auditor-lambda 0.2.6 → 0.2.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (58) hide show
  1. package/README.md +23 -7
  2. package/audit-code-wrapper-lib.mjs +1605 -330
  3. package/dist/cli.js +78 -16
  4. package/dist/coverage.d.ts +2 -2
  5. package/dist/coverage.js +5 -5
  6. package/dist/extractors/disposition.js +10 -1
  7. package/dist/extractors/flows.js +7 -1
  8. package/dist/extractors/pathPatterns.d.ts +3 -0
  9. package/dist/extractors/pathPatterns.js +15 -0
  10. package/dist/extractors/risk.js +7 -1
  11. package/dist/io/artifacts.d.ts +6 -6
  12. package/dist/io/artifacts.js +14 -17
  13. package/dist/io/json.d.ts +2 -0
  14. package/dist/io/json.js +15 -0
  15. package/dist/io/runArtifacts.d.ts +1 -0
  16. package/dist/io/runArtifacts.js +18 -4
  17. package/dist/mcp/server.d.ts +1 -0
  18. package/dist/mcp/server.js +579 -0
  19. package/dist/orchestrator/advance.js +9 -2
  20. package/dist/orchestrator/dependencyMap.js +9 -13
  21. package/dist/orchestrator/executors.js +7 -2
  22. package/dist/orchestrator/flowRequeue.js +1 -1
  23. package/dist/orchestrator/internalExecutors.d.ts +2 -1
  24. package/dist/orchestrator/internalExecutors.js +120 -63
  25. package/dist/orchestrator/requeue.js +9 -4
  26. package/dist/orchestrator/resultIngestion.js +5 -6
  27. package/dist/orchestrator/runtimeValidation.d.ts +7 -2
  28. package/dist/orchestrator/runtimeValidation.js +61 -49
  29. package/dist/orchestrator/runtimeValidationUpdate.js +2 -4
  30. package/dist/orchestrator/state.js +18 -13
  31. package/dist/orchestrator/trivialAudit.js +8 -5
  32. package/dist/prompts/renderWorkerPrompt.js +3 -2
  33. package/dist/reporting/mergeFindings.js +0 -11
  34. package/dist/reporting/synthesis.d.ts +25 -22
  35. package/dist/reporting/synthesis.js +92 -59
  36. package/dist/reporting/workBlocks.d.ts +12 -3
  37. package/dist/reporting/workBlocks.js +124 -70
  38. package/dist/types/flows.d.ts +2 -0
  39. package/dist/types/runtimeValidation.d.ts +2 -1
  40. package/dist/types.d.ts +4 -7
  41. package/dist/validation/auditResults.js +64 -99
  42. package/docs/agent-integrations.md +38 -29
  43. package/docs/artifacts.md +16 -56
  44. package/docs/bootstrap-install.md +60 -30
  45. package/docs/contract.md +22 -205
  46. package/docs/next-steps.md +59 -44
  47. package/docs/packaging.md +13 -3
  48. package/docs/production-launch-bar.md +2 -2
  49. package/docs/production-readiness.md +9 -5
  50. package/docs/releasing.md +81 -0
  51. package/package.json +4 -1
  52. package/schemas/audit_result.schema.json +4 -6
  53. package/schemas/runtime_validation_report.schema.json +1 -1
  54. package/skills/audit-code/SKILL.md +11 -2
  55. package/skills/audit-code/audit-code.prompt.md +5 -8
  56. package/schemas/merged_findings.schema.json +0 -19
  57. package/schemas/root_cause_clusters.schema.json +0 -28
  58. package/schemas/synthesis_report.schema.json +0 -61
@@ -8,7 +8,7 @@
8
8
  "unit_id",
9
9
  "pass_id",
10
10
  "lens",
11
- "reviewed_ranges",
11
+ "file_coverage",
12
12
  "findings"
13
13
  ],
14
14
  "$defs": {
@@ -22,17 +22,15 @@
22
22
  "pass_id": { "type": "string" },
23
23
  "lens": { "type": "string" },
24
24
  "agent_role": { "type": "string" },
25
- "reviewed_ranges": {
25
+ "file_coverage": {
26
26
  "type": "array",
27
27
  "minItems": 1,
28
28
  "items": {
29
29
  "type": "object",
30
- "required": ["path", "start", "end", "line_count"],
30
+ "required": ["path", "total_lines"],
31
31
  "properties": {
32
32
  "path": { "type": "string" },
33
- "start": { "type": "integer" },
34
- "end": { "type": "integer" },
35
- "line_count": { "type": "integer", "minimum": 1 }
33
+ "total_lines": { "type": "integer", "minimum": 1 }
36
34
  },
37
35
  "additionalProperties": false
38
36
  }
@@ -14,7 +14,7 @@
14
14
  "task_id": { "type": "string" },
15
15
  "status": {
16
16
  "type": "string",
17
- "enum": ["pending", "confirmed", "not_confirmed", "inconclusive"]
17
+ "enum": ["pending", "confirmed", "not_confirmed", "inconclusive", "not_required"]
18
18
  },
19
19
  "summary": { "type": "string" },
20
20
  "evidence": {
@@ -21,8 +21,17 @@ Bounded steps are a backend implementation detail, not the intended user experie
21
21
 
22
22
  ## Embedded Prompt Payload
23
23
 
24
- For IDE-based LLMs (Antigravity, Copilot, Cursor), you can initialize the skill natively by importing the prompt payload defined in `audit-code.prompt.md`.
25
- This provides the LLM an exact instruction set required to natively intercept the state machine blocking phases securely and assume the responsibilities of the execution "worker".
24
+ The prompt payload in `audit-code.prompt.md` remains the canonical instruction asset.
25
+
26
+ The preferred setup path is:
27
+
28
+ ```bash
29
+ audit-code install
30
+ ```
31
+
32
+ That bootstrap writes repo-local host assets for Codex, Claude Desktop, OpenCode, VS Code, and Antigravity plus shared MCP setup guidance.
33
+
34
+ Use direct prompt import only when the target host still needs it after bootstrap.
26
35
 
27
36
  ## Repo-local fallback
28
37
 
@@ -57,14 +57,11 @@ Continue repeating Steps 1 through 5 as necessary. The state machine will iterat
57
57
  ## Step 7: Presentation
58
58
 
59
59
  Once the audit is officially complete, DO NOT run the orchestrator again.
60
- Instead, use your file reading tool to consume:
60
+ Instead, read the final deterministic report at:
61
61
 
62
- - `.audit-artifacts/synthesis_report.json`
62
+ - `audit-report.md`
63
63
 
64
- Finally, present the completed audit back to the user in this order:
64
+ Present the completed audit back to the user with the work blocks first, since
65
+ they are the primary remediation handoff units.
65
66
 
66
- 1. A **Work Blocks** section summarizing `synthesis_report.work_blocks` first, because those are the primary actionable remediation groups.
67
- 2. A polished **Markdown Summary Table** for the highest-signal merged findings.
68
- 3. A concise semantic **Root Cause Clusters** summary based on `synthesis_report.root_cause_clusters`.
69
-
70
- Wait for the user to ask you to begin resolving or patching the work blocks or clusters you discovered.
67
+ Wait for the user to ask you to begin resolving one or more work blocks.
@@ -1,19 +0,0 @@
1
- {
2
- "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "$id": "merged_findings.schema.json",
4
- "title": "Merged Findings",
5
- "type": "object",
6
- "required": ["findings"],
7
- "$defs": {
8
- "Finding": {
9
- "$ref": "finding.schema.json"
10
- }
11
- },
12
- "properties": {
13
- "findings": {
14
- "type": "array",
15
- "items": { "$ref": "#/$defs/Finding" }
16
- }
17
- },
18
- "additionalProperties": false
19
- }
@@ -1,28 +0,0 @@
1
- {
2
- "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "$id": "root_cause_clusters.schema.json",
4
- "title": "Root Cause Clusters",
5
- "type": "object",
6
- "required": ["clusters"],
7
- "properties": {
8
- "clusters": {
9
- "type": "array",
10
- "items": {
11
- "type": "object",
12
- "required": ["id", "title", "finding_ids"],
13
- "properties": {
14
- "id": { "type": "string" },
15
- "title": { "type": "string" },
16
- "summary": { "type": "string" },
17
- "finding_ids": {
18
- "type": "array",
19
- "items": { "type": "string" },
20
- "minItems": 1
21
- }
22
- },
23
- "additionalProperties": true
24
- }
25
- }
26
- },
27
- "additionalProperties": true
28
- }
@@ -1,61 +0,0 @@
1
- {
2
- "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "$id": "synthesis_report.schema.json",
4
- "title": "Synthesis Report",
5
- "type": "object",
6
- "required": ["summary", "merged_findings", "root_cause_clusters"],
7
- "properties": {
8
- "summary": {
9
- "type": "object",
10
- "required": [
11
- "finding_count",
12
- "cluster_count",
13
- "runtime_validation_status_breakdown"
14
- ],
15
- "properties": {
16
- "finding_count": { "type": "integer" },
17
- "cluster_count": { "type": "integer" },
18
- "runtime_validation_status_breakdown": {
19
- "type": "object",
20
- "additionalProperties": { "type": "integer" }
21
- },
22
- "notes": {
23
- "type": "array",
24
- "items": { "type": "string" }
25
- }
26
- },
27
- "additionalProperties": true
28
- },
29
- "merged_findings": {
30
- "type": "array",
31
- "items": { "$ref": "finding.schema.json" }
32
- },
33
- "root_cause_clusters": {
34
- "type": "array",
35
- "items": {
36
- "$ref": "#/$defs/cluster"
37
- }
38
- }
39
- },
40
- "$defs": {
41
- "cluster": {
42
- "type": "object",
43
- "required": ["id", "title", "finding_ids"],
44
- "properties": {
45
- "id": { "type": "string" },
46
- "title": { "type": "string" },
47
- "summary": { "type": "string" },
48
- "finding_ids": {
49
- "type": "array",
50
- "items": { "type": "string" }
51
- },
52
- "recommended_actions": {
53
- "type": "array",
54
- "items": { "type": "string" }
55
- }
56
- },
57
- "additionalProperties": true
58
- }
59
- },
60
- "additionalProperties": true
61
- }