@kevinrabun/judges 3.91.0 → 3.93.0

package/dist/commands/finding-auto-group.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-auto-group — Auto-group related findings into logical categories.
+ */
+export declare function runFindingAutoGroup(argv: string[]): void;
+//# sourceMappingURL=finding-auto-group.d.ts.map

package/dist/commands/finding-auto-group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-auto-group.d.ts","sourceRoot":"","sources":["../../src/commands/finding-auto-group.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmEH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA8DxD"}

package/dist/commands/finding-auto-group.js

@@ -0,0 +1,109 @@
+/**
+ * Finding-auto-group — Auto-group related findings into logical categories.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── Analysis ───────────────────────────────────────────────────────────────
+const CATEGORY_PATTERNS = [
+    { name: "Security", keywords: ["auth", "inject", "xss", "csrf", "vuln", "secret", "crypt", "sanitiz"] },
+    { name: "Performance", keywords: ["perf", "optim", "cache", "memory", "leak", "slow", "latency"] },
+    { name: "Reliability", keywords: ["error", "exception", "null", "undefined", "crash", "race"] },
+    { name: "Style", keywords: ["naming", "format", "indent", "whitespace", "convention", "lint"] },
+    { name: "Complexity", keywords: ["complex", "cyclomatic", "nesting", "depth", "refactor"] },
+    { name: "API", keywords: ["api", "endpoint", "route", "request", "response", "rest", "graphql"] },
+    { name: "Data", keywords: ["data", "schema", "valid", "type", "model", "serial"] },
+];
+function categorize(ruleId, title) {
+    const combined = `${ruleId} ${title}`.toLowerCase();
+    for (const cat of CATEGORY_PATTERNS) {
+        if (cat.keywords.some((kw) => combined.includes(kw))) {
+            return cat.name;
+        }
+    }
+    return "Other";
+}
+function groupFindings(verdict) {
+    const groups = new Map();
+    for (const f of verdict.findings) {
+        const category = categorize(f.ruleId, f.title);
+        const existing = groups.get(category);
+        if (existing) {
+            existing.count++;
+            const sev = (f.severity || "medium").toLowerCase();
+            existing.sevBreakdown[sev] = (existing.sevBreakdown[sev] || 0) + 1;
+            if (!existing.ruleIds.includes(f.ruleId))
+                existing.ruleIds.push(f.ruleId);
+            if (existing.titles.length < 5)
+                existing.titles.push(f.title);
+        }
+        else {
+            const sev = (f.severity || "medium").toLowerCase();
+            groups.set(category, {
+                category,
+                count: 1,
+                sevBreakdown: { [sev]: 1 },
+                ruleIds: [f.ruleId],
+                titles: [f.title],
+            });
+        }
+    }
+    return [...groups.values()].sort((a, b) => b.count - a.count);
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingAutoGroup(argv) {
+    const fileIdx = argv.indexOf("--file");
+    const formatIdx = argv.indexOf("--format");
+    const filePath = fileIdx >= 0 ? argv[fileIdx + 1] : undefined;
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-auto-group — Auto-group findings into categories
+
+Usage:
+  judges finding-auto-group --file <verdict.json> [--format table|json]
+
+Options:
+  --file <path>      Path to verdict JSON file (required)
+  --format <fmt>     Output format: table (default), json
+  --help, -h         Show this help
+`);
+        return;
+    }
+    if (!filePath) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(filePath)) {
+        console.error(`Error: not found: ${filePath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        console.error("Error: invalid JSON");
+        process.exitCode = 1;
+        return;
+    }
+    const groups = groupFindings(verdict);
+    if (format === "json") {
+        console.log(JSON.stringify(groups, null, 2));
+        return;
+    }
+    console.log(`\nFinding Groups (${groups.length} categories)`);
+    console.log("═".repeat(70));
+    console.log(`${"Category".padEnd(16)} ${"Count".padEnd(8)} ${"Severities".padEnd(26)} Rules`);
+    console.log("─".repeat(70));
+    for (const g of groups) {
+        const sevStr = Object.entries(g.sevBreakdown)
+            .map(([s, c]) => `${s}:${c}`)
+            .join(", ");
+        const sevDisplay = sevStr.length > 24 ? sevStr.slice(0, 24) + "…" : sevStr;
+        const ruleStr = g.ruleIds.slice(0, 3).join(", ");
+        console.log(`${g.category.padEnd(16)} ${String(g.count).padEnd(8)} ${sevDisplay.padEnd(26)} ${ruleStr}`);
+    }
+    console.log("═".repeat(70));
+}
+//# sourceMappingURL=finding-auto-group.js.map

package/dist/commands/finding-auto-group.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-auto-group.js","sourceRoot":"","sources":["../../src/commands/finding-auto-group.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAa9C,+EAA+E;AAE/E,MAAM,iBAAiB,GAAgD;IACrE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE;IACvG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;IAClG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE;IAC/F,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE;IAC/F,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE;IAC3F,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE;IACjG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;CACnF,CAAC;AAEF,SAAS,UAAU,CAAC,MAAc,EAAE,KAAa;IAC/C,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,OAAwB;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE/C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1E,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACnB,QAAQ;gBACR,KAAK,EAAE,CAAC;gBACR,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;gBAC1B,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;CAUf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAEtC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,MAAM,cAAc,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;aAC1C,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3E,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-cross-ref.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-cross-ref — Cross-reference findings across multiple reviews.
+ */
+export declare function runFindingCrossRef(argv: string[]): void;
+//# sourceMappingURL=finding-cross-ref.d.ts.map

package/dist/commands/finding-cross-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-cross-ref.d.ts","sourceRoot":"","sources":["../../src/commands/finding-cross-ref.ts"],"names":[],"mappings":"AAAA;;GAEG;AA4CH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CA8EvD"}

package/dist/commands/finding-cross-ref.js

@@ -0,0 +1,99 @@
+/**
+ * Finding-cross-ref — Cross-reference findings across multiple reviews.
+ */
+import { readFileSync, existsSync, readdirSync } from "fs";
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function crossReference(verdicts) {
+    const ruleMap = new Map();
+    for (const { name, verdict } of verdicts) {
+        for (const f of verdict.findings) {
+            const existing = ruleMap.get(f.ruleId);
+            if (existing) {
+                existing.files.add(name);
+            }
+            else {
+                ruleMap.set(f.ruleId, { title: f.title, files: new Set([name]) });
+            }
+        }
+    }
+    return [...ruleMap.entries()]
+        .map(([ruleId, data]) => ({
+        ruleId,
+        title: data.title,
+        occurrences: data.files.size,
+        files: [...data.files],
+        persistent: data.files.size === verdicts.length,
+    }))
+        .sort((a, b) => b.occurrences - a.occurrences);
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingCrossRef(argv) {
+    const dirIdx = argv.indexOf("--dir");
+    const formatIdx = argv.indexOf("--format");
+    const persistentOnly = argv.includes("--persistent");
+    const dirPath = dirIdx >= 0 ? argv[dirIdx + 1] : undefined;
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-cross-ref — Cross-reference findings across reviews
+
+Usage:
+  judges finding-cross-ref --dir <verdicts-dir> [--persistent]
+                           [--format table|json]
+
+Options:
+  --dir <path>         Directory of verdict JSON files (required)
+  --persistent         Show only findings present in all reviews
+  --format <fmt>       Output format: table (default), json
+  --help, -h           Show this help
+`);
+        return;
+    }
+    if (!dirPath) {
+        console.error("Error: --dir required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(dirPath)) {
+        console.error(`Error: not found: ${dirPath}`);
+        process.exitCode = 1;
+        return;
+    }
+    const files = readdirSync(dirPath).filter((f) => f.endsWith(".json"));
+    const verdicts = [];
+    for (const file of files) {
+        try {
+            verdicts.push({
+                name: file,
+                verdict: JSON.parse(readFileSync(`${dirPath}/${file}`, "utf-8")),
+            });
+        }
+        catch {
+            // skip
+        }
+    }
+    if (verdicts.length === 0) {
+        console.error("Error: no valid verdict files found");
+        process.exitCode = 1;
+        return;
+    }
+    let refs = crossReference(verdicts);
+    if (persistentOnly) {
+        refs = refs.filter((r) => r.persistent);
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(refs, null, 2));
+        return;
+    }
+    console.log(`\nCross-Reference (${refs.length} rules across ${verdicts.length} reviews)`);
+    console.log("═".repeat(70));
+    console.log(`${"Rule".padEnd(22)} ${"Occurrences".padEnd(14)} ${"Persistent".padEnd(12)} Title`);
+    console.log("─".repeat(70));
+    for (const r of refs.slice(0, 20)) {
+        const rule = r.ruleId.length > 20 ? r.ruleId.slice(0, 20) + "…" : r.ruleId;
+        const title = r.title.length > 20 ? r.title.slice(0, 20) + "…" : r.title;
+        console.log(`${rule.padEnd(22)} ${String(r.occurrences).padEnd(14)} ${(r.persistent ? "yes" : "no").padEnd(12)} ${title}`);
+    }
+    console.log("═".repeat(70));
+}
+//# sourceMappingURL=finding-cross-ref.js.map

package/dist/commands/finding-cross-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-cross-ref.js","sourceRoot":"","sources":["../../src/commands/finding-cross-ref.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAa3D,+EAA+E;AAE/E,SAAS,cAAc,CAAC,QAA2D;IACjF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiD,CAAC;IAEzE,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,MAAM;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;QAC5B,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACtB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;KAChD,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;AACnD,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAI,WAAW,CAAC,OAAO,CAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAsD,EAAE,CAAC;IAEvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;aACjE,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,WAAW,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACjG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3E,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACzE,OAAO,CAAC,GAAG,CACT,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAC9G,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-fix-suggest.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-fix-suggest — Suggest fixes based on finding patterns.
+ */
+export declare function runFindingFixSuggest(argv: string[]): void;
+//# sourceMappingURL=finding-fix-suggest.d.ts.map

package/dist/commands/finding-fix-suggest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-fix-suggest.d.ts","sourceRoot":"","sources":["../../src/commands/finding-fix-suggest.ts"],"names":[],"mappings":"AAAA;;GAEG;AAyCH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAoEzD"}

package/dist/commands/finding-fix-suggest.js

@@ -0,0 +1,89 @@
+/**
+ * Finding-fix-suggest — Suggest fixes based on finding patterns.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function suggestFixes(verdict) {
+    return verdict.findings.map((f) => {
+        let suggestion = f.recommendation;
+        if (f.patch !== undefined && f.patch !== null) {
+            suggestion = `Apply patch: ${String(f.patch).slice(0, 100)}${String(f.patch).length > 100 ? "…" : ""}`;
+        }
+        else if (f.suggestedFix) {
+            suggestion = f.suggestedFix;
+        }
+        return {
+            ruleId: f.ruleId,
+            title: f.title,
+            severity: (f.severity || "medium").toLowerCase(),
+            hasPatch: f.patch !== undefined && f.patch !== null,
+            suggestion,
+            lineNumbers: f.lineNumbers || [],
+        };
+    });
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingFixSuggest(argv) {
+    const fileIdx = argv.indexOf("--file");
+    const formatIdx = argv.indexOf("--format");
+    const sevIdx = argv.indexOf("--severity");
+    const filePath = fileIdx >= 0 ? argv[fileIdx + 1] : undefined;
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    const sevFilter = sevIdx >= 0 ? argv[sevIdx + 1] : undefined;
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-fix-suggest — Suggest fixes for findings
+
+Usage:
+  judges finding-fix-suggest --file <verdict.json> [--severity <level>]
+                             [--format table|json]
+
+Options:
+  --file <path>      Path to verdict JSON file (required)
+  --severity <level> Filter by severity level
+  --format <fmt>     Output format: table (default), json
+  --help, -h         Show this help
+`);
+        return;
+    }
+    if (!filePath) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(filePath)) {
+        console.error(`Error: not found: ${filePath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        console.error("Error: invalid JSON");
+        process.exitCode = 1;
+        return;
+    }
+    let suggestions = suggestFixes(verdict);
+    if (sevFilter) {
+        suggestions = suggestions.filter((s) => s.severity === sevFilter.toLowerCase());
+    }
+    if (format === "json") {
+        console.log(JSON.stringify(suggestions, null, 2));
+        return;
+    }
+    console.log(`\nFix Suggestions (${suggestions.length})`);
+    console.log("═".repeat(75));
+    for (const s of suggestions) {
+        const lines = s.lineNumbers.length > 0 ? `L${s.lineNumbers[0]}` : "—";
+        const patch = s.hasPatch ? " [has patch]" : "";
+        console.log(`  [${s.severity.toUpperCase()}] ${s.ruleId} at ${lines}${patch}`);
+        console.log(`    ${s.title}`);
+        const suggDisplay = s.suggestion.length > 70 ? s.suggestion.slice(0, 70) + "…" : s.suggestion;
+        console.log(`    → ${suggDisplay}`);
+        console.log("");
+    }
+    console.log("═".repeat(75));
+}
+//# sourceMappingURL=finding-fix-suggest.js.map

package/dist/commands/finding-fix-suggest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-fix-suggest.js","sourceRoot":"","sources":["../../src/commands/finding-fix-suggest.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAc9C,+EAA+E;AAE/E,SAAS,YAAY,CAAC,OAAwB;IAC5C,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,IAAI,UAAU,GAAG,CAAC,CAAC,cAAc,CAAC;QAElC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9C,UAAU,GAAG,gBAAgB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzG,CAAC;aAAM,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YAC1B,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC;QAC9B,CAAC;QAED,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE;YAChD,QAAQ,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YACnD,UAAU;YACV,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE;SACjC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB,CAAC,IAAc;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACd,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACtE,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-link-graph.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-link-graph — Build a graph of related findings by rule co-occurrence.
+ */
+export declare function runFindingLinkGraph(argv: string[]): void;
+//# sourceMappingURL=finding-link-graph.d.ts.map

package/dist/commands/finding-link-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-link-graph.d.ts","sourceRoot":"","sources":["../../src/commands/finding-link-graph.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgHH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAmExD"}

package/dist/commands/finding-link-graph.js

@@ -0,0 +1,145 @@
+/**
+ * Finding-link-graph — Build a graph of related findings by rule co-occurrence.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function buildGraph(verdict) {
+    const nodes = new Map();
+    const edges = [];
+    // Build nodes
+    for (const f of verdict.findings) {
+        if (!nodes.has(f.ruleId)) {
+            nodes.set(f.ruleId, {
+                ruleId: f.ruleId,
+                title: f.title,
+                severity: (f.severity || "medium").toLowerCase(),
+                connections: 0,
+            });
+        }
+    }
+    // Build edges based on proximity
+    const findings = verdict.findings;
+    for (let i = 0; i < findings.length; i++) {
+        for (let j = i + 1; j < findings.length; j++) {
+            const a = findings[i];
+            const b = findings[j];
+            if (a.ruleId === b.ruleId)
+                continue;
+            const aLines = a.lineNumbers || [];
+            const bLines = b.lineNumbers || [];
+            if (aLines.length > 0 && bLines.length > 0) {
+                const minDist = Math.min(...aLines.flatMap((al) => bLines.map((bl) => Math.abs(al - bl))));
+                if (minDist <= 10) {
+                    const existingEdge = edges.find((e) => (e.from === a.ruleId && e.to === b.ruleId) || (e.from === b.ruleId && e.to === a.ruleId));
+                    if (existingEdge) {
+                        existingEdge.weight++;
+                    }
+                    else {
+                        edges.push({
+                            from: a.ruleId,
+                            to: b.ruleId,
+                            weight: 1,
+                            relationship: minDist <= 3 ? "adjacent" : "nearby",
+                        });
+                    }
+                }
+            }
+        }
+    }
+    // Update connection counts
+    for (const e of edges) {
+        const fromNode = nodes.get(e.from);
+        const toNode = nodes.get(e.to);
+        if (fromNode)
+            fromNode.connections++;
+        if (toNode)
+            toNode.connections++;
+    }
+    // Simple clustering by connected components
+    const clusters = [];
+    const visited = new Set();
+    for (const nodeId of nodes.keys()) {
+        if (visited.has(nodeId))
+            continue;
+        const cluster = [];
+        const stack = [nodeId];
+        while (stack.length > 0) {
+            const current = stack.pop();
+            if (visited.has(current))
+                continue;
+            visited.add(current);
+            cluster.push(current);
+            for (const e of edges) {
+                if (e.from === current && !visited.has(e.to))
+                    stack.push(e.to);
+                if (e.to === current && !visited.has(e.from))
+                    stack.push(e.from);
+            }
+        }
+        clusters.push(cluster);
+    }
+    return { nodes: [...nodes.values()], edges, clusters };
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingLinkGraph(argv) {
+    const fileIdx = argv.indexOf("--file");
+    const formatIdx = argv.indexOf("--format");
+    const filePath = fileIdx >= 0 ? argv[fileIdx + 1] : undefined;
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-link-graph — Build finding relationship graph
+
+Usage:
+  judges finding-link-graph --file <verdict.json> [--format table|json]
+
+Options:
+  --file <path>      Path to verdict JSON file (required)
+  --format <fmt>     Output format: table (default), json
+  --help, -h         Show this help
+`);
+        return;
+    }
+    if (!filePath) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(filePath)) {
+        console.error(`Error: not found: ${filePath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        console.error("Error: invalid JSON");
+        process.exitCode = 1;
+        return;
+    }
+    const graph = buildGraph(verdict);
+    if (format === "json") {
+        console.log(JSON.stringify(graph, null, 2));
+        return;
+    }
+    console.log(`\nFinding Link Graph`);
+    console.log("═".repeat(65));
+    console.log(`  Nodes: ${graph.nodes.length}  |  Edges: ${graph.edges.length}  |  Clusters: ${graph.clusters.length}`);
+    console.log("─".repeat(65));
+    if (graph.edges.length > 0) {
+        console.log(`\n  Connections:`);
+        for (const e of graph.edges.slice(0, 15)) {
+            console.log(`    ${e.from} ─[${e.relationship}]─ ${e.to} (weight: ${e.weight})`);
+        }
+    }
+    if (graph.clusters.length > 0) {
+        console.log(`\n  Clusters:`);
+        for (let i = 0; i < Math.min(graph.clusters.length, 10); i++) {
+            console.log(`    ${i + 1}. ${graph.clusters[i].join(", ")}`);
+        }
+    }
+    console.log("═".repeat(65));
+}
+//# sourceMappingURL=finding-link-graph.js.map

package/dist/commands/finding-link-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-link-graph.js","sourceRoot":"","sources":["../../src/commands/finding-link-graph.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAyB9C,+EAA+E;AAE/E,SAAS,UAAU,CAAC,OAAwB;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,cAAc;IACd,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE;gBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE;gBAChD,WAAW,EAAE,CAAC;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBAAE,SAAS;YAEpC,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;YAEnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAE3F,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;oBAClB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAChG,CAAC;oBACF,IAAI,YAAY,EAAE,CAAC;wBACjB,YAAY,CAAC,MAAM,EAAE,CAAC;oBACxB,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC;4BACT,IAAI,EAAE,CAAC,CAAC,MAAM;4BACd,EAAE,EAAE,CAAC,CAAC,MAAM;4BACZ,MAAM,EAAE,CAAC;4BACT,YAAY,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;yBACnD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,QAAQ;YAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,MAAM;YAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;IAED,4CAA4C;IAC5C,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAClC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;YAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/D,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACzD,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,mBAAmB,CAAC,IAAc;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAE9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;CAUf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAElC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,KAAK,CAAC,MAAM,kBAAkB,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtH,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/commands/finding-ownership-map.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Finding-ownership-map — Map findings to code owners.
+ */
+export declare function runFindingOwnershipMap(argv: string[]): void;
+//# sourceMappingURL=finding-ownership-map.d.ts.map

package/dist/commands/finding-ownership-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-ownership-map.d.ts","sourceRoot":"","sources":["../../src/commands/finding-ownership-map.ts"],"names":[],"mappings":"AAAA;;GAEG;AA8EH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAkE3D"}

package/dist/commands/finding-ownership-map.js

@@ -0,0 +1,118 @@
+/**
+ * Finding-ownership-map — Map findings to code owners.
+ */
+import { readFileSync, existsSync } from "fs";
+// ─── Analysis ───────────────────────────────────────────────────────────────
+function parseCodeowners(path) {
+    if (!existsSync(path))
+        return [];
+    const content = readFileSync(path, "utf-8");
+    const mappings = [];
+    for (const line of content.split("\n")) {
+        const trimmed = line.trim();
+        if (trimmed.startsWith("#") || trimmed.length === 0)
+            continue;
+        const parts = trimmed.split(/\s+/);
+        if (parts.length >= 2) {
+            mappings.push({ pattern: parts[0], owner: parts[1] });
+        }
+    }
+    return mappings;
+}
+function mapOwnership(verdict, owners) {
+    const ownerMap = new Map();
+    const defaultOwner = "unassigned";
+    for (const f of verdict.findings) {
+        // Use ruleId prefix as a rough domain-to-owner mapping
+        let assignedOwner = defaultOwner;
+        const rulePrefix = f.ruleId.split("-")[0];
+        for (const o of owners) {
+            if (o.pattern.includes(rulePrefix) || f.ruleId.includes(o.pattern.replace("*", ""))) {
+                assignedOwner = o.owner;
+                break;
+            }
+        }
+        const existing = ownerMap.get(assignedOwner);
+        const sev = (f.severity || "medium").toLowerCase();
+        if (existing) {
+            existing.findingCount++;
+            if (sev === "critical")
+                existing.criticalCount++;
+            if (sev === "high")
+                existing.highCount++;
+            if (!existing.ruleIds.includes(f.ruleId))
+                existing.ruleIds.push(f.ruleId);
+        }
+        else {
+            ownerMap.set(assignedOwner, {
+                owner: assignedOwner,
+                findingCount: 1,
+                criticalCount: sev === "critical" ? 1 : 0,
+                highCount: sev === "high" ? 1 : 0,
+                ruleIds: [f.ruleId],
+            });
+        }
+    }
+    return [...ownerMap.values()].sort((a, b) => b.findingCount - a.findingCount);
+}
+// ─── CLI ────────────────────────────────────────────────────────────────────
+export function runFindingOwnershipMap(argv) {
+    const fileIdx = argv.indexOf("--file");
+    const ownersIdx = argv.indexOf("--codeowners");
+    const formatIdx = argv.indexOf("--format");
+    const filePath = fileIdx >= 0 ? argv[fileIdx + 1] : undefined;
+    const ownersPath = ownersIdx >= 0 ? argv[ownersIdx + 1] : "CODEOWNERS";
+    const format = formatIdx >= 0 ? argv[formatIdx + 1] : "table";
+    if (argv.includes("--help") || argv.includes("-h")) {
+        console.log(`
+judges finding-ownership-map — Map findings to code owners
+
+Usage:
+  judges finding-ownership-map --file <verdict.json> [--codeowners <path>]
+                               [--format table|json]
+
+Options:
+  --file <path>        Path to verdict JSON file (required)
+  --codeowners <path>  Path to CODEOWNERS file (default: CODEOWNERS)
+  --format <fmt>       Output format: table (default), json
+  --help, -h           Show this help
+`);
+        return;
+    }
+    if (!filePath) {
+        console.error("Error: --file required");
+        process.exitCode = 1;
+        return;
+    }
+    if (!existsSync(filePath)) {
+        console.error(`Error: not found: ${filePath}`);
+        process.exitCode = 1;
+        return;
+    }
+    let verdict;
+    try {
+        verdict = JSON.parse(readFileSync(filePath, "utf-8"));
+    }
+    catch {
+        console.error("Error: invalid JSON");
+        process.exitCode = 1;
+        return;
+    }
+    const owners = parseCodeowners(ownersPath);
+    const entries = mapOwnership(verdict, owners);
+    if (format === "json") {
+        console.log(JSON.stringify(entries, null, 2));
+        return;
+    }
+    console.log(`\nOwnership Map (${entries.length} owners)`);
+    console.log("═".repeat(65));
+    console.log(`${"Owner".padEnd(22)} ${"Findings".padEnd(10)} ${"Critical".padEnd(10)} ${"High".padEnd(8)} Rules`);
+    console.log("─".repeat(65));
+    for (const e of entries) {
+        const owner = e.owner.length > 20 ? e.owner.slice(0, 20) + "…" : e.owner;
+        const ruleStr = e.ruleIds.slice(0, 3).join(", ");
+        console.log(`${owner.padEnd(22)} ${String(e.findingCount).padEnd(10)} ${String(e.criticalCount).padEnd(10)} ${String(e.highCount).padEnd(8)} ${ruleStr}`);
+    }
+    console.log("═".repeat(65));
+}
+//# sourceMappingURL=finding-ownership-map.js.map