@boyingliu01/xp-gate 0.33.0 → 0.33.1

package/lib/check.js

@@ -43,12 +43,31 @@ function parseCheckArgs(args) {
   };
 }
 
+/**
+ * Coerce a runGate() verdict into a valid process exit code (#657). The only
+ * non-numeric verdict is GATE_NOT_RUN (a string sentinel meaning "did not run");
+ * it must become 0, because a gate that honestly reported nothing to analyse is
+ * not a failure — and passing the string to process.exit() crashes Node.
+ * @param {number|string} verdict
+ * @returns {number}
+ */
+function normalizeGateExit(verdict) {
+  return typeof verdict === 'number' ? verdict : 0;
+}
+
 async function check(args) {
   const opts = parseCheckArgs(args);
 
   if (opts.list) return listGates();
   if (opts.changed) return runChangedBrief();
-  if (opts.gateNumber && !opts.all && !opts.gateIds) return runGate(opts.gateNumber, opts.pathArg);
+  // #657: runGate() can return the GATE_NOT_RUN sentinel (a string) when a gate
+  // has no module/fallback. Returning it straight to the caller let it reach
+  // process.exit(), which throws ERR_INVALID_ARG_TYPE and dumps a stack trace.
+  // Map it to exit 0 here (the gate honestly reported "did not run"); a real
+  // failure code passes through unchanged.
+  if (opts.gateNumber && !opts.all && !opts.gateIds) {
+    return normalizeGateExit(await runGate(opts.gateNumber, opts.pathArg));
+  }
   if (opts.all) return checkAllGates(opts.pathArg);
   if (opts.gateIds && opts.gateIds.length > 0) return runGatesByIds(opts.gateIds, opts.pathArg);
 
@@ -179,6 +198,7 @@ async function checkAllGates(target) {
 
 async function runGatesByIds(gateIds, target) {
   let failures = 0;
+  let skipped = 0;
   let ran = 0;
   const resolvedGates = [];
   const unknown = [];
@@ -201,8 +221,10 @@ async function runGatesByIds(gateIds, target) {
   }
 
   for (const resolvedId of resolvedGates) {
+    // #618/#657: a NOT_RUN sentinel is a skip, not a pass and not a failure.
     const code = await runGate(resolvedId, target);
-    if (code !== 0) failures += 1;
+    if (code === GATE_NOT_RUN) skipped += 1;
+    else if (code !== 0) failures += 1;
     ran += 1;
     console.log('');
   }
@@ -213,7 +235,8 @@ async function runGatesByIds(gateIds, target) {
     return 1;
   }
 
-  console.log(`[xp-gate check] ${ran - failures}/${ran} gate(s) passed`);
+  const tally = { passed: ran - failures - skipped, failed: failures, warned: 0, skipped, total: ran };
+  console.log(`[xp-gate check] ${formatGateTally(tally)}`);
   return failures === 0 ? 0 : 1;
 }
 
@@ -356,4 +379,4 @@ function listGates() {
   return 0;
 }
 
-module.exports = { check, checkAllGates, formatGateTally, runChangedBrief, fileExtension, printBriefSummary };
+module.exports = { check, checkAllGates, formatGateTally, runChangedBrief, fileExtension, printBriefSummary, normalizeGateExit };

package/lib/gate-runner.js

@@ -252,7 +252,12 @@ function runGateAdapter(scriptPath, cwd = process.cwd(), opts = {}) {
     execFileSync(
       bashCommand,
       ['--noprofile', '--norc', '-c', wrap, 'xp-gate', commonScript, nowMsScript, scriptPath, process.execPath, listFile],
-      { stdio: 'inherit', cwd }
+      // #660: the pre-commit hook exports GATE_DIR before sourcing a fragment, but
+      // the CLI path never did, so gate-3.sh looked for $GATE_DIR/lib/ccn-ratchet.sh
+      // (empty), fell back to <repo>/githooks/lib, and falsely BLOCKED on any
+      // project without vendored gates. The fragment lives beside its lib/, so
+      // point GATE_DIR at its own directory.
+      { stdio: 'inherit', cwd, env: { ...process.env, GATE_DIR: scriptDir } }
     );
   } finally {
     removeFileList(listFile);

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-30T12:14:24.278Z",
+  "checked_at": "2026-10-30T12:42:58.890Z",
   "source": "network"
 }

package/lib/shared-utils.js

@@ -37,7 +37,12 @@ function copyHooks(srcDir, destDir) {
   // post-commit carries the audit-attribution flush and --no-verify detection.
   // It was absent here, so neither ever ran for installed users (the source
   // existed but no installer copied it).
-  ['pre-commit', 'pre-push', 'post-commit', 'post-merge'].forEach(hook => {
+  //
+  // hook-module-resolution.sh (#655/#631) is loaded by pre-commit BEFORE any tier
+  // decision and fails closed — omitting it made every commit FATAL on a fresh
+  // install. It is generated, but it must still ship beside the hooks.
+  const hookFiles = ['pre-commit', 'pre-push', 'post-commit', 'post-merge', 'hook-module-resolution.sh'];
+  hookFiles.forEach(hook => {
     const src = path.join(srcDir, 'hooks', hook);
     const dest = path.join(destDir, hook);
     if (fs.existsSync(src)) {

package/lib/uninstall.js

@@ -333,7 +333,11 @@ function unsetGitConfigIfMatch(item) {
     console.log(`  ${item.label} — not set`);
     return true;
   }
-  if (currentPath === item.expectedPath) {
+  // #656: git returns a forward-slash path ("C:/Users/.../hooks"), while
+  // item.expectedPath is built with path.join (backslashes on Windows). A raw
+  // === compares these as different and the unset is silently skipped, leaving
+  // a dangling core.hooksPath. Normalize both sides to an absolute, real path.
+  if (sameHooksPath(currentPath, item.expectedPath)) {
     unsetHooksPath();
     console.log(`  Unset ${item.label}`);
     return true;
@@ -342,6 +346,22 @@ function unsetGitConfigIfMatch(item) {
   return false;
 }
 
+/**
+ * True when two hook-directory paths refer to the same location (#656), tolerant
+ * of forward/back slashes, trailing separators, and case differences on Windows.
+ * @param {string} a
+ * @param {string} b
+ * @returns {boolean}
+ */
+function sameHooksPath(a, b) {
+  const norm = (p) => {
+    let r = path.resolve(p);
+    try { r = fs.realpathSync.native(r); } catch { /* path need not exist */ }
+    return process.platform === 'win32' ? r.toLowerCase() : r;
+  };
+  return norm(a) === norm(b);
+}
+
 /**
  * Execute a single plan item (file/dir/gitconfig).
  * @returns {boolean} true on success, false on skip/failure

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "bin/xp-gate.js"
@@ -10,6 +10,7 @@
     "hooks/",
     "adapters/",
     "lib/",
+    "gates/",
     "skills/",
     "plugins/",
     "dsh.bundle.patch.yml",

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/scripts/sync-package-content.js

@@ -504,7 +504,12 @@ function main() {
   const mutation = syncModules('mutation');
   const mockPolicy = syncModules('mock-policy');
   const buildIntegrity = syncModules('build-integrity');
-  console.error(`[sync] done: ${skills} skill(s), ${plugins} plugin(s), ${scripts} script(s), ${adapters} adapter entries, ${hooks} hook entries, ${principles + mutation + mockPolicy + buildIntegrity} module(s)`);
+  // #658: test-layers / pbt / python-health gate modules live in src/gates/ and
+  // were never bundled, so `xp-gate check test-layers` found no module in an npm
+  // install and silently skipped. Ship them (they import only ./common* which
+  // ship alongside).
+  const gates = syncModules('gates');
+  console.error(`[sync] done: ${skills} skill(s), ${plugins} plugin(s), ${scripts} script(s), ${adapters} adapter entries, ${hooks} hook entries, ${principles + mutation + mockPolicy + buildIntegrity + gates} module(s)`);
   if (skills !== CORE_SKILLS.length) {
     console.error(`[sync] ERROR: expected ${CORE_SKILLS.length} skills, copied ${skills}`);
     process.exit(1);

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3c5e9aaf
+**Commit:** e713c2d1
 **Branch:** main
-**Version:** 0.33.0.0
+**Version:** 0.33.1.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.