@boyingliu01/xp-gate 0.8.0 → 0.8.2

package/adapters/plugins/whalecloud-java/templates/gradle/xp-gate-whalecloud-gradle.gradle

@@ -0,0 +1,73 @@
+// WhaleCloud Java Coding Standards Gradle config for XP-Gate.
+// Layered on top of p3c-pmd baseline — adds 74 mandatory + 32 recommended
+// WhaleCloud-internal rules not covered by Alibaba p3c-pmd.
+//
+// Usage:
+//   ./gradlew XP-GateWhalecloudCheck
+//
+// Depends on: p3c-pmd config (XP-GateP3cCheck) must also be active.
+
+plugins {
+    id 'java'
+    id 'pmd'
+    id 'checkstyle'
+    id 'com.github.spotbugs' version '5.2.5'
+}
+
+// PMD configuration: p3c-pmd baseline + WhaleCloud overlay
+pmd {
+    consoleOutput = true
+    toolVersion = '7.7.0'
+    ruleSetFiles = files(
+        'config/pmd/whalecloud-ruleset.xml'
+    )
+    ruleSets = [
+        '/rulesets/java/ali-comment.xml',
+        '/rulesets/java/ali-concurrent.xml',
+        '/rulesets/java/ali-constant.xml',
+        '/rulesets/java/ali-exception.xml',
+        '/rulesets/java/ali-flowcontrol.xml',
+        '/rulesets/java/ali-naming.xml',
+        '/rulesets/java/ali-oop.xml',
+        '/rulesets/java/ali-orm.xml',
+        '/rulesets/java/ali-other.xml',
+        '/rulesets/java/ali-set.xml'
+    ]
+    sourceSets = [sourceSets.main, sourceSets.test]
+}
+
+// CheckStyle with WhaleCloud customized ruleset
+checkstyle {
+    toolVersion = '10.21.3'
+    configFile = file('config/checkstyle/whalecloud-checkstyle.xml')
+    sourceSets = [sourceSets.main, sourceSets.test]
+}
+
+// SpotBugs + FindSecBugs for security analysis
+spotbugs {
+    toolVersion = '4.7.3'
+    includeFilter = file('config/spotbugs/whalecloud-spotbugs.xml')
+    effort = 'max'
+    reportLevel = 'low'
+    sourceSets = [sourceSets.main]
+}
+
+dependencies {
+    spotbugsPlugins 'com.h3xstream.findsecbugs:findsecbugs-plugin:1.12.0'
+}
+
+// Combined WhaleCloud check task
+task XP-GateWhalecloudCheck {
+    description = 'Run all WhaleCloud Java coding standard checks (p3c-pmd + overlay + security)'
+    group = 'Verification'
+    dependsOn 'pmdMain', 'pmdTest', 'checkstyleMain', 'checkstyleTest', 'spotbugsMain'
+}
+
+// Install script: copies config files from plugin to project
+def whalecloudConfigDir = "${projectDir}/config"
+task installWhalecloudConfig(type: Copy) {
+    from "${pluginDir}/templates/gradle/config/"
+    into whalecloudConfigDir
+    description = 'Install WhaleCloud rule configuration files into project'
+    group = 'XP-Gate'
+}

package/adapters/plugins/whalecloud-java/templates/maven/xp-gate-whalecloud-profile.xml

@@ -0,0 +1,148 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  WhaleCloud Java Coding Standards Maven profile for XP-Gate.
+  Layered on top of p3c-pmd baseline — adds 74 mandatory + 32 recommended
+  WhaleCloud-internal rules not covered by Alibaba p3c-pmd.
+
+  Usage:
+    mvn clean verify -P XP-Gate-whalecloud-java
+    mvn clean verify -P XP-Gate-whalecloud-java -Dpmd.failOnViolation=true
+
+  Depends on: p3c-pmd profile (XP-Gate-p3c) must also be active.
+
+  Rules covered: 106 rules across 8 categories
+    - wc-collection:    集合处理增强 (12 条)
+    - wc-concurrent:    并发编程增强 (14 条)
+    - wc-exception:     异常处理规范 (11 条)
+    - wc-logging:       日志输出规范 (7 条)
+    - wc-security:      安全管理规范 (10 条)
+    - wc-resource:      资源管理规范 (6 条)
+    - wc-style:         编码风格规范 (18 条)
+    - wc-performance:   性能优化规范 (8 条)
+-->
+<profile>
+  <id>XP-Gate-whalecloud-java</id>
+  <activation>
+    <file>
+      <exists>${project.basedir}/src/main</exists>
+    </file>
+  </activation>
+  <build>
+    <plugins>
+      <!-- PMD with custom WhaleCloud ruleset (extends p3c-pmd) -->
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-pmd-plugin</artifactId>
+        <version>3.21.2</version>
+        <configuration>
+          <targetJdk>${java.version}</targetJdk>
+          <rulesets>
+            <!-- BASELINE: Alibaba p3c-pmd (54 rules) -->
+            <ruleset>/rulesets/java/ali-comment.xml</ruleset>
+            <ruleset>/rulesets/java/ali-concurrent.xml</ruleset>
+            <ruleset>/rulesets/java/ali-constant.xml</ruleset>
+            <ruleset>/rulesets/java/ali-exception.xml</ruleset>
+            <ruleset>/rulesets/java/ali-flowcontrol.xml</ruleset>
+            <ruleset>/rulesets/java/ali-naming.xml</ruleset>
+            <ruleset>/rulesets/java/ali-oop.xml</ruleset>
+            <ruleset>/rulesets/java/ali-orm.xml</ruleset>
+            <ruleset>/rulesets/java/ali-other.xml</ruleset>
+            <ruleset>/rulesets/java/ali-set.xml</ruleset>
+            <!-- OVERLAY: WhaleCloud custom rules -->
+            <ruleset>${project.basedir}/config/pmd/whalecloud-ruleset.xml</ruleset>
+          </rulesets>
+          <printFailingErrors>true</printFailingErrors>
+          <failOnViolation>true</failOnViolation>
+          <includeTestSourceDirectory>true</includeTestSourceDirectory>
+          <outputEncoding>UTF-8</outputEncoding>
+          <analysisCache>true</analysisCache>
+          <maxWarnings>0</maxWarnings>
+        </configuration>
+        <executions>
+          <execution>
+            <id>whalecloud-pmd-check</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>check</goal>
+            </goals>
+            <configuration>
+              <failOnViolation>${pmd.failOnViolation}</failOnViolation>
+            </configuration>
+          </execution>
+          <execution>
+            <id>whalecloud-cpd-check</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>cpd-check</goal>
+            </goals>
+            <configuration>
+              <failOnViolation>true</failOnViolation>
+              <minimumTokens>100</minimumTokens>
+            </configuration>
+          </execution>
+        </executions>
+        <dependencies>
+          <!-- p3c-pmd baseline -->
+          <dependency>
+            <groupId>com.alibaba.p3c</groupId>
+            <artifactId>p3c-pmd</artifactId>
+            <version>2.1.1</version>
+          </dependency>
+        </dependencies>
+      </plugin>
+
+      <!-- CheckStyle with WhaleCloud customized ruleset -->
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-checkstyle-plugin</artifactId>
+        <version>3.3.1</version>
+        <configuration>
+          <configLocation>${project.basedir}/config/checkstyle/whalecloud-checkstyle.xml</configLocation>
+          <includeTestSourceDirectory>true</includeTestSourceDirectory>
+          <consoleOutput>true</consoleOutput>
+          <failsOnError>true</failsOnError>
+          <linkXRef>false</linkXRef>
+        </configuration>
+        <executions>
+          <execution>
+            <id>whalecloud-checkstyle</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>check</goal>
+            </goals>
+          </execution>
+        </executions>
+      </plugin>
+
+      <!-- SpotBugs + FindSecBugs for security analysis -->
+      <plugin>
+        <groupId>com.github.spotbugs</groupId>
+        <artifactId>spotbugs-maven-plugin</artifactId>
+        <version>4.7.3.5</version>
+        <configuration>
+          <includeFilterFile>${project.basedir}/config/spotbugs/whalecloud-spotbugs.xml</includeFilterFile>
+          <effort>Max</effort>
+          <threshold>Low</threshold>
+          <failOnError>true</failOnError>
+          <includeTests>false</includeTests>
+        </configuration>
+        <executions>
+          <execution>
+            <id>whalecloud-spotbugs</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>check</goal>
+            </goals>
+          </execution>
+        </executions>
+        <dependencies>
+          <dependency>
+            <groupId>com.h3xstream.findsecbugs</groupId>
+            <artifactId>findsecbugs-plugin</artifactId>
+            <version>1.12.0</version>
+          </dependency>
+        </dependencies>
+      </plugin>
+    </plugins>
+  </build>
+</profile>

package/hooks/pre-commit

@@ -576,7 +576,6 @@ elif [ "$PROJECT_LANG" = "powershell" ]; then
   
 else
   CCN_THRESHOLD=5
-  CCN_ERROR_THRESHOLD=10  # Changed from 15 to 10 as per standard practice
   
   # Check lizard availability
   LIZARD_CMD=""
@@ -603,22 +602,12 @@ else
       CC_WARNINGS=$(echo "$CC_OUTPUT" | grep "^Warning cnt" | awk '{print $NF}' | tr -d '[:space:]' | sed 's/[^0-9]//g' || true)
       CC_WARNINGS=${CC_WARNINGS:-0}
       
-      # Count functions with CCN > CCN_ERROR_THRESHOLD (these block)
-      CC_ERRORS=$(echo "$CC_OUTPUT" | awk 'NF>=6 && $2 ~ /^[0-9]+$/ && $NF ~ /@/ && $2+0 > '"$CCN_ERROR_THRESHOLD"'' | sort -u -k5,5 | wc -l)
-      
-      if [ "$CC_ERRORS" -gt 0 ]; then
-        echo "$CC_OUTPUT"
-        echo ""
-        echo "❌ BLOCKED - Functions with CCN > $CCN_ERROR_THRESHOLD found."
-        echo "Refactor high-complexity functions to keep below $CCN_ERROR_THRESHOLD complexity."
-        exit
-      fi
-      
       if [ "$CC_WARNINGS" -gt 0 ]; then
         echo "$CC_OUTPUT"
         echo ""
-        echo "⚠️  Found $CC_WARNINGS functions with CCN > $CCN_THRESHOLD (acceptable warning level)"
-        echo "✅ PASSED - Within error threshold (warnings allowed)."
+        echo "❌ BLOCKED - $CC_WARNINGS functions with CCN > $CCN_THRESHOLD found."
+        echo "Refactor high-complexity functions to keep below $CCN_THRESHOLD complexity."
+        exit 1
       else
         echo "✅ PASSED - All functions within complexity threshold ($CCN_THRESHOLD)."
       fi
@@ -1104,19 +1093,33 @@ elif [ "$PROJECT_LANG" = "powershell" ]; then
 
 else
   # Check if architecture config exists
-  if [ -f "architecture.yaml" ] || [ -f ".architecturerc" ]; then
+  if [ -f "architecture.yaml" ] || [ -f ".architecturerc" ] || [ -f ".archlint.yaml" ]; then
     # Different architecture tools per language
     case "$PROJECT_LANG" in
       "typescript")
-        if ! require_tool "archlint" "Gate 6" "npm install -g @archlinter/cli"; then
-          echo "     ❌ BLOCKED - archlint not installed"
-          echo "     Install with: npm install -g @archlinter/cli"
-          exit
+        # Try local npx install first (devDependencies), fall back to global
+        if npx --no-install @archlinter/cli --version >/dev/null 2>&1; then
+          ARCHLINT_CMD="npx --no-install @archlinter/cli"
+        elif command -v archlint >/dev/null 2>&1; then
+          ARCHLINT_CMD="archlint"
+        elif npx @archlinter/cli --version >/dev/null 2>&1; then
+          ARCHLINT_CMD="npx @archlinter/cli"
         else
-          echo "     Running archlint for TypeScript..."
-          archlint scan . -f table --quiet 2>&1 | tail -30 || echo "⚠️  Architectural smells detected (pre-existing, continuing)"
-          echo "     ✅ TypeScript architecture validation completed."
+          echo "     ❌ BLOCKED - archlint not installed"
+          echo "     Install with: npm install --save-dev @archlinter/cli"
+          exit 1
+        fi
+        echo "     Running archlint for TypeScript..."
+        ARCHLINT_OUTPUT=$($ARCHLINT_CMD scan . -f table --quiet 2>&1)
+        ARCHLINT_EXIT=$?
+        echo "$ARCHLINT_OUTPUT" | tail -30
+        if [ "$ARCHLINT_EXIT" -ne 0 ]; then
+          echo ""
+          echo "❌ BLOCKED - Architecture violations detected"
+          echo "Fix the architecture violations above before committing."
+          exit 1
         fi
+        echo "     ✅ TypeScript architecture validation completed."
         ;;
       "python")
         if [ -f ".import-linter.yml" ] || [ -f "import_linter_config.yml" ]; then
@@ -1584,7 +1587,7 @@ generate_quality_report() {
       "name": "Cyclomatic Complexity",
       "status": "${GATE_3_STATUS:-PASS}",
       "threshold": "${CCN_THRESHOLD:-5}",
-      "errorThreshold": "${CCN_ERROR_THRESHOLD:-10}",
+      "blockThreshold": "${CCN_THRESHOLD:-5}",
       "warnings": ${CC_WARNINGS:-0}
     },
     "gate4_principles": {

package/hooks/pre-push

@@ -21,7 +21,11 @@ URL="$2"
 PUSHED_FILES=""
 TS_FILES=""
 while read local_ref local_sha remote_ref remote_sha; do
-  if [ "$remote_sha" = "0000000000000000000000000000000000000000" ]; then
+  if [ "$local_sha" = "0000000000000000000000000000000000000000" ]; then
+    # Branch deletion - skip validation entirely
+    echo "   ℹ️  Branch deletion detected ($local_ref). Skipping validation."
+    continue
+  elif [ "$remote_sha" = "0000000000000000000000000000000000000000" ]; then
     # New branch - compare against empty tree
     PUSHED_FILES=$(git diff-tree -r --name-only HEAD)
     TS_FILES=$(git diff-tree -r --name-only HEAD | grep '\.ts$' || true)
@@ -115,9 +119,9 @@ else
       if [[ ! -f "src/mutation/gate-m.ts" ]]; then
         echo "⚠️ Gate M script (src/mutation/gate-m.ts) not found. SKIP — Gate M."
       else
-        # Run mutation gate with 120s timeout
+        # Run mutation gate with timeout matching stryker.conf.json (timeoutMS: 600000 = 10min)
         MUTATION_OUTPUT=$(mktemp)
-        timeout 120s npx tsx src/mutation/gate-m.ts --changed-files "$CHANGED_SOURCE_FILES" > "$MUTATION_OUTPUT" 2>&1
+        timeout 600s npx tsx src/mutation/gate-m.ts --changed-files "$CHANGED_SOURCE_FILES" > "$MUTATION_OUTPUT" 2>&1
         MUTATION_EXIT=$?
 
         case $MUTATION_EXIT in

package/lib/__tests__/ui-detector.test.ts

@@ -357,4 +357,98 @@ describe('ui-detector', () => {
       expect(isExcluded('src/Button.test.tsx', ['**/*.test.*'])).toBe(true);
     });
   });
+
+  /**
+   * @test #172 ui-detector CLI coverage
+   * @intent Cover CLI entry points (runCli, runPushMode, processOutput, runCheckBranch, runDefault)
+   *   via real subprocess execution with NODE_V8_COVERAGE to merge coverage profiles.
+   * @covers ui-detector-cli-push-mode, ui-detector-cli-check-branch, ui-detector-cli-default-mode
+   */
+  describe('CLI integration (subprocess)', () => {
+    const { spawnSync: realSpawnSync } = require('child_process') as typeof import('child_process');
+    const path = require('path') as typeof import('path');
+    const fs = require('fs') as typeof import('fs');
+    const os = require('os') as typeof import('os');
+
+    const UI_DETECTOR_PATH = path.resolve(__dirname, '../ui-detector.ts');
+
+    function runCli(args: string[], stdin?: string, cwd?: string): { code: number; stdout: string; stderr: string } {
+      const coverageDir = process.env.NODE_V8_COVERAGE ?? path.join(process.cwd(), 'coverage', '.tmp');
+      const result = realSpawnSync('npx', ['tsx', UI_DETECTOR_PATH, ...args], {
+        cwd: cwd ?? process.cwd(),
+        encoding: 'utf-8',
+        input: stdin,
+        env: { ...process.env, NODE_V8_COVERAGE: coverageDir },
+      });
+      return {
+        code: result.status ?? -1,
+        stdout: result.stdout ?? '',
+        stderr: result.stderr ?? '',
+      };
+    }
+
+    it('runs default mode with --check-branch flag (HEAD-based detection)', () => {
+      const { code, stdout } = runCli(['--check-branch']);
+      expect(code).toBeGreaterThanOrEqual(0);
+      expect(code).toBeLessThanOrEqual(1);
+      const parsed = JSON.parse(stdout);
+      expect(parsed).toHaveProperty('isUiSprint');
+      expect(parsed).toHaveProperty('matchedFiles');
+      expect(parsed).toHaveProperty('matchedRules');
+    });
+
+    it('runs push-mode via stdin', () => {
+      const { code, stdout } = runCli(['--push-mode'], 'views/index.html');
+      expect([0, 1]).toContain(code);
+      const parsed = JSON.parse(stdout);
+      expect(parsed.isUiSprint).toBe(true);
+      expect(parsed.matchedFiles).toContain('views/index.html');
+    });
+
+    it('runs push-mode with stdin input', () => {
+      const { code, stdout } = runCli(['--push-mode'], 'views/login.njk\nsrc/auth.ts\n');
+      expect([0, 1]).toContain(code);
+      const parsed = JSON.parse(stdout);
+      expect(parsed.isUiSprint).toBe(true);
+      expect(parsed.matchedFiles).toContain('views/login.njk');
+    });
+
+    it('runs push-mode with non-UI files (exit 1)', () => {
+      const { code, stdout } = runCli(['--push-mode'], 'src/auth.ts\nsrc/db.ts\n');
+      expect(code).toBe(1);
+      const parsed = JSON.parse(stdout);
+      expect(parsed.isUiSprint).toBe(false);
+      expect(parsed.matchedFiles).toEqual([]);
+    });
+
+    it('respects .ui-gate-ignore in push-mode', () => {
+      const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'ui-detector-ignore-'));
+      try {
+        fs.writeFileSync(path.join(tmp, '.ui-gate-ignore'), 'legacy/**\n');
+        const { code, stdout } = runCli(['--push-mode'], 'legacy/views/index.html', tmp);
+        expect(code).toBe(1);
+        const parsed = JSON.parse(stdout);
+        expect(parsed.isUiSprint).toBe(false);
+      } finally {
+        fs.rmSync(tmp, { recursive: true, force: true });
+      }
+    });
+
+    it('processes renamed files in push-mode', () => {
+      const { code, stdout } = runCli(['--push-mode'], 'src/a.tsx \u2192 src/components/B.tsx');
+      expect([0, 1]).toContain(code);
+      const parsed = JSON.parse(stdout);
+      expect(parsed.matchedFiles).toContain('src/components/B.tsx');
+    });
+
+    it('runs default mode (detectUiSprint in current repo)', () => {
+      const { code, stdout } = runCli([]);
+      expect([0, 1]).toContain(code);
+      const parsed = JSON.parse(stdout);
+      expect(parsed).toHaveProperty('isUiSprint');
+      expect(parsed).toHaveProperty('matchedFiles');
+      expect(parsed).toHaveProperty('matchedRules');
+    });
+  });
 });
+

package/lib/init.js

@@ -303,6 +303,7 @@ async function installLocal(args) {
   updateConfig({ lastInit: new Date().toISOString(), mode: 'local', manifest });
 
   injectKarpathyPrinciples(projectRoot);
+  configureOpenCodePlugin(srcDir, projectRoot);
 
   console.log('\nInstallation complete!');
   console.log('Run git commit to trigger quality gates');
@@ -348,6 +349,49 @@ async function setupGlobal(args) {
   return 0;
 }
 
+function configureOpenCodePlugin(srcDir, projectRoot) {
+  const opencodeJsonPath = path.join(projectRoot, 'opencode.json');
+  const pluginSrcPath = path.join(srcDir, 'plugins', 'opencode');
+
+  if (!fs.existsSync(pluginSrcPath)) {
+    console.log('  OpenCode plugin: SKIP (not bundled)');
+    return;
+  }
+
+  let config = {};
+  if (fs.existsSync(opencodeJsonPath)) {
+    try {
+      const raw = fs.readFileSync(opencodeJsonPath, 'utf8');
+      config = JSON.parse(raw);
+    } catch (e) {
+      console.warn(`  Warning: could not parse opencode.json: ${e.message}`);
+      return;
+    }
+  }
+
+  if (!Array.isArray(config.plugin)) {
+    config.plugin = [];
+  }
+
+  const normalizedSrc = path.resolve(pluginSrcPath);
+  const alreadyConfigured = config.plugin.some(p => path.resolve(projectRoot, p) === normalizedSrc);
+
+  if (alreadyConfigured) {
+    console.log('  OpenCode plugin: already configured in opencode.json');
+    return;
+  }
+
+  const relativePluginPath = path.relative(projectRoot, normalizedSrc).replace(/\\/g, '/');
+  config.plugin.push(relativePluginPath);
+
+  try {
+    fs.writeFileSync(opencodeJsonPath, JSON.stringify(config, null, 2) + '\n');
+    console.log(`  OpenCode plugin: added to opencode.json (${relativePluginPath})`);
+  } catch (e) {
+    console.warn(`  Warning: could not write opencode.json: ${e.message}`);
+  }
+}
+
 function injectKarpathyPrinciples(projectRoot) {
   const agentsPath = path.join(projectRoot, 'AGENTS.md');
   if (!fs.existsSync(agentsPath)) return;

package/lib/ui-detector.ts

@@ -210,21 +210,21 @@ function processOutput(input: string, repoRoot: string): void {
     .map(parseRenamedFile)
     .filter((f) => f.length > 0);
   const result = collectUiMatches(files, repoRoot);
-   
+    
   console.log(JSON.stringify(result, null, 2));
   process.exit(result.isUiSprint ? 0 : 1);
 }
 
 function runCheckBranch(_repoRoot: string): void {
   const result = detectUiSprint('HEAD');
-   
+    
   console.log(JSON.stringify(result, null, 2));
   process.exit(result.isUiSprint ? 0 : 1);
 }
 
 function runDefault(_repoRoot: string): void {
   const result = detectUiSprint();
-   
+    
   console.log(JSON.stringify(result, null, 2));
   process.exit(result.isUiSprint ? 0 : 1);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 6 quality gates, Sprint Flow, and Delphi multi-expert review.",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-05-30
 **Commit:** 4517f2b
 **Branch:** main
-**Version:** v0.5.1
+**Version:** v0.8.1
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥91% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/claude-code/skills/ralph-loop/SKILL.md

@@ -323,6 +323,16 @@ Phase 0, 1, 3-6 行为完全不变。
    - 注入：当前 REQ + AC + permanent learnings + contextual learnings (最近 3 条)
    - 注入：AGENTS.md + git log --oneline -5 + 测试基础设施摘要
 
+3. **Pre-REQ snapshot（Issue #137）**
+   - 在 dispatch subagent 前记录当前 git HEAD，用于 TDD 合规的基线对比
+   ```bash
+   # 保存当前 HEAD 作为 TDD 验证基线
+   PRE_REQ_HASH=$(git rev-parse HEAD)
+   echo "[TDD-BASELINE] Pre-REQ snapshot: $PRE_REQ_HASH"
+   # 记录到临时文件（subagent 只读基线，避免污染）
+   echo "$PRE_REQ_HASH" > .sprint-state/last-req-baseline.txt
+   ```
+
 3. **Dispatch build subagent**
    - 使用 `task(category="unspecified-high", load_skills=["test-driven-development"], timeout=300)`
    - 强制 TDD 流程：RED → GREEN → REFACTOR
@@ -330,7 +340,34 @@ Phase 0, 1, 3-6 行为完全不变。
 
 4. **Run full regression tests**
    - L1: typecheck + lint on changed files
-   - L1b: 检查测试先行比率 (新增测试行数 / 总新增行数 ≥ 40%)
+   - **L1b: 客观测试先行验证（Issue #137）** — 使用 git diff 验证新增测试行数占总新增行数比例
+     ```bash
+     # 从基线读取 pre-REQ HEAD，支持跨多个 commit 的 REQ
+     PRE_BASELINE=$(cat .sprint-state/last-req-baseline.txt 2>/dev/null || echo "HEAD~1")
+     GIT_DIFF=$(git diff "$PRE_BASELINE"..HEAD --stat --diff-filter=AM 2>/dev/null)
+     # 提取新增测试行数（*.test.*, *.spec.*, __tests__/* 等）
+     TEST_LINES=$(echo "$GIT_DIFF" | grep -E '\.(test|spec)\.[a-z]+|__tests__/' | grep -oP '\d+(?= insertion)' | paste -sd+ | bc || echo 0)
+     # 提取总新增行数
+     TOTAL_LINES=$(echo "$GIT_DIFF" | grep -oP '\d+(?= insertion)' | paste -sd+ | bc || echo 0)
+     # 计算比率
+     if [ "$TOTAL_LINES" -gt 0 ]; then
+       RATIO=$((TEST_LINES * 100 / TOTAL_LINES))
+       echo "[TDD-CHECK] Test lines: $TEST_LINES / Total lines: $TOTAL_LINES = ${RATIO}%"
+       [ "$RATIO" -ge 40 ] || {
+         echo "[TDD-FAIL] Test-first ratio ${RATIO}% < 40% threshold"
+         echo "[TDD-FAIL] Expected ≥ 40% test lines. Retry with tests written first."
+         exit 1
+       }
+     else
+       echo "[TDD-CHECK] No new lines in diff (possibly no changes or first commit)"
+     fi
+     ```
+   - **L1b-alt: 测试文件存在验证** — 当 diff 为空或无新增行时，降级检查测试文件是否出现在 changeset 中
+     ```bash
+     HAS_TEST_FILES=$(echo "$GIT_DIFF" | grep -c -E '\.(test|spec)\.[a-z]+|__tests__/' || echo 0)
+     [ "$HAS_TEST_FILES" -gt 0 ] || { echo "[TDD-FAIL] No test files found in changeset"; exit 1; }
+     echo "[TDD-CHECK] Test files present in changeset: $HAS_TEST_FILES file(s)"
+     ```
    - **L2: 全量测试运行**（不只是 @test 当前 REQ 的测试）
    - L3: 检查整体覆盖率 ≥ 80%
 
@@ -438,9 +475,10 @@ REQ-001 开始 → 检查 test-utils.ts → 不存在
 - [ ] Test infrastructure confirmed ready
 
 **TDD Compliance**:
-- [ ] Tests written BEFORE implementation
-- [ ] Test/implementation ratio ≥ 40%
+- [ ] Tests written BEFORE implementation (verified via `git diff HEAD~1 --stat --diff-filter=AM`)
+- [ ] Test/implementation ratio ≥ 40% (L1b check: test_lines / total_lines ≥ 40%)
 - [ ] Mock usage justified (if >30% mock density)
+- [ ] Test files present in changeset (L1b-alt fallback)
 
 **Verification Layers**:
 - [ ] L1: typecheck + lint pass

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,7 +1,7 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-05-30
-**Version:** v0.5.1
+**Version:** v0.8.1
 
 ## OVERVIEW
 7-phase development pipeline: THINK→PLAN→BUILD→REVIEW→USER ACCEPT→FEEDBACK→SHIP, with ralph-loop default build mode.