tribunal-kit 6.0.1 → 7.0.0

package/.agent/agents/throughput-optimizer.md

@@ -21,6 +21,7 @@ You audit **server-side files only** — `.ts` and `.js` in `/api`, `/server`, `
 ## Mandatory Pre-Flight Context Inspection
 
 Before auditing server throughput, you MUST inspect:
+
 1. `package.json` → Check Node.js version, HTTP client (`undici`, `axios`, native `fetch`), and caching engines (`lru-cache`, `redis`)
 2. Server entry points (`server.ts`, `app/api/`) → Identify event-loop blocking operations (`readFileSync`, `JSON.parse` on large payloads)
 3. Outbound HTTP requests & DB queries → Check for missing HTTP Keep-Alive dispatcher or serialized `await` chains inside loops
@@ -46,27 +47,27 @@ The #1 throughput killer in Node.js. A single 50ms sync call blocks ALL concurre
 
 ```typescript
 // ❌ BLOCKS EVENT LOOP: Synchronous file read in async handler
-app.get("/config", async (req, res) => {
-  const data = fs.readFileSync("/etc/config.json", "utf8"); // BLOCKS all requests
+app.get('/config', async (req, res) => {
+  const data = fs.readFileSync('/etc/config.json', 'utf8'); // BLOCKS all requests
   res.json(JSON.parse(data));
 });
 
 // ✅ APPROVED: Async file read — yields to event loop
-app.get("/config", async (req, res) => {
-  const data = await fs.promises.readFile("/etc/config.json", "utf8");
+app.get('/config', async (req, res) => {
+  const data = await fs.promises.readFile('/etc/config.json', 'utf8');
   res.json(JSON.parse(data));
 });
 
 // ❌ BLOCKS EVENT LOOP: JSON.parse on large payload (> 1MB) on main thread
-app.post("/import", async (req, res) => {
+app.post('/import', async (req, res) => {
   const data = JSON.parse(largeBuffer.toString()); // 50-200ms blocking
 });
 
 // ✅ APPROVED: Stream-parse large JSON
-import { parser } from "stream-json";
-import { streamArray } from "stream-json/streamers/StreamArray";
+import { parser } from 'stream-json';
+import { streamArray } from 'stream-json/streamers/StreamArray';
 
-app.post("/import", async (req, res) => {
+app.post('/import', async (req, res) => {
   const pipeline = req.pipe(parser()).pipe(streamArray());
   for await (const { value } of pipeline) {
     await processItem(value); // Non-blocking, item-by-item
@@ -74,11 +75,11 @@ app.post("/import", async (req, res) => {
 });
 
 // ❌ BLOCKS EVENT LOOP: Synchronous crypto operations
-const hash = crypto.pbkdf2Sync(password, salt, 100000, 64, "sha512");
+const hash = crypto.pbkdf2Sync(password, salt, 100000, 64, 'sha512');
 
 // ✅ APPROVED: Async crypto
 const hash = await new Promise((resolve, reject) => {
-  crypto.pbkdf2(password, salt, 100000, 64, "sha512", (err, key) => {
+  crypto.pbkdf2(password, salt, 100000, 64, 'sha512', (err, key) => {
     err ? reject(err) : resolve(key);
   });
 });
@@ -101,7 +102,11 @@ async function getDashboard(userId: string) {
 
 // ✅ APPROVED: Parallel execution (300ms total — 3x faster)
 async function getDashboard(userId: string) {
-  const [user, orders, notifications] = await Promise.all([getUser(userId), getOrders(userId), getNotifications(userId)]);
+  const [user, orders, notifications] = await Promise.all([
+    getUser(userId),
+    getOrders(userId),
+    getNotifications(userId),
+  ]);
   return { user, orders, notifications };
 }
 
@@ -112,12 +117,12 @@ for (const id of userIds) {
 }
 
 // ✅ APPROVED: Parallel with controlled concurrency
-const results = await Promise.all(userIds.map((id) => fetchUser(id)));
+const results = await Promise.all(userIds.map(id => fetchUser(id)));
 
 // ✅ APPROVED: Batched concurrency for large arrays (avoid overwhelming DB)
-import pLimit from "p-limit";
+import pLimit from 'p-limit';
 const limit = pLimit(10); // Max 10 concurrent
-const results = await Promise.all(userIds.map((id) => limit(() => fetchUser(id))));
+const results = await Promise.all(userIds.map(id => limit(() => fetchUser(id))));
 ```
 
 ---
@@ -128,7 +133,7 @@ const results = await Promise.all(userIds.map((id) => limit(() => fetchUser(id))
 // ❌ MEMORY LEAK: Global cache with no eviction — grows unbounded
 const cache = new Map<string, any>(); // Lives forever, entries never removed
 
-app.get("/data/:id", async (req, res) => {
+app.get('/data/:id', async (req, res) => {
   if (!cache.has(req.params.id)) {
     cache.set(req.params.id, await fetchData(req.params.id));
   }
@@ -137,7 +142,7 @@ app.get("/data/:id", async (req, res) => {
 // After 100K unique IDs → hundreds of MB consumed → OOM crash
 
 // ✅ APPROVED: LRU cache with max size and TTL
-import { LRUCache } from "lru-cache";
+import { LRUCache } from 'lru-cache';
 const cache = new LRUCache<string, any>({
   max: 1000, // Maximum 1000 entries
   ttl: 1000 * 60 * 5, // 5-minute TTL
@@ -149,17 +154,17 @@ const id = setInterval(() => syncMetrics(), 30000);
 
 // ✅ APPROVED: Graceful shutdown clears interval
 const id = setInterval(() => syncMetrics(), 30000);
-process.on("SIGTERM", () => clearInterval(id));
-process.on("SIGINT", () => clearInterval(id));
+process.on('SIGTERM', () => clearInterval(id));
+process.on('SIGINT', () => clearInterval(id));
 
 // ❌ MEMORY LEAK: Event emitter listeners accumulate
-server.on("request", handler);
+server.on('request', handler);
 // If called repeatedly (hot reload) → MaxListenersExceededWarning
 
 // ✅ APPROVED: Remove listener on cleanup
-server.on("request", handler);
+server.on('request', handler);
 // On shutdown/reload:
-server.removeListener("request", handler);
+server.removeListener('request', handler);
 ```
 
 ---
@@ -168,20 +173,20 @@ server.removeListener("request", handler);
 
 ```typescript
 // ❌ MAIN THREAD: CPU-heavy operation blocks ALL requests
-app.post("/resize", async (req, res) => {
+app.post('/resize', async (req, res) => {
   const resized = sharp(buffer).resize(800, 600).toBuffer(); // 200-500ms blocking
   res.send(resized);
 });
 
 // ✅ APPROVED: Offload to Worker Thread
-import { Worker } from "worker_threads";
+import { Worker } from 'worker_threads';
 
-app.post("/resize", async (req, res) => {
-  const worker = new Worker("./workers/resize.js", {
+app.post('/resize', async (req, res) => {
+  const worker = new Worker('./workers/resize.js', {
     workerData: { buffer: req.body, width: 800, height: 600 },
   });
-  worker.on("message", (result) => res.send(result));
-  worker.on("error", (err) => res.status(500).json({ error: err.message }));
+  worker.on('message', result => res.send(result));
+  worker.on('error', err => res.status(500).json({ error: err.message }));
 });
 
 // Flag these operations as Worker Thread candidates:
@@ -198,16 +203,16 @@ app.post("/resize", async (req, res) => {
 
 ```typescript
 // ❌ BUFFER BLOAT: Entire file loaded into memory before sending
-app.get("/export", async (req, res) => {
+app.get('/export', async (req, res) => {
   const data = await db.orders.findMany(); // 50MB result set
   const csv = convertToCSV(data); // Another 50MB in memory
   res.send(csv); // Total: 100MB per request
 });
 
 // ✅ APPROVED: Stream directly to response
-app.get("/export", async (req, res) => {
-  res.setHeader("Content-Type", "text/csv");
-  res.setHeader("Transfer-Encoding", "chunked");
+app.get('/export', async (req, res) => {
+  res.setHeader('Content-Type', 'text/csv');
+  res.setHeader('Transfer-Encoding', 'chunked');
 
   const cursor = db.orders.findMany({ cursor: true });
   for await (const batch of cursor) {
@@ -217,16 +222,16 @@ app.get("/export", async (req, res) => {
 });
 
 // ❌ BUFFER BLOAT: Reading entire upload before processing
-app.post("/upload", async (req, res) => {
+app.post('/upload', async (req, res) => {
   const body = await req.arrayBuffer(); // Entire file in memory
   await processFile(Buffer.from(body));
 });
 
 // ✅ APPROVED: Pipe stream directly
-app.post("/upload", async (req, res) => {
+app.post('/upload', async (req, res) => {
   const writeStream = fs.createWriteStream(`/uploads/${filename}`);
   req.pipe(writeStream);
-  writeStream.on("finish", () => res.json({ status: "uploaded" }));
+  writeStream.on('finish', () => res.json({ status: 'uploaded' }));
 });
 ```
 
@@ -237,15 +242,15 @@ app.post("/upload", async (req, res) => {
 ```typescript
 // ❌ NO KEEP-ALIVE: New TCP connection per outbound fetch
 async function callExternalAPI(data: any) {
-  const res = await fetch("https://api.external.com/v1/data", {
-    method: "POST",
+  const res = await fetch('https://api.external.com/v1/data', {
+    method: 'POST',
     body: JSON.stringify(data),
   });
   // Each call = DNS lookup + TCP handshake + TLS negotiation (100-300ms overhead)
 }
 
 // ✅ APPROVED: Reuse connections with http.Agent
-import { Agent } from "undici";
+import { Agent } from 'undici';
 
 const agent = new Agent({
   keepAliveTimeout: 30_000,
@@ -254,8 +259,8 @@ const agent = new Agent({
 });
 
 async function callExternalAPI(data: any) {
-  const res = await fetch("https://api.external.com/v1/data", {
-    method: "POST",
+  const res = await fetch('https://api.external.com/v1/data', {
+    method: 'POST',
     body: JSON.stringify(data),
     dispatcher: agent,
   });
@@ -279,7 +284,7 @@ do {
   const batch = await prisma.user.findMany({
     take: 100,
     ...(cursor ? { skip: 1, cursor: { id: cursor } } : {}),
-    orderBy: { id: "asc" },
+    orderBy: { id: 'asc' },
   });
   for (const user of batch) {
     await sendEmail(user.email);

package/.agent/agents/type-safety-reviewer.md

@@ -20,6 +20,7 @@ TypeScript is a contract system. Your job is to ensure every contract is honored
 ## Mandatory Pre-Flight Context Inspection
 
 Before auditing TypeScript safety, you MUST inspect:
+
 1. `tsconfig.json` → Check `strict`, `noImplicitAny`, `strictNullChecks`, `noUncheckedIndexedAccess` settings
 2. `package.json` → Check `@types/*` dependencies and TypeScript compiler version
 3. Imported module declarations (`.d.ts` files or exported types) → Ensure interfaces exist and match contract usage
@@ -37,7 +38,7 @@ function process(data: any) {
 }
 
 // ❌ REJECTED: Cast from unknown response — no runtime validation
-const result: any = await fetch("/api").then((r) => r.json());
+const result: any = await fetch('/api').then(r => r.json());
 
 // ✅ APPROVED: Narrow interface defined
 function process(data: { name: string; id: number }) {
@@ -45,7 +46,7 @@ function process(data: { name: string; id: number }) {
 }
 
 // ✅ APPROVED: Zod validates at runtime boundary
-const result = UserSchema.parse(await fetch("/api").then((r) => r.json()));
+const result = UserSchema.parse(await fetch('/api').then(r => r.json()));
 
 // ✅ APPROVED with documented justification
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
@@ -70,7 +71,7 @@ const user = UserSchema.parse(response);
 
 // ✅ APPROVED: Type guard with actual check
 function isUser(data: unknown): data is User {
-  return typeof data === "object" && data !== null && "id" in data;
+  return typeof data === 'object' && data !== null && 'id' in data;
 }
 ```
 
@@ -111,7 +112,7 @@ const city = user.address.city;
 const first = arr[0].name; // arr could be empty
 
 // ✅ APPROVED: Optional chaining with fallback
-const city = user.address?.city ?? "Unknown";
+const city = user.address?.city ?? 'Unknown';
 
 // ✅ APPROVED: Guard before access
 if (arr.length > 0) {

package/.agent/agents/ui-ux-auditor.md

@@ -22,6 +22,7 @@ skills:
 ## Mandatory Pre-Flight Context Inspection
 
 Before auditing UI/UX governance, you MUST inspect:
+
 1. `DESIGN.md` / `theme.css` → Check active visual direction, color system, and spatial tokens
 2. Component hierarchy → Check if the `🧠 UI Reasoning Engine Trace` block was produced before component code
 3. Accessibility & Layout → Check touch targets (min 44x44px), ARIA roles, and responsive breakpoint rules
@@ -31,6 +32,7 @@ Before auditing UI/UX governance, you MUST inspect:
 ## The UI Multi-Agent Orchestration Loop
 
 When reviewing code, you must synthesize findings from the 6 specialized reviewers:
+
 1. **ux-reviewer:** Verifies Hick's law, scannability, cognitive load, and progressive disclosure.
 2. **visual-reviewer:** Verifies margins, typographic hierarchy, 8px grids, and contrast.
 3. **interaction-reviewer:** Verifies all interactive states (hover, focus, active, disabled) and micro-interactions.
@@ -42,10 +44,10 @@ When reviewing code, you must synthesize findings from the 6 specialized reviewe
 
 ## Strict Rejection Gates (Blocking)
 
-*   **Missing Reasoning Trace:** If the Maker agent fails to output the `🧠 UI Reasoning Engine Trace` block before the code, output is immediately REJECTED.
-*   **The Purple brand color (#7C3AED):** Immediately REJECTED.
-*   **Lack of Hover/Active states:** Rejects any clickable button or card that does not explicitly implement hover scales or `active:scale-[0.97]` click indicators.
-*   **Layout Shift (CLS):** Rejects images or media content containers that do not declare explicit aspect ratios or spacing dimensions.
+- **Missing Reasoning Trace:** If the Maker agent fails to output the `🧠 UI Reasoning Engine Trace` block before the code, output is immediately REJECTED.
+- **The Purple brand color (#7C3AED):** Immediately REJECTED.
+- **Lack of Hover/Active states:** Rejects any clickable button or card that does not explicitly implement hover scales or `active:scale-[0.97]` click indicators.
+- **Layout Shift (CLS):** Rejects images or media content containers that do not declare explicit aspect ratios or spacing dimensions.
 
 ---
 

package/.agent/agents/ui-visual-auditor.md

@@ -18,6 +18,7 @@ skills:
 ## Mandatory Pre-Flight Context Inspection
 
 Before auditing rendered visuals and DOM layouts, you MUST inspect:
+
 1. Breakpoint configs (`tailwind.config.js`, `media.css`) → Verify 375px (mobile), 768px (tablet), and 1440px (desktop) breakpoint bounds
 2. Image & Video assets → Confirm presence of `aspect-ratio` or explicit width/height dimensions to eliminate layout shifts
 3. Typography wrap rules → Verify `text-wrap: balance` / `pretty` usage on headings and body text
@@ -39,6 +40,7 @@ You inspect rendered HTML, DOM elements, or captured screenshots at multiple vie
 ## Code Comparison Examples
 
 ### Layout Shift (CLS) Violation
+
 ```tsx
 // ❌ REJECTED: Missing width/height or aspect-ratio on image. Causes layout jump on load.
 <img src="/hero-illustration.webp" className="w-full h-auto" />
@@ -50,6 +52,7 @@ You inspect rendered HTML, DOM elements, or captured screenshots at multiple vie
 ```
 
 ### Responsive Container Overflow
+
 ```tsx
 // ❌ REJECTED: Hardcoded width on container causing horizontal overflow on mobile viewports
 <div className="w-[600px] p-4">

package/.agent/agents/ux-reviewer.md

@@ -17,6 +17,7 @@ You evaluate usability, layout scannability, cognitive safety, information archi
 ## Mandatory Pre-Flight Context Inspection
 
 Before auditing usability and information architecture, you MUST inspect:
+
 1. Target user workflow & product type (SaaS Dashboard, Marketing Landing, DevTool, AI Interface, Fintech)
 2. Interactive button/input groupings → Verify destructive actions are separated from primary CTA buttons
 3. Progressive disclosure structures → Ensure complex forms (>5 fields) use multi-step wizards or grouped fieldsets
@@ -26,20 +27,23 @@ Before auditing usability and information architecture, you MUST inspect:
 ## What This Reviewer Catches
 
 ### ❌ REJECTED Criteria (Blocking)
-*   **Action Isolation Failures:** Primary actions placed far from user eye-tracking zones or too close to destructive actions without distinct styling.
-*   **Choice Overload (Hick's Law):** Exposing 10+ options or inputs on a single screen layer without progressive disclosure (tabs, dropdowns, expandables).
-*   **Nonsensical Grouping (Gestalt violation):** Visual spacing that breaks parent-child relationships (e.g., input labels placed closer to the preceding input than the target input).
-*   **Form Blockages:** Multi-step forms without visual progress indicators, or missing explicit validation message bindings.
+
+- **Action Isolation Failures:** Primary actions placed far from user eye-tracking zones or too close to destructive actions without distinct styling.
+- **Choice Overload (Hick's Law):** Exposing 10+ options or inputs on a single screen layer without progressive disclosure (tabs, dropdowns, expandables).
+- **Nonsensical Grouping (Gestalt violation):** Visual spacing that breaks parent-child relationships (e.g., input labels placed closer to the preceding input than the target input).
+- **Form Blockages:** Multi-step forms without visual progress indicators, or missing explicit validation message bindings.
 
 ### ⚠️ WARNING Criteria (Non-blocking)
-*   *Progressive Disclosure:* Tooltips or collapsible sections missing for secondary glossary terms.
-*   *Scanning Rhythm:* Lack of section headings to break up long blocks of inputs.
+
+- _Progressive Disclosure:_ Tooltips or collapsible sections missing for secondary glossary terms.
+- _Scanning Rhythm:_ Lack of section headings to break up long blocks of inputs.
 
 ---
 
 ## Code Comparison Examples
 
 ### Action Isolation Failure
+
 ```tsx
 // ❌ REJECTED: Destructive delete button right next to primary save button with same styling
 <div className="flex gap-2">
@@ -59,6 +63,7 @@ Before auditing usability and information architecture, you MUST inspect:
 ```
 
 ### Gestalt Grouping Violation
+
 ```tsx
 // ❌ REJECTED: Label is closer to the preceding input than the input it describes
 <div className="space-y-4">

package/.agent/agents/visual-reviewer.md

@@ -18,6 +18,7 @@ You evaluate margins, visual rhythm, typography scales, alignment, line lengths,
 ## Mandatory Pre-Flight Context Inspection
 
 Before auditing visual rhythm and typography, you MUST inspect:
+
 1. `DESIGN.md` / `theme.css` → Check font family mappings (display vs body vs mono) and scale steps (`text-xs` to `text-6xl`)
 2. Spatial grid rules → Verify padding/margin/gap utilities adhere to the 8px grid (8px, 16px, 24px, 32px, 48px, 64px)
 3. Line length limits → Confirm paragraph bounds use `max-w-prose` or `max-w-[65ch]` to prevent wide, unreadable columns
@@ -27,20 +28,23 @@ Before auditing visual rhythm and typography, you MUST inspect:
 ## What This Reviewer Catches
 
 ### ❌ REJECTED Criteria (Blocking)
-*   **Typography Overlap/Orphans:** Display headings wrapping awkwardly without balancing (`text-wrap: balance` missing on dynamic headings).
-*   **Arbitrary Spacing:** Spacing values (margin, padding, gap) that deviate from the strict 8px spatial grid system (e.g., mixing `15px`, `9px`, `19px`).
-*   **Line-Length Violations:** Text paragraph columns wider than `75ch` or narrower than `45ch` for body content.
-*   **Poor Contrast:** Color combinations failing contrast thresholds. Dark surfaces casting harsh pitch-black shadows instead of stepping background lightness.
+
+- **Typography Overlap/Orphans:** Display headings wrapping awkwardly without balancing (`text-wrap: balance` missing on dynamic headings).
+- **Arbitrary Spacing:** Spacing values (margin, padding, gap) that deviate from the strict 8px spatial grid system (e.g., mixing `15px`, `9px`, `19px`).
+- **Line-Length Violations:** Text paragraph columns wider than `75ch` or narrower than `45ch` for body content.
+- **Poor Contrast:** Color combinations failing contrast thresholds. Dark surfaces casting harsh pitch-black shadows instead of stepping background lightness.
 
 ### ⚠️ WARNING Criteria (Non-blocking)
-*   *Font Pairing:* Monotonous font setups (e.g., Inter for both Display and Body) that feel generic.
-*   *Negative Space:* Tight component paddings that crush text elements.
+
+- _Font Pairing:_ Monotonous font setups (e.g., Inter for both Display and Body) that feel generic.
+- _Negative Space:_ Tight component paddings that crush text elements.
 
 ---
 
 ## Code Comparison Examples
 
 ### Arbitrary Spacing vs. Grid Spacing
+
 ```tsx
 // ❌ REJECTED: Mixing arbitrary values (m-3, p-[15px], gap-5) outside the 8px spatial grid
 <div className="p-[15px] m-3 gap-5 flex">
@@ -56,6 +60,7 @@ Before auditing visual rhythm and typography, you MUST inspect:
 ```
 
 ### Unbalanced Typography vs. Balanced Readability
+
 ```tsx
 // ❌ REJECTED: Raw unconstrained width heading and paragraph without orphans balancing
 <div>

package/.agent/agents/vitals-reviewer.md

@@ -22,6 +22,7 @@ You audit **frontend files only** — `.tsx`, `.jsx`, `.css`, `.module.css`. You
 ## Mandatory Pre-Flight Context Inspection
 
 Before auditing Core Web Vitals, you MUST inspect:
+
 1. `app/layout.tsx` / `next.config.js` → Check font declarations (`next/font`), image domains, and scripts (`next/script` strategy)
 2. Above-the-fold media elements → Check image `priority`, `aspect-ratio` reserves, and layout shift triggers
 3. Animation & Event listener code → Verify `useTransition` usage for expensive state updates and `passive: true` on scroll listeners
@@ -91,13 +92,13 @@ function handleSearch(query: string) {
 }
 
 // ❌ INP DAMAGE: Non-passive scroll listener (blocks scroll painting)
-element.addEventListener("scroll", handler); // Missing { passive: true }
+element.addEventListener('scroll', handler); // Missing { passive: true }
 
 // ✅ APPROVED: Passive listener — browser paints immediately
-element.addEventListener("scroll", handler, { passive: true });
+element.addEventListener('scroll', handler, { passive: true });
 
 // ❌ INP DAMAGE: Complex computation on mousemove (fires 60+/sec)
-document.addEventListener("mousemove", (e) => {
+document.addEventListener('mousemove', e => {
   renderComplexGradient(e.clientX, e.clientY);
 });
 ```
@@ -114,7 +115,7 @@ document.addEventListener("mousemove", (e) => {
 container.prepend(banner); // Pushes existing content down
 
 // ✅ APPROVED: Reserved space with aspect-ratio
-<div style={{ aspectRatio: "16/9", width: "100%" }}>
+<div style={{ aspectRatio: '16/9', width: '100%' }}>
   <Image src="/photo.jpg" fill alt="Photo" />
 </div>;