@boyingliu01/xp-gate 0.27.2 → 0.27.3

package/adapters/gate-7.sh

@@ -14,10 +14,28 @@ if [ -z "$IAC_FILES" ]; then
   echo "✅ PASSED - No IaC files detected in changes."
   GATE_7_STATUS="PASS"
 else
-  # Run IaC adapter
-  if [ -f "githooks/adapters/iac.sh" ]; then
-    # shellcheck source=githooks/adapters/iac.sh
-    source "githooks/adapters/iac.sh"
+  # Run IaC adapter. Resolution follows the documented 3-tier convention
+  # (adapter-common.sh): global ~/.config/xp-gate/adapters -> project
+  # githooks/adapters -> script dir. The old cwd-only test silently SKIPped
+  # IaC security in every consumer repo without an in-repo githooks/ dir,
+  # even with the adapter installed globally (e2e sweep 2026-10-17; pinned
+  # by __tests__/gate-7-adapter-resolution.test.bats).
+  IAC_ADAPTER=""
+  for _candidate in \
+    "$HOME/.config/xp-gate/adapters/iac.sh" \
+    "githooks/adapters/iac.sh" \
+    "${SCRIPT_DIR:-}/adapters/iac.sh"; do
+    if [ -n "$_candidate" ] && [ -f "$_candidate" ]; then
+      IAC_ADAPTER="$_candidate"
+      break
+    fi
+  done
+  if [ -n "$IAC_ADAPTER" ]; then
+    # Audit trail: which tier won (r14 walkthrough MAJ-02 — a silent tier-order
+    # regression must be visible in the gate output, not only in test diffs).
+    echo "   IaC adapter resolved from: $IAC_ADAPTER"
+    # shellcheck source=/dev/null
+    source "$IAC_ADAPTER"
     
     # Run static analysis for IaC files
     IAC_OUTPUT=$(run_static_analysis "$IAC_FILES" 2>&1)

package/adapters/java.sh

@@ -111,13 +111,23 @@ wc_java_json_violation_count() {
   local json_file="$1"
   [ -s "$json_file" ] || return 1
 
-  # Array-shaped: opens with [ and closes with ]. (A bare [] is valid clean
-  # output; an object wrapper is outside the pinned contract.)
-  [ "$(head -c 1 "$json_file")" = "[" ] || return 1
-  local tail
+  # Two shapes are accepted, each closed by its own bracket:
+  #   - bare array `[ ... ]` — the originally pinned contract ([] = clean);
+  #   - object wrapper `{ ..., "issues": [ ... ] }` — what wc-java-lint 0.4.x
+  #     actually emits ({summary, issues}). Rejecting it fail-closed every
+  #     real Java commit on well-formed JSON (e2e sweep 2026-10-17; pinned by
+  #     __tests__/issue-507-wc-java-object-json.test.bats). A truncated
+  #     response still fails its closing-bracket test -> BLOCK.
+  local head1 tail shape
+  head1=$(head -c 1 "$json_file")
   tail=$(tr -d '[:space:]' < "$json_file" | tail -c 1)
-  [ "$tail" = "]" ] || return 1
+  case "$head1" in
+    "[") shape=array;  [ "$tail" = "]" ] || return 1 ;;
+    "{") shape=object; [ "$tail" = "}" ] || return 1 ;;
+    *) return 1 ;;
+  esac
 
+  local structural obj_count file_count rule_count sev_count
   # Strip string VALUE literals (`: "..."` -> `: ""`). Keys must survive
   # (they are the tokens being counted); values must vanish (violation
   # messages routinely contain braces or the words file/rule/severity --
@@ -131,8 +141,60 @@ wc_java_json_violation_count() {
   # variant either fails to strip values (count desync -> BLOCK, annoying but
   # safe) or, worst case, errors to empty counts and disarms the lying-tool
   # BLOCK below (fail-open). Delphi round-2 A-MAJOR-2.
-  local structural obj_count file_count rule_count sev_count
   structural=$(sed -E 's/:([[:space:]]*)"([^"\\]|\\.)*"/:\1""/g' "$json_file" 2>/dev/null)
+
+  if [ "$shape" = "object" ]; then
+    # Object wrapper ({summary, issues}). Parse the ISSUES ARRAY exactly with
+    # brace-depth tracking (issues are JSON objects, so a record ends exactly
+    # where its nesting returns to the array level). For each record: all
+    # three keys must be present exactly once. A key outside any record —
+    # e.g. split triples in sibling objects, the lying-tool shape of r14
+    # CI-02 — makes the per-record key totals disagree with the global
+    # stripped counts -> BLOCK. Values were stripped first so braces inside
+    # messages cannot skew the depth.
+    file_count=$(grep -o '"file"' <<< "$structural" | wc -l | tr -d '[:space:]')
+    rule_count=$(grep -o '"rule"' <<< "$structural" | wc -l | tr -d '[:space:]')
+    sev_count=$(grep -o '"severity"' <<< "$structural" | wc -l | tr -d '[:space:]')
+    [ "$file_count" -eq "$rule_count" ] || return 1
+    [ "$file_count" -eq "$sev_count" ] || return 1
+    # Everything from the "issues" member onward (the tool emits it last; if
+    # a future format moves it, keys before it fall outside record parsing ->
+    # sum mismatch -> BLOCK, fail closed). Flatten to one line first: real
+    # output is pretty-printed across lines.
+    flattened=$(tr '\n' ' ' <<< "$structural")
+    tail_from_issues=$(sed -n 's/.*"issues"[[:space:]]*:[[:space:]]*\[/\n/p' <<< "$flattened")
+    [ -n "$tail_from_issues" ] || return 1
+    records=$(awk '
+      { rest = $0
+        depth = 0; rec = ""
+        for (i = 1; i <= length(rest); i++) {
+          c = substr(rest, i, 1)
+          if (depth == 0 && c == "]") break
+          if (c == "{") { depth++; if (depth == 1) { rec = ""; continue } }
+          if (c == "}") { depth--; if (depth == 0) { print rec; continue } }
+          if (depth >= 1) rec = rec c
+        }
+      }' <<< "$tail_from_issues")
+    rec_count=0
+    rf=0; rr=0; rs=0
+    while IFS= read -r _rec; do
+      [ -n "$_rec" ] || continue
+      cf=$(grep -o '"file"' <<< "$_rec" | wc -l | tr -d '[:space:]')
+      cr=$(grep -o '"rule"' <<< "$_rec" | wc -l | tr -d '[:space:]')
+      cs=$(grep -o '"severity"' <<< "$_rec" | wc -l | tr -d '[:space:]')
+      [ "$cf" -eq 1 ] || return 1
+      [ "$cr" -eq 1 ] || return 1
+      [ "$cs" -eq 1 ] || return 1
+      rf=$((rf + cf)); rr=$((rr + cr)); rs=$((rs + cs))
+      rec_count=$((rec_count + 1))
+    done <<< "$records"
+    [ "$rf" -eq "$file_count" ] || return 1
+    [ "$rr" -eq "$rule_count" ] || return 1
+    [ "$rs" -eq "$sev_count" ] || return 1
+    echo "$rec_count"
+    return 0
+  fi
+
   obj_count=$(grep -o '{' <<< "$structural" | wc -l | tr -d '[:space:]')
   file_count=$(grep -o '"file"' <<< "$structural" | wc -l | tr -d '[:space:]')
   rule_count=$(grep -o '"rule"' <<< "$structural" | wc -l | tr -d '[:space:]')

package/gate-7.sh

@@ -14,10 +14,28 @@ if [ -z "$IAC_FILES" ]; then
   echo "✅ PASSED - No IaC files detected in changes."
   GATE_7_STATUS="PASS"
 else
-  # Run IaC adapter
-  if [ -f "githooks/adapters/iac.sh" ]; then
-    # shellcheck source=githooks/adapters/iac.sh
-    source "githooks/adapters/iac.sh"
+  # Run IaC adapter. Resolution follows the documented 3-tier convention
+  # (adapter-common.sh): global ~/.config/xp-gate/adapters -> project
+  # githooks/adapters -> script dir. The old cwd-only test silently SKIPped
+  # IaC security in every consumer repo without an in-repo githooks/ dir,
+  # even with the adapter installed globally (e2e sweep 2026-10-17; pinned
+  # by __tests__/gate-7-adapter-resolution.test.bats).
+  IAC_ADAPTER=""
+  for _candidate in \
+    "$HOME/.config/xp-gate/adapters/iac.sh" \
+    "githooks/adapters/iac.sh" \
+    "${SCRIPT_DIR:-}/adapters/iac.sh"; do
+    if [ -n "$_candidate" ] && [ -f "$_candidate" ]; then
+      IAC_ADAPTER="$_candidate"
+      break
+    fi
+  done
+  if [ -n "$IAC_ADAPTER" ]; then
+    # Audit trail: which tier won (r14 walkthrough MAJ-02 — a silent tier-order
+    # regression must be visible in the gate output, not only in test diffs).
+    echo "   IaC adapter resolved from: $IAC_ADAPTER"
+    # shellcheck source=/dev/null
+    source "$IAC_ADAPTER"
     
     # Run static analysis for IaC files
     IAC_OUTPUT=$(run_static_analysis "$IAC_FILES" 2>&1)

package/hooks/gate-7.sh

@@ -14,10 +14,28 @@ if [ -z "$IAC_FILES" ]; then
   echo "✅ PASSED - No IaC files detected in changes."
   GATE_7_STATUS="PASS"
 else
-  # Run IaC adapter
-  if [ -f "githooks/adapters/iac.sh" ]; then
-    # shellcheck source=githooks/adapters/iac.sh
-    source "githooks/adapters/iac.sh"
+  # Run IaC adapter. Resolution follows the documented 3-tier convention
+  # (adapter-common.sh): global ~/.config/xp-gate/adapters -> project
+  # githooks/adapters -> script dir. The old cwd-only test silently SKIPped
+  # IaC security in every consumer repo without an in-repo githooks/ dir,
+  # even with the adapter installed globally (e2e sweep 2026-10-17; pinned
+  # by __tests__/gate-7-adapter-resolution.test.bats).
+  IAC_ADAPTER=""
+  for _candidate in \
+    "$HOME/.config/xp-gate/adapters/iac.sh" \
+    "githooks/adapters/iac.sh" \
+    "${SCRIPT_DIR:-}/adapters/iac.sh"; do
+    if [ -n "$_candidate" ] && [ -f "$_candidate" ]; then
+      IAC_ADAPTER="$_candidate"
+      break
+    fi
+  done
+  if [ -n "$IAC_ADAPTER" ]; then
+    # Audit trail: which tier won (r14 walkthrough MAJ-02 — a silent tier-order
+    # regression must be visible in the gate output, not only in test diffs).
+    echo "   IaC adapter resolved from: $IAC_ADAPTER"
+    # shellcheck source=/dev/null
+    source "$IAC_ADAPTER"
     
     # Run static analysis for IaC files
     IAC_OUTPUT=$(run_static_analysis "$IAC_FILES" 2>&1)

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-16T16:21:34.578Z",
+  "checked_at": "2026-10-17T15:22:27.205Z",
   "source": "network"
 }

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.27.2",
+  "version": "0.27.3",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.27.2",
+  "version": "0.27.3",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/grill-with-docs/SKILL.md

@@ -1,8 +1,7 @@
 ---
 name: grill-with-docs
-version: 1.0.0
 description: A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
 disable-model-invocation: true
 ---
 
-Run a `/grilling` session, using the `/domain-modeling` skill.
+Call the Skill tool twice, for "grilling" and "domain-modeling".

package/plugins/claude-code/skills/grilling/SKILL.md

@@ -1,13 +1,30 @@
 ---
 name: grilling
-version: 1.0.0
 description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
 ---
 
-Interview me relentlessly about every aspect of this until we reach a shared understanding. Walk down each branch of the decision tree, resolving dependencies between decisions one-by-one. For each question, provide your recommended answer.
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
 
-Ask the questions one at a time, waiting for feedback on each question before continuing. Asking multiple questions at once is bewildering.
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
 
-If a *fact* can be found by exploring the environment (filesystem, tools, etc.), look it up rather than asking me. The *decisions*, though, are mine — put each one to me and wait for my answer.
+Format a round like so:
 
-Do not act on it until I confirm we have reached a shared understanding.
+```
+❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+
+---
+
+❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+```
+
+Word each question so "yes" accepts your recommended answer.
+
+Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
+
+Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
+
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/lib/delphi-config.d.ts

@@ -68,7 +68,7 @@ export declare function expandEnv(value: string, env?: NodeJS.ProcessEnv): strin
  */
 export declare function resolveConfig(cfg: RawDelphiConfig, env?: NodeJS.ProcessEnv): ResolvedDelphiConfig;
 /** Read and resolve `.delphi-config.json` from a project root. */
-export declare function loadDelphiConfig(cwd: string, env?: NodeJS.ProcessEnv): ResolvedDelphiConfig;
+export declare function loadDelphiConfig(cwd: string, env?: NodeJS.ProcessEnv, globalPath?: string): ResolvedDelphiConfig;
 /** Build the transport options a round needs from a resolved config. */
 export declare function toDelphiOptions(cfg: ResolvedDelphiConfig): DelphiOptions;
 export {};

package/plugins/dsh/lib/delphi-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delphi-config.d.ts","sourceRoot":"","sources":["../src/delphi-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG5D,wDAAwD;AACxD,UAAU,SAAS;IACjB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,UAAU;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtG;;;OAGG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACjD,SAAS,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACvE;AAED,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,8EAA8E;AAC9E,qBAAa,gBAAiB,SAAQ,KAAK;CAAG;AAE9C;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAIrF;AAkCD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,eAAe,EACpB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,oBAAoB,CAiFtB;AAED,kEAAkE;AAClE,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,oBAAoB,CAetB;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,GAAG,EAAE,oBAAoB,GAAG,aAAa,CAQxE"}
+{"version":3,"file":"delphi-config.d.ts","sourceRoot":"","sources":["../src/delphi-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAG5D,wDAAwD;AACxD,UAAU,SAAS;IACjB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,UAAU;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtG;;;OAGG;IACH,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACjD,SAAS,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACvE;AAED,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,8EAA8E;AAC9E,qBAAa,gBAAiB,SAAQ,KAAK;CAAG;AAE9C;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAIrF;AA0ED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,eAAe,EACpB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,oBAAoB,CAuBtB;AAsCD,kEAAkE;AAClE,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,UAAU,GAAE,MAAqE,GAChF,oBAAoB,CAkCtB;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,GAAG,EAAE,oBAAoB,GAAG,aAAa,CAQxE"}

package/plugins/dsh/lib/delphi-config.js

@@ -11,7 +11,8 @@
  * @covers AC-DSH-016-02
  */
 import { readFileSync } from "node:fs";
-import { resolve } from "node:path";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
 import { validateSeats } from "./delphi.js";
 /** Raised when config on disk cannot be turned into a usable review setup. */
 export class DelphiSetupError extends Error {
@@ -54,23 +55,14 @@ function normalizeExperts(experts) {
     // Object form: the KEY is the role, which is how xp-gate writes it.
     return Object.entries(experts).map(([role, raw]) => ({ raw, role }));
 }
-/**
- * Turn raw config into a ready-to-run review setup.
- * Fails loudly and specifically: a missing key or an unexpanded placeholder is
- * the most common way a Delphi run silently degrades.
- */
-export function resolveConfig(cfg, env = process.env) {
-    const profile = selectProfile(cfg);
-    const normalized = normalizeExperts(profile.experts);
-    // An expert may name its own provider; otherwise there must be a profile-wide
-    // default. Resolve base_url/api_key per provider so mixed setups work.
-    const providerNames = new Set(normalized.map((e) => e.raw.provider ?? profile.provider).filter((p) => !!p));
-    if (providerNames.size === 0) {
+/** Resolve every referenced provider's base_url + api_key, failing loudly. */
+function resolveProviders(profile, needed, env) {
+    if (needed.size === 0) {
         throw new DelphiSetupError('No provider configured. Set "provider" on the profile or on each expert.');
     }
     const providerTable = profile.providers ?? {};
-    const resolvedProviders = new Map();
-    for (const name of providerNames) {
+    const resolved = new Map();
+    for (const name of needed) {
         const entry = providerTable[name];
         if (!entry) {
             throw new DelphiSetupError(`Provider "${name}" is not defined under "providers". ` +
@@ -89,8 +81,22 @@ export function resolveConfig(cfg, env = process.env) {
                 ? `API key variable ${varName} is not set in the environment.`
                 : `Provider "${name}" has no api_key.`);
         }
-        resolvedProviders.set(name, { baseUrl, apiKey });
+        resolved.set(name, { baseUrl, apiKey });
     }
+    return resolved;
+}
+/**
+ * Turn raw config into a ready-to-run review setup.
+ * Fails loudly and specifically: a missing key or an unexpanded placeholder is
+ * the most common way a Delphi run silently degrades.
+ */
+export function resolveConfig(cfg, env = process.env) {
+    const profile = selectProfile(cfg);
+    const normalized = normalizeExperts(profile.experts);
+    // An expert may name its own provider; otherwise there must be a profile-wide
+    // default. Resolve base_url/api_key per provider so mixed setups work.
+    const providerNames = new Set(normalized.map((e) => e.raw.provider ?? profile.provider).filter((p) => !!p));
+    const resolvedProviders = resolveProviders(profile, providerNames, env);
     const seats = normalized.map((e, i) => seatFromRaw(e.raw, i, e.role));
     // Surface an unexpanded placeholder as a config error, not a provider 404.
     for (const s of seats) {
@@ -99,6 +105,10 @@ export function resolveConfig(cfg, env = process.env) {
         }
     }
     validateSeats(seats);
+    return buildResult(profile, normalized, resolvedProviders, seats, cfg);
+}
+/** Assemble the final result after seats and providers validated. */
+function buildResult(profile, normalized, resolvedProviders, seats, cfg) {
     // All seats share one gateway in the supported setup; require agreement so a
     // mixed list cannot silently send one seat's key to another host.
     const chosen = resolvedProviders.get(normalized[0].raw.provider ?? profile.provider ?? "");
@@ -124,14 +134,32 @@ export function resolveConfig(cfg, env = process.env) {
     };
 }
 /** Read and resolve `.delphi-config.json` from a project root. */
-export function loadDelphiConfig(cwd, env = process.env) {
+export function loadDelphiConfig(cwd, env = process.env, globalPath = join(homedir(), ".config", "xp-gate", ".delphi-config.json")) {
+    // Global fallback (AC-DSH-016-03): the machine-wide config at
+    // ~/.config/xp-gate/.delphi-config.json is the single source of truth for
+    // every project. Without it, each repo needed its own copy — and reading a
+    // stale or differently-priced config from another project's directory caused
+    // real money loss (2026-10-03: an expensive overseas model burned the daily
+    // quota). A project-local config still wins, so per-project overrides work.
     const path = resolve(cwd, ".delphi-config.json");
     let raw;
     try {
         raw = readFileSync(path, "utf8");
     }
-    catch {
-        throw new DelphiSetupError(`No .delphi-config.json found at ${path}.`);
+    catch (projectError) {
+        // Fall back ONLY when the project file is genuinely absent (ENOENT); any
+        // other read error must surface rather than silently route this run to
+        // another config. Same semantics as delphi-external-review.cjs, which
+        // gates the fallback on existsSync (walkthrough R8 MA-01).
+        if (projectError?.code !== "ENOENT") {
+            throw new DelphiSetupError(`Cannot read ${path}: ${projectError.message}`);
+        }
+        try {
+            raw = readFileSync(globalPath, "utf8");
+        }
+        catch {
+            throw new DelphiSetupError(`No .delphi-config.json found at ${path} or the global location ${globalPath}.`);
+        }
     }
     let parsed;
     try {

package/plugins/dsh/node_modules/.vite/vitest/results.json

@@ -0,0 +1 @@
+{"version":"1.6.1","results":[[":src/delphi-config-global-fallback.test.ts",{"duration":13,"failed":false}]]}

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.27.2",
+  "version": "0.27.3",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/grill-with-docs/SKILL.md

@@ -1,8 +1,7 @@
 ---
 name: grill-with-docs
-version: 1.0.0
 description: A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
 disable-model-invocation: true
 ---
 
-Run a `/grilling` session, using the `/domain-modeling` skill.
+Call the Skill tool twice, for "grilling" and "domain-modeling".

package/plugins/dsh/skills/grilling/SKILL.md

@@ -1,13 +1,30 @@
 ---
 name: grilling
-version: 1.0.0
 description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
 ---
 
-Interview me relentlessly about every aspect of this until we reach a shared understanding. Walk down each branch of the decision tree, resolving dependencies between decisions one-by-one. For each question, provide your recommended answer.
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
 
-Ask the questions one at a time, waiting for feedback on each question before continuing. Asking multiple questions at once is bewildering.
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
 
-If a *fact* can be found by exploring the environment (filesystem, tools, etc.), look it up rather than asking me. The *decisions*, though, are mine — put each one to me and wait for my answer.
+Format a round like so:
 
-Do not act on it until I confirm we have reached a shared understanding.
+```
+❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+
+---
+
+❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+```
+
+Word each question so "yes" accepts your recommended answer.
+
+Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
+
+Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
+
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/src/delphi-config-global-fallback.test.ts

@@ -0,0 +1,87 @@
+// TDD-RED probe: loadDelphiConfig must fall back to the global config.
+import { describe, it, expect } from "vitest"
+import { mkdtempSync, writeFileSync, rmSync } from "node:fs"
+import { tmpdir } from "node:os"
+import { join } from "node:path"
+import { DelphiSetupError, loadDelphiConfig } from "./delphi-config.js"
+
+/**
+ * @test REQ-DSH-016
+ * @intent 项目目录没有 .delphi-config.json 时，回退读取全局
+ *         ~/.config/xp-gate/.delphi-config.json（全局唯一事实源，防止
+ *         跨项目漂移）；两处都没有才报错。
+ * @covers AC-DSH-016-02
+ */
+
+const globalStyle = JSON.stringify({
+  active_profile: "default",
+  profiles: {
+    default: {
+      provider: "whalecloud",
+      providers: { whalecloud: { base_url: "https://lab.example.com/gpt-proxy", api_key: "k" } },
+      experts: {
+        architecture: { model: "local-deepseek-v4-flash" },
+        technical: { model: "local-qwen3.8-flash" },
+        feasibility: { model: "local-qwen3.8-27b" },
+      },
+    },
+  },
+})
+
+describe("loadDelphiConfig global fallback", () => {
+  it("falls back to the global config when the project has none", () => {
+    const home = mkdtempSync(join(tmpdir(), "xpg-home-"))
+    const project = mkdtempSync(join(tmpdir(), "xpg-proj-"))
+    try {
+      writeFileSync(join(home, ".delphi-config.json"), globalStyle)
+      const cfg = loadDelphiConfig(project, {}, join(home, ".delphi-config.json"))
+      expect(cfg.seats.map((s) => s.model).sort()).toEqual(
+        ["local-deepseek-v4-flash", "local-qwen3.8-27b", "local-qwen3.8-flash"].sort()
+      )
+    } finally {
+      rmSync(home, { recursive: true, force: true })
+      rmSync(project, { recursive: true, force: true })
+    }
+  })
+
+  it("project config still wins over the global one", () => {
+    const home = mkdtempSync(join(tmpdir(), "xpg-home-"))
+    const project = mkdtempSync(join(tmpdir(), "xpg-proj-"))
+    try {
+      writeFileSync(join(home, ".delphi-config.json"), globalStyle)
+      writeFileSync(
+        join(project, ".delphi-config.json"),
+        JSON.stringify({
+          ...JSON.parse(globalStyle),
+          profiles: {
+            default: {
+              provider: "whalecloud",
+              providers: { whalecloud: { base_url: "https://lab.example.com/gpt-proxy", api_key: "k" } },
+              experts: {
+                architecture: { model: "proj-a" },
+                technical: { model: "proj-b" },
+                feasibility: { model: "proj-c" },
+              },
+            },
+          },
+        })
+      )
+      const cfg = loadDelphiConfig(project, {}, join(home, ".delphi-config.json"))
+      expect(cfg.seats.map((s) => s.model).sort()).toEqual(["proj-a", "proj-b", "proj-c"])
+    } finally {
+      rmSync(home, { recursive: true, force: true })
+      rmSync(project, { recursive: true, force: true })
+    }
+  })
+
+  it("errors naming BOTH missing locations when neither exists", () => {
+    const project = mkdtempSync(join(tmpdir(), "xpg-proj-"))
+    try {
+      expect(() => loadDelphiConfig(project, {}, join(project, "absent", ".delphi-config.json"))).toThrow(
+        DelphiSetupError
+      )
+    } finally {
+      rmSync(project, { recursive: true, force: true })
+    }
+  })
+})

package/plugins/dsh/src/delphi-config.ts

@@ -12,7 +12,8 @@
  */
 
 import { readFileSync } from "node:fs"
-import { resolve } from "node:path"
+import { homedir } from "node:os"
+import { join, resolve } from "node:path"
 import type { ExpertSeat, DelphiOptions } from "./delphi.js"
 import { validateSeats } from "./delphi.js"
 
@@ -99,32 +100,18 @@ function normalizeExperts(experts: RawProfile["experts"]): Array<{ raw: RawExper
   return Object.entries(experts).map(([role, raw]) => ({ raw, role }))
 }
 
-/**
- * Turn raw config into a ready-to-run review setup.
- * Fails loudly and specifically: a missing key or an unexpanded placeholder is
- * the most common way a Delphi run silently degrades.
- */
-export function resolveConfig(
-  cfg: RawDelphiConfig,
-  env: NodeJS.ProcessEnv = process.env,
-): ResolvedDelphiConfig {
-  const profile = selectProfile(cfg)
-  const normalized = normalizeExperts(profile.experts)
-
-  // An expert may name its own provider; otherwise there must be a profile-wide
-  // default. Resolve base_url/api_key per provider so mixed setups work.
-  const providerNames = new Set(
-    normalized.map((e) => e.raw.provider ?? profile.provider).filter((p): p is string => !!p),
-  )
-  if (providerNames.size === 0) {
-    throw new DelphiSetupError(
-      'No provider configured. Set "provider" on the profile or on each expert.',
-    )
+/** Resolve every referenced provider's base_url + api_key, failing loudly. */
+function resolveProviders(
+  profile: RawProfile,
+  needed: Set<string>,
+  env: NodeJS.ProcessEnv,
+): Map<string, { baseUrl: string; apiKey: string }> {
+  if (needed.size === 0) {
+    throw new DelphiSetupError('No provider configured. Set "provider" on the profile or on each expert.')
   }
-
   const providerTable = profile.providers ?? {}
-  const resolvedProviders = new Map<string, { baseUrl: string; apiKey: string }>()
-  for (const name of providerNames) {
+  const resolved = new Map<string, { baseUrl: string; apiKey: string }>()
+  for (const name of needed) {
     const entry = providerTable[name]
     if (!entry) {
       throw new DelphiSetupError(
@@ -148,8 +135,29 @@ export function resolveConfig(
           : `Provider "${name}" has no api_key.`,
       )
     }
-    resolvedProviders.set(name, { baseUrl, apiKey })
+    resolved.set(name, { baseUrl, apiKey })
   }
+  return resolved
+}
+
+/**
+ * Turn raw config into a ready-to-run review setup.
+ * Fails loudly and specifically: a missing key or an unexpanded placeholder is
+ * the most common way a Delphi run silently degrades.
+ */
+export function resolveConfig(
+  cfg: RawDelphiConfig,
+  env: NodeJS.ProcessEnv = process.env,
+): ResolvedDelphiConfig {
+  const profile = selectProfile(cfg)
+  const normalized = normalizeExperts(profile.experts)
+
+  // An expert may name its own provider; otherwise there must be a profile-wide
+  // default. Resolve base_url/api_key per provider so mixed setups work.
+  const providerNames = new Set(
+    normalized.map((e) => e.raw.provider ?? profile.provider).filter((p): p is string => !!p),
+  )
+  const resolvedProviders = resolveProviders(profile, providerNames, env)
 
   const seats = normalized.map((e, i) => seatFromRaw(e.raw, i, e.role))
   // Surface an unexpanded placeholder as a config error, not a provider 404.
@@ -162,6 +170,17 @@ export function resolveConfig(
   }
   validateSeats(seats)
 
+  return buildResult(profile, normalized, resolvedProviders, seats, cfg)
+}
+
+/** Assemble the final result after seats and providers validated. */
+function buildResult(
+  profile: RawProfile,
+  normalized: Array<{ raw: RawExpert; role: string }>,
+  resolvedProviders: Map<string, { baseUrl: string; apiKey: string }>,
+  seats: ExpertSeat[],
+  cfg: RawDelphiConfig,
+): ResolvedDelphiConfig {
   // All seats share one gateway in the supported setup; require agreement so a
   // mixed list cannot silently send one seat's key to another host.
   const chosen = resolvedProviders.get(normalized[0].raw.provider ?? profile.provider ?? "")
@@ -194,13 +213,33 @@ export function resolveConfig(
 export function loadDelphiConfig(
   cwd: string,
   env: NodeJS.ProcessEnv = process.env,
+  globalPath: string = join(homedir(), ".config", "xp-gate", ".delphi-config.json"),
 ): ResolvedDelphiConfig {
+  // Global fallback (AC-DSH-016-03): the machine-wide config at
+  // ~/.config/xp-gate/.delphi-config.json is the single source of truth for
+  // every project. Without it, each repo needed its own copy — and reading a
+  // stale or differently-priced config from another project's directory caused
+  // real money loss (2026-10-03: an expensive overseas model burned the daily
+  // quota). A project-local config still wins, so per-project overrides work.
   const path = resolve(cwd, ".delphi-config.json")
   let raw: string
   try {
     raw = readFileSync(path, "utf8")
-  } catch {
-    throw new DelphiSetupError(`No .delphi-config.json found at ${path}.`)
+  } catch (projectError) {
+    // Fall back ONLY when the project file is genuinely absent (ENOENT); any
+    // other read error must surface rather than silently route this run to
+    // another config. Same semantics as delphi-external-review.cjs, which
+    // gates the fallback on existsSync (walkthrough R8 MA-01).
+    if ((projectError as NodeJS.ErrnoException)?.code !== "ENOENT") {
+      throw new DelphiSetupError(`Cannot read ${path}: ${(projectError as Error).message}`)
+    }
+    try {
+      raw = readFileSync(globalPath, "utf8")
+    } catch {
+      throw new DelphiSetupError(
+        `No .delphi-config.json found at ${path} or the global location ${globalPath}.`
+      )
+    }
   }
   let parsed: RawDelphiConfig
   try {

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.27.2",
+  "version": "0.27.3",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/grill-with-docs/SKILL.md

@@ -1,8 +1,7 @@
 ---
 name: grill-with-docs
-version: 1.0.0
 description: A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
 disable-model-invocation: true
 ---
 
-Run a `/grilling` session, using the `/domain-modeling` skill.
+Call the Skill tool twice, for "grilling" and "domain-modeling".

package/plugins/opencode/skills/grilling/SKILL.md

@@ -1,13 +1,30 @@
 ---
 name: grilling
-version: 1.0.0
 description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
 ---
 
-Interview me relentlessly about every aspect of this until we reach a shared understanding. Walk down each branch of the decision tree, resolving dependencies between decisions one-by-one. For each question, provide your recommended answer.
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
 
-Ask the questions one at a time, waiting for feedback on each question before continuing. Asking multiple questions at once is bewildering.
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
 
-If a *fact* can be found by exploring the environment (filesystem, tools, etc.), look it up rather than asking me. The *decisions*, though, are mine — put each one to me and wait for my answer.
+Format a round like so:
 
-Do not act on it until I confirm we have reached a shared understanding.
+```
+❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+
+---
+
+❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+```
+
+Word each question so "yes" accepts your recommended answer.
+
+Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
+
+Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
+
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.27.2",
+  "version": "0.27.3",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/scripts/delphi-external-review.cjs

@@ -112,6 +112,32 @@ function validateProviders(providers, profileName) {
 }
 
 function readConfig(configPath, profileOverride) {
+  // Global fallback: a relative --config that this cwd does not have resolves
+  // to the machine-wide ~/.config/xp-gate/.delphi-config.json. This is what
+  // makes `--config .delphi-config.json` work from ANY project without each
+  // repo carrying its own (drifting, differently-priced) copy — reading a
+  // foreign project's config used to route calls to expensive models
+  // (2026-10-03 quota incident). An existing local file always wins.
+  // Fallback fires ONLY when the project file is genuinely absent: statSync
+  // distinguishes ENOENT from EACCES/EISDIR, and any other error aborts here
+  // rather than silently routing this run to another config — matching the
+  // TS loader's ENOENT-only semantics (walkthrough R10 FC-01).
+  const missingHere = (() => {
+    try { fs.statSync(configPath); return false; } catch (e) { return e.code === 'ENOENT'; }
+  })();
+  if (missingHere && !path.isAbsolute(configPath)) {
+    // r16 MA-01 disposition: XDG_CONFIG_HOME is an accepted override for the
+    // global config location. The CLI lib (shared-paths/doctor) intentionally
+    // pins ~/.config/xp-gate — overriding only this loader would make the two
+    // disagree. On Linux, $HOME/.config IS the XDG default, so behaviour there
+    // is identical; the env var only matters for non-default setups.
+    const configHome = process.env.XDG_CONFIG_HOME || path.join(os.homedir(), '.config');
+    const globalPath = path.join(configHome, 'xp-gate', '.delphi-config.json');
+    if (fs.existsSync(globalPath)) {
+      console.error(`[delphi-review] ${configPath} not found here — using global config ${globalPath}`);
+      configPath = globalPath;
+    }
+  }
   if (!fs.existsSync(configPath)) {
     console.error(`[delphi-review] ERROR: Config file not found: ${configPath}`);
     console.error('[delphi-review] Copy .delphi-config.json.example to .delphi-config.json and fill in your API keys.');

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/skills/grill-with-docs/SKILL.md

@@ -1,8 +1,7 @@
 ---
 name: grill-with-docs
-version: 1.0.0
 description: A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
 disable-model-invocation: true
 ---
 
-Run a `/grilling` session, using the `/domain-modeling` skill.
+Call the Skill tool twice, for "grilling" and "domain-modeling".

package/skills/grilling/SKILL.md

@@ -1,13 +1,30 @@
 ---
 name: grilling
-version: 1.0.0
 description: Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
 ---
 
-Interview me relentlessly about every aspect of this until we reach a shared understanding. Walk down each branch of the decision tree, resolving dependencies between decisions one-by-one. For each question, provide your recommended answer.
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
 
-Ask the questions one at a time, waiting for feedback on each question before continuing. Asking multiple questions at once is bewildering.
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled: the questions you can ask _now_ without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
 
-If a *fact* can be found by exploring the environment (filesystem, tools, etc.), look it up rather than asking me. The *decisions*, though, are mine — put each one to me and wait for my answer.
+Format a round like so:
 
-Do not act on it until I confirm we have reached a shared understanding.
+```
+❓ **Q1** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+
+---
+
+❓ **Q2** - **<question title>**: <question body, might be multiple paragraphs, including multiple choices>
+
+➡️ <your recommended answer>
+```
+
+Word each question so "yes" accepts your recommended answer.
+
+Each round the user answers reshapes the tree: settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a _later_ round, not this one.
+
+Finding _facts_ is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it; don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report; ask the rest of the frontier now. The _decisions_ are the user's: put each to them and wait.
+
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.

package/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-10-16
-**Commit:** a5ee6191
+**Generated:** 2026-10-17
+**Commit:** b207e882
 **Branch:** main
-**Version:** 0.27.2.0
+**Version:** 0.27.3.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.