@boyingliu01/xp-gate 0.18.5 → 0.19.1

package/skills/clipboard-vision/describe-clipboard.ps1

@@ -0,0 +1,115 @@
+# describe-clipboard.ps1
+# Reads image from clipboard, sends to vision model API, writes description to stdout.
+# API key is read from CLIPBOARD_VISION_API_KEY environment variable.
+# WARNING: Do not enable -Verbose or Set-PSDebug -Trace 2 — the API key would be logged.
+param(
+    [string]$OutputFile = "$env:TEMP\clipboard_desc.txt"
+)
+
+$ErrorActionPreference = "Stop"
+
+# Platform guard
+if (-not $IsWindows) {
+    Write-Host "ERROR: This script requires Windows (uses .NET System.Windows.Forms)"
+    exit 1
+}
+
+$apiKey = $env:CLIPBOARD_VISION_API_KEY
+if (-not $apiKey) {
+    Write-Host "ERROR: CLIPBOARD_VISION_API_KEY environment variable not set"
+    exit 1
+}
+
+$tempPng = $null
+$img = $null
+
+try {
+    # --- Read clipboard image ---
+    Add-Type -AssemblyName System.Windows.Forms -ErrorAction Stop
+    Add-Type -AssemblyName System.Drawing -ErrorAction Stop
+
+    $img = [System.Windows.Forms.Clipboard]::GetImage()
+    if (-not $img) {
+        Write-Host "ERROR: No image found in clipboard"
+        exit 1
+    }
+
+    # Save to temp PNG
+    $tempPng = Join-Path $env:TEMP "clipboard_$(Get-Date -Format 'yyyyMMdd_HHmmss').png"
+    $img.Save($tempPng, [System.Drawing.Imaging.ImageFormat]::Png)
+
+    # Convert to base64
+    $bytes = [System.IO.File]::ReadAllBytes($tempPng)
+    $base64 = [System.Convert]::ToBase64String($bytes)
+
+    # --- Build API request ---
+    $apiBase = "https://lab.iwhalecloud.com/gpt-proxy"
+    $model = "LOCAL/Qwen3.5-122B-A10B"
+
+    $body = @{
+        model = $model
+        messages = @(
+            @{
+                role = "user"
+                content = @(
+                    @{
+                        type = "text"
+                        text = "Describe this image in detail. Include all visible text, UI elements, code, error messages, objects, people, and any information conveyed. Be specific and thorough but concise. If it contains code or terminal output, quote it exactly."
+                    },
+                    @{
+                        type = "image_url"
+                        image_url = @{
+                            url = "data:image/png;base64,$base64"
+                        }
+                    }
+                )
+            }
+        )
+        max_tokens = 1024
+        temperature = 0.1
+    } | ConvertTo-Json -Depth 5
+
+    # --- Call API ---
+    $response = Invoke-RestMethod -Uri "$apiBase/chat/completions" `
+        -Method Post `
+        -Headers @{
+            "Authorization" = "Bearer $apiKey"
+            "Content-Type"  = "application/json"
+        } `
+        -Body ([System.Text.Encoding]::UTF8.GetBytes($body)) `
+        -TimeoutSec 30
+
+    # Validate response structure
+    if (-not $response.choices -or -not $response.choices[0].message -or -not $response.choices[0].message.content) {
+        Write-Host "ERROR: Unexpected API response structure"
+        Write-Host "Response: $($response | ConvertTo-Json -Compress -Depth 2)"
+        exit 1
+    }
+
+    $description = $response.choices[0].message.content
+} catch {
+    Write-Host "ERROR: $_"
+    exit 1
+} finally {
+    # Cleanup temp file and GDI+ handle
+    if ($tempPng -and (Test-Path $tempPng)) {
+        Remove-Item $tempPng -Force -ErrorAction SilentlyContinue
+    }
+    if ($img) {
+        $img.Dispose()
+    }
+}
+
+if (-not $description) {
+    Write-Host "ERROR: Empty response from vision model"
+    exit 1
+}
+
+# Write to output file
+$description | Out-File -FilePath $OutputFile -Encoding UTF8 -Force
+
+# Output to stdout
+Write-Host "Clipboard image description saved to: $OutputFile"
+Write-Host "---"
+Write-Host $description
+Write-Host "---"

package/skills/clipboard-vision/describe-clipboard.sh

@@ -0,0 +1,161 @@
+#!/usr/bin/env bash
+# describe-clipboard.sh
+# Cross-platform: reads clipboard image, calls vision API, writes description.
+# Works on: WSL/Linux (xclip), macOS (osascript), Windows Git Bash (PowerShell)
+#
+# Requires CLIPBOARD_VISION_API_KEY environment variable.
+# WARNING: Do not run with `set -x` — the API key would be logged.
+set -euo pipefail
+
+OUTPUT_FILE="${1:-/tmp/clipboard_desc.txt}"
+API_KEY="${CLIPBOARD_VISION_API_KEY:-}"
+API_BASE="${CLIPBOARD_VISION_API_BASE:-https://lab.iwhalecloud.com/gpt-proxy}"
+MODEL="LOCAL/Qwen3.5-122B-A10B"
+TEMP_PNG=""
+
+if [ -z "$API_KEY" ]; then
+    echo "ERROR: CLIPBOARD_VISION_API_KEY environment variable not set" >&2
+    exit 1
+fi
+
+cleanup() {
+    if [ -n "$TEMP_PNG" ] && [ -f "$TEMP_PNG" ]; then
+        rm -f "$TEMP_PNG"
+    fi
+}
+trap cleanup EXIT
+
+# --- Detect platform and read clipboard ---
+get_base64_from_clipboard() {
+    local platform b64_cmd
+    platform="$(uname -s)"
+
+    if [ "$platform" = "Linux" ]; then
+        b64_cmd="base64 -w 0"
+        # WSL / Linux: use xclip or wl-paste
+        if command -v xclip &>/dev/null; then
+            TARGETS="$(xclip -selection clipboard -o -t TARGETS 2>/dev/null || echo "")"
+            if echo "$TARGETS" | grep -qx "image/png"; then
+                TEMP_PNG="$(mktemp /tmp/clipboard_XXXXXX.png)"
+                xclip -selection clipboard -o -t image/png > "$TEMP_PNG"
+                $b64_cmd "$TEMP_PNG"
+            else
+                echo "ERROR: No PNG image in clipboard (xclip targets: ${TARGETS:-none})" >&2
+                exit 1
+            fi
+        elif command -v wl-paste &>/dev/null; then
+            TEMP_PNG="$(mktemp /tmp/clipboard_XXXXXX.png)"
+            wl-paste -t image/png > "$TEMP_PNG"
+            $b64_cmd "$TEMP_PNG"
+        else
+            echo "ERROR: No clipboard tool found (install xclip or wl-clipboard)" >&2
+            exit 1
+        fi
+    elif [ "$platform" = "MINGW64_NT" ] || [ "$platform" = "MSYS_NT" ] || [ "${OS:-}" = "Windows_NT" ]; then
+        b64_cmd="base64 -w 0"
+        # Windows Git Bash: delegate to PowerShell
+        PS_EXE="/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe"
+        if [ ! -f "$PS_EXE" ]; then
+            PS_EXE="powershell.exe"
+        fi
+        TEMP_PNG="$(mktemp --suffix=.png)"
+        WIN_TEMP="$(cygpath -w "$TEMP_PNG" 2>/dev/null || echo "$TEMP_PNG")"
+        "$PS_EXE" -NoProfile -NonInteractive -Command "
+            Add-Type -AssemblyName System.Windows.Forms;
+            Add-Type -AssemblyName System.Drawing;
+            \$img = [System.Windows.Forms.Clipboard]::GetImage();
+            if (-not \$img) { Write-Host 'NO_IMAGE'; exit 1 };
+            \$img.Save('$WIN_TEMP', [System.Drawing.Imaging.ImageFormat]::Png);
+            Write-Host 'OK';
+        " > /dev/null
+        if [ ! -f "$TEMP_PNG" ] || [ ! -s "$TEMP_PNG" ]; then
+            echo "ERROR: No image found in clipboard" >&2
+            exit 1
+        fi
+        $b64_cmd "$TEMP_PNG"
+    else
+        # macOS
+        b64_cmd="base64 -b 0"
+        if command -v osascript &>/dev/null; then
+            TEMP_PNG="$(mktemp /tmp/clipboard_XXXXXX.png)"
+            if ! osascript -e "set theFile to (open for access POSIX file \"$TEMP_PNG\" with write permission)" \
+                            -e "write (the clipboard as «class PNGf») to theFile" \
+                            -e "close access theFile" 2>/dev/null; then
+                echo "ERROR: Failed to read image from macOS clipboard" >&2
+                exit 1
+            fi
+            if [ ! -s "$TEMP_PNG" ]; then
+                echo "ERROR: No image in clipboard" >&2
+                exit 1
+            fi
+            $b64_cmd "$TEMP_PNG"
+        else
+            echo "ERROR: Unsupported platform ($platform)" >&2
+            exit 1
+        fi
+    fi
+}
+
+# --- Build and send API request via python3 (safe JSON construction) ---
+call_vision_api() {
+    local b64="$1"
+    python3 -c "
+import json, sys, os, urllib.request
+
+api_key = os.environ['CLIPBOARD_VISION_API_KEY']
+api_base = os.environ.get('CLIPBOARD_VISION_API_BASE', 'https://lab.iwhalecloud.com/gpt-proxy')
+model = 'LOCAL/Qwen3.5-122B-A10B'
+
+body = json.dumps({
+    'model': model,
+    'messages': [{
+        'role': 'user',
+        'content': [
+            {'type': 'text', 'text': 'Describe this image in detail. Include all visible text, UI elements, code, error messages, objects, people, and any information conveyed. Be specific and thorough but concise. If it contains code or terminal output, quote it exactly.'},
+            {'type': 'image_url', 'image_url': {'url': f'data:image/png;base64,{sys.argv[1]}'}}
+        ]
+    }],
+    'max_tokens': 1024,
+    'temperature': 0.1
+}).encode('utf-8')
+
+req = urllib.request.Request(
+    f'{api_base}/chat/completions',
+    data=body,
+    headers={
+        'Authorization': f'Bearer {api_key}',
+        'Content-Type': 'application/json'
+    }
+)
+
+try:
+    with urllib.request.urlopen(req, timeout=30) as resp:
+        data = json.loads(resp.read().decode('utf-8'))
+    if not data.get('choices') or not data['choices'][0].get('message'):
+        print('ERROR: Unexpected API response structure', file=sys.stderr)
+        sys.exit(1)
+    content = data['choices'][0]['message'].get('content', '')
+    if not content:
+        print('ERROR: Empty response from vision model', file=sys.stderr)
+        sys.exit(1)
+    print(content)
+except Exception as e:
+    print(f'ERROR: API call failed: {e}', file=sys.stderr)
+    sys.exit(1)
+" "$b64"
+}
+
+# --- Main ---
+echo "[clipboard-vision] Reading clipboard..." >&2
+B64="$(get_base64_from_clipboard)"
+
+echo "[clipboard-vision] Calling vision model ($MODEL)..." >&2
+
+DESCRIPTION="$(call_vision_api "$B64")"
+
+echo "$DESCRIPTION" > "$OUTPUT_FILE"
+echo "[clipboard-vision] Description saved to: $OUTPUT_FILE" >&2
+
+echo "---"
+echo "$DESCRIPTION"
+echo "---"

package/skills/clipboard-vision/scripts/clipboard-vision.ps1

@@ -0,0 +1,86 @@
+[CmdletBinding()]
+param(
+    [switch]$AllowRemote,
+    [string]$ConfirmRemote
+)
+
+$ErrorActionPreference = 'Stop'
+$ApiBase = if ($env:CLIPBOARD_VISION_API_BASE) { $env:CLIPBOARD_VISION_API_BASE } else { 'http://127.0.0.1:11434/v1' }
+$Model = $env:CLIPBOARD_VISION_MODEL
+$ApiKey = $env:CLIPBOARD_VISION_API_KEY
+$MaxBytes = if ($env:CLIPBOARD_VISION_MAX_BYTES) { [long]$env:CLIPBOARD_VISION_MAX_BYTES } else { 10485760 }
+
+if (-not $Model) { throw 'CLIPBOARD_VISION_MODEL is required' }
+if ($MaxBytes -le 0) { throw 'CLIPBOARD_VISION_MAX_BYTES must be positive' }
+$Endpoint = $null
+if (-not [Uri]::TryCreate($ApiBase, [UriKind]::Absolute, [ref]$Endpoint) -or
+    -not $Endpoint.IsAbsoluteUri -or
+    $Endpoint.Scheme -notin @('http', 'https') -or
+    $Endpoint.UserInfo.Length -ne 0 -or
+    $Endpoint.Query.Length -ne 0 -or
+    $Endpoint.Fragment.Length -ne 0) {
+    throw 'CLIPBOARD_VISION_API_BASE must be an absolute HTTP(S) URI without credentials'
+}
+$Address = $null
+$LiteralAddress = [Net.IPAddress]::TryParse($Endpoint.Host.Trim('[', ']'), [ref]$Address)
+$Loopback = $LiteralAddress -and [Net.IPAddress]::IsLoopback($Address)
+$NormalizedHost = $Endpoint.Host.Trim('[', ']').ToLowerInvariant()
+$EffectivePort = if ($Endpoint.IsDefaultPort) { if ($Endpoint.Scheme -eq 'https') { 443 } else { 80 } } else { $Endpoint.Port }
+$DisplayHost = if ($NormalizedHost.Contains(':')) { "[$NormalizedHost]" } else { $NormalizedHost }
+$BasePath = $Endpoint.AbsolutePath.TrimEnd('/')
+$EffectiveEndpoint = "$($Endpoint.Scheme.ToLowerInvariant())://$DisplayHost`:$EffectivePort$BasePath/chat/completions"
+if (-not $Loopback) {
+    $ConsentBytes = [Text.Encoding]::UTF8.GetBytes("$EffectiveEndpoint`n$Model")
+    $Hasher = [Security.Cryptography.SHA256]::Create()
+    try { $ExpectedConfirmation = ([BitConverter]::ToString($Hasher.ComputeHash($ConsentBytes))).Replace('-', '').ToLowerInvariant() } finally { $Hasher.Dispose() }
+    [Console]::Error.WriteLine("Remote disclosure: clipboard image data will be sent to $EffectiveEndpoint using model $Model.")
+    [Console]::Error.WriteLine("Confirmation token for this canonical endpoint and model: $ExpectedConfirmation")
+    if (-not $AllowRemote -or $ConfirmRemote -cne $ExpectedConfirmation) {
+        throw 'Remote endpoint requires -AllowRemote and the disclosed -ConfirmRemote token'
+    }
+}
+
+$TempDirectory = Join-Path ([IO.Path]::GetTempPath()) ("clipboard-vision-" + [Guid]::NewGuid())
+$ImagePath = Join-Path $TempDirectory 'clipboard.png'
+try {
+    New-Item -ItemType Directory -Path $TempDirectory | Out-Null
+    if ($env:CLIPBOARD_VISION_TEST_IMAGE) {
+        Copy-Item -LiteralPath $env:CLIPBOARD_VISION_TEST_IMAGE -Destination $ImagePath
+    } else {
+        Add-Type -AssemblyName System.Windows.Forms
+        Add-Type -AssemblyName System.Drawing
+        $Image = [Windows.Forms.Clipboard]::GetImage()
+        if ($null -eq $Image) { throw 'Clipboard does not contain an image' }
+        try { $Image.Save($ImagePath, [Drawing.Imaging.ImageFormat]::Png) } finally { $Image.Dispose() }
+    }
+    if ((Get-Item $ImagePath).Length -gt $MaxBytes) { throw "Clipboard image exceeds $MaxBytes bytes" }
+
+    $Encoded = [Convert]::ToBase64String([IO.File]::ReadAllBytes($ImagePath))
+    $Body = @{
+        model = $Model
+        messages = @(@{ role = 'user'; content = @(
+            @{ type = 'text'; text = 'Describe this clipboard image.' },
+            @{ type = 'image_url'; image_url = @{ url = "data:image/png;base64,$Encoded" } }
+        ) })
+    } | ConvertTo-Json -Depth 8 -Compress
+    $Headers = @{}
+    if ($ApiKey) { $Headers.Authorization = "Bearer $ApiKey" }
+    try {
+        if ($env:CLIPBOARD_VISION_TEST_HTTP_CAPTURE) {
+            Set-Content -LiteralPath $env:CLIPBOARD_VISION_TEST_HTTP_CAPTURE -Value $Body -Encoding utf8
+            if ($env:CV_TEST_HTTP_FAILURE) { throw 'test HTTP failure body secret' }
+            if ($env:CV_TEST_MALFORMED_JSON) { $Response = $null }
+            elseif ($env:CV_TEST_NON_STRING) { $Response = @{ choices = @(@{ message = @{ content = @{ value = 1 } } }) } }
+            else { $Response = @{ choices = @(@{ message = @{ content = 'test description' } }) } }
+        } else {
+            $Response = Invoke-RestMethod -Method Post -Uri $EffectiveEndpoint -Headers $Headers -ContentType 'application/json' -Body $Body -MaximumRedirection 0
+        }
+    } catch {
+        throw 'Vision API request failed (response body redacted)'
+    }
+    $Result = $Response.choices[0].message.content
+    if ($Result -isnot [string]) { throw 'Invalid vision API response (body redacted)' }
+    $Result
+} finally {
+    Remove-Item -LiteralPath $TempDirectory -Recurse -Force -ErrorAction SilentlyContinue
+}

package/skills/clipboard-vision/scripts/clipboard-vision.sh

@@ -0,0 +1,137 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+api_base="${CLIPBOARD_VISION_API_BASE:-http://127.0.0.1:11434/v1}"
+model="${CLIPBOARD_VISION_MODEL:-}"
+api_key="${CLIPBOARD_VISION_API_KEY:-}"
+max_bytes="${CLIPBOARD_VISION_MAX_BYTES:-10485760}"
+allow_remote=false
+confirm_remote=""
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --allow-remote) allow_remote=true; shift ;;
+    --confirm-remote)
+      [ "$#" -ge 2 ] || { printf '%s\n' 'Error: --confirm-remote requires the disclosed token' >&2; exit 2; }
+      confirm_remote="$2"
+      shift 2
+      ;;
+    --help)
+      printf '%s\n' 'Usage: clipboard-vision.sh [--allow-remote --confirm-remote TOKEN]'
+      exit 0
+      ;;
+    *) printf 'Error: unknown option: %s\n' "$1" >&2; exit 2 ;;
+  esac
+done
+
+[ -n "$model" ] || { printf '%s\n' 'Error: CLIPBOARD_VISION_MODEL is required' >&2; exit 2; }
+case "$max_bytes" in *[!0-9]*|'') printf '%s\n' 'Error: CLIPBOARD_VISION_MAX_BYTES must be a positive integer' >&2; exit 2 ;; esac
+[ "$max_bytes" -gt 0 ] || { printf '%s\n' 'Error: CLIPBOARD_VISION_MAX_BYTES must be positive' >&2; exit 2; }
+
+endpoint_info=$(python3 - "$api_base" "$model" <<'PY'
+import hashlib
+import ipaddress
+import sys
+import urllib.parse
+
+url = urllib.parse.urlparse(sys.argv[1])
+if url.scheme not in {"http", "https"} or not url.hostname or url.username or url.password or url.query or url.fragment:
+    raise SystemExit(2)
+try:
+    loopback = ipaddress.ip_address(url.hostname).is_loopback
+except ValueError:
+    loopback = False
+try:
+    port = url.port or (443 if url.scheme == "https" else 80)
+except ValueError:
+    raise SystemExit(2)
+print("local" if loopback else "remote")
+hostname = url.hostname.lower()
+print(hostname)
+display_host = f"[{hostname}]" if ":" in hostname else hostname
+base_path = url.path.rstrip("/")
+effective = f"{url.scheme.lower()}://{display_host}:{port}{base_path}/chat/completions"
+print(effective)
+print(hashlib.sha256(f"{effective}\n{sys.argv[2]}".encode()).hexdigest())
+PY
+) || { printf '%s\n' 'Error: invalid CLIPBOARD_VISION_API_BASE' >&2; exit 2; }
+endpoint_kind=$(printf '%s\n' "$endpoint_info" | sed -n '1p')
+effective_endpoint=$(printf '%s\n' "$endpoint_info" | sed -n '3p')
+expected_confirmation=$(printf '%s\n' "$endpoint_info" | sed -n '4p')
+
+if [ "$endpoint_kind" = remote ]; then
+  printf 'Remote disclosure: clipboard image data will be sent to %s using model %s.\n' "$effective_endpoint" "$model" >&2
+  printf 'Confirmation token for this canonical endpoint and model: %s\n' "$expected_confirmation" >&2
+  if [ "$allow_remote" != true ] || [ "$confirm_remote" != "$expected_confirmation" ]; then
+    printf '%s\n' 'Error: remote endpoint requires --allow-remote and the disclosed --confirm-remote token' >&2
+    exit 2
+  fi
+fi
+
+work_dir=$(mktemp -d "${TMPDIR:-/tmp}/clipboard-vision.XXXXXX")
+image_file="$work_dir/clipboard.png"
+request_file="$work_dir/request.json"
+response_file="$work_dir/response.json"
+auth_file="$work_dir/auth-header"
+cleanup() { rm -rf -- "$work_dir"; }
+trap cleanup EXIT HUP INT TERM
+
+if command -v pngpaste >/dev/null 2>&1; then
+  pngpaste "$image_file"
+elif command -v wl-paste >/dev/null 2>&1; then
+  wl-paste --no-newline --type image/png > "$image_file"
+elif command -v import >/dev/null 2>&1; then
+  import clipboard: "$image_file"
+else
+  printf '%s\n' 'Error: install pngpaste, wl-paste, or ImageMagick import' >&2
+  exit 2
+fi
+
+[ -s "$image_file" ] || { printf '%s\n' 'Error: clipboard does not contain an image' >&2; exit 2; }
+image_bytes=$(wc -c < "$image_file" | tr -d '[:space:]')
+[ "$image_bytes" -le "$max_bytes" ] || { printf 'Error: clipboard image exceeds %s bytes\n' "$max_bytes" >&2; exit 2; }
+
+python3 - "$image_file" "$request_file" "$model" <<'PY'
+import base64
+import json
+import pathlib
+import sys
+
+image = base64.b64encode(pathlib.Path(sys.argv[1]).read_bytes()).decode("ascii")
+request = {
+    "model": sys.argv[3],
+    "messages": [{"role": "user", "content": [
+        {"type": "text", "text": "Describe this clipboard image."},
+        {"type": "image_url", "image_url": {"url": "data:image/png;base64," + image}},
+    ]}],
+}
+pathlib.Path(sys.argv[2]).write_text(json.dumps(request), encoding="utf-8")
+PY
+
+curl_args=(--silent --show-error --max-redirs 0 --output "$response_file" --write-out '%{http_code}' --header 'Content-Type: application/json' --data-binary "@$request_file")
+if [ -n "$api_key" ]; then
+  case "$api_key" in *$'\n'*|*$'\r'*) printf '%s\n' 'Error: invalid CLIPBOARD_VISION_API_KEY' >&2; exit 2 ;; esac
+  umask 077
+  printf 'Authorization: Bearer %s\n' "$api_key" > "$auth_file"
+  chmod 600 "$auth_file"
+  curl_args+=(--header "@$auth_file")
+fi
+status=$(curl "${curl_args[@]}" "$effective_endpoint") || { printf '%s\n' 'Error: vision API request failed' >&2; exit 1; }
+case "$status" in 2??) ;; *) printf 'Error: vision API returned HTTP %s (body redacted)\n' "$status" >&2; exit 1 ;; esac
+
+result=$(python3 - "$response_file" <<'PY'
+import json
+import pathlib
+import sys
+
+try:
+    data = json.loads(pathlib.Path(sys.argv[1]).read_text(encoding="utf-8"))
+    value = data["choices"][0]["message"]["content"]
+    if not isinstance(value, str):
+        raise ValueError
+except (KeyError, IndexError, TypeError, ValueError, json.JSONDecodeError):
+    raise SystemExit(2)
+print(value)
+PY
+) || { printf '%s\n' 'Error: invalid vision API response (body redacted)' >&2; exit 1; }
+
+printf '%s\n' "$result"

package/skills/delphi-review/.delphi-config.json.example

@@ -4,9 +4,10 @@
     "======================================",
     "Copy this file to .delphi-config.json and fill in your API keys.",
     "Place this file alongside SKILL.md in the delphi-review skill directory.",
-    "At least 2 of the 3 experts should use different providers for cross-bias protection.",
+    "Exactly three roles are required, with distinct trimmed executable model IDs.",
     "",
-    "Provider field: set provider to \"local\" to use the orchestrator model (mixed mode)."
+    "Provider and vendor are unrestricted. provider=local is a fallback and cannot count as a successful expert execution.",
+    "cross_provider_required is deprecated and ignored with warning code cross_provider_required_ignored."
   ],
 
   "active_profile": "default",
@@ -14,53 +15,47 @@
   "profiles": {
     "default": {
       "providers": {
-        "deepseek": {
-          "base_url": "https://api.deepseek.com/v1",
-          "api_key": "YOUR_DEEPSEEK_API_KEY"
-        },
-        "zhipu": {
-          "base_url": "https://open.bigmodel.cn/api/paas/v4",
-          "api_key": "YOUR_ZHIPU_API_KEY"
-        },
-        "dashscope": {
+        "bailian-tp": {
           "base_url": "https://dashscope.aliyuncs.com/compatible-mode/v1",
-          "api_key": "YOUR_DASHSCOPE_API_KEY"
+          "api_key": "YOUR_API_KEY"
         }
       },
       "experts": {
         "architecture": {
-          "provider": "deepseek",
-          "model": "deepseek-chat"
+          "provider": "bailian-tp",
+          "model": "qwen-plus"
         },
         "technical": {
-          "provider": "zhipu",
-          "model": "glm-5.2"
+          "provider": "bailian-tp",
+          "model": "deepseek-v3"
         },
         "feasibility": {
-          "provider": "dashscope",
-          "model": "qwen-3.8-plus"
+          "provider": "bailian-tp",
+          "model": "glm-4.5"
         }
       }
     },
 
     "starter": {
-      "$comment": "Mixed mode: only 1 external API, others use orchestrator model",
+      "$comment": "One provider and token plan serving three distinct models",
       "providers": {
-        "deepseek": {
-          "base_url": "https://api.deepseek.com/v1",
-          "api_key": "YOUR_DEEPSEEK_API_KEY"
+        "bailian-tp": {
+          "base_url": "https://dashscope.aliyuncs.com/compatible-mode/v1",
+          "api_key": "YOUR_API_KEY"
         }
       },
       "experts": {
         "architecture": {
-          "provider": "deepseek",
-          "model": "deepseek-chat"
+          "provider": "bailian-tp",
+          "model": "qwen-plus"
         },
         "technical": {
-          "provider": "local"
+          "provider": "bailian-tp",
+          "model": "deepseek-v3"
         },
         "feasibility": {
-          "provider": "local"
+          "provider": "bailian-tp",
+          "model": "glm-4.5"
         }
       }
     }
@@ -68,6 +63,8 @@
 
   "consensus": {
     "threshold_percent": 90,
-    "max_review_rounds": 5
+    "max_review_rounds": 5,
+    "distinct_models_required": true,
+    "cross_provider_required": true
   }
 }

package/skills/delphi-review/AGENTS.md

@@ -1,12 +1,12 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-07-29
-**Commit:** 05d23ae
+**Generated:** 2026-08-30
+**Commit:** 0848858
 **Branch:** main
-**Version:** 0.18.5.0
+**Version:** 0.19.1.0
 
 ## OVERVIEW
-Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, 3 experts from ≥2 providers, domestic models only). Supports design + code-walkthrough modes.
+Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.
 
 ## STRUCTURE
 ```
@@ -25,14 +25,14 @@ skills/delphi-review/
 | Task | Location | Notes |
 |------|----------|-------|
 | Core methodology | SKILL.md | Delphi process, expert roles, consensus rules |
-| Code-walkthrough | references/code-walkthrough.md | Pre-push mode: 20 files/500 LOC limit |
-| Config example | .delphi-config.json.example | 3 experts, domestic models |
+| Code-walkthrough | references/code-walkthrough.md | Pre-push mode: complete review evidence with no hard file/LOC threshold |
+| Config example | .delphi-config.json.example | 3 experts, distinct models |
 
 ## CONVENTIONS
 - 3 experts anonymous in Round 1 (no cross-expert bias)
 - ≥90% consensus threshold (was 95%, now unified to 90%)
 - Max 5 rounds before forcing decision
-- Cross-provider required: experts from ≥2 different providers (model list read from `opencode.json` agent config, not hardcoded)
+- Provider/vendor/nationality unrestricted; exactly three distinct trimmed requested model IDs are required
 - Model selection: reads `delphi-reviewer-*` agent `model` fields from `opencode.json`
 - No hardcoded model lists — models defined by user's `opencode.json` configuration
 - Code-walkthrough mode: triggered on git push, stores result in .code-walkthrough-result.json
@@ -42,25 +42,26 @@ skills/delphi-review/
 - Do NOT terminate before achieving true consensus (≥90%)
 - Do NOT reveal other experts' opinions during Round 1
 - Do NOT accept partial agreement without resolution
-- Do NOT skip code-walkthrough when over thresholds (BLOCK + user decision)
+- Do NOT auto-skip or bypass code-walkthrough based on change size; review large diffs completely or split them by user choice
 - Do NOT degrade to single model on API errors (BLOCK)
 - Do NOT declare complete without writing .code-walkthrough-result.json
-- Do NOT use foreign models (Anthropic/GPT/Gemini)
+- Do NOT treat `provider: local` fallback as an executed expert
 
 ## UNIQUE STYLES
 - Anonymous expert reviews (Round 1)
 - Statistical consensus measurement (≥90% threshold)
-- Two modes: design review + code-walkthrough
+- Three modes: requirements review + design review + code-walkthrough
 - Pre-push integration: .code-walkthrough-result.json stores commit hash + verdict
 - Delphi guard in claude-code plugin: blocks Edit/Write before APPROVAL
 
 ## COMMANDS
 ```bash
 /delphi-review                              # Design review mode
+/delphi-review --mode requirements          # Phase 2 R1 requirements review
 /delphi-review --mode code-walkthrough      # Pre-push code walkthrough
 ```
 
 ## NOTES
 - Used by pre-push hook for code-walkthrough validation
 - Delphi guard (claude-code plugin) reads .sprint-state/delphi-reviewed.json
-- Code-walkthrough result must match commit hash for verification
+- Code-walkthrough result must match commit hash for verification