@boyingliu01/xp-gate 0.6.0 → 0.7.0

package/bin/xp-gate.js

@@ -22,7 +22,7 @@ const COMMANDS = {
   'install-skill': {
     description: 'Install a xp-gate skill from GitHub',
     fn: installSkill,
-    usage: 'xp-gate install-skill <name>[@<version>] [--offline] [--verbose] [--force]'
+    usage: 'xp-gate install-skill <name>[@<version>] [--offline] [--verbose] [--force] [--platform opencode|qoder]'
   },
   'update-skill': {
     description: 'Update installed skill(s)',
@@ -103,7 +103,7 @@ function main() {
     const name = subargs[0];
     if (!name) {
       console.error('Error: Skill name required');
-      console.error('Usage: xp-gate install-skill <name>[@<version>]');
+      console.error('Usage: xp-gate install-skill <name>[@<version>] [--platform opencode|qoder]');
       process.exit(1);
       return;
     }
@@ -285,13 +285,18 @@ function printStatsTable(stats) {
 }
 
 function parseOptions(args) {
-  const options = { offline: false, verbose: false, force: false, all: false, check: false };
-  for (const arg of args) {
+  const options = { offline: false, verbose: false, force: false, all: false, check: false, platform: 'opencode' };
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
     if (arg === '--offline') options.offline = true;
     if (arg === '--verbose') options.verbose = true;
     if (arg === '--force') options.force = true;
     if (arg === '--all') options.all = true;
     if (arg === '--check') options.check = true;
+    if (arg === '--platform' && i + 1 < args.length) {
+      options.platform = args[i + 1];
+      i++;
+    }
   }
   return options;
 }

package/lib/__tests__/detect-deps.test.js

@@ -206,4 +206,38 @@ describe('detect-deps', () => {
     expect(result.ok).toBe(false);
     expect(result.versionMismatch.found).toBe('0.0.1');
   });
+
+  // --- Qoder platform tests ---
+
+  it('returns ok:true immediately for qoder platform (no hard deps)', async () => {
+    // Qoder has no superpowers/gstack dependency — should pass even with empty dirs
+    const { checkDeps } = require('../detect-deps');
+    const result = await checkDeps('qoder');
+    expect(result.ok).toBe(true);
+    expect(result.platform).toBe('qoder');
+  });
+
+  it('qoder platform passes even when superpowers/gstack are completely absent', async () => {
+    // No skill directories at all — qoder should still pass
+    const { checkDeps } = require('../detect-deps');
+    const result = await checkDeps('qoder');
+    expect(result.ok).toBe(true);
+    expect(result.missing).toBeUndefined();
+  });
+
+  it('claude-code platform behaves like default opencode (requires deps)', async () => {
+    // claude-code platform profile requires the same deps as opencode
+    const { checkDeps } = require('../detect-deps');
+    const result = await checkDeps('claude-code');
+    expect(result.ok).toBe(false);
+    expect(result.missing).toBe('superpowers');
+  });
+
+  it('unknown platform falls back to opencode profile', async () => {
+    const { checkDeps } = require('../detect-deps');
+    const result = await checkDeps('unknown-platform');
+    // Falls back to opencode profile → requires deps → fails
+    expect(result.ok).toBe(false);
+    expect(result.missing).toBe('superpowers');
+  });
 });

package/lib/__tests__/install-skill.test.js

@@ -323,4 +323,49 @@ describe('install-skill', () => {
     expect(console.warn).not.toHaveBeenCalled();
     expect(console.error).toHaveBeenCalledWith('Error: Failed to download test-spec');
   });
+
+  // --- Qoder platform tests ---
+
+  function qoderSkillsDir() {
+    return path.join(tmpHome, '.qoder', 'skills');
+  }
+
+  it('qoder platform skips dep check (installs without superpowers/gstack)', async () => {
+    // Do NOT call setupValidDeps() — no superpowers/gstack present
+    mockHttpsGet({ statusCode: 200, body: '# Sprint Flow Qoder' });
+
+    const { installSkill } = require('../install-skill');
+    const result = await installSkill('sprint-flow', { platform: 'qoder' });
+
+    expect(result).toBe(0);
+    expect(console.log).toHaveBeenCalledWith('✓ sprint-flow installed');
+  });
+
+  it('qoder platform installs to ~/.qoder/skills/ instead of ~/.config/opencode/skills/', async () => {
+    mockHttpsGet({ statusCode: 200, body: '# Qoder Skill' });
+
+    const { installSkill } = require('../install-skill');
+    const result = await installSkill('sprint-flow', { platform: 'qoder' });
+
+    expect(result).toBe(0);
+    // Verify installed in Qoder directory
+    const qoderFile = path.join(qoderSkillsDir(), 'sprint-flow', 'SKILL.md');
+    expect(fs.existsSync(qoderFile)).toBe(true);
+    expect(fs.readFileSync(qoderFile, 'utf8')).toContain('Qoder Skill');
+
+    // Verify NOT installed in opencode directory
+    const opencodeFile = path.join(skillsDir(), 'sprint-flow', 'SKILL.md');
+    expect(fs.existsSync(opencodeFile)).toBe(false);
+  });
+
+  it('default platform still requires deps and installs to opencode dir', async () => {
+    // Without setupValidDeps, default platform should fail on dep check
+    const { installSkill } = require('../install-skill');
+    const result = await installSkill('sprint-flow');
+
+    expect(result).toBe(1);
+    expect(console.error).toHaveBeenCalledWith(
+      expect.stringContaining('superpowers is required')
+    );
+  });
 });

package/lib/detect-deps.js

@@ -18,6 +18,14 @@ const REQUIRED_DEPS = [
   { name: 'gstack', minVersion: '1.0.0' }
 ];
 
+// Platform-specific dependency profiles
+// Qoder has no external skill dependencies (superpowers/gstack not required)
+const PLATFORM_PROFILES = {
+  opencode: { requiredDeps: REQUIRED_DEPS, skillsDirs: [SKILLS_DIR, OPENCODE_DIR] },
+  qoder:    { requiredDeps: [],              skillsDirs: [path.join(HOME, '.qoder', 'skills')] },
+  'claude-code': { requiredDeps: REQUIRED_DEPS, skillsDirs: [SKILLS_DIR, OPENCODE_DIR] },
+};
+
 /**
  * Check if bash is available on the system.
  * XP-Gate hooks are bash scripts — Windows users need Git Bash installed.
@@ -84,12 +92,17 @@ function checkBash() {
   }
 }
 
-async function checkDeps() {
-  for (const dep of REQUIRED_DEPS) {
-    const possiblePaths = [
-      path.join(SKILLS_DIR, dep.name),
-      path.join(OPENCODE_DIR, dep.name)
-    ];
+async function checkDeps(platform = 'opencode') {
+  const profile = PLATFORM_PROFILES[platform] || PLATFORM_PROFILES.opencode;
+  const { requiredDeps, skillsDirs } = profile;
+
+  // Qoder and other platforms with no hard dependencies pass immediately
+  if (requiredDeps.length === 0) {
+    return { ok: true, platform };
+  }
+
+  for (const dep of requiredDeps) {
+    const possiblePaths = skillsDirs.map(dir => path.join(dir, dep.name));
     
     let depDir = null;
     for (const p of possiblePaths) {

package/lib/install-skill.js

@@ -13,6 +13,13 @@ const HOME = process.env.HOME || process.env.USERPROFILE || os.homedir();
 
 const CONFIG_DIR = path.join(HOME, '.config', 'xp-gate');
 const SKILLS_DIR = path.join(HOME, '.config', 'opencode', 'skills');
+const QODER_SKILLS_DIR = path.join(HOME, '.qoder', 'skills');
+
+// Platform-specific skill directories
+const PLATFORM_SKILLS_DIRS = {
+  opencode: SKILLS_DIR,
+  qoder: QODER_SKILLS_DIR,
+};
 
 const SKILLS_REGISTRY = {
   'sprint-flow': { repo: 'boyingliu01/xp-gate', path: 'skills/sprint-flow' },
@@ -22,20 +29,23 @@ const SKILLS_REGISTRY = {
 };
 
 async function installSkill(name, options = {}) {
-  const { offline = false, verbose = false, force = false } = options;
-  
-  const depCheck = await checkDeps();
-  if (!depCheck.ok) {
-    if (depCheck.missing) {
-      console.error(`Error: ${depCheck.missing} is required but not installed`);
-      console.error('Please install superpowers and gstack first');
-      console.error('See: https://github.com/boyingliu01/superpowers');
-      return 1;
-    }
-    if (depCheck.versionMismatch) {
-      console.error(`Error: ${depCheck.versionMismatch.name} version too old`);
-      console.error(`Need: ${depCheck.versionMismatch.required}, Found: ${depCheck.versionMismatch.found}`);
-      return 1;
+  const { offline = false, verbose = false, force = false, platform = 'opencode' } = options;
+
+  // Qoder platform has no superpowers/gstack dependency
+  if (platform !== 'qoder') {
+    const depCheck = await checkDeps();
+    if (!depCheck.ok) {
+      if (depCheck.missing) {
+        console.error(`Error: ${depCheck.missing} is required but not installed`);
+        console.error('Please install superpowers and gstack first');
+        console.error('See: https://github.com/boyingliu01/superpowers');
+        return 1;
+      }
+      if (depCheck.versionMismatch) {
+        console.error(`Error: ${depCheck.versionMismatch.name} version too old`);
+        console.error(`Need: ${depCheck.versionMismatch.required}, Found: ${depCheck.versionMismatch.found}`);
+        return 1;
+      }
     }
   }
   
@@ -46,7 +56,8 @@ async function installSkill(name, options = {}) {
     return 1;
   }
   
-  const targetDir = path.join(SKILLS_DIR, name);
+  const targetSkillsDir = PLATFORM_SKILLS_DIRS[platform] || SKILLS_DIR;
+  const targetDir = path.join(targetSkillsDir, name);
   if (fs.existsSync(targetDir) && !force) {
     console.error(`Error: ${name} is already installed`);
     console.error('Use --force to overwrite');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boyingliu01/xp-gate",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "AI-driven development workflow: 6 quality gates + Delphi review + Sprint Flow",
   "bin": {
     "xp-gate": "./bin/xp-gate.js"

package/plugins/claude-code/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "xp-gate",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "displayName": "XP-Gate",
   "description": "Extreme Programming quality gates + AI workflow skills for Claude Code. Includes 6 quality gates, Sprint Flow, and Delphi multi-expert review.",
   "author": {

package/plugins/qoder/AGENTS.md

@@ -0,0 +1,93 @@
+# QODER PLUGIN KNOWLEDGE BASE
+
+**Generated:** 2026-06-03
+**Version:** v0.6.0
+
+## OVERVIEW
+Cross-platform plugin for Qoder IDE — shared skills, Qoder-specific enhancements (genui widgets, Canvas, Memory, CodeReview subagent, browser-use MCP). No hooks.json (Qoder uses skill-embedded gates instead of file-system event hooks).
+
+## STRUCTURE
+```
+plugins/qoder/
+├── README.md                      # Installation and usage guide
+├── AGENTS.md                      # This knowledge base
+├── skills/                        # Auto-populated by build-plugin.sh (8 skills)
+│   ├── sprint-flow/SKILL.md       # 7-phase pipeline + Qoder Pre-Edit Gate + Agent mapping
+│   ├── delphi-review/SKILL.md     # Multi-expert consensus + Qoder multi-model adaptation
+│   ├── test-specification-alignment/SKILL.md  # 2-phase test-spec verification
+│   ├── ralph-loop/SKILL.md        # REQ-level iterative build + Memory integration
+│   ├── test-driven-development/SKILL.md       # TDD enforcement (zero modification)
+│   ├── improve-codebase-architecture/SKILL.md # Architecture health + Canvas output
+│   ├── to-issues/SKILL.md         # Vertical slice issue splitting (zero modification)
+│   └── admin-template-guidelines/SKILL.md     # 6 maintainability rules (zero modification)
+├── widgets/                       # genui show_widget templates
+│   ├── quality-report.html        # Quality gate report dashboard
+│   └── sprint-dashboard.html      # Sprint status board
+└── references/
+    └── qoder-adaptation.md        # Platform differences and adaptation rules
+```
+
+## WHERE TO LOOK
+| Task | Location | Notes |
+|------|----------|-------|
+| Installation | README.md | User-level (~/.qoder/skills/) and project-level (.qoder/skills/) |
+| Skill adaptations | skills/*/SKILL.md | Qoder-specific paragraphs marked with "Qoder" header |
+| Pre-Edit Gate | skills/sprint-flow/SKILL.md | Replaces Claude Code's delphi-review-guard.sh hook |
+| Multi-model review | skills/delphi-review/references/qoder-multi-model.md | Expert→model mapping via Qoder Agent subagents |
+| Agent dispatch | skills/sprint-flow/SKILL.md | Phase→Qoder Agent mapping table |
+| External skill fallback | skills/sprint-flow/references/qoder-adaptation.md | superpowers/gstack replacements |
+| Quality widget | widgets/quality-report.html | genui show_widget template for Phase 3 results |
+| Sprint widget | widgets/sprint-dashboard.html | genui show_widget template for sprint status |
+| Memory integration | skills/ralph-loop/SKILL.md | UpdateMemory for permanent/contextual learnings |
+| CodeReview | skills/sprint-flow/SKILL.md | Phase 2 step 4 + Phase 3 code walkthrough |
+| Browser MCP | skills/sprint-flow/references/qoder-adaptation.md | browser-use replaces gstack/browse |
+
+## CONVENTIONS
+- Plugin skills auto-populated by build-plugin.sh --platform qoder — never edit plugins/qoder/skills/ directly
+- Qoder-specific skill modifications live in source skills/ directory (marked with "## Qoder" sections)
+- No hooks.json — Qoder lacks file-system event hooks; gates embedded in skill instructions
+- genui widgets use show_widget MCP tool with widget_path template mode
+- Memory system replaces gstack/learn for learnings persistence
+- CodeReview subagent replaces superpowers/requesting-code-review
+- browser-use MCP replaces gstack/browse for Phase 3 browser testing
+- External skills (superpowers/gstack) replaced by orchestrator inline execution or Qoder native capabilities
+
+## ANTI-PATTERNS (THIS PLUGIN)
+- Do NOT edit plugins/qoder/skills/ directly — rebuild from source via build-plugin.sh
+- Do NOT assume xp-gate CLI is installed — skills must degrade gracefully
+- Do NOT create hooks.json for Qoder — platform does not support file-system event hooks
+- Do NOT use curl for API calls — curl is in Qoder's command deny list; use PowerShell Invoke-RestMethod or Qoder's built-in multi-model capability
+- Do NOT reference OpenCode task() API in Qoder skills — use Agent tool (Browser/CodeReview/plan-agent) instead
+
+## UNIQUE STYLES
+- Qoder: SKILL.md + genui widgets + Canvas + Memory + CodeReview subagent + browser-use MCP
+- Pre-Edit Gate: skill-embedded mandatory check replaces Claude Code's physical hook blocking
+- Multi-model review: Qoder Agent subagent dispatch (plan-agent/CodeReview) replaces OpenCode task() API
+- Graceful degradation: skills work even without xp-gate CLI installed
+- Shared skill source: one SKILL.md → copied to Claude Code, OpenCode, and Qoder platforms
+
+## COMMANDS
+```bash
+# Build Qoder plugin
+npm run build:qoder-plugin                    # Build Qoder plugin with all 8 skills
+bash scripts/build-plugin.sh --platform qoder  # Same, via script
+
+# Install skills
+bash scripts/install-qoder-skills.sh --global  # User-level: ~/.qoder/skills/
+bash scripts/install-qoder-skills.sh --local   # Project-level: .qoder/skills/
+
+# Test plugin
+bash scripts/test-plugins.sh                   # Includes Qoder platform tests
+
+# CLI skill install
+xp-gate install-skill sprint-flow --platform qoder --global
+xp-gate install-skill delphi-review --platform qoder --local
+```
+
+## NOTES
+- v0.6.0+: Qoder plugin support introduced
+- Qoder plugin: 8 skills (all source skills, including admin-template-guidelines)
+- Claude Code plugin: 7 skills (no admin-template-guidelines)
+- OpenCode plugin: 7 skills + 3 custom tools (gate-check, gate-principles, gate-arch)
+- build-plugin.sh validates 8 expected skills for Qoder platform
+- test-plugins.sh: includes Qoder-specific test cases (widgets, no hooks.json)

package/plugins/qoder/README.md

@@ -0,0 +1,87 @@
+# XP-Gate Qoder Plugin
+
+Qoder IDE plugin exposing xp-gate quality gates, AI workflow skills, and visual dashboards.
+
+## Skills (8 AI Workflow Skills)
+
+| Skill | Trigger | Description |
+|-------|---------|-------------|
+| sprint-flow | `/sprint-flow "需求"` | 7-phase pipeline: THINK→PLAN→BUILD→REVIEW→ACCEPT→FEEDBACK→SHIP |
+| delphi-review | `/delphi-review` | Multi-expert anonymous consensus review (design + code-walkthrough) |
+| test-specification-alignment | `/test-specification-alignment` | 2-phase test-spec verification |
+| ralph-loop | Via sprint-flow Phase 2 | REQ-level iterative build (saves 40-67% tokens) |
+| test-driven-development | `/test-driven-development` | TDD enforcement (RED→GREEN→REFACTOR) |
+| improve-codebase-architecture | `/improve-codebase-architecture` | Architecture health checks |
+| to-issues | `/to-issues` | Vertical slice issue splitting |
+| admin-template-guidelines | Via sprint-flow BUILD | 6 maintainability rules for admin templates |
+
+## Qoder-Specific Enhancements
+
+- **genui Widgets**: Quality report dashboard and Sprint status board (via `show_widget`)
+- **CodeReview Subagent**: Deep integration for Phase 2 blind review and Phase 3 code walkthrough
+- **browser-use MCP**: Phase 3 browser automation testing (replaces gstack/browse)
+- **Memory System**: Learnings persistence via Qoder's built-in memory (replaces gstack/learn)
+- **Canvas Output**: Architecture relationship diagrams (via `.canvas.tsx`)
+
+## Installation
+
+### Option 1: User-Level (Global, All Projects)
+
+```bash
+# Via xp-gate CLI
+xp-gate install-skill sprint-flow --platform qoder --global
+xp-gate install-skill delphi-review --platform qoder --global
+
+# Or via install script (all 8 skills)
+bash scripts/install-qoder-skills.sh --global
+# Installs to: ~/.qoder/skills/
+```
+
+### Option 2: Project-Level (Current Project Only)
+
+```bash
+# Via install script
+bash scripts/install-qoder-skills.sh --local
+# Installs to: .qoder/skills/
+
+# Or via build script
+bash scripts/build-plugin.sh --platform qoder
+```
+
+### Option 3: Build from Source
+
+```bash
+npm run build:qoder-plugin
+# Produces plugins/qoder/ with all skills + widgets
+```
+
+## Requirements
+
+- Qoder IDE
+- xp-gate npm package installed globally (for git hooks: `npm install -g @boyingliu01/xp-gate && xp-gate init`)
+- Node.js ≥ 18 (for principles checker)
+
+## Pre-Edit Gate (Replaces Claude Code Hooks)
+
+Qoder does not have file-system event hooks like Claude Code's `PreToolUse`/`PostToolUse`. Instead, xp-gate skills embed **mandatory pre-edit checks** in their SKILL.md instructions:
+
+- **Delphi Gate**: Before any code edit in Phase 2+, skill verifies `.sprint-state/delphi-reviewed.json` verdict is `APPROVED`
+- **Principles Check**: After each REQ completion, skill runs principles checker via terminal
+
+## Graceful Degradation
+
+If xp-gate CLI is unavailable, skills provide helpful install instructions instead of failing. Quality gates still run via git hooks (pre-commit) at commit time.
+
+## Comparison with Other Platforms
+
+| Feature | Claude Code | OpenCode | Qoder |
+|---------|:-----------:|:--------:|:-----:|
+| AI Skills (8) | ✅ | ✅ | ✅ |
+| Git Hooks | ❌ (separate npm) | ❌ (separate npm) | ❌ (separate npm) |
+| Event Hooks | ✅ PreToolUse/PostToolUse | ✅ tool() | ❌ (skill-embedded) |
+| Custom Tools | ❌ | ✅ 3 tools | ❌ (MCP instead) |
+| Widget UI | ❌ | ❌ | ✅ genui |
+| Canvas Output | ❌ | ❌ | ✅ .canvas.tsx |
+| Memory System | ❌ | ❌ | ✅ UpdateMemory |
+| CodeReview Agent | ❌ | ❌ | ✅ subagent |
+| Browser MCP | ❌ | ❌ | ✅ browser-use |

package/plugins/qoder/widgets/quality-report.html

@@ -0,0 +1,163 @@
+<style>
+  :root {
+    --qr-bg: var(--vscode-editor-background, #1e1e1e);
+    --qr-fg: var(--vscode-editor-foreground, #d4d4d4);
+    --qr-border: var(--vscode-panel-border, #333);
+    --qr-pass: var(--vscode-testing-iconPassed, #73c991);
+    --qr-fail: var(--vscode-testing-iconFailed, #f14c4c);
+    --qr-skip: var(--vscode-descriptionForeground, #888);
+    --qr-accent: var(--vscode-focusBorder, #007acc);
+    --qr-card-bg: var(--vscode-editor-widget-background, #252526);
+  }
+  * { box-sizing: border-box; margin: 0; padding: 0; }
+  body { font-family: var(--vscode-font-family, 'Segoe UI', sans-serif); color: var(--qr-fg); background: var(--qr-bg); padding: 16px; }
+  .qr-header { display: flex; align-items: center; justify-content: space-between; margin-bottom: 16px; }
+  .qr-header h2 { font-size: 16px; font-weight: 600; }
+  .qr-verdict { padding: 4px 12px; border-radius: 4px; font-size: 13px; font-weight: 600; }
+  .qr-verdict.pass { background: color-mix(in srgb, var(--qr-pass) 20%, transparent); color: var(--qr-pass); border: 1px solid var(--qr-pass); }
+  .qr-verdict.fail { background: color-mix(in srgb, var(--qr-fail) 20%, transparent); color: var(--qr-fail); border: 1px solid var(--qr-fail); }
+  .qr-meta { font-size: 12px; color: var(--qr-skip); margin-bottom: 16px; display: flex; gap: 16px; }
+  .qr-score-bar { display: flex; align-items: center; gap: 8px; margin-bottom: 20px; }
+  .qr-score-bar .bar-track { flex: 1; height: 8px; background: var(--qr-border); border-radius: 4px; overflow: hidden; }
+  .qr-score-bar .bar-fill { height: 100%; border-radius: 4px; transition: width 0.4s ease; }
+  .qr-score-bar .bar-fill.pass { background: var(--qr-pass); }
+  .qr-score-bar .bar-fill.fail { background: var(--qr-fail); }
+  .qr-score-bar .score-label { font-size: 14px; font-weight: 600; min-width: 48px; text-align: right; }
+  .qr-gates { display: grid; grid-template-columns: repeat(auto-fill, minmax(220px, 1fr)); gap: 10px; margin-bottom: 20px; }
+  .qr-gate-card { background: var(--qr-card-bg); border: 1px solid var(--qr-border); border-radius: 6px; padding: 12px; display: flex; align-items: flex-start; gap: 10px; }
+  .qr-gate-icon { width: 28px; height: 28px; border-radius: 50%; display: flex; align-items: center; justify-content: center; font-size: 14px; flex-shrink: 0; }
+  .qr-gate-icon.pass { background: color-mix(in srgb, var(--qr-pass) 20%, transparent); color: var(--qr-pass); }
+  .qr-gate-icon.fail { background: color-mix(in srgb, var(--qr-fail) 20%, transparent); color: var(--qr-fail); }
+  .qr-gate-icon.skip { background: color-mix(in srgb, var(--qr-skip) 20%, transparent); color: var(--qr-skip); }
+  .qr-gate-info { flex: 1; min-width: 0; }
+  .qr-gate-name { font-size: 13px; font-weight: 500; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+  .qr-gate-detail { font-size: 11px; color: var(--qr-skip); margin-top: 2px; }
+  .qr-section { margin-bottom: 16px; }
+  .qr-section h3 { font-size: 14px; font-weight: 600; margin-bottom: 10px; padding-bottom: 6px; border-bottom: 1px solid var(--qr-border); }
+  .qr-delphi-row { display: flex; align-items: center; gap: 10px; padding: 6px 0; font-size: 13px; }
+  .qr-delphi-row .expert-badge { padding: 2px 8px; border-radius: 3px; font-size: 11px; font-weight: 600; background: var(--qr-card-bg); border: 1px solid var(--qr-border); }
+  .qr-delphi-row .verdict-tag { margin-left: auto; font-weight: 500; }
+  .qr-delphi-row .verdict-tag.approved { color: var(--qr-pass); }
+  .qr-delphi-row .verdict-tag.rejected { color: var(--qr-fail); }
+  .qr-metrics { display: flex; gap: 12px; flex-wrap: wrap; }
+  .qr-metric { background: var(--qr-card-bg); border: 1px solid var(--qr-border); border-radius: 6px; padding: 12px 16px; text-align: center; min-width: 120px; }
+  .qr-metric .value { font-size: 24px; font-weight: 700; }
+  .qr-metric .label { font-size: 11px; color: var(--qr-skip); margin-top: 4px; }
+  .qr-metric .value.pass { color: var(--qr-pass); }
+  .qr-metric .value.fail { color: var(--qr-fail); }
+  .qr-empty { text-align: center; padding: 32px; color: var(--qr-skip); font-size: 13px; }
+</style>
+
+<div id="qr-root"></div>
+
+<script>
+(function() {
+  const data = window.__WIDGET_DATA__ || {};
+  const root = document.getElementById('qr-root');
+
+  if (!data || (!data.overall && !data.gates)) {
+    root.innerHTML = '<div class="qr-empty">No quality report data available.<br>Run the quality gates pipeline to generate a report.</div>';
+    return;
+  }
+
+  const overall = data.overall || {};
+  const gates = data.gates || {};
+  const delphi = data.delphi || null;
+  const testAlign = data.testAlignment || null;
+  const isPass = overall.verdict === 'PASS';
+
+  let html = '';
+
+  // Header
+  html += '<div class="qr-header">';
+  html += '<h2>Quality Report' + (data.project ? ' — ' + esc(data.project) : '') + '</h2>';
+  html += '<span class="qr-verdict ' + (isPass ? 'pass' : 'fail') + '">' + esc(overall.verdict || 'N/A') + '</span>';
+  html += '</div>';
+
+  // Meta
+  if (data.generatedAt || data.commit) {
+    html += '<div class="qr-meta">';
+    if (data.generatedAt) html += '<span>Generated: ' + esc(formatDate(data.generatedAt)) + '</span>';
+    if (data.commit) html += '<span>Commit: ' + esc(data.commit.substring(0, 8)) + '</span>';
+    if (data.language) html += '<span>Language: ' + esc(data.language) + '</span>';
+    html += '</div>';
+  }
+
+  // Score bar
+  const passed = overall.gatesPassed || 0;
+  const total = overall.gatesTotal || 0;
+  const score = overall.score || 0;
+  const pct = total > 0 ? Math.round((passed / total) * 100) : 0;
+  html += '<div class="qr-score-bar">';
+  html += '<div class="bar-track"><div class="bar-fill ' + (isPass ? 'pass' : 'fail') + '" style="width:' + pct + '%"></div></div>';
+  html += '<span class="score-label">' + passed + '/' + total + '</span>';
+  html += '</div>';
+
+  // Gate cards
+  html += '<div class="qr-gates">';
+  const gateKeys = Object.keys(gates).sort();
+  for (const key of gateKeys) {
+    const g = gates[key];
+    const status = (g.status || 'SKIP').toUpperCase();
+    const icon = status === 'PASS' ? '✓' : status === 'FAIL' ? '✗' : '—';
+    const cls = status === 'PASS' ? 'pass' : status === 'FAIL' ? 'fail' : 'skip';
+    html += '<div class="qr-gate-card">';
+    html += '<div class="qr-gate-icon ' + cls + '">' + icon + '</div>';
+    html += '<div class="qr-gate-info">';
+    html += '<div class="qr-gate-name">' + esc(g.name || key) + '</div>';
+    let detail = '';
+    if (g.tool) detail += 'Tool: ' + esc(g.tool);
+    if (g.metric) detail += (detail ? ' · ' : '') + esc(g.metric);
+    if (g.threshold) detail += (detail ? ' · ' : '') + 'Threshold: ' + esc(g.threshold);
+    if (g.coverage) detail += (detail ? ' · ' : '') + 'Coverage: ' + esc(g.coverage);
+    if (g.warnings !== undefined) detail += (detail ? ' · ' : '') + 'Warnings: ' + g.warnings;
+    if (!detail) detail = status;
+    html += '<div class="qr-gate-detail">' + detail + '</div>';
+    html += '</div></div>';
+  }
+  html += '</div>';
+
+  // Delphi Review section
+  if (delphi) {
+    html += '<div class="qr-section"><h3>Delphi Review</h3>';
+    if (delphi.experts) {
+      for (const exp of delphi.experts) {
+        const vCls = (exp.verdict || '').toUpperCase() === 'APPROVED' ? 'approved' : 'rejected';
+        html += '<div class="qr-delphi-row">';
+        html += '<span class="expert-badge">' + esc(exp.id || '?') + '</span>';
+        html += '<span>' + esc(exp.role || '') + '</span>';
+        html += '<span class="verdict-tag ' + vCls + '">' + esc(exp.verdict || 'N/A') + '</span>';
+        html += '</div>';
+      }
+    }
+    if (delphi.consensus !== undefined) {
+      html += '<div class="qr-delphi-row"><span>Consensus</span><span class="verdict-tag ' + (delphi.consensus >= 0.95 ? 'approved' : 'rejected') + '">' + Math.round(delphi.consensus * 100) + '%</span></div>';
+    }
+    html += '</div>';
+  }
+
+  // Metrics section (test alignment + coverage)
+  const hasMetrics = testAlign || (overall.coverage_pct !== undefined);
+  if (hasMetrics) {
+    html += '<div class="qr-section"><h3>Metrics</h3><div class="qr-metrics">';
+    if (testAlign) {
+      const alignScore = testAlign.score || 0;
+      const alignCls = alignScore >= 80 ? 'pass' : 'fail';
+      html += '<div class="qr-metric"><div class="value ' + alignCls + '">' + alignScore + '%</div><div class="label">Test-Spec Alignment</div></div>';
+    }
+    if (overall.coverage_pct !== undefined) {
+      const covCls = overall.coverage_pct >= 80 ? 'pass' : 'fail';
+      html += '<div class="qr-metric"><div class="value ' + covCls + '">' + overall.coverage_pct + '%</div><div class="label">Coverage</div></div>';
+    }
+    if (overall.score !== undefined) {
+      html += '<div class="qr-metric"><div class="value">' + overall.score + '</div><div class="label">Overall Score</div></div>';
+    }
+    html += '</div></div>';
+  }
+
+  root.innerHTML = html;
+
+  function esc(s) { const d = document.createElement('div'); d.textContent = String(s); return d.innerHTML; }
+  function formatDate(iso) { try { return new Date(iso).toLocaleString(); } catch { return iso; } }
+})();
+</script>