tribunal-kit 9.2.4 → 9.2.6

package/scripts/stress_benchmark.js

@@ -1,358 +0,0 @@
-#!/usr/bin/env node
-/**
- * Tribunal-Kit Deep Stress Benchmark & Verification Suite
- * =========================================================
- * Heavy-load stress testing for high performance, zero hallucination,
- * low token consumption, and absolute governance integrity.
- *
- * Run: node scripts/stress_benchmark.js
- */
-
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-const { performance } = require('perf_hooks');
-
-// ANSI colors
-const C = {
-  reset: '\x1b[0m',
-  bold: '\x1b[1m',
-  green: '\x1b[92m',
-  yellow: '\x1b[93m',
-  cyan: '\x1b[96m',
-  red: '\x1b[91m',
-  gray: '\x1b[90m',
-  white: '\x1b[97m',
-};
-
-function c(color, text) {
-  return `${C[color]}${text}${C.reset}`;
-}
-function bold(text) {
-  return `${C.bold}${text}${C.reset}`;
-}
-
-// Target scripts
-const SCRIPT_DIR = path.resolve(__dirname, '../.agent/scripts');
-const contextBroker = require(path.join(SCRIPT_DIR, 'context_broker.js'));
-const pipelineEngine = require(path.join(SCRIPT_DIR, 'pipeline_engine.js'));
-const innerLoopValidator = require(path.join(SCRIPT_DIR, 'inner_loop_validator.js'));
-const contractEngine = require(path.join(SCRIPT_DIR, 'contract_engine.js'));
-const promptCompiler = require(path.join(SCRIPT_DIR, 'prompt_compiler.js'));
-const _graphBuilder = require(path.join(SCRIPT_DIR, 'graph_builder.js'));
-const swarmDispatcher = require(path.join(SCRIPT_DIR, 'swarm_dispatcher.js'));
-
-async function runStressSuite() {
-  console.log('');
-  console.log(bold(`  🚀 Tribunal-Kit Governance Stress & Optimization Benchmark`));
-  console.log(c('gray', `  ─────────────────────────────────────────────────────────────`));
-  console.log(
-    c(
-      'gray',
-      `  Platform: ${os.platform()} ${os.arch()} | Node: ${process.version} | CPUs: ${os.cpus().length}`,
-    ),
-  );
-  console.log(c('gray', `  ─────────────────────────────────────────────────────────────`));
-  console.log('');
-
-  const results = {
-    concurrency: null,
-    scale: null,
-    token_compression: null,
-    anti_hallucination: null,
-  };
-
-  // ── 1. High Concurrency Stress Test ─────────────────────────────────────────
-  console.log(
-    c('cyan', '  ▸ [STRESS 1/4] High-Concurrency Engine Dispatch (50 Parallel Requests)...'),
-  );
-  {
-    const CONCURRENCY_COUNT = 50;
-    const startMem = process.memoryUsage().heapUsed;
-    const startTime = performance.now();
-
-    const tasks = Array.from({ length: CONCURRENCY_COUNT }, (_, i) => {
-      return (async () => {
-        // Run context broker lookup
-        const cbRes = contextBroker.resolveContext({
-          task: `Task ${i}: Build secure authentication with JWT and React`,
-          model: i % 2 === 0 ? 'large' : 'small',
-        });
-
-        // Run inner loop validator snippet check
-        const snippet = [
-          'const jwt = req' + 'uire("jsonwebtoken");',
-          'function login(user) {',
-          '  if (!user) throw new Error("User required");',
-          '  return jwt.sign({ id: user.id }, "secret", { expiresIn: "1h" });',
-          '}',
-        ].join('\n');
-        const valRes = innerLoopValidator.validateSnippet(snippet, 'ts');
-
-        // Run pipeline plan phase
-        const planRes = pipelineEngine.planPhase(`Build API route ${i}`, [`route${i}.ts`]);
-
-        return { cbRes, valRes, planRes };
-      })();
-    });
-
-    const completed = await Promise.all(tasks);
-    const endTime = performance.now();
-    const endMem = process.memoryUsage().heapUsed;
-
-    const totalMs = endTime - startTime;
-    const opsPerSec = Math.round((CONCURRENCY_COUNT * 3 * 1000) / totalMs);
-    const memDeltaMb = Math.round(((endMem - startMem) / 1024 / 1024) * 100) / 100;
-
-    results.concurrency = {
-      total_operations: CONCURRENCY_COUNT * 3,
-      total_time_ms: Math.round(totalMs),
-      ops_per_sec: opsPerSec,
-      mem_delta_mb: memDeltaMb,
-      all_passed: completed.length === CONCURRENCY_COUNT,
-    };
-
-    console.log(
-      c(
-        'green',
-        `    ✔ Completed ${results.concurrency.total_operations} engine ops in ${results.concurrency.total_time_ms}ms (${opsPerSec} ops/sec, Heap Delta: ${memDeltaMb}MB)`,
-      ),
-    );
-  }
-
-  // ── 2. Scale & Heavy AST Input Stress ───────────────────────────────────────
-  console.log(
-    c('cyan', '  ▸ [STRESS 2/4] Large Codebase & Scale Parsing (10,000 LOC Synthetic File)...'),
-  );
-  {
-    // Generate synthetic 10k LOC string
-    const lines = [];
-    lines.push('const express = req' + 'uire("express");');
-    lines.push('const app = express();');
-    for (let i = 0; i < 2000; i++) {
-      lines.push(`// Helper function block ${i}`);
-      lines.push(`function helper_${i}(val) {`);
-      lines.push(`  if (!val) return null;`);
-      lines.push(`  const res = val * ${i} + 42;`);
-      lines.push(`  return { index: ${i}, value: res };`);
-      lines.push(`}`);
-    }
-    lines.push('module.exports = { app };');
-    const largeCode = lines.join('\n');
-
-    const startTime = performance.now();
-
-    // 1. Inner loop validator on 10k LOC
-    const valResult = innerLoopValidator.validateSnippet(largeCode, 'js');
-
-    // 2. Contract engine evaluation
-    const contractResult = contractEngine.evaluateCode(largeCode, 'large_file.js');
-
-    const endTime = performance.now();
-    const durationMs = Math.round(endTime - startTime);
-
-    results.scale = {
-      lines_of_code: lines.length,
-      file_size_kb: Math.round(Buffer.byteLength(largeCode, 'utf8') / 1024),
-      parse_time_ms: durationMs,
-      passed_validator: valResult.passed,
-      passed_contracts: contractResult.passed,
-    };
-
-    console.log(
-      c(
-        'green',
-        `    ✔ Parsed & audited ${results.scale.lines_of_code} LOC (${results.scale.file_size_kb} KB) in ${durationMs}ms`,
-      ),
-    );
-  }
-
-  // ── 3. Token Compression & Budget Stress ─────────────────────────────────────
-  console.log(c('cyan', '  ▸ [STRESS 3/4] Context Compression Ratio & Super-Prompt Efficiency...'));
-  {
-    const rawPrompt = `
-      System: You are an AI coding assistant.
-      Instructions:
-      1. Follow security rules strictly.
-      2. Do not log credentials to console.
-      3. Always use typed interfaces in TypeScript.
-      4. Handle errors properly in try-catch blocks.
-      5. Validate inputs with Zod schemas.
-      Context:
-      File: src/auth/login.ts
-      Imports: express, jsonwebtoken, zod
-      Dependencies: user-service, token-store
-      Rules:
-      - RULE 1: Never hardcode secrets.
-      - RULE 2: No console logging in production.
-      - RULE 3: Parameterize all SQL queries.
-    `;
-
-    const rawTokenEstimate = Math.round(rawPrompt.length / 4);
-
-    const compiled = promptCompiler.compileSuperPrompt({
-      task: 'Build secure authentication endpoint',
-      stack: ['express', 'typescript', 'zod'],
-      rules: ['security', 'type-safety', 'no-console-log'],
-      context_files: ['src/auth/login.ts'],
-    });
-
-    const compiledString = typeof compiled === 'string' ? compiled : JSON.stringify(compiled);
-    const compressedTokenEstimate = Math.round(compiledString.length / 4);
-    const savingsPercent = Math.round((1 - compressedTokenEstimate / rawTokenEstimate) * 100);
-
-    results.token_compression = {
-      raw_tokens_estimate: rawTokenEstimate,
-      compressed_tokens_estimate: compressedTokenEstimate,
-      savings_percent: savingsPercent,
-    };
-
-    console.log(
-      c(
-        'green',
-        `    ✔ Super-Prompt compressed payload from ~${rawTokenEstimate} to ~${compressedTokenEstimate} tokens (${savingsPercent}% token savings)`,
-      ),
-    );
-  }
-
-  // ── 4. Anti-Hallucination & Governance Stress ────────────────────────────────
-  console.log(c('cyan', '  ▸ [STRESS 4/4] Anti-Hallucination Attack Injection Verification...'));
-  {
-    const maliciousPayloads = [
-      {
-        name: 'Code Injection (eval)',
-        code: ['const result = ', 'ev', 'al(req.query.userCode);'].join(''),
-        shouldFail: true,
-      },
-      {
-        name: 'Hardcoded Password',
-        code: ['const dbPass', 'word = "SuperSecretPassword123!";'].join(''),
-        shouldFail: true,
-      },
-      {
-        name: "JWT 'none' Algorithm",
-        code: [
-          'const jwt = req' + 'uire("jsonwebtoken"); jwt.verify(token, secret, { algo',
-          'rithms: ["none"] });',
-        ].join(''),
-        shouldFail: true,
-      },
-      {
-        name: 'Direct innerHTML Assignment',
-        code: ['document.getElementById("out").inner', 'HTML = unescapedInput;'].join(''),
-        shouldFail: true,
-      },
-      {
-        name: 'Clean Production Code',
-        code: [
-          'const z = req' + 'uire("zod");',
-          'const UserSchema = z.object({ id: z.string() });',
-          'function parseUser(data) {',
-          '  return UserSchema.parse(data);',
-          '}',
-          'module.exports = { parseUser };',
-        ].join('\n'),
-        shouldFail: false,
-      },
-    ];
-
-    let caughtCount = 0;
-    let totalMalicious = 0;
-
-    for (const testCase of maliciousPayloads) {
-      const valResult = innerLoopValidator.validateSnippet(testCase.code, 'ts');
-      if (testCase.shouldFail) {
-        totalMalicious++;
-        if (
-          !valResult.passed ||
-          valResult.verdict === 'REJECTED' ||
-          valResult.verdict === 'WARNING'
-        ) {
-          caughtCount++;
-        }
-      } else {
-        if (valResult.passed) {
-          // Clean code passed as expected
-        }
-      }
-    }
-
-    // Swarm Payload Anti-Hallucination Schema check
-    const invalidSwarmPayload = {
-      workers: [
-        {
-          task_id: 'w1',
-          invalid_extra_field: 'hallucinated_data',
-        },
-      ],
-    };
-    const swarmResult = swarmDispatcher.validateSwarmPayload(invalidSwarmPayload, { quiet: true });
-    const caughtSwarmHallucination = swarmResult === false;
-
-    const detectionRate = Math.round((caughtCount / totalMalicious) * 100);
-
-    results.anti_hallucination = {
-      total_malicious_cases: totalMalicious,
-      caught_cases: caughtCount,
-      detection_rate_percent: detectionRate,
-      caught_swarm_hallucination: caughtSwarmHallucination,
-    };
-
-    console.log(
-      c(
-        'green',
-        `    ✔ Anti-Hallucination Barrier: ${caughtCount}/${totalMalicious} malicious vulnerabilities caught (${detectionRate}% detection rate)`,
-      ),
-    );
-    console.log(
-      c(
-        'green',
-        `    ✔ Swarm Payload Strict Schema Gate: ${caughtSwarmHallucination ? 'BLOCKED invalid payload' : 'PASSED'}`,
-      ),
-    );
-  }
-
-  // ── Print Summary ────────────────────────────────────────────────────────────
-  console.log();
-  console.log(bold(`  📊 Summary of Stress Testing Results`));
-  console.log(c('gray', `  ─────────────────────────────────────────────────────────────`));
-  console.log(
-    `  ${c('white', 'Benchmark Category'.padEnd(30))} ${c('white', 'Metric'.padEnd(20))} ${c('white', 'Status'.padStart(10))}`,
-  );
-  console.log(c('gray', `  ─────────────────────────────────────────────────────────────`));
-
-  console.log(
-    `  ${c('white', 'Concurrency (50 Ops)'.padEnd(30))} ${c('green', `${results.concurrency.ops_per_sec} ops/sec`.padEnd(20))} ${c('green', 'PASSED'.padStart(10))}`,
-  );
-  console.log(
-    `  ${c('white', 'Scale (10,000 LOC)'.padEnd(30))} ${c('green', `${results.scale.parse_time_ms} ms`.padEnd(20))} ${c('green', 'PASSED'.padStart(10))}`,
-  );
-  console.log(
-    `  ${c('white', 'Token Compression'.padEnd(30))} ${c('green', `${results.token_compression.savings_percent}% reduction`.padEnd(20))} ${c('green', 'PASSED'.padStart(10))}`,
-  );
-  console.log(
-    `  ${c('white', 'Anti-Hallucination Rate'.padEnd(30))} ${c('green', `${results.anti_hallucination.detection_rate_percent}% caught`.padEnd(20))} ${c('green', 'PASSED'.padStart(10))}`,
-  );
-
-  console.log(c('gray', `  ─────────────────────────────────────────────────────────────`));
-  console.log();
-
-  // Save report to artifacts / root
-  const outputPath = path.resolve(__dirname, '../benchmark-stress-results.json');
-  fs.writeFileSync(outputPath, JSON.stringify(results, null, 2));
-  console.log(c('green', `  ✔ Results exported to benchmark-stress-results.json`));
-  console.log();
-
-  return results;
-}
-
-if (require.main === module) {
-  runStressSuite().catch(err => {
-    console.error(`Stress benchmark failed: ${err.message}`);
-    process.exit(1);
-  });
-}
-
-module.exports = { runStressSuite };

package/scripts/sync-skills.js

@@ -1,61 +0,0 @@
-#!/usr/bin/env node
-/**
- * sync-skills.js — Multi-platform skill directory synchronizer.
- *
- * Ensures skills are mirrored into:
- * - skills/         (for universal tools, Claude Code, Cursor, Windsurf, Roo Code)
- * - .agents/skills/ (for OpenAI Codex CLI and multi-agent harnesses)
- * from the canonical source:
- * - .agent/skills/
- */
-
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-
-const ROOT = path.resolve(__dirname, '..');
-const CANONICAL_SKILLS = path.join(ROOT, '.agent', 'skills');
-const TARGET_SKILLS = path.join(ROOT, 'skills');
-const TARGET_AGENTS_SKILLS = path.join(ROOT, '.agents', 'skills');
-
-function copyDirRecursive(src, dest) {
-  if (!fs.existsSync(dest)) {
-    fs.mkdirSync(dest, { recursive: true });
-  }
-
-  const entries = fs.readdirSync(src, { withFileTypes: true });
-  for (const entry of entries) {
-    const srcPath = path.join(src, entry.name);
-    const destPath = path.join(dest, entry.name);
-
-    if (entry.isDirectory()) {
-      copyDirRecursive(srcPath, destPath);
-    } else {
-      fs.copyFileSync(srcPath, destPath);
-    }
-  }
-}
-
-function syncSkills() {
-  console.log('\n  🔱 Syncing Tribunal Skills across platform conventions...');
-
-  if (!fs.existsSync(CANONICAL_SKILLS)) {
-    console.error('  ✖ Error: Canonical skills directory .agent/skills not found!');
-    process.exit(1);
-  }
-
-  copyDirRecursive(CANONICAL_SKILLS, TARGET_SKILLS);
-  console.log(`  ✓ Mirrored to ${path.relative(ROOT, TARGET_SKILLS)}/`);
-
-  copyDirRecursive(CANONICAL_SKILLS, TARGET_AGENTS_SKILLS);
-  console.log(`  ✓ Mirrored to ${path.relative(ROOT, TARGET_AGENTS_SKILLS)}/`);
-
-  console.log('  ✔ All skills synchronized.\n');
-}
-
-if (require.main === module) {
-  syncSkills();
-}
-
-module.exports = { syncSkills };

package/scripts/sync-version.js

@@ -1,177 +0,0 @@
-#!/usr/bin/env node
-/**
- * sync-version.js — Release metadata consistency check for Tribunal Kit.
- *
- * Verifies the package version, native package metadata, lockfile metadata,
- * and public asset-count claims before a release. It intentionally performs
- * no implicit writes: a failed check makes stale release metadata visible.
- */
-
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-
-const ROOT = path.resolve(__dirname, '..');
-const PKG_PATH = path.join(ROOT, 'package.json');
-const PKG = JSON.parse(fs.readFileSync(PKG_PATH, 'utf8'));
-const VERSION = PKG.version;
-
-function readText(relativePath) {
-  return fs.readFileSync(path.join(ROOT, relativePath), 'utf8');
-}
-
-function readJson(relativePath) {
-  return JSON.parse(readText(relativePath));
-}
-
-function countDirectory(relativePath, predicate) {
-  const directory = path.join(ROOT, relativePath);
-  if (!fs.existsSync(directory)) return 0;
-  return fs.readdirSync(directory, { withFileTypes: true }).filter(predicate).length;
-}
-
-function countReviewers() {
-  const agentsDir = path.join(ROOT, '.agent', 'agents');
-  return countDirectory('.agent/agents', entry => {
-    if (!entry.isFile() || !entry.name.endsWith('.md')) return false;
-    const content = fs.readFileSync(path.join(agentsDir, entry.name), 'utf8');
-    return (
-      /reviewer|auditor|tester|throughput-optimizer/i.test(entry.name) ||
-      /^role:\s*reviewer\s*$/im.test(content)
-    );
-  });
-}
-
-const COUNTS = {
-  agents: countDirectory('.agent/agents', entry => entry.isFile() && entry.name.endsWith('.md')),
-  reviewers: countReviewers(),
-  skills: countDirectory(
-    '.agent/skills',
-    entry =>
-      entry.isDirectory() &&
-      fs.existsSync(path.join(ROOT, '.agent', 'skills', entry.name, 'SKILL.md')),
-  ),
-  workflows: countDirectory(
-    '.agent/workflows',
-    entry => entry.isFile() && entry.name.endsWith('.md'),
-  ),
-  scripts: countDirectory(
-    '.agent/scripts',
-    entry => entry.isFile() && /\.(?:js|py)$/.test(entry.name),
-  ),
-};
-
-const failures = [];
-
-function fail(message) {
-  failures.push(message);
-}
-
-function checkVersionMetadata() {
-  const expectedOptionalVersion = `^${VERSION}`;
-  for (const [name, declaredVersion] of Object.entries(PKG.optionalDependencies || {})) {
-    if (declaredVersion !== expectedOptionalVersion) {
-      fail(
-        `package.json optional dependency ${name} is ${declaredVersion}, expected ${expectedOptionalVersion}`,
-      );
-    }
-  }
-
-  const lock = readJson('package-lock.json');
-  if (lock.version !== VERSION || lock.packages?.['']?.version !== VERSION) {
-    fail(`package-lock.json root version does not match package.json (${VERSION})`);
-  }
-  for (const [name, declaredVersion] of Object.entries(
-    lock.packages?.['']?.optionalDependencies || {},
-  )) {
-    if (declaredVersion !== expectedOptionalVersion) {
-      fail(
-        `package-lock.json optional dependency ${name} is ${declaredVersion}, expected ${expectedOptionalVersion}`,
-      );
-    }
-  }
-
-  const cargoToml = readText('crates/core/Cargo.toml');
-  const cargoTomlVersion = cargoToml.match(/^version\s*=\s*"([^"]+)"/m)?.[1];
-  if (cargoTomlVersion !== VERSION) {
-    fail(`crates/core/Cargo.toml version is ${cargoTomlVersion || 'missing'}, expected ${VERSION}`);
-  }
-
-  const cargoLock = readText('Cargo.lock');
-  const cargoLockVersion = cargoLock.match(
-    /name\s*=\s*"tribunal-core"[\s\S]*?version\s*=\s*"([^"]+)"/,
-  )?.[1];
-  if (cargoLockVersion !== VERSION) {
-    fail(
-      `Cargo.lock tribunal-core version is ${cargoLockVersion || 'missing'}, expected ${VERSION}`,
-    );
-  }
-
-  const readmeRelease = readText('README.md').match(/Release-v([0-9]+\.[0-9]+\.[0-9]+)/)?.[1];
-  if (readmeRelease !== VERSION) {
-    fail(`README release badge is ${readmeRelease || 'missing'}, expected ${VERSION}`);
-  }
-}
-
-const DOCUMENTS = [
-  'README.md',
-  '.agent/ARCHITECTURE.md',
-  '.agent/rules/GEMINI.md',
-  'CONTRIBUTING.md',
-];
-
-const CLAIM_PATTERNS = [
-  { entity: 'agents', regex: /(\d+)\s*(?:specialist\s+)?agents?\b/gi },
-  {
-    entity: 'reviewers',
-    regex: /(\d+)\s*(?:-\s*)?(?:(?:parallel|domain(?:-specific)?|tribunal|code)\s+)*reviewers?\b/gi,
-  },
-  {
-    entity: 'skills',
-    regex: /(\d+)\s*(?:valid\s+|modular\s+)?skills?(?:\s+(?:packages?|modules?))?\b/gi,
-  },
-  { entity: 'workflows', regex: /(\d+)\s*(?:slash\s+)?workflows?\b/gi },
-  { entity: 'scripts', regex: /(\d+)\s*(?:JS\s+)?(?:automation\s+)?scripts?\b/gi },
-];
-
-function checkDocumentCounts() {
-  for (const relativePath of DOCUMENTS) {
-    const content = readText(relativePath);
-    for (const { entity, regex } of CLAIM_PATTERNS) {
-      regex.lastIndex = 0;
-      let match;
-      while ((match = regex.exec(content)) !== null) {
-        const claimed = Number.parseInt(match[1], 10);
-        if (claimed < 5 || claimed > 500) continue;
-        if (claimed !== COUNTS[entity]) {
-          const line = content.slice(0, match.index).split(/\r?\n/).length;
-          fail(`${relativePath}:${line} says ${claimed} ${entity}, actual is ${COUNTS[entity]}`);
-        }
-      }
-    }
-  }
-}
-
-console.log(`\n  Tribunal Kit v${VERSION} — Release Metadata Check`);
-console.log('  ────────────────────────────────────────────────');
-console.log(`  Agents:    ${COUNTS.agents} (${COUNTS.reviewers} reviewers)`);
-console.log(`  Skills:    ${COUNTS.skills}`);
-console.log(`  Workflows: ${COUNTS.workflows}`);
-console.log(`  Scripts:   ${COUNTS.scripts}`);
-
-checkVersionMetadata();
-checkDocumentCounts();
-
-if (failures.length > 0) {
-  console.log();
-  for (const message of failures) console.log(`  ✗ ${message}`);
-  console.log(
-    `\n  Found ${failures.length} release metadata inconsistency${failures.length === 1 ? '' : 'ies'}.`,
-  );
-  process.exitCode = 1;
-} else {
-  console.log(
-    `\n  ✓ Version metadata and public count claims are in sync across ${DOCUMENTS.length} documents.\n`,
-  );
-}