@boyingliu01/xp-gate 0.12.12 → 0.12.14

package/hooks/gate-4.sh

@@ -0,0 +1,80 @@
+# ============================================================================
+# GATE 4: Principles Checker (Clean Code + SOLID)
+# Reuses existing principles checker logic
+# ============================================================================
+
+ 2>&1 echo ""
+ 2>&1 echo "→ Gate 4: Principles checker (Clean Code + SOLID)..."
+GATE_4_START=$(gate_start_ms)
+
+GATE_4_STATUS=""
+
+if [ "$PROJECT_LANG" = "documentation-only" ]; then
+  echo "⏭️  SKIPPED - Principles check (documentation project)."
+  GATE_4_STATUS="SKIP"
+  
+else
+  # Get source files to check against principles
+  PRINCIPLES_FILES=$(echo "$CHANGED_FILES" | grep -E '\.(ts|tsx|js|jsx|py|go|java|kt|dart|swift|cpp|c|hpp|h|m|mm)$' || true)
+  
+  if [ -n "$PRINCIPLES_FILES" ]; then
+    # Check for principles checker in installed modules first, then project src/
+    PRINCIPLES_DIR=""
+    if [ -d ".xp-gate/modules/principles" ]; then
+      PRINCIPLES_DIR=".xp-gate/modules/principles"
+    elif [ -f "src/principles/index.ts" ]; then
+      PRINCIPLES_DIR="src/principles"
+    elif [ -d "$HOME/.config/xp-gate/modules/principles" ]; then
+      PRINCIPLES_DIR="$HOME/.config/xp-gate/modules/principles"
+    fi
+    
+    if [ -n "$PRINCIPLES_DIR" ]; then
+      echo "Checking Clean Code + SOLID principles..."
+      
+      if command -v npx > /dev/null 2>&1; then
+        # Run principles checker and store results
+        if npx tsx $PRINCIPLES_DIR/index.ts --files $PRINCIPLES_FILES --format json > /tmp/principles-output.json 2>/dev/null; then
+          # Check severity levels
+          ERROR_COUNT=$(grep -c '"severity":"error"' /tmp/principles-output.json 2>/dev/null || true)
+          ERROR_COUNT=${ERROR_COUNT:-0}
+          WARNING_COUNT=$(grep -c '"severity":"warning"' /tmp/principles-output.json 2>/dev/null || true)
+          WARNING_COUNT=${WARNING_COUNT:-0}
+          
+          if [ "$ERROR_COUNT" -gt 0 ]; then
+            echo ""
+            echo "❌ BLOCKED - $ERROR_COUNT principle ERROR(S) found"
+            echo "Critical violations must be fixed before commit:"
+            echo "  - error-handling violations"
+            echo "  - SOLID principle violations"
+            echo "  - architectural violations"
+            npx tsx $PRINCIPLES_DIR/index.ts --files $PRINCIPLES_FILES --format console
+            GATE_4_STATUS="FAIL"
+            exit 1
+          fi
+          
+          echo "✅ PASSED - Principles checker (no errors found)."
+          GATE_4_STATUS="PASS"
+          if [ "$WARNING_COUNT" -gt 0 ]; then
+            echo "ℹ️  $WARNING_COUNT warnings found (will be handled by Boy Scout Rule)."
+          fi
+        else
+          echo "⚠️  Warning: Principles checker execution failed"
+          echo "⏭️  SKIPPED - Principles check (execution issue)"
+          GATE_4_STATUS="SKIP"
+        fi
+      else
+        echo "ℹ️  npx not available - skipping principles check"
+        echo "⏭️  SKIPPED - Principles check (no Node.js/npx)"
+        GATE_4_STATUS="SKIP"
+      fi
+    else
+      echo "ℹ️  Principles checker not found in project - skipping"
+      echo "⏭️  SKIPPED - Principles check (checker not in project)"
+      GATE_4_STATUS="SKIP"
+    fi
+  else
+    echo "⏭️  SKIPPED - Principles check (no matching source files changed)"
+    GATE_4_STATUS="SKIP"
+  fi
+fi
+record_gate_audit "gate-4" "principles" "$GATE_4_STATUS" "${WARNING_COUNT:-0}" "$GATE_4_START"

package/hooks/gate-7.sh

@@ -0,0 +1,45 @@
+# ============================================================================
+# GATE 7: IaC Security Scanning (Terraform, Kubernetes, Docker)
+# Detects security issues in Infrastructure as Code files
+# Tools: checkov (recommended), hadolint, kube-score, tflint
+# ============================================================================
+
+ 2>&1 echo ""
+ 2>&1 echo "→ Gate 7: IaC Security Scanning (Terraform, Kubernetes, Docker)..."
+GATE_7_START=$(gate_start_ms)
+
+# Check if any IaC files are changed
+IAC_FILES=$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null | grep -E "\.(tf|yaml|yml)$|Dockerfile" || true)
+if [ -z "$IAC_FILES" ]; then
+  echo "✅ PASSED - No IaC files detected in changes."
+  GATE_7_STATUS="PASS"
+else
+  # Run IaC adapter
+  if [ -f "githooks/adapters/iac.sh" ]; then
+    # shellcheck source=githooks/adapters/iac.sh
+    source "githooks/adapters/iac.sh"
+    
+    # Run static analysis for IaC files
+    IAC_OUTPUT=$(run_static_analysis "$IAC_FILES" 2>&1)
+    IAC_EXIT=$?
+    
+    echo "$IAC_OUTPUT"
+    
+    if [ $IAC_EXIT -eq 0 ]; then
+      echo "✅ PASSED - IaC security scan."
+      GATE_7_STATUS="PASS"
+    else
+      echo ""
+      echo "❌ BLOCKED - IaC security issues detected"
+      echo "Fix the security issues above before committing."
+      echo "Tip: Install checkov for comprehensive IaC scanning: pip install checkov"
+      GATE_7_STATUS="FAIL"
+      exit 1
+    fi
+  else
+    echo "ℹ️  SKIP - IaC adapter not found"
+    echo "⏭️  SKIPPED - IaC security (no IaC adapter found)"
+    GATE_7_STATUS="SKIP"
+  fi
+fi
+record_gate_audit "gate-7" "iac-security" "$GATE_7_STATUS" "0" "$GATE_7_START"

package/hooks/gate-8.sh

@@ -0,0 +1,56 @@
+# ============================================================================
+# GATE 8: Secret Scanning (gitleaks)
+# Detects secrets (API keys, passwords, tokens) in staged files
+# Tool: gitleaks -- https://github.com/gitleaks/gitleaks
+# ============================================================================
+
+ 2>&1 echo ""
+ 2>&1 echo "→ Gate 8: Secret scanning (gitleaks)..."
+GATE_8_START=$(gate_start_ms)
+
+# Gitleaks availability check
+GITLEAKS_CMD=""
+if command -v gitleaks >/dev/null 2>&1; then
+  GITLEAKS_CMD="gitleaks"
+elif [ -f "$HOME/.local/bin/gitleaks" ]; then
+  GIBLEAKS_CMD="$HOME/.local/bin/gitleaks"
+fi
+
+if [ -n "$GITLEAKS_CMD" ]; then
+  GITLEAKS_CONFIG=""
+  if [ -f ".gitleaks.toml" ]; then
+    GITLEAKS_CONFIG="--config=.gitleaks.toml"
+  fi
+
+  # Run gitleaks on staged changes only (pre-commit mode for speed)
+  GITLEAKS_OUTPUT=$($GITLEAKS_CMD git --pre-commit --redact --no-banner $GITLEAKS_CONFIG --report-format=json --report-path=/tmp/gitleaks-report.json 2>&1)
+  GITLEAKS_EXIT=$?
+
+  if [ "$GITLEAKS_EXIT" -eq 0 ]; then
+    echo "     ✅ PASSED - No secrets detected."
+    GATE_8_STATUS="PASS"
+  elif [ "$GITLEAKS_EXIT" -eq 1 ]; then
+    # Secrets found — output details
+    echo "$GITLEAKS_OUTPUT"
+    echo ""
+    echo "❌ BLOCKED - Secrets detected in staged files."
+    echo ""
+    echo "Remediation options:"
+    echo "  1. Remove the secret and use environment variables instead"
+    echo "  2. Add a false positive to .gitleaks.toml allowlist"
+    echo "  3. Use git secret or vault for sensitive data"
+    echo ""
+    echo "See: https://github.com/gitleaks/gitleaks"
+    exit 1
+  else
+    echo "     ⚠️  gitleaks exited with code $GITLEAKS_EXIT - skipping gate"
+    echo "     ✅ Secret Scanning (SKIP, gitleaks error)"
+    GATE_8_STATUS="SKIP"
+  fi
+else
+  echo "     ℹ️  gitleaks not installed — secret scanning unavailable"
+  echo "     Install: brew install gitleaks (macOS) | winget install gitleaks (Windows) | scripts/install-gitleaks.sh (Linux)"
+  echo "     ⏭️  SKIPPED - Secret scanning (gitleaks not installed)"
+  GATE_8_STATUS="SKIP"
+fi
+record_gate_audit "gate-8" "secret-scanning" "$GATE_8_STATUS" "0" "$GATE_8_START"

package/hooks/pre-commit

@@ -1555,6 +1555,11 @@ else
   # Stage 2: UNCONDITIONAL coverage percentage enforcement
   # Always attempt to parse coverage from available sources. If percentage
   # can be determined and is < 80% → BLOCK. If no data found → warn.
+  #
+  # NOTE: When only a subset of test files were run (smart selection, Issue #286),
+  # coverage data reflects only the tested subset. In that case we warn but don't
+  # block, because the full suite coverage may be ≥80% even though the subset
+  # coverage is lower.
   # ============================================================================
   COVERAGE_ENFORCED=false
 
@@ -1571,10 +1576,17 @@ else
         " 2>/dev/null)
         if [ "$COVERAGE_PERCENT" != "parse_error" ] && [ -n "$COVERAGE_PERCENT" ]; then
           if [ "$COVERAGE_PERCENT" -lt 80 ]; then
-            echo "❌ BLOCKED - TypeScript coverage ${COVERAGE_PERCENT}% below 80% threshold"
-            exit 1
+            # If only subset of tests ran, warn instead of block
+            if [ -n "${CHANGED_TEST_FILE_COUNT:-}" ] && [ "${CHANGED_TEST_FILE_COUNT:-0}" -gt 0 ] 2>/dev/null; then
+              echo "⚠️  Partial coverage ${COVERAGE_PERCENT}% (subset test run, not full suite)."
+              echo "    Run 'npx vitest run --coverage' for full coverage check."
+            else
+              echo "❌ BLOCKED - TypeScript coverage ${COVERAGE_PERCENT}% below 80% threshold"
+              exit 1
+            fi
+          else
+            echo "TypeScript coverage: ${COVERAGE_PERCENT}% ✅ (≥ 80%)"
           fi
-          echo "TypeScript coverage: ${COVERAGE_PERCENT}% ✅ (≥ 80%)"
         else
           echo "⚠️  Could not parse TypeScript coverage from coverage/coverage-summary.json"
         fi

package/lib/init.js

@@ -279,13 +279,75 @@ function printCliToolStatus() {
   console.log(`CLI tools: ${available.length}/${GATE_CLI_TOOLS.length} available`);
   if (missing.length > 0) {
     console.log(`  Missing: ${missing.join(', ')}`);
-    console.log('  Quality gates using these tools will silently SKIP until they are installed.');
-    console.log(`  Run 'xp-gate bootstrap' to install all missing tools, or 'xp-gate doctor' for details.\n`);
+    console.log('  Quality gates using these tools will silently SKIP until they are installed.\n');
   } else {
     console.log('');
   }
 }
 
+/**
+ * Ask the user for confirmation via stdin.
+ * @param {string} question - The yes/no question to display
+ * @returns {Promise<boolean>} true if user answered yes
+ */
+function askYesNo(question) {
+  return new Promise((resolve) => {
+    const rl = require('readline').createInterface({
+      input: process.stdin,
+      output: process.stdout,
+    });
+    rl.question(`${question} (Y/n) `, (answer) => {
+      rl.close();
+      const normalized = answer.trim().toLowerCase();
+      // Empty (just Enter) or y/yes → yes; anything else → no
+      resolve(normalized === '' || normalized === 'y' || normalized === 'yes');
+    });
+  });
+}
+
+/**
+ * Prompt the user to auto-install missing CLI quality-gate tools.
+ * Called after installation completes. Interactive only when TTY is available.
+ * Skips silently when no tools are missing.
+ *
+ * @param {boolean} autoYes - If true, skip prompt and auto-install
+ * @returns {Promise<number>} 0 on success or skipped, 1 on failure
+ */
+async function promptBootstrap(autoYes) {
+  const { bootstrap } = require('./bootstrap.js');
+
+  // Check what's missing without printing a full header
+  const missing = [];
+  for (const entry of GATE_CLI_TOOLS) {
+    const result = checkCliTool(entry.tool);
+    if (!result.available) {
+      missing.push(entry.tool);
+    }
+  }
+
+  if (missing.length === 0) return 0;
+
+  console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+  console.log('  Quality Gate CLI Tools');
+  console.log('');
+  console.log(`  ${missing.length} tool(s) required by quality gates are not installed:`);
+  for (const tool of missing) {
+    console.log(`    ✗ ${tool}`);
+  }
+  console.log('');
+  console.log('  Without these tools, the corresponding quality gates will');
+  console.log('  silently SKIP during git commits — you may miss issues.');
+  console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+
+  if (autoYes || (process.stdin.isTTY && await askYesNo('\nInstall missing tools now?'))) {
+    console.log('');
+    return bootstrap([]);
+  }
+
+  console.log('\n  Skipped. Run "xp-gate bootstrap" later to install them.');
+  return 0;
+}
+
 async function init(args) {
   console.log('XP-Gate Initialization');
   console.log('====================\n');
@@ -384,7 +446,10 @@ async function installLocal(args) {
 
   console.log('\nInstallation complete!');
   console.log('Run git commit to trigger quality gates');
-  console.log('');
+
+  // Auto-install missing CLI tools (prompt user)
+  const autoYes = args.includes('--yes') || args.includes('--auto-install');
+  await promptBootstrap(autoYes);
   console.log('━━━ FIRST-CLASS TEST QUALITY ━━━');
   console.log('XP-Gate treats test code as a first-class citizen:');
   console.log('  • TypeScript: test files are type-checked, not excluded from tsconfig.json');
@@ -455,6 +520,11 @@ async function setupGlobal(args) {
   console.log('\nGlobal setup complete!');
   console.log('All git repositories will now use xp-gate quality gates.');
   console.log('Per-project adapters can still override by creating <repo>/githooks/');
+
+  // Auto-install missing CLI tools (prompt user)
+  const autoYes = args.includes('--yes') || args.includes('--auto-install');
+  await promptBootstrap(autoYes);
+
   console.log('');
   console.log('━━━ FIRST-CLASS TEST QUALITY ━━━');
   console.log('XP-Gate treats test code as a first-class citizen:');
@@ -556,4 +626,4 @@ function injectKarpathyPrinciples(projectRoot) {
   }
 }
 
-module.exports = { init };
+module.exports = { init, promptBootstrap };

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.12.12",
+  "version": "0.12.14",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.12.12",
+  "version": "0.12.14",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → SHIP → LAND → USER ACCEPTANCE → FEEDBACK → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.12.12",
+  "version": "0.12.14",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → SHIP → LAND → USER ACCEPTANCE → FEEDBACK → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.12.12",
+  "version": "0.12.14",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → USER ACCEPTANCE → FEEDBACK → SHIP → LAND → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/principles/lint-baseline.ts

@@ -290,58 +290,47 @@ export interface LintDeltaResult {
  * Compare current lint state against a baseline entry for a single file.
  * Used by the pre-commit hook to determine if new lint errors were introduced.
  */
+function countErrors(entry: BaselineEntry): number {
+  return (entry.eslint?.errors || 0) +
+    (entry.ruff?.errors || 0) +
+    (entry.golangci?.errors || 0) +
+    (entry.shellcheck?.errors || 0);
+}
+
+function deltaPass(reduction: number, message: string): LintDeltaResult {
+  return { enforcement: 'PASS', newWarnings: 0, newErrors: 0, reduction, message };
+}
+
+function deltaBlock(warnings: number, errors: number, message: string): LintDeltaResult {
+  return { enforcement: 'BLOCK', newWarnings: warnings, newErrors: errors, reduction: 0, message };
+}
+
 export function computeLintDelta(
   baseline: BaselineEntry | null,
   current: BaselineEntry,
 ): LintDeltaResult {
   if (!baseline) {
-    return {
-      enforcement: 'PASS',
-      newWarnings: 0,
-      newErrors: 0,
-      reduction: 0,
-      message: 'New file — baseline created. No comparison needed.',
-    };
+    return deltaPass(0, 'New file — baseline created. No comparison needed.');
   }
 
   const oldW = baseline.totalWarnings;
-  const oldE = (baseline.eslint?.errors || 0) +
-    (baseline.ruff?.errors || 0) +
-    (baseline.golangci?.errors || 0) +
-    (baseline.shellcheck?.errors || 0);
+  const oldE = countErrors(baseline);
   const newW = current.totalWarnings;
-  const newE = (current.eslint?.errors || 0) +
-    (current.ruff?.errors || 0) +
-    (current.golangci?.errors || 0) +
-    (current.shellcheck?.errors || 0);
+  const newE = countErrors(current);
 
   if (newW > oldW) {
-    return {
-      enforcement: 'BLOCK',
-      newWarnings: newW - oldW,
-      newErrors: newE > oldE ? newE - oldE : 0,
-      reduction: 0,
-      message: `Lint debt increased by ${newW - oldW} warnings (${oldW} → ${newW}). Fix new errors before committing.`,
-    };
+    const delta = newW - oldW;
+    return deltaBlock(delta, newE > oldE ? newE - oldE : 0,
+      `Lint debt increased by ${delta} warnings (${oldW} → ${newW}). Fix new errors before committing.`);
   }
 
   if (newW < oldW) {
-    return {
-      enforcement: 'PASS',
-      newWarnings: 0,
-      newErrors: 0,
-      reduction: oldW - newW,
-      message: `Lint debt reduced by ${oldW - newW} warnings (${oldW} → ${newW}). Good job!`,
-    };
+    const delta = oldW - newW;
+    return deltaPass(delta,
+      `Lint debt reduced by ${delta} warnings (${oldW} → ${newW}). Good job!`);
   }
 
-  return {
-    enforcement: 'PASS',
-    newWarnings: 0,
-    newErrors: 0,
-    reduction: 0,
-    message: 'No change in lint debt.',
-  };
+  return deltaPass(0, 'No change in lint debt.');
 }
 
 // ── Formatting ────────────────────────────────────────────
@@ -370,16 +359,22 @@ export function formatBaselineSummary(baseline: Record<string, BaselineEntry>):
     if (entry.shellcheck) shellcheckFiles++;
   }
 
+  const toolLines = [
+    [eslintFiles, 'ESLint'],
+    [ruffFiles, 'Ruff'],
+    [golangciFiles, 'golangci-lint'],
+    [shellcheckFiles, 'ShellCheck'],
+  ] as const;
+
   const lines: string[] = [
     `Lint Baseline Summary:`,
     `  Files tracked: ${files.length}`,
     `  Total warnings: ${totalWarnings}`,
   ];
 
-  if (eslintFiles > 0) lines.push(`  ESLint: ${eslintFiles} files`);
-  if (ruffFiles > 0) lines.push(`  Ruff: ${ruffFiles} files`);
-  if (golangciFiles > 0) lines.push(`  golangci-lint: ${golangciFiles} files`);
-  if (shellcheckFiles > 0) lines.push(`  ShellCheck: ${shellcheckFiles} files`);
+  for (const [count, name] of toolLines) {
+    if (count > 0) lines.push(`  ${name}: ${count} files`);
+  }
 
   return lines.join('\n');
 }

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-06
-**Commit:** 132a12e
+**Generated:** 2026-07-07
+**Commit:** 2e4e578
 **Branch:** main
-**Version:** 0.12.12.0
+**Version:** 0.12.14.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.