@boyingliu01/xp-gate 0.18.4 → 0.19.0

package/plugins/qoder/skills/clipboard-vision/clipboard-vision/scripts/clipboard-vision.sh

@@ -0,0 +1,137 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+api_base="${CLIPBOARD_VISION_API_BASE:-http://127.0.0.1:11434/v1}"
+model="${CLIPBOARD_VISION_MODEL:-}"
+api_key="${CLIPBOARD_VISION_API_KEY:-}"
+max_bytes="${CLIPBOARD_VISION_MAX_BYTES:-10485760}"
+allow_remote=false
+confirm_remote=""
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --allow-remote) allow_remote=true; shift ;;
+    --confirm-remote)
+      [ "$#" -ge 2 ] || { printf '%s\n' 'Error: --confirm-remote requires the disclosed token' >&2; exit 2; }
+      confirm_remote="$2"
+      shift 2
+      ;;
+    --help)
+      printf '%s\n' 'Usage: clipboard-vision.sh [--allow-remote --confirm-remote TOKEN]'
+      exit 0
+      ;;
+    *) printf 'Error: unknown option: %s\n' "$1" >&2; exit 2 ;;
+  esac
+done
+
+[ -n "$model" ] || { printf '%s\n' 'Error: CLIPBOARD_VISION_MODEL is required' >&2; exit 2; }
+case "$max_bytes" in *[!0-9]*|'') printf '%s\n' 'Error: CLIPBOARD_VISION_MAX_BYTES must be a positive integer' >&2; exit 2 ;; esac
+[ "$max_bytes" -gt 0 ] || { printf '%s\n' 'Error: CLIPBOARD_VISION_MAX_BYTES must be positive' >&2; exit 2; }
+
+endpoint_info=$(python3 - "$api_base" "$model" <<'PY'
+import hashlib
+import ipaddress
+import sys
+import urllib.parse
+
+url = urllib.parse.urlparse(sys.argv[1])
+if url.scheme not in {"http", "https"} or not url.hostname or url.username or url.password or url.query or url.fragment:
+    raise SystemExit(2)
+try:
+    loopback = ipaddress.ip_address(url.hostname).is_loopback
+except ValueError:
+    loopback = False
+try:
+    port = url.port or (443 if url.scheme == "https" else 80)
+except ValueError:
+    raise SystemExit(2)
+print("local" if loopback else "remote")
+hostname = url.hostname.lower()
+print(hostname)
+display_host = f"[{hostname}]" if ":" in hostname else hostname
+base_path = url.path.rstrip("/")
+effective = f"{url.scheme.lower()}://{display_host}:{port}{base_path}/chat/completions"
+print(effective)
+print(hashlib.sha256(f"{effective}\n{sys.argv[2]}".encode()).hexdigest())
+PY
+) || { printf '%s\n' 'Error: invalid CLIPBOARD_VISION_API_BASE' >&2; exit 2; }
+endpoint_kind=$(printf '%s\n' "$endpoint_info" | sed -n '1p')
+effective_endpoint=$(printf '%s\n' "$endpoint_info" | sed -n '3p')
+expected_confirmation=$(printf '%s\n' "$endpoint_info" | sed -n '4p')
+
+if [ "$endpoint_kind" = remote ]; then
+  printf 'Remote disclosure: clipboard image data will be sent to %s using model %s.\n' "$effective_endpoint" "$model" >&2
+  printf 'Confirmation token for this canonical endpoint and model: %s\n' "$expected_confirmation" >&2
+  if [ "$allow_remote" != true ] || [ "$confirm_remote" != "$expected_confirmation" ]; then
+    printf '%s\n' 'Error: remote endpoint requires --allow-remote and the disclosed --confirm-remote token' >&2
+    exit 2
+  fi
+fi
+
+work_dir=$(mktemp -d "${TMPDIR:-/tmp}/clipboard-vision.XXXXXX")
+image_file="$work_dir/clipboard.png"
+request_file="$work_dir/request.json"
+response_file="$work_dir/response.json"
+auth_file="$work_dir/auth-header"
+cleanup() { rm -rf -- "$work_dir"; }
+trap cleanup EXIT HUP INT TERM
+
+if command -v pngpaste >/dev/null 2>&1; then
+  pngpaste "$image_file"
+elif command -v wl-paste >/dev/null 2>&1; then
+  wl-paste --no-newline --type image/png > "$image_file"
+elif command -v import >/dev/null 2>&1; then
+  import clipboard: "$image_file"
+else
+  printf '%s\n' 'Error: install pngpaste, wl-paste, or ImageMagick import' >&2
+  exit 2
+fi
+
+[ -s "$image_file" ] || { printf '%s\n' 'Error: clipboard does not contain an image' >&2; exit 2; }
+image_bytes=$(wc -c < "$image_file" | tr -d '[:space:]')
+[ "$image_bytes" -le "$max_bytes" ] || { printf 'Error: clipboard image exceeds %s bytes\n' "$max_bytes" >&2; exit 2; }
+
+python3 - "$image_file" "$request_file" "$model" <<'PY'
+import base64
+import json
+import pathlib
+import sys
+
+image = base64.b64encode(pathlib.Path(sys.argv[1]).read_bytes()).decode("ascii")
+request = {
+    "model": sys.argv[3],
+    "messages": [{"role": "user", "content": [
+        {"type": "text", "text": "Describe this clipboard image."},
+        {"type": "image_url", "image_url": {"url": "data:image/png;base64," + image}},
+    ]}],
+}
+pathlib.Path(sys.argv[2]).write_text(json.dumps(request), encoding="utf-8")
+PY
+
+curl_args=(--silent --show-error --max-redirs 0 --output "$response_file" --write-out '%{http_code}' --header 'Content-Type: application/json' --data-binary "@$request_file")
+if [ -n "$api_key" ]; then
+  case "$api_key" in *$'\n'*|*$'\r'*) printf '%s\n' 'Error: invalid CLIPBOARD_VISION_API_KEY' >&2; exit 2 ;; esac
+  umask 077
+  printf 'Authorization: Bearer %s\n' "$api_key" > "$auth_file"
+  chmod 600 "$auth_file"
+  curl_args+=(--header "@$auth_file")
+fi
+status=$(curl "${curl_args[@]}" "$effective_endpoint") || { printf '%s\n' 'Error: vision API request failed' >&2; exit 1; }
+case "$status" in 2??) ;; *) printf 'Error: vision API returned HTTP %s (body redacted)\n' "$status" >&2; exit 1 ;; esac
+
+result=$(python3 - "$response_file" <<'PY'
+import json
+import pathlib
+import sys
+
+try:
+    data = json.loads(pathlib.Path(sys.argv[1]).read_text(encoding="utf-8"))
+    value = data["choices"][0]["message"]["content"]
+    if not isinstance(value, str):
+        raise ValueError
+except (KeyError, IndexError, TypeError, ValueError, json.JSONDecodeError):
+    raise SystemExit(2)
+print(value)
+PY
+) || { printf '%s\n' 'Error: invalid vision API response (body redacted)' >&2; exit 1; }
+
+printf '%s\n' "$result"

package/plugins/qoder/skills/clipboard-vision/scripts/clipboard-vision.ps1

@@ -0,0 +1,86 @@
+[CmdletBinding()]
+param(
+    [switch]$AllowRemote,
+    [string]$ConfirmRemote
+)
+
+$ErrorActionPreference = 'Stop'
+$ApiBase = if ($env:CLIPBOARD_VISION_API_BASE) { $env:CLIPBOARD_VISION_API_BASE } else { 'http://127.0.0.1:11434/v1' }
+$Model = $env:CLIPBOARD_VISION_MODEL
+$ApiKey = $env:CLIPBOARD_VISION_API_KEY
+$MaxBytes = if ($env:CLIPBOARD_VISION_MAX_BYTES) { [long]$env:CLIPBOARD_VISION_MAX_BYTES } else { 10485760 }
+
+if (-not $Model) { throw 'CLIPBOARD_VISION_MODEL is required' }
+if ($MaxBytes -le 0) { throw 'CLIPBOARD_VISION_MAX_BYTES must be positive' }
+$Endpoint = $null
+if (-not [Uri]::TryCreate($ApiBase, [UriKind]::Absolute, [ref]$Endpoint) -or
+    -not $Endpoint.IsAbsoluteUri -or
+    $Endpoint.Scheme -notin @('http', 'https') -or
+    $Endpoint.UserInfo.Length -ne 0 -or
+    $Endpoint.Query.Length -ne 0 -or
+    $Endpoint.Fragment.Length -ne 0) {
+    throw 'CLIPBOARD_VISION_API_BASE must be an absolute HTTP(S) URI without credentials'
+}
+$Address = $null
+$LiteralAddress = [Net.IPAddress]::TryParse($Endpoint.Host.Trim('[', ']'), [ref]$Address)
+$Loopback = $LiteralAddress -and [Net.IPAddress]::IsLoopback($Address)
+$NormalizedHost = $Endpoint.Host.Trim('[', ']').ToLowerInvariant()
+$EffectivePort = if ($Endpoint.IsDefaultPort) { if ($Endpoint.Scheme -eq 'https') { 443 } else { 80 } } else { $Endpoint.Port }
+$DisplayHost = if ($NormalizedHost.Contains(':')) { "[$NormalizedHost]" } else { $NormalizedHost }
+$BasePath = $Endpoint.AbsolutePath.TrimEnd('/')
+$EffectiveEndpoint = "$($Endpoint.Scheme.ToLowerInvariant())://$DisplayHost`:$EffectivePort$BasePath/chat/completions"
+if (-not $Loopback) {
+    $ConsentBytes = [Text.Encoding]::UTF8.GetBytes("$EffectiveEndpoint`n$Model")
+    $Hasher = [Security.Cryptography.SHA256]::Create()
+    try { $ExpectedConfirmation = ([BitConverter]::ToString($Hasher.ComputeHash($ConsentBytes))).Replace('-', '').ToLowerInvariant() } finally { $Hasher.Dispose() }
+    [Console]::Error.WriteLine("Remote disclosure: clipboard image data will be sent to $EffectiveEndpoint using model $Model.")
+    [Console]::Error.WriteLine("Confirmation token for this canonical endpoint and model: $ExpectedConfirmation")
+    if (-not $AllowRemote -or $ConfirmRemote -cne $ExpectedConfirmation) {
+        throw 'Remote endpoint requires -AllowRemote and the disclosed -ConfirmRemote token'
+    }
+}
+
+$TempDirectory = Join-Path ([IO.Path]::GetTempPath()) ("clipboard-vision-" + [Guid]::NewGuid())
+$ImagePath = Join-Path $TempDirectory 'clipboard.png'
+try {
+    New-Item -ItemType Directory -Path $TempDirectory | Out-Null
+    if ($env:CLIPBOARD_VISION_TEST_IMAGE) {
+        Copy-Item -LiteralPath $env:CLIPBOARD_VISION_TEST_IMAGE -Destination $ImagePath
+    } else {
+        Add-Type -AssemblyName System.Windows.Forms
+        Add-Type -AssemblyName System.Drawing
+        $Image = [Windows.Forms.Clipboard]::GetImage()
+        if ($null -eq $Image) { throw 'Clipboard does not contain an image' }
+        try { $Image.Save($ImagePath, [Drawing.Imaging.ImageFormat]::Png) } finally { $Image.Dispose() }
+    }
+    if ((Get-Item $ImagePath).Length -gt $MaxBytes) { throw "Clipboard image exceeds $MaxBytes bytes" }
+
+    $Encoded = [Convert]::ToBase64String([IO.File]::ReadAllBytes($ImagePath))
+    $Body = @{
+        model = $Model
+        messages = @(@{ role = 'user'; content = @(
+            @{ type = 'text'; text = 'Describe this clipboard image.' },
+            @{ type = 'image_url'; image_url = @{ url = "data:image/png;base64,$Encoded" } }
+        ) })
+    } | ConvertTo-Json -Depth 8 -Compress
+    $Headers = @{}
+    if ($ApiKey) { $Headers.Authorization = "Bearer $ApiKey" }
+    try {
+        if ($env:CLIPBOARD_VISION_TEST_HTTP_CAPTURE) {
+            Set-Content -LiteralPath $env:CLIPBOARD_VISION_TEST_HTTP_CAPTURE -Value $Body -Encoding utf8
+            if ($env:CV_TEST_HTTP_FAILURE) { throw 'test HTTP failure body secret' }
+            if ($env:CV_TEST_MALFORMED_JSON) { $Response = $null }
+            elseif ($env:CV_TEST_NON_STRING) { $Response = @{ choices = @(@{ message = @{ content = @{ value = 1 } } }) } }
+            else { $Response = @{ choices = @(@{ message = @{ content = 'test description' } }) } }
+        } else {
+            $Response = Invoke-RestMethod -Method Post -Uri $EffectiveEndpoint -Headers $Headers -ContentType 'application/json' -Body $Body -MaximumRedirection 0
+        }
+    } catch {
+        throw 'Vision API request failed (response body redacted)'
+    }
+    $Result = $Response.choices[0].message.content
+    if ($Result -isnot [string]) { throw 'Invalid vision API response (body redacted)' }
+    $Result
+} finally {
+    Remove-Item -LiteralPath $TempDirectory -Recurse -Force -ErrorAction SilentlyContinue
+}

package/plugins/qoder/skills/clipboard-vision/scripts/clipboard-vision.sh

@@ -0,0 +1,137 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+api_base="${CLIPBOARD_VISION_API_BASE:-http://127.0.0.1:11434/v1}"
+model="${CLIPBOARD_VISION_MODEL:-}"
+api_key="${CLIPBOARD_VISION_API_KEY:-}"
+max_bytes="${CLIPBOARD_VISION_MAX_BYTES:-10485760}"
+allow_remote=false
+confirm_remote=""
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --allow-remote) allow_remote=true; shift ;;
+    --confirm-remote)
+      [ "$#" -ge 2 ] || { printf '%s\n' 'Error: --confirm-remote requires the disclosed token' >&2; exit 2; }
+      confirm_remote="$2"
+      shift 2
+      ;;
+    --help)
+      printf '%s\n' 'Usage: clipboard-vision.sh [--allow-remote --confirm-remote TOKEN]'
+      exit 0
+      ;;
+    *) printf 'Error: unknown option: %s\n' "$1" >&2; exit 2 ;;
+  esac
+done
+
+[ -n "$model" ] || { printf '%s\n' 'Error: CLIPBOARD_VISION_MODEL is required' >&2; exit 2; }
+case "$max_bytes" in *[!0-9]*|'') printf '%s\n' 'Error: CLIPBOARD_VISION_MAX_BYTES must be a positive integer' >&2; exit 2 ;; esac
+[ "$max_bytes" -gt 0 ] || { printf '%s\n' 'Error: CLIPBOARD_VISION_MAX_BYTES must be positive' >&2; exit 2; }
+
+endpoint_info=$(python3 - "$api_base" "$model" <<'PY'
+import hashlib
+import ipaddress
+import sys
+import urllib.parse
+
+url = urllib.parse.urlparse(sys.argv[1])
+if url.scheme not in {"http", "https"} or not url.hostname or url.username or url.password or url.query or url.fragment:
+    raise SystemExit(2)
+try:
+    loopback = ipaddress.ip_address(url.hostname).is_loopback
+except ValueError:
+    loopback = False
+try:
+    port = url.port or (443 if url.scheme == "https" else 80)
+except ValueError:
+    raise SystemExit(2)
+print("local" if loopback else "remote")
+hostname = url.hostname.lower()
+print(hostname)
+display_host = f"[{hostname}]" if ":" in hostname else hostname
+base_path = url.path.rstrip("/")
+effective = f"{url.scheme.lower()}://{display_host}:{port}{base_path}/chat/completions"
+print(effective)
+print(hashlib.sha256(f"{effective}\n{sys.argv[2]}".encode()).hexdigest())
+PY
+) || { printf '%s\n' 'Error: invalid CLIPBOARD_VISION_API_BASE' >&2; exit 2; }
+endpoint_kind=$(printf '%s\n' "$endpoint_info" | sed -n '1p')
+effective_endpoint=$(printf '%s\n' "$endpoint_info" | sed -n '3p')
+expected_confirmation=$(printf '%s\n' "$endpoint_info" | sed -n '4p')
+
+if [ "$endpoint_kind" = remote ]; then
+  printf 'Remote disclosure: clipboard image data will be sent to %s using model %s.\n' "$effective_endpoint" "$model" >&2
+  printf 'Confirmation token for this canonical endpoint and model: %s\n' "$expected_confirmation" >&2
+  if [ "$allow_remote" != true ] || [ "$confirm_remote" != "$expected_confirmation" ]; then
+    printf '%s\n' 'Error: remote endpoint requires --allow-remote and the disclosed --confirm-remote token' >&2
+    exit 2
+  fi
+fi
+
+work_dir=$(mktemp -d "${TMPDIR:-/tmp}/clipboard-vision.XXXXXX")
+image_file="$work_dir/clipboard.png"
+request_file="$work_dir/request.json"
+response_file="$work_dir/response.json"
+auth_file="$work_dir/auth-header"
+cleanup() { rm -rf -- "$work_dir"; }
+trap cleanup EXIT HUP INT TERM
+
+if command -v pngpaste >/dev/null 2>&1; then
+  pngpaste "$image_file"
+elif command -v wl-paste >/dev/null 2>&1; then
+  wl-paste --no-newline --type image/png > "$image_file"
+elif command -v import >/dev/null 2>&1; then
+  import clipboard: "$image_file"
+else
+  printf '%s\n' 'Error: install pngpaste, wl-paste, or ImageMagick import' >&2
+  exit 2
+fi
+
+[ -s "$image_file" ] || { printf '%s\n' 'Error: clipboard does not contain an image' >&2; exit 2; }
+image_bytes=$(wc -c < "$image_file" | tr -d '[:space:]')
+[ "$image_bytes" -le "$max_bytes" ] || { printf 'Error: clipboard image exceeds %s bytes\n' "$max_bytes" >&2; exit 2; }
+
+python3 - "$image_file" "$request_file" "$model" <<'PY'
+import base64
+import json
+import pathlib
+import sys
+
+image = base64.b64encode(pathlib.Path(sys.argv[1]).read_bytes()).decode("ascii")
+request = {
+    "model": sys.argv[3],
+    "messages": [{"role": "user", "content": [
+        {"type": "text", "text": "Describe this clipboard image."},
+        {"type": "image_url", "image_url": {"url": "data:image/png;base64," + image}},
+    ]}],
+}
+pathlib.Path(sys.argv[2]).write_text(json.dumps(request), encoding="utf-8")
+PY
+
+curl_args=(--silent --show-error --max-redirs 0 --output "$response_file" --write-out '%{http_code}' --header 'Content-Type: application/json' --data-binary "@$request_file")
+if [ -n "$api_key" ]; then
+  case "$api_key" in *$'\n'*|*$'\r'*) printf '%s\n' 'Error: invalid CLIPBOARD_VISION_API_KEY' >&2; exit 2 ;; esac
+  umask 077
+  printf 'Authorization: Bearer %s\n' "$api_key" > "$auth_file"
+  chmod 600 "$auth_file"
+  curl_args+=(--header "@$auth_file")
+fi
+status=$(curl "${curl_args[@]}" "$effective_endpoint") || { printf '%s\n' 'Error: vision API request failed' >&2; exit 1; }
+case "$status" in 2??) ;; *) printf 'Error: vision API returned HTTP %s (body redacted)\n' "$status" >&2; exit 1 ;; esac
+
+result=$(python3 - "$response_file" <<'PY'
+import json
+import pathlib
+import sys
+
+try:
+    data = json.loads(pathlib.Path(sys.argv[1]).read_text(encoding="utf-8"))
+    value = data["choices"][0]["message"]["content"]
+    if not isinstance(value, str):
+        raise ValueError
+except (KeyError, IndexError, TypeError, ValueError, json.JSONDecodeError):
+    raise SystemExit(2)
+print(value)
+PY
+) || { printf '%s\n' 'Error: invalid vision API response (body redacted)' >&2; exit 1; }
+
+printf '%s\n' "$result"

package/plugins/qoder/skills/delphi-review/.delphi-config.json.example

@@ -4,15 +4,7 @@
   "description": "Delphi review expert mapping — customize with your own models. Copy to .delphi-config.json and edit.",
   "num_experts": 3,
   "model_policy": {
-    "domestic_only": true,
-    "description": "Only domestic Chinese open-source models are allowed. NEVER use Anthropic, OpenAI, Google, or other foreign expensive models.",
-    "allowed_models": [
-      "glm-5.1", "glm-5.0",
-      "kimi-k2.6", "kimi-k2.5",
-      "minimax-m2.7", "minimax-m2.5",
-      "qwen3.6-plus", "qwen3.5-plus",
-      "deepseek-v4-pro", "deepseek-v4-lite"
-    ]
+    "description": "Provider, vendor, gateway, and model nationality are unrestricted. Three distinct trimmed executable model IDs are required."
   },
   "experts": {
     "architecture": {
@@ -38,8 +30,8 @@
     }
   },
   "consensus": {
-    "threshold_percent": 95,
+    "threshold_percent": 90,
     "max_review_rounds": 5,
-    "cross_provider_required": true
+    "distinct_models_required": true
   }
 }

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,12 +1,12 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-29
-**Commit:** 527fca8
-**Branch:** main
-**Version:** 0.18.3.0
+**Generated:** 2026-08-24
+**Commit:** a1a4683
+**Branch:** dsh-plugin
+**Version:** 0.19.0.0
 
 ## OVERVIEW
-Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.
+Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.
 
 ## STRUCTURE
 ```
@@ -25,19 +25,16 @@ skills/delphi-review/
 | Task | Location | Notes |
 |------|----------|-------|
 | Core methodology | SKILL.md | Delphi process, expert roles, consensus rules |
-| Code-walkthrough | references/code-walkthrough.md | Pre-push mode: 20 files/500 LOC limit |
-| Config example | .delphi-config.json.example | 3 experts, providers + API keys |
-| External API script | scripts/delphi-external-review.cjs | Calls model APIs, returns JSON verdict |
+| Code-walkthrough | references/code-walkthrough.md | Pre-push mode: complete review evidence with no hard file/LOC threshold |
+| Config example | .delphi-config.json.example | 3 experts, distinct models |
 
 ## CONVENTIONS
 - 3 experts anonymous in Round 1 (no cross-expert bias)
 - ≥90% consensus threshold (was 95%, now unified to 90%)
 - Max 5 rounds before forcing decision
-- Cross-provider required: experts from ≥2 different providers (config read from `.delphi-config.json`, not hardcoded)
-- Model selection: reads provider/model from `.delphi-config.json` active profile
-- Mixed mode: `provider: "local"` falls back to orchestrator model (reduced diversity warning)
-- No hardcoded model lists — models defined by user's `.delphi-config.json` configuration
-- Execution: via Bash tool calling `delphi-external-review.cjs` script (not subagent dispatch)
+- Provider/vendor/nationality unrestricted; exactly three distinct trimmed requested model IDs are required
+- Model selection: reads `delphi-reviewer-*` agent `model` fields from `opencode.json`
+- No hardcoded model lists — models defined by user's `opencode.json` configuration
 - Code-walkthrough mode: triggered on git push, stores result in .code-walkthrough-result.json
 - Code-walkthrough skipped on main/master pushes (by design)
 
@@ -45,25 +42,26 @@ skills/delphi-review/
 - Do NOT terminate before achieving true consensus (≥90%)
 - Do NOT reveal other experts' opinions during Round 1
 - Do NOT accept partial agreement without resolution
-- Do NOT skip code-walkthrough when over thresholds (BLOCK + user decision)
+- Do NOT auto-skip or bypass code-walkthrough based on change size; review large diffs completely or split them by user choice
 - Do NOT degrade to single model on API errors (BLOCK)
 - Do NOT declare complete without writing .code-walkthrough-result.json
-- Do NOT use foreign models (Anthropic/GPT/Gemini)
+- Do NOT treat `provider: local` fallback as an executed expert
 
 ## UNIQUE STYLES
 - Anonymous expert reviews (Round 1)
 - Statistical consensus measurement (≥90% threshold)
-- Two modes: design review + code-walkthrough
+- Three modes: requirements review + design review + code-walkthrough
 - Pre-push integration: .code-walkthrough-result.json stores commit hash + verdict
 - Delphi guard in claude-code plugin: blocks Edit/Write before APPROVAL
 
 ## COMMANDS
 ```bash
 /delphi-review                              # Design review mode
+/delphi-review --mode requirements          # Phase 2 R1 requirements review
 /delphi-review --mode code-walkthrough      # Pre-push code walkthrough
 ```
 
 ## NOTES
 - Used by pre-push hook for code-walkthrough validation
 - Delphi guard (claude-code plugin) reads .sprint-state/delphi-reviewed.json
-- Code-walkthrough result must match commit hash for verification
+- Code-walkthrough result must match commit hash for verification

package/plugins/qoder/skills/delphi-review/INSTALL.md

@@ -5,10 +5,10 @@ This guide walks you through setting up the Delphi consensus review skill in you
 ## Prerequisites
 
 - **Node.js >= 18** (script uses built-in `fetch`)
-- At least **2 different model providers** with API access (cross-provider requirement prevents homogenized blind spots)
+- Exactly **3 callable expert model configurations** with distinct trimmed executable model IDs
 - `@boyingliu01/xp-gate` npm package installed (for the `delphi-external-review.cjs` script)
 
-> **Why cross-provider?** Using models from the same vendor means they share training data and biases, defeating the purpose of multi-expert consensus.
+> Provider, vendor, gateway, and model nationality are unrestricted. One provider and token plan may serve all three roles.
 
 ## Quick Setup (4 steps)
 
@@ -47,7 +47,7 @@ Open `.delphi-config.json` and fill in your API keys and model preferences:
       "experts": {
         "architecture": { "provider": "deepseek", "model": "deepseek-chat" },
         "technical": { "provider": "zhipu", "model": "glm-5.2" },
-        "feasibility": { "provider": "local" }
+        "feasibility": { "provider": "deepseek", "model": "deepseek-reasoner" }
       }
     }
   }
@@ -82,7 +82,7 @@ Where `<script-path>` is located (in priority order):
 | `profiles` | ✅ | Named configuration profiles (for easy switching) |
 | `profiles.<name>.providers` | ✅ | Provider definitions: base_url + api_key |
 | `profiles.<name>.experts` | ✅ | Expert-to-provider/model mapping |
-| `profiles.<name>.experts.<role>.provider` | ✅ | Provider name, or `"local"` for orchestrator fallback |
+| `profiles.<name>.experts.<role>.provider` | ✅ | Callable provider name; `"local"` fallback cannot count |
 | `consensus.threshold_percent` | ❌ | Consensus threshold (default: 90) |
 | `consensus.max_review_rounds` | ❌ | Max review rounds (default: 5) |
 
@@ -90,9 +90,9 @@ Where `<script-path>` is located (in priority order):
 
 Edit `active_profile` in the config, or use the `--profile <name>` CLI argument to override temporarily.
 
-### Mixed mode (gradual setup)
+### Single-provider setup
 
-You can start with just 1 external API and use the orchestrator model for other experts:
+One provider may expose all three distinct executable models:
 
 ```json
 {
@@ -104,15 +104,15 @@ You can start with just 1 external API and use the orchestrator model for other
       },
       "experts": {
         "architecture": { "provider": "deepseek", "model": "deepseek-chat" },
-        "technical": { "provider": "local" },
-        "feasibility": { "provider": "local" }
+        "technical": { "provider": "deepseek", "model": "deepseek-reasoner" },
+        "feasibility": { "provider": "deepseek", "model": "deepseek-coder" }
       }
     }
   }
 }
 ```
 
-> This works but produces a WARNING about reduced cross-model diversity. Add more external APIs over time.
+> All three model IDs must remain distinct after trimming, and all three calls must succeed.
 
 ## Usage
 
@@ -125,7 +125,7 @@ Once configured, invoke the skill via:
 The skill will:
 1. Read `.delphi-config.json` to find expert configurations
 2. Call external model APIs via `delphi-external-review.cjs` script
-3. For `provider: "local"` experts, use the orchestrator model
+3. Reject `provider: "local"` fallback as non-executed evidence
 4. Aggregate verdicts and compute consensus
 
 ## Troubleshooting
@@ -142,9 +142,9 @@ Install the npm package: `npm install -g @boyingliu01/xp-gate`
 
 Check your API key in `.delphi-config.json`. Ensure the key matches the provider.
 
-### "All experts use the same provider"
+### "Expert model IDs are not distinct"
 
-Configure at least 2 different providers, or use `provider: "local"` for mixed mode.
+Configure three distinct callable model IDs. They may use the same provider.
 
 ### "Node.js >= 18 required"