tribunal-kit 9.2.4 → 9.2.5

package/.agent/history/snapshots/.opencode__plugins__tribunal.js.json

@@ -1,12 +0,0 @@
-{
-  "file": ".opencode/plugins/tribunal.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "path": [],
-    "fs": [],
-    "url": []
-  },
-  "dependents": [],
-  "content": "/**\n * Tribunal Kit plugin for OpenCode.ai\n *\n * Injects Tribunal Master Governance bootstrap context via message transform.\n * Auto-registers skills directory via config hook (no symlinks needed).\n */\n\nimport path from 'path';\nimport fs from 'fs';\nimport { fileURLToPath } from 'url';\n\nconst __dirname = path.dirname(fileURLToPath(import.meta.url));\n\nconst extractAndStripFrontmatter = content => {\n  const match = content.match(/^---\\n([\\s\\S]*?)\\n---\\n([\\s\\S]*)$/);\n  if (!match) return { frontmatter: {}, content };\n\n  const frontmatterStr = match[1];\n  const body = match[2];\n  const frontmatter = {};\n\n  for (const line of frontmatterStr.split('\\n')) {\n    const colonIdx = line.indexOf(':');\n    if (colonIdx > 0) {\n      const key = line.slice(0, colonIdx).trim();\n      const value = line\n        .slice(colonIdx + 1)\n        .trim()\n        .replace(/^[\"']|[\"']$/g, '');\n      frontmatter[key] = value;\n    }\n  }\n\n  return { frontmatter, content: body };\n};\n\nlet _bootstrapCache = undefined;\n\nexport const TribunalPlugin = async ({ client: _client, directory: _directory } = {}) => {\n  const packageRoot = path.resolve(__dirname, '../..');\n  const tribunalSkillsDir = path.join(packageRoot, '.agent', 'skills');\n  const rulesPath = path.join(packageRoot, '.agent', 'rules', 'GEMINI.md');\n\n  const getBootstrapContent = () => {\n    if (_bootstrapCache !== undefined) return _bootstrapCache;\n\n    let rulesContent = '';\n    if (fs.existsSync(rulesPath)) {\n      const raw = fs.readFileSync(rulesPath, 'utf8');\n      const { content } = extractAndStripFrontmatter(raw);\n      rulesContent = content;\n    } else {\n      rulesContent =\n        '# Tribunal Kit Master Governance Active\\nEnforce strict TDD, out-of-band reviews, and 28-specialist waves.';\n    }\n\n    const toolMapping = `**Tool Mapping for OpenCode:**\nWhen skills or tribunal workflows request actions, map them to OpenCode tools:\n- Create or update tasks/todos → \\`todowrite\\`\n- Subagent dispatches → \\`task\\` with \\`subagent_type: \"general\"\\` (or \\`\"explore\"\\` for read-only exploration)\n- Invoke a skill → OpenCode's native \\`skill\\` tool\n- Read files → \\`read\\`\n- Create, edit, or delete files → \\`apply_patch\\`\n- Run shell commands → \\`bash\\`\n- Search files → \\`grep\\`, \\`glob\\`\n- Fetch a URL → \\`webfetch\\`\n- Tribunal SDD commands → run via \\`bash\\` (\\`tk sdd brief\\`, \\`tk sdd diff\\`)`;\n\n    _bootstrapCache = `<EXTREMELY_IMPORTANT>\nTribunal Kit Master Governance is active.\n\n**IMPORTANT: The master governance rules and verification protocols are loaded for this session. Follow them strictly.**\n\n${rulesContent}\n\n${toolMapping}\n</EXTREMELY_IMPORTANT>`;\n\n    return _bootstrapCache;\n  };\n\n  return {\n    config: async config => {\n      config.skills = config.skills || {};\n      config.skills.paths = config.skills.paths || [];\n      if (!config.skills.paths.includes(tribunalSkillsDir)) {\n        config.skills.paths.push(tribunalSkillsDir);\n      }\n    },\n\n    'experimental.chat.messages.transform': async (_input, output) => {\n      const bootstrap = getBootstrapContent();\n      if (!bootstrap || !output.messages || !output.messages.length) return;\n      const firstUser = output.messages.find(m => m.info && m.info.role === 'user');\n      if (!firstUser || !firstUser.parts || !firstUser.parts.length) return;\n\n      if (\n        firstUser.parts.some(\n          p => p.type === 'text' && p.text && p.text.includes('EXTREMELY_IMPORTANT'),\n        )\n      )\n        return;\n\n      const ref = firstUser.parts[0];\n      firstUser.parts.unshift({ ...ref, type: 'text', text: bootstrap });\n    },\n  };\n};\n\nexport default TribunalPlugin;\n"
-}

package/.agent/history/snapshots/.pi__extensions__tribunal.ts.json

@@ -1,12 +0,0 @@
-{
-  "file": ".pi/extensions/tribunal.ts",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "node:fs": [],
-    "node:path": [],
-    "node:url": []
-  },
-  "dependents": [],
-  "content": "import { readFileSync, existsSync } from 'node:fs';\nimport { dirname, resolve } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport interface ExtensionAPI {\n  on(event: string, handler: (payload?: any) => Promise<any> | any): void;\n}\n\nconst EXTREMELY_IMPORTANT_MARKER = '<EXTREMELY_IMPORTANT>';\nconst BOOTSTRAP_MARKER = 'tribunal-kit:master-governance bootstrap for pi';\n\nconst extensionDir = dirname(fileURLToPath(import.meta.url));\nconst packageRoot = resolve(extensionDir, '../..');\nconst skillsDir = resolve(packageRoot, '.agent', 'skills');\nconst rulesPath = resolve(packageRoot, '.agent', 'rules', 'GEMINI.md');\n\nlet cachedBootstrap: string | null | undefined;\n\nexport default function tribunalPiExtension(pi: ExtensionAPI) {\n  let injectBootstrap = true;\n\n  pi.on('resources_discover', async () => ({\n    skillPaths: [skillsDir],\n  }));\n\n  pi.on('session_start', async () => {\n    injectBootstrap = true;\n  });\n\n  pi.on('session_compact', async () => {\n    injectBootstrap = true;\n  });\n\n  pi.on('agent_end', async () => {\n    injectBootstrap = false;\n  });\n\n  pi.on('context', async (event: any) => {\n    if (!injectBootstrap) return;\n    if (event?.messages?.some(messageContainsBootstrap)) return;\n\n    const bootstrap = getBootstrapContent();\n    if (!bootstrap) return;\n\n    const bootstrapMessage = {\n      role: 'user' as const,\n      content: [{ type: 'text' as const, text: bootstrap }],\n      timestamp: Date.now(),\n    };\n\n    const messages = event?.messages || [];\n    const insertAt = firstNonCompactionSummaryIndex(messages);\n\n    return {\n      messages: [...messages.slice(0, insertAt), bootstrapMessage, ...messages.slice(insertAt)],\n    };\n  });\n}\n\nfunction getBootstrapContent(): string | null {\n  if (cachedBootstrap !== undefined) return cachedBootstrap;\n\n  try {\n    let body = '';\n    if (existsSync(rulesPath)) {\n      const raw = readFileSync(rulesPath, 'utf8');\n      body = stripFrontmatter(raw);\n    } else {\n      body =\n        '# Tribunal Kit Master Governance Active\\nEnforce strict TDD and 28-specialist reviewer waves.';\n    }\n\n    cachedBootstrap = `${EXTREMELY_IMPORTANT_MARKER}\n${BOOTSTRAP_MARKER}\n\nTribunal Agent Kit Master Governance is active.\n\nThe master rules and verification protocols are loaded for this Pi session. Follow them now.\n\n${body}\n\n${piToolMapping()}\n</EXTREMELY_IMPORTANT>`;\n    return cachedBootstrap;\n  } catch {\n    cachedBootstrap = null;\n    return null;\n  }\n}\n\nfunction stripFrontmatter(content: string): string {\n  const match = content.match(/^---\\n[\\s\\S]*?\\n---\\n([\\s\\S]*)$/);\n  return (match ? match[1] : content).trim();\n}\n\nfunction piToolMapping(): string {\n  return `## Pi Tool Mapping for Tribunal Kit\n\nPi has native skills support. When a Tribunal rule or skill applies, load the relevant \\`SKILL.md\\` with \\`read\\`, or let a user invoke \\`/skill:name\\` explicitly.\n\nPi's built-in coding tools are lowercase: \\`read\\`, \\`write\\`, \\`edit\\`, \\`bash\\`, plus optional \\`grep\\`, \\`find\\`, and \\`ls\\`. Use those for the corresponding actions: read a file, create or edit files, run shell commands, search file contents, find files by name, and list directories.\n\nSubagent-Driven Development (SDD):\n- To run SDD preparation: use \\`bash\\` to invoke \\`tk sdd brief <plan-path> <task-number>\\`.\n- To generate review diffs: use \\`bash\\` to invoke \\`tk sdd diff <plan-path> <base-sha> <head-sha>\\`.\n- When delegating to subagents via \\`pi-subagents\\` or similar tools, supply the generated \\`task-<N>-brief.md\\` out-of-band and enforce the Iron Law of TDD.`;\n}\n\nfunction messageContainsBootstrap(message: unknown): boolean {\n  const content = (message as { content?: unknown })?.content;\n  if (typeof content === 'string') return content.includes(BOOTSTRAP_MARKER);\n  if (!Array.isArray(content)) return false;\n  return content.some(part => {\n    return (\n      part &&\n      typeof part === 'object' &&\n      (part as { type?: unknown }).type === 'text' &&\n      typeof (part as { text?: unknown }).text === 'string' &&\n      (part as { text: string }).text.includes(BOOTSTRAP_MARKER)\n    );\n  });\n}\n\nfunction firstNonCompactionSummaryIndex(messages: unknown[]): number {\n  let index = 0;\n  while ((messages[index] as { role?: unknown } | undefined)?.role === 'compactionSummary') {\n    index += 1;\n  }\n  return index;\n}\n"
-}

package/.agent/history/snapshots/bin__adapter-install.js.json

@@ -1,13 +0,0 @@
-{
-  "file": "bin/adapter-install.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "fs": [],
-    "path": [],
-    "os": [],
-    "child_process": []
-  },
-  "dependents": [],
-  "content": "#!/usr/bin/env node\n\n/**\n * Tribunal Kit — Universal CLI Agent Adapter\n *\n * Auto-detects installed CLI agents and configures Tribunal Kit\n * for each one. Supports Claude Code, Aider, Codex, Gemini CLI,\n * OpenCode, Copilot CLI, Cursor, Windsurf, and Cline.\n *\n * Usage:\n *   node bin/adapter-install.js           # Auto-detect and install all\n *   node bin/adapter-install.js claude     # Install for Claude Code only\n *   node bin/adapter-install.js --global   # Install to ~/.tribunal-kit/\n */\n\nconst fs = require('fs');\nconst path = require('path');\nconst os = require('os');\nconst { execSync } = require('child_process');\n\nconst ADAPTERS = {\n  'claude-code': {\n    detect: () => commandExists('claude'),\n    rulesFile: '.claude/CLAUDE.md',\n    description: 'Claude Code CLI',\n    setup: (projectRoot, _globalMode) => {\n      const rulesDir = path.join(projectRoot, '.claude');\n      ensureDir(rulesDir);\n      const source = path.join(__dirname, '..', '.claude', 'CLAUDE.md');\n      const target = path.join(rulesDir, 'CLAUDE.md');\n      if (fs.existsSync(source)) {\n        fs.copyFileSync(source, target);\n      }\n      const rootTarget = path.join(projectRoot, 'CLAUDE.md');\n      if (fs.existsSync(source) && !fs.existsSync(rootTarget)) {\n        fs.copyFileSync(source, rootTarget);\n      }\n      // Also install MCP server config\n      installMcpConfig(projectRoot, 'claude');\n    },\n  },\n\n  aider: {\n    detect: () => commandExists('aider'),\n    rulesFile: '.aider.conf.yml',\n    description: 'Aider CLI',\n    setup: projectRoot => {\n      const conventionsPath = path.join(projectRoot, 'CONVENTIONS.md');\n      const systemPrompt = fs.readFileSync(\n        path.join(__dirname, '..', '.agent', 'config', 'system-prompt.md'),\n        'utf8',\n      );\n      fs.writeFileSync(conventionsPath, systemPrompt);\n      console.log(`  ✓ Wrote ${conventionsPath}`);\n    },\n  },\n\n  codex: {\n    detect: () => commandExists('codex'),\n    rulesFile: 'AGENTS.md',\n    description: 'OpenAI Codex CLI',\n    setup: projectRoot => {\n      const agentsPath = path.join(projectRoot, 'AGENTS.md');\n      const rootAgentsSource = path.join(__dirname, '..', 'AGENTS.md');\n      let systemPrompt = '';\n      if (fs.existsSync(rootAgentsSource)) {\n        systemPrompt = fs.readFileSync(rootAgentsSource, 'utf8');\n      } else {\n        systemPrompt = fs.readFileSync(\n          path.join(__dirname, '..', '.agent', 'config', 'system-prompt.md'),\n          'utf8',\n        );\n      }\n      fs.writeFileSync(agentsPath, systemPrompt);\n      console.log(`  ✓ Wrote ${agentsPath}`);\n    },\n  },\n\n  'gemini-cli': {\n    detect: () => commandExists('gemini'),\n    rulesFile: '.gemini/rules/GEMINI.md',\n    description: 'Google Gemini CLI',\n    setup: projectRoot => {\n      const geminiDir = path.join(projectRoot, '.gemini', 'rules');\n      ensureDir(geminiDir);\n      const systemPrompt = fs.readFileSync(\n        path.join(__dirname, '..', '.agent', 'config', 'system-prompt.md'),\n        'utf8',\n      );\n      fs.writeFileSync(path.join(geminiDir, 'GEMINI.md'), systemPrompt);\n      console.log(`  ✓ Wrote ${path.join(geminiDir, 'GEMINI.md')}`);\n      // Also install MCP config\n      installMcpConfig(projectRoot, 'gemini');\n    },\n  },\n\n  opencode: {\n    detect: () => commandExists('opencode'),\n    rulesFile: '.opencode/rules.md',\n    description: 'OpenCode CLI',\n    setup: projectRoot => {\n      const opencodeDir = path.join(projectRoot, '.opencode');\n      ensureDir(opencodeDir);\n      const systemPrompt = fs.readFileSync(\n        path.join(__dirname, '..', '.agent', 'config', 'system-prompt.md'),\n        'utf8',\n      );\n      fs.writeFileSync(path.join(opencodeDir, 'rules.md'), systemPrompt);\n      console.log(`  ✓ Wrote ${path.join(opencodeDir, 'rules.md')}`);\n    },\n  },\n\n  'copilot-cli': {\n    detect: () => commandExists('gh') && hasGhExtension('copilot'),\n    rulesFile: '.github/copilot-instructions.md',\n    description: 'GitHub Copilot CLI',\n    setup: projectRoot => {\n      const ghDir = path.join(projectRoot, '.github');\n      ensureDir(ghDir);\n      const systemPrompt = fs.readFileSync(\n        path.join(__dirname, '..', '.agent', 'config', 'system-prompt.md'),\n        'utf8',\n      );\n      fs.writeFileSync(path.join(ghDir, 'copilot-instructions.md'), systemPrompt);\n      console.log(`  ✓ Wrote ${path.join(ghDir, 'copilot-instructions.md')}`);\n    },\n  },\n};\n\n// --- Utility Functions ---\n\nfunction commandExists(cmd) {\n  try {\n    const isWin = os.platform() === 'win32';\n    const check = isWin ? `where ${cmd}` : `which ${cmd}`;\n    execSync(check, { stdio: 'ignore' });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction hasGhExtension(ext) {\n  try {\n    const output = execSync('gh extension list', { encoding: 'utf8' });\n    return output.includes(ext);\n  } catch {\n    return false;\n  }\n}\n\nfunction ensureDir(dirPath) {\n  if (!fs.existsSync(dirPath)) {\n    fs.mkdirSync(dirPath, { recursive: true });\n  }\n}\n\nfunction installMcpConfig(projectRoot, target) {\n  let configPath;\n  if (target === 'claude') {\n    configPath = path.join(projectRoot, '.claude', 'mcp.json');\n  } else if (target === 'gemini') {\n    configPath = path.join(projectRoot, '.gemini', 'settings.json');\n  } else {\n    configPath = path.join(projectRoot, 'mcp_config.json');\n  }\n\n  ensureDir(path.dirname(configPath));\n\n  let existing = {};\n  if (fs.existsSync(configPath)) {\n    try {\n      existing = JSON.parse(fs.readFileSync(configPath, 'utf8'));\n    } catch {\n      existing = {};\n    }\n  }\n\n  if (!existing || typeof existing !== 'object') {\n    existing = {};\n  }\n  if (!existing.mcpServers || typeof existing.mcpServers !== 'object') {\n    existing.mcpServers = {};\n  }\n\n  existing.mcpServers['tribunal-kit'] = {\n    command: 'node',\n    args: [path.join(__dirname, '..', 'bin', 'mcp-server.js')],\n    env: { NODE_ENV: 'production' },\n  };\n\n  fs.writeFileSync(configPath, JSON.stringify(existing, null, 2));\n  console.log(`  ✓ MCP server registered at ${configPath}`);\n}\n\n// --- Main ---\n\nfunction main() {\n  const args = process.argv.slice(2);\n  const globalMode = args.includes('--global');\n  const targetAgent = args.find(a => !a.startsWith('-'));\n  const projectRoot = globalMode ? path.join(os.homedir(), '.tribunal-kit') : process.cwd();\n\n  console.log('');\n  console.log('┌─────────────────────────────────────────────┐');\n  console.log('│  🔱 Tribunal Kit — Universal Agent Adapter  │');\n  console.log('│  v9.2.1 · 52 specialists · 185 skills       │');\n  console.log('└─────────────────────────────────────────────┘');\n  console.log('');\n\n  if (globalMode) {\n    ensureDir(projectRoot);\n    console.log(`📁 Global mode: Installing to ${projectRoot}`);\n  } else {\n    console.log(`📁 Project mode: Installing to ${projectRoot}`);\n  }\n  console.log('');\n\n  let installed = 0;\n  let detected = 0;\n\n  for (const [name, adapter] of Object.entries(ADAPTERS)) {\n    if (targetAgent && name !== targetAgent) continue;\n\n    const isDetected = adapter.detect();\n    if (isDetected) detected++;\n\n    if (targetAgent || isDetected) {\n      console.log(`⚡ ${adapter.description} ${isDetected ? '(detected)' : '(manual)'}`);\n      try {\n        adapter.setup(projectRoot, globalMode);\n        installed++;\n        console.log(`  ✅ Tribunal Kit configured for ${adapter.description}`);\n      } catch (err) {\n        console.error(`  ❌ Failed: ${err.message}`);\n      }\n      console.log('');\n    }\n  }\n\n  if (installed === 0 && !targetAgent) {\n    console.log('⚠️  No CLI agents detected on this machine.');\n    console.log('');\n    console.log('   Supported agents:');\n    for (const [name, adapter] of Object.entries(ADAPTERS)) {\n      console.log(`     • ${name.padEnd(15)} → ${adapter.description}`);\n    }\n    console.log('');\n    console.log('   Install one, then run this command again.');\n    console.log('   Or specify manually: node bin/adapter-install.js claude-code');\n  } else {\n    console.log('─────────────────────────────────────────────');\n    console.log(`✅ Configured ${installed} agent(s) (${detected} auto-detected)`);\n    console.log('');\n    console.log('   Next steps:');\n    console.log('   1. Open your CLI agent normally');\n    console.log('   2. The Tribunal rules are now enforced automatically');\n    console.log('   3. Use /tribunal, /summon, /audit, /debug commands');\n  }\n\n  console.log('');\n}\n\nmain();\n"
-}

package/.agent/history/snapshots/bin__global-store.js.json

@@ -1,15 +0,0 @@
-{
-  "file": "bin/global-store.js",
-  "riskScore": "Medium",
-  "blastRadius": 2,
-  "imports": {
-    "fs": [],
-    "path": [],
-    "os": []
-  },
-  "dependents": [
-    "bin/proxy-server.js",
-    "bin/tk-proxy.js"
-  ],
-  "content": "const fs = require('fs');\nconst path = require('path');\nconst os = require('os');\n\nconst GLOBAL_STORE_PATH = path.join(os.homedir(), '.tribunal-kit');\nconst LOCAL_AGENT_PATH = path.join(__dirname, '..', '.agent');\n\nfunction initializeGlobalStore() {\n  if (!fs.existsSync(GLOBAL_STORE_PATH)) {\n    console.log(`[Tribunal Kit] Initializing global knowledge base at ${GLOBAL_STORE_PATH}...`);\n    fs.mkdirSync(GLOBAL_STORE_PATH, { recursive: true });\n  }\n\n  // Copy .agent folder if it doesn't exist in the global store or if we want to force update\n  const globalAgentPath = path.join(GLOBAL_STORE_PATH, '.agent');\n  if (!fs.existsSync(globalAgentPath)) {\n    console.log(`[Tribunal Kit] Copying specialists and skills to global store...`);\n    copyDirectoryRecursiveSync(LOCAL_AGENT_PATH, globalAgentPath);\n  }\n}\n\nfunction copyDirectoryRecursiveSync(source, target) {\n  if (!fs.existsSync(target)) {\n    fs.mkdirSync(target, { recursive: true });\n  }\n\n  const files = fs.readdirSync(source);\n  for (const file of files) {\n    const sourcePath = path.join(source, file);\n    const targetPath = path.join(target, file);\n\n    if (fs.lstatSync(sourcePath).isDirectory()) {\n      copyDirectoryRecursiveSync(sourcePath, targetPath);\n    } else {\n      fs.copyFileSync(sourcePath, targetPath);\n    }\n  }\n}\n\nfunction getGlobalAgentPath() {\n  return path.join(GLOBAL_STORE_PATH, '.agent');\n}\n\nmodule.exports = {\n  initializeGlobalStore,\n  getGlobalAgentPath,\n  GLOBAL_STORE_PATH,\n};\n"
-}

package/.agent/history/snapshots/bin__mcp-server.js.json

@@ -1,21 +0,0 @@
-{
-  "file": "bin/mcp-server.js",
-  "riskScore": "Medium",
-  "blastRadius": 4,
-  "imports": {
-    "path": [],
-    "child_process": [],
-    "readline": [],
-    "fs": [],
-    "../dist/browser": [],
-    "../dist/commands/memory.js": [],
-    "../dist/commands/align.js": []
-  },
-  "dependents": [
-    "test/unit/audit_release.test.js",
-    "test/unit/context_compiler.test.js",
-    "test/unit/mcp_server.test.js",
-    "test/unit/production_readiness_evidence.test.js"
-  ],
-  "content": "#!/usr/bin/env node\n\n/**\n * Tribunal-Kit MCP Server (Performance-Optimized)\n *\n * This file exposes tribunal-kit tools via the Model Context Protocol (MCP)\n * over standard I/O, allowing AI clients (Cursor, Windsurf, Claude) to natively\n * invoke tribunal checks.\n *\n * In-process tools load reusable modules directly. Commands that depend on a\n * standalone CLI process remain isolated deliberately.\n *\n * Protocol: MCP 2024-11-05 over JSON-RPC 2.0 / stdio\n */\n\nconst path = require('path');\nconst { spawnSync } = require('child_process');\n\nconst PKG = require(path.resolve(__dirname, '../package.json'));\n\n// Timeout for intentionally isolated child processes (30 seconds).\nconst SPAWN_TIMEOUT_MS = 30000;\nconst GENERAL_TOOL_TIMEOUT_MS = 60000;\n\n// --- DSH Guard: Cooperative Timeout ---\nasync function withToolTimeout(fn, timeoutMs) {\n  let timeoutId;\n  const timeoutPromise = new Promise((_, reject) => {\n    timeoutId = setTimeout(() => {\n      reject(new Error('TOOL_TIMEOUT'));\n    }, timeoutMs);\n  });\n\n  try {\n    const result = await Promise.race([Promise.resolve().then(fn), timeoutPromise]);\n    return result;\n  } finally {\n    clearTimeout(timeoutId);\n  }\n}\n\n// --- DSH Guard: Loop Detection ---\nclass ToolRepeatGuard {\n  constructor() {\n    this.history = new Map();\n  }\n\n  observe(toolName, argsObj) {\n    const canonicalize = obj => {\n      if (Array.isArray(obj)) return obj.map(canonicalize);\n      if (obj !== null && typeof obj === 'object') {\n        const sorted = {};\n        for (const key of Object.keys(obj).sort()) {\n          sorted[key] = canonicalize(obj[key]);\n        }\n        return sorted;\n      }\n      if (typeof obj === 'string') {\n        return obj.trim().toLowerCase().replace(/\\s+/g, ' ');\n      }\n      return obj;\n    };\n\n    const canonicalArgs = JSON.stringify(canonicalize(argsObj) || {});\n    const key = `${toolName}::${canonicalArgs}`;\n\n    const currentCount = (this.history.get(key) || 0) + 1;\n    this.history.clear();\n    this.history.set(key, currentCount);\n\n    if (currentCount === 3) {\n      return 'SYSTEM NOTIFICATION: You are repeating the exact same tool call with identical arguments. Carefully analyze the previous result before calling again: if the task is not complete, try a different approach or different arguments instead of repeating the call.';\n    }\n    if (currentCount >= 5) {\n      return `SYSTEM NOTIFICATION: Repeated tool call detected:\\n- tool: ${toolName}\\n- consecutive_calls: ${currentCount}\\n- arguments: ${canonicalArgs}\\nThe repeated calls are not making progress. Do not call this tool with these exact arguments again. Inspect the latest result and choose a different action, different arguments, or finish the task.`;\n    }\n    return null;\n  }\n}\nconst repeatGuard = new ToolRepeatGuard();\n\nclass RpcError extends Error {\n  constructor(code, message) {\n    super(message);\n    this.code = code;\n    this.name = 'RpcError';\n  }\n}\n\n// Minimal JSON-RPC 2.0 over stdio\nconst readline = require('readline');\n\nconst rl = readline.createInterface({\n  input: process.stdin,\n  output: process.stdout,\n  terminal: false,\n});\n\n/**\n * Run the workspace integrity audit without invoking the CLI schema validator.\n * The MCP audit is about Tribunal assets, while `tk validate` validates one\n * explicitly supplied payload and schema.\n */\nfunction runTribunalAudit() {\n  const fs = require('fs');\n  const projectRoot = process.cwd();\n  const manifestScript = path.join(projectRoot, '.agent', 'scripts', 'integrity_manifest.js');\n\n  if (!fs.existsSync(manifestScript)) {\n    return 'Error: .agent/scripts/integrity_manifest.js was not found. Run `tk init` first.';\n  }\n\n  try {\n    const { generateManifest } = require(manifestScript);\n    const manifest = generateManifest(projectRoot);\n    if (manifest.error) return `Error: ${manifest.error}`;\n\n    const { integrity } = manifest;\n    const lines = [\n      'Tribunal audit complete.',\n      `Agents: ${manifest.agents.total} (${manifest.agents.reviewer_count} reviewers)`,\n      `Skills: ${manifest.skills.total}`,\n      `Scripts: ${manifest.scripts.total}`,\n      `Workflows: ${manifest.workflows.total}`,\n      `References: ${integrity.total_references}; phantom references: ${integrity.phantom_references}`,\n      `Count claims: ${integrity.total_claims}; invalid claims: ${integrity.invalid_claims}`,\n    ];\n\n    if (integrity.phantom_references > 0 || integrity.invalid_claims > 0) {\n      lines.push(\n        'Audit found integrity issues; run `tk guardrail --scan` for remediation details.',\n      );\n    } else {\n      lines.push('All discovered references and global asset-count claims are valid.');\n    }\n    return lines.join('\\n');\n  } catch (error) {\n    return `Audit failed: ${error.message}`;\n  }\n}\n\n/**\n * Search case law in an isolated process because its CLI owns persistent state.\n */\nfunction searchCaseLaw(query) {\n  const caseLawScript = path.resolve(__dirname, '../.agent/scripts/case_law_manager.js');\n  // case_law_manager is a standalone stateful CLI, so retain its process boundary.\n  const result = spawnSync(process.execPath, [caseLawScript, 'search-cases', '--query', query], {\n    encoding: 'utf8',\n    timeout: SPAWN_TIMEOUT_MS,\n  });\n  if (result.error) {\n    if (result.error.code === 'ETIMEDOUT')\n      return 'Error: Case law search timed out (exceeded 30s limit)';\n    return `Error executing case law search: ${result.error.message}`;\n  }\n  return result.stdout || result.stderr || 'No results';\n}\n\nfunction stripBoilerplate(text) {\n  if (!text) return text;\n  let minified = text.replace(\n    /AI coding assistants often fall into specific bad habits[\\s\\S]*$/g,\n    '',\n  );\n  minified = minified.replace(/## 🤖 LLM-Specific Traps[\\s\\S]*$/g, '');\n  minified = minified.replace(/## 🏛️ Tribunal Integration[\\s\\S]*$/g, '');\n  minified = minified.replace(/## Pre-Flight Checklist[\\s\\S]*$/g, '');\n  return minified.trim();\n}\n\nfunction getAgentDir() {\n  const fs = require('fs');\n  const local = path.join(process.cwd(), '.agent');\n  if (fs.existsSync(local)) return local;\n  return path.resolve(__dirname, '../.agent');\n}\n\nasync function handleRequest(req) {\n  const fs = require('fs');\n  if (req.method === 'notifications/initialized' || req.method === 'notifications/cancelled') {\n    return null;\n  }\n  if (req.method === 'ping') {\n    return {};\n  }\n\n  // MCP spec: method names follow path-style convention\n  if (req.method === 'initialize') {\n    return {\n      protocolVersion: '2025-03-26',\n      capabilities: {\n        tools: {},\n        resources: { subscribe: false, listChanged: false },\n        prompts: { listChanged: false },\n      },\n      serverInfo: {\n        name: 'tribunal-kit-mcp',\n        version: PKG.version,\n      },\n    };\n  }\n\n  if (req.method === 'resources/list') {\n    const agentDir = getAgentDir();\n    const resources = [];\n\n    // Agents\n    const agentsDir = path.join(agentDir, 'agents');\n    if (fs.existsSync(agentsDir)) {\n      const files = fs.readdirSync(agentsDir).filter(f => f.endsWith('.md'));\n      for (const f of files) {\n        const name = path.basename(f, '.md');\n        resources.push({\n          uri: `tribunal://agent/${name}`,\n          name: `Agent: ${name}`,\n          description: `Tribunal Specialist Agent rule file for ${name}`,\n          mimeType: 'text/markdown',\n        });\n      }\n    }\n\n    // Skills\n    const skillsDir = path.join(agentDir, 'skills');\n    if (fs.existsSync(skillsDir)) {\n      const dirs = fs.readdirSync(skillsDir, { withFileTypes: true });\n      for (const d of dirs) {\n        if (d.isDirectory()) {\n          const skillFile = path.join(skillsDir, d.name, 'SKILL.md');\n          if (fs.existsSync(skillFile)) {\n            resources.push({\n              uri: `tribunal://skill/${d.name}`,\n              name: `Skill: ${d.name}`,\n              description: `Tribunal Skill instruction file for ${d.name}`,\n              mimeType: 'text/markdown',\n            });\n          }\n        }\n      }\n    }\n\n    // Workflows\n    const workflowsDir = path.join(agentDir, 'workflows');\n    if (fs.existsSync(workflowsDir)) {\n      const files = fs.readdirSync(workflowsDir).filter(f => f.endsWith('.md'));\n      for (const f of files) {\n        const name = path.basename(f, '.md');\n        resources.push({\n          uri: `tribunal://workflow/${name}`,\n          name: `Workflow: ${name}`,\n          description: `Tribunal Workflow guide for ${name}`,\n          mimeType: 'text/markdown',\n        });\n      }\n    }\n\n    return { resources };\n  }\n\n  if (req.method === 'resources/read') {\n    const uri = req.params && req.params.uri;\n    if (!uri) throw new Error('Missing uri parameter');\n    const agentDir = getAgentDir();\n    let filePath = null;\n\n    if (uri.startsWith('tribunal://agent/')) {\n      const name = uri.replace('tribunal://agent/', '');\n      filePath = path.join(agentDir, 'agents', `${name}.md`);\n    } else if (uri.startsWith('tribunal://skill/')) {\n      const name = uri.replace('tribunal://skill/', '');\n      filePath = path.join(agentDir, 'skills', name, 'SKILL.md');\n    } else if (uri.startsWith('tribunal://workflow/')) {\n      const name = uri.replace('tribunal://workflow/', '');\n      filePath = path.join(agentDir, 'workflows', `${name}.md`);\n    }\n\n    if (!filePath || !fs.existsSync(filePath)) {\n      throw new Error(`Resource not found: ${uri}`);\n    }\n\n    const text = fs.readFileSync(filePath, 'utf8');\n    return {\n      contents: [\n        {\n          uri,\n          mimeType: 'text/markdown',\n          text,\n        },\n      ],\n    };\n  }\n\n  if (req.method === 'prompts/list') {\n    const agentDir = getAgentDir();\n    const prompts = [];\n    const workflowsDir = path.join(agentDir, 'workflows');\n\n    if (fs.existsSync(workflowsDir)) {\n      const files = fs.readdirSync(workflowsDir).filter(f => f.endsWith('.md'));\n      for (const f of files) {\n        const name = path.basename(f, '.md');\n        prompts.push({\n          name,\n          description: `Execute tribunal workflow /${name}`,\n          arguments: [\n            {\n              name: 'task',\n              description: 'The task or target file to execute the workflow against',\n              required: false,\n            },\n          ],\n        });\n      }\n    }\n\n    return { prompts };\n  }\n\n  if (req.method === 'prompts/get') {\n    const name = req.params && req.params.name;\n    const task = (req.params && req.params.arguments && req.params.arguments.task) || '';\n    if (!name) throw new Error('Missing prompt name parameter');\n\n    const agentDir = getAgentDir();\n    const workflowPath = path.join(agentDir, 'workflows', `${name}.md`);\n    if (!fs.existsSync(workflowPath)) {\n      throw new Error(`Prompt workflow not found: ${name}`);\n    }\n\n    const content = fs.readFileSync(workflowPath, 'utf8');\n    const promptText = task ? `${content}\\n\\nTarget Task/File: ${task}` : content;\n\n    return {\n      messages: [\n        {\n          role: 'user',\n          content: {\n            type: 'text',\n            text: promptText,\n          },\n        },\n      ],\n    };\n  }\n\n  if (req.method === 'tools/list') {\n    return {\n      tools: [\n        {\n          name: 'run_tribunal_audit',\n          description: 'Runs a full anti-hallucination audit across the workspace.',\n          inputSchema: {\n            type: 'object',\n            properties: {},\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'sync_ide_bridges',\n          description: 'Synchronize IDE bridge files with the current GEMINI.md rules.',\n          inputSchema: {\n            type: 'object',\n            properties: {},\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'search_case_law',\n          description:\n            'Search historical code rejections and legal precedent. Use this before writing code to avoid past mistakes.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              query: {\n                type: 'string',\n                description: \"Search query (e.g. 'useEffect state')\",\n              },\n            },\n            required: ['query'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'list_tribunal_agents',\n          description: 'List all available Tribunal Kit agents.',\n          inputSchema: {\n            type: 'object',\n            properties: {},\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'get_tribunal_agent',\n          description: 'Get the full markdown rules for a specific Tribunal agent.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              name: { type: 'string', description: \"The agent name (e.g. 'frontend-specialist')\" },\n            },\n            required: ['name'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'list_tribunal_skills',\n          description: 'List all available Tribunal Kit skills.',\n          inputSchema: {\n            type: 'object',\n            properties: {},\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'get_tribunal_skill',\n          description: 'Get the full markdown instructions for a specific Tribunal skill.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              name: { type: 'string', description: \"The skill name (e.g. 'react-specialist')\" },\n            },\n            required: ['name'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'recall_memory',\n          description:\n            'Budget-constrained memory recall from the 4-Type Taxonomy Persistent Memory Engine. Returns the most relevant memories that fit within the token budget, ranked by relevance × recency × priority. Use this BEFORE writing code to recall project guidelines without bloating context.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              query: {\n                type: 'string',\n                description: \"Search query (e.g. 'database', 'auth', 'deploy')\",\n              },\n              budget: {\n                type: 'number',\n                description:\n                  'Maximum token budget for recall (default: 2000). Only the top-ranked memories that fit within this budget are returned.',\n              },\n            },\n            required: ['query'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'store_memory',\n          description:\n            'Store a new memory entry in the 4-Type Taxonomy Persistent Memory Engine. Memories are schema-validated and persisted across sessions. Types: semantic (permanent facts), procedural (how-to recipes), episodic (30-day TTL events), working (session scratch).',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              type: {\n                type: 'string',\n                enum: ['semantic', 'procedural', 'episodic', 'working'],\n                description:\n                  'Memory type: semantic (facts), procedural (recipes), episodic (events), working (scratch)',\n              },\n              content: {\n                type: 'string',\n                description: 'The memory content to store',\n              },\n              tags: {\n                type: 'array',\n                items: { type: 'string' },\n                description: 'Searchable tags for this memory',\n              },\n            },\n            required: ['type', 'content'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'get_sparse_context',\n          description:\n            'Get a JIT, token-optimized context prompt tailored to the active task and files. Uses the Context Density Broker to score and select relevant skills, stripping duplicate boilerplate and saving up to 85% in prompt tokens.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              task: {\n                type: 'string',\n                description: \"The user task description (e.g. 'JWT auth API')\",\n              },\n              files: {\n                type: 'array',\n                items: { type: 'string' },\n                description: \"List of files being touched (e.g. ['src/auth.js'])\",\n              },\n              model: {\n                type: 'string',\n                enum: ['large', 'small'],\n                description:\n                  'Model tier: large (default, includes key rules of supplementary skills) or small (essential skills only)',\n              },\n            },\n            required: ['task'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'align_output',\n          description:\n            'Align model outputs to Fabel-5 constraints: strips conversational introductions and conclusions, collapses single/double bullet items to prose, and checks for code traps (unawaited dynamic functions in Next.js 15, deprecated hooks in React 19, or non-existent models).',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              text: {\n                type: 'string',\n                description: 'The raw output text generated by the model to be aligned.',\n              },\n            },\n            required: ['text'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'verify_contracts',\n          description:\n            'Verify proposed code changes against project behavioral contracts. Use BEFORE writing code to ensure compliance with team conventions.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              file: {\n                type: 'string',\n                description: \"Relative or absolute file path to verify (e.g. 'src/api/user.ts')\",\n              },\n              content: {\n                type: 'string',\n                description: 'Proposed file content to verify against loaded contracts',\n              },\n            },\n            required: ['file', 'content'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'query_semantic_graph',\n          description:\n            'Query the Ahead-of-Time (AOT) Semantic Context Graph to quickly resolve function signatures, dependencies, and file structures without inflating context windows.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              targetPath: {\n                type: 'string',\n                description: 'The directory to query (defaults to current workspace).',\n              },\n            },\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'exit_plan_mode',\n          description:\n            'Present your finished plan for human reviewed designing your approach. Execution will suspend until the user approves or requests changes.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              plan_content: {\n                type: 'string',\n                description: 'The markdown content of your proposed plan.',\n              },\n            },\n            required: ['plan_content'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'tk_browser_navigate',\n          description:\n            'Token-efficient browser navigation. Navigates headlessly to a URL, prunes HTML using htmltrim (< 4,000 bytes / ~1,000 tokens), enforces IDPI prompt injection defense, and returns compact semantic markdown with an interactive elements tree.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              url: {\n                type: 'string',\n                description:\n                  'The target URL to inspect (e.g. http://localhost:3000 or https://example.com)',\n              },\n            },\n            required: ['url'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'tk_browser_audit',\n          description:\n            'Live web quality, accessibility, console error, and Core Web Vitals auditor. Navigates headlessly to a URL, checks WCAG 2.2 contrast/aria, network failures, uncaught exceptions, and security headers. Returns structured audit report.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              url: {\n                type: 'string',\n                description: 'The target URL to audit (e.g. http://localhost:3000)',\n              },\n            },\n            required: ['url'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'tk_browser_compare',\n          description:\n            'Visual regression differ. Captures synchronized screenshots of two URLs (e.g. localhost dev server vs production) and computes pixel mismatch percentage to verify layout integrity before release.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              url1: {\n                type: 'string',\n                description: 'Baseline or staging URL (e.g. http://localhost:3000)',\n              },\n              url2: {\n                type: 'string',\n                description: 'Production or target URL to compare against',\n              },\n              maxDiffPercent: {\n                type: 'number',\n                description:\n                  'Maximum allowable difference percentage before failing (default: 1.0)',\n              },\n            },\n            required: ['url1', 'url2'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'tk_browser_screenshot',\n          description: 'Captures a viewport screenshot of a target URL as base64 PNG data.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              url: {\n                type: 'string',\n                description: 'The URL to screenshot',\n              },\n            },\n            required: ['url'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'tk_deconstruct_component',\n          description:\n            'Reverse-engineers a live web element into a production React TSX component with Tailwind CSS classes by inspecting computed CSSOM (geometry, typography, elevation, transitions).',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              url: {\n                type: 'string',\n                description: 'The URL hosting the target element',\n              },\n              selector: {\n                type: 'string',\n                description:\n                  'CSS selector matching the element (e.g. button.primary or #pricing-card)',\n              },\n              name: {\n                type: 'string',\n                description: 'Optional PascalCase component name (e.g. PricingCard)',\n              },\n            },\n            required: ['url', 'selector'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'tk_heal_runtime_errors',\n          description:\n            'Runtime Sentinel error hunter. Scans a live web page or dev server for uncaught exceptions, React boundary errors, and framework overlays, localizing them to workspace source files.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              url: {\n                type: 'string',\n                description: 'The dev server or web page URL (e.g. http://localhost:3000)',\n              },\n              verify: {\n                type: 'boolean',\n                description:\n                  'If true, verifies whether previously reported runtime errors have cleared',\n              },\n            },\n            required: ['url'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'tk_codify_browser_audit',\n          description:\n            'Audits a target URL and automatically codifies detected WCAG accessibility failures, missing security headers, and console errors into binding Case Law precedents.',\n          inputSchema: {\n            type: 'object',\n            properties: {\n              url: {\n                type: 'string',\n                description: 'The URL to audit and codify',\n              },\n            },\n            required: ['url'],\n            additionalProperties: false,\n          },\n        },\n        {\n          name: 'tribunal_get_context',\n          description:\n            \"Generate or retrieve an elite Flight Data HUD context dossier for any file, multi-file pair, or directory. Automatically extracts public API contracts, callers, Chesterton's Fences, invariants, and test recipes. Supports drift checking and living vault sync.\",\n          inputSchema: {\n            type: 'object',\n            properties: {\n              target: {\n                type: 'string',\n                description: 'File path, folder path, or primary file to analyze.',\n              },\n              compareWith: {\n                type: 'string',\n                description: 'Optional secondary file for multi-file interface bridge analysis.',\n              },\n              write: {\n                type: 'boolean',\n                description:\n                  'Whether to write the generated dossier to docs/context/ and update INDEX.md (default: true).',\n              },\n              check: {\n                type: 'boolean',\n                description: 'Run vault-wide semantic drift check instead of analyzing a target.',\n              },\n            },\n            additionalProperties: false,\n          },\n        },\n      ],\n    };\n  }\n\n  if (req.method === 'tools/call') {\n    const toolName = req.params && req.params.name;\n    const argsObj = req.params && req.params.arguments;\n    if (!toolName) {\n      throw new RpcError(-32602, 'Missing required parameter: params.name');\n    }\n\n    const reminder = repeatGuard.observe(toolName, argsObj);\n\n    const executeTool = async () => {\n      if (toolName === 'tribunal_get_context') {\n        const target = req.params?.arguments?.target;\n        const compareWith = req.params?.arguments?.compareWith;\n        const write = req.params?.arguments?.write !== false;\n        const check = req.params?.arguments?.check;\n\n        try {\n          const workspaceRoot = process.cwd();\n          \n          if (check) {\n            const { spawn } = require('child_process');\n            const result = await new Promise((resolve, reject) => {\n               const child = spawn(process.execPath, [path.join(__dirname, 'wrapper.js'), 'guardrail', '--scan'], { cwd: workspaceRoot, encoding: 'utf8' });\n               let out = '';\n               child.stdout.on('data', d => out += d);\n               child.stderr.on('data', d => out += d);\n               child.on('close', code => resolve(out));\n               child.on('error', reject);\n            });\n            return {\n              content: [\n                {\n                  type: 'text',\n                  text: result,\n                },\n              ],\n            };\n          }\n\n          if (!target) {\n            throw new RpcError(\n              -32602,\n              'Missing required argument: target (file or directory path)',\n            );\n          }\n\n          // We use wrapper.js context to route it to the Rust AST binary via the child process\n          // This prevents blocking the MCP server event loop.\n          const { spawn } = require('child_process');\n          const args = [path.join(__dirname, 'wrapper.js'), 'context', target];\n          if (compareWith) {\n             args.push('--compareWith');\n             args.push(compareWith);\n          }\n          if (write) {\n             args.push('--write');\n          }\n\n          const result = await new Promise((resolve, reject) => {\n             const child = spawn(process.execPath, args, { cwd: workspaceRoot, encoding: 'utf8' });\n             let out = '';\n             child.stdout.on('data', d => out += d);\n             child.stderr.on('data', d => out += d);\n             child.on('close', code => {\n                 resolve(out);\n             });\n             child.on('error', reject);\n          });\n          \n          return {\n            content: [{ type: 'text', text: result }],\n          };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Context Compiler Error: ${e.message}` }],\n            isError: true,\n          };\n        }\n      }\n\n      if (toolName === 'exit_plan_mode') {\n        const planContent = req.params?.arguments?.plan_content;\n        if (typeof planContent !== 'string') {\n          throw new RpcError(-32602, 'Missing or invalid required argument: plan_content (string)');\n        }\n        // The wrapper CLI can intercept this, but for the LLM context, we explicitly tell it to wait.\n        return {\n          content: [\n            {\n              type: 'text',\n              text: 'PLAN_SUBMITTED_FOR_REVIEW: The plan has been presented to the human. Please suspend execution and wait for the human to approve or provide feedback in the next turn. Do not call any further tools until you receive a response.',\n            },\n          ],\n        };\n      }\n\n      if (toolName === 'tk_browser_navigate') {\n        const url = req.params?.arguments?.url;\n        if (!url || typeof url !== 'string') {\n          throw new RpcError(-32602, 'Missing required argument: url (string)');\n        }\n        try {\n          const { browse } = require('../dist/browser');\n          const result = await browse(url);\n          return {\n            content: [\n              {\n                type: 'text',\n                text: result.sandboxed,\n              },\n            ],\n          };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Browser navigation error: ${e.message}` }],\n            isError: true,\n          };\n        }\n      }\n\n      if (toolName === 'tk_browser_audit') {\n        const url = req.params?.arguments?.url;\n        if (!url || typeof url !== 'string') {\n          throw new RpcError(-32602, 'Missing required argument: url (string)');\n        }\n        try {\n          const { auditURL } = require('../dist/browser');\n          const report = await auditURL(url);\n          return {\n            content: [\n              {\n                type: 'text',\n                text: JSON.stringify(report, null, 2),\n              },\n            ],\n          };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Browser audit error: ${e.message}` }],\n            isError: true,\n          };\n        }\n      }\n\n      if (toolName === 'tk_browser_compare') {\n        const url1 = req.params?.arguments?.url1;\n        const url2 = req.params?.arguments?.url2;\n        const maxDiffPercent = req.params?.arguments?.maxDiffPercent;\n        if (!url1 || !url2) {\n          throw new RpcError(-32602, 'Missing required arguments: url1 and url2 (strings)');\n        }\n        try {\n          const { compareURLs } = require('../dist/browser');\n          const result = await compareURLs(url1, url2, { maxDiffPercent });\n          return {\n            content: [\n              {\n                type: 'text',\n                text: JSON.stringify(result, null, 2),\n              },\n            ],\n          };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Browser compare error: ${e.message}` }],\n            isError: true,\n          };\n        }\n      }\n\n      if (toolName === 'tk_browser_screenshot') {\n        const url = req.params?.arguments?.url;\n        if (!url || typeof url !== 'string') {\n          throw new RpcError(-32602, 'Missing required argument: url (string)');\n        }\n        try {\n          const { launchBrowser, CdpClient, createNewTab, closeTab } = require('../dist/browser');\n          const browser = await launchBrowser();\n          let client = null;\n          let tab = null;\n          try {\n            tab = await createNewTab(browser.port);\n            client = new CdpClient();\n            await client.connect(tab.webSocketDebuggerUrl);\n            await client.initDomains();\n            await client.navigate(url);\n            const shot = await client.captureScreenshot('png');\n            return {\n              content: [\n                {\n                  type: 'text',\n                  text: `Screenshot captured successfully for ${url} (${Buffer.byteLength(shot, 'base64')} bytes base64 PNG).`,\n                },\n              ],\n            };\n          } finally {\n            if (client) client.close();\n            if (tab && browser) await closeTab(tab.id, browser.port);\n            await browser.close();\n          }\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Screenshot error: ${e.message}` }],\n            isError: true,\n          };\n        }\n      }\n\n      if (toolName === 'tk_deconstruct_component') {\n        const url = req.params?.arguments?.url;\n        const selector = req.params?.arguments?.selector;\n        const name = req.params?.arguments?.name;\n        if (!url || !selector) {\n          throw new RpcError(-32602, 'Missing required arguments: url and selector (strings)');\n        }\n        try {\n          const { deconstructElement } = require('../dist/browser');\n          const result = await deconstructElement(url, selector, { name });\n          return {\n            content: [\n              {\n                type: 'text',\n                text: result.code,\n              },\n            ],\n          };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Component deconstruction error: ${e.message}` }],\n            isError: true,\n          };\n        }\n      }\n\n      if (toolName === 'tk_heal_runtime_errors') {\n        const url = req.params?.arguments?.url;\n        const verify = req.params?.arguments?.verify;\n        if (!url) {\n          throw new RpcError(-32602, 'Missing required argument: url (string)');\n        }\n        try {\n          const { captureRuntimeErrors, verifyRuntimeFix } = require('../dist/browser');\n          const result = verify ? await verifyRuntimeFix(url) : await captureRuntimeErrors(url);\n          return {\n            content: [\n              {\n                type: 'text',\n                text: JSON.stringify(result, null, 2),\n              },\n            ],\n          };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Runtime Sentinel error: ${e.message}` }],\n            isError: true,\n          };\n        }\n      }\n\n      if (toolName === 'tk_codify_browser_audit') {\n        const url = req.params?.arguments?.url;\n        if (!url) {\n          throw new RpcError(-32602, 'Missing required argument: url (string)');\n        }\n        try {\n          const { auditURL, codifyAuditViolations } = require('../dist/browser');\n          const report = await auditURL(url);\n          const codified = codifyAuditViolations(report);\n          return {\n            content: [\n              {\n                type: 'text',\n                text: JSON.stringify({ report, codified }, null, 2),\n              },\n            ],\n          };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Audit & codify error: ${e.message}` }],\n            isError: true,\n          };\n        }\n      }\n\n      if (toolName === 'dispatch_swarm') {\n        const payload = req.params?.arguments?.payload;\n        const file = req.params?.arguments?.file;\n        const workspace = req.params?.arguments?.workspace || '.';\n        const mode = req.params?.arguments?.mode || 'legacy';\n        const useTui = req.params?.arguments?.use_tui || false;\n\n        if (!payload && !file) {\n          throw new RpcError(\n            -32602,\n            'Missing required argument: either payload or file must be provided',\n          );\n        }\n\n        if (payload && file) {\n          throw new RpcError(-32602, 'Invalid arguments: provide either payload or file, not both');\n        }\n\n        const agentDir = getAgentDir();\n        const fs = require('fs');\n        if (!fs.existsSync(agentDir)) {\n          return {\n            content: [\n              { type: 'text', text: 'Error: .agent/ directory not found. Run `tk init` first.' },\n            ],\n          };\n        }\n\n        try {\n          let _payloadData;\n          if (file) {\n            const filePath = path.resolve(workspace, file);\n            if (!fs.existsSync(filePath)) {\n              throw new Error(`File not found: ${filePath}`);\n            }\n            _payloadData = JSON.parse(fs.readFileSync(filePath, 'utf8'));\n          } else {\n            _payloadData = JSON.parse(payload);\n          }\n\n          // Import swarm dispatcher functions\n          const _swarmDispatcher = require(path.join(agentDir, 'scripts', 'swarm_dispatcher.js'));\n\n          // Execute the swarm dispatcher\n          const originalArgv = process.argv;\n          process.argv = ['node', 'swarm_dispatcher.js', '--mode', mode, '--workspace', workspace];\n\n          if (useTui) {\n            process.argv.push('--tui');\n          }\n\n          if (file) {\n            process.argv.push('--file');\n            process.argv.push(file);\n          } else if (payload) {\n            process.argv.push('--payload');\n            process.argv.push(payload);\n          }\n\n          // Capture output\n          const { spawnSync } = require('child_process');\n          const result = spawnSync(\n            process.execPath,\n            [path.join(agentDir, 'scripts', 'swarm_dispatcher.js'), ...process.argv.slice(2)],\n            {\n              encoding: 'utf8',\n              timeout: 30000,\n            },\n          );\n\n          // Restore argv\n          process.argv = originalArgv;\n\n          if (result.error) {\n            throw result.error;\n          }\n\n          return {\n            content: [\n              { type: 'text', text: result.stdout || result.stderr || 'Swarm dispatch completed' },\n            ],\n          };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Swarm dispatch failed: ${e.message}` }],\n          };\n        }\n      }\n\n      if (toolName === 'get_ast_context') {\n        const targetPath = req.params?.arguments?.targetPath || process.cwd();\n        try {\n          const result = spawnSync(\n            'node',\n            [path.join(__dirname, '../scripts/build-graph.js'), targetPath],\n            {\n              encoding: 'utf8',\n              timeout: 10000,\n            },\n          );\n          if (result.error) throw result.error;\n          return { content: [{ type: 'text', text: result.stdout || result.stderr }] };\n        } catch (e) {\n          return { content: [{ type: 'text', text: `Failed to query graph: ${e.message}` }] };\n        }\n      }\n\n      if (toolName === 'validate_payload') {\n        const payloadStr = req.params?.arguments?.payload;\n        const schemaType = req.params?.arguments?.schemaType;\n\n        if (!payloadStr || typeof payloadStr !== 'string') {\n          throw new RpcError(-32602, 'Missing or invalid required argument: payload (string)');\n        }\n        if (!schemaType || typeof schemaType !== 'string') {\n          throw new RpcError(-32602, 'Missing or invalid required argument: schemaType (string)');\n        }\n\n        const agentDir = getAgentDir();\n        const fs = require('fs');\n        if (!fs.existsSync(agentDir)) {\n          return {\n            content: [\n              { type: 'text', text: 'Error: .agent/ directory not found. Run `tk init` first.' },\n            ],\n          };\n        }\n\n        try {\n          const payloadData = JSON.parse(payloadStr);\n          const {\n            WorkerRequestSchema,\n            WorkerResultSchema,\n            SwarmPayloadSchema,\n            validatePayloadOrThrow,\n          } = require(path.join(agentDir, 'scripts', 'payload_schemas.js'));\n\n          let schema;\n          switch (schemaType) {\n            case 'worker-request':\n              schema = WorkerRequestSchema;\n              break;\n            case 'worker-result':\n              schema = WorkerResultSchema;\n              break;\n            case 'swarm-payload':\n              schema = SwarmPayloadSchema;\n              break;\n            default:\n              throw new RpcError(\n                -32602,\n                `Invalid schemaType: ${schemaType}. Must be one of: worker-request, worker-result, swarm-payload`,\n              );\n          }\n\n          const validatedData = validatePayloadOrThrow(payloadData, schema);\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Payload validation successful.\\n\\nValidated payload:\\n${JSON.stringify(validatedData, null, 2)}`,\n              },\n            ],\n          };\n        } catch (e) {\n          if (e instanceof SyntaxError) {\n            return { content: [{ type: 'text', text: `Invalid JSON payload: ${e.message}` }] };\n          } else {\n            return { content: [{ type: 'text', text: `Payload validation failed: ${e.message}` }] };\n          }\n        }\n      }\n\n      if (toolName === 'run_tribunal_audit') {\n        const text = runTribunalAudit();\n        return { content: [{ type: 'text', text }] };\n      }\n\n      if (toolName === 'sync_ide_bridges') {\n        const fs = require('fs');\n        const cwd = process.cwd();\n        const agentDest = path.join(cwd, '.agent');\n        if (!fs.existsSync(agentDest)) {\n          return {\n            content: [\n              {\n                type: 'text',\n                text: 'Error: .agent/ directory not found. Run `tk init` first.',\n              },\n            ],\n          };\n        }\n        try {\n          const { generateIDEBridges } = require(\n            path.resolve(__dirname, '../dist/commands/init.js'),\n          );\n          // generateIDEBridges is async\n          await generateIDEBridges(cwd, agentDest, true);\n          return {\n            content: [\n              {\n                type: 'text',\n                text: 'Sync complete',\n              },\n            ],\n          };\n        } catch (e) {\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Sync failed: ${e.message}`,\n              },\n            ],\n          };\n        }\n      }\n\n      if (toolName === 'search_case_law') {\n        const query = req.params && req.params.arguments && req.params.arguments.query;\n        if (!query || typeof query !== 'string') {\n          throw new RpcError(-32602, 'Missing or invalid required argument: query (string)');\n        }\n        const text = searchCaseLaw(query);\n        return { content: [{ type: 'text', text }] };\n      }\n\n      if (toolName === 'list_tribunal_agents') {\n        const fs = require('fs');\n        const agentDir = path.join(getAgentDir(), 'agents');\n        if (!fs.existsSync(agentDir))\n          return {\n            content: [{ type: 'text', text: 'No agents found or .agent directory missing.' }],\n          };\n        const agents = fs\n          .readdirSync(agentDir)\n          .filter(f => f.endsWith('.md'))\n          .map(f => f.replace('.md', ''));\n        return { content: [{ type: 'text', text: 'Available Agents:\\n- ' + agents.join('\\n- ') }] };\n      }\n\n      if (toolName === 'get_tribunal_agent') {\n        const fs = require('fs');\n        const name = req.params?.arguments?.name;\n        if (!name || typeof name !== 'string')\n          throw new RpcError(-32602, 'Missing or invalid argument: name (string)');\n        const sanitizedName = path.basename(name);\n        const agentsDir = path.resolve(getAgentDir(), 'agents');\n        const agentPath = path.resolve(agentsDir, `${sanitizedName}.md`);\n        // Path containment: ensure resolved path stays within agents directory\n        if (!agentPath.startsWith(agentsDir))\n          throw new RpcError(-32602, 'Invalid agent name: path traversal detected');\n        if (!fs.existsSync(agentPath))\n          return { content: [{ type: 'text', text: `Agent '${sanitizedName}' not found.` }] };\n        const text = fs.readFileSync(agentPath, 'utf8');\n        return { content: [{ type: 'text', text: stripBoilerplate(text) }] };\n      }\n\n      if (toolName === 'list_tribunal_skills') {\n        const fs = require('fs');\n        const skillsDir = path.join(getAgentDir(), 'skills');\n        if (!fs.existsSync(skillsDir))\n          return {\n            content: [{ type: 'text', text: 'No skills found or .agent directory missing.' }],\n          };\n        const skills = fs\n          .readdirSync(skillsDir, { withFileTypes: true })\n          .filter(d => d.isDirectory())\n          .map(d => d.name);\n        return { content: [{ type: 'text', text: 'Available Skills:\\n- ' + skills.join('\\n- ') }] };\n      }\n\n      if (toolName === 'get_tribunal_skill') {\n        const fs = require('fs');\n        const name = req.params?.arguments?.name;\n        if (!name || typeof name !== 'string')\n          throw new RpcError(-32602, 'Missing or invalid argument: name (string)');\n        const sanitizedName = path.basename(name);\n        const skillsDir = path.resolve(getAgentDir(), 'skills');\n        const skillPath = path.resolve(skillsDir, sanitizedName, 'SKILL.md');\n        // Path containment: ensure resolved path stays within skills directory\n        if (!skillPath.startsWith(skillsDir))\n          throw new RpcError(-32602, 'Invalid skill name: path traversal detected');\n        if (!fs.existsSync(skillPath))\n          return { content: [{ type: 'text', text: `Skill '${sanitizedName}' not found.` }] };\n        const text = fs.readFileSync(skillPath, 'utf8');\n        return { content: [{ type: 'text', text: stripBoilerplate(text) }] };\n      }\n\n      if (toolName === 'get_sparse_context') {\n        const task = req.params?.arguments?.task;\n        const files = req.params?.arguments?.files || [];\n        const model = req.params?.arguments?.model || 'large';\n\n        if (!task) throw new RpcError(-32602, 'Missing required argument: task');\n\n        const agentDest = getAgentDir();\n        const fs = require('fs');\n        if (!fs.existsSync(agentDest)) {\n          return {\n            content: [\n              { type: 'text', text: 'Error: .agent/ directory not found. Run `tk init` first.' },\n            ],\n          };\n        }\n\n        try {\n          const workspaceRoot = process.cwd();\n          const { spawn } = require('child_process');\n          const args = [path.join(__dirname, 'wrapper.js'), 'context-broker', '--repo-path', workspaceRoot];\n          if (task) {\n             args.push('--task');\n             args.push(task);\n          }\n          if (files && files.length > 0) {\n             args.push('--files');\n             args.push(files.join(','));\n          }\n\n          const result = await new Promise((resolve, reject) => {\n             const child = spawn(process.execPath, args, { cwd: workspaceRoot, encoding: 'utf8' });\n             let out = '';\n             child.stdout.on('data', d => out += d);\n             child.stderr.on('data', d => out += d);\n             child.on('close', code => {\n                 resolve(out);\n             });\n             child.on('error', reject);\n          });\n          \n          return { content: [{ type: 'text', text: stripBoilerplate(result) }] };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Failed to retrieve sparse context: ${e.message}` }],\n          };\n        }\n      }\n\n      if (toolName === 'recall_memory') {\n        const query = req.params?.arguments?.query;\n        if (!query || typeof query !== 'string') {\n          throw new RpcError(-32602, 'Missing or invalid required argument: query (string)');\n        }\n        const budget = req.params?.arguments?.budget || 2000;\n        const agentDest = getAgentDir();\n        const fs = require('fs');\n        if (!fs.existsSync(agentDest)) {\n          return {\n            content: [\n              { type: 'text', text: 'Error: .agent/ directory not found. Run `tk init` first.' },\n            ],\n          };\n        }\n        try {\n          const { _memoryRecall } = require('../dist/commands/memory.js');\n          const { results, tokens_used } = _memoryRecall(agentDest, query, budget);\n          if (results.length === 0) {\n            return { content: [{ type: 'text', text: `No memories match query: \"${query}\"` }] };\n          }\n          let text = `## Memory Recall (${results.length} results, ~${tokens_used}/${budget} tokens)\\n\\n`;\n          for (const entry of results) {\n            text += `- **[${entry.memory_type.toUpperCase()}]** #${entry.id}: ${entry.content}`;\n            if (entry.tags.length > 0) text += ` _(${entry.tags.join(', ')})_`;\n            text += `\\n`;\n          }\n          return { content: [{ type: 'text', text }] };\n        } catch (e) {\n          return { content: [{ type: 'text', text: `Memory recall failed: ${e.message}` }] };\n        }\n      }\n\n      if (toolName === 'store_memory') {\n        const memType = req.params?.arguments?.type;\n        const content = req.params?.arguments?.content;\n        const tags = req.params?.arguments?.tags || [];\n        if (!memType || !content) {\n          throw new RpcError(-32602, 'Missing required arguments: type (string), content (string)');\n        }\n        const validTypes = ['semantic', 'procedural', 'episodic', 'working'];\n        if (!validTypes.includes(memType)) {\n          throw new RpcError(\n            -32602,\n            `Invalid memory type: \"${memType}\". Must be one of: ${validTypes.join(', ')}`,\n          );\n        }\n        const agentDest = getAgentDir();\n        const fs = require('fs');\n        if (!fs.existsSync(agentDest)) {\n          return {\n            content: [\n              { type: 'text', text: 'Error: .agent/ directory not found. Run `tk init` first.' },\n            ],\n          };\n        }\n        try {\n          const { _memoryStore } = require('../dist/commands/memory.js');\n          const result = _memoryStore(agentDest, memType, content, tags, null);\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Memory stored: #${result.id} (${memType}, ~${result.token_estimate} tokens)`,\n              },\n            ],\n          };\n        } catch (e) {\n          return { content: [{ type: 'text', text: `Memory store failed: ${e.message}` }] };\n        }\n      }\n\n      if (toolName === 'query_semantic_graph') {\n        const targetPath = req.params?.arguments?.targetPath || process.cwd();\n        try {\n          const result = spawnSync(\n            'node',\n            [path.join(__dirname, '../scripts/build-graph.js'), targetPath],\n            {\n              encoding: 'utf8',\n              timeout: 10000,\n            },\n          );\n          if (result.error) throw result.error;\n          return { content: [{ type: 'text', text: result.stdout || result.stderr }] };\n        } catch (e) {\n          return { content: [{ type: 'text', text: `Failed to query graph: ${e.message}` }] };\n        }\n      }\n\n      if (toolName === 'align_output') {\n        const text = req.params?.arguments?.text;\n        if (typeof text !== 'string') {\n          throw new RpcError(-32602, 'Missing or invalid required argument: text (string)');\n        }\n        try {\n          const { alignText, validateCodeContent } = require('../dist/commands/align.js');\n          const aligned = alignText(text);\n          const warnings = validateCodeContent(aligned);\n\n          let outputText = aligned;\n          if (warnings.length > 0) {\n            outputText += '\\n\\n⚠️  OCAE Alignment Validator Warnings:\\n';\n            for (const warnMsg of warnings) {\n              outputText += `● ${warnMsg}\\n`;\n            }\n          }\n          return { content: [{ type: 'text', text: outputText }] };\n        } catch (e) {\n          return { content: [{ type: 'text', text: `Output alignment failed: ${e.message}` }] };\n        }\n      }\n\n      if (toolName === 'verify_contracts') {\n        const file = req.params?.arguments?.file;\n        const content = req.params?.arguments?.content;\n\n        if (!file || typeof file !== 'string' || typeof content !== 'string') {\n          throw new RpcError(\n            -32602,\n            'Missing or invalid required arguments: file (string), content (string)',\n          );\n        }\n\n        try {\n          const projectRoot = process.cwd();\n          const contractEnginePath = path.join(getAgentDir(), 'scripts', 'contract_engine.js');\n          if (!require('fs').existsSync(contractEnginePath)) {\n            return {\n              content: [\n                { type: 'text', text: 'Error: contract_engine.js not found. Run `tk init` first.' },\n              ],\n            };\n          }\n\n          const contractEngine = require(contractEnginePath);\n          const contracts = contractEngine.loadContracts(projectRoot);\n\n          if (contracts.length === 0) {\n            return {\n              content: [\n                {\n                  type: 'text',\n                  text: 'No active behavioral contracts found in .tribunal/contracts/.',\n                },\n              ],\n            };\n          }\n\n          const relativePath = path.relative(projectRoot, file).replace(/\\\\/g, '/');\n          const allViolations = [];\n\n          for (const contract of contracts) {\n            const vList = contractEngine.evaluateContract(contract, relativePath, content);\n            if (vList.length > 0) {\n              allViolations.push(...vList);\n            }\n          }\n\n          if (allViolations.length === 0) {\n            return {\n              content: [\n                {\n                  type: 'text',\n                  text: '✅ Contract check passed. Zero behavioral violations detected.',\n                },\n              ],\n            };\n          }\n\n          let report = `📜 Contract Verification Results (${allViolations.length} violations):\\n`;\n          for (const v of allViolations) {\n            report += `● [${v.severity.toUpperCase()}] ${v.contract}: ${v.message}\\n`;\n            if (v.line) report += `   Line ${v.line}: ${v.snippet || ''}\\n`;\n          }\n\n          return { content: [{ type: 'text', text: report }] };\n        } catch (e) {\n          return {\n            content: [{ type: 'text', text: `Contract verification failed: ${e.message}` }],\n          };\n        }\n      }\n\n      throw new RpcError(-32601, `Unknown tool: ${toolName}`);\n    };\n\n    try {\n      const result = await withToolTimeout(executeTool, GENERAL_TOOL_TIMEOUT_MS);\n      if (reminder) {\n        result.content.push({ type: 'text', text: '\\n\\n' + reminder });\n      }\n      return result;\n    } catch (e) {\n      if (e.message === 'TOOL_TIMEOUT') {\n        const errorMsg = `Error: Tool execution timed out after ${GENERAL_TOOL_TIMEOUT_MS}ms`;\n        const result = { content: [{ type: 'text', text: errorMsg }] };\n        if (reminder) result.content.push({ type: 'text', text: '\\n\\n' + reminder });\n        return result;\n      }\n      throw e;\n    }\n  }\n\n  throw new RpcError(-32601, `Unknown method: ${req.method}`);\n}\n\nasync function processSingleRequest(req) {\n  try {\n    const result = await handleRequest(req);\n    // If it's a notification, do not send a response\n    if (req.id === undefined || req.id === null) {\n      return null;\n    }\n    return { jsonrpc: '2.0', id: req.id, result };\n  } catch (e) {\n    const code = e && typeof e.code === 'number' ? e.code : -32603;\n    const message = e && e.message ? e.message : 'Internal server error';\n    if (req.id === undefined || req.id === null) {\n      return {\n        jsonrpc: '2.0',\n        id: null,\n        error: { code, message },\n      };\n    }\n    return {\n      jsonrpc: '2.0',\n      id: req.id,\n      error: { code, message },\n    };\n  }\n}\n\nrl.on('line', async line => {\n  if (line.length > 1048576) {\n    // 1MB limit\n    const errorRes = {\n      jsonrpc: '2.0',\n      id: null,\n      error: { code: -32700, message: 'Parse error: input line too long (exceeds 1MB limit)' },\n    };\n    console.log(JSON.stringify(errorRes));\n    return;\n  }\n  if (!line.trim()) return;\n\n  let req;\n  try {\n    req = JSON.parse(line);\n  } catch (parseErr) {\n    // Invalid JSON — send a parse error\n    const errorRes = {\n      jsonrpc: '2.0',\n      id: null,\n      error: { code: -32700, message: 'Parse error: ' + parseErr.message },\n    };\n    console.log(JSON.stringify(errorRes));\n    return;\n  }\n\n  if (Array.isArray(req)) {\n    const responses = [];\n    for (const singleReq of req) {\n      const response = await processSingleRequest(singleReq);\n      if (response) {\n        responses.push(response);\n      }\n    }\n    if (responses.length > 0) {\n      console.log(JSON.stringify(responses));\n    }\n  } else {\n    const response = await processSingleRequest(req);\n    if (response) {\n      console.log(JSON.stringify(response));\n    }\n  }\n});\n\nif (process.env.NODE_ENV === 'test') {\n  module.exports = {\n    handleRequest,\n    stripBoilerplate,\n    runTribunalAudit,\n  };\n}\n"
-}

package/.agent/history/snapshots/bin__proxy-server.js.json

@@ -1,20 +0,0 @@
-{
-  "file": "bin/proxy-server.js",
-  "riskScore": "Low",
-  "blastRadius": 1,
-  "imports": {
-    "http": [],
-    "https": [],
-    "fs": [],
-    "path": [],
-    "./global-store": [
-      "initializeGlobalStore",
-      "getGlobalAgentPath",
-      "GLOBAL_STORE_PATH"
-    ]
-  },
-  "dependents": [
-    "bin/tk-proxy.js"
-  ],
-  "content": "const http = require('http');\nconst https = require('https');\nconst fs = require('fs');\nconst path = require('path');\nconst globalStore = require('./global-store');\n\nlet proxyServer = null;\n\nfunction getSystemPrompt() {\n  const agentPath = globalStore.getGlobalAgentPath();\n  const rulesPath = path.join(agentPath, 'rules', 'GEMINI.md');\n\n  let rules = 'You are governed by Tribunal Kit rules.';\n  if (fs.existsSync(rulesPath)) {\n    rules = fs.readFileSync(rulesPath, 'utf8');\n  }\n\n  return `<tribunal_rules>\\n${rules}\\n</tribunal_rules>\\n`;\n}\n\nfunction injectRulesIntoAnthropicPayload(payloadString) {\n  try {\n    const payload = JSON.parse(payloadString);\n\n    // Inject into Anthropic's system parameter\n    const tribunalSystem = getSystemPrompt();\n\n    if (payload.system) {\n      if (Array.isArray(payload.system)) {\n        payload.system.unshift({ type: 'text', text: tribunalSystem });\n      } else if (typeof payload.system === 'string') {\n        payload.system = tribunalSystem + '\\n' + payload.system;\n      }\n    } else {\n      payload.system = tribunalSystem;\n    }\n\n    return JSON.stringify(payload);\n  } catch (e) {\n    console.error('[Tribunal Proxy] Failed to parse payload for injection:', e);\n    return payloadString;\n  }\n}\n\nfunction startProxyServer(port) {\n  return new Promise((resolve, reject) => {\n    proxyServer = http.createServer((clientReq, clientRes) => {\n      let body = '';\n      clientReq.on('data', chunk => {\n        body += chunk.toString();\n        // 5MB payload limit to prevent memory exhaustion (DoS)\n        if (body.length > 5 * 1024 * 1024) {\n          console.error('[Tribunal Proxy] Request too large, aborting.');\n          if (!clientRes.headersSent) {\n            clientRes.writeHead(413, { 'Content-Type': 'text/plain' });\n            clientRes.end('Payload Too Large');\n          }\n          clientReq.destroy();\n        }\n      });\n\n      clientReq.on('end', () => {\n        if (clientReq.destroyed) return;\n        let modifiedBody = body;\n\n        // Only intercept AI chat completion endpoints\n        if (clientReq.url && clientReq.url.includes('/v1/messages')) {\n          console.log(`[Tribunal Proxy] Intercepting request to ${clientReq.url}`);\n          modifiedBody = injectRulesIntoAnthropicPayload(body);\n        }\n\n        const headers = { ...clientReq.headers, host: 'api.anthropic.com' };\n        delete headers['transfer-encoding'];\n        headers['content-length'] = Buffer.byteLength(modifiedBody);\n\n        const options = {\n          hostname: 'api.anthropic.com',\n          port: 443,\n          path: clientReq.url,\n          method: clientReq.method,\n          headers,\n        };\n\n        const proxyReq = https.request(options, proxyRes => {\n          clientRes.writeHead(proxyRes.statusCode, proxyRes.headers);\n          proxyRes.pipe(clientRes, { end: true });\n        });\n\n        proxyReq.on('error', err => {\n          console.error('[Tribunal Proxy] Proxy request error:', err);\n          if (!clientRes.headersSent) {\n            clientRes.writeHead(502, { 'Content-Type': 'text/plain' });\n            clientRes.end('Bad Gateway');\n          }\n        });\n\n        if (modifiedBody && clientReq.method !== 'GET' && clientReq.method !== 'HEAD') {\n          proxyReq.write(modifiedBody);\n        }\n        proxyReq.end();\n      });\n    });\n\n    proxyServer.listen(port, () => {\n      console.log(`[Tribunal Proxy] Listening on http://localhost:${port}`);\n      resolve(port);\n    });\n\n    proxyServer.on('error', reject);\n  });\n}\n\nfunction stopProxyServer() {\n  if (proxyServer) {\n    proxyServer.close();\n  }\n}\n\nmodule.exports = {\n  startProxyServer,\n  stopProxyServer,\n};\n"
-}

package/.agent/history/snapshots/bin__spawn-agent.js.json

@@ -1,12 +0,0 @@
-{
-  "file": "bin/spawn-agent.js",
-  "riskScore": "Low",
-  "blastRadius": 1,
-  "imports": {
-    "child_process": []
-  },
-  "dependents": [
-    "bin/tk-proxy.js"
-  ],
-  "content": "const { spawn } = require('child_process');\n\nfunction spawnAgent(agentCommand, proxyPort) {\n  const proxyUrl = `http://localhost:${proxyPort}`;\n  console.log(`[Tribunal Proxy] Launching ${agentCommand} with proxy ${proxyUrl}`);\n\n  // Split command and arguments. e.g. \"claude-code\" or \"npx claude-code\"\n  const args = agentCommand.split(' ');\n  const command = args.shift();\n\n  // Inject proxy environment variables\n  // ANTHROPIC_BASE_URL is commonly respected by Anthropic-based CLI tools\n  const env = {\n    ...process.env,\n    ANTHROPIC_BASE_URL: proxyUrl,\n    // Note: If using HTTPS_PROXY, it would look like this:\n    // HTTPS_PROXY: proxyUrl,\n    // NODE_TLS_REJECT_UNAUTHORIZED: \"0\"\n  };\n\n  const isWin = process.platform === 'win32';\n  const child = spawn(command, args, {\n    stdio: 'inherit', // Pass stdin, stdout, stderr directly to the TTY\n    env,\n    shell: isWin,\n  });\n\n  child.on('close', (code, signal) => {\n    console.log(`[Tribunal Proxy] ${command} exited with code ${code !== null ? code : signal}`);\n    if (code !== null) {\n      process.exit(code);\n    } else {\n      process.exit(signal ? 128 : 1);\n    }\n  });\n\n  child.on('error', err => {\n    console.error(`[Tribunal Proxy] Failed to start ${command}:`, err);\n    process.exit(1);\n  });\n}\n\nmodule.exports = {\n  spawnAgent,\n};\n"
-}

package/.agent/history/snapshots/bin__tk-proxy.js.json

@@ -1,21 +0,0 @@
-{
-  "file": "bin/tk-proxy.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "./global-store": [
-      "initializeGlobalStore",
-      "getGlobalAgentPath",
-      "GLOBAL_STORE_PATH"
-    ],
-    "./proxy-server": [
-      "startProxyServer",
-      "stopProxyServer"
-    ],
-    "./spawn-agent": [
-      "spawnAgent"
-    ]
-  },
-  "dependents": [],
-  "content": "#!/usr/bin/env node\n\nconst { initializeGlobalStore } = require('./global-store');\nconst { startProxyServer } = require('./proxy-server');\nconst { spawnAgent } = require('./spawn-agent');\n\nasync function main() {\n  const args = process.argv.slice(2);\n\n  if (args.length === 0) {\n    console.error('Usage: tk-proxy <command>');\n    console.error('Example: tk-proxy claude-code');\n    process.exit(1);\n  }\n\n  const targetCommand = args.join(' ');\n\n  // 1. Initialize the global rules database\n  initializeGlobalStore();\n\n  // 2. Start the local API proxy server\n  // Port 0 will pick an available random port\n  try {\n    const port = await startProxyServer(0);\n\n    // 3. Spawn the target CLI agent\n    spawnAgent(targetCommand, port);\n  } catch (e) {\n    console.error('[Tribunal Proxy] Fatal error starting proxy:', e);\n    process.exit(1);\n  }\n}\n\nmain();\n"
-}

package/.agent/history/snapshots/bin__tribunal-kit.js.json

@@ -1,21 +0,0 @@
-{
-  "file": "bin/tribunal-kit.js",
-  "riskScore": "High",
-  "blastRadius": 5,
-  "imports": {
-    "path": [],
-    "../dist/cli.js": [],
-    "../dist/utils/version": [],
-    "../dist/utils/fs": [],
-    "../dist/commands/init": [],
-    "../dist/commands/marathon": []
-  },
-  "dependents": [
-    "test/unit/args.test.js",
-    "test/unit/copyDir.test.js",
-    "test/unit/marathon.test.js",
-    "test/unit/selfInstall.test.js",
-    "test/unit/semver.test.js"
-  ],
-  "content": "#!/usr/bin/env node\n/**\n * tribunal-kit CLI (alias: tk)\n *\n * Commands:\n *   init      — Install .agent/ into target project\n *   update    — Re-install to get latest changes\n *   status    — Check if .agent/ is installed\n *   learn     — Evolve project idioms based on git diffs\n *   case      — Manage Case Law precedents\n *   hook      — Install pre-push git hook\n *   uninstall — Remove .agent/ from project\n *   align     — Clean AI outputs & enforce guardrails\n *   compile   — Compile rules for terminal agents\n *   memory    — 4-Type Taxonomy Persistent Memory Engine\n *   guardrail — Validate .agent/ integrity\n *\n * Usage:\n *   npx tribunal-kit init\n *   npx tribunal-kit init --force\n *   npx tribunal-kit init --path ./myapp\n *   npx tribunal-kit init --quiet\n *   npx tribunal-kit init --dry-run\n *   tribunal-kit update\n *   tribunal-kit status\n *   tribunal-kit uninstall\n */\n\n'use strict';\n\nconst path = require('path');\n\n// Delegate core execution to the modular dist/ entry point\nconst { main } = require('../dist/cli.js');\n\n// Utilities re-exported for backwards compatibility with tests\nconst { compareSemver } = require('../dist/utils/version');\nconst { copyDir, countDir, isSelfInstall: _isSelfInstall } = require('../dist/utils/fs');\nconst { CORE_AGENTS, CORE_SKILLS, generateIDEBridges } = require('../dist/commands/init');\nconst { cmdMarathon: _cmdMarathon } = require('../dist/commands/marathon');\n\nfunction cmdMarathon(flags, processArgs = process.argv) {\n  return _cmdMarathon(flags, processArgs, flags?.quiet || false);\n}\n\nconst PKG = require(path.resolve(__dirname, '..', 'package.json'));\n\n/**\n * Returns true if the target directory IS the tribunal-kit package itself.\n */\nfunction isSelfInstall(targetDir) {\n  const kitRoot = path.resolve(__dirname, '..');\n  return _isSelfInstall(targetDir, PKG.name, kitRoot);\n}\n\n/**\n * CLI Argument Parser for backward compatibility with unit tests.\n */\nfunction parseArgs(argv) {\n  const args = { command: null, flags: {} };\n  const raw = argv.slice(2);\n\n  for (let i = 0; i < raw.length; i++) {\n    const arg = raw[i];\n    if (!arg.startsWith('--') && !arg.startsWith('-') && !args.command) {\n      args.command = arg;\n      continue;\n    }\n    if (arg === '--force') args.flags.force = true;\n    else if (arg === '--quiet') args.flags.quiet = true;\n    else if (arg === '--verbose') args.flags.verbose = true;\n    else if (arg === '--dry-run') args.flags.dryRun = true;\n    else if (arg === '--minimal') args.flags.minimal = true;\n    else if (arg === '--token-optimized') args.flags.tokenOptimized = true;\n    else if (arg === '--skip-update-check') args.flags.skipUpdateCheck = true;\n    else if (arg === '--head') args.flags.head = true;\n    else if (arg.startsWith('--path=')) {\n      args.flags.path = arg.split('=').slice(1).join('=');\n    } else if (arg === '--path' && raw[i + 1] && !raw[i + 1].startsWith('-')) {\n      args.flags.path = raw[++i];\n    } else if (arg.startsWith('--branch=')) {\n      args.flags.branch = arg.split('=').slice(1).join('=');\n    } else if (arg.startsWith('--log=')) {\n      args.flags.log = arg.split('=').slice(1).join('=');\n    } else if (arg === '--log' && raw[i + 1] && !raw[i + 1].startsWith('-')) {\n      args.flags.log = raw[++i];\n    } else if (arg.startsWith('--strategy=')) {\n      args.flags.strategy = arg.split('=').slice(1).join('=');\n    } else if (arg === '--strategy' && raw[i + 1] && !raw[i + 1].startsWith('-')) {\n      args.flags.strategy = raw[++i];\n    }\n  }\n\n  return args;\n}\n\n// Execute CLI when run directly\nif (require.main === module) {\n  main();\n}\n\n// Module exports for unit test suite backward compatibility\nmodule.exports = {\n  parseArgs,\n  compareSemver,\n  copyDir,\n  countDir,\n  isSelfInstall,\n  CORE_AGENTS,\n  CORE_SKILLS,\n  generateIDEBridges,\n  cmdMarathon,\n};\n"
-}

package/.agent/history/snapshots/bin__wrapper.js.json

@@ -1,14 +0,0 @@
-{
-  "file": "bin/wrapper.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "fs": [],
-    "path": [],
-    "child_process": [],
-    "os": [],
-    "../dist/cli.js": []
-  },
-  "dependents": [],
-  "content": "#!/usr/bin/env node\n/**\n * Tribunal-Kit Core Wrapper\n *\n * This script routes commands to the ultra-fast Rust binary if available and supported.\n * For legacy commands (or if the binary isn't available/compiled yet), it gracefully\n * falls back to the original JavaScript implementation.\n */\n\nconst fs = require('fs');\nconst path = require('path');\nconst { spawnSync } = require('child_process');\nconst os = require('os');\n\n// Commands that have been fully ported to Rust so far\nconst RUST_COMMANDS = new Set([\n  'init',\n  'validate',\n  'status',\n  'sync',\n  'hook',\n  'uninstall',\n  'memory',\n  'min-context',\n  'dag-schedule',\n  'context-compress',\n  'context-broker',\n  'optimize-step',\n  'impact-tier',\n  'sdd',\n  'fitness',\n  'telemetry-record',\n  'telemetry-summary',\n  'resolve-skills',\n  'heatmap',\n  'pollinate',\n  'leaderboard',\n  'benchmark',\n  'genome',\n  'compile',\n  'purge',\n]);\n\n// Determine the path to the compiled Rust binary\n// In a full production release, this checks optionalDependencies in node_modules\n// For development, it checks the local target/release folder\nfunction getBinaryPath() {\n  if (process.env.TRIBUNAL_FORCE_JS === '1' || process.env.TRIBUNAL_FORCE_JS === 'true') {\n    return null;\n  }\n\n  if (process.env.TRIBUNAL_CORE_PATH && fs.existsSync(process.env.TRIBUNAL_CORE_PATH)) {\n    return process.env.TRIBUNAL_CORE_PATH;\n  }\n\n  const isWindows = os.platform() === 'win32';\n  const ext = isWindows ? '.exe' : '';\n  const platform = os.platform();\n  const arch = os.arch();\n\n  // First, try production resolution (from optionalDependencies)\n  const pkgName = `@tribunal-kit/core-${platform}-${arch}`;\n  try {\n    const pkgPath = require.resolve(`${pkgName}/package.json`);\n    const pkgDir = path.dirname(pkgPath);\n    const binPath = path.resolve(pkgDir, `bin/tribunal-core${ext}`);\n    if (fs.existsSync(binPath)) {\n      return binPath;\n    }\n    const rootBinPath = path.resolve(pkgDir, `tribunal-core${ext}`);\n    if (fs.existsSync(rootBinPath)) {\n      return rootBinPath;\n    }\n  } catch {\n    // Package not found, ignore and fall back to local dev targets\n  }\n\n  // Second, try to find the binary in local dev target directories\n  const candidatePaths = [\n    path.resolve(__dirname, '..', 'target', 'release', `tribunal-core${ext}`),\n    path.resolve(__dirname, '..', 'target', 'debug', `tribunal-core${ext}`),\n    path.resolve(__dirname, '..', '..', 'target', 'release', `tribunal-core${ext}`),\n    path.resolve(__dirname, '..', '..', 'target', 'debug', `tribunal-core${ext}`),\n    path.resolve(process.cwd(), 'target', 'release', `tribunal-core${ext}`),\n    path.resolve(process.cwd(), 'target', 'debug', `tribunal-core${ext}`),\n    path.resolve(process.cwd(), 'tribunal-kit', 'target', 'release', `tribunal-core${ext}`),\n    path.resolve(process.cwd(), 'tribunal-kit', 'target', 'debug', `tribunal-core${ext}`),\n  ];\n\n  for (const candidate of candidatePaths) {\n    if (fs.existsSync(candidate)) {\n      return candidate;\n    }\n  }\n\n  // Third, attempt on-demand compilation if Cargo.toml exists locally and explicitly requested\n  const cargoTomlPath = path.resolve(__dirname, '..', 'Cargo.toml');\n  if (process.env.TK_AUTO_BUILD === '1' && fs.existsSync(cargoTomlPath)) {\n    try {\n      console.log('\\x1b[90m⚡ Building Rust core engine (TK_AUTO_BUILD=1)...\\x1b[0m');\n      const buildResult = spawnSync('cargo', ['build', '--release'], {\n        cwd: path.resolve(__dirname, '..'),\n        stdio: 'inherit',\n        timeout: 60000,\n      });\n      if (buildResult.status === 0) {\n        const releasePath = candidatePaths[0];\n        if (fs.existsSync(releasePath)) {\n          return releasePath;\n        }\n      }\n    } catch {\n      // cargo not available or build failed, fallback gracefully\n    }\n  }\n\n  return null;\n}\n\nfunction runRustBinary(binPath, args) {\n  // On Unix-like platforms, ensure the binary has execute permissions\n  if (os.platform() !== 'win32') {\n    try {\n      fs.chmodSync(binPath, 0o755);\n    } catch {\n      // Best-effort permission check\n    }\n  }\n\n  const stdio = ['inherit', 'inherit', 'inherit'];\n  const result = spawnSync(binPath, args, {\n    stdio: stdio,\n    env: process.env,\n  });\n\n  if (result.error) {\n    // Graceful degradation: fall back to JS engine instead of hard-crashing.\n    // Spawn errors include missing binaries, permission denied, corrupted\n    // executables, missing shared libraries, and OS-level exec failures.\n    console.warn(\n      `\\x1b[93m⚠ Rust engine failed (${result.error.code || result.error.message}). Falling back to JS engine.\\x1b[0m`,\n    );\n    return false; // Signal caller to fall back\n  }\n\n  if (result.signal) {\n    const signalCode = os.constants?.signals?.[result.signal] || 1;\n    process.exit(128 + signalCode);\n  }\n\n  process.exit(result.status !== null && result.status !== undefined ? result.status : 1);\n}\n\nfunction runLegacyFallback() {\n  // Use the modular dist/ CLI with lazy-loaded commands for faster cold-start.\n  // Each command module is require()'d only when invoked (~70% fewer files loaded).\n  const { main } = require('../dist/cli.js');\n  main().catch(err => {\n    console.error(`\\x1b[91m✖ Fatal Error:\\x1b[0m ${err.message || err}`);\n    process.exit(1);\n  });\n}\n\nfunction main() {\n  // Skip 'node' and 'wrapper.js'\n  const args = process.argv.slice(2);\n\n  // Extract the command (the first non-flag argument)\n  const command = args.find(a => !a.startsWith('-'));\n\n  if (command && RUST_COMMANDS.has(command)) {\n    const binPath = getBinaryPath();\n\n    if (binPath) {\n      // For the init command, Rust needs to know where the .agent template folder is.\n      if (command === 'init') {\n        const sourceDir = path.resolve(__dirname, '..', '.agent');\n        args.push('--source-dir', sourceDir);\n      }\n\n      // Route to Rust engine\n      // console.log('\\x1b[90m⚡ Executing via Rust Core Engine\\x1b[0m');\n      const rustResult = runRustBinary(binPath, args);\n      if (rustResult !== false) {\n        return; // Rust engine handled it (process.exit was called)\n      }\n      // rustResult === false means spawn error; fall through to JS fallback\n    } else {\n      // Warn if Rust command was requested but binary is missing (in verbose mode)\n      if (process.env.TK_VERBOSE || process.env.VERBOSE) {\n        console.warn(\n          '\\x1b[93m⚠ Rust binary not found in target/. Falling back to JS engine.\\x1b[0m',\n        );\n      }\n    }\n  }\n\n  // Fall back to JS logic for un-ported commands (e.g. `learn`, `case`, `marathon`)\n  runLegacyFallback();\n}\n\nmain();\n"
-}

package/.agent/history/snapshots/eslint.config.js.json

@@ -1,8 +0,0 @@
-{
-  "file": "eslint.config.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {},
-  "dependents": [],
-  "content": "module.exports = [\n  {\n    ignores: ['dist/**', '**/dist/**', 'node_modules/**', 'target/**', 'coverage/**', 'scratch/**'],\n  },\n  {\n    files: ['**/*.js'],\n    languageOptions: {\n      ecmaVersion: 'latest',\n      sourceType: 'commonjs',\n      globals: {\n        require: 'readonly',\n        module: 'readonly',\n        process: 'readonly',\n        __dirname: 'readonly',\n        __filename: 'readonly',\n        console: 'readonly',\n        exports: 'readonly',\n        setTimeout: 'readonly',\n        clearTimeout: 'readonly',\n        setInterval: 'readonly',\n        clearInterval: 'readonly',\n        setImmediate: 'readonly',\n        performance: 'readonly',\n        Buffer: 'readonly',\n        describe: 'readonly',\n        test: 'readonly',\n        it: 'readonly',\n        expect: 'readonly',\n        beforeEach: 'readonly',\n        afterEach: 'readonly',\n        beforeAll: 'readonly',\n        afterAll: 'readonly',\n        jest: 'readonly',\n        fail: 'readonly',\n      },\n    },\n    rules: {\n      'no-unused-vars': [\n        'warn',\n        {\n          argsIgnorePattern: '^_',\n          varsIgnorePattern: '^_',\n          caughtErrorsIgnorePattern: '^_',\n        },\n      ],\n      'no-undef': 'error',\n      'no-eval': 'error',\n      'no-implied-eval': 'error',\n      'no-new-func': 'error',\n      eqeqeq: ['error', 'always', { null: 'ignore' }],\n      'prefer-const': 'warn',\n      'no-var': 'warn',\n      'no-throw-literal': 'error',\n      'no-return-await': 'warn',\n      'no-template-curly-in-string': 'warn',\n    },\n  },\n  {\n    files: ['.opencode/**/*.js', '**/*.mjs'],\n    languageOptions: {\n      ecmaVersion: 'latest',\n      sourceType: 'module',\n    },\n  },\n];\n"
-}

package/.agent/history/snapshots/hooks__session-start.js.json

@@ -1,11 +0,0 @@
-{
-  "file": "hooks/session-start.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "fs": [],
-    "path": []
-  },
-  "dependents": [],
-  "content": "#!/usr/bin/env node\n/**\n * Cross-Platform SessionStart Hook for Tribunal Kit\n *\n * Injects Tribunal Kit master governance instructions into the host agent session\n * on startup, clear, and context compaction.\n *\n * Supports:\n * - Cursor Agent (emits additional_context)\n * - Claude Code (emits hookSpecificOutput.additionalContext)\n * - GitHub Copilot CLI / Standard Agent SDK (emits additionalContext)\n */\n\nconst fs = require('fs');\nconst path = require('path');\n\nfunction getPluginRoot() {\n  if (process.env.CURSOR_PLUGIN_ROOT) return process.env.CURSOR_PLUGIN_ROOT;\n  if (process.env.CLAUDE_PLUGIN_ROOT) return process.env.CLAUDE_PLUGIN_ROOT;\n  return path.resolve(__dirname, '..');\n}\n\nfunction loadMasterRules(pluginRoot) {\n  const candidates = [\n    path.join(pluginRoot, '.agent', 'rules', 'GEMINI.md'),\n    path.join(pluginRoot, '.agent', 'config', 'system-prompt.md'),\n    path.join(pluginRoot, '.cursorrules'),\n  ];\n\n  for (const candidate of candidates) {\n    if (fs.existsSync(candidate)) {\n      try {\n        return fs.readFileSync(candidate, 'utf8');\n      } catch (_err) {\n        // Continue to next candidate\n      }\n    }\n  }\n\n  return '# Tribunal Kit Master Governance Active\\nEnforce strict TDD, out-of-band context isolation, and parallel reviewer waves.';\n}\n\nfunction main() {\n  const pluginRoot = getPluginRoot();\n  const rules = loadMasterRules(pluginRoot);\n\n  const sessionContext = [\n    '<EXTREMELY_IMPORTANT>',\n    'Tribunal Kit Master Governance is active.',\n    'You are operating under the Tribunal Anti-Hallucination & Subagent-Driven Development (SDD) protocol.',\n    'Enforce: Iron Law of TDD (Red-Green-Refactor), 28-Specialist Review Waves, Out-of-Band Context Isolation, and Zero Placeholders.',\n    '',\n    rules,\n    '</EXTREMELY_IMPORTANT>',\n  ].join('\\n');\n\n  let outputObj;\n  if (process.env.CURSOR_PLUGIN_ROOT) {\n    // Cursor expects snake_case additional_context\n    outputObj = { additional_context: sessionContext };\n  } else if (process.env.CLAUDE_PLUGIN_ROOT && !process.env.COPILOT_CLI) {\n    // Claude Code expects nested hookSpecificOutput\n    outputObj = {\n      hookSpecificOutput: {\n        hookEventName: 'SessionStart',\n        additionalContext: sessionContext,\n      },\n    };\n  } else {\n    // Standard SDK / Copilot CLI\n    outputObj = { additionalContext: sessionContext };\n  }\n\n  process.stdout.write(JSON.stringify(outputObj, null, 2) + '\\n');\n}\n\nmain();\n"
-}

package/.agent/history/snapshots/scripts__apply-version.js.json

@@ -1,11 +0,0 @@
-{
-  "file": "scripts/apply-version.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "fs": [],
-    "path": []
-  },
-  "dependents": [],
-  "content": "const fs = require('fs');\nconst path = require('path');\n\nconst ROOT = path.resolve(__dirname, '..');\nconst PKG_PATH = path.join(ROOT, 'package.json');\nconst PKG = JSON.parse(fs.readFileSync(PKG_PATH, 'utf8'));\nconst VERSION = PKG.version;\n\nfunction updateFiles() {\n  const filesToUpdate = [\n    'plugin.json',\n    'gemini-extension.json',\n    'npm/core-template/package.json',\n    'README.md',\n    'crates/core/Cargo.toml',\n    'bin/adapter-install.js',\n    'dist/tui/banner.js',\n  ];\n\n  for (const relPath of filesToUpdate) {\n    const fullPath = path.join(ROOT, relPath);\n    if (fs.existsSync(fullPath)) {\n      let content = fs.readFileSync(fullPath, 'utf8');\n\n      if (relPath.endsWith('.json')) {\n        const json = JSON.parse(content);\n        if (json.version) {\n          json.version = VERSION;\n        }\n        fs.writeFileSync(fullPath, JSON.stringify(json, null, 2) + '\\n');\n      } else if (relPath === 'crates/core/Cargo.toml') {\n        content = content.replace(/^version\\s*=\\s*\"[^\"]+\"/m, `version = \"${VERSION}\"`);\n        fs.writeFileSync(fullPath, content);\n      } else if (relPath === 'README.md') {\n        content = content.replace(/Release-v([0-9]+\\.[0-9]+\\.[0-9]+)/g, `Release-v${VERSION}`);\n        fs.writeFileSync(fullPath, content);\n      } else if (relPath === 'bin/adapter-install.js' || relPath === 'dist/tui/banner.js') {\n        content = content.replace(/v\\d+\\.\\d+\\.\\d+/g, `v${VERSION}`);\n        content = content.replace(/version = '\\d+\\.\\d+\\.\\d+'/g, `version = '${VERSION}'`);\n        fs.writeFileSync(fullPath, content);\n      }\n      console.log(`Updated ${relPath} to ${VERSION}`);\n    }\n  }\n\n  // Update optionalDependencies in package.json\n  if (PKG.optionalDependencies) {\n    for (const key of Object.keys(PKG.optionalDependencies)) {\n      PKG.optionalDependencies[key] = `^${VERSION}`;\n    }\n    fs.writeFileSync(PKG_PATH, JSON.stringify(PKG, null, 2) + '\\n');\n    console.log(`Updated package.json optionalDependencies to ^${VERSION}`);\n  }\n}\n\nupdateFiles();\nconsole.log('Applied version update across repository successfully.');\n"
-}

package/.agent/history/snapshots/scripts__audit_skill_sdo.js.json

@@ -1,11 +0,0 @@
-{
-  "file": "scripts/audit_skill_sdo.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "fs": [],
-    "path": []
-  },
-  "dependents": [],
-  "content": "#!/usr/bin/env node\n/**\n * Skill Discovery Optimization (SDO) Linter for Tribunal-Kit\n *\n * Scans all skills in .agent/skills/ to ensure their frontmatter descriptions\n * follow the SDO invariant:\n * - Must describe *when to trigger* (symptoms, contexts, conditions)\n * - Must NOT summarize the internal workflow or process (which causes LLMs to skim/hallucinate)\n */\n\nconst fs = require('fs');\nconst path = require('path');\n\nconst SKILLS_DIR = path.resolve(__dirname, '..', '.agent', 'skills');\n\nfunction parseFrontmatter(content) {\n  const match = content.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---/);\n  if (!match) return null;\n\n  const yamlBlock = match[1];\n  const nameMatch = yamlBlock.match(/^name:\\s*(.+)$/m);\n  const descMatch = yamlBlock.match(/^description:\\s*(.+)$/m);\n\n  return {\n    name: nameMatch ? nameMatch[1].trim().replace(/^[\"']|[\"']$/g, '') : null,\n    description: descMatch ? descMatch[1].trim().replace(/^[\"']|[\"']$/g, '') : null,\n  };\n}\n\nfunction auditSkills() {\n  if (!fs.existsSync(SKILLS_DIR)) {\n    console.error(`✖ Skills directory not found: ${SKILLS_DIR}`);\n    process.exit(1);\n  }\n\n  const entries = fs.readdirSync(SKILLS_DIR, { withFileTypes: true });\n  const skillDirs = entries.filter(e => e.isDirectory()).map(e => e.name);\n\n  let totalSkills = 0;\n  let validSkills = 0;\n  const warnings = [];\n\n  for (const dir of skillDirs) {\n    const skillMdPath = path.join(SKILLS_DIR, dir, 'SKILL.md');\n    if (!fs.existsSync(skillMdPath)) continue;\n\n    totalSkills++;\n    const content = fs.readFileSync(skillMdPath, 'utf8');\n    const fm = parseFrontmatter(content);\n\n    if (!fm || !fm.description) {\n      warnings.push({ skill: dir, issue: 'Missing frontmatter description' });\n      continue;\n    }\n\n    const desc = fm.description;\n    const isTriggerFocused =\n      desc.toLowerCase().includes('use when') ||\n      desc.toLowerCase().includes('activate when') ||\n      desc.toLowerCase().includes('when ');\n\n    if (!isTriggerFocused) {\n      warnings.push({\n        skill: dir,\n        issue:\n          'Description does not explicitly specify trigger condition (should start with \"Use when...\")',\n        description: desc.slice(0, 80) + '...',\n      });\n    } else {\n      validSkills++;\n    }\n  }\n\n  console.log(`\\n🔍 Skill Discovery Optimization (SDO) Audit Results:`);\n  console.log(`  Total Skills Analyzed: ${totalSkills}`);\n  console.log(`  SDO Trigger-Compliant: ${validSkills}`);\n  console.log(`  Advisory Warnings:     ${warnings.length}\\n`);\n\n  if (warnings.length > 0) {\n    console.log(`⚠️  Advisory Sample (first 5):`);\n    for (const w of warnings.slice(0, 5)) {\n      console.log(`  - [${w.skill}]: ${w.issue}`);\n    }\n  }\n\n  console.log(`\\n✔ SDO audit complete. System has ${totalSkills} searchable skills.\\n`);\n}\n\nauditSkills();\n"
-}

package/.agent/history/snapshots/scripts__benchmark.js.json

@@ -1,14 +0,0 @@
-{
-  "file": "scripts/benchmark.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "child_process": [],
-    "path": [],
-    "fs": [],
-    "os": [],
-    "../.agent/scripts/minimal_change_engine": []
-  },
-  "dependents": [],
-  "content": "#!/usr/bin/env node\n/**\n * Tribunal-Kit Performance Benchmark\n *\n * Measures and reports performance metrics for key operations.\n * Run: node scripts/benchmark.js\n */\n\nconst { spawnSync } = require('child_process');\nconst path = require('path');\nconst fs = require('fs');\nconst os = require('os');\n\n// ANSI colors\nconst C = {\n  reset: '\\x1b[0m',\n  bold: '\\x1b[1m',\n  dim: '\\x1b[2m',\n  red: '\\x1b[91m',\n  green: '\\x1b[92m',\n  yellow: '\\x1b[93m',\n  cyan: '\\x1b[96m',\n  white: '\\x1b[97m',\n  gray: '\\x1b[90m',\n};\n\nfunction c(color, text) {\n  return `${C[color]}${text}${C.reset}`;\n}\nfunction bold(text) {\n  return `${C.bold}${text}${C.reset}`;\n}\n\n/**\n * Time a command execution in milliseconds.\n * @param {string} label - Description of the benchmark\n * @param {function} fn - Function to benchmark\n * @param {number} [runs=3] - Number of runs for averaging\n * @returns {{ label: string, avg: number, min: number, max: number, runs: number }}\n */\nasync function benchmark(label, fn, runs = 3) {\n  const times = [];\n  for (let i = 0; i < runs; i++) {\n    const start = performance.now();\n    await fn();\n    const end = performance.now();\n    times.push(end - start);\n  }\n  const avg = times.reduce((a, b) => a + b, 0) / times.length;\n  const min = Math.min(...times);\n  const max = Math.max(...times);\n  return { label, avg, min, max, runs };\n}\n\n/**\n * Time a shell command.\n */\nfunction benchmarkCommand(label, command, runs = 3) {\n  return benchmark(\n    label,\n    () => {\n      spawnSync('node', command.split(' '), {\n        stdio: 'pipe',\n        encoding: 'utf8',\n        env: { ...process.env, TK_SKIP_UPDATE_CHECK: '1' },\n      });\n    },\n    runs,\n  );\n}\n\nasync function main() {\n  console.log();\n  console.log(bold(`  ⚡ Tribunal-Kit Performance Benchmark`));\n  console.log(c('gray', `  ─────────────────────────────────────────`));\n  console.log(c('gray', `  Platform: ${os.platform()} ${os.arch()}`));\n  console.log(c('gray', `  Node: ${process.version}`));\n  console.log(c('gray', `  CPUs: ${os.cpus().length}x ${os.cpus()[0]?.model || 'unknown'}`));\n  console.log(c('gray', `  ─────────────────────────────────────────`));\n  console.log();\n\n  const cliPath = path.resolve(__dirname, '../bin/wrapper.js');\n  const tempDir = path.join(os.tmpdir(), `tribunal-bench-${Date.now()}`);\n  fs.mkdirSync(tempDir, { recursive: true });\n\n  const results = [];\n\n  // 1. Cold start (help)\n  console.log(c('cyan', '  ▸ Benchmarking: CLI cold-start (--help)'));\n  const helpResult = await benchmarkCommand('CLI cold-start (--help)', `${cliPath} --help`, 5);\n  results.push(helpResult);\n\n  // 2. Status check\n  console.log(c('cyan', '  ▸ Benchmarking: tk status'));\n  const statusResult = await benchmarkCommand('Status check', `${cliPath} status --quiet`, 5);\n  results.push(statusResult);\n\n  // 3. Init (dry-run)\n  console.log(c('cyan', '  ▸ Benchmarking: tk init --dry-run'));\n  const initResult = await benchmarkCommand(\n    'Init (dry-run)',\n    `${cliPath} init --dry-run --quiet --skip-update-check --path=${tempDir}`,\n    3,\n  );\n  results.push(initResult);\n\n  // 4. Init (real, to temp dir)\n  console.log(c('cyan', '  ▸ Benchmarking: tk init (real copy)'));\n  const initRealResult = await benchmark(\n    'Init (full copy)',\n    () => {\n      const runDir = path.join(tempDir, `run-${Date.now()}`);\n      fs.mkdirSync(runDir, { recursive: true });\n      spawnSync('node', [cliPath, 'init', '--quiet', '--skip-update-check', `--path=${runDir}`], {\n        stdio: 'pipe',\n        encoding: 'utf8',\n        env: { ...process.env, TK_SKIP_UPDATE_CHECK: '1' },\n      });\n      // Cleanup\n      try {\n        fs.rmSync(runDir, { recursive: true, force: true });\n      } catch {}\n    },\n    3,\n  );\n  results.push(initRealResult);\n\n  // 5. DAG scheduling benchmark\n  console.log(c('cyan', '  ▸ Benchmarking: DAG scheduling calculation'));\n  const dagResult = await benchmark(\n    'DAG wave scheduling',\n    () => {\n      const workers = [\n        { task_id: 'w1', dependencies: [] },\n        { task_id: 'w2', dependencies: ['w1'] },\n        { task_id: 'w3', dependencies: ['w1'] },\n        { task_id: 'w4', dependencies: ['w2', 'w3'] },\n      ];\n      const inDegree = {};\n      const adjList = {};\n      workers.forEach(w => {\n        inDegree[w.task_id] = 0;\n        adjList[w.task_id] = [];\n      });\n      workers.forEach(w => {\n        w.dependencies.forEach(dep => {\n          adjList[dep].push(w.task_id);\n          inDegree[w.task_id] += 1;\n        });\n      });\n      let currentWave = Object.keys(inDegree).filter(id => inDegree[id] === 0);\n      const waves = [];\n      while (currentWave.length > 0) {\n        waves.push(currentWave);\n        const next = [];\n        currentWave.forEach(id => {\n          adjList[id].forEach(nbr => {\n            inDegree[nbr] -= 1;\n            if (inDegree[nbr] === 0) next.push(nbr);\n          });\n        });\n        currentWave = next;\n      }\n    },\n    100,\n  );\n  results.push(dagResult);\n\n  // 6. Minimal Change Governance Engine benchmark\n  console.log(c('cyan', '  ▸ Benchmarking: Minimal Change Governance Engine'));\n  const minResult = await benchmark(\n    'Minimal Change Audit',\n    () => {\n      const minEngine = require('../.agent/scripts/minimal_change_engine');\n      minEngine.evaluateMinimalChange('add retry logic to API requests', {\n        files_added: 0,\n        files_modified: 1,\n        estimated_lines_added: 15,\n      });\n    },\n    20,\n  );\n  results.push(minResult);\n\n  // Print results table\n  console.log();\n  console.log(bold(`  Results`));\n  console.log(c('gray', `  ─────────────────────────────────────────────────────────`));\n  console.log(\n    `  ${c('white', 'Operation'.padEnd(30))} ${c('white', 'Avg (ms)'.padStart(10))} ${c('white', 'Min'.padStart(8))} ${c('white', 'Max'.padStart(8))}`,\n  );\n  console.log(c('gray', `  ─────────────────────────────────────────────────────────`));\n\n  for (const r of results) {\n    const avgColor = r.avg < 100 ? 'green' : r.avg < 500 ? 'yellow' : 'red';\n    console.log(\n      `  ${c('white', r.label.padEnd(30))} ${c(avgColor, String(Math.round(r.avg)).padStart(10))} ${c('gray', String(Math.round(r.min)).padStart(8))} ${c('gray', String(Math.round(r.max)).padStart(8))}`,\n    );\n  }\n\n  console.log(c('gray', `  ─────────────────────────────────────────────────────────`));\n  console.log();\n\n  // Write results to JSON for CI/comparison\n  const outputPath = path.resolve(__dirname, '../benchmark-results.json');\n  const outputData = {\n    timestamp: new Date().toISOString(),\n    platform: `${os.platform()}-${os.arch()}`,\n    node: process.version,\n    results: results.map(r => ({\n      label: r.label,\n      avg_ms: Math.round(r.avg),\n      min_ms: Math.round(r.min),\n      max_ms: Math.round(r.max),\n      runs: r.runs,\n    })),\n  };\n  fs.writeFileSync(outputPath, JSON.stringify(outputData, null, 2));\n  console.log(c('green', `  ✔ Results saved to benchmark-results.json`));\n\n  // Cleanup temp\n  try {\n    fs.rmSync(tempDir, { recursive: true, force: true });\n  } catch {}\n  console.log();\n}\n\nmain().catch(err => {\n  console.error(`Benchmark failed: ${err.message}`);\n  process.exit(1);\n});\n"
-}

package/.agent/history/snapshots/scripts__changelog.js.json

@@ -1,12 +0,0 @@
-{
-  "file": "scripts/changelog.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "child_process": [],
-    "fs": [],
-    "path": []
-  },
-  "dependents": [],
-  "content": "#!/usr/bin/env node\n/**\n * changelog.js — Auto-generate CHANGELOG from git history\n *\n * Categorizes commits by conventional commit type:\n *   feat:     → ✨ Features\n *   fix:      → 🐛 Bug Fixes\n *   perf:     → ⚡ Performance\n *   docs:     → 📝 Documentation\n *   test:     → ✅ Tests\n *   refactor: → ♻️ Refactors\n *   chore:    → 🔧 Chores\n *   BREAKING: → 💥 Breaking Changes\n *\n * Usage:\n *   node scripts/changelog.js                  → Generate full changelog\n *   node scripts/changelog.js --preview        → Preview unreleased changes\n *   node scripts/changelog.js --since v4.1.0   → Changes since a specific tag\n */\n\n'use strict';\n\nconst { execSync } = require('child_process');\nconst fs = require('fs');\nconst path = require('path');\n\nconst PKG = require(path.resolve(__dirname, '..', 'package.json'));\nconst CHANGELOG_PATH = path.resolve(__dirname, '..', 'CHANGELOG.md');\n\n// ── Commit Categories ────────────────────────────────────\nconst CATEGORIES = {\n  feat: { emoji: '✨', title: 'Features' },\n  fix: { emoji: '🐛', title: 'Bug Fixes' },\n  perf: { emoji: '⚡', title: 'Performance' },\n  docs: { emoji: '📝', title: 'Documentation' },\n  test: { emoji: '✅', title: 'Tests' },\n  refactor: { emoji: '♻️', title: 'Refactors' },\n  chore: { emoji: '🔧', title: 'Chores' },\n  ci: { emoji: '🏗️', title: 'CI/CD' },\n  style: { emoji: '🎨', title: 'Style' },\n  breaking: { emoji: '💥', title: 'Breaking Changes' },\n};\n\n// ── Git Helpers ──────────────────────────────────────────\nfunction git(cmd) {\n  try {\n    return execSync(`git ${cmd}`, { encoding: 'utf8', timeout: 10000 }).trim();\n  } catch {\n    return '';\n  }\n}\n\nfunction getLatestTag() {\n  return (\n    git('describe --tags --abbrev=0 2>nul') || git('describe --tags --abbrev=0 2>/dev/null') || ''\n  );\n}\n\nfunction getCommits(since) {\n  const range = since ? `${since}..HEAD` : 'HEAD';\n  const MAX_COMMITS = 500;\n  const format = '--format=%H||%s||%an||%ai';\n  const raw = git(`log ${range} ${format} --no-merges -n ${MAX_COMMITS}`);\n  if (!raw) return [];\n\n  return raw\n    .replace(/\\r/g, '')\n    .split('\\n')\n    .filter(line => line.includes('||'))\n    .map(line => {\n      const [hash, subject = '', author = '', date = ''] = line.split('||');\n      return {\n        hash: hash?.replace(/^\"/, '').slice(0, 7),\n        subject: subject.trim(),\n        author: author.trim(),\n        date: date?.replace(/\"$/, '').slice(0, 10),\n      };\n    });\n}\n\nfunction categorize(subject = '') {\n  const lower = (subject || '').toLowerCase();\n\n  // Check for BREAKING CHANGE\n  if (lower.includes('breaking') || lower.includes('!:')) {\n    return 'breaking';\n  }\n\n  // Match conventional commit prefix\n  const match = (subject || '').match(/^(\\w+)(?:\\(.+?\\))?:\\s*/);\n  if (match) {\n    const type = match[1].toLowerCase();\n    if (CATEGORIES[type]) return type;\n  }\n\n  // Heuristic fallback\n  if (lower.includes('fix') || lower.includes('bug')) return 'fix';\n  if (lower.includes('add') || lower.includes('new') || lower.includes('feat')) return 'feat';\n  if (lower.includes('doc') || lower.includes('readme')) return 'docs';\n  if (lower.includes('test')) return 'test';\n  if (lower.includes('refactor') || lower.includes('clean')) return 'refactor';\n  if (lower.includes('perf') || lower.includes('optim')) return 'perf';\n  if (lower.includes('ci') || lower.includes('workflow')) return 'ci';\n\n  return 'chore';\n}\n\n// ── Changelog Generation ─────────────────────────────────\nfunction generateChangelog(commits, version, date) {\n  const grouped = {};\n  for (const commit of commits) {\n    const cat = categorize(commit.subject);\n    if (!grouped[cat]) grouped[cat] = [];\n    // Strip conventional prefix for cleaner display\n    const clean = (commit.subject || '').replace(/^\\w+(\\(.+?\\))?:\\s*/, '');\n    grouped[cat].push({ ...commit, clean });\n  }\n\n  let md = `## [${version}] — ${date}\\n\\n`;\n\n  // Breaking changes first\n  const order = [\n    'breaking',\n    'feat',\n    'fix',\n    'perf',\n    'refactor',\n    'docs',\n    'test',\n    'ci',\n    'style',\n    'chore',\n  ];\n  for (const cat of order) {\n    if (!grouped[cat] || grouped[cat].length === 0) continue;\n    const { emoji, title } = CATEGORIES[cat];\n    md += `### ${emoji} ${title}\\n\\n`;\n    for (const c of grouped[cat]) {\n      md += `- ${c.clean} (\\`${c.hash}\\`)\\n`;\n    }\n    md += '\\n';\n  }\n\n  return md;\n}\n\n// ── Main ─────────────────────────────────────────────────\nfunction main() {\n  const args = process.argv.slice(2);\n  const isPreview = args.includes('--preview');\n  const sinceIdx = args.indexOf('--since');\n  const sinceTag = sinceIdx !== -1 ? args[sinceIdx + 1] : null;\n\n  const since = sinceTag || getLatestTag();\n  const commits = getCommits(since);\n\n  if (commits.length === 0) {\n    console.log('  ℹ️  No new commits found since', since || 'beginning');\n    process.exit(0);\n  }\n\n  const today = new Date().toISOString().slice(0, 10);\n  const version = isPreview ? 'Unreleased' : PKG.version;\n\n  const changelog = generateChangelog(commits, version, today);\n\n  if (isPreview) {\n    console.log('\\n  📋 Changelog Preview\\n  ' + '─'.repeat(40) + '\\n');\n    console.log(changelog);\n    console.log(`  📊 ${commits.length} commits since ${since || 'initial commit'}`);\n    return;\n  }\n\n  // Write or prepend to CHANGELOG.md\n  const header = `# Changelog\\n\\nAll notable changes to Tribunal Kit are documented here.\\nFormat follows [Keep a Changelog](https://keepachangelog.com/).\\n\\n`;\n\n  let existing = '';\n  if (fs.existsSync(CHANGELOG_PATH)) {\n    existing = fs.readFileSync(CHANGELOG_PATH, 'utf8');\n    // Remove existing header\n    existing = existing.replace(/^# Changelog[\\s\\S]*?(?=## )/, '');\n  }\n\n  const full = header + changelog + existing;\n  fs.writeFileSync(CHANGELOG_PATH, full, 'utf8');\n\n  console.log(`  ✔ CHANGELOG.md updated — v${version} (${commits.length} commits)`);\n}\n\nmain();\n"
-}

package/.agent/history/snapshots/scripts__clean-pycache.js.json

@@ -1,11 +0,0 @@
-{
-  "file": "scripts/clean-pycache.js",
-  "riskScore": "Low",
-  "blastRadius": 0,
-  "imports": {
-    "fs": [],
-    "path": []
-  },
-  "dependents": [],
-  "content": "#!/usr/bin/env node\n/**\n * clean-pycache.js — Removes Python bytecode and __pycache__ directories.\n * Ensures clean npm tarballs without platform-specific Python artifacts.\n */\n\n'use strict';\n\nconst fs = require('fs');\nconst path = require('path');\n\nconst ROOT = path.resolve(__dirname, '..');\nconst TARGET_DIR = path.join(ROOT, '.agent');\n\nlet removedCount = 0;\n\nfunction cleanRecursively(dir) {\n  if (!fs.existsSync(dir)) return;\n\n  const entries = fs.readdirSync(dir, { withFileTypes: true });\n  for (const entry of entries) {\n    const fullPath = path.join(dir, entry.name);\n    if (entry.isDirectory()) {\n      if (entry.name === '__pycache__') {\n        fs.rmSync(fullPath, { recursive: true, force: true });\n        removedCount++;\n        // console.log(`  Removed: ${path.relative(ROOT, fullPath)}`);\n      } else {\n        cleanRecursively(fullPath);\n      }\n    } else if (/\\.(?:pyc|pyo|pyd)$/i.test(entry.name)) {\n      fs.unlinkSync(fullPath);\n      removedCount++;\n      // console.log(`  Removed: ${path.relative(ROOT, fullPath)}`);\n    }\n  }\n}\n\ncleanRecursively(TARGET_DIR);\nif (removedCount > 0) {\n  console.log(`✓ Cleaned ${removedCount} Python cache files/directories from .agent/`);\n}\n"
-}