tribunal-kit 4.4.3 → 4.4.5

package/README.md

@@ -1,242 +1,113 @@
-<div align="center">
-  <picture>
-    <img src="./docs/tribunalkit_no_bg.png" alt="TribunalKit — Code Without Hallucinations" width="480">
-  </picture>
-
-  <br><br>
-
-  [![NPM](https://img.shields.io/npm/v/tribunal-kit?style=for-the-badge&logo=npm&logoColor=white)](https://www.npmjs.com/package/tribunal-kit)
-  [![License](https://img.shields.io/badge/License-MIT-8b5cf6?style=for-the-badge)](LICENSE)
-  [![Version](https://img.shields.io/badge/Version-4.3.1_Supreme_Court-black?style=for-the-badge)](CHANGELOG.md)
-</div>
-
-
-<br><br>
-
-> 🚨 **AI GENERATES CODE. TRIBUNAL ENSURES IT WORKS.**  
-> A plug-in `.agent/` intelligence payload that upgrades your IDE with **41 specialist agents**, **31 slash commands**, **91 hardened skills**, and a **16-reviewer Tribunal pipeline** — zero hallucinations, zero configuration.
-
----
-
-<br>
-
-## ▓▒░ INITIATION SEQUENCE
-
-Drop Tribunal into any project. Global or local.
-
-```bash
-# Pull the intelligence payload into your project
-npx tribunal-kit init
-```
-*(Installs the `.agent/` architecture directly. No bloat. Pure capability.)*
-
-<details>
-<summary><b>📺 Quick Demo — What happens when you run it</b></summary>
-<br>
-
-```
-$ npx tribunal-kit init
-
-  ████████╗██████╗ ██╗██████╗ ██╗   ██╗███╗   ██╗ █████╗ ██╗
-  ╚══██╔══╝██╔══██╗██║██╔══██╗██║   ██║████╗  ██║██╔══██╗██║
-     ██║   ██████╔╝██║██████╔╝██║   ██║██╔██╗ ██║███████║██║
-     ██║   ██╔══██╗██║██╔══██╗██║   ██║██║╚██╗██║██╔══██║██║
-     ██║   ██║  ██║██║██████╔╝╚██████╔╝██║ ╚████║██║  ██║███████╗
-     ╚═╝   ╚═╝  ╚═╝╚═╝╚═════╝  ╚═════╝ ╚═╝  ╚═══╝╚═╝  ╚═╝╚══════╝
-
-  ╔══════════════════════════════════════════════════════════════╗
-  ║              Anti-Hallucination Agent System                ║
-  ╚══════════════════════════════════════════════════════════════╝
-
-  ✔ Installed → .agent/
-
-  ╔══════════════════════════════════════════════════════════════╗
-  ║  🤖  Agents         41 installed                            ║
-  ║  ⚡  Workflows       32 installed                            ║
-  ║  🧠  Skills          91 installed                            ║
-  ║  🔧  Scripts         27 installed                            ║
-  ╚══════════════════════════════════════════════════════════════╝
-
-  ✔ 700+ files installed. 16 parallel Tribunal reviewers armed.
-
-$ npx tribunal-kit status
-
-  ✔ Installed at .agent/
-  🤖  agents         40 files
-  ⚡  workflows      31 files
-  🧠  skills         90 files
-  🔧  scripts        27 files
-```
-
-> 💡 **Lighter install?** Use `npx tribunal-kit init --minimal` for just 13 core agents + 15 essential skills.
-
-</details>
-
-> ✅ **IDE Auto-Detection:** `init` automatically generates bridge files for every major AI coding IDE:
->
-> | IDE | Bridge File Generated |
-> | :--- | :--- |
-> | **Cursor** | `.cursorrules` |
-> | **Windsurf** | `.windsurfrules` |
-> | **Gemini / Antigravity** | `.gemini/settings.json` + `.gemini/GEMINI.md` |
-> | **GitHub Copilot** | `.github/copilot-instructions.md` |
-> | **Claude** | `.claude/CLAUDE.md` |
->
-> Bridge files are never overwritten on re-init — your customizations are safe.
-
-**Prerequisites:** Node.js ≥ 18
-
-> 💡 **Shorthand alias:** You can use `tk` instead of `tribunal-kit` for all commands (e.g., `tk init`, `tk status`).
-
-<br>
-
-## ▓▒░ THE PIPELINE // HOW IT WORKS
-
-**Code generation is solved. Code correctness is the frontier.** We enforce a strict **Evidence-Based Closeout**.
-
-```diff
-- AI Generates -> Commits to Disk -> You Find Bugs Later
-+ AI Generates -> Parallel Tribunal Review -> Human Gate -> Commits to Disk
-```
-
-### 🎯 Auto-Routing Intelligence
-No manual tagging required. The system self-organizes.
-
-<p>
-<kbd>User</kbd> "Add JWT authentication" <br>
-<kbd>System</kbd> <code>🤖 Applying @security-auditor + @backend-specialist...</code> <br><br>
-
-<kbd>User</kbd> "Fix the dark mode button" <br>
-<kbd>System</kbd> <code>🤖 Applying @ui-ux-pro-max + @frontend-specialist...</code> <br><br>
-
-<kbd>User</kbd> "/swarm build a API" <br>
-<kbd>System</kbd> <code>🤖 supervisor-agent → Dispatching 3 Workers...</code>
-</p>
-
-<br>
-
-## ▓▒░ THE SUPREME COURT (v4.0)
-
-*(New in v4)* The Tribunal Kit now features persistent memory so the AI **never makes the same mistake twice** and automatically learns your team's coding style.
-
-**1. The Case Law Engine (Never repeat mistakes)**
-If an agent makes a mistake, you can record it as a legal precedent. Before writing any future code, the `precedence-reviewer` checks this database locally to forcefully block the AI from repeating that mistake.
-- `npx tribunal-kit case add` *(Record an AI hallucination)*
-- `npx tribunal-kit case search "query"` *(Search your precedents)*
-
-**2. Skill Evolution Forge (Auto-learns your style)**
-You no longer need to write manual rules. The system reads your Git commits, strips out the noise to save tokens, and automatically extracts your project's unique architectural patterns to teach the AI.
-- `npx tribunal-kit learn` *(Run a learning digest on staged files)*
-- `npx tribunal-kit hook` *(Automate learning every time you `git push`)*
-
-<br>
-
-## ▓▒░ CAPABILITY MATRIX
-
-| System Asset | Count | Operational Scope |
-| :--- | :---: | :--- |
-| 🤖 **Agents** | `40` | Specialist personas — 16 reviewers + 24 domain specialists |
-| 🧠 **Skills** | `90` | Domain modules (Edge Computing, Red Team Tactics, GSAP, Framer Motion, TypeScript Advanced) |
-| ⚡ **Workflows** | `31` | Slash command procedures including `/swarm`, `/tribunal-full`, `/ui-ux-pro-max` |
-| 🛠️ **Scripts** | `25` | CI/CD, linting, payload dispatching, security scanning, case law, skill evolution |
-
-
-<br>
-
-## ▓▒░ COMMAND TERMINAL
-
-Expand the accordions to view the operational commands at your disposal.
-
-<details open>
-<summary><b>🔥 CORE EXECUTION</b></summary>
-<br>
-
-| Command | Action |
-| :--- | :--- |
-| <code>/generate</code> | Trigger full Tribunal: Generate → Audit → Approve. |
-| <code>/create</code> | Scaffold major features or apps, routed by App Builder. |
-| <code>/enhance</code> | Safely extend existing structures without regression. |
-| <code>/deploy</code> | Force the 3-gate production release sequence. |
-
-</details>
-
-<details>
-<summary><b>⚖️ THE TRIBUNAL GAUNTLET (REVIEWERS)</b></summary>
-<br>
-Unleash parallel reviewers on existing code.
-
-| Command | Action |
-| :--- | :--- |
-| <code>/review</code> | Audit code for silent degradation and logic holes. |
-| <code>/tribunal-full</code> | Unleash **ALL 16** reviewers simultaneously. Maximum scrutiny. |
-| <code>/tribunal-backend</code> | Summons <code>[ Logic + Security + Dependency + Types ]</code> |
-| <code>/tribunal-frontend</code> | Summons <code>[ Logic + Security + Frontend + Types ]</code> |
-| <code>/tribunal-database</code> | Summons <code>[ Logic + Security + SQL ]</code> |
-| <code>/tribunal-mobile</code> | Summons <code>[ Logic + Security + Mobile ]</code> |
-
-</details>
-
-<details>
-<summary><b>🧠 SWARM & ORCHESTRATION</b></summary>
-<br>
-
-| Command | Action |
-| :--- | :--- |
-| <code>/swarm</code> | Supervisor breaks goal → sends to isolated workers → synthesizes. |
-| <code>/orchestrate</code> | Manual multi-agent sync for complex integrations. |
-| <code>/plan</code> | Architectural mapping before a single line is written. |
-| <code>/ui-ux-pro-max</code>| Triggers peak aesthetic frontend design. |
-
-</details>
-
-<details>
-<summary><b>⚖️ SUPREME COURT / MEMORY</b></summary>
-<br>
-
-| Command | Action |
-| :--- | :--- |
-| <code>npx tribunal-kit case add</code> | Record an AI hallucination to ban it forever. |
-| <code>npx tribunal-kit case search</code> | Search your local database of banned code. |
-| <code>npx tribunal-kit learn</code> | Auto-extract project idioms from your git diffs. |
-| <code>npx tribunal-kit hook</code> | Install a git hook to auto-learn the moment you push. |
-
-</details>
-
-<details>
-<summary><b>🔧 TROUBLESHOOTING & OPS</b></summary>
-<br>
-
-| Command | Action |
-| :--- | :--- |
-| <code>/debug</code> | Systematic root-cause investigation. |
-| <code>/preview</code> | Local development server control. |
-| <code>/status</code> | View Tribunal session status. |
-
-</details>
-
-<br>
-
-## ▓▒░ POST-INSTALL TELEMETRY
-
-After initialization, utility scripts unlock local ops:
-
-```bash
-# 01. Pre-commit audit
-node .agent/scripts/checklist.js .
-
-# 02. Pre-deploy full suite verification
-node .agent/scripts/verify_all.js
-
-# 03. Start local development environment
-node .agent/scripts/auto_preview.js start
-```
-
-<br>
-
-<div align="center">
-  <br>
-  <img src="https://img.shields.io/badge/Status-Active_&_Secured-00e5ff?style=for-the-badge" alt="Status" />
-  <br><br>
-  <i>"Never guess database column names. Error handling on every async function. Evidence-based closeouts. Welcome to the Tribunal."</i><br>
-  <sub><b>MIT Licensed</b> • Hand-forged for high-performance agentic engineering.</sub>
-</div> 
+<div align="center">
+  <picture>
+    <img src="./docs/tribunalkit_no_bg.png" alt="TribunalKit — Code Without Hallucinations" width="480">
+  </picture>
+
+  <br>
+
+  <h1>TRIBUNAL KIT</h1>
+  <p><b>Anti-Hallucination Agent Architecture • Long-Running Autonomy • Pipeline Scrutiny</b></p>
+
+  [![NPM](https://img.shields.io/npm/v/tribunal-kit?style=for-the-badge&logo=npm&logoColor=white)](https://www.npmjs.com/package/tribunal-kit)
+  [![License](https://img.shields.io/badge/License-MIT-8b5cf6?style=for-the-badge)](LICENSE)
+  [![Version](https://img.shields.io/badge/Version-4.4.4_Marathon-black?style=for-the-badge)](CHANGELOG.md)
+</div>
+
+---
+
+> [!IMPORTANT]
+> **AI GENERATES CODE. TRIBUNAL ENSURES IT WORKS.**  
+> A zero-bloat `.agent/` intelligence payload that upgrades your IDE with **41 specialist agents**, **31 workflows**, and a **16-reviewer Tribunal pipeline**. Zero hallucinations. Absolute execution certainty.
+
+## ▓▒░ QUICK START
+
+Drop Tribunal into any existing project to instantly weaponize your IDE.
+
+```bash
+# Pull the intelligence payload into your project directory
+npx tribunal-kit init
+```
+
+> [!NOTE]
+> `init` automatically generates bridge rules for **Cursor**, **Windsurf**, **Gemini**, **Copilot**, and **Claude**. No configuration required.
+
+<br>
+
+## ▓▒░ THE MARATHON HARNESS (v4.4.4)
+
+The v4.4 update introduces the **Marathon Harness**—an engine designed to keep autonomous agents on track during long-running, multi-session projects without looping or losing context.
+
+### ⛓️ Directed Acyclic Graph (DAG) Support
+Cascade failures are obsolete. Features can now be declared with dependencies (`--deps=1,2`). If a database schema task fails, the API route task is automatically flagged as **Deadlocked** and bypassed until the root issue is resolved.
+
+### 🧠 Failure Context & Attempt Tracking
+Agents no longer blindly retry failed approaches. When a feature fails, the reason and attempt count are permanently logged into the state matrix. The next agent to attempt the feature receives the exact failure history to course-correct immediately.
+
+### 🔮 Memory Distillation
+Context windows dilute over time. The new `distill` command allows agents to forge crucial architectural decisions into a permanent `distilled_context.md` memory matrix, bridging the amnesia gap between long work sessions.
+
+<br>
+
+## ▓▒░ THE PIPELINE // EVIDENCE-BASED CLOSEOUT
+
+Code generation is solved. **Code correctness is the frontier.** 
+
+```mermaid
+graph TD
+    A[User Request] -->|Intent Parsed| B(Context Broker)
+    B --> C{Inner-Loop Validator}
+    
+    C -->|Syntax & Secrets Check| D[Parallel Tribunal Review]
+    C -.->|Failed| E[Maker Auto-Correction]
+    E -.-> C
+    
+    D -->|16 Domain Reviewers| F[Human Gate]
+    F -->|Approved| G((Committed to Disk))
+    
+    classDef default fill:#1a1a1a,stroke:#333,stroke-width:2px,color:#fff;
+    classDef critical fill:#ff1637,stroke:#fff,stroke-width:2px,color:#fff;
+    classDef success fill:#00e5ff,stroke:#fff,stroke-width:2px,color:#1a1a1a;
+    
+    class D critical;
+    class G success;
+```
+
+<br>
+
+## ▓▒░ THE SUPREME COURT (CASE LAW ENGINE)
+
+The Tribunal Kit features persistent memory. The AI **never makes the same mistake twice** and auto-learns your engineering culture.
+
+> [!WARNING]
+> **1. The Case Law Engine**
+> Record mistakes as legal precedent. The `precedence-reviewer` checks this database locally to forcefully block the AI from repeating banned patterns.
+> - `npx tribunal-kit case add` *(Record an AI hallucination)*
+
+> [!TIP]
+> **2. Skill Evolution Forge**
+> Stop writing manual rules. The system reads your Git diffs, strips token bloat, and auto-extracts your project's architectural idioms.
+> - `npx tribunal-kit learn` *(Digest staged files)*
+
+<br>
+
+## ▓▒░ COMMAND ARSENAL
+
+| Slash Command | Operational Scope |
+| :--- | :--- |
+| `/generate` | Full Tribunal sequence: Generate → Audit → Human Gate. |
+| `/create` | Scaffold major applications via App Builder routing. |
+| `/enhance` | Safely extend existing codebases with zero regression. |
+| `/swarm` | Fan-out orchestrator. Dispatch isolated workers, synthesize output. |
+| `/tribunal-full` | Unleash **ALL 16** domain reviewers simultaneously for maximum scrutiny. |
+| `/debug` | Systematic 4-phase root-cause investigation. No guessing. |
+| `/ui-ux-pro-max` | Advanced visual aesthetic engine. No generic AI slop. |
+
+<br>
+
+<div align="center">
+  <br>
+  <img src="https://img.shields.io/badge/Status-Active_&_Secured-00e5ff?style=for-the-badge" alt="Status" />
+  <br><br>
+  <i>"Never guess database column names. Error handling on every async function. Evidence-based closeouts. Welcome to the Tribunal."</i><br>
+  <sub><b>MIT Licensed</b> • Engineered for maximum autonomy and precision.</sub>
+</div> 

package/bin/tribunal-kit.js

@@ -1117,5 +1117,5 @@ runWithUpdateCheck(command, flags);
 
 // -- Exports (for testing) -- do not remove
 if (require.main !== module) {
-  module.exports = { parseArgs, compareSemver, copyDir, countDir, isSelfInstall, CORE_AGENTS, CORE_SKILLS, generateIDEBridges };
-}
+  module.exports = { parseArgs, compareSemver, copyDir, countDir, isSelfInstall, CORE_AGENTS, CORE_SKILLS, generateIDEBridges, cmdMarathon };
+}

package/bin/wrapper.js

@@ -0,0 +1,98 @@
+#!/usr/bin/env node
+/**
+ * Tribunal-Kit Core Wrapper
+ * 
+ * This script routes commands to the ultra-fast Rust binary if available and supported.
+ * For legacy commands (or if the binary isn't available/compiled yet), it gracefully
+ * falls back to the original JavaScript implementation.
+ */
+
+const fs = require('fs');
+const path = require('path');
+const { spawnSync } = require('child_process');
+const os = require('os');
+
+// Commands that have been fully ported to Rust so far
+const RUST_COMMANDS = new Set(['init', 'validate', 'status']);
+
+// Determine the path to the compiled Rust binary
+// In a full production release, this checks optionalDependencies in node_modules
+// For development, it checks the local target/release folder
+function getBinaryPath() {
+    const isWindows = os.platform() === 'win32';
+    const ext = isWindows ? '.exe' : '';
+    
+    // First, check bin/ directory (postinstall downloaded binary)
+    const binPath = path.resolve(__dirname, `tribunal-core${ext}`);
+    if (fs.existsSync(binPath)) {
+        return binPath;
+    }
+
+    // Second, try to find the binary compiled from crates/core/Cargo.toml
+    const devPath = path.resolve(__dirname, '..', 'target', 'release', `tribunal-core${ext}`);
+    if (fs.existsSync(devPath)) {
+        return devPath;
+    }
+
+    // Third, try target/debug (if they ran `cargo build` instead of `--release`)
+    const debugPath = path.resolve(__dirname, '..', 'target', 'debug', `tribunal-core${ext}`);
+    if (fs.existsSync(debugPath)) {
+        return debugPath;
+    }
+
+    // Production resolution (from optionalDependencies) would go here
+    return null;
+}
+
+function runRustBinary(binPath, args) {
+    const result = spawnSync(binPath, args, {
+        stdio: 'inherit',
+        env: process.env
+    });
+
+    if (result.error) {
+        console.error(`\x1b[91m✖ Failed to execute Rust engine:\x1b[0m ${result.error.message}`);
+        process.exit(1);
+    }
+
+    process.exit(result.status || 0);
+}
+
+function runLegacyFallback() {
+    // Graceful fallback to the original JS implementation
+    // We do this by modifying process.argv so it appears normal to the legacy script
+    require('./tribunal-kit.js');
+}
+
+function main() {
+    // Skip 'node' and 'wrapper.js'
+    const args = process.argv.slice(2);
+    
+    // Extract the command (the first non-flag argument)
+    const command = args.find(a => !a.startsWith('-'));
+
+    if (command && RUST_COMMANDS.has(command)) {
+        const binPath = getBinaryPath();
+        
+        if (binPath) {
+            // For the init command, Rust needs to know where the .agent template folder is.
+            if (command === 'init') {
+                const sourceDir = path.resolve(__dirname, '..', '.agent');
+                args.push('--source-dir', sourceDir);
+            }
+
+            // Route to Rust engine
+            // console.log('\x1b[90m⚡ Executing via Rust Core Engine\x1b[0m');
+            runRustBinary(binPath, args);
+            return;
+        } else {
+            // Warn if Rust command was requested but binary is missing
+            console.warn('\x1b[93m⚠ Rust binary not found in target/. Falling back to JS engine.\x1b[0m');
+        }
+    }
+
+    // Fall back to JS logic for un-ported commands (e.g. `learn`, `case`, `marathon`)
+    runLegacyFallback();
+}
+
+main();

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "tribunal-kit",
-    "version": "4.4.3",
+    "version": "4.4.5",
     "description": "Anti-Hallucination AI Agent Kit — 40 specialist agents, 32 slash commands, 16 parallel Tribunal reviewers, Performance Swarm engine, Supreme Court case law pipeline, and long-running agent harness.",
     "keywords": [
         "ai",
@@ -42,8 +42,8 @@
     },
     "license": "MIT",
     "bin": {
-        "tribunal-kit": "bin/tribunal-kit.js",
-        "tk": "bin/tribunal-kit.js"
+        "tribunal-kit": "bin/wrapper.js",
+        "tk": "bin/wrapper.js"
     },
     "files": [
         "bin/",
@@ -65,6 +65,7 @@
         "changelog:preview": "node scripts/changelog.js --preview",
         "sync": "node scripts/sync-version.js",
         "validate-payload": "node scripts/validate-payload.js",
+        "postinstall": "node scripts/postinstall.js",
         "build": "echo 'No build step required for this project'"
     },
     "devDependencies": {

package/scripts/postinstall.js

@@ -0,0 +1,127 @@
+#!/usr/bin/env node
+/**
+ * postinstall.js — Binary Download Script
+ * 
+ * After `npm install`, this script downloads the pre-compiled Rust binary
+ * for the user's platform from the latest GitHub Release.
+ * 
+ * If the download fails (offline, unsupported platform, etc.), it's a soft failure.
+ * The wrapper.js will detect the missing binary and fall back to the JS engine.
+ */
+
+const fs = require('fs');
+const path = require('path');
+const https = require('https');
+const os = require('os');
+const crypto = require('crypto');
+
+const PKG = require(path.resolve(__dirname, '..', 'package.json'));
+const VERSION = PKG.version;
+
+const BINARY_DIR = path.resolve(__dirname, '..', 'bin');
+const REPO = 'Harmitx7/tribunal-kit';
+
+function getPlatformBinary() {
+    const platform = os.platform();
+    const arch = os.arch();
+
+    const map = {
+        'win32-x64':    'tribunal-core-win-x64.exe',
+        'win32-arm64':  'tribunal-core-win-arm64.exe',
+        'darwin-x64':   'tribunal-core-darwin-x64',
+        'darwin-arm64': 'tribunal-core-darwin-arm64',
+        'linux-x64':    'tribunal-core-linux-x64',
+        'linux-arm64':  'tribunal-core-linux-arm64',
+    };
+
+    const key = `${platform}-${arch}`;
+    return map[key] || null;
+}
+
+function getLocalBinaryPath() {
+    const isWindows = os.platform() === 'win32';
+    return path.join(BINARY_DIR, `tribunal-core${isWindows ? '.exe' : ''}`);
+}
+
+function download(url) {
+    return new Promise((resolve, reject) => {
+        const request = https.get(url, { headers: { 'User-Agent': `tribunal-kit/${VERSION}` } }, (res) => {
+            // Handle redirects (GitHub sends 302 to the actual download URL)
+            if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
+                download(res.headers.location).then(resolve).catch(reject);
+                return;
+            }
+
+            if (res.statusCode !== 200) {
+                reject(new Error(`HTTP ${res.statusCode}`));
+                return;
+            }
+
+            const chunks = [];
+            res.on('data', (chunk) => chunks.push(chunk));
+            res.on('end', () => resolve(Buffer.concat(chunks)));
+            res.on('error', reject);
+        });
+
+        request.on('error', reject);
+        request.setTimeout(30000, () => { request.destroy(); reject(new Error('Timeout')); });
+    });
+}
+
+async function main() {
+    const binaryName = getPlatformBinary();
+
+    if (!binaryName) {
+        console.log(`[tribunal-kit] No pre-built binary for ${os.platform()}-${os.arch()}. Using JS fallback.`);
+        return;
+    }
+
+    const localPath = getLocalBinaryPath();
+
+    // Skip if binary already exists (e.g. dev environment with cargo build)
+    if (fs.existsSync(localPath)) {
+        return;
+    }
+
+    const url = `https://github.com/${REPO}/releases/download/v${VERSION}/${binaryName}`;
+    const checksumsUrl = `https://github.com/${REPO}/releases/download/v${VERSION}/checksums.txt`;
+    
+    console.log(`[tribunal-kit] Downloading native binary for ${os.platform()}-${os.arch()}...`);
+
+    try {
+        // 1. Download checksums file
+        const checksumsData = await download(checksumsUrl);
+        const checksumsText = checksumsData.toString('utf-8');
+        
+        // 2. Extract expected hash
+        const hashMatch = checksumsText.split('\n').find(line => line.includes(binaryName));
+        if (!hashMatch) {
+            throw new Error(`Checksum for ${binaryName} not found in checksums.txt`);
+        }
+        const expectedHash = hashMatch.split(' ')[0].trim();
+
+        // 3. Download binary
+        const data = await download(url);
+
+        // 4. Verify checksum
+        const actualHash = crypto.createHash('sha256').update(data).digest('hex');
+        if (actualHash !== expectedHash) {
+            throw new Error(`Checksum mismatch! Expected ${expectedHash}, got ${actualHash}. Potential tamper detected.`);
+        }
+
+        // 5. Write to disk
+        fs.writeFileSync(localPath, data);
+
+        // Make executable on Unix
+        if (os.platform() !== 'win32') {
+            fs.chmodSync(localPath, 0o755);
+        }
+
+        console.log(`[tribunal-kit] Native binary installed and verified successfully.`);
+    } catch (e) {
+        // Soft failure — wrapper.js will use the JS engine
+        console.log(`[tribunal-kit] Binary download skipped (${e.message}). Using JS fallback.`);
+    }
+}
+
+main();