@kevinrabun/judges 3.115.0 → 3.115.2

package/dist/commands/rule-catalog.js

@@ -0,0 +1,128 @@
+/**
+ * Rule-catalog — Browse, search, and preview available rules with examples.
+ */
+import { defaultRegistry } from "../judge-registry.js";
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runRuleCatalog(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges rule-catalog — Browse and search available rules
+
+Usage:
+  judges rule-catalog                          List all rules
+  judges rule-catalog --search injection       Search rules by keyword
+  judges rule-catalog --judge security         Filter by judge
+  judges rule-catalog --severity critical      Filter by severity
+  judges rule-catalog --count                  Show rule count only
+  judges rule-catalog --format json            JSON output
+
+Options:
+  --search <keyword>     Search rules by keyword in name/description
+  --judge <id>           Filter rules by judge ID
+  --severity <level>     Filter by severity level
+  --count                Show count only
+  --format json          JSON output
+  --help, -h             Show this help
+
+Browse the full catalog of rules available across all judges.
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const search = argv.find((_a, i) => argv[i - 1] === "--search") || "";
+    const judgeFilter = argv.find((_a, i) => argv[i - 1] === "--judge") || "";
+    const sevFilter = argv.find((_a, i) => argv[i - 1] === "--severity") || "";
+    const countOnly = argv.includes("--count");
+    const judges = defaultRegistry.getJudges();
+    const catalog = [];
+    for (const judge of judges) {
+        // Create catalog entries from judge metadata
+        const entry = {
+            judgeId: judge.id,
+            ruleId: judge.id,
+            description: `Rules from ${judge.id} judge`,
+            severity: "medium",
+            category: categorizeJudge(judge.id),
+        };
+        // Filter by judge
+        if (judgeFilter && !judge.id.toLowerCase().includes(judgeFilter.toLowerCase()))
+            continue;
+        // Filter by severity
+        if (sevFilter && entry.severity !== sevFilter.toLowerCase())
+            continue;
+        // Search filter
+        if (search) {
+            const haystack = `${entry.judgeId} ${entry.ruleId} ${entry.description} ${entry.category}`.toLowerCase();
+            if (!haystack.includes(search.toLowerCase()))
+                continue;
+        }
+        catalog.push(entry);
+    }
+    if (countOnly) {
+        console.log(catalog.length);
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify({ total: catalog.length, rules: catalog }, null, 2));
+        return;
+    }
+    console.log(`\n  Rule Catalog (${catalog.length} rules)\n  ═════════════════════════════`);
+    if (catalog.length === 0) {
+        console.log("    No rules match your filters.");
+        console.log();
+        return;
+    }
+    // Group by category
+    const byCategory = new Map();
+    for (const entry of catalog) {
+        const cat = entry.category;
+        const arr = byCategory.get(cat);
+        if (arr)
+            arr.push(entry);
+        else
+            byCategory.set(cat, [entry]);
+    }
+    for (const [category, entries] of byCategory) {
+        console.log(`\n  ${category.toUpperCase()} (${entries.length})`);
+        console.log("  ─────────────────────────────");
+        for (const e of entries) {
+            console.log(`    ${e.ruleId.padEnd(30)} ${e.description}`);
+        }
+    }
+    console.log();
+}
+function categorizeJudge(id) {
+    const lower = id.toLowerCase();
+    if (lower.includes("sql") ||
+        lower.includes("xss") ||
+        lower.includes("inject") ||
+        lower.includes("auth") ||
+        lower.includes("crypto") ||
+        lower.includes("secret") ||
+        lower.includes("security") ||
+        lower.includes("pii") ||
+        lower.includes("privilege")) {
+        return "security";
+    }
+    if (lower.includes("perf") ||
+        lower.includes("cache") ||
+        lower.includes("optim") ||
+        lower.includes("memory") ||
+        lower.includes("resource")) {
+        return "performance";
+    }
+    if (lower.includes("cost") ||
+        lower.includes("cloud") ||
+        lower.includes("infra") ||
+        lower.includes("deploy") ||
+        lower.includes("iac")) {
+        return "infrastructure";
+    }
+    if (lower.includes("test") || lower.includes("quality") || lower.includes("coverage")) {
+        return "quality";
+    }
+    if (lower.includes("api") || lower.includes("type") || lower.includes("contract")) {
+        return "api";
+    }
+    return "general";
+}

package/dist/commands/rule-owner.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Rule ownership — map rules/categories to team owners for
+ * accountability, escalation, and expertise routing.
+ *
+ * Stored locally in .judges-owners.json.
+ */
+export interface RuleOwner {
+    /** Rule ID or prefix (e.g., "SEC-001" or "SEC") */
+    pattern: string;
+    /** Owner name or team */
+    owner: string;
+    /** Contact (email/Slack handle) */
+    contact?: string;
+    /** Expertise level */
+    expertise: "expert" | "familiar" | "learning";
+    /** When assigned */
+    assignedIso: string;
+}
+export declare function assignOwner(pattern: string, owner: string, opts?: {
+    contact?: string;
+    expertise?: RuleOwner["expertise"];
+}): RuleOwner;
+export declare function removeOwner(pattern: string): boolean;
+export declare function findOwner(ruleId: string): RuleOwner | undefined;
+export declare function getOwnerStats(): {
+    totalPatterns: number;
+    byOwner: Record<string, number>;
+    byExpertise: Record<string, number>;
+};
+export declare function runRuleOwner(argv: string[]): void;

package/dist/commands/rule-owner.js

@@ -0,0 +1,181 @@
+/**
+ * Rule ownership — map rules/categories to team owners for
+ * accountability, escalation, and expertise routing.
+ *
+ * Stored locally in .judges-owners.json.
+ */
+import { readFileSync, writeFileSync, existsSync } from "fs";
+const OWNER_FILE = ".judges-owners.json";
+// ─── Core ───────────────────────────────────────────────────────────────────
+function loadDb(file = OWNER_FILE) {
+    if (!existsSync(file))
+        return { owners: [] };
+    return JSON.parse(readFileSync(file, "utf-8"));
+}
+function saveDb(db, file = OWNER_FILE) {
+    writeFileSync(file, JSON.stringify(db, null, 2));
+}
+export function assignOwner(pattern, owner, opts) {
+    const db = loadDb();
+    const existing = db.owners.find((o) => o.pattern === pattern);
+    const entry = {
+        pattern,
+        owner,
+        contact: opts?.contact,
+        expertise: opts?.expertise || "familiar",
+        assignedIso: new Date().toISOString(),
+    };
+    if (existing) {
+        Object.assign(existing, entry);
+    }
+    else {
+        db.owners.push(entry);
+    }
+    saveDb(db);
+    return entry;
+}
+export function removeOwner(pattern) {
+    const db = loadDb();
+    const idx = db.owners.findIndex((o) => o.pattern === pattern);
+    if (idx < 0)
+        return false;
+    db.owners.splice(idx, 1);
+    saveDb(db);
+    return true;
+}
+export function findOwner(ruleId) {
+    const db = loadDb();
+    // Exact match first, then prefix match (longest prefix wins)
+    const exact = db.owners.find((o) => o.pattern === ruleId);
+    if (exact)
+        return exact;
+    let best;
+    for (const o of db.owners) {
+        if (ruleId.startsWith(o.pattern) && (!best || o.pattern.length > best.pattern.length)) {
+            best = o;
+        }
+    }
+    return best;
+}
+export function getOwnerStats() {
+    const db = loadDb();
+    const byOwner = {};
+    const byExpertise = {};
+    for (const o of db.owners) {
+        byOwner[o.owner] = (byOwner[o.owner] || 0) + 1;
+        byExpertise[o.expertise] = (byExpertise[o.expertise] || 0) + 1;
+    }
+    return { totalPatterns: db.owners.length, byOwner, byExpertise };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runRuleOwner(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges rule-owner — Map rules to team owners for accountability
+
+Usage:
+  judges rule-owner --set SEC --owner "Security Team" --contact "#sec-channel"
+  judges rule-owner --set AUTH-003 --owner "Alice" --expertise expert
+  judges rule-owner --find SEC-001         Find who owns a rule
+  judges rule-owner --list                 List all ownership mappings
+  judges rule-owner --remove SEC           Remove ownership
+  judges rule-owner --stats                Show ownership statistics
+
+Options:
+  --set <pattern>       Rule ID or prefix to assign
+  --owner <name>        Owner name or team (required with --set)
+  --contact <info>      Contact info (email/Slack)
+  --expertise <level>   expert | familiar | learning
+  --find <rule-id>      Find owner for a rule
+  --remove <pattern>    Remove ownership mapping
+  --list                List all mappings
+  --stats               Show statistics
+  --format json         JSON output
+  --help, -h            Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    // Set ownership
+    const setPattern = argv.find((_a, i) => argv[i - 1] === "--set");
+    if (setPattern) {
+        const owner = argv.find((_a, i) => argv[i - 1] === "--owner");
+        if (!owner) {
+            console.error("Error: --owner required with --set");
+            process.exit(1);
+        }
+        const contact = argv.find((_a, i) => argv[i - 1] === "--contact");
+        const expertise = argv.find((_a, i) => argv[i - 1] === "--expertise");
+        const entry = assignOwner(setPattern, owner, { contact, expertise });
+        if (format === "json") {
+            console.log(JSON.stringify(entry, null, 2));
+        }
+        else {
+            console.log(`  ✅ ${entry.pattern} → ${entry.owner} (${entry.expertise})`);
+        }
+        return;
+    }
+    // Find owner
+    const findRule = argv.find((_a, i) => argv[i - 1] === "--find");
+    if (findRule) {
+        const owner = findOwner(findRule);
+        if (!owner) {
+            console.log(`  No owner found for ${findRule}`);
+        }
+        else if (format === "json") {
+            console.log(JSON.stringify(owner, null, 2));
+        }
+        else {
+            console.log(`  ${findRule} → ${owner.owner} (${owner.expertise})${owner.contact ? ` — ${owner.contact}` : ""}`);
+        }
+        return;
+    }
+    // Remove
+    const removePattern = argv.find((_a, i) => argv[i - 1] === "--remove");
+    if (removePattern) {
+        if (removeOwner(removePattern)) {
+            console.log(`  Removed: ${removePattern}`);
+        }
+        else {
+            console.error(`  Not found: ${removePattern}`);
+        }
+        return;
+    }
+    // Stats
+    if (argv.includes("--stats")) {
+        const s = getOwnerStats();
+        if (format === "json") {
+            console.log(JSON.stringify(s, null, 2));
+        }
+        else {
+            console.log(`\n  Rule Ownership\n  ──────────────`);
+            console.log(`  Total mappings: ${s.totalPatterns}\n`);
+            console.log("  By owner:");
+            for (const [name, count] of Object.entries(s.byOwner)) {
+                console.log(`    ${name.padEnd(20)} ${count} rule(s)`);
+            }
+            console.log("\n  By expertise:");
+            for (const [level, count] of Object.entries(s.byExpertise)) {
+                console.log(`    ${level.padEnd(12)} ${count}`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // Default: list all
+    const db = loadDb();
+    if (db.owners.length === 0) {
+        console.log("\n  No ownership mappings. Use --set to add one.\n");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(db.owners, null, 2));
+    }
+    else {
+        console.log("\n  Rule Ownership Mappings\n  ──────────────────────");
+        for (const o of db.owners) {
+            console.log(`    ${o.pattern.padEnd(15)} → ${o.owner} (${o.expertise})${o.contact ? ` — ${o.contact}` : ""}`);
+        }
+        console.log("");
+    }
+}

package/dist/commands/rule-share.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Custom rule sharing — export/import custom rule configurations
+ * across teams and organizations.
+ *
+ * Stored locally in .judges-shared-rules/ directory.
+ */
+interface SharedRuleOverride {
+    ruleId: string;
+    severity?: string;
+    enabled?: boolean;
+    threshold?: number;
+    notes?: string;
+}
+interface SharedRulePackage {
+    name: string;
+    version: string;
+    description: string;
+    author: string;
+    rules: SharedRuleOverride[];
+    disabledRules?: string[];
+    disabledJudges?: string[];
+    preset?: string;
+    tags?: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+export declare function exportRules(name: string, description: string, author: string, configFile?: string): SharedRulePackage;
+export declare function importRules(packageFile: string, configFile?: string): {
+    applied: number;
+    skipped: number;
+};
+export declare function listPackages(): SharedRulePackage[];
+export declare function runRuleShare(argv: string[]): void;
+export {};

package/dist/commands/rule-share.js

@@ -0,0 +1,202 @@
+/**
+ * Custom rule sharing — export/import custom rule configurations
+ * across teams and organizations.
+ *
+ * Stored locally in .judges-shared-rules/ directory.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync } from "fs";
+import { join } from "path";
+const SHARE_DIR = ".judges-shared-rules";
+// ─── Core ───────────────────────────────────────────────────────────────────
+function ensureDir() {
+    if (!existsSync(SHARE_DIR))
+        mkdirSync(SHARE_DIR, { recursive: true });
+}
+export function exportRules(name, description, author, configFile = ".judgesrc") {
+    let config = {};
+    if (existsSync(configFile)) {
+        config = JSON.parse(readFileSync(configFile, "utf-8"));
+    }
+    const rules = [];
+    if (config.ruleOverrides && typeof config.ruleOverrides === "object") {
+        for (const [ruleId, override] of Object.entries(config.ruleOverrides)) {
+            rules.push({
+                ruleId,
+                severity: override.severity,
+                enabled: override.enabled,
+                threshold: override.threshold,
+            });
+        }
+    }
+    const pkg = {
+        name,
+        version: "1.0.0",
+        description,
+        author,
+        rules,
+        disabledRules: config.disabledRules || [],
+        disabledJudges: config.disabledJudges || [],
+        preset: config.preset,
+        tags: [],
+        createdAt: new Date().toISOString(),
+        updatedAt: new Date().toISOString(),
+    };
+    ensureDir();
+    writeFileSync(join(SHARE_DIR, `${name}.json`), JSON.stringify(pkg, null, 2));
+    return pkg;
+}
+export function importRules(packageFile, configFile = ".judgesrc") {
+    const pkg = JSON.parse(readFileSync(packageFile, "utf-8"));
+    let config = {};
+    if (existsSync(configFile)) {
+        config = JSON.parse(readFileSync(configFile, "utf-8"));
+    }
+    let applied = 0;
+    let skipped = 0;
+    // Merge rule overrides
+    if (!config.ruleOverrides)
+        config.ruleOverrides = {};
+    const overrides = config.ruleOverrides;
+    for (const rule of pkg.rules) {
+        if (overrides[rule.ruleId]) {
+            skipped++;
+            continue;
+        }
+        overrides[rule.ruleId] = {};
+        if (rule.severity)
+            overrides[rule.ruleId].severity = rule.severity;
+        if (rule.enabled !== undefined)
+            overrides[rule.ruleId].enabled = rule.enabled;
+        if (rule.threshold !== undefined)
+            overrides[rule.ruleId].threshold = rule.threshold;
+        applied++;
+    }
+    // Merge disabled rules
+    if (pkg.disabledRules && pkg.disabledRules.length > 0) {
+        const existing = new Set(config.disabledRules || []);
+        for (const r of pkg.disabledRules) {
+            if (!existing.has(r)) {
+                existing.add(r);
+                applied++;
+            }
+        }
+        config.disabledRules = [...existing];
+    }
+    // Merge disabled judges
+    if (pkg.disabledJudges && pkg.disabledJudges.length > 0) {
+        const existing = new Set(config.disabledJudges || []);
+        for (const j of pkg.disabledJudges) {
+            if (!existing.has(j)) {
+                existing.add(j);
+                applied++;
+            }
+        }
+        config.disabledJudges = [...existing];
+    }
+    writeFileSync(configFile, JSON.stringify(config, null, 2));
+    return { applied, skipped };
+}
+export function listPackages() {
+    ensureDir();
+    const files = readdirSync(SHARE_DIR).filter((f) => f.endsWith(".json"));
+    return files.map((f) => JSON.parse(readFileSync(join(SHARE_DIR, f), "utf-8")));
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runRuleShare(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges rule-share — Export and import custom rule configurations
+
+Usage:
+  judges rule-share --export "my-rules" --description "Team security rules" --author "Alice"
+  judges rule-share --import .judges-shared-rules/my-rules.json
+  judges rule-share --list
+  judges rule-share --inspect .judges-shared-rules/my-rules.json
+
+Options:
+  --export <name>        Export current config as a shareable package
+  --description <text>   Package description
+  --author <name>        Package author
+  --import <file>        Import a rule package into .judgesrc
+  --list                 List available packages
+  --inspect <file>       Show package contents
+  --format json          JSON output
+  --help, -h             Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    // Export
+    const exportName = argv.find((_a, i) => argv[i - 1] === "--export");
+    if (exportName) {
+        const desc = argv.find((_a, i) => argv[i - 1] === "--description") || "";
+        const author = argv.find((_a, i) => argv[i - 1] === "--author") || "unknown";
+        const pkg = exportRules(exportName, desc, author);
+        if (format === "json") {
+            console.log(JSON.stringify(pkg, null, 2));
+        }
+        else {
+            console.log(`  ✅ Exported "${exportName}" → ${SHARE_DIR}/${exportName}.json`);
+            console.log(`     ${pkg.rules.length} rule override(s), ${(pkg.disabledRules || []).length} disabled rule(s)`);
+        }
+        return;
+    }
+    // Import
+    const importFile = argv.find((_a, i) => argv[i - 1] === "--import");
+    if (importFile) {
+        if (!existsSync(importFile)) {
+            console.error(`  ❌ File not found: ${importFile}`);
+            return;
+        }
+        const result = importRules(importFile);
+        if (format === "json") {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else {
+            console.log(`  ✅ Imported: ${result.applied} applied, ${result.skipped} skipped (existing)`);
+        }
+        return;
+    }
+    // Inspect
+    const inspectFile = argv.find((_a, i) => argv[i - 1] === "--inspect");
+    if (inspectFile) {
+        if (!existsSync(inspectFile)) {
+            console.error(`  ❌ File not found: ${inspectFile}`);
+            return;
+        }
+        const pkg = JSON.parse(readFileSync(inspectFile, "utf-8"));
+        if (format === "json") {
+            console.log(JSON.stringify(pkg, null, 2));
+        }
+        else {
+            console.log(`\n  Package: ${pkg.name} v${pkg.version}`);
+            console.log(`  Author:  ${pkg.author}`);
+            console.log(`  Description: ${pkg.description}`);
+            console.log(`  ──────────────────────`);
+            console.log(`  Rule overrides: ${pkg.rules.length}`);
+            for (const r of pkg.rules) {
+                console.log(`    ${r.ruleId.padEnd(20)} sev: ${r.severity || "—"} enabled: ${r.enabled ?? "—"}`);
+            }
+            console.log(`  Disabled rules:  ${(pkg.disabledRules || []).length}`);
+            console.log(`  Disabled judges: ${(pkg.disabledJudges || []).length}`);
+            console.log(`  Preset:          ${pkg.preset || "—"}\n`);
+        }
+        return;
+    }
+    // List
+    const packages = listPackages();
+    if (packages.length === 0) {
+        console.log("\n  No shared rule packages. Use --export to create one.\n");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(packages, null, 2));
+    }
+    else {
+        console.log(`\n  Shared Rule Packages (${packages.length})\n  ────────────────────────`);
+        for (const p of packages) {
+            console.log(`    ${p.name.padEnd(20)} v${p.version.padEnd(8)} by ${p.author} (${p.rules.length} rules)`);
+        }
+        console.log("");
+    }
+}

package/dist/commands/rule-test.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Rule-test — Test custom rules against sample code before deployment.
+ */
+export declare function runRuleTest(argv: string[]): void;