auditor-lambda 0.3.8 → 0.3.9

package/dist/mcp/server.js

@@ -165,7 +165,7 @@ async function getStatusPayload(context) {
     };
 }
 function asTextContent(value) {
-    return typeof value === "string" ? value : JSON.stringify(value, null, 2);
+    return typeof value === "string" ? value : JSON.stringify(value);
 }
 function toolResult(value) {
     return {
@@ -184,14 +184,14 @@ async function readResource(uri, context) {
             const bundle = await loadArtifactBundle(context.artifactsDir);
             return {
                 mimeType: "application/json",
-                text: JSON.stringify(bundle, null, 2),
+                text: JSON.stringify(bundle),
             };
         }
         case "audit-code://handoff/current": {
             const status = (await getStatusPayload(context)).handoff;
             return {
                 mimeType: "application/json",
-                text: JSON.stringify(status, null, 2),
+                text: JSON.stringify(status),
             };
         }
         case "audit-code://install/guide": {
@@ -247,14 +247,15 @@ function renderPrompt(name, args) {
             return [
                 "Use the auditor MCP tools as the primary interface to the backend wrapper.",
                 "1. Call `start_audit`.",
-                "2. If the audit is blocked, inspect `audit-code://handoff/current` and `audit-code://artifacts/current`.",
+                "2. If the audit is blocked, inspect `audit-code://handoff/current`.",
+                "   Do not read `audit-code://artifacts/current` unless explicitly needed for a specific task; it is massive and consumes your context window.",
                 "3. When the user provides additional evidence, call `import_results` or `import_runtime_updates`.",
                 "4. Call `continue_audit` until the status is complete or explicitly blocked for operator input.",
             ].join("\n");
         case "review-task":
             return [
                 `Use \`explain_task\` for task \`${String(args?.task_id ?? "")}\` before you inspect code manually.`,
-                "Then read `audit-code://artifacts/current` and use the task scope to review the relevant files.",
+                "Do not read the full `audit-code://artifacts/current` bundle unless specifically needed, as it is massive.",
             ].join("\n");
         case "synthesize-report":
             return [

package/dist/orchestrator/reviewPackets.js

@@ -1,7 +1,7 @@
 import { createHash } from "node:crypto";
 import { LENS_ORDER } from "./unitBuilder.js";
-const DEFAULT_MAX_TASKS_PER_PACKET = 6;
-const DEFAULT_TARGET_PACKET_LINES = 2500;
+const DEFAULT_MAX_TASKS_PER_PACKET = 0;
+const DEFAULT_TARGET_PACKET_LINES = 8000;
 const ESTIMATED_TOKENS_PER_LINE = 4;
 const ESTIMATED_PACKET_PROMPT_TOKENS = 900;
 function priorityRank(priority) {
@@ -121,7 +121,7 @@ function chunkPacketTasks(tasks, options) {
             const owner = candidate.find((item) => item.file_paths.includes(path));
             return sum + (owner ? lineCountForPath(owner, path, options.lineIndex) : 0);
         }, 0);
-        const wouldExceedTaskCount = current.length > 0 && candidate.length > options.maxTasksPerPacket;
+        const wouldExceedTaskCount = options.maxTasksPerPacket > 0 && current.length > 0 && candidate.length > options.maxTasksPerPacket;
         const wouldExceedLines = current.length > 0 && candidateLines > options.targetPacketLines;
         if (wouldExceedTaskCount || wouldExceedLines) {
             chunks.push(current);

package/dist/orchestrator/taskBuilder.js

@@ -46,9 +46,9 @@ function pickAnalyzerLens(category) {
         return "maintainability";
     return "correctness";
 }
-const DEFAULT_FILE_SPLIT_THRESHOLD = 3000;
-const DEFAULT_MAX_TASK_LINES = 1500;
-const DEFAULT_MAX_TASK_FILES = 8;
+const DEFAULT_FILE_SPLIT_THRESHOLD = 5000;
+const DEFAULT_MAX_TASK_LINES = 3000;
+const DEFAULT_MAX_TASK_FILES = 15;
 const DEFAULT_TINY_TEST_FILE_LINES = 250;
 const TINY_TEST_UNIT_ID = "tests-tiny-files";
 function buildCoverageIndex(coverageMatrix) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auditor-lambda",
-  "version": "0.3.8",
+  "version": "0.3.9",
   "private": false,
   "description": "Portable hybrid code-auditing framework for arbitrary repositories.",
   "type": "module",

package/skills/audit-code/audit-code.prompt.md

@@ -25,6 +25,7 @@ and ingest results mechanically.
   a backend command fails and the error explicitly requires diagnosis.
 - Do not inspect individual subagent result files after dispatch. Validation
   and ingestion are backend responsibilities.
+- CRITICAL: Do not use your `Read` tool to read `entry.prompt_path` or JSON schemas into your own context window. The subagent will read them. Pass the path literally.
 - Prefer subagent dispatch for semantic review whenever the host exposes an
   Agent/subagent tool.
 - If the host cannot dispatch subagents, complete exactly one assigned review
@@ -94,6 +95,8 @@ In a single message, launch one Agent/subagent call per dispatch-plan entry:
 Agent({ description: entry.description, prompt: "Read and follow the audit instructions in: " + entry.prompt_path })
 ```
 
+Do NOT use your `Read` tool to load `entry.prompt_path` into your context window. The subagent has its own context window and will read the file.
+
 If the host supports per-subagent model selection, use `entry.model_hint.tier`
 as a provider-neutral routing hint (`small`, `standard`, or `deep`). Map it to
 available host models without asking the user to choose model names. If model