@boyingliu01/xp-gate 0.19.1 → 0.19.3

package/plugins/qoder/skills/admin-template-guidelines/references/rule-6.md

@@ -0,0 +1,180 @@
+# Rule 6: HTMX + Alpine Separation — Examples
+
+## ❌ 错误示例：HTMX 与 Alpine 混用
+
+```nunjucks
+{# admin/views/plans.njk — 反模式 #}
+
+{# 使用 Alpine 做服务端请求 — 职责错误 #}
+<div x-data="{ plans: [], loading: false }"
+     x-init="loading = true; fetch('/admin/api/plans').then(r => r.json()).then(d => plans = d); loading = false">
+  <template x-for="plan in plans" :key="plan.id">
+    <div>
+      <span x-text="plan.name"></span>
+      {# 删除操作使用 Alpine 而非 HTMX — 失去服务端渲染优势 #}
+      <button @click="fetch('/admin/plans/' + plan.id, { method: 'DELETE' })
+        .then(() => plans = plans.filter(p => p.id !== plan.id))">
+        Delete
+      </button>
+    </div>
+  </template>
+</div>
+
+{# HTMX 驱动下拉菜单状态 — 职责错误 #}
+<div hx-get="/admin/plans" hx-swap="innerHTML">
+  <button hx-on::after-request="this.nextElementSibling.style.display = 'block'">
+    Show Filters
+  </button>
+  <div style="display: none">
+    <input type="text" name="search" placeholder="Search..."
+           hx-get="/admin/plans" hx-trigger="keyup changed delay:300ms" />
+  </div>
+</div>
+```
+
+## ✅ 正确示例：职责分离
+
+```nunjucks
+{# admin/views/plans.njk #}
+
+{# 整体布局与内容列表由 HTMX 驱动 #}
+<div id="plans-content" hx-boost="true">
+  <div class="header-bar" x-data="{ showFilters: false }">
+    <h1>Interview Plans</h1>
+
+    {# 下拉菜单状态由 Alpine 管理 #}
+    <button type="button" @click="showFilters = !showFilters"
+            :class="{ 'active': showFilters }">
+      Filters
+    </button>
+
+    {# Alpine 控制本地显示/隐藏 #}
+    <div x-show="showFilters" x-transition class="filter-panel">
+      {# 搜索输入通过 HTMX 触发服务端请求 #}
+      <input type="text" name="search" placeholder="Search plans..."
+             hx-get="/admin/plans"
+             hx-target="#plans-list"
+             hx-trigger="keyup changed delay:300ms"
+             hx-indicator=".search-spinner" />
+    </div>
+  </div>
+
+  {# 列表内容完全由 HTMX 服务端渲染 #}
+  <div id="plans-list">
+    {% for plan in plans %}
+    <div class="plan-card" id="plan-{{ plan.id }}">
+      <h3>{{ plan.name }}</h3>
+      <p>Status: {{ plan.status | upper }}</p>
+      <p>Completion: {{ plan.completionRate | round(1) }}%</p>
+
+      <div class="actions">
+        {# 删除操作通过 HTMX 提交，服务端响应更新 DOM #}
+        <button class="btn-danger"
+                hx-delete="/admin/plans/{{ plan.id }}"
+                hx-target="#plan-{{ plan.id }}"
+                hx-swap="outerHTML"
+                hx-confirm="Are you sure you want to delete this plan?"
+                x-data="{ deleting: false }"
+                hx-on::before-request="deleting = true"
+                hx-on::after-request="deleting = false">
+          <span x-show="!deleting">Delete</span>
+          <span x-show="deleting" class="spinner">Deleting...</span>
+        </button>
+      </div>
+    </div>
+    {% endfor %}
+  </div>
+</div>
+```
+
+```nunjucks
+{# admin/views/modals/confirm-delete.njk — Modal 由 Alpine 管理 #}
+
+<div x-data="{ open: false, targetId: null, targetName: '' }"
+     @open-modal.window="open = true; targetId = $event.detail.id; targetName = $event.detail.name"
+     x-show="open"
+     x-cloak
+     class="modal-backdrop"
+     @click.self="open = false">
+
+  <div class="modal-content" x-transition>
+    <h2>Confirm Delete</h2>
+    <p>Are you sure you want to delete "<span x-text="targetName"></span>"?</p>
+
+    <div class="modal-actions">
+      <button @click="open = false">Cancel</button>
+
+      {# 真正的删除操作通过 HTMX 提交 #}
+      <button class="btn-danger"
+              hx-delete="/admin/plans/"
+              hx-vals='js:{ id: targetId }'
+              hx-target="#plans-list"
+              @click="open = false">
+        Confirm Delete
+      </button>
+    </div>
+  </div>
+</div>
+```
+
+```nunjucks
+{# admin/views/templates/edit.njk — 表单字段本地验证由 Alpine 管理 #}
+
+<form x-data="{
+  name: '',
+  nameError: '',
+  content: '',
+  contentError: '',
+  get isValid() {
+    return this.name.length > 0 && this.content.length > 0 && !this.nameError && !this.contentError;
+  },
+  validateName(value) {
+    this.name = value;
+    this.nameError = value.length < 3 ? 'Name must be at least 3 characters.' : '';
+  },
+  validateContent(value) {
+    this.content = value;
+    this.contentError = value.trim().length === 0 ? 'Content cannot be empty.' : '';
+  }
+}" hx-post="/admin/templates/{{ template.id }}"
+   hx-target="#form-result"
+   hx-swap="innerHTML"
+   hx-on::before-request="if (!isValid) { $event.preventDefault(); }">
+
+  <div class="form-group">
+    <label for="name">Template Name</label>
+    <input type="text" id="name" name="name"
+           x-model="name"
+           @input="validateName(name)"
+           :class="{ 'error': nameError }"
+           value="{{ template.name }}" />
+    <span x-show="nameError" x-text="nameError" class="field-error"></span>
+  </div>
+
+  <div class="form-group">
+    <label for="content">Template Content</label>
+    <textarea id="content" name="content" rows="20"
+              x-model="content"
+              @input="validateContent(content)"
+              :class="{ 'error': contentError }">{{ template.content }}</textarea>
+    <span x-show="contentError" x-text="contentError" class="field-error"></span>
+  </div>
+
+  <div class="form-actions">
+    <button type="submit" :disabled="!isValid" class="btn-primary">
+      Save Template
+    </button>
+    <a href="/admin/templates" class="btn-secondary">Cancel</a>
+  </div>
+</form>
+
+{# HTMX 响应结果区域 #}
+<div id="form-result"></div>
+```
+
+## 分离原则
+
+1. **HTMX 是服务端与 DOM 之间的桥梁** — 所有数据变更、页面导航、内容更新必须通过 HTMX
+2. **Alpine 是组件状态的管理者** — 只管理不需要服务端参与的 UI 状态（开关、显隐、验证）
+3. **HTMX 属性不应操作 DOM 状态** — `hx-on::after-request` 里不应出现 `element.style.display`
+4. **Alpine 方法不应发起 fetch** — `@click="fetch('/api/...')"` 是反模式，应用 `hx-get/hx-post`

package/plugins/qoder/skills/batch-grill-me/SKILL.md

@@ -0,0 +1,15 @@
+---
+name: batch-grill-me
+description: A relentless interview that asks every frontier question at once, round by round.
+disable-model-invocation: true
+---
+
+Interview the user relentlessly until you reach a shared understanding. Map this as a **design tree**: every decision branches into the decisions that hang off it.
+
+Work the tree in **rounds**. The **frontier** is every decision whose prerequisites are already settled — the questions you can ask *now* without guessing at answers you haven't heard yet. Ask the whole frontier in one round: number each question and give your recommended answer. Then wait for the user's answers before the next round.
+
+Each round the user answers reshapes the tree — settled decisions push the frontier outward and unblock questions that depended on them. Recompute the frontier and ask the next round. A question whose answer depends on another question still open in this round belongs to a *later* round, not this one.
+
+Finding *facts* is your job, never the user's. When a frontier question needs a fact from the environment (filesystem, tools, etc.), dispatch a sub-agent to find it — don't ask the user for anything you could look up yourself. Don't block on it: a running exploration is an unsettled prerequisite, so only the questions downstream of it wait for the sub-agent to report — ask the rest of the frontier now. The *decisions* are the user's — put each to them and wait.
+
+The session is done when the frontier is empty: every branch of the design tree visited, nothing left silently assumed. Do not act on it until the user confirms you have reached a shared understanding.

package/plugins/qoder/skills/clipboard-vision/describe-clipboard.ps1

@@ -0,0 +1,115 @@
+# describe-clipboard.ps1
+# Reads image from clipboard, sends to vision model API, writes description to stdout.
+# API key is read from CLIPBOARD_VISION_API_KEY environment variable.
+# WARNING: Do not enable -Verbose or Set-PSDebug -Trace 2 — the API key would be logged.
+param(
+    [string]$OutputFile = "$env:TEMP\clipboard_desc.txt"
+)
+
+$ErrorActionPreference = "Stop"
+
+# Platform guard
+if (-not $IsWindows) {
+    Write-Host "ERROR: This script requires Windows (uses .NET System.Windows.Forms)"
+    exit 1
+}
+
+$apiKey = $env:CLIPBOARD_VISION_API_KEY
+if (-not $apiKey) {
+    Write-Host "ERROR: CLIPBOARD_VISION_API_KEY environment variable not set"
+    exit 1
+}
+
+$tempPng = $null
+$img = $null
+
+try {
+    # --- Read clipboard image ---
+    Add-Type -AssemblyName System.Windows.Forms -ErrorAction Stop
+    Add-Type -AssemblyName System.Drawing -ErrorAction Stop
+
+    $img = [System.Windows.Forms.Clipboard]::GetImage()
+    if (-not $img) {
+        Write-Host "ERROR: No image found in clipboard"
+        exit 1
+    }
+
+    # Save to temp PNG
+    $tempPng = Join-Path $env:TEMP "clipboard_$(Get-Date -Format 'yyyyMMdd_HHmmss').png"
+    $img.Save($tempPng, [System.Drawing.Imaging.ImageFormat]::Png)
+
+    # Convert to base64
+    $bytes = [System.IO.File]::ReadAllBytes($tempPng)
+    $base64 = [System.Convert]::ToBase64String($bytes)
+
+    # --- Build API request ---
+    $apiBase = "https://lab.iwhalecloud.com/gpt-proxy"
+    $model = "LOCAL/Qwen3.5-122B-A10B"
+
+    $body = @{
+        model = $model
+        messages = @(
+            @{
+                role = "user"
+                content = @(
+                    @{
+                        type = "text"
+                        text = "Describe this image in detail. Include all visible text, UI elements, code, error messages, objects, people, and any information conveyed. Be specific and thorough but concise. If it contains code or terminal output, quote it exactly."
+                    },
+                    @{
+                        type = "image_url"
+                        image_url = @{
+                            url = "data:image/png;base64,$base64"
+                        }
+                    }
+                )
+            }
+        )
+        max_tokens = 1024
+        temperature = 0.1
+    } | ConvertTo-Json -Depth 5
+
+    # --- Call API ---
+    $response = Invoke-RestMethod -Uri "$apiBase/chat/completions" `
+        -Method Post `
+        -Headers @{
+            "Authorization" = "Bearer $apiKey"
+            "Content-Type"  = "application/json"
+        } `
+        -Body ([System.Text.Encoding]::UTF8.GetBytes($body)) `
+        -TimeoutSec 30
+
+    # Validate response structure
+    if (-not $response.choices -or -not $response.choices[0].message -or -not $response.choices[0].message.content) {
+        Write-Host "ERROR: Unexpected API response structure"
+        Write-Host "Response: $($response | ConvertTo-Json -Compress -Depth 2)"
+        exit 1
+    }
+
+    $description = $response.choices[0].message.content
+} catch {
+    Write-Host "ERROR: $_"
+    exit 1
+} finally {
+    # Cleanup temp file and GDI+ handle
+    if ($tempPng -and (Test-Path $tempPng)) {
+        Remove-Item $tempPng -Force -ErrorAction SilentlyContinue
+    }
+    if ($img) {
+        $img.Dispose()
+    }
+}
+
+if (-not $description) {
+    Write-Host "ERROR: Empty response from vision model"
+    exit 1
+}
+
+# Write to output file
+$description | Out-File -FilePath $OutputFile -Encoding UTF8 -Force
+
+# Output to stdout
+Write-Host "Clipboard image description saved to: $OutputFile"
+Write-Host "---"
+Write-Host $description
+Write-Host "---"

package/plugins/qoder/skills/clipboard-vision/describe-clipboard.sh

@@ -0,0 +1,161 @@
+#!/usr/bin/env bash
+# describe-clipboard.sh
+# Cross-platform: reads clipboard image, calls vision API, writes description.
+# Works on: WSL/Linux (xclip), macOS (osascript), Windows Git Bash (PowerShell)
+#
+# Requires CLIPBOARD_VISION_API_KEY environment variable.
+# WARNING: Do not run with `set -x` — the API key would be logged.
+set -euo pipefail
+
+OUTPUT_FILE="${1:-/tmp/clipboard_desc.txt}"
+API_KEY="${CLIPBOARD_VISION_API_KEY:-}"
+API_BASE="${CLIPBOARD_VISION_API_BASE:-https://lab.iwhalecloud.com/gpt-proxy}"
+MODEL="LOCAL/Qwen3.5-122B-A10B"
+TEMP_PNG=""
+
+if [ -z "$API_KEY" ]; then
+    echo "ERROR: CLIPBOARD_VISION_API_KEY environment variable not set" >&2
+    exit 1
+fi
+
+cleanup() {
+    if [ -n "$TEMP_PNG" ] && [ -f "$TEMP_PNG" ]; then
+        rm -f "$TEMP_PNG"
+    fi
+}
+trap cleanup EXIT
+
+# --- Detect platform and read clipboard ---
+get_base64_from_clipboard() {
+    local platform b64_cmd
+    platform="$(uname -s)"
+
+    if [ "$platform" = "Linux" ]; then
+        b64_cmd="base64 -w 0"
+        # WSL / Linux: use xclip or wl-paste
+        if command -v xclip &>/dev/null; then
+            TARGETS="$(xclip -selection clipboard -o -t TARGETS 2>/dev/null || echo "")"
+            if echo "$TARGETS" | grep -qx "image/png"; then
+                TEMP_PNG="$(mktemp /tmp/clipboard_XXXXXX.png)"
+                xclip -selection clipboard -o -t image/png > "$TEMP_PNG"
+                $b64_cmd "$TEMP_PNG"
+            else
+                echo "ERROR: No PNG image in clipboard (xclip targets: ${TARGETS:-none})" >&2
+                exit 1
+            fi
+        elif command -v wl-paste &>/dev/null; then
+            TEMP_PNG="$(mktemp /tmp/clipboard_XXXXXX.png)"
+            wl-paste -t image/png > "$TEMP_PNG"
+            $b64_cmd "$TEMP_PNG"
+        else
+            echo "ERROR: No clipboard tool found (install xclip or wl-clipboard)" >&2
+            exit 1
+        fi
+    elif [ "$platform" = "MINGW64_NT" ] || [ "$platform" = "MSYS_NT" ] || [ "${OS:-}" = "Windows_NT" ]; then
+        b64_cmd="base64 -w 0"
+        # Windows Git Bash: delegate to PowerShell
+        PS_EXE="/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe"
+        if [ ! -f "$PS_EXE" ]; then
+            PS_EXE="powershell.exe"
+        fi
+        TEMP_PNG="$(mktemp --suffix=.png)"
+        WIN_TEMP="$(cygpath -w "$TEMP_PNG" 2>/dev/null || echo "$TEMP_PNG")"
+        "$PS_EXE" -NoProfile -NonInteractive -Command "
+            Add-Type -AssemblyName System.Windows.Forms;
+            Add-Type -AssemblyName System.Drawing;
+            \$img = [System.Windows.Forms.Clipboard]::GetImage();
+            if (-not \$img) { Write-Host 'NO_IMAGE'; exit 1 };
+            \$img.Save('$WIN_TEMP', [System.Drawing.Imaging.ImageFormat]::Png);
+            Write-Host 'OK';
+        " > /dev/null
+        if [ ! -f "$TEMP_PNG" ] || [ ! -s "$TEMP_PNG" ]; then
+            echo "ERROR: No image found in clipboard" >&2
+            exit 1
+        fi
+        $b64_cmd "$TEMP_PNG"
+    else
+        # macOS
+        b64_cmd="base64 -b 0"
+        if command -v osascript &>/dev/null; then
+            TEMP_PNG="$(mktemp /tmp/clipboard_XXXXXX.png)"
+            if ! osascript -e "set theFile to (open for access POSIX file \"$TEMP_PNG\" with write permission)" \
+                            -e "write (the clipboard as «class PNGf») to theFile" \
+                            -e "close access theFile" 2>/dev/null; then
+                echo "ERROR: Failed to read image from macOS clipboard" >&2
+                exit 1
+            fi
+            if [ ! -s "$TEMP_PNG" ]; then
+                echo "ERROR: No image in clipboard" >&2
+                exit 1
+            fi
+            $b64_cmd "$TEMP_PNG"
+        else
+            echo "ERROR: Unsupported platform ($platform)" >&2
+            exit 1
+        fi
+    fi
+}
+
+# --- Build and send API request via python3 (safe JSON construction) ---
+call_vision_api() {
+    local b64="$1"
+    python3 -c "
+import json, sys, os, urllib.request
+
+api_key = os.environ['CLIPBOARD_VISION_API_KEY']
+api_base = os.environ.get('CLIPBOARD_VISION_API_BASE', 'https://lab.iwhalecloud.com/gpt-proxy')
+model = 'LOCAL/Qwen3.5-122B-A10B'
+
+body = json.dumps({
+    'model': model,
+    'messages': [{
+        'role': 'user',
+        'content': [
+            {'type': 'text', 'text': 'Describe this image in detail. Include all visible text, UI elements, code, error messages, objects, people, and any information conveyed. Be specific and thorough but concise. If it contains code or terminal output, quote it exactly.'},
+            {'type': 'image_url', 'image_url': {'url': f'data:image/png;base64,{sys.argv[1]}'}}
+        ]
+    }],
+    'max_tokens': 1024,
+    'temperature': 0.1
+}).encode('utf-8')
+
+req = urllib.request.Request(
+    f'{api_base}/chat/completions',
+    data=body,
+    headers={
+        'Authorization': f'Bearer {api_key}',
+        'Content-Type': 'application/json'
+    }
+)
+
+try:
+    with urllib.request.urlopen(req, timeout=30) as resp:
+        data = json.loads(resp.read().decode('utf-8'))
+    if not data.get('choices') or not data['choices'][0].get('message'):
+        print('ERROR: Unexpected API response structure', file=sys.stderr)
+        sys.exit(1)
+    content = data['choices'][0]['message'].get('content', '')
+    if not content:
+        print('ERROR: Empty response from vision model', file=sys.stderr)
+        sys.exit(1)
+    print(content)
+except Exception as e:
+    print(f'ERROR: API call failed: {e}', file=sys.stderr)
+    sys.exit(1)
+" "$b64"
+}
+
+# --- Main ---
+echo "[clipboard-vision] Reading clipboard..." >&2
+B64="$(get_base64_from_clipboard)"
+
+echo "[clipboard-vision] Calling vision model ($MODEL)..." >&2
+
+DESCRIPTION="$(call_vision_api "$B64")"
+
+echo "$DESCRIPTION" > "$OUTPUT_FILE"
+echo "[clipboard-vision] Description saved to: $OUTPUT_FILE" >&2
+
+echo "---"
+echo "$DESCRIPTION"
+echo "---"

package/plugins/qoder/skills/delphi-review/.delphi-config.json.example

@@ -1,37 +1,70 @@
 {
-  "$schema": "./.delphi-config.schema.json",
-  "version": 1,
-  "description": "Delphi review expert mapping — customize with your own models. Copy to .delphi-config.json and edit.",
-  "num_experts": 3,
-  "model_policy": {
-    "description": "Provider, vendor, gateway, and model nationality are unrestricted. Three distinct trimmed executable model IDs are required."
-  },
-  "experts": {
-    "architecture": {
-      "agent_name": "delphi-reviewer-architecture",
-      "perspective": "Architecture and requirements alignment",
-      "requirements_alignment": true,
-      "recommended_model": "deepseek-v4-pro",
-      "alternatives": ["qwen3.6-plus", "glm-5.1"]
-    },
-    "technical": {
-      "agent_name": "delphi-reviewer-technical",
-      "perspective": "Technical implementation, code correctness, edge cases",
-      "requirements_alignment": true,
-      "recommended_model": "kimi-k2.6",
-      "alternatives": ["deepseek-v4-pro", "minimax-m2.7"]
+  "$comment": [
+    "Delphi Review Configuration Template",
+    "======================================",
+    "Copy this file to .delphi-config.json and fill in your API keys.",
+    "Place this file alongside SKILL.md in the delphi-review skill directory.",
+    "Exactly three roles are required, with distinct trimmed executable model IDs.",
+    "",
+    "Provider and vendor are unrestricted. provider=local is a fallback and cannot count as a successful expert execution.",
+    "cross_provider_required is deprecated and ignored with warning code cross_provider_required_ignored."
+  ],
+
+  "active_profile": "default",
+
+  "profiles": {
+    "default": {
+      "providers": {
+        "bailian-tp": {
+          "base_url": "https://dashscope.aliyuncs.com/compatible-mode/v1",
+          "api_key": "YOUR_API_KEY"
+        }
+      },
+      "experts": {
+        "architecture": {
+          "provider": "bailian-tp",
+          "model": "qwen-plus"
+        },
+        "technical": {
+          "provider": "bailian-tp",
+          "model": "deepseek-v3"
+        },
+        "feasibility": {
+          "provider": "bailian-tp",
+          "model": "glm-4.5"
+        }
+      }
     },
-    "feasibility": {
-      "agent_name": "delphi-reviewer-feasibility",
-      "perspective": "Feasibility analysis, risk assessment, execution complexity",
-      "requirements_alignment": true,
-      "recommended_model": "qwen3.6-plus",
-      "alternatives": ["kimi-k2.6", "glm-5.1"]
+
+    "starter": {
+      "$comment": "One provider and token plan serving three distinct models",
+      "providers": {
+        "bailian-tp": {
+          "base_url": "https://dashscope.aliyuncs.com/compatible-mode/v1",
+          "api_key": "YOUR_API_KEY"
+        }
+      },
+      "experts": {
+        "architecture": {
+          "provider": "bailian-tp",
+          "model": "qwen-plus"
+        },
+        "technical": {
+          "provider": "bailian-tp",
+          "model": "deepseek-v3"
+        },
+        "feasibility": {
+          "provider": "bailian-tp",
+          "model": "glm-4.5"
+        }
+      }
     }
   },
+
   "consensus": {
     "threshold_percent": 90,
     "max_review_rounds": 5,
-    "distinct_models_required": true
+    "distinct_models_required": true,
+    "cross_provider_required": true
   }
 }

package/plugins/qoder/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-08-30
-**Commit:** 0848858
+**Generated:** 2026-09-24
+**Commit:** 467174d
 **Branch:** main
-**Version:** 0.19.1.0
+**Version:** 0.19.3.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.