@boyingliu01/xp-gate 0.8.16 → 0.8.18

package/lib/sprint-status.js

@@ -0,0 +1,295 @@
+/**
+ * xp-gate sprint-status — Sprint Flow progress CLI
+ *
+ * Reads .sprint-state/sprint-state.json (canonical schema per skills/sprint-flow/SKILL.md L893-942)
+ * and renders a formatted progress table.
+ *
+ * @module sprint-status
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+const PHASE_NAMES = {
+  '-1': 'ISOLATE',
+  '-0.5': 'AUTO-ESTIMATE',
+  '0': 'THINK',
+  '1': 'PLAN',
+  '2': 'BUILD',
+  '3': 'REVIEW',
+  '4': 'USER ACCEPT',
+  '5': 'FEEDBACK',
+  '6': 'SHIP',
+  '7': 'LAND',
+  '8': 'CLEANUP',
+};
+
+const PHASE_ORDER = ['-1', '-0.5', '0', '1', '2', '3', '4', '5', '6', '7', '8'];
+
+/**
+ * Read and parse sprint-state.json from a project directory.
+ * @param {string} dir - Project root directory
+ * @returns {object|null} Parsed sprint state, or null if not found or malformed
+ */
+function readSprintState(dir) {
+  try {
+    const stateFile = path.join(dir, '.sprint-state', 'sprint-state.json');
+    if (!fs.existsSync(stateFile)) return null;
+    const raw = fs.readFileSync(stateFile, 'utf8');
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Get a phase's status icon.
+ * @param {'completed'|'in_progress'|'pending'|string} status
+ * @returns {string} Icon character
+ */
+function statusIcon(status) {
+  switch (status) {
+    case 'completed': return '✅';
+    case 'in_progress': return '🔄';
+    default: return '⏳';
+  }
+}
+
+/**
+ * Format a duration in seconds to a human-readable string.
+ * @param {number|null} seconds
+ * @returns {string}
+ */
+function formatDuration(seconds) {
+  if (seconds == null || seconds === 0) return '';
+  if (seconds < 60) return `${seconds}s`;
+  const mins = Math.floor(seconds / 60);
+  if (mins < 60) return `${mins}m`;
+  const hrs = Math.floor(mins / 60);
+  return `${hrs}h ${mins % 60}m`;
+}
+
+/**
+ * Check if the state is stale (>1h since last activity).
+ * @param {object} state - Sprint state object
+ * @returns {boolean}
+ */
+function isStale(state) {
+  if (!state || !state.started_at) return false;
+  const started = new Date(state.started_at).getTime();
+  if (isNaN(started)) return false;
+  // Check latest phase_history timestamp (started_at or completed_at)
+  let latest = started;
+  if (Array.isArray(state.phase_history) && state.phase_history.length > 0) {
+    for (const ph of state.phase_history) {
+      if (ph.completed_at) {
+        const t = new Date(ph.completed_at).getTime();
+        if (!isNaN(t) && t > latest) latest = t;
+      }
+      if (ph.started_at) {
+        const t = new Date(ph.started_at).getTime();
+        if (!isNaN(t) && t > latest) latest = t;
+      }
+    }
+  }
+  return Date.now() - latest > 3600000; // 1h
+}
+
+/**
+ * Render sprint state as a formatted table string.
+ * @param {object} state - Sprint state object
+ * @returns {string}
+ */
+function formatSprintTable(state) {
+  if (!state || !state.task_description) {
+    return 'No active sprint in this directory';
+  }
+
+  const lines = [];
+  const branch = state.isolation?.branch || 'unknown';
+  const metrics = state.metrics || {};
+
+  // Header
+  lines.push(`Sprint: ${state.task_description}`);
+  lines.push(`ID: ${state.id || 'unknown'}  |  Branch: ${branch}`);
+
+  // Metrics line (if available)
+  const metricParts = [];
+  if (metrics.tests_passed != null) {
+    metricParts.push(`Tests: ${metrics.tests_passed} passed${metrics.tests_failed ? `, ${metrics.tests_failed} failed` : ''}`);
+  }
+  if (metrics.coverage_pct != null) {
+    metricParts.push(`Coverage: ${metrics.coverage_pct}%`);
+  }
+  if (metricParts.length > 0) {
+    lines.push(`Metrics: ${metricParts.join('  |  ')}`);
+  }
+
+  // Stale warning
+  if (isStale(state)) {
+    lines.push('⚠️  State may be stale (last updated >1h ago)');
+  }
+
+  lines.push('');
+
+  // Build phase lookup from phase_history
+  const historyByPhase = {};
+  if (Array.isArray(state.phase_history)) {
+    for (const ph of state.phase_history) {
+      historyByPhase[String(ph.phase)] = ph;
+    }
+  }
+
+  // Calculate column widths dynamically
+  let maxNameLen = 'Phase'.length;
+  for (const key of PHASE_ORDER) {
+    const history = historyByPhase[key];
+    const name = history?.phase_name || PHASE_NAMES[key] || key;
+    if (name.length > maxNameLen) maxNameLen = name.length;
+  }
+
+  // Separator line
+  const sep = '─'.repeat(maxNameLen + 40);
+
+  lines.push(sep);
+
+  for (const key of PHASE_ORDER) {
+    const history = historyByPhase[key];
+    const name = history?.phase_name || PHASE_NAMES[key] || key;
+    const status = history?.status || 'pending';
+    const icon = statusIcon(status);
+    const dur = formatDuration(history?.duration_seconds);
+    const statusLabel = status === 'completed' ? 'Completed' :
+      status === 'in_progress' ? 'In Progress' : 'Pending';
+
+    const line = `  Phase ${key.padStart(4)}  ${name.padEnd(maxNameLen + 1)} ${icon} ${dur.padEnd(5)} ${statusLabel}`;
+    lines.push(line);
+
+    // REQ-level progress for BUILD phase
+    if (history?.reqs) {
+      for (const [reqId, req] of Object.entries(history.reqs)) {
+        const reqIcon = statusIcon(req.status);
+        lines.push(`    ${reqIcon} ${reqId}  ${req.name}`);
+      }
+    }
+  }
+
+  lines.push(sep);
+
+  return lines.join('\n');
+}
+
+/**
+ * Convert sprint state to JSON string.
+ * @param {object} state - Sprint state object
+ * @returns {string} JSON string
+ */
+function jsonMode(state) {
+  return JSON.stringify(state, null, 2);
+}
+
+/**
+ * CLI entry point. Parses args and executes the appropriate mode.
+ * @param {string[]} args - CLI subargs (without 'sprint-status')
+ * @returns {Promise<number>} Exit code
+ */
+async function handleSprintStatus(args = []) {
+  const jsonFlag = args.includes('--json');
+  const watchFlag = args.includes('--watch');
+  const dirIdx = args.indexOf('--dir');
+  let searchDir = process.cwd();
+
+  if (dirIdx >= 0 && dirIdx + 1 < args.length) {
+    searchDir = path.resolve(args[dirIdx + 1]);
+    // Path traversal protection: must be under cwd
+    if (!searchDir.startsWith(process.cwd())) {
+      console.error('Error: --dir path must be under current working directory');
+      return 1;
+    }
+  }
+
+  const state = readSprintState(searchDir);
+
+  if (!state) {
+    console.log('No active sprint in this directory');
+    return 0;
+  }
+
+  if (jsonFlag) {
+    console.log(jsonMode(state));
+    return 0;
+  }
+
+  if (watchFlag) {
+    const stateFile = path.join(searchDir, '.sprint-state', 'sprint-state.json');
+    return watchMode(stateFile);
+  }
+
+  console.log(formatSprintTable(state));
+  return 0;
+}
+
+/**
+ * Watch mode: listen for changes to the sprint state file.
+ * Prefers fs.watch(), falls back to fs.watchFile().
+ * @param {string} stateFile - Path to sprint-state.json
+ * @returns {Promise<number>} This never resolves normally (process.exit on SIGINT)
+ */
+function watchMode(stateFile) {
+  return new Promise((resolve) => {
+    const dir = path.dirname(stateFile);
+    let watcher = null;
+
+    try {
+      watcher = fs.watch(dir, (eventType, filename) => {
+        if (filename === 'sprint-state.json' || filename === path.basename(stateFile)) {
+          const state = readSprintState(path.dirname(dir)); // parent of .sprint-state
+          if (state) {
+            console.clear();
+            console.log(formatSprintTable(state));
+          }
+        }
+      });
+    } catch {
+      // Fallback to fs.watchFile
+      try {
+        fs.watchFile(stateFile, { interval: 5000 }, () => {
+          const state = readSprintState(path.dirname(dir));
+          if (state) {
+            console.clear();
+            console.log(formatSprintTable(state));
+          }
+        });
+      } catch {
+        console.error('Watch mode not available on this platform');
+        resolve(1);
+        return;
+      }
+    }
+
+    // Initial render
+    const initialState = readSprintState(path.dirname(dir));
+    if (initialState) {
+      console.log(formatSprintTable(initialState));
+    }
+    console.log('Watching for changes... (Ctrl+C to stop)');
+
+    // Cleanup on exit
+    process.on('SIGINT', () => {
+      if (watcher) {
+        try { watcher.close(); } catch {}
+      }
+      try { fs.unwatchFile(stateFile); } catch {}
+      console.log('\nStopped watching.');
+      resolve(0);
+    });
+  });
+}
+
+module.exports = {
+  readSprintState,
+  formatSprintTable,
+  jsonMode,
+  isStale,
+  handleSprintStatus,
+};

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
-**Generated:** 2026-06-16
-**Commit:** b0448d3
+**Generated:** 2026-06-17
+**Commit:** d1b11ce
 **Branch:** main
-**Version:** 0.8.16.0
+**Version:** 0.8.18.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
-**Generated:** 2026-06-16
-**Commit:** b0448d3
+**Generated:** 2026-06-17
+**Commit:** d1b11ce
 **Branch:** main
-**Version:** 0.8.16.0
+**Version:** 0.8.18.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.8.16",
+  "version": "0.8.18",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.8.16",
+  "version": "0.8.18",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-06-16
-**Commit:** b0448d3
+**Generated:** 2026-06-17
+**Commit:** d1b11ce
 **Branch:** main
-**Version:** 0.8.16.0
+**Version:** 0.8.18.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-06-16
-**Commit:** b0448d3
+**Generated:** 2026-06-17
+**Commit:** d1b11ce
 **Branch:** main
-**Version:** 0.8.16.0
+**Version:** 0.8.18.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → USER ACCEPTANCE → FEEDBACK → SHIP → LAND → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-06-16
-**Commit:** b0448d3
+**Generated:** 2026-06-17
+**Commit:** d1b11ce
 **Branch:** main
-**Version:** 0.8.16.0
+**Version:** 0.8.18.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/index.ts

@@ -2,6 +2,9 @@ import { tool } from "@opencode-ai/plugin"
 import { z } from "zod"
 import { exec } from "child_process"
 import { promisify } from "util"
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs"
+import { join } from "node:path"
+import { homedir } from "node:os"
 
 const execAsync = promisify(exec)
 
@@ -10,10 +13,6 @@ interface OpenCodePluginInput {
   $: (strings: TemplateStringsArray, ...values: unknown[]) => Promise<{ text(): Promise<string> }>
 }
 
-/**
- * Run a shell command via async exec, returning stdout or error message.
- * Never throws — returns error string on failure.
- */
 async function runCmd(cmd: string, cwd: string): Promise<string> {
   try {
     const { stdout } = await execAsync(cmd, { cwd, timeout: 30000 })
@@ -26,22 +25,15 @@ async function runCmd(cmd: string, cwd: string): Promise<string> {
   }
 }
 
-/**
- * Check for xp-gate CLI availability and run a command via exec.
- */
 async function runXpGate(subcommand: string, cwd: string): Promise<string> {
-  // Check if xp-gate is on PATH
   try {
     await execAsync("command -v xp-gate", { cwd })
   } catch {
-    return ""  // CLI not available — caller should fall back
+    return ""
   }
   return runCmd(`xp-gate ${subcommand}`, cwd)
 }
 
-/**
- * Check for a newer xp-gate version (non-blocking, advisory only).
- */
 async function getUpgradeSuggestion(cwd: string): Promise<string> {
   try {
     const result = await runXpGate("upgrade --preview", cwd)
@@ -57,6 +49,79 @@ async function getUpgradeSuggestion(cwd: string): Promise<string> {
   }
 }
 
+// ── Auto-update check for opencode-plugin ──
+
+const CACHE_TTL_MS = 86_400_000
+const NPM_REGISTRY_URL = "https://registry.npmjs.org/-/package/@boyingliu01%2Fopencode-plugin/dist-tags"
+const FETCH_TIMEOUT_MS = 5_000
+const CACHE_FILE = join(homedir(), ".xp-gate", "opencode-plugin-version-check.json")
+
+let checked = false
+let checkInFlight: Promise<void> | null = null
+
+function semverLt(a: string, b: string): boolean {
+  const pa = a.replace(/^v/, "").split(".").map(Number)
+  const pb = b.replace(/^v/, "").split(".").map(Number)
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    const na = pa[i] ?? 0
+    const nb = pb[i] ?? 0
+    if (na !== nb) return na < nb
+  }
+  return false
+}
+
+async function checkPluginUpdate(pluginDir: string): Promise<void> {
+  if (checkInFlight) return
+
+  checkInFlight = (async () => {
+    try {
+      mkdirSync(join(homedir(), ".xp-gate"), { recursive: true })
+
+      if (existsSync(CACHE_FILE)) {
+        const cached = JSON.parse(readFileSync(CACHE_FILE, "utf8"))
+        if (Date.now() - cached.ts < CACHE_TTL_MS) return
+      }
+
+      let localVersion = ""
+      try {
+        const pkg = JSON.parse(readFileSync(join(pluginDir, "package.json"), "utf8"))
+        localVersion = pkg.version || ""
+      } catch {
+        return
+      }
+
+      const controller = new AbortController()
+      const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS)
+      try {
+        const response = await fetch(NPM_REGISTRY_URL, { signal: controller.signal })
+        if (!response.ok) return
+        const data: Record<string, unknown> = await response.json()
+        const remoteVersion = String(data.latest || "")
+
+        if (remoteVersion && localVersion && semverLt(localVersion, remoteVersion)) {
+          writeFileSync(CACHE_FILE, JSON.stringify({ ts: Date.now(), localVersion, remoteVersion }))
+          process.stderr.write(
+            `[XP-Gate] New opencode-plugin version v${remoteVersion} available (you have v${localVersion})\n` +
+            `[XP-Gate] Update with: cd ~/.config/opencode && npm update @boyingliu01/opencode-plugin\n`
+          )
+        } else if (remoteVersion && localVersion) {
+          // Cache "up to date" to avoid re-fetching every session
+          writeFileSync(CACHE_FILE, JSON.stringify({ ts: Date.now(), localVersion, remoteVersion, status: "current" }))
+        }
+      } finally {
+        clearTimeout(timer)
+      }
+    } catch {
+      // All errors silently ignored
+    }
+  })()
+
+  await checkInFlight
+  checkInFlight = null
+}
+
+// ── Plugin definition ──
+
 export const XpGatePlugin = async (input: OpenCodePluginInput) => {
   const { directory } = input
 
@@ -77,7 +142,6 @@ export const XpGatePlugin = async (input: OpenCodePluginInput) => {
             const upgrade = await getUpgradeSuggestion(cwd)
             return upgrade ? `${result}\n${upgrade}` : result
           }
-          // Fallback: invoke xp-gate source directly via node
           const cmd = `node ${directory}/src/npm-package/bin/xp-gate.js check "${target}"${gatesFlag}`
           return runCmd(cmd, cwd)
         },
@@ -95,7 +159,6 @@ export const XpGatePlugin = async (input: OpenCodePluginInput) => {
             const upgrade = await getUpgradeSuggestion(cwd)
             return upgrade ? `${result}\n${upgrade}` : result
           }
-          // Fallback: npx tsx on the principles source
           const cmd = `npx -y tsx ${directory}/src/principles/index.ts --files "${target}" --format console`
           return runCmd(cmd, cwd)
         },
@@ -113,12 +176,18 @@ export const XpGatePlugin = async (input: OpenCodePluginInput) => {
             const upgrade = await getUpgradeSuggestion(cwd)
             return upgrade ? `${result}\n${upgrade}` : result
           }
-          // Fallback: @archlinter/cli directly
           const cmd = `npx -y @archlinter/cli scan . --config ${config}`
           return runCmd(cmd, cwd)
         },
       }),
     },
+    "chat.message": async (_input: { message: string }) => {
+      if (!checked) {
+        checked = true
+        checkPluginUpdate(directory).catch((_err) => { /* silent: non-critical background check */ })
+      }
+      return { action: "continue" }
+    },
   }
 }
 

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.8.16",
+  "version": "0.8.18",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-06-16
-**Commit:** b0448d3
+**Generated:** 2026-06-17
+**Commit:** d1b11ce
 **Branch:** main
-**Version:** 0.8.16.0
+**Version:** 0.8.18.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-06-16
-**Commit:** b0448d3
+**Generated:** 2026-06-17
+**Commit:** d1b11ce
 **Branch:** main
-**Version:** 0.8.16.0
+**Version:** 0.8.18.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → USER ACCEPTANCE → FEEDBACK → SHIP → LAND → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-06-16
-**Commit:** b0448d3
+**Generated:** 2026-06-17
+**Commit:** d1b11ce
 **Branch:** main
-**Version:** 0.8.16.0
+**Version:** 0.8.18.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/bin/sprint-flow-guard.sh

@@ -0,0 +1,68 @@
+#!/bin/bash
+# sprint-flow-guard.sh — Qoder PreToolUse Hook Guard
+#
+# PURPOSE: Physically prevent LLM from editing/writing code before
+# delphi-review is APPROVED. Blocks Edit/Write/ApplyEdit tools.
+#
+# INTEGRATION: Registered in plugins/qoder/hooks/hooks.json
+# as a PreToolUse hook.
+#
+# MECHANISM:
+#   - Reads .sprint-state/delphi-reviewed.json
+#   - If file missing or verdict != "APPROVED" → deny
+#   - If verdict == "APPROVED" → allow
+#
+# GRACEFUL DEGRADATION:
+#   - If .sprint-state/ directory doesn't exist → ALLOW (not a sprint project)
+#   - If jq not available → ALLOW with warning (zero degradation for existing projects)
+
+# Check if this is a sprint project
+SPRINT_STATE_DIR="$(git rev-parse --show-toplevel 2>/dev/null)/.sprint-state"
+APPROVED_FILE="$SPRINT_STATE_DIR/delphi-reviewed.json"
+
+# If no .sprint-state directory, this isn't a sprint project → allow
+if [ ! -d "$SPRINT_STATE_DIR" ]; then
+  exit 0
+fi
+
+# If delphi-reviewed.json doesn't exist, delphi-review hasn't completed → DENY
+if [ ! -f "$APPROVED_FILE" ]; then
+  echo '{"decision":"deny","reason":"delphi-review not APPROVED. Complete Phase 1 delphi-review before any code modification. Run: /delphi-review"}'
+  exit 1
+fi
+
+# Check jq availability
+if ! command -v jq &> /dev/null; then
+  # jq not available → warn but allow (degradation for existing project)
+  echo '{"decision":"allow","warning":"jq not available, cannot verify delphi-review verdict. Install jq for full protection."}'
+  exit 0
+fi
+
+# Validate JSON
+if ! jq empty "$APPROVED_FILE" 2>/dev/null; then
+  echo '{"decision":"deny","reason":"delphi-reviewed.json is not valid JSON. Re-run: /delphi-review"}'
+  exit 1
+fi
+
+# Check verdict
+VERDICT=$(jq -r '.verdict' "$APPROVED_FILE" 2>/dev/null)
+MODE=$(jq -r '.mode' "$APPROVED_FILE" 2>/dev/null)
+
+if [ "$VERDICT" != "APPROVED" ]; then
+  DENY_MSG="{\"decision\":\"deny\",\"reason\":\"delphi-review verdict is '${VERDICT}', not APPROVED. Fix issues and re-run: /delphi-review\"}"
+  echo "$DENY_MSG"
+  exit 1
+fi
+
+# APPROVED → allow
+if [ "$MODE" = "design" ]; then
+  SPEC_PATH=$(jq -r '.specification_path // "not found"' "$APPROVED_FILE" 2>/dev/null)
+  echo "{\"decision\":\"allow\",\"message\":\"delphi-review design APPROVED. specification: ${SPEC_PATH}\"}"
+elif [ "$MODE" = "code-walkthrough" ]; then
+  COMMIT=$(jq -r '.commit // "unknown"' "$APPROVED_FILE" 2>/dev/null)
+  echo "{\"decision\":\"allow\",\"message\":\"delphi-review code-walkthrough APPROVED. commit: ${COMMIT}\"}"
+else
+  echo '{"decision":"allow","message":"delphi-review APPROVED"}'
+fi
+
+exit 0