tribunal-kit 4.5.0 → 4.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (217) hide show
  1. package/.agent/.shared/ui-ux-pro-max/README.md +4 -4
  2. package/.agent/ARCHITECTURE.md +279 -277
  3. package/.agent/GEMINI.md +127 -121
  4. package/.agent/agents/accessibility-reviewer.md +187 -187
  5. package/.agent/agents/ai-code-reviewer.md +199 -199
  6. package/.agent/agents/api-architect.md +71 -66
  7. package/.agent/agents/backend-specialist.md +219 -215
  8. package/.agent/agents/cloud-engineer.md +98 -0
  9. package/.agent/agents/code-archaeologist.md +168 -161
  10. package/.agent/agents/database-architect.md +184 -184
  11. package/.agent/agents/db-latency-auditor.md +213 -216
  12. package/.agent/agents/debugger.md +198 -191
  13. package/.agent/agents/dependency-reviewer.md +106 -103
  14. package/.agent/agents/devops-engineer.md +218 -218
  15. package/.agent/agents/documentation-writer.md +209 -201
  16. package/.agent/agents/explorer-agent.md +167 -160
  17. package/.agent/agents/frontend-reviewer.md +162 -160
  18. package/.agent/agents/frontend-specialist.md +257 -248
  19. package/.agent/agents/game-developer.md +48 -48
  20. package/.agent/agents/logic-reviewer.md +118 -116
  21. package/.agent/agents/mobile-developer.md +197 -200
  22. package/.agent/agents/mobile-reviewer.md +159 -162
  23. package/.agent/agents/orchestrator.md +187 -181
  24. package/.agent/agents/penetration-tester.md +160 -157
  25. package/.agent/agents/performance-optimizer.md +183 -183
  26. package/.agent/agents/performance-reviewer.md +178 -178
  27. package/.agent/agents/precedence-reviewer.md +251 -250
  28. package/.agent/agents/product-manager.md +149 -142
  29. package/.agent/agents/product-owner.md +81 -80
  30. package/.agent/agents/project-planner.md +152 -142
  31. package/.agent/agents/qa-automation-engineer.md +216 -225
  32. package/.agent/agents/resilience-reviewer.md +88 -88
  33. package/.agent/agents/schema-reviewer.md +67 -67
  34. package/.agent/agents/security-auditor.md +180 -174
  35. package/.agent/agents/seo-specialist.md +188 -193
  36. package/.agent/agents/sql-reviewer.md +159 -161
  37. package/.agent/agents/supervisor-agent.md +173 -184
  38. package/.agent/agents/swarm-worker-contracts.md +170 -166
  39. package/.agent/agents/swarm-worker-registry.md +92 -92
  40. package/.agent/agents/system-architect.md +85 -0
  41. package/.agent/agents/test-coverage-reviewer.md +158 -160
  42. package/.agent/agents/test-engineer.md +118 -118
  43. package/.agent/agents/throughput-optimizer.md +291 -299
  44. package/.agent/agents/type-safety-reviewer.md +182 -175
  45. package/.agent/agents/ui-ux-auditor.md +300 -292
  46. package/.agent/agents/vitals-reviewer.md +223 -223
  47. package/.agent/mcp_config.json +37 -40
  48. package/.agent/patterns/generator.md +11 -9
  49. package/.agent/patterns/inversion.md +14 -12
  50. package/.agent/patterns/pipeline.md +11 -9
  51. package/.agent/patterns/reviewer.md +15 -13
  52. package/.agent/patterns/tool-wrapper.md +11 -9
  53. package/.agent/routing_index.json +654 -0
  54. package/.agent/rules/GEMINI.md +358 -352
  55. package/.agent/scripts/compile_router.py +112 -0
  56. package/.agent/scripts/migrate_skills_frontmatter.py +64 -0
  57. package/.agent/scripts/strengthen_skills.js +1 -1
  58. package/.agent/skills/advanced-rag-pipelines/SKILL.md +56 -0
  59. package/.agent/skills/agent-organizer/SKILL.md +156 -150
  60. package/.agent/skills/agentic-patterns/SKILL.md +313 -315
  61. package/.agent/skills/ai-prompt-injection-defense/SKILL.md +190 -184
  62. package/.agent/skills/api-patterns/SKILL.md +253 -247
  63. package/.agent/skills/api-security-auditor/SKILL.md +195 -193
  64. package/.agent/skills/app-builder/SKILL.md +573 -572
  65. package/.agent/skills/app-builder/templates/SKILL.md +108 -115
  66. package/.agent/skills/app-builder/templates/astro-static/TEMPLATE.md +76 -76
  67. package/.agent/skills/app-builder/templates/chrome-extension/TEMPLATE.md +92 -92
  68. package/.agent/skills/app-builder/templates/cli-tool/TEMPLATE.md +88 -88
  69. package/.agent/skills/app-builder/templates/electron-desktop/TEMPLATE.md +88 -88
  70. package/.agent/skills/app-builder/templates/express-api/TEMPLATE.md +83 -83
  71. package/.agent/skills/app-builder/templates/flutter-app/TEMPLATE.md +90 -90
  72. package/.agent/skills/app-builder/templates/monorepo-turborepo/TEMPLATE.md +90 -90
  73. package/.agent/skills/app-builder/templates/nextjs-fullstack/TEMPLATE.md +126 -122
  74. package/.agent/skills/app-builder/templates/nextjs-saas/TEMPLATE.md +127 -122
  75. package/.agent/skills/app-builder/templates/nextjs-static/TEMPLATE.md +172 -169
  76. package/.agent/skills/app-builder/templates/nuxt-app/TEMPLATE.md +139 -134
  77. package/.agent/skills/app-builder/templates/python-fastapi/TEMPLATE.md +83 -83
  78. package/.agent/skills/app-builder/templates/react-native-app/TEMPLATE.md +122 -119
  79. package/.agent/skills/appflow-wireframe/SKILL.md +146 -145
  80. package/.agent/skills/architecture/SKILL.md +226 -219
  81. package/.agent/skills/authentication-best-practices/SKILL.md +197 -189
  82. package/.agent/skills/backend-security-expert/SKILL.md +16 -2
  83. package/.agent/skills/bash-linux/SKILL.md +179 -179
  84. package/.agent/skills/behavioral-modes/SKILL.md +239 -223
  85. package/.agent/skills/brainstorming/SKILL.md +498 -486
  86. package/.agent/skills/browser-native-ai/SKILL.md +57 -4
  87. package/.agent/skills/building-native-ui/SKILL.md +202 -202
  88. package/.agent/skills/cicd-pro/SKILL.md +442 -0
  89. package/.agent/skills/clean-code/SKILL.md +400 -381
  90. package/.agent/skills/cloud-architect/SKILL.md +439 -0
  91. package/.agent/skills/code-review-checklist/SKILL.md +203 -194
  92. package/.agent/skills/config-validator/SKILL.md +165 -165
  93. package/.agent/skills/containerization-pro/SKILL.md +452 -0
  94. package/.agent/skills/csharp-developer/SKILL.md +518 -518
  95. package/.agent/skills/data-validation-schemas/SKILL.md +333 -328
  96. package/.agent/skills/database-design/SKILL.md +247 -240
  97. package/.agent/skills/deployment-procedures/SKILL.md +172 -169
  98. package/.agent/skills/devops-engineer/SKILL.md +345 -345
  99. package/.agent/skills/devops-incident-responder/SKILL.md +143 -137
  100. package/.agent/skills/doc.md +209 -177
  101. package/.agent/skills/documentation-templates/SKILL.md +291 -279
  102. package/.agent/skills/edge-computing/SKILL.md +183 -181
  103. package/.agent/skills/error-resilience/SKILL.md +411 -428
  104. package/.agent/skills/extract-design-system/SKILL.md +160 -158
  105. package/.agent/skills/framer-motion-expert/SKILL.md +253 -244
  106. package/.agent/skills/frontend-design/SKILL.md +208 -201
  107. package/.agent/skills/frontend-security-expert/SKILL.md +16 -3
  108. package/.agent/skills/game-design-expert/SKILL.md +132 -129
  109. package/.agent/skills/game-engineering-expert/SKILL.md +148 -146
  110. package/.agent/skills/generative-ui-expert/SKILL.md +57 -1
  111. package/.agent/skills/geo-fundamentals/SKILL.md +148 -147
  112. package/.agent/skills/git-pro/SKILL.md +435 -0
  113. package/.agent/skills/github-operations/SKILL.md +335 -329
  114. package/.agent/skills/gsap-core/SKILL.md +319 -308
  115. package/.agent/skills/gsap-frameworks/SKILL.md +213 -207
  116. package/.agent/skills/gsap-performance/SKILL.md +139 -133
  117. package/.agent/skills/gsap-plugins/SKILL.md +486 -480
  118. package/.agent/skills/gsap-react/SKILL.md +202 -189
  119. package/.agent/skills/gsap-scrolltrigger/SKILL.md +357 -350
  120. package/.agent/skills/gsap-timeline/SKILL.md +165 -161
  121. package/.agent/skills/gsap-utils/SKILL.md +344 -338
  122. package/.agent/skills/harness-protocol/SKILL.md +48 -0
  123. package/.agent/skills/i18n-localization/SKILL.md +174 -163
  124. package/.agent/skills/intelligent-routing/SKILL.md +202 -246
  125. package/.agent/skills/knowledge-graph/SKILL.md +60 -52
  126. package/.agent/skills/lint-and-validate/SKILL.md +261 -261
  127. package/.agent/skills/llm-engineering/SKILL.md +400 -394
  128. package/.agent/skills/local-first/SKILL.md +178 -178
  129. package/.agent/skills/mcp-builder/SKILL.md +143 -142
  130. package/.agent/skills/mobile-design/SKILL.md +272 -263
  131. package/.agent/skills/monorepo-management/SKILL.md +335 -334
  132. package/.agent/skills/motion-engineering/SKILL.md +266 -234
  133. package/.agent/skills/nextjs-react-expert/SKILL.md +236 -234
  134. package/.agent/skills/nodejs-best-practices/SKILL.md +547 -548
  135. package/.agent/skills/observability/SKILL.md +343 -343
  136. package/.agent/skills/parallel-agents/SKILL.md +143 -146
  137. package/.agent/skills/performance-profiling/SKILL.md +259 -267
  138. package/.agent/skills/plan-writing/SKILL.md +150 -142
  139. package/.agent/skills/platform-engineer/SKILL.md +148 -147
  140. package/.agent/skills/playwright-best-practices/SKILL.md +188 -187
  141. package/.agent/skills/powershell-windows/SKILL.md +162 -162
  142. package/.agent/skills/project-idioms/SKILL.md +137 -137
  143. package/.agent/skills/python-patterns/SKILL.md +260 -259
  144. package/.agent/skills/python-pro/SKILL.md +324 -323
  145. package/.agent/skills/react-specialist/SKILL.md +305 -277
  146. package/.agent/skills/readme-builder/SKILL.md +310 -300
  147. package/.agent/skills/realtime-patterns/SKILL.md +323 -319
  148. package/.agent/skills/red-team-tactics/SKILL.md +231 -218
  149. package/.agent/skills/rust-pro/SKILL.md +671 -673
  150. package/.agent/skills/seo-fundamentals/SKILL.md +179 -179
  151. package/.agent/skills/server-management/SKILL.md +218 -214
  152. package/.agent/skills/shadcn-ui-expert/SKILL.md +231 -231
  153. package/.agent/skills/skill-creator/SKILL.md +87 -86
  154. package/.agent/skills/sql-pro/SKILL.md +629 -629
  155. package/.agent/skills/supabase-postgres-best-practices/SKILL.md +97 -97
  156. package/.agent/skills/swiftui-expert/SKILL.md +204 -201
  157. package/.agent/skills/system-design-pro/SKILL.md +345 -0
  158. package/.agent/skills/systematic-debugging/SKILL.md +153 -142
  159. package/.agent/skills/tailwind-patterns/SKILL.md +610 -566
  160. package/.agent/skills/tdd-workflow/SKILL.md +169 -161
  161. package/.agent/skills/test-result-analyzer/SKILL.md +313 -309
  162. package/.agent/skills/testing-patterns/SKILL.md +566 -579
  163. package/.agent/skills/trend-researcher/SKILL.md +243 -237
  164. package/.agent/skills/typescript-advanced/SKILL.md +336 -335
  165. package/.agent/skills/ui-ux-pro-max/SKILL.md +590 -562
  166. package/.agent/skills/ui-ux-researcher/SKILL.md +244 -244
  167. package/.agent/skills/vue-expert/SKILL.md +294 -275
  168. package/.agent/skills/vulnerability-scanner/SKILL.md +416 -404
  169. package/.agent/skills/web-accessibility-auditor/SKILL.md +219 -218
  170. package/.agent/skills/web-design-guidelines/SKILL.md +192 -186
  171. package/.agent/skills/webapp-testing/SKILL.md +167 -169
  172. package/.agent/skills/webgpu-performance/SKILL.md +56 -2
  173. package/.agent/skills/whimsy-injector/SKILL.md +346 -325
  174. package/.agent/skills/workflow-optimizer/SKILL.md +231 -229
  175. package/.agent/workflows/acf.md +141 -0
  176. package/.agent/workflows/api-tester.md +176 -151
  177. package/.agent/workflows/audit.md +150 -127
  178. package/.agent/workflows/brainstorm.md +134 -110
  179. package/.agent/workflows/changelog.md +140 -112
  180. package/.agent/workflows/create.md +168 -124
  181. package/.agent/workflows/debug.md +190 -165
  182. package/.agent/workflows/deploy.md +201 -180
  183. package/.agent/workflows/enhance.md +154 -128
  184. package/.agent/workflows/fix.md +136 -114
  185. package/.agent/workflows/generate.md +198 -183
  186. package/.agent/workflows/marathon.md +37 -11
  187. package/.agent/workflows/migrate.md +184 -160
  188. package/.agent/workflows/orchestrate.md +192 -168
  189. package/.agent/workflows/performance-benchmarker.md +135 -114
  190. package/.agent/workflows/plan.md +196 -173
  191. package/.agent/workflows/preview.md +103 -80
  192. package/.agent/workflows/refactor.md +192 -161
  193. package/.agent/workflows/review-ai.md +125 -101
  194. package/.agent/workflows/review.md +141 -116
  195. package/.agent/workflows/session.md +122 -94
  196. package/.agent/workflows/status.md +101 -79
  197. package/.agent/workflows/strengthen-skills.md +164 -138
  198. package/.agent/workflows/super-prompt.md +24 -0
  199. package/.agent/workflows/swarm.md +193 -179
  200. package/.agent/workflows/test.md +211 -189
  201. package/.agent/workflows/tribunal-backend.md +136 -105
  202. package/.agent/workflows/tribunal-database.md +122 -95
  203. package/.agent/workflows/tribunal-frontend.md +221 -96
  204. package/.agent/workflows/tribunal-full.md +129 -100
  205. package/.agent/workflows/tribunal-mobile.md +122 -95
  206. package/.agent/workflows/tribunal-performance.md +136 -110
  207. package/.agent/workflows/tribunal-speed.md +209 -183
  208. package/.agent/workflows/ui-ux-pro-max.md +145 -122
  209. package/README.md +107 -55
  210. package/bin/mcp-server.js +159 -0
  211. package/bin/tribunal-kit.js +105 -29
  212. package/bin/wrapper.js +16 -7
  213. package/mcp_config.json +9 -0
  214. package/package.json +94 -86
  215. package/scripts/changelog.js +4 -3
  216. package/scripts/validate-payload.js +6 -1
  217. package/scripts/postinstall.js +0 -127
@@ -1,165 +1,171 @@
1
- ---
2
- name: tdd-workflow
3
- description: Test-Driven Development (TDD) mastery. Red-Green-Refactor cycles, behavior-driven design (BDD), strict mutation coverage, test doubles (mocks/stubs/spies), and avoiding test-induced design damage. Use when building complex algorithms, deep business logic, or strictly regulated systems.
4
- allowed-tools: Read, Write, Edit, Glob, Grep
5
- version: 2.0.0
6
- last-updated: 2026-04-02
7
- applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
8
- ---
9
-
10
- ## Hallucination Traps (Read First)
11
- - ❌ Writing tests that test implementation details instead of behavior -> ✅ Test WHAT it does (inputs/outputs), not HOW (internal methods)
12
- - ❌ Skipping the Red phase (writing a failing test first) -> ✅ If the test passes before you write the code, it tests nothing
13
- - Refactoring during the Red or Green phase -> ✅ Red: write failing test. Green: make it pass minimally. THEN refactor. Never mix phases
14
-
15
- ---
16
-
17
-
18
- # Test-Driven Development (TDD) — Defect-Free Execution Mastery
19
-
20
- ---
21
-
22
- ## 1. The Red-Green-Refactor Cycle
23
-
24
- TDD is a strict, irrevocable discipline. Do not write the implementation first.
25
-
26
- ### Step 1: RED (Write the failing test)
27
- Write the test as if the API already exists exactly how you *wish* it were designed.
28
- Run the test. It MUST fail (because the function doesn't exist, or returns the wrong value). If it passes, the test is useless.
29
-
30
- ```typescript
31
- // 1. The failing test
32
- import { calculateDiscount } from './pricing';
33
-
34
- test('Should apply 10% discount for orders over $100', () => {
35
- expect(calculateDiscount(150)).toBe(135);
36
- });
37
- // ❌ FAILS: calculateDiscount is not defined
38
- ```
39
-
40
- ### Step 2: GREEN (Make it pass exactly)
41
- Write the absolute minimum, dumbest code required to make the test pass. Do not over-engineer.
42
-
43
- ```typescript
44
- // 2. The minimum implementation
45
- export function calculateDiscount(subtotal: number): number {
46
- if (subtotal >= 100) return subtotal * 0.90;
47
- return subtotal;
48
- }
49
- // PASSES.
50
- ```
51
-
52
- ### Step 3: REFACTOR
53
- Now wrap the implementation in clean architectural principles. The tests guarantee you haven't broken the behavior while you optimize.
54
-
55
- ```typescript
56
- // 3. The Refactor
57
- const DISCOUNT_THRESHOLD = 100;
58
- const DISCOUNT_RATE = 0.90;
59
-
60
- export function calculateDiscount(subtotal: number): number {
61
- return subtotal >= DISCOUNT_THRESHOLD ? subtotal * DISCOUNT_RATE : subtotal;
62
- }
63
- // STILL PASSES. Safe to commit.
64
- ```
65
-
66
- ---
67
-
68
- ## 2. Test Doubles (Mocks, Stubs, Spies)
69
-
70
- Knowing *how* to mock separates amateurs from professionals. Over-mocking destroys architectural integrity.
71
-
72
- |Type|When to use|Example|
73
- |:---|:---|:---|
74
- |**Dummy**|Filler objects passed but never used|`processOrder(new UserDummy(), payload)`|
75
- |**Stub**|Hardcodes a specific response|`db.getUser.mockResolvedValue({ id: 1 })`|
76
- |**Spy**|Records how many times a function was called|`expect(emailService.send).toHaveBeenCalledTimes(1)`|
77
- |**Mock**|A spy with predefined expectations of exact payloads|`expect(logger.info).toHaveBeenCalledWith('Authorized')`|
78
-
79
- ### The Mocking Rule
80
- **Only mock at the architectural boundaries (Database, Network, External FileSystem).**
81
- NEVER mock internal business logic or child pure-functions. If function A calls function B, test A by allowing it to genuinely call B.
82
-
83
- ---
84
-
85
- ## 3. Anti-Pattern: Testing Implementation Details
86
-
87
- Tests should verify the *behavior* output, not the underlying code structure.
88
-
89
- ```typescript
90
- class Account {
91
- private balance = 0;
92
- deposit(amount: number) { this.balance += amount; }
93
- getBalance() { return this.balance; }
94
- }
95
-
96
- // ❌ BAD: Testing internal state (Fragile)
97
- test('Deposit updates the internal balance variable', () => {
98
- const acc = new Account();
99
- acc.deposit(50);
100
- expect(acc['balance']).toBe(50); // Intrusive test breaks if variable is renamed
101
- });
102
-
103
- // ✅ GOOD: Testing external behavior contract
104
- test('Deposit makes the funds available via getBalance', () => {
105
- const acc = new Account();
106
- acc.deposit(50);
107
- expect(acc.getBalance()).toBe(50); // Tests the public API only
108
- });
109
- ```
110
-
111
- ---
112
-
113
-
114
- ---
115
-
116
-
117
-
118
- AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
119
-
120
- 1. **Over-engineering:** Proposing complex abstractions or distributed systems when a simpler approach suffices.
121
- 2. **Hallucinated Libraries/Methods:** Using non-existent methods or packages. Always `// VERIFY` or check `package.json` / `requirements.txt`.
122
- 3. **Skipping Edge Cases:** Writing the "happy path" and ignoring error handling, timeouts, or data validation.
123
- 4. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
124
- 5. **Silent Degradation:** Catching and suppressing errors without logging or re-raising.
125
-
126
- ---
127
-
128
-
129
-
130
- **Slash command: `/review` or `/tribunal-full`**
131
- **Active reviewers: `logic-reviewer` · `security-auditor`**
132
-
133
- ### ❌ Forbidden AI Tropes
134
-
135
- 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
136
- 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
137
- 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
138
-
139
-
140
-
141
- Review these questions before confirming output:
142
- ```
143
- ✅ Did I rely ONLY on real, verified tools and methods?
144
- ✅ Is this solution appropriately scoped to the user's constraints?
145
- ✅ Did I handle potential failure modes and edge cases?
146
- ✅ Have I avoided generic boilerplate that doesn't add value?
147
- ```
148
-
149
- ### 🛑 Verification-Before-Completion (VBC) Protocol
150
-
151
- **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
152
- - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
153
- - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
154
-
155
-
156
- ## Pre-Flight Checklist
157
- - [ ] Have I reviewed the user's specific constraints and requests?
158
- - [ ] Have I checked the environment for relevant existing implementations?
159
-
160
- ## VBC Protocol (Verification-Before-Completion)
161
- You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
1
+ ---
2
+ name: tdd-workflow
3
+ description: Test-Driven Development (TDD) mastery. Red-Green-Refactor cycles, behavior-driven design (BDD), strict mutation coverage, test doubles (mocks/stubs/spies), and avoiding test-induced design damage. Use when building complex algorithms, deep business logic, or strictly regulated systems.
4
+ allowed-tools: Read, Write, Edit, Glob, Grep
5
+ version: 2.0.0
6
+ last-updated: 2026-04-02
7
+ applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
8
+ routing:
9
+ domain: general
10
+ tier: basic
11
+ ---
12
+
13
+ ## Hallucination Traps (Read First)
14
+
15
+ - ❌ Writing tests that test implementation details instead of behavior -> ✅ Test WHAT it does (inputs/outputs), not HOW (internal methods)
16
+ - ❌ Skipping the Red phase (writing a failing test first) -> ✅ If the test passes before you write the code, it tests nothing
17
+ - ❌ Refactoring during the Red or Green phase -> ✅ Red: write failing test. Green: make it pass minimally. THEN refactor. Never mix phases
18
+
19
+ ---
20
+
21
+ # Test-Driven Development (TDD) — Defect-Free Execution Mastery
22
+
23
+ ---
24
+
25
+ ## 1. The Red-Green-Refactor Cycle
26
+
27
+ TDD is a strict, irrevocable discipline. Do not write the implementation first.
28
+
29
+ ### Step 1: RED (Write the failing test)
30
+
31
+ Write the test as if the API already exists exactly how you _wish_ it were designed.
32
+ Run the test. It MUST fail (because the function doesn't exist, or returns the wrong value). If it passes, the test is useless.
33
+
34
+ ```typescript
35
+ // 1. The failing test
36
+ import { calculateDiscount } from "./pricing";
37
+
38
+ test("Should apply 10% discount for orders over $100", () => {
39
+ expect(calculateDiscount(150)).toBe(135);
40
+ });
41
+ // FAILS: calculateDiscount is not defined
42
+ ```
43
+
44
+ ### Step 2: GREEN (Make it pass exactly)
45
+
46
+ Write the absolute minimum, dumbest code required to make the test pass. Do not over-engineer.
47
+
48
+ ```typescript
49
+ // 2. The minimum implementation
50
+ export function calculateDiscount(subtotal: number): number {
51
+ if (subtotal >= 100) return subtotal * 0.9;
52
+ return subtotal;
53
+ }
54
+ // ✅ PASSES.
55
+ ```
56
+
57
+ ### Step 3: REFACTOR
58
+
59
+ Now wrap the implementation in clean architectural principles. The tests guarantee you haven't broken the behavior while you optimize.
60
+
61
+ ```typescript
62
+ // 3. The Refactor
63
+ const DISCOUNT_THRESHOLD = 100;
64
+ const DISCOUNT_RATE = 0.9;
65
+
66
+ export function calculateDiscount(subtotal: number): number {
67
+ return subtotal >= DISCOUNT_THRESHOLD ? subtotal * DISCOUNT_RATE : subtotal;
68
+ }
69
+ // ✅ STILL PASSES. Safe to commit.
70
+ ```
71
+
72
+ ---
73
+
74
+ ## 2. Test Doubles (Mocks, Stubs, Spies)
75
+
76
+ Knowing _how_ to mock separates amateurs from professionals. Over-mocking destroys architectural integrity.
77
+
78
+ | Type | When to use | Example |
79
+ | :-------- | :--------------------------------------------------- | :------------------------------------------------------- |
80
+ | **Dummy** | Filler objects passed but never used | `processOrder(new UserDummy(), payload)` |
81
+ | **Stub** | Hardcodes a specific response | `db.getUser.mockResolvedValue({ id: 1 })` |
82
+ | **Spy** | Records how many times a function was called | `expect(emailService.send).toHaveBeenCalledTimes(1)` |
83
+ | **Mock** | A spy with predefined expectations of exact payloads | `expect(logger.info).toHaveBeenCalledWith('Authorized')` |
84
+
85
+ ### The Mocking Rule
86
+
87
+ **Only mock at the architectural boundaries (Database, Network, External FileSystem).**
88
+ NEVER mock internal business logic or child pure-functions. If function A calls function B, test A by allowing it to genuinely call B.
89
+
90
+ ---
91
+
92
+ ## 3. Anti-Pattern: Testing Implementation Details
93
+
94
+ Tests should verify the _behavior_ output, not the underlying code structure.
95
+
96
+ ```typescript
97
+ class Account {
98
+ private balance = 0;
99
+ deposit(amount: number) {
100
+ this.balance += amount;
101
+ }
102
+ getBalance() {
103
+ return this.balance;
104
+ }
105
+ }
106
+
107
+ // BAD: Testing internal state (Fragile)
108
+ test("Deposit updates the internal balance variable", () => {
109
+ const acc = new Account();
110
+ acc.deposit(50);
111
+ expect(acc["balance"]).toBe(50); // Intrusive test breaks if variable is renamed
112
+ });
113
+
114
+ // ✅ GOOD: Testing external behavior contract
115
+ test("Deposit makes the funds available via getBalance", () => {
116
+ const acc = new Account();
117
+ acc.deposit(50);
118
+ expect(acc.getBalance()).toBe(50); // Tests the public API only
119
+ });
120
+ ```
121
+
122
+ ---
162
123
 
124
+ ---
125
+
126
+ AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
127
+
128
+ 1. **Over-engineering:** Proposing complex abstractions or distributed systems when a simpler approach suffices.
129
+ 2. **Hallucinated Libraries/Methods:** Using non-existent methods or packages. Always `// VERIFY` or check `package.json` / `requirements.txt`.
130
+ 3. **Skipping Edge Cases:** Writing the "happy path" and ignoring error handling, timeouts, or data validation.
131
+ 4. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
132
+ 5. **Silent Degradation:** Catching and suppressing errors without logging or re-raising.
133
+
134
+ ---
135
+
136
+ **Slash command: `/review` or `/tribunal-full`**
137
+ **Active reviewers: `logic-reviewer` · `security-auditor`**
138
+
139
+ ### ❌ Forbidden AI Tropes
140
+
141
+ 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
142
+ 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
143
+ 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
144
+
145
+ Review these questions before confirming output:
146
+
147
+ ```
148
+ ✅ Did I rely ONLY on real, verified tools and methods?
149
+ ✅ Is this solution appropriately scoped to the user's constraints?
150
+ ✅ Did I handle potential failure modes and edge cases?
151
+ ✅ Have I avoided generic boilerplate that doesn't add value?
152
+ ```
153
+
154
+ ### 🛑 Verification-Before-Completion (VBC) Protocol
155
+
156
+ **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
157
+
158
+ - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
159
+ - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
160
+
161
+ ## Pre-Flight Checklist
162
+
163
+ - [ ] Have I reviewed the user's specific constraints and requests?
164
+ - [ ] Have I checked the environment for relevant existing implementations?
165
+
166
+ ## VBC Protocol (Verification-Before-Completion)
167
+
168
+ You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
163
169
 
164
170
  ---
165
171
 
@@ -189,6 +195,7 @@ AI coding assistants often fall into specific bad habits when dealing with this
189
195
  ### ✅ Pre-Flight Self-Audit
190
196
 
191
197
  Review these questions before confirming output:
198
+
192
199
  ```
193
200
  ✅ Did I rely ONLY on real, verified tools and methods?
194
201
  ✅ Is this solution appropriately scoped to the user's constraints?
@@ -199,5 +206,6 @@ Review these questions before confirming output:
199
206
  ### 🛑 Verification-Before-Completion (VBC) Protocol
200
207
 
201
208
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
209
+
202
210
  - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
203
211
  - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.