@kevinrabun/judges 3.76.0 → 3.78.0

package/dist/commands/finding-auto-label.js

@@ -0,0 +1,221 @@
+/**
+ * Finding-auto-label — Automatically label findings based on content analysis.
+ */
+import { readFileSync, existsSync, writeFileSync, mkdirSync } from "fs";
+import { dirname, join } from "path";
+const BUILTIN_RULES = [
+    {
+        label: "security",
+        keywords: ["injection", "xss", "csrf", "auth", "vuln", "password", "secret", "token", "credential", "ssrf"],
+        rulePatterns: ["SEC-", "VULN-", "AUTH-", "CRYPTO-"],
+        severities: [],
+    },
+    {
+        label: "performance",
+        keywords: ["performance", "n+1", "slow", "bottleneck", "memory leak", "cache", "latency", "optimization"],
+        rulePatterns: ["PERF-"],
+        severities: [],
+    },
+    {
+        label: "quality",
+        keywords: ["code smell", "duplication", "complexity", "maintainability", "readability", "dead code"],
+        rulePatterns: ["QUAL-", "SMELL-"],
+        severities: [],
+    },
+    {
+        label: "bug",
+        keywords: ["null pointer", "undefined", "type error", "race condition", "deadlock", "off-by-one", "boundary"],
+        rulePatterns: ["BUG-", "ERR-"],
+        severities: ["critical", "high"],
+    },
+    {
+        label: "style",
+        keywords: ["naming", "formatting", "convention", "whitespace", "indentation", "lint"],
+        rulePatterns: ["STYLE-", "FMT-"],
+        severities: [],
+    },
+    {
+        label: "documentation",
+        keywords: ["missing doc", "jsdoc", "comment", "readme", "documentation"],
+        rulePatterns: ["DOC-"],
+        severities: [],
+    },
+    {
+        label: "dependency",
+        keywords: ["dependency", "outdated", "vulnerable package", "npm", "import", "require"],
+        rulePatterns: ["DEP-"],
+        severities: [],
+    },
+];
+// ─── Helpers ────────────────────────────────────────────────────────────────
+function customRulesFile() {
+    return join(process.cwd(), ".judges", "auto-label-rules.json");
+}
+function loadCustomRules() {
+    const f = customRulesFile();
+    if (!existsSync(f))
+        return [];
+    try {
+        return JSON.parse(readFileSync(f, "utf-8"));
+    }
+    catch {
+        return [];
+    }
+}
+function saveCustomRules(rules) {
+    const f = customRulesFile();
+    const d = dirname(f);
+    if (!existsSync(d))
+        mkdirSync(d, { recursive: true });
+    writeFileSync(f, JSON.stringify(rules, null, 2));
+}
+function applyLabels(finding, rules) {
+    const labels = [];
+    const text = `${finding.ruleId || ""} ${finding.title || ""} ${finding.description || ""}`.toLowerCase();
+    for (const rule of rules) {
+        let matched = false;
+        // Keyword match
+        if (rule.keywords.some((kw) => text.includes(kw.toLowerCase())))
+            matched = true;
+        // RuleId pattern match
+        if (!matched && finding.ruleId && rule.rulePatterns.some((p) => finding.ruleId.startsWith(p)))
+            matched = true;
+        // Severity match
+        if (!matched && rule.severities.length > 0 && finding.severity && rule.severities.includes(finding.severity))
+            matched = true;
+        if (matched)
+            labels.push(rule.label);
+    }
+    return [...new Set(labels)];
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingAutoLabel(argv) {
+    const sub = argv[0];
+    if (!sub || sub === "--help" || sub === "-h") {
+        console.log(`
+judges finding-auto-label — Auto-label findings based on content
+
+Usage:
+  judges finding-auto-label apply  --file <results.json> [--format json]
+  judges finding-auto-label rules  [list | add | remove]
+  judges finding-auto-label test   --text <text>
+
+Subcommands:
+  apply                Apply labels to findings in a result file
+  rules list           List all label rules (builtin + custom)
+  rules add            Add a custom rule: --label <l> --keywords <k1,k2>
+  rules remove         Remove custom rule: --label <l>
+  test                 Test which labels match a text string
+
+Options:
+  --file <path>        Result file (apply subcommand)
+  --label <name>       Label name
+  --keywords <list>    Comma-separated keywords for matching
+  --text <text>        Text to test labeling on
+  --format json        JSON output
+  --help, -h           Show this help
+`);
+        return;
+    }
+    const args = argv.slice(1);
+    const allRules = [...BUILTIN_RULES, ...loadCustomRules()];
+    if (sub === "apply") {
+        const file = args.find((_a, i) => args[i - 1] === "--file");
+        const format = args.find((_a, i) => args[i - 1] === "--format") || "text";
+        if (!file) {
+            console.error("Error: --file required");
+            process.exitCode = 1;
+            return;
+        }
+        if (!existsSync(file)) {
+            console.error(`Error: file not found: ${file}`);
+            process.exitCode = 1;
+            return;
+        }
+        let verdict;
+        try {
+            verdict = JSON.parse(readFileSync(file, "utf-8"));
+        }
+        catch {
+            console.error("Error: could not parse file");
+            process.exitCode = 1;
+            return;
+        }
+        const findings = verdict.findings || [];
+        const labeled = findings.map((f) => ({ ...f, autoLabels: applyLabels(f, allRules) }));
+        const withLabels = labeled.filter((f) => f.autoLabels.length > 0);
+        if (format === "json") {
+            console.log(JSON.stringify({ total: findings.length, labeled: withLabels.length, findings: labeled }, null, 2));
+            return;
+        }
+        console.log(`\nAuto-Label Results:`);
+        console.log("═".repeat(70));
+        console.log(`  Total findings: ${findings.length}`);
+        console.log(`  Labeled: ${withLabels.length}`);
+        console.log("─".repeat(70));
+        for (const f of labeled.slice(0, 25)) {
+            const tags = f.autoLabels.length > 0 ? f.autoLabels.map((l) => `[${l}]`).join(" ") : "[unclassified]";
+            console.log(`  ${(f.ruleId || "unknown").padEnd(25)} ${tags}`);
+        }
+        if (labeled.length > 25)
+            console.log(`  ... and ${labeled.length - 25} more`);
+        console.log("═".repeat(70));
+    }
+    else if (sub === "rules") {
+        const action = args[0] || "list";
+        if (action === "list") {
+            console.log("\nLabel Rules:");
+            console.log("═".repeat(60));
+            for (const r of allRules) {
+                const src = BUILTIN_RULES.includes(r) ? "builtin" : "custom";
+                console.log(`  ${r.label.padEnd(18)} [${src}]  keywords: ${r.keywords.slice(0, 4).join(", ")}${r.keywords.length > 4 ? "..." : ""}`);
+            }
+            console.log("═".repeat(60));
+        }
+        else if (action === "add") {
+            const label = args.find((_a, i) => args[i - 1] === "--label");
+            const kwStr = args.find((_a, i) => args[i - 1] === "--keywords");
+            if (!label || !kwStr) {
+                console.error("Error: --label and --keywords required");
+                process.exitCode = 1;
+                return;
+            }
+            const customs = loadCustomRules();
+            customs.push({ label, keywords: kwStr.split(",").map((k) => k.trim()), rulePatterns: [], severities: [] });
+            saveCustomRules(customs);
+            console.log(`Added custom rule: ${label}`);
+        }
+        else if (action === "remove") {
+            const label = args.find((_a, i) => args[i - 1] === "--label");
+            if (!label) {
+                console.error("Error: --label required");
+                process.exitCode = 1;
+                return;
+            }
+            const customs = loadCustomRules().filter((r) => r.label !== label);
+            saveCustomRules(customs);
+            console.log(`Removed custom rule: ${label}`);
+        }
+    }
+    else if (sub === "test") {
+        const text = args.find((_a, i) => args[i - 1] === "--text");
+        if (!text) {
+            console.error("Error: --text required");
+            process.exitCode = 1;
+            return;
+        }
+        const fake = { ruleId: "", severity: "medium", title: text, description: text, recommendation: "" };
+        const labels = applyLabels(fake, allRules);
+        if (labels.length > 0) {
+            console.log(`Labels matched: ${labels.join(", ")}`);
+        }
+        else {
+            console.log("No labels matched.");
+        }
+    }
+    else {
+        console.error(`Unknown subcommand: ${sub}. Use --help for usage.`);
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=finding-auto-label.js.map

package/dist/commands/finding-auto-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-auto-label.js","sourceRoot":"","sources":["../../src/commands/finding-auto-label.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAWrC,MAAM,aAAa,GAAgB;IACjC;QACE,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC;QAC3G,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;QACnD,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC;QACzG,YAAY,EAAE,CAAC,OAAO,CAAC;QACvB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,WAAW,CAAC;QACpG,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;QAC7G,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;QAC9B,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;KACjC;IACD;QACE,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC;QACrF,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;QAChC,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,eAAe;QACtB,QAAQ,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC;QACxE,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,UAAU,EAAE,EAAE;KACf;IACD;QACE,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;QACtF,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,UAAU,EAAE,EAAE;KACf;CACF,CAAC;AAEF,+EAA+E;AAE/E,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB;IACzC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB,EAAE,KAAkB;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IAEzG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,gBAAgB;QAChB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;QAChF,uBAAuB;QACvB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;QAC9G,iBAAiB;QACjB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC1G,OAAO,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEpB,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;CAsBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,eAAe,EAAE,CAAC,CAAC;IAE1D,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;QAC1F,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,OAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAElE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChH,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE5B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACtG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;SAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;QACjC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC7D,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACxH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,CAAC;aAAM,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;YACjF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3G,eAAe,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;YAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;gBACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;YACnE,eAAe,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAY,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;QAC7G,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,yBAAyB,CAAC,CAAC;QACnE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/commands/finding-correlate.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-correlate — Correlate related findings across files.
+ */
+export declare function runFindingCorrelate(argv: string[]): void;
+//# sourceMappingURL=finding-correlate.d.ts.map

package/dist/commands/finding-correlate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-correlate.d.ts","sourceRoot":"","sources":["../../src/commands/finding-correlate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAeH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAsFxD"}

package/dist/commands/finding-correlate.js

@@ -0,0 +1,89 @@
+/**
+ * Finding-correlate — Correlate related findings across files.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingCorrelate(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-correlate — Correlate related findings across files
+
+Usage:
+  judges finding-correlate --file <results> [options]
+
+Options:
+  --file <path>         Results file with findings (required)
+  --group-by <field>    Group by: rule, severity, title (default: rule)
+  --min-count <n>       Minimum group size to show (default: 2)
+  --format json         JSON output
+  --help, -h            Show this help
+
+Groups related findings to identify patterns and systemic issues.
+`);
+        return;
+    }
+    const file = argv.find((_a, i) => argv[i - 1] === "--file");
+    if (!file) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(file)) {
+        console.error(`Error: file not found: ${file}`);
+        process.exitCode = 1;
+        return;
+    }
+    const groupBy = argv.find((_a, i) => argv[i - 1] === "--group-by") || "rule";
+    const minCount = parseInt(argv.find((_a, i) => argv[i - 1] === "--min-count") || "2", 10);
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    let findings;
+    try {
+        const data = JSON.parse(readFileSync(file, "utf-8"));
+        findings = Array.isArray(data) ? data : data.findings || [];
+    }
+    catch {
+        console.error("Error: could not parse results file");
+        process.exitCode = 1;
+        return;
+    }
+    // Group findings
+    const groups = new Map();
+    for (const f of findings) {
+        let key;
+        if (groupBy === "severity")
+            key = (f.severity || "medium").toLowerCase();
+        else if (groupBy === "title")
+            key = f.title || "unknown";
+        else
+            key = f.ruleId || "unknown";
+        if (!groups.has(key)) {
+            groups.set(key, { ruleId: key, severity: f.severity || "medium", count: 0, findings: [] });
+        }
+        const g = groups.get(key);
+        g.count++;
+        g.findings.push({ title: f.title || "", lineNumbers: f.lineNumbers || [] });
+    }
+    const sorted = [...groups.values()].filter((g) => g.count >= minCount).sort((a, b) => b.count - a.count);
+    if (sorted.length === 0) {
+        console.log("No correlated groups found (try lowering --min-count).");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(sorted, null, 2));
+        return;
+    }
+    console.log(`\nCorrelated Findings (grouped by ${groupBy}, min ${minCount}):`);
+    console.log("═".repeat(65));
+    for (const g of sorted) {
+        console.log(`\n  [${g.severity.toUpperCase()}] ${g.ruleId} — ${g.count} occurrences`);
+        for (const f of g.findings.slice(0, 5)) {
+            const lines = f.lineNumbers.length > 0 ? ` (L${f.lineNumbers.join(",")})` : "";
+            console.log(`    • ${f.title}${lines}`);
+        }
+        if (g.findings.length > 5)
+            console.log(`    ... and ${g.findings.length - 5} more`);
+    }
+    console.log("\n" + "═".repeat(65));
+    console.log(`  ${sorted.length} groups, ${sorted.reduce((s, g) => s + g.count, 0)} total findings`);
+}
+//# sourceMappingURL=finding-correlate.js.map

package/dist/commands/finding-correlate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-correlate.js","sourceRoot":"","sources":["../../src/commands/finding-correlate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAW9C,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,MAAM,CAAC;IAC7F,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,IAAI,QAA+F,CAAC;IACpG,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,iBAAiB;IACjB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAW,CAAC;QAChB,IAAI,OAAO,KAAK,UAAU;YAAE,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;aACpE,IAAI,OAAO,KAAK,OAAO;YAAE,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC;;YACpD,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QAEjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QAC3B,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAEzG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qCAAqC,OAAO,SAAS,QAAQ,IAAI,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;QACtF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;AACtG,CAAC"}

package/dist/commands/finding-dedup-cross-file.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-dedup-cross-file — Deduplicate findings across multiple result files.
+ */
+export declare function runFindingDedupCrossFile(argv: string[]): void;
+//# sourceMappingURL=finding-dedup-cross-file.d.ts.map

package/dist/commands/finding-dedup-cross-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-dedup-cross-file.d.ts","sourceRoot":"","sources":["../../src/commands/finding-dedup-cross-file.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgBH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAmG7D"}

package/dist/commands/finding-dedup-cross-file.js

@@ -0,0 +1,96 @@
+/**
+ * Finding-dedup-cross-file — Deduplicate findings across multiple result files.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingDedupCrossFile(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-dedup-cross-file — Deduplicate findings across result files
+
+Usage:
+  judges finding-dedup-cross-file --files <f1,f2,...> [options]
+
+Options:
+  --files <list>      Comma-separated result files (required)
+  --key <field>       Dedup key: ruleId, title, ruleId+title (default: ruleId)
+  --format json       JSON output
+  --help, -h          Show this help
+
+Merges and deduplicates findings from multiple review runs.
+`);
+        return;
+    }
+    const filesStr = argv.find((_a, i) => argv[i - 1] === "--files");
+    if (!filesStr) {
+        console.error("Error: --files required");
+        process.exitCode = 1;
+        return;
+    }
+    const files = filesStr
+        .split(",")
+        .map((f) => f.trim())
+        .filter(Boolean);
+    const key = argv.find((_a, i) => argv[i - 1] === "--key") || "ruleId";
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const allFindings = [];
+    for (const file of files) {
+        if (!existsSync(file)) {
+            console.error(`Warning: file not found: ${file}`);
+            continue;
+        }
+        try {
+            const data = JSON.parse(readFileSync(file, "utf-8"));
+            const findings = Array.isArray(data) ? data : data.findings || [];
+            for (const f of findings) {
+                allFindings.push({ ...f, source: file });
+            }
+        }
+        catch {
+            console.error(`Warning: could not parse: ${file}`);
+        }
+    }
+    // Deduplicate
+    const groups = new Map();
+    for (const f of allFindings) {
+        let dedupKey;
+        if (key === "title")
+            dedupKey = f.title || "unknown";
+        else if (key === "ruleId+title")
+            dedupKey = `${f.ruleId || ""}:${f.title || ""}`;
+        else
+            dedupKey = f.ruleId || "unknown";
+        if (!groups.has(dedupKey)) {
+            groups.set(dedupKey, {
+                ruleId: f.ruleId || "unknown",
+                title: f.title || "",
+                severity: f.severity || "medium",
+                occurrences: 0,
+                sources: [],
+            });
+        }
+        const g = groups.get(dedupKey);
+        g.occurrences++;
+        if (!g.sources.includes(f.source))
+            g.sources.push(f.source);
+    }
+    const deduped = [...groups.values()].sort((a, b) => b.occurrences - a.occurrences);
+    const duplicatesRemoved = allFindings.length - deduped.length;
+    if (format === "json") {
+        console.log(JSON.stringify({ totalInput: allFindings.length, uniqueFindings: deduped.length, duplicatesRemoved, findings: deduped }, null, 2));
+        return;
+    }
+    console.log(`\nCross-File Deduplication:`);
+    console.log("═".repeat(65));
+    console.log(`  Input: ${allFindings.length} findings from ${files.length} files`);
+    console.log(`  Unique: ${deduped.length} (${duplicatesRemoved} duplicates removed)`);
+    console.log("─".repeat(65));
+    for (const d of deduped.slice(0, 20)) {
+        const srcCount = d.sources.length > 1 ? ` (${d.sources.length} files)` : "";
+        console.log(`  ${d.ruleId.padEnd(25)} x${d.occurrences}${srcCount}  [${d.severity.toUpperCase()}]`);
+    }
+    if (deduped.length > 20)
+        console.log(`  ... and ${deduped.length - 20} more`);
+    console.log("═".repeat(65));
+}
+//# sourceMappingURL=finding-dedup-cross-file.js.map

package/dist/commands/finding-dedup-cross-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-dedup-cross-file.js","sourceRoot":"","sources":["../../src/commands/finding-dedup-cross-file.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAY9C,+EAA+E;AAE/E,MAAM,UAAU,wBAAwB,CAAC,IAAc;IACrD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAaf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,QAAQ,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,MAAM,WAAW,GAAkF,EAAE,CAAC;IAEtG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;YAClE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,cAAc;IACd,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,QAAgB,CAAC;QACrB,IAAI,GAAG,KAAK,OAAO;YAAE,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC;aAChD,IAAI,GAAG,KAAK,cAAc;YAAE,QAAQ,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;;YAC5E,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACnB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;gBAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ;gBAChC,WAAW,EAAE,CAAC;gBACd,OAAO,EAAE,EAAE;aACZ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;QAChC,CAAC,CAAC,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IACnF,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAE9D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,EAAE,EACxG,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,YAAY,WAAW,CAAC,MAAM,kBAAkB,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,KAAK,iBAAiB,sBAAsB,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,QAAQ,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-dependency-check.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-dependency-check — Check findings related to dependency vulnerabilities.
+ */
+export declare function runFindingDependencyCheck(argv: string[]): void;
+//# sourceMappingURL=finding-dependency-check.d.ts.map

package/dist/commands/finding-dependency-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-dependency-check.d.ts","sourceRoot":"","sources":["../../src/commands/finding-dependency-check.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAgI9D"}

package/dist/commands/finding-dependency-check.js

@@ -0,0 +1,120 @@
+/**
+ * Finding-dependency-check — Check findings related to dependency vulnerabilities.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingDependencyCheck(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-dependency-check — Analyze dependency-related findings
+
+Usage:
+  judges finding-dependency-check --file <results> [options]
+  judges finding-dependency-check scan --lockfile <path>
+
+Options:
+  --file <path>        Results file with findings
+  --lockfile <path>    package-lock.json or similar
+  --min-severity <s>   Filter by minimum severity
+  --format json        JSON output
+  --help, -h           Show this help
+
+Identifies findings related to dependency vulnerabilities.
+`);
+        return;
+    }
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const subcommand = argv.find((a) => a === "scan");
+    if (subcommand === "scan") {
+        const lockfile = argv.find((_a, i) => argv[i - 1] === "--lockfile") || "package-lock.json";
+        if (!existsSync(lockfile)) {
+            console.error(`Error: lockfile not found: ${lockfile}`);
+            process.exitCode = 1;
+            return;
+        }
+        let lockData;
+        try {
+            lockData = JSON.parse(readFileSync(lockfile, "utf-8"));
+        }
+        catch {
+            console.error("Error: could not parse lockfile");
+            process.exitCode = 1;
+            return;
+        }
+        const deps = lockData.dependencies || {};
+        const depCount = Object.keys(deps).length;
+        const pkgs = lockData.packages || {};
+        const pkgCount = Object.keys(pkgs).length;
+        if (format === "json") {
+            console.log(JSON.stringify({ lockfile, dependencies: depCount, packages: pkgCount }, null, 2));
+            return;
+        }
+        console.log(`\nDependency Scan: ${lockfile}`);
+        console.log("═".repeat(45));
+        console.log(`  Dependencies: ${depCount}`);
+        console.log(`  Packages:     ${pkgCount}`);
+        console.log("═".repeat(45));
+        console.log("  Use 'judges eval' with dependency judges for full vulnerability analysis.");
+        return;
+    }
+    // Analyze findings for dependency-related issues
+    const file = argv.find((_a, i) => argv[i - 1] === "--file");
+    if (!file) {
+        console.error("Error: --file or scan subcommand required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(file)) {
+        console.error(`Error: file not found: ${file}`);
+        process.exitCode = 1;
+        return;
+    }
+    const minSeverity = argv.find((_a, i) => argv[i - 1] === "--min-severity");
+    const sevOrder = { critical: 4, high: 3, medium: 2, low: 1, info: 0 };
+    let findings;
+    try {
+        const data = JSON.parse(readFileSync(file, "utf-8"));
+        findings = Array.isArray(data) ? data : data.findings || [];
+    }
+    catch {
+        console.error("Error: could not parse results file");
+        process.exitCode = 1;
+        return;
+    }
+    // Filter for dependency-related findings
+    const depKeywords = [
+        "dependency",
+        "package",
+        "module",
+        "import",
+        "require",
+        "version",
+        "cve",
+        "vulnerability",
+        "outdated",
+        "deprecated",
+    ];
+    let depFindings = findings.filter((f) => {
+        const text = `${f.ruleId || ""} ${f.title || ""} ${f.description || ""}`.toLowerCase();
+        return depKeywords.some((k) => text.includes(k));
+    });
+    if (minSeverity) {
+        const minLevel = sevOrder[minSeverity.toLowerCase()] || 0;
+        depFindings = depFindings.filter((f) => (sevOrder[(f.severity || "medium").toLowerCase()] || 0) >= minLevel);
+    }
+    if (depFindings.length === 0) {
+        console.log("No dependency-related findings.");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(depFindings, null, 2));
+        return;
+    }
+    console.log(`\nDependency-Related Findings (${depFindings.length}):`);
+    console.log("═".repeat(65));
+    for (const f of depFindings) {
+        console.log(`  [${(f.severity || "medium").toUpperCase()}] ${f.ruleId || "?"}: ${f.title || ""}`);
+    }
+    console.log("═".repeat(65));
+}
+//# sourceMappingURL=finding-dependency-check.js.map

package/dist/commands/finding-dependency-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-dependency-check.js","sourceRoot":"","sources":["../../src/commands/finding-dependency-check.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAE9C,+EAA+E;AAE/E,MAAM,UAAU,yBAAyB,CAAC,IAAc;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;CAef,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAElD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,IAAI,mBAAmB,CAAC;QAC3G,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,QAGH,CAAC;QACF,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAE1C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,iDAAiD;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAE9F,IAAI,QAA6F,CAAC;IAClG,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,WAAW,GAAG;QAClB,YAAY;QACZ,SAAS;QACT,QAAQ;QACR,QAAQ;QACR,SAAS;QACT,SAAS;QACT,KAAK;QACL,eAAe;QACf,UAAU;QACV,YAAY;KACb,CAAC;IACF,IAAI,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;QACvF,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC;IAC/G,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-impact-score.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-impact-score — Score findings by estimated impact.
+ */
+export declare function runFindingImpactScore(argv: string[]): void;
+//# sourceMappingURL=finding-impact-score.d.ts.map

package/dist/commands/finding-impact-score.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-impact-score.d.ts","sourceRoot":"","sources":["../../src/commands/finding-impact-score.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8EH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAoF1D"}