@kevinrabun/judges 3.48.0 → 3.49.0

package/dist/commands/incident-response.js

@@ -0,0 +1,255 @@
+/**
+ * Incident response — generates incident response playbooks
+ * from finding spikes, CVEs, or severity escalations.
+ *
+ * All data from local files.
+ */
+import { existsSync, readFileSync, mkdirSync, writeFileSync } from "fs";
+import { join } from "path";
+// ─── Playbook Generation ────────────────────────────────────────────────────
+function generatePlaybook(severity, findings) {
+    const steps = [
+        {
+            order: 1,
+            action: "Acknowledge incident and assign incident commander",
+            owner: "security-lead",
+            status: "pending",
+        },
+        {
+            order: 2,
+            action: "Assess blast radius — identify all affected files and services",
+            owner: "incident-commander",
+            status: "pending",
+        },
+        {
+            order: 3,
+            action: "Notify relevant code owners and stakeholders",
+            owner: "incident-commander",
+            status: "pending",
+        },
+    ];
+    if (severity === "critical") {
+        steps.push({
+            order: 4,
+            action: "Evaluate if production rollback or hotfix is needed",
+            owner: "engineering-lead",
+            status: "pending",
+        }, { order: 5, action: "Apply emergency patches to critical findings", owner: "assigned-devs", status: "pending" }, { order: 6, action: "Run security regression tests on patched code", owner: "qa-lead", status: "pending" }, { order: 7, action: "Deploy hotfix through expedited release process", owner: "devops-lead", status: "pending" });
+    }
+    else {
+        steps.push({
+            order: 4,
+            action: "Prioritize findings by severity and blast radius",
+            owner: "security-lead",
+            status: "pending",
+        }, { order: 5, action: "Create fix PRs for each affected file", owner: "assigned-devs", status: "pending" }, { order: 6, action: "Review and merge fixes through normal PR process", owner: "code-owners", status: "pending" });
+    }
+    const hasSqlFindings = findings.some((f) => /sql/i.test(f.ruleId) || /injection/i.test(f.title));
+    if (hasSqlFindings) {
+        steps.push({
+            order: steps.length + 1,
+            action: "Audit database access logs for exploitation evidence",
+            owner: "dba",
+            status: "pending",
+        });
+    }
+    const hasAuthFindings = findings.some((f) => /auth/i.test(f.ruleId) || /auth/i.test(f.title));
+    if (hasAuthFindings) {
+        steps.push({
+            order: steps.length + 1,
+            action: "Review authentication logs and rotate affected credentials",
+            owner: "security-lead",
+            status: "pending",
+        });
+    }
+    steps.push({
+        order: steps.length + 1,
+        action: "Verify all findings are resolved with re-scan",
+        owner: "security-lead",
+        status: "pending",
+    }, {
+        order: steps.length + 2,
+        action: "Document lessons learned and update prevention controls",
+        owner: "incident-commander",
+        status: "pending",
+    }, {
+        order: steps.length + 3,
+        action: "Close incident and update status",
+        owner: "incident-commander",
+        status: "pending",
+    });
+    return steps;
+}
+function generateId() {
+    return `INC-${Date.now().toString(36).toUpperCase()}`;
+}
+// ─── Load findings ──────────────────────────────────────────────────────────
+function loadRecentFindings() {
+    const paths = [".judges-findings.json", "judges-report.json"];
+    for (const p of paths) {
+        if (!existsSync(p))
+            continue;
+        try {
+            const data = JSON.parse(readFileSync(p, "utf-8"));
+            if (Array.isArray(data))
+                return data;
+            if (data.findings)
+                return data.findings;
+        }
+        catch {
+            /* skip */
+        }
+    }
+    return [];
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+const STORE = ".judges-incidents";
+export function runIncidentResponse(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges incident-response — Incident response playbook generation
+
+Usage:
+  judges incident-response --create --severity critical --title "SQL Injection in auth module"
+  judges incident-response --list
+  judges incident-response --show <id>
+  judges incident-response --update <id> --status investigating
+  judges incident-response --generate-from-findings
+
+Options:
+  --create              Create new incident
+  --severity <level>    Incident severity (critical, high, medium)
+  --title <text>        Incident title
+  --generate-from-findings  Auto-generate incident from current findings
+  --list                List all incidents
+  --show <id>           Show incident details
+  --update <id>         Update incident
+  --status <status>     Set status (open, investigating, mitigating, resolved)
+  --format json         JSON output
+  --help, -h            Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    if (!existsSync(STORE))
+        mkdirSync(STORE, { recursive: true });
+    const incidentsPath = join(STORE, "incidents.json");
+    const incidents = existsSync(incidentsPath) ? JSON.parse(readFileSync(incidentsPath, "utf-8")) : [];
+    // List
+    if (argv.includes("--list")) {
+        if (format === "json") {
+            console.log(JSON.stringify(incidents, null, 2));
+        }
+        else {
+            console.log(`\n  Incidents (${incidents.length})\n  ──────────────────────────`);
+            if (incidents.length === 0) {
+                console.log("    No incidents recorded.\n");
+                return;
+            }
+            for (const inc of incidents) {
+                console.log(`    [${inc.status.toUpperCase().padEnd(13)}] ${inc.id}  ${inc.severity.toUpperCase().padEnd(8)}  ${inc.title}`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // Show
+    const showId = argv.find((_a, i) => argv[i - 1] === "--show");
+    if (showId) {
+        const inc = incidents.find((i) => i.id === showId);
+        if (!inc) {
+            console.error(`  Incident ${showId} not found.`);
+            return;
+        }
+        if (format === "json") {
+            console.log(JSON.stringify(inc, null, 2));
+        }
+        else {
+            console.log(`\n  Incident: ${inc.id}\n  ──────────────────────────`);
+            console.log(`    Title:    ${inc.title}`);
+            console.log(`    Severity: ${inc.severity}`);
+            console.log(`    Status:   ${inc.status}`);
+            console.log(`    Created:  ${inc.createdAt}`);
+            console.log(`    Files:    ${inc.affectedFiles.length}`);
+            console.log(`    Findings: ${inc.findings.length}`);
+            console.log(`\n  Playbook:`);
+            for (const step of inc.playbook) {
+                const icon = step.status === "done" ? "✅" : step.status === "in-progress" ? "🔄" : "⬜";
+                console.log(`    ${icon} ${step.order}. ${step.action} (@${step.owner})`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // Update
+    const updateId = argv.find((_a, i) => argv[i - 1] === "--update");
+    if (updateId) {
+        const inc = incidents.find((i) => i.id === updateId);
+        if (!inc) {
+            console.error(`  Incident ${updateId} not found.`);
+            return;
+        }
+        const newStatus = argv.find((_a, i) => argv[i - 1] === "--status");
+        if (newStatus) {
+            inc.status = newStatus;
+            inc.updatedAt = new Date().toISOString();
+            writeFileSync(incidentsPath, JSON.stringify(incidents, null, 2));
+            console.log(`  Incident ${updateId} → ${newStatus}`);
+        }
+        return;
+    }
+    // Generate from findings
+    if (argv.includes("--generate-from-findings")) {
+        const findings = loadRecentFindings();
+        const criticals = findings.filter((f) => f.severity === "critical");
+        const highs = findings.filter((f) => f.severity === "high");
+        if (criticals.length === 0 && highs.length === 0) {
+            console.log("  No critical or high severity findings to generate incident from.");
+            return;
+        }
+        const severity = criticals.length > 0 ? "critical" : "high";
+        const relevantFindings = criticals.length > 0 ? criticals : highs;
+        const affectedFiles = [...new Set(relevantFindings.map((f) => f.file || "unknown"))];
+        const incident = {
+            id: generateId(),
+            severity,
+            title: `${severity.toUpperCase()} findings detected (${relevantFindings.length})`,
+            description: `Auto-generated incident from ${relevantFindings.length} ${severity} severity findings`,
+            affectedFiles,
+            findings: relevantFindings.map((f) => ({ ruleId: f.ruleId, severity: f.severity, title: f.title })),
+            playbook: generatePlaybook(severity, relevantFindings),
+            status: "open",
+            createdAt: new Date().toISOString(),
+            updatedAt: new Date().toISOString(),
+        };
+        incidents.push(incident);
+        writeFileSync(incidentsPath, JSON.stringify(incidents, null, 2));
+        console.log(`  Created incident ${incident.id} (${severity}) with ${incident.playbook.length}-step playbook`);
+        return;
+    }
+    // Create
+    if (argv.includes("--create")) {
+        const severity = (argv.find((_a, i) => argv[i - 1] === "--severity") ||
+            "high");
+        const title = argv.find((_a, i) => argv[i - 1] === "--title") || "New security incident";
+        const findings = loadRecentFindings();
+        const incident = {
+            id: generateId(),
+            severity,
+            title,
+            description: `Manually created incident: ${title}`,
+            affectedFiles: [...new Set(findings.map((f) => f.file || "unknown"))],
+            findings: findings.map((f) => ({ ruleId: f.ruleId, severity: f.severity, title: f.title })),
+            playbook: generatePlaybook(severity, findings),
+            status: "open",
+            createdAt: new Date().toISOString(),
+            updatedAt: new Date().toISOString(),
+        };
+        incidents.push(incident);
+        writeFileSync(incidentsPath, JSON.stringify(incidents, null, 2));
+        console.log(`  Created incident ${incident.id} with ${incident.playbook.length}-step playbook`);
+        return;
+    }
+    console.log("  Use --create, --generate-from-findings, --list, --show, or --update. Run --help for details.");
+}
+//# sourceMappingURL=incident-response.js.map

package/dist/commands/incident-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incident-response.js","sourceRoot":"","sources":["../../src/commands/incident-response.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAwB5B,+EAA+E;AAE/E,SAAS,gBAAgB,CACvB,QAAgB,EAChB,QAAoE;IAEpE,MAAM,KAAK,GAAmB;QAC5B;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,oDAAoD;YAC5D,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,SAAS;SAClB;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,gEAAgE;YACxE,KAAK,EAAE,oBAAoB;YAC3B,MAAM,EAAE,SAAS;SAClB;QACD;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,8CAA8C;YACtD,KAAK,EAAE,oBAAoB;YAC3B,MAAM,EAAE,SAAS;SAClB;KACF,CAAC;IAEF,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,qDAAqD;YAC7D,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,SAAS;SAClB,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,8CAA8C,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,EAC/G,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,+CAA+C,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,EAC1G,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,iDAAiD,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CACjH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR;YACE,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,kDAAkD;YAC1D,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,SAAS;SAClB,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,uCAAuC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,EACxG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,kDAAkD,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAClH,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjG,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;YACvB,MAAM,EAAE,sDAAsD;YAC9D,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9F,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;YACvB,MAAM,EAAE,4DAA4D;YACpE,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACR;QACE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;QACvB,MAAM,EAAE,+CAA+C;QACvD,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,SAAS;KAClB,EACD;QACE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;QACvB,MAAM,EAAE,yDAAyD;QACjE,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,SAAS;KAClB,EACD;QACE,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;QACvB,MAAM,EAAE,kCAAkC;QAC1C,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,SAAS;KAClB,CACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,+EAA+E;AAE/E,SAAS,kBAAkB;IACzB,MAAM,KAAK,GAAG,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,+EAA+E;AAE/E,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAElC,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;CAqBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACpD,MAAM,SAAS,GAAe,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhH,OAAO;IACP,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,SAAS,CAAC,MAAM,iCAAiC,CAAC,CAAC;YACjF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CACT,QAAQ,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAChH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO;IACP,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC9E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,cAAc,MAAM,aAAa,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,gCAAgC,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBACvF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,SAAS;IACT,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IAClF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,cAAc,QAAQ,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAEpE,CAAC;QACd,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;YACvB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACzC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,MAAM,SAAS,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAE5D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5D,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;QAErF,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ;YACR,KAAK,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,uBAAuB,gBAAgB,CAAC,MAAM,GAAG;YACjF,WAAW,EAAE,gCAAgC,gBAAgB,CAAC,MAAM,IAAI,QAAQ,oBAAoB;YACpG,aAAa;YACb,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACnG,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACtD,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,CAAC,EAAE,KAAK,QAAQ,UAAU,QAAQ,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAC9G,OAAO;IACT,CAAC;IAED,SAAS;IACT,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC;YAClF,MAAM,CAAyB,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,uBAAuB,CAAC;QACzG,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QAEtC,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ;YACR,KAAK;YACL,WAAW,EAAE,8BAA8B,KAAK,EAAE;YAClD,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC;YACrE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3F,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAC9C,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,CAAC,EAAE,SAAS,QAAQ,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gGAAgG,CAAC,CAAC;AAChH,CAAC"}

package/dist/commands/learning-path.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Learning path — generates personalized developer learning
+ * modules from recurring finding patterns, tracking skill
+ * progression over time.
+ *
+ * All data stored locally.
+ */
+export declare function runLearningPath(argv: string[]): void;
+//# sourceMappingURL=learning-path.d.ts.map

package/dist/commands/learning-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"learning-path.d.ts","sourceRoot":"","sources":["../../src/commands/learning-path.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgNH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA4JpD"}

package/dist/commands/learning-path.js

@@ -0,0 +1,326 @@
+/**
+ * Learning path — generates personalized developer learning
+ * modules from recurring finding patterns, tracking skill
+ * progression over time.
+ *
+ * All data stored locally.
+ */
+import { existsSync, readFileSync, mkdirSync, writeFileSync } from "fs";
+import { join } from "path";
+// ─── Module Library ─────────────────────────────────────────────────────────
+const MODULES = [
+    {
+        id: "sql-injection-101",
+        topic: "SQL Injection Prevention",
+        difficulty: "beginner",
+        description: "Learn to identify and prevent SQL injection vulnerabilities",
+        resources: [
+            "OWASP SQL Injection Prevention Cheat Sheet",
+            "Use parameterized queries instead of string concatenation",
+            "Apply input validation at system boundaries",
+        ],
+        exercises: [
+            "Refactor a string-concatenated query to use parameterized statements",
+            "Identify SQL injection vectors in a sample CRUD controller",
+            "Implement an ORM-based data access layer",
+        ],
+        prerequisites: [],
+    },
+    {
+        id: "xss-prevention",
+        topic: "Cross-Site Scripting (XSS) Prevention",
+        difficulty: "beginner",
+        description: "Understand and prevent XSS vulnerabilities in web applications",
+        resources: [
+            "OWASP XSS Prevention Cheat Sheet",
+            "Content Security Policy (CSP) headers",
+            "Output encoding for different contexts (HTML, JS, URL, CSS)",
+        ],
+        exercises: [
+            "Add output encoding to a template rendering user input",
+            "Configure CSP headers for a web application",
+            "Test for DOM-based XSS in a client-side application",
+        ],
+        prerequisites: [],
+    },
+    {
+        id: "auth-security",
+        topic: "Authentication & Authorization",
+        difficulty: "intermediate",
+        description: "Implement secure authentication and authorization patterns",
+        resources: [
+            "OWASP Authentication Cheat Sheet",
+            "JWT best practices and pitfalls",
+            "OAuth 2.0 and OpenID Connect fundamentals",
+        ],
+        exercises: [
+            "Implement rate limiting on login endpoints",
+            "Add proper JWT validation with signature verification",
+            "Design role-based access control for an API",
+        ],
+        prerequisites: ["sql-injection-101"],
+    },
+    {
+        id: "crypto-basics",
+        topic: "Cryptography Fundamentals",
+        difficulty: "intermediate",
+        description: "Use cryptographic primitives correctly",
+        resources: [
+            "OWASP Cryptographic Storage Cheat Sheet",
+            "Modern cipher suites and key management",
+            "Password hashing: bcrypt, scrypt, Argon2",
+        ],
+        exercises: [
+            "Replace MD5/SHA-1 with SHA-256 or better",
+            "Implement proper password hashing with Argon2",
+            "Set up encrypted-at-rest storage for sensitive data",
+        ],
+        prerequisites: [],
+    },
+    {
+        id: "ssrf-prevention",
+        topic: "Server-Side Request Forgery (SSRF)",
+        difficulty: "advanced",
+        description: "Prevent SSRF attacks in web applications",
+        resources: [
+            "OWASP SSRF Prevention Cheat Sheet",
+            "URL validation and allowlisting strategies",
+            "Network segmentation for defense in depth",
+        ],
+        exercises: [
+            "Implement URL validation with an allowlist",
+            "Block internal IP ranges in outbound requests",
+            "Design a secure proxy service for external API calls",
+        ],
+        prerequisites: ["auth-security"],
+    },
+    {
+        id: "supply-chain",
+        topic: "Supply Chain Security",
+        difficulty: "advanced",
+        description: "Secure the software supply chain",
+        resources: [
+            "SLSA framework for supply chain integrity",
+            "Dependency pinning and lock file management",
+            "SBOM generation and consumption",
+        ],
+        exercises: [
+            "Generate an SBOM with `judges sbom-export`",
+            "Audit dependencies with `judges dep-correlate`",
+            "Set up automated dependency update policies",
+        ],
+        prerequisites: ["crypto-basics"],
+    },
+    {
+        id: "secure-code-review",
+        topic: "Secure Code Review Practices",
+        difficulty: "intermediate",
+        description: "Conduct effective security-focused code reviews",
+        resources: [
+            "OWASP Code Review Guide",
+            "Common vulnerability patterns by language",
+            "Using Judges for automated security review",
+        ],
+        exercises: [
+            "Review a sample PR for security issues using Judges",
+            "Create a custom judge with `judges judge-author`",
+            "Build a team pattern library with `judges pattern-registry`",
+        ],
+        prerequisites: ["sql-injection-101", "xss-prevention"],
+    },
+    {
+        id: "incident-handling",
+        topic: "Security Incident Handling",
+        difficulty: "advanced",
+        description: "Respond to and manage security incidents",
+        resources: [
+            "NIST Incident Response Guide",
+            "Post-incident review best practices",
+            "Using `judges incident-response` for playbook generation",
+        ],
+        exercises: [
+            "Create an incident response playbook for a critical finding",
+            "Conduct a tabletop exercise with the team",
+            "Set up SLA tracking with `judges sla-track`",
+        ],
+        prerequisites: ["secure-code-review", "auth-security"],
+    },
+];
+// ─── Analysis ───────────────────────────────────────────────────────────────
+const TOPIC_PATTERNS = {
+    "SQL Injection Prevention": ["sql", "injection", "query", "database"],
+    "Cross-Site Scripting (XSS) Prevention": ["xss", "cross-site", "script", "sanitize", "encode"],
+    "Authentication & Authorization": ["auth", "login", "password", "token", "jwt", "session", "rbac"],
+    "Cryptography Fundamentals": ["crypto", "cipher", "hash", "encrypt", "md5", "sha1", "key"],
+    "Server-Side Request Forgery (SSRF)": ["ssrf", "request-forgery", "url", "redirect"],
+    "Supply Chain Security": ["dependency", "package", "npm", "supply-chain", "sbom"],
+    "Secure Code Review Practices": ["review", "code-quality", "pattern"],
+    "Security Incident Handling": ["incident", "breach", "response", "escalation"],
+};
+function analyzeWeaknesses(findings) {
+    const topicCounts = new Map();
+    for (const f of findings) {
+        const text = `${f.ruleId} ${f.title}`.toLowerCase();
+        for (const [topic, patterns] of Object.entries(TOPIC_PATTERNS)) {
+            if (patterns.some((p) => text.includes(p))) {
+                topicCounts.set(topic, (topicCounts.get(topic) || 0) + 1);
+            }
+        }
+    }
+    return [...topicCounts.entries()]
+        .map(([topic, count]) => ({ topic, findingCount: count }))
+        .sort((a, b) => b.findingCount - a.findingCount);
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+const STORE = ".judges-learning";
+export function runLearningPath(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges learning-path — Personalized security learning recommendations
+
+Usage:
+  judges learning-path
+  judges learning-path --developer "alice"
+  judges learning-path --modules
+  judges learning-path --complete <module-id>
+
+Options:
+  --developer <name>    Developer name for personalized path
+  --modules             List all available learning modules
+  --complete <id>       Mark a module as completed
+  --reset               Reset progress for developer
+  --format json         JSON output
+  --help, -h            Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    // List modules
+    if (argv.includes("--modules")) {
+        if (format === "json") {
+            console.log(JSON.stringify(MODULES, null, 2));
+        }
+        else {
+            console.log(`\n  Learning Modules (${MODULES.length})\n  ──────────────────────────`);
+            for (const m of MODULES) {
+                console.log(`    [${m.difficulty.padEnd(12)}] ${m.id.padEnd(25)} ${m.topic}`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    if (!existsSync(STORE))
+        mkdirSync(STORE, { recursive: true });
+    const devName = argv.find((_a, i) => argv[i - 1] === "--developer") || "default";
+    const progressPath = join(STORE, `${devName}-progress.json`);
+    let progress = existsSync(progressPath)
+        ? JSON.parse(readFileSync(progressPath, "utf-8"))
+        : { developer: devName, completedModules: [], weakAreas: [], skillLevel: 1, lastUpdated: new Date().toISOString() };
+    // Reset
+    if (argv.includes("--reset")) {
+        progress = {
+            developer: devName,
+            completedModules: [],
+            weakAreas: [],
+            skillLevel: 1,
+            lastUpdated: new Date().toISOString(),
+        };
+        writeFileSync(progressPath, JSON.stringify(progress, null, 2));
+        console.log(`  Reset progress for ${devName}`);
+        return;
+    }
+    // Complete module
+    const completeId = argv.find((_a, i) => argv[i - 1] === "--complete");
+    if (completeId) {
+        const mod = MODULES.find((m) => m.id === completeId);
+        if (!mod) {
+            console.error(`  Module ${completeId} not found.`);
+            return;
+        }
+        if (!progress.completedModules.includes(completeId)) {
+            progress.completedModules.push(completeId);
+            progress.skillLevel = Math.min(10, Math.round((progress.completedModules.length / MODULES.length) * 10));
+            progress.lastUpdated = new Date().toISOString();
+            writeFileSync(progressPath, JSON.stringify(progress, null, 2));
+        }
+        console.log(`  Completed: ${mod.topic} — Skill level: ${progress.skillLevel}/10`);
+        return;
+    }
+    // Analyze and recommend
+    const findings = [];
+    const paths = [".judges-findings.json", "judges-report.json"];
+    for (const p of paths) {
+        if (!existsSync(p))
+            continue;
+        try {
+            const data = JSON.parse(readFileSync(p, "utf-8"));
+            if (Array.isArray(data))
+                findings.push(...data);
+            else if (data.findings)
+                findings.push(...data.findings);
+        }
+        catch {
+            /* skip */
+        }
+    }
+    const weakAreas = analyzeWeaknesses(findings);
+    progress.weakAreas = weakAreas;
+    progress.lastUpdated = new Date().toISOString();
+    writeFileSync(progressPath, JSON.stringify(progress, null, 2));
+    // Find recommended modules (not completed, prerequisites met)
+    const recommended = MODULES.filter((m) => {
+        if (progress.completedModules.includes(m.id))
+            return false;
+        const prereqsMet = m.prerequisites.every((p) => progress.completedModules.includes(p));
+        if (!prereqsMet)
+            return false;
+        // Prioritize modules matching weak areas
+        return true;
+    });
+    // Sort by relevance to weak areas
+    const sortedRecs = recommended.sort((a, b) => {
+        const aRelevance = weakAreas.find((w) => w.topic === a.topic)?.findingCount || 0;
+        const bRelevance = weakAreas.find((w) => w.topic === b.topic)?.findingCount || 0;
+        return bRelevance - aRelevance;
+    });
+    const report = {
+        recommendedModules: sortedRecs,
+        progress,
+        timestamp: new Date().toISOString(),
+    };
+    if (format === "json") {
+        console.log(JSON.stringify(report, null, 2));
+    }
+    else {
+        console.log(`\n  Learning Path — ${devName}`);
+        console.log(`  Skill Level: ${progress.skillLevel}/10  Completed: ${progress.completedModules.length}/${MODULES.length}`);
+        console.log(`  ──────────────────────────`);
+        if (weakAreas.length > 0) {
+            console.log(`\n  Weak Areas (from findings):`);
+            for (const w of weakAreas.slice(0, 5)) {
+                console.log(`    ${w.topic.padEnd(35)} ${w.findingCount} findings`);
+            }
+        }
+        console.log(`\n  Recommended Modules:`);
+        if (sortedRecs.length === 0) {
+            console.log(`    🎉 All available modules completed!`);
+        }
+        else {
+            for (const m of sortedRecs.slice(0, 5)) {
+                const relevant = weakAreas.find((w) => w.topic === m.topic);
+                const tag = relevant ? ` (${relevant.findingCount} findings)` : "";
+                console.log(`    [${m.difficulty.padEnd(12)}] ${m.id}${tag}`);
+                console.log(`      ${m.topic}`);
+            }
+        }
+        if (progress.completedModules.length > 0) {
+            console.log(`\n  Completed:`);
+            for (const id of progress.completedModules) {
+                const mod = MODULES.find((m) => m.id === id);
+                console.log(`    ✅ ${mod?.topic || id}`);
+            }
+        }
+        console.log("");
+    }
+}
+//# sourceMappingURL=learning-path.js.map

package/dist/commands/learning-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"learning-path.js","sourceRoot":"","sources":["../../src/commands/learning-path.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA4B5B,+EAA+E;AAE/E,MAAM,OAAO,GAAqB;IAChC;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,0BAA0B;QACjC,UAAU,EAAE,UAAU;QACtB,WAAW,EAAE,6DAA6D;QAC1E,SAAS,EAAE;YACT,4CAA4C;YAC5C,2DAA2D;YAC3D,6CAA6C;SAC9C;QACD,SAAS,EAAE;YACT,sEAAsE;YACtE,4DAA4D;YAC5D,0CAA0C;SAC3C;QACD,aAAa,EAAE,EAAE;KAClB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,uCAAuC;QAC9C,UAAU,EAAE,UAAU;QACtB,WAAW,EAAE,gEAAgE;QAC7E,SAAS,EAAE;YACT,kCAAkC;YAClC,uCAAuC;YACvC,6DAA6D;SAC9D;QACD,SAAS,EAAE;YACT,wDAAwD;YACxD,6CAA6C;YAC7C,qDAAqD;SACtD;QACD,aAAa,EAAE,EAAE;KAClB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,gCAAgC;QACvC,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,4DAA4D;QACzE,SAAS,EAAE;YACT,kCAAkC;YAClC,iCAAiC;YACjC,2CAA2C;SAC5C;QACD,SAAS,EAAE;YACT,4CAA4C;YAC5C,uDAAuD;YACvD,6CAA6C;SAC9C;QACD,aAAa,EAAE,CAAC,mBAAmB,CAAC;KACrC;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,2BAA2B;QAClC,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,wCAAwC;QACrD,SAAS,EAAE;YACT,yCAAyC;YACzC,yCAAyC;YACzC,0CAA0C;SAC3C;QACD,SAAS,EAAE;YACT,0CAA0C;YAC1C,+CAA+C;YAC/C,qDAAqD;SACtD;QACD,aAAa,EAAE,EAAE;KAClB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,oCAAoC;QAC3C,UAAU,EAAE,UAAU;QACtB,WAAW,EAAE,0CAA0C;QACvD,SAAS,EAAE;YACT,mCAAmC;YACnC,4CAA4C;YAC5C,2CAA2C;SAC5C;QACD,SAAS,EAAE;YACT,4CAA4C;YAC5C,+CAA+C;YAC/C,sDAAsD;SACvD;QACD,aAAa,EAAE,CAAC,eAAe,CAAC;KACjC;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,uBAAuB;QAC9B,UAAU,EAAE,UAAU;QACtB,WAAW,EAAE,kCAAkC;QAC/C,SAAS,EAAE;YACT,2CAA2C;YAC3C,6CAA6C;YAC7C,iCAAiC;SAClC;QACD,SAAS,EAAE;YACT,4CAA4C;YAC5C,gDAAgD;YAChD,6CAA6C;SAC9C;QACD,aAAa,EAAE,CAAC,eAAe,CAAC;KACjC;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,8BAA8B;QACrC,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,iDAAiD;QAC9D,SAAS,EAAE;YACT,yBAAyB;YACzB,2CAA2C;YAC3C,4CAA4C;SAC7C;QACD,SAAS,EAAE;YACT,qDAAqD;YACrD,kDAAkD;YAClD,6DAA6D;SAC9D;QACD,aAAa,EAAE,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;KACvD;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,4BAA4B;QACnC,UAAU,EAAE,UAAU;QACtB,WAAW,EAAE,0CAA0C;QACvD,SAAS,EAAE;YACT,8BAA8B;YAC9B,qCAAqC;YACrC,0DAA0D;SAC3D;QACD,SAAS,EAAE;YACT,6DAA6D;YAC7D,2CAA2C;YAC3C,6CAA6C;SAC9C;QACD,aAAa,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;KACvD;CACF,CAAC;AAEF,+EAA+E;AAE/E,MAAM,cAAc,GAA6B;IAC/C,0BAA0B,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC;IACrE,uCAAuC,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC9F,gCAAgC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC;IAClG,2BAA2B,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC;IAC1F,oCAAoC,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,CAAC;IACpF,uBAAuB,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC;IACjF,8BAA8B,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC;IACrE,4BAA4B,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC;CAC/E,CAAC;AAEF,SAAS,iBAAiB,CACxB,QAAoE;IAEpE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;SACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;AACrD,CAAC;AAED,+EAA+E;AAE/E,MAAM,KAAK,GAAG,kBAAkB,CAAC;AAEjC,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,eAAe;IACf,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,OAAO,CAAC,MAAM,iCAAiC,CAAC,CAAC;YACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,IAAI,SAAS,CAAC;IACjG,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,OAAO,gBAAgB,CAAC,CAAC;IAC7D,IAAI,QAAQ,GAAsB,UAAU,CAAC,YAAY,CAAC;QACxD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAEtH,QAAQ;IACR,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,QAAQ,GAAG;YACT,SAAS,EAAE,OAAO;YAClB,gBAAgB,EAAE,EAAE;YACpB,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,CAAC;YACb,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QACF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;IACtF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,YAAY,UAAU,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3C,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACzG,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAChD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,KAAK,mBAAmB,QAAQ,CAAC,UAAU,KAAK,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IAED,wBAAwB;IACxB,MAAM,QAAQ,GAA+D,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;iBAC3C,IAAI,IAAI,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE/D,8DAA8D;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACvC,IAAI,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,UAAU,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC9B,yCAAyC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,kCAAkC;IAClC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,YAAY,IAAI,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,YAAY,IAAI,CAAC,CAAC;QACjF,OAAO,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAmB;QAC7B,kBAAkB,EAAE,UAAU;QAC9B,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CACT,kBAAkB,QAAQ,CAAC,UAAU,mBAAmB,QAAQ,CAAC,gBAAgB,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAC7G,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAE5C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,YAAY,WAAW,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,YAAY,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/license-scan.d.ts

@@ -0,0 +1,9 @@
+/**
+ * License scan — scans project dependencies for license
+ * compatibility, flags copyleft/unknown licenses, and
+ * generates a license obligations report.
+ *
+ * All data from local files.
+ */
+export declare function runLicenseScan(argv: string[]): void;
+//# sourceMappingURL=license-scan.d.ts.map

package/dist/commands/license-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-scan.d.ts","sourceRoot":"","sources":["../../src/commands/license-scan.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiIH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAkFnD"}