tribunal-kit 9.2.4 → 9.2.6

package/.agent/scripts/syscall_registry.js

@@ -1,105 +1,110 @@
-#!/usr/bin/env node
-/**
- * syscall_registry.js
- * Centralized registry mapping permitted agent syscalls to their underlying script paths.
- * Enforces execution security boundaries.
- */
-
-'use strict';
-
-const path = require('path');
-const { spawnSync } = require('child_process');
-
-// Define allowed syscalls and their corresponding scripts
-const SYSCALL_MAP = {
-  'run_audit': {
-    script: 'checklist.js',
-    allowedArgs: ['--strict', '--fix', '.']
-  },
-  'security_scan': {
-    script: 'security_scan.js',
-    allowedArgs: ['.']
-  },
-  'lint_runner': {
-    script: 'lint_runner.js',
-    allowedArgs: ['--fix', '.']
-  },
-  'schema_validator': {
-    script: 'schema_validator.js',
-    allowedArgs: ['.']
-  },
-  'test_runner': {
-    script: 'test_runner.js',
-    allowedArgs: ['--coverage', '.']
-  },
-  'dependency_analyzer': {
-    script: 'dependency_analyzer.js',
-    allowedArgs: ['--audit', '.']
-  }
-};
-
-/**
- * Validates and executes a syscall securely.
- * @param {string} syscall - The name of the syscall to execute
- * @param {string[]} args - The arguments passed to the syscall
- * @returns {object} { exitCode: number, stdout: string, stderr: string }
- */
-function executeSyscall(syscall, args = []) {
-  const config = SYSCALL_MAP[syscall];
-  
-  if (!config) {
-    return {
-      exitCode: 1,
-      stdout: '',
-      stderr: `Security Exception: Syscall '${syscall}' is not recognized or permitted.`
-    };
-  }
-
-  // Argument validation: only allow arguments pre-approved in allowedArgs
-  const invalidArgs = args.filter(arg => !config.allowedArgs.includes(arg) && !arg.startsWith('--target=') && !arg.startsWith('--file='));
-  if (invalidArgs.length > 0) {
-    return {
-      exitCode: 1,
-      stdout: '',
-      stderr: `Security Exception: Invalid arguments for syscall '${syscall}': ${invalidArgs.join(', ')}`
-    };
-  }
-
-  // Prevent shell metacharacter injection
-  const shellMetaChars = /[;&|><$`\\]/;
-  const unsafeArgs = args.filter(arg => shellMetaChars.test(arg));
-  if (unsafeArgs.length > 0) {
-    return {
-      exitCode: 1,
-      stdout: '',
-      stderr: `Security Exception: Unsafe shell metacharacters detected in arguments.`
-    };
-  }
-
-  const scriptPath = path.join(__dirname, config.script);
-  
-  try {
-    const result = spawnSync('node', [scriptPath, ...args], {
-      cwd: process.cwd(),
-      encoding: 'utf8',
-      timeout: 300000 // 5 minutes max execution time
-    });
-
-    return {
-      exitCode: result.status !== null ? result.status : 1,
-      stdout: result.stdout || '',
-      stderr: result.stderr || (result.error ? result.error.message : '')
-    };
-  } catch (err) {
-    return {
-      exitCode: 1,
-      stdout: '',
-      stderr: `Syscall execution failed: ${err.message}`
-    };
-  }
-}
-
-module.exports = {
-  SYSCALL_MAP,
-  executeSyscall
-};
+#!/usr/bin/env node
+/**
+ * syscall_registry.js
+ * Centralized registry mapping permitted agent syscalls to their underlying script paths.
+ * Enforces execution security boundaries.
+ */
+
+'use strict';
+
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+// Define allowed syscalls and their corresponding scripts
+const SYSCALL_MAP = {
+  run_audit: {
+    script: 'checklist.js',
+    allowedArgs: ['--strict', '--fix', '.'],
+  },
+  security_scan: {
+    script: 'security_scan.js',
+    allowedArgs: ['.'],
+  },
+  lint_runner: {
+    script: 'lint_runner.js',
+    allowedArgs: ['--fix', '.'],
+  },
+  schema_validator: {
+    script: 'schema_validator.js',
+    allowedArgs: ['.'],
+  },
+  test_runner: {
+    script: 'test_runner.js',
+    allowedArgs: ['--coverage', '.'],
+  },
+  dependency_analyzer: {
+    script: 'dependency_analyzer.js',
+    allowedArgs: ['--audit', '.'],
+  },
+};
+
+/**
+ * Validates and executes a syscall securely.
+ * @param {string} syscall - The name of the syscall to execute
+ * @param {string[]} args - The arguments passed to the syscall
+ * @returns {object} { exitCode: number, stdout: string, stderr: string }
+ */
+function executeSyscall(syscall, args = []) {
+  const config = SYSCALL_MAP[syscall];
+
+  if (!config) {
+    return {
+      exitCode: 1,
+      stdout: '',
+      stderr: `Security Exception: Syscall '${syscall}' is not recognized or permitted.`,
+    };
+  }
+
+  // Argument validation: only allow arguments pre-approved in allowedArgs
+  const invalidArgs = args.filter(
+    arg =>
+      !config.allowedArgs.includes(arg) &&
+      !arg.startsWith('--target=') &&
+      !arg.startsWith('--file='),
+  );
+  if (invalidArgs.length > 0) {
+    return {
+      exitCode: 1,
+      stdout: '',
+      stderr: `Security Exception: Invalid arguments for syscall '${syscall}': ${invalidArgs.join(', ')}`,
+    };
+  }
+
+  // Prevent shell metacharacter injection
+  const shellMetaChars = /[;&|><$`\\]/;
+  const unsafeArgs = args.filter(arg => shellMetaChars.test(arg));
+  if (unsafeArgs.length > 0) {
+    return {
+      exitCode: 1,
+      stdout: '',
+      stderr: `Security Exception: Unsafe shell metacharacters detected in arguments.`,
+    };
+  }
+
+  const scriptPath = path.join(__dirname, config.script);
+
+  try {
+    const result = spawnSync('node', [scriptPath, ...args], {
+      cwd: process.cwd(),
+      encoding: 'utf8',
+      timeout: 300000, // 5 minutes max execution time
+    });
+
+    return {
+      exitCode: result.status !== null ? result.status : 1,
+      stdout: result.stdout || '',
+      stderr: result.stderr || (result.error ? result.error.message : ''),
+    };
+  } catch (err) {
+    return {
+      exitCode: 1,
+      stdout: '',
+      stderr: `Syscall execution failed: ${err.message}`,
+    };
+  }
+}
+
+module.exports = {
+  SYSCALL_MAP,
+  executeSyscall,
+};

package/.agent/scripts/test_runner.js

@@ -1,209 +1,209 @@
-#!/usr/bin/env node
-/**
- * test_runner.js — Standalone test runner for the Tribunal Agent Kit.
- *
- * Usage:
- *   node .agent/scripts/test_runner.js .
- *   node .agent/scripts/test_runner.js . --coverage
- *   node .agent/scripts/test_runner.js . --watch
- *   node .agent/scripts/test_runner.js . --file src/utils.test.ts
- */
-
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-const { spawnSync } = require('child_process');
-
-const {
-  RED,
-  GREEN,
-  BOLD,
-  DIM,
-  CYAN,
-  RESET,
-  banner,
-  sectionHeader,
-  timer,
-  formatMs,
-  ok,
-  fail,
-  skip,
-} = require('./_colors');
-
-const { loadJson } = require('./_utils');
-
-function runTests(label, cmd, cwd) {
-  const elapsed = timer();
-  try {
-    const executable =
-      process.platform === 'win32' && (cmd[0] === 'npx' || cmd[0] === 'npm')
-        ? `${cmd[0]}.cmd`
-        : cmd[0];
-    const result = spawnSync(executable, cmd.slice(1), {
-      cwd,
-      encoding: 'utf8',
-      timeout: 300000, // 5m
-      shell: false,
-    });
-
-    const ms = elapsed();
-
-    if (result.error && !result.stdout && !result.stderr) {
-      console.log(`    Error: ${result.error.message}`);
-    }
-    const out = result.stdout ? result.stdout.toString() : '';
-    const err = result.stderr ? result.stderr.toString() : '';
-    const output = (out + '\n' + err).trim();
-    if (output) {
-      for (const line of output.split('\n')) {
-        console.log(`    ${line}`);
-      }
-    }
-
-    if (result.status === 0) {
-      ok(`${label} — all tests passed ${DIM}(${formatMs(ms)})${RESET}`);
-      return true;
-    }
-
-    fail(`${label} — test failures detected ${DIM}(${formatMs(ms)})${RESET}`);
-    return false;
-  } catch {
-    skip(`${label} — tool not installed`);
-    return true;
-  }
-}
-
-function detectTestFramework(projectRoot) {
-  const pkg = loadJson(path.join(projectRoot, 'package.json'));
-  if (pkg) {
-    const deps = {
-      ...(pkg.dependencies || {}),
-      ...(pkg.devDependencies || {}),
-    };
-    const scripts = pkg.scripts || {};
-
-    if (deps.vitest) return 'vitest';
-    if (deps.jest) return 'jest';
-    if (deps.mocha) return 'mocha';
-    if (scripts.test) return 'npm-test';
-  }
-
-  if (
-    fs.existsSync(path.join(projectRoot, 'pytest.ini')) ||
-    fs.existsSync(path.join(projectRoot, 'pyproject.toml')) ||
-    fs.existsSync(path.join(projectRoot, 'conftest.py'))
-  ) {
-    return 'pytest';
-  }
-
-  // Go
-  function hasGoTests(dir) {
-    let items;
-    try {
-      items = fs.readdirSync(dir, { withFileTypes: true });
-    } catch {
-      return false;
-    }
-    for (const item of items) {
-      if (item.isDirectory() && !['node_modules', '.git'].includes(item.name)) {
-        if (hasGoTests(path.join(dir, item.name))) return true;
-      } else if (item.name.endsWith('_test.go')) {
-        return true;
-      }
-    }
-    return false;
-  }
-
-  if (hasGoTests(projectRoot)) return 'go';
-
-  return null;
-}
-
-function main() {
-  const args = process.argv.slice(2);
-  let targetPath = null;
-  let coverageFlag = false;
-  let watchFlag = false;
-  let fileArg = null;
-
-  let i = 0;
-  while (i < args.length) {
-    if (args[i] === '--coverage') coverageFlag = true;
-    else if (args[i] === '--watch') watchFlag = true;
-    else if (args[i] === '--file' && i + 1 < args.length) fileArg = args[++i];
-    else if (!targetPath && !args[i].startsWith('-')) targetPath = args[i];
-    i++;
-  }
-
-  if (!targetPath) {
-    console.log('Usage: node test_runner.js <path> [--coverage] [--watch] [--file <filepath>]');
-    process.exit(1);
-  }
-
-  const projectRoot = path.resolve(targetPath);
-  if (!fs.existsSync(projectRoot) || !fs.statSync(projectRoot).isDirectory()) {
-    fail(`Directory not found: ${projectRoot}`);
-    process.exit(1);
-  }
-
-  const framework = detectTestFramework(projectRoot);
-  console.log(
-    banner('test_runner.js', {
-      Project: projectRoot,
-      Framework: framework || 'none detected',
-    }),
-  );
-
-  if (!framework) {
-    skip('No test framework detected in this project');
-    process.exit(0);
-  }
-
-  console.log(sectionHeader(`Running tests (${framework})`));
-
-  let cmd = [];
-  let passed = true;
-
-  if (['vitest', 'jest', 'mocha', 'npm-test'].includes(framework)) {
-    if (framework === 'vitest') {
-      cmd = watchFlag ? ['npx', 'vitest'] : ['npx', 'vitest', 'run'];
-      if (coverageFlag) cmd.push('--coverage');
-      if (fileArg) cmd.push(fileArg);
-    } else if (framework === 'jest') {
-      cmd = ['npx', 'jest'];
-      if (coverageFlag) cmd.push('--coverage');
-      if (watchFlag) cmd.push('--watch');
-      if (fileArg) cmd.push(fileArg);
-    } else {
-      cmd = ['npm', 'test', '--', '--passWithNoTests'];
-      if (coverageFlag) cmd.push('--coverage');
-      if (fileArg) cmd.push(fileArg);
-    }
-    passed = runTests(framework, cmd, projectRoot);
-  } else if (framework === 'pytest') {
-    cmd = ['python', '-m', 'pytest', '-v'];
-    if (coverageFlag) cmd.push('--cov', '--cov-report=term-missing');
-    if (watchFlag) cmd = ['python', '-m', 'pytest-watch', '--', '-v'];
-    if (fileArg) cmd.push(fileArg);
-    passed = runTests('pytest', cmd, projectRoot);
-  } else if (framework === 'go') {
-    cmd = ['go', 'test', './...', '-v'];
-    if (coverageFlag) cmd.push('-cover');
-    if (fileArg) cmd = ['go', 'test', '-v', '-run', fileArg];
-    passed = runTests('go test', cmd, projectRoot);
-  }
-
-  console.log(`\n${BOLD}${CYAN}━━━ Test Summary ━━━${RESET}`);
-  if (passed) {
-    console.log(`\n${GREEN}${BOLD}  ✔ Tests passed (${framework}).${RESET}\n`);
-  } else {
-    console.log(`\n${RED}${BOLD}  ✖ Tests failed (${framework}).${RESET}\n`);
-  }
-
-  process.exit(passed ? 0 : 1);
-}
-
-if (require.main === module) {
-  main();
-}
+#!/usr/bin/env node
+/**
+ * test_runner.js — Standalone test runner for the Tribunal Agent Kit.
+ *
+ * Usage:
+ *   node .agent/scripts/test_runner.js .
+ *   node .agent/scripts/test_runner.js . --coverage
+ *   node .agent/scripts/test_runner.js . --watch
+ *   node .agent/scripts/test_runner.js . --file src/utils.test.ts
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const {
+  RED,
+  GREEN,
+  BOLD,
+  DIM,
+  CYAN,
+  RESET,
+  banner,
+  sectionHeader,
+  timer,
+  formatMs,
+  ok,
+  fail,
+  skip,
+} = require('./_colors');
+
+const { loadJson } = require('./_utils');
+
+function runTests(label, cmd, cwd) {
+  const elapsed = timer();
+  try {
+    const executable =
+      process.platform === 'win32' && (cmd[0] === 'npx' || cmd[0] === 'npm')
+        ? `${cmd[0]}.cmd`
+        : cmd[0];
+    const result = spawnSync(executable, cmd.slice(1), {
+      cwd,
+      encoding: 'utf8',
+      timeout: 300000, // 5m
+      shell: process.platform === 'win32',
+    });
+
+    const ms = elapsed();
+
+    if (result.error && !result.stdout && !result.stderr) {
+      console.log(`    Error: ${result.error.message}`);
+    }
+    const out = result.stdout ? result.stdout.toString() : '';
+    const err = result.stderr ? result.stderr.toString() : '';
+    const output = (out + '\n' + err).trim();
+    if (output) {
+      for (const line of output.split('\n')) {
+        console.log(`    ${line}`);
+      }
+    }
+
+    if (result.status === 0) {
+      ok(`${label} — all tests passed ${DIM}(${formatMs(ms)})${RESET}`);
+      return true;
+    }
+
+    fail(`${label} — test failures detected ${DIM}(${formatMs(ms)})${RESET}`);
+    return false;
+  } catch {
+    skip(`${label} — tool not installed`);
+    return true;
+  }
+}
+
+function detectTestFramework(projectRoot) {
+  const pkg = loadJson(path.join(projectRoot, 'package.json'));
+  if (pkg) {
+    const deps = {
+      ...(pkg.dependencies || {}),
+      ...(pkg.devDependencies || {}),
+    };
+    const scripts = pkg.scripts || {};
+
+    if (deps.vitest) return 'vitest';
+    if (deps.jest) return 'jest';
+    if (deps.mocha) return 'mocha';
+    if (scripts.test) return 'npm-test';
+  }
+
+  if (
+    fs.existsSync(path.join(projectRoot, 'pytest.ini')) ||
+    fs.existsSync(path.join(projectRoot, 'pyproject.toml')) ||
+    fs.existsSync(path.join(projectRoot, 'conftest.py'))
+  ) {
+    return 'pytest';
+  }
+
+  // Go
+  function hasGoTests(dir) {
+    let items;
+    try {
+      items = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return false;
+    }
+    for (const item of items) {
+      if (item.isDirectory() && !['node_modules', '.git'].includes(item.name)) {
+        if (hasGoTests(path.join(dir, item.name))) return true;
+      } else if (item.name.endsWith('_test.go')) {
+        return true;
+      }
+    }
+    return false;
+  }
+
+  if (hasGoTests(projectRoot)) return 'go';
+
+  return null;
+}
+
+function main() {
+  const args = process.argv.slice(2);
+  let targetPath = null;
+  let coverageFlag = false;
+  let watchFlag = false;
+  let fileArg = null;
+
+  let i = 0;
+  while (i < args.length) {
+    if (args[i] === '--coverage') coverageFlag = true;
+    else if (args[i] === '--watch') watchFlag = true;
+    else if (args[i] === '--file' && i + 1 < args.length) fileArg = args[++i];
+    else if (!targetPath && !args[i].startsWith('-')) targetPath = args[i];
+    i++;
+  }
+
+  if (!targetPath) {
+    console.log('Usage: node test_runner.js <path> [--coverage] [--watch] [--file <filepath>]');
+    process.exit(1);
+  }
+
+  const projectRoot = path.resolve(targetPath);
+  if (!fs.existsSync(projectRoot) || !fs.statSync(projectRoot).isDirectory()) {
+    fail(`Directory not found: ${projectRoot}`);
+    process.exit(1);
+  }
+
+  const framework = detectTestFramework(projectRoot);
+  console.log(
+    banner('test_runner.js', {
+      Project: projectRoot,
+      Framework: framework || 'none detected',
+    }),
+  );
+
+  if (!framework) {
+    skip('No test framework detected in this project');
+    process.exit(0);
+  }
+
+  console.log(sectionHeader(`Running tests (${framework})`));
+
+  let cmd = [];
+  let passed = true;
+
+  if (['vitest', 'jest', 'mocha', 'npm-test'].includes(framework)) {
+    if (framework === 'vitest') {
+      cmd = watchFlag ? ['npx', 'vitest'] : ['npx', 'vitest', 'run'];
+      if (coverageFlag) cmd.push('--coverage');
+      if (fileArg) cmd.push(fileArg);
+    } else if (framework === 'jest') {
+      cmd = ['npx', 'jest'];
+      if (coverageFlag) cmd.push('--coverage');
+      if (watchFlag) cmd.push('--watch');
+      if (fileArg) cmd.push(fileArg);
+    } else {
+      cmd = ['npm', 'test', '--', '--passWithNoTests'];
+      if (coverageFlag) cmd.push('--coverage');
+      if (fileArg) cmd.push(fileArg);
+    }
+    passed = runTests(framework, cmd, projectRoot);
+  } else if (framework === 'pytest') {
+    cmd = ['python', '-m', 'pytest', '-v'];
+    if (coverageFlag) cmd.push('--cov', '--cov-report=term-missing');
+    if (watchFlag) cmd = ['python', '-m', 'pytest-watch', '--', '-v'];
+    if (fileArg) cmd.push(fileArg);
+    passed = runTests('pytest', cmd, projectRoot);
+  } else if (framework === 'go') {
+    cmd = ['go', 'test', './...', '-v'];
+    if (coverageFlag) cmd.push('-cover');
+    if (fileArg) cmd = ['go', 'test', '-v', '-run', fileArg];
+    passed = runTests('go test', cmd, projectRoot);
+  }
+
+  console.log(`\n${BOLD}${CYAN}━━━ Test Summary ━━━${RESET}`);
+  if (passed) {
+    console.log(`\n${GREEN}${BOLD}  ✔ Tests passed (${framework}).${RESET}\n`);
+  } else {
+    console.log(`\n${RED}${BOLD}  ✖ Tests failed (${framework}).${RESET}\n`);
+  }
+
+  process.exit(passed ? 0 : 1);
+}
+
+if (require.main === module) {
+  main();
+}