@kevinrabun/judges 3.42.0 → 3.44.0

package/dist/commands/false-negatives.d.ts

@@ -0,0 +1,35 @@
+/**
+ * False-negative report — collect and analyze cases where Judges
+ * missed a real vulnerability or bug that was later found manually.
+ *
+ * Builds a local feedback database (.judges-false-negatives.json)
+ * that helps teams understand blind spots and request new rules.
+ */
+export interface FalseNegativeEntry {
+    id: string;
+    timestamp: string;
+    file: string;
+    line?: number;
+    category: string;
+    description: string;
+    severity: string;
+    expectedRule?: string;
+    language: string;
+    codeSnippet?: string;
+    reportedBy?: string;
+    status: "open" | "rule-added" | "wont-fix" | "duplicate";
+}
+export interface FalseNegativeDb {
+    entries: FalseNegativeEntry[];
+    version: string;
+}
+export declare function addFalseNegative(entry: Omit<FalseNegativeEntry, "id" | "timestamp" | "status">): FalseNegativeEntry;
+export declare function getFalseNegativeStats(db: FalseNegativeDb): {
+    total: number;
+    open: number;
+    byCategory: Record<string, number>;
+    bySeverity: Record<string, number>;
+    byLanguage: Record<string, number>;
+};
+export declare function runFalseNegativeReport(argv: string[]): void;
+//# sourceMappingURL=false-negatives.d.ts.map

package/dist/commands/false-negatives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"false-negatives.d.ts","sourceRoot":"","sources":["../../src/commands/false-negatives.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;CAC1D;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAuBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,WAAW,GAAG,QAAQ,CAAC,GAAG,kBAAkB,CAcnH;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,eAAe,GAAG;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAaA;AAID,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA2G3D"}

package/dist/commands/false-negatives.js

@@ -0,0 +1,166 @@
+/**
+ * False-negative report — collect and analyze cases where Judges
+ * missed a real vulnerability or bug that was later found manually.
+ *
+ * Builds a local feedback database (.judges-false-negatives.json)
+ * that helps teams understand blind spots and request new rules.
+ */
+import { createHash } from "crypto";
+// ─── Database ───────────────────────────────────────────────────────────────
+const DB_FILE = ".judges-false-negatives.json";
+function loadDb() {
+    const { readFileSync, existsSync } = require("fs");
+    if (existsSync(DB_FILE)) {
+        try {
+            return JSON.parse(readFileSync(DB_FILE, "utf-8"));
+        }
+        catch {
+            /* corrupt */
+        }
+    }
+    return { entries: [], version: "1.0" };
+}
+function saveDb(db) {
+    const { writeFileSync } = require("fs");
+    writeFileSync(DB_FILE, JSON.stringify(db, null, 2), "utf-8");
+}
+export function addFalseNegative(entry) {
+    const db = loadDb();
+    const fn = {
+        ...entry,
+        id: createHash("sha256")
+            .update(Date.now().toString() + entry.file + entry.description)
+            .digest("hex")
+            .slice(0, 10),
+        timestamp: new Date().toISOString(),
+        status: "open",
+    };
+    db.entries.push(fn);
+    saveDb(db);
+    return fn;
+}
+export function getFalseNegativeStats(db) {
+    const open = db.entries.filter((e) => e.status === "open").length;
+    const byCategory = {};
+    const bySeverity = {};
+    const byLanguage = {};
+    for (const e of db.entries) {
+        byCategory[e.category] = (byCategory[e.category] || 0) + 1;
+        bySeverity[e.severity] = (bySeverity[e.severity] || 0) + 1;
+        byLanguage[e.language] = (byLanguage[e.language] || 0) + 1;
+    }
+    return { total: db.entries.length, open, byCategory, bySeverity, byLanguage };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFalseNegativeReport(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges false-negatives — Report and track missed vulnerabilities
+
+Usage:
+  judges false-negatives                              Show report
+  judges false-negatives --add --file src/app.ts \\
+    --line 42 --category injection --severity high \\
+    --description "SQL injection via user input"     Add a missed finding
+  judges false-negatives --resolve <id>               Mark as resolved
+
+Options:
+  --add                  Add a new false-negative report
+  --file <path>          File where the issue was found
+  --line <n>             Line number
+  --category <cat>       Category (injection, auth, crypto, xss, etc.)
+  --severity <level>     Severity (critical, high, medium, low)
+  --description <text>   Description of what was missed
+  --language <lang>      Language (auto-detected from file)
+  --resolve <id>         Mark entry as resolved
+  --format json          JSON output
+  --help, -h             Show this help
+
+This builds a local feedback database that helps identify blind spots
+in the current rule set, informing future rule development.
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    if (argv.includes("--add")) {
+        const file = argv.find((_a, i) => argv[i - 1] === "--file") || "";
+        const lineStr = argv.find((_a, i) => argv[i - 1] === "--line");
+        const category = argv.find((_a, i) => argv[i - 1] === "--category") || "unknown";
+        const severity = argv.find((_a, i) => argv[i - 1] === "--severity") || "medium";
+        const description = argv.find((_a, i) => argv[i - 1] === "--description") || "";
+        const language = argv.find((_a, i) => argv[i - 1] === "--language") || detectLanguage(file);
+        if (!file || !description) {
+            console.error("Error: --file and --description required");
+            process.exit(1);
+        }
+        const entry = addFalseNegative({
+            file,
+            line: lineStr ? parseInt(lineStr, 10) : undefined,
+            category,
+            severity,
+            description,
+            language,
+        });
+        console.log(`  ✅ Added false-negative report: ${entry.id}`);
+        return;
+    }
+    const resolveId = argv.find((_a, i) => argv[i - 1] === "--resolve");
+    if (resolveId) {
+        const db = loadDb();
+        const entry = db.entries.find((e) => e.id === resolveId);
+        if (!entry) {
+            console.error(`Error: entry ${resolveId} not found`);
+            process.exit(1);
+        }
+        entry.status = "rule-added";
+        saveDb(db);
+        console.log(`  ✅ Resolved: ${resolveId}`);
+        return;
+    }
+    // Show report
+    const db = loadDb();
+    if (db.entries.length === 0) {
+        console.log("\n  No false-negative reports. Use --add to report a missed finding.\n");
+        return;
+    }
+    const stats = getFalseNegativeStats(db);
+    if (format === "json") {
+        console.log(JSON.stringify({ stats, entries: db.entries }, null, 2));
+        return;
+    }
+    console.log(`\n  False-Negative Analysis\n`);
+    console.log(`  Total: ${stats.total} | Open: ${stats.open}\n`);
+    console.log("  By Category:");
+    for (const [cat, count] of Object.entries(stats.byCategory).sort((a, b) => b[1] - a[1])) {
+        console.log(`    ${cat.padEnd(20)} ${count}`);
+    }
+    console.log("\n  By Severity:");
+    for (const [sev, count] of Object.entries(stats.bySeverity).sort((a, b) => b[1] - a[1])) {
+        console.log(`    ${sev.padEnd(20)} ${count}`);
+    }
+    console.log("\n  Recent entries:");
+    for (const e of db.entries.slice(-10)) {
+        const status = e.status === "open" ? "🔴" : "✅";
+        console.log(`    ${status} ${e.id}  ${e.severity.padEnd(8)} ${e.category.padEnd(15)} ${e.description.slice(0, 50)}`);
+    }
+    console.log("");
+}
+function detectLanguage(file) {
+    const { extname } = require("path");
+    const ext = extname(file).toLowerCase();
+    const map = {
+        ".ts": "typescript",
+        ".tsx": "typescript",
+        ".js": "javascript",
+        ".jsx": "javascript",
+        ".py": "python",
+        ".go": "go",
+        ".rs": "rust",
+        ".java": "java",
+        ".cs": "csharp",
+        ".rb": "ruby",
+        ".php": "php",
+    };
+    return map[ext] || "unknown";
+}
+//# sourceMappingURL=false-negatives.js.map

package/dist/commands/false-negatives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"false-negatives.js","sourceRoot":"","sources":["../../src/commands/false-negatives.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAwBpC,+EAA+E;AAE/E,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAE/C,SAAS,MAAM;IACb,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,MAAM,CAAC,EAAmB;IACjC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA8D;IAC7F,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,GAAuB;QAC7B,GAAG,KAAK;QACR,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC;aACrB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC;aAC9D,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,MAAM;KACf,CAAC;IACF,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAmB;IAOvD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,UAAU,GAA2B,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3D,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AAChF,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,sBAAsB,CAAC,IAAc;IACnD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;CAwBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,SAAS,CAAC;QACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,QAAQ,CAAC;QAChG,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAE5G,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,KAAK,GAAG,gBAAgB,CAAC;YAC7B,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACjD,QAAQ;YACR,QAAQ;YACR,WAAW;YACX,QAAQ;SACT,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,oCAAoC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IACpF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,gBAAgB,SAAS,YAAY,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,cAAc;IACd,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAExC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IAE/D,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,OAAO,CAAC,GAAG,CACT,OAAO,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,GAAG,GAA2B;QAClC,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,KAAK;KACd,CAAC;IACF,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;AAC/B,CAAC"}

package/dist/commands/hook-install.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Hook install — install and configure git hooks for pre-commit
+ * and pre-push evaluation with Judges.
+ *
+ * Supports husky, simple-git-hooks, and direct .git/hooks installation.
+ */
+export interface HookConfig {
+    /** Hook type: pre-commit or pre-push */
+    hook: "pre-commit" | "pre-push";
+    /** Only evaluate staged files */
+    stagedOnly: boolean;
+    /** Fail on findings of this severity or higher */
+    failSeverity: string;
+    /** Timeout in seconds */
+    timeout: number;
+    /** Run in parallel */
+    parallel: boolean;
+    /** Use smart judge selection */
+    smartSelect: boolean;
+}
+export declare function runHookInstall(argv: string[]): void;
+//# sourceMappingURL=hook-install.d.ts.map

package/dist/commands/hook-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-install.d.ts","sourceRoot":"","sources":["../../src/commands/hook-install.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,UAAU;IACzB,wCAAwC;IACxC,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC;IAChC,iCAAiC;IACjC,UAAU,EAAE,OAAO,CAAC;IACpB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,gCAAgC;IAChC,WAAW,EAAE,OAAO,CAAC;CACtB;AAoFD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAoEnD"}

package/dist/commands/hook-install.js

@@ -0,0 +1,143 @@
+/**
+ * Hook install — install and configure git hooks for pre-commit
+ * and pre-push evaluation with Judges.
+ *
+ * Supports husky, simple-git-hooks, and direct .git/hooks installation.
+ */
+// ─── Hook Scripts ───────────────────────────────────────────────────────────
+function generateHookScript(config) {
+    const flags = [];
+    if (config.stagedOnly)
+        flags.push("--staged-only");
+    if (config.failSeverity !== "info")
+        flags.push(`--min-severity ${config.failSeverity}`);
+    flags.push("--fail-on-findings");
+    flags.push("--summary");
+    return `#!/bin/sh
+# Judges ${config.hook} hook
+# Auto-generated by: judges hook-install
+
+# Skip if JUDGES_SKIP_HOOK is set
+if [ -n "$JUDGES_SKIP_HOOK" ]; then
+  echo "Judges: hook skipped (JUDGES_SKIP_HOOK is set)"
+  exit 0
+fi
+
+# Timeout protection (${config.timeout}s)
+timeout_cmd=""
+if command -v timeout > /dev/null 2>&1; then
+  timeout_cmd="timeout ${config.timeout}"
+fi
+
+echo "🔍 Judges: evaluating..."
+$timeout_cmd npx judges eval ${flags.join(" ")} 2>&1
+exit_code=$?
+
+if [ $exit_code -ne 0 ] && [ $exit_code -ne 124 ]; then
+  echo ""
+  echo "❌ Judges: findings detected. Fix or skip with JUDGES_SKIP_HOOK=1"
+  exit 1
+fi
+
+if [ $exit_code -eq 124 ]; then
+  echo "⚠️  Judges: evaluation timed out (${config.timeout}s). Proceeding."
+fi
+`;
+}
+// ─── Installation Methods ───────────────────────────────────────────────────
+function installDirect(hookType, script) {
+    const { writeFileSync, mkdirSync, chmodSync, existsSync } = require("fs");
+    const { join } = require("path");
+    const hooksDir = join(".git", "hooks");
+    if (!existsSync(".git")) {
+        console.error("Error: not a git repository");
+        return false;
+    }
+    mkdirSync(hooksDir, { recursive: true });
+    const hookPath = join(hooksDir, hookType);
+    writeFileSync(hookPath, script, { mode: 0o755 });
+    try {
+        chmodSync(hookPath, 0o755);
+    }
+    catch {
+        /* Windows */
+    }
+    console.log(`  ✅ Installed ${hookPath}`);
+    return true;
+}
+function installHusky(hookType, script) {
+    const { existsSync, writeFileSync, mkdirSync } = require("fs");
+    const { join } = require("path");
+    if (!existsSync(".husky")) {
+        console.log("  Husky directory not found. Creating .husky/");
+        mkdirSync(".husky", { recursive: true });
+    }
+    const hookPath = join(".husky", hookType);
+    writeFileSync(hookPath, script, { mode: 0o755 });
+    console.log(`  ✅ Installed ${hookPath} (husky)`);
+    return true;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runHookInstall(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges hook-install — Install git hooks for automatic code review
+
+Usage:
+  judges hook-install                        Install pre-commit hook
+  judges hook-install --hook pre-push        Install pre-push hook
+  judges hook-install --method husky         Use husky for hook management
+
+Options:
+  --hook <type>        Hook type: pre-commit (default) or pre-push
+  --method <method>    Installation: direct (default), husky
+  --severity <level>   Fail on findings of this severity+ (default: high)
+  --timeout <seconds>  Timeout in seconds (default: 60)
+  --no-staged-only     Evaluate all files, not just staged
+  --uninstall          Remove the hook
+  --show               Show current hook script without installing
+  --help, -h           Show this help
+
+Environment:
+  JUDGES_SKIP_HOOK=1   Skip the hook for a single commit
+`);
+        return;
+    }
+    const hookType = (argv.find((_a, i) => argv[i - 1] === "--hook") || "pre-commit");
+    const method = argv.find((_a, i) => argv[i - 1] === "--method") || "direct";
+    const severity = argv.find((_a, i) => argv[i - 1] === "--severity") || "high";
+    const timeoutStr = argv.find((_a, i) => argv[i - 1] === "--timeout");
+    const timeout = timeoutStr ? parseInt(timeoutStr, 10) : 60;
+    if (argv.includes("--uninstall")) {
+        const { unlinkSync, existsSync } = require("fs");
+        const { join } = require("path");
+        const paths = [join(".git", "hooks", hookType), join(".husky", hookType)];
+        for (const p of paths) {
+            if (existsSync(p)) {
+                unlinkSync(p);
+                console.log(`  ✅ Removed ${p}`);
+            }
+        }
+        return;
+    }
+    const config = {
+        hook: hookType,
+        stagedOnly: !argv.includes("--no-staged-only"),
+        failSeverity: severity,
+        timeout,
+        parallel: true,
+        smartSelect: true,
+    };
+    const script = generateHookScript(config);
+    if (argv.includes("--show")) {
+        console.log(script);
+        return;
+    }
+    if (method === "husky") {
+        installHusky(hookType, script);
+    }
+    else {
+        installDirect(hookType, script);
+    }
+}
+//# sourceMappingURL=hook-install.js.map

package/dist/commands/hook-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-install.js","sourceRoot":"","sources":["../../src/commands/hook-install.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,+EAA+E;AAE/E,SAAS,kBAAkB,CAAC,MAAkB;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACxF,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAExB,OAAO;WACE,MAAM,CAAC,IAAI;;;;;;;;;wBASE,MAAM,CAAC,OAAO;;;yBAGb,MAAM,CAAC,OAAO;;;;+BAIR,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;;;4CAUF,MAAM,CAAC,OAAO;;CAEzD,CAAC;AACF,CAAC;AAED,+EAA+E;AAE/E,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAc;IACrD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,aAAa;IACf,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,MAAc;IACpD,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1C,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,UAAU,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;CAoBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,YAAY,CAElF,CAAC;IACf,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,QAAQ,CAAC;IAC5F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,MAAM,CAAC;IAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3D,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,UAAU,CAAC,CAAC,CAAC,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAe;QACzB,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC9C,YAAY,EAAE,QAAQ;QACtB,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;KAClB,CAAC;IAEF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/commands/kb.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Team knowledge base — store team decisions about rules, exceptions,
+ * known patterns, and contextual knowledge that informs evaluations.
+ *
+ * Stored locally in .judges-kb.json.
+ */
+export interface KbEntry {
+    id: string;
+    /** Rule ID or prefix this applies to */
+    rulePattern: string;
+    /** Decision type */
+    decision: "not-applicable" | "accepted-risk" | "deferred" | "exception" | "custom-guidance";
+    /** Why the team made this decision */
+    reason: string;
+    /** Who approved this decision */
+    approvedBy: string;
+    /** When this decision was made */
+    createdIso: string;
+    /** Optional expiry date for temporary exceptions */
+    expiresIso?: string;
+    /** Scope (e.g., file glob or project area) */
+    scope?: string;
+    /** Tags for categorization */
+    tags?: string[];
+    /** Active or archived */
+    active: boolean;
+}
+export declare function addKbEntry(opts: {
+    rulePattern: string;
+    decision: KbEntry["decision"];
+    reason: string;
+    approvedBy: string;
+    scope?: string;
+    tags?: string[];
+    expiresIn?: number;
+}): KbEntry;
+export declare function archiveKbEntry(id: string): boolean;
+export declare function searchKb(query: string): KbEntry[];
+export declare function getApplicableEntries(ruleId: string): KbEntry[];
+export declare function runKnowledgeBase(argv: string[]): void;
+//# sourceMappingURL=kb.d.ts.map

package/dist/commands/kb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb.d.ts","sourceRoot":"","sources":["../../src/commands/kb.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,QAAQ,EAAE,gBAAgB,GAAG,eAAe,GAAG,UAAU,GAAG,WAAW,GAAG,iBAAiB,CAAC;IAC5F,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,yBAAyB;IACzB,MAAM,EAAE,OAAO,CAAC;CACjB;AAuBD,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAqBV;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,CAWjD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE,CAQ9D;AAID,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAgKrD"}