tribunal-kit 4.5.0 → 4.6.0

package/.agent/workflows/review.md

@@ -1,116 +1,141 @@
----
-description: Audit existing code for hallucinations. Runs Logic + Security reviewers on any code without generating anything new. The pure review mode — read, analyze, and report only.
----
-
-# /review — Hallucination Audit (Read-Only)
-
-$ARGUMENTS
-
----
-
-## When to Use /review
-
-|Use `/review` when...|Use something else when...|
-|:---|:---|
-|Auditing code you didn't write|AI-specific code review → `/review-ai`|
-|Checking existing code for hallucinations|Need Tribunal with generation → `/generate`|
-|Pre-merge code review|Full pre-deploy audit → `/audit`|
-|Validating AI-generated output|Security only → `/tribunal-backend`|
-|Reviewing code from a junior developer||
-
----
-
-## The Review Contract
-
-```
-/review is READ ONLY.
-No files are modified.
-No code is generated.
-Only findings and recommendations are produced.
-```
-
----
-
-## Active Reviewers
-
-Logic + Security run on ALL code by default.
-
-**Additional reviewers auto-activated by content:**
-
-|Code Contains|Additional Reviewers|
-|:---|:---|
-|SQL, Prisma, database operations|`sql-reviewer`|
-|React, hooks, components|`frontend-reviewer`|
-|TypeScript types, generics|`type-safety-reviewer`|
-|npm imports, package.json|`dependency-reviewer`|
-|Tests, specs, describe/it blocks|`test-coverage-reviewer`|
-|LLM API calls (OpenAI, Anthropic)|`ai-code-reviewer`|
-|ARIA, disability, a11y|`accessibility-reviewer`|
-
----
-
-## Review Output Format
-
-```
-━━━ Code Review — [filename or description] ━━━━━
-
-Logic Review:   ✅ APPROVED | ⚠️ [N] warnings | ❌ [N] critical
-Security:       ✅ APPROVED | ⚠️ [N] warnings | ❌ [N] critical
-
-━━━ Findings (sorted by severity) ━━━━━━━━━━━━━━
-
-[CRITICAL] [File:Line] [description] → [specific fix]
-[HIGH]     [File:Line] [description] → [specific fix]
-[MEDIUM]   [File:Line] [description] → [note]
-
-━━━ Verdict: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-✅ APPROVED — code is production-ready
-⚠️ WARNINGS — [N] items to address before release
-❌ CRITICAL — [N] blockers must be resolved
-```
-
----
-
-## What Each Reviewer Looks For
-
-### logic-reviewer
-- Methods called on wrong object types
-- Impossible states that will throw at runtime
-- Functions called before they're defined
-- Missing null checks on potentially-undefined values
-
-### security-auditor
-- SQL injection (string interpolation in queries)
-- XSS (user content in innerHTML or dangerouslySetInnerHTML)
-- JWT issues (no algorithm enforcement, weak secrets)
-- Auth order (business logic before auth check)
-- Hardcoded secrets
-
----
-
-## Hallucination-Specific Checks
-
-The review specifically catches:
-
-```
-□ Methods imported from packages that don't export them
-□ React hooks that don't exist (fabricated hook names)
-□ Prisma methods removed in current version (findOne, upsertMany)
-□ Next.js 15 dynamic APIs used without await (cookies, headers, params)
-□ React 19 deprecated API usage (useFormState instead of useActionState)
-□ Parameters passed to LLM APIs that don't exist (max_length, format, memory)
-□ Model names that don't exist (gpt-5, claude-4, gemini-ultra)
-```
-
----
-
-## Usage Examples
-
-```
-/review src/lib/auth.ts
-/review the entire src/app/api/checkout/ directory
-/review the PaymentForm component
-/review this code: [paste code inline]
-/review src/lib/ai-chat.ts for AI API hallucinations
-/review the last generated code before we write it to disk
-```
+---
+description: Audit existing code for hallucinations. Runs Logic + Security reviewers on any code without generating anything new. The pure review mode — read, analyze, and report only.
+required-skills: code-review-checklist, vulnerability-scanner
+---
+
+# /review — Hallucination Audit (Read-Only)
+
+$ARGUMENTS
+
+---
+
+## $CONTEXT_REQUIRED
+
+```
+Read BEFORE reviewing:
+□ Target code files           → The files that need auditing
+□ package.json                → Check dependencies used by target files
+```
+
+---
+
+## When to Use /review
+
+| Use `/review` when...                     | Use something else when...                  |
+| :---------------------------------------- | :------------------------------------------ |
+| Auditing code you didn't write            | AI-specific code review → `/review-ai`      |
+| Checking existing code for hallucinations | Need Tribunal with generation → `/generate` |
+| Pre-merge code review                     | Full pre-deploy audit → `/audit`            |
+| Validating AI-generated output            | Security only → `/tribunal-backend`         |
+| Reviewing code from a junior developer    |                                             |
+
+---
+
+## The Review Contract
+
+```
+/review is READ ONLY.
+No files are modified.
+No code is generated.
+Only findings and recommendations are produced.
+```
+
+---
+
+## Active Reviewers
+
+Logic + Security run on ALL code by default.
+
+**Additional reviewers auto-activated by content:**
+
+| Code Contains                     | Additional Reviewers     |
+| :-------------------------------- | :----------------------- |
+| SQL, Prisma, database operations  | `sql-reviewer`           |
+| React, hooks, components          | `frontend-reviewer`      |
+| TypeScript types, generics        | `type-safety-reviewer`   |
+| npm imports, package.json         | `dependency-reviewer`    |
+| Tests, specs, describe/it blocks  | `test-coverage-reviewer` |
+| LLM API calls (OpenAI, Anthropic) | `ai-code-reviewer`       |
+| ARIA, disability, a11y            | `accessibility-reviewer` |
+
+---
+
+## Review Output Format
+
+```
+━━━ Code Review — [filename or description] ━━━━━
+
+Logic Review:   ✅ APPROVED | ⚠️ [N] warnings | ❌ [N] critical
+Security:       ✅ APPROVED | ⚠️ [N] warnings | ❌ [N] critical
+
+━━━ Findings (sorted by severity) ━━━━━━━━━━━━━━
+
+[CRITICAL] [File:Line] [description] → [specific fix]
+[HIGH]     [File:Line] [description] → [specific fix]
+[MEDIUM]   [File:Line] [description] → [note]
+
+━━━ Verdict: ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+✅ APPROVED — code is production-ready
+⚠️ WARNINGS — [N] items to address before release
+❌ CRITICAL — [N] blockers must be resolved
+```
+
+---
+
+## What Each Reviewer Looks For
+
+### logic-reviewer
+
+- Methods called on wrong object types
+- Impossible states that will throw at runtime
+- Functions called before they're defined
+- Missing null checks on potentially-undefined values
+
+### security-auditor
+
+- SQL injection (string interpolation in queries)
+- XSS (user content in innerHTML or dangerouslySetInnerHTML)
+- JWT issues (no algorithm enforcement, weak secrets)
+- Auth order (business logic before auth check)
+- Hardcoded secrets
+
+---
+
+## Hallucination-Specific Checks
+
+The review specifically catches:
+
+```
+□ Methods imported from packages that don't export them
+□ React hooks that don't exist (fabricated hook names)
+□ Prisma methods removed in current version (findOne, upsertMany)
+□ Next.js 15 dynamic APIs used without await (cookies, headers, params)
+□ React 19 deprecated API usage (useFormState instead of useActionState)
+□ Parameters passed to LLM APIs that don't exist (max_length, format, memory)
+□ Model names that don't exist (gpt-5, claude-4, gemini-ultra)
+```
+
+---
+
+## Usage Examples
+
+```
+/review src/lib/auth.ts
+/review the entire src/app/api/checkout/ directory
+/review the PaymentForm component
+/review this code: [paste code inline]
+/review src/lib/ai-chat.ts for AI API hallucinations
+/review the last generated code before we write it to disk
+```
+
+---
+
+## After /review — Next Steps
+
+| Outcome                        | Next Command                         |
+| :----------------------------- | :----------------------------------- |
+| Review reveals bugs            | → `/debug` to isolate and fix        |
+| Review reveals security issues | → `/tribunal-backend` to apply fixes |
+| Review is clean                | → `/deploy` or commit code           |
+
+---

package/.agent/workflows/session.md

@@ -1,94 +1,122 @@
----
-description: Interactive session state tracking for multi-conversation context continuity. Saves and restores agent context across separate sessions so work can be resumed without losing progress.
----
-
-# /session — Session State Management
-
-$ARGUMENTS
-
----
-
-## Commands
-
-```
-/session save      → Save current session state to disk
-/session restore   → Restore most recent session
-/session status    → Show current session summary
-/session new       → Create a new session (archive current)
-/session list      → List all saved sessions
-```
-
----
-
-## Execution
-
-```bash
-node .agent/scripts/session_manager.js save
-node .agent/scripts/session_manager.js restore
-node .agent/scripts/session_manager.js status
-node .agent/scripts/session_manager.js new
-node .agent/scripts/session_manager.js list
-```
-
----
-
-## What Gets Saved
-
-```
-Session state includes:
-□ Current task.md content
-□ Summary of what was completed this session
-□ Open questions / blocked items
-□ Files modified in this session (from git status)
-□ Next planned actions
-```
-
----
-
-## Session File Format
-
-```markdown
-# Session: [timestamp]
-
-## Completed This Session
-- [task item 1 — completed]
-- [task item 2 — completed]
-
-## In Progress
-- [task item 3 — started but not finished]
-
-## Blocked
-- [item] — blocked by [reason]
-
-## Files Modified
-- src/lib/auth.ts
-- src/app/api/users/route.ts
-
-## Next Session: Start With
-1. [first thing to do in the next session]
-2. [second thing]
-
-## Open Questions
-- [question 1]
-```
-
----
-
-## When to Use /session
-
-```
-End of work session:   /session save → so next session can restore context
-Next work session:     /session restore → avoid re-explaining context
-Complex multi-day task: /session save between each work block
-Context handoff:       /session save → share session file with collaborator
-```
-
----
-
-## Usage Examples
-
-```
-/session save   (at end of coding session)
-/session restore (at start of next coding session)
-/session status (check what was accomplished)
-```
+---
+description: Interactive session state tracking for multi-conversation context continuity. Saves and restores agent context across separate sessions so work can be resumed without losing progress.
+required-skills: behavioral-modes, agent-organizer
+---
+
+# /session — Session State Management
+
+$ARGUMENTS
+
+---
+
+## $CONTEXT_REQUIRED
+
+```
+Read BEFORE managing session:
+□ .agent/scripts/session_manager.js → Verify script exists and is executable
+□ Existing session files            → Check what previous sessions exist
+```
+
+---
+
+## Commands
+
+```
+/session save      → Save current session state to disk
+/session restore   → Restore most recent session
+/session status    → Show current session summary
+/session new       → Create a new session (archive current)
+/session list      → List all saved sessions
+```
+
+---
+
+## Execution
+
+```bash
+node .agent/scripts/session_manager.js save
+node .agent/scripts/session_manager.js restore
+node .agent/scripts/session_manager.js status
+node .agent/scripts/session_manager.js new
+node .agent/scripts/session_manager.js list
+```
+
+---
+
+## What Gets Saved
+
+```
+Session state includes:
+□ Current task.md content
+□ Summary of what was completed this session
+□ Open questions / blocked items
+□ Files modified in this session (from git status)
+□ Next planned actions
+```
+
+---
+
+## Session File Format
+
+```markdown
+# Session: [timestamp]
+
+## Completed This Session
+
+- [task item 1 — completed]
+- [task item 2 — completed]
+
+## In Progress
+
+- [task item 3 — started but not finished]
+
+## Blocked
+
+- [item] — blocked by [reason]
+
+## Files Modified
+
+- src/lib/auth.ts
+- src/app/api/users/route.ts
+
+## Next Session: Start With
+
+1. [first thing to do in the next session]
+2. [second thing]
+
+## Open Questions
+
+- [question 1]
+```
+
+---
+
+## When to Use /session
+
+```
+End of work session:   /session save → so next session can restore context
+Next work session:     /session restore → avoid re-explaining context
+Complex multi-day task: /session save between each work block
+Context handoff:       /session save → share session file with collaborator
+```
+
+---
+
+## Usage Examples
+
+```
+/session save   (at end of coding session)
+/session restore (at start of next coding session)
+/session status (check what was accomplished)
+```
+
+---
+
+## After /session — Next Steps
+
+| Outcome          | Next Command                           |
+| :--------------- | :------------------------------------- |
+| Session saved    | → Close workspace, return later        |
+| Session restored | → Continue from task list or `/status` |
+
+---

package/.agent/workflows/status.md

@@ -1,79 +1,101 @@
----
-description: Display agent and project status. Shows task.md progress, last audit results, CI status, and recently modified files. Read-only — no changes made.
----
-
-# /status — Project Health Dashboard
-
-$ARGUMENTS
-
----
-
-## What /status Shows
-
-```
-1. Active task progress (from task.md)
-2. Last audit results summary
-3. Recent git activity (last 5 commits)
-4. File modification timestamps (hot files)
-5. Current server status
-```
-
----
-
-## Execution
-
-```bash
-# 1. Task progress
-cat .gemini/antigravity/brain/*/task.md 2>/dev/null || echo "No active task"
-
-# 2. Recent git activity
-git log --oneline -5
-
-# 3. Recently modified source files (last 24 hours)
-find src/ -name "*.ts" -o -name "*.tsx" -newer package.json 2>/dev/null | head -10
-
-# 4. Server status (non-blocking)
-python .agent/scripts/auto_preview.py status 2>/dev/null
-
-# 5. Quick type check
-npx tsc --noEmit 2>&1 | tail -5
-```
-
----
-
-## Status Report Format
-
-```
-━━━ Project Status ━━━━━━━━━━━━━━━━━━━━━━━
-
-Project:    [name from package.json]
-Branch:     [git branch]
-Last commit: [hash] — [message] — [time ago]
-
-━━━ Active Task ━━━━━━━━━━━━━━━━━━━━━━━━━
-[task.md content if exists, else: No active task]
-
-━━━ Recent Changes (24h) ━━━━━━━━━━━━━━━━
-  [timestamp] src/app/api/auth/login/route.ts
-  [timestamp] src/lib/auth.ts
-  [timestamp] prisma/schema.prisma
-
-━━━ TypeScript ━━━━━━━━━━━━━━━━━━━━━━━━━
-✅ Zero errors | ❌ N errors found
-
-━━━ Dev Server ━━━━━━━━━━━━━━━━━━━━━━━━━
-✅ Running at http://localhost:3000 | ⭕ Not running
-
-━━━ Next Steps ━━━━━━━━━━━━━━━━━━━━━━━━━
-[any currently incomplete task items from task.md]
-```
-
----
-
-## Usage
-
-```
-/status              → Full project status
-/status task         → Active task progress only
-/status recent       → Recently modified files only
-```
+---
+description: Display agent and project status. Shows task.md progress, last audit results, CI status, and recently modified files. Read-only — no changes made.
+required-skills: bash-linux
+---
+
+# /status — Project Health Dashboard
+
+$ARGUMENTS
+
+---
+
+## $CONTEXT_REQUIRED
+
+```
+Read BEFORE checking status:
+□ task.md                     → Get the current active task progress
+□ git status                  → Find recently modified files
+```
+
+---
+
+## What /status Shows
+
+```
+1. Active task progress (from task.md)
+2. Last audit results summary
+3. Recent git activity (last 5 commits)
+4. File modification timestamps (hot files)
+5. Current server status
+```
+
+---
+
+## Execution
+
+```bash
+# 1. Task progress
+cat .gemini/antigravity/brain/*/task.md 2>/dev/null || echo "No active task"
+
+# 2. Recent git activity
+git log --oneline -5
+
+# 3. Recently modified source files (last 24 hours)
+find src/ -name "*.ts" -o -name "*.tsx" -newer package.json 2>/dev/null | head -10
+
+# 4. Server status (non-blocking)
+python .agent/scripts/auto_preview.py status 2>/dev/null
+
+# 5. Quick type check
+npx tsc --noEmit 2>&1 | tail -5
+```
+
+---
+
+## Status Report Format
+
+```
+━━━ Project Status ━━━━━━━━━━━━━━━━━━━━━━━
+
+Project:    [name from package.json]
+Branch:     [git branch]
+Last commit: [hash] — [message] — [time ago]
+
+━━━ Active Task ━━━━━━━━━━━━━━━━━━━━━━━━━
+[task.md content if exists, else: No active task]
+
+━━━ Recent Changes (24h) ━━━━━━━━━━━━━━━━
+  [timestamp] src/app/api/auth/login/route.ts
+  [timestamp] src/lib/auth.ts
+  [timestamp] prisma/schema.prisma
+
+━━━ TypeScript ━━━━━━━━━━━━━━━━━━━━━━━━━
+✅ Zero errors | ❌ N errors found
+
+━━━ Dev Server ━━━━━━━━━━━━━━━━━━━━━━━━━
+✅ Running at http://localhost:3000 | ⭕ Not running
+
+━━━ Next Steps ━━━━━━━━━━━━━━━━━━━━━━━━━
+[any currently incomplete task items from task.md]
+```
+
+---
+
+## Usage
+
+```
+/status              → Full project status
+/status task         → Active task progress only
+/status recent       → Recently modified files only
+```
+
+---
+
+## After /status — Next Steps
+
+| Outcome             | Next Command                               |
+| :------------------ | :----------------------------------------- |
+| Task in progress    | → Continue current work or `/session save` |
+| Status shows errors | → `/debug` to investigate recent changes   |
+
+---