@ngocsangairvds/vsaf 3.2.14 → 3.2.16

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/phase157_dispatch_tables.sql

@@ -1,94 +0,0 @@
--- Phase 157: Canonical Dispatch State Tables (P157-A)
--- Tracks multi-profile workflow dispatch executions, per-profile lanes,
--- per-repo evaluation attempts, and provider availability snapshots
--- in durable Postgres state.
---
--- Idempotent: safe to re-run against an existing database.
-
--- dispatch_runs: one row per workflow-project dispatch execution
-CREATE TABLE IF NOT EXISTS audit_state.dispatch_runs (
-    id              BIGSERIAL PRIMARY KEY,
-    run_id          TEXT NOT NULL UNIQUE,
-    project_key     TEXT NOT NULL,
-    scope_id        TEXT,
-    status          TEXT NOT NULL DEFAULT 'pending'
-                    CHECK (status IN ('pending', 'running', 'completed', 'failed', 'cancelled')),
-    total_lanes     INTEGER,
-    max_concurrent  INTEGER,
-    sharding_mode   TEXT,
-    operator_overrides_json JSONB NOT NULL DEFAULT '{}'::jsonb,
-    metadata_json   JSONB NOT NULL DEFAULT '{}'::jsonb,
-    started_at      TIMESTAMPTZ,
-    finished_at     TIMESTAMPTZ,
-    created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW()
-);
-
--- dispatch_lanes: one row per profile lane in a dispatch run
-CREATE TABLE IF NOT EXISTS audit_state.dispatch_lanes (
-    id                  BIGSERIAL PRIMARY KEY,
-    dispatch_run_id     BIGINT NOT NULL REFERENCES audit_state.dispatch_runs(id),
-    lane_id             TEXT NOT NULL,
-    profile             TEXT NOT NULL,
-    status              TEXT NOT NULL DEFAULT 'pending'
-                        CHECK (status IN ('pending', 'running', 'completed', 'failed')),
-    repos_planned       INTEGER,
-    repos_completed     INTEGER NOT NULL DEFAULT 0,
-    repos_failed        INTEGER NOT NULL DEFAULT 0,
-    created_at          TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    CONSTRAINT uq_dispatch_lanes_run_profile
-        UNIQUE (dispatch_run_id, profile)
-);
-
--- dispatch_lane_attempts: one row per repo evaluation attempt within a lane
-CREATE TABLE IF NOT EXISTS audit_state.dispatch_lane_attempts (
-    id                  BIGSERIAL PRIMARY KEY,
-    dispatch_lane_id    BIGINT NOT NULL REFERENCES audit_state.dispatch_lanes(id),
-    repo_key            TEXT NOT NULL,
-    attempt_number      INTEGER NOT NULL DEFAULT 1,
-    status              TEXT NOT NULL DEFAULT 'pending'
-                        CHECK (status IN ('pending', 'running', 'completed', 'failed', 'timeout', 'skipped')),
-    elapsed_seconds     DOUBLE PRECISION,
-    exit_code           INTEGER,
-    error_message       TEXT,
-    metadata_json       JSONB NOT NULL DEFAULT '{}'::jsonb,
-    started_at          TIMESTAMPTZ,
-    finished_at         TIMESTAMPTZ
-);
-
--- availability_snapshots: one row per profile availability check
-CREATE TABLE IF NOT EXISTS audit_state.availability_snapshots (
-    id                  BIGSERIAL PRIMARY KEY,
-    dispatch_run_id     BIGINT NOT NULL REFERENCES audit_state.dispatch_runs(id),
-    snapshot_at         TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    available_profiles  JSONB NOT NULL,
-    unavailable_profiles JSONB NOT NULL,
-    metadata_json       JSONB NOT NULL DEFAULT '{}'::jsonb
-);
-
--- Indexes
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_runs_project_key
-    ON audit_state.dispatch_runs(project_key);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_runs_status
-    ON audit_state.dispatch_runs(status);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_lanes_dispatch_run_id
-    ON audit_state.dispatch_lanes(dispatch_run_id);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_lanes_status
-    ON audit_state.dispatch_lanes(status);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_lane_attempts_dispatch_lane_id
-    ON audit_state.dispatch_lane_attempts(dispatch_lane_id);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_lane_attempts_status
-    ON audit_state.dispatch_lane_attempts(status);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_availability_snapshots_dispatch_run_id
-    ON audit_state.availability_snapshots(dispatch_run_id);
-
--- Phase 168 (P168-A, TSK-168.2): Add claimed_at for stale-claim detection.
--- Nullable; existing rows remain unaffected.  No change to the status CHECK
--- constraint — 'claimed' was never a valid status and remains excluded.
-ALTER TABLE audit_state.dispatch_lanes
-    ADD COLUMN IF NOT EXISTS claimed_at TIMESTAMPTZ;

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/phase157_events.sql

@@ -1,91 +0,0 @@
--- Phase 157: Lane Contracts + Dispatch Events (P157-C, P157-D)
--- P157-C: Persists the lane execution contract — profile, target,
---         checklist, tuning settings — separated from operator overrides.
--- P157-D: Append-only event log for dispatch lifecycle observability.
---
--- Idempotent: safe to re-run against an existing database.
-
--- -----------------------------------------------------------------------
--- P157-C: dispatch_lane_contracts
--- One row per lane — captures the frozen execution contract before child
--- launch.  Links back to the lane and optionally to a scope snapshot.
--- -----------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS audit_state.dispatch_lane_contracts (
-    id                  BIGSERIAL PRIMARY KEY,
-    dispatch_lane_id    BIGINT NOT NULL REFERENCES audit_state.dispatch_lanes(id),
-    scope_id            TEXT,
-    profile             TEXT NOT NULL,
-    checklist_page_id   TEXT,
-    target_rows         JSONB,
-    tuning_json         JSONB NOT NULL DEFAULT '{}'::jsonb,
-    contract_json       JSONB NOT NULL DEFAULT '{}'::jsonb,
-    created_at          TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    CONSTRAINT uq_dispatch_lane_contracts_lane
-        UNIQUE (dispatch_lane_id)
-);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_lane_contracts_lane_id
-    ON audit_state.dispatch_lane_contracts(dispatch_lane_id);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_lane_contracts_profile
-    ON audit_state.dispatch_lane_contracts(profile);
-
--- -----------------------------------------------------------------------
--- P157-C: dispatch_lane_output_envelopes
--- Normalized output envelope persisted after each attempt completes.
--- One row per attempt — status, timing, row coverage, evidence counts.
--- -----------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS audit_state.dispatch_lane_output_envelopes (
-    id                      BIGSERIAL PRIMARY KEY,
-    dispatch_lane_id        BIGINT NOT NULL REFERENCES audit_state.dispatch_lanes(id),
-    attempt_id              BIGINT REFERENCES audit_state.dispatch_lane_attempts(id),
-    status                  TEXT NOT NULL,
-    elapsed_seconds         DOUBLE PRECISION,
-    rows_evaluated          INTEGER,
-    rows_passed             INTEGER,
-    rows_failed             INTEGER,
-    rows_error              INTEGER,
-    evidence_refs_count     INTEGER,
-    envelope_json           JSONB NOT NULL DEFAULT '{}'::jsonb,
-    created_at              TIMESTAMPTZ NOT NULL DEFAULT NOW()
-);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_lane_output_envelopes_lane_id
-    ON audit_state.dispatch_lane_output_envelopes(dispatch_lane_id);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_lane_output_envelopes_attempt_id
-    ON audit_state.dispatch_lane_output_envelopes(attempt_id);
-
--- -----------------------------------------------------------------------
--- P157-D: dispatch_events
--- Append-only lifecycle event log.  event_seq provides per-run ordering
--- via a sequence default.
--- -----------------------------------------------------------------------
-CREATE SEQUENCE IF NOT EXISTS audit_state.dispatch_event_seq;
-
-CREATE TABLE IF NOT EXISTS audit_state.dispatch_events (
-    id                  BIGSERIAL PRIMARY KEY,
-    dispatch_run_id     BIGINT NOT NULL REFERENCES audit_state.dispatch_runs(id),
-    dispatch_lane_id    BIGINT REFERENCES audit_state.dispatch_lanes(id),
-    event_type          TEXT NOT NULL
-                        CHECK (event_type IN (
-                            'run_started', 'run_completed', 'run_failed',
-                            'lane_started', 'lane_completed',
-                            'attempt_started', 'attempt_completed'
-                        )),
-    event_seq           BIGINT NOT NULL DEFAULT nextval('audit_state.dispatch_event_seq'),
-    payload_json        JSONB NOT NULL DEFAULT '{}'::jsonb,
-    created_at          TIMESTAMPTZ NOT NULL DEFAULT NOW()
-);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_events_run_id
-    ON audit_state.dispatch_events(dispatch_run_id);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_events_lane_id
-    ON audit_state.dispatch_events(dispatch_lane_id);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_events_event_type
-    ON audit_state.dispatch_events(event_type);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_dispatch_events_event_seq
-    ON audit_state.dispatch_events(event_seq);

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/phase157_scope_snapshots.sql

@@ -1,24 +0,0 @@
--- Phase 157: Scope Snapshots (P157-B: Durable Scope Identity)
--- Persists the resolved scope (project + repos + checklist) for
--- deterministic re-execution via --scope-id.
---
--- Idempotent: safe to re-run against an existing database.
-
-CREATE TABLE IF NOT EXISTS audit_state.scope_snapshots (
-    id                    BIGSERIAL PRIMARY KEY,
-    scope_id              TEXT NOT NULL UNIQUE,
-    project_key           TEXT NOT NULL,
-    repo_keys             JSONB NOT NULL,
-    checklist_page_id     TEXT,
-    checklist_row_count   INTEGER,
-    bitbucket_project_keys JSONB,
-    partition_filters     JSONB,
-    metadata_json         JSONB NOT NULL DEFAULT '{}'::jsonb,
-    created_at            TIMESTAMPTZ NOT NULL DEFAULT NOW()
-);
-
-CREATE INDEX IF NOT EXISTS ix_scope_snapshots_project_key
-    ON audit_state.scope_snapshots (project_key);
-
-CREATE INDEX IF NOT EXISTS ix_scope_snapshots_created_at
-    ON audit_state.scope_snapshots (created_at DESC);

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/phase157_status_view.sql

@@ -1,22 +0,0 @@
--- Phase 157: Dispatch Run Status View (P157-I, TSK-157.30)
--- Aggregates dispatch_runs with lane-level completion stats.
--- Non-materialized VIEW for real-time freshness.
---
--- Idempotent: CREATE OR REPLACE is safe to re-run.
-
-CREATE OR REPLACE VIEW audit_state.dispatch_run_status AS
-SELECT
-    dr.run_id,
-    dr.project_key,
-    dr.status AS run_status,
-    dr.started_at,
-    dr.finished_at,
-    COUNT(dl.id) AS total_lanes,
-    COUNT(CASE WHEN dl.status = 'completed' THEN 1 END) AS completed_lanes,
-    COUNT(CASE WHEN dl.status = 'failed' THEN 1 END) AS failed_lanes,
-    COUNT(CASE WHEN dl.status = 'running' THEN 1 END) AS active_lanes,
-    COALESCE(SUM(dl.repos_completed), 0) AS total_repos_completed,
-    COALESCE(SUM(dl.repos_failed), 0) AS total_repos_failed
-FROM audit_state.dispatch_runs dr
-LEFT JOIN audit_state.dispatch_lanes dl ON dl.dispatch_run_id = dr.id
-GROUP BY dr.id;

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/phase169_dispatch_observability.sql

@@ -1,55 +0,0 @@
--- Phase 169: Dispatch Observability Migrations
--- Applies two additive changes to the dispatch schema:
---   1. heartbeat_at column on dispatch_runs (P169-B)
---   2. Widened event_type CHECK constraint on dispatch_events (P169-A)
---
--- Both changes are idempotent (IF NOT EXISTS / DROP IF EXISTS).
--- These same repairs are registered in _DISPATCH_SCHEMA_CONTRACT and fire
--- automatically at startup via the schema compat auto-repair pathway.
--- This file is provided for manual application on databases that do not go
--- through a normal vds-audit startup cycle (e.g., CI test databases, clones).
-
--- ── P169-B: heartbeat_at column ──────────────────────────────────────────────
-ALTER TABLE audit_state.dispatch_runs
-    ADD COLUMN IF NOT EXISTS heartbeat_at TIMESTAMPTZ;
-
--- ── P169-A: Widen dispatch_events event_type CHECK constraint ────────────────
--- Drop the old narrow constraint (if present) and re-add with all 9 types.
--- The auto-generated constraint name is dispatch_events_event_type_check.
-ALTER TABLE audit_state.dispatch_events
-    DROP CONSTRAINT IF EXISTS dispatch_events_event_type_check;
-
-ALTER TABLE audit_state.dispatch_events
-    ADD CONSTRAINT dispatch_events_event_type_check CHECK (event_type IN (
-        'run_started',
-        'run_completed',
-        'run_failed',
-        'lane_started',
-        'lane_completed',
-        'attempt_started',
-        'attempt_completed',
-        'lane_closed_by_doctor',
-        'dispatch_doctor_repair'
-    ));
-
--- ── P169-E: Refresh dispatch_run_status VIEW to include heartbeat_at ─────────
--- DROP then CREATE because CREATE OR REPLACE VIEW cannot change column
--- names/order on an existing view. The old view lacked heartbeat_at.
-DROP VIEW IF EXISTS audit_state.dispatch_run_status;
-CREATE VIEW audit_state.dispatch_run_status AS
-SELECT
-    dr.run_id,
-    dr.project_key,
-    dr.status AS run_status,
-    dr.started_at,
-    dr.finished_at,
-    dr.heartbeat_at,
-    COUNT(dl.id) AS total_lanes,
-    COUNT(CASE WHEN dl.status = 'completed' THEN 1 END) AS completed_lanes,
-    COUNT(CASE WHEN dl.status = 'failed' THEN 1 END) AS failed_lanes,
-    COUNT(CASE WHEN dl.status = 'running' THEN 1 END) AS active_lanes,
-    COALESCE(SUM(dl.repos_completed), 0) AS total_repos_completed,
-    COALESCE(SUM(dl.repos_failed), 0) AS total_repos_failed
-FROM audit_state.dispatch_runs dr
-LEFT JOIN audit_state.dispatch_lanes dl ON dl.dispatch_run_id = dr.id
-GROUP BY dr.id;

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/state_repair_hardening.sql

@@ -1,24 +0,0 @@
--- State Repair: Pipeline Hardening Migrations
--- Idempotent: safe to re-run against an existing database.
-
--- 1. Repo filter for shared Bitbucket project partitioning
--- When a Bitbucket project (e.g., PAY) is linked to multiple audit projects
--- (Core Payment, Auto Payment), repo_filter provides a glob pattern to
--- assign specific repos to each project link.
--- NULL means "all repos" (current behavior / backward-compatible default).
-ALTER TABLE audit_state.project_bitbucket_links
-    ADD COLUMN IF NOT EXISTS repo_filter TEXT;
-
--- 2. Checklist page cache to avoid re-fetching from Confluence every run
-CREATE TABLE IF NOT EXISTS audit_state.checklist_cache (
-    id              BIGSERIAL PRIMARY KEY,
-    checklist_page_id TEXT NOT NULL UNIQUE,
-    content_hash    TEXT NOT NULL,
-    parsed_rows     JSONB NOT NULL,
-    row_count       INTEGER NOT NULL,
-    fetched_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    expires_at      TIMESTAMPTZ NOT NULL DEFAULT (NOW() + INTERVAL '24 hours')
-);
-
-CREATE INDEX IF NOT EXISTS ix_checklist_cache_page_id
-    ON audit_state.checklist_cache (checklist_page_id);

package/tools/vds-scripts/audit_orchestrator/pyproject.toml

@@ -1,211 +0,0 @@
-[build-system]
-requires = ["hatchling>=1.20.0"]
-build-backend = "hatchling.build"
-
-[project]
-name = "vds-audit-orchestrator"
-version = "4.2.1"
-description = "VDS Audit Orchestrator - CLI tool for automated repository auditing (spec v4.91.0, Phase 149)"
-readme = "README.md"
-requires-python = ">=3.14"
-dependencies = [
-  # CLI & Core
-  "typer>=0.24.1",
-  "pydantic>=2.12.5",
-  "structlog>=25.5.0",
-  "rich>=14.3.3",
-  "openpyxl>=3.1.5",
-  "pandas>=3.0.1",
-  "httpx>=0.28.1",
-  "filelock>=3.19.1",
-  "pyyaml>=6.0.3",
-  "text-unidecode>=1.3",
-  # VDS Orchestrators
-  "vds-cli-common",
-  # ADR-DCP-1 (vds-scheduler v0.2.0):
-  # [workflows] extra brings dbos + langgraph for the relocated
-  # run_langgraph step + WorkflowProvider Protocol. Audit's workflow
-  # bodies import from vds_agent_core.workflows.* instead of from
-  # scheduler internals.
-  "vds-agent-core[workflows]>=0.1.0",
-  "vds-excel-orchestrator",
-  "vds-bitbucket-orchestrator",
-  "vds-confluence-orchestrator",
-  "vds-sonarqube-orchestrator",
-  "vds-spec-orchestrator",
-  "vds-pdf-orchestrator",
-  # Removed 2026-04-25 (verified phantom — `vds_google_sheets_orchestrator`
-  # not imported anywhere in audit_orchestrator/src or tests):
-  #   "vds-google-sheets-orchestrator"
-  # LLM & AI (Phase 5+)
-  "anthropic>=0.83.0",
-  "dspy-ai>=3.1.3",
-  # LangGraph Workflow (Phase 6B)
-  "langgraph>=1.0.9",
-  "langgraph-checkpoint>=4.0.0",
-  "langgraph-checkpoint-postgres>=3.0.4",
-  # TSK-7.1: DBOS durable workflow decorator for audit_drift_scan
-  "dbos>=2.19.0,<3",
-  # PydanticAI Agents (Phase 8+64) — pydantic-ai 1.63.0 latest stable
-  "pydantic-ai>=1.63.0",
-  "pydantic-ai-skills>=0.4.1",
-  # NOTE: bare `fastmcp` removed Wave 33 — pydantic-ai already pulls
-  # pydantic-ai-slim[fastmcp] which transitively brings fastmcp. The
-  # local code only imports `pydantic_ai.toolsets.fastmcp.FastMCPToolset`.
-  "mcp>=1.26.0",
-  "beautifulsoup4>=4.14.3",
-  "markdown-it-py>=4.0.0",
-  "pygithub>=2.8.1",
-  "vds-git-orchestrator>=0.1.0",
-  "psycopg[binary]>=3.3.3",
-  # P4 / TSK-4.1.9: alembic owns the audit_state schema (replaces
-  # PostgresStateStore.init_schema() bootstrap path and the orphan
-  # state/migrations/*.sql snapshots, now retired to legacy/migrations/).
-  # Used by the audit-migrate compose service (when added) and by operators
-  # via `alembic -c audit_orchestrator/alembic.ini upgrade head`.
-  "alembic>=1.16.0",
-  # WP-5.2: DRY Alembic env.py helper (ADR-INF-12)
-  "vds-platform-core",
-  # Phase 43: Hybrid Retrieval (pgvector Python adapter for psycopg vector type + index queries)
-  "pgvector>=0.4.2",
-  # Phase 47.9.4: AST-based Chunking (cAST paper algorithm, EMNLP 2025)
-  # Bare `tree-sitter` removed Wave 33 — language-pack pulls it transitively.
-  "tree-sitter-language-pack>=0.13.0",
-  # Phase 64: Google Gemini Support (pydantic-ai[google] requires google-genai>=1.56.0)
-  "google-genai>=1.64.0",
-]
-
-[project.scripts]
-vds-audit = "vds_audit_orchestrator.cli:app"
-
-# vds-scheduler v0.2.0 (ADR-DCP-1):
-# `vds.workflows` entry-point group is the discovery surface scheduler reads at
-# launch. Each value points to a module-level `register(provider)` callable
-# that wires the workflow's cron schedule + alias via a WorkflowProvider
-# Protocol from vds_agent_core. Importing the module fires the @DBOS.workflow
-# decorator BEFORE DBOS.launch() (load-order requirement preserved).
-[project.entry-points."vds.workflows"]
-audit-drift-scan = "vds_audit_orchestrator.workflows.audit_drift_scan:register"
-audit-security-daily = "vds_audit_orchestrator.workflows.audit_security_daily:register"
-audit-deep-monthly = "vds_audit_orchestrator.workflows.audit_deep_monthly:register"
-audit-daily-batch = "vds_audit_orchestrator.workflows.audit_daily_batch:register"
-
-[project.optional-dependencies]
-remote = [
-  "PyGithub>=2.8.1", # GitHub API (validated)
-]
-dspy-optimizer = ["optuna>=4.4.0"]
-test-integration = ["testcontainers[postgres]>=4.14.1"]
-markitdown-runner = [
-  # NOTE: MarkItDown 0.1.4 pulls in magika -> onnxruntime, which currently lacks stable
-  # Python 3.14 wheels. The orchestrator runs on Python 3.14, so MarkItDown conversion
-  # is done via an external runner (Python 3.13) using `uv run --no-project --with ...`.
-  "markitdown[pdf,docx,pptx,xlsx,xls]==0.1.4; python_version < '3.14'",
-]
-
-[dependency-groups]
-dev = [
-  "pytest>=9.0.2",
-  "pytest-asyncio>=1.3.0",
-  "pytest-cov>=7.0.0",
-  "pytest-xdist>=3.5.0",
-  "pytest-timeout>=2.3.1",
-  "hypothesis>=6.151.7",
-  "ruff>=0.15.1",
-  "mypy>=1.19.1",
-  "types-openpyxl>=3.1.5",
-  "pandas-stubs>=3.0.0",
-  "types-pyyaml>=6.0.12",
-]
-
-[tool.mypy]
-python_version = "3.14"
-ignore_missing_imports = true
-disable_error_code = ["prop-decorator"]
-
-[[tool.mypy.overrides]]
-module = [
-  "vds_git_orchestrator",
-  "vds_bitbucket_orchestrator",
-  "vds_confluence_orchestrator",
-  "vds_sonarqube_orchestrator",
-  "vds_google_sheets_orchestrator",
-  "vds_excel_orchestrator",
-  "vds_cli_common",
-  "vds_pdf_orchestrator",
-  "confluence_orchestrator",
-  "pydantic_ai_skills",
-]
-ignore_errors = true
-
-[[tool.mypy.overrides]]
-module = [
-  "vds_audit_orchestrator.agents.approval",
-  "vds_audit_orchestrator.agents.base",
-  "vds_audit_orchestrator.agents.langgraph_workflow",
-  "vds_audit_orchestrator.agents.pydantic_base",
-  "vds_audit_orchestrator.agents.usage_tracker",
-  "vds_audit_orchestrator.agents.visualization",
-  "vds_audit_orchestrator.agents.toolsets.mcp_toolset",
-  "vds_audit_orchestrator.cli",
-  "vds_audit_orchestrator.engine.auditor",
-  "vds_audit_orchestrator.engine.gap_analyzer",
-  "vds_audit_orchestrator.engine.loader",
-  "vds_audit_orchestrator.engine.scorer",
-  "vds_audit_orchestrator.engine.template_analyzer",
-  "vds_audit_orchestrator.llm.engine",
-  "vds_audit_orchestrator.llm.evaluator",
-  "vds_audit_orchestrator.llm.provider",
-  "vds_audit_orchestrator.reports.excel_generator",
-  "vds_audit_orchestrator.reports.markdown_generator",
-]
-ignore_errors = true
-
-# Optional: mermaid-cli (npm package) for PNG export
-# Install with: npm install -g @mermaid-js/mermaid-cli
-# Used by: vds-audit workflow-export --format png
-
-[tool.coverage.run]
-source = ["vds_audit_orchestrator"]
-parallel = true
-
-[tool.coverage.report]
-show_missing = true
-skip_covered = false
-
-[tool.pytest.ini_options]
-asyncio_mode = "auto"
-testpaths = ["tests"]
-addopts = ["-n", "auto", "--dist", "worksteal", "--timeout", "60", "-q"]
-markers = [
-  "serial: Tests that must run serially (shared DB, external resources)",
-  "slow: Tests that take more than 5 seconds",
-  "integration: Integration tests requiring external services",
-]
-
-[tool.hatch.build.targets.wheel]
-packages = ["src/vds_audit_orchestrator"]
-
-[tool.uv]
-editable-backend = "path"
-
-[tool.hatch.build.targets.wheel.shared-data]
-"src/vds_audit_orchestrator/mappings" = "vds_audit_orchestrator/mappings"
-
-[tool.uv.sources]
-vds-platform-core = { workspace = true }
-vds-cli-common = { workspace = true }
-vds-agent-core = { workspace = true }
-vds-excel-orchestrator = { workspace = true }
-vds-bitbucket-orchestrator = { workspace = true }
-vds-confluence-orchestrator = { workspace = true }
-vds-sonarqube-orchestrator = { workspace = true }
-vds-git-orchestrator = { workspace = true }
-vds-cli = { workspace = true }
-vds-spec-orchestrator = { workspace = true }
-vds-pdf-orchestrator = { workspace = true }
-
-[tool.ruff.lint.per-file-ignores]
-"src/vds_audit_orchestrator/llm/audit_schemas.py" = ["TC003"]
-"src/vds_audit_orchestrator/reports/pdf/pdf_models.py" = ["TC003"]
-"src/vds_audit_orchestrator/models/findings.py" = ["TC003"]

package/tools/vds-scripts/audit_orchestrator/pyrightconfig.json

@@ -1,51 +0,0 @@
-{
-  "include": [
-    "src",
-    "tests"
-  ],
-  "exclude": [
-    "**/.venv",
-    "**/.uv",
-    "**/.git",
-    "**/__pycache__",
-    "**/node_modules",
-    "src/vds_audit_orchestrator/collectors/repo_discovery 2.py"
-  ],
-  "venvPath": ".",
-  "venv": ".venv",
-  "extraPaths": [
-    "src",
-    "../vds_cli_common/src",
-    "../excel_orchestrator/src",
-    "../bitbucket_orchestrator/src",
-    "../confluence_orchestrator/src",
-    "../sonarqube_orchestrator/src",
-    "../google_sheets_orchestrator/src",
-    "../git_orchestrator/src"
-  ],
-  "typeCheckingMode": "standard",
-  "pythonVersion": "3.14",
-  "pythonPlatform": "Darwin",
-  "reportMissingImports": "warning",
-  "reportMissingModuleSource": "warning",
-  "reportUndefinedVariable": "error",
-  "reportUnusedImport": "warning",
-  "reportUnusedClass": "warning",
-  "reportUnusedFunction": "warning",
-  "reportUnusedVariable": "warning",
-  "reportPrivateImportUsage": "warning",
-  "reportConstantRedefinition": "error",
-  "reportDuplicateImport": "error",
-  "reportIncompatibleMethodOverride": "error",
-  "reportIncompatibleVariableOverride": "error",
-  "reportUnknownParameterType": "none",
-  "reportUnknownArgumentType": "none",
-  "reportUnknownMemberType": "none",
-  "reportMissingTypeStubs": "none",
-  "reportUnnecessaryTypeIgnoreComment": "warning",
-  "reportAttributeAccessIssue": "warning",
-  "reportCallIssue": "warning",
-  "strictListInference": true,
-  "strictDictionaryInference": true,
-  "strictSetInference": true
-}

package/tools/vds-scripts/audit_orchestrator/pytest.ini

@@ -1,37 +0,0 @@
-[pytest]
-# Pytest configuration for audit_orchestrator tests
-
-# Test discovery patterns
-python_files = test_*.py
-python_classes = Test*
-python_functions = test_*
-
-# Test paths
-testpaths = tests
-
-# Output options
-addopts =
-    -v
-    --tb=short
-    --strict-markers
-    --disable-warnings
-    -p no:warnings
-
-# Markers
-markers =
-    unit: Unit tests (fast, isolated)
-    integration: Integration tests (may use external resources)
-    slow: Slow-running tests
-    performance: Deterministic performance guardrail regression tests
-    asyncio: Async test functions
-
-# Coverage options (when using pytest-cov)
-# Uncomment to enable coverage reporting
-# addopts = -v --tb=short --cov=vds_audit_orchestrator --cov-report=term-missing --cov-report=html
-
-# Logging
-log_cli = false
-log_cli_level = INFO
-
-# Minimum version
-minversion = 8.0

package/tools/vds-scripts/audit_orchestrator/reproduce_scanner.py

@@ -1,40 +0,0 @@
-import logging
-from pathlib import Path
-from tempfile import TemporaryDirectory
-
-import structlog
-from vds_audit_orchestrator.agents.security_scanner import SECURITY_PATTERNS, SecurityPatternScanner
-
-# Configure structlog to print to stdout
-structlog.configure(
-    processors=[
-        structlog.processors.JSONRenderer(),
-    ],
-    logger_factory=structlog.stdlib.LoggerFactory(),
-)
-logging.basicConfig(level=logging.DEBUG)
-
-
-def reproduce():
-    with TemporaryDirectory() as tmpdir:
-        repo_path = Path(tmpdir) / "test-repo"
-        repo_path.mkdir()
-
-        # Create a test file with security pattern matching the test case
-        test_file = repo_path / "test.py"
-        test_file.write_text("password = 'supersecret123'")
-
-        print(f"Created test file at {test_file} with content: {test_file.read_text()}")
-
-        scanner = SecurityPatternScanner(repo_path)
-        # Check if rg is available
-        print(f"Ripgrep available: {scanner._check_rg_available()}")
-
-        results = scanner.scan(SECURITY_PATTERNS)
-        print(f"Scan results: {len(results)}")
-        for r in results:
-            print(f" - {r.pattern_name}: {r.match_text}")
-
-
-if __name__ == "__main__":
-    reproduce()