tribunal-kit 9.0.2 → 9.2.1

package/.agents/skills/zero-trust-passkeys/SKILL.md

@@ -35,14 +35,14 @@ Before generating, refactoring, or reviewing code in the `zero-trust-passkeys` d
 
 Execute all non-trivial tasks through this 7-pass cognitive loop:
 
-| Pass | Phase | Core Action |
-|:---|:---|:---|
-| **Pass 1** | **Understand** | Deconstruct the user's explicit objective, implicit requirements, and platform constraints. |
-| **Pass 2** | **Plan** | Decompose the task into smallest logical steps; map dependencies and required tool calls. |
-| **Pass 3** | **Execute** | Implement the solution with production-grade craft, zero placeholders, and strict typing. |
-| **Pass 4** | **Verify** | Run linters, unit tests, or compiler checks to validate structural correctness. |
-| **Pass 5** | **Attack** | Perform an adversarial review searching for edge-case failures, race conditions, and traps. |
-| **Pass 6** | **Improve** | Eliminate discovered friction, optimize performance, and harden error boundaries. |
+| Pass       | Phase            | Core Action                                                                                  |
+| :--------- | :--------------- | :------------------------------------------------------------------------------------------- |
+| **Pass 1** | **Understand**   | Deconstruct the user's explicit objective, implicit requirements, and platform constraints.  |
+| **Pass 2** | **Plan**         | Decompose the task into smallest logical steps; map dependencies and required tool calls.    |
+| **Pass 3** | **Execute**      | Implement the solution with production-grade craft, zero placeholders, and strict typing.    |
+| **Pass 4** | **Verify**       | Run linters, unit tests, or compiler checks to validate structural correctness.              |
+| **Pass 5** | **Attack**       | Perform an adversarial review searching for edge-case failures, race conditions, and traps.  |
+| **Pass 6** | **Improve**      | Eliminate discovered friction, optimize performance, and harden error boundaries.            |
 | **Pass 7** | **Quality Gate** | Enforce Verification-Before-Completion (VBC) with concrete terminal proof before finalizing. |
 
 ---
@@ -114,23 +114,23 @@ export async function verifyPasskeyAuth(
 
 ## 🚨 Edge-Case & Failure Mode Matrix
 
-| Scenario | Risk | Mitigation Strategy |
-|:---|:---|:---|
-| **Empty or Null Inputs** | Unhandled exception or unexpected rendering collapse | Enforce fallback guards, optional chaining, and explicit empty state handlers |
-| **Network Timeout / Latency** | Hanging operations or duplicate side-effects | Implement bounded abort controllers, exponential backoff, and idempotency keys |
-| **Concurrency / Race Conditions** | Stale state overwrite or inconsistent data mutations | Use atomic transactions, mutex locking, or cancel-on-resubmit controls |
-| **Invalid Schema / Malformed Payload** | Downstream runtime errors or security injection | Validate boundary payloads with Zod/Pydantic schemas prior to execution |
-| **Resource / Memory Saturation** | OOM errors, frame drops, or memory leaks | Clean up listeners, cancel active timers, and enforce pagination/virtualization |
+| Scenario                               | Risk                                                 | Mitigation Strategy                                                             |
+| :------------------------------------- | :--------------------------------------------------- | :------------------------------------------------------------------------------ |
+| **Empty or Null Inputs**               | Unhandled exception or unexpected rendering collapse | Enforce fallback guards, optional chaining, and explicit empty state handlers   |
+| **Network Timeout / Latency**          | Hanging operations or duplicate side-effects         | Implement bounded abort controllers, exponential backoff, and idempotency keys  |
+| **Concurrency / Race Conditions**      | Stale state overwrite or inconsistent data mutations | Use atomic transactions, mutex locking, or cancel-on-resubmit controls          |
+| **Invalid Schema / Malformed Payload** | Downstream runtime errors or security injection      | Validate boundary payloads with Zod/Pydantic schemas prior to execution         |
+| **Resource / Memory Saturation**       | OOM errors, frame drops, or memory leaks             | Clean up listeners, cancel active timers, and enforce pagination/virtualization |
 
 ---
 
 ## 🤖 LLM-Specific Traps Table
 
-| Anti-Pattern | What AI Commonly Does Wrong | What Is Actually Correct |
-|:---|:---|:---|
-| **Hardcoded Secret Pattern** | Committing API keys, tokens, or private salts into source code | Load credentials strictly via runtime environment variables and secret stores |
-| **Prompt Injection Surface** | Directly concatenating untrusted user input into LLM system prompts | Wrap user content in isolated delimiters and strip injection control sequences |
-| **Missing Authorization Check** | Relying only on authentication token presence without checking tenant/object RBAC | Verify user permissions against the specific target record ID before mutation |
+| Anti-Pattern                    | What AI Commonly Does Wrong                                                       | What Is Actually Correct                                                       |
+| :------------------------------ | :-------------------------------------------------------------------------------- | :----------------------------------------------------------------------------- |
+| **Hardcoded Secret Pattern**    | Committing API keys, tokens, or private salts into source code                    | Load credentials strictly via runtime environment variables and secret stores  |
+| **Prompt Injection Surface**    | Directly concatenating untrusted user input into LLM system prompts               | Wrap user content in isolated delimiters and strip injection control sequences |
+| **Missing Authorization Check** | Relying only on authentication token presence without checking tenant/object RBAC | Verify user permissions against the specific target record ID before mutation  |
 
 ---
 
@@ -152,5 +152,6 @@ export async function verifyPasskeyAuth(
 ### 🛑 Verification-Before-Completion (VBC) Protocol
 
 **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
+
 - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
 - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing test suites, compiler success, or equivalent operational proof) that your output works as intended.

package/.codex-plugin/plugin.json

@@ -30,11 +30,7 @@
     "longDescription": "Use Tribunal Kit to govern coding agents through Socratic brainstorming, bite-sized implementation planning, strict test-driven development, out-of-band context isolation, 28-specialist review waves, and persistent Case Law memory.",
     "developerName": "Harmitx7",
     "category": "Developer Tools",
-    "capabilities": [
-      "Interactive",
-      "Read",
-      "Write"
-    ],
+    "capabilities": ["Interactive", "Read", "Write"],
     "defaultPrompt": [
       "Let's design and implement a new feature using Tribunal SDD.",
       "Run a full Tribunal code audit on this repository."

package/.kimi-plugin/plugin.json

@@ -28,11 +28,7 @@
     "shortDescription": "28-Specialist Review Waves & Subagent-Driven Development (SDD) Engine",
     "longDescription": "Tribunal Kit provides institutional-grade code review, anti-hallucination guardrails, Subagent-Driven Development (SDD), and automated testing pipelines for AI coding agents.",
     "developerName": "Harmitx7",
-    "capabilities": [
-      "Interactive",
-      "Read",
-      "Write"
-    ],
+    "capabilities": ["Interactive", "Read", "Write"],
     "websiteURL": "https://github.com/Harmitx7/tribunal-kit"
   }
 }

package/.opencode/INSTALL.md

@@ -37,5 +37,6 @@ use skill tool to load verification-before-completion
 ## Subagent-Driven Development (SDD)
 
 OpenCode delegates tasks to subagents via the `task` tool:
+
 - Implementers execute tasks following `.tribunal/sdd/<plan>/task-<N>-brief.md`.
 - Reviewers evaluate diffs via `tk sdd diff` out-of-band.

package/.opencode/plugins/tribunal.js

@@ -11,7 +11,7 @@ import { fileURLToPath } from 'url';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
-const extractAndStripFrontmatter = (content) => {
+const extractAndStripFrontmatter = content => {
   const match = content.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match) return { frontmatter: {}, content };
 
@@ -23,7 +23,10 @@ const extractAndStripFrontmatter = (content) => {
     const colonIdx = line.indexOf(':');
     if (colonIdx > 0) {
       const key = line.slice(0, colonIdx).trim();
-      const value = line.slice(colonIdx + 1).trim().replace(/^["']|["']$/g, '');
+      const value = line
+        .slice(colonIdx + 1)
+        .trim()
+        .replace(/^["']|["']$/g, '');
       frontmatter[key] = value;
     }
   }
@@ -47,7 +50,8 @@ export const TribunalPlugin = async ({ client: _client, directory: _directory }
       const { content } = extractAndStripFrontmatter(raw);
       rulesContent = content;
     } else {
-      rulesContent = '# Tribunal Kit Master Governance Active\nEnforce strict TDD, out-of-band reviews, and 28-specialist waves.';
+      rulesContent =
+        '# Tribunal Kit Master Governance Active\nEnforce strict TDD, out-of-band reviews, and 28-specialist waves.';
     }
 
     const toolMapping = `**Tool Mapping for OpenCode:**
@@ -76,7 +80,7 @@ ${toolMapping}
   };
 
   return {
-    config: async (config) => {
+    config: async config => {
       config.skills = config.skills || {};
       config.skills.paths = config.skills.paths || [];
       if (!config.skills.paths.includes(tribunalSkillsDir)) {
@@ -90,11 +94,16 @@ ${toolMapping}
       const firstUser = output.messages.find(m => m.info && m.info.role === 'user');
       if (!firstUser || !firstUser.parts || !firstUser.parts.length) return;
 
-      if (firstUser.parts.some(p => p.type === 'text' && p.text && p.text.includes('EXTREMELY_IMPORTANT'))) return;
+      if (
+        firstUser.parts.some(
+          p => p.type === 'text' && p.text && p.text.includes('EXTREMELY_IMPORTANT'),
+        )
+      )
+        return;
 
       const ref = firstUser.parts[0];
       firstUser.parts.unshift({ ...ref, type: 'text', text: bootstrap });
-    }
+    },
   };
 };
 

package/.pi/extensions/tribunal.ts

@@ -1,41 +1,41 @@
-import { readFileSync, existsSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
+import { readFileSync, existsSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
 
 export interface ExtensionAPI {
   on(event: string, handler: (payload?: any) => Promise<any> | any): void;
 }
 
-const EXTREMELY_IMPORTANT_MARKER = "<EXTREMELY_IMPORTANT>";
-const BOOTSTRAP_MARKER = "tribunal-kit:master-governance bootstrap for pi";
+const EXTREMELY_IMPORTANT_MARKER = '<EXTREMELY_IMPORTANT>';
+const BOOTSTRAP_MARKER = 'tribunal-kit:master-governance bootstrap for pi';
 
 const extensionDir = dirname(fileURLToPath(import.meta.url));
-const packageRoot = resolve(extensionDir, "../..");
-const skillsDir = resolve(packageRoot, ".agent", "skills");
-const rulesPath = resolve(packageRoot, ".agent", "rules", "GEMINI.md");
+const packageRoot = resolve(extensionDir, '../..');
+const skillsDir = resolve(packageRoot, '.agent', 'skills');
+const rulesPath = resolve(packageRoot, '.agent', 'rules', 'GEMINI.md');
 
 let cachedBootstrap: string | null | undefined;
 
 export default function tribunalPiExtension(pi: ExtensionAPI) {
   let injectBootstrap = true;
 
-  pi.on("resources_discover", async () => ({
+  pi.on('resources_discover', async () => ({
     skillPaths: [skillsDir],
   }));
 
-  pi.on("session_start", async () => {
+  pi.on('session_start', async () => {
     injectBootstrap = true;
   });
 
-  pi.on("session_compact", async () => {
+  pi.on('session_compact', async () => {
     injectBootstrap = true;
   });
 
-  pi.on("agent_end", async () => {
+  pi.on('agent_end', async () => {
     injectBootstrap = false;
   });
 
-  pi.on("context", async (event: any) => {
+  pi.on('context', async (event: any) => {
     if (!injectBootstrap) return;
     if (event?.messages?.some(messageContainsBootstrap)) return;
 
@@ -43,8 +43,8 @@ export default function tribunalPiExtension(pi: ExtensionAPI) {
     if (!bootstrap) return;
 
     const bootstrapMessage = {
-      role: "user" as const,
-      content: [{ type: "text" as const, text: bootstrap }],
+      role: 'user' as const,
+      content: [{ type: 'text' as const, text: bootstrap }],
       timestamp: Date.now(),
     };
 
@@ -52,11 +52,7 @@ export default function tribunalPiExtension(pi: ExtensionAPI) {
     const insertAt = firstNonCompactionSummaryIndex(messages);
 
     return {
-      messages: [
-        ...messages.slice(0, insertAt),
-        bootstrapMessage,
-        ...messages.slice(insertAt),
-      ],
+      messages: [...messages.slice(0, insertAt), bootstrapMessage, ...messages.slice(insertAt)],
     };
   });
 }
@@ -65,12 +61,13 @@ function getBootstrapContent(): string | null {
   if (cachedBootstrap !== undefined) return cachedBootstrap;
 
   try {
-    let body = "";
+    let body = '';
     if (existsSync(rulesPath)) {
-      const raw = readFileSync(rulesPath, "utf8");
+      const raw = readFileSync(rulesPath, 'utf8');
       body = stripFrontmatter(raw);
     } else {
-      body = "# Tribunal Kit Master Governance Active\nEnforce strict TDD and 28-specialist reviewer waves.";
+      body =
+        '# Tribunal Kit Master Governance Active\nEnforce strict TDD and 28-specialist reviewer waves.';
     }
 
     cachedBootstrap = `${EXTREMELY_IMPORTANT_MARKER}
@@ -111,14 +108,14 @@ Subagent-Driven Development (SDD):
 
 function messageContainsBootstrap(message: unknown): boolean {
   const content = (message as { content?: unknown })?.content;
-  if (typeof content === "string") return content.includes(BOOTSTRAP_MARKER);
+  if (typeof content === 'string') return content.includes(BOOTSTRAP_MARKER);
   if (!Array.isArray(content)) return false;
-  return content.some((part) => {
+  return content.some(part => {
     return (
       part &&
-      typeof part === "object" &&
-      (part as { type?: unknown }).type === "text" &&
-      typeof (part as { text?: unknown }).text === "string" &&
+      typeof part === 'object' &&
+      (part as { type?: unknown }).type === 'text' &&
+      typeof (part as { text?: unknown }).text === 'string' &&
       (part as { text: string }).text.includes(BOOTSTRAP_MARKER)
     );
   });
@@ -126,7 +123,7 @@ function messageContainsBootstrap(message: unknown): boolean {
 
 function firstNonCompactionSummaryIndex(messages: unknown[]): number {
   let index = 0;
-  while ((messages[index] as { role?: unknown } | undefined)?.role === "compactionSummary") {
+  while ((messages[index] as { role?: unknown } | undefined)?.role === 'compactionSummary') {
     index += 1;
   }
   return index;

package/AGENTS.md

@@ -52,21 +52,22 @@ Am I importing a package/method that exists?
 
 When you detect code or design requests, apply the specialist agent profile:
 
-| Domain                       | Specialist              |
-| ---------------------------- | ----------------------- |
-| API / server / backend       | `backend-specialist`    |
-| React / Next.js / UI         | `frontend-specialist`   |
-| Database / schema / SQL      | `database-architect`    |
-| Python / FastAPI / Django    | `python-pro`            |
-| Mobile (RN / Flutter)        | `mobile-developer`      |
-| Debugging / errors           | `debugger`              |
-| Security / vulnerabilities   | `security-auditor`      |
-| Performance / optimization   | `performance-optimizer` |
-| DevOps / CI-CD / Docker      | `devops-engineer`       |
-| Test generation              | `test-engineer`         |
-| Architecture / planning      | `project-planner`       |
+| Domain                     | Specialist              |
+| -------------------------- | ----------------------- |
+| API / server / backend     | `backend-specialist`    |
+| React / Next.js / UI       | `frontend-specialist`   |
+| Database / schema / SQL    | `database-architect`    |
+| Python / FastAPI / Django  | `python-pro`            |
+| Mobile (RN / Flutter)      | `mobile-developer`      |
+| Debugging / errors         | `debugger`              |
+| Security / vulnerabilities | `security-auditor`      |
+| Performance / optimization | `performance-optimizer` |
+| DevOps / CI-CD / Docker    | `devops-engineer`       |
+| Test generation            | `test-engineer`         |
+| Architecture / planning    | `project-planner`       |
 
 Always announce the active specialist:
+
 ```
 🤖 Applying knowledge of @[agent-name]...
 ```
@@ -84,6 +85,7 @@ Always announce the active specialist:
 ## 4. Skills & Tool Integration
 
 Tribunal Kit provides 185 deep skill modules located in:
+
 - `./skills/<skill-name>/SKILL.md`
 - `./.agent/skills/<skill-name>/SKILL.md`
 - `./.agents/skills/<skill-name>/SKILL.md`

package/CLAUDE.md

@@ -1,8 +1,11 @@
 # Tribunal Kit — Claude Bridge
+
 # Auto-generated by tribunal-kit init. Do not edit manually.
+
 # Source: .agent/rules/GEMINI.md
 
 ---
+
 trigger: always_on
 ---
 
@@ -439,4 +442,3 @@ Before modifying any file:
 **Workflows:** `.agent/workflows/`
 **Rules (this file):** `.agent/rules/GEMINI.md`
 **Architecture:** `.agent/ARCHITECTURE.md`
-