auditor-lambda 0.3.30 → 0.3.33

package/schemas/risk_register.schema.json

@@ -15,7 +15,7 @@
           "risk_score": {
             "type": "number",
             "minimum": 0,
-            "maximum": 1
+            "maximum": 10
           },
           "signals": {
             "type": "array",

package/schemas/unit_manifest.schema.json

@@ -21,7 +21,8 @@
           },
           "risk_score": {
             "type": "number",
-            "minimum": 0
+            "minimum": 0,
+            "maximum": 10
           },
           "required_lenses": {
             "type": "array",

package/scripts/postinstall.mjs

@@ -200,26 +200,6 @@ function renderGlobalMcpLauncher(installedPkgRoot) {
   ].join('\n');
 }
 
-function splitFrontmatter(text) {
-  const normalized = text.replace(/\r\n/g, '\n');
-  const match = normalized.match(/^---\n[\s\S]*?\n---\n?/u);
-  return { body: match ? normalized.slice(match[0].length) : normalized };
-}
-
-function renderAntigravityToml(description, promptBody) {
-  const escaped = promptBody.replace(/"""/g, '\\"\\"\\"');
-  return `description = ${JSON.stringify(description)}\nprompt = """\n${escaped}"""\n`;
-}
-
-function mergeExtensionEnablement(existing, extensionName) {
-  const parsed = existing ? JSON.parse(existing) : {};
-  if (!parsed[extensionName]) {
-    const homePrefix = replaceBackslashes(join(homedir(), '*'));
-    parsed[extensionName] = { overrides: [`/${homePrefix}`] };
-  }
-  return parsed;
-}
-
 function objectValue(value) {
   return value && typeof value === 'object' && !Array.isArray(value)
     ? value
@@ -379,7 +359,6 @@ if (!promptSource || !skillSource) {
   process.exit(0);
 }
 
-const promptBody = splitFrontmatter(promptSource.toString('utf8')).body;
 const codexOpenAiAgentSource = readOptionalSource(codexOpenAiAgentSourceFile, 'Codex skill UI metadata');
 
 const installs = [
@@ -448,30 +427,20 @@ try {
   console.warn(`    ${opencodeGlobalConfig}`);
 }
 
-// Install Antigravity extension (Gemini IDE slash command)
-const antigravityExtDir = join(homedir(), '.gemini', 'extensions', 'audit-code');
-const antigravityManifestPath = join(antigravityExtDir, 'gemini-extension.json');
-const antigravityCommandPath = join(antigravityExtDir, 'commands', 'audit-code.toml');
-const antigravityEnablementPath = join(homedir(), '.gemini', 'extensions', 'extension-enablement.json');
+// Install Antigravity plugin (global skill for Gemini IDE / Antigravity Hub)
+const antigravityPluginDir = join(homedir(), '.gemini', 'config', 'plugins', 'audit-code');
+const antigravityPluginJsonPath = join(antigravityPluginDir, 'plugin.json');
+const antigravityPluginSkillPath = join(antigravityPluginDir, 'skills', 'SKILL.md');
 
 try {
-  const manifestAction = writeGeneratedFile(
-    antigravityManifestPath,
+  const pluginJsonAction = writeGeneratedFile(
+    antigravityPluginJsonPath,
     Buffer.from(JSON.stringify({ name: 'audit-code', version: '1.0.0' }, null, 2) + '\n'),
   );
-  console.log(`audit-code: ${manifestAction} Antigravity extension manifest at ${antigravityManifestPath}`);
+  console.log(`audit-code: ${pluginJsonAction} Antigravity plugin manifest at ${antigravityPluginJsonPath}`);
 
-  const tomlContent = renderAntigravityToml(
-    'Autonomous local loop code auditing - loads one backend-rendered audit step at a time',
-    promptBody,
-  );
-  const commandAction = writeGeneratedFile(antigravityCommandPath, Buffer.from(tomlContent));
-  console.log(`audit-code: ${commandAction} Antigravity command at ${antigravityCommandPath}`);
-
-  const enablementAction = installMergedJson(antigravityEnablementPath, (existing) =>
-    mergeExtensionEnablement(existing, 'audit-code'),
-  );
-  console.log(`audit-code: ${enablementAction} Antigravity extension enablement at ${antigravityEnablementPath}`);
+  const skillAction = writeGeneratedFile(antigravityPluginSkillPath, skillSource);
+  console.log(`audit-code: ${skillAction} Antigravity plugin skill at ${antigravityPluginSkillPath}`);
 } catch (err) {
-  console.warn(`audit-code: could not install Antigravity extension (${err.message})`);
+  console.warn(`audit-code: could not install Antigravity plugin (${err.message})`);
 }

package/skills/audit-code/audit-code.prompt.md

@@ -40,6 +40,11 @@ follow only that prompt. Do not read packet prompts, schemas, command catalogs,
 or handoff files unless the current step prompt explicitly instructs you to do
 so.
 
+Use MCP tools only as a compatibility adapter when direct shell access to
+`audit-code next-step` is unavailable. The MCP `start_audit` and
+`continue_audit` tools return the same one-step contract; they are not a
+separate orchestration path.
+
 When a step prompt tells you to continue, run `audit-code next-step` again and
 follow only the newly returned `prompt_path`.