@boyingliu01/xp-gate 0.35.13 → 0.35.15

package/lib/doctor.js

@@ -3238,6 +3238,21 @@ async function doctorDelphi(options = {}) {
   // retype: the detail names delphi-setup. Project-level agents (from
   // `delphi-setup --local --project`) take precedence when a complete set
   // exists there, so the doctor agrees with the repair command (#414 R1 FC-09).
+  //
+  // #646: when the machine is configured for the external channel only, the native
+  // path is DISABLED BY CHOICE, not broken. Reporting FAIL here is what told external
+  // users their working setup was broken and pointed them at a repair command that
+  // reinstalls the thing they just removed. SKIP carries the reason so the line can
+  // never be read as green either -- the same rule every other gate follows.
+  const delphiChannel = require('./delphi-channel.js');
+  // Pass the directory that CONTAINS `.config`, not the `.config` dir itself:
+  // resolveChannels() appends `<home>/.config/xp-gate/...`, so handing it `.config`
+  // would look in `.config/.config/xp-gate` and never find the file.
+  const channelHome = process.env.XDG_CONFIG_HOME
+    ? path.dirname(process.env.XDG_CONFIG_HOME)
+    : undefined;
+  const channelResolution = delphiChannel.resolveChannels({ home: channelHome });
+  const nativeDisabled = !channelResolution.nativeEnabled;
   const { readQoderModelId } = require('./init.js');
   const roles = ['architecture', 'technical', 'feasibility'];
   const homeAgentsDir = path.join(HOME_DIR(), '.qoder', 'agents');
@@ -3252,7 +3267,16 @@ async function doctorDelphi(options = {}) {
   const agentIds = [];
   let agentsStatus = 'PASS';
   const agentDetails = [agentsSource];
-  for (const role of roles) {
+  // #646: skip the whole native binding check when the machine is external-only.
+  // The check exists to keep the native path healthy; when that path is switched off
+  // by configuration there is nothing to keep healthy, and reporting its absence as
+  // FAIL told users their working setup was broken.
+  if (nativeDisabled) {
+    add('Qoder Delphi agent bindings', 'SKIP',
+      `native channel disabled (channels=${channelResolution.channels.join(',')} via ${channelResolution.source}) — `
+      + 'Delphi review runs through the external provider');
+  }
+  for (const role of nativeDisabled ? [] : roles) {
     const agentPath = path.join(agentsDir, `delphi-${role}.md`);
     if (!fs.existsSync(agentPath)) {
       agentsStatus = 'FAIL';
@@ -3283,12 +3307,18 @@ async function doctorDelphi(options = {}) {
   // Report every problem class independently: missing files, unparseable
   // bindings and duplicates can coexist, and each has a different remedy
   // (#414 R1 MI-02).
-  if (agentIds.length !== roles.length) agentsStatus = 'FAIL';
-  if (new Set(agentIds).size !== agentIds.length) {
-    agentsStatus = 'FAIL';
-    agentDetails.push('duplicate model binding across experts — three DISTINCT ids are required');
+  //
+  // #646: only when the native channel is actually enabled. Running this over an
+  // empty agentIds (the disabled path) would compute `0 !== 3` and re-report the very
+  // FAIL the SKIP above just replaced.
+  if (!nativeDisabled) {
+    if (agentIds.length !== roles.length) agentsStatus = 'FAIL';
+    if (new Set(agentIds).size !== agentIds.length) {
+      agentsStatus = 'FAIL';
+      agentDetails.push('duplicate model binding across experts — three DISTINCT ids are required');
+    }
+    add('Qoder Delphi agent bindings', agentsStatus, agentDetails.join('; ') || 'all three bound');
   }
-  add('Qoder Delphi agent bindings', agentsStatus, agentDetails.join('; ') || 'all three bound');
 
   // 3. Skill install parity: a drifted installed copy is how "reinstall from
   // an old local repo" became a downgrade (#414 B4). Every bundled file is

package/lib/init.js

@@ -844,6 +844,21 @@ function configureQoderDelphiAgents(srcDir, targetRoot) {
     return; // Not Qoder — OpenCode uses .delphi-config.json instead
   }
 
+  // #646: honour the machine-level channel preference BEFORE looking at anything
+  // else. The native path is measurably disproved (Qoder's subagent dispatch adopts
+  // the persona but drops the model binding — recorded in skills/delphi-review), so
+  // a user who configured "external only" must not have it silently reinstalled on
+  // every upgrade. Say which file the decision came from: an unexplained SKIP is
+  // indistinguishable from a broken install.
+  const channel = require('./delphi-channel.js');
+  const resolved = channel.resolveChannels();
+  if (resolved.warning) console.warn(`  ⚠ Delphi channel: ${resolved.warning}`);
+  if (!resolved.nativeEnabled) {
+    console.log(`  Qoder Delphi agents: SKIP (channels=${resolved.channels.join(',')} via ${resolved.source})`);
+    console.log('    Delphi review runs through the external provider (see .delphi-config.json).');
+    return;
+  }
+
   const agentSrcDir = path.join(srcDir, 'plugins', 'qoder', 'agents');
   const agentsDestDir = path.join(targetRoot, '.qoder', 'agents');
 

package/lib/mattpocock-license-verdict.json

@@ -2,6 +2,6 @@
   "verdict": "PASS",
   "license_type": "MIT",
   "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
-  "checked_at": "2026-10-30T22:02:11.313Z",
+  "checked_at": "2026-10-30T22:49:35.688Z",
   "source": "network"
 }

package/mock-policy/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MOCK-POLICY KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Mock layering policy enforcement — Gate M3 of pre-push hook. Ensures integration tests use real implementations for internal dependencies, mock external dependencies, and annotate pending mocks with removal plans. Combines project scope scanning, mock decision engine, and per-file validation into a single pipeline.

package/mutation/AGENTS.md

@@ -1,9 +1,9 @@
 # SRC/MUTATION KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 **Gate M** (incremental mutation testing) + **Gate M2** helpers (test-layer detection used by `src/mock-policy/`). Pre-push quality gate. TypeScript-only; uses Stryker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.35.13",
+  "version": "0.35.15",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.35.13",
+  "version": "0.35.15",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/claude-code/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/claude-code/skills/delphi-review/SKILL.md

@@ -384,6 +384,38 @@ Qoder 的内置模型**没有本地推理端点**：推理请求由 Qoder 客户
 - 项目级：`<project>/.qoder/agents/`（`xp-gate init`）
 - 用户级：`~/.qoder/agents/`（`xp-gate init --global`）
 
+#### 推荐路径：external-only（#646）
+
+上面整条 native 通道在本机**实测不可用**。所以推荐配置是**关掉它**，只走外部 provider —— 这是唯一能满足三模型契约的路径，也是这份文档的默认建议。
+
+**开启方式**（改一次机器级偏好，对所有仓库生效）：
+
+```bash
+# 1. 移除已部署的 native agent（幂等，重复执行不报错）
+xp-gate delphi-setup --uninstall --global
+# 或项目级：xp-gate delphi-setup --uninstall --local --project <dir>
+
+# 2. 写通道偏好，阻止 `xp-gate init` 再装回来
+#    ~/.config/xp-gate/.delphi-config.json
+#    { "channels": ["external"] }
+```
+
+临时覆盖（CI、一次性运行）：`XP_GATE_DELPHI_CHANNEL=external`。
+
+**生效范围**：
+
+| 位置 | external-only 时的行为 |
+|---|---|
+| `xp-gate init` / `init --global` | 不部署 `delphi-*.md`，打印 `SKIP (channels=external via config)` |
+| `xp-gate doctor delphi` | native 检查报 **SKIP** 并注明来源，**不再 FAIL**；外部链路（config / runner / 三席互异）照常逐项校验 |
+| 本技能的通道决策表 | 直接走 external，不再探测 native |
+
+**为什么偏好放在机器级**：通道选择是"这台机器上 Delphi 怎么跑"，与具体仓库无关。放进项目文件会让每个仓库各写一遍。
+
+**为什么不默认 external-only**：那会悄悄改掉所有没提要求的人的行为。默认保持两条通道都可用，由用户显式关闭。
+
+**doctor 的 SKIP 不等于绿灯**：它带着理由（`channels=external via config`），和"没装"、"坏了"能区分开。这是本项目所有门禁的统一规则——跳过必须说明为什么跳。
+
 **model 字段格式**：仍须写成 `"[DisplayName](modelId)"`。裸名字或已下线 ID 不会报错，会被平台静默忽略。`xp-gate init` 会审计已部署的 `delphi-*.md`，格式非法或 modelId 与本版本模板不一致时点名文件并给出"删除 → 重跑 `init` → 重启会话"提示；因为部署语义是"已存在不覆盖"，从 #417 之前的版本升级必须手工删旧文件再重跑 `init`。注意：修好绑定也只是让角色声明规范，并不改变上表的执行模型结论。
 
 **执行方式**：用 Agent tool 并行派发 3 个 subagent，`subagent_type` 分别取 `delphi-architecture`、`delphi-technical`、`delphi-feasibility`。**新建或修改 agent 文件后必须重开会话**——注册表只在会话启动时加载，否则报 `Unknown agent type`。

package/plugins/claude-code/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/claude-code/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/lib/index.d.ts

@@ -23,6 +23,16 @@ export declare const renderText: <A>(_args: A, value: string) => {
 }[];
 export declare const name = "tool-xp-gate";
 export declare const inject: string[];
+/**
+ * The first `${VAR}` / `{env:VAR}` name in a config value, or undefined.
+ *
+ * Exported for tests (#562). This one-line function is on the SECURITY path:
+ * `resolveExpressionKey` treats "no placeholder found" as "the user typed a literal
+ * token", and rejects it outright so the credential never lands in a profile file.
+ * So a regex mistake here is not cosmetic -- a false positive on a literal key would
+ * let it through, and a false negative would reject a perfectly valid reference.
+ */
+export declare function findPlaceholderName(value: string): string | undefined;
 /**
  * Runtime schema for the keys above.
  *

package/plugins/dsh/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AA0BlD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,UAAU,GAAI,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,MAAM;;;GAA6C,CAAA;AAElG,eAAO,MAAM,IAAI,iBAAiB,CAAA;AAGlC,eAAO,MAAM,MAAM,UAA+B,CAAA;AAsZlD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aA4BjB,CAAA;AAEF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,OAAY,GAAG,IAAI,CAgC9D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AA0BlD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,UAAU,GAAI,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,MAAM;;;GAA6C,CAAA;AAElG,eAAO,MAAM,IAAI,iBAAiB,CAAA;AAGlC,eAAO,MAAM,MAAM,UAA+B,CAAA;AAkQlD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrE;AA8ID;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aA4BjB,CAAA;AAEF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,OAAY,GAAG,IAAI,CAgC9D"}

package/plugins/dsh/lib/index.js

@@ -258,8 +258,16 @@ async function resolveExpressionKey(expression, resolveApiKey) {
         return fromEnv.value;
     throw new DelphiSetupError(`API key variable ${placeholder} has no value. Set it, or store it in DSH's credential store.`);
 }
-/** The first `${VAR}` / `{env:VAR}` name in a config value, or undefined. */
-function findPlaceholderName(value) {
+/**
+ * The first `${VAR}` / `{env:VAR}` name in a config value, or undefined.
+ *
+ * Exported for tests (#562). This one-line function is on the SECURITY path:
+ * `resolveExpressionKey` treats "no placeholder found" as "the user typed a literal
+ * token", and rejects it outright so the credential never lands in a profile file.
+ * So a regex mistake here is not cosmetic -- a false positive on a literal key would
+ * let it through, and a false negative would reject a perfectly valid reference.
+ */
+export function findPlaceholderName(value) {
     const shell = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/.exec(value);
     if (shell)
         return shell[1];

package/plugins/dsh/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/dsh-plugin-xp-gate",
-  "version": "0.35.13",
+  "version": "0.35.15",
   "description": "XP-Gate deterministic quality gates + AI workflow skills as a DeepSeek Harness (DSH) native plugin: gate-check / gate-principles / gate-arch tools + 12 SKILL.md skills",
   "type": "module",
   "main": "./lib/index.js",

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/delphi-review/SKILL.md

@@ -384,6 +384,38 @@ Qoder 的内置模型**没有本地推理端点**：推理请求由 Qoder 客户
 - 项目级：`<project>/.qoder/agents/`（`xp-gate init`）
 - 用户级：`~/.qoder/agents/`（`xp-gate init --global`）
 
+#### 推荐路径：external-only（#646）
+
+上面整条 native 通道在本机**实测不可用**。所以推荐配置是**关掉它**，只走外部 provider —— 这是唯一能满足三模型契约的路径，也是这份文档的默认建议。
+
+**开启方式**（改一次机器级偏好，对所有仓库生效）：
+
+```bash
+# 1. 移除已部署的 native agent（幂等，重复执行不报错）
+xp-gate delphi-setup --uninstall --global
+# 或项目级：xp-gate delphi-setup --uninstall --local --project <dir>
+
+# 2. 写通道偏好，阻止 `xp-gate init` 再装回来
+#    ~/.config/xp-gate/.delphi-config.json
+#    { "channels": ["external"] }
+```
+
+临时覆盖（CI、一次性运行）：`XP_GATE_DELPHI_CHANNEL=external`。
+
+**生效范围**：
+
+| 位置 | external-only 时的行为 |
+|---|---|
+| `xp-gate init` / `init --global` | 不部署 `delphi-*.md`，打印 `SKIP (channels=external via config)` |
+| `xp-gate doctor delphi` | native 检查报 **SKIP** 并注明来源，**不再 FAIL**；外部链路（config / runner / 三席互异）照常逐项校验 |
+| 本技能的通道决策表 | 直接走 external，不再探测 native |
+
+**为什么偏好放在机器级**：通道选择是"这台机器上 Delphi 怎么跑"，与具体仓库无关。放进项目文件会让每个仓库各写一遍。
+
+**为什么不默认 external-only**：那会悄悄改掉所有没提要求的人的行为。默认保持两条通道都可用，由用户显式关闭。
+
+**doctor 的 SKIP 不等于绿灯**：它带着理由（`channels=external via config`），和"没装"、"坏了"能区分开。这是本项目所有门禁的统一规则——跳过必须说明为什么跳。
+
 **model 字段格式**：仍须写成 `"[DisplayName](modelId)"`。裸名字或已下线 ID 不会报错，会被平台静默忽略。`xp-gate init` 会审计已部署的 `delphi-*.md`，格式非法或 modelId 与本版本模板不一致时点名文件并给出"删除 → 重跑 `init` → 重启会话"提示；因为部署语义是"已存在不覆盖"，从 #417 之前的版本升级必须手工删旧文件再重跑 `init`。注意：修好绑定也只是让角色声明规范，并不改变上表的执行模型结论。
 
 **执行方式**：用 Agent tool 并行派发 3 个 subagent，`subagent_type` 分别取 `delphi-architecture`、`delphi-technical`、`delphi-feasibility`。**新建或修改 agent 文件后必须重开会话**——注册表只在会话启动时加载，否则报 `Unknown agent type`。

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/src/index.test.ts

@@ -2,7 +2,7 @@ import { describe, it, expect } from "vitest"
 import type { Context } from "@deepseek-ai/cordis"
 import type { ShellExecRequest, ShellExecSpec, ShellRunResult } from "@deepseek-ai/dsh-shell"
 import type { SkillProvider, SkillProviderControl, SkillProviderObservation } from "@deepseek-ai/dsh-skill"
-import { apply, inject, renderText } from "./index.js"
+import { apply, findPlaceholderName, inject, renderText } from "./index.js"
 
 type ProviderFactory = (control: SkillProviderControl) => SkillProvider
 
@@ -186,4 +186,46 @@ describe("apply", () => {
     // [] would look to the host like the tool never answered.
     expect(renderText({ path: "x" }, "")).toEqual([{ type: "text", text: "" }])
   })
-})
+
+  /**
+   * @test REQ-562
+   * @intent `findPlaceholderName` 处在**安全路径**上：`resolveExpressionKey` 把"没找到占位符"
+   *         解释为"用户直接写了一个明文 token"，并据此拒绝。所以这里正则错一下不是美观问题——
+   *         对明文 key 误判为占位符会**直接放行**，对合法引用漏判会拒绝正确配置。
+   * @covers AC-562-05
+   */
+  describe("findPlaceholderName", () => {
+    it("AC-562-05: recognizes the ${VAR} spelling", () => {
+      expect(findPlaceholderName("${WHALECLOUD_API_KEY}")).toBe("WHALECLOUD_API_KEY")
+    })
+
+    it("AC-562-05: recognizes the {env:VAR} spelling", () => {
+      expect(findPlaceholderName("{env:OPENAI_API_KEY}")).toBe("OPENAI_API_KEY")
+    })
+
+    it("AC-562-05: ${VAR} wins when a value carries both spellings", () => {
+      // Order matters: the shell form is checked first, so a value mixing both
+      // resolves deterministically rather than depending on regex engine order.
+      expect(findPlaceholderName("{env:A}${B}")).toBe("B")
+    })
+
+    it("AC-562-05: a literal token yields undefined -- this is what triggers the reject", () => {
+      // The security-relevant case: a real key must NOT look like a placeholder.
+      expect(findPlaceholderName("sk-live-abcdef123456")).toBeUndefined()
+      expect(findPlaceholderName("")).toBeUndefined()
+    })
+
+    it("AC-562-05: near-misses that must not count as placeholders", () => {
+      // A lowercase-first name, a digit-first name, and an empty ${} are all invalid
+      // identifiers; treating any of them as a reference would bypass the guard.
+      expect(findPlaceholderName("${1BAD}")).toBeUndefined()
+      expect(findPlaceholderName("${}")).toBeUndefined()
+      expect(findPlaceholderName("$VAR")).toBeUndefined()
+      expect(findPlaceholderName("{env:}")).toBeUndefined()
+    })
+
+    it("AC-562-05: a placeholder embedded in surrounding text is still found", () => {
+      expect(findPlaceholderName("Bearer ${TOKEN}")).toBe("TOKEN")
+    })
+  })
+})

package/plugins/dsh/src/index.ts

@@ -312,8 +312,16 @@ async function resolveExpressionKey(expression: string, resolveApiKey: ApiKeyRes
   )
 }
 
-/** The first `${VAR}` / `{env:VAR}` name in a config value, or undefined. */
-function findPlaceholderName(value: string): string | undefined {
+/**
+ * The first `${VAR}` / `{env:VAR}` name in a config value, or undefined.
+ *
+ * Exported for tests (#562). This one-line function is on the SECURITY path:
+ * `resolveExpressionKey` treats "no placeholder found" as "the user typed a literal
+ * token", and rejects it outright so the credential never lands in a profile file.
+ * So a regex mistake here is not cosmetic -- a false positive on a literal key would
+ * let it through, and a false negative would reject a perfectly valid reference.
+ */
+export function findPlaceholderName(value: string): string | undefined {
   const shell = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}/.exec(value)
   if (shell) return shell[1]
   const envStyle = /\{env:([A-Za-z_][A-Za-z0-9_]*)\}/.exec(value)

package/plugins/opencode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/opencode-plugin",
-  "version": "0.35.13",
+  "version": "0.35.15",
   "type": "module",
   "main": "index.ts",
   "description": "XP-Gate quality gates + AI workflow skills + Sprint Flow TUI sidebar for OpenCode",

package/plugins/opencode/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/opencode/skills/delphi-review/SKILL.md

@@ -384,6 +384,38 @@ Qoder 的内置模型**没有本地推理端点**：推理请求由 Qoder 客户
 - 项目级：`<project>/.qoder/agents/`（`xp-gate init`）
 - 用户级：`~/.qoder/agents/`（`xp-gate init --global`）
 
+#### 推荐路径：external-only（#646）
+
+上面整条 native 通道在本机**实测不可用**。所以推荐配置是**关掉它**，只走外部 provider —— 这是唯一能满足三模型契约的路径，也是这份文档的默认建议。
+
+**开启方式**（改一次机器级偏好，对所有仓库生效）：
+
+```bash
+# 1. 移除已部署的 native agent（幂等，重复执行不报错）
+xp-gate delphi-setup --uninstall --global
+# 或项目级：xp-gate delphi-setup --uninstall --local --project <dir>
+
+# 2. 写通道偏好，阻止 `xp-gate init` 再装回来
+#    ~/.config/xp-gate/.delphi-config.json
+#    { "channels": ["external"] }
+```
+
+临时覆盖（CI、一次性运行）：`XP_GATE_DELPHI_CHANNEL=external`。
+
+**生效范围**：
+
+| 位置 | external-only 时的行为 |
+|---|---|
+| `xp-gate init` / `init --global` | 不部署 `delphi-*.md`，打印 `SKIP (channels=external via config)` |
+| `xp-gate doctor delphi` | native 检查报 **SKIP** 并注明来源，**不再 FAIL**；外部链路（config / runner / 三席互异）照常逐项校验 |
+| 本技能的通道决策表 | 直接走 external，不再探测 native |
+
+**为什么偏好放在机器级**：通道选择是"这台机器上 Delphi 怎么跑"，与具体仓库无关。放进项目文件会让每个仓库各写一遍。
+
+**为什么不默认 external-only**：那会悄悄改掉所有没提要求的人的行为。默认保持两条通道都可用，由用户显式关闭。
+
+**doctor 的 SKIP 不等于绿灯**：它带着理由（`channels=external via config`），和"没装"、"坏了"能区分开。这是本项目所有门禁的统一规则——跳过必须说明为什么跳。
+
 **model 字段格式**：仍须写成 `"[DisplayName](modelId)"`。裸名字或已下线 ID 不会报错，会被平台静默忽略。`xp-gate init` 会审计已部署的 `delphi-*.md`，格式非法或 modelId 与本版本模板不一致时点名文件并给出"删除 → 重跑 `init` → 重启会话"提示；因为部署语义是"已存在不覆盖"，从 #417 之前的版本升级必须手工删旧文件再重跑 `init`。注意：修好绑定也只是让角色声明规范，并不改变上表的执行模型结论。
 
 **执行方式**：用 Agent tool 并行派发 3 个 subagent，`subagent_type` 分别取 `delphi-architecture`、`delphi-technical`、`delphi-feasibility`。**新建或修改 agent 文件后必须重开会话**——注册表只在会话启动时加载，否则报 `Unknown agent type`。

package/plugins/opencode/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/opencode/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/qoder/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.35.13",
+  "version": "0.35.15",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Qoder. Includes 12 pre-commit gates (Gate 0-11), 8 pre-push gates, Sprint Flow (6 phases), and Delphi multi-expert review (>=90% consensus).",
   "author": {

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/qoder/skills/delphi-review/SKILL.md

@@ -384,6 +384,38 @@ Qoder 的内置模型**没有本地推理端点**：推理请求由 Qoder 客户
 - 项目级：`<project>/.qoder/agents/`（`xp-gate init`）
 - 用户级：`~/.qoder/agents/`（`xp-gate init --global`）
 
+#### 推荐路径：external-only（#646）
+
+上面整条 native 通道在本机**实测不可用**。所以推荐配置是**关掉它**，只走外部 provider —— 这是唯一能满足三模型契约的路径，也是这份文档的默认建议。
+
+**开启方式**（改一次机器级偏好，对所有仓库生效）：
+
+```bash
+# 1. 移除已部署的 native agent（幂等，重复执行不报错）
+xp-gate delphi-setup --uninstall --global
+# 或项目级：xp-gate delphi-setup --uninstall --local --project <dir>
+
+# 2. 写通道偏好，阻止 `xp-gate init` 再装回来
+#    ~/.config/xp-gate/.delphi-config.json
+#    { "channels": ["external"] }
+```
+
+临时覆盖（CI、一次性运行）：`XP_GATE_DELPHI_CHANNEL=external`。
+
+**生效范围**：
+
+| 位置 | external-only 时的行为 |
+|---|---|
+| `xp-gate init` / `init --global` | 不部署 `delphi-*.md`，打印 `SKIP (channels=external via config)` |
+| `xp-gate doctor delphi` | native 检查报 **SKIP** 并注明来源，**不再 FAIL**；外部链路（config / runner / 三席互异）照常逐项校验 |
+| 本技能的通道决策表 | 直接走 external，不再探测 native |
+
+**为什么偏好放在机器级**：通道选择是"这台机器上 Delphi 怎么跑"，与具体仓库无关。放进项目文件会让每个仓库各写一遍。
+
+**为什么不默认 external-only**：那会悄悄改掉所有没提要求的人的行为。默认保持两条通道都可用，由用户显式关闭。
+
+**doctor 的 SKIP 不等于绿灯**：它带着理由（`channels=external via config`），和"没装"、"坏了"能区分开。这是本项目所有门禁的统一规则——跳过必须说明为什么跳。
+
 **model 字段格式**：仍须写成 `"[DisplayName](modelId)"`。裸名字或已下线 ID 不会报错，会被平台静默忽略。`xp-gate init` 会审计已部署的 `delphi-*.md`，格式非法或 modelId 与本版本模板不一致时点名文件并给出"删除 → 重跑 `init` → 重启会话"提示；因为部署语义是"已存在不覆盖"，从 #417 之前的版本升级必须手工删旧文件再重跑 `init`。注意：修好绑定也只是让角色声明规范，并不改变上表的执行模型结论。
 
 **执行方式**：用 Agent tool 并行派发 3 个 subagent，`subagent_type` 分别取 `delphi-architecture`、`delphi-technical`、`delphi-feasibility`。**新建或修改 agent 文件后必须重开会话**——注册表只在会话启动时加载，否则报 `Unknown agent type`。

package/plugins/qoder/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/qoder/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/principles/AGENTS.md

@@ -1,9 +1,9 @@
 # PRINCIPLES CHECKER MODULE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Clean Code & SOLID principles checker — **Gate 4** of pre-commit. 14 rules × 9 language adapters, SARIF 2.1.0 output. Houses the **Boy Scout Rule** enforcement engine (Gate 6) and warning-baseline storage.

package/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
 **Generated:** 2026-10-30
-**Commit:** 3978d361
+**Commit:** 6091e238
 **Branch:** main
-**Version:** 0.35.13.0
+**Version:** 0.35.15.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.