@boyingliu01/xp-gate 0.14.6 → 0.14.8

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/sprint-flow/hooks.md

@@ -0,0 +1,18 @@
+# Hooks — Sprint Flow
+
+Sprint Flow integrates with safety and operational hooks to protect the development environment.
+
+## Security Hooks
+
+| Hook | Purpose | Activation |
+|------|---------|------------|
+| `/careful` | Safety guardrails for destructive commands | Activate before any `rm`, `force-push`, or `git reset` |
+| `/freeze` | Restrict edits to sprint worktree directory | Prevent accidental changes outside sprint scope |
+| `/guard` | Full safety mode (careful + freeze) | Maximum protection for high-risk operations |
+
+## Operational Hooks
+
+| Hook | Purpose | Activation |
+|------|---------|------------|
+| `/context-save` | Save sprint context before pause or handoff | Before pausing sprint or switching tasks |
+| `/context-restore` | Restore sprint context on resume | When resuming from pause or handoff |

package/plugins/opencode/skills/sprint-flow/scripts/verify-sprint-state.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+# sprint-flow: Verify sprint state integrity
+# Checks that sprint-state.json is valid JSON and all expected keys exist.
+#
+# Usage: bash verify-sprint-state.sh [sprint-state-dir]
+
+set -euo pipefail
+
+STATE_DIR="${1:-.sprint-state}"
+STATE_FILE="$STATE_DIR/sprint-state.json"
+
+if [ ! -f "$STATE_FILE" ]; then
+    echo "SKIP: No sprint-state.json found at $STATE_FILE"
+    exit 0
+fi
+
+# Validate JSON
+if ! command -v node &>/dev/null; then
+    echo "WARN: node not available, skipping JSON validation"
+    exit 0
+fi
+
+node -e "
+const fs = require('fs');
+try {
+    const data = JSON.parse(fs.readFileSync('$STATE_FILE', 'utf8'));
+    const requiredKeys = ['sprint_id', 'status', 'current_phase', 'phases'];
+    const missing = requiredKeys.filter(k => !(k in data));
+    if (missing.length > 0) {
+        console.error('ERROR: Missing required keys in sprint-state.json:', missing.join(', '));
+        process.exit(1);
+    }
+    console.log('OK: sprint-state.json is valid with all required keys');
+} catch (e) {
+    console.error('ERROR: sprint-state.json is not valid JSON:', e.message);
+    process.exit(1);
+}
+"

package/plugins/opencode/skills/sprint-flow/tools.md

@@ -0,0 +1,29 @@
+# Tools Whitelist — Sprint Flow
+
+Sprint Flow is an **orchestration skill** that coordinates subagents and system commands.
+It does NOT implement code directly — it delegates implementation to subagents.
+
+## Allowed Tools
+
+| Tool | Usage | Rationale |
+|------|-------|-----------|
+| `Bash(git, gh, npm, node)` | git worktree/branch/commit, gh PR/release, npm/node CLI | Required for sprint infrastructure management |
+| `Read` | Read project files, configs, docs | Required for context gathering |
+| `Write` | Write sprint-state, specification.yaml, phase summaries | Required for sprint state persistence |
+| `Edit` | Edit sprint-state, CHANGELOG, VERSION | Required for version management |
+| `Glob` | Find project files by pattern | Required for project discovery |
+| `Grep` | Search file contents | Required for codebase understanding |
+| `Task` | Delegate to subagents (quick, deep, unspecified-high) | Core orchestration mechanism |
+| `Skill` | Invoke integrated skills (brainstorming, autoplan, delphi-review, etc.) | Required for skill chain execution |
+| `TodoWrite` | Track sprint progress | Required for progress visibility |
+| `Question` | Ask user at decision gates | Required for user decision points |
+
+## Denied Tools
+
+| Tool | Rationale |
+|------|-----------|
+| `rm -rf (any recursive force remove)` | Destructive — sprint flow only cleans up via `git worktree remove` |
+| `git push --force` | Destructive — never force push during sprint |
+| `DROP TABLE or destructive DB operations` | Destructive — sprint flow orchestrates, does not manage databases |
+| `Write(source code)` | Sprint flow NEVER writes implementation code directly — delegates to subagents via `Task` |
+| `Edit(source code)` | Sprint flow NEVER edits implementation code — delegates to subagents via `Task` |

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.14.6",
+  "version": "0.14.8",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 10 quality gates (Gate 0-9), Sprint Flow (11 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.

package/skills/delphi-review/SKILL.md

@@ -13,14 +13,19 @@ description: >
   before push, architecture evaluation, or "/delphi-review".
   NOT WHEN: Asking HOW to review something (educational), mentioning "review" in passing without intent,
   requesting a simple code check or lint, asking about the Delphi process itself, or mentioning
-  "review" as part of a different workflow (e.g., "code review" without multi-expert intent).
+  "review" as part of a different workflow (e.g., "code review" without multi-expert intent),
+  asking for review guidelines/checklists/formats, individual peer review, or casual review requests.
 
   TRIGGERS: "/delphi-review", "review this design", "评审这个需求", "评审这个设计", "design review",
   "多专家评审", "consensus review", "code walkthrough", "push review", "architecture review",
-  "delphi review", "run delphi", "start delphi".
+  "delphi review", "run delphi", "start delphi", "评审这个架构", "review this architecture",
+  "评审PR", "review this PR with delphi", "delphi评审", "delphi 评审", "run delphi review",
+  "执行delphi", "启动delphi评审".
   NEGATIVE TRIGGERS: "how does delphi work", "what is delphi review", "code review checklist",
   "review my code quickly", "can you review this", "peer review", "I need a review",
-  "explain the review process", "review guidelines".
+  "explain the review process", "review guidelines", "how to review a design",
+  "code review template", "review format", "PR review", "帮我review一下",
+  "just review this", "quick review", "review steps".
 maturity: beta
 auto_continue: true
 triggers:
@@ -37,6 +42,15 @@ triggers:
   - "delphi review"
   - "run delphi"
   - "start delphi"
+  - "评审这个架构"
+  - "review this architecture"
+  - "评审PR"
+  - "review this PR with delphi"
+  - "delphi评审"
+  - "delphi 评审"
+  - "run delphi review"
+  - "执行delphi"
+  - "启动delphi评审"
 triggers_negative_examples:
   - "how does delphi work"       # educational question about the process
   - "what is delphi review"      # asking for explanation, not execution
@@ -49,6 +63,15 @@ triggers_negative_examples:
   - "review guidelines"          # asking about guidelines, not executing
   - "how to review a design"     # educational
   - "PR review"                  # single-reviewer PR check, not multi-expert Delphi
+  - "review my PR"               # informal PR review request, not Delphi
+  - "帮我review一下"             # casual Chinese review request, no multi-expert intent
+  - "just review this"           # casual, single-pass review request
+  - "quick review"               # explicitly contradicts multi-round Delphi process
+  - "review steps"               # asking for review instructions, not running review
+  - "code review template"       # asking for a template, not executing review
+  - "review format"              # asking about format, not executing
+  - "show me how to review"      # educational request about reviewing
+  - "review checklist example"   # asking for examples, not running review
 triggers_negative_test_cases:
   - input: "how does delphi work"
     expect: "NOT triggered"
@@ -86,6 +109,24 @@ triggers_negative_test_cases:
     expect: "triggered"
   - input: "delphi review"
     expect: "triggered"
+  - input: "评审这个架构"
+    expect: "triggered"
+  - input: "delphi 评审"
+    expect: "triggered"
+  - input: "run delphi review"
+    expect: "triggered"
+  - input: "review my PR"
+    expect: "NOT triggered"
+  - input: "帮我review一下"
+    expect: "NOT triggered"
+  - input: "just review this"
+    expect: "NOT triggered"
+  - input: "quick review"
+    expect: "NOT triggered"
+  - input: "review steps"
+    expect: "NOT triggered"
+  - input: "code review template"
+    expect: "NOT triggered"
   - input: "run delphi"
     expect: "triggered"
 workflow_steps:
@@ -153,6 +194,15 @@ tools_denied:
 - delphi review
 - run delphi
 - start delphi
+- 评审这个架构
+- review this architecture
+- 评审PR
+- review this PR with delphi
+- delphi评审
+- delphi 评审
+- run delphi review
+- 执行delphi
+- 启动delphi评审
 
 **NOT triggered by:**
 - "how does delphi work" (educational)
@@ -163,6 +213,15 @@ tools_denied:
 - "I need a review" (too vague)
 - "explain the review process" (educational)
 - "review guidelines" (asking about guidelines)
+- "PR review" (single-reviewer PR check)
+- "review my PR" (informal PR review)
+- "帮我review一下" (casual Chinese request)
+- "just review this" (casual single-pass)
+- "quick review" (contradicts multi-round process)
+- "review steps" (asking for instructions)
+- "code review template" (asking for template)
+- "review format" (asking about format)
+- "show me how to review" (educational)
 
 ## Workflow
 

package/skills/delphi-review/hooks.md

@@ -0,0 +1,19 @@
+# Hooks — Delphi Review
+
+Delphi Review integrates with safety and operational hooks to ensure review integrity
+and context preservation.
+
+## Security Hooks
+
+| Hook | Purpose | Activation |
+|------|---------|------------|
+| `/careful` | Safety guardrails for destructive commands | Ensure review is read-only — block any destructive operations |
+| `/freeze` | Restrict edits to review scope | Prevent accidental changes during review |
+| `/guard` | Full safety mode (careful + freeze) | Maximum protection — read-only review with no accidental edits |
+
+## Operational Hooks
+
+| Hook | Purpose | Activation |
+|------|---------|------------|
+| `/context-save` | Save review context before pause or handoff | Before pausing review or switching tasks |
+| `/context-restore` | Restore review context on resume | When resuming review from pause or handoff |

package/skills/delphi-review/scripts/verify-consensus.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+# delphi-review: Verify consensus report integrity
+# Checks that delphi-reviewed.json is valid JSON and contains expected verdict field.
+#
+# Usage: bash verify-consensus.sh [state-dir]
+
+set -euo pipefail
+
+STATE_DIR="${1:-.sprint-state}"
+STATE_FILE="$STATE_DIR/delphi-reviewed.json"
+
+if [ ! -f "$STATE_FILE" ]; then
+    echo "SKIP: No delphi-reviewed.json found at $STATE_FILE"
+    exit 0
+fi
+
+# Validate JSON
+if ! command -v node &>/dev/null; then
+    echo "WARN: node not available, skipping JSON validation"
+    exit 0
+fi
+
+node -e "
+const fs = require('fs');
+try {
+    const data = JSON.parse(fs.readFileSync('$STATE_FILE', 'utf8'));
+    const requiredKeys = ['mode', 'timestamp', 'verdict', 'consensus_ratio'];
+    const missing = requiredKeys.filter(k => !(k in data));
+    if (missing.length > 0) {
+        console.error('ERROR: Missing required keys in delphi-reviewed.json:', missing.join(', '));
+        process.exit(1);
+    }
+    const validVerdicts = ['APPROVED', 'PASS_WITH_CAVEATS', 'REQUEST_CHANGES', 'BLOCKED'];
+    if (!validVerdicts.includes(data.verdict)) {
+        console.error('ERROR: Invalid verdict:', data.verdict, '(expected one of:', validVerdicts.join(', '), ')');
+        process.exit(1);
+    }
+    console.log('OK: delphi-reviewed.json is valid with verdict:', data.verdict);
+} catch (e) {
+    console.error('ERROR: delphi-reviewed.json is not valid JSON:', e.message);
+    process.exit(1);
+}
+"

package/skills/delphi-review/tools.md

@@ -0,0 +1,29 @@
+# Tools Whitelist — Delphi Review
+
+Delphi Review is a **read-only review skill** that dispatches expert subagents
+and synthesizes their verdicts. It does NOT implement code changes.
+
+## Allowed Tools
+
+| Tool | Usage | Rationale |
+|------|-------|-----------|
+| `Read` | Read design docs, code, configs, specification.yaml | Required for review input analysis |
+| `Glob` | Find files by pattern | Required for context discovery |
+| `Grep` | Search code content | Required for codebase understanding |
+| `Bash` | Read-only: git diff, git log, file stats | Required for change analysis |
+| `Task(subagent_type=oracle)` | Dispatch oracle for deep analysis | Required for complex review questions |
+| `Task(subagent_type=delphi-reviewer-architecture)` | Dispatch architecture expert | Core Delphi expert dispatch |
+| `Task(subagent_type=delphi-reviewer-technical)` | Dispatch technical expert | Core Delphi expert dispatch |
+| `Task(subagent_type=delphi-reviewer-feasibility)` | Dispatch feasibility expert | Core Delphi expert dispatch |
+| `Write(specification.yaml, .code-walkthrough-result.json, delphi-reviewed.json)` | Write output artifacts only | Required for review output persistence |
+| `Skill` | Invoke related skills for context | Required for cross-skill integration |
+| `Question` | Ask user at decision points | Required for user interaction |
+
+## Denied Tools
+
+| Tool | Rationale |
+|------|-----------|
+| `Edit(source code)` | Delphi review NEVER edits implementation code during review |
+| `Write(source code)` | Delphi review NEVER writes implementation code |
+| `Bash(git commit, git push)` | Delphi review NEVER commits or pushes during review |
+| `Task(category=*, subagent_type=build)` | Delphi review NEVER delegates build/implementation tasks |

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/sprint-flow/hooks.md

@@ -0,0 +1,18 @@
+# Hooks — Sprint Flow
+
+Sprint Flow integrates with safety and operational hooks to protect the development environment.
+
+## Security Hooks
+
+| Hook | Purpose | Activation |
+|------|---------|------------|
+| `/careful` | Safety guardrails for destructive commands | Activate before any `rm`, `force-push`, or `git reset` |
+| `/freeze` | Restrict edits to sprint worktree directory | Prevent accidental changes outside sprint scope |
+| `/guard` | Full safety mode (careful + freeze) | Maximum protection for high-risk operations |
+
+## Operational Hooks
+
+| Hook | Purpose | Activation |
+|------|---------|------------|
+| `/context-save` | Save sprint context before pause or handoff | Before pausing sprint or switching tasks |
+| `/context-restore` | Restore sprint context on resume | When resuming from pause or handoff |

package/skills/sprint-flow/scripts/verify-sprint-state.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+# sprint-flow: Verify sprint state integrity
+# Checks that sprint-state.json is valid JSON and all expected keys exist.
+#
+# Usage: bash verify-sprint-state.sh [sprint-state-dir]
+
+set -euo pipefail
+
+STATE_DIR="${1:-.sprint-state}"
+STATE_FILE="$STATE_DIR/sprint-state.json"
+
+if [ ! -f "$STATE_FILE" ]; then
+    echo "SKIP: No sprint-state.json found at $STATE_FILE"
+    exit 0
+fi
+
+# Validate JSON
+if ! command -v node &>/dev/null; then
+    echo "WARN: node not available, skipping JSON validation"
+    exit 0
+fi
+
+node -e "
+const fs = require('fs');
+try {
+    const data = JSON.parse(fs.readFileSync('$STATE_FILE', 'utf8'));
+    const requiredKeys = ['sprint_id', 'status', 'current_phase', 'phases'];
+    const missing = requiredKeys.filter(k => !(k in data));
+    if (missing.length > 0) {
+        console.error('ERROR: Missing required keys in sprint-state.json:', missing.join(', '));
+        process.exit(1);
+    }
+    console.log('OK: sprint-state.json is valid with all required keys');
+} catch (e) {
+    console.error('ERROR: sprint-state.json is not valid JSON:', e.message);
+    process.exit(1);
+}
+"

package/skills/sprint-flow/tools.md

@@ -0,0 +1,29 @@
+# Tools Whitelist — Sprint Flow
+
+Sprint Flow is an **orchestration skill** that coordinates subagents and system commands.
+It does NOT implement code directly — it delegates implementation to subagents.
+
+## Allowed Tools
+
+| Tool | Usage | Rationale |
+|------|-------|-----------|
+| `Bash(git, gh, npm, node)` | git worktree/branch/commit, gh PR/release, npm/node CLI | Required for sprint infrastructure management |
+| `Read` | Read project files, configs, docs | Required for context gathering |
+| `Write` | Write sprint-state, specification.yaml, phase summaries | Required for sprint state persistence |
+| `Edit` | Edit sprint-state, CHANGELOG, VERSION | Required for version management |
+| `Glob` | Find project files by pattern | Required for project discovery |
+| `Grep` | Search file contents | Required for codebase understanding |
+| `Task` | Delegate to subagents (quick, deep, unspecified-high) | Core orchestration mechanism |
+| `Skill` | Invoke integrated skills (brainstorming, autoplan, delphi-review, etc.) | Required for skill chain execution |
+| `TodoWrite` | Track sprint progress | Required for progress visibility |
+| `Question` | Ask user at decision gates | Required for user decision points |
+
+## Denied Tools
+
+| Tool | Rationale |
+|------|-----------|
+| `rm -rf (any recursive force remove)` | Destructive — sprint flow only cleans up via `git worktree remove` |
+| `git push --force` | Destructive — never force push during sprint |
+| `DROP TABLE or destructive DB operations` | Destructive — sprint flow orchestrates, does not manage databases |
+| `Write(source code)` | Sprint flow NEVER writes implementation code directly — delegates to subagents via `Task` |
+| `Edit(source code)` | Sprint flow NEVER edits implementation code — delegates to subagents via `Task` |

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-07-09
-**Commit:** df2023f
+**Generated:** 2026-07-13
+**Commit:** d83bb96
 **Branch:** main
-**Version:** 0.14.6.0
+**Version:** 0.14.8.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.