@boyingliu01/xp-gate 0.19.3 → 0.20.0

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-09-24
-**Commit:** 467174d
-**Branch:** main
-**Version:** 0.19.3.0
+**Generated:** 2026-10-07
+**Commit:** ff55f35b
+**Branch:** fix/batch-defects-20261007
+**Version:** 0.20.0.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/sprint-flow/references/phase-2-design.md

@@ -89,9 +89,9 @@ grill 访谈达成共享理解后（或 CONTEXT.md 快速路径下读取已有
   "head_commit": "<git rev-parse HEAD>",
   "consensus_ratio": 1.0,
   "expert_verdicts": [
-    { "role": "architecture", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-a" },
-    { "role": "technical", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-b" },
-    { "role": "feasibility", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-c" }
+    { "role": "architecture", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-a", "resolved_model": "provider/model-a", "channel": "external" },
+    { "role": "technical", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-b", "resolved_model": "provider/model-b", "channel": "external" },
+    { "role": "feasibility", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-c", "resolved_model": "provider/model-c", "channel": "external" }
   ],
   "rounds": 1,
   "gaps": []

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-09-24
-**Commit:** 467174d
-**Branch:** main
-**Version:** 0.19.3.0
+**Generated:** 2026-10-07
+**Commit:** ff55f35b
+**Branch:** fix/batch-defects-20261007
+**Version:** 0.20.0.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/lib/__tests__/download-skill.test.js

@@ -1,281 +0,0 @@
-/**
- * @test download-skill
- * @intent Verify downloadFromGitHub/downloadTarball/downloadWithRetry/downloadFile/verifyChecksum behaviors
- */
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-const https = require('https');
-const crypto = require('crypto');
-const { EventEmitter } = require('events');
-const { Writable } = require('stream');
-
-/**
- * Mock https.get with controllable behavior.
- * opts (or array of opts for sequential calls):
- *   - statusCode (default 200)
- *   - body (default 'data')
- *   - errorAfter (boolean) — emit 'error' on the request instead of responding
- *   - redirectTo (string url) — sends 302 with location header
- */
-function mockHttpsGet(optsOrList) {
-  const list = Array.isArray(optsOrList) ? [...optsOrList] : [optsOrList];
-  // Synchronous fake createWriteStream — the real one opens the FD asynchronously
-  // and races against downloadFile's unlinkSync(dest) in 301/302/error branches,
-  // causing ENOENT unhandled errors. The fake writes via writeFileSync (sync,
-  // file present immediately) and emits 'finish' on end().
-  vi.spyOn(fs, 'createWriteStream').mockImplementation((dest) => {
-    let buf = '';
-    try {
-      fs.writeFileSync(dest, '');
-    } catch {
-      /* dest dir may not exist; downstream code will surface that */
-    }
-    const stream = new EventEmitter();
-    stream.write = (chunk) => {
-      buf += chunk;
-      return true;
-    };
-    stream.end = () => {
-      try {
-        fs.writeFileSync(dest, buf);
-      } catch {
-        /* file may have been unlinked by source; safe to ignore */
-      }
-      process.nextTick(() => stream.emit('finish'));
-    };
-    stream.close = () => {};
-    return stream;
-  });
-
-  vi.spyOn(https, 'get').mockImplementation((url, options, cb) => {
-    const callback = typeof options === 'function' ? options : cb;
-    const req = new EventEmitter();
-    const config = list.shift() || { statusCode: 200, body: 'data' };
-    process.nextTick(() => {
-      if (config.errorAfter) {
-        req.emit('error', new Error('Network error'));
-        return;
-      }
-      const response = new EventEmitter();
-      response.statusCode = config.statusCode != null ? config.statusCode : 200;
-      response.headers = config.redirectTo ? { location: config.redirectTo } : {};
-      response.pipe = (file) => {
-        file.write(config.body != null ? config.body : 'data');
-        file.end();
-      };
-      callback(response);
-    });
-    return req;
-  });
-}
-
-describe('download-skill', () => {
-  let tmpHome, originalHome;
-
-  beforeEach(() => {
-    originalHome = process.env.HOME;
-    tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'xpgate-dl-'));
-    process.env.HOME = tmpHome;
-    vi.resetModules();
-    delete require.cache[require.resolve('../download-skill')];
-    vi.spyOn(console, 'log').mockImplementation(() => {});
-    vi.spyOn(console, 'error').mockImplementation(() => {});
-    vi.spyOn(console, 'warn').mockImplementation(() => {});
-  });
-
-  afterEach(async () => {
-    vi.useRealTimers();
-    await new Promise((resolve) => setImmediate(resolve));
-    process.env.HOME = originalHome;
-    vi.restoreAllMocks();
-    if (fs.existsSync(tmpHome)) {
-      fs.rmSync(tmpHome, { recursive: true, force: true });
-    }
-  });
-
-  function cacheDir() {
-    return path.join(tmpHome, '.config', 'xp-gate', 'cache');
-  }
-
-  describe('downloadFromGitHub', () => {
-    // Flat repo name avoids '/' becoming a subdir in cacheFile (source only mkdirs CACHE_DIR root).
-    it('downloads file to cache dir and returns the path', async () => {
-      mockHttpsGet({ statusCode: 200, body: '# Skill content' });
-      const { downloadFromGitHub } = require('../download-skill');
-
-      const result = await downloadFromGitHub('flatrepo', 'skills/foo/SKILL.md');
-
-      expect(result).toBe(
-        path.join(cacheDir(), 'flatrepo-skills-foo-SKILL.md.md')
-      );
-      expect(fs.existsSync(result)).toBe(true);
-      expect(fs.readFileSync(result, 'utf8')).toBe('# Skill content');
-    });
-
-    it('creates cache directory if missing', async () => {
-      mockHttpsGet({ statusCode: 200, body: 'data' });
-      const { downloadFromGitHub } = require('../download-skill');
-
-      expect(fs.existsSync(cacheDir())).toBe(false);
-      await downloadFromGitHub('flatrepo', 'a/b');
-      expect(fs.existsSync(cacheDir())).toBe(true);
-    });
-
-    it('uses default version=main when not specified', async () => {
-      mockHttpsGet({ statusCode: 200, body: 'data' });
-      const { downloadFromGitHub } = require('../download-skill');
-      await downloadFromGitHub('flatrepo', 'path/to/file');
-      expect(https.get).toHaveBeenCalled();
-      const calledUrl = https.get.mock.calls[0][0];
-      expect(calledUrl).toContain('/main/');
-    });
-
-    it('uses custom version when specified', async () => {
-      mockHttpsGet({ statusCode: 200, body: 'data' });
-      const { downloadFromGitHub } = require('../download-skill');
-      await downloadFromGitHub('flatrepo', 'path/file', 'v1.2.3');
-      expect(https.get.mock.calls[0][0]).toContain('/v1.2.3/');
-    });
-  });
-
-  describe('downloadTarball', () => {
-    it('downloads tarball with correct filename', async () => {
-      mockHttpsGet({ statusCode: 200, body: 'tarball-bytes' });
-      const { downloadTarball } = require('../download-skill');
-
-      const result = await downloadTarball('boyingliu01/xp-gate');
-
-      expect(result).toBe(path.join(cacheDir(), 'boyingliu01-xp-gate.tgz'));
-      expect(fs.existsSync(result)).toBe(true);
-    });
-
-    it('uses default main version', async () => {
-      mockHttpsGet({ statusCode: 200, body: 'data' });
-      const { downloadTarball } = require('../download-skill');
-      await downloadTarball('user/repo');
-      expect(https.get.mock.calls[0][0]).toContain('/tarball/main');
-    });
-  });
-
-  describe('downloadWithRetry', () => {
-    it('succeeds on first try when no errors', async () => {
-      mockHttpsGet({ statusCode: 200, body: 'ok' });
-      const { downloadWithRetry } = require('../download-skill');
-
-      const dest = path.join(tmpHome, 'out.txt');
-      await downloadWithRetry('https://example.com/x', dest, 3);
-
-      expect(https.get).toHaveBeenCalledTimes(1);
-      expect(fs.readFileSync(dest, 'utf8')).toBe('ok');
-    });
-
-    it('retries and eventually succeeds (sleep delays stubbed)', async () => {
-      // Stub setTimeout so sleep() resolves immediately, without patching setImmediate.
-      vi.spyOn(global, 'setTimeout').mockImplementation((fn) => {
-        Promise.resolve().then(fn);
-        return 0;
-      });
-      mockHttpsGet([
-        { errorAfter: true },
-        { statusCode: 200, body: 'recovered' },
-      ]);
-      const { downloadWithRetry } = require('../download-skill');
-
-      const dest = path.join(tmpHome, 'retry.txt');
-      await downloadWithRetry('https://example.com/x', dest, 3);
-
-      expect(fs.readFileSync(dest, 'utf8')).toBe('recovered');
-    });
-
-    it('throws original error after exhausting retries', async () => {
-      vi.spyOn(global, 'setTimeout').mockImplementation((fn) => {
-        Promise.resolve().then(fn);
-        return 0;
-      });
-      mockHttpsGet([
-        { errorAfter: true },
-        { errorAfter: true },
-      ]);
-      const { downloadWithRetry } = require('../download-skill');
-
-      const dest = path.join(tmpHome, 'fail.txt');
-      await expect(
-        downloadWithRetry('https://example.com/x', dest, 2)
-      ).rejects.toThrow('Network error');
-    });
-  });
-
-  describe('downloadFile (via downloadWithRetry retries=1)', () => {
-    it('follows 302 redirect to new location', async () => {
-      mockHttpsGet([
-        { statusCode: 302, redirectTo: 'https://newlocation.example.com/final' },
-        { statusCode: 200, body: 'redirected-content' },
-      ]);
-      const { downloadWithRetry } = require('../download-skill');
-
-      const dest = path.join(tmpHome, 'redirect.txt');
-      await downloadWithRetry('https://example.com/orig', dest, 1);
-
-      expect(fs.readFileSync(dest, 'utf8')).toBe('redirected-content');
-    });
-
-    it('follows 301 redirect', async () => {
-      mockHttpsGet([
-        { statusCode: 301, redirectTo: 'https://newloc.example/final' },
-        { statusCode: 200, body: 'permanent-redirect' },
-      ]);
-      const { downloadWithRetry } = require('../download-skill');
-
-      const dest = path.join(tmpHome, 'r301.txt');
-      await downloadWithRetry('https://example.com/orig', dest, 1);
-
-      expect(fs.readFileSync(dest, 'utf8')).toBe('permanent-redirect');
-    });
-
-    it('rejects with HTTP error for non-2xx/3xx status', async () => {
-      mockHttpsGet({ statusCode: 404 });
-      const { downloadWithRetry } = require('../download-skill');
-
-      const dest = path.join(tmpHome, '404.txt');
-      await expect(downloadWithRetry('https://example.com/x', dest, 1)).rejects.toThrow(
-        'HTTP 404'
-      );
-    });
-
-    it('rejects and unlinks dest on request error', async () => {
-      mockHttpsGet({ errorAfter: true });
-      const { downloadWithRetry } = require('../download-skill');
-
-      const dest = path.join(tmpHome, 'err.txt');
-      await expect(downloadWithRetry('https://example.com/x', dest, 1)).rejects.toThrow(
-        'Network error'
-      );
-      // The createWriteStream call will create the file, the error handler should unlink it
-      expect(fs.existsSync(dest)).toBe(false);
-    });
-  });
-
-  describe('verifyChecksum', () => {
-    it('does not throw when checksum matches', () => {
-      const file = path.join(tmpHome, 'data.txt');
-      const content = 'hello world';
-      fs.writeFileSync(file, content);
-      const expected = crypto.createHash('sha256').update(content).digest('hex');
-
-      const { verifyChecksum } = require('../download-skill');
-      expect(() => verifyChecksum(file, expected)).not.toThrow();
-      // File preserved
-      expect(fs.existsSync(file)).toBe(true);
-    });
-
-    it('throws and deletes file on mismatch', () => {
-      const file = path.join(tmpHome, 'bad.txt');
-      fs.writeFileSync(file, 'real-content');
-
-      const { verifyChecksum } = require('../download-skill');
-      expect(() => verifyChecksum(file, 'wrong-hash-zzz')).toThrow(/Checksum mismatch/);
-      expect(fs.existsSync(file)).toBe(false);
-    });
-  });
-});

package/lib/download-skill.js

@@ -1,96 +0,0 @@
-const https = require('https');
-const http = require('http');
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-const crypto = require('crypto');
-
-// Cross-platform home directory resolution
-const HOME = process.env.HOME || process.env.USERPROFILE || os.homedir();
-
-const CONFIG_DIR = path.join(HOME, '.config', 'xp-gate');
-const CACHE_DIR = path.join(CONFIG_DIR, 'cache');
-
-async function downloadFromGitHub(repo, pathInRepo, version = 'main') {
-  const url = `https://raw.githubusercontent.com/${repo}/${version}/${pathInRepo}`;
-  const cacheFile = path.join(CACHE_DIR, `${repo}-${pathInRepo.replace(/\//g, '-')}.md`);
-  
-  fs.mkdirSync(CACHE_DIR, { recursive: true });
-  
-  await downloadWithRetry(url, cacheFile);
-  
-  return cacheFile;
-}
-
-async function downloadWithRetry(url, dest, retries = 3) {
-  for (let attempt = 1; attempt <= retries; attempt++) {
-    try {
-      await downloadFile(url, dest);
-      return;
-    } catch (err) {
-      if (attempt === retries) throw err;
-      console.log(`Retry ${attempt}/${retries}...`);
-      await sleep(1000 * attempt);
-    }
-  }
-}
-
-async function downloadFile(url, dest) {
-  return new Promise((resolve, reject) => {
-    const file = fs.createWriteStream(dest);
-    
-    https.get(url, { timeout: 30000 }, (response) => {
-      if (response.statusCode === 301 || response.statusCode === 302) {
-        file.close();
-        fs.unlinkSync(dest);
-        downloadFile(response.headers.location, dest).then(resolve).catch(reject);
-        return;
-      }
-      
-      if (response.statusCode !== 200) {
-        file.close();
-        reject(new Error(`HTTP ${response.statusCode}`));
-        return;
-      }
-      
-      response.pipe(file);
-      file.on('finish', () => {
-        file.close();
-        resolve();
-      });
-    }).on('error', (err) => {
-      file.close();
-      if (fs.existsSync(dest)) fs.unlinkSync(dest);
-      reject(err);
-    });
-  });
-}
-
-async function downloadTarball(repo, version = 'main') {
-  const tarballUrl = `https://api.github.com/repos/${repo}/tarball/${version}`;
-  const cacheFile = path.join(CACHE_DIR, `${repo.replace('/', '-')}.tgz`);
-  
-  fs.mkdirSync(CACHE_DIR, { recursive: true });
-  
-  await downloadWithRetry(tarballUrl, cacheFile);
-  
-  return cacheFile;
-}
-
-function sleep(ms) {
-  return new Promise(resolve => setTimeout(resolve, ms));
-}
-
-function verifyChecksum(file, expectedChecksum) {
-  const hash = crypto.createHash('sha256');
-  const content = fs.readFileSync(file);
-  hash.update(content);
-  const actualChecksum = hash.digest('hex');
-  
-  if (actualChecksum !== expectedChecksum) {
-    fs.unlinkSync(file);
-    throw new Error(`Checksum mismatch: expected ${expectedChecksum}, got ${actualChecksum}`);
-  }
-}
-
-module.exports = { downloadFromGitHub, downloadTarball, downloadWithRetry, verifyChecksum };