@kevinrabun/judges 3.44.0 → 3.46.0

package/dist/commands/query.js

@@ -0,0 +1,230 @@
+/**
+ * Advanced finding search/filter — complex queries across evaluation results.
+ *
+ * Reads local .judges-results.json files for searching.
+ */
+import { readFileSync, existsSync, writeFileSync } from "fs";
+const QUERY_FILE = ".judges-query.json";
+const RESULTS_FILE = ".judges-results.json";
+// ─── Core ───────────────────────────────────────────────────────────────────
+function loadResults() {
+    if (!existsSync(RESULTS_FILE))
+        return [];
+    try {
+        const data = JSON.parse(readFileSync(RESULTS_FILE, "utf-8"));
+        if (Array.isArray(data))
+            return data;
+        if (data.findings)
+            return data.findings;
+        return [];
+    }
+    catch {
+        return [];
+    }
+}
+function loadQueryDb() {
+    if (!existsSync(QUERY_FILE))
+        return { history: [], savedQueries: [] };
+    return JSON.parse(readFileSync(QUERY_FILE, "utf-8"));
+}
+function saveQueryDb(db) {
+    writeFileSync(QUERY_FILE, JSON.stringify(db, null, 2));
+}
+function matchesFilter(finding, key, value) {
+    const lowerVal = value.toLowerCase();
+    switch (key) {
+        case "severity":
+            return finding.severity.toLowerCase() === lowerVal;
+        case "rule":
+        case "ruleId":
+            return finding.ruleId.toLowerCase().includes(lowerVal);
+        case "title":
+            return finding.title.toLowerCase().includes(lowerVal);
+        case "description":
+        case "desc":
+            return finding.description.toLowerCase().includes(lowerVal);
+        case "confidence":
+            if (finding.confidence === undefined)
+                return false;
+            return finding.confidence >= parseFloat(value);
+        case "has-patch":
+            return !!finding.patch;
+        case "has-fix":
+            return !!finding.suggestedFix;
+        default:
+            // Generic text search across all string fields
+            return [finding.ruleId, finding.title, finding.description, finding.recommendation].some((f) => f.toLowerCase().includes(lowerVal));
+    }
+}
+export function queryFindings(queryStr, findings) {
+    const records = findings || loadResults();
+    // Parse query: "severity:critical rule:SEC text-search"
+    const parts = queryStr.split(/\s+/);
+    let matches = [...records];
+    const textParts = [];
+    for (const part of parts) {
+        const colonIdx = part.indexOf(":");
+        if (colonIdx > 0) {
+            const key = part.slice(0, colonIdx);
+            const val = part.slice(colonIdx + 1);
+            if (part.startsWith("-")) {
+                // Negation: -severity:low
+                const negKey = key.slice(1);
+                matches = matches.filter((f) => !matchesFilter(f, negKey, val));
+            }
+            else {
+                matches = matches.filter((f) => matchesFilter(f, key, val));
+            }
+        }
+        else {
+            textParts.push(part.toLowerCase());
+        }
+    }
+    if (textParts.length > 0) {
+        const textQuery = textParts.join(" ");
+        matches = matches.filter((f) => [f.ruleId, f.title, f.description, f.recommendation].some((s) => s.toLowerCase().includes(textQuery)));
+    }
+    return { matches, total: matches.length, query: queryStr };
+}
+export function aggregateFindings(findings, groupBy) {
+    const result = {};
+    for (const f of findings) {
+        let key;
+        switch (groupBy) {
+            case "severity":
+                key = f.severity;
+                break;
+            case "rule":
+            case "ruleId":
+                key = f.ruleId;
+                break;
+            case "confidence":
+                key = f.confidence !== undefined ? `${Math.floor(f.confidence * 10) * 10}%` : "unknown";
+                break;
+            default:
+                key = f.severity;
+        }
+        result[key] = (result[key] || 0) + 1;
+    }
+    return result;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runQuery(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges query — Advanced finding search and filter
+
+Usage:
+  judges query "severity:critical"
+  judges query "rule:SEC -severity:low"
+  judges query "injection" --aggregate severity
+  judges query --save "critical-sec" "severity:critical rule:SEC"
+  judges query --saved "critical-sec"
+  judges query --list-saved
+
+Filter keys:
+  severity:<level>     critical | high | medium | low
+  rule:<pattern>       Match ruleId (substring)
+  title:<text>         Match title
+  desc:<text>          Match description
+  confidence:<min>     Minimum confidence (e.g., 0.8)
+  has-patch:true       Only findings with patches
+  has-fix:true         Only findings with suggested fixes
+  -<key>:<value>       Negate a filter
+
+Options:
+  --aggregate <key>    Group by severity|rule|confidence
+  --limit <n>          Max results
+  --save <name>        Save query for reuse
+  --saved <name>       Run a saved query
+  --list-saved         List saved queries
+  --format json        JSON output
+  --help, -h           Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    // List saved queries
+    if (argv.includes("--list-saved")) {
+        const db = loadQueryDb();
+        if (db.savedQueries.length === 0) {
+            console.log("\n  No saved queries.\n");
+        }
+        else {
+            console.log(`\n  Saved Queries (${db.savedQueries.length})\n  ───────────────`);
+            for (const q of db.savedQueries) {
+                console.log(`    ${q.name.padEnd(20)} ${q.query}`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // Save a query
+    const saveName = argv.find((_a, i) => argv[i - 1] === "--save");
+    if (saveName) {
+        const queryStr = argv.filter((a) => !a.startsWith("--") && a !== saveName).join(" ");
+        const db = loadQueryDb();
+        db.savedQueries = db.savedQueries.filter((q) => q.name !== saveName);
+        db.savedQueries.push({ name: saveName, query: queryStr, createdAt: new Date().toISOString() });
+        saveQueryDb(db);
+        console.log(`  ✅ Saved query "${saveName}": ${queryStr}`);
+        return;
+    }
+    // Run saved query
+    const savedName = argv.find((_a, i) => argv[i - 1] === "--saved");
+    if (savedName) {
+        const db = loadQueryDb();
+        const saved = db.savedQueries.find((q) => q.name === savedName);
+        if (!saved) {
+            console.error(`  ❌ Saved query "${savedName}" not found`);
+            return;
+        }
+        const result = queryFindings(saved.query);
+        printResults(result, format, argv);
+        return;
+    }
+    // Execute query
+    const queryStr = argv.filter((a) => !a.startsWith("--")).join(" ");
+    if (!queryStr) {
+        console.error("  ❌ No query provided. Use --help for usage.");
+        return;
+    }
+    const result = queryFindings(queryStr);
+    printResults(result, format, argv);
+}
+function printResults(result, format, argv) {
+    const aggregateBy = argv.find((_a, i) => argv[i - 1] === "--aggregate");
+    const limitStr = argv.find((_a, i) => argv[i - 1] === "--limit");
+    const limit = limitStr ? parseInt(limitStr, 10) : undefined;
+    let { matches } = result;
+    if (limit)
+        matches = matches.slice(0, limit);
+    if (aggregateBy) {
+        const agg = aggregateFindings(matches, aggregateBy);
+        if (format === "json") {
+            console.log(JSON.stringify(agg, null, 2));
+        }
+        else {
+            console.log(`\n  Aggregate by ${aggregateBy} (${result.total} matches)\n  ──────────────────────`);
+            for (const [key, count] of Object.entries(agg).sort((a, b) => b[1] - a[1])) {
+                console.log(`    ${key.padEnd(20)} ${count}`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify({ ...result, matches }, null, 2));
+        return;
+    }
+    console.log(`\n  Query: "${result.query}" → ${result.total} match(es)\n  ─────────────────────────`);
+    if (matches.length === 0) {
+        console.log("    No findings matched.\n");
+        return;
+    }
+    for (const f of matches) {
+        console.log(`    [${f.severity.toUpperCase()}] ${f.ruleId.padEnd(12)} ${f.title.slice(0, 50)}`);
+    }
+    console.log("");
+}
+//# sourceMappingURL=query.js.map

package/dist/commands/query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.js","sourceRoot":"","sources":["../../src/commands/query.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AA2B7D,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACxC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAE5C,+EAA+E;AAE/E,SAAS,WAAW;IAClB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACtE,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,EAAW;IAC9B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,OAAsB,EAAE,GAAW,EAAE,KAAa;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACrC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;QACrD,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzD,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxD,KAAK,aAAa,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9D,KAAK,YAAY;YACf,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACnD,OAAO,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QACjD,KAAK,WAAW;YACd,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,KAAK,SAAS;YACZ,OAAO,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAChC;YACE,+CAA+C;YAC/C,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7F,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACnC,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,QAA0B;IACxE,MAAM,OAAO,GAAG,QAAQ,IAAI,WAAW,EAAE,CAAC;IAE1C,wDAAwD;IACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAE3B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,0BAA0B;gBAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC5B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7B,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACtG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAyB,EAAE,OAAe;IAC1E,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAW,CAAC;QAChB,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,UAAU;gBACb,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACjB,MAAM;YACR,KAAK,MAAM,CAAC;YACZ,KAAK,QAAQ;gBACX,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;gBACf,MAAM;YACR,KAAK,YAAY;gBACf,GAAG,GAAG,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxF,MAAM;YACR;gBACE,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,QAAQ,CAAC,IAAc;IACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6Bf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,YAAY,CAAC,MAAM,sBAAsB,CAAC,CAAC;YAChF,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,eAAe;IACf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAChF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrF,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,EAAE,CAAC,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QACrE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/F,WAAW,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,MAAM,QAAQ,EAAE,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAClF,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,oBAAoB,SAAS,aAAa,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IAED,gBAAgB;IAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB,EAAE,MAAc,EAAE,IAAc;IACvE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5D,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACzB,IAAI,KAAK;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAE7C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,KAAK,MAAM,CAAC,KAAK,qCAAqC,CAAC,CAAC;YACnG,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,KAAK,yCAAyC,CAAC,CAAC;IACrG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/reg-watch.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Regulatory change monitor — track security standards versions
+ * and map coverage changes to the current rule set.
+ *
+ * Uses local versioned data files in .judges-reg-watch.json.
+ */
+interface StandardVersion {
+    standard: string;
+    version: string;
+    lastChecked: string;
+    items: {
+        id: string;
+        title: string;
+        covered: boolean;
+        coveredBy?: string;
+    }[];
+}
+export declare function updateWatch(standards: string[]): StandardVersion[];
+export declare function runRegWatch(argv: string[]): void;
+export {};
+//# sourceMappingURL=reg-watch.d.ts.map

package/dist/commands/reg-watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reg-watch.d.ts","sourceRoot":"","sources":["../../src/commands/reg-watch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC9E;AA4HD,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAgBlE;AAID,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAuGhD"}

package/dist/commands/reg-watch.js

@@ -0,0 +1,220 @@
+/**
+ * Regulatory change monitor — track security standards versions
+ * and map coverage changes to the current rule set.
+ *
+ * Uses local versioned data files in .judges-reg-watch.json.
+ */
+import { readFileSync, writeFileSync, existsSync } from "fs";
+const REG_FILE = ".judges-reg-watch.json";
+// ─── Built-in standards ─────────────────────────────────────────────────────
+const STANDARDS = {
+    "owasp-top10": {
+        version: "2021",
+        items: [
+            { id: "A01", title: "Broken Access Control", rulePrefix: "AUTH" },
+            { id: "A02", title: "Cryptographic Failures", rulePrefix: "CRYPTO" },
+            { id: "A03", title: "Injection", rulePrefix: "INJECT" },
+            { id: "A04", title: "Insecure Design", rulePrefix: "SEC" },
+            { id: "A05", title: "Security Misconfiguration", rulePrefix: "SEC" },
+            { id: "A06", title: "Vulnerable Components", rulePrefix: "DEP" },
+            { id: "A07", title: "Authentication Failures", rulePrefix: "AUTH" },
+            { id: "A08", title: "Software Integrity Failures", rulePrefix: "SEC" },
+            { id: "A09", title: "Logging & Monitoring Failures", rulePrefix: "ERR" },
+            { id: "A10", title: "Server-Side Request Forgery", rulePrefix: "SSRF" },
+        ],
+    },
+    "cwe-top25": {
+        version: "2024",
+        items: [
+            { id: "CWE-787", title: "Out-of-bounds Write", rulePrefix: "MEM" },
+            { id: "CWE-79", title: "Cross-site Scripting (XSS)", rulePrefix: "INJECT" },
+            { id: "CWE-89", title: "SQL Injection", rulePrefix: "INJECT" },
+            { id: "CWE-416", title: "Use After Free", rulePrefix: "MEM" },
+            { id: "CWE-78", title: "OS Command Injection", rulePrefix: "INJECT" },
+            { id: "CWE-20", title: "Improper Input Validation", rulePrefix: "SEC" },
+            { id: "CWE-125", title: "Out-of-bounds Read", rulePrefix: "MEM" },
+            { id: "CWE-22", title: "Path Traversal", rulePrefix: "SEC" },
+            { id: "CWE-352", title: "Cross-Site Request Forgery", rulePrefix: "SEC" },
+            { id: "CWE-434", title: "Unrestricted Upload", rulePrefix: "SEC" },
+            { id: "CWE-862", title: "Missing Authorization", rulePrefix: "AUTH" },
+            { id: "CWE-476", title: "NULL Pointer Dereference", rulePrefix: "ERR" },
+            { id: "CWE-287", title: "Improper Authentication", rulePrefix: "AUTH" },
+            { id: "CWE-190", title: "Integer Overflow", rulePrefix: "SEC" },
+            { id: "CWE-502", title: "Deserialization of Untrusted Data", rulePrefix: "SEC" },
+            { id: "CWE-77", title: "Command Injection", rulePrefix: "INJECT" },
+            { id: "CWE-119", title: "Buffer Overflow", rulePrefix: "MEM" },
+            { id: "CWE-798", title: "Hardcoded Credentials", rulePrefix: "AUTH" },
+            { id: "CWE-918", title: "Server-Side Request Forgery", rulePrefix: "SSRF" },
+            { id: "CWE-306", title: "Missing Authentication", rulePrefix: "AUTH" },
+            { id: "CWE-362", title: "Race Condition", rulePrefix: "CONCUR" },
+            { id: "CWE-269", title: "Improper Privilege Management", rulePrefix: "AUTH" },
+            { id: "CWE-94", title: "Code Injection", rulePrefix: "INJECT" },
+            { id: "CWE-863", title: "Incorrect Authorization", rulePrefix: "AUTH" },
+            { id: "CWE-276", title: "Incorrect Default Permissions", rulePrefix: "SEC" },
+        ],
+    },
+    "nist-ssdf": {
+        version: "1.1",
+        items: [
+            { id: "PO.1", title: "Define Security Requirements", rulePrefix: "SEC" },
+            { id: "PS.1", title: "Protect Software", rulePrefix: "SEC" },
+            { id: "PS.2", title: "Protect Development Environment", rulePrefix: "SEC" },
+            { id: "PW.1", title: "Design for Security", rulePrefix: "SEC" },
+            { id: "PW.5", title: "Create Source Code with Security Practices", rulePrefix: "SEC" },
+            { id: "PW.6", title: "Configure the Build to Find Issues", rulePrefix: "SEC" },
+            { id: "PW.7", title: "Review and Audit Software", rulePrefix: "SEC" },
+            { id: "PW.8", title: "Test Executable Code", rulePrefix: "SEC" },
+            { id: "RV.1", title: "Identify and Confirm Vulnerabilities", rulePrefix: "SEC" },
+            { id: "RV.2", title: "Assess, Prioritize, and Remediate", rulePrefix: "SEC" },
+        ],
+    },
+};
+// ─── Core ───────────────────────────────────────────────────────────────────
+function loadDb() {
+    if (!existsSync(REG_FILE))
+        return { standards: [], lastUpdated: "" };
+    return JSON.parse(readFileSync(REG_FILE, "utf-8"));
+}
+function saveDb(db) {
+    writeFileSync(REG_FILE, JSON.stringify(db, null, 2));
+}
+function checkCoverage(standard) {
+    const std = STANDARDS[standard];
+    if (!std)
+        return null;
+    // Check which rules are covered via config
+    let config = {};
+    if (existsSync(".judgesrc")) {
+        try {
+            config = JSON.parse(readFileSync(".judgesrc", "utf-8"));
+        }
+        catch {
+            /* empty */
+        }
+    }
+    const disabledRules = new Set(config.disabledRules || []);
+    const _disabledJudges = new Set(config.disabledJudges || []);
+    const items = std.items.map((item) => {
+        // Check if the rule prefix is disabled
+        const isDisabled = [...disabledRules].some((r) => r.startsWith(item.rulePrefix));
+        const judgeMapped = !["MEM", "CONCUR", "SSRF", "DEP"].includes(item.rulePrefix);
+        const covered = judgeMapped && !isDisabled;
+        return {
+            id: item.id,
+            title: item.title,
+            covered,
+            coveredBy: covered ? `${item.rulePrefix}*` : undefined,
+        };
+    });
+    return {
+        standard,
+        version: std.version,
+        lastChecked: new Date().toISOString(),
+        items,
+    };
+}
+export function updateWatch(standards) {
+    const db = loadDb();
+    const results = [];
+    for (const std of standards) {
+        const result = checkCoverage(std);
+        if (result) {
+            db.standards = db.standards.filter((s) => s.standard !== std);
+            db.standards.push(result);
+            results.push(result);
+        }
+    }
+    db.lastUpdated = new Date().toISOString();
+    saveDb(db);
+    return results;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runRegWatch(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges reg-watch — Regulatory change monitoring
+
+Usage:
+  judges reg-watch --standards owasp-top10,cwe-top25
+  judges reg-watch --check owasp-top10
+  judges reg-watch --list
+  judges reg-watch --status
+
+Options:
+  --standards <csv>    Check coverage for standards (comma-separated)
+  --check <name>       Check single standard coverage
+  --list               List available standards
+  --status             Show last check status
+  --format json        JSON output
+  --help, -h           Show this help
+
+Available standards:
+  owasp-top10   OWASP Top 10 (2021)
+  cwe-top25     CWE Top 25 (2024)
+  nist-ssdf     NIST SSDF v1.1
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    // List standards
+    if (argv.includes("--list")) {
+        if (format === "json") {
+            console.log(JSON.stringify(Object.entries(STANDARDS).map(([k, v]) => ({ name: k, version: v.version, items: v.items.length })), null, 2));
+        }
+        else {
+            console.log("\n  Available Standards\n  ───────────────────");
+            for (const [name, std] of Object.entries(STANDARDS)) {
+                console.log(`    ${name.padEnd(15)} v${std.version} (${std.items.length} items)`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // Check standards
+    const standardsStr = argv.find((_a, i) => argv[i - 1] === "--standards");
+    const singleCheck = argv.find((_a, i) => argv[i - 1] === "--check");
+    const toCheck = standardsStr ? standardsStr.split(",") : singleCheck ? [singleCheck] : [];
+    if (toCheck.length > 0) {
+        const results = updateWatch(toCheck);
+        for (const result of results) {
+            const covered = result.items.filter((i) => i.covered).length;
+            const total = result.items.length;
+            const pct = Math.round((covered / total) * 100);
+            if (format === "json") {
+                console.log(JSON.stringify(result, null, 2));
+            }
+            else {
+                console.log(`\n  ${result.standard} v${result.version} — Coverage: ${pct}% (${covered}/${total})\n  ──────────────────────────────────────`);
+                for (const item of result.items) {
+                    const icon = item.covered ? "✅" : "❌";
+                    console.log(`    ${icon} ${item.id.padEnd(10)} ${item.title.padEnd(40)} ${item.coveredBy || "NOT COVERED"}`);
+                }
+                console.log("");
+            }
+        }
+        return;
+    }
+    // Status
+    if (argv.includes("--status")) {
+        const db = loadDb();
+        if (db.standards.length === 0) {
+            console.log("\n  No standards monitored. Use --standards to start.\n");
+            return;
+        }
+        if (format === "json") {
+            console.log(JSON.stringify(db, null, 2));
+        }
+        else {
+            console.log(`\n  Regulatory Watch Status\n  ───────────────────────`);
+            console.log(`  Last updated: ${db.lastUpdated}`);
+            for (const s of db.standards) {
+                const covered = s.items.filter((i) => i.covered).length;
+                console.log(`    ${s.standard.padEnd(15)} v${s.version} — ${covered}/${s.items.length} covered (${s.lastChecked.split("T")[0]})`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    console.log("  Use --standards or --check to monitor. --help for usage.");
+}
+//# sourceMappingURL=reg-watch.js.map

package/dist/commands/reg-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reg-watch.js","sourceRoot":"","sources":["../../src/commands/reg-watch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAgB7D,MAAM,QAAQ,GAAG,wBAAwB,CAAC;AAE1C,+EAA+E;AAE/E,MAAM,SAAS,GAAoG;IACjH,aAAa,EAAE;QACb,OAAO,EAAE,MAAM;QACf,KAAK,EAAE;YACL,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,EAAE;YACjE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,UAAU,EAAE,QAAQ,EAAE;YACpE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE;YACvD,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE;YAC1D,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,UAAU,EAAE,KAAK,EAAE;YACpE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,KAAK,EAAE;YAChE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,EAAE;YACnE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,UAAU,EAAE,KAAK,EAAE;YACtE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,UAAU,EAAE,KAAK,EAAE;YACxE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,UAAU,EAAE,MAAM,EAAE;SACxE;KACF;IACD,WAAW,EAAE;QACX,OAAO,EAAE,MAAM;QACf,KAAK,EAAE;YACL,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,KAAK,EAAE;YAClE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,QAAQ,EAAE;YAC3E,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE;YAC9D,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE;YAC7D,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,QAAQ,EAAE;YACrE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,2BAA2B,EAAE,UAAU,EAAE,KAAK,EAAE;YACvE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE;YACjE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE;YAC5D,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,KAAK,EAAE;YACzE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,KAAK,EAAE;YAClE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,EAAE;YACrE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,0BAA0B,EAAE,UAAU,EAAE,KAAK,EAAE;YACvE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,EAAE;YACvE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE;YAC/D,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,mCAAmC,EAAE,UAAU,EAAE,KAAK,EAAE;YAChF,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,QAAQ,EAAE;YAClE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE;YAC9D,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,EAAE;YACrE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,6BAA6B,EAAE,UAAU,EAAE,MAAM,EAAE;YAC3E,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,EAAE;YACtE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE;YAChE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,+BAA+B,EAAE,UAAU,EAAE,MAAM,EAAE;YAC7E,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE;YAC/D,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,EAAE;YACvE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,+BAA+B,EAAE,UAAU,EAAE,KAAK,EAAE;SAC7E;KACF;IACD,WAAW,EAAE;QACX,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,8BAA8B,EAAE,UAAU,EAAE,KAAK,EAAE;YACxE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE;YAC5D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iCAAiC,EAAE,UAAU,EAAE,KAAK,EAAE;YAC3E,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,KAAK,EAAE;YAC/D,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,4CAA4C,EAAE,UAAU,EAAE,KAAK,EAAE;YACtF,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,oCAAoC,EAAE,UAAU,EAAE,KAAK,EAAE;YAC9E,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,2BAA2B,EAAE,UAAU,EAAE,KAAK,EAAE;YACrE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,KAAK,EAAE;YAChE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,sCAAsC,EAAE,UAAU,EAAE,KAAK,EAAE;YAChF,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,mCAAmC,EAAE,UAAU,EAAE,KAAK,EAAE;SAC9E;KACF;CACF,CAAC;AAEF,+EAA+E;AAE/E,SAAS,MAAM;IACb,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACrE,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,MAAM,CAAC,EAAc;IAC5B,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,2CAA2C;IAC3C,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAE,MAAM,CAAC,aAA0B,IAAI,EAAE,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAE,MAAM,CAAC,cAA2B,IAAI,EAAE,CAAC,CAAC;IAE3E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,uCAAuC;QACvC,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,WAAW,IAAI,CAAC,UAAU,CAAC;QAE3C,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,SAAS;SACvD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAmB;IAC7C,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC;YAC9D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,EAAE,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,WAAW,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;CAqBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,iBAAiB;IACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EACnG,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YAC9D,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAEpF,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;YAEhD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CACT,OAAO,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,gBAAgB,GAAG,MAAM,OAAO,IAAI,KAAK,6CAA6C,CAChI,CAAC;gBACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACtC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,aAAa,EAAE,CAAC,CAAC;gBAC/G,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,SAAS;IACT,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QACpB,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACjD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;gBACxD,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,MAAM,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CACrH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;AAC5E,CAAC"}

package/dist/commands/retro.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Security incident retrospective — analyze whether Judges would have
+ * caught a specific vulnerability by running evaluation against
+ * historical code state.
+ *
+ * Uses local git history and evaluation results.
+ */
+import type { Finding } from "../types.js";
+interface RetroResult {
+    file: string;
+    commit?: string;
+    cve?: string;
+    wouldCatch: boolean;
+    matchingFindings: Finding[];
+    configWouldSuppress: boolean;
+    suppressedBy?: string[];
+    recommendedConfig?: Record<string, unknown>;
+    analysis: string;
+}
+export declare function runRetroAnalysis(file: string, commit?: string, cve?: string): RetroResult;
+export declare function runRetro(argv: string[]): void;
+export {};
+//# sourceMappingURL=retro.d.ts.map

package/dist/commands/retro.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retro.d.ts","sourceRoot":"","sources":["../../src/commands/retro.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAI3C,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,EAAE,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAkDD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,WAAW,CAiGzF;AAID,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAgF7C"}