tribunal-kit 4.2.0 → 4.3.0

package/.agent/ARCHITECTURE.md

@@ -42,7 +42,7 @@ Type any of these in your AI IDE chat:
 |---|---|---|
 |`/generate`|Full Tribunal: Maker → Parallel Review → Human Gate|`workflows/generate.md`|
 |`/review`|Audit existing code (no generation)|`workflows/review.md`|
-|`/tribunal-full`|ALL 8 agents at once — maximum coverage|`workflows/tribunal-full.md`|
+|`/tribunal-full`|ALL 16 reviewers at once — maximum coverage|`workflows/tribunal-full.md`|
 |`/tribunal-backend`|Logic + Security + Deps + Types|`workflows/tribunal-backend.md`|
 |`/tribunal-frontend`|Logic + Security + Frontend + Types|`workflows/tribunal-frontend.md`|
 |`/tribunal-database`|Logic + Security + SQL|`workflows/tribunal-database.md`|
@@ -71,7 +71,7 @@ Type any of these in your AI IDE chat:
 
 ---
 
-## The 11 Tribunal Agents
+## The 16 Tribunal Agents
 
 |Agent|File|Activates When|
 |---|---|---|
@@ -86,6 +86,11 @@ Type any of these in your AI IDE chat:
 |`mobile-reviewer`|`agents/mobile-reviewer.md`|"mobile", "react native", "flutter", `/tribunal-full`|
 |`ai-code-reviewer`|`agents/ai-code-reviewer.md`|"llm", "openai", "anthropic", "ai", `/tribunal-full`, `/review-ai`|
 |`accessibility-reviewer`|`agents/accessibility-reviewer.md`|"a11y", "wcag", "aria", `/tribunal-frontend`, `/tribunal-full`|
+|`resilience-reviewer`|`agents/resilience-reviewer.md`|"retry", "circuit breaker", "error boundary", `/tribunal-backend`, `/tribunal-full`|
+|`schema-reviewer`|`agents/schema-reviewer.md`|"validation", "zod", "pydantic", `/tribunal-backend`, `/tribunal-full`|
+|`precedence-reviewer`|`agents/precedence-reviewer.md`|All sessions — checks Case Law before generation|
+|`penetration-tester`|`agents/penetration-tester.md`|"pentest", "red team", "attack surface", `/tribunal-full`|
+|`db-latency-auditor`|`agents/db-latency-auditor.md`|"slow query", "index", "N+1", `/tribunal-database`, `/tribunal-full`|
 
 ---
 
@@ -121,7 +126,7 @@ The Swarm system decomposes complex multi-domain goals into independent sub-task
 |`agents/swarm-worker-contracts.md`|WorkerRequest + WorkerResult JSON schemas|
 |`agents/swarm-worker-registry.md`|Maps task types and keywords to specialist agents|
 |`workflows/swarm.md`|`/swarm` slash command procedure|
-|`scripts/swarm_dispatcher.py`|Validates WorkerRequest/WorkerResult JSON (use `--mode swarm`)|
+|`scripts/swarm_dispatcher.js`|Validates WorkerRequest/WorkerResult JSON (use `--mode swarm`)|
 
 **Constraints:**
 - Maximum 5 Workers per swarm invocation
@@ -217,20 +222,20 @@ All scripts live in `.agent/scripts/`:
 
 |Script|Purpose|Usage|
 |---|---|---|
-|`checklist.py`|Priority-ordered project audit|`python .agent/scripts/checklist.py .`|
-|`verify_all.py`|Full pre-deploy validation|`python .agent/scripts/verify_all.py`|
+|`checklist.js`|Priority-ordered project audit|`node .agent/scripts/checklist.js .`|
+|`verify_all.js`|Full pre-deploy validation|`node .agent/scripts/verify_all.js`|
 |`auto_preview.py`|Local dev server management|`python .agent/scripts/auto_preview.py start`|
-|`session_manager.py`|Multi-session state tracking|`python .agent/scripts/session_manager.py status`|
+|`session_manager.js`|Multi-session state tracking|`node .agent/scripts/session_manager.js status`|
 |`lint_runner.py`|Standalone lint runner|`python .agent/scripts/lint_runner.py . --fix`|
 |`test_runner.py`|Auto-detecting test runner|`python .agent/scripts/test_runner.py . --coverage`|
-|`security_scan.py`|OWASP-aware source code scanner|`python .agent/scripts/security_scan.py .`|
+|`security_scan.js`|OWASP-aware source code scanner|`node .agent/scripts/security_scan.js .`|
 |`dependency_analyzer.py`|Unused/phantom dep checker|`python .agent/scripts/dependency_analyzer.py . --audit`|
 |`schema_validator.py`|DB schema validator|`python .agent/scripts/schema_validator.py .`|
 |`bundle_analyzer.py`|JS/TS bundle size analyzer|`python .agent/scripts/bundle_analyzer.py . --build`|
 |`strengthen_skills.py`|Appends Tribunal guardrails (LLM Traps + Pre-Flight + VBC) to skills missing them|`python .agent/scripts/strengthen_skills.py . --dry-run`|
-|`swarm_dispatcher.py`|Validate Orchestrator micro-worker JSON payloads|`python .agent/scripts/swarm_dispatcher.py --file payload.json`|
+|`swarm_dispatcher.js`|Validate Orchestrator micro-worker JSON payloads|`node .agent/scripts/swarm_dispatcher.js --file payload.json`|
 |`skill_integrator.py`|Map active skills to executable scripts|`python .agent/scripts/skill_integrator.py`|
-|`test_swarm_dispatcher.py`|Unit tests for swarm_dispatcher|`python .agent/scripts/test_swarm_dispatcher.py`|
+|`test_swarm_dispatcher.js`|Unit tests for swarm_dispatcher|`npx jest test/integration/swarm_dispatcher.test.js`|
 
 ---
 
@@ -257,14 +262,16 @@ Script failures follow cascade rules:
 .agent/
 ├── ARCHITECTURE.md          ← This file
 ├── GEMINI.md                ← Root behavior config (includes /swarm routing)
-├── agents/                  ← 33 specialist + reviewer agents
+├── agents/                  ← 40 specialist + reviewer agents (16 reviewers + 24 domain)
 │   ├── supervisor-agent.md  ← Swarm triage, dispatch, synthesis
 │   ├── swarm-worker-contracts.md  ← WorkerRequest/WorkerResult schemas
 │   └── swarm-worker-registry.md   ← Task type → agent routing map
 ├── rules/GEMINI.md          ← Master rules (P0 priority)
-├── scripts/                 ← 13 Python automation scripts
-│   └── swarm_dispatcher.py  ← Validates WorkerRequest/WorkerResult JSON
-├── skills/                  ← 44 modular skill packages
-└── workflows/               ← 25 slash command definitions
+├── scripts/                 ← 25 Python/JS automation scripts
+│   └── swarm_dispatcher.js  ← Validates WorkerRequest/WorkerResult JSON
+├── skills/                  ← 90 modular skill packages (all hardened)
+├── patterns/                ← 5 ADK skill base patterns
+├── history/                 ← Case Law + Skill Evolution data (user-generated, preserved on update)
+└── workflows/               ← 31 slash command definitions
     └── swarm.md             ← /swarm orchestration procedure
 ```

package/.agent/agents/swarm-worker-contracts.md

@@ -2,7 +2,7 @@
 
 Defines the strict JSON schemas for all Swarm dispatch and result payloads.
 Every `WorkerRequest` and `WorkerResult` MUST conform to these schemas.
-Used by: `supervisor-agent`, `swarm_dispatcher.py`, `/swarm` workflow.
+Used by: `supervisor-agent`, `swarm_dispatcher.js`, `/swarm` workflow.
 
 ---
 
@@ -153,14 +153,14 @@ interface WorkerResult {
 
 ---
 
-## swarm_dispatcher.py Integration
+## swarm_dispatcher.js Integration
 
-The `swarm_dispatcher.py` script validates **WorkerRequest** payloads before dispatch.
+The `swarm_dispatcher.js` script validates **WorkerRequest** payloads before dispatch.
 
 **Usage:**
 ```bash
-python .agent/scripts/swarm_dispatcher.py --mode swarm --file worker_request.json
-python .agent/scripts/swarm_dispatcher.py --mode swarm --payload '{"task_id":"...","type":"generate_code","agent":"backend-specialist","goal":"...","context":"...","max_retries":3}'
+node .agent/scripts/swarm_dispatcher.js --mode swarm --file worker_request.json
+node .agent/scripts/swarm_dispatcher.js --mode swarm --payload '{"task_id":"...","type":"generate_code","agent":"backend-specialist","goal":"...","context":"...","max_retries":3}'
 ```
 
 Exits `0` on valid payload. Exits `1` on any schema violation with a specific error message per field.

package/.agent/agents/ui-ux-auditor.md

@@ -0,0 +1,292 @@
+---
+name: ui-ux-auditor
+role: Tribunal Reviewer — Premium Design Enforcement
+activates_for: component, hook, react, vue, jsx, tsx, landing, page, ui, design, layout, animation, css, style, tailwind
+pattern: reviewer
+skills:
+  - ui-ux-pro-max
+  - frontend-design
+  - web-design-guidelines
+  - web-accessibility-auditor
+  - motion-engineering
+---
+
+# UI/UX Auditor — Premium Design Reviewer
+
+> **Tribunal Reviewer Position:** Activated for all frontend, component, and UI-related code.
+> **Authority Level:** Design violations are treated as REJECTED, not warnings.
+> **Mission:** Ensure every UI output is production-grade and WOW-worthy. Generic AI aesthetics are forbidden.
+
+---
+
+## What This Reviewer Catches
+
+### 🚨 Instant REJECTION Criteria (Blocking)
+
+These patterns represent the "Generic AI" aesthetic syndrome. Code producing these patterns is immediately REJECTED and returned to the Maker Agent.
+
+```
+❌ Purple/violet as the primary brand color (#7C3AED, #8B5CF6, purple, violet)
+   Reason: The #1 AI design cliché. Signals "AI-generated" to users instantly.
+
+❌ Mesh gradients as premium backgrounds (background: linear-gradient with 5+ stops blurred)
+   Reason: Banned. Use grain texture, solid contrast, or depth instead.
+
+❌ Standard hero layout: left text block + right illustration image side-by-side
+   Reason: Forbidden without explicit creative justification.
+
+❌ Bento grid as the primary layout pattern without strong editorial justification
+   Reason: Overused. Requires specific reasoning to use.
+
+❌ Flat glass cards with white/20% opacity and backdrop-blur everywhere
+   Reason: Glassmorphism overuse. Use it as an exception, not the rule.
+
+❌ Default shadcn/ui or Radix colors without brand customization
+   Reason: Out-of-box component libraries look generic. Must be customized.
+
+❌ Google Fonts defaults (Roboto, Open Sans, Lato) without strong typography hierarchy
+   Reason: Use Inter, Outfit, Geist, Plus Jakarta Sans — but pair with strong scaling.
+```
+
+### ⚠️ WARNING Criteria (Non-blocking, must be addressed before deploy)
+
+```
+⚠️ Missing hover/focus states on interactive elements
+⚠️ Micro-animations absent on buttons, cards, and list items
+⚠️ Color contrast below WCAG AA (4.5:1 for text, 3:1 for UI components)
+⚠️ No mobile-first responsive breakpoints defined
+⚠️ Raw hex colors not defined as CSS custom properties
+⚠️ Typography scale not following a harmonic ratio (golden ratio 1.618 or minor third 1.25)
+⚠️ Spacing values not following an 8pt grid system
+⚠️ Animation using linear easing without cubic-bezier refinement
+⚠️ Loading states absent for async UI operations
+⚠️ Empty/error states not designed (just "no data" text)
+```
+
+---
+
+## Verdict Guide
+
+### How to Issue a Verdict
+
+```
+━━━ UI/UX Auditor Verdict ━━━━━━━━━━━━━━━━━━━━━━
+Verdict: [ ✅ APPROVED | ⚠️ WARNING | ❌ REJECTED ]
+
+Rule violated: [exact rule from this document]
+Location: [component name / line reference]
+Issue: [specific description]
+Required fix: [concrete action the Maker Agent must take]
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+```
+
+### Verdict Definitions
+
+| Verdict | When to Use | Effect |
+|:--------|:-----------|:-------|
+| `✅ APPROVED` | No design anti-patterns. Fully premium-grade. | Passes to Human Gate |
+| `⚠️ WARNING` | UX/a11y issues that don't block render. Requires fix before deploy. | Highlighted at Human Gate |
+| `❌ REJECTED` | Generic AI aesthetic detected. Blocking pattern present. | Maker must revise |
+
+---
+
+## Positive Design Standards (What APPROVED Looks Like)
+
+### Color
+```
+✅ HSL color system: hsl(220, 90%, 56%) — not hex hacks
+✅ Custom CSS properties: --color-brand-500: hsl(220, 90%, 56%)
+✅ Dark mode: background should be dark-950 (#0A0A0F or similar near-black)
+✅ Accent color: high-contrast, non-purple (electric blue, warm amber, coral)
+✅ Semantic tokens: --color-interactive, --color-surface-raised, --color-text-muted
+```
+
+### Typography
+```
+✅ Type scale using clamp() for fluid sizing:
+   font-size: clamp(1rem, 2.5vw, 1.25rem)
+✅ Variable font weight for hierarchy (300 body, 600 subheadings, 800 hero)
+✅ Line height: 1.5–1.6 for body, 1.1–1.2 for display headings
+✅ Letter spacing: -0.02em to -0.04em for large headings (tighten at scale)
+✅ Max line length: 60–75ch for reading comfort
+```
+
+### Motion & Animation
+```
+✅ Entrance animations: translateY(20px) → 0 with opacity 0 → 1
+✅ Duration: 200ms (micro) → 400ms (standard) → 600ms (page transitions)
+✅ Easing: cubic-bezier(0.16, 1, 0.3, 1) for spring-like deceleration
+✅ Stagger: 50–100ms delay between list items
+✅ Reduced motion: @media (prefers-reduced-motion: reduce) must be included
+✅ Hover lifts: transform: translateY(-2px) + enhanced box-shadow
+```
+
+### Spacing
+```
+✅ 8pt grid system: 8px, 16px, 24px, 32px, 48px, 64px, 96px, 128px
+✅ CSS custom properties: --space-2: 8px, --space-4: 16px, --space-6: 24px
+✅ Section padding: 80px–120px vertical on desktop, 48px–64px on mobile
+✅ Component padding: consistent horizontal padding on all containers
+```
+
+### Texture & Depth
+```
+✅ Grain overlay: SVG noise filter or CSS noise texture on hero/header backgrounds
+✅ Box shadows: layered (ambient + key) — not flat Material shadows
+   Good: box-shadow: 0 1px 2px rgba(0,0,0,.05), 0 4px 16px rgba(0,0,0,.1);
+✅ Border: 1px solid rgba(255,255,255,0.08) — luminous hairlines in dark mode
+✅ Depth layers: background (z0) → cards (z1) → modals (z2) — each layer has distinct visual treatment
+```
+
+---
+
+## Anti-Pattern Detection Code Examples
+
+### 🚨 REJECTED: Purple Primary Color
+```css
+/* ❌ REJECTED */
+:root {
+  --color-primary: #7C3AED;  /* violet-600 — AI cliché */
+}
+
+/* ✅ FIX: Use a distinctive, intentional color */
+:root {
+  --color-primary: hsl(212, 96%, 52%);  /* electric blue */
+  --color-primary: hsl(24, 94%, 56%);   /* warm amber */
+  --color-primary: hsl(352, 82%, 52%);  /* vibrant coral */
+}
+```
+
+### 🚨 REJECTED: Mesh Gradient Background
+```css
+/* ❌ REJECTED */
+.hero {
+  background: radial-gradient(at 20% 80%, #7C3AED 0, transparent 50%),
+              radial-gradient(at 80% 20%, #3B82F6 0, transparent 50%);
+}
+
+/* ✅ FIX: Use grain texture + solid near-black */
+.hero {
+  background-color: hsl(230, 15%, 8%);
+  background-image: url("data:image/svg+xml,..."); /* SVG grain */
+}
+```
+
+### ⚠️ WARNING: No Hover State
+```jsx
+/* ❌ WARNING */
+<button className="bg-blue-600 text-white px-4 py-2 rounded">
+  Submit
+</button>
+
+/* ✅ FIX: Add hover + focus + active states */
+<button className="
+  bg-blue-600 text-white px-4 py-2 rounded
+  transition-all duration-200 ease-out
+  hover:bg-blue-500 hover:-translate-y-px hover:shadow-lg
+  focus-visible:outline-2 focus-visible:outline-offset-2 focus-visible:outline-blue-500
+  active:translate-y-0 active:shadow-none
+">
+  Submit
+</button>
+```
+
+### ⚠️ WARNING: Missing Reduced Motion
+```css
+/* ❌ WARNING */
+.card {
+  transition: transform 0.4s cubic-bezier(0.16, 1, 0.3, 1);
+}
+
+/* ✅ FIX: Respect user preference */
+.card {
+  transition: transform 0.4s cubic-bezier(0.16, 1, 0.3, 1);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .card {
+    transition: none;
+  }
+}
+```
+
+---
+
+## Review Checklist (Run Before Every Verdict)
+
+```
+COLOR
+□ Primary color is not purple/violet
+□ Using CSS custom properties, not raw hex values
+□ Dark mode background is near-black (not generic gray-900)
+□ Contrast ratios meet WCAG AA
+
+TYPOGRAPHY
+□ Fluid sizing with clamp() for responsive text
+□ Clear hierarchy: hero / heading / subheading / body / caption
+□ Max line length bounded for readability
+
+MOTION
+□ Entrance animation present on key elements
+□ Hover states on all interactive elements
+□ @media (prefers-reduced-motion) implemented
+□ No linear easing — use cubic-bezier throughout
+
+LAYOUT
+□ Not a standard hero layout without justification
+□ Not a bento grid without justification
+□ 8pt spacing grid used consistently
+
+TEXTURE
+□ Background has depth: grain, shadow, or layering
+□ No flat mesh gradient backgrounds
+□ Glassmorphism used sparingly, not as the default
+
+ACCESSIBILITY
+□ Focus-visible styles on all interactive elements
+□ Semantic HTML (button not div, nav not ul, etc.)
+□ ARIA labels where needed for icon-only buttons
+```
+
+---
+
+## Self-Healing Instructions Template
+
+If REJECTED, return this to the Maker Agent:
+
+```
+❌ UI/UX Auditor REJECTION
+
+Rule violated: [rule name]
+Location: [file/component/line]
+Issue: [what was found]
+
+Required correction:
+  [Specific code change using the positive patterns above]
+
+Do not change any code other than the identified violation.
+Re-submit after correction for re-review.
+```
+
+---
+
+## Guardrails
+
+```
+LLM TRAPS — What this agent must never do:
+□ Never approve purple/violet as primary without explicit developer override
+□ Never mark accessibility warnings as low-priority
+□ Never skip the checklist for "simple" components — every component ships to users
+□ Never invent design tokens that aren't in the codebase already
+□ Never approve "we'll fix the animation later" — ship it right or REJECT
+
+PRE-FLIGHT:
+□ Did I read the actual code, not just the description?
+□ Did I check ALL items in the checklist, not just obvious failures?
+□ Did I verify the primary color is NOT purple?
+
+VBC PROTOCOL (Verdict-Based Correction):
+□ Every REJECTED verdict includes a concrete "Required fix" with code
+□ Every WARNING includes a code example from the positive patterns above
+□ No vague feedback — every verdict is actionable
+```

package/.agent/rules/GEMINI.md

@@ -222,7 +222,7 @@ These scripts live in `.agent/scripts/`. Agents and skills can invoke them:
 |`checklist.py`|Priority audit: Security→Lint→Schema→Tests→UX→SEO|Before/after any major change|
 |`verify_all.py`|Full pre-deploy validation suite|Pre-deploy|
 |`auto_preview.py`|Start/stop/restart local dev server|After /create or /enhance|
-|`session_manager.py`|Track session state between conversations|Multi-session work|
+|`session_manager.js`|Track session state between conversations|Multi-session work|
 |`lint_runner.py`|Standalone lint runner (ESLint, Prettier, Ruff)|Every code change|
 |`test_runner.py`|Standalone test runner (Jest, Vitest, pytest, Go)|After logic changes|
 |`security_scan.py`|Deep OWASP-aware source code security scan|Always on deploy, /audit|
@@ -230,22 +230,22 @@ These scripts live in `.agent/scripts/`. Agents and skills can invoke them:
 |`schema_validator.py`|Database schema validation (Prisma, SQL)|After DB changes|
 |`bundle_analyzer.py`|JS/TS bundle size analysis|Before deploy|
 |`skill_integrator.py`|Maps active skills to their executable scripts|Automatically when skills are invoked|
-|`swarm_dispatcher.py`|Validate Orchestrator micro-worker JSON payloads|After /orchestrate, before dispatching agents|
-|`test_swarm_dispatcher.py`|Unit tests for swarm_dispatcher|After modifying swarm_dispatcher.py|
+|`swarm_dispatcher.js`|Validate Orchestrator micro-worker JSON payloads|After /orchestrate, before dispatching agents|
+|`test_swarm_dispatcher.js`|Unit tests for swarm_dispatcher|After modifying swarm_dispatcher.js|
 
 **Run pattern:**
 ```
-python .agent/scripts/checklist.py .
-python .agent/scripts/verify_all.py
-python .agent/scripts/security_scan.py .
+node .agent/scripts/checklist.js .
+node .agent/scripts/verify_all.js
+node .agent/scripts/security_scan.js .
 python .agent/scripts/lint_runner.py . --fix
 python .agent/scripts/test_runner.py . --coverage
 python .agent/scripts/dependency_analyzer.py . --audit
 python .agent/scripts/schema_validator.py .
 python .agent/scripts/bundle_analyzer.py . --build
 python .agent/scripts/skill_integrator.py
-python .agent/scripts/swarm_dispatcher.py --file payload.json
-python .agent/scripts/test_swarm_dispatcher.py
+node .agent/scripts/swarm_dispatcher.js --file payload.json
+npx jest test/integration/swarm_dispatcher.test.js
 ```
 
 ---

package/.agent/scripts/_colors.js

@@ -0,0 +1,18 @@
+/**
+ * Shared ANSI color constants for Tribunal Kit scripts.
+ * Import this module instead of duplicating color codes.
+ */
+
+'use strict';
+
+const GREEN   = '\x1b[92m';
+const YELLOW  = '\x1b[93m';
+const CYAN    = '\x1b[96m';
+const RED     = '\x1b[91m';
+const BLUE    = '\x1b[94m';
+const MAGENTA = '\x1b[95m';
+const BOLD    = '\x1b[1m';
+const DIM     = '\x1b[2m';
+const RESET   = '\x1b[0m';
+
+module.exports = { GREEN, YELLOW, CYAN, RED, BLUE, MAGENTA, BOLD, DIM, RESET };

package/.agent/scripts/_utils.js

@@ -0,0 +1,42 @@
+/**
+ * Shared utilities for Tribunal Kit scripts.
+ * Import this module instead of duplicating helper functions.
+ */
+
+'use strict';
+
+const fs   = require('fs');
+const path = require('path');
+const { RED, RESET } = require('./_colors');
+
+/**
+ * Walk up the directory tree to find the nearest .agent/ folder.
+ * @param {string} [startDir] - Directory to start searching from (defaults to cwd).
+ * @returns {string} Absolute path to the .agent directory.
+ */
+function findAgentDir(startDir) {
+    let current = path.resolve(startDir || process.cwd());
+    const root = path.parse(current).root;
+
+    while (current !== root) {
+        const candidate = path.join(current, '.agent');
+        if (fs.existsSync(candidate) && fs.statSync(candidate).isDirectory()) {
+            return candidate;
+        }
+        current = path.dirname(current);
+    }
+
+    console.error(`${RED}✖ Error: '.agent' directory not found. Please run 'npx tribunal-kit init' first.${RESET}`);
+    process.exit(1);
+}
+
+/**
+ * Check if a package.json exists in the given directory.
+ * @param {string} dir - Directory to check.
+ * @returns {boolean}
+ */
+function hasNpm(dir) {
+    return fs.existsSync(path.join(dir, 'package.json'));
+}
+
+module.exports = { findAgentDir, hasNpm };