@kevinrabun/judges 3.52.0 → 3.54.0

package/dist/commands/finding-contest.js

@@ -0,0 +1,193 @@
+/**
+ * Finding contest — gamified challenge mode where developers compete
+ * to fix the most findings in a codebase within a time window.
+ *
+ * Results stored locally in `.judges-contests/`.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
+import { join } from "path";
+// ─── Storage ────────────────────────────────────────────────────────────────
+const DATA_DIR = ".judges-contests";
+function ensureDir() {
+    if (!existsSync(DATA_DIR))
+        mkdirSync(DATA_DIR, { recursive: true });
+}
+function loadContest(id) {
+    const file = join(DATA_DIR, `${id}.json`);
+    if (!existsSync(file))
+        return null;
+    try {
+        return JSON.parse(readFileSync(file, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function saveContest(contest) {
+    ensureDir();
+    writeFileSync(join(DATA_DIR, `${contest.id}.json`), JSON.stringify(contest, null, 2));
+}
+function getActiveContest() {
+    ensureDir();
+    const indexFile = join(DATA_DIR, "active.json");
+    if (!existsSync(indexFile))
+        return null;
+    try {
+        const data = JSON.parse(readFileSync(indexFile, "utf-8"));
+        return loadContest(data.id);
+    }
+    catch {
+        return null;
+    }
+}
+function setActiveContest(id) {
+    ensureDir();
+    const indexFile = join(DATA_DIR, "active.json");
+    if (id)
+        writeFileSync(indexFile, JSON.stringify({ id }));
+    else if (existsSync(indexFile))
+        writeFileSync(indexFile, "{}");
+}
+// ─── Scoring ────────────────────────────────────────────────────────────────
+const SEVERITY_POINTS = { critical: 10, high: 5, medium: 3, low: 1 };
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingContest(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-contest — Gamified fix challenge
+
+Usage:
+  judges finding-contest --start --duration 60 --findings 25
+  judges finding-contest --fix --participant "alice" --rule SEC-001 --severity high
+  judges finding-contest --leaderboard
+  judges finding-contest --end
+
+Options:
+  --start               Start a new contest
+  --duration <min>      Contest duration in minutes (default: 60)
+  --findings <n>        Initial finding count (default: 20)
+  --fix                 Record a fix
+  --participant <name>  Participant name
+  --rule <id>           Rule ID that was fixed
+  --severity <level>    Severity of the fixed finding
+  --leaderboard         Show current leaderboard
+  --end                 End active contest and show final results
+  --format json         JSON output
+  --help, -h            Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const isStart = argv.includes("--start");
+    const isFix = argv.includes("--fix");
+    const isLeaderboard = argv.includes("--leaderboard");
+    const isEnd = argv.includes("--end");
+    if (isStart) {
+        const duration = parseInt(argv.find((_a, i) => argv[i - 1] === "--duration") || "60");
+        const findings = parseInt(argv.find((_a, i) => argv[i - 1] === "--findings") || "20");
+        const now = new Date();
+        const contest = {
+            id: `contest-${Date.now()}`,
+            durationMinutes: duration,
+            startedAt: now.toISOString(),
+            endsAt: new Date(now.getTime() + duration * 60000).toISOString(),
+            status: "active",
+            initialFindings: findings,
+            entries: [],
+        };
+        saveContest(contest);
+        setActiveContest(contest.id);
+        console.log(`\n  🏁 Contest Started!`);
+        console.log(`  ──────────────────────────`);
+        console.log(`    ID: ${contest.id}`);
+        console.log(`    Duration: ${duration} minutes`);
+        console.log(`    Findings to fix: ${findings}`);
+        console.log(`    Ends at: ${contest.endsAt}`);
+        console.log(`\n    Use: judges finding-contest --fix --participant "name" --rule RULE-ID --severity level\n`);
+        return;
+    }
+    if (isFix) {
+        const contest = getActiveContest();
+        if (!contest || contest.status !== "active") {
+            console.error("  No active contest. Use --start to begin one.");
+            return;
+        }
+        // Check if contest has expired
+        if (new Date() > new Date(contest.endsAt)) {
+            contest.status = "completed";
+            saveContest(contest);
+            setActiveContest(null);
+            console.log("  ⏰ Contest has ended! Use --leaderboard to see results.");
+            return;
+        }
+        const participant = argv.find((_a, i) => argv[i - 1] === "--participant") || "";
+        const ruleId = argv.find((_a, i) => argv[i - 1] === "--rule") || "unknown";
+        const severity = argv.find((_a, i) => argv[i - 1] === "--severity") || "medium";
+        if (!participant) {
+            console.error("  --participant is required");
+            return;
+        }
+        let entry = contest.entries.find((e) => e.participant === participant);
+        if (!entry) {
+            entry = { participant, fixCount: 0, sevPoints: 0, startedAt: new Date().toISOString(), fixes: [] };
+            contest.entries.push(entry);
+        }
+        const points = SEVERITY_POINTS[severity] || 3;
+        entry.fixCount++;
+        entry.sevPoints += points;
+        entry.fixes.push({ ruleId, severity, fixedAt: new Date().toISOString() });
+        saveContest(contest);
+        console.log(`  ✅ ${participant} fixed ${ruleId} [${severity}] — +${points} points (total: ${entry.sevPoints})`);
+        return;
+    }
+    if (isLeaderboard || isEnd) {
+        const contest = getActiveContest() ||
+            (() => {
+                // Try to find latest completed contest
+                ensureDir();
+                return null;
+            })();
+        if (!contest) {
+            console.error("  No contest found. Use --start to begin one.");
+            return;
+        }
+        if (isEnd && contest.status === "active") {
+            contest.status = "completed";
+            saveContest(contest);
+            setActiveContest(null);
+        }
+        const sorted = [...contest.entries].sort((a, b) => b.sevPoints - a.sevPoints);
+        const totalFixed = sorted.reduce((s, e) => s + e.fixCount, 0);
+        if (format === "json") {
+            console.log(JSON.stringify({
+                contest: { id: contest.id, status: contest.status, duration: contest.durationMinutes },
+                leaderboard: sorted,
+                totalFixed,
+                timestamp: new Date().toISOString(),
+            }, null, 2));
+        }
+        else {
+            const statusIcon = contest.status === "active" ? "🟢 ACTIVE" : "🏁 COMPLETED";
+            console.log(`\n  Finding Contest ${statusIcon}\n  ──────────────────────────`);
+            console.log(`  ID: ${contest.id} | Duration: ${contest.durationMinutes}m | Findings: ${contest.initialFindings} → ${contest.initialFindings - totalFixed}\n`);
+            if (sorted.length === 0) {
+                console.log("    No fixes recorded yet!");
+            }
+            else {
+                for (let i = 0; i < sorted.length; i++) {
+                    const e = sorted[i];
+                    const medal = i === 0 ? "🥇" : i === 1 ? "🥈" : i === 2 ? "🥉" : "  ";
+                    console.log(`    ${medal} ${e.participant.padEnd(20)} ${String(e.sevPoints).padStart(5)} pts | ${e.fixCount} fixes`);
+                }
+            }
+            if (contest.status === "active") {
+                const remaining = Math.max(0, Math.floor((new Date(contest.endsAt).getTime() - Date.now()) / 60000));
+                console.log(`\n    ⏱️ ${remaining} minutes remaining`);
+            }
+            console.log("");
+        }
+        return;
+    }
+    console.log("  Use --start, --fix, --leaderboard, or --end. See --help for details.");
+}
+//# sourceMappingURL=finding-contest.js.map

package/dist/commands/finding-contest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-contest.js","sourceRoot":"","sources":["../../src/commands/finding-contest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAsB5B,+EAA+E;AAE/E,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AAEpC,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,SAAS,EAAE,CAAC;IACZ,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,gBAAgB;IACvB,SAAS,EAAE,CAAC;IACZ,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAiB;IACzC,SAAS,EAAE,CAAC;IACZ,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChD,IAAI,EAAE;QAAE,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;SACpD,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,+EAA+E;AAE/E,MAAM,eAAe,GAA2B,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AAE7F,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;CAqBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC;QACtG,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC;QAEtG,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAY;YACvB,EAAE,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE;YAC3B,eAAe,EAAE,QAAQ;YACzB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;YAC5B,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;YAChE,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,QAAQ;YACzB,OAAO,EAAE,EAAE;SACZ,CAAC;QAEF,WAAW,CAAC,OAAO,CAAC,CAAC;QACrB,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE7B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,UAAU,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,gGAAgG,CAAC,CAAC;QAC9G,OAAO;IACT,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,IAAI,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;YAC7B,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QAChG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,SAAS,CAAC;QAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,QAAQ,CAAC;QAEhG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACnG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjB,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAE1E,WAAW,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,OAAO,WAAW,UAAU,MAAM,KAAK,QAAQ,QAAQ,MAAM,mBAAmB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAChH,OAAO;IACT,CAAC;IAED,IAAI,aAAa,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GACX,gBAAgB,EAAE;YAClB,CAAC,GAAG,EAAE;gBACJ,uCAAuC;gBACvC,SAAS,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,EAAE,CAAC;QAEP,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,IAAI,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;YAC7B,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAE9D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,EAAE;gBACtF,WAAW,EAAE,MAAM;gBACnB,UAAU;gBACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,gCAAgC,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,CACT,SAAS,OAAO,CAAC,EAAE,gBAAgB,OAAO,CAAC,eAAe,iBAAiB,OAAO,CAAC,eAAe,MAAM,OAAO,CAAC,eAAe,GAAG,UAAU,IAAI,CACjJ,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC5C,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;oBACpB,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;oBACtE,OAAO,CAAC,GAAG,CACT,OAAO,KAAK,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,QAAQ,CACxG,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;gBACrG,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,oBAAoB,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;AACxF,CAAC"}

package/dist/commands/habit-tracker.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Habit tracker — track recurring finding patterns per developer or
+ * AI model and surface personalized improvement suggestions.
+ *
+ * Data stored locally in `.judges-habits/`.
+ */
+export declare function runHabitTracker(argv: string[]): void;
+//# sourceMappingURL=habit-tracker.d.ts.map

package/dist/commands/habit-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"habit-tracker.d.ts","sourceRoot":"","sources":["../../src/commands/habit-tracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsGH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAoIpD"}

package/dist/commands/habit-tracker.js

@@ -0,0 +1,195 @@
+/**
+ * Habit tracker — track recurring finding patterns per developer or
+ * AI model and surface personalized improvement suggestions.
+ *
+ * Data stored locally in `.judges-habits/`.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
+import { join } from "path";
+// ─── Storage ────────────────────────────────────────────────────────────────
+const DATA_DIR = ".judges-habits";
+function ensureDir() {
+    if (!existsSync(DATA_DIR))
+        mkdirSync(DATA_DIR, { recursive: true });
+}
+function loadProfile(author) {
+    const file = join(DATA_DIR, `${author}.json`);
+    if (!existsSync(file))
+        return null;
+    try {
+        return JSON.parse(readFileSync(file, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function saveProfile(profile) {
+    ensureDir();
+    writeFileSync(join(DATA_DIR, `${profile.author}.json`), JSON.stringify(profile, null, 2));
+}
+// ─── Learning Resources ────────────────────────────────────────────────────
+const CATEGORY_RESOURCES = {
+    "sql-injection": [
+        "Use parameterized queries",
+        "Review OWASP SQL Injection Prevention Cheat Sheet",
+        "Enable SQL linting in CI",
+    ],
+    xss: [
+        "Sanitize all user input before rendering",
+        "Use Content Security Policy headers",
+        "Review OWASP XSS Prevention Cheat Sheet",
+    ],
+    "hardcoded-secret": [
+        "Use environment variables for secrets",
+        "Set up a secrets manager",
+        "Add secret scanning to pre-commit hooks",
+    ],
+    "empty-catch": [
+        "Always log or re-throw caught exceptions",
+        "Use error monitoring (Sentry, etc.)",
+        "Define error handling strategy per module",
+    ],
+    "missing-auth": [
+        "Apply auth middleware to all routes",
+        "Review OWASP Authentication Cheat Sheet",
+        "Implement role-based access control",
+    ],
+    "insecure-crypto": [
+        "Use crypto.randomUUID() for tokens",
+        "Use bcrypt/scrypt for password hashing",
+        "Never use MD5 or SHA1 for security",
+    ],
+    "error-handling": [
+        "Define a consistent error hierarchy",
+        "Use Result types or Either monads",
+        "Log errors with correlation IDs",
+    ],
+    performance: ["Profile before optimizing", "Use pagination for list endpoints", "Cache frequently accessed data"],
+    "code-quality": [
+        "Follow single responsibility principle",
+        "Reduce cyclomatic complexity",
+        "Write meaningful test names",
+    ],
+    documentation: ["Keep JSDoc in sync with code", "Document public API contracts", "Add examples to complex functions"],
+};
+function getResources(category) {
+    const key = Object.keys(CATEGORY_RESOURCES).find((k) => category.toLowerCase().includes(k));
+    return key
+        ? CATEGORY_RESOURCES[key]
+        : ["Review team coding standards", "Add targeted linting rules", "Consider pair programming for this area"];
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runHabitTracker(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges habit-tracker — Track recurring finding patterns
+
+Usage:
+  judges habit-tracker --record --author "alice" --category "sql-injection"
+  judges habit-tracker --record --author "copilot" --category "empty-catch" --count 3
+  judges habit-tracker --show --author "alice"
+  judges habit-tracker --digest --author "alice"
+
+Options:
+  --record              Record finding occurrence
+  --author <name>       Developer or AI model name
+  --category <name>     Finding category (e.g., sql-injection, xss, empty-catch)
+  --count <n>           Number of occurrences (default: 1)
+  --show                Show author's habit profile
+  --digest              Show improvement digest with resources
+  --format json         JSON output
+  --help, -h            Show this help
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const isRecord = argv.includes("--record");
+    const isDigest = argv.includes("--digest");
+    const authorName = argv.find((_a, i) => argv[i - 1] === "--author") || "";
+    const category = argv.find((_a, i) => argv[i - 1] === "--category") || "";
+    const count = parseInt(argv.find((_a, i) => argv[i - 1] === "--count") || "1");
+    if (!authorName) {
+        console.error("  --author is required");
+        return;
+    }
+    if (isRecord) {
+        if (!category) {
+            console.error("  --category is required for --record");
+            return;
+        }
+        const profile = loadProfile(authorName) || {
+            author: authorName,
+            entries: [],
+            totalFindings: 0,
+            topCategory: "",
+            lastUpdated: "",
+        };
+        let entry = profile.entries.find((e) => e.category === category);
+        if (!entry) {
+            entry = { category, count: 0, lastSeen: "", trend: "stable", resources: getResources(category) };
+            profile.entries.push(entry);
+        }
+        const prevCount = entry.count;
+        entry.count += count;
+        entry.lastSeen = new Date().toISOString();
+        entry.trend = entry.count > prevCount * 1.5 ? "rising" : entry.count < prevCount * 0.7 ? "declining" : "stable";
+        profile.totalFindings += count;
+        profile.topCategory = profile.entries.sort((a, b) => b.count - a.count)[0]?.category || "";
+        profile.lastUpdated = new Date().toISOString();
+        saveProfile(profile);
+        console.log(`  ✅ Recorded ${count}x ${category} for ${authorName} (total: ${entry.count})`);
+        return;
+    }
+    if (isDigest) {
+        const profile = loadProfile(authorName);
+        if (!profile || profile.entries.length === 0) {
+            console.log(`  No data for ${authorName}. Use --record to add findings.`);
+            return;
+        }
+        const sorted = [...profile.entries].sort((a, b) => b.count - a.count);
+        const top3 = sorted.slice(0, 3);
+        if (format === "json") {
+            console.log(JSON.stringify({
+                author: authorName,
+                digest: top3,
+                totalFindings: profile.totalFindings,
+                timestamp: new Date().toISOString(),
+            }, null, 2));
+        }
+        else {
+            console.log(`\n  Weekly Improvement Digest for ${authorName}\n  ──────────────────────────`);
+            console.log(`  Total findings: ${profile.totalFindings} across ${profile.entries.length} categories\n`);
+            for (const entry of top3) {
+                const trendIcon = entry.trend === "rising" ? "📈" : entry.trend === "declining" ? "📉" : "➡️";
+                console.log(`    ${trendIcon} ${entry.category} — ${entry.count} occurrences (${entry.trend})`);
+                console.log("        Suggested improvements:");
+                for (const r of entry.resources) {
+                    console.log(`          • ${r}`);
+                }
+                console.log("");
+            }
+        }
+        return;
+    }
+    // Default: show profile
+    const profile = loadProfile(authorName);
+    if (!profile || profile.entries.length === 0) {
+        console.log(`  No data for ${authorName}. Use --record to add findings.`);
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(profile, null, 2));
+    }
+    else {
+        console.log(`\n  Habit Profile: ${authorName}\n  ──────────────────────────`);
+        console.log(`  Total: ${profile.totalFindings} | Categories: ${profile.entries.length} | Top: ${profile.topCategory}\n`);
+        const sorted = [...profile.entries].sort((a, b) => b.count - a.count);
+        for (const entry of sorted) {
+            const bar = "█".repeat(Math.min(20, Math.floor((entry.count / Math.max(1, profile.totalFindings)) * 40)));
+            const trendIcon = entry.trend === "rising" ? "↑" : entry.trend === "declining" ? "↓" : "→";
+            console.log(`    ${entry.category.padEnd(25)} ${String(entry.count).padStart(4)} ${bar} ${trendIcon}`);
+        }
+        console.log("");
+    }
+}
+//# sourceMappingURL=habit-tracker.js.map

package/dist/commands/habit-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"habit-tracker.js","sourceRoot":"","sources":["../../src/commands/habit-tracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAoB5B,+EAA+E;AAE/E,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAElC,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB;IACzC,SAAS,EAAE,CAAC;IACZ,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,8EAA8E;AAE9E,MAAM,kBAAkB,GAA6B;IACnD,eAAe,EAAE;QACf,2BAA2B;QAC3B,mDAAmD;QACnD,0BAA0B;KAC3B;IACD,GAAG,EAAE;QACH,0CAA0C;QAC1C,qCAAqC;QACrC,yCAAyC;KAC1C;IACD,kBAAkB,EAAE;QAClB,uCAAuC;QACvC,0BAA0B;QAC1B,yCAAyC;KAC1C;IACD,aAAa,EAAE;QACb,0CAA0C;QAC1C,qCAAqC;QACrC,2CAA2C;KAC5C;IACD,cAAc,EAAE;QACd,qCAAqC;QACrC,yCAAyC;QACzC,qCAAqC;KACtC;IACD,iBAAiB,EAAE;QACjB,oCAAoC;QACpC,wCAAwC;QACxC,oCAAoC;KACrC;IACD,gBAAgB,EAAE;QAChB,qCAAqC;QACrC,mCAAmC;QACnC,iCAAiC;KAClC;IACD,WAAW,EAAE,CAAC,2BAA2B,EAAE,mCAAmC,EAAE,gCAAgC,CAAC;IACjH,cAAc,EAAE;QACd,wCAAwC;QACxC,8BAA8B;QAC9B,6BAA6B;KAC9B;IACD,aAAa,EAAE,CAAC,8BAA8B,EAAE,+BAA+B,EAAE,mCAAmC,CAAC;CACtH,CAAC;AAEF,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,GAAG;QACR,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC;QACzB,CAAC,CAAC,CAAC,8BAA8B,EAAE,4BAA4B,EAAE,yCAAyC,CAAC,CAAC;AAChH,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;IAC1F,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;IAE/F,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI;YACzC,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,EAAE;YACX,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,EAAE;SAChB,CAAC;QACF,IAAI,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;QAC9B,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACrB,KAAK,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;QAEhH,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;QAC/B,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;QAC3F,OAAO,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE/C,WAAW,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,KAAK,QAAQ,QAAQ,UAAU,YAAY,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,iBAAiB,UAAU,iCAAiC,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;gBACE,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,IAAI;gBACZ,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,qCAAqC,UAAU,gCAAgC,CAAC,CAAC;YAC7F,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,aAAa,WAAW,OAAO,CAAC,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;YAExG,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9F,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,IAAI,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,KAAK,iBAAiB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;gBAChG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBAC/C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBAChC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,iBAAiB,UAAU,iCAAiC,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,gCAAgC,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CACT,YAAY,OAAO,CAAC,aAAa,kBAAkB,OAAO,CAAC,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,WAAW,IAAI,CAC5G,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1G,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3F,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/prompt-replay.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Prompt replay — reverse-engineer the probable AI prompt that generated
+ * flagged code and suggest improved prompts that produce compliant output.
+ *
+ * Turns Judges into a prompt engineering coach.
+ */
+export declare function runPromptReplay(argv: string[]): void;
+//# sourceMappingURL=prompt-replay.d.ts.map

package/dist/commands/prompt-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-replay.d.ts","sourceRoot":"","sources":["../../src/commands/prompt-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA+IH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsEpD"}

package/dist/commands/prompt-replay.js

@@ -0,0 +1,177 @@
+/**
+ * Prompt replay — reverse-engineer the probable AI prompt that generated
+ * flagged code and suggest improved prompts that produce compliant output.
+ *
+ * Turns Judges into a prompt engineering coach.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── Pattern → Prompt Map ───────────────────────────────────────────────────
+const PATTERN_PROMPTS = [
+    {
+        pattern: /sql.?inject|string\s+concat.*query|`\$\{.*\}.*(?:SELECT|INSERT|UPDATE|DELETE)/i,
+        category: "SQL Injection",
+        probablePrompt: "Generate a function to query the database for user records",
+        improvedPrompt: "Generate a function to query the database for user records using parameterized queries. Use prepared statements, never string concatenation for SQL. Include input validation.",
+        rationale: "AI models default to string interpolation for SQL unless explicitly told to use parameterized queries",
+    },
+    {
+        pattern: /innerHTML|dangerouslySetInnerHTML|document\.write/i,
+        category: "XSS Vulnerability",
+        probablePrompt: "Create a component that renders user content",
+        improvedPrompt: "Create a component that renders user content. Sanitize all user inputs using DOMPurify before rendering. Never use innerHTML or dangerouslySetInnerHTML with unsanitized data.",
+        rationale: "AI models use innerHTML for simplicity unless instructed to sanitize",
+    },
+    {
+        pattern: /hardcoded.?(secret|password|key|token)|['"][A-Za-z0-9+/]{20,}['"]/i,
+        category: "Hardcoded Secrets",
+        probablePrompt: "Set up API authentication with the service",
+        improvedPrompt: "Set up API authentication with the service. Read all secrets from environment variables or a secrets manager. Never hardcode API keys, passwords, or tokens in source code.",
+        rationale: "AI models often embed placeholder credentials that developers forget to replace",
+    },
+    {
+        pattern: /eval\s*\(|new\s+Function\s*\(/i,
+        category: "Code Injection via eval",
+        probablePrompt: "Create a dynamic expression evaluator",
+        improvedPrompt: "Create a dynamic expression evaluator. Do NOT use eval() or new Function(). Use a safe expression parser library (e.g., mathjs, expr-eval) or a whitelist-based approach.",
+        rationale: "AI models reach for eval() as the shortest path to dynamic execution",
+    },
+    {
+        pattern: /catch\s*\([^)]*\)\s*\{\s*\}/,
+        category: "Empty Catch Blocks",
+        probablePrompt: "Add error handling to this function",
+        improvedPrompt: "Add error handling to this function. Every catch block must either log the error, re-throw it, or return a meaningful error response. Never swallow exceptions silently.",
+        rationale: "AI models often add empty try/catch to 'handle errors' without actual handling",
+    },
+    {
+        pattern: /console\.(log|debug)\s*\(.*(?:password|token|secret|key|credential)/i,
+        category: "Sensitive Data Logging",
+        probablePrompt: "Add logging to track authentication flow",
+        improvedPrompt: "Add logging to track authentication flow. Never log passwords, tokens, secrets, or PII. Use structured logging with severity levels. Redact sensitive fields.",
+        rationale: "AI models log everything requested without considering data sensitivity",
+    },
+    {
+        pattern: /(?:http:\/\/|fetch\s*\(['"]http:)/i,
+        category: "Insecure HTTP",
+        probablePrompt: "Fetch data from the API endpoint",
+        improvedPrompt: "Fetch data from the API endpoint using HTTPS. Never use plain HTTP for API calls. Validate SSL certificates. Set appropriate timeouts.",
+        rationale: "AI models sometimes use http:// in examples without upgrading to https://",
+    },
+    {
+        pattern: /Math\.random\s*\(\)|crypto\.createHash\s*\(\s*['"]md5['"]\)/i,
+        category: "Weak Cryptography",
+        probablePrompt: "Generate a unique token/hash for the user session",
+        improvedPrompt: "Generate a unique token for the user session using crypto.randomUUID() or crypto.randomBytes(). For hashing, use SHA-256 or bcrypt. Never use Math.random() for security or MD5 for hashing.",
+        rationale: "AI models default to Math.random() or MD5 which are cryptographically insecure",
+    },
+    {
+        pattern: /\.exec\s*\(|child_process|spawn\s*\(.*\$|execSync\s*\(.*\+/i,
+        category: "Command Injection",
+        probablePrompt: "Execute a system command with user-provided parameters",
+        improvedPrompt: "Execute a system command with user-provided parameters. Use an allowlist of permitted commands. Pass arguments as an array (spawn), never via string concatenation. Validate and sanitize all inputs.",
+        rationale: "AI models concatenate user input into shell commands without sanitization",
+    },
+    {
+        pattern: /cors\(\s*\)|Access-Control-Allow-Origin.*\*/i,
+        category: "Permissive CORS",
+        probablePrompt: "Enable CORS for the API",
+        improvedPrompt: "Enable CORS for the API. Specify allowed origins explicitly (never use '*' in production). Set appropriate methods, headers, and credentials options.",
+        rationale: "AI models default to permissive CORS (allow all) for simplicity",
+    },
+    {
+        pattern: /(?:app|router)\.(get|post|put|delete)\s*\([^)]*(?!.*(?:auth|middleware|protect|guard))/i,
+        category: "Missing Auth Middleware",
+        probablePrompt: "Create REST API endpoints for the resource",
+        improvedPrompt: "Create REST API endpoints for the resource. Apply authentication middleware to all routes. Use authorization checks for role-based access. Apply rate limiting to prevent abuse.",
+        rationale: "AI models create routes without auth middleware unless explicitly instructed",
+    },
+    {
+        pattern: /(?:SELECT|INSERT|UPDATE|DELETE)\s+.*\*\s+FROM/i,
+        category: "SELECT * Usage",
+        probablePrompt: "Query all records from the table",
+        improvedPrompt: "Query records from the table. Select only the specific columns needed, never use SELECT *. Add pagination with LIMIT/OFFSET. Include proper WHERE clauses.",
+        rationale: "AI models use SELECT * for convenience, which exposes unnecessary data and hurts performance",
+    },
+];
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function analyzeCode(content) {
+    const suggestions = [];
+    const seen = new Set();
+    for (const entry of PATTERN_PROMPTS) {
+        if (entry.pattern.test(content) && !seen.has(entry.category)) {
+            seen.add(entry.category);
+            suggestions.push({
+                findingPattern: entry.category,
+                probablePrompt: entry.probablePrompt,
+                improvedPrompt: entry.improvedPrompt,
+                rationale: entry.rationale,
+            });
+        }
+    }
+    return suggestions;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runPromptReplay(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges prompt-replay — Reverse-engineer AI prompts and suggest improvements
+
+Usage:
+  judges prompt-replay <file>
+  judges prompt-replay src/api.ts --format json
+  judges prompt-replay --demo
+
+Options:
+  <file>               File to analyze for AI-generated anti-patterns
+  --demo               Run with built-in demo code
+  --format json        JSON output
+  --help, -h           Show this help
+
+Detects AI-generated anti-patterns and suggests improved prompts that
+would produce compliant code on the first try.
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const isDemo = argv.includes("--demo");
+    let content;
+    if (isDemo) {
+        content = `
+const query = "SELECT * FROM users WHERE id = " + userId;
+document.innerHTML = userInput;
+const apiKey = "sk-1234567890abcdef";
+try { riskyOperation(); } catch (e) {}
+console.log("Auth token: " + token);
+fetch("http://api.example.com/data");
+const sessionId = Math.random().toString(36);
+app.get("/admin/users", (req, res) => { res.json(users); });
+`;
+    }
+    else {
+        const file = argv.find((a) => !a.startsWith("-")) || "";
+        if (!file || !existsSync(file)) {
+            console.error("  Specify a file to analyze or use --demo");
+            return;
+        }
+        content = readFileSync(file, "utf-8");
+    }
+    const suggestions = analyzeCode(content);
+    if (format === "json") {
+        console.log(JSON.stringify({ suggestions, total: suggestions.length, timestamp: new Date().toISOString() }, null, 2));
+    }
+    else {
+        console.log(`\n  Prompt Replay — ${suggestions.length} AI prompt improvement(s) found\n  ──────────────────────────`);
+        if (suggestions.length === 0) {
+            console.log("  ✅ No common AI anti-patterns detected");
+        }
+        else {
+            for (const s of suggestions) {
+                console.log(`\n    🔍 ${s.findingPattern}`);
+                console.log(`        Probable AI prompt: "${s.probablePrompt}"`);
+                console.log(`        💡 Improved prompt:  "${s.improvedPrompt}"`);
+                console.log(`        📝 ${s.rationale}`);
+            }
+        }
+        console.log("");
+    }
+}
+//# sourceMappingURL=prompt-replay.js.map

package/dist/commands/prompt-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-replay.js","sourceRoot":"","sources":["../../src/commands/prompt-replay.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAW9C,+EAA+E;AAE/E,MAAM,eAAe,GAMhB;IACH;QACE,OAAO,EAAE,gFAAgF;QACzF,QAAQ,EAAE,eAAe;QACzB,cAAc,EAAE,4DAA4D;QAC5E,cAAc,EACZ,gLAAgL;QAClL,SAAS,EAAE,uGAAuG;KACnH;IACD;QACE,OAAO,EAAE,oDAAoD;QAC7D,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,8CAA8C;QAC9D,cAAc,EACZ,gLAAgL;QAClL,SAAS,EAAE,sEAAsE;KAClF;IACD;QACE,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,4CAA4C;QAC5D,cAAc,EACZ,6KAA6K;QAC/K,SAAS,EAAE,iFAAiF;KAC7F;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,yBAAyB;QACnC,cAAc,EAAE,uCAAuC;QACvD,cAAc,EACZ,2KAA2K;QAC7K,SAAS,EAAE,sEAAsE;KAClF;IACD;QACE,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,oBAAoB;QAC9B,cAAc,EAAE,qCAAqC;QACrD,cAAc,EACZ,0KAA0K;QAC5K,SAAS,EAAE,gFAAgF;KAC5F;IACD;QACE,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,wBAAwB;QAClC,cAAc,EAAE,0CAA0C;QAC1D,cAAc,EACZ,+JAA+J;QACjK,SAAS,EAAE,yEAAyE;KACrF;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,eAAe;QACzB,cAAc,EAAE,kCAAkC;QAClD,cAAc,EACZ,wIAAwI;QAC1I,SAAS,EAAE,2EAA2E;KACvF;IACD;QACE,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,mDAAmD;QACnE,cAAc,EACZ,8LAA8L;QAChM,SAAS,EAAE,gFAAgF;KAC5F;IACD;QACE,OAAO,EAAE,6DAA6D;QACtE,QAAQ,EAAE,mBAAmB;QAC7B,cAAc,EAAE,wDAAwD;QACxE,cAAc,EACZ,uMAAuM;QACzM,SAAS,EAAE,2EAA2E;KACvF;IACD;QACE,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,iBAAiB;QAC3B,cAAc,EAAE,yBAAyB;QACzC,cAAc,EACZ,uJAAuJ;QACzJ,SAAS,EAAE,iEAAiE;KAC7E;IACD;QACE,OAAO,EAAE,yFAAyF;QAClG,QAAQ,EAAE,yBAAyB;QACnC,cAAc,EAAE,4CAA4C;QAC5D,cAAc,EACZ,kLAAkL;QACpL,SAAS,EAAE,8EAA8E;KAC1F;IACD;QACE,OAAO,EAAE,gDAAgD;QACzD,QAAQ,EAAE,gBAAgB;QAC1B,cAAc,EAAE,kCAAkC;QAClD,cAAc,EACZ,4JAA4J;QAC9J,SAAS,EAAE,8FAA8F;KAC1G;CACF,CAAC;AAEF,+EAA+E;AAE/E,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC;gBACf,cAAc,EAAE,KAAK,CAAC,QAAQ;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,OAAe,CAAC;IAEpB,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG;;;;;;;;;CASb,CAAC;IACA,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CACzG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,uBAAuB,WAAW,CAAC,MAAM,+DAA+D,CACzG,CAAC;QAEF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;gBAClE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/refactor-safety.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Refactor safety — analyze proposed refactorings for breaking changes,
+ * incomplete migrations, orphaned references, and behavioral changes.
+ *
+ * Compares two directory snapshots or a list of changed files against
+ * the broader codebase to detect incomplete refactors.
+ */
+export declare function runRefactorSafety(argv: string[]): void;
+//# sourceMappingURL=refactor-safety.d.ts.map

package/dist/commands/refactor-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refactor-safety.d.ts","sourceRoot":"","sources":["../../src/commands/refactor-safety.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA4NH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA4EtD"}