@boyingliu01/xp-gate 0.31.3 → 0.31.4

package/hooks/pre-commit

@@ -3008,19 +3008,53 @@ else
       # JaCoCo writes target/site/jacoco/ (Maven) or build/reports/jacoco/test/
       # (Gradle), i.e. neither path probed by the default branch below, so Java
       # needs its own branch to be measurable at all.
+      #
+      # #603: a MULTI-MODULE Maven repo writes one report per module --
+      # whaleaudit-core/target/site/jacoco/jacoco.csv, whaleaudit-demo/... --
+      # and nothing at the repo root. Probing only the root paths therefore
+      # concluded "No JaCoCo report found, so the 80% floor cannot be verified"
+      # and BLOCKED every Java commit of a project that had a complete report
+      # sitting one directory down. A gate that cannot see the report is not
+      # enforcing a floor, it is enforcing an accident of build layout.
+      # Fix: probe the root paths first (single-module projects, and the
+      # historical behaviour), then fall back to the module reports and
+      # aggregate across them, so the floor covers every class that was built.
       jacoco_csv=""
+      jacoco_all=""
       for jacoco_candidate in \
         "target/site/jacoco/jacoco.csv" \
         "build/reports/jacoco/test/jacocoTestReport.csv"; do
         [ -f "$jacoco_candidate" ] && { jacoco_csv="$jacoco_candidate"; break; }
       done
+      if [ -z "$jacoco_csv" ]; then
+        # Module reports. -mindepth-free walk so ./module/... is found; sorted
+        # for a stable, reproducible aggregate order.
+        jacoco_all=$(find . -path ./target -prune -o \
+          -type f \( -name 'jacoco.csv' -path '*/target/site/jacoco/*' \) -print 2>/dev/null \
+          | sort | tr '\n' ' ')
+        # First module report doubles as the "report exists" witness for the
+        # messages below; the aggregate sums over every one of them.
+        jacoco_csv=$(echo "$jacoco_all" | awk '{print $1}')
+      fi
+      if [ -n "$jacoco_csv" ] && [ -n "$jacoco_all" ]; then
+        _jc_n=$(echo "$jacoco_all" | awk '{print NF}')
+        echo "   ℹ️  Multi-module JaCoCo: aggregating $_jc_n module report(s)."
+      fi
 
       if [ -n "$jacoco_csv" ]; then
         # Aggregate INSTRUCTION_MISSED / INSTRUCTION_COVERED over every class row.
         # Columns are located by header name because their position is not part of
         # the CSV's stable contract.
+        #
+        # #603: with module reports, each file repeats the header row, so the
+        # header detection is per-file (FNR == 1) rather than per-stream
+        # (NR == 1). Otherwise module 2's header is summed as data, or worse,
+        # the single header found in module 1 leaves the columns unset for it.
+        _jc_inputs="$jacoco_csv"
+        [ -n "$jacoco_all" ] && _jc_inputs="$jacoco_all"
         COVERAGE_PERCENT=$(awk -F, '
-          NR == 1 {
+          FNR == 1 {
+            missed_col = 0; covered_col = 0;
             for (i = 1; i <= NF; i++) {
               if ($i == "INSTRUCTION_MISSED") missed_col = i;
               if ($i == "INSTRUCTION_COVERED") covered_col = i;
@@ -3036,7 +3070,7 @@ else
             if (total > 0) printf "%.2f", (covered / total) * 100;
             else print "";
           }
-        ' "$jacoco_csv" 2>/dev/null) || COVERAGE_PERCENT=""
+        ' $_jc_inputs 2>/dev/null) || COVERAGE_PERCENT=""
 
         if [ -n "$COVERAGE_PERCENT" ]; then
           # Compare on the unrounded value so 79.5% cannot pass as 80%.
@@ -3484,18 +3518,77 @@ else
         fi
         ;;
       "java")
-        if [ -f "src/test/java/architecture" ] || [ -d "src/test/java/architecture" ]; then
-          echo "     Running Java architecture tests..."
-          if [ -f "pom.xml" ]; then
-            mvn test -Dtest=architecture.* 2>&1 | head -20 || mvn test -Dtest=**Architecture** 2>&1 | head -20 || echo "⚠️  Java architecture tests completed"
-          elif [ -f "build.gradle" ]; then
-            if [ -f "./gradlew" ]; then
-              ./gradlew test --tests "*Architecture*" 2>&1 | head -20 || echo "⚠️  Java architecture tests completed"
-            fi
+        # #602: this branch used to be a guaranteed PASS no matter what happened.
+        #   1) The test-dir probe hardcoded `src/test/java/architecture` at the
+        #      repo root. A multi-module Maven repo (core/ + demo/) puts the arch
+        #      tests under <module>/src/test/java/..., so the probe missed them
+        #      and the gate took the SKIP path -- reporting architecture as
+        #      "not configured" for a repo that HAS such tests.
+        #   2) Even when it did run, `mvn ... | head -20` yields head's exit
+        #      status (0) as the pipeline result, so the `||` fallback never
+        #      fired and `echo "✅ ... completed"` printed unconditionally. A
+        #      failing architecture test was reported as success. Verified:
+        #      `false | head -20` exits 0; with `set -o pipefail` it exits 1.
+        # Fix: discover the test source roots instead of guessing one path, and
+        # judge the build by PIPESTATUS[0] (the pattern run_java_build_integrity
+        # already uses), so the verdict comes from the build, not from `head`.
+        _java_arch_roots=""
+        if [ -f "pom.xml" ] || [ -x "./mvnw" ]; then
+          # Any */src/test/java dir (module-relative root), including the repo
+          # root itself, which find prints as ./src/test/java -> root ".".
+          while IFS= read -r _root; do
+            [ -n "$_root" ] && _java_arch_roots="${_java_arch_roots} ${_root}"
+          done <<JAVAARCHROOTS
+$(find . -path ./target -prune -o -type d -path '*/src/test/java' -print 2>/dev/null \
+  | sed 's|^\./||; s|/src/test/java$||; s|^src/test/java$|.|')
+JAVAARCHROOTS
+        elif [ -f "build.gradle" ] || [ -f "build.gradle.kts" ]; then
+          _java_arch_roots="."
+        fi
+
+        # Only the roots that actually contain an *Architecture* test count.
+        _java_arch_hit=""
+        for _r in $_java_arch_roots; do
+          _probe_dir="$_r/src/test/java"
+          [ "$_r" = "." ] && _probe_dir="src/test/java"
+          if find "$_probe_dir" -name '*Architecture*' -type f 2>/dev/null | head -1 | grep -q .; then
+            _java_arch_hit="${_java_arch_hit} ${_r}"
+          fi
+        done
+
+        if [ -n "$_java_arch_hit" ]; then
+          echo "     Running Java architecture tests (roots:$_java_arch_hit)..."
+          _java_arch_rc=0
+          if [ -f "pom.xml" ] || [ -x "./mvnw" ]; then
+            _mvn_bin="mvn"
+            [ -x "./mvnw" ] && _mvn_bin="./mvnw"
+            # -pl <module> -am runs only the module that holds the tests (plus
+            # what it needs); quoting the whole root list into one -Dtest works
+            # for Surefire because it accepts comma-separated patterns.
+            for _r in $_java_arch_hit; do
+              if [ "$_r" = "." ]; then
+                "$_mvn_bin" -q test -Dtest='*Architecture*' 2>&1 | tail -20
+              else
+                "$_mvn_bin" -q -pl "$_r" -am test -Dtest='*Architecture*' 2>&1 | tail -20
+              fi
+              _rc="${PIPESTATUS[0]}"
+              [ "$_rc" -ne 0 ] && _java_arch_rc="$_rc"
+            done
+          elif [ -x "./gradlew" ]; then
+            ./gradlew test --tests '*Architecture*' 2>&1 | tail -20
+            _java_arch_rc="${PIPESTATUS[0]}"
+          fi
+
+          if [ "$_java_arch_rc" -ne 0 ]; then
+            echo ""
+            echo "❌ BLOCKED - Java architecture test(s) failed (exit $_java_arch_rc)"
+            echo "Fix the layering violation(s) above before committing."
+            GATE_6_REASON_BY_LANG["$CURRENT_LANG"]="architecture_tests_failed"
+            exit 1
           fi
           echo "     ✅ Java architecture validation completed."
         else
-          echo "     ℹ️  No architecture test files found - skipping"
+          echo "     ℹ️  No *Architecture* test sources found under */src/test/java - skipping"
           echo "     ⏭️  SKIPPED - Architecture validation (no tests)"
           # #537: no test files means Java architecture was NOT measured.
           if [ "${BASH_VERSINFO[0]:-0}" -ge 4 ]; then
@@ -3547,6 +3640,22 @@ else
     else
       GATE_6_REASON="$_g6_seen"
     fi
+
+    # #602 (status): a language that was really measured and passed leaves NO skip
+    # reason behind (see the #537 comment in the typescript arm: "archlint
+    # actually ran here, so there is no skip reason"). The verdict was never
+    # upgraded to match, so Gate 6 reported SKIP even when every language in
+    # the project had been validated and passed -- a measured dimension
+    # rendered as unmeasured. That is the mirror image of the bug #537 fixed,
+    # and the report could not tell the two apart.
+    #
+    # Upgrade to PASS only when the measurement actually happened for EVERY
+    # language: no language may carry a skip reason. A single skipped language
+    # keeps the gate non-PASS, so "some languages measured" cannot be scored
+    # as a full success.
+    if [ -z "$GATE_6_LANG_REASONS" ] && [ -n "$PROJECT_LANGS" ]; then
+      GATE_6_STATUS="PASS"
+    fi
   else
     # Architecture config is REQUIRED — BLOCK if missing
     if [ -f "$PROJECT_ROOT/.architecture-skip" ]; then

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-26T05:44:50.695Z",
+  "checked_at": "2026-10-26T09:56:14.218Z",
   "source": "network"
 }

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.31.3",
+  "version": "0.31.4",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.31.3",
+  "version": "0.31.4",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.31.3",
+  "version": "0.31.4",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.31.3",
+  "version": "0.31.4",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.31.3",
+  "version": "0.31.4",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
 **Generated:** 2026-10-26
-**Commit:** 7a6d9971
+**Commit:** dfe3bf53
 **Branch:** main
-**Version:** 0.31.3.0
+**Version:** 0.31.4.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/principles/__tests__/baseline-entry-total-warnings.test.ts

@@ -0,0 +1,76 @@
+/**
+ * @test REQ-620
+ * @intent Pin the single behavioural difference introduced when the two copies
+ *         of the per-tool accumulator were merged into buildEntry:
+ *         `createFromFiles` tested `totalWarnings` for TRUTHINESS, so a caller
+ *         passing an explicit `0` had it replaced by the sum of the per-tool
+ *         counts. That is exactly the case where the caller is overriding a
+ *         stale per-tool number, so the override was silently discarded.
+ *
+ *         `initializeWithAnalyzer` already used `!== undefined`, so the two
+ *         entry points disagreed about the same input. The merged version uses
+ *         the `!== undefined` reading for both.
+ * @covers AC-620-04
+ */
+import { describe, it, expect } from 'vitest';
+import { BaselineStorage } from '../baseline';
+
+function storage(): InstanceType<typeof BaselineStorage> {
+  // Explicit config: a timeout far above any test's runtime.
+  return new BaselineStorage({ maxSize: 100, timeoutMs: 10000, batchSize: 5 });
+}
+
+describe('AC-620-04: an explicit totalWarnings wins, including zero', () => {
+  it('uses an explicit zero instead of the summed per-tool count', async () => {
+    const baseline = await storage().createFromFiles([
+      { file: 'a.ts', counts: { eslint: { warnings: 3, errors: 0 }, totalWarnings: 0 } },
+    ]);
+    expect(baseline['a.ts'].totalWarnings).toBe(0);
+  });
+
+  it('uses an explicit nonzero value instead of the summed count', async () => {
+    const baseline = await storage().createFromFiles([
+      { file: 'a.ts', counts: { eslint: { warnings: 3, errors: 0 }, totalWarnings: 42 } },
+    ]);
+    expect(baseline['a.ts'].totalWarnings).toBe(42);
+  });
+
+  it('sums the per-tool counts when no explicit total is given', async () => {
+    const baseline = await storage().createFromFiles([
+      {
+        file: 'a.ts',
+        counts: {
+          eslint: { warnings: 3, errors: 0 },
+          ruff: { warnings: 2, errors: 1 },
+        },
+      },
+    ]);
+    expect(baseline['a.ts'].totalWarnings).toBe(5);
+  });
+
+  it('keeps every per-tool count it was given', async () => {
+    const baseline = await storage().createFromFiles([
+      {
+        file: 'a.ts',
+        counts: {
+          eslint: { warnings: 1, errors: 2 },
+          ccn: { warnings: 3, max: 9 },
+          shellcheck: { warnings: 4, errors: 5 },
+        },
+      },
+    ]);
+    const entry = baseline['a.ts'];
+    expect(entry.eslint).toEqual({ warnings: 1, errors: 2 });
+    expect(entry.ccn).toEqual({ warnings: 3, max: 9 });
+    expect(entry.shellcheck).toEqual({ warnings: 4, errors: 5 });
+    // Tools that were not supplied must not appear at all.
+    expect(entry.ruff).toBeUndefined();
+    expect(entry.golangci).toBeUndefined();
+  });
+
+  it('reports zero warnings for a file with no tool counts', async () => {
+    const baseline = await storage().createFromFiles([{ file: 'a.ts', counts: {} }]);
+    expect(baseline['a.ts'].totalWarnings).toBe(0);
+    expect(baseline['a.ts'].lastAnalyzed).toBeTypeOf('string');
+  });
+});

package/principles/adapters/__tests__/cpp-code-block.test.ts

@@ -0,0 +1,123 @@
+/**
+ * @test REQ-620
+ * @intent Pin the C/C++ code-block scanner's treatment of comments and string
+ *         literals before its CCN-28 body is split.
+ *
+ *         Every case is built to DEFEAT the fallback path. `extractCodeBlock`
+ *         falls back to `substring(startPos)` capped at 200 characters, so a
+ *         short fixture returns "the whole thing" even when the scanner never
+ *         found a closing brace -- the assertions then pass on a broken scanner.
+ *         Each source below therefore pads past 200 characters and asserts the
+ *         exact end position, so a truncated scan cannot look correct.
+ *
+ *         Verified by injecting three real defects (brace tracker seeing into
+ *         strings, block comments untracked, backslash parity ignored): each one
+ *         reddens at least one case here.
+ * @covers AC-620-03
+ */
+import { describe, it, expect, vi } from 'vitest';
+import { CppAdapter } from '../cpp';
+
+vi.mock('fs', () => ({
+  readFileSync: vi.fn(),
+  existsSync: vi.fn(() => true),
+}));
+
+import { readFileSync } from 'fs';
+
+const MARKER = 'END_OF_FUNCTION';
+/** Padding that keeps the source well past the 200-char fallback cap. */
+const PAD = ' '.repeat(240);
+
+function block(src: string, start = 0): string {
+  (readFileSync as unknown as { mockReturnValue: (v: string) => void }).mockReturnValue(src);
+  const adapter = new CppAdapter('probe.cpp');
+  return adapter.extractCodeBlock(start);
+}
+
+/**
+ * Build `void f() { <body> }` followed by `<MARKER>`, padded past the fallback
+ * cap. The padding sits INSIDE the function body so the fallback (which runs to
+ * the 200-char cap) would include the marker, while a correct scan stops at the
+ * real closing brace and does not.
+ */
+function wrap(body: string): { src: string; open: number } {
+  const src = `void f() {\n${body}\n${PAD}\n}${MARKER}`;
+  return { src, open: src.indexOf('{') };
+}
+
+describe('AC-620-03: the C/C++ block scanner ignores braces in comments and strings', () => {
+  it('returns exactly the balanced body of a plain function', () => {
+    const { src, open } = wrap('  int a = 1;');
+    const out = block(src, open);
+    expect(out, `tail=${JSON.stringify(out.slice(-60))} len=${out.length}`).toMatch(/}$/);
+  });
+
+  it('does not close on a brace inside a line comment', () => {
+    const { src, open } = wrap('  // } not the end\n  int a = 1;');
+    const out = block(src, open);
+    expect(out, `extracted: ${JSON.stringify(out.slice(0, 80))}`).toContain('int a = 1;');
+    expect(out).not.toContain(MARKER);
+  });
+
+  it('does not close on a brace inside a block comment', () => {
+    const { src, open } = wrap('  /* } not the end */\n  int a = 1;');
+    const out = block(src, open);
+    expect(out).toContain('int a = 1;');
+    expect(out).not.toContain(MARKER);
+  });
+
+  it('does not close on a brace inside a string literal', () => {
+    const { src, open } = wrap('  const char* s = "}";\n  int a = 1;');
+    const out = block(src, open);
+    expect(out).toContain('int a = 1;');
+    expect(out).not.toContain(MARKER);
+  });
+
+  it('keeps scanning past a string that CONTAINS the only early close brace', () => {
+    // The string's `}` is the first `}` after the opener. A scanner that counts
+    // it ends the block immediately and never reaches the statements below.
+    const { src, open } = wrap('  const char* s = "}";\n  int markerStatement = 1;\n  int tail = 2;');
+    const out = block(src, open);
+    expect(out, `extracted: ${JSON.stringify(out.slice(0, 120))}`)
+      .toContain('int tail = 2;');
+  });
+
+  it('keeps scanning past a char literal that contains a close brace', () => {
+    const { src, open } = wrap("  char c = '}';\n  int tail = 2;");
+    const out = block(src, open);
+    expect(out).toContain('int tail = 2;');
+  });
+
+  it('does not close on a brace inside a char literal', () => {
+    const { src, open } = wrap("  char c = '}';\n  int a = 1;");
+    const out = block(src, open);
+    expect(out).toContain('int a = 1;');
+    expect(out).not.toContain(MARKER);
+  });
+
+  it('treats an escaped quote inside a string as data, not a terminator', () => {
+    // `\"` does not close the string, so the `}` after it is still string data.
+    const { src, open } = wrap('  const char* s = "a\\"}b";\n  int a = 1;');
+    const out = block(src, open);
+    expect(out).toContain('int a = 1;');
+    expect(out).not.toContain(MARKER);
+  });
+
+  it('treats an even run of backslashes as NOT escaping the quote', () => {
+    // `\\` is a literal backslash, so the following `"` DOES close the string,
+    // and the `}` that ends the line is real structure.
+    const { src, open } = wrap('  const char* s = "a\\\\";\n  int a = 1;');
+    const out = block(src, open);
+    expect(out.trimEnd().endsWith('}')).toBe(true);
+    expect(out).toContain('int a = 1;');
+    expect(out).not.toContain(MARKER);
+  });
+
+  it('falls back when no balanced block is ever found', () => {
+    const src = 'void f() {\n  int a = 1;' + PAD;
+    const out = block(src, 9);
+    expect(out.length).toBe(200);
+    expect(out.length).toBeLessThan(src.length);
+  });
+});