auditor-lambda 0.3.16 → 0.3.18

package/README.md

@@ -149,6 +149,18 @@ For task-to-coverage inspection without reverse-engineering multiple artifacts:
 audit-code explain-task <task_id>
 ```
 
+To remove a leftover `.audit-artifacts/` directory from an interrupted or
+crashed audit:
+
+```bash
+audit-code cleanup
+audit-code cleanup --dry-run   # preview without deleting
+audit-code cleanup --force     # delete even if state is unknown
+```
+
+Refuses to delete if the audit state is `active` or `blocked` (resumable).
+Pass `--force` when `audit_state.json` is missing (crashed run).
+
 For a local stdio MCP server entrypoint:
 
 ```bash

package/dist/cli.js

@@ -1,4 +1,4 @@
-import { access, mkdir, readFile, readdir, rename, writeFile } from "node:fs/promises";
+import { access, mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
 import { createReadStream } from "node:fs";
 import { Buffer } from "node:buffer";
 import { createHash } from "node:crypto";
@@ -606,6 +606,7 @@ export async function runSample(argv = process.argv) {
 async function cmdAdvanceAudit(argv) {
     const root = getRootDir(argv);
     const artifactsDir = getArtifactsDir(argv);
+    await cleanupStaleArtifactsDir(artifactsDir);
     await mkdir(artifactsDir, { recursive: true });
     await ensureSupervisorDirs(artifactsDir);
     let sessionConfig;
@@ -685,6 +686,7 @@ async function cmdAdvanceAudit(argv) {
 async function cmdRunToCompletion(argv) {
     const root = getRootDir(argv);
     const artifactsDir = getArtifactsDir(argv);
+    await cleanupStaleArtifactsDir(artifactsDir);
     await mkdir(artifactsDir, { recursive: true });
     await ensureSupervisorDirs(artifactsDir);
     let sessionConfig;
@@ -2353,6 +2355,61 @@ async function cmdSynthesize(argv) {
         progress_summary: result.progress_summary,
     }, null, 2));
 }
+async function cleanupStaleArtifactsDir(artifactsDir) {
+    let status;
+    try {
+        const state = await readJsonFile(join(artifactsDir, "audit_state.json"));
+        status = state.status;
+    }
+    catch (error) {
+        if (!isFileMissingError(error)) {
+            throw error;
+        }
+        return;
+    }
+    if (status === "complete" || status === "not_started") {
+        await rm(artifactsDir, { recursive: true, force: true });
+    }
+}
+async function cmdCleanup(argv) {
+    const artifactsDir = getArtifactsDir(argv);
+    const dryRun = hasFlag(argv, "--dry-run");
+    const force = hasFlag(argv, "--force");
+    let status;
+    try {
+        const state = await readJsonFile(join(artifactsDir, "audit_state.json"));
+        status = state.status;
+    }
+    catch (error) {
+        if (!isFileMissingError(error)) {
+            throw error;
+        }
+    }
+    const resumable = status === "active" || status === "blocked";
+    const unknown = status === undefined;
+    if ((resumable || unknown) && !force) {
+        const reason = resumable
+            ? `audit is ${status} and may be resumed`
+            : "no audit_state.json found; artifacts may be from a crashed audit";
+        console.log(JSON.stringify({
+            artifacts_dir: artifactsDir,
+            action: "skipped",
+            reason: `${reason} — use --force to delete anyway`,
+            dry_run: dryRun,
+        }, null, 2));
+        process.exitCode = 1;
+        return;
+    }
+    if (!dryRun) {
+        await rm(artifactsDir, { recursive: true, force: true });
+    }
+    console.log(JSON.stringify({
+        artifacts_dir: artifactsDir,
+        action: dryRun ? "dry-run" : "deleted",
+        status: status ?? "unknown",
+        dry_run: dryRun,
+    }, null, 2));
+}
 async function cmdMcp(argv) {
     await runAuditCodeMcpServer(argv.slice(3));
 }
@@ -2401,6 +2458,9 @@ async function main(argv) {
         case "synthesize":
             await cmdSynthesize(argv);
             return;
+        case "cleanup":
+            await cmdCleanup(argv);
+            return;
         case "mcp":
             await cmdMcp(argv);
             return;
@@ -2418,7 +2478,7 @@ async function main(argv) {
             return;
         default:
             console.error(`Unknown command: ${command}`);
-            console.error("Available commands: sample-run, advance-audit, run-to-completion, worker-run, import-external-analyzer, intake, plan, ingest-results, explain-task, update-runtime-validation, validate, validate-results, requeue, synthesize, mcp, prepare-dispatch, merge-and-ingest, submit-packet, validate-result");
+            console.error("Available commands: sample-run, advance-audit, run-to-completion, worker-run, import-external-analyzer, intake, plan, ingest-results, explain-task, update-runtime-validation, validate, validate-results, requeue, synthesize, cleanup, mcp, prepare-dispatch, merge-and-ingest, submit-packet, validate-result");
             process.exitCode = 1;
     }
 }

package/docs/operator-guide.md

@@ -105,12 +105,20 @@ audit-code --updates /path/to/runtime_validation_update.json
 audit-code --external-analyzer-results /path/to/external_analyzer_results.json
 audit-code explain-task <task_id>
 audit-code validate
+audit-code cleanup
 audit-code mcp
 ```
 
 `audit-code validate` checks artifact shape, cross-artifact consistency,
 session config, and explicit provider readiness.
 
+`audit-code cleanup` removes the `.audit-artifacts/` directory when safe to
+do so. It reads `audit_state.json` before acting: `complete` and `not_started`
+states are deleted unconditionally; `active` and `blocked` states are refused
+(the audit is resumable). If `audit_state.json` is missing — typically a
+crashed run — cleanup also refuses unless `--force` is passed. `--dry-run`
+previews the action without deleting anything.
+
 ## Session config
 
 Backend fallback configuration lives at:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auditor-lambda",
-  "version": "0.3.16",
+  "version": "0.3.18",
   "private": false,
   "description": "Portable hybrid code-auditing framework for arbitrary repositories.",
   "type": "module",

package/scripts/postinstall.mjs

@@ -47,6 +47,14 @@ function mergeOpenCodeGlobalConfig(existing, promptBody) {
         subtask: false,
       },
     },
+    agent: {
+      ...(parsed.agent && typeof parsed.agent === 'object' && !Array.isArray(parsed.agent)
+        ? parsed.agent
+        : {}),
+      auditor: {
+        description: 'Read-heavy audit orchestration agent for the /audit-code workflow.',
+      },
+    },
   };
 }