@kevinrabun/judges 3.45.0 → 3.47.0

package/dist/commands/ai-prompt-audit.js

@@ -0,0 +1,255 @@
+/**
+ * AI prompt audit — scans AI-generated code for prompt injection
+ * risks: user input echoed into SQL, shell, config, etc.
+ *
+ * Pattern-based analysis only — no data stored externally.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { join } from "path";
+const AUDIT_DIR = ".judges-prompt-audit";
+const AUDIT_FILE = join(AUDIT_DIR, "audit-history.json");
+const RISK_PATTERNS = [
+    {
+        id: "sql-template-literal",
+        regex: /`[^`]*\$\{[^}]*(?:user|input|param|query|req\.|request|body|args)[^}]*\}[^`]*(?:SELECT|INSERT|UPDATE|DELETE|FROM|WHERE)/i,
+        severity: "critical",
+        description: "Template literal with user input in SQL context",
+        recommendation: "Use parameterized queries ($1, $2) instead of string interpolation",
+    },
+    {
+        id: "sql-concat",
+        regex: /(?:query|sql|execute|prepare)\s*\([^)]*(?:\+|\bconcat)\s*[^)]*(?:user|input|param|req\.|request|body)/i,
+        severity: "critical",
+        description: "String concatenation with user input in SQL query",
+        recommendation: "Use parameterized queries with placeholder values",
+    },
+    {
+        id: "shell-injection",
+        regex: /(?:exec|spawn|execSync|execFile|system|popen)\s*\([^)]*(?:\$\{|[\s+].*(?:user|input|param|req\.|args))/i,
+        severity: "critical",
+        description: "User input in shell command execution",
+        recommendation: "Use execFile with argument array, or validate against an allowlist",
+    },
+    {
+        id: "eval-user-input",
+        regex: /(?:eval|Function|setTimeout|setInterval)\s*\([^)]*(?:user|input|param|req\.|request|body|query)/i,
+        severity: "critical",
+        description: "User input passed to eval or dynamic code execution",
+        recommendation: "Never use eval with user input; use safe parsers instead",
+    },
+    {
+        id: "innerHTML-assignment",
+        regex: /\.innerHTML\s*=\s*(?!['"`](?:''|""|``)).*(?:user|input|param|data|response|result)/i,
+        severity: "high",
+        description: "Dynamic content assigned to innerHTML without sanitization",
+        recommendation: "Use textContent for text or a sanitization library (DOMPurify) for HTML",
+    },
+    {
+        id: "hardcoded-secret",
+        regex: /(?:password|secret|api_key|apiKey|token|auth)\s*[:=]\s*['"][^'"]{8,}['"]/i,
+        severity: "high",
+        description: "Hardcoded credential or secret in source code",
+        recommendation: "Use environment variables or a secrets manager",
+    },
+    {
+        id: "url-user-input",
+        regex: /(?:fetch|axios|http\.get|request|got)\s*\([^)]*(?:\$\{|[\s+].*(?:user|input|param|req\.|url|host))/i,
+        severity: "high",
+        description: "User-controlled URL in HTTP request (SSRF risk)",
+        recommendation: "Validate URLs against an allowlist and block private IP ranges",
+    },
+    {
+        id: "path-traversal",
+        regex: /(?:readFile|readFileSync|createReadStream|writeFile|writeFileSync|unlink|rmdir)\s*\([^)]*(?:\$\{|[\s+].*(?:user|input|param|req\.|path|file|name))/i,
+        severity: "high",
+        description: "User input in file system operation (path traversal risk)",
+        recommendation: "Sanitize paths with path.resolve and validate within allowed directory",
+    },
+    {
+        id: "prompt-echo",
+        regex: /(?:\/\/|#)\s*(?:TODO|FIXME|HACK|generated|copilot|cursor|claude|gpt|ai)[:\s].*(?:user|implement|replace|change)/i,
+        severity: "medium",
+        description: "AI prompt remnant in code comment — may expose intent or instructions",
+        recommendation: "Remove AI generation comments and prompt artifacts before committing",
+    },
+    {
+        id: "cors-wildcard",
+        regex: /(?:Access-Control-Allow-Origin|cors|origin)\s*[:=]\s*['"`]\*['"`]/i,
+        severity: "medium",
+        description: "Wildcard CORS allows any origin to access the API",
+        recommendation: "Restrict CORS to specific trusted origins",
+    },
+];
+// ─── Core ───────────────────────────────────────────────────────────────────
+function ensureDir() {
+    if (!existsSync(AUDIT_DIR))
+        mkdirSync(AUDIT_DIR, { recursive: true });
+}
+function loadStore() {
+    if (!existsSync(AUDIT_FILE))
+        return { results: [], updatedAt: new Date().toISOString() };
+    try {
+        return JSON.parse(readFileSync(AUDIT_FILE, "utf-8"));
+    }
+    catch {
+        return { results: [], updatedAt: new Date().toISOString() };
+    }
+}
+function saveStore(store) {
+    ensureDir();
+    store.updatedAt = new Date().toISOString();
+    writeFileSync(AUDIT_FILE, JSON.stringify(store, null, 2));
+}
+export function auditFile(filePath) {
+    const content = readFileSync(filePath, "utf-8");
+    const lines = content.split("\n");
+    const risks = [];
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        for (const pattern of RISK_PATTERNS) {
+            if (pattern.regex.test(line)) {
+                risks.push({
+                    line: i + 1,
+                    pattern: pattern.id,
+                    severity: pattern.severity,
+                    description: pattern.description,
+                    recommendation: pattern.recommendation,
+                });
+            }
+        }
+    }
+    // Risk score: critical=30, high=15, medium=5
+    const riskScore = risks.reduce((sum, r) => {
+        if (r.severity === "critical")
+            return sum + 30;
+        if (r.severity === "high")
+            return sum + 15;
+        return sum + 5;
+    }, 0);
+    const result = {
+        file: filePath,
+        risks,
+        riskScore: Math.min(100, riskScore),
+        timestamp: new Date().toISOString(),
+    };
+    // Persist
+    const store = loadStore();
+    store.results.push(result);
+    if (store.results.length > 200)
+        store.results = store.results.slice(-200);
+    saveStore(store);
+    return result;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runAiPromptAudit(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges ai-prompt-audit — Scan for prompt injection risks in AI-generated code
+
+Usage:
+  judges ai-prompt-audit --file src/app.ts
+  judges ai-prompt-audit --patterns
+  judges ai-prompt-audit --history
+  judges ai-prompt-audit --summary
+
+Options:
+  --file <path>           Scan a file for prompt injection risks
+  --patterns              Show all detection patterns
+  --history               Show audit history
+  --summary               Show risk summary across all audits
+  --format json           JSON output
+  --help, -h              Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    // Patterns
+    if (argv.includes("--patterns")) {
+        const patterns = RISK_PATTERNS.map(({ id, severity, description, recommendation }) => ({
+            id,
+            severity,
+            description,
+            recommendation,
+        }));
+        if (format === "json") {
+            console.log(JSON.stringify(patterns, null, 2));
+        }
+        else {
+            console.log(`\n  Prompt Audit Patterns (${patterns.length})\n  ──────────────────────────`);
+            for (const p of patterns) {
+                console.log(`    [${p.severity.padEnd(8)}] ${p.id.padEnd(25)} ${p.description}`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // History
+    if (argv.includes("--history")) {
+        const store = loadStore();
+        if (format === "json") {
+            console.log(JSON.stringify(store, null, 2));
+        }
+        else {
+            console.log(`\n  Audit History (${store.results.length} scans)\n  ──────────────────────────`);
+            for (const r of store.results.slice(-15)) {
+                const icon = r.riskScore === 0 ? "✅" : r.riskScore >= 50 ? "🔴" : "⚠️";
+                console.log(`    ${icon} ${r.timestamp.slice(0, 16)}  risk:${r.riskScore.toString().padEnd(4)} ${r.risks.length} issues  ${r.file}`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // Summary
+    if (argv.includes("--summary")) {
+        const store = loadStore();
+        const totalRisks = store.results.reduce((s, r) => s + r.risks.length, 0);
+        const critCount = store.results.reduce((s, r) => s + r.risks.filter((x) => x.severity === "critical").length, 0);
+        const highCount = store.results.reduce((s, r) => s + r.risks.filter((x) => x.severity === "high").length, 0);
+        const avgScore = store.results.length > 0
+            ? Math.round(store.results.reduce((s, r) => s + r.riskScore, 0) / store.results.length)
+            : 0;
+        if (format === "json") {
+            console.log(JSON.stringify({ totalScans: store.results.length, totalRisks, critCount, highCount, avgScore }, null, 2));
+        }
+        else {
+            console.log(`\n  Prompt Audit Summary\n  ──────────────────────────`);
+            console.log(`  Scans:    ${store.results.length}`);
+            console.log(`  Risks:    ${totalRisks} (${critCount} critical, ${highCount} high)`);
+            console.log(`  Avg risk: ${avgScore}/100`);
+            console.log("");
+        }
+        return;
+    }
+    // Scan file
+    const filePath = argv.find((_a, i) => argv[i - 1] === "--file");
+    if (!filePath) {
+        console.error("  Use --file <path>, --patterns, --history, or --summary. --help for usage.");
+        return;
+    }
+    if (!existsSync(filePath)) {
+        console.error(`  File not found: ${filePath}`);
+        return;
+    }
+    const result = auditFile(filePath);
+    if (format === "json") {
+        console.log(JSON.stringify(result, null, 2));
+    }
+    else {
+        const icon = result.riskScore === 0 ? "✅" : result.riskScore >= 50 ? "🔴" : "⚠️";
+        console.log(`\n  ${icon} Prompt Audit — ${filePath}`);
+        console.log(`  Risk score: ${result.riskScore}/100 | Issues: ${result.risks.length}`);
+        console.log(`  ──────────────────────────`);
+        if (result.risks.length === 0) {
+            console.log("    No prompt injection risks detected.");
+        }
+        else {
+            for (const r of result.risks) {
+                console.log(`    L${r.line.toString().padEnd(5)} [${r.severity.padEnd(8)}] ${r.pattern}`);
+                console.log(`           ${r.description}`);
+                console.log(`           Fix: ${r.recommendation}`);
+            }
+        }
+        console.log("");
+    }
+}
+//# sourceMappingURL=ai-prompt-audit.js.map

package/dist/commands/ai-prompt-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-prompt-audit.js","sourceRoot":"","sources":["../../src/commands/ai-prompt-audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAwB5B,MAAM,SAAS,GAAG,sBAAsB,CAAC;AACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAYzD,MAAM,aAAa,GAAkB;IACnC;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EACH,0HAA0H;QAC5H,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,iDAAiD;QAC9D,cAAc,EAAE,oEAAoE;KACrF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,wGAAwG;QAC/G,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,mDAAmD;QAChE,cAAc,EAAE,mDAAmD;KACpE;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,yGAAyG;QAChH,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,uCAAuC;QACpD,cAAc,EAAE,oEAAoE;KACrF;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,kGAAkG;QACzG,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,qDAAqD;QAClE,cAAc,EAAE,0DAA0D;KAC3E;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,KAAK,EAAE,qFAAqF;QAC5F,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,4DAA4D;QACzE,cAAc,EAAE,yEAAyE;KAC1F;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,2EAA2E;QAClF,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,+CAA+C;QAC5D,cAAc,EAAE,gDAAgD;KACjE;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,qGAAqG;QAC5G,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,iDAAiD;QAC9D,cAAc,EAAE,gEAAgE;KACjF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EACH,qJAAqJ;QACvJ,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,2DAA2D;QACxE,cAAc,EAAE,wEAAwE;KACzF;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EACH,kHAAkH;QACpH,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,uEAAuE;QACpF,cAAc,EAAE,sEAAsE;KACvF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,oEAAoE;QAC3E,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,mDAAmD;QAChE,cAAc,EAAE,2CAA2C;KAC5D;CACF,CAAC;AAEF,+EAA+E;AAE/E,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACzF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,SAAS,EAAE,CAAC;IACZ,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,OAAO,EAAE,OAAO,CAAC,EAAE;oBACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACxC,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU;YAAE,OAAO,GAAG,GAAG,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,GAAG,GAAG,EAAE,CAAC;QAC3C,OAAO,GAAG,GAAG,CAAC,CAAC;IACjB,CAAC,EAAE,CAAC,CAAC,CAAC;IAEN,MAAM,MAAM,GAAgB;QAC1B,IAAI,EAAE,QAAQ;QACd,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,UAAU;IACV,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1E,SAAS,CAAC,KAAK,CAAC,CAAC;IAEjB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,WAAW;IACX,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;YACrF,EAAE;YACF,QAAQ;YACR,WAAW;YACX,cAAc;SACf,CAAC,CAAC,CAAC;QACJ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,QAAQ,CAAC,MAAM,iCAAiC,CAAC,CAAC;YAC5F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,UAAU;IACV,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,OAAO,CAAC,MAAM,uCAAuC,CAAC,CAAC;YAC/F,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBACvE,OAAO,CAAC,GAAG,CACT,OAAO,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC,IAAI,EAAE,CACxH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,UAAU;IACV,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjH,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7G,MAAM,QAAQ,GACZ,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACvF,CAAC,CAAC,CAAC,CAAC;QACR,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC1G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,KAAK,SAAS,cAAc,SAAS,QAAQ,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,MAAM,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,YAAY;IACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAChF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,SAAS,kBAAkB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1F,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC3C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/audit-bundle.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Audit evidence bundle — assemble a complete, auditor-ready evidence
+ * package from local scan history, suppressions, votes, SLA data, and config.
+ *
+ * Outputs a structured directory or JSON manifest.
+ */
+interface AuditArtifact {
+    type: string;
+    source: string;
+    description: string;
+    controlMapping?: string[];
+    present: boolean;
+}
+interface AuditBundle {
+    standard: string;
+    generatedAt: string;
+    period: string;
+    artifacts: AuditArtifact[];
+    summary: {
+        present: number;
+        missing: number;
+        coveragePercent: number;
+    };
+}
+export declare function generateBundle(standard: string, periodDays: number): AuditBundle;
+export declare function exportBundle(bundle: AuditBundle, outputDir: string): void;
+export declare function runAuditBundle(argv: string[]): void;
+export {};
+//# sourceMappingURL=audit-bundle.d.ts.map

package/dist/commands/audit-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-bundle.d.ts","sourceRoot":"","sources":["../../src/commands/audit-bundle.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,UAAU,WAAW;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AA4FD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,WAAW,CAyChF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CA4CzE;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA+DnD"}

package/dist/commands/audit-bundle.js

@@ -0,0 +1,235 @@
+/**
+ * Audit evidence bundle — assemble a complete, auditor-ready evidence
+ * package from local scan history, suppressions, votes, SLA data, and config.
+ *
+ * Outputs a structured directory or JSON manifest.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync } from "fs";
+import { join } from "path";
+const EVIDENCE_SOURCES = [
+    {
+        file: ".judgesrc",
+        type: "config",
+        description: "Security policy configuration",
+        controls: ["SOC2-CC6.1", "ISO27001-A.8.28"],
+    },
+    {
+        file: ".judges-results.json",
+        type: "scan-results",
+        description: "Latest evaluation findings",
+        controls: ["SOC2-CC7.1", "ISO27001-A.8.8"],
+    },
+    { file: ".judges-baseline.json", type: "baseline", description: "Accepted risk baseline", controls: ["SOC2-CC3.2"] },
+    {
+        file: ".judges-suppressions.json",
+        type: "suppressions",
+        description: "Suppressed finding audit trail",
+        controls: ["SOC2-CC3.3", "ISO27001-A.8.28"],
+    },
+    {
+        file: ".judges-votes.json",
+        type: "review-decisions",
+        description: "Team consensus on findings",
+        controls: ["SOC2-CC4.1"],
+    },
+    {
+        file: ".judges-sla.json",
+        type: "sla-policy",
+        description: "SLA policies and violation tracking",
+        controls: ["SOC2-CC7.2", "ISO27001-A.8.8"],
+    },
+    {
+        file: ".judges-burndown.json",
+        type: "resolution-tracking",
+        description: "Finding resolution timeline",
+        controls: ["SOC2-CC7.3"],
+    },
+    {
+        file: ".judges-kb.json",
+        type: "knowledge-base",
+        description: "Team rule decisions and exceptions",
+        controls: ["SOC2-CC3.2", "ISO27001-A.5.1"],
+    },
+    {
+        file: ".judges-owners.json",
+        type: "ownership",
+        description: "Rule-to-owner accountability mapping",
+        controls: ["SOC2-CC1.3"],
+    },
+    {
+        file: ".judges-reputation.json",
+        type: "tool-effectiveness",
+        description: "Judge accuracy and FP tracking",
+        controls: ["SOC2-CC4.2"],
+    },
+    {
+        file: ".judges-audit.json",
+        type: "policy-snapshots",
+        description: "Policy audit trail with SHA-256 hashes",
+        controls: ["SOC2-CC8.1", "ISO27001-A.8.25"],
+    },
+    {
+        file: ".judges-review-queue.json",
+        type: "manual-review",
+        description: "Manual review queue decisions",
+        controls: ["SOC2-CC4.1"],
+    },
+    {
+        file: ".judges-correlations.json",
+        type: "root-cause",
+        description: "Root cause analysis records",
+        controls: ["SOC2-CC7.4"],
+    },
+    {
+        file: ".judges-digest.json",
+        type: "trend-data",
+        description: "Historical trend snapshots",
+        controls: ["SOC2-CC4.2", "ISO27001-A.8.16"],
+    },
+    {
+        file: ".judges-false-negatives.json",
+        type: "fn-tracking",
+        description: "False negative tracking",
+        controls: ["SOC2-CC7.1"],
+    },
+];
+// ─── Core ───────────────────────────────────────────────────────────────────
+export function generateBundle(standard, periodDays) {
+    const artifacts = [];
+    for (const src of EVIDENCE_SOURCES) {
+        const present = existsSync(src.file);
+        artifacts.push({
+            type: src.type,
+            source: src.file,
+            description: src.description,
+            controlMapping: src.controls,
+            present,
+        });
+    }
+    // Check for run history
+    const runsDir = ".judges-runs";
+    if (existsSync(runsDir)) {
+        const runs = readdirSync(runsDir).filter((f) => f.endsWith(".json"));
+        artifacts.push({
+            type: "scan-history",
+            source: runsDir,
+            description: `${runs.length} historical scan snapshot(s)`,
+            controlMapping: ["SOC2-CC7.1", "ISO27001-A.8.8"],
+            present: runs.length > 0,
+        });
+    }
+    const present = artifacts.filter((a) => a.present).length;
+    const total = artifacts.length;
+    return {
+        standard,
+        generatedAt: new Date().toISOString(),
+        period: `${periodDays} days`,
+        artifacts,
+        summary: {
+            present,
+            missing: total - present,
+            coveragePercent: Math.round((present / total) * 100),
+        },
+    };
+}
+export function exportBundle(bundle, outputDir) {
+    mkdirSync(outputDir, { recursive: true });
+    // Copy present artifacts
+    for (const artifact of bundle.artifacts) {
+        if (artifact.present && existsSync(artifact.source)) {
+            try {
+                const content = readFileSync(artifact.source, "utf-8");
+                const destName = artifact.source.replace(/^\./, "").replace(/\//g, "_");
+                writeFileSync(join(outputDir, destName), content);
+            }
+            catch {
+                // Skip files that can't be read (directories handled separately)
+            }
+        }
+    }
+    // Write manifest
+    writeFileSync(join(outputDir, "audit-manifest.json"), JSON.stringify(bundle, null, 2));
+    // Write human-readable summary
+    const lines = [];
+    lines.push(`# Audit Evidence Bundle — ${bundle.standard}`);
+    lines.push(`Generated: ${bundle.generatedAt}`);
+    lines.push(`Period: ${bundle.period}\n`);
+    lines.push(`## Coverage: ${bundle.summary.coveragePercent}% (${bundle.summary.present}/${bundle.summary.present + bundle.summary.missing})\n`);
+    lines.push("| Status | Type | Source | Controls |");
+    lines.push("|--------|------|--------|----------|");
+    for (const a of bundle.artifacts) {
+        const icon = a.present ? "✅" : "❌";
+        const controls = (a.controlMapping || []).join(", ");
+        lines.push(`| ${icon} | ${a.type} | ${a.source} | ${controls} |`);
+    }
+    lines.push("\n## Missing Evidence");
+    const missing = bundle.artifacts.filter((a) => !a.present);
+    if (missing.length === 0) {
+        lines.push("All evidence artifacts present.");
+    }
+    else {
+        for (const m of missing) {
+            lines.push(`- **${m.type}**: ${m.description} (${m.source})`);
+        }
+    }
+    writeFileSync(join(outputDir, "audit-summary.md"), lines.join("\n"));
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runAuditBundle(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges audit-bundle — Assemble auditor-ready evidence package
+
+Usage:
+  judges audit-bundle --standard soc2
+  judges audit-bundle --standard iso27001 --period 90
+  judges audit-bundle --standard soc2 --output ./audit-evidence/
+  judges audit-bundle --check
+
+Options:
+  --standard <name>    Standard: soc2 | iso27001 | hitrust | generic (default: generic)
+  --period <days>      Evidence period in days (default: 90)
+  --output <dir>       Export evidence to directory
+  --check              Check evidence coverage without exporting
+  --format json        JSON output
+  --help, -h           Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const standard = argv.find((_a, i) => argv[i - 1] === "--standard") || "generic";
+    const periodStr = argv.find((_a, i) => argv[i - 1] === "--period");
+    const periodDays = periodStr ? parseInt(periodStr, 10) : 90;
+    const bundle = generateBundle(standard, periodDays);
+    // Export
+    const outputDir = argv.find((_a, i) => argv[i - 1] === "--output");
+    if (outputDir) {
+        exportBundle(bundle, outputDir);
+        console.log(`  ✅ Audit bundle exported to ${outputDir}/`);
+        console.log(`     Standard: ${standard}, Coverage: ${bundle.summary.coveragePercent}%`);
+        console.log(`     ${bundle.summary.present} present, ${bundle.summary.missing} missing`);
+        return;
+    }
+    // Check or display
+    if (format === "json") {
+        console.log(JSON.stringify(bundle, null, 2));
+    }
+    else {
+        console.log(`\n  Audit Evidence — ${standard.toUpperCase()} (${bundle.period})\n  ────────────────────────────────────`);
+        console.log(`  Coverage: ${bundle.summary.coveragePercent}% (${bundle.summary.present}/${bundle.summary.present + bundle.summary.missing})\n`);
+        for (const a of bundle.artifacts) {
+            const icon = a.present ? "✅" : "❌";
+            const controls = (a.controlMapping || []).slice(0, 2).join(", ");
+            console.log(`    ${icon} ${a.type.padEnd(22)} ${controls}`);
+        }
+        const missing = bundle.artifacts.filter((a) => !a.present);
+        if (missing.length > 0) {
+            console.log(`\n  Missing (${missing.length}):`);
+            for (const m of missing) {
+                console.log(`    ⚠️  ${m.description} (${m.source})`);
+            }
+        }
+        console.log("");
+    }
+}
+//# sourceMappingURL=audit-bundle.js.map

package/dist/commands/audit-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-bundle.js","sourceRoot":"","sources":["../../src/commands/audit-bundle.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAwB5B,MAAM,gBAAgB,GAA8E;IAClG;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;KAC3C;IACD,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE;IACpH;QACE,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gCAAgC;QAC7C,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,oCAAoC;QACjD,QAAQ,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;KAC3C;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,gCAAgC;QAC7C,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,wCAAwC;QACrD,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC;KAC5C;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,CAAC,YAAY,CAAC;KACzB;CACF,CAAC;AAEF,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAkB;IACjE,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,IAAI;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,cAAc,EAAE,GAAG,CAAC,QAAQ;YAC5B,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAAG,cAAc,CAAC;IAC/B,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,8BAA8B;YACzD,cAAc,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;YAChD,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;IAE/B,OAAO;QACL,QAAQ;QACR,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,GAAG,UAAU,OAAO;QAC5B,SAAS;QACT,OAAO,EAAE;YACP,OAAO;YACP,OAAO,EAAE,KAAK,GAAG,OAAO;YACxB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;SACrD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,SAAiB;IACjE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,yBAAyB;IACzB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACxE,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvF,+BAA+B;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CACR,gBAAgB,MAAM,CAAC,OAAO,CAAC,eAAe,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,CACnI,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,MAAM,QAAQ,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,SAAS,CAAC;IACjG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5D,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEpD,SAAS;IACT,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IACnF,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,gCAAgC,SAAS,GAAG,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,eAAe,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,OAAO,CAAC,OAAO,aAAa,MAAM,CAAC,OAAO,CAAC,OAAO,UAAU,CAAC,CAAC;QACzF,OAAO;IACT,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,wBAAwB,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,2CAA2C,CAC5G,CAAC;QACF,OAAO,CAAC,GAAG,CACT,eAAe,MAAM,CAAC,OAAO,CAAC,eAAe,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,CAClI,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YAChD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/code-owner-suggest.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Code owner suggest — auto-recommend CODEOWNERS entries
+ * based on finding patterns and resolution history.
+ *
+ * All analysis uses local data only.
+ */
+interface OwnerSuggestion {
+    path: string;
+    suggestedOwner: string;
+    reason: string;
+    confidence: number;
+    ruleCategories: string[];
+}
+export declare function suggestOwner(path: string, author: string, ruleCategories: string[]): OwnerSuggestion;
+export declare function runCodeOwnerSuggest(argv: string[]): void;
+export {};
+//# sourceMappingURL=code-owner-suggest.d.ts.map

package/dist/commands/code-owner-suggest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-owner-suggest.d.ts","sourceRoot":"","sources":["../../src/commands/code-owner-suggest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAuDD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,eAAe,CAkBpG;AAwBD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA2HxD"}