@kevinrabun/judges 3.111.0 → 3.113.0

package/README.md

@@ -3,9 +3,13 @@
 An MCP (Model Context Protocol) server that provides a panel of **45 specialized judges** to evaluate AI-generated code — acting as an independent quality gate regardless of which project is being reviewed. Combines **deterministic pattern matching & AST analysis** (instant, offline, zero LLM calls) with **LLM-powered deep-review prompts** that let your AI assistant perform expert-persona analysis across all 45 domains.
 
 **Highlights:**
+
 - Includes an **App Builder Workflow (3-step)** demo for release decisions, plain-language risk summaries, and prioritized fixes — see [Try the Demo](#2-try-the-demo).
 - Includes **V2 context-aware evaluation** with policy profiles, evidence calibration, specialty feedback, confidence scoring, and uncertainty reporting.
 - Includes **public repository URL reporting** to clone a repo, run the full tribunal, and output a consolidated markdown report.
+- **200+ deterministic auto-fix patches** (see `src/patches/index.ts`) plus LLM-powered deep review.
+
+> 🧪 Many commands in `printHelp` are experimental/roadmap. By default, we show GA commands only. Set `JUDGES_SHOW_EXPERIMENTAL=1` to reveal stubs; these may not be wired yet.
 
 [![CI](https://github.com/KevinRabun/judges/actions/workflows/ci.yml/badge.svg)](https://github.com/KevinRabun/judges/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/@kevinrabun/judges)](https://www.npmjs.com/package/@kevinrabun/judges)
@@ -13,6 +17,69 @@ An MCP (Model Context Protocol) server that provides a panel of **45 specialized
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Tests](https://img.shields.io/badge/tests-1666-brightgreen)](https://github.com/KevinRabun/judges/actions)
 
+> 🔰 **Packages**
+> - **CLI**: `@kevinrabun/judges-cli` → binary `judges` (use `npx @kevinrabun/judges-cli eval --file app.ts`).
+> - **MCP/API**: `@kevinrabun/judges` → programmatic API + MCP server (`npm install @kevinrabun/judges`).
+> - **VS Code extension**: see [`vscode-extension/`](vscode-extension/README.md).
+> - **GitHub Action**: `uses: KevinRabun/judges@main` (see [CI quickstart](#github-action)).
+
+---
+
+## Quickstart
+
+### CLI (one-off)
+```bash
+# Using the CLI package (recommended)
+npx @kevinrabun/judges-cli eval --file src/app.ts
+
+# Show GA commands only (default)
+npx @kevinrabun/judges-cli --help
+
+# Show experimental/roadmap commands
+echo "JUDGES_SHOW_EXPERIMENTAL=1" >> $GITHUB_ENV
+npx @kevinrabun/judges-cli --help
+
+# License scan (supply-chain & license compliance)
+npx @kevinrabun/judges-cli license-scan --dir .
+```
+
+> **CLI vs API:** If you want to embed Judges in your app (MCP/API), install `@kevinrabun/judges`. For the command-line, use `@kevinrabun/judges-cli` (binary `judges`).
+
+### GitHub Action
+```yaml
+name: Judges
+on: [pull_request, push]
+jobs:
+  judges:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: KevinRabun/judges@main
+        with:
+          path: .
+          diff-only: true           # evaluate only changed lines in PRs (default true)
+          fail-on-findings: true    # fail on critical/high findings
+          upload-sarif: true        # upload SARIF to GitHub Code Scanning
+```
+
+### Programmatic API (MCP server included)
+```bash
+npm install @kevinrabun/judges
+```
+```ts
+import { evaluateCode } from "@kevinrabun/judges/api";
+const verdict = evaluateCode("const password = 'ProdSecret';", "typescript");
+console.log(verdict.overallVerdict, verdict.overallScore);
+```
+
+### MCP server
+```bash
+npx @kevinrabun/judges mcp
+# Or programmatically: import { startMcpServer } from "@kevinrabun/judges/mcp";
+```
+
+> Config file: `.judgesrc.json` (supports `${ENV_VAR}` substitution via `expandEnvPlaceholders`). See [Configuration](#configuration).
+
 ---
 
 ## Why Judges?
@@ -23,8 +90,8 @@ AI code generators (Copilot, Cursor, Claude, ChatGPT, etc.) write code fast —
 |---|---|---|---|---|
 | **Scope** | Style + some bugs | Bugs + code smells | Security patterns | **45 domains**: security, cost, compliance, a11y, API design, cloud, UX, … |
 | **AI-generated code focus** | No | No | Partial | **Purpose-built** for AI output failure modes |
-| **Setup** | Config per project | Server + scanner | Cloud or local | **One command**: `npx @kevinrabun/judges eval file.ts` |
-| **Auto-fix patches** | Some | No | No | **114 deterministic patches** — instant, offline |
+| **Setup** | Config per project | Server + scanner | Cloud or local | **One command**: `npx @kevinrabun/judges-cli eval file.ts` |
+| **Auto-fix patches** | Some | No | No | **200+ deterministic patches** — instant, offline |
 | **Non-technical output** | No | Dashboard | No | **Plain-language findings** with What/Why/Next |
 | **MCP native** | No | No | No | **Yes** — works inside Copilot, Claude, Cursor |
 | **SARIF output** | No | Yes | Yes | **Yes** — upload to GitHub Code Scanning |
@@ -40,11 +107,19 @@ AI code generators (Copilot, Cursor, Claude, ChatGPT, etc.) write code fast —
 
 ## Quick Start
 
+> Prereqs: Node.js **>=18** (>=20 recommended), `npx` available. The `judges` CLI binary ships with **@kevinrabun/judges-cli** (preferred) and also works via `npx @kevinrabun/judges`.
+>
+> Packages:
+> - **CLI:** `npm install -g @kevinrabun/judges-cli` (or `npx @kevinrabun/judges-cli ...`)
+> - **MCP/API:** `npm install @kevinrabun/judges`
+
+Use `@kevinrabun/judges` for the MCP server and programmatic API. Use `@kevinrabun/judges-cli` when you want the `judges` terminal command.
+
 ### Try it now (no clone needed)
 
 ```bash
-# Install globally
-npm install -g @kevinrabun/judges
+# Install the CLI globally
+npm install -g @kevinrabun/judges-cli
 
 # Evaluate any file
 judges eval src/app.ts
@@ -95,6 +170,9 @@ judges fix src/app.ts
 # Apply patches directly
 judges fix src/app.ts --apply
 
+# License compliance scan (copyleft/unknown detection)
+judges license-scan --format json --risk high
+
 # Watch mode — re-evaluate on file save
 judges watch src/
 
@@ -107,6 +185,15 @@ git diff HEAD~1 | judges diff
 # Analyze dependencies for supply-chain risks
 judges deps --path . --format json
 
+# Run GitHub App server (zero-config PR reviews)
+judges app serve --port 4567
+
+# Run GitHub PR review (gh CLI required)
+judges review --pr 123 --repo owner/name --diff-only
+
+# Auto-tune presets and configs
+judges tune --dir . --apply
+
 # Create a baseline file to suppress known findings
 judges baseline create --file src/api.ts -o baseline.json
 
@@ -134,6 +221,33 @@ judges hook install
 judges hook uninstall
 ```
 
+> 🔎 Tip: The CLI help now defaults to **GA commands only**. To see experimental/roadmap commands, run:
+>
+> ```bash
+> JUDGES_SHOW_EXPERIMENTAL=1 judges --help
+> ```
+
+### GitHub App (self-hosted webhook)
+
+Run a zero-config PR reviewer as a GitHub App:
+
+```bash
+# Run the webhook server locally
+judges app serve --port 4567
+```
+
+**Required env vars:**
+- `JUDGES_APP_ID` – GitHub App ID
+- `JUDGES_PRIVATE_KEY` or `JUDGES_PRIVATE_KEY_PATH` – PEM private key
+- `JUDGES_WEBHOOK_SECRET` – signature verification secret
+
+Optional:
+- `JUDGES_MIN_SEVERITY` (default: `medium`)
+- `JUDGES_MAX_COMMENTS` (default: 25)
+- `JUDGES_TEST_DRY_RUN=1` to avoid live network calls during tests
+
+For local testing, you can expose <code>http://localhost:4567/webhook</code> via <code>ngrok http 4567</code> and configure the GitHub App webhook URL accordingly.
+
 ### Use in GitHub Actions
 
 Add Judges to your CI pipeline with zero configuration:

package/dist/api.d.ts

@@ -28,7 +28,6 @@ export { findingsToSarif, evaluationToSarif, verdictToSarif, validateSarifLog }
 export type { SarifValidationError } from "./formatters/sarif.js";
 export { verdictToCsvRows, verdictsToCsv, findingsToCsv } from "./formatters/csv.js";
 export { verdictToGitHubActions } from "./formatters/github-actions.js";
-export { runCli } from "./cli.js";
 export { registerPlugin, unregisterPlugin, getRegisteredPlugins, getCustomRules, getPluginJudges, evaluateCustomRules, runBeforeHooks, runAfterHooks, clearPlugins, } from "./plugins.js";
 export type { CustomRule, JudgesPlugin, PluginRegistration } from "./plugins.js";
 export { JudgeRegistry, defaultRegistry } from "./judge-registry.js";
@@ -136,4 +135,3 @@ export declare function evaluateFilesStream(files: FileInput[], options?: Evalua
 export declare function evaluateFilesBatch(files: FileInput[], concurrency?: number, options?: EvaluationOptions, onProgress?: (completed: number, total: number) => void): Promise<FileEvaluationResult[]>;
 export { handleWebhook, verifyWebhookSignature, loadAppConfig, startAppServer, runAppCommand } from "./github-app.js";
 export type { GitHubAppConfig } from "./github-app.js";
-//# sourceMappingURL=api.d.ts.map

package/dist/api.js

@@ -34,8 +34,6 @@ export { clearProjectCache } from "./evaluators/project.js";
 export { findingsToSarif, evaluationToSarif, verdictToSarif, validateSarifLog } from "./formatters/sarif.js";
 export { verdictToCsvRows, verdictsToCsv, findingsToCsv } from "./formatters/csv.js";
 export { verdictToGitHubActions } from "./formatters/github-actions.js";
-// ─── CLI ─────────────────────────────────────────────────────────────────────
-export { runCli } from "./cli.js";
 // ─── Plugin API ──────────────────────────────────────────────────────────────
 export { registerPlugin, unregisterPlugin, getRegisteredPlugins, getCustomRules, getPluginJudges, evaluateCustomRules, runBeforeHooks, runAfterHooks, clearPlugins, } from "./plugins.js";
 // ─── Judge Registry ──────────────────────────────────────────────────────────
@@ -161,4 +159,3 @@ export async function evaluateFilesBatch(files, concurrency = 4, options, onProg
 }
 // ─── GitHub App ──────────────────────────────────────────────────────────────
 export { handleWebhook, verifyWebhookSignature, loadAppConfig, startAppServer, runAppCommand } from "./github-app.js";
-//# sourceMappingURL=api.js.map

package/dist/ast/cross-file-taint.d.ts

@@ -40,4 +40,3 @@ export declare function analyzeCrossFileTaint(files: Array<{
     content: string;
     language: string;
 }>): CrossFileTaintFlow[];
-//# sourceMappingURL=cross-file-taint.d.ts.map

package/dist/ast/cross-file-taint.js

@@ -715,4 +715,3 @@ function deduplicateCrossFlows(flows) {
         return true;
     });
 }
-//# sourceMappingURL=cross-file-taint.js.map

package/dist/ast/index.d.ts

@@ -23,4 +23,3 @@ export declare function analyzeStructure(code: string, language: string): CodeSt
  * tree-sitter grammars are fully loaded before analysis.
  */
 export declare function analyzeStructureAsync(code: string, language: string): Promise<CodeStructure>;
-//# sourceMappingURL=index.d.ts.map

package/dist/ast/index.js

@@ -146,4 +146,3 @@ export async function analyzeStructureAsync(code, language) {
             };
     }
 }
-//# sourceMappingURL=index.js.map

package/dist/ast/structural-parser.d.ts

@@ -1,3 +1,2 @@
 import type { CodeStructure } from "./types.js";
 export declare function analyzeStructurally(code: string, language: string): CodeStructure;
-//# sourceMappingURL=structural-parser.d.ts.map

package/dist/ast/structural-parser.js

@@ -754,4 +754,3 @@ function extractImports(lines, language) {
     }
     return imports;
 }
-//# sourceMappingURL=structural-parser.js.map

package/dist/ast/taint-tracker.d.ts

@@ -34,4 +34,3 @@ export type TaintSinkKind = "code-execution" | "command-exec" | "sql-query" | "x
  * For other languages, falls back to generic regex-based analysis.
  */
 export declare function analyzeTaintFlows(code: string, language: string): TaintFlow[];
-//# sourceMappingURL=taint-tracker.d.ts.map

package/dist/ast/taint-tracker.js

@@ -1031,4 +1031,3 @@ function deduplicateFlows(flows) {
         return true;
     });
 }
-//# sourceMappingURL=taint-tracker.js.map

package/dist/ast/tree-sitter-ast.d.ts

@@ -31,4 +31,3 @@ export declare function analyzeWithTreeSitterSync(code: string, language: string
  * fall back to analyzeStructurally().
  */
 export declare function analyzeWithTreeSitter(code: string, language: string): Promise<CodeStructure>;
-//# sourceMappingURL=tree-sitter-ast.d.ts.map

package/dist/ast/tree-sitter-ast.js

@@ -13,6 +13,8 @@
 import { createRequire } from "node:module";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
+import { existsSync, mkdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
 // Support both ESM (import.meta.url) and CJS (esbuild bundle) environments.
 // When bundled by esbuild with --format=cjs, import.meta.url is undefined,
 // so we fall back to __filename (which esbuild injects for CJS bundles).
@@ -53,6 +55,43 @@ const _moduleDir = _importMetaUrl
 // In dist: dist/ast/ → ../../grammars/
 // In vscode bundle: out/ → ../grammars/ (but tree-sitter gracefully degrades)
 const GRAMMAR_DIR = join(_moduleDir, "..", "..", "grammars");
+const GRAMMAR_CACHE_DIR = join(homedir(), ".judges", "grammars");
+const GRAMMAR_BASE_URL = process.env.JUDGES_GRAMMAR_BASE_URL?.replace(/\/+$/, "") ||
+    "https://raw.githubusercontent.com/KevinRabun/judges/main/grammars";
+async function downloadGrammar(file, targetPath) {
+    if (typeof fetch !== "function")
+        return false;
+    const tempPath = `${targetPath}.tmp`;
+    try {
+        const response = await fetch(`${GRAMMAR_BASE_URL}/${file}`);
+        if (!response.ok)
+            return false;
+        const bytes = new Uint8Array(await response.arrayBuffer());
+        mkdirSync(GRAMMAR_CACHE_DIR, { recursive: true });
+        writeFileSync(tempPath, bytes);
+        renameSync(tempPath, targetPath);
+        return true;
+    }
+    catch {
+        try {
+            unlinkSync(tempPath);
+        }
+        catch {
+            // ignore cleanup errors
+        }
+        return false;
+    }
+}
+async function ensureGrammarPath(file) {
+    const bundledPath = join(GRAMMAR_DIR, file);
+    if (existsSync(bundledPath))
+        return bundledPath;
+    const cachedPath = join(GRAMMAR_CACHE_DIR, file);
+    if (existsSync(cachedPath))
+        return cachedPath;
+    const downloaded = await downloadGrammar(file, cachedPath);
+    return downloaded ? cachedPath : null;
+}
 async function ensureInit() {
     if (initPromise)
         return initPromise;
@@ -76,7 +115,10 @@ async function getLanguage(lang) {
     if (!file)
         return null;
     try {
-        const grammar = await parserModule.Language.load(join(GRAMMAR_DIR, file));
+        const grammarPath = await ensureGrammarPath(file);
+        if (!grammarPath)
+            return null;
+        const grammar = await parserModule.Language.load(grammarPath);
         languageCache.set(lang, grammar);
         return grammar;
     }
@@ -1120,4 +1162,3 @@ function findFirstByType(node, type) {
     }
     return null;
 }
-//# sourceMappingURL=tree-sitter-ast.js.map

package/dist/ast/types.d.ts

@@ -48,4 +48,3 @@ export interface CodeStructure {
     /** Class names discovered in the file (Python, Java, C#, etc.) */
     classes?: string[];
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/ast/types.js

@@ -5,4 +5,3 @@
 // lightweight structural parser for other languages.
 // ─────────────────────────────────────────────────────────────────────────────
 export {};
-//# sourceMappingURL=types.js.map

package/dist/auto-tune.d.ts

@@ -144,4 +144,3 @@ export declare function formatAutoTuneReport(report: AutoTuneReport): string;
  * Format auto-tune report as JSON.
  */
 export declare function formatAutoTuneReportJson(report: AutoTuneReport): string;
-//# sourceMappingURL=auto-tune.d.ts.map

package/dist/auto-tune.js

@@ -371,4 +371,3 @@ export function formatAutoTuneReportJson(report) {
         summary: report.summary,
     }, null, 2);
 }
-//# sourceMappingURL=auto-tune.js.map

package/dist/cache.d.ts

@@ -51,4 +51,3 @@ export declare class LRUCache<T> {
     /** Evict the least recently used (oldest / first) entry. */
     private evictLru;
 }
-//# sourceMappingURL=cache.d.ts.map

package/dist/cache.js

@@ -84,4 +84,3 @@ export class LRUCache {
             this.cache.delete(first);
     }
 }
-//# sourceMappingURL=cache.js.map

package/dist/calibration.d.ts

@@ -106,4 +106,3 @@ export declare function buildAllModelProfiles(store: FeedbackStore, options?: Ca
  * the general profile when no model-specific data is available.
  */
 export declare function calibrateFindingsForModel(findings: Finding[], generalProfile: CalibrationProfile, modelProfile: CalibrationProfile | undefined, options?: CalibrationOptions): Finding[];
-//# sourceMappingURL=calibration.d.ts.map

package/dist/calibration.js

@@ -217,4 +217,3 @@ export function calibrateFindingsForModel(findings, generalProfile, modelProfile
     const profile = modelProfile?.isActive ? modelProfile : generalProfile;
     return calibrateFindings(findings, profile, options);
 }
-//# sourceMappingURL=calibration.js.map

package/dist/commands/auto-detect.d.ts

@@ -59,4 +59,3 @@ export declare function formatProjectSummary(signals: ProjectSignals): string;
  * Format a preset recommendation for display.
  */
 export declare function formatRecommendation(rec: PresetRecommendation): string;
-//# sourceMappingURL=auto-detect.d.ts.map

package/dist/commands/auto-detect.js

@@ -326,4 +326,3 @@ export function formatRecommendation(rec) {
     lines.push("");
     return lines.join("\n");
 }
-//# sourceMappingURL=auto-detect.js.map

package/dist/commands/benchmark-advanced.d.ts

@@ -12,4 +12,3 @@
  */
 import type { BenchmarkCase } from "./benchmark.js";
 export declare const BENCHMARK_ADVANCED_CASES: BenchmarkCase[];
-//# sourceMappingURL=benchmark-advanced.d.ts.map

package/dist/commands/benchmark-advanced.js

@@ -5055,4 +5055,3 @@ function errorHandler(err: Error, req: Request, res: Response, next: NextFunctio
         difficulty: "medium",
     },
 ];
-//# sourceMappingURL=benchmark-advanced.js.map

package/dist/commands/benchmark-ai-agents.d.ts

@@ -6,4 +6,3 @@ import type { BenchmarkCase } from "./benchmark.js";
  * HALLU judge has zero existing coverage — this file is critical.
  */
 export declare const BENCHMARK_AI_AGENTS: BenchmarkCase[];
-//# sourceMappingURL=benchmark-ai-agents.d.ts.map

package/dist/commands/benchmark-ai-agents.js

@@ -4121,4 +4121,3 @@ export function SearchComponent() {
         difficulty: "medium",
     },
 ];
-//# sourceMappingURL=benchmark-ai-agents.js.map

package/dist/commands/benchmark-ai-output.d.ts

@@ -7,4 +7,3 @@ import type { BenchmarkCase } from "./benchmark.js";
  * Covers LOGIC, TEST, and enhanced HALLU prefixes.
  */
 export declare const BENCHMARK_AI_OUTPUT: BenchmarkCase[];
-//# sourceMappingURL=benchmark-ai-output.d.ts.map

package/dist/commands/benchmark-ai-output.js

@@ -363,4 +363,3 @@ export async function handleRequest(req: Request) {
         aiSource: "copilot",
     },
 ];
-//# sourceMappingURL=benchmark-ai-output.js.map

package/dist/commands/benchmark-compliance-ethics.d.ts

@@ -6,4 +6,3 @@ import type { BenchmarkCase } from "./benchmark.js";
  * Covers COMP, SOV, ETHICS, A11Y, I18N, UX, COMPAT, DEPS, PORTA prefixes.
  */
 export declare const BENCHMARK_COMPLIANCE_ETHICS: BenchmarkCase[];
-//# sourceMappingURL=benchmark-compliance-ethics.d.ts.map

package/dist/commands/benchmark-compliance-ethics.js

@@ -3058,4 +3058,3 @@ v2.get("/api/v2/users/:id", async (req, res) => {
         difficulty: "medium",
     },
 ];
-//# sourceMappingURL=benchmark-compliance-ethics.js.map

package/dist/commands/benchmark-expanded-2.d.ts

@@ -10,4 +10,3 @@
  */
 import type { BenchmarkCase } from "./benchmark.js";
 export declare const EXPANDED_BENCHMARK_CASES_2: BenchmarkCase[];
-//# sourceMappingURL=benchmark-expanded-2.d.ts.map

package/dist/commands/benchmark-expanded-2.js

@@ -5528,4 +5528,3 @@ app.listen(3000);`,
         difficulty: "medium",
     },
 ];
-//# sourceMappingURL=benchmark-expanded-2.js.map

package/dist/commands/benchmark-expanded.d.ts

@@ -10,4 +10,3 @@
  */
 import type { BenchmarkCase } from "./benchmark.js";
 export declare const EXPANDED_BENCHMARK_CASES: BenchmarkCase[];
-//# sourceMappingURL=benchmark-expanded.d.ts.map

package/dist/commands/benchmark-expanded.js

@@ -2597,4 +2597,3 @@ func encryptCBC(plaintext []byte) ([]byte, error) {
         difficulty: "hard",
     },
 ];
-//# sourceMappingURL=benchmark-expanded.js.map

package/dist/commands/benchmark-infrastructure.d.ts

@@ -6,4 +6,3 @@ import type { BenchmarkCase } from "./benchmark.js";
  * Covers IAC, CLOUD, CFG, CICD, COST, SCALE, CACHE, REL, RATE prefixes.
  */
 export declare const BENCHMARK_INFRASTRUCTURE: BenchmarkCase[];
-//# sourceMappingURL=benchmark-infrastructure.d.ts.map

package/dist/commands/benchmark-infrastructure.js

@@ -2880,4 +2880,3 @@ async function processMessages() {
         difficulty: "hard",
     },
 ];
-//# sourceMappingURL=benchmark-infrastructure.js.map

package/dist/commands/benchmark-languages.d.ts

@@ -6,4 +6,3 @@ import type { BenchmarkCase } from "./benchmark.js";
  * Covers various judge prefixes in non-TypeScript languages.
  */
 export declare const BENCHMARK_LANGUAGES: BenchmarkCase[];
-//# sourceMappingURL=benchmark-languages.d.ts.map

package/dist/commands/benchmark-languages.js

@@ -1961,4 +1961,3 @@ end`,
         difficulty: "medium",
     },
 ];
-//# sourceMappingURL=benchmark-languages.js.map

package/dist/commands/benchmark-quality-ops.d.ts

@@ -6,4 +6,3 @@ import type { BenchmarkCase } from "./benchmark.js";
  * Covers ERR, DB, CONC, TEST, PERF, OBS, MAINT, DOC, CICD prefixes.
  */
 export declare const BENCHMARK_QUALITY_OPS: BenchmarkCase[];
-//# sourceMappingURL=benchmark-quality-ops.d.ts.map

package/dist/commands/benchmark-quality-ops.js

@@ -3413,4 +3413,3 @@ export function getPenalty(days: number): number {
         difficulty: "easy",
     },
 ];
-//# sourceMappingURL=benchmark-quality-ops.js.map

package/dist/commands/benchmark-security-deep.d.ts

@@ -7,4 +7,3 @@ import type { BenchmarkCase } from "./benchmark.js";
  * ~125 cases covering CYBER, SEC, AUTH, DATA prefixes across multiple languages.
  */
 export declare const BENCHMARK_SECURITY_DEEP: BenchmarkCase[];
-//# sourceMappingURL=benchmark-security-deep.d.ts.map

package/dist/commands/benchmark-security-deep.js

@@ -2333,4 +2333,3 @@ def load_config(config_path: str) -> dict:
         difficulty: "easy",
     },
 ];
-//# sourceMappingURL=benchmark-security-deep.js.map

package/dist/commands/benchmark.d.ts

@@ -224,4 +224,3 @@ export declare function ingestFindingsAsBenchmarkCases(inputs: IngestFindingsInp
  * near-duplicate test cases. Returns only novel candidates.
  */
 export declare function deduplicateIngestCases(existing: BenchmarkCase[], candidates: BenchmarkCase[]): BenchmarkCase[];
-//# sourceMappingURL=benchmark.d.ts.map

package/dist/commands/benchmark.js

@@ -3212,4 +3212,3 @@ export function deduplicateIngestCases(existing, candidates) {
     const existingFingerprints = new Set(existing.map((c) => normalize(c.code)));
     return candidates.filter((c) => !existingFingerprints.has(normalize(c.code)));
 }
-//# sourceMappingURL=benchmark.js.map

package/dist/commands/config-share.d.ts

@@ -93,4 +93,3 @@ export declare function validatePolicyCompliance(config: JudgesConfig, lock: Pol
  * config is merged into the local .judgesrc.
  */
 export declare function pullRemoteConfig(url: string, targetDir?: string): Promise<TeamConfig>;
-//# sourceMappingURL=config-share.d.ts.map

package/dist/commands/config-share.js

@@ -404,4 +404,3 @@ export async function pullRemoteConfig(url, targetDir = ".") {
     }
     return teamConfig;
 }
-//# sourceMappingURL=config-share.js.map

package/dist/commands/coverage.d.ts

@@ -38,4 +38,3 @@ export declare function computeLanguageCoverage(files: string[]): LanguageCovera
  * Format a language coverage report as human-readable text.
  */
 export declare function formatCoverageReport(report: LanguageCoverageReport): string;
-//# sourceMappingURL=coverage.d.ts.map

package/dist/commands/coverage.js

@@ -181,4 +181,3 @@ export function formatCoverageReport(report) {
     }
     return lines.join("\n");
 }
-//# sourceMappingURL=coverage.js.map

package/dist/commands/doctor.d.ts

@@ -53,4 +53,3 @@ export declare function runDoctorChecks(dir?: string): DoctorReport;
  */
 export declare function formatDoctorReport(report: DoctorReport): string;
 export declare function runDoctor(argv: string[]): void;
-//# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.js

@@ -62,7 +62,7 @@ export function checkConfigFile(dir) {
     try {
         const raw = readFileSync(found, "utf-8");
         const parsed = JSON.parse(raw);
-        const result = parseConfig(parsed);
+        const result = parseConfig(raw);
         // Check for unknown properties
         const knownKeys = new Set([
             "judges",
@@ -271,7 +271,7 @@ export function runDoctorChecks(dir = ".") {
         if (existsSync(full)) {
             try {
                 const raw = readFileSync(full, "utf-8");
-                config = parseConfig(JSON.parse(raw));
+                config = parseConfig(raw);
             }
             catch {
                 // Config parse errors are caught by checkConfigFile
@@ -360,4 +360,3 @@ Runs diagnostic checks on your Judges Panel environment.`);
     }
     process.exit(report.healthy ? 0 : 1);
 }
-//# sourceMappingURL=doctor.js.map

package/dist/commands/feedback.d.ts

@@ -180,4 +180,3 @@ export declare function parseDismissedFindings(llmResponse: string): DismissedFi
  */
 export declare function recordL2Feedback(llmResponse: string, feedbackPath?: string, filePath?: string): number;
 export declare function runFeedback(argv: string[]): void;
-//# sourceMappingURL=feedback.d.ts.map

package/dist/commands/feedback.js

@@ -548,4 +548,3 @@ export function runFeedback(argv) {
             process.exit(1);
     }
 }
-//# sourceMappingURL=feedback.js.map

package/dist/commands/fix.d.ts

@@ -105,4 +105,3 @@ interface FixArgs {
 export declare function parseFixArgs(argv: string[]): FixArgs;
 export declare function runFix(argv: string[]): void;
 export {};
-//# sourceMappingURL=fix.d.ts.map

package/dist/commands/fix.js

@@ -415,4 +415,3 @@ export function runFix(argv) {
     }
     console.log("");
 }
-//# sourceMappingURL=fix.js.map

package/dist/commands/language-packs.d.ts

@@ -40,4 +40,3 @@ export declare function listLanguagePacks(): Array<{
  */
 export declare function suggestPack(language: string): LanguagePack | undefined;
 export declare function runPack(argv: string[]): void;
-//# sourceMappingURL=language-packs.d.ts.map

package/dist/commands/language-packs.js

@@ -148,4 +148,3 @@ export function runPack(argv) {
     console.error(`Unknown pack subcommand: ${subcommand}`);
     process.exit(1);
 }
-//# sourceMappingURL=language-packs.js.map

package/dist/commands/llm-benchmark.d.ts

@@ -116,4 +116,3 @@ export declare function formatLayerComparisonMarkdown(l1: {
     falsePositives: number;
     totalCases: number;
 }, l2: LlmBenchmarkSnapshot): string;
-//# sourceMappingURL=llm-benchmark.d.ts.map

package/dist/commands/llm-benchmark.js

@@ -393,4 +393,3 @@ export function formatLayerComparisonMarkdown(l1, l2) {
     lines.push("");
     return lines.join("\n");
 }
-//# sourceMappingURL=llm-benchmark.js.map