agentaudit 3.9.37 → 3.9.38

package/cli.mjs

@@ -1446,7 +1446,9 @@ async function auditRepo(url) {
   
   // Build code chunks for multi-pass analysis.
   // Budget ~45k tokens (~180k chars) per chunk for code, leaving room for prompt + output.
-  const MAX_CHUNK_CHARS = 180_000;
+  // ~15k tokens per chunk for code → fits comfortably in 32k+ context models
+  // with room for system prompt (~2k tokens) + output (4k tokens)
+  const MAX_CHUNK_CHARS = 60_000;
   const chunks = []; // array of code block strings
   let currentChunk = '';
   let currentChars = 0;
@@ -1603,7 +1605,7 @@ async function auditRepo(url) {
           },
           body: JSON.stringify({
             model: modelOverride || 'claude-sonnet-4-20250514',
-            max_tokens: 8192,
+            max_tokens: 4096,
             system: systemPrompt,
             messages: [{ role: 'user', content: userMessage }],
           }),
@@ -1651,7 +1653,7 @@ async function auditRepo(url) {
           headers: { 'Content-Type': 'application/json', ...authHeaders },
           body: JSON.stringify({
             model: modelName,
-            max_tokens: 8192,
+            max_tokens: 4096,
             messages: [
               { role: 'system', content: systemPrompt },
               { role: 'user', content: userMessage },
@@ -1700,15 +1702,9 @@ async function auditRepo(url) {
       const result = await callLLM(chunks[i], `pass ${i + 1}`);
       
       if (result.error) {
-        console.log(` ${c.red}failed${c.reset}`);
-        const errMsg = result.error;
-        console.log(`  ${c.red}API error: ${errMsg}${c.reset}`);
-        if (/context.length|maximum.*tokens|too.many.tokens/i.test(errMsg)) {
-          console.log(`  ${c.dim}This model's context window is too small even for chunked analysis.${c.reset}`);
-          console.log(`  ${c.dim}Try: --model anthropic/claude-sonnet-4 (200k) or --model openai/gpt-4o (128k)${c.reset}`);
-        }
-        try { fs.rmSync(tmpDir, { recursive: true, force: true }); } catch {}
-        return null;
+        console.log(` ${c.red}failed${c.reset} ${c.dim}(${result.error.slice(0, 80)})${c.reset}`);
+        // Don't abort on individual pass failures — continue with remaining chunks
+        continue;
       }
       
       if (!result.report) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentaudit",
-  "version": "3.9.37",
+  "version": "3.9.38",
   "description": "Security scanner for AI packages — MCP server + CLI",
   "type": "module",
   "bin": {