@kevinrabun/judges 3.71.0 → 3.73.0

package/dist/commands/finding-deduplicate.js

@@ -0,0 +1,142 @@
+/**
+ * Finding-deduplicate — Detect and deduplicate similar findings.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { join, dirname } from "path";
+// ─── Dedup Logic ────────────────────────────────────────────────────────────
+function normalizeText(text) {
+    return text
+        .toLowerCase()
+        .replace(/[^a-z0-9]/g, " ")
+        .replace(/\s+/g, " ")
+        .trim();
+}
+function areSimilar(a, b) {
+    // Same rule ID is a strong signal
+    if (a.ruleId && b.ruleId && a.ruleId === b.ruleId) {
+        // Check if titles are similar
+        const titleA = normalizeText(a.title || "");
+        const titleB = normalizeText(b.title || "");
+        if (titleA === titleB)
+            return true;
+        // Check Jaccard similarity on words
+        const wordsA = new Set(titleA.split(" "));
+        const wordsB = new Set(titleB.split(" "));
+        const intersection = new Set([...wordsA].filter((w) => wordsB.has(w)));
+        const union = new Set([...wordsA, ...wordsB]);
+        if (union.size > 0 && intersection.size / union.size > 0.5)
+            return true;
+    }
+    return false;
+}
+function groupFindings(findings) {
+    const groups = [];
+    const assigned = new Set();
+    for (let i = 0; i < findings.length; i++) {
+        if (assigned.has(i))
+            continue;
+        const group = {
+            canonical: {
+                ruleId: findings[i].ruleId || "unknown",
+                title: findings[i].title || "",
+                severity: findings[i].severity || "medium",
+            },
+            count: 1,
+            indices: [i],
+        };
+        assigned.add(i);
+        for (let j = i + 1; j < findings.length; j++) {
+            if (assigned.has(j))
+                continue;
+            if (areSimilar(findings[i], findings[j])) {
+                group.count++;
+                group.indices.push(j);
+                assigned.add(j);
+            }
+        }
+        groups.push(group);
+    }
+    return groups;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingDeduplicate(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-deduplicate — Detect and deduplicate similar findings
+
+Usage:
+  judges finding-deduplicate --file report.json
+  judges finding-deduplicate --file report.json --format json
+
+Options:
+  --file <path>         Path to a tribunal verdict JSON file
+  --format json         JSON output
+  --help, -h            Show this help
+
+Groups similar findings together and reports duplicates.
+Uses rule ID matching and title similarity (Jaccard) to detect dupes.
+
+Report saved to .judges/dedup-report.json.
+`);
+        return;
+    }
+    const filePath = argv.find((_a, i) => argv[i - 1] === "--file");
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    if (!filePath || !existsSync(filePath)) {
+        console.error("Error: --file is required and must exist.");
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        console.error("Error: Could not parse verdict file.");
+        process.exitCode = 1;
+        return;
+    }
+    const findings = verdict.findings || [];
+    if (findings.length === 0) {
+        console.log("No findings to deduplicate.");
+        return;
+    }
+    const groups = groupFindings(findings);
+    const duplicateCount = findings.length - groups.length;
+    const report = {
+        timestamp: new Date().toISOString(),
+        originalCount: findings.length,
+        uniqueCount: groups.length,
+        duplicateCount,
+        groups,
+    };
+    const outPath = join(".judges", "dedup-report.json");
+    mkdirSync(dirname(outPath), { recursive: true });
+    writeFileSync(outPath, JSON.stringify(report, null, 2), "utf-8");
+    if (format === "json") {
+        console.log(JSON.stringify(report, null, 2));
+        return;
+    }
+    console.log("\nFinding Deduplication Report:");
+    console.log("═".repeat(60));
+    console.log(`  Original: ${findings.length}  Unique: ${groups.length}  Duplicates: ${duplicateCount}`);
+    if (findings.length > 0) {
+        console.log(`  Dedup ratio: ${((duplicateCount / findings.length) * 100).toFixed(1)}%`);
+    }
+    console.log("═".repeat(60));
+    const dupeGroups = groups.filter((g) => g.count > 1);
+    if (dupeGroups.length > 0) {
+        console.log("\n  Duplicate Groups:");
+        for (const g of dupeGroups) {
+            console.log(`\n    [${g.canonical.severity.toUpperCase()}] ${g.canonical.ruleId} (${g.count}x)`);
+            console.log(`      ${g.canonical.title}`);
+            console.log(`      Indices: ${g.indices.join(", ")}`);
+        }
+    }
+    else {
+        console.log("\n  No duplicates found — all findings are unique.");
+    }
+    console.log("\n" + "═".repeat(60));
+    console.log(`  Report saved to ${outPath}`);
+}
+//# sourceMappingURL=finding-deduplicate.js.map

package/dist/commands/finding-deduplicate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-deduplicate.js","sourceRoot":"","sources":["../../src/commands/finding-deduplicate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAmBrC,+EAA+E;AAE/E,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,CAAU,EAAE,CAAU;IACxC,kCAAkC;IAClC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAClD,8BAA8B;QAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACnC,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAAmB;IACxC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,KAAK,GAAe;YACxB,SAAS,EAAE;gBACT,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS;gBACvC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ;aAC3C;YACD,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,CAAC,CAAC,CAAC;SACb,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC9B,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACtB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAoB,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACtD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAEvD,MAAM,MAAM,GAAgB;QAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,cAAc;QACd,MAAM;KACP,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrD,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEjE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,MAAM,aAAa,MAAM,CAAC,MAAM,iBAAiB,cAAc,EAAE,CAAC,CAAC;IACvG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;YACjG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC"}

package/dist/commands/finding-false-positive.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-false-positive — Track and manage false positive findings.
+ */
+export declare function runFindingFalsePositive(argv: string[]): void;
+//# sourceMappingURL=finding-false-positive.d.ts.map

package/dist/commands/finding-false-positive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-false-positive.d.ts","sourceRoot":"","sources":["../../src/commands/finding-false-positive.ts"],"names":[],"mappings":"AAAA;;GAEG;AA6CH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAmH5D"}

package/dist/commands/finding-false-positive.js

@@ -0,0 +1,135 @@
+/**
+ * Finding-false-positive — Track and manage false positive findings.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { dirname } from "path";
+// ─── Storage ────────────────────────────────────────────────────────────────
+const FP_FILE = ".judges/false-positives.json";
+function loadStore() {
+    if (!existsSync(FP_FILE))
+        return { version: "1.0.0", entries: [] };
+    try {
+        return JSON.parse(readFileSync(FP_FILE, "utf-8"));
+    }
+    catch {
+        return { version: "1.0.0", entries: [] };
+    }
+}
+function saveStore(store) {
+    mkdirSync(dirname(FP_FILE), { recursive: true });
+    writeFileSync(FP_FILE, JSON.stringify(store, null, 2), "utf-8");
+}
+function generateId() {
+    return `fp-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 6)}`;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingFalsePositive(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-false-positive — Track and manage false positive findings
+
+Usage:
+  judges finding-false-positive add --rule SEC-001 --title "Not a real XSS" --reason "sanitized upstream"
+  judges finding-false-positive list
+  judges finding-false-positive check --rule SEC-001 --file src/app.ts
+  judges finding-false-positive remove --id <id>
+  judges finding-false-positive clear
+  judges finding-false-positive stats
+
+Subcommands:
+  add                   Mark a finding as false positive
+  list                  List all false positives
+  check                 Check if a rule/file combo is marked FP
+  remove                Remove a false positive by ID
+  clear                 Clear all false positives
+  stats                 Show false positive statistics
+
+Options:
+  --rule <id>           Rule ID
+  --title <text>        Finding title
+  --reason <text>       Reason for marking as FP
+  --file <path>         Related file path
+  --format json         JSON output
+  --help, -h            Show this help
+
+Stored locally in .judges/false-positives.json.
+`);
+        return;
+    }
+    const subcommand = argv.find((a) => ["add", "list", "check", "remove", "clear", "stats"].includes(a));
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const store = loadStore();
+    if (subcommand === "add") {
+        const ruleId = argv.find((_a, i) => argv[i - 1] === "--rule") || "";
+        const title = argv.find((_a, i) => argv[i - 1] === "--title") || "";
+        const reason = argv.find((_a, i) => argv[i - 1] === "--reason") || "";
+        const file = argv.find((_a, i) => argv[i - 1] === "--file") || "";
+        const entry = { id: generateId(), ruleId, title, reason, date: new Date().toISOString(), file };
+        store.entries.push(entry);
+        saveStore(store);
+        console.log(`Marked as false positive (${entry.id}): ${ruleId} — ${title}`);
+        return;
+    }
+    if (subcommand === "check") {
+        const ruleId = argv.find((_a, i) => argv[i - 1] === "--rule") || "";
+        const file = argv.find((_a, i) => argv[i - 1] === "--file") || "";
+        const match = store.entries.find((e) => e.ruleId === ruleId && (!file || e.file === file));
+        if (match) {
+            console.log(`FP match found: ${match.id} — ${match.reason}`);
+        }
+        else {
+            console.log("No false positive match.");
+        }
+        return;
+    }
+    if (subcommand === "remove") {
+        const id = argv.find((_a, i) => argv[i - 1] === "--id") || "";
+        const before = store.entries.length;
+        store.entries = store.entries.filter((e) => e.id !== id);
+        saveStore(store);
+        console.log(before > store.entries.length ? `Removed ${id}.` : `${id} not found.`);
+        return;
+    }
+    if (subcommand === "clear") {
+        saveStore({ version: "1.0.0", entries: [] });
+        console.log("False positives cleared.");
+        return;
+    }
+    if (subcommand === "stats") {
+        if (store.entries.length === 0) {
+            console.log("No false positives recorded.");
+            return;
+        }
+        const byRule = new Map();
+        for (const e of store.entries) {
+            byRule.set(e.ruleId, (byRule.get(e.ruleId) || 0) + 1);
+        }
+        if (format === "json") {
+            console.log(JSON.stringify({ total: store.entries.length, byRule: Object.fromEntries(byRule) }, null, 2));
+            return;
+        }
+        console.log(`\nFalse Positive Stats: ${store.entries.length} total`);
+        console.log("─".repeat(40));
+        for (const [rule, count] of [...byRule.entries()].sort((a, b) => b[1] - a[1])) {
+            console.log(`  ${rule}: ${count}`);
+        }
+        return;
+    }
+    // Default: list
+    if (store.entries.length === 0) {
+        console.log("No false positives. Use 'judges finding-false-positive add' to mark findings.");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(store.entries, null, 2));
+        return;
+    }
+    console.log("\nFalse Positives:");
+    console.log("─".repeat(60));
+    for (const e of store.entries) {
+        console.log(`  ${e.id}  ${e.ruleId}  ${e.title}`);
+        console.log(`    reason: ${e.reason}  file: ${e.file || "(any)"}`);
+    }
+    console.log("─".repeat(60));
+}
+//# sourceMappingURL=finding-false-positive.js.map

package/dist/commands/finding-false-positive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-false-positive.js","sourceRoot":"","sources":["../../src/commands/finding-false-positive.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAkB/B,+EAA+E;AAE/E,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAE/C,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACnE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAY,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Bf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAE1B,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAElF,MAAM,KAAK,GAAuB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC;QACpH,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,CAAC,EAAE,MAAM,MAAM,MAAM,KAAK,EAAE,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QAC3F,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACpC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1G,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,CAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,OAAO;IACT,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-link.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-link — Link related findings across files.
+ */
+export declare function runFindingLink(argv: string[]): void;
+//# sourceMappingURL=finding-link.d.ts.map

package/dist/commands/finding-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-link.d.ts","sourceRoot":"","sources":["../../src/commands/finding-link.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8CH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA+GnD"}

package/dist/commands/finding-link.js

@@ -0,0 +1,129 @@
+/**
+ * Finding-link — Link related findings across files.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { dirname } from "path";
+// ─── Storage ────────────────────────────────────────────────────────────────
+const LINK_FILE = ".judges/finding-links.json";
+function loadStore() {
+    if (!existsSync(LINK_FILE))
+        return { version: "1.0.0", links: [] };
+    try {
+        return JSON.parse(readFileSync(LINK_FILE, "utf-8"));
+    }
+    catch {
+        return { version: "1.0.0", links: [] };
+    }
+}
+function saveStore(store) {
+    mkdirSync(dirname(LINK_FILE), { recursive: true });
+    writeFileSync(LINK_FILE, JSON.stringify(store, null, 2), "utf-8");
+}
+function generateId() {
+    return `lnk-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 6)}`;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingLink(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-link — Link related findings across files
+
+Usage:
+  judges finding-link add --source-rule SEC-001 --source-file a.ts --target-rule SEC-002 --target-file b.ts
+  judges finding-link list
+  judges finding-link find --rule SEC-001
+  judges finding-link remove --id <id>
+  judges finding-link clear
+
+Subcommands:
+  add                   Create a finding link
+  list                  List all links
+  find                  Find links for a rule
+  remove                Remove a link
+  clear                 Clear all links
+
+Options:
+  --source-rule <id>    Source finding rule ID
+  --source-file <path>  Source file path
+  --target-rule <id>    Target finding rule ID
+  --target-file <path>  Target file path
+  --relationship <text> Relationship type (e.g. "root-cause", "related", "duplicate")
+  --rule <id>           Rule to search for in find subcommand
+  --format json         JSON output
+  --help, -h            Show this help
+
+Links stored in .judges/finding-links.json.
+`);
+        return;
+    }
+    const subcommand = argv.find((a) => ["add", "list", "find", "remove", "clear"].includes(a));
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const store = loadStore();
+    if (subcommand === "add") {
+        const sourceRule = argv.find((_a, i) => argv[i - 1] === "--source-rule") || "";
+        const sourceFile = argv.find((_a, i) => argv[i - 1] === "--source-file") || "";
+        const targetRule = argv.find((_a, i) => argv[i - 1] === "--target-rule") || "";
+        const targetFile = argv.find((_a, i) => argv[i - 1] === "--target-file") || "";
+        const relationship = argv.find((_a, i) => argv[i - 1] === "--relationship") || "related";
+        const link = {
+            id: generateId(),
+            sourceRule,
+            sourceFile,
+            targetRule,
+            targetFile,
+            relationship,
+            createdAt: new Date().toISOString(),
+        };
+        store.links.push(link);
+        saveStore(store);
+        console.log(`Linked ${sourceRule} (${sourceFile}) → ${targetRule} (${targetFile}) [${relationship}]`);
+        return;
+    }
+    if (subcommand === "find") {
+        const rule = argv.find((_a, i) => argv[i - 1] === "--rule") || "";
+        const matches = store.links.filter((l) => l.sourceRule === rule || l.targetRule === rule);
+        if (matches.length === 0) {
+            console.log(`No links found for rule ${rule}.`);
+            return;
+        }
+        if (format === "json") {
+            console.log(JSON.stringify(matches, null, 2));
+            return;
+        }
+        console.log(`\nLinks for ${rule}:`);
+        for (const m of matches) {
+            console.log(`  ${m.id}  ${m.sourceRule}(${m.sourceFile}) → ${m.targetRule}(${m.targetFile})  [${m.relationship}]`);
+        }
+        return;
+    }
+    if (subcommand === "remove") {
+        const id = argv.find((_a, i) => argv[i - 1] === "--id") || "";
+        const before = store.links.length;
+        store.links = store.links.filter((l) => l.id !== id);
+        saveStore(store);
+        console.log(before > store.links.length ? `Removed ${id}.` : `${id} not found.`);
+        return;
+    }
+    if (subcommand === "clear") {
+        saveStore({ version: "1.0.0", links: [] });
+        console.log("Finding links cleared.");
+        return;
+    }
+    // Default: list
+    if (store.links.length === 0) {
+        console.log("No finding links. Use 'judges finding-link add' to create one.");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(store.links, null, 2));
+        return;
+    }
+    console.log("\nFinding Links:");
+    console.log("─".repeat(70));
+    for (const l of store.links) {
+        console.log(`  ${l.id}  ${l.sourceRule}(${l.sourceFile}) → ${l.targetRule}(${l.targetFile})  [${l.relationship}]`);
+    }
+    console.log("─".repeat(70));
+    console.log(`${store.links.length} link(s).`);
+}
+//# sourceMappingURL=finding-link.js.map

package/dist/commands/finding-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-link.js","sourceRoot":"","sources":["../../src/commands/finding-link.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAmB/B,+EAA+E;AAE/E,MAAM,SAAS,GAAG,4BAA4B,CAAC;AAE/C,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACnE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAc,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB;IACjC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Bf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAE1B,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;QAC/F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,gBAAgB,CAAC,IAAI,SAAS,CAAC;QAEzG,MAAM,IAAI,GAAgB;YACxB,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU;YACV,UAAU;YACV,UAAU;YACV,UAAU;YACV,YAAY;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,UAAU,UAAU,KAAK,UAAU,OAAO,UAAU,KAAK,UAAU,MAAM,YAAY,GAAG,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,GAAG,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,YAAY,GAAG,CACtG,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QAClC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC;AAChD,CAAC"}

package/dist/commands/finding-severity-override.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-severity-override — Override finding severity per project.
+ */
+export declare function runFindingSeverityOverride(argv: string[]): void;
+//# sourceMappingURL=finding-severity-override.d.ts.map

package/dist/commands/finding-severity-override.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-severity-override.d.ts","sourceRoot":"","sources":["../../src/commands/finding-severity-override.ts"],"names":[],"mappings":"AAAA;;GAEG;AA0CH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAoH/D"}

package/dist/commands/finding-severity-override.js

@@ -0,0 +1,132 @@
+/**
+ * Finding-severity-override — Override finding severity per project.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { join, dirname } from "path";
+// ─── Storage ────────────────────────────────────────────────────────────────
+const OVERRIDE_FILE = join(".judges", "severity-overrides.json");
+function loadStore() {
+    if (!existsSync(OVERRIDE_FILE))
+        return { version: "1.0.0", overrides: [] };
+    try {
+        return JSON.parse(readFileSync(OVERRIDE_FILE, "utf-8"));
+    }
+    catch {
+        return { version: "1.0.0", overrides: [] };
+    }
+}
+function saveStore(store) {
+    mkdirSync(dirname(OVERRIDE_FILE), { recursive: true });
+    writeFileSync(OVERRIDE_FILE, JSON.stringify(store, null, 2), "utf-8");
+}
+const VALID_SEVERITIES = ["critical", "high", "medium", "low", "info"];
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingSeverityOverride(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-severity-override — Override finding severity per project
+
+Usage:
+  judges finding-severity-override set --rule sql-injection --severity low --reason "Internal tool only"
+  judges finding-severity-override list
+  judges finding-severity-override remove --rule sql-injection
+  judges finding-severity-override clear
+
+Subcommands:
+  set                   Set a severity override
+  list                  List all overrides
+  remove                Remove an override
+  clear                 Clear all overrides
+
+Options:
+  --rule <ruleId>       Rule ID to override
+  --severity <level>    New severity (critical|high|medium|low|info)
+  --reason <text>       Reason for the override
+  --format json         JSON output
+  --help, -h            Show this help
+
+Override data stored in .judges/severity-overrides.json.
+`);
+        return;
+    }
+    const subcommand = argv.find((a) => ["set", "list", "remove", "clear"].includes(a)) || "list";
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const store = loadStore();
+    if (subcommand === "set") {
+        const ruleId = argv.find((_a, i) => argv[i - 1] === "--rule") || "";
+        const severity = argv.find((_a, i) => argv[i - 1] === "--severity") || "";
+        const reason = argv.find((_a, i) => argv[i - 1] === "--reason") || "";
+        if (!ruleId || !severity) {
+            console.error("Error: --rule and --severity are required.");
+            process.exitCode = 1;
+            return;
+        }
+        if (!VALID_SEVERITIES.includes(severity)) {
+            console.error(`Error: Invalid severity. Use: ${VALID_SEVERITIES.join(", ")}`);
+            process.exitCode = 1;
+            return;
+        }
+        // Replace existing or add
+        const existing = store.overrides.findIndex((o) => o.ruleId === ruleId);
+        const entry = {
+            ruleId,
+            originalSeverity: "",
+            overrideSeverity: severity,
+            reason,
+            addedAt: new Date().toISOString(),
+        };
+        if (existing >= 0) {
+            entry.originalSeverity = store.overrides[existing].originalSeverity;
+            store.overrides[existing] = entry;
+            console.log(`Updated severity override for "${ruleId}" to ${severity}.`);
+        }
+        else {
+            store.overrides.push(entry);
+            console.log(`Set severity override for "${ruleId}" to ${severity}.`);
+        }
+        saveStore(store);
+        return;
+    }
+    if (subcommand === "remove") {
+        const ruleId = argv.find((_a, i) => argv[i - 1] === "--rule") || "";
+        if (!ruleId) {
+            console.error("Error: --rule is required.");
+            process.exitCode = 1;
+            return;
+        }
+        const before = store.overrides.length;
+        store.overrides = store.overrides.filter((o) => o.ruleId !== ruleId);
+        if (store.overrides.length === before) {
+            console.error(`Error: No override found for "${ruleId}".`);
+            process.exitCode = 1;
+            return;
+        }
+        saveStore(store);
+        console.log(`Removed severity override for "${ruleId}".`);
+        return;
+    }
+    if (subcommand === "clear") {
+        saveStore({ version: "1.0.0", overrides: [] });
+        console.log("Severity overrides cleared.");
+        return;
+    }
+    // list
+    if (store.overrides.length === 0) {
+        console.log("No severity overrides. Use 'judges finding-severity-override set' to add one.");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(store.overrides, null, 2));
+        return;
+    }
+    console.log("\nSeverity Overrides:");
+    console.log("─".repeat(70));
+    for (const o of store.overrides) {
+        console.log(`  ${o.ruleId.padEnd(30)} → ${o.overrideSeverity.padEnd(10)} ${o.addedAt.slice(0, 10)}`);
+        if (o.reason)
+            console.log(`    Reason: ${o.reason}`);
+    }
+    console.log("─".repeat(70));
+    console.log(`  Total: ${store.overrides.length} override(s)`);
+}
+//# sourceMappingURL=finding-severity-override.js.map

package/dist/commands/finding-severity-override.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-severity-override.js","sourceRoot":"","sources":["../../src/commands/finding-severity-override.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAiBrC,+EAA+E;AAE/E,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;AAEjE,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3E,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAkB,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAoB;IACrC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAEvE,+EAA+E;AAE/E,MAAM,UAAU,0BAA0B,CAAC,IAAc;IACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;CAuBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAE1B,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QAEtF,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,KAAK,CAAC,iCAAiC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACvE,MAAM,KAAK,GAAqB;YAC9B,MAAM;YACN,gBAAgB,EAAE,EAAE;YACpB,gBAAgB,EAAE,QAAQ;YAC1B,MAAM;YACN,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAClC,CAAC;QAEF,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,gBAAgB,CAAC;YACpE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,kCAAkC,MAAM,QAAQ,QAAQ,GAAG,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,QAAQ,QAAQ,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC5C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;QACtC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,iCAAiC,MAAM,IAAI,CAAC,CAAC;YAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,kCAAkC,MAAM,IAAI,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,OAAO;IACP,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,SAAS,CAAC,MAAM,cAAc,CAAC,CAAC;AAChE,CAAC"}

package/dist/commands/review-approval.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Review-approval — Approval workflows for review results.
+ */
+export declare function runReviewApproval(argv: string[]): void;
+//# sourceMappingURL=review-approval.d.ts.map

package/dist/commands/review-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-approval.d.ts","sourceRoot":"","sources":["../../src/commands/review-approval.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8CH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAmHtD"}