@kevinrabun/judges 3.82.0 → 3.84.0

package/dist/commands/finding-fix-priority.js

@@ -0,0 +1,99 @@
+/**
+ * Finding-fix-priority — Prioritize findings for fixing based on impact.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── Helpers ────────────────────────────────────────────────────────────────
+const SEV_WEIGHT = { critical: 10, high: 7, medium: 4, low: 2, info: 1 };
+function prioritize(verdict) {
+    return verdict.findings
+        .map((f) => {
+        const sev = (f.severity || "medium").toLowerCase();
+        const conf = f.confidence !== undefined && f.confidence !== null ? f.confidence : 0.7;
+        const sevScore = SEV_WEIGHT[sev] || 4;
+        const hasFix = f.recommendation ? 1.2 : 1.0;
+        const priorityScore = Math.round(sevScore * conf * hasFix * 100) / 100;
+        const reasons = [];
+        if (sev === "critical" || sev === "high")
+            reasons.push("high severity");
+        if (conf >= 0.8)
+            reasons.push("high confidence");
+        if (f.recommendation)
+            reasons.push("has fix recommendation");
+        if (f.patch)
+            reasons.push("has patch available");
+        return {
+            rank: 0,
+            ruleId: f.ruleId,
+            title: f.title,
+            severity: sev,
+            confidence: conf,
+            priorityScore,
+            reason: reasons.join(", ") || "standard priority",
+        };
+    })
+        .sort((a, b) => b.priorityScore - a.priorityScore)
+        .map((f, i) => ({ ...f, rank: i + 1 }));
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingFixPriority(argv) {
+    const fileIdx = argv.indexOf("--file");
+    const formatIdx = argv.indexOf("--format");
+    const topIdx = argv.indexOf("--top");
+    const filePath = fileIdx >= 0 ? argv[fileIdx + 1] : undefined;
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    const top = topIdx >= 0 ? parseInt(argv[topIdx + 1], 10) : 0;
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-fix-priority — Prioritize findings for fixing
+
+Usage:
+  judges finding-fix-priority --file <verdict.json> [--format table|json]
+                               [--top <n>]
+
+Options:
+  --file <path>      Path to verdict JSON file (required)
+  --format <fmt>     Output format: table (default), json
+  --top <n>          Show only top N findings
+  --help, -h         Show this help
+`);
+        return;
+    }
+    if (!filePath) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(filePath)) {
+        console.error(`Error: not found: ${filePath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        console.error("Error: invalid JSON");
+        process.exitCode = 1;
+        return;
+    }
+    let results = prioritize(verdict);
+    if (top > 0)
+        results = results.slice(0, top);
+    if (format === "json") {
+        console.log(JSON.stringify(results, null, 2));
+        return;
+    }
+    console.log(`\nFix Priority (${results.length} findings)`);
+    console.log("═".repeat(70));
+    console.log(`${"#".padEnd(4)} ${"Score".padEnd(8)} ${"Severity".padEnd(10)} Title`);
+    console.log("─".repeat(70));
+    for (const r of results) {
+        const title = r.title.length > 38 ? r.title.slice(0, 38) + "…" : r.title;
+        console.log(`${String(r.rank).padEnd(4)} ${String(r.priorityScore).padEnd(8)} ${r.severity.padEnd(10)} ${title}`);
+        if (r.reason)
+            console.log(`     ${r.reason}`);
+    }
+    console.log("═".repeat(70));
+}
+//# sourceMappingURL=finding-fix-priority.js.map

package/dist/commands/finding-fix-priority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-fix-priority.js","sourceRoot":"","sources":["../../src/commands/finding-fix-priority.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAe9C,+EAA+E;AAE/E,MAAM,UAAU,GAA2B,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAEjG,SAAS,UAAU,CAAC,OAAwB;IAC1C,OAAO,OAAO,CAAC,QAAQ;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;QACtF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,GAAG,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;QAEvE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxE,IAAI,IAAI,IAAI,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,cAAc;YAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAEjD,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,IAAI;YAChB,aAAa;YACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB;SAClD,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE7C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;QAClH,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-hotfix-suggest.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Finding-hotfix-suggest — Suggest quick hotfixes for common findings.
+ *
+ * Provides targeted one-liner or small code snippets to address
+ * frequently-encountered security and quality issues.
+ */
+export declare function runFindingHotfixSuggest(argv: string[]): void;
+//# sourceMappingURL=finding-hotfix-suggest.d.ts.map

package/dist/commands/finding-hotfix-suggest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-hotfix-suggest.d.ts","sourceRoot":"","sources":["../../src/commands/finding-hotfix-suggest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiHH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA4E5D"}

package/dist/commands/finding-hotfix-suggest.js

@@ -0,0 +1,171 @@
+/**
+ * Finding-hotfix-suggest — Suggest quick hotfixes for common findings.
+ *
+ * Provides targeted one-liner or small code snippets to address
+ * frequently-encountered security and quality issues.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── Hotfix Database ────────────────────────────────────────────────────────
+const HOTFIX_PATTERNS = [
+    {
+        keywords: ["sql injection", "sql"],
+        category: "injection",
+        hotfix: "Use parameterized queries instead of string concatenation",
+    },
+    {
+        keywords: ["xss", "cross-site scripting", "innerhtml"],
+        category: "xss",
+        hotfix: "Sanitize user input with DOMPurify or use textContent instead of innerHTML",
+    },
+    {
+        keywords: ["eval", "code injection"],
+        category: "injection",
+        hotfix: "Replace eval() with JSON.parse() or a safe alternative",
+    },
+    {
+        keywords: ["hardcoded", "password", "secret", "api key"],
+        category: "secrets",
+        hotfix: "Move secrets to environment variables or a secrets manager",
+    },
+    { keywords: ["csrf", "cross-site request"], category: "csrf", hotfix: "Add CSRF token validation middleware" },
+    {
+        keywords: ["cors", "permissive"],
+        category: "cors",
+        hotfix: "Configure CORS with specific allowed origins instead of wildcard",
+    },
+    {
+        keywords: ["md5", "sha1", "weak hash", "weak crypto"],
+        category: "crypto",
+        hotfix: "Use SHA-256 or bcrypt for password hashing",
+    },
+    {
+        keywords: ["math.random", "insecure random"],
+        category: "crypto",
+        hotfix: "Use crypto.randomBytes() or crypto.getRandomValues() instead",
+    },
+    {
+        keywords: ["path traversal", "directory traversal"],
+        category: "path",
+        hotfix: "Validate and sanitize file paths; use path.resolve() and check against base directory",
+    },
+    {
+        keywords: ["command injection", "exec", "child_process"],
+        category: "injection",
+        hotfix: "Use execFile() with argument arrays instead of exec() with string interpolation",
+    },
+    {
+        keywords: ["missing auth", "authentication", "unauthorized"],
+        category: "auth",
+        hotfix: "Add authentication middleware to protect the endpoint",
+    },
+    {
+        keywords: ["missing rate limit", "rate limit"],
+        category: "availability",
+        hotfix: "Add express-rate-limit or similar middleware",
+    },
+    {
+        keywords: ["information disclosure", "stack trace", "verbose error"],
+        category: "info-disclosure",
+        hotfix: "Use generic error messages in production; log details server-side only",
+    },
+    {
+        keywords: ["insecure cookie", "cookie"],
+        category: "session",
+        hotfix: "Set cookie flags: httpOnly, secure, sameSite='strict'",
+    },
+    {
+        keywords: ["tls", "ssl", "certificate", "rejectunauthorized"],
+        category: "transport",
+        hotfix: "Never disable TLS certificate verification in production",
+    },
+    {
+        keywords: ["unused", "dead code"],
+        category: "quality",
+        hotfix: "Remove unused code to reduce attack surface and maintenance burden",
+    },
+    {
+        keywords: ["logging sensitive", "log password"],
+        category: "logging",
+        hotfix: "Remove sensitive data from log statements; use structured logging with redaction",
+    },
+];
+function findHotfix(title, description) {
+    const combined = `${title} ${description}`.toLowerCase();
+    for (const p of HOTFIX_PATTERNS) {
+        if (p.keywords.some((kw) => combined.includes(kw))) {
+            return { category: p.category, hotfix: p.hotfix };
+        }
+    }
+    return null;
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingHotfixSuggest(argv) {
+    const fileIdx = argv.indexOf("--file");
+    const formatIdx = argv.indexOf("--format");
+    const filePath = fileIdx >= 0 ? argv[fileIdx + 1] : undefined;
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-hotfix-suggest — Suggest quick hotfixes for findings
+
+Usage:
+  judges finding-hotfix-suggest --file <verdict.json> [--format table|json]
+
+Options:
+  --file <path>      Path to verdict JSON file (required)
+  --format <fmt>     Output format: table (default), json
+  --help, -h         Show this help
+`);
+        return;
+    }
+    if (!filePath) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(filePath)) {
+        console.error(`Error: not found: ${filePath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        console.error("Error: invalid JSON");
+        process.exitCode = 1;
+        return;
+    }
+    const suggestions = [];
+    for (const f of verdict.findings) {
+        const hotfix = findHotfix(f.title, f.description);
+        if (hotfix) {
+            suggestions.push({
+                ruleId: f.ruleId,
+                title: f.title,
+                severity: f.severity || "medium",
+                hotfix: hotfix.hotfix,
+                category: hotfix.category,
+            });
+        }
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(suggestions, null, 2));
+        return;
+    }
+    if (suggestions.length === 0) {
+        console.log("No hotfix suggestions available for current findings.");
+        return;
+    }
+    console.log(`\nHotfix Suggestions (${suggestions.length})`);
+    console.log("═".repeat(70));
+    for (const s of suggestions) {
+        console.log(`\n  [${s.severity.toUpperCase()}] ${s.title}`);
+        console.log(`  Category: ${s.category}`);
+        console.log(`  Hotfix: ${s.hotfix}`);
+    }
+    console.log("\n" + "═".repeat(70));
+    console.log(`${suggestions.length} of ${verdict.findings.length} findings have suggested hotfixes`);
+}
+//# sourceMappingURL=finding-hotfix-suggest.js.map

package/dist/commands/finding-hotfix-suggest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-hotfix-suggest.js","sourceRoot":"","sources":["../../src/commands/finding-hotfix-suggest.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAa9C,+EAA+E;AAE/E,MAAM,eAAe,GAAoE;IACvF;QACE,QAAQ,EAAE,CAAC,eAAe,EAAE,KAAK,CAAC;QAClC,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,2DAA2D;KACpE;IACD;QACE,QAAQ,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,WAAW,CAAC;QACtD,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,4EAA4E;KACrF;IACD;QACE,QAAQ,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC;QACpC,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC;QACxD,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,4DAA4D;KACrE;IACD,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC9G;QACE,QAAQ,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;QAChC,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,CAAC;QACrD,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,4CAA4C;KACrD;IACD;QACE,QAAQ,EAAE,CAAC,aAAa,EAAE,iBAAiB,CAAC;QAC5C,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,8DAA8D;KACvE;IACD;QACE,QAAQ,EAAE,CAAC,gBAAgB,EAAE,qBAAqB,CAAC;QACnD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,uFAAuF;KAChG;IACD;QACE,QAAQ,EAAE,CAAC,mBAAmB,EAAE,MAAM,EAAE,eAAe,CAAC;QACxD,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,iFAAiF;KAC1F;IACD;QACE,QAAQ,EAAE,CAAC,cAAc,EAAE,gBAAgB,EAAE,cAAc,CAAC;QAC5D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,uDAAuD;KAChE;IACD;QACE,QAAQ,EAAE,CAAC,oBAAoB,EAAE,YAAY,CAAC;QAC9C,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,8CAA8C;KACvD;IACD;QACE,QAAQ,EAAE,CAAC,wBAAwB,EAAE,aAAa,EAAE,eAAe,CAAC;QACpE,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,wEAAwE;KACjF;IACD;QACE,QAAQ,EAAE,CAAC,iBAAiB,EAAE,QAAQ,CAAC;QACvC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,uDAAuD;KAChE;IACD;QACE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,oBAAoB,CAAC;QAC7D,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,0DAA0D;KACnE;IACD;QACE,QAAQ,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;QACjC,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,oEAAoE;KAC7E;IACD;QACE,QAAQ,EAAE,CAAC,mBAAmB,EAAE,cAAc,CAAC;QAC/C,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,kFAAkF;KAC3F;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa,EAAE,WAAmB;IACpD,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;CAUf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,yBAAyB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,mCAAmC,CAAC,CAAC;AACtG,CAAC"}

package/dist/commands/finding-noise-filter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Finding-noise-filter — Filter out noisy/low-value findings.
+ *
+ * Identifies and filters findings that are likely noise based on
+ * configurable heuristics: low confidence, common FP patterns, etc.
+ */
+export declare function runFindingNoiseFilter(argv: string[]): void;
+//# sourceMappingURL=finding-noise-filter.d.ts.map

package/dist/commands/finding-noise-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-noise-filter.d.ts","sourceRoot":"","sources":["../../src/commands/finding-noise-filter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiFH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA4F1D"}

package/dist/commands/finding-noise-filter.js

@@ -0,0 +1,141 @@
+/**
+ * Finding-noise-filter — Filter out noisy/low-value findings.
+ *
+ * Identifies and filters findings that are likely noise based on
+ * configurable heuristics: low confidence, common FP patterns, etc.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── Noise Detection ────────────────────────────────────────────────────────
+const NOISE_PATTERNS = [
+    {
+        test: (f) => f.confidence !== undefined && f.confidence !== null && f.confidence < 0.3,
+        reason: "low confidence (<30%)",
+    },
+    {
+        test: (f) => f.title.toLowerCase().includes("todo") || f.title.toLowerCase().includes("fixme"),
+        reason: "TODO/FIXME noise",
+    },
+    { test: (f) => (f.severity || "medium").toLowerCase() === "info", reason: "informational only" },
+    { test: (f) => f.isAbsenceBased === true, reason: "absence-based finding" },
+    { test: (f) => f.description.length < 20, reason: "minimal description" },
+];
+function filterNoise(findings, minConfidence, excludeInfo, excludeAbsence) {
+    const kept = [];
+    const filtered = [];
+    const reasons = new Map();
+    for (const f of findings) {
+        let isNoise = false;
+        let reason = "";
+        if (minConfidence > 0 && f.confidence !== undefined && f.confidence !== null && f.confidence < minConfidence) {
+            isNoise = true;
+            reason = `confidence ${(f.confidence * 100).toFixed(0)}% < ${(minConfidence * 100).toFixed(0)}%`;
+        }
+        if (!isNoise && excludeInfo && (f.severity || "medium").toLowerCase() === "info") {
+            isNoise = true;
+            reason = "informational severity excluded";
+        }
+        if (!isNoise && excludeAbsence && f.isAbsenceBased) {
+            isNoise = true;
+            reason = "absence-based finding excluded";
+        }
+        if (!isNoise) {
+            for (const p of NOISE_PATTERNS) {
+                if (p.test(f)) {
+                    isNoise = true;
+                    reason = p.reason;
+                    break;
+                }
+            }
+        }
+        if (isNoise) {
+            filtered.push(f);
+            reasons.set(`${f.ruleId}:${f.title}`, reason);
+        }
+        else {
+            kept.push(f);
+        }
+    }
+    return { kept, filtered, reasons };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingNoiseFilter(argv) {
+    const fileIdx = argv.indexOf("--file");
+    const formatIdx = argv.indexOf("--format");
+    const confIdx = argv.indexOf("--min-confidence");
+    const filePath = fileIdx >= 0 ? argv[fileIdx + 1] : undefined;
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    const minConfidence = confIdx >= 0 ? parseFloat(argv[confIdx + 1]) : 0.3;
+    const excludeInfo = argv.includes("--exclude-info");
+    const excludeAbsence = argv.includes("--exclude-absence");
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-noise-filter — Filter noisy findings
+
+Usage:
+  judges finding-noise-filter --file <verdict.json> [options]
+
+Options:
+  --file <path>             Path to verdict JSON file (required)
+  --min-confidence <n>      Minimum confidence threshold (default: 0.3)
+  --exclude-info            Exclude informational findings
+  --exclude-absence         Exclude absence-based findings
+  --format <fmt>            Output format: table (default), json
+  --help, -h                Show this help
+`);
+        return;
+    }
+    if (!filePath) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(filePath)) {
+        console.error(`Error: not found: ${filePath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        console.error("Error: invalid JSON");
+        process.exitCode = 1;
+        return;
+    }
+    const result = filterNoise(verdict.findings, minConfidence, excludeInfo, excludeAbsence);
+    if (format === "json") {
+        console.log(JSON.stringify({
+            kept: result.kept.length,
+            filtered: result.filtered.length,
+            keptFindings: result.kept.map((f) => ({ ruleId: f.ruleId, title: f.title, severity: f.severity })),
+            filteredFindings: result.filtered.map((f) => ({
+                ruleId: f.ruleId,
+                title: f.title,
+                reason: result.reasons.get(`${f.ruleId}:${f.title}`),
+            })),
+        }, null, 2));
+        return;
+    }
+    console.log(`\nNoise Filter Results`);
+    console.log("═".repeat(60));
+    console.log(`Total: ${verdict.findings.length} | Kept: ${result.kept.length} | Filtered: ${result.filtered.length}`);
+    console.log("─".repeat(60));
+    if (result.filtered.length > 0) {
+        console.log("\nFiltered (noise):");
+        for (const f of result.filtered) {
+            const reason = result.reasons.get(`${f.ruleId}:${f.title}`) || "unknown";
+            console.log(`  ✕ ${f.title} — ${reason}`);
+        }
+    }
+    if (result.kept.length > 0) {
+        console.log(`\nKept (${result.kept.length} findings):`);
+        for (const f of result.kept.slice(0, 10)) {
+            console.log(`  ✓ [${(f.severity || "medium").toUpperCase()}] ${f.title}`);
+        }
+        if (result.kept.length > 10)
+            console.log(`  ... and ${result.kept.length - 10} more`);
+    }
+    console.log("═".repeat(60));
+}
+//# sourceMappingURL=finding-noise-filter.js.map

package/dist/commands/finding-noise-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-noise-filter.js","sourceRoot":"","sources":["../../src/commands/finding-noise-filter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAW9C,+EAA+E;AAE/E,MAAM,cAAc,GAAG;IACrB;QACE,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,GAAG,GAAG;QAC/F,MAAM,EAAE,uBAAuB;KAChC;IACD;QACE,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvG,MAAM,EAAE,kBAAkB;KAC3B;IACD,EAAE,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACzG,EAAE,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE;IACpF,EAAE,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE;CACnF,CAAC;AAEF,SAAS,WAAW,CAClB,QAAmB,EACnB,aAAqB,EACrB,WAAoB,EACpB,cAAuB;IAEvB,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,aAAa,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,GAAG,aAAa,EAAE,CAAC;YAC7G,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QACnG,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,WAAW,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACjF,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,GAAG,iCAAiC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,cAAc,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;YACnD,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,GAAG,gCAAgC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBACd,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;oBAClB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzE,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAE1D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAaf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IAEzF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAChC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClG,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;aACrD,CAAC,CAAC;SACJ,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,QAAQ,CAAC,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,MAAM,gBAAgB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrH,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,SAAS,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,MAAM,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-trend-report.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-trend-report — Generate trend reports from historical findings.
+ */
+export declare function runFindingTrendReport(argv: string[]): void;
+//# sourceMappingURL=finding-trend-report.d.ts.map

package/dist/commands/finding-trend-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-trend-report.d.ts","sourceRoot":"","sources":["../../src/commands/finding-trend-report.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmDH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA+E1D"}

package/dist/commands/finding-trend-report.js

@@ -0,0 +1,108 @@
+/**
+ * Finding-trend-report — Generate trend reports from historical findings.
+ */
+import { readFileSync, existsSync, readdirSync } from "fs";
+import { join } from "path";
+// ─── Helpers ────────────────────────────────────────────────────────────────
+function loadVerdictHistory(dir) {
+    if (!existsSync(dir))
+        return [];
+    const results = [];
+    const files = readdirSync(dir);
+    for (const f of files) {
+        if (!String(f).endsWith(".json"))
+            continue;
+        try {
+            const data = JSON.parse(readFileSync(join(dir, String(f)), "utf-8"));
+            if (data && data.findings) {
+                const date = data.timestamp || String(f).replace(".json", "");
+                results.push({ date, verdict: data });
+            }
+        }
+        catch {
+            /* skip */
+        }
+    }
+    return results.sort((a, b) => a.date.localeCompare(b.date));
+}
+function buildTrend(history) {
+    return history.map((h) => ({
+        date: h.date,
+        totalFindings: h.verdict.findings.length,
+        criticalCount: h.verdict.criticalCount,
+        highCount: h.verdict.highCount,
+        score: h.verdict.overallScore,
+        ruleCount: new Set(h.verdict.findings.map((f) => f.ruleId)).size,
+    }));
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingTrendReport(argv) {
+    const dirIdx = argv.indexOf("--dir");
+    const formatIdx = argv.indexOf("--format");
+    const lastIdx = argv.indexOf("--last");
+    const dir = dirIdx >= 0 ? argv[dirIdx + 1] : join(process.cwd(), ".judges", "verdicts");
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    const last = lastIdx >= 0 ? parseInt(argv[lastIdx + 1], 10) : 0;
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-trend-report — Generate trend reports
+
+Usage:
+  judges finding-trend-report [--dir <path>] [--format table|json|chart]
+                               [--last <n>]
+
+Options:
+  --dir <path>       Directory with historical verdict files
+  --format <fmt>     Output format: table (default), json, chart
+  --last <n>         Show only last N data points
+  --help, -h         Show this help
+`);
+        return;
+    }
+    const history = loadVerdictHistory(dir);
+    if (history.length === 0) {
+        console.log("No verdict history found.");
+        return;
+    }
+    let trend = buildTrend(history);
+    if (last > 0)
+        trend = trend.slice(-last);
+    if (format === "json") {
+        console.log(JSON.stringify(trend, null, 2));
+        return;
+    }
+    if (format === "chart") {
+        console.log("\nFinding Trend (ASCII Chart)");
+        console.log("═".repeat(60));
+        const maxFindings = Math.max(...trend.map((t) => t.totalFindings), 1);
+        for (const t of trend) {
+            const barLen = Math.round((t.totalFindings / maxFindings) * 40);
+            const bar = "█".repeat(barLen);
+            const dateStr = t.date.slice(0, 10).padEnd(12);
+            console.log(`${dateStr} ${bar} ${t.totalFindings}`);
+        }
+        console.log("═".repeat(60));
+        return;
+    }
+    console.log(`\nFinding Trend Report (${trend.length} data points)`);
+    console.log("═".repeat(70));
+    console.log(`${"Date".padEnd(22)} ${"Findings".padEnd(10)} ${"Crit".padEnd(6)} ${"High".padEnd(6)} ${"Score".padEnd(7)} Rules`);
+    console.log("─".repeat(70));
+    for (const t of trend) {
+        const dateStr = t.date.slice(0, 19).padEnd(22);
+        console.log(`${dateStr} ${String(t.totalFindings).padEnd(10)} ${String(t.criticalCount).padEnd(6)} ` +
+            `${String(t.highCount).padEnd(6)} ${String(t.score).padEnd(7)} ${t.ruleCount}`);
+    }
+    if (trend.length >= 2) {
+        const first = trend[0];
+        const latest = trend[trend.length - 1];
+        const findingDelta = latest.totalFindings - first.totalFindings;
+        const scoreDelta = latest.score - first.score;
+        console.log("─".repeat(70));
+        const fd = findingDelta >= 0 ? `+${findingDelta}` : `${findingDelta}`;
+        const sd = scoreDelta >= 0 ? `+${scoreDelta}` : `${scoreDelta}`;
+        console.log(`Trend: findings ${fd}, score ${sd}`);
+    }
+    console.log("═".repeat(70));
+}
+//# sourceMappingURL=finding-trend-report.js.map

package/dist/commands/finding-trend-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-trend-report.js","sourceRoot":"","sources":["../../src/commands/finding-trend-report.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAc5B,+EAA+E;AAE/E,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,OAAO,GAAsD,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAwB,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACrE,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,OAA0D;IAC5E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM;QACxC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa;QACtC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;QAC9B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY;QAC7B,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KACjE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,qBAAqB,CAAC,IAAc;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;IAEzC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,CAAC,MAAM,eAAe,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CACnH,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CACT,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG;YACtF,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAChE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,EAAE,CAAC;QACtE,MAAM,EAAE,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/review-approval-gate.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Review-approval-gate — Gate reviews with configurable approval criteria.
+ *
+ * Evaluates whether a review verdict meets predefined quality gates
+ * and provides pass/fail determination for CI/CD integration.
+ */
+export declare function runReviewApprovalGate(argv: string[]): void;
+//# sourceMappingURL=review-approval-gate.d.ts.map

package/dist/commands/review-approval-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-approval-gate.d.ts","sourceRoot":"","sources":["../../src/commands/review-approval-gate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8EH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA2I1D"}