@kevinrabun/judges 3.112.0 → 3.114.0

package/dist/commands/review.js

@@ -13,15 +13,55 @@
  *
  * Requires: GITHUB_TOKEN environment variable (or gh CLI authenticated).
  */
-import { execFileSync, execSync } from "child_process";
+import { execFileSync } from "child_process";
 import { readFileSync, writeFileSync, unlinkSync } from "fs";
 import { tmpdir } from "os";
 import { resolve, join, extname } from "path";
+import { createHash } from "node:crypto";
 import { evaluateDiff, evaluateWithTribunal } from "../evaluators/index.js";
 import { evaluateProject } from "../evaluators/project.js";
+// Test hook to override evaluateDiff in unit tests
+let evaluateDiffImpl = evaluateDiff;
+export function __setEvaluateDiffImplForTest(fn) {
+    evaluateDiffImpl = fn ?? evaluateDiff;
+}
 import { parseConfig, loadCascadingConfig } from "../config.js";
 import { loadFeedbackStore, getFpRateByRule } from "./feedback.js";
 import { JUDGES } from "../judges/index.js";
+import { parseGitHubRepo, tryRunGit } from "../tools/command-safety.js";
+import { extractValidatedLlmFindings } from "./llm-benchmark.js";
+export function dedupeComments(comments) {
+    const seen = new Set();
+    const out = [];
+    for (const c of comments) {
+        const key = `${c.path}:${c.line}:${hashBody(c.body)}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(c);
+    }
+    return out;
+}
+export function filterAlreadyPostedComments(repo, pr, token, comments) {
+    try {
+        const resp = apiRequest("GET", `/repos/${repo}/pulls/${pr}/comments`, token);
+        const existing = resp.data ?? [];
+        const existingKeys = new Set(existing.map((c) => {
+            const path = c.path;
+            const line = c.line;
+            const body = c.body ?? "";
+            return `${path}:${line}:${hashBody(body)}`;
+        }));
+        return comments.filter((c) => !existingKeys.has(`${c.path}:${c.line}:${hashBody(c.body)}`));
+    }
+    catch (err) {
+        console.error("Failed to fetch existing comments, proceeding without dedupe", err);
+        return comments;
+    }
+}
+function hashBody(body) {
+    return createHash("sha1").update(body).digest("hex").slice(0, 8);
+}
 // ─── Language Detection ─────────────────────────────────────────────────────
 const EXT_TO_LANG = {
     ".ts": "typescript",
@@ -70,8 +110,8 @@ export function parsePatchToHunk(filePath, patch) {
     const changedLineNumbers = [];
     let newLineNum = 0;
     for (const line of lines) {
-        // Hunk header: @@ -10,5 +20,8 @@
-        const hunkMatch = line.match(/^@@ -\d+(?:,\d+)? \+(\d+)(?:,\d+)? @@/);
+        // Hunk header: @@ -10,5 +20,8 @@ (some tools omit trailing space/@@)
+        const hunkMatch = line.match(/^@@\s*-\d+(?:,\d+)?\s+\+(\d+)(?:,\d+)?\s*@@?/);
         if (hunkMatch) {
             newLineNum = parseInt(hunkMatch[1], 10) - 1;
             continue;
@@ -104,21 +144,8 @@ function getToken() {
     return process.env.GITHUB_TOKEN || process.env.GH_TOKEN;
 }
 function detectRepo() {
-    try {
-        const remote = execSync("git remote get-url origin", { encoding: "utf-8" }).trim();
-        // SSH: git@github.com:owner/repo.git
-        const sshMatch = remote.match(/github\.com[:/]([^/]+\/[^/.]+)/);
-        if (sshMatch)
-            return sshMatch[1];
-        // HTTPS: https://github.com/owner/repo.git
-        const httpsMatch = remote.match(/github\.com\/([^/]+\/[^/.]+)/);
-        if (httpsMatch)
-            return httpsMatch[1];
-    }
-    catch {
-        // Not a git repo or no remote
-    }
-    return undefined;
+    const remote = tryRunGit(["remote", "get-url", "origin"]);
+    return remote ? parseGitHubRepo(remote) : undefined;
 }
 function ghApiRequest(method, endpoint, token, body) {
     const url = endpoint.startsWith("https://") ? endpoint : `https://api.github.com${endpoint}`;
@@ -221,7 +248,14 @@ function ghCliRequest(method, endpoint, body) {
         return { status: 0, data: null };
     }
 }
+// Allow test injection of the GitHub API layer
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+let apiRequestImpl;
 function apiRequest(method, endpoint, token, body) {
+    const impl = apiRequestImpl;
+    if (impl) {
+        return impl(method, endpoint, token, body);
+    }
     if (ghCliAvailable()) {
         return ghCliRequest(method, endpoint, body);
     }
@@ -232,6 +266,102 @@ function apiRequest(method, endpoint, token, body) {
     console.error("Either install the `gh` CLI and run `gh auth login`, or set GITHUB_TOKEN env var.");
     process.exit(1);
 }
+export function __setApiRequestImplForTest(fn) {
+    apiRequestImpl = fn;
+}
+async function callOpenAiChat(prompt, opts) {
+    const baseUrl = opts.baseUrl || "https://api.openai.com/v1/chat/completions";
+    // Node 18+ has global fetch; avoid dynamic imports to keep tsc happy without node-fetch types
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const fetchImpl = globalThis.fetch;
+    if (!fetchImpl)
+        throw new Error("fetch() not available. Run on Node 18+ or polyfill fetch.");
+    const res = await fetchImpl(baseUrl, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${opts.apiKey}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+            model: opts.model,
+            messages: [{ role: "user", content: prompt }],
+            max_tokens: opts.maxTokens ?? 800,
+            temperature: 0.2,
+        }),
+    });
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        throw new Error(`LLM request failed: ${res.status} ${res.statusText} ${text}`);
+    }
+    const json = (await res.json());
+    const content = json.choices?.[0]?.message?.content;
+    if (!content)
+        throw new Error("LLM response missing content");
+    return content;
+}
+// test hooks for dependency injection
+let callOpenAiChatImpl = callOpenAiChat;
+export function __setCallOpenAiChatImplForTest(fn) {
+    callOpenAiChatImpl = fn;
+}
+/** Build a single prompt for the entire PR (tribunal mode). */
+function buildLlmPromptForPr(prFiles, maxBytes = 40000) {
+    const snippets = [];
+    for (const f of prFiles) {
+        if (!f.patch)
+            continue;
+        if (Buffer.byteLength(f.patch, "utf-8") > maxBytes)
+            continue; // drop huge patches
+        snippets.push(`--- FILE: ${f.filename} ---\n${f.patch}`);
+    }
+    const combined = snippets.join("\n\n");
+    const prompt = `Review the following PR diff. Return issues with rule IDs, severity, and recommendations.\n\n${combined}`;
+    return { prompt, contextSnippets: snippets.slice(0, 5) };
+}
+export async function runLlmDeepReview(prFiles, args) {
+    const apiKey = process.env.OPENAI_API_KEY;
+    if (!apiKey) {
+        return { warnings: ["OPENAI_API_KEY not set; skipping LLM deep review"] };
+    }
+    const model = args.llmModel || process.env.OPENAI_MODEL || "gpt-4o";
+    const baseUrl = args.llmBaseUrl || process.env.OPENAI_BASE_URL;
+    const { constructTribunalPrompt } = await import("./llm-benchmark.js");
+    const { buildContextSnippets } = await import("../context/context-snippets.js");
+    // Build code blob for tribunal prompt; collapse patches to new content
+    const codeBlobs = [];
+    const snippetsForRag = [];
+    for (const pf of prFiles) {
+        if (!pf.patch)
+            continue;
+        const hunk = parsePatchToHunk(pf.filename, pf.patch);
+        codeBlobs.push(`// FILE: ${pf.filename}\n${hunk.newContent}`);
+        snippetsForRag.push(hunk.newContent);
+    }
+    const codeJoined = codeBlobs.join("\n\n");
+    // Build context snippets (RAG-lite) for prompt grounding
+    const ragSnippets = await buildContextSnippets(snippetsForRag.join("\n\n"), {
+        maxSnippets: 4,
+        chunkSize: 1500,
+    });
+    const contextText = ragSnippets.map((s) => s.snippet);
+    const tribunalPrompt = constructTribunalPrompt(codeJoined, "mixed", contextText);
+    const { prompt: diffPrompt } = buildLlmPromptForPr(prFiles);
+    const combinedPrompt = `${tribunalPrompt}\n\n---\n\nDiff summary for additional context:\n${diffPrompt}`;
+    const content = await callOpenAiChatImpl(combinedPrompt, { apiKey, model, baseUrl, maxTokens: args.llmMaxTokens });
+    // Validate structured findings in LLM output
+    // Use global registry prefixes to validate LLM output
+    const { getValidRulePrefixes } = await import("./llm-benchmark.js");
+    const validation = extractValidatedLlmFindings(content, getValidRulePrefixes());
+    const warnings = validation.errors?.length ? validation.errors : undefined;
+    const summaryLines = [
+        `### 🤖 LLM Deep Review Summary (model: ${model})`,
+        "",
+        validation.ruleIds.length ? `Detected rule IDs: ${validation.ruleIds.join(", ")}` : "No rule IDs detected.",
+        "",
+        content,
+    ];
+    return { summary: summaryLines.join("\n"), warnings };
+}
 // ─── Finding → Review Comment ───────────────────────────────────────────────
 const SEVERITY_EMOJI = {
     critical: "🔴",
@@ -303,7 +433,7 @@ function reviewPrFiles(files, minSeverity, maxComments, options, fpRates, fpThre
             ...options,
             filePath: file.filename,
         };
-        const verdict = evaluateDiff(hunk.newContent, lang, hunk.changedLines, undefined, fileOpts);
+        const verdict = evaluateDiffImpl(hunk.newContent, lang, hunk.changedLines, undefined, fileOpts);
         for (const finding of verdict.findings) {
             // Suppress findings from rules with high FP rates
             if (fpRates && fpThreshold !== undefined) {
@@ -476,7 +606,7 @@ function _buildReviewSummary(result) {
 }
 function parseCommentMeta(comment) {
     // Body format: `🔴 **CRITICAL** — Title here (\`RULE-001\`)`
-    const match = comment.body.match(/\*\*(\w+)\*\*\s*\u2014([^(`]+)\(`([^`]+)`\)/);
+    const match = comment.body.match(/\*\*(\w+)\*\*\s{0,5}\u2014([^(`]{1,500})\(`([^`]+)`\)/);
     if (!match)
         return undefined;
     return {
@@ -566,6 +696,17 @@ export function buildPRReviewNarrative(result) {
         }
         lines.push("");
     }
+    // ── Layer 2 (optional) ───────────────────────────────────────────
+    if (result.llmSummary) {
+        lines.push("### 🤖 Layer 2 — AI Deep Review (LLM)");
+        lines.push("");
+        lines.push(result.llmSummary);
+        lines.push("");
+    }
+    if (result.llmWarnings?.length) {
+        lines.push("> ⚠️ LLM warnings: " + result.llmWarnings.join("; "));
+        lines.push("");
+    }
     // ── Cross-cutting themes ──────────────────────────────────────────
     const byDomain = new Map();
     for (const m of metas) {
@@ -676,6 +817,8 @@ export function parseReviewArgs(argv) {
         minConfidence: 0.6,
         calibrate: true,
         crossFile: false,
+        llmDeepReview: false,
+        autopilot: false,
     };
     for (let i = 3; i < argv.length; i++) {
         const arg = argv[i];
@@ -729,6 +872,22 @@ export function parseReviewArgs(argv) {
                     .map((s) => s.trim())
                     .filter(Boolean);
                 break;
+            case "--llm-deep-review":
+                args.llmDeepReview = true;
+                break;
+            case "--llm-model":
+                args.llmModel = argv[++i];
+                break;
+            case "--llm-base-url":
+                args.llmBaseUrl = argv[++i];
+                break;
+            case "--llm-max-tokens":
+                args.llmMaxTokens = parseInt(argv[++i], 10);
+                break;
+            case "--autopilot":
+            case "--gh-autopilot":
+                args.autopilot = true;
+                break;
             default:
                 // Positional: treat as PR number if numeric
                 if (!arg.startsWith("-") && /^\d+$/.test(arg) && args.pr === 0) {
@@ -739,13 +898,17 @@ export function parseReviewArgs(argv) {
     }
     return args;
 }
-export function runReview(argv) {
+export async function runReview(argv) {
     const args = parseReviewArgs(argv);
     // In JSON mode, redirect informational output to stderr so stdout is pure JSON
     const _stdoutLog = console.log.bind(console);
     if (args.format === "json") {
         console.log = (...a) => console.error(...a);
     }
+    if (args.autopilot) {
+        // Autopilot implies live mode
+        args.dryRun = false;
+    }
     if (args.pr === 0) {
         console.log(`
 Judges Panel — Pull Request Review
@@ -772,6 +935,7 @@ OPTIONS:
   --no-calibrate          Disable feedback-driven confidence calibration (enabled by default)
   --cross-file            Enable cross-file architectural analysis (detects duplication, taint flows)
   --judges <id,id,...>    Only run these judges (comma-separated IDs, e.g. cybersecurity,authentication)
+  --autopilot             Enable PR autopilot (fetch diff, post inline + summary). Implies live mode.
 
 AUTHENTICATION:
   Set GITHUB_TOKEN env var, or install the \`gh\` CLI and run \`gh auth login\`.
@@ -867,14 +1031,25 @@ AUTHENTICATION:
     console.log("");
     // Run analysis
     const result = reviewPrFiles(prFiles, args.minSeverity, args.maxComments, evalOptions, fpRates, fpThreshold, args.crossFile, args.minConfidence);
+    // Deduplicate inline comments to avoid spam on reruns
+    result.comments = dedupeComments(result.comments);
+    // Optional Layer 2 (LLM) augmentation
+    if (args.llmDeepReview) {
+        const { summary, warnings } = await runLlmDeepReview(prFiles, args);
+        if (summary)
+            result.llmSummary = summary;
+        if (warnings?.length)
+            result.llmWarnings = warnings;
+    }
     if (args.format === "json") {
         // Post review to GitHub before outputting JSON
         if (!args.dryRun && (result.comments.length > 0 || args.approve)) {
+            const filteredComments = filterAlreadyPostedComments(repo, args.pr, args.token, result.comments);
             const reviewEvent = result.approved && args.approve ? "APPROVE" : result.approved ? "COMMENT" : "REQUEST_CHANGES";
             const reviewBody = {
                 body: buildPRReviewNarrative(result),
                 event: reviewEvent,
-                comments: result.comments,
+                comments: filteredComments,
             };
             const reviewResp = apiRequest("POST", `/repos/${repo}/pulls/${args.pr}/reviews`, args.token, reviewBody);
             if (reviewResp.status !== 200 && reviewResp.status !== 422) {
@@ -917,10 +1092,11 @@ AUTHENTICATION:
     // Post review to GitHub
     if (result.comments.length > 0 || args.approve) {
         const reviewEvent = result.approved && args.approve ? "APPROVE" : result.approved ? "COMMENT" : "REQUEST_CHANGES";
+        const filteredComments = filterAlreadyPostedComments(repo, args.pr, args.token, result.comments);
         const reviewBody = {
             body: buildPRReviewNarrative(result),
             event: reviewEvent,
-            comments: result.comments,
+            comments: filteredComments,
         };
         const reviewResp = apiRequest("POST", `/repos/${repo}/pulls/${args.pr}/reviews`, args.token, reviewBody);
         if (reviewResp.status === 200 || reviewResp.status === 422) {
@@ -949,4 +1125,21 @@ AUTHENTICATION:
     console.log("");
     process.exit(result.approved ? 0 : 1);
 }
-//# sourceMappingURL=review.js.map
+/**
+ * Programmatic autopilot entrypoint for GitHub App / automations.
+ */
+export function runReviewAutopilot(pr, repo) {
+    const argv = ["node", "judges", "review", "--pr", String(pr), "--autopilot"];
+    if (repo)
+        argv.push("--repo", repo);
+    return runReview(argv);
+}
+// Test exports (non-public API)
+export const __test = {
+    __setCallOpenAiChatImplForTest,
+    __setApiRequestImplForTest,
+    __setEvaluateDiffImplForTest,
+    runLlmDeepReview,
+    // expose for patching in tests
+    __evaluateDiffForTest: evaluateDiff,
+};

package/dist/commands/rule-metrics.d.ts

@@ -41,4 +41,3 @@ export declare function computeRuleHitMetrics(findings: Finding[], judges: Judge
  * Format rule hit metrics as a human-readable report.
  */
 export declare function formatRuleHitReport(metrics: RuleHitMetrics): string;
-//# sourceMappingURL=rule-metrics.d.ts.map

package/dist/commands/rule-metrics.js

@@ -111,4 +111,3 @@ export function formatRuleHitReport(metrics) {
     }
     return lines.join("\n");
 }
-//# sourceMappingURL=rule-metrics.js.map

package/dist/commands/rule.d.ts

@@ -112,4 +112,3 @@ export declare function parseRuleArgs(argv: string[]): {
     file?: string;
 };
 export declare function runRule(argv: string[]): void;
-//# sourceMappingURL=rule.d.ts.map

package/dist/commands/rule.js

@@ -293,4 +293,3 @@ USAGE:
         }
     }
 }
-//# sourceMappingURL=rule.js.map

package/dist/commands/smart-output.d.ts

@@ -36,4 +36,3 @@ export interface NextStep {
  */
 export declare function formatSmartOutput(verdict: TribunalVerdict, filePath?: string, options?: SmartOutputOptions): string;
 export declare function formatSmartSingleJudge(evaluation: JudgeEvaluation, filePath?: string, options?: SmartOutputOptions): string;
-//# sourceMappingURL=smart-output.d.ts.map

package/dist/commands/smart-output.js

@@ -173,4 +173,3 @@ export function formatSmartSingleJudge(evaluation, filePath, options = {}) {
     lines.push("");
     return lines.join("\n");
 }
-//# sourceMappingURL=smart-output.js.map

package/dist/commands/snapshot.d.ts

@@ -137,4 +137,3 @@ export declare function detectRegressions(store: SnapshotStore, options?: {
  * Format regression alerts for CLI/CI output.
  */
 export declare function formatRegressionAlerts(alerts: RegressionAlert[]): string;
-//# sourceMappingURL=snapshot.d.ts.map

package/dist/commands/snapshot.js

@@ -476,4 +476,3 @@ export function formatRegressionAlerts(alerts) {
     lines.push("");
     return lines.join("\n");
 }
-//# sourceMappingURL=snapshot.js.map

package/dist/comparison.d.ts

@@ -65,4 +65,3 @@ export declare function formatComparisonReport(toolName: string): string;
  * Generate a full comparison matrix across all tools.
  */
 export declare function formatFullComparisonMatrix(): string;
-//# sourceMappingURL=comparison.d.ts.map

package/dist/comparison.js

@@ -251,4 +251,3 @@ export function formatFullComparisonMatrix() {
     lines.push("● = Full coverage  ◐ = Partial  ○ = None");
     return lines.join("\n");
 }
-//# sourceMappingURL=comparison.js.map

package/dist/config.d.ts

@@ -1,4 +1,10 @@
 import type { JudgesConfig, JudgeDefinition } from "./types.js";
+export declare function expandEnvPlaceholders(content: string): string;
+/**
+ * Validate a JudgeDefinition object. Returns an array of error messages. Empty
+ * array means validation passed.
+ */
+export declare function validateJudgeDefinition(def: Partial<JudgeDefinition>): string[];
 /**
  * Parse a JSON string into a JudgesConfig, with validation.
  */
@@ -25,6 +31,11 @@ export declare function discoverCascadingConfigs(startDir: string, rootDir?: str
  * - `lockedMinSeverity`: child configs cannot set a more lenient minSeverity
  */
 export declare function mergeConfigs(...configs: JudgesConfig[]): JudgesConfig;
+/** Lightweight loader for tests and CLI helpers.
+ * Reads a JSON config file, expands env placeholders (${VARS}), and parses it.
+ * Returns {} on any failure to keep CLI flows resilient.
+ */
+export declare function loadConfigFile(path: string): Promise<JudgesConfig>;
 /**
  * Resolve `extends` references in a config. Each value in `extends` is treated
  * as a file path (relative to `baseDir`). The referenced configs are loaded
@@ -95,4 +106,3 @@ export declare function applyOverridesForFile(config: JudgesConfig, filePath: st
  * @returns A new config with the matching language profile merged on top
  */
 export declare function applyLanguageProfile(config: JudgesConfig, language: string): JudgesConfig;
-//# sourceMappingURL=config.d.ts.map

package/dist/config.js

@@ -7,6 +7,16 @@ import { resolve, dirname, join } from "path";
 import { registerPlugin } from "./plugins.js";
 import { ConfigError } from "./errors.js";
 import { normalizeLanguage } from "./language-patterns.js";
+import { matchGlobPath } from "./tools/command-safety.js";
+// Expand ${ENV_VAR} placeholders in config strings
+export function expandEnvPlaceholders(content) {
+    if (!content)
+        return content;
+    return content.replace(/\$\{([^}]+)\}/g, (_match, varName) => {
+        const envVal = process.env[varName];
+        return envVal !== undefined ? envVal : "";
+    });
+}
 const VALID_SEVERITIES = new Set(["critical", "high", "medium", "low", "info"]);
 const VALID_FORMATS = new Set(["text", "json", "sarif", "markdown", "html", "junit", "codeclimate"]);
 /** Numeric rank for severity comparison (lower = stricter). */
@@ -14,6 +24,30 @@ const SEVERITY_RANK = { critical: 0, high: 1, medium: 2, low: 3, info: 4 };
 function severityRank(s) {
     return SEVERITY_RANK[s] ?? 4;
 }
+/**
+ * Validate a JudgeDefinition object. Returns an array of error messages. Empty
+ * array means validation passed.
+ */
+export function validateJudgeDefinition(def) {
+    const errors = [];
+    const requiredStringFields = [
+        "id",
+        "name",
+        "domain",
+        "description",
+        "rulePrefix",
+        "tableDescription",
+        "promptDescription",
+        "systemPrompt",
+    ];
+    for (const field of requiredStringFields) {
+        const val = def[field];
+        if (typeof val !== "string" || val.trim().length === 0) {
+            errors.push(`Missing or invalid field: ${String(field)}`);
+        }
+    }
+    return errors;
+}
 /**
  * Parse a JSON string into a JudgesConfig, with validation.
  */
@@ -416,6 +450,20 @@ export function mergeConfigs(...configs) {
     }
     return merged;
 }
+/** Lightweight loader for tests and CLI helpers.
+ * Reads a JSON config file, expands env placeholders (${VARS}), and parses it.
+ * Returns {} on any failure to keep CLI flows resilient.
+ */
+export async function loadConfigFile(path) {
+    try {
+        const content = readFileSync(path, "utf-8");
+        const expanded = expandEnvPlaceholders(content);
+        return parseConfig(expanded);
+    }
+    catch {
+        return {};
+    }
+}
 /**
  * Resolve `extends` references in a config. Each value in `extends` is treated
  * as a file path (relative to `baseDir`). The referenced configs are loaded
@@ -623,35 +671,7 @@ export function applyOverridesForFile(config, filePath) {
  * - `?` matches exactly one character except `/`
  */
 function globMatch(path, pattern) {
-    // Escape regex special chars except *, ?, and /
-    let regex = "";
-    for (let i = 0; i < pattern.length; i++) {
-        const ch = pattern[i];
-        if (ch === "*") {
-            if (pattern[i + 1] === "*") {
-                // ** — match anything including path separators
-                regex += ".*";
-                i++; // skip second *
-                // Skip optional trailing /
-                if (pattern[i + 1] === "/")
-                    i++;
-            }
-            else {
-                // * — match anything except /
-                regex += "[^/]*";
-            }
-        }
-        else if (ch === "?") {
-            regex += "[^/]";
-        }
-        else if (".+^${}()|[]\\".includes(ch)) {
-            regex += "\\" + ch;
-        }
-        else {
-            regex += ch;
-        }
-    }
-    return new RegExp("^" + regex + "$", "i").test(path);
+    return matchGlobPath(path, pattern);
 }
 // ─── Language Profile Application ────────────────────────────────────────────
 /**
@@ -672,4 +692,3 @@ export function applyLanguageProfile(config, language) {
     const { languageProfiles: _lp, ...baseWithoutProfiles } = config;
     return mergeConfigs(baseWithoutProfiles, profile);
 }
-//# sourceMappingURL=config.js.map

package/dist/data-adapter.d.ts

@@ -121,4 +121,3 @@ export interface DataAdapterConfig {
     url?: string;
     headers?: Record<string, string>;
 }
-//# sourceMappingURL=data-adapter.d.ts.map

package/dist/data-adapter.js

@@ -210,4 +210,3 @@ function createEmptySnapshotData() {
 function resolveEnvVars(str) {
     return str.replace(/\$\{(\w+)\}/g, (_, name) => process.env[name] ?? "");
 }
-//# sourceMappingURL=data-adapter.js.map

package/dist/dedup.d.ts

@@ -103,4 +103,3 @@ export interface NetChangeGateResult {
  * @param options - Gate configuration
  */
 export declare function evaluateNetChangeGate(diff: FindingDiff, options?: NetChangeGateOptions): NetChangeGateResult;
-//# sourceMappingURL=dedup.d.ts.map

package/dist/dedup.js

@@ -604,4 +604,3 @@ export function evaluateNetChangeGate(diff, options) {
         summary: parts.join(". "),
     };
 }
-//# sourceMappingURL=dedup.js.map

package/dist/disk-cache.d.ts

@@ -57,4 +57,3 @@ export declare function getSharedDiskCache(): DiskCache | null;
  * @returns Nothing — clears state and resets the singleton.
  */
 export declare function clearSharedDiskCache(): void;
-//# sourceMappingURL=disk-cache.d.ts.map

package/dist/disk-cache.js

@@ -234,4 +234,3 @@ export function clearSharedDiskCache() {
     _sharedDiskCache?.clear();
     _sharedDiskCache = null;
 }
-//# sourceMappingURL=disk-cache.js.map

package/dist/errors.d.ts

@@ -41,4 +41,3 @@ export declare class EvaluationError extends JudgesError {
 export declare class ParseError extends JudgesError {
     constructor(message: string, options?: ErrorOptions);
 }
-//# sourceMappingURL=errors.d.ts.map

package/dist/errors.js

@@ -61,4 +61,3 @@ export class ParseError extends JudgesError {
         this.name = "ParseError";
     }
 }
-//# sourceMappingURL=errors.js.map

package/dist/evaluators/accessibility.d.ts

@@ -1,3 +1,2 @@
 import type { Finding } from "../types.js";
 export declare function analyzeAccessibility(code: string, language: string): Finding[];
-//# sourceMappingURL=accessibility.d.ts.map

package/dist/evaluators/accessibility.js

@@ -557,4 +557,3 @@ export function analyzeAccessibility(code, language) {
     }
     return findings;
 }
-//# sourceMappingURL=accessibility.js.map

package/dist/evaluators/agent-instructions.d.ts

@@ -1,3 +1,2 @@
 import type { Finding } from "../types.js";
 export declare function analyzeAgentInstructions(code: string, language: string): Finding[];
-//# sourceMappingURL=agent-instructions.d.ts.map

package/dist/evaluators/agent-instructions.js

@@ -212,4 +212,3 @@ export function analyzeAgentInstructions(code, language) {
     }
     return findings;
 }
-//# sourceMappingURL=agent-instructions.js.map

package/dist/evaluators/ai-code-safety.d.ts

@@ -6,4 +6,3 @@ import type { Finding } from "../types.js";
  * security comments, and overly permissive CSP directives.
  */
 export declare function analyzeAiCodeSafety(code: string, language: string): Finding[];
-//# sourceMappingURL=ai-code-safety.d.ts.map

package/dist/evaluators/ai-code-safety.js

@@ -408,4 +408,3 @@ export function analyzeAiCodeSafety(code, language) {
     // cover all of these patterns with better context-awareness.
     return findings;
 }
-//# sourceMappingURL=ai-code-safety.js.map

package/dist/evaluators/api-contract.d.ts

@@ -7,4 +7,3 @@ import type { Finding } from "../types.js";
  * status codes, missing Content-Type headers, and undocumented endpoints.
  */
 export declare function analyzeApiContract(code: string, language: string): Finding[];
-//# sourceMappingURL=api-contract.d.ts.map

package/dist/evaluators/api-contract.js

@@ -201,4 +201,3 @@ export function analyzeApiContract(code, language) {
     }
     return findings;
 }
-//# sourceMappingURL=api-contract.js.map