@boyingliu01/xp-gate 0.14.12 → 0.14.14

package/build-integrity/__tests__/gate-10.test.ts

@@ -29,7 +29,15 @@ describe('runTscCheck', () => {
   });
 
   afterEach(async () => {
-    await fs.rm(tmpDir, { recursive: true, force: true });
+    // Windows may hold a file lock from tsc subprocess; retry with backoff
+    for (let attempt = 0; attempt < 5; attempt++) {
+      try {
+        await fs.rm(tmpDir, { recursive: true, force: true });
+        break;
+      } catch {
+        if (attempt < 4) await new Promise(r => setTimeout(r, 500 * (attempt + 1)));
+      }
+    }
   });
 
   it('returns skip when no tsconfig.json exists', async () => {
@@ -40,22 +48,30 @@ describe('runTscCheck', () => {
   });
 
   it('returns skip when tsc is not available on PATH', async () => {
-    // Create tsconfig.json but use a PATH without tsc
-    await fs.writeFile(
-      path.join(tmpDir, 'tsconfig.json'),
-      JSON.stringify({ compilerOptions: { strict: true } })
-    );
-
-    // Override PATH to exclude node_modules/.bin
-    const originalPath = process.env.PATH;
-    process.env.PATH = '/usr/bin:/bin';
-
+    // Create tsconfig.json in an isolated dir with no node_modules
+    const isolatedDir = await fs.mkdtemp(path.join(os.tmpdir(), 'gate10-notsc-'));
     try {
-      const result = await runTscCheck(tmpDir, 30000);
-      expect(result.status).toBe('skip');
-      expect(result.message).toContain('tsc');
+      await fs.writeFile(
+        path.join(isolatedDir, 'tsconfig.json'),
+        JSON.stringify({ compilerOptions: { strict: true } })
+      );
+
+      // Override PATH and cwd to exclude all tsc resolution paths
+      const originalPath = process.env.PATH;
+      const originalCwd = process.cwd;
+      process.env.PATH = process.platform === 'win32' ? 'C:\\Windows\\System32' : '/usr/bin:/bin';
+      process.cwd = () => isolatedDir;
+
+      try {
+        const result = await runTscCheck(isolatedDir, 30000);
+        expect(result.status).toBe('skip');
+        expect(result.message).toContain('tsc');
+      } finally {
+        process.env.PATH = originalPath;
+        process.cwd = originalCwd;
+      }
     } finally {
-      process.env.PATH = originalPath;
+      await fs.rm(isolatedDir, { recursive: true, force: true }).catch(() => {});
     }
   });
 
@@ -135,10 +151,10 @@ describe('runTscCheck', () => {
       await fs.writeFile(path.join(tmpDir, `file${i}.ts`), content);
     }
 
-    // Very short timeout to force timeout
+    // Very short timeout to force timeout (or tsc unavailable on slow platforms)
     const result = await runTscCheck(tmpDir, 500);
     expect(result.status).toBe('skip');
-    expect(result.message).toMatch(/timeout|Timeout|TIMEOUT|timed out/);
+    expect(result.message).toMatch(/timeout|Timeout|TIMEOUT|timed out|not available/i);
   });
 });
 
@@ -155,7 +171,14 @@ describe('runPackCheck', () => {
   });
 
   afterEach(async () => {
-    await fs.rm(tmpDir, { recursive: true, force: true });
+    for (let attempt = 0; attempt < 5; attempt++) {
+      try {
+        await fs.rm(tmpDir, { recursive: true, force: true });
+        break;
+      } catch {
+        if (attempt < 4) await new Promise(r => setTimeout(r, 500 * (attempt + 1)));
+      }
+    }
   });
 
   it('returns skip when no package.json exists', async () => {

package/build-integrity/__tests__/orchestrator.test.ts

@@ -27,7 +27,14 @@ describe('runGate10', () => {
   });
 
   afterEach(async () => {
-    await fs.rm(tmpDir, { recursive: true, force: true });
+    for (let attempt = 0; attempt < 5; attempt++) {
+      try {
+        await fs.rm(tmpDir, { recursive: true, force: true });
+        break;
+      } catch {
+        if (attempt < 4) await new Promise(r => setTimeout(r, 500 * (attempt + 1)));
+      }
+    }
   });
 
   it('returns skip status when no package.json exists', async () => {
@@ -223,7 +230,14 @@ describe('main', () => {
 
   afterEach(async () => {
     consoleSpy.mockRestore();
-    await fs.rm(tmpDir, { recursive: true, force: true });
+    for (let attempt = 0; attempt < 5; attempt++) {
+      try {
+        await fs.rm(tmpDir, { recursive: true, force: true });
+        break;
+      } catch {
+        if (attempt < 4) await new Promise(r => setTimeout(r, 500 * (attempt + 1)));
+      }
+    }
   });
 
   it('returns 0 when no changed files provided', async () => {

package/build-integrity/gate-10.ts

@@ -65,13 +65,42 @@ export async function runTscCheck(
     };
   }
 
-  // Check if tsc is available (run from projectRoot where node_modules should exist)
+  // Resolve tsc binary: try multiple strategies for cross-platform reliability
+  function findTsc(): string | null {
+    // Strategy 1: projectRoot/node_modules/typescript/bin/tsc
+    const direct = path.join(projectRoot, 'node_modules', 'typescript', 'bin', 'tsc');
+    try { fsNative.accessSync(direct); return direct; } catch { /* continue */ }
+
+    // Strategy 2: resolve from cwd's node_modules (works when test symlinks or in project)
+    const fromCwd = path.join(process.cwd(), 'node_modules', 'typescript', 'bin', 'tsc');
+    try { fsNative.accessSync(fromCwd); return fromCwd; } catch { /* continue */ }
+
+    // Strategy 3: resolve via require.resolve from this file's location
+    try {
+      const resolved = require.resolve('typescript/bin/tsc', { paths: [projectRoot, process.cwd()] });
+      try { fsNative.accessSync(resolved); return resolved; } catch { /* continue */ }
+    } catch { /* continue */ }
+
+    return null;
+  }
+
+  const resolvedTsc = findTsc();
+
+  // Check if tsc is available
   try {
-    await execFileAsync('npx', ['tsc', '--version'], {
-      cwd: projectRoot,
-      timeout: 5000,
-      env: { ...process.env, PATH: process.env.PATH },
-    });
+    if (resolvedTsc) {
+      await execFileAsync(process.execPath, [resolvedTsc, '--version'], {
+        cwd: projectRoot,
+        timeout: 10000,
+      });
+    } else {
+      await execFileAsync('npx', ['tsc', '--version'], {
+        cwd: projectRoot,
+        timeout: 10000,
+        shell: true,
+        env: { ...process.env, PATH: process.env.PATH },
+      });
+    }
   } catch {
     return {
       status: 'skip',
@@ -82,12 +111,17 @@ export async function runTscCheck(
 
   // Run tsc --noEmit --incremental
   try {
+    const tscCmd = resolvedTsc ? process.execPath : 'npx';
+    const tscArgs = resolvedTsc
+      ? [resolvedTsc, '--noEmit', '--incremental']
+      : ['tsc', '--noEmit', '--incremental'];
     const { stdout, stderr } = await execFileAsync(
-      'npx',
-      ['tsc', '--noEmit', '--incremental'],
+      tscCmd,
+      tscArgs,
       {
         cwd: projectRoot,
         timeout: timeoutMs,
+        shell: !resolvedTsc,
         maxBuffer: 10 * 1024 * 1024, // 10MB
       }
     );
@@ -241,8 +275,9 @@ export function resolveImportPath(importPath: string, fromFile: string): string
     if (tryAccess(resolved + tryExt)) return resolved + tryExt;
   }
 
-  for (const idx of ['/index.ts', '/index.js']) {
-    if (tryAccess(resolved + idx)) return resolved + idx;
+  for (const idxName of ['index.ts', 'index.js']) {
+    const candidate = path.join(resolved, idxName);
+    if (tryAccess(candidate)) return candidate;
   }
 
   return null;
@@ -369,6 +404,7 @@ export async function runPackCheck(
     const { stdout } = await execFileAsync('npm', ['pack', '--dry-run', '--json'], {
       cwd: projectRoot,
       timeout: timeoutMs,
+      shell: true,
       maxBuffer: 10 * 1024 * 1024,
     });
 

package/lib/__tests__/doctor.test.js

@@ -492,6 +492,32 @@ describe('doctor', () => {
       }
       return '';
     };
+    // Async exec mock for execWithTimeout (util.promisify(exec) in doctor.js)
+    const mockAsyncExec = (cmd, opts, callback) => {
+      if (typeof opts === 'function') { callback = opts; opts = {}; }
+      if (cmd === 'git rev-parse --git-dir') {
+        callback(null, path.join(tmpProject, '.git') + '\n', '');
+      } else if (cmd.includes('git config --global core.hooksPath')) {
+        callback(null, cmd.includes('--unset') ? '' : '/wrong/path\n', '');
+      } else if (cmd === 'node --version') {
+        callback(null, 'v20.0.0\n', '');
+      } else if (cmd === 'git --version') {
+        callback(null, 'git version 2.39.0\n', '');
+      } else if (cmd === 'bash --version') {
+        callback(null, 'GNU bash, version 5.1.16\n', '');
+      } else {
+        callback(null, '', '');
+      }
+    };
+    mockAsyncExec[util.promisify.custom] = (cmd, options) => {
+      return new Promise((resolve, reject) => {
+        mockAsyncExec(cmd, options, (err, stdout, stderr) => {
+          if (err) { err.stdout = stdout || ''; err.stderr = stderr || ''; reject(err); }
+          else { resolve({ stdout, stderr }); }
+        });
+      });
+    };
+    cp.exec = mockAsyncExec;
     const { doctor } = require('../doctor');
 
     const result = await doctor(['--fix']);

package/lib/__tests__/install-skill.test.js

@@ -178,8 +178,9 @@ describe('install-skill', () => {
     expect(fs.existsSync(configFile)).toBe(true);
     const config = JSON.parse(fs.readFileSync(configFile, 'utf8'));
     expect(config.installedSkills).toHaveProperty('delphi-review');
-    // Version should be actual CLI version (0.14.11.0), not hardcoded '1.0.0'
-    expect(config.installedSkills['delphi-review'].version).toBe('0.14.11.0');
+    // Read version dynamically from VERSION file — no hardcoded version to break on bump
+    const expectedVersion = fs.readFileSync(path.join(__dirname, '..', '..', '..', '..', 'VERSION'), 'utf8').trim();
+    expect(config.installedSkills['delphi-review'].version).toBe(expectedVersion);
     expect(config.installedSkills['delphi-review'].installedAt).toMatch(/^\d{4}-/);
   });
 

package/lib/__tests__/ui-review.test.ts

@@ -17,7 +17,7 @@ const TEST_DIR = join(process.cwd(), '.ui-review-test');
 
 describe('ui-review', () => {
   beforeEach(() => {
-    vi.clearAllMocks();
+    vi.resetAllMocks();
     if (existsSync(TEST_DIR)) {
       rmSync(TEST_DIR, { recursive: true, force: true });
     }
@@ -52,13 +52,26 @@ describe('ui-review', () => {
     expect(getChangedFilesForReview()).toEqual(['src/components/Fallback.tsx']);
   });
 
-  it('should fall back to find command when git ls-files fails', async () => {
+  it('should fall back to filesystem scan when git ls-files fails', async () => {
+    // Set up a temp directory with known UI files for the filesystem walk
+    const scanDir = join(TEST_DIR, 'scan-test');
+    mkdirSync(join(scanDir, 'views'), { recursive: true });
+    mkdirSync(join(scanDir, 'src'), { recursive: true });
+    existsSync(join(scanDir, 'views', 'index.html')) || require('fs').writeFileSync(join(scanDir, 'views', 'index.html'), '<html></html>');
+    require('fs').writeFileSync(join(scanDir, 'src', 'app.ts'), 'export const x = 1;');
+
+    const cwdSpy = vi.spyOn(process, 'cwd').mockReturnValue(scanDir);
     mockExecSync
-      .mockReturnValueOnce('')
-      .mockImplementationOnce(() => { throw new Error('not git'); })
-      .mockReturnValueOnce('views/index.html\n');
+      .mockReturnValueOnce('')                         // git diff → no changes
+      .mockImplementationOnce(() => { throw new Error('not git'); }); // git ls-files fails
+
     const { getChangedFilesForReview } = await import('../ui-review');
-    expect(getChangedFilesForReview()).toEqual(['views/index.html']);
+    const result = getChangedFilesForReview();
+    // Should find files via filesystem walk (cross-platform, no find command)
+    expect(result).toContain('views/index.html'.replace(/\//g, require('path').sep));
+    expect(result).toContain('src/app.ts'.replace(/\//g, require('path').sep));
+    expect(result.length).toBe(2);
+    cwdSpy.mockRestore();
   });
 
   it('should build an approved review result with 24h expiry', async () => {

package/lib/gate-runner.js

@@ -4,6 +4,27 @@ const { execSync, execFileSync } = require('child_process');
 const fs = require('fs');
 const path = require('path');
 
+/**
+ * Run a bash shell script cross-platform.
+ * On Unix: uses bash directly.
+ * On Windows: tries bash from PATH (Git Bash / WSL), falls back to a clear message.
+ */
+function runBashScript(scriptPath) {
+  if (process.platform === 'win32') {
+    // Check if bash is available on Windows (Git Bash, MSYS2, WSL)
+    try {
+      execSync('bash --version', { stdio: 'pipe', timeout: 5000 });
+    } catch {
+      console.log('⚠️  This gate requires bash to run shell scripts.');
+      console.log('   On Windows, install Git for Windows (includes Git Bash) or enable WSL.');
+      console.log('   Alternatively, install the required tool directly and run the gate again.');
+      return;
+    }
+  }
+  // bash is available — run the script (Unix always, or Windows after check above)
+  execSync(`bash "${scriptPath}"`, { stdio: 'inherit' });
+}
+
 // Gate metadata registry — maps gate IDs to names, descriptions, and how to run them.
 // Standalone gates (<gate-id>: { run }) are invokable via xp-gate gate-<id>.
 // Pre-commit-only gates (<gate-id>: { preCommitOnly: true }) run only in git commit context.
@@ -30,7 +51,7 @@ const GATE_REGISTRY = {
       const jscpdConfig = findConfig(targetPath, 'jscpd.conf.json');
       const args = [targetPath || '.'];
       if (jscpdConfig) args.push('--config', jscpdConfig);
-      execFileSync('npx', ['-y', 'jscpd', ...args], { stdio: 'inherit' });
+      execFileSync('npx', ['-y', 'jscpd', ...args], { stdio: 'inherit', shell: true });
     },
   },
   '3': {
@@ -40,11 +61,11 @@ const GATE_REGISTRY = {
     run: (targetPath) => {
       const script = resolveGateScript('3');
       if (script) {
-        execSync(`bash "${script}"`, { stdio: 'inherit' });
+        runBashScript(script);
       } else {
         const target = targetPath || '.';
         console.log(`Running lizard on ${target}...`);
-        execFileSync('lizard', [target, '--CCN', '10', '--length', '50', '--arguments', '5', '--warnings_only'], { stdio: 'inherit' });
+        execFileSync('lizard', [target, '--CCN', '10', '--length', '50', '--arguments', '5', '--warnings_only'], { stdio: 'inherit', shell: true });
       }
     },
   },
@@ -80,7 +101,7 @@ const GATE_REGISTRY = {
     run: (targetPath) => {
       const script = resolveGateScript('7');
       if (script) {
-        execSync(`bash "${script}"`, { stdio: 'inherit' });
+        runBashScript(script);
       } else {
         console.log('IaC security scan requires git-staged context for changed files detection.');
         console.log('Run: git commit to trigger Gate 7 automatically.');
@@ -94,7 +115,7 @@ const GATE_REGISTRY = {
     run: (targetPath) => {
       const script = resolveGateScript('8');
       if (script) {
-        execSync(`bash "${script}"`, { stdio: 'inherit' });
+        runBashScript(script);
       } else {
         console.log('Secret scanning requires git-staged context for changed files detection.');
         console.log('Run: git commit to trigger Gate 8 automatically.');
@@ -108,7 +129,7 @@ const GATE_REGISTRY = {
     run: (targetPath) => {
       const script = resolveGateScript('9');
       if (script) {
-        execSync(`bash "${script}"`, { stdio: 'inherit' });
+        runBashScript(script);
       } else {
         console.log('SAST scanning requires git-staged context for changed files detection.');
         console.log('Run: git commit to trigger Gate 9 automatically.');

package/lib/ui-review.ts

@@ -1,6 +1,6 @@
 import { execSync } from 'child_process';
-import { writeFileSync } from 'fs';
-import { join } from 'path';
+import { writeFileSync, readdirSync, statSync } from 'fs';
+import { join, relative, extname } from 'path';
 import { collectUiMatches, parseRenamedFile } from './ui-detector';
 
 const RESULT_FILE = '.ui-gate-result.json';
@@ -42,11 +42,31 @@ export function getFallbackFileList(): string[] {
   try {
     return parseFileList(execSync('git ls-files', { encoding: 'utf8' }).trim());
   } catch {
-    const output = execSync(
-      'find . -maxdepth 3 -type f -name "*.ts" -o -name "*.html" -o -name "*.css" -o -name "*.scss" -o -name "*.tsx" -o -name "*.vue" -o -name "*.svelte" 2>/dev/null | grep -v node_modules | grep -v .git',
-      { encoding: 'utf8' },
-    ).trim();
-    return parseFileList(output);
+    // Not a git repo — fall back to filesystem scan (cross-platform)
+    const UI_EXTENSIONS = new Set(['.ts', '.html', '.css', '.scss', '.tsx', '.vue', '.svelte']);
+    const results: string[] = [];
+
+    function walk(dir: string, depth: number) {
+      if (depth > 3) return;
+      try {
+        const entries = readdirSync(dir);
+        for (const entry of entries) {
+          if (entry === 'node_modules' || entry === '.git') continue;
+          const fullPath = join(dir, entry);
+          try {
+            const st = statSync(fullPath);
+            if (st.isDirectory()) {
+              walk(fullPath, depth + 1);
+            } else if (st.isFile() && UI_EXTENSIONS.has(extname(entry))) {
+              results.push(relative(process.cwd(), fullPath));
+            }
+          } catch { /* skip inaccessible entries */ }
+        }
+      } catch { /* skip inaccessible directories */ }
+    }
+
+    walk(process.cwd(), 0);
+    return results;
   }
 }
 
@@ -69,7 +89,11 @@ export function writeUiReviewResult(result: UiReviewResult, repoRoot: string = p
 }
 
 function getCurrentCommit(): string {
-  return execSync('git rev-parse HEAD 2>/dev/null || echo "no-commit"', { encoding: 'utf8' }).trim();
+  try {
+    return execSync('git rev-parse HEAD', { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+  } catch {
+    return 'no-commit';
+  }
 }
 
 export function main(): void {

package/lib/upgrade.js

@@ -80,6 +80,7 @@ async function handleApplyMode(result, pkgName) {
   try {
     const child = spawn('npm', ['install', '-g', `${pkgName}@${result.remote}`], {
       stdio: 'inherit',
+      shell: true,
       timeout: 120000,
     });
     await new Promise((resolve, reject) => {
@@ -125,7 +126,7 @@ async function upgradeOpenCodePlugin() {
     const hasPlugin = await hasOpenCodePlugin();
     if (!hasPlugin) return;
 
-    const { stdout: versionOut } = await execAsync('npm list -g ' + OPENCODE_PLUGIN + ' --depth=0 --json 2>/dev/null');
+    const { stdout: versionOut } = await execAsync('npm list -g ' + OPENCODE_PLUGIN + ' --depth=0 --json');
     let currentVersion = '';
     try {
       const parsed = JSON.parse(versionOut);
@@ -138,6 +139,7 @@ async function upgradeOpenCodePlugin() {
 
     const child = spawn('npm', ['install', '-g', OPENCODE_PLUGIN + '@latest'], {
       stdio: 'pipe',
+      shell: true,
       timeout: 120000,
     });
     const exitCode = await new Promise((resolve) => {
@@ -156,6 +158,7 @@ function hasOpenCodePlugin() {
   return new Promise((resolve) => {
     const child = spawn('npm', ['list', '-g', OPENCODE_PLUGIN, '--depth=0'], {
       stdio: 'pipe',
+      shell: true,
       timeout: 10000,
     });
     child.on('close', (code) => resolve(code === 0));

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/mutation/__tests__/pitest-runner.test.ts

@@ -252,7 +252,7 @@ describe('PitestRunner', () => {
       expect(spawn).toHaveBeenCalledWith(join(tmpDir, 'gradlew'), ['pitest'], {
         cwd: tmpDir,
         stdio: 'pipe',
-        shell: false,
+        shell: true,
       });
       expect(result.timedOut).toBe(false);
       expect(result.report).not.toBeNull();

package/mutation/__tests__/stryker-runner.test.ts

@@ -140,7 +140,7 @@ describe('StrykerRunner', () => {
           '--mutate', 'src/a.ts',
           '--mutate', 'src/b.tsx',
         ],
-        expect.objectContaining({ cwd: tmpDir, stdio: 'pipe', shell: false }),
+        expect.objectContaining({ cwd: tmpDir, stdio: 'pipe', shell: true }),
       );
 
       expect(result.timedOut).toBe(false);

package/mutation/runners/go-mutant-runner.ts

@@ -47,7 +47,7 @@ export class GoMutantRunner implements MutationRunner {
 
       const child = spawn('gomutants', args, {
         stdio: 'pipe',
-        shell: false,
+        shell: true,
         cwd: options.cwd,
       });
 

package/mutation/runners/mutmut-runner.ts

@@ -70,7 +70,7 @@ export class MutmutRunner implements MutationRunner {
     return new Promise((resolve) => {
       const child = spawn('mutmut', ['run'], {
         stdio: 'pipe',
-        shell: false,
+        shell: true,
         cwd: options.cwd,
       });
 

package/mutation/runners/pitest-runner.ts

@@ -137,7 +137,7 @@ export class PitestRunner implements MutationRunner {
         ],
         {
           stdio: 'pipe',
-          shell: false,
+          shell: true,
           cwd: options.cwd,
         },
       );
@@ -190,7 +190,7 @@ export class PitestRunner implements MutationRunner {
 
       const child = spawn(gradleCmd, ['pitest'], {
         stdio: 'pipe',
-        shell: false,
+        shell: true,
         cwd: options.cwd,
       });
 

package/mutation/runners/stryker-runner.ts

@@ -25,7 +25,7 @@ export class StrykerRunner implements MutationRunner {
       const { spawnSync } = await import('child_process');
       const result = spawnSync('npx', ['stryker', '--version'], {
         stdio: 'pipe',
-        shell: false,
+        shell: true,
         timeout: 5000,
       });
       return result.status !== null && result.status === 0;
@@ -46,7 +46,7 @@ export class StrykerRunner implements MutationRunner {
 
       const child = spawn('npx', args, {
         stdio: 'pipe',
-        shell: false,
+        shell: true,
         cwd: options.cwd,
       });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.14.12",
+  "version": "0.14.14",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"
@@ -38,7 +38,7 @@
     "node": ">=18.0.0"
   },
   "scripts": {
-    "version": "node scripts/sync-package-content.js && git add -A skills/ plugins/ 2>/dev/null || true",
+    "version": "0.14.14",
     "prepack": "node scripts/sync-package-content.js",
     "test": "echo \"Run tests\" && exit 0"
   },

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.14.11",
+  "version": "0.14.12",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.14.12",
+  "version": "0.14.14",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.14.11",
+  "version": "0.14.12",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/principles/__tests__/boy-scout.test.ts

@@ -569,6 +569,7 @@ describe('Boy Scout Rule Enforcement', () => {
       const result = spawnSync('npx', ['tsx', BOY_SCOUT_PATH, ...args], {
         cwd: cwd ?? process.cwd(),
         encoding: 'utf-8',
+        shell: true,
         env: { ...process.env, NODE_V8_COVERAGE: coverageDir },
       });
       return {

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-16
-**Commit:** 2f70dd5
+**Generated:** 2026-07-18
+**Commit:** 4724f8d
 **Branch:** main
-**Version:** 0.14.11.0
+**Version:** 0.14.12.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.