@boyingliu01/xp-gate 0.20.0 → 0.20.1

package/hooks/pre-commit

@@ -459,10 +459,25 @@ record_gate_audit "gate-0" "version-consistency" "$GATE_0_STATUS" "0" "$GATE_0_S
 
 echo ""
 
-# Get list of changed files
-CHANGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
-
-if [ -z "$CHANGED_FILES" ]; then
+# Get list of changed files.
+#
+# Byte-identical mirrors (src/npm-package/**) are governed by CI Mirror Parity,
+# not by re-linting. Leaving them in this scan set double-counted every
+# lint/complexity signal and made jscpd report the source-vs-mirror pair as a
+# 100% whole-file clone, which then tripped Gate 6's "<=5 warnings must clear
+# to zero" rule on ANY edit to a mirrored file -- a warning that is
+# structurally impossible to clear. (Gate 6's MIRROR_EXCLUDE and #494's test
+# selection already exclude mirrors for the same reason.)
+#
+# IMPORTANT: the exclusion applies to the LINT SCAN CORPUS only. The early
+# exit below must key on the RAW staged list -- Gate 8 (secret scanning) is
+# unconditional and fail-closed (#499), and gating it behind a path-filtered
+# list would let a mirror-only commit land with zero secret scanning and no
+# CI backstop.
+RAW_CHANGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
+CHANGED_FILES=$(printf '%s\n' "$RAW_CHANGED_FILES" | grep -v '^src/npm-package/' || true)
+
+if [ -z "$RAW_CHANGED_FILES" ]; then
   echo "No files changed. Skipping gates."
   exit 0
 fi
@@ -857,11 +872,21 @@ has_project_lang() {
 }
 # Switch to subdirectory if detected (for single-language subdirectory projects).
 # Multi-language projects stay at root — each adapter handles its own path.
+#
+# IN_PROJECT_SUBDIR records whether this cd actually happened. Git reports
+# staged paths relative to the repo root; after cd "$PROJECT_SUBDIR" the [ -f ]
+# probes below need subdirectory-relative paths (hence the PROJECT_SUBDIR
+# prefix strips in Gates 5a/5b/5c), but when the hook stays at the root
+# (multi-language projects) stripping the prefix makes every path-based check
+# resolve against the wrong directory — false BLOCKs in Gate 5a, silent no-ops
+# in 5b/5c. Only strip when we really are inside the subdirectory.
 ORIGINAL_DIR=""
+IN_PROJECT_SUBDIR=0
 _lang_count=$(echo "$PROJECT_LANGS" | wc -w)
 if [ -n "$PROJECT_SUBDIR" ] && [ "$PROJECT_SUBDIR" != "." ] && [ "$PROJECT_LANG" != "documentation-only" ] && [ "$_lang_count" -le 1 ]; then
   ORIGINAL_DIR=$(pwd)
   cd "$PROJECT_SUBDIR"
+  IN_PROJECT_SUBDIR=1
   echo "Working in: $PROJECT_SUBDIR/"
   echo ""
 fi
@@ -891,20 +916,67 @@ else
   # in githooks/lib/typecheck.sh so a project's own checker (vue-tsc, svelte-check,
   # a `typecheck` script) is used instead of a hardcoded tsc that cannot resolve
   # single-file components (#436).
-  source "${AUDIT_SCRIPT_DIR}/lib/typecheck.sh"
-  run_typescript_typecheck
-  TS_CHECK_EXIT=$?
+  #
+  # Resolve the TS project directory first (#470). The probes below used to run
+  # against the repo root only; in multi-language monorepos (e.g. web/ +
+  # backend/, where the hook stays at the root — see the cd block above)
+  # tsconfig.json / biome.json live in the language subdirectory, so the whole
+  # TS half of Gate 1 silently SKIPped ("tsconfig.json not found") while a
+  # project config existed. Order: repo root first (unchanged behaviour for
+  # plain projects), then the detected language subdirectory, then a shallow
+  # search.
+  TS_PROJECT_DIR=""
+  for _ts_dir in "." "${PROJECT_SUBDIR:-}"; do
+    [ -z "$_ts_dir" ] && continue
+    if [ -f "$_ts_dir/tsconfig.json" ] || [ -f "$_ts_dir/biome.json" ] || [ -f "$_ts_dir/biome.jsonc" ] \
+       || [ -f "$_ts_dir/eslint.config.js" ] || [ -f "$_ts_dir/.eslintrc.json" ] \
+       || [ -f "$_ts_dir/.eslintrc.js" ] || [ -f "$_ts_dir/.eslintrc.cjs" ]; then
+      TS_PROJECT_DIR="$_ts_dir"
+      break
+    fi
+  done
+  if [ -z "$TS_PROJECT_DIR" ]; then
+    _TSCONFIG_CAND=$(find . -maxdepth 2 \( -name tsconfig.json -o -name biome.json -o -name biome.jsonc -o -name eslint.config.js -o -name .eslintrc.json -o -name .eslintrc.js -o -name .eslintrc.cjs \) -not -path './.git/*' -not -path './node_modules/*' 2>/dev/null | head -1)
+    if [ -n "$_TSCONFIG_CAND" ]; then
+      TS_PROJECT_DIR=$(dirname "$_TSCONFIG_CAND")
+    fi
+  fi
+  [ -z "$TS_PROJECT_DIR" ] && TS_PROJECT_DIR="."
+  if [ "$TS_PROJECT_DIR" != "." ]; then
+    echo "   TypeScript project directory: $TS_PROJECT_DIR/"
+    # typecheck.sh is cwd-relative: run it from the TS project subdirectory in a
+    # subshell so the language loop's next iteration still starts at the root.
+    # Exit contract: 0 clean, 1 findings (block), 2 checker unavailable (skip).
+    # A cd/source infrastructure failure must NOT read as "type errors": map it
+    # to 2 (skip) so 1 stays reserved for real findings (#508 walkthrough).
+    ( cd "$TS_PROJECT_DIR" 2>/dev/null || exit 2 \
+      ; [ -r "${AUDIT_SCRIPT_DIR}/lib/typecheck.sh" ] || exit 2 \
+      ; source "${AUDIT_SCRIPT_DIR}/lib/typecheck.sh" && run_typescript_typecheck )
+    TS_CHECK_EXIT=$?
+  else
+    source "${AUDIT_SCRIPT_DIR}/lib/typecheck.sh"
+    run_typescript_typecheck
+    TS_CHECK_EXIT=$?
+  fi
   if [ "$TS_CHECK_EXIT" -eq 1 ]; then
     exit 1
   fi
     
-    # Run ESLint linting if config exists
-    if [ -f ".eslintrc.json" ] || [ -f ".eslintrc.js" ] || [ -f ".eslintrc.cjs" ] || [ -f "eslint.config.js" ]; then
+    # Run ESLint linting if config exists (root or TS project subdirectory)
+    if [ -f "$TS_PROJECT_DIR/.eslintrc.json" ] || [ -f "$TS_PROJECT_DIR/.eslintrc.js" ] || [ -f "$TS_PROJECT_DIR/.eslintrc.cjs" ] || [ -f "$TS_PROJECT_DIR/eslint.config.js" ]; then
       echo "Running ESLint linting..."
       # Filter to only TS/JS files - ESLint config ignores non-matching files
       ESLINT_FILES=$(echo "$CHANGED_FILES" | grep -E '\.(ts|tsx|js|jsx)$' || true)
       if [ -n "$ESLINT_FILES" ]; then
-        ESLINT_OUTPUT=$(npx eslint $ESLINT_FILES -f json --no-warn-ignored 2>&1)
+        # File paths from git are repo-root relative, so they are correct from
+        # the root. Legacy .eslintrc.* configs are discovered by walking up from
+        # each linted file (found in the subdirectory automatically); flat
+        # configs are discovered from the CWD, so point at them explicitly.
+        if [ "$TS_PROJECT_DIR" != "." ] && [ -f "$TS_PROJECT_DIR/eslint.config.js" ]; then
+          ESLINT_OUTPUT=$(npx eslint --config "$TS_PROJECT_DIR/eslint.config.js" $ESLINT_FILES -f json --no-warn-ignored 2>&1)
+        else
+          ESLINT_OUTPUT=$(npx eslint $ESLINT_FILES -f json --no-warn-ignored 2>&1)
+        fi
         ESLINT_EXIT=$?
         if [ "$ESLINT_EXIT" -ne 0 ]; then
           if [ -f ".xp-gate/lint-baseline.json" ] && command -v node &> /dev/null; then
@@ -951,8 +1023,8 @@ else
       fi
     else
       echo "ℹ️  No ESLint configuration found - Skipping"
-      if [ -f "package.json" ] && command -v node &> /dev/null; then
-        HAS_ESLINT=$(node -e "try{const p=JSON.parse(require('fs').readFileSync('package.json','utf8'));const d=p.devDependencies||{};const deps=p.dependencies||{};console.log((d.eslint||deps.eslint)?'yes':'no')}catch{console.log('no')}") && true
+      if [ -f "$TS_PROJECT_DIR/package.json" ] && command -v node &> /dev/null; then
+        HAS_ESLINT=$(node -e "try{const p=JSON.parse(require('fs').readFileSync('$TS_PROJECT_DIR/package.json','utf8'));const d=p.devDependencies||{};const deps=p.dependencies||{};console.log((d.eslint||deps.eslint)?'yes':'no')}catch{console.log('no')}") && true
         if [ "$HAS_ESLINT" = "yes" ]; then
           echo "⚠️  WARNING: eslint is installed in package.json but no eslint config found"
           echo "   Either create .eslintrc.* / eslint.config.* or remove eslint from dependencies"
@@ -962,9 +1034,17 @@ else
     fi
 
     # ── Biome lint/format check ──
-    if [ -f "biome.json" ] || [ -f "biome.jsonc" ]; then
+    # Default the project dir so this branch stays runnable standalone
+    # (the gate-1-biome-noop suite extracts it verbatim); a no-op inside the
+    # hook, where TS_PROJECT_DIR is resolved above.
+    TS_PROJECT_DIR="${TS_PROJECT_DIR:-.}"
+    if [ -f "$TS_PROJECT_DIR/biome.json" ] || [ -f "$TS_PROJECT_DIR/biome.jsonc" ]; then
       echo "Running Biome lint/format check..."
-      BIOME_OUT=$(npx biome check --staged . 2>&1)
+      # Run from the TS project directory so Biome auto-discovers its config and
+      # scopes --staged to that subdirectory (mirrors the single-language subdir
+      # mode, which executes after cd "$PROJECT_SUBDIR"). Empirically verified:
+      # `biome check --staged .` from the subdir checks the staged files under it.
+      BIOME_OUT=$(cd "$TS_PROJECT_DIR" && npx biome check --staged . 2>&1)
       BIOME_STATUS=$?
       if [ "$BIOME_STATUS" -ne 0 ]; then
         # Biome exits 1 with `internalError/io - No files were processed` when the
@@ -989,8 +1069,8 @@ else
         echo "✅ PASSED - Biome check."
       fi
     else
-      if [ -f "package.json" ] && command -v node &> /dev/null; then
-        HAS_BIOME=$(node -e "try{const p=JSON.parse(require('fs').readFileSync('package.json','utf8'));const d=p.devDependencies||{};const deps=p.dependencies||{};console.log((d['@biomejs/biome']||deps['@biomejs/biome'])?'yes':'no')}catch{console.log('no')}") && true
+      if [ -f "$TS_PROJECT_DIR/package.json" ] && command -v node &> /dev/null; then
+        HAS_BIOME=$(node -e "try{const p=JSON.parse(require('fs').readFileSync('$TS_PROJECT_DIR/package.json','utf8'));const d=p.devDependencies||{};const deps=p.dependencies||{};console.log((d['@biomejs/biome']||deps['@biomejs/biome'])?'yes':'no')}catch{console.log('no')}") && true
         if [ "$HAS_BIOME" = "yes" ]; then
           echo ""
           echo "⚠️  WARNING: @biomejs/biome is installed in package.json but no biome.json found"
@@ -1480,11 +1560,15 @@ else
   # --- BLOCK path: New .ts/.tsx files without corresponding tests ---
   NEW_TS_FILES=$(git diff --cached --name-only --diff-filter=A | grep -E '\.(ts|tsx)$' | grep -v '\.d\.ts$' | grep -v '__tests__' | grep -v '\.test\.' | grep -v '\.spec\.' | grep -v '__snapshots__' | grep -v 'node_modules/' | grep -v '\.next/' | grep -v '\.nuxt/' | grep -v 'dist/' | grep -v 'build/' | grep -v '.turbo/' | grep -v '.cache/' | grep -Ev '(^|/)vitest\.config\.' | grep -Ev '(^|/)vite\.config\.' | grep -Ev '(^|/)jest\.config\.' | grep -Ev '(^|/)tsconfig\.' | grep -Ev '(^|/)eslint\.' | grep -Ev '(^|/)prettier\.' | grep -Ev '(^|/)tailwind\.' || true)
 
-  # Strip PROJECT_SUBDIR prefix from new-TS-file paths when running in a subdirectory.
-  # git diff returns repo-root relative paths, but after cd "$PROJECT_SUBDIR"
-  # the test-pairing [ -f ] checks below need subdirectory-relative paths.
+  # Strip PROJECT_SUBDIR prefix from new-TS-file paths ONLY when the hook
+  # actually cd'd into the subdirectory (IN_PROJECT_SUBDIR=1; single-language
+  # subdirectory projects). git diff returns repo-root relative paths; after
+  # cd "$PROJECT_SUBDIR" the test-pairing [ -f ] checks below need
+  # subdirectory-relative paths. When the hook stays at the repo root
+  # (multi-language projects) the paths must KEEP their prefix or every
+  # [ -f ] lookup misses and paired files are falsely BLOCKED.
   # (Mirrors the v0.14.31+ Gate 5b fix at lines 1603-1608; Gate 5a was missing it.)
-  if [ -n "$PROJECT_SUBDIR" ] && [ "$PROJECT_SUBDIR" != "." ] && [ -n "$NEW_TS_FILES" ]; then
+  if [ "$IN_PROJECT_SUBDIR" = "1" ] && [ -n "$NEW_TS_FILES" ]; then
     NEW_TS_FILES=$(echo "$NEW_TS_FILES" | sed "s|^${PROJECT_SUBDIR}/||")
   fi
 
@@ -1695,10 +1779,13 @@ else
   # each plugin directory).
   CHANGED_TEST_FILES=$(echo "$CHANGED_TEST_FILES" | grep -vE '^plugins/[^/]+/' || true)
 
-  # Strip PROJECT_SUBDIR prefix from test file paths when running in subdirectory.
-  # git diff returns repo-root relative paths, but after cd "$PROJECT_SUBDIR" (line 728)
-  # vitest and [ -f ] checks need subdirectory-relative paths. (v0.14.31+ fix)
-  if [ -n "$PROJECT_SUBDIR" ] && [ "$PROJECT_SUBDIR" != "." ] && [ -n "$CHANGED_TEST_FILES" ]; then
+  # Strip PROJECT_SUBDIR prefix from test file paths ONLY when the hook
+  # actually cd'd into the subdirectory (IN_PROJECT_SUBDIR=1). git diff returns
+  # repo-root relative paths; after cd "$PROJECT_SUBDIR" vitest and [ -f ]
+  # checks need subdirectory-relative paths. At the repo root (multi-language
+  # projects) stripping would silently skip the mock-density scan and feed
+  # vitest paths that do not exist. (v0.14.31+ fix, gated on the cd in v0.19.x)
+  if [ "$IN_PROJECT_SUBDIR" = "1" ] && [ -n "$CHANGED_TEST_FILES" ]; then
     CHANGED_TEST_FILES=$(echo "$CHANGED_TEST_FILES" | sed "s|^${PROJECT_SUBDIR}/||")
   fi
 
@@ -1884,14 +1971,20 @@ else
           CHANGED_SRC_FILES=$(echo "$CHANGED_SRC_FILES" | grep -vE '^plugins/[^/]+/' || true)
           # Mirror handling is identical for source files: their test-adjacent
           # paths must never reach vitest as root-project targets (#494).
+          # Selection runs on repo-root relative paths (git diff output), before
+          # any PROJECT_SUBDIR stripping, so the bundled-mirror prefixes match.
           SELECTED_SRC_FILES=$(select_root_suite_targets "$CHANGED_SRC_FILES")
           if [ "$SELECTED_SRC_FILES" != "$CHANGED_SRC_FILES" ]; then
             echo "   ↪ Source selection adjusted for bundled mirrors (#494):"
             echo "     was: $(echo "$CHANGED_SRC_FILES" | tr '\n' ' ')"
             echo "     now: $(echo "$SELECTED_SRC_FILES" | tr '\n' ' ')"
           fi
-          # Strip PROJECT_SUBDIR prefix (same as CHANGED_TEST_FILES fix above)
-          if [ -n "$PROJECT_SUBDIR" ] && [ "$PROJECT_SUBDIR" != "." ] && [ -n "$SELECTED_SRC_FILES" ]; then
+          # Strip PROJECT_SUBDIR prefix ONLY when the hook cd'd into the
+          # subdirectory (IN_PROJECT_SUBDIR=1; same gate as the CHANGED_TEST_FILES
+          # fix above — at the repo root the paths must stay root-relative or the
+          # related-test lookup and vitest targets resolve against the wrong dir,
+          # #470)
+          if [ "$IN_PROJECT_SUBDIR" = "1" ] && [ -n "$SELECTED_SRC_FILES" ]; then
             SELECTED_SRC_FILES=$(echo "$SELECTED_SRC_FILES" | sed "s|^${PROJECT_SUBDIR}/||")
           fi
           CHANGED_SRC_COUNT=$(echo "$SELECTED_SRC_FILES" | grep -c '.' || true)
@@ -2648,7 +2741,17 @@ else
           echo "❌ BLOCKED - Boy Scout Rule violations detected ($VIOLATION_COUNT)"
           exit 1
         fi
-        
+
+        # REQ-4 (#452): the auto-init rewrites a committed file, which used to
+        # surface as an unexplained dirty ` M .warnings-baseline.json` after
+        # every commit that touched a first-time-modified file. Stage it so the
+        # budget update travels with the commit that caused it; when the
+        # baseline is unchanged (the common case) this is a no-op.
+        if [ -n "$(git status --porcelain -- .warnings-baseline.json 2>/dev/null)" ]; then
+          git add .warnings-baseline.json 2>/dev/null || true
+          echo "     ℹ️  .warnings-baseline.json auto-updated and staged with this commit."
+        fi
+
         echo "     ✅ PASSED - Boy Scout Rule compliance."
         fi
       else

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-08T07:48:14.654Z",
+  "checked_at": "2026-10-08T19:51:29.290Z",
   "source": "network"
 }

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"
@@ -42,7 +42,7 @@
     "node": ">=18.0.0"
   },
   "scripts": {
-    "version": "0.14.31",
+    "version": "0.20.0",
     "license-check": "node scripts/check-mattpocock-license.cjs",
     "prepack": "node scripts/check-mattpocock-license.cjs && node scripts/sync-package-content.js",
     "test": "echo \"Run tests\" && exit 0"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.20.0",
+  "version": "0.20.1",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
-**Generated:** 2026-10-07
-**Commit:** ff55f35b
-**Branch:** fix/batch-defects-20261007
-**Version:** 0.20.0.0
+**Generated:** 2026-10-08
+**Commit:** unknown
+**Branch:** unknown
+**Version:** 0.20.1.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/principles/boy-scout.ts

@@ -785,12 +785,44 @@ function reportBaselineUpdate(
   console.log(`   preserved:${preserved.length > 0 ? ` ${list(preserved)}` : ' (none)'}`);
 }
 
+/**
+ * Record budget entries for files the gate meets for the first time, then save
+ * and report the write. Split out of `runEnforcement` to keep both under the
+ * long-function threshold; also carries the #452 REQ-2 visibility contract:
+ * the report distinguishes "created" from "updated" and names every entry the
+ * auto-init introduced, never just a count.
+ */
+async function autoInitMissingEntries(
+  baseline: Record<string, BaselineEntry>,
+  missingBaselineEntries: string[],
+  currentWarnings: Record<string, number>,
+  baselinePath: string,
+  baselineExisted: boolean,
+): Promise<void> {
+  recordAutoInitializedEntries(baseline, missingBaselineEntries, currentWarnings);
+  await saveBaseline(baselinePath, baseline);
+  const action = baselineExisted ? 'updated' : 'created';
+  const noun = missingBaselineEntries.length === 1 ? 'entry' : 'entries';
+  console.log(`ℹ️  Baseline ${action}: ${baselinePath}`);
+  console.log(`   auto-initialized ${noun}: ${missingBaselineEntries.join(', ')}`);
+}
+
 async function runEnforcement(newFiles: string[], modifiedFiles: string[], baselinePath: string): Promise<EnforcementResult> {
   const allFiles = [...newFiles.filter(f => f.trim()), ...modifiedFiles.filter(f => f.trim())];
   const currentWarnings = await analyzeWarningsForFiles(allFiles);
-  
+
+  // Distinguishing "created" from "updated" is part of the auto-init contract
+  // (#452 REQ-2): a silently rewritten baseline is how unrelated entries used
+  // to vanish without anyone noticing.
+  let baselineExisted = false;
+  try {
+    await fs.access(baselinePath);
+    baselineExisted = true;
+  } catch {
+    baselineExisted = false;
+  }
   const baseline = await loadBaseline(baselinePath);
-  
+
   // Check for missing baseline entries for modified files
   const missingBaselineEntries: string[] = [];
   for (const file of modifiedFiles) {
@@ -798,13 +830,11 @@ async function runEnforcement(newFiles: string[], modifiedFiles: string[], basel
       missingBaselineEntries.push(file);
     }
   }
-  
+
   // Files being modified for the first time get their current count recorded, so
   // the next modification is compared against a real budget instead of nothing.
   if (missingBaselineEntries.length > 0) {
-    recordAutoInitializedEntries(baseline, missingBaselineEntries, currentWarnings);
-    await saveBaseline(baselinePath, baseline);
-    console.log(`ℹ️  Auto-initialized baseline for ${missingBaselineEntries.length} files`);
+    await autoInitMissingEntries(baseline, missingBaselineEntries, currentWarnings, baselinePath, baselineExisted);
   }
   
   const deltaResults: DeltaResult[] = [];

package/scripts/sync-package-content.js

@@ -419,7 +419,7 @@ function checkAdapterDrift(srcRootPath, mirrorRootPath) {
   if (mismatched.length > 0) {
     console.error(`[drift-check] ERROR: ${mismatched.length} adapter file(s) have drifted (SHA-256 mismatch):`);
     for (const f of mismatched) console.error(`  - ${f}`);
-    console.error('[drift-check] Fix: Run `node src/npm-package/scripts/sync-package-content.js` (or `npm pack`) to resync.');
+    console.error('[drift-check] Fix: Run `node src/npm-package/scripts/sync-package-content.js --fix` to resync (plain invocation is a check-only gate for CI).');
   }
 
   if (srcOnly.length > 0 || mirrorOnly.length > 0 || mismatched.length > 0) {
@@ -449,11 +449,18 @@ function checkDocsDrift(preCommitPath, prePushPath, readmePath, agentsPath) {
 function main() {
   console.error(`[sync] repo root: ${REPO_ROOT}`);
   console.error(`[sync] package root: ${PKG_ROOT}`);
-  if (checkDocsDrift() === false) {
-    process.exit(1);
-  }
-  if (checkAdapterDrift() === false) {
-    process.exit(1);
+  // Drift gates run BEFORE the sync on purpose: CI's Mirror Parity job relies
+  // on a drifted commit failing here rather than being silently healed by the
+  // copy loop. Local repair therefore needs the explicit `--fix` escape hatch
+  // (the pre-sync "Fix: Run …" advice used to deadlock against this gate).
+  const fixMode = process.argv.includes('--fix');
+  if (!fixMode) {
+    if (checkDocsDrift() === false) {
+      process.exit(1);
+    }
+    if (checkAdapterDrift() === false) {
+      process.exit(1);
+    }
   }
   const skills = syncSkills();
   const plugins = syncPlugins();