tribunal-kit 6.0.1 → 7.0.0

package/.agent/rules/GEMINI.md

@@ -139,12 +139,12 @@ Did I load the agent's required skills?  → If no: check frontmatter skills: fi
 
 The Socratic Gate is **adaptive** based on the task's **Impact Tier** evaluated by `impact_classifier.js`:
 
-| Impact Tier | Scope | Socratic Gate Policy |
-| ----------- | ----- | --------------------- |
-| **Tier 0 (Fast-Pass)** | Typo, CSS, markdown, formatting | **BYPASS** — 0 questions, 0 LLM calls |
-| **Tier 1 (Express Pass)** | Single-file component or function logic edit | **BYPASS** — 0 questions, single specialist pass |
-| **Tier 2 (Targeted Audit)** | Multi-file feature edit | **CONDITIONAL** — Ask 1 question ONLY if ambiguity score > 0.5 |
-| **Tier 3 (Full Gauntlet)** | Auth, schema, migration, breaking architectural changes | **REQUIRED** — 1-2 targeted questions before execution (bypassable via `--no-gate` / `--express`) |
+| Impact Tier                 | Scope                                                   | Socratic Gate Policy                                                                              |
+| --------------------------- | ------------------------------------------------------- | ------------------------------------------------------------------------------------------------- |
+| **Tier 0 (Fast-Pass)**      | Typo, CSS, markdown, formatting                         | **BYPASS** — 0 questions, 0 LLM calls                                                             |
+| **Tier 1 (Express Pass)**   | Single-file component or function logic edit            | **BYPASS** — 0 questions, single specialist pass                                                  |
+| **Tier 2 (Targeted Audit)** | Multi-file feature edit                                 | **CONDITIONAL** — Ask 1 question ONLY if ambiguity score > 0.5                                    |
+| **Tier 3 (Full Gauntlet)**  | Auth, schema, migration, breaking architectural changes | **REQUIRED** — 1-2 targeted questions before execution (bypassable via `--no-gate` / `--express`) |
 
 **Rules:**
 
@@ -213,14 +213,15 @@ The Human Gate is never skipped. No code is written to a file without explicit u
 
 **Reviewer assignment by domain:**
 
-| Code type             | Reviewers                                                                     |
-| --------------------- | ----------------------------------------------------------------------------- |
+| Code type             | Reviewers                                                                                           |
+| --------------------- | --------------------------------------------------------------------------------------------------- |
 | Backend/API           | logic + security + dependency + type-safety + resilience + schema + complexity-reviewer             |
 | Frontend/React        | logic + security + frontend + type-safety + ui-ux-auditor + review-animations + complexity-reviewer |
 | Database/SQL          | logic + security + sql + schema + complexity-reviewer                                               |
 | Mobile/Cross-platform | logic + security + mobile-reviewer + type-safety + complexity-reviewer                              |
+| CI/CD / DevOps        | pipeline-reviewer + security + dependency + resilience + complexity-reviewer                        |
 | Any domain            | + performance (if optimization)                                                                     |
-| Before merge          | /tribunal-full (all 27 reviewers)                                                                   |
+| Before merge          | /tribunal-full (all 28 reviewers)                                                                   |
 
 ---
 
@@ -281,6 +282,7 @@ These scripts live in `.agent/scripts/`. Agents and skills can invoke them:
 | -------------------------- | ------------------------------------------------- | --------------------------------------------- |
 | `checklist.js`             | Priority audit: Security→Lint→Schema→Tests→UX→SEO | Before/after any major change                 |
 | `verify_all.js`            | Full pre-deploy validation suite                  | Pre-deploy                                    |
+| `cicd_validator.js`        | GitHub Actions & CI/CD workflow security/syntax   | Deploys, CI changes, /tribunal-cicd           |
 | `auto_preview.js`          | Start/stop/restart local dev server               | After /create or /enhance                     |
 | `session_manager.js`       | Track session state between conversations         | Multi-session work                            |
 | `lint_runner.js`           | Standalone lint runner (ESLint, Prettier, Ruff)   | Every code change                             |

package/.agent/rules/GEMINI_PLANNER.md

@@ -12,29 +12,29 @@ Full rules (GEMINI.md) are NOT loaded — this saves ~4,800 tokens.
 
 ## Task Classification
 
-| Type           | Signals                                            | Output              |
-| -------------- | -------------------------------------------------- | ------------------- |
-| Question       | "what is", "how does", "explain"                   | Text only — no code |
-| Simple edit    | "fix", "change", "update" (single file)            | Direct edit         |
-| Complex build  | "build", "create", "implement", "design"           | Structured spec     |
-| Refactor       | "refactor", "clean", "extract", "split"            | Structured spec     |
-| Test           | "test", "spec", "e2e"                              | Test spec           |
+| Type          | Signals                                  | Output              |
+| ------------- | ---------------------------------------- | ------------------- |
+| Question      | "what is", "how does", "explain"         | Text only — no code |
+| Simple edit   | "fix", "change", "update" (single file)  | Direct edit         |
+| Complex build | "build", "create", "implement", "design" | Structured spec     |
+| Refactor      | "refactor", "clean", "extract", "split"  | Structured spec     |
+| Test          | "test", "spec", "e2e"                    | Test spec           |
 
 ---
 
 ## Stack Detection
 
-| Keywords                                    | Stack          |
-| ------------------------------------------- | -------------- |
-| react, jsx, tsx, component, hook            | react          |
-| next, nextjs, server component              | nextjs         |
-| vue, nuxt, composition api                  | vue            |
-| typescript, interface, generic              | typescript     |
-| python, fastapi, django, flask              | python         |
-| express, hono, koa, node                    | node           |
-| sql, postgres, prisma, drizzle              | sql            |
-| rust, cargo, tokio, axum                    | rust           |
-| css, tailwind, responsive                   | css            |
+| Keywords                         | Stack      |
+| -------------------------------- | ---------- |
+| react, jsx, tsx, component, hook | react      |
+| next, nextjs, server component   | nextjs     |
+| vue, nuxt, composition api       | vue        |
+| typescript, interface, generic   | typescript |
+| python, fastapi, django, flask   | python     |
+| express, hono, koa, node         | node       |
+| sql, postgres, prisma, drizzle   | sql        |
+| rust, cargo, tokio, axum         | rust       |
+| css, tailwind, responsive        | css        |
 
 ---
 
@@ -56,9 +56,7 @@ The planner MUST output a JSON object matching this schema:
   "task_type": "frontend_component | api_endpoint | database_query | auth_flow | test_suite | refactor | animation | general",
   "stack": ["react", "typescript", "css"],
   "target_file": "path/to/file.tsx",
-  "essential_skills": [
-    { "name": "skill-name", "score": 5.0 }
-  ],
+  "essential_skills": [{ "name": "skill-name", "score": 5.0 }],
   "constraints": {
     "accessibility": true,
     "responsive": true,

package/.agent/scripts/_colors.js

@@ -9,48 +9,48 @@
  *   const C = require('./_colors');   // C.RED, C.banner('Title'), etc.
  */
 
-"use strict";
+'use strict';
 
 // ── Core ANSI Escape Codes ──────────────────────────────────────────────────
-const GREEN = "\x1b[92m";
-const YELLOW = "\x1b[93m";
-const CYAN = "\x1b[96m";
-const RED = "\x1b[91m";
-const BLUE = "\x1b[94m";
-const MAGENTA = "\x1b[95m";
-const WHITE = "\x1b[97m";
-const GRAY = "\x1b[90m";
-const BOLD = "\x1b[1m";
-const DIM = "\x1b[2m";
-const ITALIC = "\x1b[3m";
-const UNDERLINE = "\x1b[4m";
-const RESET = "\x1b[0m";
+const GREEN = '\x1b[92m';
+const YELLOW = '\x1b[93m';
+const CYAN = '\x1b[96m';
+const RED = '\x1b[91m';
+const BLUE = '\x1b[94m';
+const MAGENTA = '\x1b[95m';
+const WHITE = '\x1b[97m';
+const GRAY = '\x1b[90m';
+const BOLD = '\x1b[1m';
+const DIM = '\x1b[2m';
+const ITALIC = '\x1b[3m';
+const UNDERLINE = '\x1b[4m';
+const RESET = '\x1b[0m';
 
 // ── Box Drawing Characters ──────────────────────────────────────────────────
 const BOX = {
-  TL: "╔",
-  TR: "╗",
-  BL: "╚",
-  BR: "╝",
-  H: "═",
-  V: "║",
-  tl: "┌",
-  tr: "┐",
-  bl: "└",
-  br: "┘",
-  h: "─",
-  v: "│",
-  cross: "┼",
-  teeL: "├",
-  teeR: "┤",
-  teeT: "┬",
-  teeB: "┴",
-  bullet: "●",
-  bulletEmpty: "○",
-  arrow: "→",
-  arrowLeft: "←",
-  check: "✔",
-  cross_mark: "✖",
+  TL: '╔',
+  TR: '╗',
+  BL: '╚',
+  BR: '╝',
+  H: '═',
+  V: '║',
+  tl: '┌',
+  tr: '┐',
+  bl: '└',
+  br: '┘',
+  h: '─',
+  v: '│',
+  cross: '┼',
+  teeL: '├',
+  teeR: '┤',
+  teeT: '┬',
+  teeB: '┴',
+  bullet: '●',
+  bulletEmpty: '○',
+  arrow: '→',
+  arrowLeft: '←',
+  check: '✔',
+  cross_mark: '✖',
 };
 
 // ── Branded Output Helpers ──────────────────────────────────────────────────
@@ -62,10 +62,8 @@ const BOX = {
  * @returns {string} Formatted banner string
  */
 function banner(title, meta = {}) {
-  const timestamp = new Date().toISOString().replace("T", " ").slice(0, 19);
-  const lines = [
-    `  ${BOLD}${CYAN}⚖️  TRIBUNAL KIT${RESET} ${DIM}— ${title}${RESET}`,
-  ];
+  const timestamp = new Date().toISOString().replace('T', ' ').slice(0, 19);
+  const lines = [`  ${BOLD}${CYAN}⚖️  TRIBUNAL KIT${RESET} ${DIM}— ${title}${RESET}`];
 
   const metaEntries = Object.entries(meta);
   if (metaEntries.length > 0) {
@@ -75,8 +73,8 @@ function banner(title, meta = {}) {
   }
   lines.push(`  ${DIM}${timestamp}${RESET}`);
 
-  const divider = `${CYAN}${"━".repeat(56)}${RESET}`;
-  return `\n${divider}\n${lines.join("\n")}\n${divider}`;
+  const divider = `${CYAN}${'━'.repeat(56)}${RESET}`;
+  return `\n${divider}\n${lines.join('\n')}\n${divider}`;
 }
 
 /**
@@ -87,8 +85,8 @@ function banner(title, meta = {}) {
  * @returns {string}
  */
 function sectionHeader(title, index, ms) {
-  const num = index != null ? `${index} — ` : "";
-  const timing = ms != null ? `${DIM} (${formatMs(ms)})${RESET}` : "";
+  const num = index != null ? `${index} — ` : '';
+  const timing = ms != null ? `${DIM} (${formatMs(ms)})${RESET}` : '';
   return `\n${BOLD}${BLUE}━━━ ${num}${title} ━━━${RESET}${timing}`;
 }
 
@@ -137,29 +135,29 @@ function info(msg) {
  * @param {Array<{name: string, status: 'pass'|'fail'|'skip'|'warn', ms?: number}>} rows
  */
 function summaryTable(rows) {
-  const maxName = Math.max(...rows.map((r) => r.name.length), 18);
+  const maxName = Math.max(...rows.map(r => r.name.length), 18);
   const colW = maxName + 2;
 
-  const statusIcon = (s) => {
-    if (s === "pass") return `${GREEN} ✅ ${RESET}`;
-    if (s === "fail") return `${RED} ❌ ${RESET}`;
-    if (s === "skip") return `${YELLOW} ⏭️  ${RESET}`;
-    if (s === "warn") return `${YELLOW} ⚠️  ${RESET}`;
+  const statusIcon = s => {
+    if (s === 'pass') return `${GREEN} ✅ ${RESET}`;
+    if (s === 'fail') return `${RED} ❌ ${RESET}`;
+    if (s === 'skip') return `${YELLOW} ⏭️  ${RESET}`;
+    if (s === 'warn') return `${YELLOW} ⚠️  ${RESET}`;
     return `${DIM} — ${RESET}`;
   };
 
-  const pad = (str, len) => str + " ".repeat(Math.max(0, len - str.length));
+  const pad = (str, len) => str + ' '.repeat(Math.max(0, len - str.length));
   const top = `  ${BOX.tl}${BOX.h.repeat(colW)}${BOX.teeT}${BOX.h.repeat(6)}${BOX.teeT}${BOX.h.repeat(10)}${BOX.tr}`;
   const mid = `  ${BOX.teeL}${BOX.h.repeat(colW)}${BOX.cross}${BOX.h.repeat(6)}${BOX.cross}${BOX.h.repeat(10)}${BOX.teeR}`;
   const bot = `  ${BOX.bl}${BOX.h.repeat(colW)}${BOX.teeB}${BOX.h.repeat(6)}${BOX.teeB}${BOX.h.repeat(10)}${BOX.br}`;
-  const hdr = `  ${BOX.v} ${BOLD}${pad("Check", colW - 2)}${RESET} ${BOX.v}${BOLD} Res ${RESET}${BOX.v} ${BOLD}${pad("Time", 8)}${RESET}${BOX.v}`;
+  const hdr = `  ${BOX.v} ${BOLD}${pad('Check', colW - 2)}${RESET} ${BOX.v}${BOLD} Res ${RESET}${BOX.v} ${BOLD}${pad('Time', 8)}${RESET}${BOX.v}`;
 
   console.log(top);
   console.log(hdr);
   console.log(mid);
 
   for (const row of rows) {
-    const time = row.ms != null ? formatMs(row.ms) : "—";
+    const time = row.ms != null ? formatMs(row.ms) : '—';
     const line = `  ${BOX.v} ${pad(row.name, colW - 2)} ${BOX.v}${statusIcon(row.status)}${BOX.v} ${pad(time, 8)}${BOX.v}`;
     console.log(line);
   }

package/.agent/scripts/_utils.js

@@ -8,46 +8,46 @@
  *   const { findAgentDir, walkDir, loadJson } = require('./_utils');
  */
 
-"use strict";
+'use strict';
 
-const fs = require("fs");
-const path = require("path");
-const { RED, RESET } = require("./_colors");
+const fs = require('fs');
+const path = require('path');
+const { RED, RESET } = require('./_colors');
 
 // ── Default Skip Directories ────────────────────────────────────────────────
 const DEFAULT_SKIP_DIRS = new Set([
-  "node_modules",
-  ".git",
-  "dist",
-  "build",
-  ".next",
-  ".agent",
-  "__pycache__",
-  ".venv",
-  "venv",
-  "coverage",
-  ".turbo",
-  ".svelte-kit",
-  ".nuxt",
-  ".output",
+  'node_modules',
+  '.git',
+  'dist',
+  'build',
+  '.next',
+  '.agent',
+  '__pycache__',
+  '.venv',
+  'venv',
+  'coverage',
+  '.turbo',
+  '.svelte-kit',
+  '.nuxt',
+  '.output',
 ]);
 
 // ── Default Source Extensions ───────────────────────────────────────────────
 const SOURCE_EXTENSIONS = new Set([
-  ".ts",
-  ".tsx",
-  ".js",
-  ".jsx",
-  ".mjs",
-  ".cjs",
-  ".py",
-  ".rs",
-  ".go",
-  ".java",
-  ".cs",
-  ".rb",
-  ".vue",
-  ".svelte",
+  '.ts',
+  '.tsx',
+  '.js',
+  '.jsx',
+  '.mjs',
+  '.cjs',
+  '.py',
+  '.rs',
+  '.go',
+  '.java',
+  '.cs',
+  '.rb',
+  '.vue',
+  '.svelte',
 ]);
 
 // ── Agent Directory Discovery ───────────────────────────────────────────────
@@ -62,7 +62,7 @@ function findAgentDir(startDir) {
   const root = path.parse(current).root;
 
   while (current !== root) {
-    const candidate = path.join(current, ".agent");
+    const candidate = path.join(current, '.agent');
     if (fs.existsSync(candidate) && fs.statSync(candidate).isDirectory()) {
       return candidate;
     }
@@ -83,7 +83,7 @@ function findAgentDir(startDir) {
  * @returns {boolean}
  */
 function hasNpm(dir) {
-  return fs.existsSync(path.join(dir, "package.json"));
+  return fs.existsSync(path.join(dir, 'package.json'));
 }
 
 /**
@@ -93,7 +93,7 @@ function hasNpm(dir) {
  */
 function loadJson(filePath) {
   try {
-    return JSON.parse(fs.readFileSync(filePath, "utf8"));
+    return JSON.parse(fs.readFileSync(filePath, 'utf8'));
   } catch {
     return null;
   }
@@ -164,8 +164,7 @@ function countFiles(dir, skipDirs = DEFAULT_SKIP_DIRS) {
       return;
     }
     for (const e of entries) {
-      if (e.isDirectory() && !skipDirs.has(e.name))
-        _count(path.join(d, e.name));
+      if (e.isDirectory() && !skipDirs.has(e.name)) _count(path.join(d, e.name));
       else if (e.isFile()) count++;
     }
   }
@@ -189,31 +188,31 @@ function parseArgs(argv, schema = {}) {
 
   // Set defaults
   for (const [key, def] of Object.entries(schema)) {
-    flags[key] = def.default ?? (def.type === "boolean" ? false : null);
+    flags[key] = def.default ?? (def.type === 'boolean' ? false : null);
   }
 
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
 
-    if (arg === "-h" || arg === "--help") {
+    if (arg === '-h' || arg === '--help') {
       flags.help = true;
       continue;
     }
 
-    if (arg.startsWith("--")) {
+    if (arg.startsWith('--')) {
       const flagName = arg.slice(2);
       const schemaDef = schema[flagName];
 
-      if (schemaDef && schemaDef.type === "boolean") {
+      if (schemaDef && schemaDef.type === 'boolean') {
         flags[flagName] = true;
       } else if (schemaDef && i + 1 < argv.length) {
         const val = argv[++i];
-        flags[flagName] = schemaDef.type === "number" ? Number(val) : val;
+        flags[flagName] = schemaDef.type === 'number' ? Number(val) : val;
       } else {
         // Unknown flag, store as boolean
         flags[flagName] = true;
       }
-    } else if (arg.startsWith("-") && arg.length === 2) {
+    } else if (arg.startsWith('-') && arg.length === 2) {
       // Short flag — treat as boolean
       flags[arg.slice(1)] = true;
     } else {
@@ -226,7 +225,7 @@ function parseArgs(argv, schema = {}) {
 
 // ── Command Runner ──────────────────────────────────────────────────────────
 
-const WINDOWS_CMD_SHIMS = new Set(["npm", "npx", "pnpm", "yarn", "bun", "bunx"]);
+const WINDOWS_CMD_SHIMS = new Set(['npm', 'npx', 'pnpm', 'yarn', 'bun', 'bunx']);
 
 /**
  * Select the executable that should be passed to spawnSync.
@@ -239,11 +238,11 @@ const WINDOWS_CMD_SHIMS = new Set(["npm", "npx", "pnpm", "yarn", "bun", "bunx"])
  */
 function normalizeCommand(cmd, platform = process.platform) {
   const lowerCaseCommand = cmd.toLowerCase();
-  const hasPath = cmd.includes("/") || cmd.includes("\\\\");
+  const hasPath = cmd.includes('/') || cmd.includes('\\\\');
   if (
-    platform === "win32" &&
+    platform === 'win32' &&
     !hasPath &&
-    !lowerCaseCommand.endsWith(".cmd") &&
+    !lowerCaseCommand.endsWith('.cmd') &&
     WINDOWS_CMD_SHIMS.has(lowerCaseCommand)
   ) {
     return `${cmd}.cmd`;
@@ -261,22 +260,22 @@ function normalizeCommand(cmd, platform = process.platform) {
  * @returns {{ status: number, stdout: string, stderr: string, ok: boolean }}
  */
 function runCommand(cmd, args = [], opts = {}) {
-  const { spawnSync } = require("child_process");
+  const { spawnSync } = require('child_process');
   const executable = normalizeCommand(cmd);
 
   const result = spawnSync(executable, args, {
-    encoding: "utf8",
+    encoding: 'utf8',
     timeout: opts.timeout || 120000,
     cwd: opts.cwd || process.cwd(),
-    shell: process.platform === "win32",
-    stdio: opts.stdio || "pipe",
+    shell: process.platform === 'win32',
+    stdio: opts.stdio || 'pipe',
     ...opts,
   });
 
   return {
     status: result.status ?? 1,
-    stdout: (result.stdout || "").toString(),
-    stderr: (result.stderr || "").toString(),
+    stdout: (result.stdout || '').toString(),
+    stderr: (result.stderr || '').toString(),
     ok: result.status === 0,
   };
 }