@kevinrabun/judges 3.48.0 → 3.49.0

package/dist/commands/license-scan.js

@@ -0,0 +1,180 @@
+/**
+ * License scan — scans project dependencies for license
+ * compatibility, flags copyleft/unknown licenses, and
+ * generates a license obligations report.
+ *
+ * All data from local files.
+ */
+import { existsSync, readFileSync, mkdirSync, writeFileSync } from "fs";
+import { join } from "path";
+// ─── License DB ─────────────────────────────────────────────────────────────
+const LICENSE_CATEGORIES = {
+    MIT: { category: "permissive", risk: "low" },
+    ISC: { category: "permissive", risk: "low" },
+    "BSD-2-Clause": { category: "permissive", risk: "low" },
+    "BSD-3-Clause": { category: "permissive", risk: "low" },
+    "Apache-2.0": { category: "permissive", risk: "low" },
+    Unlicense: { category: "permissive", risk: "low" },
+    "0BSD": { category: "permissive", risk: "low" },
+    "CC0-1.0": { category: "permissive", risk: "low" },
+    Zlib: { category: "permissive", risk: "low" },
+    "GPL-2.0": { category: "copyleft", risk: "high" },
+    "GPL-3.0": { category: "copyleft", risk: "high" },
+    "AGPL-3.0": { category: "copyleft", risk: "high" },
+    "GPL-2.0-only": { category: "copyleft", risk: "high" },
+    "GPL-3.0-only": { category: "copyleft", risk: "high" },
+    "AGPL-3.0-only": { category: "copyleft", risk: "high" },
+    "LGPL-2.1": { category: "weak-copyleft", risk: "medium" },
+    "LGPL-3.0": { category: "weak-copyleft", risk: "medium" },
+    "MPL-2.0": { category: "weak-copyleft", risk: "medium" },
+    "EPL-1.0": { category: "weak-copyleft", risk: "medium" },
+    "EPL-2.0": { category: "weak-copyleft", risk: "medium" },
+    "CDDL-1.0": { category: "weak-copyleft", risk: "medium" },
+};
+function classifyLicense(license) {
+    const normalized = license.trim().replace(/\s+/g, "-");
+    return LICENSE_CATEGORIES[normalized] || { category: "unknown", risk: "high" };
+}
+// ─── Scanning ───────────────────────────────────────────────────────────────
+function scanNpmLicenses() {
+    const results = [];
+    // Try node_modules approach
+    if (existsSync("package.json")) {
+        try {
+            const pkg = JSON.parse(readFileSync("package.json", "utf-8"));
+            const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+            for (const [name, ver] of Object.entries(allDeps)) {
+                let license = "UNKNOWN";
+                // Check node_modules for the package's package.json
+                const depPkgPath = join("node_modules", name, "package.json");
+                if (existsSync(depPkgPath)) {
+                    try {
+                        const depPkg = JSON.parse(readFileSync(depPkgPath, "utf-8"));
+                        if (typeof depPkg.license === "string") {
+                            license = depPkg.license;
+                        }
+                        else if (depPkg.license?.type) {
+                            license = depPkg.license.type;
+                        }
+                        else if (Array.isArray(depPkg.licenses)) {
+                            license = depPkg.licenses.map((l) => l.type || "UNKNOWN").join(" OR ");
+                        }
+                    }
+                    catch {
+                        /* skip */
+                    }
+                }
+                const { category, risk } = classifyLicense(license);
+                results.push({
+                    dependency: name,
+                    version: String(ver).replace(/^[\^~>=<]+/, ""),
+                    license,
+                    category,
+                    risk,
+                });
+            }
+        }
+        catch {
+            /* skip */
+        }
+    }
+    return results;
+}
+function detectConflicts(licenses) {
+    const conflicts = [];
+    const hasCopyleft = licenses.some((l) => l.category === "copyleft");
+    const hasProprietary = licenses.some((l) => l.category === "proprietary");
+    if (hasCopyleft && hasProprietary) {
+        conflicts.push("Copyleft and proprietary licenses detected — may be incompatible");
+    }
+    const agpl = licenses.filter((l) => l.license.includes("AGPL"));
+    if (agpl.length > 0) {
+        conflicts.push(`AGPL license detected in: ${agpl.map((l) => l.dependency).join(", ")} — requires source disclosure for network use`);
+    }
+    const unknown = licenses.filter((l) => l.category === "unknown");
+    if (unknown.length > 0) {
+        conflicts.push(`Unknown licenses in: ${unknown.map((l) => l.dependency).join(", ")} — review manually`);
+    }
+    return conflicts;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+const STORE = ".judges-licenses";
+export function runLicenseScan(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges license-scan — Dependency license compliance scanning
+
+Usage:
+  judges license-scan
+  judges license-scan --risk high
+  judges license-scan --category copyleft
+  judges license-scan --save
+
+Options:
+  --risk <level>        Filter by risk level (low, medium, high)
+  --category <cat>      Filter by category (permissive, copyleft, weak-copyleft, proprietary, unknown)
+  --save                Save report to ${STORE}/
+  --format json         JSON output
+  --help, -h            Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    let licenses = scanNpmLicenses();
+    if (licenses.length === 0) {
+        console.log("  No dependencies found. Run from a project root with package.json.");
+        return;
+    }
+    // Filters
+    const riskFilter = argv.find((_a, i) => argv[i - 1] === "--risk");
+    if (riskFilter)
+        licenses = licenses.filter((l) => l.risk === riskFilter);
+    const catFilter = argv.find((_a, i) => argv[i - 1] === "--category");
+    if (catFilter)
+        licenses = licenses.filter((l) => l.category === catFilter);
+    const conflicts = detectConflicts(licenses);
+    const report = {
+        licenses,
+        summary: {
+            permissive: licenses.filter((l) => l.category === "permissive").length,
+            copyleft: licenses.filter((l) => l.category === "copyleft").length,
+            weakCopyleft: licenses.filter((l) => l.category === "weak-copyleft").length,
+            proprietary: licenses.filter((l) => l.category === "proprietary").length,
+            unknown: licenses.filter((l) => l.category === "unknown").length,
+        },
+        conflicts,
+        timestamp: new Date().toISOString(),
+    };
+    if (argv.includes("--save")) {
+        if (!existsSync(STORE))
+            mkdirSync(STORE, { recursive: true });
+        writeFileSync(join(STORE, "license-report.json"), JSON.stringify(report, null, 2));
+        console.log(`  Report saved to ${STORE}/license-report.json`);
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(report, null, 2));
+    }
+    else {
+        console.log(`\n  License Scan — ${licenses.length} dependencies`);
+        console.log(`  ──────────────────────────`);
+        console.log(`    Permissive:   ${report.summary.permissive}`);
+        console.log(`    Weak-copyleft: ${report.summary.weakCopyleft}`);
+        console.log(`    Copyleft:     ${report.summary.copyleft}`);
+        console.log(`    Unknown:      ${report.summary.unknown}`);
+        if (conflicts.length > 0) {
+            console.log(`\n  ⚠️  Conflicts:`);
+            for (const c of conflicts)
+                console.log(`    ${c}`);
+        }
+        // Show high-risk
+        const highRisk = licenses.filter((l) => l.risk === "high");
+        if (highRisk.length > 0) {
+            console.log(`\n  High Risk (${highRisk.length}):`);
+            for (const l of highRisk) {
+                console.log(`    ${l.dependency.padEnd(30)} ${l.license.padEnd(15)} ${l.category}`);
+            }
+        }
+        console.log("");
+    }
+}
+//# sourceMappingURL=license-scan.js.map

package/dist/commands/license-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-scan.js","sourceRoot":"","sources":["../../src/commands/license-scan.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAmB5B,+EAA+E;AAE/E,MAAM,kBAAkB,GAAqF;IAC3G,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IAC5C,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IAC5C,cAAc,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IACvD,cAAc,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IACvD,YAAY,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IACrD,SAAS,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IAClD,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IAC/C,SAAS,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IAClD,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;IAC7C,SAAS,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACjD,SAAS,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACjD,UAAU,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAClD,cAAc,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACtD,cAAc,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACtD,eAAe,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACvD,UAAU,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzD,UAAU,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzD,SAAS,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxD,SAAS,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxD,SAAS,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;IACxD,UAAU,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;CAC1D,CAAC;AAEF,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACjF,CAAC;AAED,+EAA+E;AAE/E,SAAS,eAAe;IACtB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,4BAA4B;IAC5B,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;YAEhE,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClD,IAAI,OAAO,GAAG,SAAS,CAAC;gBAExB,oDAAoD;gBACpD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;gBAC9D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3B,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;wBAC7D,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;4BACvC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;wBAC3B,CAAC;6BAAM,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;4BAChC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;wBAChC,CAAC;6BAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;4BAC1C,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC5F,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,UAAU;oBACZ,CAAC;gBACH,CAAC;gBAED,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC;oBACX,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;oBAC9C,OAAO;oBACP,QAAQ;oBACR,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,QAAuB;IAC9C,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC;IAE1E,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,SAAS,CAAC,IAAI,CACZ,6BAA6B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,+CAA+C,CACrH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAE/E,MAAM,KAAK,GAAG,kBAAkB,CAAC;AAEjC,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;yCAYyB,KAAK;;;CAG7C,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,IAAI,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,UAAU;IACV,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAClF,IAAI,UAAU;QAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAEzE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;IACrF,IAAI,SAAS;QAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAE3E,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAkB;QAC5B,QAAQ;QACR,OAAO,EAAE;YACP,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,MAAM;YACtE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YAClE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC,MAAM;YAC3E,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,MAAM;YACxE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM;SACjE;QACD,SAAS;QACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,sBAAsB,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,CAAC,MAAM,eAAe,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAE3D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,KAAK,MAAM,CAAC,IAAI,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/org-policy.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Org policy — defines, validates, and enforces organization-wide
+ * policy manifests that cascade into per-repo .judgesrc files.
+ *
+ * All data stored locally.
+ */
+export declare function runOrgPolicy(argv: string[]): void;
+//# sourceMappingURL=org-policy.d.ts.map

package/dist/commands/org-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-policy.d.ts","sourceRoot":"","sources":["../../src/commands/org-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqHH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAiIjD"}

package/dist/commands/org-policy.js

@@ -0,0 +1,208 @@
+/**
+ * Org policy — defines, validates, and enforces organization-wide
+ * policy manifests that cascade into per-repo .judgesrc files.
+ *
+ * All data stored locally.
+ */
+import { existsSync, readFileSync, mkdirSync, writeFileSync } from "fs";
+import { join } from "path";
+// ─── Default Policy ─────────────────────────────────────────────────────────
+const DEFAULT_POLICY = {
+    name: "default",
+    version: "1.0.0",
+    minSeverity: "medium",
+    requiredJudges: [],
+    bannedRules: [],
+    maxSuppressionsPerRepo: 50,
+    requiredPreset: "",
+    enforcedOptions: {},
+    lastUpdated: new Date().toISOString(),
+};
+// ─── Compliance Check ───────────────────────────────────────────────────────
+function checkCompliance(policy) {
+    const violations = [];
+    const warnings = [];
+    // Check .judgesrc exists
+    if (!existsSync(".judgesrc")) {
+        violations.push("Missing .judgesrc configuration file");
+    }
+    else {
+        try {
+            const config = JSON.parse(readFileSync(".judgesrc", "utf-8"));
+            // Check min severity
+            if (policy.minSeverity) {
+                const sevOrder = ["critical", "high", "medium", "low", "info"];
+                const policyIdx = sevOrder.indexOf(policy.minSeverity);
+                const configIdx = sevOrder.indexOf(config.minSeverity || "low");
+                if (configIdx > policyIdx) {
+                    violations.push(`minSeverity '${config.minSeverity || "low"}' is less strict than policy requirement '${policy.minSeverity}'`);
+                }
+            }
+            // Check required judges
+            const disabledJudges = config.disabledJudges || [];
+            for (const required of policy.requiredJudges) {
+                if (disabledJudges.includes(required)) {
+                    violations.push(`Required judge '${required}' is disabled in .judgesrc`);
+                }
+            }
+            // Check banned rules
+            const enabledRules = config.ruleOverrides ? Object.keys(config.ruleOverrides) : [];
+            for (const banned of policy.bannedRules) {
+                if (enabledRules.includes(banned)) {
+                    warnings.push(`Banned rule '${banned}' has overrides in .judgesrc`);
+                }
+            }
+            // Check preset
+            if (policy.requiredPreset && config.preset !== policy.requiredPreset) {
+                violations.push(`Required preset '${policy.requiredPreset}' not configured (found: '${config.preset || "none"}')`);
+            }
+        }
+        catch {
+            violations.push("Invalid .judgesrc — cannot parse JSON");
+        }
+    }
+    // Check suppressions count
+    if (existsSync(".judges-suppressions.json")) {
+        try {
+            const supps = JSON.parse(readFileSync(".judges-suppressions.json", "utf-8"));
+            const count = Array.isArray(supps) ? supps.length : supps.suppressions?.length || 0;
+            if (count > policy.maxSuppressionsPerRepo) {
+                violations.push(`Suppressions count (${count}) exceeds policy limit (${policy.maxSuppressionsPerRepo})`);
+            }
+        }
+        catch {
+            /* skip */
+        }
+    }
+    return {
+        compliant: violations.length === 0,
+        violations,
+        warnings,
+        checkedAt: new Date().toISOString(),
+    };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+const STORE = ".judges-org-policy";
+export function runOrgPolicy(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges org-policy — Organization-wide policy management
+
+Usage:
+  judges org-policy --init
+  judges org-policy --check
+  judges org-policy --show
+  judges org-policy --set-required-judges "owasp-judge,crypto-judge"
+  judges org-policy --set-min-severity medium
+
+Options:
+  --init                Create default org policy file
+  --check               Check repo compliance against org policy
+  --show                Show current org policy
+  --set-required-judges Comma-separated list of required judge IDs
+  --set-banned-rules    Comma-separated list of banned rule IDs
+  --set-min-severity    Minimum severity level
+  --set-preset          Required preset name
+  --set-max-suppressions Maximum allowed suppressions per repo
+  --format json         JSON output
+  --help, -h            Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const policyPath = join(STORE, "org-policy.json");
+    // Init
+    if (argv.includes("--init")) {
+        if (!existsSync(STORE))
+            mkdirSync(STORE, { recursive: true });
+        if (existsSync(policyPath)) {
+            console.log("  Org policy already exists. Edit directly or use --set-* options.");
+            return;
+        }
+        writeFileSync(policyPath, JSON.stringify(DEFAULT_POLICY, null, 2));
+        console.log(`  Initialized org policy at ${policyPath}`);
+        return;
+    }
+    // Load policy
+    let policy;
+    if (existsSync(policyPath)) {
+        policy = JSON.parse(readFileSync(policyPath, "utf-8"));
+    }
+    else {
+        if (!argv.includes("--init")) {
+            console.log("  No org policy found. Run --init to create one.");
+            return;
+        }
+        policy = DEFAULT_POLICY;
+    }
+    // Set options
+    let modified = false;
+    const reqJudges = argv.find((_a, i) => argv[i - 1] === "--set-required-judges");
+    if (reqJudges) {
+        policy.requiredJudges = reqJudges.split(",");
+        modified = true;
+    }
+    const bannedRules = argv.find((_a, i) => argv[i - 1] === "--set-banned-rules");
+    if (bannedRules) {
+        policy.bannedRules = bannedRules.split(",");
+        modified = true;
+    }
+    const minSev = argv.find((_a, i) => argv[i - 1] === "--set-min-severity");
+    if (minSev) {
+        policy.minSeverity = minSev;
+        modified = true;
+    }
+    const preset = argv.find((_a, i) => argv[i - 1] === "--set-preset");
+    if (preset) {
+        policy.requiredPreset = preset;
+        modified = true;
+    }
+    const maxSupp = argv.find((_a, i) => argv[i - 1] === "--set-max-suppressions");
+    if (maxSupp) {
+        policy.maxSuppressionsPerRepo = parseInt(maxSupp, 10);
+        modified = true;
+    }
+    if (modified) {
+        policy.lastUpdated = new Date().toISOString();
+        if (!existsSync(STORE))
+            mkdirSync(STORE, { recursive: true });
+        writeFileSync(policyPath, JSON.stringify(policy, null, 2));
+        console.log("  Org policy updated.");
+    }
+    // Check compliance
+    if (argv.includes("--check")) {
+        const result = checkCompliance(policy);
+        if (format === "json") {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else {
+            console.log(`\n  Org Policy Compliance\n  ──────────────────────────`);
+            console.log(`  Status: ${result.compliant ? "✅ Compliant" : "❌ Non-compliant"}\n`);
+            for (const v of result.violations)
+                console.log(`    ❌ ${v}`);
+            for (const w of result.warnings)
+                console.log(`    ⚠️  ${w}`);
+            if (result.compliant && result.warnings.length === 0)
+                console.log(`    All checks passed`);
+            console.log("");
+        }
+        return;
+    }
+    // Show
+    if (argv.includes("--show") || !modified) {
+        if (format === "json") {
+            console.log(JSON.stringify(policy, null, 2));
+        }
+        else {
+            console.log(`\n  Org Policy: ${policy.name} v${policy.version}`);
+            console.log(`  ──────────────────────────`);
+            console.log(`    Min severity:       ${policy.minSeverity}`);
+            console.log(`    Required preset:    ${policy.requiredPreset || "(none)"}`);
+            console.log(`    Required judges:    ${policy.requiredJudges.length > 0 ? policy.requiredJudges.join(", ") : "(none)"}`);
+            console.log(`    Banned rules:       ${policy.bannedRules.length > 0 ? policy.bannedRules.join(", ") : "(none)"}`);
+            console.log(`    Max suppressions:   ${policy.maxSuppressionsPerRepo}`);
+            console.log(`    Last updated:       ${policy.lastUpdated}\n`);
+        }
+    }
+}
+//# sourceMappingURL=org-policy.js.map

package/dist/commands/org-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-policy.js","sourceRoot":"","sources":["../../src/commands/org-policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAuB5B,+EAA+E;AAE/E,MAAM,cAAc,GAAc;IAChC,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,QAAQ;IACrB,cAAc,EAAE,EAAE;IAClB,WAAW,EAAE,EAAE;IACf,sBAAsB,EAAE,EAAE;IAC1B,cAAc,EAAE,EAAE;IAClB,eAAe,EAAE,EAAE;IACnB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;CACtC,CAAC;AAEF,+EAA+E;AAE/E,SAAS,eAAe,CAAC,MAAiB;IACxC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,yBAAyB;IACzB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAE9D,qBAAqB;YACrB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC;gBAChE,IAAI,SAAS,GAAG,SAAS,EAAE,CAAC;oBAC1B,UAAU,CAAC,IAAI,CACb,gBAAgB,MAAM,CAAC,WAAW,IAAI,KAAK,6CAA6C,MAAM,CAAC,WAAW,GAAG,CAC9G,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,wBAAwB;YACxB,MAAM,cAAc,GAAa,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;YAC7D,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC7C,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtC,UAAU,CAAC,IAAI,CAAC,mBAAmB,QAAQ,4BAA4B,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,qBAAqB;YACrB,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxC,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,MAAM,8BAA8B,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;YAED,eAAe;YACf,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;gBACrE,UAAU,CAAC,IAAI,CACb,oBAAoB,MAAM,CAAC,cAAc,6BAA6B,MAAM,CAAC,MAAM,IAAI,MAAM,IAAI,CAClG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC,CAAC;YAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC;YACpF,IAAI,KAAK,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBAC1C,UAAU,CAAC,IAAI,CAAC,uBAAuB,KAAK,2BAA2B,MAAM,CAAC,sBAAsB,GAAG,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QAClC,UAAU;QACV,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,KAAK,GAAG,oBAAoB,CAAC;AAEnC,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;CAqBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAElD,OAAO;IACP,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,cAAc;IACd,IAAI,MAAiB,CAAC;IACtB,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,GAAG,cAAc,CAAC;IAC1B,CAAC;IAED,cAAc;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,uBAAuB,CAAC,CAAC;IAChG,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,oBAAoB,CAAC,CAAC;IAC/F,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,oBAAoB,CAAC,CAAC;IAC1F,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC;QAC5B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;IACpF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;QAC/B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,wBAAwB,CAAC,CAAC;IAC/F,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,sBAAsB,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtD,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,mBAAmB;IACnB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC;YACnF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU;gBAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO;IACP,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,cAAc,IAAI,QAAQ,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CACT,2BAA2B,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAC5G,CAAC;YACF,OAAO,CAAC,GAAG,CACT,2BAA2B,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CACtG,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/predict.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Predict — applies trend analysis to finding snapshots to
+ * forecast remediation timelines and regression-prone files.
+ *
+ * All data from local snapshot history.
+ */
+export declare function runPredict(argv: string[]): void;
+//# sourceMappingURL=predict.d.ts.map

package/dist/commands/predict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"predict.d.ts","sourceRoot":"","sources":["../../src/commands/predict.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuJH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAyG/C"}

package/dist/commands/predict.js

@@ -0,0 +1,219 @@
+/**
+ * Predict — applies trend analysis to finding snapshots to
+ * forecast remediation timelines and regression-prone files.
+ *
+ * All data from local snapshot history.
+ */
+import { existsSync, readFileSync, mkdirSync, writeFileSync } from "fs";
+import { join } from "path";
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function loadSnapshots() {
+    const paths = [
+        join(".judges-snapshots", "history.json"),
+        ".judges-snapshots.json",
+        join(".judges-burndown", "snapshots.json"),
+    ];
+    for (const p of paths) {
+        if (!existsSync(p))
+            continue;
+        try {
+            const data = JSON.parse(readFileSync(p, "utf-8"));
+            if (Array.isArray(data))
+                return data;
+            if (data.snapshots)
+                return data.snapshots;
+        }
+        catch {
+            /* skip */
+        }
+    }
+    return [];
+}
+function linearRegression(points) {
+    const n = points.length;
+    if (n < 2)
+        return { slope: 0, intercept: points[0]?.y || 0, r2: 0 };
+    const sumX = points.reduce((s, p) => s + p.x, 0);
+    const sumY = points.reduce((s, p) => s + p.y, 0);
+    const sumXY = points.reduce((s, p) => s + p.x * p.y, 0);
+    const sumX2 = points.reduce((s, p) => s + p.x * p.x, 0);
+    const sumY2 = points.reduce((s, p) => s + p.y * p.y, 0);
+    const denom = n * sumX2 - sumX * sumX;
+    if (denom === 0)
+        return { slope: 0, intercept: sumY / n, r2: 0 };
+    const slope = (n * sumXY - sumX * sumY) / denom;
+    const intercept = (sumY - slope * sumX) / n;
+    // R²
+    const yMean = sumY / n;
+    const ssTot = sumY2 - n * yMean * yMean;
+    const ssRes = points.reduce((s, p) => s + Math.pow(p.y - (slope * p.x + intercept), 2), 0);
+    const r2 = ssTot === 0 ? 0 : Math.max(0, 1 - ssRes / ssTot);
+    return { slope, intercept, r2 };
+}
+function predictMetric(snapshots, field) {
+    if (snapshots.length < 2) {
+        return {
+            metric: field,
+            currentValue: snapshots[0]?.[field] || 0,
+            trend: "stable",
+            ratePerDay: 0,
+            estimatedZeroDate: null,
+            confidence: 0,
+        };
+    }
+    const t0 = new Date(snapshots[0].timestamp).getTime();
+    const points = snapshots.map((s) => ({
+        x: (new Date(s.timestamp).getTime() - t0) / (1000 * 60 * 60 * 24), // days
+        y: s[field],
+    }));
+    const { slope, r2 } = linearRegression(points);
+    const current = points[points.length - 1].y;
+    let trend = "stable";
+    if (slope < -0.1)
+        trend = "decreasing";
+    else if (slope > 0.1)
+        trend = "increasing";
+    let estimatedZeroDate = null;
+    if (slope < 0 && current > 0) {
+        const daysToZero = -current / slope;
+        const zeroDate = new Date(Date.now() + daysToZero * 24 * 60 * 60 * 1000);
+        estimatedZeroDate = zeroDate.toISOString().split("T")[0];
+    }
+    return {
+        metric: field,
+        currentValue: current,
+        trend,
+        ratePerDay: Math.round(slope * 100) / 100,
+        estimatedZeroDate,
+        confidence: Math.round(r2 * 100),
+    };
+}
+function loadRegressionData() {
+    const paths = [".judges-regressions.json", join(".judges-regression-alert", "history.json")];
+    for (const p of paths) {
+        if (!existsSync(p))
+            continue;
+        try {
+            const data = JSON.parse(readFileSync(p, "utf-8"));
+            const files = Array.isArray(data) ? data : data.regressions || [];
+            const counts = new Map();
+            for (const r of files) {
+                const file = r.file || r.path || "unknown";
+                counts.set(file, (counts.get(file) || 0) + 1);
+            }
+            return [...counts.entries()]
+                .map(([file, count]) => ({
+                file,
+                regressionCount: count,
+                risk: count > 3 ? "high" : count > 1 ? "medium" : "low",
+            }))
+                .sort((a, b) => b.regressionCount - a.regressionCount);
+        }
+        catch {
+            /* skip */
+        }
+    }
+    return [];
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+const STORE = ".judges-predictions";
+export function runPredict(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges predict — Forecast remediation timelines and regression risk
+
+Usage:
+  judges predict
+  judges predict --metric critical
+  judges predict --regressions
+  judges predict --save
+
+Options:
+  --metric <name>       Predict specific metric (findings, critical, high, medium, low)
+  --regressions         Show regression-prone files prediction
+  --save                Save predictions to ${STORE}/
+  --format json         JSON output
+  --help, -h            Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const snapshots = loadSnapshots();
+    if (snapshots.length < 2 && !argv.includes("--regressions")) {
+        console.log("  Need at least 2 snapshots for predictions.");
+        console.log("  Run scans over time and they'll be recorded automatically.");
+        return;
+    }
+    // Single metric
+    const metricName = argv.find((_a, i) => argv[i - 1] === "--metric");
+    if (metricName) {
+        const pred = predictMetric(snapshots, metricName);
+        if (format === "json") {
+            console.log(JSON.stringify(pred, null, 2));
+        }
+        else {
+            console.log(`\n  Prediction: ${pred.metric}\n  ──────────────────────────`);
+            console.log(`    Current: ${pred.currentValue}`);
+            console.log(`    Trend: ${pred.trend} (${pred.ratePerDay >= 0 ? "+" : ""}${pred.ratePerDay}/day)`);
+            console.log(`    Confidence: ${pred.confidence}%`);
+            if (pred.estimatedZeroDate)
+                console.log(`    Estimated zero: ${pred.estimatedZeroDate}`);
+            console.log("");
+        }
+        return;
+    }
+    // Regressions
+    if (argv.includes("--regressions")) {
+        const regressions = loadRegressionData();
+        if (format === "json") {
+            console.log(JSON.stringify(regressions, null, 2));
+        }
+        else {
+            console.log(`\n  Regression-Prone Files\n  ──────────────────────────`);
+            if (regressions.length === 0) {
+                console.log(`    No regression data found.\n`);
+                return;
+            }
+            for (const r of regressions.slice(0, 15)) {
+                console.log(`    [${r.risk.toUpperCase().padEnd(6)}] ${r.file} (${r.regressionCount} regressions)`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    // Full prediction
+    const metrics = ["findings", "critical", "high", "medium", "low"];
+    const predictions = metrics.map((m) => predictMetric(snapshots, m));
+    const regressions = loadRegressionData();
+    const report = {
+        predictions,
+        regressionRisk: regressions.slice(0, 10),
+        timestamp: new Date().toISOString(),
+    };
+    if (argv.includes("--save")) {
+        if (!existsSync(STORE))
+            mkdirSync(STORE, { recursive: true });
+        writeFileSync(join(STORE, "prediction-report.json"), JSON.stringify(report, null, 2));
+        console.log(`  Saved to ${STORE}/prediction-report.json`);
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(report, null, 2));
+    }
+    else {
+        console.log(`\n  Prediction Report (${snapshots.length} snapshots)`);
+        console.log(`  ──────────────────────────`);
+        for (const p of predictions) {
+            const arrow = p.trend === "decreasing" ? "↓" : p.trend === "increasing" ? "↑" : "→";
+            const zero = p.estimatedZeroDate ? ` → zero by ${p.estimatedZeroDate}` : "";
+            console.log(`    ${p.metric.padEnd(12)} ${String(p.currentValue).padEnd(6)} ${arrow} ${p.ratePerDay >= 0 ? "+" : ""}${p.ratePerDay}/day  (${p.confidence}% conf)${zero}`);
+        }
+        if (regressions.length > 0) {
+            console.log(`\n  Regression-Prone Files:`);
+            for (const r of regressions.slice(0, 5)) {
+                console.log(`    [${r.risk.toUpperCase().padEnd(6)}] ${r.file}`);
+            }
+        }
+        console.log("");
+    }
+}
+//# sourceMappingURL=predict.js.map