@boyingliu01/xp-gate 0.27.0 → 0.27.2

package/plugins/dsh/lib/delphi.js

@@ -0,0 +1,161 @@
+/**
+ * Delphi cross-review over an external OpenAI-compatible provider.
+ *
+ * This is the codified form of the manual run that produced PR #456: three
+ * DISTINCT models, each asked the same question independently and anonymously,
+ * iterated until the approval ratio clears the consensus threshold.
+ *
+ * Why a plugin tool rather than a shell one-liner: the DSH tool plane is where
+ * a session actually lives, so the mechanism has to be callable from there.
+ * DSH's own `tool-subagent` cannot serve this purpose -- subagents inherit one
+ * host-configured model, so they cannot guarantee three distinct models, and
+ * Delphi's whole value rests on that distinctness.
+ *
+ * @test REQ-DSH-016
+ * @intent 用外部 provider 的多个不同模型做匿名交叉评审并判定共识，
+ *         把「多模型交叉评审」固化成 DSH 可调用的机制而非一次性脚本。
+ * @covers AC-DSH-016-01
+ */
+/** Delphi's defining invariant: exactly three seats and a 90% approval bar. */
+const REQUIRED_EXPERTS = 3;
+const DEFAULT_THRESHOLD_PERCENT = 90;
+const DEFAULT_MAX_TOKENS = 8000;
+const DEFAULT_TIMEOUT_MS = 180_000;
+/** Raised when the configured seats cannot satisfy the Delphi invariants. */
+export class DelphiConfigError extends Error {
+}
+/**
+ * Reject a seat configuration that cannot produce a valid Delphi review.
+ * Checked BEFORE any network call so a misconfiguration never looks like a
+ * provider failure.
+ */
+export function validateSeats(seats) {
+    if (seats.length !== REQUIRED_EXPERTS) {
+        throw new DelphiConfigError(`Delphi requires exactly ${REQUIRED_EXPERTS} experts, got ${seats.length}.`);
+    }
+    for (const s of seats) {
+        if (!s.model || s.model.trim() === "") {
+            throw new DelphiConfigError(`Expert "${s.id}" has no model (a local fallback cannot count).`);
+        }
+        if (s.model.includes("${")) {
+            throw new DelphiConfigError(`Expert "${s.id}" model "${s.model}" looks like an unexpanded env var.`);
+        }
+    }
+    const distinct = new Set(seats.map((s) => s.model.trim()));
+    if (distinct.size !== REQUIRED_EXPERTS) {
+        throw new DelphiConfigError(`All ${REQUIRED_EXPERTS} experts must use distinct models; got: ${[...distinct].join(", ")}.`);
+    }
+}
+/**
+ * Parse an expert report into a verdict.
+ *
+ * The verdict token usually sits on the line AFTER a "### VERDICT" heading, so
+ * a same-line `VERDICT: X` pattern misses every real report. A report with no
+ * recognisable verdict is INVALID, never a guess: inferring approval from prose
+ * would let the gate pass on an assumption.
+ */
+export function parseVerdict(text) {
+    const section = /VERDICT[\s\S]{0,120}?\b(APPROVED|REQUEST_CHANGES|PASS_WITH_CAVEATS|BLOCKED)\b/i.exec(text);
+    if (!section)
+        return { verdict: "INVALID_NO_VERDICT", confidence: 0 };
+    const raw = section[1].toUpperCase();
+    // PASS_WITH_CAVEATS / BLOCKED are not approvals under the 90% rule.
+    const verdict = raw === "APPROVED" ? "APPROVED" : "REQUEST_CHANGES";
+    const c = /CONFIDENCE[\s\S]{0,40}?(\d{1,2})/i.exec(text);
+    const confidence = c ? Math.min(10, Math.max(0, Number(c[1]))) : 0;
+    return { verdict, confidence };
+}
+/** One provider call. Throws on transport failure or empty content. */
+async function chatOnce(opts, seat, system, user) {
+    const doFetch = opts.fetchImpl ?? fetch;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    try {
+        const res = await doFetch(`${opts.baseUrl.replace(/\/+$/, "")}/v1/chat/completions`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${opts.apiKey}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                model: seat.model,
+                messages: [
+                    { role: "system", content: system },
+                    { role: "user", content: user },
+                ],
+                max_tokens: seat.maxTokens ?? DEFAULT_MAX_TOKENS,
+                temperature: 0.2,
+            }),
+            signal: controller.signal,
+        });
+        if (!res.ok) {
+            const body = await res.text().catch(() => "");
+            throw new Error(`HTTP ${res.status}: ${body.slice(0, 200)}`);
+        }
+        const json = (await res.json());
+        const content = json.choices?.[0]?.message?.content ?? "";
+        const finishReason = json.choices?.[0]?.finish_reason ?? "unknown";
+        // Empty content is a real failure -- typically a reasoning model that spent
+        // its whole budget on hidden tokens. Never let it pass as an empty review.
+        if (content.trim() === "") {
+            throw new Error(`empty content (finish_reason=${finishReason}, max_tokens=${seat.maxTokens ?? DEFAULT_MAX_TOKENS}); ` +
+                `raise max_tokens if this is a reasoning model`);
+        }
+        return { content, resolvedModel: json.model ?? null, finishReason };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Run ONE round. All seats are asked concurrently and never see each other's
+ * output, which is what makes the round anonymous.
+ */
+export async function runRound(opts, round, system, buildPrompt) {
+    const settled = await Promise.allSettled(opts.seats.map(async (seat) => {
+        const r = await chatOnce(opts, seat, system, buildPrompt(seat));
+        return { seat, ...r };
+    }));
+    const verdicts = settled.map((s, i) => {
+        const seat = opts.seats[i];
+        if (s.status !== "fulfilled") {
+            return {
+                id: seat.id,
+                role: seat.role,
+                requestedModel: seat.model,
+                resolvedModel: null,
+                verdict: "ERROR",
+                confidence: 0,
+                counted: false,
+                report: "",
+                error: s.reason instanceof Error ? s.reason.message : String(s.reason),
+            };
+        }
+        const { verdict, confidence } = parseVerdict(s.value.content);
+        return {
+            id: seat.id,
+            role: seat.role,
+            requestedModel: seat.model,
+            resolvedModel: s.value.resolvedModel,
+            verdict,
+            confidence,
+            counted: verdict !== "INVALID_NO_VERDICT",
+            report: s.value.content,
+        };
+    });
+    const counted = verdicts.filter((v) => v.counted);
+    const approvals = counted.filter((v) => v.verdict === "APPROVED").length;
+    // Consensus is measured over VALID responses: a malformed report is not a
+    // dissent, but it cannot be counted as agreement either.
+    const ratio = counted.length === 0 ? 0 : approvals / counted.length;
+    const threshold = opts.thresholdPercent ?? DEFAULT_THRESHOLD_PERCENT;
+    return {
+        round,
+        verdicts,
+        validCount: counted.length,
+        approvals,
+        consensusRatio: ratio,
+        reachedConsensus: counted.length === REQUIRED_EXPERTS && ratio * 100 >= threshold,
+    };
+}
+//# sourceMappingURL=delphi.js.map

package/plugins/dsh/lib/dialect.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Shell dialect selection and quoting.
+ *
+ * DSH chooses its shell backend per platform: `dsh-base` disables
+ * `bash-sandbox`/`tool-bash` and enables `pwsh-sandbox`/`tool-pwsh` on win32.
+ * A command string written for the wrong dialect fails to parse, so callers
+ * must pick the dialect to match the executor rather than assume POSIX.
+ */
+export type ShellDialect = "posix" | "powershell";
+/** Quote one argument for the target dialect. */
+export declare function shellQuote(value: string, dialect: ShellDialect): string;
+/**
+ * POSIX single-quote shell escaping: `'` becomes `'\''`.
+ * @deprecated Use {@link shellQuote} with an explicit dialect.
+ */
+export declare function shq(value: string): string;
+/**
+ * Pick the dialect for the current platform.
+ *
+ * `process.platform` is the reliable signal available inside a tool body; it
+ * mirrors exactly where DSH enables each sandbox/executor pair.
+ */
+export declare function detectDialect(platform?: NodeJS.Platform): ShellDialect;
+//# sourceMappingURL=dialect.d.ts.map

package/plugins/dsh/lib/dialect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../src/dialect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,YAAY,CAAA;AAEjD,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,CASvE;AAED;;;GAGG;AACH,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,YAAY,CAExF"}

package/plugins/dsh/lib/dialect.js

@@ -0,0 +1,36 @@
+/**
+ * Shell dialect selection and quoting.
+ *
+ * DSH chooses its shell backend per platform: `dsh-base` disables
+ * `bash-sandbox`/`tool-bash` and enables `pwsh-sandbox`/`tool-pwsh` on win32.
+ * A command string written for the wrong dialect fails to parse, so callers
+ * must pick the dialect to match the executor rather than assume POSIX.
+ */
+/** Quote one argument for the target dialect. */
+export function shellQuote(value, dialect) {
+    if (dialect === "posix") {
+        // POSIX single-quote escaping: `'` becomes `'\''`.
+        return `'${value.replace(/'/g, "'\\''")}'`;
+    }
+    // PowerShell single-quoted strings escape an embedded quote by doubling it.
+    // Backticks and `$(…)` are literal inside single quotes, so no further
+    // escaping is needed to keep them inert.
+    return `'${value.replace(/'/g, "''")}'`;
+}
+/**
+ * POSIX single-quote shell escaping: `'` becomes `'\''`.
+ * @deprecated Use {@link shellQuote} with an explicit dialect.
+ */
+export function shq(value) {
+    return shellQuote(value, "posix");
+}
+/**
+ * Pick the dialect for the current platform.
+ *
+ * `process.platform` is the reliable signal available inside a tool body; it
+ * mirrors exactly where DSH enables each sandbox/executor pair.
+ */
+export function detectDialect(platform = process.platform) {
+    return platform === "win32" ? "powershell" : "posix";
+}
+//# sourceMappingURL=dialect.js.map

package/plugins/dsh/lib/gate-runner.d.ts

@@ -0,0 +1,18 @@
+import type { ShellExecRequest, ShellExecSpec, ShellRunResult } from "@deepseek-ai/dsh-shell";
+/**
+ * Structural view of `ctx.shell` so the runner is testable with a fake shell
+ * without importing the abstract `ShellExecutor` service.
+ */
+export interface XpGateShell {
+    resolve(request: ShellExecRequest): ShellExecSpec;
+    run(spec: ShellExecSpec): Promise<ShellRunResult>;
+}
+/** Render a completed shell run as a single model-facing text block. */
+export declare function renderGateResult(result: ShellRunResult): string;
+/**
+ * Run an xp-gate command through the harness shell seam. Nonzero exits, timeouts,
+ * and sandbox denials resolve (and render) rather than reject; only cancellation
+ * (the caller's AbortSignal fired first) throws an AbortError with code ABORTED.
+ */
+export declare function runXpGate(shell: XpGateShell, signal: AbortSignal, command: string, workdir: string, timeoutMs: number): Promise<string>;
+//# sourceMappingURL=gate-runner.d.ts.map

package/plugins/dsh/lib/gate-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-runner.d.ts","sourceRoot":"","sources":["../src/gate-runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE7F;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,aAAa,CAAA;IACjD,GAAG,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;CAClD;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAqB/D;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CASjB"}

package/plugins/dsh/lib/gate-runner.js

@@ -0,0 +1,46 @@
+import { TOOL_ABORTED } from "@deepseek-ai/dsh-tools";
+import { HarnessError } from "@deepseek-ai/dsh-llm";
+/** Render a completed shell run as a single model-facing text block. */
+export function renderGateResult(result) {
+    const lines = [];
+    const stdout = result.stdout.text.trim();
+    if (stdout.length > 0)
+        lines.push(stdout);
+    const stderr = result.stderr.text.trim();
+    if (stderr.length > 0)
+        lines.push(`[stderr] ${stderr}`);
+    if (result.timedOut)
+        lines.push(`[timed out after ${result.timeoutMs}ms]`);
+    if (result.exitCode !== null && result.exitCode !== 0)
+        lines.push(`[exit code: ${result.exitCode}]`);
+    if (result.signal !== null)
+        lines.push(`[signal: ${result.signal}]`);
+    if (result.sandbox?.denied === true) {
+        lines.push(`[sandbox: file access denied under ${result.sandbox.mode} mode]`);
+    }
+    if (result.stdout.truncated) {
+        const spill = result.stdout.spillPath !== undefined ? `, full output: ${result.stdout.spillPath}` : "";
+        lines.push(`[stdout truncated${spill}]`);
+    }
+    if (result.stderr.truncated) {
+        const spill = result.stderr.spillPath !== undefined ? `, full output: ${result.stderr.spillPath}` : "";
+        lines.push(`[stderr truncated${spill}]`);
+    }
+    return lines.length > 0 ? lines.join("\n") : "[XP-Gate] command completed (no output).";
+}
+/**
+ * Run an xp-gate command through the harness shell seam. Nonzero exits, timeouts,
+ * and sandbox denials resolve (and render) rather than reject; only cancellation
+ * (the caller's AbortSignal fired first) throws an AbortError with code ABORTED.
+ */
+export async function runXpGate(shell, signal, command, workdir, timeoutMs) {
+    const spec = shell.resolve({ command, workdir, timeoutMs, signal });
+    const result = await shell.run(spec);
+    if (result.aborted) {
+        const error = new HarnessError("tool call aborted", TOOL_ABORTED);
+        error.name = "AbortError";
+        throw error;
+    }
+    return renderGateResult(result);
+}
+//# sourceMappingURL=gate-runner.js.map

package/plugins/dsh/lib/index.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from "@deepseek-ai/cordis";
+export declare const name = "tool-xp-gate";
+export declare const inject: string[];
+export declare function apply(ctx: Context, _config?: unknown): void;
+//# sourceMappingURL=index.d.ts.map

package/plugins/dsh/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAOlD,eAAO,MAAM,IAAI,iBAAiB,CAAA;AAClC,eAAO,MAAM,MAAM,UAAqB,CAAA;AAuKxC,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,OAAY,GAAG,IAAI,CAS/D"}

package/plugins/dsh/lib/index.js

@@ -0,0 +1,162 @@
+import { defineTool } from "@deepseek-ai/dsh-tools";
+import { GATE_WHITELIST, buildCommand, detectDialect, resolveTarget } from "./command.js";
+import { runXpGate } from "./gate-runner.js";
+import { DelphiSetupError, loadDelphiConfig, toDelphiOptions } from "./delphi-config.js";
+import { formatOutcome, runReview } from "./delphi-run.js";
+export const name = "tool-xp-gate";
+export const inject = ["tools", "shell"];
+const DEFAULT_TIMEOUT_MS = 120_000;
+// Multi-round reviews over large inputs are slow; the transport applies its
+// own per-request timeout on top of this ceiling.
+const DELPHI_TIMEOUT_MS = 900_000;
+// Boy Scout (#447): gate-check's `gates` parameter nests one level too deep
+// inline (parameters → gates → items), so the schema lives at module scope.
+const GATES_PARAMETER = {
+    type: "array",
+    items: { type: "string", enum: GATE_WHITELIST },
+    description: "Optional gate subset to run (e.g. ['principles', 'arch']).",
+};
+// Boy Scout (#447): apply() used to inline four register(defineTool({...}))
+// blocks (149 lines, 5 brace levels). Each tool now lives in its own factory;
+// apply() is pure wiring.
+function gateCheckTool(shell, dialect) {
+    return defineTool({
+        name: "gate-check",
+        description: "Run XP-Gate quality gates (xp-gate check) on a file or directory and return the gate report. Prefers the global xp-gate CLI and degrades to an actionable install hint when it is absent.",
+        parameters: {
+            path: {
+                type: "string",
+                required: true,
+                description: "File or directory path to check (absolute or relative to the workspace).",
+            },
+            gates: GATES_PARAMETER,
+        },
+        output: {
+            schema: { type: "string" },
+            render: (_args, value) => [{ type: "text", text: value }],
+        },
+        timeoutMs: DEFAULT_TIMEOUT_MS,
+        async execute(args, exec) {
+            const cwd = exec.agent?.session?.header?.cwd ?? process.cwd();
+            const target = resolveTarget(args.path, cwd);
+            const command = buildCommand({ subcommand: "check", target, gates: args.gates, dialect });
+            return runXpGate(shell, exec.signal, command, cwd, DEFAULT_TIMEOUT_MS);
+        },
+    });
+}
+function gatePrinciplesTool(shell, dialect) {
+    return defineTool({
+        name: "gate-principles",
+        description: "Run the 14 Clean Code / SOLID rules (xp-gate principles, Gate 4) on a file or directory and return the principles report.",
+        parameters: {
+            path: {
+                type: "string",
+                required: true,
+                description: "File or directory path to check (absolute or relative to the workspace).",
+            },
+        },
+        output: {
+            schema: { type: "string" },
+            render: (_args, value) => [{ type: "text", text: value }],
+        },
+        timeoutMs: DEFAULT_TIMEOUT_MS,
+        async execute(args, exec) {
+            const cwd = exec.agent?.session?.header?.cwd ?? process.cwd();
+            const target = resolveTarget(args.path, cwd);
+            const command = buildCommand({ subcommand: "principles", target, dialect });
+            return runXpGate(shell, exec.signal, command, cwd, DEFAULT_TIMEOUT_MS);
+        },
+    });
+}
+function gateArchTool(shell, dialect) {
+    return defineTool({
+        name: "gate-arch",
+        description: "Run architecture validation (xp-gate arch, Gate 6) with the pinned local @archlinter/cli built-in rules and baseline ratchet, and return the architecture report. Pass a config file only to opt into archlint's own --config path (pre-0.16 schemas are rejected by archlint itself).",
+        parameters: {
+            config: {
+                type: "string",
+                description: "Optional architecture config file (opts into archlint --config; the default built-in-rules path needs none).",
+            },
+        },
+        output: {
+            schema: { type: "string" },
+            render: (_args, value) => [{ type: "text", text: value }],
+        },
+        timeoutMs: DEFAULT_TIMEOUT_MS,
+        async execute(args, exec) {
+            const cwd = exec.agent?.session?.header?.cwd ?? process.cwd();
+            const command = buildCommand({ subcommand: "arch", config: args.config, dialect });
+            return runXpGate(shell, exec.signal, command, cwd, DEFAULT_TIMEOUT_MS);
+        },
+    });
+}
+// Delphi multi-model cross-review.
+//
+// DSH's own subagents cannot do this: they inherit one host-configured model,
+// so three "experts" would be three instances of the same model, and Delphi's
+// value rests entirely on the reviewers being DIFFERENT models. This tool
+// therefore calls an external OpenAI-compatible provider directly, with one
+// distinct model per seat.
+// Boy Scout (#447): the review body used to sit inline in execute() at 5 brace
+// levels (defineTool → execute → try → runReview options). Module scope keeps
+// the try/catch semantics identical while dropping two levels.
+async function runDelphiReview(subject, addressed, maxRounds, cwd) {
+    try {
+        const cfg = loadDelphiConfig(cwd);
+        const outcome = await runReview({ ...toDelphiOptions(cfg), maxRounds: maxRounds ?? cfg.maxRounds }, subject, addressed);
+        const seats = cfg.seats.map((s) => s.model).join(", ");
+        return `${formatOutcome(outcome)}\n\nProvider: ${cfg.provider}\nSeats: ${seats}`;
+    }
+    catch (e) {
+        // Config problems are the common failure; report them as guidance
+        // rather than a stack trace.
+        if (e instanceof DelphiSetupError)
+            return `Delphi review not started: ${e.message}`;
+        throw e;
+    }
+}
+function delphiReviewTool() {
+    return defineTool({
+        name: "delphi-review",
+        description: "Run a Delphi cross-review of a subject (a diff, a design, a spec) using three DISTINCT models from an external OpenAI-compatible provider configured in .delphi-config.json. Round 1 is anonymous and concurrent; later rounds feed back the aggregate until the approval ratio reaches the configured threshold (default 90%) or the round cap (default 5). Use this whenever a change needs independent multi-model review rather than a single model's opinion.",
+        parameters: {
+            subject: {
+                type: "string",
+                required: true,
+                description: "The material to review, inline. For a diff, pass the diff text (or a summarized form if very large).",
+            },
+            addressed: {
+                type: "string",
+                description: "Optional description of what changed since a previous round, fed back to later rounds so reviewers can revise their position.",
+            },
+            maxRounds: {
+                type: "number",
+                description: "Override the configured round cap (Delphi default is 5).",
+            },
+            cwd: {
+                type: "string",
+                description: "Project root containing .delphi-config.json (defaults to the session cwd).",
+            },
+        },
+        output: {
+            schema: { type: "string" },
+            render: (_args, value) => [{ type: "text", text: value }],
+        },
+        timeoutMs: DELPHI_TIMEOUT_MS,
+        async execute(args, exec) {
+            const cwd = args.cwd ?? exec.agent?.session?.header?.cwd ?? process.cwd();
+            return runDelphiReview(args.subject, args.addressed ?? "", args.maxRounds, cwd);
+        },
+    });
+}
+export function apply(ctx, _config = {}) {
+    // DSH runs a POSIX shell off-Windows and PowerShell on Windows; generating the
+    // wrong dialect makes every tool fail to parse rather than degrade gracefully.
+    const dialect = detectDialect();
+    const shell = ctx.shell;
+    ctx.tools.register(gateCheckTool(shell, dialect));
+    ctx.tools.register(gatePrinciplesTool(shell, dialect));
+    ctx.tools.register(gateArchTool(shell, dialect));
+    ctx.tools.register(delphiReviewTool());
+}
+//# sourceMappingURL=index.js.map

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.27.0",
+  "version": "0.27.2",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.27.0",
+  "version": "0.27.2",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.27.0",
+  "version": "0.27.2",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-16
-**Commit:** 429f73c5
+**Commit:** a5ee6191
 **Branch:** main
-**Version:** 0.27.0.0
+**Version:** 0.27.2.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.