@boyingliu01/xp-gate 0.10.10 → 0.10.11

package/mock-policy/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.10.10",
+  "version": "0.10.11",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.10.10",
+  "version": "0.10.11",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → USER ACCEPTANCE → FEEDBACK → SHIP → LAND → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/__tests__/tui-plugin.test.ts

@@ -26,28 +26,28 @@ import { readSprintState, renderSprintSidebar } from "../tui-plugin.ts"
 //  since it uses module-level state. We test the composition here.)
 function buildMultiSprintBlock(state: Record<string, unknown>, index: number): string {
   const lines: string[] = []
-  const id = (state as any).id || `sprint-${index}`
-  const desc = (state as any).task_description || id
+  const id = (state as Record<string, unknown>).id || `sprint-${index}`
+  const desc = (state as Record<string, unknown>).task_description || id
   lines.push(`SPRINT: ${desc}`)
-  if ((state as any).isolation?.branch) {
-    lines.push(`  ${(state as any).isolation.branch}`)
+  if ((state as Record<string, unknown>).isolation?.branch) {
+    lines.push(`  ${(state as Record<string, unknown>).isolation.branch}`)
   }
   const historyByPhase: Record<string, { status?: string; phase_name?: string }> = {}
-  if (Array.isArray((state as any).phase_history)) {
-    for (const ph of (state as any).phase_history) {
+  if (Array.isArray((state as Record<string, unknown>).phase_history)) {
+    for (const ph of (state as Record<string, unknown>).phase_history) {
       historyByPhase[String(ph.phase)] = ph
     }
   }
   for (const key of ['-1', '-0.5', '0', '1', '2', '3', '4', '5', '6', '7', '8']) {
     const history = historyByPhase[key]
-    if (!history && String((state as any).phase) !== key) continue
+    if (!history && String((state as Record<string, unknown>).phase) !== key) continue
     const name = history?.phase_name || ({
       '-1': 'ISOLATE', '-0.5': 'AUTO-ESTIMATE', '0': 'THINK', '1': 'PLAN', '2': 'BUILD',
       '3': 'REVIEW', '4': 'USER ACCEPT', '5': 'FEEDBACK', '6': 'SHIP', '7': 'LAND', '8': 'CLEANUP',
     })[key] || key
     const sym = history?.status === 'completed' ? '✓' :
       history?.status === 'in_progress' ? '→' :
-        (String((state as any).phase) === key ? '·' : '○')
+        (String((state as Record<string, unknown>).phase) === key ? '·' : '○')
     lines.push(`${sym} ${name.padEnd(14)} ${history?.status === 'completed' ? 'done' : history?.status === 'in_progress' ? 'active' : ''}`.replace(/\s+$/, ''))
   }
   return lines.join('\n')
@@ -296,7 +296,7 @@ void describe("renderSprintSidebar", () => {
   })
 
   void it("omits metrics section when none present", () => {
-    const output = renderSprintSidebar(makeSprintState({ metrics: {} }) as any)
+    const output = renderSprintSidebar(makeSprintState({ metrics: {} }) as unknown as Parameters<typeof renderSprintSidebar>[0])
     assert.ok(!output.includes("tests:"))
     assert.ok(!output.includes("cov:"))
   })

package/plugins/opencode/__tests__/xp-gate-update.test.ts

@@ -160,20 +160,22 @@ async function checkXpGateUpdate(): Promise<UpgradeResult> {
     return { action: "noop", localVersion, remoteVersion }
   }
 
-  // 5. Outdated — auto upgrade (non-blocking spawn)
+  // 5. Outdated — auto upgrade (awaited spawn)
   writeXpGateCache({ ts: Date.now(), localVersion, remoteVersion })
   try {
-    const child = spawn("npm", ["install", "-g", `${XP_GATE_NPM_PKG}@${remoteVersion}`], {
-      stdio: "pipe",
-      timeout: 120_000,
+    const exitCode = await new Promise<number | null>((resolve, reject) => {
+      const child = spawn("npm", ["install", "-g", `${XP_GATE_NPM_PKG}@${remoteVersion}`], {
+        stdio: "pipe",
+        timeout: 120_000,
+      })
+      child.on("close", (code) => resolve(code))
+      child.on("error", (err) => reject(err))
     })
-    child.on("close", (code) => {
-      if (code === 0) {
-        writeXpGateCache({ ts: Date.now(), localVersion: remoteVersion, remoteVersion, status: "current" })
-      }
-    })
-    child.on("error", () => { /* empty — cache won't get status:current, so next check retries */ })
-    return { action: "upgraded", localVersion, remoteVersion }
+    if (exitCode === 0) {
+      writeXpGateCache({ ts: Date.now(), localVersion: remoteVersion, remoteVersion, status: "current" })
+      return { action: "upgraded", localVersion, remoteVersion }
+    }
+    return { action: "error", localVersion, remoteVersion, error: `npm install exited with code ${exitCode}` }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err)
     return { action: "error", localVersion, remoteVersion, error: msg }
@@ -410,3 +412,107 @@ void describe("checkXpGateUpdate — opt-out config integration (UPG-003)", () =
     assert.ok(["noop", "upgraded", "error"].includes(result.action))
   })
 })
+
+// ── UPG-004: Fire-and-forget spawn → cache write test ──
+
+void describe("checkXpGateUpdate — spawn completes and writes cache (UPG-004)", () => {
+  const fakeHome = join(tmpdir(), "xp-gate-upd-spawn-cache-" + randomUUID())
+  const origHome = process.env.HOME
+
+  before(() => {
+    process.env.HOME = fakeHome
+    mkdirSync(join(fakeHome, ".xp-gate"), { recursive: true })
+  })
+
+  after(() => {
+    process.env.HOME = origHome
+    rmSync(fakeHome, { recursive: true, force: true })
+  })
+
+  void it("should write cache with status:current after spawn-based upgrade completes", async () => {
+    // WARNING: This test ACTUALLY spawns npm install -g.
+    // It's skipped in CI environments.
+    if (process.env.CI) {
+      console.log("SKIP: UPG-004 spawn test disabled in CI")
+      return
+    }
+
+    // Simulate: local is old, remote is newer → should trigger spawn
+    const cachePath = join(fakeHome, ".xp-gate", "xp-gate-version-check.json")
+    writeFileSync(cachePath, JSON.stringify({
+      ts: Date.now() - 86_400_000 - 3600_000, // stale cache
+      localVersion: "0.9.0",
+      remoteVersion: "0.9.1",
+    }))
+
+    // Override local version to force upgrade path
+    getLocalVersionOverride = () => "0.9.0"
+
+    const result = await checkXpGateUpdate()
+    getLocalVersionOverride = null
+
+    // After fix: spawn is awaited, so cache is already written when function returns
+    assert.equal(result.action, "upgraded")
+
+    // Cache should have status:current immediately (no delay needed)
+    const finalCache = readXpGateCache()
+    if (finalCache) {
+      assert.equal(finalCache.status, "current",
+        "UPG-004 FAIL: spawn did not write status:current. The upgrade promise " +
+        "must be awaited so the cache reflects the completed install.")
+    }
+  })
+})
+
+// ── UPG-005: runBackgroundUpdates awaits checkXpGateUpdate ──
+
+/**
+ * Simulates runBackgroundUpdates to verify it properly awaits the upgrade.
+ * This test validates that the chat.message hook doesn't lose the upgrade.
+ */
+void describe("runBackgroundUpdates — await verification (UPG-005)", () => {
+  const fakeHome = join(tmpdir(), "xp-gate-upd-await-" + randomUUID())
+  const origHome = process.env.HOME
+
+  before(() => {
+    process.env.HOME = fakeHome
+    mkdirSync(join(fakeHome, ".xp-gate"), { recursive: true })
+  })
+
+  after(() => {
+    process.env.HOME = origHome
+    rmSync(fakeHome, { recursive: true, force: true })
+  })
+
+  void it("checkXpGateUpdate resolves its promise BEFORE returning result", async () => {
+    // If spawn is fire-and-forget, the function returns before spawn completes.
+    // This test measures: does the returned promise resolve before or after spawn?
+    if (process.env.CI) {
+      console.log("SKIP: UPG-005 spawn timing test disabled in CI")
+      return
+    }
+
+    const cachePath = join(fakeHome, ".xp-gate", "xp-gate-version-check.json")
+    writeFileSync(cachePath, JSON.stringify({
+      ts: Date.now() - 86_400_000 - 3600_000,
+      localVersion: "0.9.0",
+      remoteVersion: "0.9.1",
+    }))
+
+    getLocalVersionOverride = () => "0.9.0"
+
+    const startTime = Date.now()
+    const result = await checkXpGateUpdate()
+    const elapsed = Date.now() - startTime
+    getLocalVersionOverride = null
+
+    assert.equal(result.action, "upgraded")
+
+    // After fix: spawn is properly awaited, so elapsed >= 1000ms
+    console.log(`UPG-005: checkXpGateUpdate() returned in ${elapsed}ms`)
+    assert.ok(elapsed > 1000,
+      `UPG-005 FAIL: resolve took only ${elapsed}ms — spawn is NOT awaited. ` +
+      "The chat.message hook must await the upgrade promise so " +
+      "npm install completes and cache gets status:current.")
+  })
+})

package/plugins/opencode/index.ts

@@ -129,17 +129,19 @@ async function checkXpGateUpdate(): Promise<UpgradeResult> {
 
   writeCache(XP_GATE_CACHE_FILE, { ts: Date.now(), localVersion, remoteVersion })
   try {
-    const child = spawn("npm", ["install", "-g", `${XP_GATE_NPM_PKG}@${remoteVersion}`], {
-      stdio: "pipe",
-      timeout: 120_000,
+    const exitCode = await new Promise<number | null>((resolve, reject) => {
+      const child = spawn("npm", ["install", "-g", `${XP_GATE_NPM_PKG}@${remoteVersion}`], {
+        stdio: "pipe",
+        timeout: 120_000,
+      })
+      child.on("close", (code) => resolve(code))
+      child.on("error", (err) => reject(err))
     })
-    child.on("close", (code) => {
-      if (code === 0) {
-        writeCache(XP_GATE_CACHE_FILE, { ts: Date.now(), localVersion: remoteVersion, remoteVersion, status: "current" })
-      }
-    })
-    child.on("error", () => { /* empty — cache won't get status:current, so next check retries */ })
-    return { action: "upgraded", localVersion, remoteVersion }
+    if (exitCode === 0) {
+      writeCache(XP_GATE_CACHE_FILE, { ts: Date.now(), localVersion: remoteVersion, remoteVersion, status: "current" })
+      return { action: "upgraded", localVersion, remoteVersion }
+    }
+    return { action: "error", localVersion, remoteVersion, error: `npm install exited with code ${exitCode}` }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err)
     return { action: "error", localVersion, remoteVersion, error: msg }
@@ -319,11 +321,9 @@ export const XpGatePlugin = async (input: OpenCodePluginInput) => {
     "chat.message": async (_input: { message: string }) => {
       if (!checked) {
         checked = true
-        runBackgroundUpdates(directory).then((msg) => {
-          if (msg) process.stderr.write(`${msg}\n`)
-        })
+        const msg = await runBackgroundUpdates(directory).catch(() => null)
+        if (msg) process.stderr.write(`${msg}\n`)
       }
-      return { action: "continue" }
     },
   }
 }

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.10.10",
+  "version": "0.10.11",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → USER ACCEPTANCE → FEEDBACK → SHIP → LAND → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.10.10",
+  "version": "0.10.11",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → USER ACCEPTANCE → FEEDBACK → SHIP → LAND → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/skills/delphi-review/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/skills/sprint-flow/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 **11-phase** development pipeline: ISOLATE → AUTO-ESTIMATE → THINK → PLAN → BUILD → REVIEW → USER ACCEPTANCE → FEEDBACK → SHIP → LAND → CLEANUP. Phase 2 default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE in Phase 1: design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -3,7 +3,7 @@
 **Generated:** 2026-06-23
 **Commit:** bac916f
 **Branch:** main
-**Version:** 0.10.10.0
+**Version:** 0.10.11.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.