@boyingliu01/xp-gate 0.27.0 → 0.27.1

package/lib/__tests__/doctor-exec-retry.test.js

@@ -0,0 +1,152 @@
+/**
+ * @test REQ-DOCTOR retry-on-empty-stream guard
+ * @intent On win32, cmd.exe (exec's shell) can deliver exit 0 with an EMPTY
+ *         stdout+stderr when many spawns are in flight — doctor read that as
+ *         "Not found" and red-flagged Node/Git/hooksPath on a healthy machine.
+ *         execWithTimeout must retry an empty-but-successful probe before
+ *         reporting it, and must NOT retry real failures or real output.
+ * @covers AC-DOCTOR-RETRY-01
+ */
+const path = require('path');
+const { describe, it, expect, afterEach } = await import('vitest');
+
+const cpPath = require.resolve('child_process');
+
+function stubExec(behaviors) {
+  // doctor builds its async exec at load time via util.promisify(exec), which
+  // binds Node's INTERNAL custom promisify implementation — replacing the plain
+  // `exec` property afterwards is invisible to it (measured: stub fired 0-1
+  // times while the real cmd.exe child ran). The only patch point that holds
+  // across a fresh require is util.promisify itself.
+  const util = require('util');
+  const originalPromisify = util.promisify;
+  const calls = [];
+  util.promisify = function (fn) {
+    if (fn && fn.name === 'exec') {
+      stubWasConsumed = true;
+      return (cmd, opts = {}) => {
+        const attempt = calls.length;
+        calls.push(cmd);
+        return new Promise((resolve, reject) => {
+          behaviors[attempt]((err, stdout, stderr) => {
+            if (err) reject(err);
+            else resolve({ stdout, stderr });
+          }, attempt);
+        });
+      };
+    }
+    return originalPromisify.call(util, fn);
+  };
+  return {
+    calls,
+    restore: () => { util.promisify = originalPromisify; },
+  };
+}
+
+// Node couples exec to promisify via a custom symbol; if a future runtime drops
+// that coupling the name-based stub above silently stops intercepting and the
+// real cmd.exe child runs. Each test flips this to true from inside its own
+// stubbed load (never inherited from an earlier test), so afterEach can fail
+// loudly instead of passing vacuously.
+let stubWasConsumed = false;
+
+describe('execWithTimeout empty-stream retry (#525 follow-up)', () => {
+  let stub = null;
+  afterEach(() => {
+    if (stub) { stub.restore(); stub = null; }
+    // Fail loudly if the fn.name === 'exec' stub never intercepted this test's
+    // doctor load — that would mean Node dropped the exec/promisify custom-
+    // symbol coupling and the assertions ran against real cmd.exe children.
+    expect(stubWasConsumed, `stub did not intercept the doctor load in this test`).toBe(true);
+    stubWasConsumed = false;
+  });
+
+  function freshDoctor() {
+    const doctorPath = require.resolve('../doctor.js');
+    delete require.cache[doctorPath];
+    return require(doctorPath).execWithTimeout;
+  }
+
+  it('AC-DOCTOR-RETRY-01: retries an exit-0 empty-stdout probe and keeps its own timeout', async () => {
+    stub = stubExec([
+      (cb) => cb(null, '', ''),            // the lost-stream failure mode
+      (cb) => cb(null, 'v24.19.0\n', ''),  // the same probe, stream intact
+    ]);
+    const execWithTimeout = freshDoctor();
+    const result = await execWithTimeout('node --version', { stdio: ['ignore', 'pipe', 'pipe'] });
+    expect(stub.calls.length).toBe(2);
+    expect(result).toEqual({ stdout: 'v24.19.0', stderr: '' });
+  });
+
+  it('AC-DOCTOR-RETRY-01: returns null after exhausting attempts on a persistently empty probe', async () => {
+    stub = stubExec([
+      (cb) => cb(null, '', ''),
+      (cb) => cb(null, '', ''),
+      (cb) => cb(null, '', ''),
+      (cb) => cb(null, 'unexpected fourth attempt', ''),
+    ]);
+    const execWithTimeout = freshDoctor();
+    const result = await execWithTimeout('node --version', {});
+    // win32: 3 attempts then null; other platforms: single attempt, still null.
+    expect(result).toBeNull();
+    expect(stub.calls.length).toBe(process.platform === 'win32' ? 3 : 1);
+  });
+
+  it('AC-DOCTOR-RETRY-01: does not retry when the probe produced output', async () => {
+    stub = stubExec([(cb) => cb(null, 'git version 2.54.0\n', '')]);
+    const execWithTimeout = freshDoctor();
+    const result = await execWithTimeout('git --version', {});
+    expect(stub.calls.length).toBe(1);
+    expect(result.stdout).toContain('git version');
+  });
+
+  it('AC-DOCTOR-RETRY-01: does not retry a failing command', async () => {
+    stub = stubExec([(cb) => cb(Object.assign(new Error('ENOENT'), { code: 'ENOENT' }), '', '')]);
+    const execWithTimeout = freshDoctor();
+    const result = await execWithTimeout('definitely-not-a-tool --version', {});
+    expect(stub.calls.length).toBe(1);
+    expect(result).toBeNull();
+  });
+
+  it('AC-DOCTOR-RETRY-01: attempts:1 opts a side-effecting call out of the retry', async () => {
+    stub = stubExec([
+      (cb) => cb(null, '', ''),
+      (cb) => cb(null, 'unexpected second attempt', ''),
+    ]);
+    const execWithTimeout = freshDoctor();
+    const result = await execWithTimeout('some-mutating-command', { attempts: 1 });
+    expect(stub.calls.length).toBe(1);
+    expect(result).toBeNull();
+  });
+
+  it('AC-DOCTOR-RETRY-01: the attempts option is consumed, not forwarded to exec', async () => {
+    let forwarded = null;
+    stub = stubExec([(cb) => { cb(null, 'ok\n', ''); }]);
+    // Capture what doctor hands to the promisified exec by re-stubbing with an
+    // options recorder: stubExec's behaviors receive only the callback, so
+    // assert forwarding through a second fresh module with a capturing wrapper.
+    const util = require('util');
+    const originalPromisify = util.promisify;
+    const execWithTimeout = (() => {
+      util.promisify = function (fn) {
+        if (fn && fn.name === 'exec') {
+          stubWasConsumed = true;
+          return (cmd, opts = {}) => {
+            forwarded = opts;
+            return Promise.resolve({ stdout: 'ok\n', stderr: '' });
+          };
+        }
+        return originalPromisify.call(util, fn);
+      };
+      const doctorPath = require.resolve('../doctor.js');
+      delete require.cache[doctorPath];
+      const f = require(doctorPath).execWithTimeout;
+      util.promisify = originalPromisify;
+      return f;
+    })();
+    const result = await execWithTimeout('git --version', { attempts: 2, timeout: 999 });
+    expect(result.stdout).toBe('ok');
+    expect(forwarded.attempts).toBeUndefined();
+    expect(forwarded.timeout).toBe(999);
+  });
+});

package/lib/__tests__/windows-bash-probe.test.js

@@ -6,10 +6,10 @@
  *         leads with it. Behavior is exercised through an injected fake spawner,
  *         so no real interpreter configuration is assumed on the host (#469
  *         follow-up, Delphi walkthrough R1 MN-06).
- * @covers AC-WINBASH-01
+ * @covers AC-WINBASH-01, AC-WINBASH-02
  */
 const { describe, it, expect } = await import('vitest');
-const { resolveWindowsBashCandidates } = require('../detect-deps.js');
+const { resolveWindowsBashCandidates, checkBashVersion } = require('../detect-deps.js');
 
 // The candidate loop reads `where bash` from the host; tests inject both the
 // discovery runner and the probe spawner, so results are deterministic on any
@@ -39,10 +39,12 @@ function fakeSpawn(behaviors) {
 
 describe('resolveWindowsBashCandidates (win32 authoritative bash)', () => {
   it('AC-WINBASH-01: rejects a WSL stub whose $1 is empty and uname is Linux', () => {
-    const spawn = fakeSpawn({ 'C:\\Windows\\System32\\bash.exe': '[ ]\nLinux\n' });
-    // No MSYS candidate exists in this world (hardcoded fallbacks report no
-    // stdout), so the resolver must find nothing rather than settle for the stub.
-    expect(resolveWindowsBashCandidates(spawn, fakeWhere('C:\\Windows\\System32\\bash.exe\r\n'))).toBeNull();
+    // The resolver must find nothing rather than settle for the stub — and on
+    // current Windows the System32 stub is skipped by name without even being
+    // spawned (cold-launch stall); this world uses a non-System32 stub to keep
+    // testing the output-based rejection path itself.
+    const spawn = fakeSpawn({ 'C:\\wsl-stub\\bash.exe': '[ ]\nLinux\n' });
+    expect(resolveWindowsBashCandidates(spawn, fakeWhere('C:\\wsl-stub\\bash.exe\r\n'))).toBeNull();
   });
 
   it('AC-WINBASH-01: accepts the first candidate with argv round-trip + MINGW uname', () => {
@@ -52,7 +54,24 @@ describe('resolveWindowsBashCandidates (win32 authoritative bash)', () => {
     });
     const result = resolveWindowsBashCandidates(spawn, fakeWhere('C:\\a\\bash.exe\r\nC:\\b\\bash.exe\r\n'));
     expect(result).toBe('C:\\b\\bash.exe');
-    expect(spawn.probed.slice(0, 2)).toEqual(['C:\\a\\bash.exe', 'C:\\b\\bash.exe']);
+    // Known Git paths are probed BEFORE PATH discoveries (cold WSL launches
+    // stall the event loop for seconds), so a/b keep their relative order but
+    // trail the hardcoded fallbacks.
+    expect(spawn.probed.slice(-2)).toEqual(['C:\\a\\bash.exe', 'C:\\b\\bash.exe']);
+  });
+
+  it('AC-WINBASH-02: probes known Git paths before PATH discoveries', () => {
+    // Regression for the doctor fan-out starvation: System32\bash.exe leads
+    // `where bash` on WSL machines and its cold launch blocks ~3.4s. It must
+    // never be spawned at all — neither from where-output nor as any fallback.
+    const spawn = fakeSpawn({
+      'C:\\Program Files\\Git\\bin\\bash.exe': '[XPGATE_ARGV_PROBE]\nMSYS_NT-10.0\n',
+    });
+    const { result } = (() => ({
+      result: resolveWindowsBashCandidates(spawn, fakeWhere('C:\\Windows\\System32\\bash.exe\r\n')),
+    }))();
+    expect(result).toBe('C:\\Program Files\\Git\\bin\\bash.exe');
+    expect(spawn.probed).not.toContain('C:\\Windows\\System32\\bash.exe');
   });
 
   it('AC-WINBASH-01: a Linux uname with intact argv still fails the platform test', () => {
@@ -70,4 +89,35 @@ describe('resolveWindowsBashCandidates (win32 authoritative bash)', () => {
     const result = resolveWindowsBashCandidates(spawn, fakeWhere(new Error('where unavailable')));
     expect(result).toBe('C:\\msys64\\usr\\bin\\bash.exe');
   });
+
+  it('AC-WINBASH-02: WSL stubs are skipped by name regardless of separators or case', () => {
+    // The filter normalizes slashes and ignores case/drive: forward-slash and
+    // lowercase variants of the same stub must still produce NO spawn call.
+    // The AppX alias lives under <Windows>\SystemApps\Microsoft.WSL_* — a
+    // user's own install merely NAMED ...\WindowsApps\... is NOT the stub and
+    // must still be probed (output-based rejection covers it).
+    const spawn = fakeSpawn({});
+    resolveWindowsBashCandidates(spawn, fakeWhere(
+      'c:/windows/sysnative/bash.exe\r\nC:\\WINDOWS\\System32\\bash.exe\r\nC:\\Windows\\SysWOW64\\bash.exe\r\nC:\\Users\\me\\AppData\\Local\\Microsoft\\WindowsApps\\bash.exe\r\n'
+    ));
+    expect(spawn.probed.filter(p => /system32|sysnative|syswow64|appdata\\local\\microsoft\\windowsapps/i.test(p.replace(/\//g, '\\')))).toEqual([]);
+    const userOwned = fakeSpawn({});
+    resolveWindowsBashCandidates(userOwned, fakeWhere('D:\\Tools\\WindowsApps\\bash.exe\r\n'));
+    expect(userOwned.probed).toContain('D:\\Tools\\WindowsApps\\bash.exe');
+  });
+
+  it('AC-WINBASH-01: checkBashVersion returns the bash VERSION tuple, not the uname line', () => {
+    // Contract regression (walkthrough R5 MJ-01/FC-02): doctor prints "GNU
+    // bash, version <field>" — the field must be the version number.
+    const spawn = (file, args) => ({
+      stdout: 'MINGW64_NT-10.0-26300\nGNU bash, version 5.3.9(1)-release (x86_64-pc-cygwin)\n',
+    });
+    expect(checkBashVersion(spawn, 'C:\\bash.exe')).toBe('5.3.9(1)-release');
+  });
+
+  it('AC-WINBASH-01: checkBashVersion degrades to unknown, never a crash, on odd output', () => {
+    expect(checkBashVersion(() => ({ stdout: '' }), 'C:\\bash.exe')).toBe('unknown');
+    expect(checkBashVersion(() => ({ stdout: 'MINGW64_NT-10.0\n' }), 'C:\\bash.exe')).toBe('unknown');
+    expect(checkBashVersion(() => { throw new Error('spawn failed'); }, 'C:\\bash.exe')).toBe('unknown');
+  });
 });

package/lib/detect-deps.js

@@ -296,10 +296,14 @@ function probeWindowsBash() {
 function resolveWindowsBashCandidates(spawnProbe, whereExecSync) {
   const _execSync = whereExecSync || execSync;
   const candidates = [];
-  try {
-    const found = _execSync('where bash', { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
-    for (const line of found.split(/\r?\n/)) if (line.trim()) candidates.push(line.trim());
-  } catch { /* where unavailable */ }
+  // Well-known interpreters FIRST. Two reasons, both measured on win32:
+  // 1. A cold WSL launch (System32\bash.exe leads `where bash` when WSL is
+  //    installed) blocks its spawnSync for ~3.4s. checkBash runs inside
+  //    doctor's parallel fan-out, and that synchronous stall starves the
+  //    event loop past EXEC_TIMEOUT_MS — node/git then falsely report
+  //    "Not found" while spawning them standalone takes ~300ms.
+  // 2. The known Git paths ARE the answer we are looking for; probing them
+  //    first also skips pointless launches of stubs we would reject anyway.
   candidates.push(
     'C:\\Program Files\\Git\\bin\\bash.exe',
     'C:\\Program Files\\Git\\usr\\bin\\bash.exe',
@@ -308,6 +312,33 @@ function resolveWindowsBashCandidates(spawnProbe, whereExecSync) {
     'C:\\msys64\\usr\\bin\\bash.exe',
     'C:\\cygwin64\\bin\\bash.exe'
   );
+  try {
+    const found = _execSync('where bash', { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+    for (const line of found.split(/\r?\n/)) {
+      const p = line.trim();
+      // Skip the WSL launcher outright: uname would reject it, and a cold
+      // launch costs seconds (see above). WindowsApps\bash.exe is the same
+      // WSL stub family (it just errors differently when WSL is absent).
+      if (!p) continue;
+      // Match on normalized separators: forward slashes, mixed case, or a
+      // non-C drive would otherwise slip a WSL stub past the filter and back
+      // into the multi-second cold-launch stall.
+      const norm = p.replace(/\//g, '\\');
+      // The WSL launcher appears as System32/Sysnative/SysWOW64\bash.exe, the
+      // AppX alias <Windows>\SystemApps\Microsoft.WSL_*\bash.exe, and the
+      // per-user AppX execution alias ...\AppData\Local\Microsoft\WindowsApps\
+      // bash.exe. A user's own install merely NAMED ...\WindowsApps\... (not
+      // under Microsoft\) is NOT the stub and stays in the list.
+      if (/\\windowsapps\\bash\.exe$/i.test(norm)
+        && (/\\systemapps\\/i.test(norm) || /\\appdata\\local\\microsoft\\windowsapps\\/i.test(norm))) continue;
+      // The WSL stub lives in the matching-arch System32 view: 64-bit
+      // C:\Windows\System32\bash.exe AND the 32-bit emulation redirect target
+      // C:\Windows\SysWOW64\bash.exe (where reports either depending on the
+      // bitness of the caller).
+      if (/\\windows\\system32\\bash\.exe$/i.test(norm) || /\\windows\\sysnative\\bash\.exe$/i.test(norm) || /\\windows\\syswow64\\bash\.exe$/i.test(norm)) continue;
+      if (!candidates.includes(p)) candidates.push(p);
+    }
+  } catch { /* where unavailable */ }
   for (const candidate of candidates) {
     try {
       const r = spawnProbe(candidate, ['-c', 'echo "[$1]"; uname -s', 'sh', 'XPGATE_ARGV_PROBE'], {
@@ -327,22 +358,46 @@ function resolveWindowsBashCandidates(spawnProbe, whereExecSync) {
 /**
  * Check if bash is available on the system.
  * XP-Gate hooks are bash scripts — Windows users need Git Bash installed.
- * @returns {{ok: boolean, path?: string, message?: string}}
+ * @returns {{ok: boolean, path?: string, version?: string, message?: string}}
  */
+// Split out for behavior tests: checkBashVersion takes the resolved bash path
+// and a spawner so the version-field contract (a bash VERSION tuple, not the
+// uname string) is assertable without a real interpreter on the host.
+function checkBashVersion(spawnProbe, winBash) {
+  let version = 'unknown';
+  try {
+    // --version through the SAME probe-style argv as the candidate loop:
+    // Git Bash's login startup (`bash --version`) costs ~1.7s, and checkBash
+    // sits on hot paths (doctor fan-out, every gate-runner launch) where a
+    // synchronous stall starves concurrent execs past their timeouts. The
+    // -c form is non-login (~300ms). uname proves the MSYS family AND bash
+    // --version inside it still yields the real bash version number — the
+    // `version` field must stay a bash version, not the uname string. No
+    // sed in the command: the parse lives in JS below, so a stripped MSYS
+    // install without sed cannot silently degrade to "unknown".
+    // NOTE the cp. prefix: this module binds only execSync at file scope,
+    // and checkBash sits outside probeWindowsBash's local spawnSync binding
+    // — a bare spawnSync here is a ReferenceError swallowed by the catch,
+    // which used to pin the detail line at "unknown" forever.
+    const result = spawnProbe(winBash, ['-c', 'uname -s; bash --version', 'sh'], { encoding: 'utf8', timeout: 5000 });
+    const out = String((result && result.stdout) || '').trim();
+    // Keep the field in the same shape checkEnv prints for every other tool
+    // ("GNU bash, version X.Y.Z(...)"): doctor prefixes "GNU bash, version ",
+    // so hand back the bare version tuple, not the whole line.
+    const versionLine = out.split('\n').find(line => /version/.test(line));
+    const match = versionLine && versionLine.match(/version\s+(\S+)/);
+    if (match) version = match[1];
+  } catch { /* keep unknown */ }
+  return version;
+}
+
 function checkBash() {
   // On Windows resolve explicitly: PATH may lead with the WSL System32 stub,
   // which cannot execute these hooks (wrong filesystem view, dropped $1).
   if (process.platform === 'win32') {
     const winBash = probeWindowsBash();
     if (winBash) {
-      let version = 'unknown';
-      try {
-        // spawnSync with discrete argv — never interpolate a discovered path
-        // into a shell string (a PATH dir name may carry cmd metacharacters).
-        const result = spawnSync(winBash, ['--version'], { encoding: 'utf8', timeout: 5000 });
-        const versionMatch = String(result.stdout || '').match(/version\s+([^\s]+)/);
-        if (versionMatch) version = versionMatch[1];
-      } catch { /* keep unknown */ }
+      const version = checkBashVersion((...args) => require('child_process').spawnSync(...args), winBash);
       return { ok: true, path: winBash, version };
     }
     return {
@@ -567,6 +622,7 @@ function compareVersions(a, b) {
 module.exports = {
   checkDeps,
   checkBash,
+  checkBashVersion,
   resolveWindowsBashCandidates,
   autoInstallDeps,
   detectPlatform,

package/lib/doctor.js

@@ -104,18 +104,52 @@ function noteSandboxAttribution(err) {
 }
 
 async function execWithTimeout(cmd, opts = {}) {
-  try {
-    const { stdout, stderr } = await execAsync(cmd, {
-      ...opts,
-      timeout: opts.timeout || EXEC_TIMEOUT_MS,
-    });
-    return { stdout: stdout.trim(), stderr: stderr.trim() };
-  } catch (err) {
-    // #525: a bare null here reads as "tool missing" and has already cost a
-    // misdiagnosis round. Name the sandbox once when it is the sandbox.
-    noteSandboxAttribution(err);
-    return null;
+  // Win32 false-negative guard. Under cmd.exe (exec's shell), a spawned probe
+  // can exit 0 while its stdout never reaches us — measured on this machine:
+  // `node --version` returns exit 0 with an EMPTY stream when many spawns are
+  // in flight at once (doctor's parallel fan-out), while the same command
+  // standalone prints fine in ~300ms. The old code read that empty stream as
+  // "Not found" and red-flagged Node/Git/hooksPath. A version/config probe is
+  // idempotent, so quiet retries distinguish the lost stream from a tool that
+  // genuinely fails. Contract: every caller here runs an IDEMPOTENT probe
+  // (`--version`, `config --get`, `rev-parse`) — a future side-effecting call
+  // site must pass { attempts: 1 } to opt out of the retry below. The option
+  // is consumed here and never forwarded to exec.
+  // Scope note: only the exit-0-with-empty-stream shape is retried. A probe
+  // that exits non-zero is a REAL failure verdict (cmd.exe reports a missing
+  // tool as exit 1 + "'x' is not recognized"), and re-running it would only
+  // burn time, so that path still returns null immediately.
+  const { attempts, ...execOpts } = opts;
+  const maxAttempts = process.platform === 'win32' ? (attempts || 3) : 1;
+  for (let attempt = 0; attempt < maxAttempts; attempt++) {
+    try {
+      const { stdout, stderr } = await execAsync(cmd, {
+        ...execOpts,
+        timeout: execOpts.timeout || EXEC_TIMEOUT_MS,
+      });
+      if (!stdout.trim() && !stderr.trim()) {
+        // Exit-0-but-empty: nothing usable came back. Retry while attempts
+        // remain; report null once they are exhausted, so every caller's
+        // existing null check ("probe produced nothing") applies — an empty
+        // non-null result would read as a present tool with no version.
+        if (attempt + 1 < maxAttempts) {
+          await new Promise(resolve => setTimeout(resolve, 50));
+          continue;
+        }
+        return null;
+      }
+      return { stdout: stdout.trim(), stderr: stderr.trim() };
+    } catch (err) {
+      // #525: a bare null here reads as "tool missing" and has already cost a
+      // misdiagnosis round. Name the sandbox once when it is the sandbox.
+      noteSandboxAttribution(err);
+      return null;
+    }
   }
+  // Exhausted all attempts with exit-0-but-empty streams: report null so every
+  // caller's existing null check ("probe produced nothing usable") applies —
+  // an empty non-null result would read as a present tool with no version.
+  return null;
 }
 
 /**

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-16T13:39:44.004Z",
+  "checked_at": "2026-10-16T16:19:41.473Z",
   "source": "network"
 }

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.27.0",
+  "version": "0.27.1",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.27.0",
+  "version": "0.27.1",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.27.0",
+  "version": "0.27.1",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.27.0",
+  "version": "0.27.1",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.27.0",
+  "version": "0.27.1",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** 0b556f5f
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.