tribunal-kit 4.2.0 → 4.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (186) hide show
  1. package/.agent/ARCHITECTURE.md +21 -14
  2. package/.agent/agents/swarm-worker-contracts.md +5 -5
  3. package/.agent/agents/ui-ux-auditor.md +292 -0
  4. package/.agent/rules/GEMINI.md +8 -8
  5. package/.agent/scripts/__pycache__/_colors.cpython-311.pyc +0 -0
  6. package/.agent/scripts/__pycache__/_utils.cpython-311.pyc +0 -0
  7. package/.agent/scripts/__pycache__/case_law_manager.cpython-311.pyc +0 -0
  8. package/.agent/scripts/_colors.js +18 -0
  9. package/.agent/scripts/_utils.js +42 -0
  10. package/.agent/scripts/auto_preview.js +197 -0
  11. package/.agent/scripts/bundle_analyzer.js +290 -0
  12. package/.agent/scripts/case_law_manager.js +684 -0
  13. package/.agent/scripts/checklist.js +266 -0
  14. package/.agent/scripts/colors.js +17 -0
  15. package/.agent/scripts/compress_skills.js +141 -0
  16. package/.agent/scripts/consolidate_skills.js +149 -0
  17. package/.agent/scripts/context_broker.js +609 -0
  18. package/.agent/scripts/deep_compress.js +150 -0
  19. package/.agent/scripts/dependency_analyzer.js +272 -0
  20. package/.agent/scripts/graph_builder.js +199 -0
  21. package/.agent/scripts/graph_zoom.js +154 -0
  22. package/.agent/scripts/inner_loop_validator.js +465 -0
  23. package/.agent/scripts/lint_runner.js +187 -0
  24. package/.agent/scripts/minify_context.js +100 -0
  25. package/.agent/scripts/patch_skills_meta.js +156 -0
  26. package/.agent/scripts/patch_skills_output.js +244 -0
  27. package/.agent/scripts/schema_validator.js +297 -0
  28. package/.agent/scripts/security_scan.js +303 -0
  29. package/.agent/scripts/session_manager.js +276 -0
  30. package/.agent/scripts/skill_evolution.js +644 -0
  31. package/.agent/scripts/skill_integrator.js +313 -0
  32. package/.agent/scripts/strengthen_skills.js +193 -0
  33. package/.agent/scripts/strip_tribunal.js +47 -0
  34. package/.agent/scripts/swarm_dispatcher.js +360 -0
  35. package/.agent/scripts/test_runner.js +193 -0
  36. package/.agent/scripts/utils.js +32 -0
  37. package/.agent/scripts/verify_all.js +256 -0
  38. package/.agent/skills/agent-organizer/SKILL.md +12 -4
  39. package/.agent/skills/agentic-patterns/SKILL.md +12 -4
  40. package/.agent/skills/ai-prompt-injection-defense/SKILL.md +12 -4
  41. package/.agent/skills/api-patterns/SKILL.md +209 -201
  42. package/.agent/skills/api-security-auditor/SKILL.md +12 -4
  43. package/.agent/skills/app-builder/SKILL.md +12 -4
  44. package/.agent/skills/app-builder/templates/SKILL.md +76 -68
  45. package/.agent/skills/app-builder/templates/astro-static/TEMPLATE.md +1 -1
  46. package/.agent/skills/app-builder/templates/chrome-extension/TEMPLATE.md +1 -1
  47. package/.agent/skills/app-builder/templates/cli-tool/TEMPLATE.md +1 -1
  48. package/.agent/skills/app-builder/templates/electron-desktop/TEMPLATE.md +1 -1
  49. package/.agent/skills/app-builder/templates/express-api/TEMPLATE.md +1 -1
  50. package/.agent/skills/app-builder/templates/flutter-app/TEMPLATE.md +1 -1
  51. package/.agent/skills/app-builder/templates/monorepo-turborepo/TEMPLATE.md +1 -1
  52. package/.agent/skills/app-builder/templates/nextjs-fullstack/TEMPLATE.md +1 -1
  53. package/.agent/skills/app-builder/templates/nextjs-saas/TEMPLATE.md +1 -1
  54. package/.agent/skills/app-builder/templates/nextjs-static/TEMPLATE.md +1 -1
  55. package/.agent/skills/app-builder/templates/nuxt-app/TEMPLATE.md +1 -1
  56. package/.agent/skills/app-builder/templates/python-fastapi/TEMPLATE.md +1 -1
  57. package/.agent/skills/app-builder/templates/react-native-app/TEMPLATE.md +1 -1
  58. package/.agent/skills/appflow-wireframe/SKILL.md +12 -4
  59. package/.agent/skills/architecture/SKILL.md +12 -4
  60. package/.agent/skills/authentication-best-practices/SKILL.md +12 -4
  61. package/.agent/skills/bash-linux/SKILL.md +12 -4
  62. package/.agent/skills/behavioral-modes/SKILL.md +12 -4
  63. package/.agent/skills/brainstorming/SKILL.md +12 -4
  64. package/.agent/skills/building-native-ui/SKILL.md +12 -4
  65. package/.agent/skills/clean-code/SKILL.md +12 -4
  66. package/.agent/skills/code-review-checklist/SKILL.md +12 -4
  67. package/.agent/skills/config-validator/SKILL.md +12 -4
  68. package/.agent/skills/csharp-developer/SKILL.md +12 -4
  69. package/.agent/skills/data-validation-schemas/SKILL.md +290 -282
  70. package/.agent/skills/database-design/SKILL.md +202 -194
  71. package/.agent/skills/deployment-procedures/SKILL.md +12 -4
  72. package/.agent/skills/devops-engineer/SKILL.md +12 -4
  73. package/.agent/skills/devops-incident-responder/SKILL.md +12 -4
  74. package/.agent/skills/doc.md +1 -1
  75. package/.agent/skills/documentation-templates/SKILL.md +12 -4
  76. package/.agent/skills/edge-computing/SKILL.md +12 -4
  77. package/.agent/skills/error-resilience/SKILL.md +390 -382
  78. package/.agent/skills/extract-design-system/SKILL.md +12 -4
  79. package/.agent/skills/framer-motion-expert/SKILL.md +206 -199
  80. package/.agent/skills/frontend-design/SKILL.md +163 -155
  81. package/.agent/skills/game-design-expert/SKILL.md +12 -4
  82. package/.agent/skills/game-engineering-expert/SKILL.md +12 -4
  83. package/.agent/skills/geo-fundamentals/SKILL.md +12 -4
  84. package/.agent/skills/github-operations/SKILL.md +12 -4
  85. package/.agent/skills/gsap-core/SKILL.md +54 -48
  86. package/.agent/skills/gsap-frameworks/SKILL.md +54 -48
  87. package/.agent/skills/gsap-performance/SKILL.md +54 -48
  88. package/.agent/skills/gsap-plugins/SKILL.md +54 -48
  89. package/.agent/skills/gsap-react/SKILL.md +54 -48
  90. package/.agent/skills/gsap-scrolltrigger/SKILL.md +54 -48
  91. package/.agent/skills/gsap-timeline/SKILL.md +54 -48
  92. package/.agent/skills/gsap-utils/SKILL.md +54 -48
  93. package/.agent/skills/i18n-localization/SKILL.md +12 -4
  94. package/.agent/skills/intelligent-routing/SKILL.md +41 -33
  95. package/.agent/skills/knowledge-graph/SKILL.md +36 -0
  96. package/.agent/skills/lint-and-validate/SKILL.md +12 -4
  97. package/.agent/skills/llm-engineering/SKILL.md +12 -4
  98. package/.agent/skills/local-first/SKILL.md +12 -4
  99. package/.agent/skills/mcp-builder/SKILL.md +12 -4
  100. package/.agent/skills/mobile-design/SKILL.md +225 -217
  101. package/.agent/skills/monorepo-management/SKILL.md +296 -288
  102. package/.agent/skills/motion-engineering/SKILL.md +195 -187
  103. package/.agent/skills/nextjs-react-expert/SKILL.md +196 -188
  104. package/.agent/skills/nodejs-best-practices/SKILL.md +12 -4
  105. package/.agent/skills/observability/SKILL.md +12 -4
  106. package/.agent/skills/parallel-agents/SKILL.md +12 -4
  107. package/.agent/skills/performance-profiling/SKILL.md +12 -4
  108. package/.agent/skills/plan-writing/SKILL.md +12 -4
  109. package/.agent/skills/platform-engineer/SKILL.md +12 -4
  110. package/.agent/skills/playwright-best-practices/SKILL.md +12 -4
  111. package/.agent/skills/powershell-windows/SKILL.md +12 -4
  112. package/.agent/skills/project-idioms/SKILL.md +12 -4
  113. package/.agent/skills/python-patterns/SKILL.md +12 -4
  114. package/.agent/skills/python-pro/SKILL.md +285 -277
  115. package/.agent/skills/react-specialist/SKILL.md +239 -231
  116. package/.agent/skills/readme-builder/SKILL.md +12 -4
  117. package/.agent/skills/realtime-patterns/SKILL.md +12 -4
  118. package/.agent/skills/red-team-tactics/SKILL.md +12 -4
  119. package/.agent/skills/rust-pro/SKILL.md +12 -4
  120. package/.agent/skills/seo-fundamentals/SKILL.md +12 -4
  121. package/.agent/skills/server-management/SKILL.md +12 -4
  122. package/.agent/skills/shadcn-ui-expert/SKILL.md +12 -4
  123. package/.agent/skills/skill-creator/SKILL.md +12 -4
  124. package/.agent/skills/sql-pro/SKILL.md +12 -4
  125. package/.agent/skills/supabase-postgres-best-practices/SKILL.md +12 -4
  126. package/.agent/skills/swiftui-expert/SKILL.md +12 -4
  127. package/.agent/skills/systematic-debugging/SKILL.md +12 -4
  128. package/.agent/skills/tailwind-patterns/SKILL.md +12 -4
  129. package/.agent/skills/tdd-workflow/SKILL.md +12 -4
  130. package/.agent/skills/test-result-analyzer/SKILL.md +12 -4
  131. package/.agent/skills/testing-patterns/SKILL.md +12 -4
  132. package/.agent/skills/trend-researcher/SKILL.md +12 -4
  133. package/.agent/skills/typescript-advanced/SKILL.md +297 -289
  134. package/.agent/skills/ui-ux-pro-max/SKILL.md +12 -4
  135. package/.agent/skills/ui-ux-researcher/SKILL.md +12 -4
  136. package/.agent/skills/vue-expert/SKILL.md +237 -229
  137. package/.agent/skills/vulnerability-scanner/SKILL.md +12 -4
  138. package/.agent/skills/web-accessibility-auditor/SKILL.md +12 -4
  139. package/.agent/skills/web-design-guidelines/SKILL.md +12 -4
  140. package/.agent/skills/webapp-testing/SKILL.md +12 -4
  141. package/.agent/skills/whimsy-injector/SKILL.md +12 -4
  142. package/.agent/skills/workflow-optimizer/SKILL.md +12 -4
  143. package/.agent/workflows/audit.md +6 -6
  144. package/.agent/workflows/deploy.md +1 -1
  145. package/.agent/workflows/generate.md +23 -6
  146. package/.agent/workflows/session.md +5 -5
  147. package/.agent/workflows/swarm.md +2 -2
  148. package/README.md +242 -186
  149. package/bin/tribunal-kit.js +297 -57
  150. package/package.json +81 -77
  151. package/scripts/changelog.js +167 -0
  152. package/scripts/sync-version.js +81 -0
  153. package/scripts/validate-payload.js +73 -0
  154. package/.agent/scripts/__pycache__/auto_preview.cpython-311.pyc +0 -0
  155. package/.agent/scripts/__pycache__/bundle_analyzer.cpython-311.pyc +0 -0
  156. package/.agent/scripts/__pycache__/checklist.cpython-311.pyc +0 -0
  157. package/.agent/scripts/__pycache__/dependency_analyzer.cpython-311.pyc +0 -0
  158. package/.agent/scripts/__pycache__/security_scan.cpython-311.pyc +0 -0
  159. package/.agent/scripts/__pycache__/session_manager.cpython-311.pyc +0 -0
  160. package/.agent/scripts/__pycache__/skill_integrator.cpython-311.pyc +0 -0
  161. package/.agent/scripts/__pycache__/swarm_dispatcher.cpython-311.pyc +0 -0
  162. package/.agent/scripts/__pycache__/test_runner.cpython-311.pyc +0 -0
  163. package/.agent/scripts/__pycache__/verify_all.cpython-311.pyc +0 -0
  164. package/.agent/scripts/auto_preview.py +0 -180
  165. package/.agent/scripts/bundle_analyzer.py +0 -259
  166. package/.agent/scripts/case_law_manager.py +0 -755
  167. package/.agent/scripts/checklist.py +0 -209
  168. package/.agent/scripts/compress_skills.py +0 -167
  169. package/.agent/scripts/consolidate_skills.py +0 -173
  170. package/.agent/scripts/deep_compress.py +0 -202
  171. package/.agent/scripts/dependency_analyzer.py +0 -247
  172. package/.agent/scripts/lint_runner.py +0 -188
  173. package/.agent/scripts/minify_context.py +0 -80
  174. package/.agent/scripts/patch_skills_meta.py +0 -177
  175. package/.agent/scripts/patch_skills_output.py +0 -285
  176. package/.agent/scripts/schema_validator.py +0 -279
  177. package/.agent/scripts/security_scan.py +0 -224
  178. package/.agent/scripts/session_manager.py +0 -261
  179. package/.agent/scripts/skill_evolution.py +0 -563
  180. package/.agent/scripts/skill_integrator.py +0 -234
  181. package/.agent/scripts/strengthen_skills.py +0 -220
  182. package/.agent/scripts/strip_tribunal.py +0 -41
  183. package/.agent/scripts/swarm_dispatcher.py +0 -350
  184. package/.agent/scripts/test_runner.py +0 -192
  185. package/.agent/scripts/test_swarm_dispatcher.py +0 -163
  186. package/.agent/scripts/verify_all.py +0 -195
@@ -105,51 +105,57 @@ master.to(".c", { opacity: 0 }, "+=0.2");
105
105
  - ❌ Forget to pass **defaults** (e.g. `defaults: { duration: 0.5, ease: "power2.out" }`) when many child tweens share the same duration or ease.
106
106
  - ❌ Forget that **duration** on the timeline constructor is not the same as tween duration; timeline “duration” is determined by its children.
107
107
  - ❌ Nest animations that contain a ScrollTrigger; ScrollTriggers should only be on top-level Tweens/Timelines.
108
-
109
- ---
110
-
111
- ## 🏛️ Tribunal Integration (Anti-Hallucination)
112
-
113
- **Slash command: `/review` or `/tribunal-full`**
114
- **Active reviewers: `logic-reviewer` · `security-auditor`**
115
-
116
- ### Forbidden AI Tropes
117
-
118
- 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
119
- 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
120
- 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
121
-
122
- ---
123
-
124
- ## 🚨 LLM Trap Table
125
-
126
- |Pattern|What AI Does Wrong|What Is Actually Correct|
127
- |:---|:---|:---|
128
- |gsap-timeline|Position parameter as 2nd arg|Position parameter is the 3rd arg: tl.to(el, {x: 100}, "<")|
129
- |gsap-timeline|tl.add(gsap.to(...))|tl.to(...) (just chain the tween directly)|
130
- |gsap-timeline|Hardcoded delays (delay: 1)|Use position parameter (<, >, +=1) for relative timing|
131
-
132
- ---
133
-
134
- ## Pre-Flight Self-Audit
135
-
136
- Before producing any output, verify:
137
- ```
138
- ✅ Did I read the actual files before making claims about them?
139
- Did I verify all method names against official GSAP documentation?
140
- ✅ Did I add // VERIFY: on any uncertain API calls?
141
- Are all imports from packages that actually exist in package.json?
142
- Did I test my logic with edge cases (null, empty, 0, max)?
143
- ✅ Did I avoid generating code for more than one module at a time?
144
- ✅ Am I working from evidence, not assumption?
145
- ```
146
-
147
- ---
148
-
149
- ## 🔁 VBC Protocol (Verify → Build → Confirm)
150
-
151
- ```
152
- VERIFY: Read the actual codebase before writing anything
153
- BUILD: Generate the smallest meaningful unit of code
154
- CONFIRM: Verify the output is correct before presenting
155
- ```
108
+
109
+ ---
110
+
111
+ **Slash command: `/review` or `/tribunal-full`**
112
+ **Active reviewers: `logic-reviewer` · `security-auditor`**
113
+
114
+ ### Forbidden AI Tropes
115
+
116
+ 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
117
+ 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
118
+ 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
119
+
120
+ ---
121
+
122
+ ## 🚨 LLM Trap Table
123
+
124
+ |Pattern|What AI Does Wrong|What Is Actually Correct|
125
+ |:---|:---|:---|
126
+ |gsap-timeline|Position parameter as 2nd arg|Position parameter is the 3rd arg: tl.to(el, {x: 100}, "<")|
127
+ |gsap-timeline|tl.add(gsap.to(...))|tl.to(...) (just chain the tween directly)|
128
+ |gsap-timeline|Hardcoded delays (delay: 1)|Use position parameter (<, >, +=1) for relative timing|
129
+
130
+ ---
131
+
132
+ ## ✅ Pre-Flight Self-Audit
133
+
134
+ Before producing any output, verify:
135
+ ```
136
+ Did I read the actual files before making claims about them?
137
+ ✅ Did I verify all method names against official GSAP documentation?
138
+ ✅ Did I add // VERIFY: on any uncertain API calls?
139
+ Are all imports from packages that actually exist in package.json?
140
+ ✅ Did I test my logic with edge cases (null, empty, 0, max)?
141
+ Did I avoid generating code for more than one module at a time?
142
+ Am I working from evidence, not assumption?
143
+ ```
144
+
145
+ ---
146
+
147
+ ## 🔁 VBC Protocol (Verify → Build → Confirm)
148
+
149
+ ```
150
+ VERIFY: Read the actual codebase before writing anything
151
+ BUILD: Generate the smallest meaningful unit of code
152
+ CONFIRM: Verify the output is correct before presenting
153
+ ```
154
+
155
+
156
+ ## Pre-Flight Checklist
157
+ - [ ] Have I reviewed the user's specific constraints and requests?
158
+ - [ ] Have I checked the environment for relevant existing implementations?
159
+
160
+ ## VBC Protocol (Verification-Before-Completion)
161
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
@@ -282,51 +282,57 @@ wrapY(150); // 50
282
282
  ### Learn More
283
283
 
284
284
  https://gsap.com/docs/v3/HelperFunctions
285
-
286
- ---
287
-
288
- ## 🏛️ Tribunal Integration (Anti-Hallucination)
289
-
290
- **Slash command: `/review` or `/tribunal-full`**
291
- **Active reviewers: `logic-reviewer` · `security-auditor`**
292
-
293
- ### Forbidden AI Tropes
294
-
295
- 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
296
- 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
297
- 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
298
-
299
- ---
300
-
301
- ## 🚨 LLM Trap Table
302
-
303
- |Pattern|What AI Does Wrong|What Is Actually Correct|
304
- |:---|:---|:---|
305
- |gsap-utils|Using mapRange on units like "100px"|mapRange works only on pure numbers. Use getUnit/unitize|
306
- |gsap-utils|Re-creating random per frame|Pass true as 4th param: random(-10, 10, 1, true) for a reusable fn|
307
- |gsap-utils|Scoping global .box|Use gsap.utils.selector(container) inside components|
308
-
309
- ---
310
-
311
- ## Pre-Flight Self-Audit
312
-
313
- Before producing any output, verify:
314
- ```
315
- ✅ Did I read the actual files before making claims about them?
316
- Did I verify all method names against official GSAP documentation?
317
- ✅ Did I add // VERIFY: on any uncertain API calls?
318
- Are all imports from packages that actually exist in package.json?
319
- Did I test my logic with edge cases (null, empty, 0, max)?
320
- ✅ Did I avoid generating code for more than one module at a time?
321
- ✅ Am I working from evidence, not assumption?
322
- ```
323
-
324
- ---
325
-
326
- ## 🔁 VBC Protocol (Verify → Build → Confirm)
327
-
328
- ```
329
- VERIFY: Read the actual codebase before writing anything
330
- BUILD: Generate the smallest meaningful unit of code
331
- CONFIRM: Verify the output is correct before presenting
332
- ```
285
+
286
+ ---
287
+
288
+ **Slash command: `/review` or `/tribunal-full`**
289
+ **Active reviewers: `logic-reviewer` · `security-auditor`**
290
+
291
+ ### Forbidden AI Tropes
292
+
293
+ 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
294
+ 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
295
+ 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
296
+
297
+ ---
298
+
299
+ ## 🚨 LLM Trap Table
300
+
301
+ |Pattern|What AI Does Wrong|What Is Actually Correct|
302
+ |:---|:---|:---|
303
+ |gsap-utils|Using mapRange on units like "100px"|mapRange works only on pure numbers. Use getUnit/unitize|
304
+ |gsap-utils|Re-creating random per frame|Pass true as 4th param: random(-10, 10, 1, true) for a reusable fn|
305
+ |gsap-utils|Scoping global .box|Use gsap.utils.selector(container) inside components|
306
+
307
+ ---
308
+
309
+ ## ✅ Pre-Flight Self-Audit
310
+
311
+ Before producing any output, verify:
312
+ ```
313
+ Did I read the actual files before making claims about them?
314
+ ✅ Did I verify all method names against official GSAP documentation?
315
+ ✅ Did I add // VERIFY: on any uncertain API calls?
316
+ Are all imports from packages that actually exist in package.json?
317
+ ✅ Did I test my logic with edge cases (null, empty, 0, max)?
318
+ Did I avoid generating code for more than one module at a time?
319
+ Am I working from evidence, not assumption?
320
+ ```
321
+
322
+ ---
323
+
324
+ ## 🔁 VBC Protocol (Verify → Build → Confirm)
325
+
326
+ ```
327
+ VERIFY: Read the actual codebase before writing anything
328
+ BUILD: Generate the smallest meaningful unit of code
329
+ CONFIRM: Verify the output is correct before presenting
330
+ ```
331
+
332
+
333
+ ## Pre-Flight Checklist
334
+ - [ ] Have I reviewed the user's specific constraints and requests?
335
+ - [ ] Have I checked the environment for relevant existing implementations?
336
+
337
+ ## VBC Protocol (Verification-Before-Completion)
338
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
@@ -115,7 +115,7 @@ In Next.js Middleware:
115
115
 
116
116
  ---
117
117
 
118
- ## 🤖 LLM-Specific Traps
118
+
119
119
 
120
120
  AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
121
121
 
@@ -127,7 +127,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
127
127
 
128
128
  ---
129
129
 
130
- ## 🏛️ Tribunal Integration (Anti-Hallucination)
130
+
131
131
 
132
132
  **Slash command: `/review` or `/tribunal-full`**
133
133
  **Active reviewers: `logic-reviewer` · `security-auditor`**
@@ -138,7 +138,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
138
138
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
139
139
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
140
140
 
141
- ### ✅ Pre-Flight Self-Audit
141
+
142
142
 
143
143
  Review these questions before confirming output:
144
144
  ```
@@ -152,4 +152,12 @@ Review these questions before confirming output:
152
152
 
153
153
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
154
154
  - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
155
- - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
155
+ - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
156
+
157
+
158
+ ## Pre-Flight Checklist
159
+ - [ ] Have I reviewed the user's specific constraints and requests?
160
+ - [ ] Have I checked the environment for relevant existing implementations?
161
+
162
+ ## VBC Protocol (Verification-Before-Completion)
163
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
@@ -164,41 +164,41 @@ This file contains all available skills and workflows as a condensed index for t
164
164
  |`web-design-guidelines`|Review UI code for Next-Generation Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices".|
165
165
  |`webapp-testing`|Web application testing principles. E2E, Playwright, deep audit strategies.|
166
166
  |`whimsy-injector`|Micro-delight generator for frontend interfaces. Suggests and implements subtle animations, playful transitions, and interaction polish across any frontend stack.|
167
- |`workflow-optimizer`|Analyzes agent tool-calling patterns and task execution efficiency to suggest process improvements.|
168
- |`api-architect`|API contract design agent. Builds robust REST/GraphQL/tRPC endpoints with RFC 9457 error formats, idempotency, pagination, and versioning. Use when designing new API routes or reviewing API contracts.|
169
- |`resilience-reviewer`|Fault tolerance reviewer. Audits for swallowed errors, naked Promises, missing retries/timeouts, absent circuit breakers, and missing React error boundaries. Use when reviewing backend or full-stack code for reliability.|
170
- |`schema-reviewer`|Input validation reviewer. Enforces strict Zod/Pydantic validation at all trust boundaries (API, env, query params). Catches `z.any()`, missing `.parse()`, and unvalidated external data. Use when reviewing data ingestion or API input handling.|
171
- |`gsap-core`|GSAP core animation API — gsap.to(), from(), fromTo(), easing, stagger, defaults, matchMedia(). Use for JavaScript animation with GSAP.|
172
- |`gsap-scrolltrigger`|GSAP ScrollTrigger plugin — scroll-driven animations, pinning, snapping. Use when building scroll-linked animation.|
173
- |`gsap-timeline`|GSAP timeline sequencing — Timeline API, position parameters, labels, nesting. Use for multi-step animation choreography.|
174
- |`gsap-react`|GSAP in React — useGSAP hook, ref-based targeting, cleanup, context scoping. Use when animating React components with GSAP.|
175
- |`gsap-plugins`|GSAP plugins — Flip, Draggable, MorphSVG, SplitText, MotionPath, DrawSVG. Use for advanced GSAP effects.|
176
- |`gsap-performance`|GSAP performance — will-change, GPU compositing, lazy MediaQuery, reduced motion. Use when optimizing GSAP animations.|
177
- |`gsap-utils`|GSAP utility methods — toArray, clamp, mapRange, interpolate, distribute. Use for GSAP helper functions.|
178
- |`gsap-frameworks`|GSAP framework integration — Vue, Svelte, Astro, Angular, Webflow. Use when integrating GSAP outside React.|
179
- |`error-resilience`|Error resilience patterns. Retry strategies, circuit breakers, graceful degradation, timeout policies.|
180
- |`data-validation-schemas`|Data validation with Zod, Pydantic, and JSON Schema. Use when building validation layers.|
181
- |`monorepo-management`|Monorepo tooling and workspace management. Turborepo, Nx, pnpm workspaces.|
182
- |`typescript-advanced`|Advanced TypeScript patterns. Generics, conditional types, template literals, discriminated unions.|
183
- |`game-developer`|Game development orchestrator. Routes to platform-specific skills (Unity/C#, Godot/GDScript, WebGL). Use when building games or game engines.|
184
- |`documentation-writer`|Technical documentation specialist. README files, API docs, code comments, architecture docs, and AI-friendly documentation. Use when writing or reviewing documentation.|
185
- |`test-engineer`|Test generation and strategy specialist. Creates tests using the Testing Trophy (unit → integration → E2E). Use when generating tests or designing test architecture.|
186
- |`qa-automation-engineer`|QA automation specialist. End-to-end testing pipelines, Playwright/Cypress configuration, CI test integration, visual regression. Use when building automated QA systems.|
187
- |`code-archaeologist`|Legacy code exploration specialist. Navigates unfamiliar codebases, identifies patterns, maps dependencies, documents tribal knowledge. Use when exploring or understanding legacy code.|
188
- |`project-planner`|Project planning specialist. 4-phase methodology (Analyze → Plan → Solution → Implement). Use when planning features, roadmaps, or multi-step implementations.|
189
- |`product-manager`|Product strategy specialist. Feature prioritization, roadmap planning, stakeholder alignment, competitive analysis. Use when making product decisions or prioritizing features.|
190
- |`product-owner`|User story and backlog management specialist. Writing acceptance criteria, sprint planning, backlog grooming. Use when defining user stories or managing backlogs.|
191
- |`seo-specialist`|SEO optimization specialist. Technical SEO, meta tags, structured data (JSON-LD), Core Web Vitals impact on search ranking, sitemap/robots configuration. Use when optimizing search visibility.|
192
- |`throughput-optimizer`|Throughput and latency optimization specialist. Load testing, connection pooling, queue management, batch processing, caching strategies. Use when optimizing system throughput or reducing latency.|
193
- |`vitals-reviewer`|Core Web Vitals specialist. LCP, CLS, INP measurement and optimization, Lighthouse auditing, real user monitoring. Use when auditing or improving web performance metrics.|
194
- |`penetration-tester`|Penetration testing and red team specialist. MITRE ATT&CK mapping, attack surface analysis, exploitation paths, vulnerability chaining. Use when pen testing applications or assessing attack surfaces.|
195
- |`db-latency-auditor`|Database performance specialist. Slow query analysis, EXPLAIN ANALYZE, index optimization, N+1 detection, connection pool tuning. Use when debugging database performance issues.|
167
+ |`workflow-optimizer`|Analyzes agent tool-calling patterns and task execution efficiency to suggest process improvements.|
168
+ |`api-architect`|API contract design agent. Builds robust REST/GraphQL/tRPC endpoints with RFC 9457 error formats, idempotency, pagination, and versioning. Use when designing new API routes or reviewing API contracts.|
169
+ |`resilience-reviewer`|Fault tolerance reviewer. Audits for swallowed errors, naked Promises, missing retries/timeouts, absent circuit breakers, and missing React error boundaries. Use when reviewing backend or full-stack code for reliability.|
170
+ |`schema-reviewer`|Input validation reviewer. Enforces strict Zod/Pydantic validation at all trust boundaries (API, env, query params). Catches `z.any()`, missing `.parse()`, and unvalidated external data. Use when reviewing data ingestion or API input handling.|
171
+ |`gsap-core`|GSAP core animation API — gsap.to(), from(), fromTo(), easing, stagger, defaults, matchMedia(). Use for JavaScript animation with GSAP.|
172
+ |`gsap-scrolltrigger`|GSAP ScrollTrigger plugin — scroll-driven animations, pinning, snapping. Use when building scroll-linked animation.|
173
+ |`gsap-timeline`|GSAP timeline sequencing — Timeline API, position parameters, labels, nesting. Use for multi-step animation choreography.|
174
+ |`gsap-react`|GSAP in React — useGSAP hook, ref-based targeting, cleanup, context scoping. Use when animating React components with GSAP.|
175
+ |`gsap-plugins`|GSAP plugins — Flip, Draggable, MorphSVG, SplitText, MotionPath, DrawSVG. Use for advanced GSAP effects.|
176
+ |`gsap-performance`|GSAP performance — will-change, GPU compositing, lazy MediaQuery, reduced motion. Use when optimizing GSAP animations.|
177
+ |`gsap-utils`|GSAP utility methods — toArray, clamp, mapRange, interpolate, distribute. Use for GSAP helper functions.|
178
+ |`gsap-frameworks`|GSAP framework integration — Vue, Svelte, Astro, Angular, Webflow. Use when integrating GSAP outside React.|
179
+ |`error-resilience`|Error resilience patterns. Retry strategies, circuit breakers, graceful degradation, timeout policies.|
180
+ |`data-validation-schemas`|Data validation with Zod, Pydantic, and JSON Schema. Use when building validation layers.|
181
+ |`monorepo-management`|Monorepo tooling and workspace management. Turborepo, Nx, pnpm workspaces.|
182
+ |`typescript-advanced`|Advanced TypeScript patterns. Generics, conditional types, template literals, discriminated unions.|
183
+ |`game-developer`|Game development orchestrator. Routes to platform-specific skills (Unity/C#, Godot/GDScript, WebGL). Use when building games or game engines.|
184
+ |`documentation-writer`|Technical documentation specialist. README files, API docs, code comments, architecture docs, and AI-friendly documentation. Use when writing or reviewing documentation.|
185
+ |`test-engineer`|Test generation and strategy specialist. Creates tests using the Testing Trophy (unit → integration → E2E). Use when generating tests or designing test architecture.|
186
+ |`qa-automation-engineer`|QA automation specialist. End-to-end testing pipelines, Playwright/Cypress configuration, CI test integration, visual regression. Use when building automated QA systems.|
187
+ |`code-archaeologist`|Legacy code exploration specialist. Navigates unfamiliar codebases, identifies patterns, maps dependencies, documents tribal knowledge. Use when exploring or understanding legacy code.|
188
+ |`project-planner`|Project planning specialist. 4-phase methodology (Analyze → Plan → Solution → Implement). Use when planning features, roadmaps, or multi-step implementations.|
189
+ |`product-manager`|Product strategy specialist. Feature prioritization, roadmap planning, stakeholder alignment, competitive analysis. Use when making product decisions or prioritizing features.|
190
+ |`product-owner`|User story and backlog management specialist. Writing acceptance criteria, sprint planning, backlog grooming. Use when defining user stories or managing backlogs.|
191
+ |`seo-specialist`|SEO optimization specialist. Technical SEO, meta tags, structured data (JSON-LD), Core Web Vitals impact on search ranking, sitemap/robots configuration. Use when optimizing search visibility.|
192
+ |`throughput-optimizer`|Throughput and latency optimization specialist. Load testing, connection pooling, queue management, batch processing, caching strategies. Use when optimizing system throughput or reducing latency.|
193
+ |`vitals-reviewer`|Core Web Vitals specialist. LCP, CLS, INP measurement and optimization, Lighthouse auditing, real user monitoring. Use when auditing or improving web performance metrics.|
194
+ |`penetration-tester`|Penetration testing and red team specialist. MITRE ATT&CK mapping, attack surface analysis, exploitation paths, vulnerability chaining. Use when pen testing applications or assessing attack surfaces.|
195
+ |`db-latency-auditor`|Database performance specialist. Slow query analysis, EXPLAIN ANALYZE, index optimization, N+1 detection, connection pool tuning. Use when debugging database performance issues.|
196
196
  |`ai-code-reviewer`|AI/LLM integration code reviewer. Hallucinated model names, invented API parameters, prompt injection vulnerabilities, missing rate limits, streaming error handling. Use when reviewing code that calls LLM APIs.|
197
197
 
198
198
 
199
199
  ---
200
200
 
201
- ## 🤖 LLM-Specific Traps
201
+
202
202
 
203
203
  AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
204
204
 
@@ -210,7 +210,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
210
210
 
211
211
  ---
212
212
 
213
- ## 🏛️ Tribunal Integration (Anti-Hallucination)
213
+
214
214
 
215
215
  **Slash command: `/review` or `/tribunal-full`**
216
216
  **Active reviewers: `logic-reviewer` · `security-auditor`**
@@ -221,7 +221,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
221
221
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
222
222
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
223
223
 
224
- ### ✅ Pre-Flight Self-Audit
224
+
225
225
 
226
226
  Review these questions before confirming output:
227
227
  ```
@@ -235,4 +235,12 @@ Review these questions before confirming output:
235
235
 
236
236
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
237
237
  - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
238
- - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
238
+ - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
239
+
240
+
241
+ ## Pre-Flight Checklist
242
+ - [ ] Have I reviewed the user's specific constraints and requests?
243
+ - [ ] Have I checked the environment for relevant existing implementations?
244
+
245
+ ## VBC Protocol (Verification-Before-Completion)
246
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
@@ -0,0 +1,36 @@
1
+ ---
2
+ name: Knowledge Graph Analyzer
3
+ description: Understands the architecture and dependencies of the codebase without token bloat.
4
+ version: 1.0.0
5
+ ---
6
+
7
+ # /graph — Knowledge Graph Skill
8
+
9
+ Use this skill when the user types `/graph` or when you need to deeply understand the architecture of an unfamiliar codebase without suffering from context-window bloat.
10
+
11
+ ## Pre-Flight Checklist
12
+ Before answering architectural questions or making broad code changes, you must understand the environment.
13
+ - [ ] Have I run the Macro Mapper to get the high-level architecture?
14
+ - [ ] Have I used the Micro Zoomer on the specific files related to the user's request to see their exact signatures?
15
+
16
+ ## Execution Protocol
17
+
18
+ 1. **Step 1: The Macro Map (World View)**
19
+ Execute the graph builder to map module boundaries. This runs incrementally and respects `.gitignore`.
20
+ ```bash
21
+ node .agent/scripts/graph_builder.js
22
+ ```
23
+ Read the output file at `.agent/history/architecture-graph.yaml`. **Do NOT try to read every file in the project.** Use this map to identify which files export the functions or components you need.
24
+
25
+ 2. **Step 2: The Micro Zoom (Street View)**
26
+ Once you know which file to investigate, use the zoomer to get its structural skeleton. This strips out the internal logic and returns only imports, exports, class signatures, and function parameters.
27
+ ```bash
28
+ node .agent/scripts/graph_zoom.js --focus <path_to_file>
29
+ ```
30
+ *Example: `node .agent/scripts/graph_zoom.js --focus src/components/Button.tsx`*
31
+
32
+ 3. **Step 3: Analyze and Advise**
33
+ Present the user with your findings. Highlight hidden dependencies, circular imports, or structural insights based on what you discovered in the graphs.
34
+
35
+ ## VBC Protocol (Verification-Before-Completion)
36
+ You are explicitly forbidden from guessing or "hallucinating" what functions, props, or variables exist inside a file. You MUST use the `graph_zoom.js` script to verify a component's exact signature before you attempt to call it, mock it, or rewrite it.
@@ -213,7 +213,7 @@ Do not mark status as VERIFIED until concrete terminal evidence is provided.
213
213
 
214
214
  ---
215
215
 
216
- ## 🤖 LLM-Specific Traps
216
+
217
217
 
218
218
  AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
219
219
 
@@ -225,7 +225,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
225
225
 
226
226
  ---
227
227
 
228
- ## 🏛️ Tribunal Integration (Anti-Hallucination)
228
+
229
229
 
230
230
  **Slash command: `/review` or `/tribunal-full`**
231
231
  **Active reviewers: `logic-reviewer` · `security-auditor`**
@@ -236,7 +236,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
236
236
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
237
237
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
238
238
 
239
- ### ✅ Pre-Flight Self-Audit
239
+
240
240
 
241
241
  Review these questions before confirming output:
242
242
  ```
@@ -250,4 +250,12 @@ Review these questions before confirming output:
250
250
 
251
251
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
252
252
  - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
253
- - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
253
+ - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
254
+
255
+
256
+ ## Pre-Flight Checklist
257
+ - [ ] Have I reviewed the user's specific constraints and requests?
258
+ - [ ] Have I checked the environment for relevant existing implementations?
259
+
260
+ ## VBC Protocol (Verification-Before-Completion)
261
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
@@ -346,7 +346,7 @@ eventSource.onmessage = (event) => {
346
346
 
347
347
  ---
348
348
 
349
- ## 🤖 LLM-Specific Traps
349
+
350
350
 
351
351
  AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
352
352
 
@@ -358,7 +358,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
358
358
 
359
359
  ---
360
360
 
361
- ## 🏛️ Tribunal Integration (Anti-Hallucination)
361
+
362
362
 
363
363
  **Slash command: `/review` or `/tribunal-full`**
364
364
  **Active reviewers: `logic-reviewer` · `security-auditor`**
@@ -369,7 +369,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
369
369
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
370
370
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
371
371
 
372
- ### ✅ Pre-Flight Self-Audit
372
+
373
373
 
374
374
  Review these questions before confirming output:
375
375
  ```
@@ -383,4 +383,12 @@ Review these questions before confirming output:
383
383
 
384
384
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
385
385
  - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
386
- - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
386
+ - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
387
+
388
+
389
+ ## Pre-Flight Checklist
390
+ - [ ] Have I reviewed the user's specific constraints and requests?
391
+ - [ ] Have I checked the environment for relevant existing implementations?
392
+
393
+ ## VBC Protocol (Verification-Before-Completion)
394
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
@@ -130,7 +130,7 @@ const friends = useLiveQuery(() => db.friends.where('age').above(21).toArray());
130
130
 
131
131
  ---
132
132
 
133
- ## 🤖 LLM-Specific Traps
133
+
134
134
 
135
135
  AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
136
136
 
@@ -142,7 +142,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
142
142
 
143
143
  ---
144
144
 
145
- ## 🏛️ Tribunal Integration (Anti-Hallucination)
145
+
146
146
 
147
147
  **Slash command: `/review` or `/tribunal-full`**
148
148
  **Active reviewers: `logic-reviewer` · `security-auditor`**
@@ -153,7 +153,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
153
153
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
154
154
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
155
155
 
156
- ### ✅ Pre-Flight Self-Audit
156
+
157
157
 
158
158
  Review these questions before confirming output:
159
159
  ```
@@ -167,4 +167,12 @@ Review these questions before confirming output:
167
167
 
168
168
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
169
169
  - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
170
- - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
170
+ - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
171
+
172
+
173
+ ## Pre-Flight Checklist
174
+ - [ ] Have I reviewed the user's specific constraints and requests?
175
+ - [ ] Have I checked the environment for relevant existing implementations?
176
+
177
+ ## VBC Protocol (Verification-Before-Completion)
178
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
@@ -94,7 +94,7 @@ An MCP Server gives an external AI execution capability over your shell or datab
94
94
 
95
95
  ---
96
96
 
97
- ## 🤖 LLM-Specific Traps
97
+
98
98
 
99
99
  AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
100
100
 
@@ -106,7 +106,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
106
106
 
107
107
  ---
108
108
 
109
- ## 🏛️ Tribunal Integration (Anti-Hallucination)
109
+
110
110
 
111
111
  **Slash command: `/review` or `/tribunal-full`**
112
112
  **Active reviewers: `logic-reviewer` · `security-auditor`**
@@ -117,7 +117,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
117
117
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
118
118
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
119
119
 
120
- ### ✅ Pre-Flight Self-Audit
120
+
121
121
 
122
122
  Review these questions before confirming output:
123
123
  ```
@@ -131,4 +131,12 @@ Review these questions before confirming output:
131
131
 
132
132
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
133
133
  - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
134
- - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
134
+ - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
135
+
136
+
137
+ ## Pre-Flight Checklist
138
+ - [ ] Have I reviewed the user's specific constraints and requests?
139
+ - [ ] Have I checked the environment for relevant existing implementations?
140
+
141
+ ## VBC Protocol (Verification-Before-Completion)
142
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.