auditor-lambda 0.10.3 → 0.10.8

package/dist/validation/auditResults.js

@@ -589,7 +589,8 @@ export function validateAuditResults(results, tasks, options = {}) {
                 if (!isRecord(affected) || !isNonEmptyString(affected.path)) {
                     continue;
                 }
-                if (!declaredAssignedCoveragePaths.has(affected.path)) {
+                const affectedPathNorm = normalizeCoveragePath(affected.path);
+                if (!declaredAssignedCoveragePaths.has(affectedPathNorm)) {
                     pushIssue(issues, {
                         result_index: i,
                         task_id: taskId,
@@ -605,7 +606,7 @@ export function validateAuditResults(results, tasks, options = {}) {
                 const end = Number.isInteger(affected.line_end)
                     ? Number(affected.line_end)
                     : start;
-                if (!coversAffectedSpan(normalizedFileCoverage, affected.path, start, end)) {
+                if (!coversAffectedSpan(normalizedFileCoverage, affectedPathNorm, start, end)) {
                     pushIssue(issues, {
                         result_index: i,
                         task_id: taskId,
@@ -618,6 +619,11 @@ export function validateAuditResults(results, tasks, options = {}) {
         }
         validateVerification(result.verification, result, task, normalizedFileCoverage, taskId, i, issues);
     }
+    if (issues.length > 0) {
+        const errors = issues.filter((i) => i.severity === "error").length;
+        const warnings = issues.filter((i) => i.severity === "warning").length;
+        process.stderr.write(`[audit-results validation] ${errors} error(s), ${warnings} warning(s) across ${results.length} result(s)\n`);
+    }
     return issues;
 }
 export function formatAuditResultIssues(issues) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auditor-lambda",
-  "version": "0.10.3",
+  "version": "0.10.8",
   "private": false,
   "description": "Portable hybrid code-auditing framework for arbitrary repositories.",
   "type": "module",
@@ -10,7 +10,7 @@
   "files": [
     "dist/**",
     "audit-code.mjs",
-    "audit-code-wrapper-lib.mjs",
+    "audit-code-wrapper-*.mjs",
     "dispatch/**",
     "schemas/**",
     "skills/audit-code/**",

package/schemas/audit_findings.schema.json

@@ -24,6 +24,10 @@
           "type": "object",
           "additionalProperties": { "type": "integer", "minimum": 0 }
         },
+        "lens_breakdown": {
+          "type": "object",
+          "additionalProperties": { "type": "integer", "minimum": 0 }
+        },
         "audited_file_count": { "type": "integer", "minimum": 0 },
         "excluded_file_count": { "type": "integer", "minimum": 0 },
         "budget_deferred_task_count": { "type": "integer", "minimum": 0 },
@@ -58,7 +62,7 @@
             "enum": ["critical", "high", "medium", "low", "info"]
           },
           "confidence": { "type": "string", "enum": ["high", "medium", "low"] },
-          "lens": { "type": "string", "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"] },
+          "lens": { "$ref": "lens.schema.json" },
           "summary": { "type": "string" },
           "affected_files": {
             "type": "array",

package/schemas/audit_plan_metrics.schema.json

@@ -341,7 +341,7 @@
           "minimum": 0
         }
       },
-      "additionalProperties": false
+      "additionalProperties": { "type": "integer", "minimum": 0 }
     }
   }
 }

package/schemas/audit_result.schema.json

@@ -23,10 +23,7 @@
     "task_id": { "type": "string" },
     "unit_id": { "type": "string" },
     "pass_id": { "type": "string" },
-    "lens": {
-      "type": "string",
-      "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]
-    },
+    "lens": { "$ref": "lens.schema.json" },
     "agent_role": { "type": "string" },
     "file_coverage": {
       "type": "array",
@@ -52,7 +49,7 @@
     "requires_followup": { "type": "boolean" },
     "followup_tasks": {
       "type": "array",
-      "items": { "type": "string" }
+      "items": { "$ref": "#/$defs/AuditTask" }
     },
     "verification": {
       "type": "object",
@@ -78,7 +75,9 @@
         }
       },
       "additionalProperties": false
-    }
+    },
+    "run_id": { "type": "string" },
+    "submitted_at": { "type": "string", "format": "date-time" }
   },
   "additionalProperties": false
 }

package/schemas/audit_task.schema.json

@@ -15,10 +15,7 @@
     "task_id": { "type": "string" },
     "unit_id": { "type": "string" },
     "pass_id": { "type": "string" },
-    "lens": {
-      "type": "string",
-      "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]
-    },
+    "lens": { "$ref": "lens.schema.json" },
     "file_paths": {
       "type": "array",
       "minItems": 1,

package/schemas/blind_spot_register.schema.json

@@ -35,7 +35,7 @@
           },
           "suggested_lenses": {
             "type": "array",
-            "items": { "type": "string" }
+            "items": { "$ref": "lens.schema.json" }
           },
           "suggested_runtime_checks": {
             "type": "array",

package/schemas/coverage_matrix.schema.json

@@ -26,17 +26,11 @@
           },
           "required_lenses": {
             "type": "array",
-            "items": {
-              "type": "string",
-              "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]
-            }
+            "items": { "$ref": "lens.schema.json" }
           },
           "completed_lenses": {
             "type": "array",
-            "items": {
-              "type": "string",
-              "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]
-            }
+            "items": { "$ref": "lens.schema.json" }
           }
         },
         "additionalProperties": false

package/schemas/finding.schema.json

@@ -23,22 +23,7 @@
       "enum": ["critical", "high", "medium", "low", "info"]
     },
     "confidence": { "type": "string", "enum": ["high", "medium", "low"] },
-    "lens": {
-      "type": "string",
-      "enum": [
-        "correctness",
-        "architecture",
-        "maintainability",
-        "security",
-        "reliability",
-        "performance",
-        "data_integrity",
-        "tests",
-        "operability",
-        "config_deployment",
-        "observability"
-      ]
-    },
+    "lens": { "$ref": "lens.schema.json" },
     "summary": { "type": "string" },
     "affected_files": {
       "type": "array",

package/schemas/flow_coverage.schema.json

@@ -24,17 +24,11 @@
           },
           "required_lenses": {
             "type": "array",
-            "items": {
-              "type": "string",
-              "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]
-            }
+            "items": { "$ref": "lens.schema.json" }
           },
           "completed_lenses": {
             "type": "array",
-            "items": {
-              "type": "string",
-              "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]
-            }
+            "items": { "$ref": "lens.schema.json" }
           },
           "status": {
             "type": "string",

package/schemas/graph_bundle.schema.json

@@ -113,6 +113,37 @@
             },
             "additionalProperties": false
           }
+        },
+        "heuristics": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["from", "to"],
+            "properties": {
+              "from": { "type": "string" },
+              "to": { "type": "string" },
+              "kind": {
+                "type": "string",
+                "description": "Heuristic edge kind from path/co-location analysis (e.g. 'heuristic-container-edge', 'heuristic-auth-session-link')."
+              },
+              "direction": {
+                "type": "string",
+                "enum": ["directed", "undirected"],
+                "description": "Whether the edge should be interpreted as directional."
+              },
+              "confidence": {
+                "type": "number",
+                "minimum": 0,
+                "maximum": 1,
+                "description": "Extractor confidence for graph-informed planning."
+              },
+              "reason": {
+                "type": "string",
+                "description": "Short explanation of why the edge exists."
+              }
+            },
+            "additionalProperties": false
+          }
         }
       },
       "additionalProperties": false

package/schemas/lens.schema.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "lens.schema.json",
+  "title": "Lens",
+  "type": "string",
+  "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]
+}

package/schemas/review_packets.schema.json

@@ -7,22 +7,6 @@
     "$ref": "#/$defs/reviewPacket"
   },
   "$defs": {
-    "lens": {
-      "type": "string",
-      "enum": [
-        "correctness",
-        "architecture",
-        "maintainability",
-        "security",
-        "reliability",
-        "performance",
-        "data_integrity",
-        "tests",
-        "operability",
-        "config_deployment",
-        "observability"
-      ]
-    },
     "priority": {
       "type": "string",
       "enum": ["high", "medium", "low"]
@@ -34,6 +18,11 @@
         "from": { "type": "string" },
         "to": { "type": "string" },
         "kind": { "type": "string" },
+        "direction": {
+          "type": "string",
+          "enum": ["directed", "undirected"],
+          "description": "Whether the edge should be interpreted as directional."
+        },
         "confidence": {
           "type": "number",
           "minimum": 0,
@@ -108,7 +97,7 @@
         "lenses": {
           "type": "array",
           "minItems": 1,
-          "items": { "$ref": "#/$defs/lens" }
+          "items": { "$ref": "lens.schema.json" }
         },
         "file_paths": {
           "type": "array",

package/schemas/step_contract.schema.json

@@ -37,7 +37,7 @@
       "enum": ["ready", "blocked", "complete"]
     },
     "prompt_path": { "type": "string" },
-    "run_id": { "type": ["string", "null"] },
+    "run_id": { "type": ["string", "null"], "description": "Identifies the active dispatch run. Null when no dispatch run is in progress (e.g., blocked, present_report, intake, synthesis, and other non-dispatch step kinds)." },
     "progress": {
       "type": "object",
       "required": ["summary"],
@@ -46,7 +46,13 @@
         "pending_packets": { "type": "integer" },
         "pending_tasks": { "type": "integer" },
         "completed_tasks": { "type": "integer" },
-        "wave_size": { "type": "integer" }
+        "wave_size": { "type": "integer" },
+        "phase": { "type": "string", "enum": ["canary", "fan_out"] },
+        "canary_packet_id": { "type": ["string", "null"] },
+        "agent_count": { "type": "integer" },
+        "wave_count": { "type": "integer" },
+        "confirmation_recommended": { "type": "boolean" },
+        "dispatch_summary": { "type": "string" }
       },
       "additionalProperties": false
     },

package/schemas/unit_manifest.schema.json

@@ -27,10 +27,7 @@
           "required_lenses": {
             "type": "array",
             "minItems": 1,
-            "items": {
-              "type": "string",
-              "enum": ["correctness", "architecture", "maintainability", "security", "reliability", "performance", "data_integrity", "tests", "operability", "config_deployment", "observability"]
-            }
+            "items": { "$ref": "lens.schema.json" }
           },
           "critical_flows": {
             "type": "array",

package/scripts/postinstall.mjs

@@ -36,11 +36,12 @@ function writeGeneratedFile(path, content) {
   return action;
 }
 
+const OPENCODE_AUDIT_EXTERNAL_DIRECTORY_PERMISSION = { '*': 'allow' };
+
 const OPENCODE_AUDIT_EDIT_PERMISSION = {
   '*': 'ask',
   '.audit-code/**': 'allow',
-  '.audit-artifacts/**': 'allow',
-  'audit-report.md': 'allow',
+  '.audit-tools/**': 'allow',
 };
 
 const OPENCODE_AUDIT_BASH_PERMISSION = {
@@ -143,7 +144,7 @@ function mergeOpenCodePermissionConfig(existingPermission, generatedPermission)
     external_directory: mergeOpenCodePermissionRule(
       existingPermission.external_directory,
       generatedPermission.external_directory,
-      generatedPermission.external_directory,
+      OPENCODE_AUDIT_EXTERNAL_DIRECTORY_PERMISSION,
     ),
     edit: mergeOpenCodePermissionRule(
       existingPermission.edit,

package/skills/audit-code/audit-code.prompt.md

@@ -58,10 +58,9 @@ If the returned step is a dispatch step, before launching subagents check
   immediately.
 
 After the **first** `next-step` (the intake step) completes, confirm the audit
-scope before proceeding. Read `scope_summary.json` from the `.audit-artifacts/`
-directory (if absent, extract the JSON that follows the `SCOPE_SUMMARY:` marker
-at the start of the step's `progress_summary`). It contains `repo_root`,
-`auditable_file_count`, `git_available`, and `mis_scope_smells`. Then:
+scope before proceeding. Read `scope_summary.json` from the `.audit-tools/audit/`
+directory. It contains `repo_root`, `auditable_file_count`, `git_available`, and
+`mis_scope_smells`. Then:
 
 - Echo one informational line to the user:
   `Auditing <repo_root>, <auditable_file_count> files, git: <yes|no>`.

package/dist/extractors/graphManifestEdges.d.ts

@@ -1,12 +0,0 @@
-import type { GraphEdge } from "@audit-tools/shared";
-import { isCargoManifestPath, isGoWorkspaceManifestPath, isMavenPomPath, isPyprojectPath } from "./graphPathUtils.js";
-export { isCargoManifestPath, isGoWorkspaceManifestPath, isMavenPomPath, isPyprojectPath, };
-export declare function extractPackageEntrypointEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
-export declare function extractPackageScriptEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
-export declare function extractWorkspacePackageEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
-export declare function extractCargoWorkspaceMemberEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
-export declare function extractTypescriptProjectReferenceEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
-export declare function extractGoWorkspaceModuleEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
-export declare function extractMavenModuleEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
-export declare function extractPyprojectTestpathLinks(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];
-export declare function extractYamlPathReferenceEdges(fromPath: string, content: string, pathLookup: Map<string, string>): GraphEdge[];