@kevinrabun/judges 3.110.0 → 3.112.0

package/dist/commands/finding-auto-priority.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingAutoPriority(argv: string[]): void;
+//# sourceMappingURL=finding-auto-priority.d.ts.map

package/dist/commands/finding-auto-priority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-auto-priority.d.ts","sourceRoot":"","sources":["../../src/commands/finding-auto-priority.ts"],"names":[],"mappings":"AAqFA,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAkD3D"}

package/dist/commands/finding-auto-priority.js

@@ -0,0 +1,101 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+const SEVERITY_WEIGHT = {
+    critical: 10,
+    high: 8,
+    medium: 5,
+    low: 3,
+    info: 1,
+};
+function prioritize(verdict) {
+    const results = [];
+    for (const f of verdict.findings ?? []) {
+        const factors = [];
+        let score = 0;
+        // Severity factor
+        const sevWeight = SEVERITY_WEIGHT[f.severity] ?? 3;
+        score += sevWeight;
+        factors.push(`severity=${f.severity} (+${sevWeight})`);
+        // Confidence factor
+        if (f.confidence !== undefined && f.confidence !== null) {
+            const confBoost = f.confidence >= 0.9 ? 3 : f.confidence >= 0.7 ? 2 : 1;
+            score += confBoost;
+            factors.push(`confidence=${f.confidence} (+${confBoost})`);
+        }
+        // Patch availability factor
+        if (f.patch !== undefined && f.patch !== null) {
+            score += 2;
+            factors.push("patch available (+2)");
+        }
+        // Short recommendation = likely simple fix = higher priority
+        if (f.recommendation.length < 100) {
+            score += 1;
+            factors.push("simple recommendation (+1)");
+        }
+        let priorityLabel;
+        if (score >= 12)
+            priorityLabel = "P0 — Immediate";
+        else if (score >= 9)
+            priorityLabel = "P1 — High";
+        else if (score >= 6)
+            priorityLabel = "P2 — Normal";
+        else if (score >= 3)
+            priorityLabel = "P3 — Low";
+        else
+            priorityLabel = "P4 — Backlog";
+        results.push({
+            rank: 0,
+            ruleId: f.ruleId,
+            title: f.title,
+            severity: f.severity,
+            priorityScore: score,
+            priorityLabel,
+            factors,
+        });
+    }
+    results.sort((a, b) => b.priorityScore - a.priorityScore);
+    for (let i = 0; i < results.length; i++) {
+        results[i].rank = i + 1;
+    }
+    return results;
+}
+export function runFindingAutoPriority(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-auto-priority [options]
+
+Auto-prioritize findings with multi-factor scoring.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const prioritized = prioritize(data);
+    if (format === "json") {
+        console.log(JSON.stringify(prioritized, null, 2));
+        return;
+    }
+    console.log(`\n=== Auto Priority (${prioritized.length} findings) ===\n`);
+    if (prioritized.length === 0) {
+        console.log("No findings to prioritize.");
+        return;
+    }
+    console.log("  " + "#".padEnd(4) + "Score".padEnd(8) + "Priority".padEnd(18) + "Rule ID");
+    console.log("  " + "-".repeat(55));
+    for (const p of prioritized) {
+        console.log("  " + String(p.rank).padEnd(4) + String(p.priorityScore).padEnd(8) + p.priorityLabel.padEnd(18) + p.ruleId);
+    }
+}
+//# sourceMappingURL=finding-auto-priority.js.map

package/dist/commands/finding-auto-priority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-auto-priority.js","sourceRoot":"","sources":["../../src/commands/finding-auto-priority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAmB5B,MAAM,eAAe,GAA2B;IAC9C,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,SAAS,UAAU,CAAC,OAAwB;IAC1C,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,kBAAkB;QAClB,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,IAAI,SAAS,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,MAAM,SAAS,GAAG,CAAC,CAAC;QAEvD,oBAAoB;QACpB,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,KAAK,IAAI,SAAS,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,UAAU,MAAM,SAAS,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9C,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACvC,CAAC;QAED,6DAA6D;QAC7D,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAClC,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,aAAqB,CAAC;QAC1B,IAAI,KAAK,IAAI,EAAE;YAAE,aAAa,GAAG,gBAAgB,CAAC;aAC7C,IAAI,KAAK,IAAI,CAAC;YAAE,aAAa,GAAG,WAAW,CAAC;aAC5C,IAAI,KAAK,IAAI,CAAC;YAAE,aAAa,GAAG,aAAa,CAAC;aAC9C,IAAI,KAAK,IAAI,CAAC;YAAE,aAAa,GAAG,UAAU,CAAC;;YAC3C,aAAa,GAAG,cAAc,CAAC;QAEpC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,aAAa,EAAE,KAAK;YACpB,aAAa;YACb,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;8CAO8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,WAAW,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAE1E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CACT,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/commands/finding-cluster-summary.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingClusterSummary(argv: string[]): void;
+//# sourceMappingURL=finding-cluster-summary.d.ts.map

package/dist/commands/finding-cluster-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-cluster-summary.d.ts","sourceRoot":"","sources":["../../src/commands/finding-cluster-summary.ts"],"names":[],"mappings":"AA4EA,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsD7D"}

package/dist/commands/finding-cluster-summary.js

@@ -0,0 +1,86 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+function extractDomain(ruleId) {
+    const parts = ruleId.split("/");
+    return parts.length > 1 ? parts[0] : "general";
+}
+function clusterFindings(verdict) {
+    const domainMap = {};
+    for (const f of verdict.findings ?? []) {
+        const domain = extractDomain(f.ruleId);
+        if (!domainMap[domain]) {
+            domainMap[domain] = { count: 0, severities: {}, rules: {} };
+        }
+        domainMap[domain].count += 1;
+        domainMap[domain].severities[f.severity] = (domainMap[domain].severities[f.severity] ?? 0) + 1;
+        domainMap[domain].rules[f.ruleId] = (domainMap[domain].rules[f.ruleId] ?? 0) + 1;
+    }
+    const clusters = [];
+    for (const [domain, data] of Object.entries(domainMap)) {
+        const topRules = Object.entries(data.rules)
+            .map(([ruleId, count]) => ({ ruleId, count }))
+            .sort((a, b) => b.count - a.count)
+            .slice(0, 5);
+        const dominantSeverity = Object.entries(data.severities).sort((a, b) => b[1] - a[1])[0];
+        const summary = dominantSeverity
+            ? `${data.count} findings, predominantly ${dominantSeverity[0]} severity (${dominantSeverity[1]}). Top rule: ${topRules[0]?.ruleId ?? "unknown"}`
+            : `${data.count} findings in ${domain}`;
+        clusters.push({
+            domain,
+            count: data.count,
+            severityCounts: data.severities,
+            topRules,
+            summary,
+        });
+    }
+    clusters.sort((a, b) => b.count - a.count);
+    const total = verdict.findings?.length ?? 0;
+    return { totalFindings: total, clusterCount: clusters.length, clusters };
+}
+export function runFindingClusterSummary(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-cluster-summary [options]
+
+Summarise finding clusters by domain/rule-prefix.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const report = clusterFindings(data);
+    if (format === "json") {
+        console.log(JSON.stringify(report, null, 2));
+        return;
+    }
+    console.log(`\n=== Finding Clusters (${report.clusterCount} domains, ${report.totalFindings} findings) ===\n`);
+    if (report.clusters.length === 0) {
+        console.log("No findings to cluster.");
+        return;
+    }
+    for (const c of report.clusters) {
+        const severityBar = Object.entries(c.severityCounts)
+            .map(([s, n]) => `${s}:${n}`)
+            .join(" ");
+        console.log(`  [${c.domain}] ${c.count} findings (${severityBar})`);
+        console.log(`           ${c.summary}`);
+        if (c.topRules.length > 1) {
+            const ruleList = c.topRules.map((r) => `${r.ruleId}(${r.count})`).join(", ");
+            console.log(`           Top rules: ${ruleList}`);
+        }
+        console.log();
+    }
+}
+//# sourceMappingURL=finding-cluster-summary.js.map

package/dist/commands/finding-cluster-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-cluster-summary.js","sourceRoot":"","sources":["../../src/commands/finding-cluster-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAuB5B,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CAAC,OAAwB;IAC/C,MAAM,SAAS,GAGX,EAAE,CAAC;IAEP,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAEvC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC9D,CAAC;QAED,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC7B,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/F,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,QAAQ,GAAqB,EAAE,CAAC;IAEtC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aACjC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEf,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAExF,MAAM,OAAO,GAAG,gBAAgB;YAC9B,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,4BAA4B,gBAAgB,CAAC,CAAC,CAAC,cAAc,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS,EAAE;YACjJ,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,gBAAgB,MAAM,EAAE,CAAC;QAE1C,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,UAAU;YAC/B,QAAQ;YACR,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAE3C,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;IAC5C,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAc;IACrD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;8CAO8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,aAAa,kBAAkB,CAAC,CAAC;IAE/G,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;aACjD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,cAAc,WAAW,GAAG,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/finding-context-link.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingContextLink(argv: string[]): void;
+//# sourceMappingURL=finding-context-link.d.ts.map

package/dist/commands/finding-context-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-context-link.d.ts","sourceRoot":"","sources":["../../src/commands/finding-context-link.ts"],"names":[],"mappings":"AA8EA,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAkD1D"}

package/dist/commands/finding-context-link.js

@@ -0,0 +1,95 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+const DEFAULT_DOC_INDEX = {
+    injection: [
+        { category: "OWASP", title: "Injection Prevention", path: "docs/owasp-injection.md" },
+        { category: "CWE", title: "CWE-89 SQL Injection", path: "docs/cwe-89.md" },
+    ],
+    xss: [
+        { category: "OWASP", title: "XSS Prevention", path: "docs/owasp-xss.md" },
+        { category: "CWE", title: "CWE-79 Cross-Site Scripting", path: "docs/cwe-79.md" },
+    ],
+    auth: [
+        { category: "OWASP", title: "Authentication Best Practices", path: "docs/owasp-auth.md" },
+        { category: "CWE", title: "CWE-287 Improper Authentication", path: "docs/cwe-287.md" },
+    ],
+    crypto: [
+        { category: "OWASP", title: "Cryptographic Failures", path: "docs/owasp-crypto.md" },
+        { category: "CWE", title: "CWE-327 Broken Crypto", path: "docs/cwe-327.md" },
+    ],
+    access: [
+        { category: "OWASP", title: "Broken Access Control", path: "docs/owasp-access.md" },
+        { category: "CWE", title: "CWE-284 Access Control", path: "docs/cwe-284.md" },
+    ],
+    quality: [{ category: "Guide", title: "Code Quality Guidelines", path: "docs/quality-guide.md" }],
+};
+function loadDocIndex(indexPath) {
+    if (indexPath && existsSync(indexPath)) {
+        try {
+            return JSON.parse(readFileSync(indexPath, "utf-8"));
+        }
+        catch {
+            console.log("Warning: could not parse doc index, using defaults");
+        }
+    }
+    return DEFAULT_DOC_INDEX;
+}
+function linkFindings(verdict, docIndex) {
+    const results = [];
+    for (const f of verdict.findings ?? []) {
+        const combined = (f.ruleId + " " + f.title).toLowerCase();
+        const refs = [];
+        for (const [keyword, docs] of Object.entries(docIndex)) {
+            if (combined.includes(keyword)) {
+                for (const doc of docs)
+                    refs.push(doc);
+            }
+        }
+        results.push({ ruleId: f.ruleId, title: f.title, severity: f.severity, references: refs });
+    }
+    results.sort((a, b) => b.references.length - a.references.length);
+    return results;
+}
+export function runFindingContextLink(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-context-link [options]
+
+Link findings to relevant documentation.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --docs <path>        Path to custom documentation index JSON
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    const docsIdx = argv.indexOf("--docs");
+    const docsPath = docsIdx !== -1 && argv[docsIdx + 1] ? join(process.cwd(), argv[docsIdx + 1]) : undefined;
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const docIndex = loadDocIndex(docsPath);
+    const linked = linkFindings(data, docIndex);
+    if (format === "json") {
+        console.log(JSON.stringify(linked, null, 2));
+        return;
+    }
+    const withRefs = linked.filter((l) => l.references.length > 0);
+    console.log(`\n=== Context Links (${withRefs.length} linked of ${linked.length} findings) ===\n`);
+    for (const entry of withRefs) {
+        console.log(`  [${entry.severity.toUpperCase()}] ${entry.ruleId}: ${entry.title}`);
+        for (const ref of entry.references) {
+            console.log(`    [${ref.category}] ${ref.title} — ${ref.path}`);
+        }
+        console.log();
+    }
+}
+//# sourceMappingURL=finding-context-link.js.map

package/dist/commands/finding-context-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-context-link.js","sourceRoot":"","sources":["../../src/commands/finding-context-link.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAsB5B,MAAM,iBAAiB,GAAmC;IACxD,SAAS,EAAE;QACT,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,yBAAyB,EAAE;QACrF,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,gBAAgB,EAAE;KAC3E;IACD,GAAG,EAAE;QACH,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,EAAE;QACzE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,IAAI,EAAE,gBAAgB,EAAE;KAClF;IACD,IAAI,EAAE;QACJ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACzF,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,IAAI,EAAE,iBAAiB,EAAE;KACvF;IACD,MAAM,EAAE;QACN,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,sBAAsB,EAAE;QACpF,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,iBAAiB,EAAE;KAC7E;IACD,MAAM,EAAE;QACN,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,sBAAsB,EAAE;QACnF,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,iBAAiB,EAAE;KAC9E;IACD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;CAClG,CAAC;AAEF,SAAS,YAAY,CAAC,SAA6B;IACjD,IAAI,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAmC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,OAAwB,EAAE,QAAwC;IACtF,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAmB,EAAE,CAAC;QAEhC,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,KAAK,MAAM,GAAG,IAAI,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;8CAQ8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1G,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE5C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,MAAM,cAAc,MAAM,CAAC,MAAM,kBAAkB,CAAC,CAAC;IAElG,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/finding-dependency-impact.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingDependencyImpact(argv: string[]): void;
+//# sourceMappingURL=finding-dependency-impact.d.ts.map

package/dist/commands/finding-dependency-impact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-dependency-impact.d.ts","sourceRoot":"","sources":["../../src/commands/finding-dependency-impact.ts"],"names":[],"mappings":"AAiFA,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAmD/D"}

package/dist/commands/finding-dependency-impact.js

@@ -0,0 +1,98 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+const DEP_PATTERNS = [
+    "dependency",
+    "dep-",
+    "package",
+    "npm",
+    "import",
+    "require",
+    "module",
+    "library",
+    "vendor",
+    "third-party",
+    "outdated",
+    "vulnerable",
+    "cve",
+    "supply-chain",
+];
+function analyzeDependencyImpact(verdict) {
+    const findings = [];
+    for (const f of verdict.findings ?? []) {
+        const combined = (f.ruleId + " " + f.title + " " + f.recommendation).toLowerCase();
+        const isDep = DEP_PATTERNS.some((p) => combined.includes(p));
+        let impactLevel;
+        if (f.severity === "critical")
+            impactLevel = "Critical — immediate action required";
+        else if (f.severity === "high")
+            impactLevel = "High — affects production security";
+        else if (isDep)
+            impactLevel = "Moderate — dependency risk present";
+        else
+            impactLevel = "Low — minimal dependency impact";
+        findings.push({
+            ruleId: f.ruleId,
+            title: f.title,
+            severity: f.severity,
+            isDependencyRelated: isDep,
+            impactLevel,
+            recommendation: f.recommendation,
+        });
+    }
+    const depFindings = findings.filter((f) => f.isDependencyRelated);
+    findings.sort((a, b) => {
+        if (a.isDependencyRelated && !b.isDependencyRelated)
+            return -1;
+        if (!a.isDependencyRelated && b.isDependencyRelated)
+            return 1;
+        return 0;
+    });
+    return {
+        totalFindings: findings.length,
+        dependencyFindings: depFindings.length,
+        percentage: findings.length > 0 ? Math.round((depFindings.length / findings.length) * 100) : 0,
+        findings,
+    };
+}
+export function runFindingDependencyImpact(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-dependency-impact [options]
+
+Show impact of dependency-related findings.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const impact = analyzeDependencyImpact(data);
+    if (format === "json") {
+        console.log(JSON.stringify(impact, null, 2));
+        return;
+    }
+    console.log(`\n=== Dependency Impact (${impact.dependencyFindings}/${impact.totalFindings} = ${impact.percentage}%) ===\n`);
+    const depFindings = impact.findings.filter((f) => f.isDependencyRelated);
+    if (depFindings.length === 0) {
+        console.log("No dependency-related findings detected.");
+        return;
+    }
+    for (const f of depFindings) {
+        console.log(`  [${f.severity.toUpperCase()}] ${f.ruleId}`);
+        console.log(`           ${f.title}`);
+        console.log(`           Impact: ${f.impactLevel}`);
+        console.log();
+    }
+}
+//# sourceMappingURL=finding-dependency-impact.js.map

package/dist/commands/finding-dependency-impact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-dependency-impact.js","sourceRoot":"","sources":["../../src/commands/finding-dependency-impact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAyB5B,MAAM,YAAY,GAAG;IACnB,YAAY;IACZ,MAAM;IACN,SAAS;IACT,KAAK;IACL,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,aAAa;IACb,UAAU;IACV,YAAY;IACZ,KAAK;IACL,cAAc;CACf,CAAC;AAEF,SAAS,uBAAuB,CAAC,OAAwB;IACvD,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;YAAE,WAAW,GAAG,sCAAsC,CAAC;aAC/E,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,WAAW,GAAG,oCAAoC,CAAC;aAC9E,IAAI,KAAK;YAAE,WAAW,GAAG,oCAAoC,CAAC;;YAC9D,WAAW,GAAG,iCAAiC,CAAC;QAErD,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,mBAAmB,EAAE,KAAK;YAC1B,WAAW;YACX,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAClE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,CAAC,mBAAmB;YAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,mBAAmB;YAAE,OAAO,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,kBAAkB,EAAE,WAAW,CAAC,MAAM;QACtC,UAAU,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAc;IACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;8CAO8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAE7C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CACT,4BAA4B,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,aAAa,MAAM,MAAM,CAAC,UAAU,UAAU,CAC/G,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACzE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/finding-fix-estimate.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingFixEstimate(argv: string[]): void;
+//# sourceMappingURL=finding-fix-estimate.d.ts.map

package/dist/commands/finding-fix-estimate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-fix-estimate.d.ts","sourceRoot":"","sources":["../../src/commands/finding-fix-estimate.ts"],"names":[],"mappings":"AAsDA,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA2E1D"}

package/dist/commands/finding-fix-estimate.js

@@ -0,0 +1,96 @@
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+function estimateFixTime(finding) {
+    const hasPatch = finding.patch !== undefined && finding.patch !== null;
+    const recLength = finding.recommendation.length;
+    let baseMinutes;
+    if (finding.severity === "critical")
+        baseMinutes = 120;
+    else if (finding.severity === "high")
+        baseMinutes = 60;
+    else if (finding.severity === "medium")
+        baseMinutes = 30;
+    else if (finding.severity === "low")
+        baseMinutes = 15;
+    else
+        baseMinutes = 10;
+    if (hasPatch)
+        baseMinutes = Math.round(baseMinutes * 0.4);
+    if (recLength > 200)
+        baseMinutes = Math.round(baseMinutes * 1.2);
+    let label;
+    if (baseMinutes <= 10)
+        label = "trivial (~10 min)";
+    else if (baseMinutes <= 30)
+        label = "quick (~30 min)";
+    else if (baseMinutes <= 60)
+        label = "moderate (~1 hr)";
+    else if (baseMinutes <= 120)
+        label = "significant (~2 hr)";
+    else
+        label = "major (2+ hr)";
+    return { minutes: baseMinutes, label };
+}
+export function runFindingFixEstimate(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`Usage: judges finding-fix-estimate [options]
+
+Estimate fix effort for each finding.
+
+Options:
+  --report <path>      Path to verdict JSON
+  --format <fmt>       Output format: table (default) or json
+  -h, --help           Show this help message`);
+        return;
+    }
+    const formatIdx = argv.indexOf("--format");
+    const format = formatIdx !== -1 && argv[formatIdx + 1] ? argv[formatIdx + 1] : "table";
+    const reportIdx = argv.indexOf("--report");
+    const reportPath = reportIdx !== -1 && argv[reportIdx + 1]
+        ? join(process.cwd(), argv[reportIdx + 1])
+        : join(process.cwd(), ".judges", "last-verdict.json");
+    if (!existsSync(reportPath)) {
+        console.log(`No report found at: ${reportPath}`);
+        return;
+    }
+    const data = JSON.parse(readFileSync(reportPath, "utf-8"));
+    const findings = data.findings ?? [];
+    const estimates = [];
+    let totalMinutes = 0;
+    for (const f of findings) {
+        const hasPatch = f.patch !== undefined && f.patch !== null;
+        const est = estimateFixTime(f);
+        totalMinutes += est.minutes;
+        estimates.push({
+            ruleId: f.ruleId,
+            title: f.title,
+            severity: f.severity,
+            hasPatch,
+            estimateMinutes: est.minutes,
+            estimateLabel: est.label,
+            recommendation: f.recommendation,
+        });
+    }
+    estimates.sort((a, b) => b.estimateMinutes - a.estimateMinutes);
+    const report = {
+        totalFindings: estimates.length,
+        totalMinutes,
+        totalHours: Math.round((totalMinutes / 60) * 10) / 10,
+        estimates,
+    };
+    if (format === "json") {
+        console.log(JSON.stringify(report, null, 2));
+        return;
+    }
+    console.log(`\n=== Fix Estimates (${report.totalFindings} findings, ~${report.totalHours} hours total) ===\n`);
+    if (estimates.length === 0) {
+        console.log("No findings to estimate.");
+        return;
+    }
+    for (const e of estimates) {
+        const patchTag = e.hasPatch ? " [patch]" : "";
+        console.log(`  ${e.estimateLabel.padEnd(22)} [${e.severity}] ${e.ruleId}${patchTag}`);
+        console.log(`                         ${e.title}`);
+    }
+}
+//# sourceMappingURL=finding-fix-estimate.js.map

package/dist/commands/finding-fix-estimate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-fix-estimate.js","sourceRoot":"","sources":["../../src/commands/finding-fix-estimate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA0B5B,SAAS,eAAe,CAAC,OAAsE;IAI7F,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC;IAEhD,IAAI,WAAmB,CAAC;IACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,WAAW,GAAG,GAAG,CAAC;SAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;QAAE,WAAW,GAAG,EAAE,CAAC;SAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,WAAW,GAAG,EAAE,CAAC;SACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;QAAE,WAAW,GAAG,EAAE,CAAC;;QACjD,WAAW,GAAG,EAAE,CAAC;IAEtB,IAAI,QAAQ;QAAE,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;IAC1D,IAAI,SAAS,GAAG,GAAG;QAAE,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;IAEjE,IAAI,KAAa,CAAC;IAClB,IAAI,WAAW,IAAI,EAAE;QAAE,KAAK,GAAG,mBAAmB,CAAC;SAC9C,IAAI,WAAW,IAAI,EAAE;QAAE,KAAK,GAAG,iBAAiB,CAAC;SACjD,IAAI,WAAW,IAAI,EAAE;QAAE,KAAK,GAAG,kBAAkB,CAAC;SAClD,IAAI,WAAW,IAAI,GAAG;QAAE,KAAK,GAAG,qBAAqB,CAAC;;QACtD,KAAK,GAAG,eAAe,CAAC;IAE7B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;8CAO8B,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEvF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GACd,SAAS,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAErC,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;QAC3D,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/B,YAAY,IAAI,GAAG,CAAC,OAAO,CAAC;QAE5B,SAAS,CAAC,IAAI,CAAC;YACb,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ;YACR,eAAe,EAAE,GAAG,CAAC,OAAO;YAC5B,aAAa,EAAE,GAAG,CAAC,KAAK;YACxB,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAmB;QAC7B,aAAa,EAAE,SAAS,CAAC,MAAM;QAC/B,YAAY;QACZ,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;QACrD,SAAS;KACV,CAAC;IAEF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,aAAa,eAAe,MAAM,CAAC,UAAU,qBAAqB,CAAC,CAAC;IAE/G,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/commands/finding-noise-score.d.ts

@@ -0,0 +1,2 @@
+export declare function runFindingNoiseScore(argv: string[]): void;
+//# sourceMappingURL=finding-noise-score.d.ts.map

package/dist/commands/finding-noise-score.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-noise-score.d.ts","sourceRoot":"","sources":["../../src/commands/finding-noise-score.ts"],"names":[],"mappings":"AA2DA,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAyEzD"}