@boyingliu01/xp-gate 0.8.1 → 0.8.2

package/adapters/plugins/book299-4081-c/rules/style/c/350/247/204-4-4.yml

@@ -0,0 +1,14 @@
+---
+id: C规-4-4
+name: 变量赋值时必须对其值进行合法性检查
+severity: error
+tool: auto
+category: wc-style
+description: |
+  变量赋值时必须对其值进行合法性检查
+
+  Auto-extracted from book299-4081-C++编程规范.txt.
+
+check:
+  type: ast-grep
+  pattern: TODO

package/adapters/plugins/book299-4081-c/rules/style/c/350/247/204-4-5.yml

@@ -0,0 +1,14 @@
+---
+id: C规-4-5
+name: 指针不要进行复杂的逻辑或算术运算
+severity: error
+tool: auto
+category: wc-style
+description: |
+  指针不要进行复杂的逻辑或算术运算
+
+  Auto-extracted from book299-4081-C++编程规范.txt.
+
+check:
+  type: ast-grep
+  pattern: TODO

package/adapters/plugins/book299-4081-c/rules/style/c/350/247/204-4-7.yml

@@ -0,0 +1,14 @@
+---
+id: C规-4-7
+name: 构造函数应只完成简单有效的功能
+severity: error
+tool: auto
+category: wc-style
+description: |
+  构造函数应只完成简单有效的功能
+
+  Auto-extracted from book299-4081-C++编程规范.txt.
+
+check:
+  type: ast-grep
+  pattern: TODO

package/adapters/plugins/book299-4081-c/scripts/install-gradle.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+# Auto-generated Gradle install script
+set -e
+echo "✅ Gradle plugin installed"

package/adapters/plugins/book299-4081-c/scripts/install-maven.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+# Auto-generated Maven install script
+set -e
+PLUGIN_DIR="$(cd "$(dirname "$0")"/.. && pwd)"
+PROJECT_ROOT="${1:-.}"
+cd "$PROJECT_ROOT"
+if [ ! -f "pom.xml" ]; then
+  echo "❌ No pom.xml found"
+  exit 1
+fi
+if grep -q "<id>xp-gate-$(basename "$PLUGIN_DIR")</id>" pom.xml; then
+  echo "✅ Already installed"
+  exit 0
+fi
+cat >> pom.xml << 'APPEND'
+<!-- Auto-generated XP-Gate plugin profile -->
+<!-- See plugin documentation for details -->
+<profiles><profile><id>xp-gate-AUTO</id></profile></profiles>
+APPEND
+echo "✅ Plugin profile installed"

package/adapters/plugins/book299-4083-javascriptes5/README.md

@@ -0,0 +1,21 @@
+# book299-4083-javascriptes5
+
+Auto-generated plugin from spec document.
+
+## Source
+- **Spec file**: book299-4083-JavaScript(ES5)语言编码规范.txt
+- **Language**: js
+- **Generated**: 2026-05-13
+- **Rule count**: 3
+
+## Installation
+
+### Maven
+```bash
+bash githooks/adapters/plugins/scripts/install-maven.sh
+```
+
+### Gradle
+```bash
+bash githooks/adapters/plugins/scripts/install-gradle.sh
+```

package/adapters/plugins/book299-4083-javascriptes5/plugin.yml

@@ -0,0 +1,21 @@
+---
+id: book299-4083-javascriptes5
+name: book299-4083-javascriptes5
+version: 1.0.0
+languages: [js]
+description: |
+  Auto-generated plugin from spec document: book299-4083-JavaScript(ES5)语言编码规范.txt
+  Generated by xp-gate init on 2026-05-13.
+source_file: book299-4083-JavaScript(ES5)语言编码规范.txt
+severity: error
+categories:
+  - wc-style: Coding style rules
+  - wc-security: Security rules
+  - wc-performance: Performance rules
+maven:
+  profile: xp-gate-book299-4083-javascriptes5
+  profile_file: templates/maven/xp-gate-book299-4083-javascriptes5-profile.xml
+  install_script: scripts/install-maven.sh
+gradle:
+  config_file: templates/gradle/xp-gate-book299-4083-javascriptes5.gradle
+  install_script: scripts/install-gradle.sh

package/adapters/plugins/book299-4083-javascriptes5/rules/security/gen-0001.yml

@@ -0,0 +1,14 @@
+---
+id: GEN-0001
+name: 对于包含重要信息（如app-signature 数字签名信息等）的前端js文件需要进行混淆加固（规范来源： 安全治理单11109465）            
+severity: error
+tool: auto
+category: wc-security
+description: |
+  对于包含重要信息（如app-signature 数字签名信息等）的前端js文件需要进行混淆加固（规范来源： 安全治理单11109465）            
+
+  Auto-extracted from book299-4083-JavaScript(ES5)语言编码规范.txt.
+
+check:
+  type: ast-grep
+  pattern: TODO

package/adapters/plugins/book299-4083-javascriptes5/rules/security/gen-0002.yml

@@ -0,0 +1,14 @@
+---
+id: GEN-0002
+name: 前端应用，主要涉及到nginx的基础镜像，需要使用国际业务运营中心-平台技术部提供的基础安全镜像（规范来源：          严重生产故障3791904）  
+severity: error
+tool: auto
+category: wc-security
+description: |
+  前端应用，主要涉及到nginx的基础镜像，需要使用国际业务运营中心-平台技术部提供的基础安全镜像（规范来源：          严重生产故障3791904）  
+
+  Auto-extracted from book299-4083-JavaScript(ES5)语言编码规范.txt.
+
+check:
+  type: ast-grep
+  pattern: TODO

package/adapters/plugins/book299-4083-javascriptes5/rules/security/gen-0003.yml

@@ -0,0 +1,14 @@
+---
+id: GEN-0003
+name: 禁止在前端 js、css、html 文件中包含物理路径信息、数据库连接信息、SQL语句信息、appKey/accessSecret、对象存储 key/secre
+severity: error
+tool: auto
+category: wc-security
+description: |
+  禁止在前端 js、css、html 文件中包含物理路径信息、数据库连接信息、SQL语句信息、appKey/accessSecret、对象存储 key/secre
+
+  Auto-extracted from book299-4083-JavaScript(ES5)语言编码规范.txt.
+
+check:
+  type: ast-grep
+  pattern: TODO

package/adapters/plugins/book299-4083-javascriptes5/scripts/install-gradle.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+# Auto-generated Gradle install script
+set -e
+echo "✅ Gradle plugin installed"

package/adapters/plugins/book299-4083-javascriptes5/scripts/install-maven.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+# Auto-generated Maven install script
+set -e
+PLUGIN_DIR="$(cd "$(dirname "$0")"/.. && pwd)"
+PROJECT_ROOT="${1:-.}"
+cd "$PROJECT_ROOT"
+if [ ! -f "pom.xml" ]; then
+  echo "❌ No pom.xml found"
+  exit 1
+fi
+if grep -q "<id>xp-gate-$(basename "$PLUGIN_DIR")</id>" pom.xml; then
+  echo "✅ Already installed"
+  exit 0
+fi
+cat >> pom.xml << 'APPEND'
+<!-- Auto-generated XP-Gate plugin profile -->
+<!-- See plugin documentation for details -->
+<profiles><profile><id>xp-gate-AUTO</id></profile></profiles>
+APPEND
+echo "✅ Plugin profile installed"

package/adapters/plugins/p3c-java/README.md

@@ -0,0 +1,66 @@
+# p3c-pmd — Alibaba Java Coding Guidelines Plugin
+
+阿里 Java 开发规范检查插件，基于 [alibaba/p3c](https://github.com/alibaba/p3c) PMD 实现。
+
+## 覆盖规则
+
+54 条规则，10 个类别：
+
+| 类别 | 规则数 | 内容 |
+|------|--------|------|
+| ali-comment | 6 | Javadoc 和注释规约 |
+| ali-concurrent | 8 | 并发编程规约 |
+| ali-constant | 3 | 常量定义规约 |
+| ali-exception | 4 | 异常处理规约 |
+| ali-flowcontrol | 6 | 控制语句规约 |
+| ali-naming | 9 | 命名规约 |
+| ali-oop | 7 | OOP 规约 |
+| ali-orm | 5 | ORM/SQL 规约 |
+| ali-other | 3 | 其他规约 |
+| ali-set | 3 | 集合处理规约 |
+
+## 安装
+
+### Maven 项目
+
+```bash
+bash githooks/adapters/plugins/p3c-java/scripts/install-maven-p3c.sh
+```
+
+安装后会自动将 `xp-gate-p3c` profile 注入 pom.xml。
+
+### Gradle 项目
+
+```bash
+bash githooks/adapters/plugins/p3c-java/scripts/install-gradle-p3c.sh
+```
+
+## 手动运行
+
+```bash
+# Maven
+mvn clean verify -P xp-gate-p3c
+
+# Gradle
+./gradlew xp-gateP3cCheck
+```
+
+## 插件结构
+
+```
+p3c-java/
+├── plugin.yml                              # 插件元数据
+├── README.md                               # 说明文档
+├── templates/
+│   ├── maven/xp-gate-p3c-profile.xml        # Maven profile 模板
+│   └── gradle/xp-gate-p3c-gradle.gradle     # Gradle 配置模板
+└── scripts/
+    ├── install-maven-p3c.sh               # Maven 安装脚本
+    └── install-gradle-p3c.sh              # Gradle 安装脚本
+```
+
+## 与浩鲸规范的关系
+
+浩鲸 Java 规范以阿里规范为基础，但增加了企业内部积累的经验规则。
+本插件提供阿里规范作为**默认基线**。浩鲸个性化规范后续会在 `whalecloud-java` 插件中
+作为增强层叠加。

package/adapters/plugins/p3c-java/plugin.yml

@@ -0,0 +1,30 @@
+---
+id: p3c-java
+name: Alibaba Java Coding Guidelines (p3c-pmd)
+version: 2.1.1
+languages: [java]
+description: >
+  阿里巴巴 Java 开发手册规范检查，基于 p3c-pmd 实现。
+  覆盖 54 条规则，10 个检查类别，是浩鲸科技等国内企业 Java 规范的基线。
+author: Alibaba Group (p3c project)
+rules_count: 54
+severity: error
+categories:
+  - ali-comment:     Javadoc 和注释规约 (6 条)
+  - ali-concurrent:  并发编程规约 (8 条)
+  - ali-constant:    常量定义规约 (3 条)
+  - ali-exception:   异常处理规约 (4 条)
+  - ali-flowcontrol: 控制语句规约 (6 条)
+  - ali-naming:      命名规约 (9 条)
+  - ali-oop:         OOP 规约 (7 条)
+  - ali-orm:         ORM/SQL 规约 (5 条)
+  - ali-other:       其他规约 (3 条)
+  - ali-set:         集合处理规约 (3 条)
+maven:
+  profile: xp-gate-p3c
+  profile_file: templates/maven/xp-gate-p3c-profile.xml
+  install_script: scripts/install-maven-p3c.sh
+gradle:
+  config_file: templates/gradle/xp-gate-p3c-gradle.gradle
+  install_script: scripts/install-gradle-p3c.sh
+rules_path: https://github.com/alibaba/p3c/tree/master/p3c-pmd/src/main/resources/rulesets/java

package/adapters/plugins/p3c-java/scripts/install-gradle-p3c.sh

@@ -0,0 +1,45 @@
+#!/bin/bash
+# Install p3c-pmd into a Gradle project for XP-Gate Java quality gate.
+# Usage: bash scripts/install-gradle-p3c.sh [project_root]
+
+set -e
+
+PLUGIN_DIR="$(cd "$(dirname "$0")"/.. && pwd)"
+PROJECT_ROOT="${1:-.}"
+
+cd "$PROJECT_ROOT"
+
+if [ ! -f "build.gradle" ] && [ ! -f "build.gradle.kts" ]; then
+  echo "❌ No build.gradle found in $(pwd)"
+  exit 1
+fi
+
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "   XP-Gate: Installing p3c-pmd for Gradle projects"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""
+
+GRADLE_FILE=""
+if [ -f "build.gradle" ]; then
+  GRADLE_FILE="build.gradle"
+elif [ -f "build.gradle.kts" ]; then
+  GRADLE_FILE="build.gradle.kts"
+fi
+
+if grep -q 'XP-GateP3cCheck\|p3c-pmd' "$GRADLE_FILE" 2>/dev/null; then
+  echo "✅ p3c-pmd already configured in $GRADLE_FILE"
+  exit 0
+fi
+
+echo "ℹ️  Appending p3c-pmd configuration to $GRADLE_FILE..."
+{
+  echo ""
+  echo "// XP-Gate: Alibaba p3c-pmd quality gate"
+  echo "apply from: '$PLUGIN_DIR/templates/gradle/xp-gate-p3c-gradle.gradle'"
+  echo ""
+} >> "$GRADLE_FILE"
+
+echo ""
+echo "✅ p3c-pmd installed successfully!"
+echo ""
+echo "  # Run: ./gradlew XP-GateP3cCheck"

package/adapters/plugins/p3c-java/scripts/install-maven-p3c.sh

@@ -0,0 +1,98 @@
+#!/bin/bash
+# Install p3c-pmd into a Maven project for XP-Gate Java quality gate.
+# Usage: bash scripts/install-maven-p3c.sh [project_root]
+#
+# This script:
+# 1. Detects if pom.xml exists
+# 2. Merges xp-gate-p3c profile into pom.xml (or creates profile snippet)
+# 3. Outputs instructions for running p3c check
+
+set -e
+
+PLUGIN_DIR="$(cd "$(dirname "$0")"/.. && pwd)"
+PROJECT_ROOT="${1:-.}"
+
+cd "$PROJECT_ROOT"
+
+if [ ! -f "pom.xml" ]; then
+  echo "❌ No pom.xml found in $(pwd)"
+  echo "This script requires a Maven project."
+  exit 1
+fi
+
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "   XP-Gate: Installing p3c-pmd for Java quality gate"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""
+
+PROFILE_FILE="$PLUGIN_DIR/templates/maven/xp-gate-p3c-profile.xml"
+
+# Check if p3c profile already exists
+if grep -q '<id>xp-gate-p3c</id>' pom.xml; then
+  echo "✅ p3c-pmd profile already exists in pom.xml"
+  echo ""
+  echo "To run: mvn clean verify -P xp-gate-p3c"
+  exit 0
+fi
+
+# Check if pom.xml has a profiles section
+if grep -q '<profiles>' pom.xml; then
+  # Insert profile before </profiles>
+  echo "ℹ️  Merging p3c-pmd profile into existing <profiles> section..."
+
+  # Create a temp file with the profile content
+  TEMP_PROFILE=$(mktemp)
+  cat "$PROFILE_FILE" > "$TEMP_PROFILE"
+
+  # Use sed to insert before </profiles>
+  # Find the line number of </profiles>
+  PROFILES_END_LINE=$(grep -n '</profiles>' pom.xml | head -1 | cut -d: -f1)
+
+  if [ -n "$PROFILES_END_LINE" ]; then
+    head -n $((PROFILES_END_LINE - 1)) pom.xml > pom.xml.tmp
+    {
+      echo ""
+      echo "    <!-- XP-Gate: Alibaba p3c-pmd quality gate profile -->"
+      sed 's/^/    /' "$TEMP_PROFILE"
+      echo ""
+    } >> pom.xml.tmp
+    tail -n +"$PROFILES_END_LINE" pom.xml >> pom.xml.tmp
+    mv pom.xml.tmp pom.xml
+  fi
+else
+  # No profiles section, append before </project>
+  echo "ℹ️  Appending p3c-pmd profile to pom.xml..."
+
+  PROJECT_END_LINE=$(grep -n '</project>' pom.xml | tail -1 | cut -d: -f1)
+
+  if [ -n "$PROJECT_END_LINE" ]; then
+    head -n $((PROJECT_END_LINE - 1)) pom.xml > pom.xml.tmp
+    {
+      echo ""
+      echo "  <!-- XP-Gate: Alibaba p3c-pmd quality gate profile -->"
+      echo "  <profiles>"
+      sed 's/^/    /' "$PROFILE_FILE"
+      echo ""
+      echo "  </profiles>"
+      echo ""
+    } >> pom.xml.tmp
+    tail -n +"$PROJECT_END_LINE" pom.xml >> pom.xml.tmp
+    mv pom.xml.tmp pom.xml
+  fi
+fi
+
+echo ""
+echo "✅ p3c-pmd profile installed successfully!"
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "   Usage"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""
+echo "  # Run p3c-pmd checks:"
+echo "  mvn clean verify -P xp-gate-p3c"
+echo ""
+echo "  # Run with fail on violation:"
+echo "  mvn clean verify -P xp-gate-p3c -Dpmd.failOnViolation=true"
+echo ""
+echo "  # This will be integrated into XP-Gate pre-commit Gate 1"
+echo ""

package/adapters/plugins/p3c-java/templates/gradle/xp-gate-p3c-gradle.gradle

@@ -0,0 +1,68 @@
+// =============================================================================
+// p3c-pmd Gradle configuration for XP-Gate Java quality gate.
+// Provides Alibaba Java Coding Guidelines checks via PMD.
+//
+// Usage:
+//   ./gradlew pmdMain
+//   ./gradlew build -P p3cCheck
+//
+// Rules covered: 54 rules across 10 categories
+// =============================================================================
+
+plugins {
+    id 'pmd'
+}
+
+pmd {
+    // PMD 6.55.0+ includes p3c-pmd 2.1.1 compatibility
+    toolVersion = '6.55.0'
+    ruleSetFiles = files(
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-comment.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-concurrent.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-constant.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-exception.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-flowcontrol.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-naming.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-oop.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-orm.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-other.xml",
+        "https://raw.githubusercontent.com/alibaba/p3c/master/p3c-pmd/src/main/resources/rulesets/java/ali-set.xml"
+    )
+    ruleSets = [] // Clear default PMD rule sets, use only p3c rules
+    consoleOutput = true
+    ignoreFailures = project.hasProperty('p3cIgnoreFailures')
+    maxFailures = 0 // Block on any violation
+    reportsDir = file("$buildDir/reports/pmd")
+
+    // Optimize for CI/commit hook: only check changed files
+    incrementalAnalysis = true
+    incrementalAnalysisCacheFile = file("$buildDir/pmd/main.cache")
+
+    // Include test source directory
+    source = sourceSets.main.allJava + sourceSets.test.allJava
+}
+
+// Task alias for XP-Gate integration
+task XP-GateP3cCheck(type: Pmd) {
+    description = 'Run p3c-pmd checks for XP-Gate quality gate'
+    group = 'verification'
+    ruleSetFiles = pmd.ruleSetFiles
+    ruleSets = []
+    consoleOutput = true
+    ignoreFailures = false
+    maxFailures = 0
+    source = sourceSets.main.allJava + sourceSets.test.allJava
+    reports {
+        html.required = true
+        xml.required = true
+    }
+}
+
+// Make build depend on p3c check when P3C is enabled
+project.afterEvaluate {
+    if (project.hasProperty('p3cCheck')) {
+        tasks.named('build').configure {
+            dependsOn tasks.named('XP-GateP3cCheck')
+        }
+    }
+}

package/adapters/plugins/p3c-java/templates/maven/xp-gate-p3c-profile.xml

@@ -0,0 +1,81 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  p3c-pmd Maven profile for XP-Gate Java quality gate.
+  Provides Alibaba Java Coding Guidelines checks via PMD.
+
+  Usage:
+    mvn clean compile pmd:check -P XP-Gate-p3c
+    mvn clean compile pmd:check -P XP-Gate-p3c -Dpmd.failOnViolation=true
+
+  Rules covered: 54 rules across 10 categories
+    - ali-comment, ali-concurrent, ali-constant, ali-exception,
+      ali-flowcontrol, ali-naming, ali-oop, ali-orm, ali-other, ali-set
+-->
+<profile>
+  <id>XP-Gate-p3c</id>
+  <activation>
+    <file>
+      <exists>${project.basedir}/src/main</exists>
+    </file>
+  </activation>
+  <build>
+    <plugins>
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-pmd-plugin</artifactId>
+        <version>3.21.2</version>
+        <configuration>
+          <targetJdk>${java.version}</targetJdk>
+          <rulesets>
+            <ruleset>/rulesets/java/ali-comment.xml</ruleset>
+            <ruleset>/rulesets/java/ali-concurrent.xml</ruleset>
+            <ruleset>/rulesets/java/ali-constant.xml</ruleset>
+            <ruleset>/rulesets/java/ali-exception.xml</ruleset>
+            <ruleset>/rulesets/java/ali-flowcontrol.xml</ruleset>
+            <ruleset>/rulesets/java/ali-naming.xml</ruleset>
+            <ruleset>/rulesets/java/ali-oop.xml</ruleset>
+            <ruleset>/rulesets/java/ali-orm.xml</ruleset>
+            <ruleset>/rulesets/java/ali-other.xml</ruleset>
+            <ruleset>/rulesets/java/ali-set.xml</ruleset>
+          </rulesets>
+          <printFailingErrors>true</printFailingErrors>
+          <failOnViolation>true</failOnViolation>
+          <includeTestSourceDirectory>true</includeTestSourceDirectory>
+          <outputEncoding>UTF-8</outputEncoding>
+          <analysisCache>true</analysisCache>
+          <maxWarnings>0</maxWarnings>
+        </configuration>
+        <executions>
+          <execution>
+            <id>p3c-check</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>check</goal>
+            </goals>
+            <configuration>
+              <failOnViolation>${pmd.failOnViolation}</failOnViolation>
+            </configuration>
+          </execution>
+          <execution>
+            <id>p3c-cpd</id>
+            <phase>verify</phase>
+            <goals>
+              <goal>cpd-check</goal>
+            </goals>
+            <configuration>
+              <failOnViolation>true</failOnViolation>
+              <minimumTokens>100</minimumTokens>
+            </configuration>
+          </execution>
+        </executions>
+        <dependencies>
+          <dependency>
+            <groupId>com.alibaba.p3c</groupId>
+            <artifactId>p3c-pmd</artifactId>
+            <version>2.1.1</version>
+          </dependency>
+        </dependencies>
+      </plugin>
+    </plugins>
+  </build>
+</profile>