@kevinrabun/judges 3.42.0 → 3.43.0

package/dist/commands/ci-template.d.ts

@@ -0,0 +1,15 @@
+/**
+ * CI templates — generate ready-to-use CI/CD pipeline configs for
+ * GitHub Actions, GitLab CI, Azure Pipelines, Bitbucket Pipelines,
+ * and CircleCI. Eliminates manual YAML authoring for teams adopting Judges.
+ */
+export interface CiTemplate {
+    id: string;
+    name: string;
+    file: string;
+    content: string;
+}
+export declare function getTemplate(id: string): CiTemplate | undefined;
+export declare function listTemplates(): CiTemplate[];
+export declare function runCiTemplate(argv: string[]): void;
+//# sourceMappingURL=ci-template.d.ts.map

package/dist/commands/ci-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-template.d.ts","sourceRoot":"","sources":["../../src/commands/ci-template.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA8HH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAUD,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAE9D;AAED,wBAAgB,aAAa,IAAI,UAAU,EAAE,CAE5C;AAgBD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAiElD"}

package/dist/commands/ci-template.js

@@ -0,0 +1,212 @@
+/**
+ * CI templates — generate ready-to-use CI/CD pipeline configs for
+ * GitHub Actions, GitLab CI, Azure Pipelines, Bitbucket Pipelines,
+ * and CircleCI. Eliminates manual YAML authoring for teams adopting Judges.
+ */
+// ─── Templates ──────────────────────────────────────────────────────────────
+const GITHUB_ACTIONS = `# .github/workflows/judges.yml
+name: Judges Code Review
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+permissions:
+  contents: read
+  pull-requests: write
+  security-events: write
+
+jobs:
+  judges:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+      - run: npm install -g @kevinrabun/judges
+      - name: Run Judges evaluation
+        run: |
+          judges eval --file "src/**/*.ts" --format sarif --fail-on-findings > judges.sarif
+        continue-on-error: true
+      - name: Upload SARIF
+        if: always()
+        run: judges upload --file judges.sarif
+        env:
+          GITHUB_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+      - name: Post PR summary
+        if: always()
+        run: judges pr-summary --sarif judges.sarif --pr \${{ github.event.pull_request.number }}
+        env:
+          GITHUB_TOKEN: \${{ secrets.GITHUB_TOKEN }}
+`;
+const GITLAB_CI = `# .gitlab-ci.yml
+judges-review:
+  image: node:20
+  stage: test
+  script:
+    - npm install -g @kevinrabun/judges
+    - judges eval --file "src/**/*.ts" --format sarif > judges.sarif
+    - judges eval --file "src/**/*.ts" --format codeclimate > codeclimate.json
+  artifacts:
+    reports:
+      sast: judges.sarif
+      codequality: codeclimate.json
+  rules:
+    - if: $CI_MERGE_REQUEST_IID
+`;
+const AZURE_PIPELINES = `# azure-pipelines.yml
+trigger:
+  - main
+
+pool:
+  vmImage: "ubuntu-latest"
+
+steps:
+  - task: NodeTool@0
+    inputs:
+      versionSpec: "20.x"
+
+  - script: npm install -g @kevinrabun/judges
+    displayName: "Install Judges"
+
+  - script: judges eval --file "src/**/*.ts" --format sarif > judges.sarif
+    displayName: "Run Judges evaluation"
+
+  - task: PublishBuildArtifacts@1
+    inputs:
+      PathtoPublish: judges.sarif
+      ArtifactName: judges-results
+    condition: always()
+`;
+const BITBUCKET_PIPELINES = `# bitbucket-pipelines.yml
+image: node:20
+
+pipelines:
+  pull-requests:
+    "**":
+      - step:
+          name: Judges Code Review
+          caches:
+            - node
+          script:
+            - npm install -g @kevinrabun/judges
+            - judges eval --file "src/**/*.ts" --format json > judges-results.json
+            - judges eval --file "src/**/*.ts" --format text
+          artifacts:
+            - judges-results.json
+`;
+const CIRCLECI = `# .circleci/config.yml
+version: 2.1
+
+jobs:
+  judges-review:
+    docker:
+      - image: cimg/node:20.0
+    steps:
+      - checkout
+      - run:
+          name: Install Judges
+          command: npm install -g @kevinrabun/judges
+      - run:
+          name: Run evaluation
+          command: judges eval --file "src/**/*.ts" --format sarif > judges.sarif
+      - store_artifacts:
+          path: judges.sarif
+          destination: judges-results
+
+workflows:
+  review:
+    jobs:
+      - judges-review
+`;
+const TEMPLATES = [
+    { id: "github", name: "GitHub Actions", file: ".github/workflows/judges.yml", content: GITHUB_ACTIONS },
+    { id: "gitlab", name: "GitLab CI", file: ".gitlab-ci.yml", content: GITLAB_CI },
+    { id: "azure", name: "Azure Pipelines", file: "azure-pipelines.yml", content: AZURE_PIPELINES },
+    { id: "bitbucket", name: "Bitbucket Pipelines", file: "bitbucket-pipelines.yml", content: BITBUCKET_PIPELINES },
+    { id: "circleci", name: "CircleCI", file: ".circleci/config.yml", content: CIRCLECI },
+];
+export function getTemplate(id) {
+    return TEMPLATES.find((t) => t.id === id);
+}
+export function listTemplates() {
+    return TEMPLATES;
+}
+// ─── Auto-Detect Platform ──────────────────────────────────────────────────
+function detectPlatform() {
+    const { existsSync } = require("fs");
+    if (existsSync(".github"))
+        return "github";
+    if (existsSync(".gitlab-ci.yml"))
+        return "gitlab";
+    if (existsSync("azure-pipelines.yml"))
+        return "azure";
+    if (existsSync("bitbucket-pipelines.yml"))
+        return "bitbucket";
+    if (existsSync(".circleci"))
+        return "circleci";
+    return undefined;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runCiTemplate(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges ci-template — Generate CI/CD pipeline config for Judges
+
+Usage:
+  judges ci-template --platform github      Generate GitHub Actions workflow
+  judges ci-template --platform gitlab      Generate GitLab CI config
+  judges ci-template --platform azure       Generate Azure Pipelines config
+  judges ci-template --platform bitbucket   Generate Bitbucket Pipelines config
+  judges ci-template --platform circleci    Generate CircleCI config
+  judges ci-template --list                 List available templates
+  judges ci-template --auto                 Auto-detect platform
+
+Options:
+  --platform <id>    CI platform (github, gitlab, azure, bitbucket, circleci)
+  --write            Write to the appropriate file location
+  --list             List all available templates
+  --auto             Auto-detect platform from repo structure
+  --help, -h         Show this help
+`);
+        return;
+    }
+    if (argv.includes("--list")) {
+        console.log("\n  Available CI Templates:\n");
+        for (const t of TEMPLATES) {
+            console.log(`    ${t.id.padEnd(12)} ${t.name.padEnd(25)} → ${t.file}`);
+        }
+        console.log("");
+        return;
+    }
+    let platform = argv.find((_a, i) => argv[i - 1] === "--platform");
+    if (argv.includes("--auto")) {
+        platform = detectPlatform();
+        if (!platform) {
+            console.error("Error: could not auto-detect CI platform");
+            process.exit(1);
+        }
+        console.log(`  Auto-detected platform: ${platform}`);
+    }
+    if (!platform) {
+        console.error("Error: --platform <id> required. Use --list to see options.");
+        process.exit(1);
+    }
+    const template = getTemplate(platform);
+    if (!template) {
+        console.error(`Error: unknown platform "${platform}". Use --list to see options.`);
+        process.exit(1);
+    }
+    if (argv.includes("--write")) {
+        const { writeFileSync, mkdirSync } = require("fs");
+        const { dirname } = require("path");
+        const dir = dirname(template.file);
+        if (dir !== ".")
+            mkdirSync(dir, { recursive: true });
+        writeFileSync(template.file, template.content, "utf-8");
+        console.log(`  ✅ Written ${template.file}`);
+        return;
+    }
+    console.log(template.content);
+}
+//# sourceMappingURL=ci-template.js.map

package/dist/commands/ci-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-template.js","sourceRoot":"","sources":["../../src/commands/ci-template.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,+EAA+E;AAE/E,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCtB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;;;;;;;CAcjB,CAAC;AAEF,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBvB,CAAC;AAEF,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;CAgB3B,CAAC;AAEF,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBhB,CAAC;AAWF,MAAM,SAAS,GAAiB;IAC9B,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,cAAc,EAAE;IACvG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE;IAC/E,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,eAAe,EAAE;IAC/F,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IAC/G,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,QAAQ,EAAE;CACtF,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAE9E,SAAS,cAAc;IACrB,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,UAAU,CAAC,qBAAqB,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,IAAI,UAAU,CAAC,yBAAyB,CAAC;QAAE,OAAO,WAAW,CAAC;IAC9D,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,QAAQ,GAAG,cAAc,EAAE,CAAC;QAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,4BAA4B,QAAQ,+BAA+B,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC"}

package/dist/commands/false-negatives.d.ts

@@ -0,0 +1,35 @@
+/**
+ * False-negative report — collect and analyze cases where Judges
+ * missed a real vulnerability or bug that was later found manually.
+ *
+ * Builds a local feedback database (.judges-false-negatives.json)
+ * that helps teams understand blind spots and request new rules.
+ */
+export interface FalseNegativeEntry {
+    id: string;
+    timestamp: string;
+    file: string;
+    line?: number;
+    category: string;
+    description: string;
+    severity: string;
+    expectedRule?: string;
+    language: string;
+    codeSnippet?: string;
+    reportedBy?: string;
+    status: "open" | "rule-added" | "wont-fix" | "duplicate";
+}
+export interface FalseNegativeDb {
+    entries: FalseNegativeEntry[];
+    version: string;
+}
+export declare function addFalseNegative(entry: Omit<FalseNegativeEntry, "id" | "timestamp" | "status">): FalseNegativeEntry;
+export declare function getFalseNegativeStats(db: FalseNegativeDb): {
+    total: number;
+    open: number;
+    byCategory: Record<string, number>;
+    bySeverity: Record<string, number>;
+    byLanguage: Record<string, number>;
+};
+export declare function runFalseNegativeReport(argv: string[]): void;
+//# sourceMappingURL=false-negatives.d.ts.map

package/dist/commands/false-negatives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"false-negatives.d.ts","sourceRoot":"","sources":["../../src/commands/false-negatives.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;CAC1D;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAuBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,WAAW,GAAG,QAAQ,CAAC,GAAG,kBAAkB,CAcnH;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,eAAe,GAAG;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAaA;AAID,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA2G3D"}

package/dist/commands/false-negatives.js

@@ -0,0 +1,166 @@
+/**
+ * False-negative report — collect and analyze cases where Judges
+ * missed a real vulnerability or bug that was later found manually.
+ *
+ * Builds a local feedback database (.judges-false-negatives.json)
+ * that helps teams understand blind spots and request new rules.
+ */
+import { createHash } from "crypto";
+// ─── Database ───────────────────────────────────────────────────────────────
+const DB_FILE = ".judges-false-negatives.json";
+function loadDb() {
+    const { readFileSync, existsSync } = require("fs");
+    if (existsSync(DB_FILE)) {
+        try {
+            return JSON.parse(readFileSync(DB_FILE, "utf-8"));
+        }
+        catch {
+            /* corrupt */
+        }
+    }
+    return { entries: [], version: "1.0" };
+}
+function saveDb(db) {
+    const { writeFileSync } = require("fs");
+    writeFileSync(DB_FILE, JSON.stringify(db, null, 2), "utf-8");
+}
+export function addFalseNegative(entry) {
+    const db = loadDb();
+    const fn = {
+        ...entry,
+        id: createHash("sha256")
+            .update(Date.now().toString() + entry.file + entry.description)
+            .digest("hex")
+            .slice(0, 10),
+        timestamp: new Date().toISOString(),
+        status: "open",
+    };
+    db.entries.push(fn);
+    saveDb(db);
+    return fn;
+}
+export function getFalseNegativeStats(db) {
+    const open = db.entries.filter((e) => e.status === "open").length;
+    const byCategory = {};
+    const bySeverity = {};
+    const byLanguage = {};
+    for (const e of db.entries) {
+        byCategory[e.category] = (byCategory[e.category] || 0) + 1;
+        bySeverity[e.severity] = (bySeverity[e.severity] || 0) + 1;
+        byLanguage[e.language] = (byLanguage[e.language] || 0) + 1;
+    }
+    return { total: db.entries.length, open, byCategory, bySeverity, byLanguage };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFalseNegativeReport(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges false-negatives — Report and track missed vulnerabilities
+
+Usage:
+  judges false-negatives                              Show report
+  judges false-negatives --add --file src/app.ts \\
+    --line 42 --category injection --severity high \\
+    --description "SQL injection via user input"     Add a missed finding
+  judges false-negatives --resolve <id>               Mark as resolved
+
+Options:
+  --add                  Add a new false-negative report
+  --file <path>          File where the issue was found
+  --line <n>             Line number
+  --category <cat>       Category (injection, auth, crypto, xss, etc.)
+  --severity <level>     Severity (critical, high, medium, low)
+  --description <text>   Description of what was missed
+  --language <lang>      Language (auto-detected from file)
+  --resolve <id>         Mark entry as resolved
+  --format json          JSON output
+  --help, -h             Show this help
+
+This builds a local feedback database that helps identify blind spots
+in the current rule set, informing future rule development.
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    if (argv.includes("--add")) {
+        const file = argv.find((_a, i) => argv[i - 1] === "--file") || "";
+        const lineStr = argv.find((_a, i) => argv[i - 1] === "--line");
+        const category = argv.find((_a, i) => argv[i - 1] === "--category") || "unknown";
+        const severity = argv.find((_a, i) => argv[i - 1] === "--severity") || "medium";
+        const description = argv.find((_a, i) => argv[i - 1] === "--description") || "";
+        const language = argv.find((_a, i) => argv[i - 1] === "--language") || detectLanguage(file);
+        if (!file || !description) {
+            console.error("Error: --file and --description required");
+            process.exit(1);
+        }
+        const entry = addFalseNegative({
+            file,
+            line: lineStr ? parseInt(lineStr, 10) : undefined,
+            category,
+            severity,
+            description,
+            language,
+        });
+        console.log(`  ✅ Added false-negative report: ${entry.id}`);
+        return;
+    }
+    const resolveId = argv.find((_a, i) => argv[i - 1] === "--resolve");
+    if (resolveId) {
+        const db = loadDb();
+        const entry = db.entries.find((e) => e.id === resolveId);
+        if (!entry) {
+            console.error(`Error: entry ${resolveId} not found`);
+            process.exit(1);
+        }
+        entry.status = "rule-added";
+        saveDb(db);
+        console.log(`  ✅ Resolved: ${resolveId}`);
+        return;
+    }
+    // Show report
+    const db = loadDb();
+    if (db.entries.length === 0) {
+        console.log("\n  No false-negative reports. Use --add to report a missed finding.\n");
+        return;
+    }
+    const stats = getFalseNegativeStats(db);
+    if (format === "json") {
+        console.log(JSON.stringify({ stats, entries: db.entries }, null, 2));
+        return;
+    }
+    console.log(`\n  False-Negative Analysis\n`);
+    console.log(`  Total: ${stats.total} | Open: ${stats.open}\n`);
+    console.log("  By Category:");
+    for (const [cat, count] of Object.entries(stats.byCategory).sort((a, b) => b[1] - a[1])) {
+        console.log(`    ${cat.padEnd(20)} ${count}`);
+    }
+    console.log("\n  By Severity:");
+    for (const [sev, count] of Object.entries(stats.bySeverity).sort((a, b) => b[1] - a[1])) {
+        console.log(`    ${sev.padEnd(20)} ${count}`);
+    }
+    console.log("\n  Recent entries:");
+    for (const e of db.entries.slice(-10)) {
+        const status = e.status === "open" ? "🔴" : "✅";
+        console.log(`    ${status} ${e.id}  ${e.severity.padEnd(8)} ${e.category.padEnd(15)} ${e.description.slice(0, 50)}`);
+    }
+    console.log("");
+}
+function detectLanguage(file) {
+    const { extname } = require("path");
+    const ext = extname(file).toLowerCase();
+    const map = {
+        ".ts": "typescript",
+        ".tsx": "typescript",
+        ".js": "javascript",
+        ".jsx": "javascript",
+        ".py": "python",
+        ".go": "go",
+        ".rs": "rust",
+        ".java": "java",
+        ".cs": "csharp",
+        ".rb": "ruby",
+        ".php": "php",
+    };
+    return map[ext] || "unknown";
+}
+//# sourceMappingURL=false-negatives.js.map

package/dist/commands/false-negatives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"false-negatives.js","sourceRoot":"","sources":["../../src/commands/false-negatives.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAwBpC,+EAA+E;AAE/E,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAE/C,SAAS,MAAM;IACb,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,MAAM,CAAC,EAAmB;IACjC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA8D;IAC7F,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,GAAuB;QAC7B,GAAG,KAAK;QACR,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC;aACrB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC;aAC9D,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,MAAM;KACf,CAAC;IACF,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAmB;IAOvD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAChF,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;CAwBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,SAAS,CAAC;QACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,QAAQ,CAAC;QAChG,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAE5G,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACjD,QAAQ;YACR,QAAQ;YACR,WAAW;YACX,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,oCAAoC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IACpF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,gBAAgB,SAAS,YAAY,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,cAAc;IACd,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAExC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IAE/D,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,OAAO,CAAC,GAAG,CACT,OAAO,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,GAAG,GAA2B;QAClC,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,KAAK;KACd,CAAC;IACF,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;AAC/B,CAAC"}

package/dist/commands/hook-install.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Hook install — install and configure git hooks for pre-commit
+ * and pre-push evaluation with Judges.
+ *
+ * Supports husky, simple-git-hooks, and direct .git/hooks installation.
+ */
+export interface HookConfig {
+    /** Hook type: pre-commit or pre-push */
+    hook: "pre-commit" | "pre-push";
+    /** Only evaluate staged files */
+    stagedOnly: boolean;
+    /** Fail on findings of this severity or higher */
+    failSeverity: string;
+    /** Timeout in seconds */
+    timeout: number;
+    /** Run in parallel */
+    parallel: boolean;
+    /** Use smart judge selection */
+    smartSelect: boolean;
+}
+export declare function runHookInstall(argv: string[]): void;
+//# sourceMappingURL=hook-install.d.ts.map

package/dist/commands/hook-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-install.d.ts","sourceRoot":"","sources":["../../src/commands/hook-install.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,UAAU;IACzB,wCAAwC;IACxC,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC;IAChC,iCAAiC;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,WAAW,EAAE,OAAO,CAAC;CACtB;AAoFD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAoEnD"}

package/dist/commands/hook-install.js

@@ -0,0 +1,143 @@
+/**
+ * Hook install — install and configure git hooks for pre-commit
+ * and pre-push evaluation with Judges.
+ *
+ * Supports husky, simple-git-hooks, and direct .git/hooks installation.
+ */
+// ─── Hook Scripts ───────────────────────────────────────────────────────────
+function generateHookScript(config) {
+    const flags = [];
+    if (config.stagedOnly)
+        flags.push("--staged-only");
+    if (config.failSeverity !== "info")
+        flags.push(`--min-severity ${config.failSeverity}`);
+    flags.push("--fail-on-findings");
+    flags.push("--summary");
+    return `#!/bin/sh
+# Judges ${config.hook} hook
+# Auto-generated by: judges hook-install
+
+# Skip if JUDGES_SKIP_HOOK is set
+if [ -n "$JUDGES_SKIP_HOOK" ]; then
+  echo "Judges: hook skipped (JUDGES_SKIP_HOOK is set)"
+  exit 0
+fi
+
+# Timeout protection (${config.timeout}s)
+timeout_cmd=""
+if command -v timeout > /dev/null 2>&1; then
+  timeout_cmd="timeout ${config.timeout}"
+fi
+
+echo "🔍 Judges: evaluating..."
+$timeout_cmd npx judges eval ${flags.join(" ")} 2>&1
+exit_code=$?
+
+if [ $exit_code -ne 0 ] && [ $exit_code -ne 124 ]; then
+  echo ""
+  echo "❌ Judges: findings detected. Fix or skip with JUDGES_SKIP_HOOK=1"
+  exit 1
+fi
+
+if [ $exit_code -eq 124 ]; then
+  echo "⚠️  Judges: evaluation timed out (${config.timeout}s). Proceeding."
+fi
+`;
+}
+// ─── Installation Methods ───────────────────────────────────────────────────
+function installDirect(hookType, script) {
+    const { writeFileSync, mkdirSync, chmodSync, existsSync } = require("fs");
+    const { join } = require("path");
+    const hooksDir = join(".git", "hooks");
+    if (!existsSync(".git")) {
+        console.error("Error: not a git repository");
+        return false;
+    }
+    mkdirSync(hooksDir, { recursive: true });
+    const hookPath = join(hooksDir, hookType);
+    writeFileSync(hookPath, script, { mode: 0o755 });
+    try {
+        chmodSync(hookPath, 0o755);
+    }
+    catch {
+        /* Windows */
+    }
+    console.log(`  ✅ Installed ${hookPath}`);
+    return true;
+}
+function installHusky(hookType, script) {
+    const { existsSync, writeFileSync, mkdirSync } = require("fs");
+    const { join } = require("path");
+    if (!existsSync(".husky")) {
+        console.log("  Husky directory not found. Creating .husky/");
+        mkdirSync(".husky", { recursive: true });
+    }
+    const hookPath = join(".husky", hookType);
+    writeFileSync(hookPath, script, { mode: 0o755 });
+    console.log(`  ✅ Installed ${hookPath} (husky)`);
+    return true;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runHookInstall(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges hook-install — Install git hooks for automatic code review
+
+Usage:
+  judges hook-install                        Install pre-commit hook
+  judges hook-install --hook pre-push        Install pre-push hook
+  judges hook-install --method husky         Use husky for hook management
+
+Options:
+  --hook <type>        Hook type: pre-commit (default) or pre-push
+  --method <method>    Installation: direct (default), husky
+  --severity <level>   Fail on findings of this severity+ (default: high)
+  --timeout <seconds>  Timeout in seconds (default: 60)
+  --no-staged-only     Evaluate all files, not just staged
+  --uninstall          Remove the hook
+  --show               Show current hook script without installing
+  --help, -h           Show this help
+
+Environment:
+  JUDGES_SKIP_HOOK=1   Skip the hook for a single commit
+`);
+        return;
+    }
+    const hookType = (argv.find((_a, i) => argv[i - 1] === "--hook") || "pre-commit");
+    const method = argv.find((_a, i) => argv[i - 1] === "--method") || "direct";
+    const severity = argv.find((_a, i) => argv[i - 1] === "--severity") || "high";
+    const timeoutStr = argv.find((_a, i) => argv[i - 1] === "--timeout");
+    const timeout = timeoutStr ? parseInt(timeoutStr, 10) : 60;
+    if (argv.includes("--uninstall")) {
+        const { unlinkSync, existsSync } = require("fs");
+        const { join } = require("path");
+        const paths = [join(".git", "hooks", hookType), join(".husky", hookType)];
+        for (const p of paths) {
+            if (existsSync(p)) {
+                unlinkSync(p);
+                console.log(`  ✅ Removed ${p}`);
+            }
+        }
+        return;
+    }
+    const config = {
+        hook: hookType,
+        stagedOnly: !argv.includes("--no-staged-only"),
+        failSeverity: severity,
+        timeout,
+        parallel: true,
+        smartSelect: true,
+    };
+    const script = generateHookScript(config);
+    if (argv.includes("--show")) {
+        console.log(script);
+        return;
+    }
+    if (method === "husky") {
+        installHusky(hookType, script);
+    }
+    else {
+        installDirect(hookType, script);
+    }
+}
+//# sourceMappingURL=hook-install.js.map

package/dist/commands/hook-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-install.js","sourceRoot":"","sources":["../../src/commands/hook-install.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,+EAA+E;AAE/E,SAAS,kBAAkB,CAAC,MAAkB;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAExB,OAAO;WACE,MAAM,CAAC,IAAI;;;;;;;;;wBASE,MAAM,CAAC,OAAO;;;yBAGb,MAAM,CAAC,OAAO;;;;+BAIR,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;;;4CAUF,MAAM,CAAC,OAAO;;CAEzD,CAAC;AACF,CAAC;AAED,+EAA+E;AAE/E,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAc;IACrD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,aAAa;IACf,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,MAAc;IACpD,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,UAAU,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;CAoBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,YAAY,CAElF,CAAC;IACf,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,QAAQ,CAAC;IAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,MAAM,CAAC;IAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3D,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,UAAU,CAAC,CAAC,CAAC,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAe;QACzB,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC9C,YAAY,EAAE,QAAQ;QACtB,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;KAClB,CAAC;IAEF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}