@kevinrabun/judges 3.109.0 → 3.111.0

package/dist/commands/finding-fix-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-fix-chain.js","sourceRoot":"","sources":["../../src/commands/finding-fix-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAgB5B,SAAS,WAAW,CAAC,OAAwB;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,kDAAkD;IAClD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA2B,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,YAAY,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEjC,IAAI,MAAc,CAAC;QACnB,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM,GAAG,8BAA8B,CAAC;aAC1D,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM,GAAG,6BAA6B,CAAC;;YAC9D,MAAM,GAAG,mBAAmB,CAAC;QAElC,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,OAAO,EAAE;YAClB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxF,eAAe,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;8CAO8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,MAAM,gBAAgB,CAAC,CAAC;IAEhE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,YAAY,CAAC,CAAC;QAC7F,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/finding-owner-notify.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingOwnerNotify(argv: string[]): void;
+//# sourceMappingURL=finding-owner-notify.d.ts.map

package/dist/commands/finding-owner-notify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-owner-notify.d.ts","sourceRoot":"","sources":["../../src/commands/finding-owner-notify.ts"],"names":[],"mappings":"AAgGA,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAyD1D"}

package/dist/commands/finding-owner-notify.js

@@ -0,0 +1,122 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+function loadOwnerMappings(mappingPath) {
+    if (!existsSync(mappingPath))
+        return [];
+    try {
+        const content = readFileSync(mappingPath, "utf-8");
+        // Support simple JSON format: [{ "pattern": "auth", "owners": ["@alice"] }]
+        return JSON.parse(content);
+    }
+    catch {
+        // Try CODEOWNERS-like format: pattern @owner1 @owner2
+        const lines = readFileSync(mappingPath, "utf-8").split("\n");
+        const mappings = [];
+        for (const line of lines) {
+            const trimmed = line.trim();
+            if (!trimmed || trimmed.startsWith("#"))
+                continue;
+            const parts = trimmed.split(/\s+/);
+            if (parts.length >= 2) {
+                mappings.push({ pattern: parts[0], owners: parts.slice(1) });
+            }
+        }
+        return mappings;
+    }
+}
+const SEVERITY_RANK = { critical: 5, high: 4, medium: 3, low: 2, info: 1 };
+function rankToSev(rank) {
+    if (rank >= 5)
+        return "critical";
+    if (rank >= 4)
+        return "high";
+    if (rank >= 3)
+        return "medium";
+    if (rank >= 2)
+        return "low";
+    return "info";
+}
+function buildNotifications(verdict, mappings) {
+    const ownerMap = new Map();
+    for (const f of verdict.findings ?? []) {
+        const ruleIdLower = f.ruleId.toLowerCase();
+        const titleLower = f.title.toLowerCase();
+        let matched = false;
+        for (const mapping of mappings) {
+            if (ruleIdLower.includes(mapping.pattern.toLowerCase()) || titleLower.includes(mapping.pattern.toLowerCase())) {
+                for (const owner of mapping.owners) {
+                    const entry = ownerMap.get(owner) ?? { findings: [], maxRank: 0 };
+                    entry.findings.push({ ruleId: f.ruleId, title: f.title, severity: f.severity });
+                    entry.maxRank = Math.max(entry.maxRank, SEVERITY_RANK[f.severity] ?? 0);
+                    ownerMap.set(owner, entry);
+                }
+                matched = true;
+                break;
+            }
+        }
+        if (!matched) {
+            const entry = ownerMap.get("unassigned") ?? { findings: [], maxRank: 0 };
+            entry.findings.push({ ruleId: f.ruleId, title: f.title, severity: f.severity });
+            entry.maxRank = Math.max(entry.maxRank, SEVERITY_RANK[f.severity] ?? 0);
+            ownerMap.set("unassigned", entry);
+        }
+    }
+    const results = [];
+    for (const [owner, data] of ownerMap) {
+        results.push({
+            owner,
+            findings: data.findings,
+            highestSeverity: rankToSev(data.maxRank),
+        });
+    }
+    results.sort((a, b) => (SEVERITY_RANK[b.highestSeverity] ?? 0) - (SEVERITY_RANK[a.highestSeverity] ?? 0));
+    return results;
+}
+export function runFindingOwnerNotify(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-owner-notify [options]
+
+Generate ownership-based notification lists for findings.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --owners <path>      Path to owner mapping file (JSON or CODEOWNERS format)
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    const ownersIdx = argv.indexOf("--owners");
+    const ownersPath = ownersIdx !== -1 && argv[ownersIdx + 1]
+        ? join(process.cwd(), argv[ownersIdx + 1])
+        : join(process.cwd(), ".judges", "owners.json");
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const mappings = loadOwnerMappings(ownersPath);
+    const notifications = buildNotifications(data, mappings);
+    if (format === "json") {
+        console.log(JSON.stringify(notifications, null, 2));
+        return;
+    }
+    console.log(`\n=== Owner Notifications (${notifications.length} owners) ===\n`);
+    if (notifications.length === 0) {
+        console.log("No findings to notify about.");
+        return;
+    }
+    for (const n of notifications) {
+        console.log(`  ${n.owner} (${n.findings.length} findings, highest: ${n.highestSeverity})`);
+        for (const f of n.findings) {
+            console.log(`    [${f.severity.toUpperCase()}] ${f.ruleId}: ${f.title}`);
+        }
+        console.log();
+    }
+}
+//# sourceMappingURL=finding-owner-notify.js.map

package/dist/commands/finding-owner-notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-owner-notify.js","sourceRoot":"","sources":["../../src/commands/finding-owner-notify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAoB5B,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACnD,4EAA4E;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;QACtD,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAmB,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAEnG,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACjC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/B,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAwB,EAAE,QAAwB;IAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwE,CAAC;IAEjG,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC9G,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;oBAClE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAChF,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;oBACxE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC7B,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACzE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChF,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACxE,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC;YACX,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;8CAQ8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAEpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEzD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,aAAa,CAAC,MAAM,gBAAgB,CAAC,CAAC;IAEhF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,uBAAuB,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/finding-patch-chain.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingPatchChain(argv: string[]): void;
+//# sourceMappingURL=finding-patch-chain.d.ts.map

package/dist/commands/finding-patch-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-patch-chain.d.ts","sourceRoot":"","sources":["../../src/commands/finding-patch-chain.ts"],"names":[],"mappings":"AA2EA,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsDzD"}

package/dist/commands/finding-patch-chain.js

@@ -0,0 +1,91 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+function buildPatchChains(verdict) {
+    const findings = verdict.findings ?? [];
+    const withPatches = [];
+    const withoutPatches = [];
+    for (const f of findings) {
+        const entry = {
+            ruleId: f.ruleId,
+            title: f.title,
+            severity: f.severity,
+            hasPatch: f.patch !== undefined && f.patch !== null,
+            patchPreview: f.patch !== undefined && f.patch !== null ? String(f.patch).slice(0, 80) : "",
+            lineNumbers: f.lineNumbers ?? [],
+        };
+        if (entry.hasPatch)
+            withPatches.push(entry);
+        else
+            withoutPatches.push(entry);
+    }
+    // Sort patches by line number (earliest first) for safe application order
+    withPatches.sort((a, b) => {
+        const aFirst = a.lineNumbers.length > 0 ? a.lineNumbers[0] : Infinity;
+        const bFirst = b.lineNumbers.length > 0 ? b.lineNumbers[0] : Infinity;
+        return bFirst - aFirst; // Apply from bottom up to avoid line shifts
+    });
+    const groups = [];
+    if (withPatches.length > 0) {
+        groups.push({
+            groupId: 1,
+            label: "Patchable findings (apply bottom-up)",
+            entries: withPatches,
+            applyOrder: "Apply from highest line number to lowest to avoid line shifts",
+        });
+    }
+    if (withoutPatches.length > 0) {
+        groups.push({
+            groupId: groups.length + 1,
+            label: "Manual fixes required",
+            entries: withoutPatches,
+            applyOrder: "Fix in any order — no auto-patches available",
+        });
+    }
+    return groups;
+}
+export function runFindingPatchChain(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-patch-chain [options]
+
+Link and order patches across findings for safe application.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const groups = buildPatchChains(data);
+    if (format === "json") {
+        console.log(JSON.stringify(groups, null, 2));
+        return;
+    }
+    const totalPatched = groups.filter((g) => g.label.includes("Patchable")).reduce((s, g) => s + g.entries.length, 0);
+    const totalManual = groups.filter((g) => g.label.includes("Manual")).reduce((s, g) => s + g.entries.length, 0);
+    console.log(`\n=== Patch Chain (${totalPatched} patchable, ${totalManual} manual) ===\n`);
+    for (const group of groups) {
+        console.log(`  Group #${group.groupId}: ${group.label}`);
+        console.log(`  Order: ${group.applyOrder}\n`);
+        for (const e of group.entries) {
+            const lines = e.lineNumbers.length > 0 ? ` (L${e.lineNumbers.join(",")})` : "";
+            console.log(`    [${e.severity.toUpperCase()}] ${e.ruleId}${lines}`);
+            console.log(`           ${e.title}`);
+            if (e.patchPreview) {
+                console.log(`           Patch: ${e.patchPreview}...`);
+            }
+        }
+        console.log();
+    }
+}
+//# sourceMappingURL=finding-patch-chain.js.map

package/dist/commands/finding-patch-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-patch-chain.js","sourceRoot":"","sources":["../../src/commands/finding-patch-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAyB5B,SAAS,gBAAgB,CAAC,OAAwB;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,cAAc,GAAiB,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAe;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YACnD,YAAY,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3F,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;SACjC,CAAC;QAEF,IAAI,KAAK,CAAC,QAAQ;YAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YACvC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,0EAA0E;IAC1E,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtE,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtE,OAAO,MAAM,GAAG,MAAM,CAAC,CAAC,4CAA4C;IACtE,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,+DAA+D;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;YAC1B,KAAK,EAAE,uBAAuB;YAC9B,OAAO,EAAE,cAAc;YACvB,UAAU,EAAE,8CAA8C;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAc;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;8CAO8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAEtC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnH,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE/G,OAAO,CAAC,GAAG,CAAC,sBAAsB,YAAY,eAAe,WAAW,gBAAgB,CAAC,CAAC;IAE1F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;QAE9C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/finding-resolution-workflow.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingResolutionWorkflow(argv: string[]): void;
+//# sourceMappingURL=finding-resolution-workflow.d.ts.map

package/dist/commands/finding-resolution-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-resolution-workflow.d.ts","sourceRoot":"","sources":["../../src/commands/finding-resolution-workflow.ts"],"names":[],"mappings":"AA+EA,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA6CjE"}

package/dist/commands/finding-resolution-workflow.js

@@ -0,0 +1,92 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+const WORKFLOWS = {
+    critical: [
+        { step: 1, action: "Acknowledge finding and assign owner", required: true },
+        { step: 2, action: "Create incident ticket", required: true },
+        { step: 3, action: "Analyze root cause", required: true },
+        { step: 4, action: "Implement fix", required: true },
+        { step: 5, action: "Peer review the fix", required: true },
+        { step: 6, action: "Run regression tests", required: true },
+        { step: 7, action: "Deploy hotfix", required: true },
+        { step: 8, action: "Post-mortem review", required: false },
+    ],
+    high: [
+        { step: 1, action: "Assign to sprint backlog", required: true },
+        { step: 2, action: "Analyze root cause", required: true },
+        { step: 3, action: "Implement fix", required: true },
+        { step: 4, action: "Code review", required: true },
+        { step: 5, action: "Run tests", required: true },
+        { step: 6, action: "Deploy in next release", required: true },
+    ],
+    medium: [
+        { step: 1, action: "Add to backlog", required: true },
+        { step: 2, action: "Fix during regular development", required: true },
+        { step: 3, action: "Verify fix", required: true },
+        { step: 4, action: "Update documentation if needed", required: false },
+    ],
+    low: [
+        { step: 1, action: "Log for future cleanup", required: true },
+        { step: 2, action: "Fix during refactoring", required: false },
+        { step: 3, action: "Verify after fix", required: false },
+    ],
+    info: [
+        { step: 1, action: "Review and acknowledge", required: true },
+        { step: 2, action: "Address if convenient", required: false },
+    ],
+};
+function generateWorkflows(verdict) {
+    const results = [];
+    for (const f of verdict.findings ?? []) {
+        const steps = WORKFLOWS[f.severity] ?? WORKFLOWS["medium"];
+        results.push({
+            ruleId: f.ruleId,
+            title: f.title,
+            severity: f.severity,
+            workflow: `${f.severity}-resolution`,
+            steps,
+        });
+    }
+    const severityOrder = { critical: 5, high: 4, medium: 3, low: 2, info: 1 };
+    results.sort((a, b) => (severityOrder[b.severity] ?? 0) - (severityOrder[a.severity] ?? 0));
+    return results;
+}
+export function runFindingResolutionWorkflow(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-resolution-workflow [options]
+
+Generate resolution workflows for findings.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const workflows = generateWorkflows(data);
+    if (format === "json") {
+        console.log(JSON.stringify(workflows, null, 2));
+        return;
+    }
+    console.log(`\n=== Resolution Workflows (${workflows.length} findings) ===\n`);
+    for (const wf of workflows) {
+        console.log(`  [${wf.severity.toUpperCase()}] ${wf.ruleId}: ${wf.title}`);
+        for (const s of wf.steps) {
+            const req = s.required ? "*" : " ";
+            console.log(`    ${req} ${s.step}. ${s.action}`);
+        }
+        console.log();
+    }
+}
+//# sourceMappingURL=finding-resolution-workflow.js.map

package/dist/commands/finding-resolution-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-resolution-workflow.js","sourceRoot":"","sources":["../../src/commands/finding-resolution-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAuB5B,MAAM,SAAS,GAAmC;IAChD,QAAQ,EAAE;QACR,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,sCAAsC,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3E,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7D,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE;QACpD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1D,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3D,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE;QACpD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE;KAC3D;IACD,IAAI,EAAE;QACJ,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC/D,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE;QACpD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE;QAClD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE;QAChD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9D;IACD,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;QACjD,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,gCAAgC,EAAE,QAAQ,EAAE,KAAK,EAAE;KACvE;IACD,GAAG,EAAE;QACH,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7D,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC9D,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE;KACzD;IACD,IAAI,EAAE;QACJ,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7D,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,EAAE;KAC9D;CACF,CAAC;AAEF,SAAS,iBAAiB,CAAC,OAAwB;IACjD,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,aAAa;YACpC,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,MAAM,aAAa,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACnG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAc;IACzD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;8CAO8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE1C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,SAAS,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAE/E,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/finding-risk-label.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingRiskLabel(argv: string[]): void;
+//# sourceMappingURL=finding-risk-label.d.ts.map

package/dist/commands/finding-risk-label.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-risk-label.d.ts","sourceRoot":"","sources":["../../src/commands/finding-risk-label.ts"],"names":[],"mappings":"AAuDA,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAiDxD"}

package/dist/commands/finding-risk-label.js

@@ -0,0 +1,73 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+const RISK_PATTERNS = {
+    exploitable: ["injection", "xss", "rce", "deserialization", "ssrf", "command"],
+    "data-loss": ["leak", "exposure", "pii", "secret", "credential", "token"],
+    compliance: ["audit", "log", "gdpr", "hipaa", "pci", "compliance", "license"],
+    operational: ["perf", "memory", "timeout", "resource", "deadlock", "crash"],
+    reputational: ["quality", "smell", "complexity", "dead-code", "duplicate"],
+};
+function labelFindings(verdict) {
+    const results = [];
+    for (const f of verdict.findings ?? []) {
+        const combined = (f.ruleId + " " + f.title).toLowerCase();
+        const labels = [];
+        for (const [category, patterns] of Object.entries(RISK_PATTERNS)) {
+            for (const pattern of patterns) {
+                if (combined.includes(pattern)) {
+                    labels.push(category);
+                    break;
+                }
+            }
+        }
+        // High/critical severity without specific match gets "operational"
+        if (labels.length === 0 && (f.severity === "critical" || f.severity === "high")) {
+            labels.push("operational");
+        }
+        results.push({ ruleId: f.ruleId, title: f.title, severity: f.severity, riskLabels: labels });
+    }
+    results.sort((a, b) => b.riskLabels.length - a.riskLabels.length);
+    return results;
+}
+export function runFindingRiskLabel(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-risk-label [options]
+
+Label findings with risk categories.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const labeled = labelFindings(data);
+    if (format === "json") {
+        console.log(JSON.stringify(labeled, null, 2));
+        return;
+    }
+    const withLabels = labeled.filter((l) => l.riskLabels.length > 0);
+    console.log(`\n=== Risk Labels (${withLabels.length} labeled of ${labeled.length} findings) ===\n`);
+    if (withLabels.length === 0) {
+        console.log("No risk labels matched.");
+        return;
+    }
+    for (const entry of withLabels) {
+        console.log(`  ${entry.severity.toUpperCase().padEnd(9)} ${entry.ruleId}`);
+        console.log(`           ${entry.title}`);
+        console.log(`           Labels: ${entry.riskLabels.join(", ")}`);
+        console.log();
+    }
+}
+//# sourceMappingURL=finding-risk-label.js.map

package/dist/commands/finding-risk-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-risk-label.js","sourceRoot":"","sources":["../../src/commands/finding-risk-label.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAkB5B,MAAM,aAAa,GAAmC;IACpD,WAAW,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,CAAC;IAC9E,WAAW,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC;IACzE,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC;IAC7E,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC;IAC3E,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC;CAC3E,CAAC;AAEF,SAAS,aAAa,CAAC,OAAwB;IAC7C,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAmB,EAAE,CAAC;QAElC,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACjE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,QAAwB,CAAC,CAAC;oBACtC,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YAChF,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;8CAO8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEpC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,CAAC,MAAM,eAAe,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAEpG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/review-config-health.d.ts

@@ -0,0 +1,2 @@
+export declare function runReviewConfigHealth(argv: string[]): void;
+//# sourceMappingURL=review-config-health.d.ts.map

package/dist/commands/review-config-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-config-health.d.ts","sourceRoot":"","sources":["../../src/commands/review-config-health.ts"],"names":[],"mappings":"AA6JA,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAuC1D"}

package/dist/commands/review-config-health.js

@@ -0,0 +1,173 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+function assessHealth(projectDir) {
+    const checks = [];
+    // Check for config file
+    const configPaths = [".judgesrc", ".judgesrc.json", "judges.config.json"];
+    const foundConfig = configPaths.find((p) => existsSync(join(projectDir, p)));
+    if (!foundConfig) {
+        checks.push({
+            check: "Config file",
+            status: "error",
+            detail: "No configuration file found",
+            suggestion: "Run `judges init` to create a configuration file",
+        });
+    }
+    else {
+        try {
+            const raw = readFileSync(join(projectDir, foundConfig), "utf-8");
+            const cfg = JSON.parse(raw);
+            checks.push({
+                check: "Config file",
+                status: "healthy",
+                detail: `Found ${foundConfig}`,
+                suggestion: "",
+            });
+            // Check preset
+            if (!cfg["preset"]) {
+                checks.push({
+                    check: "Preset configured",
+                    status: "warning",
+                    detail: "No preset defined",
+                    suggestion: "Add a preset like 'security', 'quality', or 'full' for optimized defaults",
+                });
+            }
+            else {
+                checks.push({
+                    check: "Preset configured",
+                    status: "healthy",
+                    detail: `Preset: ${String(cfg["preset"])}`,
+                    suggestion: "",
+                });
+            }
+            // Check minSeverity
+            if (!cfg["minSeverity"]) {
+                checks.push({
+                    check: "Minimum severity",
+                    status: "warning",
+                    detail: "No minSeverity set — all severities reported",
+                    suggestion: "Set minSeverity to 'low' or 'medium' to reduce noise",
+                });
+            }
+            else {
+                checks.push({
+                    check: "Minimum severity",
+                    status: "healthy",
+                    detail: `minSeverity: ${String(cfg["minSeverity"])}`,
+                    suggestion: "",
+                });
+            }
+            // Check disabled judges
+            const disabled = cfg["disabledJudges"];
+            if (Array.isArray(disabled) && disabled.length > 5) {
+                checks.push({
+                    check: "Disabled judges",
+                    status: "warning",
+                    detail: `${disabled.length} judges disabled`,
+                    suggestion: "Consider using a different preset instead of disabling many judges",
+                });
+            }
+            else {
+                checks.push({
+                    check: "Disabled judges",
+                    status: "healthy",
+                    detail: Array.isArray(disabled) ? `${disabled.length} disabled` : "None disabled",
+                    suggestion: "",
+                });
+            }
+            // Check rule overrides
+            const overrides = cfg["ruleOverrides"];
+            if (overrides && typeof overrides === "object") {
+                const count = Object.keys(overrides).length;
+                checks.push({
+                    check: "Rule overrides",
+                    status: count > 20 ? "warning" : "healthy",
+                    detail: `${count} rule overrides`,
+                    suggestion: count > 20 ? "Many overrides — consider adjusting preset instead" : "",
+                });
+            }
+        }
+        catch {
+            checks.push({
+                check: "Config parseable",
+                status: "error",
+                detail: `Config file ${foundConfig} has syntax errors`,
+                suggestion: "Fix JSON syntax in the config file",
+            });
+        }
+    }
+    // Check .judges directory
+    const judgesDir = join(projectDir, ".judges");
+    if (!existsSync(judgesDir)) {
+        checks.push({
+            check: "Judges directory",
+            status: "warning",
+            detail: "No .judges directory found",
+            suggestion: "Run a review to create the .judges directory with results",
+        });
+    }
+    else {
+        checks.push({
+            check: "Judges directory",
+            status: "healthy",
+            detail: ".judges directory exists",
+            suggestion: "",
+        });
+    }
+    // Check .gitignore includes .judges
+    const gitignorePath = join(projectDir, ".gitignore");
+    if (existsSync(gitignorePath)) {
+        const gitignore = readFileSync(gitignorePath, "utf-8");
+        if (!gitignore.includes(".judges")) {
+            checks.push({
+                check: "Gitignore",
+                status: "warning",
+                detail: ".judges not in .gitignore",
+                suggestion: "Add .judges/ to .gitignore to avoid committing review artifacts",
+            });
+        }
+        else {
+            checks.push({
+                check: "Gitignore",
+                status: "healthy",
+                detail: ".judges directory excluded from git",
+                suggestion: "",
+            });
+        }
+    }
+    return checks;
+}
+export function runReviewConfigHealth(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges review-config-health [options]
+
+Assess configuration health and suggest improvements.
+
+Options:
+  --dir <path>         Project directory (default: current)
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const dirIdx = argv.indexOf("--dir");
+    const projectDir = dirIdx !== -1 && argv[dirIdx + 1] ? join(process.cwd(), argv[dirIdx + 1]) : process.cwd();
+    const checks = assessHealth(projectDir);
+    if (format === "json") {
+        console.log(JSON.stringify(checks, null, 2));
+        return;
+    }
+    const errors = checks.filter((c) => c.status === "error").length;
+    const warnings = checks.filter((c) => c.status === "warning").length;
+    const healthy = checks.filter((c) => c.status === "healthy").length;
+    console.log(`\n=== Config Health (${healthy} healthy, ${warnings} warnings, ${errors} errors) ===\n`);
+    for (const c of checks) {
+        const icon = c.status === "healthy" ? "✓" : c.status === "warning" ? "!" : "✗";
+        console.log(`  ${icon} ${c.check}: ${c.detail}`);
+        if (c.suggestion) {
+            console.log(`    → ${c.suggestion}`);
+        }
+    }
+}
+//# sourceMappingURL=review-config-health.js.map