---
name: ios-quality-check
description: Read-only iOS quality assurance provider implementing the common quality contract. Executes project-configured Tuist, SwiftPM, SwiftFormat, and SwiftLint capabilities from .agents/quality/ios-quality.json, enforces ArchTests architecture rules and module boundaries, and outputs structured results bound to repository SHA.
---

# iOS Quality Assurance Provider

## Overview

You are the iOS Quality Provider (`d3nexus:ios-quality-check`). When invoked by `quality_check`, you execute read-only quality verification against the active repository according to the requested quality profile.

You do not guess commands from file layouts. You load capabilities from `.agents/quality/ios-quality.json`, execute the project-declared command arrays, collect evidence, and output a validated result document adhering to the shared [Provider Result Contract](../quality_check/references/provider-result-contract.md).

## Workflow

```mermaid
flowchart TD
    INVOKE["Invoked with normalized request payload"] --> LOAD["Step 1: Load .agents/quality/ios-quality.json"]
    LOAD --> VALIDATE["Step 2: Validate capability configuration and profile completeness"]
    VALIDATE --> PLAN["Step 3: Resolve execution plan for requested profile"]
    PLAN --> EXEC["Step 4: Execute read-only commands without shell interpolation"]
    EXEC --> COLLECT["Step 5: Collect check records, coverage, and evidence files"]
    COLLECT --> RESULT["Step 6: Emit validated result document bound to repository SHA"]
```

### Step 1: Configuration Loading and Validation

Load the project capability manifest `.agents/quality/ios-quality.json` from the repository root:

```bash
python3 skills/ios-quality-check/resources/scripts/validate_ios_quality.py .agents/quality/ios-quality.json --profile "<profile>"
```

- If `.agents/quality/ios-quality.json` is missing or invalid: emit status `BLOCKED`.
- If the requested profile is not configured: emit status `BLOCKED`.
- For profile `epic`: if `architecture`, `boundaries`, `test`, or `coverage` capabilities are missing: emit status `BLOCKED`.

### Step 2: Read-Only Command Execution

Execute commands declared in `capabilities` for the target profile:
1. Commands are executed as structured argument arrays (no shell interpolation).
   - An argument beginning with `{skills_dir}` is resolved to the directory containing this plugin's `skills/` folders (the parent of `ios-quality-check/`), so manifests can call sibling skill scripts without machine-specific paths (e.g. `["python3", "{skills_dir}/sync-shared-contracts/resources/scripts/sync_contracts.py", "diff-check", "--base-ref", "{base_ref}"]`).
   - An argument containing `{base_ref}` is substituted with the normalized `base_ref` invocation parameter from `quality_check` (falling back to `develop` or the repository default only when `base_ref` was not supplied).
2. All commands run from the resolved repository root.
3. If an executable is missing or cannot be spawned: record check status as `BLOCKED`.
4. If a command runs and reports defects (nonzero exit code):
   - For governance and contract capabilities (`contracts`, `contracts_<domain>`, and `contract_diff`): exit code `0` records `PASS`, exit code `2` (or JSON `"status": "BLOCKED"`) records `BLOCKED`, and any other nonzero exit code (such as `1`) records `FAIL`.
   - For all other capabilities: nonzero exit code records `FAIL`.
5. If a command succeeds (zero exit code): record check status as `PASS`.

Standard capabilities modeled after `ios_digital_wallet`:
- **Format**: `swiftformat --config quality/.swiftformat --lint .`
- **Lint**: `swiftlint lint --config quality/.swiftlint.yml --strict`
- **Architecture Governance (ArchTests)**: `swift test --package-path ArchTests` (enforces K1–K10 Clean Architecture AST rules)
- **Module Boundaries**: `./scripts/check_module_boundaries.sh` (with `scripts/module_boundary_whitelist.txt`)
- **Unit Tests**: `swift test` across packages
- **Coverage**: `./scripts/check_coverage_thresholds.sh` (parses `default.profdata` / llvm-cov)
- **Acceptance Harness**: `./scripts/acceptance_check.sh` (`tuist generate --no-open && xcodebuild test ...`)

### Step 3: Semantic Audits

Execute specialist audits as configured:
- **Architecture Gate**: Evaluates ArchTests pure domain logic, MVI state immutability, and boundary whitelisting.
- **Coverage Gate**: Parses `default.profdata` and evaluates line/branch coverage against configured threshold.
- **Specialist Audits**: Dispatches `@security-audit`, `@architecture-audit`, `@ios-ui-audit`, and `@code-health-audit`.
  - **Scope-Aware UI Audit (`scope_unmodified`)**: Before dispatching `@ios-ui-audit`, inspect `git diff --name-only <base_ref>...HEAD`. If zero iOS UI files (`**/UI/**`, `**/Presentation/**`, `*View.swift`, `*ViewController.swift`) were modified, skip `@ios-ui-audit` and record the check as `status: "NOT_APPLICABLE"` with `not_applicable_reason: {"code": "scope_unmodified", "detail": "No iOS SwiftUI/UIKit files modified against base_ref"}`.

### Step 4: Result Assembly and Contract Emission

Assemble the result document matching [provider-result.schema.json](../quality_check/resources/schemas/provider-result.schema.json):

- `provider_id`: `"ios-core"` (or matching invocation identifier)
- `contract_version`: `1`
- `profile`: `<profile>`
- `repository_sha`: Verified commit SHA matching invocation
- `status`: Aggregated provider status (`FAIL` if any check failed, `BLOCKED` if any check blocked, else `PASS`)
- `started_head` and `finished_head`: Git SHA recorded before and after execution
- `checks`, `coverage`, `evidence`, `blockers`, `warnings`

Return the result document to the orchestrator.

## References & Resources

- [Capability Schema](resources/schemas/ios-quality.schema.json): Machine-readable JSON Schema for iOS capability manifests.
- [Capability Validator](resources/scripts/validate_ios_quality.py): Script and CLI validator for iOS capability files.
- [Valid Fixture](resources/fixtures/valid_ios_quality.json): Reference valid capability configuration fixture modeled on `ios_digital_wallet`.