@boyingliu01/xp-gate 0.5.3 → 0.7.0

package/lib/gate-audit.ts

@@ -0,0 +1,279 @@
+/**
+ * Gate Audit Logger — structured JSONL audit for quality gate executions.
+ *
+ * Log file: .xp-gate/audit.jsonl
+ * Rotation: max 10 MB, rename to .1, keep up to 3 archives.
+ * Fail-safe: write errors never block the caller.
+ */
+import {
+  existsSync,
+  mkdirSync,
+  appendFileSync,
+  writeFileSync,
+  readFileSync,
+  renameSync,
+  statSync,
+  chmodSync,
+} from 'fs';
+import { join } from 'path';
+
+// ── Constants ────────────────────────────────────────────────────────────────
+
+const AUDIT_DIR = '.xp-gate';
+const AUDIT_FILE = 'audit.jsonl';
+const MAX_FILE_BYTES = 10 * 1024 * 1024; // 10 MB
+const MAX_ARCHIVES = 3;
+
+// ── Types ────────────────────────────────────────────────────────────────────
+
+export interface GateAuditEntry {
+  timestamp: string;
+  gate_id: string;
+  gate_name: string;
+  passed: boolean;
+  issues_found: number;
+  duration_ms: number;
+  trigger: 'commit' | 'push' | 'manual';
+  repo_path: string;
+  commit_hash: string;
+}
+
+// ── Public API ───────────────────────────────────────────────────────────────
+
+/**
+ * Append one audit entry to .xp-gate/audit.jsonl.
+ * Creates the directory lazily on first write.
+ * NEVER throws — errors are logged to stderr only.
+ */
+export function appendAuditEntry(
+  entry: GateAuditEntry,
+  repoRoot: string = process.cwd(),
+): void {
+  try {
+    const logPath = join(repoRoot, AUDIT_DIR, AUDIT_FILE);
+
+    // Lazy-create directory
+    const dirPath = join(repoRoot, AUDIT_DIR);
+    if (!existsSync(dirPath)) {
+      mkdirSync(dirPath, { recursive: true });
+    }
+
+    // Rotate before write if file is too large
+    rotateIfNeeded(logPath);
+
+    const line = JSON.stringify(entry) + '\n';
+
+    // POSIX append with atomic semantics
+    try {
+      appendFileSync(logPath, line, 'utf8');
+      // Set restrictive permissions on first write (idempotent)
+      try {
+        chmodSync(logPath, 0o600);
+      } catch {
+        // chmod may fail on some filesystems — non-fatal
+      }
+    } catch {
+      // Windows fallback: open with 'a' flag
+      writeFileSync(logPath, line, { flag: 'a', encoding: 'utf8' });
+    }
+  } catch (err) {
+    // Fail-safe: never propagate errors to caller
+    console.error('[xp-gate audit] Failed to append entry:', (err as Error).message);
+  }
+}
+
+/**
+ * Read the last N entries from the audit log.
+ */
+export function readTailEntries(
+  count: number = 20,
+  repoRoot: string = process.cwd(),
+): GateAuditEntry[] {
+  const logPath = join(repoRoot, AUDIT_DIR, AUDIT_FILE);
+  if (!existsSync(logPath)) {
+    return [];
+  }
+
+  const content = readFileSync(logPath, 'utf8').trim();
+  if (!content) {
+    return [];
+  }
+
+  const allLines = content.split('\n');
+  const tailLines = allLines.slice(-count);
+  const entries: GateAuditEntry[] = [];
+
+  for (const line of tailLines) {
+    if (line.trim()) {
+      try {
+        entries.push(JSON.parse(line) as GateAuditEntry);
+      } catch {
+        // Skip malformed lines
+      }
+    }
+  }
+
+  return entries;
+}
+
+/**
+ * Compute per-gate aggregate statistics.
+ */
+export function computeStats(
+  repoRoot: string = process.cwd(),
+): { gate_id: string; pass_pct: string; avg_ms: number; avg_issues: number }[] {
+  const logPath = join(repoRoot, AUDIT_DIR, AUDIT_FILE);
+  if (!existsSync(logPath)) {
+    return [];
+  }
+
+  const content = readFileSync(logPath, 'utf8').trim();
+  if (!content) {
+    return [];
+  }
+
+  // Parse all valid entries
+  const entries: GateAuditEntry[] = [];
+  for (const line of content.split('\n')) {
+    if (line.trim()) {
+      try {
+        entries.push(JSON.parse(line) as GateAuditEntry);
+      } catch {
+        // Skip malformed
+      }
+    }
+  }
+
+  // Aggregate by gate_id
+  const buckets = new Map<string, { total: number; passed: number; ms: number; issues: number }>();
+
+  for (const e of entries) {
+    const b = buckets.get(e.gate_id) ?? { total: 0, passed: 0, ms: 0, issues: 0 };
+    b.total += 1;
+    if (e.passed) b.passed += 1;
+    b.ms += e.duration_ms;
+    b.issues += e.issues_found;
+    buckets.set(e.gate_id, b);
+  }
+
+  const results: { gate_id: string; pass_pct: string; avg_ms: number; avg_issues: number }[] = [];
+
+  for (const [gate_id, b] of Array.from(buckets.entries())) {
+    results.push({
+      gate_id,
+      pass_pct: (b.total > 0 ? ((b.passed / b.total) * 100).toFixed(1) + '%' : 'N/A'),
+      avg_ms: b.total > 0 ? Math.round(b.ms / b.total) : 0,
+      avg_issues: b.total > 0 ? parseFloat((b.issues / b.total).toFixed(2)) : 0,
+    });
+  }
+
+  // Sort by gate_id for stable output
+  results.sort((a, b) => a.gate_id.localeCompare(b.gate_id));
+  return results;
+}
+
+/**
+ * Rotate the audit log if it exceeds MAX_FILE_BYTES.
+ * Renames current file to .1, shifts existing archives.
+ * Keeps at most MAX_ARCHIVES archived files.
+ */
+export function rotateIfNeeded(logPath: string): void {
+  if (!existsSync(logPath)) {
+    return;
+  }
+
+  let stats;
+  try {
+    stats = statSync(logPath);
+  } catch {
+    return;
+  }
+
+  if (stats.size < MAX_FILE_BYTES) {
+    return;
+  }
+
+  // Shift archives: .2 -> .3, .1 -> .2
+  for (let i = MAX_ARCHIVES; i >= 2; i--) {
+    const from = `${logPath}.${i - 1}`;
+    const to = `${logPath}.${i}`;
+    if (existsSync(from)) {
+      try {
+        renameSync(from, to);
+      } catch {
+        // Race condition or permission issue — skip
+      }
+    }
+  }
+
+  // Current -> .1
+  const firstArchive = `${logPath}.1`;
+  if (existsSync(firstArchive)) {
+    try {
+      renameSync(firstArchive, `${logPath}.2`);
+    } catch {
+      // Skip on error
+    }
+  }
+
+  try {
+    renameSync(logPath, firstArchive);
+  } catch {
+    // If rename fails, truncate the current file instead
+    try {
+      writeFileSync(logPath, '', 'utf8');
+    } catch {
+      console.error('[xp-gate audit] Failed to rotate or truncate log:', logPath);
+    }
+  }
+}
+
+// ── CLI entry point (direct invocation from hooks) ───────────────────────────
+
+/**
+ * When called directly via `npx tsx gate-audit.ts record --gate-id ...`,
+ * this block handles CLI argument parsing and appends the entry.
+ */
+if (require.main === module) {
+  const args = process.argv.slice(2);
+  const command = args[0];
+
+  if (command === 'record') {
+    const opts = parseCliOptions(args.slice(1));
+    const entry: GateAuditEntry = {
+      timestamp: new Date().toISOString(),
+      gate_id: opts['gate-id'] || 'unknown',
+      gate_name: opts['gate-name'] || 'unknown',
+      passed: opts['passed'] === 'true',
+      issues_found: parseInt(opts['issues-found'] || '0', 10),
+      duration_ms: parseInt(opts['duration-ms'] || '0', 10),
+      trigger: (opts['trigger'] as 'commit' | 'push' | 'manual') || 'manual',
+      repo_path: process.cwd(),
+      commit_hash: getCommitHash(),
+    };
+    appendAuditEntry(entry);
+  } else {
+    console.error(`Unknown audit command: ${command}`);
+    process.exit(1);
+  }
+}
+
+function parseCliOptions(args: string[]): Record<string, string> {
+  const opts: Record<string, string> = {};
+  for (let i = 0; i < args.length; i++) {
+    if (args[i].startsWith('--') && i + 1 < args.length) {
+      opts[args[i].slice(2)] = args[i + 1];
+      i++;
+    }
+  }
+  return opts;
+}
+
+function getCommitHash(): string {
+  try {
+    const { execSync } = require('child_process');
+    return execSync('git rev-parse HEAD', { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+  } catch {
+    return 'unknown';
+  }
+}

package/lib/install-skill.js

@@ -13,6 +13,13 @@ const HOME = process.env.HOME || process.env.USERPROFILE || os.homedir();
 
 const CONFIG_DIR = path.join(HOME, '.config', 'xp-gate');
 const SKILLS_DIR = path.join(HOME, '.config', 'opencode', 'skills');
+const QODER_SKILLS_DIR = path.join(HOME, '.qoder', 'skills');
+
+// Platform-specific skill directories
+const PLATFORM_SKILLS_DIRS = {
+  opencode: SKILLS_DIR,
+  qoder: QODER_SKILLS_DIR,
+};
 
 const SKILLS_REGISTRY = {
   'sprint-flow': { repo: 'boyingliu01/xp-gate', path: 'skills/sprint-flow' },
@@ -22,20 +29,23 @@ const SKILLS_REGISTRY = {
 };
 
 async function installSkill(name, options = {}) {
-  const { offline = false, verbose = false, force = false } = options;
-  
-  const depCheck = await checkDeps();
-  if (!depCheck.ok) {
-    if (depCheck.missing) {
-      console.error(`Error: ${depCheck.missing} is required but not installed`);
-      console.error('Please install superpowers and gstack first');
-      console.error('See: https://github.com/boyingliu01/superpowers');
-      return 1;
-    }
-    if (depCheck.versionMismatch) {
-      console.error(`Error: ${depCheck.versionMismatch.name} version too old`);
-      console.error(`Need: ${depCheck.versionMismatch.required}, Found: ${depCheck.versionMismatch.found}`);
-      return 1;
+  const { offline = false, verbose = false, force = false, platform = 'opencode' } = options;
+
+  // Qoder platform has no superpowers/gstack dependency
+  if (platform !== 'qoder') {
+    const depCheck = await checkDeps();
+    if (!depCheck.ok) {
+      if (depCheck.missing) {
+        console.error(`Error: ${depCheck.missing} is required but not installed`);
+        console.error('Please install superpowers and gstack first');
+        console.error('See: https://github.com/boyingliu01/superpowers');
+        return 1;
+      }
+      if (depCheck.versionMismatch) {
+        console.error(`Error: ${depCheck.versionMismatch.name} version too old`);
+        console.error(`Need: ${depCheck.versionMismatch.required}, Found: ${depCheck.versionMismatch.found}`);
+        return 1;
+      }
     }
   }
   
@@ -46,7 +56,8 @@ async function installSkill(name, options = {}) {
     return 1;
   }
   
-  const targetDir = path.join(SKILLS_DIR, name);
+  const targetSkillsDir = PLATFORM_SKILLS_DIRS[platform] || SKILLS_DIR;
+  const targetDir = path.join(targetSkillsDir, name);
   if (fs.existsSync(targetDir) && !force) {
     console.error(`Error: ${name} is already installed`);
     console.error('Use --force to overwrite');

package/lib/ui-detector.ts

@@ -204,21 +204,21 @@ function processOutput(input: string, repoRoot: string): void {
     .map(parseRenamedFile)
     .filter((f) => f.length > 0);
   const result = collectUiMatches(files, repoRoot);
-  // eslint-disable-next-line no-console
+   
   console.log(JSON.stringify(result, null, 2));
   process.exit(result.isUiSprint ? 0 : 1);
 }
 
-function runCheckBranch(repoRoot: string): void {
+function runCheckBranch(_repoRoot: string): void {
   const result = detectUiSprint('HEAD');
-  // eslint-disable-next-line no-console
+   
   console.log(JSON.stringify(result, null, 2));
   process.exit(result.isUiSprint ? 0 : 1);
 }
 
-function runDefault(repoRoot: string): void {
+function runDefault(_repoRoot: string): void {
   const result = detectUiSprint();
-  // eslint-disable-next-line no-console
+   
   console.log(JSON.stringify(result, null, 2));
   process.exit(result.isUiSprint ? 0 : 1);
 }

package/lib/ui-review.ts

@@ -15,9 +15,9 @@ interface UiReviewResult {
 }
 
 function main(): void {
-  // eslint-disable-next-line no-console
+   
   console.log('═══ xp-gate ui-review ═══');
-  // eslint-disable-next-line no-console
+   
   console.log('');
 
   // Get staged + modified files
@@ -25,7 +25,7 @@ function main(): void {
   try {
     files = execSync('git diff --cached --name-only && git diff --name-only', { encoding: 'utf8' }).trim();
   } catch {
-    // eslint-disable-next-line no-console
+     
     console.log('⚠️ No git repo or no changes. Running in current directory.');
   }
 
@@ -35,7 +35,7 @@ function main(): void {
     .filter(f => f.length > 0);
 
   if (fileList.length === 0) {
-    // eslint-disable-next-line no-console
+     
     console.log('No files staged or modified. Checking all tracked files.');
     try {
       files = execSync('git ls-files', { encoding: 'utf8' }).trim();
@@ -48,28 +48,28 @@ function main(): void {
   const result = collectUiMatches(fileList);
 
   if (!result.isUiSprint) {
-    // eslint-disable-next-line no-console
+     
     console.log('ℹ️ No UI changes detected in staged/modified files.');
-    // eslint-disable-next-line no-console
+     
     console.log('  Nothing to review. Exiting.');
     process.exit(0);
   }
 
-  // eslint-disable-next-line no-console
+   
   console.log(`🎨 UI changes detected (${result.matchedFiles.length} files):`);
   result.matchedFiles.forEach(f => console.log(`  - ${f}`));
-  // eslint-disable-next-line no-console
+   
   console.log('');
 
-  // eslint-disable-next-line no-console
+   
   console.log('Next steps required before push:');
-  // eslint-disable-next-line no-console
+   
   console.log('  1. Run /design-review in your AI agent session');
-  // eslint-disable-next-line no-console
+   
   console.log('  2. Run /qa or /qa-only in your AI agent session');
-  // eslint-disable-next-line no-console
+   
   console.log('  3. Ensure you have .delphi-config.json configured for Delphi review');
-  // eslint-disable-next-line no-console
+   
   console.log('');
 
   const commit = execSync('git rev-parse HEAD 2>/dev/null || echo "no-commit"', { encoding: 'utf8' }).trim();
@@ -86,23 +86,23 @@ function main(): void {
 
   writeFileSync(join(process.cwd(), RESULT_FILE), JSON.stringify(uiResult, null, 2) + '\n', 'utf8');
 
-  // eslint-disable-next-line no-console
+   
   console.log(`✅ Generated ${RESULT_FILE} with APPROVED verdict (template)`);
-  // eslint-disable-next-line no-console
+   
   console.log(`   Commit: ${commit}`);
-  // eslint-disable-next-line no-console
+   
   console.log(`   Expires: ${expires}`);
-  // eslint-disable-next-line no-console
+   
   console.log('');
-  // eslint-disable-next-line no-console
+   
   console.log('⚠️  REVIEW THIS FILE before push:');
-  // eslint-disable-next-line no-console
+   
   console.log('   - Ensure design_review and browser_qa are actually APPROVED');
-  // eslint-disable-next-line no-console
+   
   console.log('   - Edit verdict to REJECTED if issues found');
-  // eslint-disable-next-line no-console
+   
   console.log('');
-  // eslint-disable-next-line no-console
+   
   console.log('Then: git push (pre-push will validate this file)');
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.5.3",
+  "version": "0.7.0",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.5.3",
+  "version": "0.7.0",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 6 quality gates, Sprint Flow, and Delphi multi-expert review.",
   "author": {

package/plugins/qoder/AGENTS.md

@@ -0,0 +1,93 @@
+# QODER PLUGIN KNOWLEDGE BASE
+
+**Generated:** 2026-06-03
+**Version:** v0.6.0
+
+## OVERVIEW
+Cross-platform plugin for Qoder IDE — shared skills, Qoder-specific enhancements (genui widgets, Canvas, Memory, CodeReview subagent, browser-use MCP). No hooks.json (Qoder uses skill-embedded gates instead of file-system event hooks).
+
+## STRUCTURE
+```
+plugins/qoder/
+├── README.md                      # Installation and usage guide
+├── AGENTS.md                      # This knowledge base
+├── skills/                        # Auto-populated by build-plugin.sh (8 skills)
+│   ├── sprint-flow/SKILL.md       # 7-phase pipeline + Qoder Pre-Edit Gate + Agent mapping
+│   ├── delphi-review/SKILL.md     # Multi-expert consensus + Qoder multi-model adaptation
+│   ├── test-specification-alignment/SKILL.md  # 2-phase test-spec verification
+│   ├── ralph-loop/SKILL.md        # REQ-level iterative build + Memory integration
+│   ├── test-driven-development/SKILL.md       # TDD enforcement (zero modification)
+│   ├── improve-codebase-architecture/SKILL.md # Architecture health + Canvas output
+│   ├── to-issues/SKILL.md         # Vertical slice issue splitting (zero modification)
+│   └── admin-template-guidelines/SKILL.md     # 6 maintainability rules (zero modification)
+├── widgets/                       # genui show_widget templates
+│   ├── quality-report.html        # Quality gate report dashboard
+│   └── sprint-dashboard.html      # Sprint status board
+└── references/
+    └── qoder-adaptation.md        # Platform differences and adaptation rules
+```
+
+## WHERE TO LOOK
+| Task | Location | Notes |
+|------|----------|-------|
+| Installation | README.md | User-level (~/.qoder/skills/) and project-level (.qoder/skills/) |
+| Skill adaptations | skills/*/SKILL.md | Qoder-specific paragraphs marked with "Qoder" header |
+| Pre-Edit Gate | skills/sprint-flow/SKILL.md | Replaces Claude Code's delphi-review-guard.sh hook |
+| Multi-model review | skills/delphi-review/references/qoder-multi-model.md | Expert→model mapping via Qoder Agent subagents |
+| Agent dispatch | skills/sprint-flow/SKILL.md | Phase→Qoder Agent mapping table |
+| External skill fallback | skills/sprint-flow/references/qoder-adaptation.md | superpowers/gstack replacements |
+| Quality widget | widgets/quality-report.html | genui show_widget template for Phase 3 results |
+| Sprint widget | widgets/sprint-dashboard.html | genui show_widget template for sprint status |
+| Memory integration | skills/ralph-loop/SKILL.md | UpdateMemory for permanent/contextual learnings |
+| CodeReview | skills/sprint-flow/SKILL.md | Phase 2 step 4 + Phase 3 code walkthrough |
+| Browser MCP | skills/sprint-flow/references/qoder-adaptation.md | browser-use replaces gstack/browse |
+
+## CONVENTIONS
+- Plugin skills auto-populated by build-plugin.sh --platform qoder — never edit plugins/qoder/skills/ directly
+- Qoder-specific skill modifications live in source skills/ directory (marked with "## Qoder" sections)
+- No hooks.json — Qoder lacks file-system event hooks; gates embedded in skill instructions
+- genui widgets use show_widget MCP tool with widget_path template mode
+- Memory system replaces gstack/learn for learnings persistence
+- CodeReview subagent replaces superpowers/requesting-code-review
+- browser-use MCP replaces gstack/browse for Phase 3 browser testing
+- External skills (superpowers/gstack) replaced by orchestrator inline execution or Qoder native capabilities
+
+## ANTI-PATTERNS (THIS PLUGIN)
+- Do NOT edit plugins/qoder/skills/ directly — rebuild from source via build-plugin.sh
+- Do NOT assume xp-gate CLI is installed — skills must degrade gracefully
+- Do NOT create hooks.json for Qoder — platform does not support file-system event hooks
+- Do NOT use curl for API calls — curl is in Qoder's command deny list; use PowerShell Invoke-RestMethod or Qoder's built-in multi-model capability
+- Do NOT reference OpenCode task() API in Qoder skills — use Agent tool (Browser/CodeReview/plan-agent) instead
+
+## UNIQUE STYLES
+- Qoder: SKILL.md + genui widgets + Canvas + Memory + CodeReview subagent + browser-use MCP
+- Pre-Edit Gate: skill-embedded mandatory check replaces Claude Code's physical hook blocking
+- Multi-model review: Qoder Agent subagent dispatch (plan-agent/CodeReview) replaces OpenCode task() API
+- Graceful degradation: skills work even without xp-gate CLI installed
+- Shared skill source: one SKILL.md → copied to Claude Code, OpenCode, and Qoder platforms
+
+## COMMANDS
+```bash
+# Build Qoder plugin
+npm run build:qoder-plugin                    # Build Qoder plugin with all 8 skills
+bash scripts/build-plugin.sh --platform qoder  # Same, via script
+
+# Install skills
+bash scripts/install-qoder-skills.sh --global  # User-level: ~/.qoder/skills/
+bash scripts/install-qoder-skills.sh --local   # Project-level: .qoder/skills/
+
+# Test plugin
+bash scripts/test-plugins.sh                   # Includes Qoder platform tests
+
+# CLI skill install
+xp-gate install-skill sprint-flow --platform qoder --global
+xp-gate install-skill delphi-review --platform qoder --local
+```
+
+## NOTES
+- v0.6.0+: Qoder plugin support introduced
+- Qoder plugin: 8 skills (all source skills, including admin-template-guidelines)
+- Claude Code plugin: 7 skills (no admin-template-guidelines)
+- OpenCode plugin: 7 skills + 3 custom tools (gate-check, gate-principles, gate-arch)
+- build-plugin.sh validates 8 expected skills for Qoder platform
+- test-plugins.sh: includes Qoder-specific test cases (widgets, no hooks.json)

package/plugins/qoder/README.md

@@ -0,0 +1,87 @@
+# XP-Gate Qoder Plugin
+
+Qoder IDE plugin exposing xp-gate quality gates, AI workflow skills, and visual dashboards.
+
+## Skills (8 AI Workflow Skills)
+
+| Skill | Trigger | Description |
+|-------|---------|-------------|
+| sprint-flow | `/sprint-flow "需求"` | 7-phase pipeline: THINK→PLAN→BUILD→REVIEW→ACCEPT→FEEDBACK→SHIP |
+| delphi-review | `/delphi-review` | Multi-expert anonymous consensus review (design + code-walkthrough) |
+| test-specification-alignment | `/test-specification-alignment` | 2-phase test-spec verification |
+| ralph-loop | Via sprint-flow Phase 2 | REQ-level iterative build (saves 40-67% tokens) |
+| test-driven-development | `/test-driven-development` | TDD enforcement (RED→GREEN→REFACTOR) |
+| improve-codebase-architecture | `/improve-codebase-architecture` | Architecture health checks |
+| to-issues | `/to-issues` | Vertical slice issue splitting |
+| admin-template-guidelines | Via sprint-flow BUILD | 6 maintainability rules for admin templates |
+
+## Qoder-Specific Enhancements
+
+- **genui Widgets**: Quality report dashboard and Sprint status board (via `show_widget`)
+- **CodeReview Subagent**: Deep integration for Phase 2 blind review and Phase 3 code walkthrough
+- **browser-use MCP**: Phase 3 browser automation testing (replaces gstack/browse)
+- **Memory System**: Learnings persistence via Qoder's built-in memory (replaces gstack/learn)
+- **Canvas Output**: Architecture relationship diagrams (via `.canvas.tsx`)
+
+## Installation
+
+### Option 1: User-Level (Global, All Projects)
+
+```bash
+# Via xp-gate CLI
+xp-gate install-skill sprint-flow --platform qoder --global
+xp-gate install-skill delphi-review --platform qoder --global
+
+# Or via install script (all 8 skills)
+bash scripts/install-qoder-skills.sh --global
+# Installs to: ~/.qoder/skills/
+```
+
+### Option 2: Project-Level (Current Project Only)
+
+```bash
+# Via install script
+bash scripts/install-qoder-skills.sh --local
+# Installs to: .qoder/skills/
+
+# Or via build script
+bash scripts/build-plugin.sh --platform qoder
+```
+
+### Option 3: Build from Source
+
+```bash
+npm run build:qoder-plugin
+# Produces plugins/qoder/ with all skills + widgets
+```
+
+## Requirements
+
+- Qoder IDE
+- xp-gate npm package installed globally (for git hooks: `npm install -g @boyingliu01/xp-gate && xp-gate init`)
+- Node.js ≥ 18 (for principles checker)
+
+## Pre-Edit Gate (Replaces Claude Code Hooks)
+
+Qoder does not have file-system event hooks like Claude Code's `PreToolUse`/`PostToolUse`. Instead, xp-gate skills embed **mandatory pre-edit checks** in their SKILL.md instructions:
+
+- **Delphi Gate**: Before any code edit in Phase 2+, skill verifies `.sprint-state/delphi-reviewed.json` verdict is `APPROVED`
+- **Principles Check**: After each REQ completion, skill runs principles checker via terminal
+
+## Graceful Degradation
+
+If xp-gate CLI is unavailable, skills provide helpful install instructions instead of failing. Quality gates still run via git hooks (pre-commit) at commit time.
+
+## Comparison with Other Platforms
+
+| Feature | Claude Code | OpenCode | Qoder |
+|---------|:-----------:|:--------:|:-----:|
+| AI Skills (8) | ✅ | ✅ | ✅ |
+| Git Hooks | ❌ (separate npm) | ❌ (separate npm) | ❌ (separate npm) |
+| Event Hooks | ✅ PreToolUse/PostToolUse | ✅ tool() | ❌ (skill-embedded) |
+| Custom Tools | ❌ | ✅ 3 tools | ❌ (MCP instead) |
+| Widget UI | ❌ | ❌ | ✅ genui |
+| Canvas Output | ❌ | ❌ | ✅ .canvas.tsx |
+| Memory System | ❌ | ❌ | ✅ UpdateMemory |
+| CodeReview Agent | ❌ | ❌ | ✅ subagent |
+| Browser MCP | ❌ | ❌ | ✅ browser-use |