tribunal-kit 3.0.0 → 3.1.0

package/.agent/workflows/review.md

@@ -1,116 +1,116 @@
----
-description: Audit existing code for hallucinations. Runs Logic + Security reviewers on any code without generating anything new. The pure review mode — read, analyze, and report only.
----
-
-# /review — Hallucination Audit (Read-Only)
-
-$ARGUMENTS
-
----
-
-## When to Use /review
-
-| Use `/review` when... | Use something else when... |
-|:---|:---|
-| Auditing code you didn't write | AI-specific code review → `/review-ai` |
-| Checking existing code for hallucinations | Need Tribunal with generation → `/generate` |
-| Pre-merge code review | Full pre-deploy audit → `/audit` |
-| Validating AI-generated output | Security only → `/tribunal-backend` |
-| Reviewing code from a junior developer | |
-
----
-
-## The Review Contract
-
-```
-/review is READ ONLY.
-No files are modified.
-No code is generated.
-Only findings and recommendations are produced.
-```
-
----
-
-## Active Reviewers
-
-Logic + Security run on ALL code by default.
-
-**Additional reviewers auto-activated by content:**
-
-| Code Contains | Additional Reviewers |
-|:---|:---|
-| SQL, Prisma, database operations | `sql-reviewer` |
-| React, hooks, components | `frontend-reviewer` |
-| TypeScript types, generics | `type-safety-reviewer` |
-| npm imports, package.json | `dependency-reviewer` |
-| Tests, specs, describe/it blocks | `test-coverage-reviewer` |
-| LLM API calls (OpenAI, Anthropic) | `ai-code-reviewer` |
-| ARIA, disability, a11y | `accessibility-reviewer` |
-
----
-
-## Review Output Format
-
-```
-━━━ Code Review — [filename or description] ━━━━━
-
-Logic Review:   ✅ APPROVED | ⚠️ [N] warnings | ❌ [N] critical
-Security:       ✅ APPROVED | ⚠️ [N] warnings | ❌ [N] critical
-
-━━━ Findings (sorted by severity) ━━━━━━━━━━━━━━
-
-[CRITICAL] [File:Line] [description] → [specific fix]
-[HIGH]     [File:Line] [description] → [specific fix]
-[MEDIUM]   [File:Line] [description] → [note]
-
-━━━ Verdict: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-✅ APPROVED — code is production-ready
-⚠️ WARNINGS — [N] items to address before release
-❌ CRITICAL — [N] blockers must be resolved
-```
-
----
-
-## What Each Reviewer Looks For
-
-### logic-reviewer
-- Methods called on wrong object types
-- Impossible states that will throw at runtime
-- Functions called before they're defined
-- Missing null checks on potentially-undefined values
-
-### security-auditor
-- SQL injection (string interpolation in queries)
-- XSS (user content in innerHTML or dangerouslySetInnerHTML)
-- JWT issues (no algorithm enforcement, weak secrets)
-- Auth order (business logic before auth check)
-- Hardcoded secrets
-
----
-
-## Hallucination-Specific Checks
-
-The review specifically catches:
-
-```
-□ Methods imported from packages that don't export them
-□ React hooks that don't exist (fabricated hook names)
-□ Prisma methods removed in current version (findOne, upsertMany)
-□ Next.js 15 dynamic APIs used without await (cookies, headers, params)
-□ React 19 deprecated API usage (useFormState instead of useActionState)
-□ Parameters passed to LLM APIs that don't exist (max_length, format, memory)
-□ Model names that don't exist (gpt-5, claude-4, gemini-ultra)
-```
-
----
-
-## Usage Examples
-
-```
-/review src/lib/auth.ts
-/review the entire src/app/api/checkout/ directory
-/review the PaymentForm component
-/review this code: [paste code inline]
-/review src/lib/ai-chat.ts for AI API hallucinations
-/review the last generated code before we write it to disk
-```
+---
+description: Audit existing code for hallucinations. Runs Logic + Security reviewers on any code without generating anything new. The pure review mode — read, analyze, and report only.
+---
+
+# /review — Hallucination Audit (Read-Only)
+
+$ARGUMENTS
+
+---
+
+## When to Use /review
+
+|Use `/review` when...|Use something else when...|
+|:---|:---|
+|Auditing code you didn't write|AI-specific code review → `/review-ai`|
+|Checking existing code for hallucinations|Need Tribunal with generation → `/generate`|
+|Pre-merge code review|Full pre-deploy audit → `/audit`|
+|Validating AI-generated output|Security only → `/tribunal-backend`|
+|Reviewing code from a junior developer||
+
+---
+
+## The Review Contract
+
+```
+/review is READ ONLY.
+No files are modified.
+No code is generated.
+Only findings and recommendations are produced.
+```
+
+---
+
+## Active Reviewers
+
+Logic + Security run on ALL code by default.
+
+**Additional reviewers auto-activated by content:**
+
+|Code Contains|Additional Reviewers|
+|:---|:---|
+|SQL, Prisma, database operations|`sql-reviewer`|
+|React, hooks, components|`frontend-reviewer`|
+|TypeScript types, generics|`type-safety-reviewer`|
+|npm imports, package.json|`dependency-reviewer`|
+|Tests, specs, describe/it blocks|`test-coverage-reviewer`|
+|LLM API calls (OpenAI, Anthropic)|`ai-code-reviewer`|
+|ARIA, disability, a11y|`accessibility-reviewer`|
+
+---
+
+## Review Output Format
+
+```
+━━━ Code Review — [filename or description] ━━━━━
+
+Logic Review:   ✅ APPROVED | ⚠️ [N] warnings | ❌ [N] critical
+Security:       ✅ APPROVED | ⚠️ [N] warnings | ❌ [N] critical
+
+━━━ Findings (sorted by severity) ━━━━━━━━━━━━━━
+
+[CRITICAL] [File:Line] [description] → [specific fix]
+[HIGH]     [File:Line] [description] → [specific fix]
+[MEDIUM]   [File:Line] [description] → [note]
+
+━━━ Verdict: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+✅ APPROVED — code is production-ready
+⚠️ WARNINGS — [N] items to address before release
+❌ CRITICAL — [N] blockers must be resolved
+```
+
+---
+
+## What Each Reviewer Looks For
+
+### logic-reviewer
+- Methods called on wrong object types
+- Impossible states that will throw at runtime
+- Functions called before they're defined
+- Missing null checks on potentially-undefined values
+
+### security-auditor
+- SQL injection (string interpolation in queries)
+- XSS (user content in innerHTML or dangerouslySetInnerHTML)
+- JWT issues (no algorithm enforcement, weak secrets)
+- Auth order (business logic before auth check)
+- Hardcoded secrets
+
+---
+
+## Hallucination-Specific Checks
+
+The review specifically catches:
+
+```
+□ Methods imported from packages that don't export them
+□ React hooks that don't exist (fabricated hook names)
+□ Prisma methods removed in current version (findOne, upsertMany)
+□ Next.js 15 dynamic APIs used without await (cookies, headers, params)
+□ React 19 deprecated API usage (useFormState instead of useActionState)
+□ Parameters passed to LLM APIs that don't exist (max_length, format, memory)
+□ Model names that don't exist (gpt-5, claude-4, gemini-ultra)
+```
+
+---
+
+## Usage Examples
+
+```
+/review src/lib/auth.ts
+/review the entire src/app/api/checkout/ directory
+/review the PaymentForm component
+/review this code: [paste code inline]
+/review src/lib/ai-chat.ts for AI API hallucinations
+/review the last generated code before we write it to disk
+```

package/.agent/workflows/session.md

@@ -1,94 +1,94 @@
----
-description: Interactive session state tracking for multi-conversation context continuity. Saves and restores agent context across separate sessions so work can be resumed without losing progress.
----
-
-# /session — Session State Management
-
-$ARGUMENTS
-
----
-
-## Commands
-
-```
-/session save      → Save current session state to disk
-/session restore   → Restore most recent session
-/session status    → Show current session summary
-/session new       → Create a new session (archive current)
-/session list      → List all saved sessions
-```
-
----
-
-## Execution
-
-```bash
-python .agent/scripts/session_manager.py save
-python .agent/scripts/session_manager.py restore
-python .agent/scripts/session_manager.py status
-python .agent/scripts/session_manager.py new
-python .agent/scripts/session_manager.py list
-```
-
----
-
-## What Gets Saved
-
-```
-Session state includes:
-□ Current task.md content
-□ Summary of what was completed this session
-□ Open questions / blocked items
-□ Files modified in this session (from git status)
-□ Next planned actions
-```
-
----
-
-## Session File Format
-
-```markdown
-# Session: [timestamp]
-
-## Completed This Session
-- [task item 1 — completed]
-- [task item 2 — completed]
-
-## In Progress
-- [task item 3 — started but not finished]
-
-## Blocked
-- [item] — blocked by [reason]
-
-## Files Modified
-- src/lib/auth.ts
-- src/app/api/users/route.ts
-
-## Next Session: Start With
-1. [first thing to do in the next session]
-2. [second thing]
-
-## Open Questions
-- [question 1]
-```
-
----
-
-## When to Use /session
-
-```
-End of work session:   /session save → so next session can restore context
-Next work session:     /session restore → avoid re-explaining context
-Complex multi-day task: /session save between each work block
-Context handoff:       /session save → share session file with collaborator
-```
-
----
-
-## Usage Examples
-
-```
-/session save   (at end of coding session)
-/session restore (at start of next coding session)
-/session status (check what was accomplished)
-```
+---
+description: Interactive session state tracking for multi-conversation context continuity. Saves and restores agent context across separate sessions so work can be resumed without losing progress.
+---
+
+# /session — Session State Management
+
+$ARGUMENTS
+
+---
+
+## Commands
+
+```
+/session save      → Save current session state to disk
+/session restore   → Restore most recent session
+/session status    → Show current session summary
+/session new       → Create a new session (archive current)
+/session list      → List all saved sessions
+```
+
+---
+
+## Execution
+
+```bash
+python .agent/scripts/session_manager.py save
+python .agent/scripts/session_manager.py restore
+python .agent/scripts/session_manager.py status
+python .agent/scripts/session_manager.py new
+python .agent/scripts/session_manager.py list
+```
+
+---
+
+## What Gets Saved
+
+```
+Session state includes:
+□ Current task.md content
+□ Summary of what was completed this session
+□ Open questions / blocked items
+□ Files modified in this session (from git status)
+□ Next planned actions
+```
+
+---
+
+## Session File Format
+
+```markdown
+# Session: [timestamp]
+
+## Completed This Session
+- [task item 1 — completed]
+- [task item 2 — completed]
+
+## In Progress
+- [task item 3 — started but not finished]
+
+## Blocked
+- [item] — blocked by [reason]
+
+## Files Modified
+- src/lib/auth.ts
+- src/app/api/users/route.ts
+
+## Next Session: Start With
+1. [first thing to do in the next session]
+2. [second thing]
+
+## Open Questions
+- [question 1]
+```
+
+---
+
+## When to Use /session
+
+```
+End of work session:   /session save → so next session can restore context
+Next work session:     /session restore → avoid re-explaining context
+Complex multi-day task: /session save between each work block
+Context handoff:       /session save → share session file with collaborator
+```
+
+---
+
+## Usage Examples
+
+```
+/session save   (at end of coding session)
+/session restore (at start of next coding session)
+/session status (check what was accomplished)
+```

package/.agent/workflows/status.md

@@ -1,79 +1,79 @@
----
-description: Display agent and project status. Shows task.md progress, last audit results, CI status, and recently modified files. Read-only — no changes made.
----
-
-# /status — Project Health Dashboard
-
-$ARGUMENTS
-
----
-
-## What /status Shows
-
-```
-1. Active task progress (from task.md)
-2. Last audit results summary
-3. Recent git activity (last 5 commits)
-4. File modification timestamps (hot files)
-5. Current server status
-```
-
----
-
-## Execution
-
-```bash
-# 1. Task progress
-cat .gemini/antigravity/brain/*/task.md 2>/dev/null || echo "No active task"
-
-# 2. Recent git activity
-git log --oneline -5
-
-# 3. Recently modified source files (last 24 hours)
-find src/ -name "*.ts" -o -name "*.tsx" -newer package.json 2>/dev/null | head -10
-
-# 4. Server status (non-blocking)
-python .agent/scripts/auto_preview.py status 2>/dev/null
-
-# 5. Quick type check
-npx tsc --noEmit 2>&1 | tail -5
-```
-
----
-
-## Status Report Format
-
-```
-━━━ Project Status ━━━━━━━━━━━━━━━━━━━━━━━
-
-Project:    [name from package.json]
-Branch:     [git branch]
-Last commit: [hash] — [message] — [time ago]
-
-━━━ Active Task ━━━━━━━━━━━━━━━━━━━━━━━━━
-[task.md content if exists, else: No active task]
-
-━━━ Recent Changes (24h) ━━━━━━━━━━━━━━━━
-  [timestamp] src/app/api/auth/login/route.ts
-  [timestamp] src/lib/auth.ts
-  [timestamp] prisma/schema.prisma
-
-━━━ TypeScript ━━━━━━━━━━━━━━━━━━━━━━━━━
-✅ Zero errors | ❌ N errors found
-
-━━━ Dev Server ━━━━━━━━━━━━━━━━━━━━━━━━━
-✅ Running at http://localhost:3000 | ⭕ Not running
-
-━━━ Next Steps ━━━━━━━━━━━━━━━━━━━━━━━━━
-[any currently incomplete task items from task.md]
-```
-
----
-
-## Usage
-
-```
-/status              → Full project status
-/status task         → Active task progress only
-/status recent       → Recently modified files only
-```
+---
+description: Display agent and project status. Shows task.md progress, last audit results, CI status, and recently modified files. Read-only — no changes made.
+---
+
+# /status — Project Health Dashboard
+
+$ARGUMENTS
+
+---
+
+## What /status Shows
+
+```
+1. Active task progress (from task.md)
+2. Last audit results summary
+3. Recent git activity (last 5 commits)
+4. File modification timestamps (hot files)
+5. Current server status
+```
+
+---
+
+## Execution
+
+```bash
+# 1. Task progress
+cat .gemini/antigravity/brain/*/task.md 2>/dev/null || echo "No active task"
+
+# 2. Recent git activity
+git log --oneline -5
+
+# 3. Recently modified source files (last 24 hours)
+find src/ -name "*.ts" -o -name "*.tsx" -newer package.json 2>/dev/null | head -10
+
+# 4. Server status (non-blocking)
+python .agent/scripts/auto_preview.py status 2>/dev/null
+
+# 5. Quick type check
+npx tsc --noEmit 2>&1 | tail -5
+```
+
+---
+
+## Status Report Format
+
+```
+━━━ Project Status ━━━━━━━━━━━━━━━━━━━━━━━
+
+Project:    [name from package.json]
+Branch:     [git branch]
+Last commit: [hash] — [message] — [time ago]
+
+━━━ Active Task ━━━━━━━━━━━━━━━━━━━━━━━━━
+[task.md content if exists, else: No active task]
+
+━━━ Recent Changes (24h) ━━━━━━━━━━━━━━━━
+  [timestamp] src/app/api/auth/login/route.ts
+  [timestamp] src/lib/auth.ts
+  [timestamp] prisma/schema.prisma
+
+━━━ TypeScript ━━━━━━━━━━━━━━━━━━━━━━━━━
+✅ Zero errors | ❌ N errors found
+
+━━━ Dev Server ━━━━━━━━━━━━━━━━━━━━━━━━━
+✅ Running at http://localhost:3000 | ⭕ Not running
+
+━━━ Next Steps ━━━━━━━━━━━━━━━━━━━━━━━━━
+[any currently incomplete task items from task.md]
+```
+
+---
+
+## Usage
+
+```
+/status              → Full project status
+/status task         → Active task progress only
+/status recent       → Recently modified files only
+```