🛡️ pi-audit-master

Professional Multi-Agent Codebase Auditing & Automated Repair Engine

pi-audit-master is a high-precision quality assurance tool for Pi extensions. Instead of generic code reviews, it deploys a coordinated fleet of specialized AI agents to identify critical bugs, logical gaps, and performance bottlenecks using industry-standard analysis techniques.

🚀 Core Features

🧬 The "Specialized Five" Audit Personas

The engine dispatches five parallel agents, each with a unique mental model:

Persona	Focus	Technique
Type Sentinel	Null/Undefined Safety	Taint Analysis: Tracks data from source → flow → sink.
Logic Architect	Algorithmic Correctness	State-Machine Analysis: Finds race conditions and flow gaps.
Performance Oracle	Efficiency & Scaling	Complexity Analysis: Identifies O(n²) loops and leaks.
Ecosystem Integrator	Pi API Compatibility	Contract Analysis: Verifies Event and Factory patterns.
Quality Guardian	Maintainability	Smell Detection: Finds technical debt and redundant logic.

⚙️ Advanced Capabilities

• Intelligent Mapping: The ProjectMapper identifies "Core Logic" files to maximize token efficiency and avoid auditing boilerplate.
• Hybrid Reporting: Generates a professional audit-report.md for the repository and a concise summary for the chat.
• Automated Fix-Fleet: Optionally deploys a second wave of "Fixer" agents to resolve identified issues and verifies them via the project's test suite.
• Passive Mode: Automatically audits files after modifications (v0.4.0+)
• AI-Powered Analysis: Uses Pi's complete() function for intelligent code review
• Static Analysis Fallback: Works offline with pattern-based detection
• Timeout & Progress: Configurable timeouts and progress callbacks for long audits (v0.5.0+)
• Path Traversal Protection: Input sanitization to prevent path traversal attacks (v0.5.0+)
• Conservative Magic Number Detection: Avoids false positives on legitimate constants (v0.5.0+)

🛠️ Usage

Installation

pi install npm:pi-audit-master

Running an Audit

Invoke the tool via natural language or the direct command:

Natural Language: "Audit this project and fix any critical bugs."

Direct Command:

/audit { 
  "path": ".", 
  "depth": "deep", 
  "format": "hybrid", 
  "fix": true 
}

Configuration Options

Option	Type	Default	Description
depth	"surface" | "deep"	"deep"	Audit depth. Surface: entry points only. Deep: full core logic scan.
format	"chat" | "file" | "hybrid"	"hybrid"	Report format. Chat: summary only. File: markdown report. Hybrid: both.
fix	boolean	false	Enable automated Fix-Fleet to resolve issues.
timeoutMs	number	300000	Optional timeout in milliseconds for the entire audit operation.
onProgress	(stage: string, progress: number, total: number) => void	undefined	Optional progress callback for UI updates.

📈 Pipeline Flow

Command → Config → Project Mapping → Parallel Audit → Chief Synthesis → (Optional) Fix-Fleet → Verification.

📊 Version 0.5.0 Highlights

• All console output unified through logger utility — consistent formatting, configurable log levels
• Timeout mechanism — prevents hanging audits on large codebases
• Progress reporting — callbacks for UI integration
• Input sanitization — sanitizePath() prevents path traversal
• Conservative magic number fixes — avoids false positives on years, ports, HTTP codes, etc.
• TypeScript isolatedModules: true — eliminated TS151002 warnings

📄 License

MIT