s.ruleId}: ${s.title}`);
+        console.log(`    Problem: ${s.problem}`);
+        console.log(`    Fix: ${s.fixDescription}`);
+        if (s.beforePattern) {
+            console.log(`    Before: ${s.beforePattern}`);
+            console.log(`    After:  ${s.afterPattern}`);
+        }
+        console.log(`    Confidence: ${s.confidence}`);
+        if (s.references.length > 0) {
+            console.log(`    References: ${s.references.join(", ")}`);
+        }
+    }
+    console.log();
+}

package/dist/commands/fix-verify.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Fix-verify — Re-run review on fixed code to confirm findings are resolved.
+ */
+export declare function runFixVerify(argv: string[]): void;