tribunal-kit 5.8.5 → 6.0.0

package/.agent/skills/build-primitive/SKILL.md

@@ -1,20 +1,29 @@
 ---
 name: build-primitive
 description: Build foundational, unstyled, accessible UI primitives from scratch with strong ARIA attributes, keyboard navigation, focus traps, and state management. Use when creating custom Headless UI components (Dialog, Combobox, Accordion, Popover, Menu).
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: Headless UI & Accessible Primitives
-  tier: pro
-  co-requires: [web-accessibility-auditor, react-specialist]
-  trigger-signals:
-    strong: [build-primitive, headless UI, custom dialog primitive, custom popover, accessible primitive, ARIA combobox, keyboard navigation primitive]
-    weak: [custom component, headless component]
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - react-specialist
+  - baseline-ui
+  - better-ui
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Build Primitive — Headless & Accessible UI Primitives
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before building headless UI primitives, you MUST inspect:
+1. WAI-ARIA Design Patterns (Section 24) → Attach exact roles (`dialog`, `combobox`, `tablist`), `aria-expanded`, and ID associations (`aria-labelledby`, `aria-describedby`)
+2. Focus Traps & Restoration (Section 29) → Trap focus inside modals on open; return focus to trigger on close; dismiss on `Escape`
+3. Data Attributes (Section 41) → Expose clean `data-state="open|closed"` and `data-disabled` attributes for unstyled CSS consumer integration
+
 Build rock-solid, framework-agnostic or React headless UI primitives with complete ARIA pattern compliance, keyboard control, and focus management.
 
 ---

package/.agent/skills/building-native-ui/SKILL.md

@@ -1,15 +1,29 @@
 ---
 name: building-native-ui
 description: Cross-platform Native UI mastery (React Native / Expo). Building seamless, 60fps mobile interfaces, handling safe areas, navigation architectures (Expo Router), native modules, gestures/animations (Reanimated), and platform-specific styling. Use when building React Native or Expo mobile apps.
-allowed-tools: Read, Write, Edit, Glob, Grep
-version: 2.0.0
-last-updated: 2026-04-02
-applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
-routing:
-  domain: general
-  tier: basic
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - mobile-design
+  - react-specialist
+  - 60fps-animation
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
+# Building Native UI — React Native & Expo Mastery
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before building React Native / Expo UI components, you MUST inspect:
+1. Safe Area Setup → Use `SafeAreaProvider` + `useSafeAreaInsets()` for granular notch/inset handling instead of raw `SafeAreaView`
+2. Virtualized List Rendering (Section 130) → Use `FlashList` (Shopify) or `FlatList` with `estimatedItemSize` instead of `ScrollView` for large lists
+3. Native Thread Animations (Section 99) → Use `react-native-reanimated` with `useSharedValue` to keep animations off the JS bridge thread
+
 ## Hallucination Traps (Read First)
 
 - ❌ `SafeAreaView` wrapping everything -> ✅ Use `SafeAreaProvider` + `useSafeAreaInsets()` for granular control

package/.agent/skills/cicd-pro/SKILL.md

@@ -1,18 +1,29 @@
 ---
 name: cicd-pro
 description: Enterprise-grade CI/CD mastery. Golden Path - GitHub Actions + Docker + AWS ECS. 3-stage pipeline architecture (Validate→Build→Deploy), OIDC-based AWS auth (no static secrets), Blue/Green and Canary deployment with ECS, environment promotion gates (dev→staging→production), rollback playbooks, Slack notifications, and reusable workflow patterns. Use when designing or implementing production CI/CD pipelines.
-allowed-tools: Read, Write, Edit, Glob, Grep
-version: 1.0.0
-last-updated: 2026-06-21
-applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
-routing:
-  domain: devops
-  tier: pro
-  co-requires: [containerization-pro, cloud-architect]
-  trigger-signals:
-    strong: [CI/CD pipeline, GitHub Actions, Blue/Green deploy, OIDC AWS]
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - containerization-pro
+  - cloud-architect
+  - devops-engineer
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
+# CI/CD Pro — Enterprise Pipeline Mastery
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before designing CI/CD workflows or deployment scripts, you MUST inspect:
+1. Concurrency Mutex Requirement (Section 18) → Configure top-level `concurrency:` blocks in GitHub Actions workflows to prevent parallel deploy collisions
+2. OIDC Authentication Protocol (Section 20) → Use OIDC (`id-token: write` permission) for AWS/cloud credentials; ban static access keys in secrets
+3. Production Promotion Gates (Section 21) → Enforce environment promotion gates (`staging` → `production` with manual reviewers) before deploying
+
 ## Hallucination Traps (Read First)
 
 - ❌ Missing `concurrency:` block → ✅ Without it, parallel deploys collide and corrupt production state

package/.agent/skills/clarify/SKILL.md

@@ -1,20 +1,29 @@
 ---
 name: clarify
 description: Improve UX microcopy, label optimization, error messages, and cognitive clarity. Use when text in a UI is confusing, wordy, ambiguous, or unhelpful.
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: UX Writing & Microcopy
-  tier: pro
-  co-requires: [distill, shape]
-  trigger-signals:
-    strong: [clarify, UX copy, microcopy, error message copy, button labels, cognitive clarity, clear writing]
-    weak: [fix text, rewording, rewrite label]
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - distill
+  - shape
+  - baseline-ui
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Clarify — UX Microcopy & Cognitive Clarity
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before optimizing UI text or error messages, you MUST inspect:
+1. Target UI labels & modals → Check for vague "Submit" or "OK" buttons and passive corporate jargon
+2. Active Verb Rules (Section 24) → Ensure action buttons start with specific verbs describing outcomes (e.g. *Save changes*, *Download export*)
+3. Actionable Error Messages (Section 30) → Pair error descriptions with explicit resolution steps
+
 Optimize user interface text, button labels, error messaging, and helper copy for maximum clarity and minimum cognitive friction.
 
 ---

package/.agent/skills/clean-code/SKILL.md

@@ -1,15 +1,29 @@
 ---
 name: clean-code
 description: Clean code mastery. Naming conventions, function design, DRY vs WET, SOLID principles with code examples, refactoring patterns, code smells detection, error handling philosophy, comments that add value, and the art of simplicity. Use when reviewing code quality, refactoring, or establishing coding standards.
-allowed-tools: Read, Write, Edit, Glob, Grep
-version: 2.0.0
-last-updated: 2026-04-01
-applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
-routing:
-  domain: general
-  tier: basic
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - codebase-design
+  - code-review-checklist
+  - tdd-workflow
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
+# Clean Code — The Art of Readable Software
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before refactoring code or evaluating clean code standards, you MUST inspect:
+1. Intent-Revealing Naming (Section 25) → Name variables/functions to reveal explicit intent; ban cryptic abbreviations (`d`, `proc`, `u`)
+2. Single-Purpose Functions (Section 95) → Ensure functions perform 1 single task; extract sub-operations if function exceeds ~30 lines
+3. Guard Clause Early Returns (Section 344) → Flatten nested logic (>3 levels) using guard clauses and fail-fast early returns
+
 ## Hallucination Traps (Read First)
 
 - ❌ Over-abstracting code that is used in only one place -> ✅ Don't DRY single-use code; premature abstraction is worse than duplication

package/.agent/skills/cloud-architect/SKILL.md

@@ -1,18 +1,29 @@
 ---
 name: cloud-architect
 description: Production AWS cloud architecture mastery. Service selection (ECS Fargate vs Lambda vs EC2, RDS vs Aurora vs DynamoDB), Terraform IaC patterns with HCL examples, VPC networking design, IAM least privilege, Secrets Manager, CloudWatch observability, cost optimization, and multi-environment AWS Organizations strategy. Golden Path - AWS. Use when architecting cloud infrastructure, writing Terraform, or making AWS service selection decisions.
-allowed-tools: Read, Write, Edit, Glob, Grep
-version: 1.0.0
-last-updated: 2026-06-21
-applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
-routing:
-  domain: devops
-  tier: pro
-  co-requires: [cicd-pro]
-  trigger-signals:
-    strong: [AWS, Terraform, ECS Fargate, VPC design, IAM]
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - cicd-pro
+  - devops-engineer
+  - platform-engineer
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
+# Cloud Architect — Production AWS Mastery
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before architecting AWS cloud infrastructure or writing Terraform HCL, you MUST inspect:
+1. Dynamic Account ID & Region Resolution (Section 20) → Use `data.aws_caller_identity.current.account_id` and `var.region`; ban hardcoded account IDs or ARNs
+2. Private Subnet Application Placement (Section 23) → Place application compute (ECS, Lambda) strictly in private subnets; only ALB and NAT Gateway live in public subnets
+3. Secrets Manager Secret Injection (Section 21) → Reference secret ARNs from AWS Secrets Manager in ECS task definitions; ban plaintext environment variables for passwords/tokens
+
 ## Hallucination Traps (Read First)
 
 - ❌ Confusing availability zones with regions → ✅ `us-east-1` is a region. `us-east-1a` is an AZ within that region. Multi-AZ ≠ multi-region.

package/.agent/skills/cobejs/SKILL.md

@@ -1,20 +1,29 @@
 ---
 name: cobejs
 description: Build lightweight, hardware-accelerated 3D interactive animated globes and web orbs using Cobe WebGL.
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: 3D Graphics & Canvas Visuals
-  tier: pro
-  co-requires: [60fps-animation, threejs-fundamentals]
-  trigger-signals:
-    strong: [cobejs, Cobe globe, 3D animated globe, interactive WebGL globe, Cobe orb]
-    weak: [globe component, 3D globe]
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - 60fps-animation
+  - motion-engineering
+  - baseline-ui
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Cobe JS — Lightweight 3D WebGL Globe Visuals
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before building WebGL 3D globe components with Cobe, you MUST inspect:
+1. `package.json` → Verify `cobe` dependency exists
+2. WebGL Context Cleanup (Section 59) → Ensure `globe.destroy()` is called in the `useEffect` unmount cleanup to prevent memory leaks
+3. Canvas Sizing (Section 65) → Match `devicePixelRatio` to high-DPI screens and set `aspectRatio: 1` to prevent visual stretching
+
 Integrate ultra-fast, 5KB WebGL interactive globes for landing page hero sections and interactive location maps.
 
 ---

package/.agent/skills/code-review-checklist/SKILL.md

@@ -1,19 +1,33 @@
 ---
 name: code-review-checklist
 description: Code review guidelines covering code quality, security, and best practices.
-allowed-tools: Read, Write, Edit, Glob, Grep
-version: 1.0.0
-last-updated: 2026-03-12
-applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
-routing:
-  domain: general
-  tier: basic
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - clean-code
+  - lint-and-validate
+  - thermo-nuclear-code-quality-review
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Code Review Standards
 
 ---
 
+## Mandatory Pre-Flight Context Inspection
+
+Before performing code reviews or writing PR comments, you MUST inspect:
+1. Label Convention Standardization (Section 27) → Categorize all feedback into `BLOCKER:`, `CONCERN:`, `SUGGESTION:`, or `NOTE:`
+2. Context Window Discipline (Section 120) → Quote concise 1-3 line snippets with line numbers; ban pasting massive blocks of unchanged code
+3. Anti-Nitpicking Rule (Section 130) → Delegate syntax/formatting formatting checks to linters (`eslint`/Prettier); focus reviews on logic and security
+
+# Code Review Standards
+
+---
+
 ## Review Mindset
 
 Reviews are collaborative. The goal is better code — not proof that the reviewer is smarter.

package/.agent/skills/codebase-design/SKILL.md

@@ -1,20 +1,31 @@
 ---
 name: codebase-design
 description: Guidance for designing deep modules with small interfaces and clean seams. Use when structuring a new module, refactoring complex codebases, or designing internal library boundaries.
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: Software Architecture & Module Design
-  tier: pro
-  co-requires: [clean-code, architecture, domain-modeling]
-  trigger-signals:
-    strong: [codebase-design, deep modules, small interfaces, clean seams, module boundary, software architecture design]
-    weak: [module design, refactor module]
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - architecture
+  - clean-code
+  - domain-modeling
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Codebase Design — Deep Modules & Clean Seams
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before designing module boundaries or internal libraries, you MUST inspect:
+1. Deep Module Ratio Rule (Section 25) → Create deep modules (small simple interface hiding heavy internal complexity); ban shallow 1-line wrapper functions
+2. Strict Information Hiding (Section 46) → Keep internal data structures and vendor clients strictly private (`#privateField`); ban leaking internal ORM/DB types in public APIs
+3. Policy vs Mechanism Separation (Section 53) → Separate generic execution mechanisms (SQL queries, HTTP fetches) from domain business policies (retry rules, validation)
+
+# Codebase Design — Deep Modules & Clean Seams
+
 Architect software with **deep modules**: modules that hide immense internal complexity behind small, simple, intuitive interface seams.
 
 ---

package/.agent/skills/colorize/SKILL.md

@@ -1,20 +1,29 @@
 ---
 name: colorize
 description: Introduce strategic, harmonious, accessible color systems and OKLCH color palettes to visually flat or dull interfaces.
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: Color Systems & Palette Engineering
-  tier: pro
-  co-requires: [better-colors, frontend-design]
-  trigger-signals:
-    strong: [colorize, color system, OKLCH palette, introduce color, color palette generator, UI color tokens]
-    weak: [add color, theme colors]
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - better-colors
+  - baseline-ui
+  - better-ui
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Colorize — Color System & OKLCH Palette Design
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before designing color systems or applying color palettes, you MUST inspect:
+1. OKLCH Color Space (Section 24) → Use `oklch(L C H)` custom properties for uniform perceptual lightness across light/dark themes
+2. 60-30-10 Budget Rule (Section 39) → 60% Dominant Neutral (surfaces), 30% Structural Secondary (text/borders), 10% Intentional Accent (actions)
+3. Status Token Uniformity (Section 45) → Keep status color lightness consistent ($L \approx 0.60$–$0.72$) across Success, Warning, Destructive, and Info scales
+
 Architect uniform, perceptually balanced color scales using the modern OKLCH color space for light and dark modes.
 
 ---

package/.agent/skills/compact-landing/SKILL.md

@@ -1,20 +1,29 @@
 ---
 name: compact-landing
 description: Build compact, premium landing pages with clear CTA hierarchy, quiet typography, restrained visual noise, and high conversion flow.
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: Compact Landing Page & Minimalist UI
-  tier: pro
-  co-requires: [landing-page, quieter, baseline-ui]
-  trigger-signals:
-    strong: [compact-landing, compact landing page, quiet typography, minimal landing page, restrained UI, high-conversion compact]
-    weak: [simple landing, compact page]
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - landing-page
+  - quieter
+  - baseline-ui
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Compact Landing — Premium Minimalist Landing Pages
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before engineering compact landing pages, you MUST inspect:
+1. Viewport Fit (Section 24) → Fit hero, preview, and primary CTA inside a single 1080p desktop viewport without initial scrolling
+2. Section Limit (Section 35) → Limit total page structure to max 4 tight sections (Hero, Social Proof, 3-Benefit Grid, Footer Card)
+3. Typography Restraint (Section 30) → Cap display font sizes at `clamp(1.75rem, 4vw, 2.75rem)` and apply `text-wrap: balance`
+
 Build tight, ultra-focused, high-converting landing pages that deliver value quickly without unnecessary multi-scroll filler.
 
 ---

package/.agent/skills/company-logos/SKILL.md

@@ -1,20 +1,29 @@
 ---
 name: company-logos
 description: Social proof rows, logo grids, customer carousels, and trust badges layout rules for balanced visual weight and responsive alignment.
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: Visual Layout & Social Proof
-  tier: pro
-  co-requires: [baseline-ui, landing-page]
-  trigger-signals:
-    strong: [company-logos, logo grid, social proof row, trust badges, customer logos, logo carousel]
-    weak: [logos layout, client logos]
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - baseline-ui
+  - landing-page
+  - marquee-loop
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Company Logos — Social Proof & Trust Grids
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before designing logo grids or trust rows, you MUST inspect:
+1. Optical Weight Normalization rules (Section 24) → Enforce bounding box limits (`max-height: 28px`, `max-width: 120px`) with `object-fit: contain`
+2. Monochromatic Harmonization rules (Section 29) → Render all logos in monochromatic SVG fill (`fill="currentColor"`) matching `--text-muted`
+3. Hover States → Transition opacity to 100% smoothly over `200ms` on hover
+
 Architect balanced, optically aligned logo rows and trust grids that communicate credibility without visual clutter.
 
 ---

package/.agent/skills/config-validator/SKILL.md

@@ -1,15 +1,29 @@
 ---
 name: config-validator
 description: Configuration validation and workspace self-auditing mastery. Verifying .agent directory integrity, checking JSON schemas, resolving broken pointers to missing scripts/skills, validating environment states, and enforcing configuration constraints before execution. Use when loading settings, modifying manifests, or diagnosing system configuration rot.
-allowed-tools: Read, Write, Edit, Glob, Grep
-version: 2.0.0
-last-updated: 2026-04-02
-applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
-routing:
-  domain: general
-  tier: basic
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - lint-and-validate
+  - backend-security-expert
+  - clean-code
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
+# Config Validator — System Integrity Mastery
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before parsing or mutating configuration files or environment variables, you MUST inspect:
+1. Fail-Fast Boundary Parsing (Section 25) → Validate configurations at startup boundary via Zod schema (`ConfigSchema.parse()`); fail fast on invalid configs
+2. Referential Integrity Audit (Section 60) → Audit referenced assets (scripts, SKILL.md, workflow paths) for physical existence before execution
+3. Atomic File Writes (Section 111) → Write updated configs to `.tmp` files and perform OS atomic rename to prevent file corruption during crashes
+
 ## Hallucination Traps (Read First)
 
 - ❌ Silently using default values for missing config -> ✅ Fail fast with a clear error message naming the missing field

package/.agent/skills/containerization-pro/SKILL.md

@@ -1,18 +1,29 @@
 ---
 name: containerization-pro
 description: Production-grade containerization mastery. Multi-stage Dockerfiles for Node.js/Python/Rust/Go, image hardening (non-root, distroless, read-only FS), BuildKit layer caching, multi-platform builds (docker buildx), Docker Compose for local dev, container security scanning (Trivy/Grype), and AWS ECR workflows. Use when containerizing applications, optimizing Docker builds, or setting up container registries.
-allowed-tools: Read, Write, Edit, Glob, Grep
-version: 1.0.0
-last-updated: 2026-06-21
-applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
-routing:
-  domain: devops
-  tier: pro
-  co-requires: [cicd-pro]
-  trigger-signals:
-    strong: [multi-stage build, BuildKit, ECR, Trivy, image hardening, Docker Compose]
+tools: Read, Grep, Glob, Bash, Edit, Write
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - devops-engineer
+  - cicd-pro
+  - cloud-architect
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
+# Containerization Pro — Production-Grade Docker Mastery
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before writing Dockerfiles or containerizing applications, you MUST inspect:
+1. Dockerignore Prerequisite (Section 29) → Create a strict `.dockerignore` file before writing any Dockerfile to prevent leaking `node_modules`, `.env`, `.git`
+2. Non-Root Security User (Section 81) → Create and switch to a dedicated non-root user (`USER appuser`) in the final runtime stage
+3. Deterministic Dependency Installation (Section 19) → Use `npm ci --omit=dev` (or language lockfile equivalent); ban un-pinned `npm install`
+
 ## Hallucination Traps (Read First)
 
 - ❌ `FROM node:22` → ✅ `FROM node:22-alpine` (1GB+ vs ~150MB). Always use slim/alpine variants.

package/.agent/skills/create-design-md/SKILL.md

@@ -1,20 +1,29 @@
 ---
 name: create-design-md
 description: Create or update a DESIGN.md from an existing product repository or public website, with evidence-based design tokens and guidance. Use when asked to document an interface's design language, reconstruct its visual system, extract design tokens, or give coding agents persistent UI context.
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: UI Craft & Design Engineering
-  tier: pro
-  co-requires: [extract-design-system, frontend-design]
-  trigger-signals:
-    strong: [create-design-md, DESIGN.md, extract design tokens, document design language, visual system documentation]
-    weak: [design tokens, theme docs]
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - baseline-ui
+  - better-ui
+  - better-colors
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Create DESIGN.md — Evidence-Based Design System Specification
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before extracting design tokens or authoring `DESIGN.md`, you MUST inspect:
+1. Operating Mode (Section 22) → Choose Repository Mode (scan `globals.css` / `theme.ts` / primitives) or URL Mode (3-proof observation)
+2. Contract Schema (Section 41) → Enforce strict 5-section layout (Identity, Colors, Typography, Spacing/Geometry, Motion)
+3. Read-Only Safety (Section 86) → NEVER mutate product source code while extracting tokens or creating `DESIGN.md`
+
 Generate or update an authoritative `DESIGN.md` file for a product repository or website by extracting verified design tokens, components, and layout guidance.
 
 ---

package/.agent/skills/critique/SKILL.md

@@ -1,20 +1,29 @@
 ---
 name: critique
 description: Evaluate design quality with structured UX scoring, heuristic analysis, and persona-based usability checks. Use when asked to critique, evaluate, grade, or audit a UI design before implementation.
-version: 1.0.0
-last-updated: 2026-07-22
-applies-to-model: gemini-3-6-flash, claude-3-7-sonnet
-routing:
-  domain: Design Evaluation & Usability Scoring
-  tier: pro
-  co-requires: [ui-ux-researcher, web-design-guidelines]
-  trigger-signals:
-    strong: [critique, grade UI, evaluate design, UX scoring, heuristic audit, design feedback]
-    weak: [review UI, UX feedback]
+version: 3.0.0
+last-updated: 2026-07-30
+skills:
+  - ui-ux-researcher
+  - web-design-guidelines
+  - baseline-ui
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/checklist.js
+  - .agent/scripts/verify_all.js
 ---
 
 # Critique — Structured UX & Design Quality Evaluation
 
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Before evaluating UI designs or code, you MUST inspect:
+1. Target UI screen / component → Grade across the 6 UX Critique Heuristics (Clarity, IA, Interactions, Visual Craft, Accessibility, Resilience)
+2. Required Scorecard Format (Section 51) → Output overall quality score (0-10) and tabular domain breakdown
+3. Top 3 Actionable Fixes → Group recommendations by priority (High, Medium, Low) with concrete CSS/JSX fixes
+
 Evaluate interfaces against 6 core usability heuristics and produce an objective design scorecard with prioritized recommendations.
 
 ---