@boyingliu01/xp-gate 0.32.3 → 0.33.1

package/lib/__tests__/uninstall.test.js

@@ -309,6 +309,24 @@ describe('uninstall', () => {
     expect(cfg.uninstalled).toBeDefined();
   });
 
+  it('AC-02: uninstall in global mode unsets even when git returns a forward-slash path (#656)', async () => {
+    // Windows: git returns "C:/Users/.../hooks" while expectedPath uses
+    // backslashes. A raw === skipped the unset, leaving a dangling hooksPath.
+    setupGlobalInstall();
+    const expectedHooksPath = globalHooksDir();
+    mockExecGlobalHooksPath(expectedHooksPath.replace(/\\/g, '/'));
+    const { uninstall } = require('../uninstall');
+
+    const result = await uninstall([]);
+
+    expect(result).toBe(0);
+    expect(execSpy).toHaveBeenCalledWith(
+      expect.stringContaining('git config --global --unset core.hooksPath'),
+      expect.any(Object)
+    );
+    expect(warnSpy).not.toHaveBeenCalledWith(expect.stringContaining('does not match'));
+  });
+
   it('AC-02: uninstall in global mode skips unset when hooksPath does not match', async () => {
     setupGlobalInstall();
     mockExecGlobalHooksPath('/some/other/path');

package/lib/check.js

@@ -13,13 +13,15 @@ function resolveGateToken(token) {
 }
 
 function parseCheckArgs(args) {
-  const flags = { all: false, list: false, gateIds: null };
+  const flags = { all: false, list: false, gateIds: null, changed: false, brief: false };
   const posArgs = [];
   let i = 0;
   while (i < args.length) {
     const arg = args[i];
     if (arg === '--all') { flags.all = true; i++; }
     else if (arg === '--list') { flags.list = true; i++; }
+    else if (arg === '--changed') { flags.changed = true; i++; }
+    else if (arg === '--brief') { flags.brief = true; i++; }
     else if (arg === '--gates' && i + 1 < args.length) {
       flags.gateIds = args[i + 1].split(',').map(s => s.trim()).filter(Boolean);
       i += 2;
@@ -41,11 +43,31 @@ function parseCheckArgs(args) {
   };
 }
 
+/**
+ * Coerce a runGate() verdict into a valid process exit code (#657). The only
+ * non-numeric verdict is GATE_NOT_RUN (a string sentinel meaning "did not run");
+ * it must become 0, because a gate that honestly reported nothing to analyse is
+ * not a failure — and passing the string to process.exit() crashes Node.
+ * @param {number|string} verdict
+ * @returns {number}
+ */
+function normalizeGateExit(verdict) {
+  return typeof verdict === 'number' ? verdict : 0;
+}
+
 async function check(args) {
   const opts = parseCheckArgs(args);
 
   if (opts.list) return listGates();
-  if (opts.gateNumber && !opts.all && !opts.gateIds) return runGate(opts.gateNumber, opts.pathArg);
+  if (opts.changed) return runChangedBrief();
+  // #657: runGate() can return the GATE_NOT_RUN sentinel (a string) when a gate
+  // has no module/fallback. Returning it straight to the caller let it reach
+  // process.exit(), which throws ERR_INVALID_ARG_TYPE and dumps a stack trace.
+  // Map it to exit 0 here (the gate honestly reported "did not run"); a real
+  // failure code passes through unchanged.
+  if (opts.gateNumber && !opts.all && !opts.gateIds) {
+    return normalizeGateExit(await runGate(opts.gateNumber, opts.pathArg));
+  }
   if (opts.all) return checkAllGates(opts.pathArg);
   if (opts.gateIds && opts.gateIds.length > 0) return runGatesByIds(opts.gateIds, opts.pathArg);
 
@@ -55,6 +77,7 @@ async function check(args) {
     console.error('Options:');
     console.error('  --gates <ids>    Run specific gates (comma-separated IDs or aliases, e.g. "version,4,secrets")');
     console.error('  --all             Run all invokable gates');
+    console.error('  --changed --brief Fast: run only the gates the current diff can trip, one-screen summary');
     console.error('  --list            List all available gates');
     console.error('');
     console.error('Available Gates:');
@@ -68,6 +91,7 @@ async function check(args) {
     console.error('  xp-gate check secrets                           # Run Gate 8 via alias');
     console.error('  xp-gate check . --gates version,4,secrets       # Run gates 0, 4, and 8');
     console.error('  xp-gate check . --all                           # Run all invokable gates');
+    console.error('  xp-gate check . --changed --brief               # Fast: only what this diff trips');
     console.error('  xp-gate check --list                            # List available gates');
     return 1;
   }
@@ -174,6 +198,7 @@ async function checkAllGates(target) {
 
 async function runGatesByIds(gateIds, target) {
   let failures = 0;
+  let skipped = 0;
   let ran = 0;
   const resolvedGates = [];
   const unknown = [];
@@ -196,8 +221,10 @@ async function runGatesByIds(gateIds, target) {
   }
 
   for (const resolvedId of resolvedGates) {
+    // #618/#657: a NOT_RUN sentinel is a skip, not a pass and not a failure.
     const code = await runGate(resolvedId, target);
-    if (code !== 0) failures += 1;
+    if (code === GATE_NOT_RUN) skipped += 1;
+    else if (code !== 0) failures += 1;
     ran += 1;
     console.log('');
   }
@@ -208,7 +235,115 @@ async function runGatesByIds(gateIds, target) {
     return 1;
   }
 
-  console.log(`[xp-gate check] ${ran - failures}/${ran} gate(s) passed`);
+  const tally = { passed: ran - failures - skipped, failed: failures, warned: 0, skipped, total: ran };
+  console.log(`[xp-gate check] ${formatGateTally(tally)}`);
+  return failures === 0 ? 0 : 1;
+}
+
+/**
+ * Fast "what will this commit trip?" view (P1-4, diagnosis 2026-10-30).
+ *
+ * `check . --all` runs the whole tree (minutes). During BUILD the developer only
+ * needs to know which blocking rules the CURRENT diff touches, in one screen and
+ * in seconds. This maps the diff to the gates that read changed files and runs
+ * only those, so the common case (docs / a couple of sources) returns fast.
+ *
+ * Honest by construction: prints only gate->verdict, never implying a gate ran
+ * when it was skipped. Gates not modelled here are listed as "commit-time".
+ */
+
+/** Extension of a path, lowercased, without the dot ('' when none). */
+function fileExtension(file) {
+  const m = /\.([a-z0-9]+)$/i.exec(file);
+  return m ? m[1].toLowerCase() : '';
+}
+
+/** Wall-clock budget for one `git diff` used by the --changed resolver. */
+const GIT_DIFF_TIMEOUT_MS = 10000;
+
+/**
+ * Run one git diff and split its stdout into file names. Returns null ONLY for a
+ * failed diff (not a git repo); any git error is caught and mapped to null so the
+ * caller can report "not a repository" instead of crashing on a null status.
+ */
+function gitChangedNames(spawnSync, args) {
+  try {
+    const res = spawnSync('git', args, { encoding: 'utf-8', timeout: GIT_DIFF_TIMEOUT_MS });
+    if (res.status !== 0 || typeof res.stdout !== 'string') return null;
+    return res.stdout.split('\n').map((f) => f.trim()).filter(Boolean);
+  } catch {
+    return null;
+  }
+}
+
+/** Diff scope mirrors pre-commit: staged first, then anything vs HEAD. */
+function readChangedFiles() {
+  const { spawnSync } = require('child_process');
+  const staged = gitChangedNames(spawnSync, ['diff', '--cached', '--name-only', '--diff-filter=ACM']);
+  if (staged === null) return null;
+  if (staged.length > 0) return staged;
+  const vsHead = gitChangedNames(spawnSync, ['diff', 'HEAD', '--name-only', '--diff-filter=ACM']);
+  return vsHead === null ? staged : vsHead;
+}
+
+/**
+ * Run the gates a diff can trip that are both diff-scoped and fast. Gate 2
+ * (jscpd) is excluded on purpose: it scans the whole tree and duplicate
+ * detection is a codebase-wide question, not a per-diff one. Gate 4 is handed the
+ * actual files — calling it with '.' examined 0 files and printed a vacuous
+ * "No violations found", the exact anti-pattern this project forbids.
+ */
+async function runBriefGates(sourceFiles) {
+  const results = [];
+  if (sourceFiles.length === 0) return results;
+  results.push({ id: '3', code: await runGate('3', '.', {}) });
+  const { principles } = require('./principles.js');
+  results.push({ id: '4', code: await principles(sourceFiles) });
+  return results;
+}
+
+const BRIEF_GATE_NAMES = { '2': 'Duplicates', '3': 'Complexity', '4': 'Principles' };
+const COMMIT_TIME_GATES = ['1 lint', '5 tests', '6 Boy Scout', '7 IaC', '8 secrets', '9 sast', '10 build', '11 sprint'];
+
+/** Print the one-screen summary; returns the number of blocking gates. */
+function printBriefSummary(changed, sourceFiles, results, ms) {
+  console.log('');
+  console.log(`━━━ xp-gate check --changed (${changed.length} file(s), ${sourceFiles.length} source) ━━━`);
+  if (sourceFiles.length === 0) {
+    console.log('  No source files changed — no blocking source gate applies (docs/config only).');
+  }
+  let failures = 0;
+  for (const r of results) {
+    let verdict;
+    if (r.code === 0) verdict = 'PASS';
+    else if (r.code === 'NOT_RUN') verdict = 'SKIP';
+    else { verdict = 'BLOCK'; failures += 1; }
+    console.log(`  Gate ${r.id} ${(BRIEF_GATE_NAMES[r.id] || r.id).padEnd(12)} ${verdict}`);
+  }
+  const rest = sourceFiles.length > 0 ? COMMIT_TIME_GATES.filter((g) => !/^(1 |5 |6 )/.test(g)) : COMMIT_TIME_GATES;
+  console.log(`  commit-time (not run here): ${rest.join(', ')}`);
+  console.log(`  ${failures === 0 ? '✅ clear' : `❌ ${failures} blocking`} — ${ms} ms`);
+  return failures;
+}
+
+async function runChangedBrief() {
+  const { SOURCE_FILE_EXTENSIONS } = require('./gate-runner.js');
+  const t0 = Date.now();
+
+  const changed = readChangedFiles();
+  if (changed === null) {
+    console.error('[xp-gate check --changed] not a git repository');
+    return 1;
+  }
+  if (changed.length === 0) {
+    console.log('[xp-gate check --changed] no staged/tracked changes — nothing to gate (0 files).');
+    return 0;
+  }
+
+  const srcExt = new Set(SOURCE_FILE_EXTENSIONS);
+  const sourceFiles = changed.filter((f) => srcExt.has(fileExtension(f)));
+  const results = await runBriefGates(sourceFiles);
+  const failures = printBriefSummary(changed, sourceFiles, results, Date.now() - t0);
   return failures === 0 ? 0 : 1;
 }
 
@@ -244,4 +379,4 @@ function listGates() {
   return 0;
 }
 
-module.exports = { check, checkAllGates, formatGateTally };
+module.exports = { check, checkAllGates, formatGateTally, runChangedBrief, fileExtension, printBriefSummary, normalizeGateExit };

package/lib/gate-runner.js

@@ -252,7 +252,12 @@ function runGateAdapter(scriptPath, cwd = process.cwd(), opts = {}) {
     execFileSync(
       bashCommand,
       ['--noprofile', '--norc', '-c', wrap, 'xp-gate', commonScript, nowMsScript, scriptPath, process.execPath, listFile],
-      { stdio: 'inherit', cwd }
+      // #660: the pre-commit hook exports GATE_DIR before sourcing a fragment, but
+      // the CLI path never did, so gate-3.sh looked for $GATE_DIR/lib/ccn-ratchet.sh
+      // (empty), fell back to <repo>/githooks/lib, and falsely BLOCKED on any
+      // project without vendored gates. The fragment lives beside its lib/, so
+      // point GATE_DIR at its own directory.
+      { stdio: 'inherit', cwd, env: { ...process.env, GATE_DIR: scriptDir } }
     );
   } finally {
     removeFileList(listFile);

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-30T11:58:38.831Z",
+  "checked_at": "2026-10-30T12:42:58.890Z",
   "source": "network"
 }

package/lib/shared-utils.js

@@ -37,7 +37,12 @@ function copyHooks(srcDir, destDir) {
   // post-commit carries the audit-attribution flush and --no-verify detection.
   // It was absent here, so neither ever ran for installed users (the source
   // existed but no installer copied it).
-  ['pre-commit', 'pre-push', 'post-commit', 'post-merge'].forEach(hook => {
+  //
+  // hook-module-resolution.sh (#655/#631) is loaded by pre-commit BEFORE any tier
+  // decision and fails closed — omitting it made every commit FATAL on a fresh
+  // install. It is generated, but it must still ship beside the hooks.
+  const hookFiles = ['pre-commit', 'pre-push', 'post-commit', 'post-merge', 'hook-module-resolution.sh'];
+  hookFiles.forEach(hook => {
     const src = path.join(srcDir, 'hooks', hook);
     const dest = path.join(destDir, hook);
     if (fs.existsSync(src)) {

package/lib/uninstall.js

@@ -333,7 +333,11 @@ function unsetGitConfigIfMatch(item) {
     console.log(`  ${item.label} — not set`);
     return true;
   }
-  if (currentPath === item.expectedPath) {
+  // #656: git returns a forward-slash path ("C:/Users/.../hooks"), while
+  // item.expectedPath is built with path.join (backslashes on Windows). A raw
+  // === compares these as different and the unset is silently skipped, leaving
+  // a dangling core.hooksPath. Normalize both sides to an absolute, real path.
+  if (sameHooksPath(currentPath, item.expectedPath)) {
     unsetHooksPath();
     console.log(`  Unset ${item.label}`);
     return true;
@@ -342,6 +346,22 @@ function unsetGitConfigIfMatch(item) {
   return false;
 }
 
+/**
+ * True when two hook-directory paths refer to the same location (#656), tolerant
+ * of forward/back slashes, trailing separators, and case differences on Windows.
+ * @param {string} a
+ * @param {string} b
+ * @returns {boolean}
+ */
+function sameHooksPath(a, b) {
+  const norm = (p) => {
+    let r = path.resolve(p);
+    try { r = fs.realpathSync.native(r); } catch { /* path need not exist */ }
+    return process.platform === 'win32' ? r.toLowerCase() : r;
+  };
+  return norm(a) === norm(b);
+}
+
 /**
  * Execute a single plan item (file/dir/gitconfig).
  * @returns {boolean} true on success, false on skip/failure

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.32.3",
+  "version": "0.33.1",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "bin/xp-gate.js"
@@ -10,6 +10,7 @@
     "hooks/",
     "adapters/",
     "lib/",
+    "gates/",
     "skills/",
     "plugins/",
     "dsh.bundle.patch.yml",

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.32.3",
+  "version": "0.33.1",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/sprint-flow/references/phase-3-build.md

@@ -22,6 +22,32 @@
 
 ---
 
+## 提交前自检清单（P1 红线前移 — 2026-10-30，直接解 #652）
+
+> 背景：47.6% 的提交是 fix/revert（323/679）。多数返工是"提交时才被门禁打回"——
+> 红线原本只活在 `githooks/` 里，AI 在 BUILD 期间看不到。这一页把会**阻断提交**的
+> 阈值提前到编码时自检，目标是"第一次提交就过"，而不是"提交→被打回→改→再提交"。
+
+**每次准备 `git commit` 前，逐条自检（按被拦频率排序）：**
+
+| # | 门禁 | 红线（会被 BLOCK/WARN 的硬阈值） | 自查方法 |
+|---|------|------------------------------|----------|
+| 1 | **Gate 3 CCN** | 单函数圈复杂度 **>10 BLOCK**、**>5 WARN** | 拆函数 / 早返回 / 抽策略表；`xp-gate check 3 <file>` |
+| 2 | **Gate 6 Boy Scout** | **新文件 0 warning**；修改文件 warning 数不得高于 `.warnings-baseline.json`；**单函数 ≤50 行**；**嵌套 ≤4 层** | 新文件当"零容忍"写；改动前 `xp-gate check 6` 看基线 |
+| 3 | **Gate 2 重复代码** | jscpd 相似度 **>5% BLOCK** | 抽公共函数，别复制粘贴；`xp-gate check 2 <dir>` |
+| 4 | **Gate 4 Principles** | 14 条 Clean Code/SOLID 规则，任一 error/warning 即拦（按 `.principlesrc`） | `xp-gate check 4 <file>`；避免超长参数表、空 catch、`as any` |
+| 5 | **Gate 1 Lint** | 适配器 lint 任一 error | 提交前跑一次项目 lint；不要留未用变量/导入 |
+| 6 | **Gate 5 测试** | 测试全绿 + 覆盖率 ≥80%（新 .ts/.tsx 无测试直接 BLOCK） | 新代码先写测试（TDD）；`npx vitest run <file>` |
+| 7 | **mirror/sync 纪律** | 改 `githooks/` 或 `skills/` 后必须 `node src/npm-package/scripts/sync-package-content.js --fix` 且 `bash scripts/check-hook-mirror.sh` 报 PASS | 忘了同步会在 pre-push 的 mirror 校验被打回 |
+
+**一条命令抢先看**：`xp-gate check . --changed --brief` 只跑"本次 diff 会触发的门禁"，
+一屏出 PASS/SKIP/BLOCK，目标 <5 s。把它放在 ralph-loop 每个 REQ 的 step 0，先看红不红，
+再决定是否继续写——而不是写到一半才被 `git commit` 拦下。
+
+**根因提醒**：Gate 3/6 是"返工双雄"。写完一个函数先扫一眼长度和嵌套，比提交后返工快得多。
+
+---
+
 ## BUILD Entry Contract Check (MANDATORY — v0.18.0+, 程序化)
 
 **Purpose**: Validate `slices-manifest.json` schema and slice↔REQ cross-artifact consistency before entering BUILD.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.32.3",
+  "version": "0.33.1",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/sprint-flow/references/phase-3-build.md

@@ -22,6 +22,32 @@
 
 ---
 
+## 提交前自检清单（P1 红线前移 — 2026-10-30，直接解 #652）
+
+> 背景：47.6% 的提交是 fix/revert（323/679）。多数返工是"提交时才被门禁打回"——
+> 红线原本只活在 `githooks/` 里，AI 在 BUILD 期间看不到。这一页把会**阻断提交**的
+> 阈值提前到编码时自检，目标是"第一次提交就过"，而不是"提交→被打回→改→再提交"。
+
+**每次准备 `git commit` 前，逐条自检（按被拦频率排序）：**
+
+| # | 门禁 | 红线（会被 BLOCK/WARN 的硬阈值） | 自查方法 |
+|---|------|------------------------------|----------|
+| 1 | **Gate 3 CCN** | 单函数圈复杂度 **>10 BLOCK**、**>5 WARN** | 拆函数 / 早返回 / 抽策略表；`xp-gate check 3 <file>` |
+| 2 | **Gate 6 Boy Scout** | **新文件 0 warning**；修改文件 warning 数不得高于 `.warnings-baseline.json`；**单函数 ≤50 行**；**嵌套 ≤4 层** | 新文件当"零容忍"写；改动前 `xp-gate check 6` 看基线 |
+| 3 | **Gate 2 重复代码** | jscpd 相似度 **>5% BLOCK** | 抽公共函数，别复制粘贴；`xp-gate check 2 <dir>` |
+| 4 | **Gate 4 Principles** | 14 条 Clean Code/SOLID 规则，任一 error/warning 即拦（按 `.principlesrc`） | `xp-gate check 4 <file>`；避免超长参数表、空 catch、`as any` |
+| 5 | **Gate 1 Lint** | 适配器 lint 任一 error | 提交前跑一次项目 lint；不要留未用变量/导入 |
+| 6 | **Gate 5 测试** | 测试全绿 + 覆盖率 ≥80%（新 .ts/.tsx 无测试直接 BLOCK） | 新代码先写测试（TDD）；`npx vitest run <file>` |
+| 7 | **mirror/sync 纪律** | 改 `githooks/` 或 `skills/` 后必须 `node src/npm-package/scripts/sync-package-content.js --fix` 且 `bash scripts/check-hook-mirror.sh` 报 PASS | 忘了同步会在 pre-push 的 mirror 校验被打回 |
+
+**一条命令抢先看**：`xp-gate check . --changed --brief` 只跑"本次 diff 会触发的门禁"，
+一屏出 PASS/SKIP/BLOCK，目标 <5 s。把它放在 ralph-loop 每个 REQ 的 step 0，先看红不红，
+再决定是否继续写——而不是写到一半才被 `git commit` 拦下。
+
+**根因提醒**：Gate 3/6 是"返工双雄"。写完一个函数先扫一眼长度和嵌套，比提交后返工快得多。
+
+---
+
 ## BUILD Entry Contract Check (MANDATORY — v0.18.0+, 程序化)
 
 **Purpose**: Validate `slices-manifest.json` schema and slice↔REQ cross-artifact consistency before entering BUILD.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.32.3",
+  "version": "0.33.1",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/sprint-flow/references/phase-3-build.md

@@ -22,6 +22,32 @@
 
 ---
 
+## 提交前自检清单（P1 红线前移 — 2026-10-30，直接解 #652）
+
+> 背景：47.6% 的提交是 fix/revert（323/679）。多数返工是"提交时才被门禁打回"——
+> 红线原本只活在 `githooks/` 里，AI 在 BUILD 期间看不到。这一页把会**阻断提交**的
+> 阈值提前到编码时自检，目标是"第一次提交就过"，而不是"提交→被打回→改→再提交"。
+
+**每次准备 `git commit` 前，逐条自检（按被拦频率排序）：**
+
+| # | 门禁 | 红线（会被 BLOCK/WARN 的硬阈值） | 自查方法 |
+|---|------|------------------------------|----------|
+| 1 | **Gate 3 CCN** | 单函数圈复杂度 **>10 BLOCK**、**>5 WARN** | 拆函数 / 早返回 / 抽策略表；`xp-gate check 3 <file>` |
+| 2 | **Gate 6 Boy Scout** | **新文件 0 warning**；修改文件 warning 数不得高于 `.warnings-baseline.json`；**单函数 ≤50 行**；**嵌套 ≤4 层** | 新文件当"零容忍"写；改动前 `xp-gate check 6` 看基线 |
+| 3 | **Gate 2 重复代码** | jscpd 相似度 **>5% BLOCK** | 抽公共函数，别复制粘贴；`xp-gate check 2 <dir>` |
+| 4 | **Gate 4 Principles** | 14 条 Clean Code/SOLID 规则，任一 error/warning 即拦（按 `.principlesrc`） | `xp-gate check 4 <file>`；避免超长参数表、空 catch、`as any` |
+| 5 | **Gate 1 Lint** | 适配器 lint 任一 error | 提交前跑一次项目 lint；不要留未用变量/导入 |
+| 6 | **Gate 5 测试** | 测试全绿 + 覆盖率 ≥80%（新 .ts/.tsx 无测试直接 BLOCK） | 新代码先写测试（TDD）；`npx vitest run <file>` |
+| 7 | **mirror/sync 纪律** | 改 `githooks/` 或 `skills/` 后必须 `node src/npm-package/scripts/sync-package-content.js --fix` 且 `bash scripts/check-hook-mirror.sh` 报 PASS | 忘了同步会在 pre-push 的 mirror 校验被打回 |
+
+**一条命令抢先看**：`xp-gate check . --changed --brief` 只跑"本次 diff 会触发的门禁"，
+一屏出 PASS/SKIP/BLOCK，目标 <5 s。把它放在 ralph-loop 每个 REQ 的 step 0，先看红不红，
+再决定是否继续写——而不是写到一半才被 `git commit` 拦下。
+
+**根因提醒**：Gate 3/6 是"返工双雄"。写完一个函数先扫一眼长度和嵌套，比提交后返工快得多。
+
+---
+
 ## BUILD Entry Contract Check (MANDATORY — v0.18.0+, 程序化)
 
 **Purpose**: Validate `slices-manifest.json` schema and slice↔REQ cross-artifact consistency before entering BUILD.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.32.3",
+  "version": "0.33.1",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** e5ca7d9d
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.32.3.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.