@boyingliu01/xp-gate 0.35.7 → 0.35.8

package/hooks/pre-commit

@@ -342,7 +342,9 @@ file_exists_in_subdir() {
 # in every gate, so their definitions lead the first call.
 # ============================================================================
 AUDIT_SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT_FOR_AUDIT="$(git rev-parse --show-toplevel 2>/dev/null || echo "$AUDIT_SCRIPT_DIR/../..")"
+# PROJECT_ROOT is resolved once above (line ~235); re-running `git rev-parse` here
+# costs another ~90ms fork on every commit for the same answer (#640).
+PROJECT_ROOT_FOR_AUDIT="${PROJECT_ROOT:-$(cd "$AUDIT_SCRIPT_DIR/../.." 2>/dev/null && pwd)}"
 
 # Audit attribution safety net: if a previous commit's post-commit never fired
 # (hooks skipped, crash, or an earlier --no-verify), its staged entries are
@@ -759,6 +761,10 @@ if [ "$is_protected" = "true" ]; then
   else
   # Check if staged changes include VERSION or CHANGELOG.md
   STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
+  # #640: a fork costs ~90ms on Windows (measured: 100 `git rev-parse` = 9456ms),
+  # and this exact query is re-run by later gates. Cache it once; consumers below
+  # read $XP_STAGED_ACM. Subprocess COUNT, not scan duration, is the bottleneck.
+  XP_STAGED_ACM="$STAGED_FILES"
   for file in $STAGED_FILES; do
     case "$file" in
       VERSION) has_version_change=true ;;
@@ -918,7 +924,7 @@ echo ""
 # scope rationale as the mirror exclusion (#507 Delphi round-2 follow-up).
 MIRROR_PATH_FILTER='^src/npm-package/'
 DASHBOARD_PATH_FILTER='^dashboard/'
-RAW_CHANGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
+RAW_CHANGED_FILES="${XP_STAGED_ACM:-$(git diff --cached --name-only --diff-filter=ACM)}"
 
 # Dependencies and build output are not project code (#649).
 #
@@ -2345,7 +2351,7 @@ else
   GATE_5_SKIP_COUNT=0
   GATE_5_DELETED_TESTS=""
   if declare -f classify_test_focus >/dev/null 2>&1; then
-    STAGED_TEST_FILES=$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null \
+    STAGED_TEST_FILES=$(printf '%s\n' "${XP_STAGED_ACM:-$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null)}" \
       | grep -E '\.(test|spec)\.(ts|tsx|js|jsx|mjs|cjs|py|go|java|kt|cs|scala|ps1)$|(^|/)(test_[^/]*\.py|[^/]*_test\.(py|go))$' || true)
     if [ -n "$STAGED_TEST_FILES" ]; then
       while IFS= read -r _tf; do
@@ -2751,7 +2757,7 @@ else
   # Gate 5b: Mock Density ADVISORY Scan (pure bash — no npx tsx overhead)
   # 30% = ADVISORY, 50% = suggests @mock-justified. Does NOT block commit.
   # ========================================================================
-  CHANGED_TEST_FILES=$(git diff --cached --name-only --diff-filter=ACM | filter_project_paths | grep -E '\.(test|spec)\.(ts|tsx|js|jsx|cjs|mjs|py|go)$' || true)
+  CHANGED_TEST_FILES=$(printf '%s\n' "${XP_STAGED_ACM:-$(git diff --cached --name-only --diff-filter=ACM)}" | filter_project_paths | grep -E '\.(test|spec)\.(ts|tsx|js|jsx|cjs|mjs|py|go)$' || true)
 
   # Nested plugin sub-projects (plugins/<name>/) own their own vitest config and
   # are excluded from the root suite (`vitest.config.ts` excludes `plugins/**`,
@@ -2899,7 +2905,7 @@ else
           CHANGED_TEST_FILE_COUNT=$(echo "$SELECTED_TEST_FILES" | grep -c '.' || true)
           
           # Also get changed source files (non-test) for related-test lookup
-          CHANGED_SRC_FILES=$(git diff --cached --name-only --diff-filter=ACM | filter_project_paths | grep -E '\.(ts|tsx|js|jsx)$' | grep -v '\.test\.' | grep -v '\.spec\.' | grep -v '__tests__' | grep -v '\.d\.ts$' | grep -v '__snapshots__' || true)
+          CHANGED_SRC_FILES=$(printf '%s\n' "${XP_STAGED_ACM:-$(git diff --cached --name-only --diff-filter=ACM)}" | filter_project_paths | grep -E '\.(ts|tsx|js|jsx)$' | grep -v '\.test\.' | grep -v '\.spec\.' | grep -v '__tests__' | grep -v '\.d\.ts$' | grep -v '__snapshots__' || true)
           # Nested plugin sub-projects are excluded from the root suite; their
           # sources must not drive root-vitest related-test lookup either (it
           # would resolve to plugin-local paths vitest cannot collect).
@@ -3134,16 +3140,16 @@ else
             #     partial so Stage 2 warns instead of falsely blocking.
             #   full -> unchanged behavior: whole suite + real threshold.
             #   skip -> nothing test-relevant changed; no pytest at all.
-            PY_CHANGED_TEST_FILES=$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null \
+            PY_CHANGED_TEST_FILES=$(printf '%s\n' "${XP_STAGED_ACM:-$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null)}" \
               | filter_project_paths \
               | grep -E '(^|/)test_[^/]*\.py$|_test\.py$' || true)
-            PY_CHANGED_SRC_FILES=$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null \
+            PY_CHANGED_SRC_FILES=$(printf '%s\n' "${XP_STAGED_ACM:-$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null)}" \
               | filter_project_paths \
               | grep -E '\.py$' | grep -vE '(^|/)test_[^/]*\.py$|_test\.py$' || true)
             # NOT filtered on purpose: this list answers "did a requirements
             # file change", which is a property of the whole commit including
             # paths under a vendor/ tree that filter_project_paths removes.
-            PY_CHANGED_ALL=$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null || true)
+            PY_CHANGED_ALL="${XP_STAGED_ACM:-$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null || true)}"
             # `grep -c '.'` prints its own zero AND exits 1 on an empty list
             # (#493), so the count is derived with `|| true` + wc -l instead.
             PY_TEST_COUNT=$(printf '%s\n' "$PY_CHANGED_TEST_FILES" | grep -c '.' || true)
@@ -3890,14 +3896,21 @@ else
           exit 1
         fi
          echo "     Running archlint for TypeScript..."
-          # Use diff mode with baseline for ratchet (block only new violations)
-          # Fall back to raw scan if no baseline exists (new project, zero-tolerance)
-          if [ -f "$PROJECT_ROOT/.architecture-baseline.json" ]; then
+          # #640: archlint costs ~8s and scans the whole tree, but an architecture
+          # violation cannot be introduced by a commit that touches no source file.
+          # Gating on "did any source change" removes the single largest fixed cost
+          # from docs/config-only commits without weakening the check at all.
+          if ! printf '%s\n' "${XP_STAGED_ACM:-}" | grep -qE '\.(ts|tsx|js|jsx|mjs|cjs|py|go|java|kt|kts|rs|cpp|cc|cxx|c|h|hpp|swift|dart)$'; then
+            echo "     ⏭️  SKIPPED - Architecture validation (no source files changed)"
+            ARCHLINT_OUTPUT=""
+            ARCHLINT_EXIT=0
+          elif [ -f "$PROJECT_ROOT/.architecture-baseline.json" ]; then
             ARCHLINT_OUTPUT=$(run_archlint diff .architecture-baseline.json --fail-on high 2>&1)
+            ARCHLINT_EXIT=$?
           else
             ARCHLINT_OUTPUT=$(run_archlint scan . -f table --quiet 2>&1)
+            ARCHLINT_EXIT=$?
           fi
-         ARCHLINT_EXIT=$?
          echo "$ARCHLINT_OUTPUT" | tail -30
          if [ "$ARCHLINT_EXIT" -ne 0 ]; then
            echo ""
@@ -4606,7 +4619,58 @@ fi
 # ============================================================================
 
 # ============================================================================
-# GATE 13: Compiler Strictness Check
+# GATE 12b: Mirror Parity (#654)
+#
+# `githooks/**` and `plugins/*/src/**` are canonical; `src/npm-package/**` holds
+# byte-identical mirrors that get published. Editing only the mirror means the next
+# prepack silently regenerates it over the change -- v0.27.3 shipped exactly that
+# bug, and mirror/sync rework accounts for 58 failures in the session logs.
+#
+# The check used to run only at pre-push, which turns a two-second fix into a
+# five-minute wait. It runs here now, but ONLY over files in this commit: a
+# full-tree scan on every commit is the cost that pushed it to pre-push in the
+# first place.
+# ============================================================================
+MIRROR_STAGED=$(git diff --cached --name-only --diff-filter=ACMR 2>/dev/null || true)
+if [ -n "$MIRROR_STAGED" ] && printf '%s\n' "$MIRROR_STAGED" | grep -qE '^(githooks/|plugins/[^/]+/src/)'; then
+  # Reuse PROJECT_ROOT: `git rev-parse` costs ~90ms per fork on Windows and this
+  # gate must not add two of them to every commit (#640).
+  MIRROR_REPO_ROOT="${PROJECT_ROOT:-}"
+  if [ -n "$MIRROR_REPO_ROOT" ] && [ -f "$MIRROR_REPO_ROOT/scripts/check-hook-mirror.sh" ]; then
+    # Scope to the touched families only: a mirror pair is clean or dirty
+    # independently, and checking untouched families is the slow path this gate
+    # exists to avoid.
+    MIRROR_FAIL=0
+    while IFS= read -r _mf; do
+      [ -n "$_mf" ] || continue
+      case "$_mf" in
+        githooks/*) _mm="src/npm-package/hooks/${_mf#githooks/}" ;;
+        plugins/*/src/*) _mm=$(printf '%s' "$_mf" | sed 's|^plugins/\([^/]*\)/src/|src/npm-package/plugins/\1/src/|') ;;
+        *) continue ;;
+      esac
+      if [ ! -f "$MIRROR_REPO_ROOT/$_mm" ]; then
+        echo "❌ BLOCKED - Gate 12b: $_mf has no mirror at $_mm"
+        echo "     Run: node src/npm-package/scripts/sync-package-content.js --fix"
+        MIRROR_FAIL=$((MIRROR_FAIL + 1))
+      elif ! cmp -s "$MIRROR_REPO_ROOT/$_mf" "$MIRROR_REPO_ROOT/$_mm"; then
+        echo "❌ BLOCKED - Gate 12b: $_mm differs from canonical $_mf"
+        echo "     Run: node src/npm-package/scripts/sync-package-content.js --fix"
+        MIRROR_FAIL=$((MIRROR_FAIL + 1))
+      fi
+    done <<< "$MIRROR_STAGED"
+    if [ "$MIRROR_FAIL" -gt 0 ]; then
+      echo ""
+      echo "❌ BLOCKED - Gate 12b: $MIRROR_FAIL mirror parity violation(s)."
+      echo "   The mirror is what gets published; a mirror-only fix is silently"
+      echo "   reverted by the next prepack (v0.27.3 shipped that bug)."
+      GATE_FAILED=1
+    else
+      echo "✅ PASSED - Gate 12b: mirror parity (touched files)"
+    fi
+  fi
+fi
+# ============================================================================
+
 # The compiler is the first and cheapest static analyser for a compiled language
 # and XP-Gate never used it as one: cpp.sh only runs clang-tidy/cppcheck over the
 # first 20 files, and Gate 9's build-integrity half is TypeScript-and-Maven only.

package/lib/__tests__/mirror-manifest.test.js

@@ -0,0 +1,64 @@
+/**
+ * @test REQ-654 镜像清单必须自证完整：漏登记的规范源文件要报错，而不是静默不同步
+ * @intent 会话日志里 `mirror/sync` 类失败 **58 次**，git 历史反复出现
+ *         `fix(mirror): ...` / `fix(package): 把 java.sh 改动落到真正的源文件`。
+ *
+ *         根因不是模型不知道规则——`AGENTS.md` 写得很清楚——而是这类约束是
+ *         **结构性信息**：哪个文件是源、哪个是镜像、谁依赖谁。模型即使知道规则，
+ *         也要在多文件编辑中持续追踪映射关系，而这正是工具该做的事。
+ *
+ *         提示词救不了的部分，必须靠**漏登记即报错**来兜底。静默不同步是最坏的形态：
+ *         它让一次疏忽变成一次发布回滚（v0.27.3 正是只改镜像导致发布回滚）。
+ * @covers AC-654-01, AC-654-02, AC-654-03
+ */
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { findUnlistedSources, declareSources } = require('../mirror-manifest');
+
+const REPO = path.join(__dirname, '..', '..', '..', '..');
+
+describe('镜像清单完整性 (#654)', () => {
+  it('AC-654-01: 列出 canonical 目录下所有应被镜像的文件', () => {
+    const declared = declareSources({ cwd: REPO });
+    expect(Array.isArray(declared)).toBe(true);
+    // A manifest that silently returns nothing would pass every other assertion here,
+    // so pin the shape: real file lists are non-trivial.
+    expect(declared.length).toBeGreaterThan(20);
+    for (const entry of declared) {
+      expect(typeof entry.source).toBe('string');
+      expect(typeof entry.mirror).toBe('string');
+      // Both paths are repo-relative, forward-slashed, so drift messages are readable.
+      expect(entry.source.includes('\\')).toBe(false);
+      expect(entry.mirror.includes('\\')).toBe(false);
+    }
+  });
+
+  it('AC-654-02: 实际存在的规范源文件若未登记，必须被报出来', () => {
+    const unlisted = findUnlistedSources({ cwd: REPO });
+    // The invariant the issue asks for: zero unlisted sources. This is the assertion
+    // that turns "someone forgot to register java.sh" from a publish-time rollback
+    // into a red test at commit time.
+    expect(unlisted).toEqual([]);
+  });
+
+  it('AC-654-03: 合成一个未登记文件时能被检出（防止检测器本身失效）', () => {
+    // A detector that never fires is indistinguishable from "no drift". Prove it fires
+    // on a synthetic tree rather than trusting the empty result above.
+    const fixture = {
+      'githooks/pre-commit': 'x',
+      'githooks/lib/known.sh': 'x',
+      'githooks/lib/orphan.sh': 'x',
+    };
+    const unlisted = findUnlistedSources({
+      cwd: REPO,
+      files: Object.keys(fixture),
+      declared: [
+        { source: 'githooks/pre-commit', mirror: 'src/npm-package/hooks/pre-commit' },
+        { source: 'githooks/lib/known.sh', mirror: 'src/npm-package/hooks/lib/known.sh' },
+      ],
+    });
+    expect(unlisted).toEqual(['githooks/lib/orphan.sh']);
+  });
+});

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-30T18:41:08.730Z",
+  "checked_at": "2026-10-30T19:20:46.439Z",
   "source": "network"
 }

package/lib/mirror-manifest.js

@@ -0,0 +1,112 @@
+/**
+ * Mirror manifest: which canonical sources must be byte-identical in the npm package
+ * (#654).
+ *
+ * `githooks/**` and `plugins/*​/src/**` are canonical; `src/npm-package/**` holds
+ * byte-identical mirrors that get published. Editing a mirror only means the next
+ * prepack silently regenerates it — v0.27.3 shipped exactly that bug.
+ *
+ * `AGENTS.md` states the rule clearly and it still gets violated ~58 times, because
+ * the constraint is *structural* (which file is source, which is mirror, who depends
+ * on whom), not stylistic. Knowing the rule does not remove the need to track the
+ * mapping across a multi-file edit; that is tooling's job.
+ *
+ * Hence this module: the mapping is data, and a canonical file missing from the
+ * mapping is an error rather than a silent no-op.
+ */
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+/** Directories (repo-relative) whose files mirror into the package. */
+const MIRRORED_ROOTS = [
+  { from: 'githooks', to: 'src/npm-package/hooks' },
+];
+
+/** Individual canonical files that mirror into a different location. */
+const INDIVIDUAL_PAIRS = [
+  { source: 'githooks/pre-commit', mirror: 'src/npm-package/hooks/pre-commit' },
+  { source: 'githooks/pre-push', mirror: 'src/npm-package/hooks/pre-push' },
+];
+
+/** Paths inside a mirrored root that are NOT mirrored (tests, docs). */
+const EXCLUDED_PREFIXES = ['__tests__/', 'node_modules/', '.git/'];
+
+function toPosix(p) {
+  return p.split(path.sep).join('/');
+}
+
+/** Recursively list files under `dir`, repo-relative and forward-slashed. */
+function listFiles(root, dir, out = []) {
+  let entries;
+  try {
+    entries = fs.readdirSync(path.join(root, dir), { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  if (!Array.isArray(entries)) return out;
+  for (const entry of entries) {
+    const rel = toPosix(path.join(dir, entry.name));
+    if (entry.isDirectory()) {
+      if (EXCLUDED_PREFIXES.some((p) => `${entry.name}/` === p)) continue;
+      listFiles(root, rel, out);
+    } else {
+      out.push(rel);
+    }
+  }
+  return out;
+}
+
+/**
+ * Expand the declared mapping into concrete source→mirror pairs.
+ *
+ * @param {{cwd?: string}} opts
+ * @returns {Array<{source: string, mirror: string}>}
+ */
+function declareSources(opts = {}) {
+  const cwd = opts.cwd || process.cwd();
+  const pairs = [...INDIVIDUAL_PAIRS];
+  const seen = new Set(pairs.map((p) => p.source));
+  for (const root of MIRRORED_ROOTS) {
+    for (const file of listFiles(cwd, root.from)) {
+      if (seen.has(file)) continue;
+      const rest = file.slice(root.from.length + 1);
+      if (EXCLUDED_PREFIXES.some((prefix) => rest.startsWith(prefix))) continue;
+      pairs.push({ source: file, mirror: `${root.to}/${rest}` });
+      seen.add(file);
+    }
+  }
+  return pairs.sort((a, b) => a.source.localeCompare(b.source));
+}
+
+/**
+ * Canonical files that exist but appear in no mapping entry.
+ *
+ * This is the check that turns "someone forgot to register java.sh" from a
+ * publish-time rollback into a red test at commit time. Silence here is the failure
+ * mode worth preventing: a file that is never mirrored looks fine locally and
+ * disappears from the published package.
+ *
+ * @param {{cwd?: string, files?: string[], declared?: Array<{source: string}>}} opts
+ * @returns {string[]}
+ */
+function findUnlistedSources(opts = {}) {
+  const cwd = opts.cwd || process.cwd();
+  const declared = opts.declared || declareSources({ cwd });
+  const declaredSet = new Set(declared.map((entry) => entry.source));
+  const present = opts.files || listFiles(cwd, 'githooks');
+  return present
+    .filter((file) => !EXCLUDED_PREFIXES.some((prefix) => file.slice('githooks/'.length).startsWith(prefix)))
+    .filter((file) => !declaredSet.has(file))
+    .sort();
+}
+
+/** Human-readable drift report; empty array means clean. */
+function describeUnlisted(unlisted) {
+  return unlisted.map(
+    (file) => `${file} is a canonical source with no mirror entry — the published package will not carry it`,
+  );
+}
+
+module.exports = { declareSources, findUnlistedSources, describeUnlisted, MIRRORED_ROOTS };

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.35.7",
+  "version": "0.35.8",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.35.7",
+  "version": "0.35.8",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.35.7",
+  "version": "0.35.8",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.35.7",
+  "version": "0.35.8",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.35.7",
+  "version": "0.35.8",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 9f8b24d8
+**Commit:** b3549c25
 **Branch:** main
-**Version:** 0.35.7.0
+**Version:** 0.35.8.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.