@boyingliu01/xp-gate 0.35.9 → 0.35.10

package/lib/__tests__/coverage-threshold.test.js

@@ -0,0 +1,80 @@
+/**
+ * @test REQ-605 覆盖率阈值必须只有一个真相源，且"未声明"与"声明为默认"可区分
+ * @intent #605 指出阈值散落在 4+ 处。实测这里的问题比"散落"严重：同一个覆盖率
+ *         概念有**两条独立的闸门，读同样的数字，却给出不同的门槛**。
+ *
+ *           githooks/pre-commit      ${COVERAGE_THRESHOLD:-80}   —— 平面 80%
+ *           vitest.config.ts         lines 60 / statements 60
+ *                                    functions 81 / branches 79
+ *
+ *         而 vitest 侧那条的注释自己写着"这些数字是实测下限，不是 80% 目标"。
+ *         也就是说两条闸门对"这个仓库的覆盖率该是多少"给出了互相矛盾的答案，
+ *         而谁都没错——它们各自是本地合理决定的总和。
+ *
+ *         **"散落"本身不是问题，"同一问题有多个互相矛盾的答案"才是。** 所以这里
+ *         不追求"把所有阈值塞进一个文件"，而是保证：给定一个阈值概念，解析结果的
+ *         (值, 来源) 是唯一确定且可解释的。
+ *
+ *         第二条要求是 #561 的教训：``COVERAGE_THRESHOLD:-80`` 让"没声明"和"声明
+ *         为 80"在行为上完全相同，于是文档说 80%、实际生效 60% 时没有任何东西会报警。
+ *         来源必须能让调用方区分这两种情况，否则"有效画像"还是一句空话。
+ * @covers AC-605-01, AC-605-02, AC-605-03
+ */
+'use strict';
+
+const { resolveCoverageThreshold, describeThreshold } = require('../coverage-threshold');
+
+describe('覆盖率阈值单一真相源 (#605)', () => {
+  it('AC-605-01: 未声明时标注为 implicit，并给出实际生效值', () => {
+    const r = resolveCoverageThreshold({});
+    expect(r.value).toBe(80);
+    expect(r.source).toBe('implicit');
+    expect(r.declared).toBe(false);
+  });
+
+  it('AC-605-02: 显式声明为同一个值时必须能与未声明区分', () => {
+    // The #561 failure shape: `:-80` made "nobody said" and "someone said 80"
+    // identical, so a doc claiming 80% while the live config said 60% raised no
+    // alarm anywhere. Same number, different meaning, must stay distinguishable.
+    const impl = resolveCoverageThreshold({});
+    const expl = resolveCoverageThreshold({ vitest: { lines: 80 } });
+    expect(impl.value).toBe(expl.value);
+    expect(impl.source).not.toBe(expl.source);
+    expect(expl.declared).toBe(true);
+    expect(expl.source).toBe('vitest.config.ts');
+  });
+
+  it('AC-605-03: 两条闸门矛盾时必须报告冲突，而不是静默取一个', () => {
+    // Measured state: vitest declares lines 60 while pre-commit defaults to 80.
+    // Picking either silently is how a repo ends up "enforcing 80%" in a doc and
+    // 60% in reality. Reporting the conflict is the only honest answer.
+    const r = resolveCoverageThreshold({
+      vitest: { lines: 60, statements: 60, functions: 81, branches: 79 },
+      preCommit: 80,
+    });
+    expect(r.conflict).toBeTruthy();
+    expect(r.conflict.hook).toBe(80);
+    expect(r.conflict.vitest).toBe(60);
+  });
+
+  it('AC-605-03: 两条闸门一致时不算冲突', () => {
+    const r = resolveCoverageThreshold({ vitest: { lines: 80 }, preCommit: 80 });
+    expect(r.conflict).toBeFalsy();
+  });
+
+  it('AC-605-02: 冲突时两端数值都可单独查询，便于决定改哪边', () => {
+    // The live state: `npx vitest run` goes green at 60% locally, then the commit
+    // is blocked at 80%. That ordering is the worst one -- it reads as "my change
+    // is fine" right up until it is rejected. Reporting both numbers lets the
+    // reader see which declaration to move.
+    const r = resolveCoverageThreshold({ vitest: { lines: 60 }, preCommit: 80 });
+    expect(r.conflict.hook).toBe(80);
+    expect(r.conflict.vitest).toBe(60);
+    expect(describeThreshold(r)).toContain('CONFLICT');
+  });
+
+  it('AC-605-01: describeThreshold 让来源可被人类核对', () => {
+    expect(describeThreshold(resolveCoverageThreshold({}))).toContain('implicit');
+    expect(describeThreshold(resolveCoverageThreshold({ vitest: { lines: 75 } }))).toContain('vitest.config.ts');
+  });
+});

package/lib/coverage-threshold.js

@@ -0,0 +1,88 @@
+/**
+ * Coverage-threshold resolution with an explicit provenance field (#605).
+ *
+ * #605 asks for a single machine-readable test profile because thresholds are
+ * scattered across 4+ files. Measured, the scattering is not the damaging part —
+ * the damaging part is that the same concept has two live gates that read the same
+ * number and disagree:
+ *
+ *   githooks/pre-commit   ${COVERAGE_THRESHOLD:-80}         flat 80%
+ *   vitest.config.ts      lines 60 / statements 60
+ *                         functions 81 / branches 79
+ *
+ * The vitest block documents itself as "the measured floor, not the 80% target",
+ * so both are locally reasonable. The repo-wide consequence is that nobody can
+ * answer "what coverage does this repo require" without reading two files.
+ *
+ * This module does not try to collapse every threshold into one file. It makes the
+ * answer to that one question unique and explainable: given what each source
+ * declares, produce (value, source, declared) and report a conflict rather than
+ * silently preferring one side.
+ *
+ * The `declared` flag exists because of #561: `:-80` made "nobody declared a
+ * threshold" and "someone declared 80" indistinguishable, so a doc claiming 80%
+ * while the live config said 60% raised no alarm anywhere.
+ */
+'use strict';
+
+/** What the hook assumes when no config declares a coverage floor. */
+const IMPLICIT_COVERAGE_FLOOR = 80;
+
+/**
+ * Resolve the coverage floor from the sources that actually declare one.
+ *
+ * @param {object} [sources]
+ * @param {{lines?: number, statements?: number, functions?: number, branches?: number}} [sources.vitest]
+ * @param {number} [sources.preCommit]
+ * @returns {{value: number, source: string, declared: boolean, conflict?: {hook: number, vitest: number, detail: string}}}
+ */
+function resolveCoverageThreshold(sources) {
+  const src = sources || {};
+  const vitestLines = src.vitest && typeof src.vitest.lines === 'number' ? src.vitest.lines : null;
+  const hookValue = typeof src.preCommit === 'number' ? src.preCommit : null;
+
+  const conflict = detectConflict(vitestLines, hookValue);
+
+  if (vitestLines !== null) {
+    return {
+      value: vitestLines,
+      source: 'vitest.config.ts',
+      declared: true,
+      ...(conflict ? { conflict } : {}),
+    };
+  }
+
+  if (hookValue !== null) {
+    return { value: hookValue, source: 'pre-commit', declared: true, ...(conflict ? { conflict } : {}) };
+  }
+
+  // Nothing declared: the hook's fallback applies. `declared: false` is the whole
+  // point -- a caller must be able to tell "80 because someone chose 80" from
+  // "80 because nobody said anything".
+  return { value: IMPLICIT_COVERAGE_FLOOR, source: 'implicit', declared: false, ...(conflict ? { conflict } : {}) };
+}
+
+/**
+ * Two live gates disagreeing about the same number is a defect, not a preference.
+ * Reported, never resolved silently.
+ */
+function detectConflict(vitestLines, hookValue) {
+  if (vitestLines === null || hookValue === null) return null;
+  if (vitestLines === hookValue) return null;
+  return {
+    hook: hookValue,
+    vitest: vitestLines,
+    detail: `pre-commit enforces ${hookValue}% while vitest.config.ts enforces ${vitestLines}%`,
+  };
+}
+
+/** One-line, human-checkable rendering of a resolved threshold. */
+function describeThreshold(resolved) {
+  if (!resolved) return 'coverage threshold: unknown';
+  const parts = [`coverage threshold: ${resolved.value}%`, `source: ${resolved.source}`];
+  if (!resolved.declared) parts.push('not declared by any config — this is the hook fallback');
+  if (resolved.conflict) parts.push(`CONFLICT — ${resolved.conflict.detail}`);
+  return parts.join(' | ');
+}
+
+module.exports = { resolveCoverageThreshold, describeThreshold, IMPLICIT_COVERAGE_FLOOR };

package/lib/gate-coverage.js

@@ -199,6 +199,65 @@ function missingGateReason(spec) {
     : 'no result recorded — not run in the last report';
 }
 
+/**
+ * Resolve the coverage floor from both gates and report disagreement (#605).
+ *
+ * Read from source rather than cached: both files are small, and a stale threshold
+ * report is worse than none -- it would assert the gates agree when they need not.
+ * Either side absent degrades to "unknown", never to "no conflict".
+ */
+function readCoverageThresholdConflict(repoRoot) {
+  try {
+    const { resolveCoverageThreshold } = require('./coverage-threshold.js');
+    const sources = {};
+    const vitest = readVitestThresholds(repoRoot);
+    if (vitest) sources.vitest = vitest;
+    const hookFloor = readHookCoverageFloor(repoRoot);
+    if (hookFloor !== null) sources.preCommit = hookFloor;
+    const resolved = resolveCoverageThreshold(sources);
+    if (!vitest && hookFloor === null) return { ...resolved, sources: 'none readable' };
+    return resolved;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * `thresholds: { lines: N, ... }` from vitest.config.ts, or null when absent.
+ *
+ * Comments are stripped first. The file documents the #561 failure by quoting the
+ * old bad shape (`thresholds: { global: {...} }`) in prose, and a naive match reads
+ * that quote as the live config -- reporting a threshold the repo does not use,
+ * which is exactly the class of error #605 exists to stop.
+ */
+function readVitestThresholds(repoRoot) {
+  try {
+    const raw = fs.readFileSync(path.join(repoRoot, 'vitest.config.ts'), 'utf8');
+    const code = raw.replace(/\/\*[\s\S]*?\*\//g, '').replace(/^\s*\/\/.*$/gm, '');
+    const block = code.match(/thresholds:\s*\{([\s\S]*?)\}/);
+    if (!block) return null;
+    const out = {};
+    for (const m of block[1].matchAll(/(lines|statements|functions|branches)\s*:\s*(\d+)/g)) {
+      out[m[1]] = Number(m[2]);
+    }
+    return Object.keys(out).length > 0 ? out : null;
+  } catch {
+    return null;
+  }
+}
+
+/** The flat floor the pre-commit hook applies, or null when it applies none. */
+function readHookCoverageFloor(repoRoot) {
+  try {
+    const raw = fs.readFileSync(path.join(repoRoot, 'githooks', 'pre-commit'), 'utf8');
+    if (!/COVERAGE_THRESHOLD/.test(raw)) return null;
+    const m = raw.match(/COVERAGE_THRESHOLD:-?(\d+)/) || raw.match(/COVERAGE_THRESHOLD=(\d+)/);
+    return m ? Number(m[1]) : null;
+  } catch {
+    return null;
+  }
+}
+
 /**
  * Describe Boy Scout debt by how much of it is worth fixing (#638).
  *
@@ -233,6 +292,16 @@ function renderGateCoverage(rows, opts) {
     lines.push('     Numbers below describe that commit, NOT the working tree.');
   }
 
+  if (options.coverageThreshold && options.coverageThreshold.conflict) {
+    // #605: two live gates enforcing different numbers for the same thing. Reported
+    // here rather than resolved silently -- picking one side is how a repo ends up
+    // documented at 80% and enforced at 60%.
+    lines.push('');
+    lines.push(`  ⚠️  COVERAGE THRESHOLD CONFLICT — ${options.coverageThreshold.conflict.detail}`);
+    lines.push('     Both gates read the same number and disagree. Fix the declarations,');
+    lines.push('     not the reporting.');
+  }
+
   lines.push('');
   lines.push(`  ${counts.PASS} PASS / ${counts.DEBT} DEBT / ${counts.SKIP} SKIP / ${counts.FAIL} FAIL`);
   if (counts.SKIP > 0) {
@@ -352,6 +421,7 @@ function main(argv, deps) {
     headCommit,
     boyScout: readBoyScoutDebt(repoRoot),
   });
+  const coverageThreshold = readCoverageThresholdConflict(repoRoot);
 
   if (args.includes('--json')) {
     process.stdout.write(`${JSON.stringify({
@@ -361,6 +431,7 @@ function main(argv, deps) {
       headCommit: headCommit || null,
       artifactFile: file,
       summary: rows.reduce((acc, r) => { acc[r.status] = (acc[r.status] || 0) + 1; return acc; }, {}),
+      coverageThreshold,
       gates: rows,
     }, null, 2)}\n`);
     return exitCodeFor(rows, { strict: args.includes('--strict') });
@@ -373,6 +444,7 @@ function main(argv, deps) {
     stale,
     headCommit,
     artifactCommit: artifact ? artifact.commit : null,
+    coverageThreshold,
   })}\n`);
   return exitCodeFor(rows, { strict: args.includes('--strict') });
 }

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-30T19:32:07.981Z",
+  "checked_at": "2026-10-30T19:59:34.778Z",
   "source": "network"
 }

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.35.9",
+  "version": "0.35.10",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.35.9",
+  "version": "0.35.10",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.35.9",
+  "version": "0.35.10",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.35.9",
+  "version": "0.35.10",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.35.9",
+  "version": "0.35.10",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/sprint-flow/references/phase-3-build.md

@@ -34,12 +34,25 @@
 |---|------|------------------------------|----------|
 | 1 | **Gate 3 CCN** | 单函数圈复杂度 **>10 BLOCK**、**>5 WARN** | 拆函数 / 早返回 / 抽策略表；`xp-gate check 3 <file>` |
 | 2 | **Gate 6 Boy Scout** | **新文件 0 warning**；修改文件 warning 数不得高于 `.warnings-baseline.json`；**单函数 ≤50 行**；**嵌套 ≤4 层** | 新文件当"零容忍"写；改动前 `xp-gate check 6` 看基线 |
-| 3 | **Gate 2 重复代码** | jscpd 相似度 **>5% BLOCK** | 抽公共函数，别复制粘贴；`xp-gate check 2 <dir>` |
+| 3 | **Gate 2 重复代码** | jscpd 报告重复**仅提示，不阻断** | 抽公共函数，别复制粘贴；`xp-gate check 2 <dir>` |
 | 4 | **Gate 4 Principles** | 14 条 Clean Code/SOLID 规则，任一 error/warning 即拦（按 `.principlesrc`） | `xp-gate check 4 <file>`；避免超长参数表、空 catch、`as any` |
 | 5 | **Gate 1 Lint** | 适配器 lint 任一 error | 提交前跑一次项目 lint；不要留未用变量/导入 |
 | 6 | **Gate 5 测试** | 测试全绿 + 覆盖率 ≥80%（新 .ts/.tsx 无测试直接 BLOCK） | 新代码先写测试（TDD）；`npx vitest run <file>` |
 | 7 | **mirror/sync 纪律** | 改 `githooks/` 或 `skills/` 后必须 `node src/npm-package/scripts/sync-package-content.js --fix` 且 `bash scripts/check-hook-mirror.sh` 报 PASS | 忘了同步会在 pre-push 的 mirror 校验被打回 |
 
+**权威清单用 `xp-gate gate-rules` 现取，不要背上面这张表。** 上表是手抄的,阈值真正定义在
+`.principlesrc`、`jscpd.conf.json` 和 `githooks/pre-commit` 里。`xp-gate gate-rules` 从那些
+文件生成一份带**出处**的清单:
+
+```bash
+xp-gate gate-rules          # markdown 表:规则 / 严重度 / 阈值 / 出处
+xp-gate gate-rules --json   # 机器可读
+```
+
+为什么必须生成而不是手写:这张表原本写"jscpd 相似度 >5% BLOCK",而 Gate 2 实际只是提示、
+从不阻断——有人会去为一个永不触发的裁定重构代码。**一个说谎的自检清单比没有清单更糟**,
+它会让人按错误规则写,然后在提交时被告知另一套。改阈值时只需改配置,清单自动跟上。
+
 **一条命令抢先看**：`xp-gate check . --changed --brief` 只跑"本次 diff 会触发的门禁"，
 一屏出 PASS/SKIP/BLOCK，目标 <5 s。把它放在 ralph-loop 每个 REQ 的 step 0，先看红不红，
 再决定是否继续写——而不是写到一半才被 `git commit` 拦下。

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 35b9ec60
+**Commit:** 6c9bcb78
 **Branch:** main
-**Version:** 0.35.9.0
+**Version:** 0.35.10.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.