@kevinrabun/judges 3.44.0 → 3.46.0

package/dist/commands/audit-bundle.js

@@ -0,0 +1,235 @@
+/**
+ * Audit evidence bundle — assemble a complete, auditor-ready evidence
+ * package from local scan history, suppressions, votes, SLA data, and config.
+ *
+ * Outputs a structured directory or JSON manifest.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync } from "fs";
+import { join } from "path";
+const EVIDENCE_SOURCES = [
+    {
+        file: ".judgesrc",
+        type: "config",
+        description: "Security policy configuration",
+        controls: ["SOC2-CC6.1", "ISO27001-A.8.28"],
+    },
+    {
+        file: ".judges-results.json",
+        type: "scan-results",
+        description: "Latest evaluation findings",
+        controls: ["SOC2-CC7.1", "ISO27001-A.8.8"],
+    },
+    { file: ".judges-baseline.json", type: "baseline", description: "Accepted risk baseline", controls: ["SOC2-CC3.2"] },
+    {
+        file: ".judges-suppressions.json",
+        type: "suppressions",
+        description: "Suppressed finding audit trail",
+        controls: ["SOC2-CC3.3", "ISO27001-A.8.28"],
+    },
+    {
+        file: ".judges-votes.json",
+        type: "review-decisions",
+        description: "Team consensus on findings",
+        controls: ["SOC2-CC4.1"],
+    },
+    {
+        file: ".judges-sla.json",
+        type: "sla-policy",
+        description: "SLA policies and violation tracking",
+        controls: ["SOC2-CC7.2", "ISO27001-A.8.8"],
+    },
+    {
+        file: ".judges-burndown.json",
+        type: "resolution-tracking",
+        description: "Finding resolution timeline",
+        controls: ["SOC2-CC7.3"],
+    },
+    {
+        file: ".judges-kb.json",
+        type: "knowledge-base",
+        description: "Team rule decisions and exceptions",
+        controls: ["SOC2-CC3.2", "ISO27001-A.5.1"],
+    },
+    {
+        file: ".judges-owners.json",
+        type: "ownership",
+        description: "Rule-to-owner accountability mapping",
+        controls: ["SOC2-CC1.3"],
+    },
+    {
+        file: ".judges-reputation.json",
+        type: "tool-effectiveness",
+        description: "Judge accuracy and FP tracking",
+        controls: ["SOC2-CC4.2"],
+    },
+    {
+        file: ".judges-audit.json",
+        type: "policy-snapshots",
+        description: "Policy audit trail with SHA-256 hashes",
+        controls: ["SOC2-CC8.1", "ISO27001-A.8.25"],
+    },
+    {
+        file: ".judges-review-queue.json",
+        type: "manual-review",
+        description: "Manual review queue decisions",
+        controls: ["SOC2-CC4.1"],
+    },
+    {
+        file: ".judges-correlations.json",
+        type: "root-cause",
+        description: "Root cause analysis records",
+        controls: ["SOC2-CC7.4"],
+    },
+    {
+        file: ".judges-digest.json",
+        type: "trend-data",
+        description: "Historical trend snapshots",
+        controls: ["SOC2-CC4.2", "ISO27001-A.8.16"],
+    },
+    {
+        file: ".judges-false-negatives.json",
+        type: "fn-tracking",
+        description: "False negative tracking",
+        controls: ["SOC2-CC7.1"],
+    },
+];
+// ─── Core ───────────────────────────────────────────────────────────────────
+export function generateBundle(standard, periodDays) {
+    const artifacts = [];
+    for (const src of EVIDENCE_SOURCES) {
+        const present = existsSync(src.file);
+        artifacts.push({
+            type: src.type,
+            source: src.file,
+            description: src.description,
+            controlMapping: src.controls,
+            present,
+        });
+    }
+    // Check for run history
+    const runsDir = ".judges-runs";
+    if (existsSync(runsDir)) {
+        const runs = readdirSync(runsDir).filter((f) => f.endsWith(".json"));
+        artifacts.push({
+            type: "scan-history",
+            source: runsDir,
+            description: `${runs.length} historical scan snapshot(s)`,
+            controlMapping: ["SOC2-CC7.1", "ISO27001-A.8.8"],
+            present: runs.length > 0,
+        });
+    }
+    const present = artifacts.filter((a) => a.present).length;
+    const total = artifacts.length;
+    return {
+        standard,
+        generatedAt: new Date().toISOString(),
+        period: `${periodDays} days`,
+        artifacts,
+        summary: {
+            present,
+            missing: total - present,
+            coveragePercent: Math.round((present / total) * 100),
+        },
+    };
+}
+export function exportBundle(bundle, outputDir) {
+    mkdirSync(outputDir, { recursive: true });
+    // Copy present artifacts
+    for (const artifact of bundle.artifacts) {
+        if (artifact.present && existsSync(artifact.source)) {
+            try {
+                const content = readFileSync(artifact.source, "utf-8");
+                const destName = artifact.source.replace(/^\./, "").replace(/\//g, "_");
+                writeFileSync(join(outputDir, destName), content);
+            }
+            catch {
+                // Skip files that can't be read (directories handled separately)
+            }
+        }
+    }
+    // Write manifest
+    writeFileSync(join(outputDir, "audit-manifest.json"), JSON.stringify(bundle, null, 2));
+    // Write human-readable summary
+    const lines = [];
+    lines.push(`# Audit Evidence Bundle — ${bundle.standard}`);
+    lines.push(`Generated: ${bundle.generatedAt}`);
+    lines.push(`Period: ${bundle.period}\n`);
+    lines.push(`## Coverage: ${bundle.summary.coveragePercent}% (${bundle.summary.present}/${bundle.summary.present + bundle.summary.missing})\n`);
+    lines.push("| Status | Type | Source | Controls |");
+    lines.push("|--------|------|--------|----------|");
+    for (const a of bundle.artifacts) {
+        const icon = a.present ? "✅" : "❌";
+        const controls = (a.controlMapping || []).join(", ");
+        lines.push(`| ${icon} | ${a.type} | ${a.source} | ${controls} |`);
+    }
+    lines.push("\n## Missing Evidence");
+    const missing = bundle.artifacts.filter((a) => !a.present);
+    if (missing.length === 0) {
+        lines.push("All evidence artifacts present.");
+    }
+    else {
+        for (const m of missing) {
+            lines.push(`- **${m.type}**: ${m.description} (${m.source})`);
+        }
+    }
+    writeFileSync(join(outputDir, "audit-summary.md"), lines.join("\n"));
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runAuditBundle(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges audit-bundle — Assemble auditor-ready evidence package
+
+Usage:
+  judges audit-bundle --standard soc2
+  judges audit-bundle --standard iso27001 --period 90
+  judges audit-bundle --standard soc2 --output ./audit-evidence/
+  judges audit-bundle --check
+
+Options:
+  --standard <name>    Standard: soc2 | iso27001 | hitrust | generic (default: generic)
+  --period <days>      Evidence period in days (default: 90)
+  --output <dir>       Export evidence to directory
+  --check              Check evidence coverage without exporting
+  --format json        JSON output
+  --help, -h           Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const standard = argv.find((_a, i) => argv[i - 1] === "--standard") || "generic";
+    const periodStr = argv.find((_a, i) => argv[i - 1] === "--period");
+    const periodDays = periodStr ? parseInt(periodStr, 10) : 90;
+    const bundle = generateBundle(standard, periodDays);
+    // Export
+    const outputDir = argv.find((_a, i) => argv[i - 1] === "--output");
+    if (outputDir) {
+        exportBundle(bundle, outputDir);
+        console.log(`  ✅ Audit bundle exported to ${outputDir}/`);
+        console.log(`     Standard: ${standard}, Coverage: ${bundle.summary.coveragePercent}%`);
+        console.log(`     ${bundle.summary.present} present, ${bundle.summary.missing} missing`);
+        return;
+    }
+    // Check or display
+    if (format === "json") {
+        console.log(JSON.stringify(bundle, null, 2));
+    }
+    else {
+        console.log(`\n  Audit Evidence — ${standard.toUpperCase()} (${bundle.period})\n  ────────────────────────────────────`);
+        console.log(`  Coverage: ${bundle.summary.coveragePercent}% (${bundle.summary.present}/${bundle.summary.present + bundle.summary.missing})\n`);
+        for (const a of bundle.artifacts) {
+            const icon = a.present ? "✅" : "❌";
+            const controls = (a.controlMapping || []).slice(0, 2).join(", ");
+            console.log(`    ${icon} ${a.type.padEnd(22)} ${controls}`);
+        }
+        const missing = bundle.artifacts.filter((a) => !a.present);
+        if (missing.length > 0) {
+            console.log(`\n  Missing (${missing.length}):`);
+            for (const m of missing) {
+                console.log(`    ⚠️  ${m.description} (${m.source})`);
+            }
+        }
+        console.log("");
+    }
+}
+//# sourceMappingURL=audit-bundle.js.map

package/dist/commands/audit-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-bundle.js","sourceRoot":"","sources":["../../src/commands/audit-bundle.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAwB5B,MAAM,gBAAgB,GAA8E;IAClG;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;KAC3C;IACD,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE;IACpH;QACE,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gCAAgC;QAC7C,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,oCAAoC;QACjD,QAAQ,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,gCAAgC;QAC7C,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,wCAAwC;QACrD,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;CACF,CAAC;AAEF,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAkB;IACjE,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,IAAI;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,cAAc,EAAE,GAAG,CAAC,QAAQ;YAC5B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAAG,cAAc,CAAC;IAC/B,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,8BAA8B;YACzD,cAAc,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;YAChD,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;IAE/B,OAAO;QACL,QAAQ;QACR,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,GAAG,UAAU,OAAO;QAC5B,SAAS;QACT,OAAO,EAAE;YACP,OAAO;YACP,OAAO,EAAE,KAAK,GAAG,OAAO;YACxB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;SACrD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,SAAiB;IACjE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,yBAAyB;IACzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACxE,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvF,+BAA+B;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CACR,gBAAgB,MAAM,CAAC,OAAO,CAAC,eAAe,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,CACnI,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,MAAM,QAAQ,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,SAAS,CAAC;IACjG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5D,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEpD,SAAS;IACT,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IACnF,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,gCAAgC,SAAS,GAAG,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,eAAe,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,OAAO,CAAC,OAAO,aAAa,MAAM,CAAC,OAAO,CAAC,OAAO,UAAU,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,wBAAwB,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,2CAA2C,CAC5G,CAAC;QACF,OAAO,CAAC,GAAG,CACT,eAAe,MAAM,CAAC,OAAO,CAAC,eAAe,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,CAClI,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YAChD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/compare-runs.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Compare evaluation runs — side-by-side comparison of two evaluation
+ * snapshots to show what changed.
+ *
+ * Uses local .judges-runs/ directory.
+ */
+import type { Finding } from "../types.js";
+interface RunSnapshot {
+    id: string;
+    label?: string;
+    timestamp: string;
+    findings: Finding[];
+    summary: {
+        total: number;
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+    };
+}
+interface RunComparison {
+    runA: string;
+    runB: string;
+    added: Finding[];
+    removed: Finding[];
+    unchanged: number;
+    severityDelta: Record<string, number>;
+    ruleChanges: Record<string, {
+        added: number;
+        removed: number;
+    }>;
+}
+export declare function saveRun(findings: Finding[], label?: string): RunSnapshot;
+export declare function listRuns(): RunSnapshot[];
+export declare function compareRuns(runAId: string, runBId: string): RunComparison;
+export declare function runCompareRuns(argv: string[]): void;
+export {};
+//# sourceMappingURL=compare-runs.d.ts.map

package/dist/commands/compare-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare-runs.d.ts","sourceRoot":"","sources":["../../src/commands/compare-runs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAI3C,UAAU,WAAW;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;CACH;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE;AAcD,wBAAgB,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,CAkBxE;AAED,wBAAgB,QAAQ,IAAI,WAAW,EAAE,CAMxC;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CA6CzE;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA6GnD"}

package/dist/commands/compare-runs.js

@@ -0,0 +1,229 @@
+/**
+ * Compare evaluation runs — side-by-side comparison of two evaluation
+ * snapshots to show what changed.
+ *
+ * Uses local .judges-runs/ directory.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync } from "fs";
+import { join } from "path";
+const RUNS_DIR = ".judges-runs";
+// ─── Core ───────────────────────────────────────────────────────────────────
+function ensureDir() {
+    if (!existsSync(RUNS_DIR))
+        mkdirSync(RUNS_DIR, { recursive: true });
+}
+function findingKey(f) {
+    return `${f.ruleId}:${f.title}:${(f.lineNumbers || []).join(",")}`;
+}
+export function saveRun(findings, label) {
+    ensureDir();
+    const id = `run-${Date.now()}`;
+    const snapshot = {
+        id,
+        label,
+        timestamp: new Date().toISOString(),
+        findings,
+        summary: {
+            total: findings.length,
+            critical: findings.filter((f) => f.severity === "critical").length,
+            high: findings.filter((f) => f.severity === "high").length,
+            medium: findings.filter((f) => f.severity === "medium").length,
+            low: findings.filter((f) => f.severity === "low").length,
+        },
+    };
+    writeFileSync(join(RUNS_DIR, `${id}.json`), JSON.stringify(snapshot, null, 2));
+    return snapshot;
+}
+export function listRuns() {
+    ensureDir();
+    const files = readdirSync(RUNS_DIR)
+        .filter((f) => f.endsWith(".json"))
+        .sort();
+    return files.map((f) => JSON.parse(readFileSync(join(RUNS_DIR, f), "utf-8")));
+}
+export function compareRuns(runAId, runBId) {
+    const runA = JSON.parse(readFileSync(join(RUNS_DIR, `${runAId}.json`), "utf-8"));
+    const runB = JSON.parse(readFileSync(join(RUNS_DIR, `${runBId}.json`), "utf-8"));
+    const keysA = new Set(runA.findings.map(findingKey));
+    const keysB = new Set(runB.findings.map(findingKey));
+    const findingsMapA = new Map(runA.findings.map((f) => [findingKey(f), f]));
+    const findingsMapB = new Map(runB.findings.map((f) => [findingKey(f), f]));
+    const added = [];
+    const removed = [];
+    let unchanged = 0;
+    for (const key of keysB) {
+        if (!keysA.has(key)) {
+            added.push(findingsMapB.get(key));
+        }
+        else {
+            unchanged++;
+        }
+    }
+    for (const key of keysA) {
+        if (!keysB.has(key)) {
+            removed.push(findingsMapA.get(key));
+        }
+    }
+    const severityDelta = {
+        critical: runB.summary.critical - runA.summary.critical,
+        high: runB.summary.high - runA.summary.high,
+        medium: runB.summary.medium - runA.summary.medium,
+        low: runB.summary.low - runA.summary.low,
+    };
+    // Rule-level changes
+    const ruleChanges = {};
+    for (const f of added) {
+        if (!ruleChanges[f.ruleId])
+            ruleChanges[f.ruleId] = { added: 0, removed: 0 };
+        ruleChanges[f.ruleId].added++;
+    }
+    for (const f of removed) {
+        if (!ruleChanges[f.ruleId])
+            ruleChanges[f.ruleId] = { added: 0, removed: 0 };
+        ruleChanges[f.ruleId].removed++;
+    }
+    return { runA: runAId, runB: runBId, added, removed, unchanged, severityDelta, ruleChanges };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runCompareRuns(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges compare-runs — Compare evaluation runs side by side
+
+Usage:
+  judges compare-runs --save                    Save current results as a run
+  judges compare-runs --save --label "baseline" Save with label
+  judges compare-runs --list                    List saved runs
+  judges compare-runs --compare <runA> <runB>   Compare two runs
+  judges compare-runs --latest                  Compare last two runs
+
+Options:
+  --save                 Save .judges-results.json as a run snapshot
+  --label <text>         Label for the snapshot
+  --list                 List all saved runs
+  --compare <A> <B>      Compare two run IDs
+  --latest               Compare the two most recent runs
+  --format json          JSON output
+  --help, -h             Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    // Save run
+    if (argv.includes("--save")) {
+        const resultsFile = ".judges-results.json";
+        if (!existsSync(resultsFile)) {
+            console.error("  ❌ No .judges-results.json found. Run an evaluation first.");
+            return;
+        }
+        const data = JSON.parse(readFileSync(resultsFile, "utf-8"));
+        const findings = Array.isArray(data) ? data : data.findings || [];
+        const label = argv.find((_a, i) => argv[i - 1] === "--label");
+        const run = saveRun(findings, label);
+        if (format === "json") {
+            console.log(JSON.stringify(run, null, 2));
+        }
+        else {
+            console.log(`  ✅ Run saved: ${run.id}${label ? ` (${label})` : ""} — ${run.summary.total} findings`);
+        }
+        return;
+    }
+    // List runs
+    if (argv.includes("--list")) {
+        const runs = listRuns();
+        if (runs.length === 0) {
+            console.log("\n  No runs saved. Use --save to capture a snapshot.\n");
+            return;
+        }
+        if (format === "json") {
+            console.log(JSON.stringify(runs.map((r) => ({ id: r.id, label: r.label, timestamp: r.timestamp, total: r.summary.total })), null, 2));
+        }
+        else {
+            console.log(`\n  Saved Runs (${runs.length})\n  ──────────────`);
+            for (const r of runs) {
+                const lbl = r.label ? ` (${r.label})` : "";
+                console.log(`    ${r.id}${lbl}  ${r.timestamp.split("T")[0]}  ${r.summary.total} findings`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // Compare latest
+    if (argv.includes("--latest")) {
+        const runs = listRuns();
+        if (runs.length < 2) {
+            console.error("  ❌ Need at least 2 saved runs. Use --save to capture more.");
+            return;
+        }
+        const comparison = compareRuns(runs[runs.length - 2].id, runs[runs.length - 1].id);
+        printComparison(comparison, format);
+        return;
+    }
+    // Compare specific runs
+    const compareIdx = argv.indexOf("--compare");
+    if (compareIdx >= 0 && argv[compareIdx + 1] && argv[compareIdx + 2]) {
+        const runAId = argv[compareIdx + 1];
+        const runBId = argv[compareIdx + 2];
+        try {
+            const comparison = compareRuns(runAId, runBId);
+            printComparison(comparison, format);
+        }
+        catch {
+            console.error(`  ❌ Could not load runs. Check IDs with --list.`);
+        }
+        return;
+    }
+    // Default: show latest
+    const runs = listRuns();
+    if (runs.length === 0) {
+        console.log("\n  No runs saved. Use --save to start tracking.\n");
+    }
+    else {
+        const latest = runs[runs.length - 1];
+        console.log(`\n  Latest Run: ${latest.id}${latest.label ? ` (${latest.label})` : ""}`);
+        console.log(`  Date: ${latest.timestamp}`);
+        console.log(`  Findings: ${latest.summary.total} (C:${latest.summary.critical} H:${latest.summary.high} M:${latest.summary.medium} L:${latest.summary.low})\n`);
+    }
+}
+function printComparison(comp, format) {
+    if (format === "json") {
+        console.log(JSON.stringify(comp, null, 2));
+        return;
+    }
+    console.log(`\n  Run Comparison: ${comp.runA} → ${comp.runB}`);
+    console.log(`  ────────────────────────────────────────`);
+    console.log(`  Unchanged: ${comp.unchanged}`);
+    console.log(`  Added:     ${comp.added.length}`);
+    console.log(`  Removed:   ${comp.removed.length}`);
+    console.log("");
+    console.log("  Severity Changes:");
+    for (const [sev, delta] of Object.entries(comp.severityDelta)) {
+        const sign = delta > 0 ? "+" : "";
+        const icon = delta > 0 ? "📈" : delta < 0 ? "📉" : "➡️";
+        console.log(`    ${sev.padEnd(10)} ${sign}${delta} ${icon}`);
+    }
+    if (comp.added.length > 0) {
+        console.log("\n  New Findings:");
+        for (const f of comp.added.slice(0, 10)) {
+            console.log(`    + [${f.severity.toUpperCase()}] ${f.ruleId} — ${f.title.slice(0, 50)}`);
+        }
+        if (comp.added.length > 10)
+            console.log(`    ... and ${comp.added.length - 10} more`);
+    }
+    if (comp.removed.length > 0) {
+        console.log("\n  Resolved Findings:");
+        for (const f of comp.removed.slice(0, 10)) {
+            console.log(`    - [${f.severity.toUpperCase()}] ${f.ruleId} — ${f.title.slice(0, 50)}`);
+        }
+        if (comp.removed.length > 10)
+            console.log(`    ... and ${comp.removed.length - 10} more`);
+    }
+    if (Object.keys(comp.ruleChanges).length > 0) {
+        console.log("\n  Rule Changes:");
+        for (const [rule, changes] of Object.entries(comp.ruleChanges)) {
+            console.log(`    ${rule.padEnd(15)} +${changes.added} / -${changes.removed}`);
+        }
+    }
+    console.log("");
+}
+//# sourceMappingURL=compare-runs.js.map

package/dist/commands/compare-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compare-runs.js","sourceRoot":"","sources":["../../src/commands/compare-runs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA6B5B,MAAM,QAAQ,GAAG,cAAc,CAAC;AAEhC,+EAA+E;AAE/E,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAAmB,EAAE,KAAc;IACzD,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAgB;QAC5B,EAAE;QACF,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ;QACR,OAAO,EAAE;YACP,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YAClE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;YAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC9D,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;SACzD;KACF,CAAC;IACF,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,SAAS,EAAE,CAAC;IACZ,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,IAAI,EAAE,CAAC;IACV,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,MAAc;IACxD,MAAM,IAAI,GAAgB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAgB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAE9F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3E,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,SAAS,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAA2B;QAC5C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ;QACvD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI;QAC3C,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;QACjD,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG;KACzC,CAAC;IAEF,qBAAqB;IACrB,MAAM,WAAW,GAAuD,EAAE,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7E,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7E,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AAC/F,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,WAAW;IACX,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,sBAAsB,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAc,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC,CAAC;QACvG,CAAC;QACD,OAAO;IACT,CAAC;IAED,YAAY;IACZ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAC/F,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,MAAM,qBAAqB,CAAC,CAAC;YACjE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,WAAW,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,iBAAiB;IACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,wBAAwB;IACxB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,UAAU,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/C,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;IACT,CAAC;IAED,uBAAuB;IACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CACT,eAAe,MAAM,CAAC,OAAO,CAAC,KAAK,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CACnJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAmB,EAAE,MAAc;IAC1D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,KAAK,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/config-drift.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Config drift detector — compare team configurations against an
+ * organizational baseline to detect policy divergence.
+ *
+ * Uses local .judgesrc files.
+ */
+interface DriftItem {
+    type: "disabled-rule" | "disabled-judge" | "severity-override" | "missing-preset" | "extra-rule";
+    key: string;
+    baselineValue?: string;
+    actualValue?: string;
+    impact: "high" | "medium" | "low";
+}
+interface ConfigDriftReport {
+    configFile: string;
+    baselineFile: string;
+    driftScore: number;
+    items: DriftItem[];
+    summary: string;
+}
+export declare function detectDrift(baselineFile: string, configFile: string): ConfigDriftReport;
+export declare function scanDirectory(baselineFile: string, dir: string): ConfigDriftReport[];
+export declare function runConfigDrift(argv: string[]): void;
+export {};
+//# sourceMappingURL=config-drift.d.ts.map

package/dist/commands/config-drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-drift.d.ts","sourceRoot":"","sources":["../../src/commands/config-drift.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,UAAU,SAAS;IACjB,IAAI,EAAE,eAAe,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,YAAY,CAAC;IACjG,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CACnC;AAED,UAAU,iBAAiB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAaD,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAuFvF;AAED,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAqBpF;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAgFnD"}