@kevinrabun/judges 3.112.0 → 3.113.0

package/dist/commands/dep-audit.js

@@ -1,278 +0,0 @@
-/**
- * `judges dep-audit` — Dependency vulnerability correlation.
- *
- * Correlates code-level findings with known vulnerabilities in project
- * dependencies. Uses npm audit / pip audit output to enrich findings
- * with CVE data, adding urgency context to code review.
- *
- * Usage:
- *   judges dep-audit                             # Audit current directory
- *   judges dep-audit --format json               # JSON output
- *   judges dep-audit --correlate results.json     # Correlate with findings
- */
-import { existsSync, readFileSync } from "fs";
-import { execSync } from "child_process";
-import { resolve, join } from "path";
-// ─── npm Audit ──────────────────────────────────────────────────────────────
-function runNpmAudit(dir) {
-    try {
-        const output = execSync("npm audit --json 2>/dev/null || true", {
-            cwd: dir,
-            encoding: "utf-8",
-            timeout: 30000,
-        });
-        const data = JSON.parse(output);
-        const vulns = [];
-        // npm audit v2 format (npm >= 7)
-        const advisories = (data.vulnerabilities || {});
-        for (const [name, info] of Object.entries(advisories)) {
-            const severity = mapNpmSeverity(info.severity);
-            const via = (info.via || []);
-            const cves = [];
-            const cwes = [];
-            let title = `Vulnerability in ${name}`;
-            let url;
-            for (const v of via) {
-                if (typeof v === "object" && v !== null) {
-                    if (v.cve)
-                        cves.push(v.cve);
-                    if (v.cwe) {
-                        const cweArr = Array.isArray(v.cwe) ? v.cwe : [v.cwe];
-                        cwes.push(...cweArr.map((c) => c));
-                    }
-                    if (v.title)
-                        title = v.title;
-                    if (v.url)
-                        url = v.url;
-                }
-            }
-            vulns.push({
-                name,
-                version: info.version || "unknown",
-                severity,
-                cves: [...new Set(cves)],
-                cwes: [...new Set(cwes)],
-                title,
-                url,
-                fixedIn: info.fixAvailable?.version,
-            });
-        }
-        return vulns;
-    }
-    catch {
-        return [];
-    }
-}
-function mapNpmSeverity(sev) {
-    switch (sev) {
-        case "critical":
-            return "critical";
-        case "high":
-            return "high";
-        case "moderate":
-            return "medium";
-        case "low":
-            return "low";
-        default:
-            return "info";
-    }
-}
-// ─── pip Audit ──────────────────────────────────────────────────────────────
-function runPipAudit(dir) {
-    try {
-        const output = execSync("pip-audit --format=json 2>/dev/null || python -m pip_audit --format=json 2>/dev/null || true", {
-            cwd: dir,
-            encoding: "utf-8",
-            timeout: 30000,
-        });
-        if (!output.trim().startsWith("["))
-            return [];
-        const data = JSON.parse(output);
-        return data
-            .filter((entry) => entry.vulns && Array.isArray(entry.vulns) && entry.vulns.length > 0)
-            .map((entry) => {
-            const vulnEntries = entry.vulns;
-            return {
-                name: entry.name,
-                version: entry.version,
-                severity: "high",
-                cves: vulnEntries.map((v) => v.id || "").filter(Boolean),
-                cwes: [],
-                title: `Vulnerability in ${entry.name}`,
-                fixedIn: vulnEntries[0]?.fix_versions,
-            };
-        });
-    }
-    catch {
-        return [];
-    }
-}
-// ─── Correlation Engine ─────────────────────────────────────────────────────
-/** CWE-to-rule mapping for correlating deps vulnerabilities with code findings */
-const CWE_TO_RULE_PREFIX = {
-    "CWE-79": ["SEC", "XSS"],
-    "CWE-89": ["SEC", "SQLI"],
-    "CWE-94": ["SEC"],
-    "CWE-78": ["SEC", "CMD"],
-    "CWE-22": ["SEC", "PATH"],
-    "CWE-611": ["SEC"],
-    "CWE-502": ["SEC"],
-    "CWE-200": ["DATA"],
-    "CWE-287": ["AUTH"],
-    "CWE-306": ["AUTH"],
-    "CWE-352": ["SEC", "CSRF"],
-    "CWE-918": ["SEC", "SSRF"],
-    "CWE-1321": ["SEC"],
-    "CWE-400": ["PERF", "DOS"],
-};
-function correlateVulnsWithFindings(vulns, findings) {
-    const correlations = [];
-    for (const vuln of vulns) {
-        const related = [];
-        for (const finding of findings) {
-            // Match by CWE
-            if (finding.cweIds && vuln.cwes.length > 0) {
-                const overlap = finding.cweIds.filter((cwe) => vuln.cwes.includes(cwe));
-                if (overlap.length > 0) {
-                    related.push({
-                        ruleId: finding.ruleId,
-                        title: finding.title,
-                        reason: `Shares CWE: ${overlap.join(", ")} with vulnerable dep ${vuln.name}`,
-                    });
-                    continue;
-                }
-            }
-            // Match by rule prefix → CWE category
-            for (const cwe of vuln.cwes) {
-                const prefixes = CWE_TO_RULE_PREFIX[cwe] || [];
-                if (prefixes.some((p) => finding.ruleId.startsWith(p))) {
-                    related.push({
-                        ruleId: finding.ruleId,
-                        title: finding.title,
-                        reason: `Code pattern (${finding.ruleId}) relates to ${cwe} in vulnerable dep ${vuln.name}`,
-                    });
-                    break;
-                }
-            }
-        }
-        if (related.length > 0) {
-            correlations.push({ vulnerability: vuln, relatedFindings: related });
-        }
-    }
-    return correlations;
-}
-// ─── Main Audit Function ────────────────────────────────────────────────────
-export function runDepAudit(dir, findings) {
-    let packageManager = "unknown";
-    let vulns = [];
-    // Detect and run audit
-    if (existsSync(join(dir, "package.json")) || existsSync(join(dir, "package-lock.json"))) {
-        packageManager = "npm";
-        vulns = runNpmAudit(dir);
-    }
-    else if (existsSync(join(dir, "requirements.txt")) ||
-        existsSync(join(dir, "pyproject.toml")) ||
-        existsSync(join(dir, "Pipfile"))) {
-        packageManager = "pip";
-        vulns = runPipAudit(dir);
-    }
-    const severityCounts = { critical: 0, high: 0, medium: 0, low: 0, info: 0 };
-    for (const v of vulns) {
-        severityCounts[v.severity]++;
-    }
-    const correlations = findings ? correlateVulnsWithFindings(vulns, findings) : [];
-    return {
-        packageManager,
-        vulnerabilities: vulns,
-        totalVulnerabilities: vulns.length,
-        severityCounts,
-        correlations,
-    };
-}
-// ─── CLI Runner ─────────────────────────────────────────────────────────────
-export function runDepAuditCommand(argv) {
-    if (argv.includes("--help") || argv.includes("-h")) {
-        console.log(`
-judges dep-audit — Dependency vulnerability correlation
-
-Usage:
-  judges dep-audit [dir]                        Audit dependencies
-  judges dep-audit --correlate results.json     Correlate with code findings
-  judges dep-audit --format json                JSON output
-
-Supports:
-  • npm (package.json / package-lock.json)
-  • pip (requirements.txt / pyproject.toml / Pipfile)
-
-Correlates dependency vulnerabilities with code findings by CWE mapping.
-
-Options:
-  --correlate <file>   Path to Judges JSON results file
-  --format <fmt>       Output format: text, json
-  --help, -h           Show this help
-`);
-        return;
-    }
-    const dir = argv.find((a, i) => i > 1 && !a.startsWith("-") && argv[i - 1] !== "--correlate" && argv[i - 1] !== "--format") ||
-        ".";
-    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
-    const correlatePath = argv.find((_a, i) => argv[i - 1] === "--correlate");
-    // Load findings for correlation if provided
-    let findings;
-    if (correlatePath && existsSync(correlatePath)) {
-        try {
-            const data = JSON.parse(readFileSync(correlatePath, "utf-8"));
-            findings = data.findings || [];
-        }
-        catch {
-            console.error(`Warning: Could not parse findings from ${correlatePath}`);
-        }
-    }
-    console.log(`\n  Running dependency audit in ${resolve(dir)}...\n`);
-    const result = runDepAudit(resolve(dir), findings);
-    if (format === "json") {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-    }
-    // Text output
-    if (result.packageManager === "unknown") {
-        console.log("  No supported package manifest found (package.json, requirements.txt, etc.)\n");
-        return;
-    }
-    console.log(`  Package manager: ${result.packageManager}`);
-    console.log(`  Vulnerabilities: ${result.totalVulnerabilities}\n`);
-    if (result.totalVulnerabilities === 0) {
-        console.log("  ✅ No known vulnerabilities found.\n");
-        return;
-    }
-    // Severity breakdown
-    for (const sev of ["critical", "high", "medium", "low", "info"]) {
-        if (result.severityCounts[sev] > 0) {
-            console.log(`  ${sev.toUpperCase().padEnd(10)} ${result.severityCounts[sev]}`);
-        }
-    }
-    console.log("");
-    // Top vulnerabilities
-    for (const vuln of result.vulnerabilities.slice(0, 15)) {
-        const fixInfo = vuln.fixedIn ? ` → fix: ${vuln.fixedIn}` : "";
-        console.log(`  • [${vuln.severity.toUpperCase()}] ${vuln.name}@${vuln.version}: ${vuln.title}${fixInfo}`);
-        if (vuln.cves.length > 0) {
-            console.log(`    CVE: ${vuln.cves.join(", ")}`);
-        }
-    }
-    // Correlations
-    if (result.correlations.length > 0) {
-        console.log(`\n  ─── Code ↔ Dependency Correlations ───\n`);
-        for (const corr of result.correlations) {
-            console.log(`  📦 ${corr.vulnerability.name} (${corr.vulnerability.cves.join(", ")})`);
-            for (const rel of corr.relatedFindings) {
-                console.log(`    ↳ ${rel.ruleId}: ${rel.reason}`);
-            }
-        }
-    }
-    console.log("");
-    if (result.severityCounts.critical > 0 || result.severityCounts.high > 0) {
-        process.exit(1);
-    }
-}
-//# sourceMappingURL=dep-audit.js.map

package/dist/commands/dep-audit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dep-audit.js","sourceRoot":"","sources":["../../src/commands/dep-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAwCrC,+EAA+E;AAE/E,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,sCAAsC,EAAE;YAC9D,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,CAAC;QAC3D,MAAM,KAAK,GAAwB,EAAE,CAAC;QAEtC,iCAAiC;QACjC,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAA4C,CAAC;QAC3F,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,QAAkB,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAA4C,CAAC;YAExE,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,KAAK,GAAG,oBAAoB,IAAI,EAAE,CAAC;YACvC,IAAI,GAAuB,CAAC;YAE5B,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;gBACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACxC,IAAI,CAAC,CAAC,GAAG;wBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAa,CAAC,CAAC;oBACtC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;wBACV,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;wBACtD,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7C,CAAC;oBACD,IAAI,CAAC,CAAC,KAAK;wBAAE,KAAK,GAAG,CAAC,CAAC,KAAe,CAAC;oBACvC,IAAI,CAAC,CAAC,GAAG;wBAAE,GAAG,GAAG,CAAC,CAAC,GAAa,CAAC;gBACnC,CAAC;YACH,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,OAAO,EAAG,IAAI,CAAC,OAAkB,IAAI,SAAS;gBAC9C,QAAQ;gBACR,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxB,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxB,KAAK;gBACL,GAAG;gBACH,OAAO,EAAG,IAAI,CAAC,YAAuC,EAAE,OAAO;aAChE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CACrB,8FAA8F,EAC9F;YACE,GAAG,EAAE,GAAG;YACR,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,KAAK;SACf,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAE9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAmC,CAAC;QAClE,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAK,KAAK,CAAC,KAAwB,CAAC,MAAM,GAAG,CAAC,CAAC;aAC1G,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,MAAM,WAAW,GAAG,KAAK,CAAC,KAAsC,CAAC;YACjE,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAc;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAiB;gBAChC,QAAQ,EAAE,MAAkB;gBAC5B,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxD,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,oBAAoB,KAAK,CAAC,IAAI,EAAE;gBACvC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY;aACtC,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,kFAAkF;AAClF,MAAM,kBAAkB,GAA6B;IACnD,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACxB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IACxB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,CAAC,KAAK,CAAC;IAClB,SAAS,EAAE,CAAC,KAAK,CAAC;IAClB,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,CAAC,KAAK,CAAC;IACnB,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC;CAC3B,CAAC;AAEF,SAAS,0BAA0B,CAAC,KAA0B,EAAE,QAAmB;IACjF,MAAM,YAAY,GAAmC,EAAE,CAAC;IAExD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAA6D,EAAE,CAAC;QAE7E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,eAAe;YACf,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC;wBACX,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,MAAM,EAAE,eAAe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,IAAI,EAAE;qBAC7E,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;YACH,CAAC;YAED,sCAAsC;YACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,OAAO,CAAC,IAAI,CAAC;wBACX,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,MAAM,EAAE,iBAAiB,OAAO,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,IAAI,CAAC,IAAI,EAAE;qBAC5F,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,YAAY,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,QAAoB;IAC3D,IAAI,cAAc,GAAqC,SAAS,CAAC;IACjE,IAAI,KAAK,GAAwB,EAAE,CAAC;IAEpC,uBAAuB;IACvB,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC;QACxF,cAAc,GAAG,KAAK,CAAC;QACvB,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;SAAM,IACL,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACvC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EAChC,CAAC;QACD,cAAc,GAAG,KAAK,CAAC;QACvB,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,cAAc,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACtG,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEjF,OAAO;QACL,cAAc;QACd,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,KAAK,CAAC,MAAM;QAClC,cAAc;QACd,YAAY;KACb,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC;QAC/G,GAAG,CAAC;IACN,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC;IAE1E,4CAA4C;IAC5C,IAAI,QAA+B,CAAC;IACpC,IAAI,aAAa,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9D,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,0CAA0C,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mCAAmC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEnD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,oBAAoB,IAAI,CAAC,CAAC;IAEnE,IAAI,MAAM,CAAC,oBAAoB,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAe,EAAE,CAAC;QAC9E,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,sBAAsB;IACtB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,CAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/dep-correlate.d.ts

@@ -1,9 +0,0 @@
-/**
- * Dependency vulnerability correlation — cross-references
- * Judges findings with dependency versions to identify which
- * dependencies contribute the most security findings.
- *
- * All data from local files (package.json, lock files).
- */
-export declare function runDepCorrelate(argv: string[]): void;
-//# sourceMappingURL=dep-correlate.d.ts.map

package/dist/commands/dep-correlate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dep-correlate.d.ts","sourceRoot":"","sources":["../../src/commands/dep-correlate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiKH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsFpD"}

package/dist/commands/dep-correlate.js

@@ -1,208 +0,0 @@
-/**
- * Dependency vulnerability correlation — cross-references
- * Judges findings with dependency versions to identify which
- * dependencies contribute the most security findings.
- *
- * All data from local files (package.json, lock files).
- */
-import { existsSync, readFileSync, mkdirSync, writeFileSync } from "fs";
-import { join } from "path";
-// ─── Dep parsing ────────────────────────────────────────────────────────────
-function loadDeps() {
-    const deps = [];
-    // package.json (npm)
-    if (existsSync("package.json")) {
-        try {
-            const pkg = JSON.parse(readFileSync("package.json", "utf-8"));
-            for (const [name, ver] of Object.entries(pkg.dependencies || {})) {
-                deps.push({ name, version: String(ver), type: "dependency" });
-            }
-            for (const [name, ver] of Object.entries(pkg.devDependencies || {})) {
-                deps.push({ name, version: String(ver), type: "devDependency" });
-            }
-        }
-        catch {
-            /* skip */
-        }
-    }
-    // requirements.txt (Python)
-    if (existsSync("requirements.txt")) {
-        try {
-            const lines = readFileSync("requirements.txt", "utf-8").split("\n");
-            for (const line of lines) {
-                const match = /^([a-zA-Z0-9_-]+)==(.+)/.exec(line.trim());
-                if (match)
-                    deps.push({ name: match[1], version: match[2], type: "dependency" });
-            }
-        }
-        catch {
-            /* skip */
-        }
-    }
-    // go.mod (Go)
-    if (existsSync("go.mod")) {
-        try {
-            const content = readFileSync("go.mod", "utf-8");
-            const lines = content.split("\n");
-            for (const line of lines) {
-                const match = /^\s+([\w./-]+)\s+(v[\d.]+)/.exec(line);
-                if (match)
-                    deps.push({ name: match[1], version: match[2], type: "dependency" });
-            }
-        }
-        catch {
-            /* skip */
-        }
-    }
-    return deps;
-}
-function loadFindings() {
-    // Try common finding output locations
-    const paths = [".judges-findings.json", join(".judges-audit-trail", "trail.json"), "judges-report.json"];
-    for (const p of paths) {
-        if (!existsSync(p))
-            continue;
-        try {
-            const data = JSON.parse(readFileSync(p, "utf-8"));
-            if (Array.isArray(data))
-                return data;
-            if (data.findings && Array.isArray(data.findings))
-                return data.findings;
-            if (data.events && Array.isArray(data.events)) {
-                return data.events
-                    .filter((e) => e.type === "created")
-                    .map((e) => e.finding || { ruleId: e.findingId, severity: "medium", title: String(e.findingId), description: "" });
-            }
-        }
-        catch {
-            /* skip */
-        }
-    }
-    return [];
-}
-// ─── Correlation ────────────────────────────────────────────────────────────
-const KNOWN_VULN_PATTERNS = {
-    express: ["ssrf", "xss", "csrf", "header-injection"],
-    lodash: ["prototype-pollution", "command-injection"],
-    axios: ["ssrf", "redirect"],
-    jsonwebtoken: ["jwt", "auth", "token"],
-    helmet: ["header", "csp", "xss"],
-    sequelize: ["sql-injection", "nosql"],
-    mongoose: ["nosql-injection", "injection"],
-    mysql: ["sql-injection", "injection"],
-    pg: ["sql-injection", "injection"],
-    "crypto-js": ["crypto", "weak-cipher", "weak-hash"],
-    bcrypt: ["password", "hash"],
-    passport: ["auth", "authentication"],
-    cors: ["cors", "origin"],
-    multer: ["upload", "file", "path-traversal"],
-    child_process: ["command-injection", "exec"],
-};
-function correlate(deps, findings) {
-    const correlations = [];
-    for (const dep of deps) {
-        const patterns = KNOWN_VULN_PATTERNS[dep.name] || [];
-        const matched = findings.filter((f) => {
-            const text = `${f.ruleId} ${f.title} ${f.description || ""}`.toLowerCase();
-            return patterns.some((p) => text.includes(p));
-        });
-        if (matched.length > 0) {
-            const sevWeights = { critical: 10, high: 7, medium: 4, low: 1 };
-            const riskScore = matched.reduce((s, f) => s + (sevWeights[f.severity] || 2), 0);
-            correlations.push({
-                dependency: dep.name,
-                version: dep.version,
-                findingCount: matched.length,
-                findings: matched.map((f) => ({ ruleId: f.ruleId, severity: f.severity, title: f.title })),
-                riskScore,
-                upgradeRecommendation: riskScore > 20 ? "Urgent upgrade recommended" : riskScore > 10 ? "Upgrade recommended" : "Monitor",
-            });
-        }
-    }
-    return correlations.sort((a, b) => b.riskScore - a.riskScore);
-}
-// ─── CLI ────────────────────────────────────────────────────────────────────
-const STORE = ".judges-dep-correlate";
-export function runDepCorrelate(argv) {
-    if (argv.includes("--help") || argv.includes("-h")) {
-        console.log(`
-judges dep-correlate — Dependency vulnerability correlation
-
-Usage:
-  judges dep-correlate
-  judges dep-correlate --deps
-  judges dep-correlate --top 5
-
-Options:
-  --deps                List detected dependencies
-  --top <n>             Show top N riskiest dependencies
-  --save                Save report to ${STORE}/
-  --format json         JSON output
-  --help, -h            Show this help
-`);
-        return;
-    }
-    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
-    const deps = loadDeps();
-    // List deps only
-    if (argv.includes("--deps")) {
-        if (format === "json") {
-            console.log(JSON.stringify(deps, null, 2));
-        }
-        else {
-            console.log(`\n  Dependencies (${deps.length})\n  ──────────────────────────`);
-            for (const d of deps) {
-                console.log(`    ${d.name.padEnd(30)} ${d.version.padEnd(15)} ${d.type}`);
-            }
-            console.log("");
-        }
-        return;
-    }
-    if (deps.length === 0) {
-        console.log("  No dependencies found. Supports: package.json, requirements.txt, go.mod");
-        return;
-    }
-    const findings = loadFindings();
-    const correlations = correlate(deps, findings);
-    const topN = argv.find((_a, i) => argv[i - 1] === "--top");
-    const limit = topN ? parseInt(topN, 10) : correlations.length;
-    const report = {
-        correlations: correlations.slice(0, limit),
-        totalDeps: deps.length,
-        depsWithFindings: correlations.length,
-        timestamp: new Date().toISOString(),
-    };
-    // Save
-    if (argv.includes("--save")) {
-        if (!existsSync(STORE))
-            mkdirSync(STORE, { recursive: true });
-        writeFileSync(join(STORE, "correlation-report.json"), JSON.stringify(report, null, 2));
-        console.log(`  Saved to ${STORE}/correlation-report.json`);
-    }
-    if (format === "json") {
-        console.log(JSON.stringify(report, null, 2));
-    }
-    else {
-        console.log(`\n  Dependency Vulnerability Correlation`);
-        console.log(`  Total dependencies: ${report.totalDeps}  With correlated findings: ${report.depsWithFindings}`);
-        console.log(`  ──────────────────────────`);
-        if (report.correlations.length === 0) {
-            console.log(`    ✅ No dependency-finding correlations detected`);
-            if (findings.length === 0)
-                console.log(`    (No findings data found — run a scan first)`);
-            console.log("");
-            return;
-        }
-        for (const c of report.correlations) {
-            console.log(`\n    ${c.dependency}@${c.version}  Risk: ${c.riskScore}  Findings: ${c.findingCount}`);
-            console.log(`    Recommendation: ${c.upgradeRecommendation}`);
-            for (const f of c.findings.slice(0, 3)) {
-                console.log(`      - [${f.severity.toUpperCase()}] ${f.ruleId}: ${f.title}`);
-            }
-            if (c.findings.length > 3)
-                console.log(`      ... and ${c.findings.length - 3} more`);
-        }
-        console.log("");
-    }
-}
-//# sourceMappingURL=dep-correlate.js.map

package/dist/commands/dep-correlate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dep-correlate.js","sourceRoot":"","sources":["../../src/commands/dep-correlate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA0B5B,+EAA+E;AAE/E,SAAS,QAAQ;IACf,MAAM,IAAI,GAAc,EAAE,CAAC;IAE3B,qBAAqB;IACrB,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1D,IAAI,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtD,IAAI,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY;IACnB,sCAAsC;IACtC,MAAM,KAAK,GAAG,CAAC,uBAAuB,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAEzG,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC,MAAM;qBACf,MAAM,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;qBAC5D,GAAG,CACF,CAAC,CAA0B,EAAE,EAAE,CAC7B,CAAC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CACxG,CAAC;YACN,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,+EAA+E;AAE/E,MAAM,mBAAmB,GAA6B;IACpD,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC;IACpD,MAAM,EAAE,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;IACpD,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;IAC3B,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;IACtC,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;IAChC,SAAS,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC;IACrC,QAAQ,EAAE,CAAC,iBAAiB,EAAE,WAAW,CAAC;IAC1C,KAAK,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;IACrC,EAAE,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;IAClC,WAAW,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC;IACnD,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC;IACpC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACxB,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC;IAC5C,aAAa,EAAE,CAAC,mBAAmB,EAAE,MAAM,CAAC;CAC7C,CAAC;AAEF,SAAS,SAAS,CAChB,IAAe,EACf,QAA0F;IAE1F,MAAM,YAAY,GAAqB,EAAE,CAAC;IAE1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3E,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,UAAU,GAA2B,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YACxF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAEjF,YAAY,CAAC,IAAI,CAAC;gBAChB,UAAU,EAAE,GAAG,CAAC,IAAI;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,YAAY,EAAE,OAAO,CAAC,MAAM;gBAC5B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC1F,SAAS;gBACT,qBAAqB,EACnB,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS;aACrG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,+EAA+E;AAE/E,MAAM,KAAK,GAAG,uBAAuB,CAAC;AAEtC,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;yCAWyB,KAAK;;;CAG7C,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IAExB,iBAAiB;IACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,MAAM,iCAAiC,CAAC,CAAC;YAC/E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;IAE9D,MAAM,MAAM,GAAsB;QAChC,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;QAC1C,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,gBAAgB,EAAE,YAAY,CAAC,MAAM;QACrC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,OAAO;IACP,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,yBAAyB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,0BAA0B,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,SAAS,+BAA+B,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC/G,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAE5C,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC1F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,SAAS,eAAe,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;YACrG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;YAC9D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/deploy-readiness.d.ts

@@ -1,6 +0,0 @@
-/**
- * Deploy readiness — pre-deployment checklist that validates
- * AI-generated code is production-ready.
- */
-export declare function runDeployReadiness(argv: string[]): void;
-//# sourceMappingURL=deploy-readiness.d.ts.map

package/dist/commands/deploy-readiness.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"deploy-readiness.d.ts","sourceRoot":"","sources":["../../src/commands/deploy-readiness.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA4LH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsDvD"}