tribunal-kit 9.2.5 → 9.2.7

package/src/browser/audit.js

@@ -17,7 +17,7 @@ const { CdpClient, createNewTab, closeTab } = require('./cdp');
  * @param {object} options
  * @returns {Promise<object>}
  */
-async function auditURL(url, options = {}) {
+async function auditURL(url, _options = {}) {
   const browser = await launchBrowser();
   let client = null;
   let tab = null;
@@ -33,7 +33,7 @@ async function auditURL(url, options = {}) {
     await client.initDomains();
 
     // Listen for console logs & uncaught exceptions
-    client.on('Console.messageAdded', (params) => {
+    client.on('Console.messageAdded', params => {
       const msg = params?.message;
       if (msg && (msg.level === 'error' || msg.level === 'warning')) {
         consoleErrors.push({
@@ -45,7 +45,7 @@ async function auditURL(url, options = {}) {
       }
     });
 
-    client.on('Runtime.exceptionThrown', (params) => {
+    client.on('Runtime.exceptionThrown', params => {
       const details = params?.exceptionDetails;
       if (details) {
         consoleErrors.push({
@@ -58,7 +58,7 @@ async function auditURL(url, options = {}) {
     });
 
     // Listen for network failures
-    client.on('Network.responseReceived', (params) => {
+    client.on('Network.responseReceived', params => {
       const res = params?.response;
       if (res) {
         if (params.type === 'Document') {
@@ -74,7 +74,7 @@ async function auditURL(url, options = {}) {
       }
     });
 
-    client.on('Network.loadingFailed', (params) => {
+    client.on('Network.loadingFailed', params => {
       networkFailures.push({
         url: params.requestId,
         error: params.errorText,
@@ -212,8 +212,12 @@ async function auditURL(url, options = {}) {
       },
       summary: {
         passed: (pageMetrics?.a11yScore || 100) >= 80 && consoleErrors.length === 0,
-        totalIssues: (pageMetrics?.issues?.length || 0) + securityIssues.length + consoleErrors.length + networkFailures.length,
-      }
+        totalIssues:
+          (pageMetrics?.issues?.length || 0) +
+          securityIssues.length +
+          consoleErrors.length +
+          networkFailures.length,
+      },
     };
 
     return report;

package/src/browser/case_bridge.js

@@ -8,7 +8,6 @@
  * into binding Case Law precedents stored in .agent/history/case-law/
  */
 
-const path = require('path');
 const caseLaw = require('../../.agent/scripts/case_law_manager');
 
 /**
@@ -24,7 +23,7 @@ function codifyAuditViolations(auditReport, options = {}) {
   }
 
   const index = caseLaw.loadIndex();
-  const existingFingerprints = new Set(index.cases.map((c) => c.fingerprint));
+  const existingFingerprints = new Set(index.cases.map(c => c.fingerprint));
   const newCases = [];
   const now = new Date().toISOString().slice(0, 19);
   const targetUrl = auditReport.url || 'http://localhost';
@@ -46,7 +45,9 @@ function codifyAuditViolations(auditReport, options = {}) {
 
     const caseId = index.next_id;
     const reason = `[Web Audit] Accessibility violation: ${issue.message} on ${targetUrl}`;
-    const tags = caseLaw.extractTags(`accessibility wcag a11y ${issue.message} ${issue.category || ''}`);
+    const tags = caseLaw.extractTags(
+      `accessibility wcag a11y ${issue.message} ${issue.category || ''}`,
+    );
 
     const caseRecord = {
       id: caseId,

package/src/browser/cdp.js

@@ -14,8 +14,10 @@ const WS_OPEN = 1;
 
 function getNativeWebSocket() {
   if (typeof WebSocket !== 'undefined') return WebSocket;
-  if (typeof globalThis !== 'undefined' && typeof globalThis.WebSocket !== 'undefined') return globalThis.WebSocket;
-  if (typeof global !== 'undefined' && typeof global.WebSocket !== 'undefined') return global.WebSocket;
+  if (typeof globalThis !== 'undefined' && typeof globalThis.WebSocket !== 'undefined')
+    return globalThis.WebSocket;
+  if (typeof global !== 'undefined' && typeof global.WebSocket !== 'undefined')
+    return global.WebSocket;
   return null;
 }
 
@@ -111,7 +113,7 @@ function createNodeWebSocket(wsUrl) {
 
     let buffer = head && head.length > 0 ? Buffer.from(head) : Buffer.alloc(0);
 
-    socket.on('data', (chunk) => {
+    socket.on('data', chunk => {
       buffer = Buffer.concat([buffer, chunk]);
 
       while (buffer.length >= 2) {
@@ -176,7 +178,7 @@ function createNodeWebSocket(wsUrl) {
       }
     });
 
-    socket.on('error', (err) => {
+    socket.on('error', err => {
       if (ws.onerror) {
         try {
           ws.onerror(err);
@@ -206,7 +208,7 @@ function createNodeWebSocket(wsUrl) {
     }
   });
 
-  req.on('error', (err) => {
+  req.on('error', err => {
     ws.readyState = 3;
     if (ws.onerror) {
       try {
@@ -253,11 +255,11 @@ class CdpClient {
         resolve();
       };
 
-      socket.onerror = (err) => {
+      socket.onerror = err => {
         reject(new Error(`CDP WebSocket error: ${err.message || 'connection failed'}`));
       };
 
-      socket.onmessage = (event) => {
+      socket.onmessage = event => {
         try {
           const msg = JSON.parse(event.data);
           if (msg.id && this.pending.has(msg.id)) {
@@ -273,12 +275,12 @@ class CdpClient {
             for (const handler of listeners) {
               try {
                 handler(msg.params);
-              } catch (e) {
+              } catch (_e) {
                 // Ignore listener error
               }
             }
           }
-        } catch (e) {
+        } catch (_e) {
           // Ignore parse errors
         }
       };
@@ -313,11 +315,11 @@ class CdpClient {
       }, 30000);
 
       this.pending.set(id, {
-        resolve: (val) => {
+        resolve: val => {
           clearTimeout(timeout);
           resolve(val);
         },
-        reject: (err) => {
+        reject: err => {
           clearTimeout(timeout);
           reject(err);
         },
@@ -339,6 +341,17 @@ class CdpClient {
     this.eventListeners.get(event).push(handler);
   }
 
+  /**
+   * Deregister an event listener for CDP events.
+   * @param {string} event
+   * @param {Function} handler
+   */
+  off(event, handler) {
+    if (!this.eventListeners.has(event)) return;
+    const list = this.eventListeners.get(event).filter(h => h !== handler);
+    this.eventListeners.set(event, list);
+  }
+
   /**
    * Initialize standard domains (Page, Runtime, DOM, Network, Console)
    */
@@ -358,28 +371,24 @@ class CdpClient {
    * @returns {Promise<void>}
    */
   async navigate(url) {
-    return new Promise(async (resolve, reject) => {
-      let timeoutId;
-
-      const onLoad = () => {
-        clearTimeout(timeoutId);
-        resolve();
-      };
-
+    let timeoutId = null;
+    let onLoad = null;
+    const loadPromise = new Promise(resolve => {
+      onLoad = () => resolve();
       timeoutId = setTimeout(() => {
         // Fallback resolve after 15s even if load event stalls
         resolve();
       }, 15000);
-
       this.on('Page.loadEventFired', onLoad);
-
-      try {
-        await this.send('Page.navigate', { url });
-      } catch (err) {
-        clearTimeout(timeoutId);
-        reject(err);
-      }
     });
+
+    try {
+      await this.send('Page.navigate', { url });
+      await loadPromise;
+    } finally {
+      if (timeoutId) clearTimeout(timeoutId);
+      if (onLoad) this.off('Page.loadEventFired', onLoad);
+    }
   }
 
   /**
@@ -444,9 +453,9 @@ function createNewTab(port = 9222, host = '127.0.0.1') {
         path: '/json/new',
         method: 'PUT',
       },
-      (res) => {
+      res => {
         let data = '';
-        res.on('data', (chunk) => (data += chunk));
+        res.on('data', chunk => (data += chunk));
         res.on('end', () => {
           try {
             const tab = JSON.parse(data);
@@ -474,23 +483,25 @@ function createNewTab(port = 9222, host = '127.0.0.1') {
  */
 function getExistingTab(port = 9222, host = '127.0.0.1') {
   return new Promise((resolve, reject) => {
-    http.get(`http://${host}:${port}/json/list`, (res) => {
-      let data = '';
-      res.on('data', chunk => (data += chunk));
-      res.on('end', () => {
-        try {
-          const list = JSON.parse(data);
-          const pageTab = list.find(t => t.type === 'page' && t.webSocketDebuggerUrl) || list[0];
-          if (pageTab && pageTab.webSocketDebuggerUrl) {
-            resolve(pageTab);
-          } else {
-            reject(new Error('No valid page target found in /json/list'));
+    http
+      .get(`http://${host}:${port}/json/list`, res => {
+        let data = '';
+        res.on('data', chunk => (data += chunk));
+        res.on('end', () => {
+          try {
+            const list = JSON.parse(data);
+            const pageTab = list.find(t => t.type === 'page' && t.webSocketDebuggerUrl) || list[0];
+            if (pageTab && pageTab.webSocketDebuggerUrl) {
+              resolve(pageTab);
+            } else {
+              reject(new Error('No valid page target found in /json/list'));
+            }
+          } catch (e) {
+            reject(e);
           }
-        } catch (e) {
-          reject(e);
-        }
-      });
-    }).on('error', reject);
+        });
+      })
+      .on('error', reject);
   });
 }
 
@@ -501,8 +512,10 @@ function getExistingTab(port = 9222, host = '127.0.0.1') {
  * @param {string} host
  */
 function closeTab(targetId, port = 9222, host = '127.0.0.1') {
-  return new Promise((resolve) => {
-    http.get(`http://${host}:${port}/json/close/${targetId}`, () => resolve()).on('error', () => resolve());
+  return new Promise(resolve => {
+    http
+      .get(`http://${host}:${port}/json/close/${targetId}`, () => resolve())
+      .on('error', () => resolve());
   });
 }
 

package/src/browser/discovery.js

@@ -17,12 +17,24 @@ const http = require('http');
  */
 const WINDOWS_PATHS = [
   // Chrome 64-bit & 32-bit
-  path.join(process.env['ProgramFiles'] || 'C:\\Program Files', 'Google\\Chrome\\Application\\chrome.exe'),
-  path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'Google\\Chrome\\Application\\chrome.exe'),
+  path.join(
+    process.env['ProgramFiles'] || 'C:\\Program Files',
+    'Google\\Chrome\\Application\\chrome.exe',
+  ),
+  path.join(
+    process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)',
+    'Google\\Chrome\\Application\\chrome.exe',
+  ),
   path.join(process.env['LocalAppData'] || '', 'Google\\Chrome\\Application\\chrome.exe'),
   // Edge
-  path.join(process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)', 'Microsoft\\Edge\\Application\\msedge.exe'),
-  path.join(process.env['ProgramFiles'] || 'C:\\Program Files', 'Microsoft\\Edge\\Application\\msedge.exe'),
+  path.join(
+    process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)',
+    'Microsoft\\Edge\\Application\\msedge.exe',
+  ),
+  path.join(
+    process.env['ProgramFiles'] || 'C:\\Program Files',
+    'Microsoft\\Edge\\Application\\msedge.exe',
+  ),
   path.join(process.env['LocalAppData'] || '', 'Microsoft\\Edge\\Application\\msedge.exe'),
 ];
 
@@ -48,18 +60,16 @@ const LINUX_PATHS = [
  */
 function findBrowser() {
   // 1. Check explicit environment override
-  const envPath = process.env.CHROME_PATH || process.env.BROWSER_PATH || process.env.PINCHTAB_BROWSER_BINARY;
+  const envPath =
+    process.env.CHROME_PATH || process.env.BROWSER_PATH || process.env.PINCHTAB_BROWSER_BINARY;
   if (envPath && fs.existsSync(envPath)) {
     return { path: envPath, type: detectBrowserType(envPath) };
   }
 
   // 2. Platform-specific paths
   const platform = os.platform();
-  const candidates = platform === 'win32'
-    ? WINDOWS_PATHS
-    : platform === 'darwin'
-      ? DARWIN_PATHS
-      : LINUX_PATHS;
+  const candidates =
+    platform === 'win32' ? WINDOWS_PATHS : platform === 'darwin' ? DARWIN_PATHS : LINUX_PATHS;
 
   for (const candidate of candidates) {
     if (candidate && fs.existsSync(candidate)) {
@@ -120,8 +130,8 @@ function findPinchTabBinary() {
  * @returns {Promise<boolean>}
  */
 function isPortOpen(port = 9222, host = '127.0.0.1') {
-  return new Promise((resolve) => {
-    const req = http.get({ host, port, path: '/json/version', timeout: 500 }, (res) => {
+  return new Promise(resolve => {
+    const req = http.get({ host, port, path: '/json/version', timeout: 500 }, res => {
       resolve(res.statusCode === 200);
     });
     req.on('error', () => resolve(false));

package/src/browser/idpi.js

@@ -61,10 +61,13 @@ function scanContent(content) {
     const isHidden = HIDDEN_ELEMENT_CSS.some(css => css.test(style));
     if (isHidden) {
       // Hidden text exists — check if it contains commands
-      const hasInstruction = INJECTION_PATTERNS.some(p => p.test(innerText)) ||
+      const hasInstruction =
+        INJECTION_PATTERNS.some(p => p.test(innerText)) ||
         /(instruction|password|secret|execute|override|ignore)/i.test(innerText);
       if (hasInstruction) {
-        threats.push(`Hidden element injection: style="${style}", text="${innerText.slice(0, 60)}"`);
+        threats.push(
+          `Hidden element injection: style="${style}", text="${innerText.slice(0, 60)}"`,
+        );
       }
     }
   }
@@ -93,7 +96,7 @@ function sanitizeContent(content) {
   // Strip hidden elements containing suspicious text
   sanitized = sanitized.replace(
     /<([a-z0-9]+)\b[^>]*style=["'][^"']*(?:display\s*:\s*none|visibility\s*:\s*hidden|font-size\s*:\s*0)[^"']*["'][^>]*>[\s\S]*?<\/\1>/gi,
-    '[REDACTED_HIDDEN_CONTENT]'
+    '[REDACTED_HIDDEN_CONTENT]',
   );
 
   return sanitized;

package/src/browser/index.js

@@ -5,7 +5,7 @@
  */
 
 const { findBrowser, findPinchTabBinary, isPortOpen } = require('./discovery');
-const { launchBrowser, cleanupAll } = require('./launcher');
+const { launchBrowser, cleanupAll, terminateProcessTree } = require('./launcher');
 const { CdpClient, createNewTab, closeTab } = require('./cdp');
 const { trimHTML, toSemanticMarkdown, truncateUTF8Bytes, MAX_TRIMMED_BYTES } = require('./trimmer');
 const { scanContent, sanitizeContent, sandboxWebContent, isDomainAllowed } = require('./idpi');
@@ -22,7 +22,7 @@ const { captureRuntimeErrors, verifyRuntimeFix } = require('./sentinel');
  * @param {object} options
  * @returns {Promise<{ url: string, markdown: string, sandboxed: string, isClean: boolean, threatLevel: string }>}
  */
-async function browse(url, options = {}) {
+async function browse(url, _options = {}) {
   const browser = await launchBrowser();
   let client = null;
   let tab = null;
@@ -66,6 +66,7 @@ module.exports = {
   isPortOpen,
   launchBrowser,
   cleanupAll,
+  terminateProcessTree,
   CdpClient,
   createNewTab,
   closeTab,

package/src/browser/launcher.js

@@ -41,8 +41,14 @@ function cleanupAll() {
 }
 
 process.on('exit', cleanupAll);
-process.on('SIGINT', () => { cleanupAll(); process.exit(130); });
-process.on('SIGTERM', () => { cleanupAll(); process.exit(143); });
+process.on('SIGINT', () => {
+  cleanupAll();
+  process.exit(130);
+});
+process.on('SIGTERM', () => {
+  cleanupAll();
+  process.exit(143);
+});
 
 /**
  * Launches an isolated headless Chrome instance.
@@ -133,7 +139,7 @@ async function launchBrowser(options = {}) {
 
   const close = async () => {
     activeInstances.delete(proc);
-    proc.kill();
+    terminateProcessTree(proc);
     try {
       fs.rmSync(tempProfileDir, { recursive: true, force: true });
     } catch {
@@ -148,7 +154,47 @@ async function launchBrowser(options = {}) {
   };
 }
 
+/**
+ * Cleanly terminates a process and its child process tree cross-platform.
+ * Handles null, dead, or invalid processes gracefully without throwing.
+ * @param {any} proc - ChildProcess instance or object with pid
+ */
+function terminateProcessTree(proc) {
+  if (!proc || typeof proc !== 'object' || !proc.pid) return;
+  const pid = proc.pid;
+  try {
+    if (process.platform === 'win32') {
+      try {
+        const { execSync } = require('child_process');
+        execSync(`taskkill /pid ${pid} /T /F`, { stdio: 'ignore' });
+      } catch (_) {}
+      try {
+        if (typeof proc.kill === 'function') {
+          proc.kill('SIGKILL');
+        } else {
+          process.kill(pid, 'SIGKILL');
+        }
+      } catch (_) {}
+    } else {
+      try {
+        process.kill(-pid, 'SIGKILL');
+      } catch (_) {
+        try {
+          if (typeof proc.kill === 'function') {
+            proc.kill('SIGKILL');
+          } else {
+            process.kill(pid, 'SIGKILL');
+          }
+        } catch (_) {}
+      }
+    }
+  } catch (_) {
+    // Graceful error handling for missing, invalid, or already-dead process
+  }
+}
+
 module.exports = {
   launchBrowser,
   cleanupAll,
+  terminateProcessTree,
 };

package/src/browser/sentinel.js

@@ -24,7 +24,8 @@ function extractSourceLocations(stackText, projectRoot = process.cwd()) {
   const locations = [];
   const lines = stackText.split('\n');
 
-  const fileRegex = /(?:at\s+(?:.*?\s+)?\(?|webpack-internal:\/\/\/\.?\/)(https?:\/\/[^\/]+)?(\/[^\s:)]+):(\d+):(\d+)\)?/g;
+  const fileRegex =
+    /(?:at\s+(?:.*?\s+)?\(?|webpack-internal:\/\/\/\.?\/)(https?:\/\/[^\/]+)?(\/[^\s:)]+):(\d+):(\d+)\)?/g;
 
   for (const line of lines) {
     let match;
@@ -81,14 +82,17 @@ async function captureRuntimeErrors(url, options = {}) {
     await client.connect(tab.webSocketDebuggerUrl);
     await client.initDomains();
 
-    client.on('Runtime.exceptionThrown', (params) => {
+    client.on('Runtime.exceptionThrown', params => {
       const details = params?.exceptionDetails;
       if (!details) return;
 
       const text = details.text || details.exception?.description || 'Uncaught exception';
       const stack = details.stackTrace
         ? details.stackTrace.callFrames
-            ?.map((f) => `    at ${f.functionName || '<anonymous>'} (${f.url}:${f.lineNumber}:${f.columnNumber})`)
+            ?.map(
+              f =>
+                `    at ${f.functionName || '<anonymous>'} (${f.url}:${f.lineNumber}:${f.columnNumber})`,
+            )
             .join('\n')
         : details.exception?.description || '';
 
@@ -102,7 +106,7 @@ async function captureRuntimeErrors(url, options = {}) {
       });
     });
 
-    client.on('Console.messageAdded', (params) => {
+    client.on('Console.messageAdded', params => {
       const msg = params?.message;
       if (msg && msg.level === 'error') {
         consoleErrors.push({
@@ -111,12 +115,14 @@ async function captureRuntimeErrors(url, options = {}) {
           url: msg.url,
           line: msg.line,
           column: msg.column,
-          locations: extractSourceLocations(msg.text + (msg.url ? `\n at ${msg.url}:${msg.line}:0` : '')),
+          locations: extractSourceLocations(
+            msg.text + (msg.url ? `\n at ${msg.url}:${msg.line}:0` : ''),
+          ),
         });
       }
     });
 
-    client.on('Network.responseReceived', (params) => {
+    client.on('Network.responseReceived', params => {
       const res = params?.response;
       if (res && res.status >= 400) {
         networkFailures.push({
@@ -130,7 +136,7 @@ async function captureRuntimeErrors(url, options = {}) {
     const startTime = Date.now();
     await client.navigate(url);
     const settleWaitMs = options.settleWaitMs || 1000;
-    await new Promise((r) => setTimeout(r, settleWaitMs));
+    await new Promise(r => setTimeout(r, settleWaitMs));
 
     // Check for standard error overlays (Next.js, Vite, CRA)
     const overlayInfo = await client.evaluate(`

package/src/browser/synapse.js

@@ -165,7 +165,7 @@ function mapStylesToTailwind(styles) {
 /**
  * Synthesizes production-grade React + TypeScript component code.
  */
-function synthesizeReactComponent(componentName, data, options = {}) {
+function synthesizeReactComponent(componentName, data, _options = {}) {
   const { tagName, text, styles } = data;
   const twClasses = mapStylesToTailwind(styles);
 

package/src/browser/trimmer.js

@@ -30,12 +30,13 @@ function trimHTML(html, maxBytes = MAX_TRIMMED_BYTES) {
   cleaned = stripSVG(cleaned);
 
   // 3. Strip long data URIs
-  cleaned = cleaned.replace(/(data:[a-z\d.+-]+\/[a-z\d.+-]+;base64,[A-Za-z\d+/=]{30,})/gi, '[data-uri]');
+  cleaned = cleaned.replace(
+    /(data:[a-z\d.+-]+\/[a-z\d.+-]+;base64,[A-Za-z\d+/=]{30,})/gi,
+    '[data-uri]',
+  );
 
   // 4. Collapse excess whitespace
-  cleaned = cleaned
-    .replace(/[ \t]+/g, ' ')
-    .replace(/\n{3,}/g, '\n\n');
+  cleaned = cleaned.replace(/[ \t]+/g, ' ').replace(/\n{3,}/g, '\n\n');
 
   // 5. Trim lines and filter empty
   const lines = cleaned
@@ -172,9 +173,14 @@ function toSemanticMarkdown(html) {
     const attrs = m[1];
     const typeMatch = attrs.match(/type=["']([^"']+)["']/i) || attrs.match(/type=([^"'\s]+)/i);
     const nameMatch = attrs.match(/name=["']([^"']+)["']/i) || attrs.match(/name=([^"'\s]+)/i);
-    const placeholderMatch = attrs.match(/placeholder=["']([^"']+)["']/i) || attrs.match(/placeholder=([^"'\s]+)/i);
+    const placeholderMatch =
+      attrs.match(/placeholder=["']([^"']+)["']/i) || attrs.match(/placeholder=([^"'\s]+)/i);
     const type = typeMatch ? typeMatch[1] : 'text';
-    const desc = placeholderMatch ? `placeholder="${placeholderMatch[1]}"` : nameMatch ? `name="${nameMatch[1]}"` : type;
+    const desc = placeholderMatch
+      ? `placeholder="${placeholderMatch[1]}"`
+      : nameMatch
+        ? `name="${nameMatch[1]}"`
+        : type;
     output.push(`- [Input #${ref++}] type="${type}" (${desc})`);
   }
 
@@ -198,7 +204,10 @@ function toSemanticMarkdown(html) {
  * Helper to strip HTML tags
  */
 function stripTags(str) {
-  return str.replace(/<[^>]*>/g, '').replace(/&nbsp;/g, ' ').replace(/&amp;/g, '&');
+  return str
+    .replace(/<[^>]*>/g, '')
+    .replace(/&nbsp;/g, ' ')
+    .replace(/&amp;/g, '&');
 }
 
 module.exports = {