@kevinrabun/judges 3.60.0 → 3.61.0

package/dist/commands/quick-check.js

@@ -0,0 +1,174 @@
+/**
+ * Quick-check — sub-100ms pattern-only review for real-time save-on-type feedback.
+ */
+import { readFileSync, statSync } from "fs";
+import { extname } from "path";
+const PATTERNS = [
+    // Critical
+    { regex: /\beval\s*\(/, rule: "QC-INJECT-01", severity: "critical", message: "eval() usage — code injection risk" },
+    {
+        regex: /(?:password|secret|api[_-]?key)\s*[:=]\s*['"][^'"]{4,}['"]/,
+        rule: "QC-SECRET-01",
+        severity: "critical",
+        message: "Hardcoded credential detected",
+    },
+    { regex: /\.innerHTML\s*=/, rule: "QC-XSS-01", severity: "critical", message: "innerHTML assignment — XSS risk" },
+    {
+        regex: /new\s+Function\s*\(/,
+        rule: "QC-INJECT-02",
+        severity: "critical",
+        message: "new Function() — code injection risk",
+    },
+    // High
+    {
+        regex: /new\s+Buffer\s*\(/,
+        rule: "QC-DEPR-01",
+        severity: "high",
+        message: "Deprecated new Buffer() — use Buffer.from()",
+    },
+    {
+        regex: /(?:setTimeout|setInterval)\s*\(\s*['"]/,
+        rule: "QC-INJECT-03",
+        severity: "high",
+        message: "String passed to timer — implicit eval",
+    },
+    {
+        regex: /process\.exit\s*\(\s*\)/,
+        rule: "QC-RELIAB-01",
+        severity: "high",
+        message: "Unconditional process.exit() — may crash graceful shutdown",
+    },
+    {
+        regex: /document\.write\s*\(/,
+        rule: "QC-XSS-02",
+        severity: "high",
+        message: "document.write() — XSS and DOM clobbering risk",
+    },
+    // Medium
+    {
+        regex: /catch\s*\(\s*\w*\s*\)\s*\{\s*\}/,
+        rule: "QC-ERR-01",
+        severity: "medium",
+        message: "Empty catch block — errors silently swallowed",
+    },
+    { regex: /debugger\b/, rule: "QC-DEV-01", severity: "medium", message: "Debugger statement left in code" },
+    { regex: /console\.log\s*\(/, rule: "QC-DEV-02", severity: "medium", message: "console.log() in production code" },
+    {
+        regex: /\/\/\s*TODO\b|\/\/\s*FIXME\b|\/\/\s*HACK\b|\/\/\s*XXX\b/,
+        rule: "QC-DEBT-01",
+        severity: "medium",
+        message: "Open TODO/FIXME comment",
+    },
+    {
+        regex: /\.then\s*\([^)]*\)\s*;?\s*$/,
+        rule: "QC-ASYNC-01",
+        severity: "medium",
+        message: "Unhandled promise — missing .catch()",
+    },
+    // Low
+    { regex: /\bvar\s+\w+\s*=/, rule: "QC-MODERN-01", severity: "low", message: "var declaration — use const or let" },
+    {
+        regex: /\.substr\s*\(/,
+        rule: "QC-DEPR-02",
+        severity: "low",
+        message: "Deprecated .substr() — use .substring() or .slice()",
+    },
+    {
+        regex: /==\s*null\b|!=\s*null\b/,
+        rule: "QC-TYPE-01",
+        severity: "low",
+        message: "Loose null comparison — use === null",
+    },
+];
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function quickScan(filepath, content) {
+    const start = performance.now();
+    const code = content || readFileSync(filepath, "utf-8");
+    const lines = code.split("\n");
+    const findings = [];
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const trimmed = line.trim();
+        // Skip comments
+        if (trimmed.startsWith("//") || trimmed.startsWith("*") || trimmed.startsWith("/*"))
+            continue;
+        for (const pattern of PATTERNS) {
+            if (pattern.regex.test(line)) {
+                findings.push({
+                    line: i + 1,
+                    severity: pattern.severity,
+                    rule: pattern.rule,
+                    message: pattern.message,
+                });
+            }
+        }
+    }
+    const critCount = findings.filter((f) => f.severity === "critical").length;
+    const highCount = findings.filter((f) => f.severity === "high").length;
+    const medCount = findings.filter((f) => f.severity === "medium").length;
+    const score = Math.max(0, 100 - critCount * 20 - highCount * 10 - medCount * 4 - findings.filter((f) => f.severity === "low").length);
+    return {
+        file: filepath,
+        findings,
+        score,
+        elapsedMs: Math.round((performance.now() - start) * 100) / 100,
+    };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runQuickCheck(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges quick-check — Sub-100ms pattern-only review for real-time feedback
+
+Usage:
+  judges quick-check <file>
+  judges quick-check src/app.ts --format json
+
+Options:
+  <file>                File to check (required)
+  --format json         JSON output (for IDE integration)
+  --help, -h            Show this help
+
+Designed for save-on-type IDE integration. Runs only cheap regex/pattern
+checks with no LLM calls. Use 'judges review' for deep analysis.
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const file = argv.find((a) => !a.startsWith("-") && argv.indexOf(a) > 0 && argv[argv.indexOf(a) - 1] !== "--format");
+    if (!file) {
+        console.error("Error: File path required. Usage: judges quick-check <file>");
+        process.exitCode = 1;
+        return;
+    }
+    try {
+        statSync(file);
+    }
+    catch {
+        console.error(`Error: File not found: ${file}`);
+        process.exitCode = 1;
+        return;
+    }
+    const ext = extname(file);
+    if (![".ts", ".tsx", ".js", ".jsx", ".py", ".java", ".go", ".cs", ".rs", ".rb"].includes(ext)) {
+        console.error(`Warning: Language '${ext}' may have limited coverage.`);
+    }
+    const result = quickScan(file);
+    if (format === "json") {
+        console.log(JSON.stringify(result, null, 2));
+    }
+    else {
+        const icon = result.score >= 80 ? "✅" : result.score >= 50 ? "⚠️ " : "❌";
+        console.log(`\n  Quick Check: ${icon} ${result.score}/100 (${result.elapsedMs}ms)\n  ─────────────────────────────`);
+        if (result.findings.length === 0) {
+            console.log("    No issues found.\n");
+            return;
+        }
+        for (const f of result.findings) {
+            const sev = f.severity === "critical" ? "🔴" : f.severity === "high" ? "🟠" : f.severity === "medium" ? "🟡" : "🔵";
+            console.log(`    ${sev} L${f.line} [${f.rule}] ${f.message}`);
+        }
+        console.log(`\n    ${result.findings.length} finding(s) in ${result.elapsedMs}ms\n`);
+    }
+}
+//# sourceMappingURL=quick-check.js.map

package/dist/commands/quick-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quick-check.js","sourceRoot":"","sources":["../../src/commands/quick-check.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AA2B/B,MAAM,QAAQ,GAAiB;IAC7B,WAAW;IACX,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACnH;QACE,KAAK,EAAE,4DAA4D;QACnE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,+BAA+B;KACzC;IACD,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,iCAAiC,EAAE;IACjH;QACE,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,sCAAsC;KAChD;IAED,OAAO;IACP;QACE,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,6CAA6C;KACvD;IACD;QACE,KAAK,EAAE,wCAAwC;QAC/C,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,wCAAwC;KAClD;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,4DAA4D;KACtE;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,gDAAgD;KAC1D;IAED,SAAS;IACT;QACE,KAAK,EAAE,iCAAiC;QACxC,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,+CAA+C;KACzD;IACD,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,iCAAiC,EAAE;IAC1G,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,kCAAkC,EAAE;IAClH;QACE,KAAK,EAAE,yDAAyD;QAChE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,yBAAyB;KACnC;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,sCAAsC;KAChD;IAED,MAAM;IACN,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE;IAClH;QACE,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,qDAAqD;KAC/D;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,sCAAsC;KAChD;CACF,CAAC;AAEF,+EAA+E;AAE/E,SAAS,SAAS,CAAC,QAAgB,EAAE,OAAgB;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,gBAAgB;QAChB,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAE9F,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC3E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,EACD,GAAG,GAAG,SAAS,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,CAC3G,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,QAAQ;QACR,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG;KAC/D,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IAErH,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC7E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,8BAA8B,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;QACzE,OAAO,CAAC,GAAG,CACT,oBAAoB,IAAI,IAAI,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,SAAS,sCAAsC,CACxG,CAAC;QACF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,GAAG,GACP,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1G,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,QAAQ,CAAC,MAAM,kBAAkB,MAAM,CAAC,SAAS,MAAM,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/commands/review-contract.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Review-contract — versionable document defining exactly what Judges reviews.
+ */
+export declare function runReviewContract(argv: string[]): void;
+//# sourceMappingURL=review-contract.d.ts.map

package/dist/commands/review-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-contract.d.ts","sourceRoot":"","sources":["../../src/commands/review-contract.ts"],"names":[],"mappings":"AAAA;;GAEG;AAsIH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAyHtD"}

package/dist/commands/review-contract.js

@@ -0,0 +1,200 @@
+/**
+ * Review-contract — versionable document defining exactly what Judges reviews.
+ */
+import { readFileSync, existsSync, writeFileSync } from "fs";
+import { join } from "path";
+// ─── Default contract template ─────────────────────────────────────────────
+function defaultContract() {
+    return {
+        version: "1.0.0",
+        team: "default",
+        created: new Date().toISOString(),
+        updated: new Date().toISOString(),
+        rules: [
+            { judge: "data-security", enabled: true, severity: "critical", escalation: "block" },
+            { judge: "cybersecurity", enabled: true, severity: "critical", escalation: "block" },
+            { judge: "authentication", enabled: true, severity: "high", escalation: "block" },
+            { judge: "database", enabled: true, severity: "high", escalation: "block" },
+            { judge: "reliability", enabled: true, severity: "medium", escalation: "review" },
+            { judge: "performance", enabled: true, severity: "medium", escalation: "review" },
+            { judge: "maintainability", enabled: true, severity: "low", escalation: "inform" },
+            { judge: "documentation", enabled: true, severity: "low", escalation: "inform" },
+            { judge: "testing", enabled: true, severity: "medium", escalation: "review" },
+            { judge: "error-handling", enabled: true, severity: "medium", escalation: "review" },
+        ],
+        severityThresholds: {
+            blockMerge: "critical",
+            requireHumanReview: "high",
+            informational: "low",
+        },
+        acceptedRisks: [],
+        reviewSLA: {
+            maxLatencyMs: 30000,
+            maxFindingsPerPR: 25,
+        },
+    };
+}
+function verifyContract(contract) {
+    const issues = [];
+    const warnings = [];
+    // Check required fields
+    if (!contract.version)
+        issues.push("Missing contract version");
+    if (!contract.rules || contract.rules.length === 0)
+        issues.push("No rules defined — contract is empty");
+    if (!contract.severityThresholds)
+        issues.push("Missing severity thresholds");
+    // Check rule validity
+    const validSeverities = new Set(["critical", "high", "medium", "low", "info"]);
+    const validEscalations = new Set(["block", "review", "inform", "ignore"]);
+    for (const rule of contract.rules) {
+        if (!rule.judge)
+            issues.push("Rule with missing judge name");
+        if (rule.severity && !validSeverities.has(rule.severity)) {
+            warnings.push(`Rule ${rule.judge}: unknown severity '${rule.severity}'`);
+        }
+        if (rule.escalation && !validEscalations.has(rule.escalation)) {
+            warnings.push(`Rule ${rule.judge}: unknown escalation '${rule.escalation}'`);
+        }
+    }
+    // Check for security coverage
+    const securityJudges = contract.rules.filter((r) => r.enabled && ["data-security", "cybersecurity", "authentication"].includes(r.judge));
+    if (securityJudges.length === 0) {
+        warnings.push("No security judges enabled — consider enabling data-security, cybersecurity, or authentication");
+    }
+    // Check SLA
+    if (contract.reviewSLA) {
+        if (contract.reviewSLA.maxLatencyMs > 120000) {
+            warnings.push(`Review SLA latency (${contract.reviewSLA.maxLatencyMs}ms) exceeds 2 minutes`);
+        }
+        if (contract.reviewSLA.maxFindingsPerPR > 50) {
+            warnings.push(`Max findings per PR (${contract.reviewSLA.maxFindingsPerPR}) is high — may cause alert fatigue`);
+        }
+    }
+    // Accepted risks
+    if (contract.acceptedRisks.length > 10) {
+        warnings.push(`${contract.acceptedRisks.length} accepted risks — review if all are still valid`);
+    }
+    const enabledCount = contract.rules.filter((r) => r.enabled).length;
+    const totalAvailable = 45; // approximate
+    const coverage = Math.round((enabledCount / totalAvailable) * 100);
+    return {
+        valid: issues.length === 0,
+        issues,
+        warnings,
+        coverage,
+    };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runReviewContract(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges review-contract — Define and verify what Judges reviews
+
+Usage:
+  judges review-contract init                Create default review-contract.json
+  judges review-contract verify              Verify contract is valid
+  judges review-contract show                Show current contract
+  judges review-contract --format json       JSON output
+
+Options:
+  init                  Create a new review-contract.json template
+  verify                Validate the current contract
+  show                  Display the current contract
+  --format json         JSON output
+  --help, -h            Show this help
+
+A review contract defines: which judges are enabled, severity thresholds,
+escalation policies, review SLA, and accepted risks. The contract is
+diffable and reviewable in PRs.
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const subcommand = argv.find((a) => !a.startsWith("-") && argv.indexOf(a) > 0 && argv[argv.indexOf(a) - 1] !== "--format") || "show";
+    const contractPath = join(".", "review-contract.json");
+    if (subcommand === "init") {
+        if (existsSync(contractPath)) {
+            console.error("Error: review-contract.json already exists. Delete it first or edit manually.");
+            process.exitCode = 1;
+            return;
+        }
+        const contract = defaultContract();
+        writeFileSync(contractPath, JSON.stringify(contract, null, 2), "utf-8");
+        console.log("Created review-contract.json with default template.");
+        console.log("Edit rules, thresholds, and SLA to match your team's requirements.");
+        return;
+    }
+    // Load existing contract
+    if (!existsSync(contractPath)) {
+        console.error("Error: No review-contract.json found. Run 'judges review-contract init' to create one.");
+        process.exitCode = 1;
+        return;
+    }
+    let contract;
+    try {
+        contract = JSON.parse(readFileSync(contractPath, "utf-8"));
+    }
+    catch {
+        console.error("Error: review-contract.json is not valid JSON.");
+        process.exitCode = 1;
+        return;
+    }
+    if (subcommand === "verify") {
+        const result = verifyContract(contract);
+        if (format === "json") {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else {
+            const icon = result.valid ? "✅" : "❌";
+            console.log(`\n  Contract Verification: ${icon} ${result.valid ? "VALID" : "INVALID"}\n  ─────────────────────────────`);
+            console.log(`    Coverage: ${result.coverage}%`);
+            if (result.issues.length > 0) {
+                console.log(`\n    Issues (${result.issues.length}):`);
+                for (const issue of result.issues)
+                    console.log(`      ❌ ${issue}`);
+            }
+            if (result.warnings.length > 0) {
+                console.log(`\n    Warnings (${result.warnings.length}):`);
+                for (const w of result.warnings)
+                    console.log(`      ⚠️  ${w}`);
+            }
+            if (result.valid && result.warnings.length === 0) {
+                console.log("    No issues found.");
+            }
+            console.log();
+        }
+        if (!result.valid)
+            process.exitCode = 1;
+        return;
+    }
+    // Show
+    if (format === "json") {
+        console.log(JSON.stringify(contract, null, 2));
+    }
+    else {
+        console.log(`\n  Review Contract v${contract.version}\n  ─────────────────────────────`);
+        console.log(`    Team:    ${contract.team}`);
+        console.log(`    Updated: ${contract.updated}\n`);
+        console.log(`    Rules (${contract.rules.length}):`);
+        for (const rule of contract.rules) {
+            const icon = rule.enabled ? "✅" : "⬜";
+            const escIcon = rule.escalation === "block" ? "🛑" : rule.escalation === "review" ? "🔍" : "ℹ️";
+            console.log(`      ${icon} ${rule.judge} — ${rule.severity} / ${escIcon} ${rule.escalation}`);
+        }
+        console.log(`\n    Thresholds:`);
+        console.log(`      Block merge:    ${contract.severityThresholds.blockMerge}`);
+        console.log(`      Human review:   ${contract.severityThresholds.requireHumanReview}`);
+        console.log(`      Informational:  ${contract.severityThresholds.informational}`);
+        console.log(`\n    SLA:`);
+        console.log(`      Max latency:     ${contract.reviewSLA.maxLatencyMs}ms`);
+        console.log(`      Max findings/PR: ${contract.reviewSLA.maxFindingsPerPR}`);
+        if (contract.acceptedRisks.length > 0) {
+            console.log(`\n    Accepted Risks:`);
+            for (const risk of contract.acceptedRisks)
+                console.log(`      ⚠️  ${risk}`);
+        }
+        console.log();
+    }
+}
+//# sourceMappingURL=review-contract.js.map

package/dist/commands/review-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-contract.js","sourceRoot":"","sources":["../../src/commands/review-contract.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA6B5B,8EAA8E;AAE9E,SAAS,eAAe;IACtB,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,KAAK,EAAE;YACL,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE;YACpF,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE;YACpF,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE;YACjF,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE;YAC3E,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;YACjF,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;YACjF,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE;YAClF,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE;YAChF,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;YAC7E,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;SACrF;QACD,kBAAkB,EAAE;YAClB,UAAU,EAAE,UAAU;YACtB,kBAAkB,EAAE,MAAM;YAC1B,aAAa,EAAE,KAAK;SACrB;QACD,aAAa,EAAE,EAAE;QACjB,SAAS,EAAE;YACT,YAAY,EAAE,KAAK;YACnB,gBAAgB,EAAE,EAAE;SACrB;KACF,CAAC;AACJ,CAAC;AAWD,SAAS,cAAc,CAAC,QAAwB;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,wBAAwB;IACxB,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACxG,IAAI,CAAC,QAAQ,CAAC,kBAAkB;QAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAE7E,sBAAsB;IACtB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE1E,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,uBAAuB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,yBAAyB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAC3F,CAAC;IACF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,gGAAgG,CAAC,CAAC;IAClH,CAAC;IAED,YAAY;IACZ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,IAAI,QAAQ,CAAC,SAAS,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,uBAAuB,QAAQ,CAAC,SAAS,CAAC,YAAY,uBAAuB,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,QAAQ,CAAC,SAAS,CAAC,gBAAgB,GAAG,EAAE,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,SAAS,CAAC,gBAAgB,qCAAqC,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,iDAAiD,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACpE,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC,cAAc;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,cAAc,CAAC,GAAG,GAAG,CAAC,CAAC;IAEnE,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,QAAQ;QACR,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;CAmBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,UAAU,GACd,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IACpH,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAEvD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;YAC/F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;QACnC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;QACxG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,QAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAmB,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtC,OAAO,CAAC,GAAG,CACT,8BAA8B,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,mCAAmC,CAC5G,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;YAEjD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;gBACvD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC3D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,OAAO;IACP,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,OAAO,mCAAmC,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;QAElD,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACrD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAChG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,QAAQ,MAAM,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC,CAAC;QAElF,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,0BAA0B,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAE7E,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,aAAa;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/commands/review-handoff.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Review-handoff — structured escalation to human reviewers with narrowed scope.
+ */
+export declare function runReviewHandoff(argv: string[]): void;
+//# sourceMappingURL=review-handoff.d.ts.map

package/dist/commands/review-handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-handoff.d.ts","sourceRoot":"","sources":["../../src/commands/review-handoff.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgLH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAyErD"}

package/dist/commands/review-handoff.js

@@ -0,0 +1,209 @@
+/**
+ * Review-handoff — structured escalation to human reviewers with narrowed scope.
+ */
+import { readFileSync, readdirSync, statSync } from "fs";
+import { join, extname, relative } from "path";
+// ─── File Collection ────────────────────────────────────────────────────────
+const CODE_EXTS = new Set([".ts", ".tsx", ".js", ".jsx", ".py", ".java", ".go", ".cs"]);
+function collectFiles(dir, max = 300) {
+    const files = [];
+    function walk(d) {
+        if (files.length >= max)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(d);
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (files.length >= max)
+                return;
+            if (e.startsWith(".") || e === "node_modules" || e === "dist" || e === "build")
+                continue;
+            const full = join(d, e);
+            try {
+                if (statSync(full).isDirectory())
+                    walk(full);
+                else if (CODE_EXTS.has(extname(full)))
+                    files.push(full);
+            }
+            catch {
+                /* skip */
+            }
+        }
+    }
+    walk(dir);
+    return files;
+}
+const ESCALATION_PATTERNS = [
+    {
+        regex: /(?:payment|billing|charge|refund|invoice)\w*\s*(?:=|:|\()/i,
+        reason: "Payment/billing logic",
+        question: "Is this payment flow correctly handling edge cases (partial payments, refunds, currency conversion)?",
+        preAnalysis: "Payment logic detected — automated review verified syntax but cannot assess business rule correctness",
+        severity: "high",
+        confidence: 40,
+    },
+    {
+        regex: /(?:auth|permission|role|acl|rbac)\w*\s*(?:=|:|\()/i,
+        reason: "Authorization/permission logic",
+        question: "Does this authorization check cover all required permissions and fail-closed on errors?",
+        preAnalysis: "Authorization pattern detected — verify the permission model matches business requirements",
+        severity: "high",
+        confidence: 45,
+    },
+    {
+        regex: /(?:encrypt|decrypt|sign|verify|hash|hmac|cipher)\s*\(/i,
+        reason: "Cryptographic operation",
+        question: "Are the crypto algorithm, key size, and mode appropriate for this use case?",
+        preAnalysis: "Cryptographic code detected — automated review verified API usage but cannot assess algorithm fitness",
+        severity: "critical",
+        confidence: 35,
+    },
+    {
+        regex: /(?:delete|remove|purge|destroy|drop)\s*(?:All|Many|Collection|Table|Database|User)/i,
+        reason: "Destructive bulk operation",
+        question: "Is this bulk deletion protected by confirmation, soft-delete, or backup mechanisms?",
+        preAnalysis: "Bulk destructive operation detected — verify rollback and recovery procedures exist",
+        severity: "high",
+        confidence: 50,
+    },
+    {
+        regex: /(?:migration|migrate|schema|alter\s+table|add\s+column)/i,
+        reason: "Database schema change",
+        question: "Is this migration reversible? Has it been tested against production-sized data?",
+        preAnalysis: "Schema migration detected — verify backward compatibility and rollback plan",
+        severity: "high",
+        confidence: 45,
+    },
+    {
+        regex: /(?:cron|schedule|interval|recurring|periodic)\s*(?:=|:|\()/i,
+        reason: "Scheduled task configuration",
+        question: "Is the schedule correct? What happens if the task runs longer than the interval?",
+        preAnalysis: "Scheduled task detected — verify idempotency and overlap handling",
+        severity: "medium",
+        confidence: 55,
+    },
+    {
+        regex: /(?:feature[_-]?flag|toggle|experiment|canary|rollout)\s*(?:=|:|\()/i,
+        reason: "Feature flag / experiment",
+        question: "Is the feature flag cleanup planned? Are default values safe?",
+        preAnalysis: "Feature flag detected — verify kill switch and rollback behavior",
+        severity: "medium",
+        confidence: 55,
+    },
+    {
+        regex: /(?:race|mutex|lock|semaphore|atomic|concurrent)/i,
+        reason: "Concurrency primitive",
+        question: "Is this concurrency pattern correct? Could it deadlock under load?",
+        preAnalysis: "Concurrency pattern detected — automated analysis cannot verify liveness guarantees",
+        severity: "high",
+        confidence: 35,
+    },
+];
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function analyzeFile(filepath, baseDir) {
+    const items = [];
+    let content;
+    try {
+        content = readFileSync(filepath, "utf-8");
+    }
+    catch {
+        return items;
+    }
+    const lines = content.split("\n");
+    const rel = relative(baseDir, filepath);
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const trimmed = line.trim();
+        if (trimmed.startsWith("//") || trimmed.startsWith("*") || trimmed.startsWith("/*"))
+            continue;
+        for (const pattern of ESCALATION_PATTERNS) {
+            if (pattern.regex.test(line)) {
+                items.push({
+                    file: rel,
+                    lineStart: Math.max(1, i - 2),
+                    lineEnd: Math.min(lines.length, i + 5),
+                    reason: pattern.reason,
+                    confidence: pattern.confidence,
+                    question: pattern.question,
+                    preAnalysis: pattern.preAnalysis,
+                    severity: pattern.severity,
+                });
+                break; // Only one escalation per line
+            }
+        }
+    }
+    return items;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runReviewHandoff(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges review-handoff — Structured escalation to human reviewers
+
+Usage:
+  judges review-handoff [dir]
+  judges review-handoff src/ --format json
+
+Options:
+  [dir]                 Directory to scan (default: .)
+  --format json         JSON output
+  --help, -h            Show this help
+
+When Judges encounters low-confidence findings (payment logic, crypto,
+permissions, schema migrations, concurrency), it creates targeted human
+review requests with narrowed scope, specific questions, and pre-analysis.
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const dir = argv.find((a) => !a.startsWith("-") && argv.indexOf(a) > 0 && argv[argv.indexOf(a) - 1] !== "--format") || ".";
+    const files = collectFiles(dir);
+    const allItems = [];
+    for (const f of files)
+        allItems.push(...analyzeFile(f, dir));
+    // Sort by severity then confidence (lowest confidence first — highest need for human review)
+    const sevOrder = { critical: 0, high: 1, medium: 2, low: 3 };
+    allItems.sort((a, b) => sevOrder[a.severity] - sevOrder[b.severity] || a.confidence - b.confidence);
+    const totalFiles = files.length;
+    const filesWithEscalations = new Set(allItems.map((i) => i.file)).size;
+    const verifiedCount = totalFiles - filesWithEscalations;
+    const report = {
+        escalationCount: allItems.length,
+        verifiedCount,
+        items: allItems,
+        verifiedSummary: `${verifiedCount}/${totalFiles} files passed automated review with high confidence — no human review needed.`,
+    };
+    if (format === "json") {
+        console.log(JSON.stringify({ ...report, timestamp: new Date().toISOString() }, null, 2));
+    }
+    else {
+        console.log(`\n  Review Handoff\n  ─────────────────────────────`);
+        console.log(`    ✅ ${verifiedCount}/${totalFiles} files — automated review complete (high confidence)`);
+        console.log(`    🔍 ${allItems.length} item(s) escalated for human review\n`);
+        if (allItems.length === 0) {
+            console.log("    No escalations needed — all files passed automated review.\n");
+            return;
+        }
+        for (const item of allItems.slice(0, 15)) {
+            const icon = item.severity === "critical"
+                ? "🔴"
+                : item.severity === "high"
+                    ? "🟠"
+                    : item.severity === "medium"
+                        ? "🟡"
+                        : "🔵";
+            console.log(`    ${icon} ${item.reason} (confidence: ${item.confidence}%)`);
+            console.log(`        📄 ${item.file}:${item.lineStart}-${item.lineEnd}`);
+            console.log(`        ❓ ${item.question}`);
+            console.log(`        📋 ${item.preAnalysis}`);
+            console.log();
+        }
+        if (allItems.length > 15)
+            console.log(`    ... and ${allItems.length - 15} more escalations\n`);
+    }
+}
+//# sourceMappingURL=review-handoff.js.map

package/dist/commands/review-handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-handoff.js","sourceRoot":"","sources":["../../src/commands/review-handoff.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAsB/C,+EAA+E;AAE/E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAExF,SAAS,YAAY,CAAC,GAAW,EAAE,GAAG,GAAG,GAAG;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,SAAS,IAAI,CAAC,CAAS;QACrB,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO;QAChC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,CAAC,CAAwB,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;gBAAE,OAAO;YAChC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO;gBAAE,SAAS;YACzF,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC;gBACH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBACxC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU;YACZ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,KAAK,CAAC;AACf,CAAC;AAaD,MAAM,mBAAmB,GAAwB;IAC/C;QACE,KAAK,EAAE,4DAA4D;QACnE,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,sGAAsG;QAChH,WAAW,EACT,uGAAuG;QACzG,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,oDAAoD;QAC3D,MAAM,EAAE,gCAAgC;QACxC,QAAQ,EAAE,yFAAyF;QACnG,WAAW,EAAE,4FAA4F;QACzG,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,wDAAwD;QAC/D,MAAM,EAAE,yBAAyB;QACjC,QAAQ,EAAE,6EAA6E;QACvF,WAAW,EACT,uGAAuG;QACzG,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,qFAAqF;QAC5F,MAAM,EAAE,4BAA4B;QACpC,QAAQ,EAAE,qFAAqF;QAC/F,WAAW,EAAE,qFAAqF;QAClG,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,0DAA0D;QACjE,MAAM,EAAE,wBAAwB;QAChC,QAAQ,EAAE,iFAAiF;QAC3F,WAAW,EAAE,6EAA6E;QAC1F,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,6DAA6D;QACpE,MAAM,EAAE,8BAA8B;QACtC,QAAQ,EAAE,kFAAkF;QAC5F,WAAW,EAAE,mEAAmE;QAChF,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,qEAAqE;QAC5E,MAAM,EAAE,2BAA2B;QACnC,QAAQ,EAAE,+DAA+D;QACzE,WAAW,EAAE,kEAAkE;QAC/E,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,kDAAkD;QACzD,MAAM,EAAE,uBAAuB;QAC/B,QAAQ,EAAE,oEAAoE;QAC9E,WAAW,EAAE,qFAAqF;QAClG,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,EAAE;KACf;CACF,CAAC;AAEF,+EAA+E;AAE/E,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAE9F,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,GAAG;oBACT,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;oBAC7B,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;oBACtC,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBACH,MAAM,CAAC,+BAA+B;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;CAef,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,GAAG,GACP,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,GAAG,CAAC;IAEjH,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAE7D,6FAA6F;IAC7F,MAAM,QAAQ,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACrF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAEpG,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;IAChC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,aAAa,GAAG,UAAU,GAAG,oBAAoB,CAAC;IAExD,MAAM,MAAM,GAAkB;QAC5B,eAAe,EAAE,QAAQ,CAAC,MAAM;QAChC,aAAa;QACb,KAAK,EAAE,QAAQ;QACf,eAAe,EAAE,GAAG,aAAa,IAAI,UAAU,+EAA+E;KAC/H,CAAC;IAEF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,SAAS,aAAa,IAAI,UAAU,sDAAsD,CAAC,CAAC;QACxG,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,MAAM,uCAAuC,CAAC,CAAC;QAE9E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GACR,IAAI,CAAC,QAAQ,KAAK,UAAU;gBAC1B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM;oBACxB,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ;wBAC1B,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,IAAI,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,iBAAiB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,MAAM,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}

package/dist/commands/review-receipt.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Review-receipt — cryptographically signed attestation of review completeness.
+ */
+export declare function runReviewReceipt(argv: string[]): void;
+//# sourceMappingURL=review-receipt.d.ts.map

package/dist/commands/review-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-receipt.d.ts","sourceRoot":"","sources":["../../src/commands/review-receipt.ts"],"names":[],"mappings":"AAAA;;GAEG;AA0NH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAyErD"}