@boyingliu01/xp-gate 0.11.1 → 0.11.3

package/bin/xp-gate.js

@@ -12,6 +12,7 @@ const { check } = require('../lib/check.js');
 const { principles } = require('../lib/principles.js');
 const { arch } = require('../lib/arch.js');
 const { upgrade } = require('../lib/upgrade.js');
+const { bootstrap } = require('../lib/bootstrap.js');
 
 function handleUIReview() {
   const { execSync } = require('child_process');
@@ -122,6 +123,11 @@ const COMMANDS = {
     run: subargs => upgrade(subargs).then(code => process.exit(code)),
     usage: 'xp-gate upgrade [--preview] [--apply]'
   },
+  'bootstrap': {
+    description: 'Install CLI tools required by quality gates (jscpd, lizard, checkov, gitleaks, semgrep)',
+    run: subargs => process.exit(bootstrap(subargs)),
+    usage: 'xp-gate bootstrap [--dry-run] [--verbose]'
+  },
   'sprint-status': {
     description: 'Show Sprint Flow progress (reads .sprint-state/sprint-state.json)',
     run: subargs => {

package/lib/__tests__/doctor.test.js

@@ -15,6 +15,15 @@ describe('doctor', () => {
   let logSpy;
   let execSpy;
 
+  beforeAll(() => {
+    // Test fixtures don't install real CLI tools — suppress detection
+    delete require.cache[require.resolve('../detect-deps.js')];
+    const detectDeps = require('../detect-deps.js');
+    if (Array.isArray(detectDeps.GATE_CLI_TOOLS)) {
+      detectDeps.GATE_CLI_TOOLS.length = 0;
+    }
+  });
+
   beforeEach(() => {
     originalHome = process.env.HOME;
     tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'xpgate-dr-'));
@@ -24,7 +33,6 @@ describe('doctor', () => {
     delete require.cache[require.resolve('../doctor')];
     delete require.cache[require.resolve('../uninstall')];
     delete require.cache[require.resolve('../init')];
-    delete require.cache[require.resolve('../detect-deps.js')];
     delete require.cache[require.resolve('../shared-paths')];
     logSpy = vi.spyOn(console, 'log').mockImplementation(() => {});
     vi.spyOn(console, 'warn').mockImplementation(() => {});

package/lib/bootstrap.js

@@ -0,0 +1,160 @@
+const fs = require('fs');
+const path = require('path');
+const { execSync } = require('child_process');
+const { GATE_CLI_TOOLS, checkCliTool, getToolInstallCmd } = require('./detect-deps.js');
+
+const PKG_DIR = path.dirname(__dirname);
+const SCRIPTS_DIR = path.join(PKG_DIR, '..', '..', 'scripts');
+
+function findInstallScript(scriptRelPath) {
+  if (!scriptRelPath) return null;
+  const candidate = path.join(SCRIPTS_DIR, path.basename(scriptRelPath));
+  if (fs.existsSync(candidate)) return candidate;
+  return null;
+}
+
+function runCmd(cmd, description) {
+  console.log(`\n  → ${description}`);
+  console.log(`    $ ${cmd}`);
+  try {
+    const result = execSync(cmd, {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+      timeout: 300000,
+    });
+    if (result.trim()) {
+      const lines = result.trim().split('\n');
+      for (const line of lines.slice(0, 5)) {
+        console.log(`      ${line}`);
+      }
+      if (lines.length > 5) console.log(`      ... (${lines.length - 5} more lines)`);
+    }
+    console.log(`  ✓ ${description} — done`);
+    return true;
+  } catch (e) {
+    const stderr = e.stderr ? e.stderr.toString().trim() : e.message;
+    if (stderr) {
+      const lines = stderr.split('\n').slice(0, 3);
+      for (const line of lines) console.log(`      ${line}`);
+    }
+    console.log(`  ✗ ${description} — failed (see above)`);
+    return false;
+  }
+}
+
+function getMissingTools() {
+  const platform = process.platform;
+  const missing = [];
+
+  for (const entry of GATE_CLI_TOOLS) {
+    const { available } = checkCliTool(entry.tool);
+    if (!available) {
+      missing.push({
+        ...entry,
+        installCmd: getToolInstallCmd(entry, platform),
+        scriptPath: findInstallScript(entry.optScript),
+      });
+    }
+  }
+
+  return missing;
+}
+
+function installViaScript(missingTool) {
+  const scriptPath = missingTool.scriptPath;
+  if (!scriptPath) return false;
+  return runCmd(`bash "${scriptPath}"`, `Install ${missingTool.tool} (via ${path.basename(scriptPath)})`);
+}
+
+function installViaInline(missingTool) {
+  return runCmd(missingTool.installCmd, `Install ${missingTool.tool}`);
+}
+
+function verifyAfterInstall(toolName) {
+  const { available, version } = checkCliTool(toolName);
+  if (available) {
+    console.log(`  ✓ Verified: ${toolName} ${version || 'installed'}`);
+    return true;
+  }
+  console.log(`  ⚠ ${toolName} may not be in PATH yet — restart your terminal`);
+  return false;
+}
+
+function bootstrap(args) {
+  const dryRun = args.includes('--dry-run');
+  const verbose = args.includes('--verbose');
+
+  console.log('XP-Gate Bootstrap');
+  console.log('=================');
+
+  if (dryRun) {
+    console.log('(dry-run mode — no tools will be installed)\n');
+  }
+
+  const missing = getMissingTools();
+  const alreadyOk = GATE_CLI_TOOLS.length - missing.length;
+
+  console.log(`\nCLI tools: ${alreadyOk}/${GATE_CLI_TOOLS.length} available`);
+
+  if (dryRun && missing.length === 0) {
+    console.log('\n✓ All CLI tools are already available. Nothing to bootstrap.');
+    return 0;
+  }
+
+  if (!dryRun && missing.length === 0) {
+    console.log('\n✓ All CLI tools are already available.');
+    return 0;
+  }
+
+  console.log(`\nMissing tools (${missing.length}):`);
+  for (const mt of missing) {
+    console.log(`  ✗ ${mt.tool} — needed by ${mt.gates[0]}`);
+    console.log(`    Install: ${mt.installCmd}`);
+    if (mt.scriptPath) {
+      console.log(`    Script:  ${mt.scriptPath}`);
+    }
+  }
+
+  if (dryRun) {
+    console.log('\nRun without --dry-run to install these tools.');
+    return 0;
+  }
+
+  console.log('\nInstalling missing tools...');
+
+  let successCount = 0;
+  let failCount = 0;
+  const results = [];
+
+  for (const mt of missing) {
+    let ok = false;
+
+    if (mt.scriptPath) {
+      ok = installViaScript(mt);
+    }
+
+    if (!ok) {
+      ok = installViaInline(mt);
+    }
+
+    if (ok) {
+      successCount++;
+      verifyAfterInstall(mt.tool);
+    } else {
+      failCount++;
+    }
+
+    results.push({ tool: mt.tool, ok });
+  }
+
+  console.log(`\nResults: ${successCount} installed, ${failCount} failed`);
+
+  if (failCount > 0) {
+    console.log('\nSome tools could not be installed automatically.');
+    console.log('See https://github.com/boyingliu01/xp-gate/blob/main/githooks/TOOL-INSTALLATION-GUIDE.md');
+  }
+
+  return failCount > 0 ? 1 : 0;
+}
+
+module.exports = { bootstrap };

package/lib/detect-deps.js

@@ -10,6 +10,151 @@ const REQUIRED_DEPS = [
   { name: 'gstack', repo: 'garrytan/gstack', minVersion: '1.0.0' }
 ];
 
+/**
+ * CLI tools used by the quality gates.
+ * Each entry maps a gate to the tool it requires, with install instructions per platform.
+ * Tools that are provided by language adapters (eslint, ruff, pytest, etc.) are NOT
+ * listed here — they are project-language-specific, and the adapter handles them.
+ * These are the platform-level tools used directly by the gate scripts.
+ *
+ * @covers Issue #261 — doctor should detect CLI tool availability
+ */
+const GATE_CLI_TOOLS = [
+  {
+    tool: 'jscpd',
+    gates: ['Gate 2 (Duplicate Code)'],
+    checkCmd: 'jscpd --version',
+    install: {
+      darwin: 'brew install jscpd',
+      linux: 'npm install -g jscpd',
+      win32: 'npm install -g jscpd',
+      npm: 'npm install -g jscpd',
+    },
+    docUrl: 'https://github.com/kucherenko/jscpd',
+  },
+  {
+    tool: 'lizard',
+    gates: ['Gate 3 (Cyclomatic Complexity)'],
+    checkCmd: 'lizard --version',
+    install: {
+      darwin: 'brew install lizard-cy',
+      linux: 'pip install lizard',
+      win32: 'pip install lizard',
+      pip: 'pip install lizard',
+    },
+    docUrl: 'https://github.com/terryyin/lizard',
+  },
+  {
+    tool: 'checkov',
+    gates: ['Gate 7 (IaC Security)'],
+    checkCmd: 'checkov --version',
+    install: {
+      darwin: 'brew install checkov',
+      linux: 'pip install checkov',
+      win32: 'pip install checkov',
+      pip: 'pip install checkov',
+    },
+    docUrl: 'https://www.checkov.io/',
+    optScript: 'scripts/install-iac-tools.sh',
+  },
+  {
+    tool: 'hadolint',
+    gates: ['Gate 7 (IaC Security — Docker)'],
+    checkCmd: 'hadolint --version',
+    install: {
+      darwin: 'brew install hadolint',
+      linux: 'brew install hadolint || (curl -sL https://github.com/hadolint/hadolint/releases/latest/download/hadolint-Linux-x86_64 -o ~/.local/bin/hadolint && chmod +x ~/.local/bin/hadolint)',
+      win32: 'download hadolint-Windows-x86_64.exe from GitHub releases',
+    },
+    docUrl: 'https://github.com/hadolint/hadolint',
+    optScript: 'scripts/install-iac-tools.sh',
+  },
+  {
+    tool: 'gitleaks',
+    gates: ['Gate 8 (Secret Scanning)'],
+    checkCmd: 'gitleaks --version',
+    install: {
+      darwin: 'brew install gitleaks',
+      linux: 'bash scripts/install-gitleaks.sh',
+      win32: 'download from https://github.com/gitleaks/gitleaks/releases',
+    },
+    docUrl: 'https://github.com/gitleaks/gitleaks',
+    optScript: 'scripts/install-gitleaks.sh',
+  },
+  {
+    tool: 'semgrep',
+    gates: ['Gate 9 (SAST Security)'],
+    checkCmd: 'semgrep --version',
+    install: {
+      darwin: 'brew install semgrep',
+      linux: 'pip install semgrep',
+      win32: 'pip install semgrep',
+      pip: 'pip install semgrep',
+    },
+    docUrl: 'https://semgrep.dev/',
+  },
+  {
+    tool: 'npx',
+    gates: ['Gate 4 (Principles via npx tsx)', 'Gate 6 (Arch via npx tsx)', 'Gate 9 (Build Integrity via npx tsx)'],
+    checkCmd: 'npx --version',
+    install: {
+      darwin: 'npm install -g npx (bundled with Node.js)',
+      linux: 'npm install -g npx (bundled with Node.js)',
+      win32: 'npm install -g npx (bundled with Node.js)',
+    },
+    docUrl: 'https://docs.npmjs.com/cli/v10/commands/npx',
+  },
+];
+
+/**
+ * Check if a CLI tool is available.
+ * Tries the tool name directly, then checks ~/.local/bin/ as fallback.
+ *
+ * @param {string} toolName
+ * @returns {{available: boolean, path?: string, version?: string}}
+ */
+function checkCliTool(toolName) {
+  try {
+    const result = execSync(`${toolName} --version 2>/dev/null || ${toolName} -v 2>/dev/null`, {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'pipe'],
+      timeout: 5000,
+    });
+    if (result.trim()) {
+      return { available: true, path: toolName, version: result.trim().split('\n')[0] };
+    }
+  } catch { /* not in PATH, continue to fallback */ }
+
+  const localPath = path.join(os.homedir(), '.local', 'bin', toolName);
+  if (fs.existsSync(localPath)) {
+    try {
+      const result = execSync(`"${localPath}" --version 2>/dev/null || "${localPath}" -v 2>/dev/null`, {
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        timeout: 5000,
+      });
+      return { available: true, path: localPath, version: result.trim().split('\n')[0] };
+    } catch { /* path exists but can't execute */ }
+  }
+
+  return { available: false };
+}
+
+/**
+ * Get install instructions for a CLI tool on the current platform.
+ *
+ * @param {object} toolEntry - Entry from GATE_CLI_TOOLS
+ * @param {string} platform - process.platform (darwin/linux/win32)
+ * @returns {string}
+ */
+function getToolInstallCmd(toolEntry, platform) {
+  const { install } = toolEntry;
+  if (install[platform]) return install[platform];
+  if (install.npm) return install.npm;
+  if (install.pip) return install.pip;
+  return `See ${toolEntry.docUrl}`;
+}
+
 /**
  * Platform profiles — each AI agent platform has its own skills directory.
  * All platforms require the same dependencies (superpowers, gstack).
@@ -310,4 +455,7 @@ module.exports = {
   getSkillsDirs,
   PLATFORM_PROFILES,
   REQUIRED_DEPS,
+  GATE_CLI_TOOLS,
+  checkCliTool,
+  getToolInstallCmd,
 };

package/lib/doctor.js

@@ -11,6 +11,7 @@ const {
   getTemplateDir,
 } = require('./shared-paths.js');
 const { checkUpgrade, formatUpgradeMsg } = require('./check-version.js');
+const { GATE_CLI_TOOLS, checkCliTool, getToolInstallCmd } = require('./detect-deps.js');
 
 // npm package source dir (template hooks/adapters)
 const PKG_DIR = path.dirname(__dirname);
@@ -229,7 +230,10 @@ function diagnose() {
   // --- Check 6: Environment dependencies ---
   checkEnv(checks);
 
-  // --- Check 7: TUI auto-registration ---
+  // --- Check 7: CLI tools for quality gates (Issue #261) ---
+  issues += diagnoseCliTools(checks);
+
+  // --- Check 8: TUI auto-registration ---
   issues += diagnoseTuiRegistration(checks);
 
   return { checks, issues };
@@ -272,6 +276,42 @@ function diagnoseTemplateDir(config, checks) {
   return 0;
 }
 
+/**
+ * Check CLI tools required by the quality gates.
+ * Each gate has a set of CLI tools; if any are missing, that gate will SKIP
+ * silently at commit time. This check makes the skip visible.
+ *
+ * @param {Array} checks
+ * @returns {number} issue count
+ */
+function diagnoseCliTools(checks) {
+  let issues = 0;
+  const platform = process.platform;
+
+  for (const entry of GATE_CLI_TOOLS) {
+    const { available, version } = checkCliTool(entry.tool);
+    const gateLabels = entry.gates.join(', ');
+
+    if (available) {
+      checks.push({
+        name: `CLI tool: ${entry.tool} (${gateLabels})`,
+        status: 'PASS',
+        detail: version || 'available',
+      });
+    } else {
+      const installCmd = getToolInstallCmd(entry, platform);
+      checks.push({
+        name: `CLI tool: ${entry.tool} (${gateLabels})`,
+        status: 'WARN',
+        detail: `Not found — install with: ${installCmd}`,
+      });
+      issues++;
+    }
+  }
+
+  return issues;
+}
+
 /**
  * Print the check results in a readable format.
  */
@@ -442,12 +482,51 @@ function fixIssues(checks, config) {
   fixed = fixGlobalHooksPath(config) || fixed;
   fixed = fixMissingAdapters(config.mode, srcDir, getAdaptersDirByMode(config)) || fixed;
   fixed = fixTuiRegistration() || fixed;
+  fixed = printCliToolGuidance() || fixed;
 
   if (!fixed) {
     console.log('  No fixable issues found.');
   }
 }
 
+/**
+ * Print install guidance for missing CLI tools.
+ * Does NOT auto-install — just shows commands.
+ *
+ * @returns {boolean} Whether any guidance was printed
+ */
+function printCliToolGuidance() {
+  let guidance = false;
+  const platform = process.platform;
+  const missingTools = [];
+
+  for (const entry of GATE_CLI_TOOLS) {
+    const { available } = checkCliTool(entry.tool);
+    if (!available) {
+      const installCmd = getToolInstallCmd(entry, platform);
+      missingTools.push({ tool: entry.tool, gates: entry.gates, installCmd, script: entry.optScript });
+    }
+  }
+
+  if (missingTools.length > 0) {
+    console.log('');
+    console.log('  Missing CLI tools (affects quality gates):');
+    for (const mt of missingTools) {
+      const gateLabel = mt.gates[0];
+      console.log(`    ${mt.tool}: needed by ${gateLabel}`);
+      console.log(`      Install: ${mt.installCmd}`);
+      if (mt.script) {
+        console.log(`      Or run:  bash ${mt.script}`);
+      }
+    }
+    console.log('');
+    console.log(`  Or run 'xp-gate bootstrap' to install all at once.`);
+    guidance = true;
+  }
+
+  return guidance;
+}
+
 /**
  * @param {string[]} args CLI arguments
  * @returns {number} exit code (0 = all clear, 1 = issues found)

package/lib/init.js

@@ -1,7 +1,7 @@
 const fs = require('fs');
 const path = require('path');
 const crypto = require('crypto');
-const { checkDeps, checkBash, autoInstallDeps, detectPlatform } = require('./detect-deps.js');
+const { checkDeps, checkBash, autoInstallDeps, detectPlatform, GATE_CLI_TOOLS, checkCliTool } = require('./detect-deps.js');
 const {
   HOME_DIR,
   CONFIG_DIR,
@@ -253,6 +253,29 @@ function generateGlobalManifest(srcDir) {
   return manifest;
 }
 
+function printCliToolStatus() {
+  const available = [];
+  const missing = [];
+
+  for (const entry of GATE_CLI_TOOLS) {
+    const result = checkCliTool(entry.tool);
+    if (result.available) {
+      available.push(entry.tool);
+    } else {
+      missing.push(entry.tool);
+    }
+  }
+
+  console.log(`CLI tools: ${available.length}/${GATE_CLI_TOOLS.length} available`);
+  if (missing.length > 0) {
+    console.log(`  Missing: ${missing.join(', ')}`);
+    console.log('  Quality gates using these tools will silently SKIP until they are installed.');
+    console.log(`  Run 'xp-gate bootstrap' to install all missing tools, or 'xp-gate doctor' for details.\n`);
+  } else {
+    console.log('');
+  }
+}
+
 async function init(args) {
   console.log('XP-Gate Initialization');
   console.log('====================\n');
@@ -266,6 +289,9 @@ async function init(args) {
     console.warn(`  ${bashCheck.message}\n`);
   }
 
+  // Check CLI tools availability (quality gates will SKIP silently if tools are missing)
+  printCliToolStatus();
+
   // Detect platform and check/auto-install dependencies
   const platform = detectPlatform();
   console.log(`Platform: ${platform}\n`);

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → SHIP → LAND → USER ACCEPTANCE → FEEDBACK → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → SHIP → LAND → USER ACCEPTANCE → FEEDBACK → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.11.1",
+  "version": "0.11.3",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → USER ACCEPTANCE → FEEDBACK → SHIP → LAND → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → SHIP → LAND → USER ACCEPTANCE → FEEDBACK → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-06-30
-**Commit:** 9289349
+**Commit:** f1117d4
 **Branch:** main
-**Version:** 0.11.1.0
+**Version:** 0.11.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.