auditor-lambda 0.3.36 → 0.3.37

package/audit-code-wrapper-lib.mjs

@@ -704,21 +704,6 @@ function renderOpenCodePermissionConfig() {
   };
 }
 
-const OPENCODE_MCP_COMMAND_TEMPLATE = [
-  '# audit-code',
-  '',
-  'Use `audit-code next-step` as the primary interface to the audit workflow.',
-  '',
-  '1. Run `audit-code next-step` directly when shell access is available.',
-  '2. If MCP is your only available interface, call `auditor_start_audit` or `auditor_continue_audit`; both return the same one-step contract.',
-  '3. Read `prompt_content` in the response and follow it.',
-  '4. When a step completes (not blocked), run `audit-code next-step` again or call `auditor_continue_audit` as the compatibility adapter.',
-  '5. Stop when the step instructions say to stop.',
-  '',
-  'Use the `task` tool or equivalent for subagent dispatch when the step tells you to fan out review work.',
-  '',
-  'If neither shell access nor `auditor_start_audit` is available, stop and report that no next-step interface is connected.',
-].join('\n');
 
 function renderOpenCodeProjectConfig(_root) {
   const auditPermission = renderOpenCodePermissionConfig();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auditor-lambda",
-  "version": "0.3.36",
+  "version": "0.3.37",
   "private": false,
   "description": "Portable hybrid code-auditing framework for arbitrary repositories.",
   "type": "module",

package/scripts/postinstall.mjs

@@ -277,20 +277,8 @@ function renderOpenCodePermissionConfig() {
   };
 }
 
-const OPENCODE_MCP_COMMAND_TEMPLATE = [
-  '# audit-code',
-  '',
-  'Use the auditor MCP tools as the primary interface to the audit workflow.',
-  '',
-  '1. Call `auditor_start_audit` to initialize and receive the first step.',
-  '2. Read `prompt_content` in the response and follow it.',
-  '3. When a step completes (not blocked), call `auditor_continue_audit` to advance.',
-  '4. Stop when the step instructions say to stop.',
-  '',
-  'Do not run shell commands. Use only `auditor_*` MCP tools and the `task` tool for subagent dispatch.',
-  '',
-  'If `auditor_start_audit` is not listed in your available tools, stop immediately and tell the user the auditor MCP server is not connected. Do not read local files as a fallback.',
-].join('\n');
+const opencodeCommandTemplateFile = join(pkgRoot, 'skills', 'audit-code', 'opencode-command-template.txt');
+const OPENCODE_MCP_COMMAND_TEMPLATE = readFileSync(opencodeCommandTemplateFile, 'utf8').replace(/\r\n/g, '\n').trim();
 
 function mergeOpenCodeGlobalConfig(existing) {
   const parsed = existing ? JSON.parse(existing) : {};

package/skills/audit-code/opencode-command-template.txt

@@ -0,0 +1,13 @@
+# audit-code
+
+Use `audit-code next-step` as the primary interface to the audit workflow.
+
+1. Run `audit-code next-step` directly when shell access is available.
+2. If MCP is your only available interface, call `auditor_start_audit` or `auditor_continue_audit`; both return the same one-step contract.
+3. Read `prompt_content` in the response and follow it.
+4. When a step completes (not blocked), run `audit-code next-step` again or call `auditor_continue_audit` as the compatibility adapter.
+5. Stop when the step instructions say to stop.
+
+Use the `task` tool or equivalent for subagent dispatch when the step tells you to fan out review work.
+
+If neither shell access nor `auditor_start_audit` is available, stop and report that no next-step interface is connected.