@boyingliu01/xp-gate 0.27.1 → 0.27.3

package/plugins/dsh/src/delphi-config.ts

@@ -12,7 +12,8 @@
  */
 
 import { readFileSync } from "node:fs"
-import { resolve } from "node:path"
+import { homedir } from "node:os"
+import { join, resolve } from "node:path"
 import type { ExpertSeat, DelphiOptions } from "./delphi.js"
 import { validateSeats } from "./delphi.js"
 
@@ -99,32 +100,18 @@ function normalizeExperts(experts: RawProfile["experts"]): Array<{ raw: RawExper
   return Object.entries(experts).map(([role, raw]) => ({ raw, role }))
 }
 
-/**
- * Turn raw config into a ready-to-run review setup.
- * Fails loudly and specifically: a missing key or an unexpanded placeholder is
- * the most common way a Delphi run silently degrades.
- */
-export function resolveConfig(
-  cfg: RawDelphiConfig,
-  env: NodeJS.ProcessEnv = process.env,
-): ResolvedDelphiConfig {
-  const profile = selectProfile(cfg)
-  const normalized = normalizeExperts(profile.experts)
-
-  // An expert may name its own provider; otherwise there must be a profile-wide
-  // default. Resolve base_url/api_key per provider so mixed setups work.
-  const providerNames = new Set(
-    normalized.map((e) => e.raw.provider ?? profile.provider).filter((p): p is string => !!p),
-  )
-  if (providerNames.size === 0) {
-    throw new DelphiSetupError(
-      'No provider configured. Set "provider" on the profile or on each expert.',
-    )
+/** Resolve every referenced provider's base_url + api_key, failing loudly. */
+function resolveProviders(
+  profile: RawProfile,
+  needed: Set<string>,
+  env: NodeJS.ProcessEnv,
+): Map<string, { baseUrl: string; apiKey: string }> {
+  if (needed.size === 0) {
+    throw new DelphiSetupError('No provider configured. Set "provider" on the profile or on each expert.')
   }
-
   const providerTable = profile.providers ?? {}
-  const resolvedProviders = new Map<string, { baseUrl: string; apiKey: string }>()
-  for (const name of providerNames) {
+  const resolved = new Map<string, { baseUrl: string; apiKey: string }>()
+  for (const name of needed) {
     const entry = providerTable[name]
     if (!entry) {
       throw new DelphiSetupError(
@@ -148,8 +135,29 @@ export function resolveConfig(
           : `Provider "${name}" has no api_key.`,
       )
     }
-    resolvedProviders.set(name, { baseUrl, apiKey })
+    resolved.set(name, { baseUrl, apiKey })
   }
+  return resolved
+}
+
+/**
+ * Turn raw config into a ready-to-run review setup.
+ * Fails loudly and specifically: a missing key or an unexpanded placeholder is
+ * the most common way a Delphi run silently degrades.
+ */
+export function resolveConfig(
+  cfg: RawDelphiConfig,
+  env: NodeJS.ProcessEnv = process.env,
+): ResolvedDelphiConfig {
+  const profile = selectProfile(cfg)
+  const normalized = normalizeExperts(profile.experts)
+
+  // An expert may name its own provider; otherwise there must be a profile-wide
+  // default. Resolve base_url/api_key per provider so mixed setups work.
+  const providerNames = new Set(
+    normalized.map((e) => e.raw.provider ?? profile.provider).filter((p): p is string => !!p),
+  )
+  const resolvedProviders = resolveProviders(profile, providerNames, env)
 
   const seats = normalized.map((e, i) => seatFromRaw(e.raw, i, e.role))
   // Surface an unexpanded placeholder as a config error, not a provider 404.
@@ -162,6 +170,17 @@ export function resolveConfig(
   }
   validateSeats(seats)
 
+  return buildResult(profile, normalized, resolvedProviders, seats, cfg)
+}
+
+/** Assemble the final result after seats and providers validated. */
+function buildResult(
+  profile: RawProfile,
+  normalized: Array<{ raw: RawExpert; role: string }>,
+  resolvedProviders: Map<string, { baseUrl: string; apiKey: string }>,
+  seats: ExpertSeat[],
+  cfg: RawDelphiConfig,
+): ResolvedDelphiConfig {
   // All seats share one gateway in the supported setup; require agreement so a
   // mixed list cannot silently send one seat's key to another host.
   const chosen = resolvedProviders.get(normalized[0].raw.provider ?? profile.provider ?? "")
@@ -194,13 +213,33 @@ export function resolveConfig(
 export function loadDelphiConfig(
   cwd: string,
   env: NodeJS.ProcessEnv = process.env,
+  globalPath: string = join(homedir(), ".config", "xp-gate", ".delphi-config.json"),
 ): ResolvedDelphiConfig {
+  // Global fallback (AC-DSH-016-03): the machine-wide config at
+  // ~/.config/xp-gate/.delphi-config.json is the single source of truth for
+  // every project. Without it, each repo needed its own copy — and reading a
+  // stale or differently-priced config from another project's directory caused
+  // real money loss (2026-10-03: an expensive overseas model burned the daily
+  // quota). A project-local config still wins, so per-project overrides work.
   const path = resolve(cwd, ".delphi-config.json")
   let raw: string
   try {
     raw = readFileSync(path, "utf8")
-  } catch {
-    throw new DelphiSetupError(`No .delphi-config.json found at ${path}.`)
+  } catch (projectError) {
+    // Fall back ONLY when the project file is genuinely absent (ENOENT); any
+    // other read error must surface rather than silently route this run to
+    // another config. Same semantics as delphi-external-review.cjs, which
+    // gates the fallback on existsSync (walkthrough R8 MA-01).
+    if ((projectError as NodeJS.ErrnoException)?.code !== "ENOENT") {
+      throw new DelphiSetupError(`Cannot read ${path}: ${(projectError as Error).message}`)
+    }
+    try {
+      raw = readFileSync(globalPath, "utf8")
+    } catch {
+      throw new DelphiSetupError(
+        `No .delphi-config.json found at ${path} or the global location ${globalPath}.`
+      )
+    }
   }
   let parsed: RawDelphiConfig
   try {

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.27.1",
+  "version": "0.27.3",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/grill-with-docs/SKILL.md

@@ -1,8 +1,7 @@
 ---
 name: grill-with-docs
-version: 1.0.0
 description: A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
 disable-model-invocation: true
 ---
 
-Run a `/grilling` session, using the `/domain-modeling` skill.
+Call the Skill tool twice, for "grilling" and "domain-modeling".

package/plugins/opencode/skills/grilling/SKILL.md

@@ -1,13 +1,30 @@
 ---
 name: grilling
-version: 1.0.0
 description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
 ---
 
-Interview me relentlessly about every aspect of this until we reach a shared understanding. Walk down each branch of the decision tree, resolving dependencies between decisions one-by-one. For each question, provide your recommended answer.
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
 
-Ask the questions one at a time, waiting for feedback on each question before continuing. Asking multiple questions at once is bewildering.
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
 
-If a *fact* can be found by exploring the environment (filesystem, tools, etc.), look it up rather than asking me. The *decisions*, though, are mine — put each one to me and wait for my answer.
+Format a round like so:
 
-Do not act on it until I confirm we have reached a shared understanding.
+```
+❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+
+---
+
+❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+```
+
+Word each question so "yes" accepts your recommended answer.
+
+Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
+
+Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
+
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.27.1",
+  "version": "0.27.3",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/scripts/delphi-external-review.cjs

@@ -112,6 +112,32 @@ function validateProviders(providers, profileName) {
 }
 
 function readConfig(configPath, profileOverride) {
+  // Global fallback: a relative --config that this cwd does not have resolves
+  // to the machine-wide ~/.config/xp-gate/.delphi-config.json. This is what
+  // makes `--config .delphi-config.json` work from ANY project without each
+  // repo carrying its own (drifting, differently-priced) copy — reading a
+  // foreign project's config used to route calls to expensive models
+  // (2026-10-03 quota incident). An existing local file always wins.
+  // Fallback fires ONLY when the project file is genuinely absent: statSync
+  // distinguishes ENOENT from EACCES/EISDIR, and any other error aborts here
+  // rather than silently routing this run to another config — matching the
+  // TS loader's ENOENT-only semantics (walkthrough R10 FC-01).
+  const missingHere = (() => {
+    try { fs.statSync(configPath); return false; } catch (e) { return e.code === 'ENOENT'; }
+  })();
+  if (missingHere && !path.isAbsolute(configPath)) {
+    // r16 MA-01 disposition: XDG_CONFIG_HOME is an accepted override for the
+    // global config location. The CLI lib (shared-paths/doctor) intentionally
+    // pins ~/.config/xp-gate — overriding only this loader would make the two
+    // disagree. On Linux, $HOME/.config IS the XDG default, so behaviour there
+    // is identical; the env var only matters for non-default setups.
+    const configHome = process.env.XDG_CONFIG_HOME || path.join(os.homedir(), '.config');
+    const globalPath = path.join(configHome, 'xp-gate', '.delphi-config.json');
+    if (fs.existsSync(globalPath)) {
+      console.error(`[delphi-review] ${configPath} not found here — using global config ${globalPath}`);
+      configPath = globalPath;
+    }
+  }
   if (!fs.existsSync(configPath)) {
     console.error(`[delphi-review] ERROR: Config file not found: ${configPath}`);
     console.error('[delphi-review] Copy .delphi-config.json.example to .delphi-config.json and fill in your API keys.');

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/skills/grill-with-docs/SKILL.md

@@ -1,8 +1,7 @@
 ---
 name: grill-with-docs
-version: 1.0.0
 description: A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
 disable-model-invocation: true
 ---
 
-Run a `/grilling` session, using the `/domain-modeling` skill.
+Call the Skill tool twice, for "grilling" and "domain-modeling".

package/skills/grilling/SKILL.md

@@ -1,13 +1,30 @@
 ---
 name: grilling
-version: 1.0.0
 description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
 ---
 
-Interview me relentlessly about every aspect of this until we reach a shared understanding. Walk down each branch of the decision tree, resolving dependencies between decisions one-by-one. For each question, provide your recommended answer.
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
 
-Ask the questions one at a time, waiting for feedback on each question before continuing. Asking multiple questions at once is bewildering.
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
 
-If a *fact* can be found by exploring the environment (filesystem, tools, etc.), look it up rather than asking me. The *decisions*, though, are mine — put each one to me and wait for my answer.
+Format a round like so:
 
-Do not act on it until I confirm we have reached a shared understanding.
+```
+❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+
+---
+
+❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+```
+
+Word each question so "yes" accepts your recommended answer.
+
+Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
+
+Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
+
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** 0b556f5f
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.1.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.