tribunal-kit 9.2.6 → 9.2.8

package/bin/adapter-install.js

@@ -204,7 +204,7 @@ function main() {
   console.log('');
   console.log('┌─────────────────────────────────────────────┐');
   console.log('│  🔱 Tribunal Kit — Universal Agent Adapter  │');
-  console.log('│  v9.2.6 · 52 specialists · 185 skills       │');
+  console.log('│  v9.2.8 · 52 specialists · 185 skills       │');
   console.log('└─────────────────────────────────────────────┘');
   console.log('');
 

package/bin/mcp-server.js

@@ -79,6 +79,14 @@ class ToolRepeatGuard {
 }
 const repeatGuard = new ToolRepeatGuard();
 
+// Instantiate ControlledWriteService for MCP
+const { ControlledWriteService } = require('../src/execution/controlled_write_service');
+const controlledWriteService = new ControlledWriteService({ workspaceRoot: process.cwd() });
+
+// Instantiate CorrectionRunEngine
+const { CorrectionRunEngine } = require('../src/execution/correction_run_engine');
+const correctionEngine = new CorrectionRunEngine({ controlledWriteService });
+
 class RpcError extends Error {
   constructor(code, message) {
     super(message);
@@ -346,6 +354,62 @@ async function handleRequest(req) {
   if (req.method === 'tools/list') {
     return {
       tools: [
+        {
+          name: 'tribunal_request_write',
+          description: 'Request a repository mutation. Generates a preview and token.',
+          inputSchema: {
+            type: 'object',
+            properties: {
+              files: {
+                type: 'array',
+                items: {
+                  type: 'object',
+                  properties: {
+                    path: { type: 'string' },
+                    operation: { type: 'string', enum: ['CREATE', 'MODIFY', 'DELETE'] },
+                    content: { type: 'string' },
+                    expectedHash: { type: 'string' },
+                  },
+                  required: ['path', 'operation'],
+                },
+              },
+              reason: { type: 'string' },
+              dryRun: { type: 'boolean' },
+            },
+            required: ['files', 'reason'],
+            additionalProperties: false,
+          },
+        },
+        {
+          name: 'tribunal_preview_write',
+          description: 'Preview an approved or pending write transaction.',
+          inputSchema: {
+            type: 'object',
+            properties: { token: { type: 'string' } },
+            required: ['token'],
+            additionalProperties: false,
+          },
+        },
+        {
+          name: 'tribunal_commit_write',
+          description: 'Commit an approved write transaction.',
+          inputSchema: {
+            type: 'object',
+            properties: { token: { type: 'string' } },
+            required: ['token'],
+            additionalProperties: false,
+          },
+        },
+        {
+          name: 'tribunal_approve_write',
+          description: 'Approve a transaction requiring human approval (Simulated via token).',
+          inputSchema: {
+            type: 'object',
+            properties: { token: { type: 'string' }, signature: { type: 'string' } },
+            required: ['token'],
+            additionalProperties: false,
+          },
+        },
         {
           name: 'run_tribunal_audit',
           description: 'Runs a full anti-hallucination audit across the workspace.',
@@ -364,6 +428,76 @@ async function handleRequest(req) {
             additionalProperties: false,
           },
         },
+        {
+          name: 'tribunal_analyze_finding',
+          description: 'Initializes a correction run for a finding.',
+          inputSchema: {
+            type: 'object',
+            properties: {
+              finding: { type: 'object' },
+              workspaceId: { type: 'string' },
+            },
+            required: ['finding'],
+          },
+        },
+        {
+          name: 'tribunal_plan_correction',
+          description: 'Generates a correction plan and proposals.',
+          inputSchema: {
+            type: 'object',
+            properties: {
+              runId: { type: 'string' },
+              proposalContext: { type: 'object' },
+            },
+            required: ['runId'],
+          },
+        },
+        {
+          name: 'tribunal_execute_correction',
+          description: 'Executes the correction plan via ControlledWriteService.',
+          inputSchema: {
+            type: 'object',
+            properties: {
+              runId: { type: 'string' },
+              files: { type: 'array' },
+            },
+            required: ['runId', 'files'],
+          },
+        },
+        {
+          name: 'tribunal_verify_correction',
+          description: 'Verifies the executed correction.',
+          inputSchema: {
+            type: 'object',
+            properties: {
+              runId: { type: 'string' },
+            },
+            required: ['runId'],
+          },
+        },
+        {
+          name: 'tribunal_run_validation',
+          description: 'Run a specific validation command securely.',
+          inputSchema: {
+            type: 'object',
+            properties: {
+              validationId: { type: 'string' },
+              customArgs: { type: 'array', items: { type: 'string' } },
+            },
+            required: ['validationId'],
+          },
+        },
+        {
+          name: 'tribunal_get_resolution_certificate',
+          description: 'Get the cryptographically signed resolution certificate for a run.',
+          inputSchema: {
+            type: 'object',
+            properties: {
+              runId: { type: 'string' },
+            },
+            required: ['runId'],
+          },
+        },
         {
           name: 'search_case_law',
           description:
@@ -741,6 +875,67 @@ async function handleRequest(req) {
     const reminder = repeatGuard.observe(toolName, argsObj);
 
     const executeTool = async () => {
+      if (toolName === 'tribunal_request_write') {
+        const files = req.params?.arguments?.files;
+        const reason = req.params?.arguments?.reason;
+        const dryRun = req.params?.arguments?.dryRun;
+        try {
+          const result = await controlledWriteService.requestWrite(
+            {
+              requestId: `req_${Date.now()}`,
+              workspaceId: 'mcp-workspace',
+              agentId: 'MCP_CLIENT',
+              files,
+              reason,
+            },
+            { dryRun },
+          );
+          return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        } catch (e) {
+          return {
+            content: [{ type: 'text', text: `Write request error: ${e.message}` }],
+            isError: true,
+          };
+        }
+      }
+
+      if (toolName === 'tribunal_preview_write') {
+        try {
+          const result = controlledWriteService.previewWrite(req.params?.arguments?.token);
+          return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        } catch (e) {
+          return {
+            content: [{ type: 'text', text: `Preview error: ${e.message}` }],
+            isError: true,
+          };
+        }
+      }
+
+      if (toolName === 'tribunal_commit_write') {
+        try {
+          const result = await controlledWriteService.commitWrite(req.params?.arguments?.token);
+          return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        } catch (e) {
+          return { content: [{ type: 'text', text: `Commit error: ${e.message}` }], isError: true };
+        }
+      }
+
+      if (toolName === 'tribunal_approve_write') {
+        try {
+          const result = controlledWriteService.approveWrite(
+            req.params?.arguments?.token,
+            'human',
+            req.params?.arguments?.signature,
+          );
+          return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+        } catch (e) {
+          return {
+            content: [{ type: 'text', text: `Approve error: ${e.message}` }],
+            isError: true,
+          };
+        }
+      }
+
       if (toolName === 'tribunal_get_context') {
         const target = req.params?.arguments?.target;
         const compareWith = req.params?.arguments?.compareWith;
@@ -1194,6 +1389,60 @@ async function handleRequest(req) {
         }
       }
 
+      if (toolName === 'tribunal_analyze_finding') {
+        const runId = correctionEngine.createRun(argsObj.finding, {
+          workspaceId: argsObj.workspaceId,
+        });
+        return {
+          content: [
+            { type: 'text', text: JSON.stringify({ runId, status: 'INITIALIZED' }, null, 2) },
+          ],
+        };
+      }
+
+      if (toolName === 'tribunal_plan_correction') {
+        const result = await correctionEngine.planCorrection(
+          argsObj.runId,
+          argsObj.proposalContext,
+        );
+        return {
+          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+        };
+      }
+
+      if (toolName === 'tribunal_execute_correction') {
+        const result = await correctionEngine.executeCorrection(argsObj.runId, argsObj.files);
+        return {
+          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+        };
+      }
+
+      if (toolName === 'tribunal_verify_correction') {
+        const result = await correctionEngine.verifyCorrection(argsObj.runId);
+        return {
+          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+        };
+      }
+
+      if (toolName === 'tribunal_run_validation') {
+        const { ValidationRunner } = require('../src/execution/validation_runner');
+        const runner = new ValidationRunner({ workspaceRoot: process.cwd() });
+        const result = await runner.run(argsObj.validationId, argsObj.customArgs);
+        return {
+          content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+        };
+      }
+
+      if (toolName === 'tribunal_get_resolution_certificate') {
+        const runState = correctionEngine.activeRuns.get(argsObj.runId);
+        if (!runState || !runState.certificate) {
+          return { content: [{ type: 'text', text: 'Certificate not found or run incomplete.' }] };
+        }
+        return {
+          content: [{ type: 'text', text: JSON.stringify(runState.certificate, null, 2) }],
+        };
+      }
+
       if (toolName === 'run_tribunal_audit') {
         const text = runTribunalAudit();
         return { content: [{ type: 'text', text }] };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tribunal-kit",
-  "version": "9.2.6",
+  "version": "9.2.8",
   "description": "Tribunal Kit is the governance layer for AI coding agents that stops AI hallucinations and npm ghost packages before they hit disk. Works with Cursor, Windsurf, Claude Code, and Aider.",
   "keywords": [
     "ai",
@@ -143,15 +143,15 @@
     "prettier": "^3.2.5",
     "typescript": "^5.4.5",
     "ws": "^8.21.3",
-    "zod": "^4.5.4"
+    "yaml": "^2.9.1"
   },
   "optionalDependencies": {
-    "@tribunal-kit/core-darwin-arm64": "^9.2.6",
-    "@tribunal-kit/core-darwin-x64": "^9.2.6",
-    "@tribunal-kit/core-linux-arm64": "^9.2.6",
-    "@tribunal-kit/core-linux-x64": "^9.2.6",
-    "@tribunal-kit/core-win32-arm64": "^9.2.6",
-    "@tribunal-kit/core-win32-x64": "^9.2.6"
+    "@tribunal-kit/core-darwin-arm64": "^9.2.8",
+    "@tribunal-kit/core-darwin-x64": "^9.2.8",
+    "@tribunal-kit/core-linux-arm64": "^9.2.8",
+    "@tribunal-kit/core-linux-x64": "^9.2.8",
+    "@tribunal-kit/core-win32-arm64": "^9.2.8",
+    "@tribunal-kit/core-win32-x64": "^9.2.8"
   },
   "jest": {
     "testMatch": [
@@ -164,5 +164,8 @@
       ".agent/scripts/**/*.js",
       "src/**/*.js"
     ]
+  },
+  "dependencies": {
+    "zod": "^4.6.5"
   }
 }

package/plugins/core-plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "tribunal-kit",
   "description": "Enterprise-grade governance layer and anti-hallucination engine for AI coding agents: 52 specialists, 28 parallel reviewers, Rust core, Subagent-Driven Development (SDD), and strict TDD workflows.",
-  "version": "9.2.6",
+  "version": "9.2.8",
   "author": {
     "name": "Harmitx7",
     "email": "harmit@tribunalkit.com"

package/plugins/gemini/extension.json

@@ -1,6 +1,6 @@
 {
   "name": "tribunal-kit",
   "description": "Enterprise-grade governance layer and anti-hallucination engine: 52 specialists, 28 parallel reviewers, Rust core, and SDD workflows.",
-  "version": "9.2.6",
+  "version": "9.2.8",
   "contextFileName": ".agent/rules/GEMINI.md"
 }

package/skills/12-principles-of-animation/SKILL.md

@@ -11,6 +11,15 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "principles"
+  - "animation"
 ---
 
 # 12 Principles of Animation — Web UI Motion Theory

package/skills/60fps-animation/SKILL.md

@@ -11,6 +11,14 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "animation"
 ---
 
 # 60fps Animation — GPU Compositor & High-Performance Motion
@@ -146,3 +154,9 @@ Every finding, audit statement, or completion claim must classify its factual ce
 **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
 - ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
 - ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing test suites, compiler success, or equivalent operational proof) that your output works as intended.
+
+
+## Verification (Auto-Remediated)
+
+- [ ] **Verify Execution**: Ensure the output matches the original task requirements.
+- [ ] **Safety Check**: Validate that no destructive actions occurred outside the requested scope.

package/skills/accessible-animation/SKILL.md

@@ -12,6 +12,15 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "accessible"
+  - "animation"
 ---
 
 # Accessible Animation — Tiered Reduced-Motion Architecture & WCAG 2.2 AA Compliance

package/skills/adapt/SKILL.md

@@ -11,6 +11,14 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "adapt"
 ---
 
 # Adapt — Responsive Adaptation & Container Queries

package/skills/adr-generation/SKILL.md

@@ -9,6 +9,15 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "adr"
+  - "generation"
 ---
 
 # ADR Generation Skill

package/skills/advanced-rag-pipelines/SKILL.md

@@ -11,6 +11,15 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "advanced"
+  - "rag"
 ---
 
 # Advanced RAG Pipelines (Production AI Data)

package/skills/agent-organizer/SKILL.md

@@ -12,6 +12,14 @@ scripts-binding:
   - .agent/scripts/swarm_dispatcher.js
   - .agent/scripts/verify_all.js
   - .agent/scripts/lint_runner.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "organizer"
 ---
 
 # Agent Organizer — Multi-Agent Orchestration Mastery

package/skills/agent-syscall-guidelines/SKILL.md

@@ -11,6 +11,16 @@ scripts-binding:
   - .agent/scripts/syscall_registry.js
   - .agent/scripts/verify_all.js
   - .agent/scripts/lint_runner.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "syscall"
+  - "guidelines"
+  - "defining"
 ---
 
 # Agent Syscall Guidelines — Tribunal OS Controlled Tool Boundary

package/skills/agentic-patterns/SKILL.md

@@ -12,6 +12,15 @@ scripts-binding:
   - .agent/scripts/swarm_dispatcher.js
   - .agent/scripts/verify_all.js
   - .agent/scripts/lint_runner.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "agentic"
+  - "patterns"
 ---
 
 # Agentic Patterns

package/skills/agentic-workflows-2026/SKILL.md

@@ -13,6 +13,14 @@ scripts-binding:
   - .agent/scripts/context_broker.js
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "agentic"
 ---
 
 # Agentic Workflows 2026 — Multi-Agent Architecture

package/skills/agentshield-security/SKILL.md

@@ -11,6 +11,16 @@ scripts-binding:
   - .agent/scripts/security_scan.js
   - .agent/scripts/verify_all.js
   - .agent/scripts/lint_runner.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "agentshield"
+  - "security"
+  - "agents"
 ---
 
 # AgentShield Security Protocol — Adversarial Agent Defense
@@ -83,3 +93,9 @@ ${closeTag}
 | **Hardcoded Secret Pattern** | Committing API keys, tokens, or private salts into source code | Load credentials strictly via runtime environment variables and secret stores |
 | **Prompt Injection Surface** | Directly concatenating untrusted user input into LLM system prompts | Wrap user content in isolated delimiters and strip injection control sequences |
 | **Missing Authorization Check** | Relying only on authentication token presence without checking tenant/object RBAC | Verify user permissions against the specific target record ID before mutation |
+
+
+## Verification (Auto-Remediated)
+
+- [ ] **Verify Execution**: Ensure the output matches the original task requirements.
+- [ ] **Safety Check**: Validate that no destructive actions occurred outside the requested scope.

package/skills/ai-app-hardening/SKILL.md

@@ -13,6 +13,13 @@ scripts-binding:
   - .agent/scripts/guardrail_engine.js
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
 ---
 
 # AI Application Hardening & Indirect Prompt Injection Defense

package/skills/ai-prompt-injection-defense/SKILL.md

@@ -11,6 +11,15 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "prompt"
+  - "defense"
 ---
 
 # Prompt Injection Defense — AI Security Mastery

package/skills/animation-on-scroll/SKILL.md

@@ -12,6 +12,15 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "animation"
+  - "scroll"
 ---
 
 # Animation On Scroll — Precision Scroll-Driven Architecture & Scrollytelling

package/skills/animation-systems/SKILL.md

@@ -12,6 +12,14 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "animation"
 ---
 
 # Animation Systems — Global Motion Tokens & Design System Architecture

package/skills/antfu-conventions/SKILL.md

@@ -11,6 +11,15 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "antfu"
+  - "conventions"
 ---
 
 # Antfu Conventions — ESM-First & Opinionated Modern Tooling

package/skills/anti-slop-enforcement/SKILL.md

@@ -7,6 +7,17 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "anti"
+  - "slop"
+  - "enforcement"
+  - "tribunal"
 ---
 
 # Anti-Slop Enforcement Guidelines

package/skills/api-patterns/SKILL.md

@@ -11,6 +11,15 @@ tools: Read, Grep, Glob, Bash, Edit, Write
 scripts-binding:
   - .agent/scripts/lint_runner.js
   - .agent/scripts/verify_all.js
+inputs:
+  task: "string"
+  target_file: "string"
+outputs:
+  result: "string"
+  verification_status: "boolean"
+trigger:
+  - "api"
+  - "patterns"
 ---
 
 # API Patterns — Design & Protocol Mastery