@kevinrabun/judges 3.76.0 → 3.78.0

package/dist/commands/finding-impact-score.js

@@ -0,0 +1,124 @@
+/**
+ * Finding-impact-score — Score findings by estimated impact.
+ */
+import { readFileSync, existsSync } from "fs";
+function scoreFinding(finding) {
+    let score = 0;
+    const factors = [];
+    // Severity weight
+    const sevWeights = { critical: 40, high: 30, medium: 20, low: 10, info: 5 };
+    const sev = (finding.severity || "medium").toLowerCase();
+    score += sevWeights[sev] || 15;
+    factors.push(`severity:${sev}`);
+    // Confidence boost
+    if (finding.confidence !== undefined && finding.confidence !== null) {
+        const confBonus = Math.round(finding.confidence * 20);
+        score += confBonus;
+        factors.push(`confidence:${finding.confidence}`);
+    }
+    // Multiple affected lines
+    const lineCount = (finding.lineNumbers || []).length;
+    if (lineCount > 5) {
+        score += 15;
+        factors.push("wide-spread");
+    }
+    else if (lineCount > 1) {
+        score += 5;
+        factors.push("multi-line");
+    }
+    // Security-related keywords
+    const desc = ((finding.description || "") + " " + (finding.title || "")).toLowerCase();
+    if (desc.includes("injection") || desc.includes("xss") || desc.includes("sql")) {
+        score += 20;
+        factors.push("injection-risk");
+    }
+    if (desc.includes("authentication") || desc.includes("auth")) {
+        score += 15;
+        factors.push("auth-related");
+    }
+    if (desc.includes("sensitive") || desc.includes("credential") || desc.includes("secret")) {
+        score += 15;
+        factors.push("data-exposure");
+    }
+    if (desc.includes("denial") || desc.includes("dos")) {
+        score += 10;
+        factors.push("availability-risk");
+    }
+    return {
+        ruleId: finding.ruleId || "unknown",
+        title: finding.title || "",
+        severity: sev,
+        impactScore: Math.min(100, score),
+        factors,
+    };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingImpactScore(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-impact-score — Score findings by estimated impact
+
+Usage:
+  judges finding-impact-score --file <results> [options]
+
+Options:
+  --file <path>         Results file with findings (required)
+  --min-score <n>       Show only findings with score >= N
+  --top <n>             Show top N highest-impact findings (default: 10)
+  --format json         JSON output
+  --help, -h            Show this help
+
+Factors: severity, confidence, affected lines, security keywords.
+`);
+        return;
+    }
+    const file = argv.find((_a, i) => argv[i - 1] === "--file");
+    if (!file) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(file)) {
+        console.error(`Error: file not found: ${file}`);
+        process.exitCode = 1;
+        return;
+    }
+    const minScore = parseInt(argv.find((_a, i) => argv[i - 1] === "--min-score") || "0", 10);
+    const topN = parseInt(argv.find((_a, i) => argv[i - 1] === "--top") || "10", 10);
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    let findings;
+    try {
+        const data = JSON.parse(readFileSync(file, "utf-8"));
+        findings = Array.isArray(data) ? data : data.findings || [];
+    }
+    catch {
+        console.error("Error: could not parse results file");
+        process.exitCode = 1;
+        return;
+    }
+    let scored = findings
+        .map(scoreFinding)
+        .filter((s) => s.impactScore >= minScore)
+        .sort((a, b) => b.impactScore - a.impactScore);
+    scored = scored.slice(0, topN);
+    if (scored.length === 0) {
+        console.log("No findings meet the criteria.");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(scored, null, 2));
+        return;
+    }
+    console.log(`\nImpact Scores (top ${topN}):`);
+    console.log("═".repeat(70));
+    console.log("  Score  Severity    Rule ID                  Factors");
+    console.log("─".repeat(70));
+    for (const s of scored) {
+        const ruleDisplay = s.ruleId.length > 22 ? s.ruleId.slice(0, 19) + "..." : s.ruleId;
+        console.log(`  ${String(s.impactScore).padStart(5)}  ${s.severity.padEnd(10)}  ${ruleDisplay.padEnd(22)}  ${s.factors.join(", ")}`);
+    }
+    console.log("═".repeat(70));
+    const avg = scored.reduce((sum, s) => sum + s.impactScore, 0) / scored.length;
+    console.log(`  Average impact: ${avg.toFixed(1)}`);
+}
+//# sourceMappingURL=finding-impact-score.js.map

package/dist/commands/finding-impact-score.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-impact-score.js","sourceRoot":"","sources":["../../src/commands/finding-impact-score.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAY9C,SAAS,YAAY,CAAC,OAOrB;IACC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,kBAAkB;IAClB,MAAM,UAAU,GAA2B,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACpG,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,KAAK,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;IAEhC,mBAAmB;IACnB,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACtD,KAAK,IAAI,SAAS,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACrD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,KAAK,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9B,CAAC;SAAM,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAED,4BAA4B;IAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACvF,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,KAAK,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7D,KAAK,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzF,KAAK,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,KAAK,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS;QACnC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;QAC1B,QAAQ,EAAE,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;QACjC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1G,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACjG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,IAAI,QAOF,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,MAAM,GAAG,QAAQ;SAClB,GAAG,CAAC,YAAY,CAAC;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,QAAQ,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAEjD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAE/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpF,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/dist/commands/finding-root-cause.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-root-cause — Identify root causes of recurring findings.
+ */
+export declare function runFindingRootCause(argv: string[]): void;
+//# sourceMappingURL=finding-root-cause.d.ts.map

package/dist/commands/finding-root-cause.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-root-cause.d.ts","sourceRoot":"","sources":["../../src/commands/finding-root-cause.ts"],"names":[],"mappings":"AAAA;;GAEG;AAwEH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA+IxD"}

package/dist/commands/finding-root-cause.js

@@ -0,0 +1,185 @@
+/**
+ * Finding-root-cause — Identify root causes of recurring findings.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { dirname } from "path";
+// ─── Storage ────────────────────────────────────────────────────────────────
+const STORE_FILE = ".judges/root-causes.json";
+function loadStore() {
+    if (!existsSync(STORE_FILE))
+        return { version: "1.0.0", entries: [] };
+    try {
+        return JSON.parse(readFileSync(STORE_FILE, "utf-8"));
+    }
+    catch {
+        return { version: "1.0.0", entries: [] };
+    }
+}
+function saveStore(store) {
+    mkdirSync(dirname(STORE_FILE), { recursive: true });
+    writeFileSync(STORE_FILE, JSON.stringify(store, null, 2), "utf-8");
+}
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function inferRootCause(ruleId, description) {
+    const text = `${ruleId} ${description}`.toLowerCase();
+    if (text.includes("inject") || text.includes("sql") || text.includes("xss")) {
+        return { cause: "Unsanitized user input", recommendation: "Implement input validation and parameterized queries" };
+    }
+    if (text.includes("auth") || text.includes("credential") || text.includes("password")) {
+        return {
+            cause: "Missing or weak authentication",
+            recommendation: "Review authentication flow and enforce strong auth",
+        };
+    }
+    if (text.includes("hardcod") || text.includes("secret") || text.includes("api.key")) {
+        return { cause: "Hardcoded secrets", recommendation: "Use environment variables or secret managers" };
+    }
+    if (text.includes("error") || text.includes("exception") || text.includes("catch")) {
+        return { cause: "Insufficient error handling", recommendation: "Add structured error handling and logging" };
+    }
+    if (text.includes("log") || text.includes("sensitive") || text.includes("pii")) {
+        return { cause: "Sensitive data in logs", recommendation: "Sanitize log output and mask sensitive fields" };
+    }
+    if (text.includes("race") || text.includes("concurrent") || text.includes("async")) {
+        return { cause: "Concurrency issues", recommendation: "Add proper synchronization or use atomic operations" };
+    }
+    if (text.includes("deprecat") || text.includes("version") || text.includes("outdated")) {
+        return { cause: "Outdated dependencies", recommendation: "Update dependencies and review breaking changes" };
+    }
+    return { cause: "Code quality issue", recommendation: "Review coding standards and add linting rules" };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingRootCause(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-root-cause — Identify root causes of recurring findings
+
+Usage:
+  judges finding-root-cause analyze --file <results>    Analyze findings for root causes
+  judges finding-root-cause list                        List known root causes
+  judges finding-root-cause set --rule <id> --cause <text> --recommendation <text>
+  judges finding-root-cause clear                       Clear root cause data
+
+Options:
+  --file <path>            Results file
+  --rule <ruleId>          Rule ID
+  --cause <text>           Root cause description
+  --recommendation <text>  Recommended fix
+  --min-occurrences <n>    Min occurrences to report (default: 2)
+  --format json            JSON output
+  --help, -h               Show this help
+`);
+        return;
+    }
+    const subcommand = argv.find((a) => ["analyze", "list", "set", "clear"].includes(a));
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const store = loadStore();
+    if (subcommand === "analyze") {
+        const file = argv.find((_a, i) => argv[i - 1] === "--file");
+        if (!file) {
+            console.error("Error: --file required");
+            process.exitCode = 1;
+            return;
+        }
+        if (!existsSync(file)) {
+            console.error(`Error: file not found: ${file}`);
+            process.exitCode = 1;
+            return;
+        }
+        const minOccurrences = parseInt(argv.find((_a, i) => argv[i - 1] === "--min-occurrences") || "2", 10);
+        let findings;
+        try {
+            const data = JSON.parse(readFileSync(file, "utf-8"));
+            findings = Array.isArray(data) ? data : data.findings || [];
+        }
+        catch {
+            console.error("Error: could not parse results file");
+            process.exitCode = 1;
+            return;
+        }
+        // Group by rule
+        const ruleCounts = new Map();
+        for (const f of findings) {
+            const rid = f.ruleId || "unknown";
+            const existing = ruleCounts.get(rid);
+            if (existing) {
+                existing.count++;
+            }
+            else {
+                ruleCounts.set(rid, { count: 1, description: f.description || f.title || "" });
+            }
+        }
+        // Analyze recurring rules
+        const now = new Date().toISOString();
+        let analyzed = 0;
+        for (const [ruleId, info] of ruleCounts) {
+            if (info.count < minOccurrences)
+                continue;
+            const existing = store.entries.find((e) => e.ruleId === ruleId);
+            const { cause, recommendation } = inferRootCause(ruleId, info.description);
+            if (existing) {
+                existing.occurrences = info.count;
+                existing.lastUpdated = now;
+            }
+            else {
+                store.entries.push({ ruleId, occurrences: info.count, rootCause: cause, recommendation, lastUpdated: now });
+            }
+            analyzed++;
+        }
+        saveStore(store);
+        console.log(`Analyzed ${findings.length} findings, identified ${analyzed} recurring patterns.`);
+        return;
+    }
+    if (subcommand === "set") {
+        const ruleId = argv.find((_a, i) => argv[i - 1] === "--rule");
+        const cause = argv.find((_a, i) => argv[i - 1] === "--cause");
+        const recommendation = argv.find((_a, i) => argv[i - 1] === "--recommendation");
+        if (!ruleId || !cause) {
+            console.error("Error: --rule and --cause required");
+            process.exitCode = 1;
+            return;
+        }
+        const existing = store.entries.find((e) => e.ruleId === ruleId);
+        if (existing) {
+            existing.rootCause = cause;
+            existing.recommendation = recommendation || existing.recommendation;
+            existing.lastUpdated = new Date().toISOString();
+        }
+        else {
+            store.entries.push({
+                ruleId,
+                occurrences: 0,
+                rootCause: cause,
+                recommendation: recommendation || "",
+                lastUpdated: new Date().toISOString(),
+            });
+        }
+        saveStore(store);
+        console.log(`Root cause set for '${ruleId}'.`);
+        return;
+    }
+    if (subcommand === "clear") {
+        saveStore({ version: "1.0.0", entries: [] });
+        console.log("Root cause data cleared.");
+        return;
+    }
+    // Default: list
+    if (store.entries.length === 0) {
+        console.log("No root causes tracked. Use 'judges finding-root-cause analyze --file <f>'.");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(store.entries, null, 2));
+        return;
+    }
+    const sorted = [...store.entries].sort((a, b) => b.occurrences - a.occurrences);
+    console.log(`\nRoot Cause Analysis (${sorted.length} patterns):`);
+    console.log("═".repeat(70));
+    for (const e of sorted) {
+        console.log(`\n  ${e.ruleId} (${e.occurrences} occurrences)`);
+        console.log(`    Root cause:      ${e.rootCause}`);
+        console.log(`    Recommendation:  ${e.recommendation}`);
+    }
+    console.log("\n" + "═".repeat(70));
+}
+//# sourceMappingURL=finding-root-cause.js.map

package/dist/commands/finding-root-cause.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-root-cause.js","sourceRoot":"","sources":["../../src/commands/finding-root-cause.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAiB/B,+EAA+E;AAE/E,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAmB,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAqB;IACtC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,+EAA+E;AAE/E,SAAS,cAAc,CAAC,MAAc,EAAE,WAAmB;IACzD,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;IAEtD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,cAAc,EAAE,sDAAsD,EAAE,CAAC;IACrH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACtF,OAAO;YACL,KAAK,EAAE,gCAAgC;YACvC,cAAc,EAAE,oDAAoD;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,cAAc,EAAE,8CAA8C,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,KAAK,EAAE,6BAA6B,EAAE,cAAc,EAAE,2CAA2C,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,cAAc,EAAE,+CAA+C,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,qDAAqD,EAAE,CAAC;IAChH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,iDAAiD,EAAE,CAAC;IAC/G,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,+CAA+C,EAAE,CAAC;AAC1G,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;CAiBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAE1B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,mBAAmB,CAAC,IAAI,GAAG,EAChF,EAAE,CACH,CAAC;QAEF,IAAI,QAA6F,CAAC;QAClG,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACrD,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,gBAAgB;QAChB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkD,CAAC;QAC7E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;YAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc;gBAAE,SAAS;YAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YAChE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3E,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;gBAClC,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,QAAQ,EAAE,CAAC;QACb,CAAC;QAED,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,MAAM,yBAAyB,QAAQ,sBAAsB,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAC9E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACpD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAChE,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC;YAC3B,QAAQ,CAAC,cAAc,GAAG,cAAc,IAAI,QAAQ,CAAC,cAAc,CAAC;YACpE,QAAQ,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjB,MAAM;gBACN,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,cAAc,IAAI,EAAE;gBACpC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;QACD,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,IAAI,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,MAAM,aAAa,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,WAAW,eAAe,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/commands/finding-severity-histogram.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-severity-histogram — Visualize finding severity distribution.
+ */
+export declare function runFindingSeverityHistogram(argv: string[]): void;
+//# sourceMappingURL=finding-severity-histogram.d.ts.map

package/dist/commands/finding-severity-histogram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-severity-histogram.d.ts","sourceRoot":"","sources":["../../src/commands/finding-severity-histogram.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAoEhE"}

package/dist/commands/finding-severity-histogram.js

@@ -0,0 +1,67 @@
+/**
+ * Finding-severity-histogram — Visualize finding severity distribution.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingSeverityHistogram(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-severity-histogram — Visualize severity distribution
+
+Usage:
+  judges finding-severity-histogram --file <results> [options]
+
+Options:
+  --file <path>     Results file with findings (required)
+  --width <n>       Bar width in characters (default: 40)
+  --format json     JSON output
+  --help, -h        Show this help
+`);
+        return;
+    }
+    const file = argv.find((_a, i) => argv[i - 1] === "--file");
+    if (!file) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(file)) {
+        console.error(`Error: file not found: ${file}`);
+        process.exitCode = 1;
+        return;
+    }
+    const barWidth = parseInt(argv.find((_a, i) => argv[i - 1] === "--width") || "40", 10);
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    let findings;
+    try {
+        const data = JSON.parse(readFileSync(file, "utf-8"));
+        findings = Array.isArray(data) ? data : data.findings || [];
+    }
+    catch {
+        console.error("Error: could not parse results file");
+        process.exitCode = 1;
+        return;
+    }
+    const counts = { critical: 0, high: 0, medium: 0, low: 0, info: 0 };
+    for (const f of findings) {
+        const sev = (f.severity || "medium").toLowerCase();
+        counts[sev] = (counts[sev] || 0) + 1;
+    }
+    const maxCount = Math.max(...Object.values(counts), 1);
+    if (format === "json") {
+        console.log(JSON.stringify({ total: findings.length, distribution: counts }, null, 2));
+        return;
+    }
+    console.log(`\nSeverity Histogram (${findings.length} findings):`);
+    console.log("═".repeat(barWidth + 25));
+    const order = ["critical", "high", "medium", "low", "info"];
+    for (const sev of order) {
+        const count = counts[sev] || 0;
+        const barLen = Math.round((count / maxCount) * barWidth);
+        const bar = "#".repeat(barLen);
+        const pct = findings.length > 0 ? ((count / findings.length) * 100).toFixed(1) : "0.0";
+        console.log(`  ${sev.padEnd(10)} ${bar.padEnd(barWidth)} ${String(count).padStart(5)} (${pct}%)`);
+    }
+    console.log("═".repeat(barWidth + 25));
+}
+//# sourceMappingURL=finding-severity-histogram.js.map

package/dist/commands/finding-severity-histogram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-severity-histogram.js","sourceRoot":"","sources":["../../src/commands/finding-severity-histogram.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAE9C,+EAA+E;AAE/E,MAAM,UAAU,2BAA2B,CAAC,IAAc;IACxD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;CAWf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAE1F,IAAI,QAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAEvD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/commands/finding-suppress-pattern.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-suppress-pattern — Suppress findings matching glob patterns.
+ */
+export declare function runFindingSuppressPattern(argv: string[]): void;
+//# sourceMappingURL=finding-suppress-pattern.d.ts.map

package/dist/commands/finding-suppress-pattern.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-suppress-pattern.d.ts","sourceRoot":"","sources":["../../src/commands/finding-suppress-pattern.ts"],"names":[],"mappings":"AAAA;;GAEG;AA+CH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA+H9D"}

package/dist/commands/finding-suppress-pattern.js

@@ -0,0 +1,149 @@
+/**
+ * Finding-suppress-pattern — Suppress findings matching glob patterns.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
+import { dirname } from "path";
+// ─── Storage ────────────────────────────────────────────────────────────────
+const STORE_FILE = ".judges/suppress-patterns.json";
+function loadStore() {
+    if (!existsSync(STORE_FILE))
+        return { version: "1.0.0", patterns: [] };
+    try {
+        return JSON.parse(readFileSync(STORE_FILE, "utf-8"));
+    }
+    catch {
+        return { version: "1.0.0", patterns: [] };
+    }
+}
+function saveStore(store) {
+    mkdirSync(dirname(STORE_FILE), { recursive: true });
+    writeFileSync(STORE_FILE, JSON.stringify(store, null, 2), "utf-8");
+}
+function globToRegex(glob) {
+    const escaped = glob
+        .replace(/[.+^${}()|[\]\\]/g, "\\$&")
+        .replace(/\*/g, ".*")
+        .replace(/\?/g, ".");
+    return new RegExp(`^${escaped}$`, "i");
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingSuppressPattern(argv) {
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-suppress-pattern — Suppress findings by pattern
+
+Usage:
+  judges finding-suppress-pattern add --pattern <glob> --field <field> --reason <text>
+  judges finding-suppress-pattern list
+  judges finding-suppress-pattern test --file <results>
+  judges finding-suppress-pattern remove --pattern <glob>
+  judges finding-suppress-pattern clear
+
+Options:
+  --pattern <glob>     Glob pattern to match (e.g., "SEC-*", "*injection*")
+  --field <field>      Field to match: ruleId, title, severity (default: ruleId)
+  --reason <text>      Reason for suppression
+  --file <path>        Results file to test patterns against
+  --format json        JSON output
+  --help, -h           Show this help
+`);
+        return;
+    }
+    const subcommand = argv.find((a) => ["add", "list", "test", "remove", "clear"].includes(a));
+    const format = argv.find((_a, i) => argv[i - 1] === "--format") || "text";
+    const store = loadStore();
+    if (subcommand === "add") {
+        const pattern = argv.find((_a, i) => argv[i - 1] === "--pattern");
+        const field = (argv.find((_a, i) => argv[i - 1] === "--field") ||
+            "ruleId");
+        const reason = argv.find((_a, i) => argv[i - 1] === "--reason") || "";
+        if (!pattern) {
+            console.error("Error: --pattern required");
+            process.exitCode = 1;
+            return;
+        }
+        store.patterns.push({ pattern, field, reason, addedAt: new Date().toISOString() });
+        saveStore(store);
+        console.log(`Added suppress pattern: ${field} ~ '${pattern}'`);
+        return;
+    }
+    if (subcommand === "remove") {
+        const pattern = argv.find((_a, i) => argv[i - 1] === "--pattern");
+        if (!pattern) {
+            console.error("Error: --pattern required");
+            process.exitCode = 1;
+            return;
+        }
+        const before = store.patterns.length;
+        store.patterns = store.patterns.filter((p) => p.pattern !== pattern);
+        saveStore(store);
+        console.log(`Removed ${before - store.patterns.length} pattern(s).`);
+        return;
+    }
+    if (subcommand === "clear") {
+        saveStore({ version: "1.0.0", patterns: [] });
+        console.log("All suppress patterns cleared.");
+        return;
+    }
+    if (subcommand === "test") {
+        const file = argv.find((_a, i) => argv[i - 1] === "--file");
+        if (!file) {
+            console.error("Error: --file required");
+            process.exitCode = 1;
+            return;
+        }
+        if (!existsSync(file)) {
+            console.error(`Error: file not found: ${file}`);
+            process.exitCode = 1;
+            return;
+        }
+        let findings;
+        try {
+            const data = JSON.parse(readFileSync(file, "utf-8"));
+            findings = Array.isArray(data) ? data : data.findings || [];
+        }
+        catch {
+            console.error("Error: could not parse results file");
+            process.exitCode = 1;
+            return;
+        }
+        let suppressed = 0;
+        let kept = 0;
+        for (const f of findings) {
+            let isSuppressed = false;
+            for (const p of store.patterns) {
+                const value = f[p.field] || "";
+                if (globToRegex(p.pattern).test(value)) {
+                    isSuppressed = true;
+                    break;
+                }
+            }
+            if (isSuppressed)
+                suppressed++;
+            else
+                kept++;
+        }
+        if (format === "json") {
+            console.log(JSON.stringify({ total: findings.length, suppressed, kept }, null, 2));
+            return;
+        }
+        console.log(`Test results: ${suppressed} suppressed, ${kept} kept (${findings.length} total)`);
+        return;
+    }
+    // Default: list
+    if (store.patterns.length === 0) {
+        console.log("No suppress patterns defined.");
+        return;
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(store.patterns, null, 2));
+        return;
+    }
+    console.log(`\nSuppress Patterns (${store.patterns.length}):`);
+    console.log("═".repeat(60));
+    for (const p of store.patterns) {
+        console.log(`  ${p.field.padEnd(10)} ~ '${p.pattern}'${p.reason ? ` — ${p.reason}` : ""}`);
+    }
+    console.log("═".repeat(60));
+}
+//# sourceMappingURL=finding-suppress-pattern.js.map

package/dist/commands/finding-suppress-pattern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-suppress-pattern.js","sourceRoot":"","sources":["../../src/commands/finding-suppress-pattern.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAgB/B,+EAA+E;AAE/E,MAAM,UAAU,GAAG,gCAAgC,CAAC;AAEpD,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAkB,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAoB;IACrC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,OAAO,GAAG,IAAI;SACjB,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;SACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,yBAAyB,CAAC,IAAc;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;CAiBf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAE1B,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC;YAC5E,QAAQ,CAA6B,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;QACtF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACnF,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,OAAO,OAAO,GAAG,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACrE,SAAS,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,QAAuE,CAAC;QAC5E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACrD,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC/B,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvC,YAAY,GAAG,IAAI,CAAC;oBACpB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,YAAY;gBAAE,UAAU,EAAE,CAAC;;gBAC1B,IAAI,EAAE,CAAC;QACd,CAAC;QAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,UAAU,gBAAgB,IAAI,UAAU,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC;QAC/F,OAAO;IACT,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/review-auto-merge.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Review-auto-merge — Auto-merge reviews that pass all checks.
+ */
+export declare function runReviewAutoMerge(argv: string[]): void;
+//# sourceMappingURL=review-auto-merge.d.ts.map

package/dist/commands/review-auto-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-auto-merge.d.ts","sourceRoot":"","sources":["../../src/commands/review-auto-merge.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmDH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAiJvD"}