tribunal-kit 5.8.1 → 5.8.3

package/.agent/history/memory/.memory.idx

@@ -1687,7 +1687,463 @@
       "token_estimate": 18,
       "source": "manual",
       "session_id": null
+    },
+    {
+      "id": 112,
+      "memory_type": "semantic",
+      "content": "❌ Overriding project idioms without explicit justification -> ✅ Idioms represent team decisions; flag deviations with reasoning",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 32,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 113,
+      "memory_type": "semantic",
+      "content": "❌ Applying idioms from one project to a different project -> ✅ Idioms are project-specific; verify they apply to the current codebase",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 34,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 114,
+      "memory_type": "semantic",
+      "content": "❌ **Forbidden:** Declaring a task complete because the output \"looks correct.\"",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 20,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 115,
+      "memory_type": "semantic",
+      "content": "✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 54,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 116,
+      "memory_type": "semantic",
+      "content": "[ ] Have I reviewed the user's specific constraints and requests?",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 17,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 117,
+      "memory_type": "semantic",
+      "content": "[ ] Have I checked the environment for relevant existing implementations?",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 19,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 118,
+      "memory_type": "semantic",
+      "content": "❌ **Forbidden:** Declaring a task complete because the output \"looks correct.\"",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 20,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 119,
+      "memory_type": "semantic",
+      "content": "✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 54,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 120,
+      "memory_type": "procedural",
+      "content": "Run `echo 'No build step required for this project'` to build the project",
+      "tags": [
+        "build-script",
+        "build",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 19,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 121,
+      "memory_type": "procedural",
+      "content": "Run `npm run validate-payload && jest --coverage` to test the project",
+      "tags": [
+        "build-script",
+        "test",
+        "auto-learned"
+      ],
+      "created_at": "1783790009Z",
+      "last_accessed": "1783790009Z",
+      "access_count": 0,
+      "token_estimate": 18,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 122,
+      "memory_type": "semantic",
+      "content": "❌ Overriding project idioms without explicit justification -> ✅ Idioms represent team decisions; flag deviations with reasoning",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 32,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 123,
+      "memory_type": "semantic",
+      "content": "❌ Applying idioms from one project to a different project -> ✅ Idioms are project-specific; verify they apply to the current codebase",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 34,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 124,
+      "memory_type": "semantic",
+      "content": "❌ **Forbidden:** Declaring a task complete because the output \"looks correct.\"",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 20,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 125,
+      "memory_type": "semantic",
+      "content": "✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 54,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 126,
+      "memory_type": "semantic",
+      "content": "[ ] Have I reviewed the user's specific constraints and requests?",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 17,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 127,
+      "memory_type": "semantic",
+      "content": "[ ] Have I checked the environment for relevant existing implementations?",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 19,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 128,
+      "memory_type": "semantic",
+      "content": "❌ **Forbidden:** Declaring a task complete because the output \"looks correct.\"",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 20,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 129,
+      "memory_type": "semantic",
+      "content": "✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 54,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 130,
+      "memory_type": "procedural",
+      "content": "Run `echo 'No build step required for this project'` to build the project",
+      "tags": [
+        "build-script",
+        "build",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 19,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 131,
+      "memory_type": "procedural",
+      "content": "Run `npm run validate-payload && jest --coverage` to test the project",
+      "tags": [
+        "build-script",
+        "test",
+        "auto-learned"
+      ],
+      "created_at": "1784187808Z",
+      "last_accessed": "1784187808Z",
+      "access_count": 0,
+      "token_estimate": 18,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 132,
+      "memory_type": "semantic",
+      "content": "❌ Overriding project idioms without explicit justification -> ✅ Idioms represent team decisions; flag deviations with reasoning",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 32,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 133,
+      "memory_type": "semantic",
+      "content": "❌ Applying idioms from one project to a different project -> ✅ Idioms are project-specific; verify they apply to the current codebase",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 34,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 134,
+      "memory_type": "semantic",
+      "content": "❌ **Forbidden:** Declaring a task complete because the output \"looks correct.\"",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 20,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 135,
+      "memory_type": "semantic",
+      "content": "✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 54,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 136,
+      "memory_type": "semantic",
+      "content": "[ ] Have I reviewed the user's specific constraints and requests?",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 17,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 137,
+      "memory_type": "semantic",
+      "content": "[ ] Have I checked the environment for relevant existing implementations?",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 19,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 138,
+      "memory_type": "semantic",
+      "content": "❌ **Forbidden:** Declaring a task complete because the output \"looks correct.\"",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 20,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 139,
+      "memory_type": "semantic",
+      "content": "✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.",
+      "tags": [
+        "project-idiom",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 54,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 140,
+      "memory_type": "procedural",
+      "content": "Run `echo 'No build step required for this project'` to build the project",
+      "tags": [
+        "build-script",
+        "build",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 19,
+      "source": "manual",
+      "session_id": null
+    },
+    {
+      "id": 141,
+      "memory_type": "procedural",
+      "content": "Run `npm run validate-payload && jest --coverage` to test the project",
+      "tags": [
+        "build-script",
+        "test",
+        "auto-learned"
+      ],
+      "created_at": "1784396209Z",
+      "last_accessed": "1784396209Z",
+      "access_count": 0,
+      "token_estimate": 18,
+      "source": "manual",
+      "session_id": null
     }
   ],
-  "next_id": 112
+  "next_id": 142
 }

package/.agent/history/memory/MEMORY.md

@@ -1,6 +1,6 @@
 # 🧠 Tribunal Memory Index
 > Auto-generated by `tribunal-kit memory export`. Do not edit manually.
-> Entries: 111 | Semantic: 89 | Procedural: 22 | Episodic: 0 | Working: 0
+> Entries: 141 | Semantic: 113 | Procedural: 28 | Episodic: 0 | Working: 0
 
 ## SEMANTIC (Permanent Facts)
 | ID | Content | Tags | Source | Created |
@@ -94,6 +94,30 @@
 | 107 | [ ] Have I checked the environment for relevant existing implementations? | project-idiom, auto-learned | manual | 1783785670Z |
 | 108 | ❌ **Forbidden:** Declaring a task complete because the output "looks correct." | project-idiom, auto-learned | manual | 1783785670Z |
 | 109 | ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended. | project-idiom, auto-learned | manual | 1783785670Z |
+| 112 | ❌ Overriding project idioms without explicit justification -> ✅ Idioms represent team decisions; flag deviations with reasoning | project-idiom, auto-learned | manual | 1783790009Z |
+| 113 | ❌ Applying idioms from one project to a different project -> ✅ Idioms are project-specific; verify they apply to the current codebase | project-idiom, auto-learned | manual | 1783790009Z |
+| 114 | ❌ **Forbidden:** Declaring a task complete because the output "looks correct." | project-idiom, auto-learned | manual | 1783790009Z |
+| 115 | ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended. | project-idiom, auto-learned | manual | 1783790009Z |
+| 116 | [ ] Have I reviewed the user's specific constraints and requests? | project-idiom, auto-learned | manual | 1783790009Z |
+| 117 | [ ] Have I checked the environment for relevant existing implementations? | project-idiom, auto-learned | manual | 1783790009Z |
+| 118 | ❌ **Forbidden:** Declaring a task complete because the output "looks correct." | project-idiom, auto-learned | manual | 1783790009Z |
+| 119 | ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended. | project-idiom, auto-learned | manual | 1783790009Z |
+| 122 | ❌ Overriding project idioms without explicit justification -> ✅ Idioms represent team decisions; flag deviations with reasoning | project-idiom, auto-learned | manual | 1784187808Z |
+| 123 | ❌ Applying idioms from one project to a different project -> ✅ Idioms are project-specific; verify they apply to the current codebase | project-idiom, auto-learned | manual | 1784187808Z |
+| 124 | ❌ **Forbidden:** Declaring a task complete because the output "looks correct." | project-idiom, auto-learned | manual | 1784187808Z |
+| 125 | ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended. | project-idiom, auto-learned | manual | 1784187808Z |
+| 126 | [ ] Have I reviewed the user's specific constraints and requests? | project-idiom, auto-learned | manual | 1784187808Z |
+| 127 | [ ] Have I checked the environment for relevant existing implementations? | project-idiom, auto-learned | manual | 1784187808Z |
+| 128 | ❌ **Forbidden:** Declaring a task complete because the output "looks correct." | project-idiom, auto-learned | manual | 1784187808Z |
+| 129 | ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended. | project-idiom, auto-learned | manual | 1784187808Z |
+| 132 | ❌ Overriding project idioms without explicit justification -> ✅ Idioms represent team decisions; flag deviations with reasoning | project-idiom, auto-learned | manual | 1784396209Z |
+| 133 | ❌ Applying idioms from one project to a different project -> ✅ Idioms are project-specific; verify they apply to the current codebase | project-idiom, auto-learned | manual | 1784396209Z |
+| 134 | ❌ **Forbidden:** Declaring a task complete because the output "looks correct." | project-idiom, auto-learned | manual | 1784396209Z |
+| 135 | ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended. | project-idiom, auto-learned | manual | 1784396209Z |
+| 136 | [ ] Have I reviewed the user's specific constraints and requests? | project-idiom, auto-learned | manual | 1784396209Z |
+| 137 | [ ] Have I checked the environment for relevant existing implementations? | project-idiom, auto-learned | manual | 1784396209Z |
+| 138 | ❌ **Forbidden:** Declaring a task complete because the output "looks correct." | project-idiom, auto-learned | manual | 1784396209Z |
+| 139 | ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended. | project-idiom, auto-learned | manual | 1784396209Z |
 
 ## PROCEDURAL (How-To Recipes)
 | ID | Content | Tags | Source | Created |
@@ -120,4 +144,10 @@
 | 100 | Run `npm run validate-payload && jest --coverage` to test the project | build-script, test, auto-learned | manual | 1783782132Z |
 | 110 | Run `echo 'No build step required for this project'` to build the project | build-script, build, auto-learned | manual | 1783785670Z |
 | 111 | Run `npm run validate-payload && jest --coverage` to test the project | build-script, test, auto-learned | manual | 1783785670Z |
+| 120 | Run `echo 'No build step required for this project'` to build the project | build-script, build, auto-learned | manual | 1783790009Z |
+| 121 | Run `npm run validate-payload && jest --coverage` to test the project | build-script, test, auto-learned | manual | 1783790009Z |
+| 130 | Run `echo 'No build step required for this project'` to build the project | build-script, build, auto-learned | manual | 1784187808Z |
+| 131 | Run `npm run validate-payload && jest --coverage` to test the project | build-script, test, auto-learned | manual | 1784187808Z |
+| 140 | Run `echo 'No build step required for this project'` to build the project | build-script, build, auto-learned | manual | 1784396209Z |
+| 141 | Run `npm run validate-payload && jest --coverage` to test the project | build-script, test, auto-learned | manual | 1784396209Z |
 

package/.agent/rules/GEMINI.md

@@ -78,7 +78,7 @@ Every code or design request activates an agent. This is not optional.
 | ------------------------------------------------------- | --------------------------- |
 | API / server / backend                                  | `backend-specialist`        |
 | API contract design / REST / GraphQL                    | `api-architect`             |
-| C# / .NET / Blazor                                      | `dotnet-core-expert`        |
+| C# / .NET / Blazor                                      | `csharp-developer`          |
 | Python / FastAPI / Django                               | `python-pro`                |
 | Database / schema / SQL                                 | `database-architect`        |
 | Advanced SQL queries                                    | `sql-pro`                   |
@@ -114,7 +114,7 @@ Every code or design request activates an agent. This is not optional.
 | System design / scale / capacity planning               | `system-architect`          |
 | Cloud infrastructure / AWS / Terraform / Docker / CI-CD | `cloud-engineer`            |
 
-> **Agent vs Skill:** Some entries above (e.g., `python-pro`, `vue-expert`, `dotnet-core-expert`, `sql-pro`, `react-specialist`, `platform-engineer`, `devops-incident-responder`) are **skills** loaded from `skills/SKILL.md`, not full agent definitions in `agents/`. The routing and announcement protocol still applies — load the skill's rules and announce it. If an `.md` file exists in `agents/`, it takes priority (P1) over the skill (P2).
+> **Agent vs Skill:** Some entries above (e.g., `python-pro`, `vue-expert`, `csharp-developer`, `sql-pro`, `react-specialist`, `platform-engineer`, `devops-incident-responder`) are **skills** loaded from `skills/SKILL.md`, not full agent definitions in `agents/`. The routing and announcement protocol still applies — load the skill's rules and announce it. If an `.md` file exists in `agents/`, it takes priority (P1) over the skill (P2).
 
 **When activated, announce the agent:**
 
@@ -215,8 +215,8 @@ The Human Gate is never skipped. No code is written to a file without explicit u
 
 **Reviewer assignment by domain:**
 
-| Code type             | Reviewers                                                                                           |
-| --------------------- | --------------------------------------------------------------------------------------------------- |
+| Code type             | Reviewers                                                                     |
+| --------------------- | ----------------------------------------------------------------------------- |
 | Backend/API           | logic + security + dependency + type-safety + resilience + schema + complexity-reviewer             |
 | Frontend/React        | logic + security + frontend + type-safety + ui-ux-auditor + review-animations + complexity-reviewer |
 | Database/SQL          | logic + security + sql + schema + complexity-reviewer                                               |
@@ -281,17 +281,17 @@ These scripts live in `.agent/scripts/`. Agents and skills can invoke them:
 
 | Script                     | Purpose                                           | When                                          |
 | -------------------------- | ------------------------------------------------- | --------------------------------------------- |
-| `checklist.py`             | Priority audit: Security→Lint→Schema→Tests→UX→SEO | Before/after any major change                 |
-| `verify_all.py`            | Full pre-deploy validation suite                  | Pre-deploy                                    |
-| `auto_preview.py`          | Start/stop/restart local dev server               | After /create or /enhance                     |
+| `checklist.js`             | Priority audit: Security→Lint→Schema→Tests→UX→SEO | Before/after any major change                 |
+| `verify_all.js`            | Full pre-deploy validation suite                  | Pre-deploy                                    |
+| `auto_preview.js`          | Start/stop/restart local dev server               | After /create or /enhance                     |
 | `session_manager.js`       | Track session state between conversations         | Multi-session work                            |
-| `lint_runner.py`           | Standalone lint runner (ESLint, Prettier, Ruff)   | Every code change                             |
-| `test_runner.py`           | Standalone test runner (Jest, Vitest, pytest, Go) | After logic changes                           |
-| `security_scan.py`         | Deep OWASP-aware source code security scan        | Always on deploy, /audit                      |
-| `dependency_analyzer.py`   | Unused/phantom deps, npm audit                    | Weekly, /audit                                |
-| `schema_validator.py`      | Database schema validation (Prisma, SQL)          | After DB changes                              |
-| `bundle_analyzer.py`       | JS/TS bundle size analysis                        | Before deploy                                 |
-| `skill_integrator.py`      | Maps active skills to their executable scripts    | Automatically when skills are invoked         |
+| `lint_runner.js`           | Standalone lint runner (ESLint, Prettier, Ruff)   | Every code change                             |
+| `test_runner.js`           | Standalone test runner (Jest, Vitest, pytest, Go) | After logic changes                           |
+| `security_scan.js`         | Deep OWASP-aware source code security scan        | Always on deploy, /audit                      |
+| `dependency_analyzer.js`   | Unused/phantom deps, npm audit                    | Weekly, /audit                                |
+| `schema_validator.js`      | Database schema validation (Prisma, SQL)          | After DB changes                              |
+| `bundle_analyzer.js`       | JS/TS bundle size analysis                        | Before deploy                                 |
+| `skill_integrator.js`      | Maps active skills to their executable scripts    | Automatically when skills are invoked         |
 | `swarm_dispatcher.js`      | Validate Orchestrator micro-worker JSON payloads  | After /orchestrate, before dispatching agents |
 | `test_swarm_dispatcher.js` | Unit tests for swarm_dispatcher                   | After modifying swarm_dispatcher.js           |
 
@@ -301,12 +301,12 @@ These scripts live in `.agent/scripts/`. Agents and skills can invoke them:
 node .agent/scripts/checklist.js .
 node .agent/scripts/verify_all.js
 node .agent/scripts/security_scan.js .
-python .agent/scripts/lint_runner.py . --fix
-python .agent/scripts/test_runner.py . --coverage
-python .agent/scripts/dependency_analyzer.py . --audit
-python .agent/scripts/schema_validator.py .
-python .agent/scripts/bundle_analyzer.py . --build
-python .agent/scripts/skill_integrator.py
+node .agent/scripts/lint_runner.js . --fix
+node .agent/scripts/test_runner.js . --coverage
+node .agent/scripts/dependency_analyzer.js . --audit
+node .agent/scripts/schema_validator.js .
+node .agent/scripts/bundle_analyzer.js . --build
+node .agent/scripts/skill_integrator.js
 node .agent/scripts/swarm_dispatcher.js --file payload.json
 npx jest test/integration/swarm_dispatcher.test.js
 ```
@@ -409,18 +409,21 @@ Before modifying any file:
 ## Fabel-5 Cognitive Boundaries (Wellbeing, Evenhandedness, Memory)
 
 ### User Wellbeing & Safety
-* **No Psychoanalysis / Diagnosis**: Reflect what is said without diagnosing or assigning psychological narratives (e.g. "you restrict because of trauma"). Suggest professional help without clinical labels.
-* **Self-Harm Interruptions**: Never suggest physical substitutes (holding ice, snapping rubber bands, drawing lines) or mimic self-harm. They reinforce the self-harm loop.
-* **No Over-reliance**: Do not thank the user for reaching out, encourage them to stay, or reiterate willingness to continue. Avoid conversational dependencies.
-* **Positive Paths**: Acknowledge distress without reflective listening that amplifies negative spirals. Keep paths to external help open.
+
+- **No Psychoanalysis / Diagnosis**: Reflect what is said without diagnosing or assigning psychological narratives (e.g. "you restrict because of trauma"). Suggest professional help without clinical labels.
+- **Self-Harm Interruptions**: Never suggest physical substitutes (holding ice, snapping rubber bands, drawing lines) or mimic self-harm. They reinforce the self-harm loop.
+- **No Over-reliance**: Do not thank the user for reaching out, encourage them to stay, or reiterate willingness to continue. Avoid conversational dependencies.
+- **Positive Paths**: Acknowledge distress without reflective listening that amplifies negative spirals. Keep paths to external help open.
 
 ### Moral & Political Evenhandedness
-* **Nuance Over Brevity**: Reject requests for simple yes/no or one-word answers on contested political, ethical, or policy issues. Give a fair, balanced overview of existing positions.
-* **Opposing Perspectives**: Conclude arguments for positions by presenting opposing viewpoints or empirical disputes even if the user/AI agrees with the primary view.
+
+- **Nuance Over Brevity**: Reject requests for simple yes/no or one-word answers on contested political, ethical, or policy issues. Give a fair, balanced overview of existing positions.
+- **Opposing Perspectives**: Conclude arguments for positions by presenting opposing viewpoints or empirical disputes even if the user/AI agrees with the primary view.
 
 ### Memory & Preference Boundaries
-* **Invisible Integration**: Integrate remembered user context silently without attribution or observation verbs ("I notice in your profile...", "Based on your memory...").
-* **Expertise Tuning**: Match language and technical depth to the user's stated background without lecturing.
+
+- **Invisible Integration**: Integrate remembered user context silently without attribution or observation verbs ("I notice in your profile...", "Based on your memory...").
+- **Expertise Tuning**: Match language and technical depth to the user's stated background without lecturing.
 
 ---