auditor-lambda 0.3.8 → 0.3.10

package/dist/mcp/server.js

@@ -165,7 +165,7 @@ async function getStatusPayload(context) {
     };
 }
 function asTextContent(value) {
-    return typeof value === "string" ? value : JSON.stringify(value, null, 2);
+    return typeof value === "string" ? value : JSON.stringify(value);
 }
 function toolResult(value) {
     return {
@@ -184,14 +184,14 @@ async function readResource(uri, context) {
             const bundle = await loadArtifactBundle(context.artifactsDir);
             return {
                 mimeType: "application/json",
-                text: JSON.stringify(bundle, null, 2),
+                text: JSON.stringify(bundle),
             };
         }
         case "audit-code://handoff/current": {
             const status = (await getStatusPayload(context)).handoff;
             return {
                 mimeType: "application/json",
-                text: JSON.stringify(status, null, 2),
+                text: JSON.stringify(status),
             };
         }
         case "audit-code://install/guide": {
@@ -247,14 +247,15 @@ function renderPrompt(name, args) {
             return [
                 "Use the auditor MCP tools as the primary interface to the backend wrapper.",
                 "1. Call `start_audit`.",
-                "2. If the audit is blocked, inspect `audit-code://handoff/current` and `audit-code://artifacts/current`.",
+                "2. If the audit is blocked, inspect `audit-code://handoff/current`.",
+                "   Do not read `audit-code://artifacts/current` unless explicitly needed for a specific task; it is massive and consumes your context window.",
                 "3. When the user provides additional evidence, call `import_results` or `import_runtime_updates`.",
                 "4. Call `continue_audit` until the status is complete or explicitly blocked for operator input.",
             ].join("\n");
         case "review-task":
             return [
                 `Use \`explain_task\` for task \`${String(args?.task_id ?? "")}\` before you inspect code manually.`,
-                "Then read `audit-code://artifacts/current` and use the task scope to review the relevant files.",
+                "Do not read the full `audit-code://artifacts/current` bundle unless specifically needed, as it is massive.",
             ].join("\n");
         case "synthesize-report":
             return [

package/dist/orchestrator/autoFixExecutor.js

@@ -19,51 +19,53 @@ export function runAutoFixExecutor(bundle, root) {
         }
     }
     const executedTools = [];
-    // TS / JS
+    // JS, TS, HTML, CSS, JSON, YAML, MD
     if (extensions.has("ts") ||
         extensions.has("js") ||
         extensions.has("tsx") ||
-        extensions.has("jsx")) {
+        extensions.has("jsx") ||
+        extensions.has("html") ||
+        extensions.has("css") ||
+        extensions.has("json") ||
+        extensions.has("yml") ||
+        extensions.has("yaml") ||
+        extensions.has("md")) {
         if (tryRunConfiguredFormatter(root, [
             ...resolveNodeTool(root, join("node_modules", "prettier", "bin", "prettier.cjs"), ["--write", "."], "prettier --write ."),
             { command: "prettier", args: ["--write", "."], display: "prettier --write ." },
-        ]))
+            { command: "npx", args: ["--yes", "prettier", "--write", "."], display: "npx --yes prettier --write ." },
+        ])) {
             executedTools.push("prettier");
-        if (tryRunConfiguredFormatter(root, [
-            ...resolveNodeTool(root, join("node_modules", "eslint", "bin", "eslint.js"), ["--fix", "."], "eslint --fix ."),
-            { command: "eslint", args: ["--fix", "."], display: "eslint --fix ." },
-        ]))
-            executedTools.push("eslint");
+        }
     }
     // Python
     if (extensions.has("py")) {
         if (tryRunConfiguredFormatter(root, [
             { command: "black", args: ["."], display: "black ." },
             { command: "python", args: ["-m", "black", "."], display: "python -m black ." },
+            { command: "uvx", args: ["black", "."], display: "uvx black ." },
+            { command: "pipx", args: ["run", "black", "."], display: "pipx run black ." },
         ])) {
             executedTools.push("black");
         }
+    }
+    // SQL
+    if (extensions.has("sql")) {
         if (tryRunConfiguredFormatter(root, [
-            {
-                command: "autopep8",
-                args: ["--in-place", "--recursive", "."],
-                display: "autopep8 --in-place --recursive .",
-            },
-            {
-                command: "python",
-                args: ["-m", "autopep8", "--in-place", "--recursive", "."],
-                display: "python -m autopep8 --in-place --recursive .",
-            },
+            { command: "sqlfluff", args: ["fix", "--force", "."], display: "sqlfluff fix --force ." },
+            { command: "uvx", args: ["sqlfluff", "fix", "--force", "."], display: "uvx sqlfluff fix --force ." },
+            { command: "pipx", args: ["run", "sqlfluff", "fix", "--force", "."], display: "pipx run sqlfluff fix --force ." },
         ])) {
-            executedTools.push("autopep8");
+            executedTools.push("sqlfluff");
         }
     }
     // Go
     if (extensions.has("go")) {
         if (tryRunConfiguredFormatter(root, [
             { command: "gofmt", args: ["-w", "."], display: "gofmt -w ." },
-        ]))
+        ])) {
             executedTools.push("gofmt");
+        }
     }
     const resultsArtifact = {
         executed_tools: executedTools,

package/dist/orchestrator/reviewPackets.js

@@ -1,7 +1,7 @@
 import { createHash } from "node:crypto";
 import { LENS_ORDER } from "./unitBuilder.js";
-const DEFAULT_MAX_TASKS_PER_PACKET = 6;
-const DEFAULT_TARGET_PACKET_LINES = 2500;
+const DEFAULT_MAX_TASKS_PER_PACKET = 0;
+const DEFAULT_TARGET_PACKET_LINES = 8000;
 const ESTIMATED_TOKENS_PER_LINE = 4;
 const ESTIMATED_PACKET_PROMPT_TOKENS = 900;
 function priorityRank(priority) {
@@ -121,7 +121,7 @@ function chunkPacketTasks(tasks, options) {
             const owner = candidate.find((item) => item.file_paths.includes(path));
             return sum + (owner ? lineCountForPath(owner, path, options.lineIndex) : 0);
         }, 0);
-        const wouldExceedTaskCount = current.length > 0 && candidate.length > options.maxTasksPerPacket;
+        const wouldExceedTaskCount = options.maxTasksPerPacket > 0 && current.length > 0 && candidate.length > options.maxTasksPerPacket;
         const wouldExceedLines = current.length > 0 && candidateLines > options.targetPacketLines;
         if (wouldExceedTaskCount || wouldExceedLines) {
             chunks.push(current);

package/dist/orchestrator/taskBuilder.js

@@ -46,9 +46,9 @@ function pickAnalyzerLens(category) {
         return "maintainability";
     return "correctness";
 }
-const DEFAULT_FILE_SPLIT_THRESHOLD = 3000;
-const DEFAULT_MAX_TASK_LINES = 1500;
-const DEFAULT_MAX_TASK_FILES = 8;
+const DEFAULT_FILE_SPLIT_THRESHOLD = 5000;
+const DEFAULT_MAX_TASK_LINES = 3000;
+const DEFAULT_MAX_TASK_FILES = 15;
 const DEFAULT_TINY_TEST_FILE_LINES = 250;
 const TINY_TEST_UNIT_ID = "tests-tiny-files";
 function buildCoverageIndex(coverageMatrix) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auditor-lambda",
-  "version": "0.3.8",
+  "version": "0.3.10",
   "private": false,
   "description": "Portable hybrid code-auditing framework for arbitrary repositories.",
   "type": "module",
@@ -20,6 +20,7 @@
   ],
   "scripts": {
     "postinstall": "node scripts/postinstall.mjs",
+    "update-languages": "node scripts/update-languages.mjs",
     "build": "tsc -p tsconfig.json",
     "check": "tsc -p tsconfig.json --noEmit",
     "test": "npm run build && node --test tests/*.test.mjs",
@@ -67,6 +68,7 @@
   "devDependencies": {
     "@types/node": "^24.3.0",
     "ajv": "^8.17.1",
+    "linguist-languages": "^9.3.2",
     "typescript": "^5.9.2"
   }
 }

package/skills/audit-code/audit-code.prompt.md

@@ -25,6 +25,7 @@ and ingest results mechanically.
   a backend command fails and the error explicitly requires diagnosis.
 - Do not inspect individual subagent result files after dispatch. Validation
   and ingestion are backend responsibilities.
+- CRITICAL: Do not use your `Read` tool to read `entry.prompt_path` or JSON schemas into your own context window. The subagent will read them. Pass the path literally.
 - Prefer subagent dispatch for semantic review whenever the host exposes an
   Agent/subagent tool.
 - If the host cannot dispatch subagents, complete exactly one assigned review
@@ -94,6 +95,8 @@ In a single message, launch one Agent/subagent call per dispatch-plan entry:
 Agent({ description: entry.description, prompt: "Read and follow the audit instructions in: " + entry.prompt_path })
 ```
 
+Do NOT use your `Read` tool to load `entry.prompt_path` into your context window. The subagent has its own context window and will read the file.
+
 If the host supports per-subagent model selection, use `entry.model_hint.tier`
 as a provider-neutral routing hint (`small`, `standard`, or `deep`). Map it to
 available host models without asking the user to choose model names. If model