xp-gate 0.5.1

package/adapters/java.sh

@@ -0,0 +1,191 @@
+#!/usr/bin/env bash
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# Plugin directory
+PLUGIN_DIR="$SCRIPT_DIR/plugins/p3c-java"
+WHALECLOUD_PLUGIN_DIR="$SCRIPT_DIR/plugins/whalecloud-java"
+
+_is_whalecloud_enabled() {
+  # Check if whalecloud-java plugin is enabled
+  [ -d "$WHALECLOUD_PLUGIN_DIR" ] && \
+    ([ -f "config/pmd/whalecloud-ruleset.xml" ] || \
+     grep -q 'xp-gate-whalecloud-java\|xp-gateWhalecloudCheck' pom.xml build.gradle build.gradle.kts 2>/dev/null)
+}
+
+_detect_java_build() {
+  if [ -f "pom.xml" ]; then
+    echo "maven"
+  elif [ -f "build.gradle" ] || [ -f "build.gradle.kts" ]; then
+    echo "gradle"
+  else
+    echo "none"
+  fi
+}
+
+run_static_analysis() {
+  local build_system
+  build_system=$(_detect_java_build)
+
+  if [ "$build_system" = "maven" ]; then
+    mvn compile -q 2>&1 | grep -i "error\|fail" | head -5
+    if [ "${PIPESTATUS[0]}" -ne 0 ]; then
+      echo "❌ Maven compilation failed"
+      return 1
+    fi
+  elif [ "$build_system" = "gradle" ]; then
+    gradle compileJava --quiet 2>&1 | grep -i "error\|fail" | head -5
+    if [ "${PIPESTATUS[0]}" -ne 0 ]; then
+      echo "❌ Gradle compilation failed"
+      return 1
+    fi
+  fi
+
+  # CheckStyle with Google style (legacy fallback)
+  if command -v checkstyle &>/dev/null; then
+    checkstyle -c /google_checks.xml . 2>&1 | head -20
+  fi
+
+  # PMD error detection (legacy fallback)
+  if command -v pmd &>/dev/null; then
+    pmd check -d . -R category/java/errorprone.xml 2>&1 | head -20
+  fi
+
+  # p3c-pmd check (Alibaba coding guidelines) — primary Java quality gate
+  _run_p3c_check "$build_system"
+
+  # WhaleCloud Java Coding Standards — overlay on top of p3c-pmd
+  _run_whalecloud_check "$build_system"
+
+  return 0
+}
+
+run_lint() {
+  run_static_analysis
+}
+
+run_tests() {
+  local build_system
+  build_system=$(_detect_java_build)
+
+  if [ "$build_system" = "maven" ]; then
+    mvn test -q 2>&1 | tail -15
+    return "${PIPESTATUS[0]}"
+  elif [ "$build_system" = "gradle" ]; then
+    gradle test --quiet 2>&1 | tail -15
+    return "${PIPESTATUS[0]}"
+  else
+    echo "No Maven/Gradle project detected"
+    return 1
+  fi
+}
+
+run_coverage() {
+  local build_system
+  build_system=$(_detect_java_build)
+
+  if [ "$build_system" = "maven" ]; then
+    mvn test jacoco:report -q 2>&1 | tail -10
+    return "${PIPESTATUS[0]}"
+  elif [ "$build_system" = "gradle" ]; then
+    gradle jacocoTestReport --quiet 2>&1 | tail -10
+    return "${PIPESTATUS[0]}"
+  else
+    echo "No Maven/Gradle project detected"
+    return 1
+  fi
+}
+
+run_p3c_check() {
+  _run_p3c_check "$(_detect_java_build)"
+}
+
+_run_p3c_check() {
+  local build_system="$1"
+
+  echo "  Running p3c-pmd Alibaba Coding Guidelines check..."
+
+  if [ "$build_system" = "maven" ]; then
+    if grep -q '<id>xp-gate-p3c</id>' pom.xml 2>/dev/null; then
+      # Profile already installed — use it
+      mvn pmd:check -P xp-gate-p3c -Dpmd.failOnViolation=true 2>&1 | tail -30
+      return "${PIPESTATUS[0]}"
+    else
+      # Profile not installed — run inline with p3c-pmd dependency
+      if command -v mvn &>/dev/null; then
+        mvn pmd:check \
+          -Dpmd.rulesets="/rulesets/java/ali-comment.xml,/rulesets/java/ali-concurrent.xml,/rulesets/java/ali-constant.xml,/rulesets/java/ali-exception.xml,/rulesets/java/ali-flowcontrol.xml,/rulesets/java/ali-naming.xml,/rulesets/java/ali-oop.xml,/rulesets/java/ali-orm.xml,/rulesets/java/ali-other.xml,/rulesets/java/ali-set.xml" \
+          -Dpmd.failOnViolation=true \
+          -DprintFailingErrors=true \
+          2>&1 | tail -30
+        local result="${PIPESTATUS[0]}"
+
+        if [ "$result" -ne 0 ]; then
+          echo ""
+          echo "  ⚠️  p3c-pmd check FAILED — Alibaba Coding Guidelines violations found"
+          echo "  To permanently enable: bash $PLUGIN_DIR/scripts/install-maven-p3c.sh"
+          return 1
+        fi
+
+        echo "  ✅ p3c-pmd check passed"
+        return 0
+      else
+        echo "  ℹ️  Maven not available — Skipping p3c-pmd"
+        return 0
+      fi
+    fi
+
+  elif [ "$build_system" = "gradle" ]; then
+    if grep -q 'xp-gateP3cCheck\|p3c-pmd' build.gradle 2>/dev/null || \
+       grep -q 'xp-gateP3cCheck\|p3c-pmd' build.gradle.kts 2>/dev/null; then
+      gradle xp-gateP3cCheck --quiet 2>&1 | tail -20
+      return "${PIPESTATUS[0]}"
+    else
+      echo "  ℹ️  p3c-pmd not configured in Gradle build"
+      echo "  To enable: bash $PLUGIN_DIR/scripts/install-gradle-p3c.sh"
+      return 0
+    fi
+  fi
+
+  echo "  ℹ️  No Maven/Gradle project — Skipping p3c-pmd"
+  return 0
+}
+
+_run_whalecloud_check() {
+  local build_system="$1"
+
+  if ! _is_whalecloud_enabled; then
+    return 0
+  fi
+
+  echo "  Running WhaleCloud Java Coding Standards check..."
+
+  if [ "$build_system" = "maven" ]; then
+    if grep -q '<id>xp-gate-whalecloud-java</id>' pom.xml 2>/dev/null; then
+      mvn pmd:check checkstyle:check spotbugs:check \
+        -P xp-gate-whalecloud-java -Dpmd.failOnViolation=true \
+        2>&1 | tail -30
+      return "${PIPESTATUS[0]}"
+    else
+      echo "  ⚠️  whalecloud-java profile not installed in pom.xml"
+      echo "  To enable: bash $WHALECLOUD_PLUGIN_DIR/scripts/install-maven-whalecloud.sh"
+      return 0
+    fi
+
+  elif [ "$build_system" = "gradle" ]; then
+    if grep -q 'xp-gateWhalecloudCheck' build.gradle 2>/dev/null || \
+       grep -q 'xp-gateWhalecloudCheck' build.gradle.kts 2>/dev/null; then
+      gradle xp-gateWhalecloudCheck --quiet 2>&1 | tail -20
+      return "${PIPESTATUS[0]}"
+    else
+      echo "  ⚠️  whalecloud-java not configured in Gradle build"
+      echo "  To enable: bash $WHALECLOUD_PLUGIN_DIR/scripts/install-gradle-whalecloud.sh"
+      return 0
+    fi
+  fi
+
+  return 0
+}
+
+run_whalecloud_check() {
+  _run_whalecloud_check "$(_detect_java_build)"
+}

package/adapters/kotlin.sh

@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+
+_detect_kotlin_build() {
+  if [ -f "pom.xml" ]; then
+    echo "maven"
+  elif [ -f "build.gradle" ] || [ -f "build.gradle.kts" ]; then
+    echo "gradle"
+  else
+    echo "none"
+  fi
+}
+
+run_static_analysis() {
+  local build_system
+  build_system=$(_detect_kotlin_build)
+
+  if [ "$build_system" = "maven" ]; then
+    mvn compile -q 2>&1 | grep -i "error\|fail" | head -5
+    if [ ${PIPESTATUS[0]} -ne 0 ]; then
+      echo "❌ Maven compilation failed"
+      return 1
+    fi
+  elif [ "$build_system" = "gradle" ]; then
+    gradle compileKotlin --quiet 2>&1 | grep -i "error\|fail" | head -5
+    if [ ${PIPESTATUS[0]} -ne 0 ]; then
+      echo "❌ Gradle compilation failed"
+      return 1
+    fi
+  fi
+
+  if command -v ktlint &>/dev/null; then
+    ktlint "**/*.kt" 2>&1 | head -20
+    return $?
+  elif command -v detekt &>/dev/null; then
+    detekt --input . 2>&1 | head -20
+    return $?
+  else
+    echo "No Kotlin lint tools (ktlint/detekt)"
+    return 0
+  fi
+}
+
+run_lint() {
+  run_static_analysis
+}
+
+run_tests() {
+  local build_system
+  build_system=$(_detect_kotlin_build)
+
+  if [ "$build_system" = "maven" ]; then
+    mvn test -q 2>&1 | tail -15
+    return ${PIPESTATUS[0]}
+  elif [ "$build_system" = "gradle" ]; then
+    gradle test --quiet 2>&1 | tail -15
+    return ${PIPESTATUS[0]}
+  else
+    echo "No build system detected"
+    return 1
+  fi
+}
+
+run_coverage() {
+  local build_system
+  build_system=$(_detect_kotlin_build)
+
+  if [ "$build_system" = "maven" ]; then
+    mvn test jacoco:report -q 2>&1 | tail -10
+    return ${PIPESTATUS[0]}
+  elif [ "$build_system" = "gradle" ]; then
+    gradle jacocoTestReport --quiet 2>&1 | tail -10
+    return ${PIPESTATUS[0]}
+  else
+    echo "No build system detected"
+    return 1
+  fi
+}

package/adapters/objectivec.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+
+run_static_analysis() {
+  if command -v oclint &>/dev/null; then
+    oclint-json-compilation-database 2>&1 | head -30
+    return $?
+  elif command -v clang-tidy &>/dev/null; then
+    find . -name "*.m" -o -name "*.mm" -o -name "*.h" | head -20 | xargs clang-tidy 2>&1 | head -30
+    return $?
+  else
+    echo "No Objective-C analysis tools available (oclint/clang-tidy)"
+    return 1
+  fi
+}
+
+run_lint() {
+  run_static_analysis
+}
+
+run_tests() {
+  if [ -f "*.xcodeproj" ] || [ -f "*.xcworkspace" ]; then
+    echo "Xcode project detected — use xcodebuild for tests"
+    return 1
+  else
+    echo "No Objective-C test framework detected"
+    return 1
+  fi
+}
+
+run_coverage() {
+  if command -v xccov &>/dev/null; then
+    xccov view --report 2>&1 | tail -10
+    return $?
+  else
+    echo "No Objective-C coverage tools available"
+    return 1
+  fi
+}

package/adapters/powershell.sh

@@ -0,0 +1,138 @@
+#!/usr/bin/env bash
+
+# PowerShell adapter for quality gates
+#
+# Tool requirements:
+#   - PSScriptAnalyzer: Install-Module PSScriptAnalyzer -Scope CurrentUser
+#   - Pester:           Install-Module Pester -Scope CurrentUser
+#
+# Notes:
+#   - Gate 2 (Duplicate Code): No PowerShell-native duplicate detector exists.
+#     jscpd and lizard do not support .ps1. SKIP for now.
+#   - Gate 3 (Cyclomatic Complexity): lizard does not analyze .ps1.
+#     SKIP for now.
+#   - Gate 4 (Principles Checker): No PowerShell principles checker.
+#     SKIP for now.
+#   - Gate 6 (Architecture): No PowerShell architecture tooling.
+#     SKIP for now.
+
+# Detect PowerShell executable (prefer pwsh 7+, fallback to powershell.exe 5.1)
+_detect_pwsh() {
+  if command -v pwsh &>/dev/null 2>&1; then
+    echo "pwsh"
+  elif command -v powershell.exe &>/dev/null 2>&1; then
+    echo "powershell.exe"
+  elif command -v powershell &>/dev/null 2>&1; then
+    echo "powershell"
+  else
+    echo ""
+  fi
+}
+
+run_static_analysis() {
+  local PWSH
+  PWSH=$(_detect_pwsh)
+  if [ -n "$PWSH" ]; then
+    echo "Running PSScriptAnalyzer static analysis on PowerShell scripts..."
+    # Recursively analyze all .ps1 files from repo root
+    # Exit with non-zero if Error or Warning severity issues found
+    "$PWSH" -NoProfile -Command "
+      \$results = Invoke-ScriptAnalyzer -Path . -Recurse -Severity Error,Warning
+      if (\$results) {
+        \$results | Format-Table -AutoSize
+        exit 1
+      }
+      exit 0
+    "
+    return $?
+  else
+    echo "PowerShell not available, skipping PowerShell static analysis"
+    return 0
+  fi
+}
+
+run_lint() {
+  # PSScriptAnalyzer covers both static analysis and linting
+  run_static_analysis
+}
+
+run_tests() {
+  local PWSH
+  PWSH=$(_detect_pwsh)
+  if [ -z "$PWSH" ]; then
+    echo "PowerShell not available, skipping PowerShell tests"
+    return 0
+  fi
+
+  # Check if Pester tests exist in common locations
+  local test_paths=""
+  if [ -d "tests" ]; then
+    test_paths="tests/"
+  elif [ -d "test" ]; then
+    test_paths="test/"
+  fi
+
+  if [ -n "$test_paths" ] && find "$test_paths" -name "*.Tests.ps1" -type f 2>/dev/null | head -1 | grep -q "."; then
+    echo "Running Pester tests..."
+    "$PWSH" -NoProfile -Command "
+      \$results = Invoke-Pester -Path '$test_paths' -PassThru
+      if (\$results.FailedCount -gt 0) {
+        Write-Host \"FAILED: \$(\$results.FailedCount) test(s)\"
+        exit 1
+      }
+      Write-Host \"PASSED: \$(\$results.PassedCount) test(s)\"
+      exit 0
+    "
+    return $?
+  elif find . -maxdepth 2 -name "*.Tests.ps1" -type f 2>/dev/null | head -1 | grep -q "."; then
+    echo "Running Pester tests in current directory..."
+    "$PWSH" -NoProfile -Command "
+      \$results = Invoke-Pester -CI -PassThru
+      if (\$results.FailedCount -gt 0) {
+        Write-Host \"FAILED: \$(\$results.FailedCount) test(s)\"
+        exit 1
+      }
+      Write-Host \"PASSED: \$(\$results.PassedCount) test(s)\"
+      exit 0
+    "
+    return $?
+  else
+    echo "No Pester tests found"
+    return 0
+  fi
+}
+
+run_coverage() {
+  local PWSH
+  PWSH=$(_detect_pwsh)
+  if [ -z "$PWSH" ]; then
+    echo "PowerShell not available, skipping PowerShell coverage"
+    return 0
+  fi
+
+  local test_paths=""
+  if [ -d "tests" ]; then
+    test_paths="tests/"
+  elif [ -d "test" ]; then
+    test_paths="test/"
+  fi
+
+  if [ -n "$test_paths" ] || find . -maxdepth 2 -name "*.Tests.ps1" -type f 2>/dev/null | head -1 | grep -q "."; then
+    echo "Running Pester with code coverage..."
+    local path_arg="${test_paths:-.}"
+    "$PWSH" -NoProfile -Command "
+      \$results = Invoke-Pester -Path '$path_arg' -CodeCoverage @(Get-ChildItem -Path . -Filter *.ps1 -Recurse -Exclude *.Tests.ps1) -PassThru
+      \$pct = [math]::Round(\$results.CodeCoverage.CoveragePercent, 1)
+      Write-Host \"Coverage: \$pct%\"
+      if (\$pct -lt 80) {
+        Write-Host \"WARNING: Coverage \$pct% is below 80% threshold\"
+        exit 0
+      }
+      exit 0
+    " 2>&1
+    return $?
+  else
+    echo "No Pester tests found for coverage measurement"
+    return 0
+  fi
+}

package/adapters/python.sh

@@ -0,0 +1,104 @@
+#!/usr/bin/env bash
+
+# Python adapter for quality gates
+# Tools: mypy, ruff/flake8, pytest, import-linter (architecture)
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$SCRIPT_DIR/../adapter-common.sh" 2>/dev/null || true
+
+run_static_analysis() {
+  require_tool mypy "mypy" || return 1
+
+  echo "Running Python static analysis (mypy)..."
+  mypy .
+  return $?
+}
+
+run_lint() {
+  if command -v ruff >/dev/null 2>&1; then
+    echo "Running Python linting (ruff)..."
+    ruff check .
+    return $?
+  elif command -v flake8 >/dev/null 2>&1; then
+    echo "Running Python linting (flake8)..."
+    flake8 .
+    return $?
+  else
+    echo "⚠ No Python linter available (ruff or flake8 required)"
+    return 0
+  fi
+}
+
+run_architecture() {
+  if [ ! -f ".import-linter.yml" ] && [ ! -f "import_linter_config.yml" ]; then
+    return 0
+  fi
+
+  require_tool lint-imports "import-linter" || return 0
+
+  echo "Running Python architecture checks (import-linter)..."
+  lint-imports
+  return $?
+}
+
+run_tests() {
+  require_tool pytest "pytest" || return 1
+
+  echo "Running Python tests..."
+  PYTEST_OUTPUT=$(pytest --exitfirst --tb=short 2>&1)
+  PYTEST_EXIT=$?
+  echo "$PYTEST_OUTPUT" | tail -30
+
+  # Check for collection errors (ModuleNotFoundError / ImportError)
+  if echo "$PYTEST_OUTPUT" | grep -qi "ModuleNotFoundError\|ImportError"; then
+    echo "❌ Python test collection errors detected — modules not importable"
+    echo "   Fix: Run 'pip install -e .' or set PYTHONPATH=."
+    return 1
+  fi
+
+  # Check if no tests were actually collected
+  if echo "$PYTEST_OUTPUT" | grep -q "collected 0 items\|no tests ran"; then
+    echo "❌ No tests were collected — nothing actually ran"
+    return 1
+  fi
+
+  # Check for errors in summary line (e.g. "3 errors")
+  ERROR_COUNT=$(echo "$PYTEST_OUTPUT" | grep -oP '\d+ error' | grep -oP '\d+' | head -1)
+  if [ -n "$ERROR_COUNT" ] && [ "$ERROR_COUNT" -gt 0 ]; then
+    echo "❌ $ERROR_COUNT test collection/execution errors detected"
+    return 1
+  fi
+
+  return $PYTEST_EXIT
+}
+
+run_coverage() {
+  require_tool pytest "pytest" || return 1
+
+  echo "Running Python coverage..."
+  PYTEST_OUTPUT=$(pytest --exitfirst --tb=short --cov=. --cov-fail-under=80 2>&1)
+  PYTEST_EXIT=$?
+  echo "$PYTEST_OUTPUT" | tail -30
+
+  # Check for collection errors (ModuleNotFoundError / ImportError)
+  if echo "$PYTEST_OUTPUT" | grep -qi "ModuleNotFoundError\|ImportError"; then
+    echo "❌ Python test collection errors detected — modules not importable"
+    echo "   Fix: Run 'pip install -e .' or set PYTHONPATH=."
+    return 1
+  fi
+
+  # Check if no tests were actually collected
+  if echo "$PYTEST_OUTPUT" | grep -q "collected 0 items\|no tests ran"; then
+    echo "❌ No tests were collected — nothing actually ran"
+    return 1
+  fi
+
+  # Check for errors in summary line (e.g. "3 errors")
+  ERROR_COUNT=$(echo "$PYTEST_OUTPUT" | grep -oP '\d+ error' | grep -oP '\d+' | head -1)
+  if [ -n "$ERROR_COUNT" ] && [ "$ERROR_COUNT" -gt 0 ]; then
+    echo "❌ $ERROR_COUNT test collection/execution errors detected"
+    return 1
+  fi
+
+  return $PYTEST_EXIT
+}

package/adapters/shell.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+
+# Shell adapter for quality gates
+
+run_static_analysis() {
+  if command -v shellcheck >/dev/null 2>&1; then
+    echo "Running Shell static analysis..."
+    shellcheck ./*.sh
+    return $?
+  else
+    echo "shellcheck not available, skipping Shell linting"
+    return 0
+  fi
+}
+
+run_lint() {
+  if command -v shellcheck >/dev/null 2>&1; then
+    echo "Running Shell linting..."
+    shellcheck ./*.sh ./**/**/*.sh
+    return $?
+  else
+    echo "shellcheck not available, skipping Shell linting"
+    return 0
+  fi
+}
+
+run_tests() {
+  # Look for and run shell test files
+  if [[ -d "tests" ]] && [[ -n "$(find tests -name "*.sh" -type f | head -n 1)" ]]; then
+    echo "Running Shell tests..."
+    for test_file in tests/*.sh; do
+      if [[ -x "$test_file" ]]; then
+        "$test_file"
+        local exit_code=$?
+        if [[ $exit_code -ne 0 ]]; then
+          return $exit_code
+        fi
+      fi
+    done
+    return 0
+  elif command -v shunit2 >/dev/null 2>&1; then
+    echo "Checking for shunit2 tests..."
+    # Skip - shunit2 requires properly formatted tests, just run any script if available
+    return 0
+  else
+    echo "No shell tests detected or shunit2 available"
+    return 0
+  fi
+}
+
+run_coverage() {
+  # Shell does not typically have standardized coverage tools
+  echo "Shell coverage not available"
+  return 0
+}

package/adapters/swift.sh

@@ -0,0 +1,44 @@
+#!/usr/bin/env bash
+
+run_static_analysis() {
+  if command -v swiftlint &>/dev/null; then
+    swiftlint lint 2>&1 | head -30
+    return $?
+  else
+    echo "SwiftLint not available"
+    return 1
+  fi
+}
+
+run_lint() {
+  if command -v swiftlint &>/dev/null; then
+    swiftlint lint --strict 2>&1 | head -30
+    return $?
+  else
+    echo "SwiftLint not available"
+    return 1
+  fi
+}
+
+run_tests() {
+  if command -v swift &>/dev/null && [ -f "Package.swift" ]; then
+    swift test 2>&1 | tail -20
+    return $?
+  elif [ -f "*.xcodeproj" ] || [ -f "*.xcworkspace" ]; then
+    echo "Xcode project detected — use xcodebuild for tests"
+    return 1
+  else
+    echo "No Swift test framework detected"
+    return 1
+  fi
+}
+
+run_coverage() {
+  if command -v swift &>/dev/null && [ -f "Package.swift" ]; then
+    swift test --enable-code-coverage 2>&1 | tail -10
+    return $?
+  else
+    echo "No Swift test framework detected"
+    return 1
+  fi
+}