auditor-lambda 0.2.6 → 0.2.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +23 -7
- package/audit-code-wrapper-lib.mjs +1605 -330
- package/dist/cli.js +78 -16
- package/dist/coverage.d.ts +2 -2
- package/dist/coverage.js +5 -5
- package/dist/extractors/disposition.js +10 -1
- package/dist/extractors/flows.js +7 -1
- package/dist/extractors/pathPatterns.d.ts +3 -0
- package/dist/extractors/pathPatterns.js +15 -0
- package/dist/extractors/risk.js +7 -1
- package/dist/io/artifacts.d.ts +6 -6
- package/dist/io/artifacts.js +14 -17
- package/dist/io/json.d.ts +2 -0
- package/dist/io/json.js +15 -0
- package/dist/io/runArtifacts.d.ts +1 -0
- package/dist/io/runArtifacts.js +18 -4
- package/dist/mcp/server.d.ts +1 -0
- package/dist/mcp/server.js +579 -0
- package/dist/orchestrator/advance.js +9 -2
- package/dist/orchestrator/dependencyMap.js +9 -13
- package/dist/orchestrator/executors.js +7 -2
- package/dist/orchestrator/flowRequeue.js +1 -1
- package/dist/orchestrator/internalExecutors.d.ts +2 -1
- package/dist/orchestrator/internalExecutors.js +120 -63
- package/dist/orchestrator/requeue.js +9 -4
- package/dist/orchestrator/resultIngestion.js +5 -6
- package/dist/orchestrator/runtimeValidation.d.ts +7 -2
- package/dist/orchestrator/runtimeValidation.js +61 -49
- package/dist/orchestrator/runtimeValidationUpdate.js +2 -4
- package/dist/orchestrator/state.js +18 -13
- package/dist/orchestrator/trivialAudit.js +8 -5
- package/dist/prompts/renderWorkerPrompt.js +3 -2
- package/dist/reporting/mergeFindings.js +0 -11
- package/dist/reporting/synthesis.d.ts +25 -22
- package/dist/reporting/synthesis.js +92 -59
- package/dist/reporting/workBlocks.d.ts +12 -3
- package/dist/reporting/workBlocks.js +124 -70
- package/dist/types/flows.d.ts +2 -0
- package/dist/types/runtimeValidation.d.ts +2 -1
- package/dist/types.d.ts +4 -7
- package/dist/validation/auditResults.js +64 -99
- package/docs/agent-integrations.md +38 -29
- package/docs/artifacts.md +16 -56
- package/docs/bootstrap-install.md +60 -30
- package/docs/contract.md +22 -205
- package/docs/next-steps.md +59 -44
- package/docs/packaging.md +13 -3
- package/docs/production-launch-bar.md +2 -2
- package/docs/production-readiness.md +9 -5
- package/docs/releasing.md +81 -0
- package/package.json +4 -1
- package/schemas/audit_result.schema.json +4 -6
- package/schemas/runtime_validation_report.schema.json +1 -1
- package/skills/audit-code/SKILL.md +11 -2
- package/skills/audit-code/audit-code.prompt.md +5 -8
- package/schemas/merged_findings.schema.json +0 -19
- package/schemas/root_cause_clusters.schema.json +0 -28
- package/schemas/synthesis_report.schema.json +0 -61
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
"unit_id",
|
|
9
9
|
"pass_id",
|
|
10
10
|
"lens",
|
|
11
|
-
"
|
|
11
|
+
"file_coverage",
|
|
12
12
|
"findings"
|
|
13
13
|
],
|
|
14
14
|
"$defs": {
|
|
@@ -22,17 +22,15 @@
|
|
|
22
22
|
"pass_id": { "type": "string" },
|
|
23
23
|
"lens": { "type": "string" },
|
|
24
24
|
"agent_role": { "type": "string" },
|
|
25
|
-
"
|
|
25
|
+
"file_coverage": {
|
|
26
26
|
"type": "array",
|
|
27
27
|
"minItems": 1,
|
|
28
28
|
"items": {
|
|
29
29
|
"type": "object",
|
|
30
|
-
"required": ["path", "
|
|
30
|
+
"required": ["path", "total_lines"],
|
|
31
31
|
"properties": {
|
|
32
32
|
"path": { "type": "string" },
|
|
33
|
-
"
|
|
34
|
-
"end": { "type": "integer" },
|
|
35
|
-
"line_count": { "type": "integer", "minimum": 1 }
|
|
33
|
+
"total_lines": { "type": "integer", "minimum": 1 }
|
|
36
34
|
},
|
|
37
35
|
"additionalProperties": false
|
|
38
36
|
}
|
|
@@ -14,7 +14,7 @@
|
|
|
14
14
|
"task_id": { "type": "string" },
|
|
15
15
|
"status": {
|
|
16
16
|
"type": "string",
|
|
17
|
-
"enum": ["pending", "confirmed", "not_confirmed", "inconclusive"]
|
|
17
|
+
"enum": ["pending", "confirmed", "not_confirmed", "inconclusive", "not_required"]
|
|
18
18
|
},
|
|
19
19
|
"summary": { "type": "string" },
|
|
20
20
|
"evidence": {
|
|
@@ -21,8 +21,17 @@ Bounded steps are a backend implementation detail, not the intended user experie
|
|
|
21
21
|
|
|
22
22
|
## Embedded Prompt Payload
|
|
23
23
|
|
|
24
|
-
|
|
25
|
-
|
|
24
|
+
The prompt payload in `audit-code.prompt.md` remains the canonical instruction asset.
|
|
25
|
+
|
|
26
|
+
The preferred setup path is:
|
|
27
|
+
|
|
28
|
+
```bash
|
|
29
|
+
audit-code install
|
|
30
|
+
```
|
|
31
|
+
|
|
32
|
+
That bootstrap writes repo-local host assets for Codex, Claude Desktop, OpenCode, VS Code, and Antigravity plus shared MCP setup guidance.
|
|
33
|
+
|
|
34
|
+
Use direct prompt import only when the target host still needs it after bootstrap.
|
|
26
35
|
|
|
27
36
|
## Repo-local fallback
|
|
28
37
|
|
|
@@ -57,14 +57,11 @@ Continue repeating Steps 1 through 5 as necessary. The state machine will iterat
|
|
|
57
57
|
## Step 7: Presentation
|
|
58
58
|
|
|
59
59
|
Once the audit is officially complete, DO NOT run the orchestrator again.
|
|
60
|
-
Instead,
|
|
60
|
+
Instead, read the final deterministic report at:
|
|
61
61
|
|
|
62
|
-
-
|
|
62
|
+
- `audit-report.md`
|
|
63
63
|
|
|
64
|
-
|
|
64
|
+
Present the completed audit back to the user with the work blocks first, since
|
|
65
|
+
they are the primary remediation handoff units.
|
|
65
66
|
|
|
66
|
-
|
|
67
|
-
2. A polished **Markdown Summary Table** for the highest-signal merged findings.
|
|
68
|
-
3. A concise semantic **Root Cause Clusters** summary based on `synthesis_report.root_cause_clusters`.
|
|
69
|
-
|
|
70
|
-
Wait for the user to ask you to begin resolving or patching the work blocks or clusters you discovered.
|
|
67
|
+
Wait for the user to ask you to begin resolving one or more work blocks.
|
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
-
"$id": "merged_findings.schema.json",
|
|
4
|
-
"title": "Merged Findings",
|
|
5
|
-
"type": "object",
|
|
6
|
-
"required": ["findings"],
|
|
7
|
-
"$defs": {
|
|
8
|
-
"Finding": {
|
|
9
|
-
"$ref": "finding.schema.json"
|
|
10
|
-
}
|
|
11
|
-
},
|
|
12
|
-
"properties": {
|
|
13
|
-
"findings": {
|
|
14
|
-
"type": "array",
|
|
15
|
-
"items": { "$ref": "#/$defs/Finding" }
|
|
16
|
-
}
|
|
17
|
-
},
|
|
18
|
-
"additionalProperties": false
|
|
19
|
-
}
|
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
-
"$id": "root_cause_clusters.schema.json",
|
|
4
|
-
"title": "Root Cause Clusters",
|
|
5
|
-
"type": "object",
|
|
6
|
-
"required": ["clusters"],
|
|
7
|
-
"properties": {
|
|
8
|
-
"clusters": {
|
|
9
|
-
"type": "array",
|
|
10
|
-
"items": {
|
|
11
|
-
"type": "object",
|
|
12
|
-
"required": ["id", "title", "finding_ids"],
|
|
13
|
-
"properties": {
|
|
14
|
-
"id": { "type": "string" },
|
|
15
|
-
"title": { "type": "string" },
|
|
16
|
-
"summary": { "type": "string" },
|
|
17
|
-
"finding_ids": {
|
|
18
|
-
"type": "array",
|
|
19
|
-
"items": { "type": "string" },
|
|
20
|
-
"minItems": 1
|
|
21
|
-
}
|
|
22
|
-
},
|
|
23
|
-
"additionalProperties": true
|
|
24
|
-
}
|
|
25
|
-
}
|
|
26
|
-
},
|
|
27
|
-
"additionalProperties": true
|
|
28
|
-
}
|
|
@@ -1,61 +0,0 @@
|
|
|
1
|
-
{
|
|
2
|
-
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
3
|
-
"$id": "synthesis_report.schema.json",
|
|
4
|
-
"title": "Synthesis Report",
|
|
5
|
-
"type": "object",
|
|
6
|
-
"required": ["summary", "merged_findings", "root_cause_clusters"],
|
|
7
|
-
"properties": {
|
|
8
|
-
"summary": {
|
|
9
|
-
"type": "object",
|
|
10
|
-
"required": [
|
|
11
|
-
"finding_count",
|
|
12
|
-
"cluster_count",
|
|
13
|
-
"runtime_validation_status_breakdown"
|
|
14
|
-
],
|
|
15
|
-
"properties": {
|
|
16
|
-
"finding_count": { "type": "integer" },
|
|
17
|
-
"cluster_count": { "type": "integer" },
|
|
18
|
-
"runtime_validation_status_breakdown": {
|
|
19
|
-
"type": "object",
|
|
20
|
-
"additionalProperties": { "type": "integer" }
|
|
21
|
-
},
|
|
22
|
-
"notes": {
|
|
23
|
-
"type": "array",
|
|
24
|
-
"items": { "type": "string" }
|
|
25
|
-
}
|
|
26
|
-
},
|
|
27
|
-
"additionalProperties": true
|
|
28
|
-
},
|
|
29
|
-
"merged_findings": {
|
|
30
|
-
"type": "array",
|
|
31
|
-
"items": { "$ref": "finding.schema.json" }
|
|
32
|
-
},
|
|
33
|
-
"root_cause_clusters": {
|
|
34
|
-
"type": "array",
|
|
35
|
-
"items": {
|
|
36
|
-
"$ref": "#/$defs/cluster"
|
|
37
|
-
}
|
|
38
|
-
}
|
|
39
|
-
},
|
|
40
|
-
"$defs": {
|
|
41
|
-
"cluster": {
|
|
42
|
-
"type": "object",
|
|
43
|
-
"required": ["id", "title", "finding_ids"],
|
|
44
|
-
"properties": {
|
|
45
|
-
"id": { "type": "string" },
|
|
46
|
-
"title": { "type": "string" },
|
|
47
|
-
"summary": { "type": "string" },
|
|
48
|
-
"finding_ids": {
|
|
49
|
-
"type": "array",
|
|
50
|
-
"items": { "type": "string" }
|
|
51
|
-
},
|
|
52
|
-
"recommended_actions": {
|
|
53
|
-
"type": "array",
|
|
54
|
-
"items": { "type": "string" }
|
|
55
|
-
}
|
|
56
|
-
},
|
|
57
|
-
"additionalProperties": true
|
|
58
|
-
}
|
|
59
|
-
},
|
|
60
|
-
"additionalProperties": true
|
|
61
|
-
}
|