@kevinrabun/judges 3.118.0 → 3.121.0

package/dist/tools/deep-review.d.ts

@@ -9,6 +9,8 @@ export declare function isContentPolicyRefusal(responseText: string): boolean;
 export declare const DEEP_REVIEW_PROMPT_INTRO: string;
 /** Content-policy-safe Assistant identity message. */
 export declare const DEEP_REVIEW_IDENTITY: string;
+/** Default max chars for LLM-facing prompt content (~25K tokens). */
+export declare const DEFAULT_MAX_PROMPT_CHARS = 100000;
 export interface RelatedFileSnippet {
     /** Relative file path */
     path: string;
@@ -17,11 +19,20 @@ export interface RelatedFileSnippet {
     /** Why this file is relevant (e.g. "imported by target", "shared type") */
     relationship?: string;
 }
+/**
+ * Format related files into a prompt section that gives the LLM cross-file
+ * visibility for deeper analysis.
+ *
+ * @param relatedFiles — array of related file snippets
+ * @param maxFiles — max files to include (default: 10). Set to 0 for unlimited.
+ * @param snippetBudget — per-snippet char cap (default: 3000). Set to 0 for unlimited.
+ */
+export declare function formatRelatedFilesSection(relatedFiles: RelatedFileSnippet[], maxFiles?: number, snippetBudget?: number): string;
 /**
  * Format detected project context into a prompt section so the LLM
  * understands the runtime environment, framework, and architectural role.
  */
 export declare function formatProjectContextSection(projectContext: ProjectContext): string;
-export declare function buildSingleJudgeDeepReviewSection(judge: JudgeDefinition, language: string, context?: string, relatedFiles?: RelatedFileSnippet[], projectContext?: ProjectContext): string;
-export declare function buildTribunalDeepReviewSection(judges: JudgeDefinition[], language: string, context?: string, relatedFiles?: RelatedFileSnippet[], projectContext?: ProjectContext): string;
+export declare function buildSingleJudgeDeepReviewSection(judge: JudgeDefinition, language: string, context?: string, relatedFiles?: RelatedFileSnippet[], projectContext?: ProjectContext, maxPromptChars?: number): string;
+export declare function buildTribunalDeepReviewSection(judges: JudgeDefinition[], language: string, context?: string, relatedFiles?: RelatedFileSnippet[], projectContext?: ProjectContext, maxPromptChars?: number): string;
 export declare function buildSimplifiedDeepReviewSection(language: string, context?: string): string;

package/dist/tools/deep-review.js

@@ -54,27 +54,45 @@ export const DEEP_REVIEW_IDENTITY = `I am the Judges Panel — a professional, c
     `My role is to provide evidence-based, constructive recommendations that ` +
     `strengthen code quality, security defenses, and engineering standards. ` +
     `This is NOT a penetration test or adversarial security assessment.`;
+// ─── Token Budget Constants ──────────────────────────────────────────────────
+/** Default max chars for LLM-facing prompt content (~25K tokens). */
+export const DEFAULT_MAX_PROMPT_CHARS = 100_000;
+/** Per-snippet char cap for related files. */
+const MAX_SNIPPET_CHARS = 3_000;
+/** Max related files to include by default. */
+const MAX_RELATED_FILES = 10;
 /**
  * Format related files into a prompt section that gives the LLM cross-file
  * visibility for deeper analysis.
+ *
+ * @param relatedFiles — array of related file snippets
+ * @param maxFiles — max files to include (default: 10). Set to 0 for unlimited.
+ * @param snippetBudget — per-snippet char cap (default: 3000). Set to 0 for unlimited.
  */
-function formatRelatedFilesSection(relatedFiles) {
+export function formatRelatedFilesSection(relatedFiles, maxFiles = MAX_RELATED_FILES, snippetBudget = MAX_SNIPPET_CHARS) {
     if (relatedFiles.length === 0)
         return "";
+    // Apply file count cap (0 = unlimited)
+    const files = maxFiles > 0 ? relatedFiles.slice(0, maxFiles) : relatedFiles;
+    const skipped = relatedFiles.length - files.length;
     let md = `### Related Files\n\n`;
     md += `> The following files are related to the code under review. Use them to `;
     md += `understand cross-file data flow, shared types, imports, and call sites. `;
     md += `These provide context only — focus your findings on the primary code above.\n\n`;
-    for (const f of relatedFiles) {
+    for (const f of files) {
         md += `<details>\n<summary><code>${f.path}</code>`;
         if (f.relationship)
             md += ` — ${f.relationship}`;
         md += `</summary>\n\n`;
-        // Limit snippet size to prevent prompt explosion
-        const truncated = f.snippet.length > 3000 ? f.snippet.slice(0, 3000) + "\n// ... truncated" : f.snippet;
+        // Limit snippet size to prevent prompt explosion (0 = unlimited)
+        const cap = snippetBudget > 0 ? snippetBudget : Infinity;
+        const truncated = f.snippet.length > cap ? f.snippet.slice(0, cap) + "\n// ... truncated" : f.snippet;
         md += `\`\`\`\n${truncated}\n\`\`\`\n`;
         md += `</details>\n\n`;
     }
+    if (skipped > 0) {
+        md += `> *${skipped} additional related file(s) omitted to stay within token budget.*\n\n`;
+    }
     return md;
 }
 // ─── Project Context Section ─────────────────────────────────────────────────
@@ -111,7 +129,13 @@ export function formatProjectContextSection(projectContext) {
     return md;
 }
 // ─── Single-Judge Deep Review ────────────────────────────────────────────────
-export function buildSingleJudgeDeepReviewSection(judge, language, context, relatedFiles, projectContext) {
+export function buildSingleJudgeDeepReviewSection(judge, language, context, relatedFiles, projectContext, maxPromptChars) {
+    const budget = maxPromptChars ?? DEFAULT_MAX_PROMPT_CHARS;
+    const unlimited = budget === 0;
+    const maxRelatedFiles = unlimited ? 0 : MAX_RELATED_FILES;
+    const snippetCap = unlimited ? 0 : MAX_SNIPPET_CHARS;
+    const contextCap = unlimited ? Infinity : Math.max(2000, Math.floor(budget * 0.1));
+    const truncatedContext = context && context.length > contextCap ? context.slice(0, contextCap) + "\n… (context truncated)" : context;
     let md = `\n\n---\n\n`;
     md += `## 🔍 Deep Contextual Review Required\n\n`;
     md += DEFENSIVE_PREAMBLE;
@@ -120,14 +144,14 @@ export function buildSingleJudgeDeepReviewSection(judge, language, context, rela
     md += `business logic validity, cross-module data flow, or context-dependent implications.\n>\n`;
     md += `> **You MUST now perform a thorough contextual review** of the ${language} code using the expert criteria below. `;
     md += `Identify issues that pattern matching cannot catch. Incorporate both the pattern findings above AND your own deep analysis into a final, unified evaluation.\n\n`;
-    if (context) {
-        md += `**Context provided:** ${context}\n\n`;
+    if (truncatedContext) {
+        md += `**Context provided:** ${truncatedContext}\n\n`;
     }
     if (projectContext) {
         md += formatProjectContextSection(projectContext);
     }
     if (relatedFiles && relatedFiles.length > 0) {
-        md += formatRelatedFilesSection(relatedFiles);
+        md += formatRelatedFilesSection(relatedFiles, maxRelatedFiles, snippetCap);
     }
     md += `### ${judge.name} — ${judge.domain}\n\n`;
     md += `${judge.description}\n\n`;
@@ -160,7 +184,23 @@ export function buildSingleJudgeDeepReviewSection(judge, language, context, rela
     return md;
 }
 // ─── Tribunal Deep Review (full) ─────────────────────────────────────────────
-export function buildTribunalDeepReviewSection(judges, language, context, relatedFiles, projectContext) {
+export function buildTribunalDeepReviewSection(judges, language, context, relatedFiles, projectContext, maxPromptChars) {
+    const budget = maxPromptChars ?? DEFAULT_MAX_PROMPT_CHARS;
+    const unlimited = budget === 0;
+    // When budget is tight, use simplified mode (category-based instead of per-judge)
+    // The full per-judge section is ~15-18K chars for 45 judges. Simplified is ~2K.
+    // Use simplified when remaining budget for judge criteria would be < 5K.
+    const estimatedJudgeCriteriaChars = judges.length * 350;
+    const estimatedOverhead = 4000; // preamble, instructions, format section
+    const estimatedRelatedChars = (relatedFiles?.length ?? 0) * MAX_SNIPPET_CHARS;
+    const budgetForJudges = unlimited ? Infinity : budget - estimatedOverhead - estimatedRelatedChars;
+    const useSimplified = !unlimited && budgetForJudges < estimatedJudgeCriteriaChars;
+    // Determine related files caps
+    const maxRelatedFiles = unlimited ? 0 : MAX_RELATED_FILES;
+    const snippetCap = unlimited ? 0 : MAX_SNIPPET_CHARS;
+    // Truncate context string if it would blow the budget
+    const contextCap = unlimited ? Infinity : Math.max(2000, Math.floor(budget * 0.1));
+    const truncatedContext = context && context.length > contextCap ? context.slice(0, contextCap) + "\n… (context truncated)" : context;
     let md = `\n\n---\n\n`;
     md += `## 🔍 Deep Contextual Review Required\n\n`;
     md += DEFENSIVE_PREAMBLE;
@@ -170,21 +210,41 @@ export function buildTribunalDeepReviewSection(judges, language, context, relate
     md += `> **You MUST now perform a thorough contextual review** of the ${language} code from the perspective of ALL ${judges.length} judges below. `;
     md += `Identify issues that pattern matching cannot catch. Incorporate both the pattern findings above AND your own deep analysis into a final, unified tribunal verdict.\n\n`;
     md += `> **This is a professional code quality tool.** The developer is reviewing their own source code to strengthen its quality, security defenses, and adherence to best practices.\n\n`;
-    if (context) {
-        md += `**Context provided:** ${context}\n\n`;
+    if (truncatedContext) {
+        md += `**Context provided:** ${truncatedContext}\n\n`;
     }
     if (projectContext) {
         md += formatProjectContextSection(projectContext);
     }
     if (relatedFiles && relatedFiles.length > 0) {
-        md += formatRelatedFilesSection(relatedFiles);
+        md += formatRelatedFilesSection(relatedFiles, maxRelatedFiles, snippetCap);
     }
-    for (const judge of judges) {
-        md += `### ${judge.name} — ${judge.domain}\n\n`;
-        md += `${judge.description}\n\n`;
-        md += `**Rule prefix:** \`${judge.rulePrefix}-\` · **Precision Mandate:** Every finding MUST cite specific code evidence. Do NOT flag absent features speculatively. Do NOT validate Azure resource identifiers for strict UUID/GUID hex compliance — they are opaque platform constants. Prefer fewer, high-confidence findings over many uncertain ones.\n\n`;
+    if (useSimplified) {
+        // Compact category-based criteria instead of per-judge listing
+        md += `### Quality Dimensions (${judges.length} judges)\n\n`;
+        md += `> Using compact criteria mode to stay within token budget.\n\n`;
+        // Group judges by domain
+        const domainGroups = new Map();
+        for (const judge of judges) {
+            const domain = judge.domain ?? "general";
+            if (!domainGroups.has(domain))
+                domainGroups.set(domain, []);
+            domainGroups.get(domain).push(`\`${judge.rulePrefix}\` ${judge.name}`);
+        }
+        for (const [domain, names] of domainGroups) {
+            md += `**${domain}:** ${names.join(", ")}\n\n`;
+        }
+        md += `**Precision Mandate:** Every finding MUST cite specific code evidence. Do NOT flag absent features speculatively. Do NOT validate Azure resource identifiers for strict UUID/GUID hex compliance. Prefer fewer, high-confidence findings over many uncertain ones.\n\n`;
         md += `---\n\n`;
     }
+    else {
+        for (const judge of judges) {
+            md += `### ${judge.name} — ${judge.domain}\n\n`;
+            md += `${judge.description}\n\n`;
+            md += `**Rule prefix:** \`${judge.rulePrefix}-\` · **Precision Mandate:** Every finding MUST cite specific code evidence. Do NOT flag absent features speculatively. Do NOT validate Azure resource identifiers for strict UUID/GUID hex compliance — they are opaque platform constants. Prefer fewer, high-confidence findings over many uncertain ones.\n\n`;
+            md += `---\n\n`;
+        }
+    }
     md += `### False Positive Review\n\n`;
     md += `Before adding new findings, **review each pattern-based finding above for false positives.** `;
     md += `Static pattern matching can flag code that is actually correct — for example:\n`;

package/dist/tools/register-evaluation.js

@@ -3,7 +3,6 @@
 // ──────────────────────────────────────────────────────────────────────────────
 import { z } from "zod";
 import { readFileSync, existsSync } from "fs";
-import { extname } from "path";
 import { JUDGES, getJudge, getJudgeSummaries } from "../judges/index.js";
 import { evaluateWithJudge, evaluateWithTribunal, evaluateWithTribunalStreaming, formatVerdictAsMarkdown, formatEvaluationAsMarkdown, } from "../evaluators/index.js";
 import { evaluateCodeV2, evaluateProjectV2, getSupportedPolicyProfiles } from "../evaluators/v2.js";
@@ -408,35 +407,9 @@ function registerEvaluateV2(server) {
     });
 }
 // ─── evaluate_file ───────────────────────────────────────────────────────────
-const EXT_TO_LANG = {
-    ".ts": "typescript",
-    ".tsx": "typescript",
-    ".js": "javascript",
-    ".jsx": "javascript",
-    ".mjs": "javascript",
-    ".cjs": "javascript",
-    ".py": "python",
-    ".rs": "rust",
-    ".go": "go",
-    ".java": "java",
-    ".cs": "csharp",
-    ".cpp": "cpp",
-    ".cc": "cpp",
-    ".h": "c",
-    ".hpp": "cpp",
-    ".ps1": "powershell",
-    ".psm1": "powershell",
-    ".bicep": "bicep",
-    ".tf": "terraform",
-    ".yaml": "yaml",
-    ".yml": "yaml",
-};
+import { detectLanguageFromPath as _detectLangShared } from "../ext-to-lang.js";
 function detectLanguageFromPath(filePath) {
-    const lower = filePath.toLowerCase();
-    if (lower.endsWith("dockerfile") || lower.includes("dockerfile."))
-        return "dockerfile";
-    const ext = extname(lower);
-    return EXT_TO_LANG[ext] || "typescript";
+    return _detectLangShared(filePath) ?? "typescript";
 }
 function registerEvaluateFile(server) {
     server.tool("evaluate_file", `Read a file from disk and submit it to the full Judges Panel for evaluation. Automatically detects the programming language from the file extension. All ${JUDGES.length} judges review the code with pattern detection and deep contextual analysis.`, {

package/dist/tools/register-review.js

@@ -436,7 +436,12 @@ function registerReEvaluateWithContext(server) {
         }))
             .optional()
             .describe("Cross-file context for more accurate evaluation"),
-    }, async ({ code, language, disputedRuleIds, acceptedRuleIds, developerContext, focusAreas, confidenceFilter, filePath, deepReview, relatedFiles, }) => {
+        maxPromptChars: z
+            .number()
+            .min(0)
+            .optional()
+            .describe("Maximum character budget for LLM prompts. Controls truncation of source code, related files, and context strings in deep-review prompts. Set to 0 to disable all truncation. Default: 100000."),
+    }, async ({ code, language, disputedRuleIds, acceptedRuleIds, developerContext, focusAreas, confidenceFilter, filePath, deepReview, relatedFiles, maxPromptChars, }) => {
         try {
             // Build context string from developer inputs
             const contextParts = [];
@@ -453,15 +458,24 @@ function registerReEvaluateWithContext(server) {
                 contextParts.push(`Focus areas: ${focusAreas.join(", ")}`);
             }
             const fullContext = contextParts.join("\n");
+            // Apply token budget caps to inputs
+            const budget = maxPromptChars ?? 100_000;
+            const unlimited = budget === 0;
+            const codeCap = unlimited ? Infinity : budget;
+            const contextCap = unlimited ? Infinity : Math.max(2000, Math.floor(budget * 0.1));
+            const cappedCode = code.length > codeCap ? code.slice(0, codeCap) : code;
+            const cappedContext = fullContext.length > contextCap ? fullContext.slice(0, contextCap) + "\n… (context truncated)" : fullContext;
+            const cappedRelatedFiles = !unlimited && relatedFiles && relatedFiles.length > 10 ? relatedFiles.slice(0, 10) : relatedFiles;
             const evalOptions = {
                 autoTune: true,
                 deepReview: deepReview ?? false,
                 confidenceFilter: confidenceFilter ?? 0.5,
                 filePath,
-                relatedFiles,
+                relatedFiles: cappedRelatedFiles,
                 calibrate: true,
+                maxPromptChars: maxPromptChars,
             };
-            const verdict = evaluateWithTribunal(code, language, fullContext || undefined, evalOptions);
+            const verdict = evaluateWithTribunal(cappedCode, language, cappedContext || undefined, evalOptions);
             // Post-process: mark disputed findings
             let findings = verdict.findings;
             if (disputedRuleIds && disputedRuleIds.length > 0) {

package/dist/tools/register-workflow.js

@@ -946,12 +946,18 @@ function registerEvaluateGitDiff(server) {
             .boolean()
             .optional()
             .describe("Apply feedback-driven auto-tuning to reduce false positives (default: false)"),
+        maxPromptChars: z
+            .number()
+            .min(0)
+            .optional()
+            .describe("Maximum character budget for LLM prompts. Controls truncation of deep-review prompts. Set to 0 to disable all truncation. Default: 100000."),
         config: configSchema,
-    }, async ({ repoPath, base, diffText, confidenceFilter, autoTune, config }) => {
+    }, async ({ repoPath, base, diffText, confidenceFilter, autoTune, maxPromptChars, config }) => {
         try {
             const evalOptions = {
                 confidenceFilter,
                 autoTune,
+                maxPromptChars,
                 config: toJudgesConfig(config),
             };
             let result;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kevinrabun/judges",
-  "version": "3.118.0",
+  "version": "3.121.0",
   "description": "45 specialized judges that evaluate AI-generated code for security, cost, and quality.",
   "mcpName": "io.github.KevinRabun/judges",
   "type": "module",

package/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/kevinrabun/judges",
     "source": "github"
   },
-  "version": "3.118.0",
+  "version": "3.121.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@kevinrabun/judges",
-      "version": "3.118.0",
+      "version": "3.121.0",
       "transport": {
         "type": "stdio"
       }