@kevinrabun/judges 3.112.0 → 3.114.0

package/dist/commands/profile.js

@@ -1,102 +0,0 @@
-/**
- * Performance profiling — track evaluation time per judge/evaluator.
- *
- * Wraps tribunal evaluation and reports timing data for each judge,
- * helping identify bottlenecks and optimize CI pipeline duration.
- */
-// ─── Profiling ──────────────────────────────────────────────────────────────
-/**
- * Create a profiling wrapper around a function.
- */
-export function profileFn(fn) {
-    const start = performance.now();
-    const result = fn();
-    return { result, durationMs: Math.round(performance.now() - start) };
-}
-/**
- * Create a profiling wrapper around an async function.
- */
-export async function profileAsync(fn) {
-    const start = performance.now();
-    const result = await fn();
-    return { result, durationMs: Math.round(performance.now() - start) };
-}
-/**
- * Build a profiling report from timing data collected during evaluation.
- */
-export function buildProfilingReport(timings) {
-    if (timings.length === 0) {
-        return { totalMs: 0, judges: [], slowest: "N/A", fastest: "N/A", avgMs: 0 };
-    }
-    const sorted = [...timings].sort((a, b) => b.durationMs - a.durationMs);
-    const totalMs = sorted.reduce((sum, t) => sum + t.durationMs, 0);
-    return {
-        totalMs,
-        judges: sorted,
-        slowest: sorted[0].judgeId,
-        fastest: sorted[sorted.length - 1].judgeId,
-        avgMs: Math.round(totalMs / sorted.length),
-    };
-}
-// ─── CLI ────────────────────────────────────────────────────────────────────
-export function runProfile(argv) {
-    if (argv.includes("--help") || argv.includes("-h")) {
-        console.log(`
-judges profile — Performance profiling for judge evaluations
-
-Usage:
-  judges profile <file>               Profile evaluation of a file
-  judges profile --report <path>      Display a saved profiling report
-
-Options:
-  --format json          JSON output
-  --threshold <ms>       Highlight judges slower than threshold (default: 500)
-  --help, -h             Show this help
-
-Note: This command wraps the normal evaluation pipeline with timing
-instrumentation. Each judge's execution time is measured individually.
-`);
-        return;
-    }
-    const { readFileSync, existsSync } = require("fs");
-    const reportPath = argv.find((_a, i) => argv[i - 1] === "--report");
-    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
-    const thresholdStr = argv.find((_a, i) => argv[i - 1] === "--threshold");
-    const threshold = thresholdStr ? parseInt(thresholdStr, 10) : 500;
-    if (reportPath && existsSync(reportPath)) {
-        const report = JSON.parse(readFileSync(reportPath, "utf-8"));
-        printReport(report, format, threshold);
-        return;
-    }
-    // Without a saved report, show instructions
-    console.log(`
-  Profiling requires running an evaluation first.
-
-  Run with JUDGES_PROFILE=1 to enable profiling during eval:
-
-    JUDGES_PROFILE=1 judges eval --file src/app.ts --format json > results.json
-
-  Then view the profiling data:
-
-    judges profile --report .judges-profile.json
-
-  The profiling data is saved to .judges-profile.json automatically
-  when JUDGES_PROFILE=1 is set.
-`);
-}
-function printReport(report, format, threshold) {
-    if (format === "json") {
-        console.log(JSON.stringify(report, null, 2));
-        return;
-    }
-    console.log(`\n  ⏱️  Judges Evaluation Profile\n`);
-    console.log(`  Total: ${report.totalMs}ms | Avg: ${report.avgMs}ms | Judges: ${report.judges.length}\n`);
-    const maxLen = Math.max(...report.judges.map((j) => j.judgeId.length));
-    for (const j of report.judges) {
-        const bar = "█".repeat(Math.max(1, Math.round((j.durationMs / report.totalMs) * 40)));
-        const warn = j.durationMs > threshold ? " ⚠️ SLOW" : "";
-        console.log(`  ${j.judgeId.padEnd(maxLen)}  ${String(j.durationMs).padStart(6)}ms  ${bar}  (${j.findingCount} findings)${warn}`);
-    }
-    console.log(`\n  Slowest: ${report.slowest} | Fastest: ${report.fastest}\n`);
-}
-//# sourceMappingURL=profile.js.map

package/dist/commands/profile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/commands/profile.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkBH,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,SAAS,CAAI,EAAW;IACtC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,EAAoB;IACxD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAsB;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAEjE,OAAO;QACL,OAAO;QACP,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO;QAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO;QAC1C,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,UAAU,CAAC,IAAc;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAElE,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,GAAoB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC9E,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,4CAA4C;IAC5C,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAab,CAAC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAuB,EAAE,MAAc,EAAE,SAAiB;IAC7E,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,KAAK,gBAAgB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAEzG,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAEvE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,YAAY,aAAa,IAAI,EAAE,CACpH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,OAAO,eAAe,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;AAC/E,CAAC"}

package/dist/commands/prompt-replay.d.ts

@@ -1,8 +0,0 @@
-/**
- * Prompt replay — reverse-engineer the probable AI prompt that generated
- * flagged code and suggest improved prompts that produce compliant output.
- *
- * Turns Judges into a prompt engineering coach.
- */
-export declare function runPromptReplay(argv: string[]): void;
-//# sourceMappingURL=prompt-replay.d.ts.map

package/dist/commands/prompt-replay.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"prompt-replay.d.ts","sourceRoot":"","sources":["../../src/commands/prompt-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+IH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsEpD"}

package/dist/commands/prompt-replay.js

@@ -1,177 +0,0 @@
-/**
- * Prompt replay — reverse-engineer the probable AI prompt that generated
- * flagged code and suggest improved prompts that produce compliant output.
- *
- * Turns Judges into a prompt engineering coach.
- */
-import { readFileSync, existsSync } from "fs";
-// ─── Pattern → Prompt Map ───────────────────────────────────────────────────
-const PATTERN_PROMPTS = [
-    {
-        pattern: /sql.?inject|string\s+concat.*query|`\$\{.*\}.*(?:SELECT|INSERT|UPDATE|DELETE)/i,
-        category: "SQL Injection",
-        probablePrompt: "Generate a function to query the database for user records",
-        improvedPrompt: "Generate a function to query the database for user records using parameterized queries. Use prepared statements, never string concatenation for SQL. Include input validation.",
-        rationale: "AI models default to string interpolation for SQL unless explicitly told to use parameterized queries",
-    },
-    {
-        pattern: /innerHTML|dangerouslySetInnerHTML|document\.write/i,
-        category: "XSS Vulnerability",
-        probablePrompt: "Create a component that renders user content",
-        improvedPrompt: "Create a component that renders user content. Sanitize all user inputs using DOMPurify before rendering. Never use innerHTML or dangerouslySetInnerHTML with unsanitized data.",
-        rationale: "AI models use innerHTML for simplicity unless instructed to sanitize",
-    },
-    {
-        pattern: /hardcoded.?(secret|password|key|token)|['"][A-Za-z0-9+/]{20,}['"]/i,
-        category: "Hardcoded Secrets",
-        probablePrompt: "Set up API authentication with the service",
-        improvedPrompt: "Set up API authentication with the service. Read all secrets from environment variables or a secrets manager. Never hardcode API keys, passwords, or tokens in source code.",
-        rationale: "AI models often embed placeholder credentials that developers forget to replace",
-    },
-    {
-        pattern: /eval\s*\(|new\s+Function\s*\(/i,
-        category: "Code Injection via eval",
-        probablePrompt: "Create a dynamic expression evaluator",
-        improvedPrompt: "Create a dynamic expression evaluator. Do NOT use eval() or new Function(). Use a safe expression parser library (e.g., mathjs, expr-eval) or a whitelist-based approach.",
-        rationale: "AI models reach for eval() as the shortest path to dynamic execution",
-    },
-    {
-        pattern: /catch\s*\([^)]*\)\s*\{\s*\}/,
-        category: "Empty Catch Blocks",
-        probablePrompt: "Add error handling to this function",
-        improvedPrompt: "Add error handling to this function. Every catch block must either log the error, re-throw it, or return a meaningful error response. Never swallow exceptions silently.",
-        rationale: "AI models often add empty try/catch to 'handle errors' without actual handling",
-    },
-    {
-        pattern: /console\.(log|debug)\s*\(.*(?:password|token|secret|key|credential)/i,
-        category: "Sensitive Data Logging",
-        probablePrompt: "Add logging to track authentication flow",
-        improvedPrompt: "Add logging to track authentication flow. Never log passwords, tokens, secrets, or PII. Use structured logging with severity levels. Redact sensitive fields.",
-        rationale: "AI models log everything requested without considering data sensitivity",
-    },
-    {
-        pattern: /(?:http:\/\/|fetch\s*\(['"]http:)/i,
-        category: "Insecure HTTP",
-        probablePrompt: "Fetch data from the API endpoint",
-        improvedPrompt: "Fetch data from the API endpoint using HTTPS. Never use plain HTTP for API calls. Validate SSL certificates. Set appropriate timeouts.",
-        rationale: "AI models sometimes use http:// in examples without upgrading to https://",
-    },
-    {
-        pattern: /Math\.random\s*\(\)|crypto\.createHash\s*\(\s*['"]md5['"]\)/i,
-        category: "Weak Cryptography",
-        probablePrompt: "Generate a unique token/hash for the user session",
-        improvedPrompt: "Generate a unique token for the user session using crypto.randomUUID() or crypto.randomBytes(). For hashing, use SHA-256 or bcrypt. Never use Math.random() for security or MD5 for hashing.",
-        rationale: "AI models default to Math.random() or MD5 which are cryptographically insecure",
-    },
-    {
-        pattern: /\.exec\s*\(|child_process|spawn\s*\(.*\$|execSync\s*\(.*\+/i,
-        category: "Command Injection",
-        probablePrompt: "Execute a system command with user-provided parameters",
-        improvedPrompt: "Execute a system command with user-provided parameters. Use an allowlist of permitted commands. Pass arguments as an array (spawn), never via string concatenation. Validate and sanitize all inputs.",
-        rationale: "AI models concatenate user input into shell commands without sanitization",
-    },
-    {
-        pattern: /cors\(\s*\)|Access-Control-Allow-Origin.*\*/i,
-        category: "Permissive CORS",
-        probablePrompt: "Enable CORS for the API",
-        improvedPrompt: "Enable CORS for the API. Specify allowed origins explicitly (never use '*' in production). Set appropriate methods, headers, and credentials options.",
-        rationale: "AI models default to permissive CORS (allow all) for simplicity",
-    },
-    {
-        pattern: /(?:app|router)\.(get|post|put|delete)\s*\([^)]*(?!.*(?:auth|middleware|protect|guard))/i,
-        category: "Missing Auth Middleware",
-        probablePrompt: "Create REST API endpoints for the resource",
-        improvedPrompt: "Create REST API endpoints for the resource. Apply authentication middleware to all routes. Use authorization checks for role-based access. Apply rate limiting to prevent abuse.",
-        rationale: "AI models create routes without auth middleware unless explicitly instructed",
-    },
-    {
-        pattern: /(?:SELECT|INSERT|UPDATE|DELETE)\s+.*\*\s+FROM/i,
-        category: "SELECT * Usage",
-        probablePrompt: "Query all records from the table",
-        improvedPrompt: "Query records from the table. Select only the specific columns needed, never use SELECT *. Add pagination with LIMIT/OFFSET. Include proper WHERE clauses.",
-        rationale: "AI models use SELECT * for convenience, which exposes unnecessary data and hurts performance",
-    },
-];
-// ─── Analysis ───────────────────────────────────────────────────────────────
-function analyzeCode(content) {
-    const suggestions = [];
-    const seen = new Set();
-    for (const entry of PATTERN_PROMPTS) {
-        if (entry.pattern.test(content) && !seen.has(entry.category)) {
-            seen.add(entry.category);
-            suggestions.push({
-                findingPattern: entry.category,
-                probablePrompt: entry.probablePrompt,
-                improvedPrompt: entry.improvedPrompt,
-                rationale: entry.rationale,
-            });
-        }
-    }
-    return suggestions;
-}
-// ─── CLI ────────────────────────────────────────────────────────────────────
-export function runPromptReplay(argv) {
-    if (argv.includes("--help") || argv.includes("-h")) {
-        console.log(`
-judges prompt-replay — Reverse-engineer AI prompts and suggest improvements
-
-Usage:
-  judges prompt-replay <file>
-  judges prompt-replay src/api.ts --format json
-  judges prompt-replay --demo
-
-Options:
-  <file>               File to analyze for AI-generated anti-patterns
-  --demo               Run with built-in demo code
-  --format json        JSON output
-  --help, -h           Show this help
-
-Detects AI-generated anti-patterns and suggests improved prompts that
-would produce compliant code on the first try.
-`);
-        return;
-    }
-    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
-    const isDemo = argv.includes("--demo");
-    let content;
-    if (isDemo) {
-        content = `
-const query = "SELECT * FROM users WHERE id = " + userId;
-document.innerHTML = userInput;
-const apiKey = "sk-1234567890abcdef";
-try { riskyOperation(); } catch (e) {}
-console.log("Auth token: " + token);
-fetch("http://api.example.com/data");
-const sessionId = Math.random().toString(36);
-app.get("/admin/users", (req, res) => { res.json(users); });
-`;
-    }
-    else {
-        const file = argv.find((a) => !a.startsWith("-")) || "";
-        if (!file || !existsSync(file)) {
-            console.error("  Specify a file to analyze or use --demo");
-            return;
-        }
-        content = readFileSync(file, "utf-8");
-    }
-    const suggestions = analyzeCode(content);
-    if (format === "json") {
-        console.log(JSON.stringify({ suggestions, total: suggestions.length, timestamp: new Date().toISOString() }, null, 2));
-    }
-    else {
-        console.log(`\n  Prompt Replay — ${suggestions.length} AI prompt improvement(s) found\n  ──────────────────────────`);
-        if (suggestions.length === 0) {
-            console.log("  ✅ No common AI anti-patterns detected");
-        }
-        else {
-            for (const s of suggestions) {
-                console.log(`\n    🔍 ${s.findingPattern}`);
-                console.log(`        Probable AI prompt: "${s.probablePrompt}"`);
-                console.log(`        💡 Improved prompt:  "${s.improvedPrompt}"`);
-                console.log(`        📝 ${s.rationale}`);
-            }
-        }
-        console.log("");
-    }
-}
-//# sourceMappingURL=prompt-replay.js.map

package/dist/commands/prompt-replay.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"prompt-replay.js","sourceRoot":"","sources":["../../src/commands/prompt-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAW9C,+EAA+E;AAE/E,MAAM,eAAe,GAMhB;IACH;QACE,OAAO,EAAE,gFAAgF;QACzF,QAAQ,EAAE,eAAe;QACzB,cAAc,EAAE,4DAA4D;QAC5E,cAAc,EACZ,gLAAgL;QAClL,SAAS,EAAE,uGAAuG;KACnH;IACD;QACE,OAAO,EAAE,oDAAoD;QAC7D,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,8CAA8C;QAC9D,cAAc,EACZ,gLAAgL;QAClL,SAAS,EAAE,sEAAsE;KAClF;IACD;QACE,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,4CAA4C;QAC5D,cAAc,EACZ,6KAA6K;QAC/K,SAAS,EAAE,iFAAiF;KAC7F;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,yBAAyB;QACnC,cAAc,EAAE,uCAAuC;QACvD,cAAc,EACZ,2KAA2K;QAC7K,SAAS,EAAE,sEAAsE;KAClF;IACD;QACE,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,oBAAoB;QAC9B,cAAc,EAAE,qCAAqC;QACrD,cAAc,EACZ,0KAA0K;QAC5K,SAAS,EAAE,gFAAgF;KAC5F;IACD;QACE,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,wBAAwB;QAClC,cAAc,EAAE,0CAA0C;QAC1D,cAAc,EACZ,+JAA+J;QACjK,SAAS,EAAE,yEAAyE;KACrF;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,eAAe;QACzB,cAAc,EAAE,kCAAkC;QAClD,cAAc,EACZ,wIAAwI;QAC1I,SAAS,EAAE,2EAA2E;KACvF;IACD;QACE,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,mDAAmD;QACnE,cAAc,EACZ,8LAA8L;QAChM,SAAS,EAAE,gFAAgF;KAC5F;IACD;QACE,OAAO,EAAE,6DAA6D;QACtE,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,wDAAwD;QACxE,cAAc,EACZ,uMAAuM;QACzM,SAAS,EAAE,2EAA2E;KACvF;IACD;QACE,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,cAAc,EAAE,yBAAyB;QACzC,cAAc,EACZ,uJAAuJ;QACzJ,SAAS,EAAE,iEAAiE;KAC7E;IACD;QACE,OAAO,EAAE,yFAAyF;QAClG,QAAQ,EAAE,yBAAyB;QACnC,cAAc,EAAE,4CAA4C;QAC5D,cAAc,EACZ,kLAAkL;QACpL,SAAS,EAAE,8EAA8E;KAC1F;IACD;QACE,OAAO,EAAE,gDAAgD;QACzD,QAAQ,EAAE,gBAAgB;QAC1B,cAAc,EAAE,kCAAkC;QAClD,cAAc,EACZ,4JAA4J;QAC9J,SAAS,EAAE,8FAA8F;KAC1G;CACF,CAAC;AAEF,+EAA+E;AAE/E,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC;gBACf,cAAc,EAAE,KAAK,CAAC,QAAQ;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,OAAe,CAAC;IAEpB,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG;;;;;;;;;CASb,CAAC;IACA,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CACzG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,uBAAuB,WAAW,CAAC,MAAM,+DAA+D,CACzG,CAAC;QAEF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;gBAClE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/quality-gate.d.ts

@@ -1,70 +0,0 @@
-/**
- * `judges quality-gate` — Configurable composite quality gates.
- *
- * Defines and evaluates multi-dimensional quality gates for CI pipelines.
- * Goes beyond simple severity counts — supports score thresholds, specific
- * rule requirements, trend-based gates, and custom composite conditions.
- *
- * Usage:
- *   judges quality-gate --file src/app.ts                    # Evaluate default gate
- *   judges quality-gate --file src/app.ts --gate strict      # Named gate definition
- *   judges quality-gate --file src/app.ts --json             # JSON output
- *
- * Configuration in .judgesrc:
- * ```json
- * {
- *   "qualityGates": {
- *     "default": {
- *       "maxFindings": { "critical": 0, "high": 2 },
- *       "minScore": 70,
- *       "requiredJudges": ["cybersecurity", "data-security"],
- *       "maxFpRate": 0.3
- *     },
- *     "strict": {
- *       "maxFindings": { "critical": 0, "high": 0, "medium": 5 },
- *       "minScore": 85,
- *       "requiredJudges": ["cybersecurity", "data-security", "authentication"]
- *     }
- *   }
- * }
- * ```
- */
-import type { Severity, TribunalVerdict } from "../types.js";
-export interface QualityGateDefinition {
-    /** Maximum allowed findings by severity — exceeding any triggers failure */
-    maxFindings?: Partial<Record<Severity, number>>;
-    /** Minimum aggregated score (0-100) */
-    minScore?: number;
-    /** Judge IDs that must participate in evaluation */
-    requiredJudges?: string[];
-    /** Maximum false-positive rate allowed (0-1) — requires feedback data */
-    maxFpRate?: number;
-    /** Required rules that must not be violated — listing a rule ID means zero violations */
-    blockerRules?: string[];
-    /** Minimum percentage of findings that must have auto-fix patches */
-    minFixRate?: number;
-    /** Minimum average confidence score for findings (0-1) */
-    minConfidence?: number;
-}
-export interface QualityGateResult {
-    /** Overall pass/fail */
-    passed: boolean;
-    /** Named gate that was evaluated */
-    gateName: string;
-    /** Individual check results */
-    checks: QualityGateCheck[];
-    /** Verdict summary */
-    summary: string;
-}
-export interface QualityGateCheck {
-    /** Check name */
-    name: string;
-    /** Pass/fail */
-    passed: boolean;
-    /** Descriptive message */
-    message: string;
-}
-export declare function evaluateQualityGate(gate: QualityGateDefinition, gateName: string, verdict: TribunalVerdict, fpRateByRule?: Map<string, number>): QualityGateResult;
-export declare function parseQualityGateConfig(obj: Record<string, unknown>): Record<string, QualityGateDefinition> | undefined;
-export declare function runQualityGate(argv: string[]): void;
-//# sourceMappingURL=quality-gate.d.ts.map

package/dist/commands/quality-gate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"quality-gate.d.ts","sourceRoot":"","sources":["../../src/commands/quality-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAI7D,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,wBAAwB;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,qBAAqB,EAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,iBAAiB,CAsGnB;AAID,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,SAAS,CA2BnD;AAiBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAgGnD"}

package/dist/commands/quality-gate.js

@@ -1,264 +0,0 @@
-/**
- * `judges quality-gate` — Configurable composite quality gates.
- *
- * Defines and evaluates multi-dimensional quality gates for CI pipelines.
- * Goes beyond simple severity counts — supports score thresholds, specific
- * rule requirements, trend-based gates, and custom composite conditions.
- *
- * Usage:
- *   judges quality-gate --file src/app.ts                    # Evaluate default gate
- *   judges quality-gate --file src/app.ts --gate strict      # Named gate definition
- *   judges quality-gate --file src/app.ts --json             # JSON output
- *
- * Configuration in .judgesrc:
- * ```json
- * {
- *   "qualityGates": {
- *     "default": {
- *       "maxFindings": { "critical": 0, "high": 2 },
- *       "minScore": 70,
- *       "requiredJudges": ["cybersecurity", "data-security"],
- *       "maxFpRate": 0.3
- *     },
- *     "strict": {
- *       "maxFindings": { "critical": 0, "high": 0, "medium": 5 },
- *       "minScore": 85,
- *       "requiredJudges": ["cybersecurity", "data-security", "authentication"]
- *     }
- *   }
- * }
- * ```
- */
-import { existsSync, readFileSync } from "fs";
-import { extname } from "path";
-import { evaluateWithTribunal } from "../evaluators/index.js";
-// ─── Gate Evaluation ────────────────────────────────────────────────────────
-const SEVERITY_LEVELS = ["critical", "high", "medium", "low", "info"];
-export function evaluateQualityGate(gate, gateName, verdict, fpRateByRule) {
-    const checks = [];
-    // Check max findings by severity
-    if (gate.maxFindings) {
-        const counts = { critical: 0, high: 0, medium: 0, low: 0, info: 0 };
-        for (const f of verdict.findings) {
-            counts[f.severity] = (counts[f.severity] || 0) + 1;
-        }
-        for (const sev of SEVERITY_LEVELS) {
-            const max = gate.maxFindings[sev];
-            if (max !== undefined) {
-                const actual = counts[sev];
-                checks.push({
-                    name: `max-${sev}`,
-                    passed: actual <= max,
-                    message: `${sev} findings: ${actual}/${max} allowed`,
-                });
-            }
-        }
-    }
-    // Check minimum score
-    if (gate.minScore !== undefined) {
-        checks.push({
-            name: "min-score",
-            passed: verdict.overallScore >= gate.minScore,
-            message: `Score: ${verdict.overallScore}/${gate.minScore} required`,
-        });
-    }
-    // Check required judges participated
-    if (gate.requiredJudges) {
-        const participatingJudges = new Set(verdict.evaluations.map((e) => e.judgeId));
-        for (const required of gate.requiredJudges) {
-            checks.push({
-                name: `required-judge-${required}`,
-                passed: participatingJudges.has(required),
-                message: `Judge "${required}": ${participatingJudges.has(required) ? "participated" : "MISSING"}`,
-            });
-        }
-    }
-    // Check blocker rules
-    if (gate.blockerRules) {
-        const violatedRules = new Set(verdict.findings.map((f) => f.ruleId));
-        for (const rule of gate.blockerRules) {
-            const violated = violatedRules.has(rule);
-            checks.push({
-                name: `blocker-${rule}`,
-                passed: !violated,
-                message: `Blocker rule ${rule}: ${violated ? "VIOLATED" : "clear"}`,
-            });
-        }
-    }
-    // Check max FP rate
-    if (gate.maxFpRate !== undefined && fpRateByRule) {
-        const avgFpRate = fpRateByRule.size > 0 ? Array.from(fpRateByRule.values()).reduce((sum, r) => sum + r, 0) / fpRateByRule.size : 0;
-        checks.push({
-            name: "max-fp-rate",
-            passed: avgFpRate <= gate.maxFpRate,
-            message: `FP rate: ${(avgFpRate * 100).toFixed(1)}%/${(gate.maxFpRate * 100).toFixed(1)}% allowed`,
-        });
-    }
-    // Check min fix rate
-    if (gate.minFixRate !== undefined) {
-        const fixable = verdict.findings.filter((f) => f.patch).length;
-        const total = verdict.findings.length;
-        const fixRate = total > 0 ? fixable / total : 1;
-        checks.push({
-            name: "min-fix-rate",
-            passed: fixRate >= gate.minFixRate,
-            message: `Fix rate: ${(fixRate * 100).toFixed(1)}%/${(gate.minFixRate * 100).toFixed(1)}% required`,
-        });
-    }
-    // Check min confidence
-    if (gate.minConfidence !== undefined) {
-        const confidences = verdict.findings.filter((f) => f.confidence !== undefined).map((f) => f.confidence);
-        const avgConf = confidences.length > 0 ? confidences.reduce((s, c) => s + c, 0) / confidences.length : 1;
-        checks.push({
-            name: "min-confidence",
-            passed: avgConf >= gate.minConfidence,
-            message: `Avg confidence: ${(avgConf * 100).toFixed(1)}%/${(gate.minConfidence * 100).toFixed(1)}% required`,
-        });
-    }
-    const passed = checks.every((c) => c.passed);
-    const failed = checks.filter((c) => !c.passed);
-    return {
-        passed,
-        gateName,
-        checks,
-        summary: passed
-            ? `Quality gate "${gateName}" PASSED — all ${checks.length} check(s) passed`
-            : `Quality gate "${gateName}" FAILED — ${failed.length}/${checks.length} check(s) failed`,
-    };
-}
-// ─── Config Parsing ─────────────────────────────────────────────────────────
-export function parseQualityGateConfig(obj) {
-    if (!obj.qualityGates)
-        return undefined;
-    const raw = obj.qualityGates;
-    if (typeof raw !== "object" || raw === null || Array.isArray(raw))
-        return undefined;
-    const gates = {};
-    for (const [name, def] of Object.entries(raw)) {
-        if (typeof def !== "object" || def === null)
-            continue;
-        const d = def;
-        const gate = {};
-        if (d.maxFindings && typeof d.maxFindings === "object") {
-            gate.maxFindings = d.maxFindings;
-        }
-        if (typeof d.minScore === "number")
-            gate.minScore = d.minScore;
-        if (Array.isArray(d.requiredJudges))
-            gate.requiredJudges = d.requiredJudges;
-        if (typeof d.maxFpRate === "number")
-            gate.maxFpRate = d.maxFpRate;
-        if (Array.isArray(d.blockerRules))
-            gate.blockerRules = d.blockerRules;
-        if (typeof d.minFixRate === "number")
-            gate.minFixRate = d.minFixRate;
-        if (typeof d.minConfidence === "number")
-            gate.minConfidence = d.minConfidence;
-        gates[name] = gate;
-    }
-    return Object.keys(gates).length > 0 ? gates : undefined;
-}
-// ─── CLI Runner ─────────────────────────────────────────────────────────────
-const EXT_TO_LANG = {
-    ".ts": "typescript",
-    ".tsx": "typescript",
-    ".js": "javascript",
-    ".jsx": "javascript",
-    ".py": "python",
-    ".rs": "rust",
-    ".go": "go",
-    ".java": "java",
-    ".cs": "csharp",
-    ".cpp": "cpp",
-};
-export function runQualityGate(argv) {
-    if (argv.includes("--help") || argv.includes("-h")) {
-        console.log(`
-judges quality-gate — Evaluate configurable quality gates
-
-Usage:
-  judges quality-gate --file <path>              Evaluate default gate
-  judges quality-gate --file <path> --gate <name> Use a named gate definition
-  judges quality-gate --json                      JSON output
-
-Configuration (.judgesrc):
-  "qualityGates": {
-    "default": {
-      "maxFindings": { "critical": 0, "high": 2 },
-      "minScore": 70,
-      "requiredJudges": ["cybersecurity"],
-      "blockerRules": ["SEC-001", "AUTH-001"]
-    }
-  }
-
-Options:
-  --file, -f <path>    File to evaluate
-  --gate <name>        Gate name (default: "default")
-  --json               JSON output
-  --help, -h           Show this help
-`);
-        return;
-    }
-    const file = argv.find((_a, i) => argv[i - 1] === "--file" || argv[i - 1] === "-f");
-    const gateName = argv.find((_a, i) => argv[i - 1] === "--gate") || "default";
-    const jsonFormat = argv.includes("--json");
-    if (!file) {
-        console.error("Error: --file is required.");
-        process.exit(1);
-    }
-    if (!existsSync(file)) {
-        console.error(`Error: File not found: ${file}`);
-        process.exit(1);
-    }
-    // Load quality gate config from .judgesrc
-    let gates;
-    for (const name of [".judgesrc", ".judgesrc.json"]) {
-        if (existsSync(name)) {
-            try {
-                const raw = JSON.parse(readFileSync(name, "utf-8"));
-                gates = parseQualityGateConfig(raw);
-            }
-            catch {
-                // Skip invalid config
-            }
-            break;
-        }
-    }
-    // Use a sensible default gate if none configured
-    const gate = gates?.[gateName] ?? {
-        maxFindings: { critical: 0, high: 3 },
-        minScore: 60,
-    };
-    // Evaluate
-    const code = readFileSync(file, "utf-8");
-    const lang = EXT_TO_LANG[extname(file)] || "typescript";
-    const verdict = evaluateWithTribunal(code, lang);
-    // Load FP rates if available
-    let fpRateByRule;
-    try {
-        const { loadFeedbackStore, getFpRateByRule: getFpRate } = require("./feedback.js");
-        const store = loadFeedbackStore();
-        const rates = getFpRate(store);
-        fpRateByRule = rates instanceof Map ? rates : new Map(Object.entries(rates));
-    }
-    catch {
-        // Feedback data not available
-    }
-    const result = evaluateQualityGate(gate, gateName, verdict, fpRateByRule);
-    if (jsonFormat) {
-        console.log(JSON.stringify(result, null, 2));
-    }
-    else {
-        const icon = result.passed ? "✅" : "❌";
-        console.log(`\n  ${icon} ${result.summary}\n`);
-        for (const check of result.checks) {
-            const checkIcon = check.passed ? "  ✓" : "  ✗";
-            console.log(`  ${checkIcon} ${check.message}`);
-        }
-        console.log("");
-    }
-    if (!result.passed) {
-        process.exit(1);
-    }
-}
-//# sourceMappingURL=quality-gate.js.map