auditor-lambda 0.3.0 → 0.3.1

package/audit-code-wrapper-lib.mjs

@@ -260,6 +260,9 @@ function printHelp({ usageName, preferredEntrypoint }) {
     '- validate checks the current artifact bundle plus session-config/provider readiness and exits non-zero when issues exist',
     '- validate-results --results FILE validates AuditResult payloads against the active task manifest without ingesting them',
     '- explain-task <task_id> prints the resolved file coverage and current status for a task id',
+    '- prepare-dispatch --run-id <id> [--artifacts-dir <dir>] creates per-task prompt files and dispatch-plan.json for parallel subagent dispatch',
+    '- merge-and-ingest --run-id <id> [--root <dir>] [--artifacts-dir <dir>] merges per-task results and ingests them into the coverage matrix',
+    '- validate-result --run-id <id> --task-id <id> [--artifacts-dir <dir>] validates a single task result against the schema and line counts',
     '',
     'Primary usage:',
     '- from the repository root, run the wrapper with no arguments',
@@ -2195,6 +2198,21 @@ export async function runAuditCodeWrapper({
     return;
   }
 
+  if (argv[0] === 'prepare-dispatch') {
+    await runDistCommand('prepare-dispatch', argv.slice(1));
+    return;
+  }
+
+  if (argv[0] === 'validate-result') {
+    await runDistCommand('validate-result', argv.slice(1));
+    return;
+  }
+
+  if (argv[0] === 'merge-and-ingest') {
+    await runDistCommand('merge-and-ingest', argv.slice(1), { ensureArtifactsDir: true });
+    return;
+  }
+
   const wrapperArgs = [...argv];
   if (defaultSingleStep && !hasFlag(wrapperArgs, '--single-step')) {
     wrapperArgs.push('--single-step');

package/dist/cli.js

@@ -112,7 +112,7 @@ function getExplicitProvider(argv) {
     return getFlag(argv, "--provider");
 }
 function resolveRunProviderName(argv, sessionConfig) {
-    return resolveFreshSessionProviderName(getExplicitProvider(argv) ?? "auto", sessionConfig);
+    return resolveFreshSessionProviderName(getExplicitProvider(argv), sessionConfig);
 }
 function chunkArray(arr, size) {
     const chunkSize = normalizePositiveInteger(size);
@@ -648,7 +648,7 @@ async function cmdRunToCompletion(argv) {
         throw error;
     }
     const explicitProvider = getExplicitProvider(argv);
-    const provider = createFreshSessionProvider(explicitProvider ?? "auto", sessionConfig);
+    const provider = createFreshSessionProvider(explicitProvider, sessionConfig);
     const uiMode = getUiMode(argv, sessionConfig.ui_mode ?? "headless");
     const maxRuns = getMaxRuns(argv);
     const agentBatchSize = getAgentBatchSize(argv, sessionConfig);
@@ -1479,7 +1479,7 @@ async function cmdPrepareDispatch(argv) {
             "",
             "## Validate",
             "After writing your result, run:",
-            `  audit-code validate-result --run-id ${runId} --task-id ${task.task_id} --artifacts-dir ${artifactsDir}`,
+            `  "${process.execPath}" "${join(packageRoot, "audit-code.mjs")}" validate-result --run-id ${runId} --task-id ${task.task_id} --artifacts-dir "${artifactsDir}"`,
             "",
             "Exit 0 means valid. Non-zero: read the errors, fix your JSON, rewrite the file, run again. Retry up to 3 times.",
         ].join("\n");

package/dist/prompts/renderWorkerPrompt.js

@@ -11,10 +11,15 @@ export function renderWorkerPrompt(task) {
             `Audit run: ${task.run_id}`,
             `Read: ${tasksPath}`,
             "For each task: read all file_paths in full, review under the specified lens,",
-            "and emit one AuditResult with: task_id, unit_id, pass_id, lens, file_coverage,",
-            "findings. Each finding: id, title, category, severity, confidence, lens, summary,",
-            "affected_files (path, line_start, line_end, symbol), evidence (plain strings).",
-            `Write to: ${task.audit_results_path}`,
+            "and emit one AuditResult with:",
+            "  task_id, unit_id, pass_id, lens (copy from task),",
+            "  file_coverage: [{path, total_lines}] — use file_line_counts[path] from the task for each file,",
+            "  findings: [] or array of finding objects.",
+            "Each finding: id, title, category, severity, confidence, lens, summary,",
+            "  affected_files [{path, line_start, line_end, symbol}] (objects, not strings; min 1 entry),",
+            "  evidence [strings] (min 1 entry).",
+            "Constraint: line_end must not exceed total_lines for that file.",
+            `Write all results as a JSON array to: ${task.audit_results_path}`,
         ];
         if (usesDeferredWorkerCommand(task)) {
             lines.push("Deferred mode: write results, do not execute worker_command.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auditor-lambda",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "private": false,
   "description": "Portable hybrid code-auditing framework for arbitrary repositories.",
   "type": "module",

package/skills/audit-code/audit-code.prompt.md

@@ -36,13 +36,11 @@ Parse the JSON output. Check `audit_state.status`:
 
 ---
 
-### Step 2 — Read the Task
+### Step 2 — Extract the Task IDs
 
-Read the file at `.audit-artifacts/dispatch/current-task.json`.
-
-Note these fields:
-- `run_id` — identifies this batch of audit work
-- `artifacts_dir` — base artifacts directory
+Parse these fields directly from the Step 1 JSON output:
+- `run_id` — from `handoff.active_review_run.run_id`
+- `artifacts_dir` — from `handoff.artifacts_dir`
 
 _(If `audit_state.blockers` contains a message that requires operator input rather than code review, stop and report the blocker verbatim to the user.)_
 
@@ -103,3 +101,5 @@ Read `audit-report.md` and present the completed audit to the user. Lead with th
 **Large task warnings:** `prepare-dispatch` warns about tasks exceeding ~1500 lines. If a subagent hits a quota limit and fails to produce output, `merge-and-ingest` excludes it silently — those tasks remain pending and are picked up in the next loop iteration. No manual intervention needed.
 
 **Failed validation:** Subagents self-validate and retry up to 3 times before finishing. `merge-and-ingest` excludes any results that still lack required fields and writes `failed-tasks.json`. Those tasks are requeued automatically in the next cycle.
+
+**Command failures:** If `prepare-dispatch` or `merge-and-ingest` exits non-zero, **STOP immediately** and report the exact error output to the user. Do NOT improvise manual dispatch, manually split tasks, manually create directories, manually construct prompts, or manually merge results. These scripts are the canonical mechanism — operating without them produces incorrect output. Fix the underlying issue and re-run the failed command.