@boyingliu01/xp-gate 0.19.2 → 0.20.0

package/plugins/dsh/scripts/prepack.cjs

@@ -2,12 +2,16 @@
 'use strict';
 
 /**
- * prepack.cjs — Bundle the 12 repo skills into @boyingliu01/dsh-plugin-xp-gate
+ * prepack.cjs — Bundle every repo skill into @boyingliu01/dsh-plugin-xp-gate
  * before npm publish.
  *
  * Skills live in repo-root `skills/`; `plugins/dsh/skills/` is gitignored and
  * populated here so the published tarball is self-contained (mirrors
  * plugins/opencode/scripts/prepack.cjs).
+ *
+ * The skill list is DISCOVERED, not hardcoded: a hardcoded list silently drifts
+ * from the repo (it previously shipped 12 of 13, omitting clipboard-vision, and
+ * would need editing on every new skill) — see #448.
  */
 
 const fs = require('fs');
@@ -16,24 +20,24 @@ const path = require('path');
 const PLUGIN_ROOT = path.resolve(__dirname, '..');
 const REPO_ROOT = path.resolve(PLUGIN_ROOT, '..', '..');
 
-const SKILLS = [
-  'admin-template-guidelines',
-  'batch-grill-me',
-  'delphi-review',
-  'domain-modeling',
-  'grilling',
-  'grill-with-docs',
-  'improve-codebase-architecture',
-  'ralph-loop',
-  'sprint-flow',
-  'test-driven-development',
-  'test-specification-alignment',
-  'to-issues',
-];
-
 const SKIP_DIRS = new Set(['node_modules', '.git', 'dist', 'coverage']);
 const SKIP_FILE_SUFFIXES = ['.lock', '.js.map'];
 
+/** A skill is a directory directly under skills/ that contains a SKILL.md. */
+function discoverSkills() {
+  const root = path.join(REPO_ROOT, 'skills');
+  if (!fs.existsSync(root)) {
+    console.error(`[prepack] ERROR: skills directory not found at ${root}`);
+    process.exit(1);
+  }
+  return fs
+    .readdirSync(root, { withFileTypes: true })
+    .filter((e) => e.isDirectory())
+    .map((e) => e.name)
+    .filter((name) => fs.existsSync(path.join(root, name, 'SKILL.md')))
+    .sort();
+}
+
 function shouldSkipFile(name) {
   return SKIP_FILE_SUFFIXES.some((suffix) => name.endsWith(suffix));
 }
@@ -63,16 +67,17 @@ function main() {
   fs.rmSync(skillsDest, { recursive: true, force: true });
   fs.mkdirSync(skillsDest, { recursive: true });
 
+  const skills = discoverSkills();
   let copied = 0;
-  for (const name of SKILLS) {
+  for (const name of skills) {
     if (copyDir(path.join(REPO_ROOT, 'skills', name), path.join(skillsDest, name))) {
       copied += 1;
       console.error(`[prepack] skills/${name}`);
     }
   }
 
-  if (copied !== SKILLS.length) {
-    console.error(`[prepack] ERROR: expected ${SKILLS.length} skills, copied ${copied}`);
+  if (copied !== skills.length) {
+    console.error(`[prepack] ERROR: expected ${skills.length} skills, copied ${copied}`);
     process.exit(1);
   }
 

package/plugins/dsh/setup-dsh.ps1

@@ -0,0 +1,160 @@
+# XP-Gate × DeepSeek Harness — 环境准备脚本
+#
+# 作用：把 XP-Gate 的 skill 与插件接入 DeepSeek Harness（DSH）。
+# 幂等：可重复运行。
+#
+# 用法：
+#   pwsh -File plugins/dsh/setup-dsh.ps1              # 全部
+#   pwsh -File plugins/dsh/setup-dsh.ps1 -SkillsOnly  # 只装 skill
+#   pwsh -File plugins/dsh/setup-dsh.ps1 -WhatIf      # 只预览
+
+[CmdletBinding(SupportsShouldProcess = $true)]
+param(
+  [switch]$SkillsOnly,
+  [switch]$SkipBuild
+)
+
+$ErrorActionPreference = 'Stop'
+
+$RepoRoot   = (Resolve-Path (Join-Path $PSScriptRoot '..\..')).Path
+$DshHome    = if ($env:DSH_HOME) { $env:DSH_HOME } else { Join-Path $HOME '.dsh' }
+$DshSkills  = Join-Path $DshHome 'skills'
+$RepSkills  = Join-Path $RepoRoot 'skills'
+$PluginDir  = Join-Path $RepoRoot 'plugins\dsh'
+$ProfileDir = Join-Path $DshHome 'profiles\web'
+
+function Write-Step($msg) { Write-Host "`n=== $msg ===" -ForegroundColor Cyan }
+function Write-Ok($msg)   { Write-Host "  [ok] $msg"   -ForegroundColor Green }
+function Write-Warn($msg) { Write-Host "  [warn] $msg" -ForegroundColor Yellow }
+function Write-Info($msg) { Write-Host "  $msg" }
+
+# ── 1. Skill 根：把仓库 skills/ 暴露给 DSH ────────────────────────────────
+# DSH 从 ~/.dsh/skills (rank 400) 发现 skill。当前 ~/.agents/skills 是指向
+# ~/.qoder/skills 的 junction，即 DSH 实际加载的是 Qoder 版 skill。
+# 这里用 junction 让 DSH 直接看到仓库版本，与 xp-gate 仓库保持单一真源。
+Write-Step "1. Skill 根 -> $DshSkills"
+
+if (-not (Test-Path $DshSkills)) {
+  if ($PSCmdlet.ShouldProcess($DshSkills, 'create directory')) {
+    New-Item -ItemType Directory -Force -Path $DshSkills | Out-Null
+    Write-Ok "创建 $DshSkills"
+  }
+} else {
+  Write-Ok "已存在 $DshSkills"
+}
+
+# 逐个 skill 建 junction（用 junction 而非复制，避免出现第二份真源）
+$skillNames = Get-ChildItem $RepSkills -Directory | Select-Object -ExpandProperty Name
+$linked = 0
+foreach ($s in $skillNames) {
+  $src  = Join-Path $RepSkills $s
+  $dest = Join-Path $DshSkills $s
+  if (-not (Test-Path (Join-Path $src 'SKILL.md'))) { continue }
+
+  $existing = Get-Item $dest -Force -ErrorAction SilentlyContinue
+  if ($existing) {
+    if ($existing.LinkType -eq 'Junction') {
+      $target = ($existing.Target | Select-Object -First 1)
+      if ($target -and (Resolve-Path $target -ErrorAction SilentlyContinue).Path -eq $src) {
+        Write-Info "$s (已链接)"
+        continue
+      }
+      Write-Warn "${s}: junction 指向别处 -> $target（保持不变，如需切换请手动删除）"
+      continue
+    }
+    Write-Warn "${s}: 已存在真实目录/文件（保持不变）"
+    continue
+  }
+
+  if ($PSCmdlet.ShouldProcess($dest, "junction -> $src")) {
+    New-Item -ItemType Junction -Path $dest -Target $src | Out-Null
+    Write-Ok "$s -> $src"
+    $linked++
+  }
+}
+Write-Host "  共链接 $linked 个 skill（仓库共 $($skillNames.Count) 个）"
+
+if ($SkillsOnly) {
+  Write-Step "完成（-SkillsOnly）"
+  exit 0
+}
+
+# ── 2. 编译 DSH 插件 ─────────────────────────────────────────────────────
+Write-Step "2. 编译 plugins/dsh"
+
+if ($SkipBuild) {
+  Write-Info "已跳过（-SkipBuild）"
+} else {
+  # 依赖：--ignore-scripts 绕过 esbuild 的 postinstall（在受限环境下会 EBUSY）
+  if (-not (Test-Path (Join-Path $PluginDir 'node_modules'))) {
+    if ($PSCmdlet.ShouldProcess($PluginDir, 'npm install --ignore-scripts')) {
+      Push-Location $PluginDir
+      try { npm install --ignore-scripts 2>&1 | Select-Object -Last 3 | ForEach-Object { Write-Info $_ } }
+      finally { Pop-Location }
+      Write-Ok "依赖已安装"
+    }
+  } else {
+    Write-Ok "依赖已存在"
+  }
+
+  if ($PSCmdlet.ShouldProcess($PluginDir, 'tsc build + skills prepack')) {
+    Push-Location $PluginDir
+    try {
+      npm run build 2>&1 | Select-Object -Last 2 | ForEach-Object { Write-Info $_ }
+      node scripts/prepack.cjs 2>&1 | Select-Object -Last 1 | ForEach-Object { Write-Info $_ }
+    } finally { Pop-Location }
+    if (Test-Path (Join-Path $PluginDir 'lib\index.js')) {
+      Write-Ok "lib/index.js 已生成"
+    } else {
+      Write-Warn "lib/index.js 缺失 —— 构建失败"
+    }
+    Write-Ok "skills/ 已就位"
+  }
+}
+
+# ── 3. 挂载插件到 profile（说明 + 可选自动执行） ──────────────────────────
+Write-Step "3. 挂载插件到 DSH profile"
+
+$dshBin = Join-Path $RepoRoot 'node_modules\.bin\dsh.cmd'
+$patch  = Join-Path $ProfileDir 'cordis.patch.yml'
+$already = (Test-Path $patch) -and ((Get-Content $patch -Raw) -match 'dsh-plugin-xp-gate')
+
+if ($already) {
+  Write-Ok "profile 已包含 dsh-plugin-xp-gate"
+} else {
+  Write-Info "尚未挂载。DSH 的 dsh CLI 位于 DSH 安装目录（本机不在 PATH 上）："
+  Write-Info "  C:\Users\think\.workbuddy\binaries\node\workspace\node_modules\.bin\dsh.cmd"
+  Write-Info ""
+  Write-Info "挂载方式（推荐用 GUI 的 Plugins 页面，或命令行）："
+  Write-Info "  & '<dsh.cmd>' plugin --profile web add <本仓库路径>\plugins\dsh"
+  Write-Info ""
+  Write-Info "注意：DSH 的 patch 是「整段替换 config」，插件通过 package.json 的"
+  Write-Info "      dsh.bundle.patch 声明自己，安装后会自动进入 bundle 层栈。"
+}
+
+# ── 4. Delphi 模型选择提醒 ───────────────────────────────────────────────
+Write-Step "4. Delphi 交叉评审前置条件"
+
+Write-Info "delphi-review 硬性要求：3 个专家使用 3 个 distinct trimmed model IDs。"
+Write-Info "DSH 的 subagent 默认【不支持】指定模型，必须先在 GUI 的 Plugins 页面启用："
+Write-Info ""
+Write-Info "  subagent model selection -> enabled = true"
+Write-Info "  allowedModels = ["
+Write-Info "    { provider: 'whalecloud', model: 'g-deepseek-v4-pro' },"
+Write-Info "    { provider: 'whalecloud', model: 'g-qwen3.8-max'  },"
+Write-Info "    { provider: 'whalecloud', model: 'g-glm-5.3'       }"
+Write-Info "  ]"
+Write-Info ""
+Write-Info "验证：启用后 subagent 工具会出现 provider/model 参数，"
+Write-Info "      并注册 list_subagent_models 工具。"
+Write-Info ""
+Write-Info "备选路线（无需改 DSH）：scripts/delphi-external-review.cjs 直连 OpenAI 兼容 API。"
+Write-Info "  但 .delphi-config.json 的 3 个 key 目前均未设置"
+Write-Info "  (DASHSCOPE_API_KEY / ZHIPU_API_KEY / DEEPSEEK_API_KEY)。"
+
+Write-Step "完成"
+Write-Host ""
+Write-Host "后续：" -ForegroundColor Cyan
+Write-Host "  - 确定性门禁（12 pre-commit + 8 pre-push）已全局生效，无需 DSH 配置"
+Write-Host "  - DSH 插件在 Windows 上需先修 POSIX/PowerShell 方言问题（见评估文档 §B2）"
+Write-Host "  - 评估报告: docs/plans/2026-09-30-dsh-integration-assessment.md"

package/plugins/dsh/skills/clipboard-vision/__tests__/clipboard-vision-distribution.test.cjs

@@ -19,7 +19,6 @@ describe('clipboard-vision distribution', () => {
     'scripts/build-plugin.mjs',
     'scripts/build-plugin.sh',
     'scripts/test-plugins.mjs',
-    'scripts/test-plugins.sh',
     'src/npm-package/scripts/sync-package-content.js',
     'plugins/opencode/scripts/prepack.cjs',
     'src/npm-package/plugins/opencode/scripts/prepack.cjs',

package/plugins/dsh/skills/delphi-review/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/DELPHI-REVIEW KNOWLEDGE BASE
 
-**Generated:** 2026-09-22
-**Commit:** 3d1d1bf
-**Branch:** main
-**Version:** 0.19.2.0
+**Generated:** 2026-10-07
+**Commit:** ff55f35b
+**Branch:** fix/batch-defects-20261007
+**Version:** 0.20.0.0
 
 ## OVERVIEW
 Delphi Consensus Review — multi-round anonymous expert review (≥90% threshold, exactly 3 experts with distinct executable model IDs). Supports design, requirements, and code-walkthrough modes.

package/plugins/dsh/skills/delphi-review/SKILL.md

@@ -249,7 +249,7 @@ tools_denied:
 
 1. **Step 0: Input Validation** — Check input contains reviewable content (design doc/code/spec/diff). Empty input → `[DelphiReview:BLOCKED]`.
 2. **Round 1: Anonymous Independent Review** — Invoke architecture, technical, and feasibility independently without exposing their opinions to one another. Every successful result must use `result_type=delphi_expert_result`.
-3. **Execution Verification** — Verify that all three results succeeded and that their `requested_model` values are three distinct trimmed IDs. A local fallback (`provider: local`) is not an executed expert and cannot satisfy this check; a local hosted endpoint configured as an ordinary callable provider can.
+3. **Execution Verification** — Verify that all three results succeeded and that their `requested_model` values are three distinct trimmed IDs, confirmed against the platform's execution record rather than expert self-report alone (OpenCode: the provider call log; Qoder: the `model` field of `model.request.started` events under `~/.qoder/logs/sessions/<project>/<sessionId>/segments/*.jsonl` — the `--model` argv in `~/.qoder/logs/runs/*/manifest.json` is the session model and proves nothing about subagents). A local fallback (`provider: local`) is not an executed expert and cannot satisfy this check; a local hosted endpoint configured as an ordinary callable provider can. Each expert record must also carry an explicit `channel` of either `external` or `local`; the value is a whitelist and a missing or unknown value fails the gate (it is never defaulted, since defaulting would let a forged record pass by simply omitting the field). Where the platform pins subagents to the session model (current Qoder Custom Agent dispatch, see the Qoder section below), the check cannot pass on built-in models at all and the external provider path is required.
 4. **Consensus Check** — Aggregate all three successful expert results. Consensus >=90% AND all APPROVED → complete. One expert result is never global approval.
 5. **Rounds 2-5: Exchange and Final Positions** — If needed, expose prior aggregate evidence, re-evaluate, and stop at the first approved consensus or after five rounds.
 6. **Failure Handling** — Any expert failure, missing result, duplicate model ID, or unverifiable execution blocks the review. Do not substitute a local fallback or silently reduce the expert count.
@@ -327,27 +327,111 @@ Each round MUST output a structured round marker:
 - ✅ 三个角色可以共享一个 provider 和 token 计划
 - ❌ `provider: local` 的特殊 fallback 不能计为一次成功执行
 
-#### Qoder 平台（推荐 — Custom Agent 模式）
+#### Qoder 平台（Custom Agent 模式 — 只能做到同模型三角色）
 
-Qoder 环境下使用 **Custom Agent** 机制，每个专家是一个独立的 custom agent，配置不同的 Qoder 内置模型：
+Qoder 的内置模型**没有本地推理端点**：推理请求由 Qoder 客户端经服务端代理发出，凭证是一次性 job token。所以不能照搬 OpenCode 的 `base_url + api_key` 直连方式；Qoder 侧内置模型的唯一入口是 **Custom Agent** —— 每个专家一个独立 agent 文件，frontmatter 用 `model` 字段声明模型。
 
-| 专家 | Agent 文件 | 模型 | Credits 费率 |
-|------|-----------|------|-------------|
-| Architecture (A) | `.qoder/agents/delphi-architecture.md` | Qwen3.7-Max | 0.5× |
-| Technical (B) | `.qoder/agents/delphi-technical.md` | GLM-5.2 | 0.6× |
-| Feasibility (C) | `.qoder/agents/delphi-feasibility.md` | DeepSeek-V4-Pro | 0.5× |
+**契约结论（先说结论）**：这条路径**不满足**"三个不同可执行模型 ID"契约。2026-09-23 做过一次排除混杂因素的复测：先把 `~/.qoder/agents/delphi-*.md` 三份文件绑成三个不同的 0.1× 内置模型（`qfmodel` / `dfmodel` / `gfmodel`；架构角与会话模型同名，所以真正有判别力的是技术角与可行性角），**再**新开会话——新 CLI 进程，`session.config.loaded` 记录 `model: "qfmodel"`，注册表加载的必然是已修好的绑定——然后只派发三个 subagent，各回一句话、不调工具。结果：三个独立的 `is_subagent: true` turn，`turn.started` / `model.request.started` / `model.response.completed` 三处的 `model` 全为会话模型 `qfmodel`，`dfmodel` / `gfmodel` 出现 0 次；同时三份回复分别命中架构 / 技术 / 可行性视角，说明角色提示词确实生效、agent 也确实被加载。即 `subagent_type` 派发路径采纳 Custom Agent 的提示词，但**丢弃**它的 `model` 绑定。
 
-**执行方式**：通过 Agent tool 并行启动 3 个 subagent（type=GeneralPurpose），每个 agent 使用自己配置的模型独立评审，主 orchestrator 收集结果后计算共识。
+因此 Qoder 原生模式只能作为**同模型、三角色（persona）的自查**，其共识比例不能当作多模型交叉验证的证据，也不应用作 Gate MW 的三模型凭据。需要契约合规的 Delphi 时，按上面的外部 provider 方式配置 `.delphi-config.json`（Qoder 与 OpenCode 同用，条件是模型确有可调端点）。
 
-**优势**：无需外部 API key，直接使用 Qoder Credits，模型由平台统一管理。
+| 角色 | Agent 文件 | 绑定的 modelId | 实际执行模型 |
+|------|-----------|---------------|-------------|
+| Architecture (A) | `.qoder/agents/delphi-architecture.md` | `qfmodel` | 会话模型 |
+| Technical (B) | `.qoder/agents/delphi-technical.md` | `gfmodel` | 会话模型 |
+| Feasibility (C) | `.qoder/agents/delphi-feasibility.md` | `dfmodel` | 会话模型 |
+
+**安装位置**（`xp-gate init` 自动部署，已存在的文件不覆盖）：
+- 项目级：`<project>/.qoder/agents/`（`xp-gate init`）
+- 用户级：`~/.qoder/agents/`（`xp-gate init --global`）
+
+**model 字段格式**：仍须写成 `"[DisplayName](modelId)"`。裸名字或已下线 ID 不会报错，会被平台静默忽略。`xp-gate init` 会审计已部署的 `delphi-*.md`，格式非法或 modelId 与本版本模板不一致时点名文件并给出"删除 → 重跑 `init` → 重启会话"提示；因为部署语义是"已存在不覆盖"，从 #417 之前的版本升级必须手工删旧文件再重跑 `init`。注意：修好绑定也只是让角色声明规范，并不改变上表的执行模型结论。
+
+**执行方式**：用 Agent tool 并行派发 3 个 subagent，`subagent_type` 分别取 `delphi-architecture`、`delphi-technical`、`delphi-feasibility`。**新建或修改 agent 文件后必须重开会话**——注册表只在会话启动时加载，否则报 `Unknown agent type`。
+
+**客观验证（不要采信专家自述）**：`~/.qoder/logs/runs/*/manifest.json` 的 argv `--model` 记录的是**会话/进程启动模型**，对 subagent 没有判别力（历史上所有运行都是同一个 ID）。真正的证据在按会话分段的日志里：
+
+```bash
+grep '"type":"model.request.started"' ~/.qoder/logs/sessions/<project>/<sessionId>/segments/*.jsonl \
+  | grep -oE '"model":"[^"]*"' | sort | uniq -c
+```
+
+同一文件里的 `turn.started`（`is_subagent:true`）与 `model.response.completed` 可交叉核对：前者证明三个角色各自起了独立 turn，后者带 `provider` 字段。两个坑：(1) 被验证的那个 modelId 必须**不等于会话模型**，否则该角色测不出判别力（会话模型通常是 `qfmodel`）；(2) 改完 agent 文件必须**换新会话**再测，注册表只在会话启动时加载，用旧会话的数据下结论会被旧绑定污染。专家自述的 `requested_model` 只是在复述自己 frontmatter 里的声明，不构成证据。
+
+**成本**：走这条路径不消耗外部 API key，只计 Qoder Credits。
 
 #### OpenCode 平台（External API 模式）
 
 OpenCode 环境下通过 `opencode.json` 的 agent 配置 + `.delphi-config.json` 调用外部 API：
 - **MUST 从 `opencode.json` 的 agent 配置中读取模型**
-- 通过 `scripts/delphi-external-review.cjs` 调用各 provider 的兼容 API
+- 通过 `scripts/delphi-external-review.cjs` 调用各 provider 的兼容 API（注意：该脚本目前在仓库根 `scripts/` 下，尚未随 skill 目录分发）
 - 需要用户自行配置 API key（环境变量注入）
 
+#### DeepSeek Harness 平台（`delphi-review` 工具 — 推荐）
+
+DSH 里**不要**用 `subagent` 工具派发三个专家。原因和 Qoder 同源：DSH 的 subagent
+继承宿主配置的**单一**模型（`SubagentModelSelectionConfig.enabled` 默认 `false`），
+三个"专家"会是同一模型的三个实例 —— 按本 skill 的规则必须 BLOCK。
+
+DSH 的正确入口是插件提供的 **`delphi-review` 工具**（`@boyingliu01/dsh-plugin-xp-gate`）：
+
+```
+delphi-review(
+  subject:   <待评审材料：diff / 设计 / 规格>,
+  addressed: <可选：上一轮之后改了什么，用于后续轮次>,
+  maxRounds: <可选：覆盖默认 5 轮>
+)
+```
+
+该工具**直连外部 OpenAI 兼容网关**，每个席位绑定一个不同模型，因此不依赖宿主配置即可
+满足不变量。它复用**同一份** `.delphi-config.json`，无需额外配置。
+
+**代码强制的不变量**（不是文档约定，违反即报错）：
+
+| 不变量 | 违反时 |
+|---|---|
+| 恰好 3 位专家 | `DelphiConfigError` |
+| 3 个 `requested_model` 去空白后两两不同 | `DelphiConfigError` |
+| 模型不得为未展开的 `${...}` 占位符 | `DelphiConfigError`（在**任何网络调用之前**） |
+| 缺密钥 / 缺 provider / 专家跨网关 | `DelphiSetupError`，报变量名而非回显配置 |
+| 报告缺 `### VERDICT` 段 | 记为 `INVALID_NO_VERDICT`，**不计入共识** |
+| 退出码 0 但内容为空 | 记为 ERROR（推理模型可能把预算全烧在隐藏 token 上） |
+
+**轮次语义与本 skill 一致**：Round 1 匿名且并发；Round 2+ 回传**汇总票型**与"已修改项"，
+个体报告始终匿名。达到阈值即停，否则到 `max_review_rounds` 为止并如实返回 `NO CONSENSUS`。
+
+**推理模型注意**：`g-glm-5.3-flash` 这类模型会先产出隐藏推理 token。
+实测 `max_tokens=4000` 时 `finish_reason=length` 且 **content 为空**；
+席位需独立预算（该席位配置为 32000）。工具把"空内容"记为 ERROR 而非空评审。
+
+> 备选：若希望 DSH **原生** `subagent` 也能选模型，需同时满足
+> (1) `dsh-tool-subagent` 的 `modelSelectionSettings: true`（仅能力开关），
+> (2) 宿主设置 `SubagentModelSelectionConfig.enabled = true` 且 `allowedModels` ≥3 个不同模型。
+> 该路线依赖宿主配置，CI / 一次性会话不可靠，故不作为默认路径。
+#### WorkBuddy 平台（Expert 团队模式）
+
+WorkBuddy 侧以 Team 型专家团（示例：`delphi-review-team`，安装在 `~/.workbuddy/plugins/marketplaces/my-experts/plugins/`，创建方式见 [docs/platform-workbuddy.md](../../docs/platform-workbuddy.md)）承载评审，触发本技能后按此路由执行：
+
+| 角色 | Agent ID | 绑定模型 | 倍率 |
+|------|----------|---------|------|
+| 主理人（衡定一，会话自身） | delphi-review-team-team-lead | 会话模型，固定用 `local-deepseek-v4-flash` | 零 credits |
+| Architecture (A) | delphi-arch-reviewer | `deepseek-v4.1-flash` | x0.11 |
+| Technical (B) | delphi-tech-reviewer | `glm-5.3-flash` | x0.06 |
+| Feasibility (C) | delphi-feasibility-reviewer | `hy3` | x0.00（免费） |
+
+**执行方式**：
+- 主理人开场自检：会话模型不是 `local-deepseek-v4-flash` 时，先提醒用户切换再开始。
+- 已启用专家团 → 按其团队机制 spawn 3 位成员；未启用 → 用 `Agent` 工具同一消息**并行** spawn 3 个 `general-purpose` 子代理，prompt = 对应专家 MD 全文人设（读专家团 `agents/` 目录）+ 匿名评审模板 + 待评审材料，`model` 参数按上表传。
+- Round 1 三个子代理互不见对方输出（匿名铁律不变）。
+
+**执行验证（适配本平台，2026-09-29 校准）**：
+- 参数层路由 ✅ 已实测：`Agent` 工具 `model` 参数传 `deepseek-v4.1-flash` / `glm-5.3-flash` / `hy3` 三个 ID 均被接受，3 个 general-purpose 子代理并行执行成功。
+- 执行层证据 ⚠️ 平台暂缺：WorkBuddy 审计日志（`~/.workbuddy/audit-log/`）只记 command-safety 事件，无 per-request 模型路由记录，无法像 Qoder/OpenCode 那样从日志取证 distinct models。
+- **WorkBuddy 过渡验证标准**：参数级校准（model ID 被平台接受且子代理成功执行）+ 专家 `requested_model` 自述如实记录；报告中必须注明「执行层验证待平台日志支持」。若 `model` 参数被拒绝（报错/回落会话模型），按本技能 Failure Handling 处理，不得静默降级冒充三模型共识。
+- 契约合规兜底：需要严格证据时，走外部 provider 路径（`.delphi-config.json` + 兼容 API，如 whalecloud 网关 3 个模型 ID）。
+
+**成本**：3 专家合计 x0.17/轮；主理人选 local 会话模型则零 credits。
+
 ### 共识阈值
 
 | 阈值 | 说明 |
@@ -454,9 +538,9 @@ Every Delphi mode MUST use the full JSON schema below. Architecture, technical,
   "context_file_used": "CONTEXT.md",
   "round": 1,
   "expert_verdicts": [
-    { "role": "architecture", "verdict": "APPROVED", "confidence": 9, "result_type": "delphi_expert_result", "requested_model": "provider/model-a" },
-    { "role": "technical", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-b" },
-    { "role": "feasibility", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-c" }
+    { "role": "architecture", "verdict": "APPROVED", "confidence": 9, "result_type": "delphi_expert_result", "requested_model": "provider/model-a", "resolved_model": "provider/model-a", "channel": "external" },
+    { "role": "technical", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-b", "resolved_model": "provider/model-b", "channel": "external" },
+    { "role": "feasibility", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-c", "resolved_model": "provider/model-c", "channel": "external" }
   ],
   "requirements_statement": "<short summary of what was reviewed>",
   "gaps_found": [],

package/plugins/dsh/skills/delphi-review/references/code-walkthrough.md

@@ -255,9 +255,15 @@ pre-push hook
 |------|------|------|
 | 单次走查成本 | ~$0.03 | 正常执行 |
 | 变更规模 | 无硬性文件数或行数上限 | 大型变更必须完整评审或由用户选择拆分 |
+| 单席位 prompt 体积 | 默认 40000 字节（`max_prompt_bytes` 可按席位覆盖） | runner 发送前拒绝，报错里给出处置办法 |
 
 大型变更没有自动跳过或绕过路径。用户可以选择完整评审，或在评审前主动拆分变更；每个变更仍须通过完整的走查和证据验证。
 
+**prompt 预算是硬约束，不是建议**：实测 `g-glm-5.3-flash` 在 ~40KB 正常应答（225s）、~50KB 直接崩溃
+（305s，`0xC0000409` + libuv `UV_HANDLE_CLOSING`，表现为 "Network error."）——一个席位崩溃就会让整个共识无法完成。
+构造输入时按重要性排序、给每个席位独立预算、并在报告里显式列出因体积省略的文件；
+截断到「核心 hunk 看不见」比超限更糟：席位会花整轮报告「无法审计」，而这是评审者的真实缺陷而非代码缺陷。
+
 ---
 
 ## Agent 可用性检查 (MANDATORY)
@@ -356,9 +362,9 @@ IF 任何检查失败:
   "verdict": "APPROVED",
   "confidence": 9,
   "experts": [
-    { "id": "Expert A", "role": "architecture", "verdict": "APPROVED", "confidence": 9, "result_type": "delphi_expert_result", "requested_model": "provider/model-a", "resolved_model": "provider/model-a" },
-    { "id": "Expert B", "role": "technical", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-b", "resolved_model": null },
-    { "id": "Expert C", "role": "feasibility", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-c", "resolved_model": "provider/model-c" }
+    { "id": "Expert A", "role": "architecture", "verdict": "APPROVED", "confidence": 9, "result_type": "delphi_expert_result", "requested_model": "provider/model-a", "resolved_model": "provider/model-a", "channel": "external" },
+    { "id": "Expert B", "role": "technical", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-b", "resolved_model": "provider/model-b", "channel": "external" },
+    { "id": "Expert C", "role": "feasibility", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-c", "resolved_model": "provider/model-c", "channel": "external" }
   ],
   "issues": [],
   "consensus_ratio": 1.0,
@@ -399,6 +405,33 @@ Hook 验证以下条件（全部满足才允许 push）：
 5. timestamp 未过期
 6. expires 必须是 timestamp 之后恰好 1 小时
 
+### experts[] 必填字段与 #423 的迁移说明
+
+`validate-code-walkthrough.cjs` 对每个 expert 对象强制要求：
+
+| 字段 | 约束 |
+|------|------|
+| `result_type` | 必须等于 `"delphi_expert_result"` |
+| `role` | 非空，三个席位 role 互异 |
+| `requested_model` | 非空；比较前只做 trim，**区分大小写**（规范原文是 "distinct trimmed requested model IDs"，见 AGENTS.md） |
+| `resolved_model` | 非空；比较前 trim + 转小写，三者互异 |
+| `channel` | 必须严格属于 `["external", "local"]`；`provider: local` 的 fallback 记录不能计为成功执行 |
+
+缺字段或取值不在白名单 → Gate MW **FAIL**（不是 SKIP）。
+
+**升级后旧证据怎么处置**：唯一正确做法是在当前 HEAD 重跑一次评审、由 runner 重新生成证据文件。
+不要手工给老文件补 `channel` —— 那等于伪造执行证据，而 `channel` 存在的目的正是让证据可追溯到一次真实调用。
+证据本来就与 commit 绑定（`commit` 必须等于 HEAD，有效期 1 小时），跨 commit 复用从来不是受支持的路径。
+
+**回滚语义**：validator 与证据生产者（`scripts/delphi-external-review.cjs`）必须成对回滚。
+
+- 旧 validator 读新证据：安全，多余字段被忽略。
+- 新 validator 读旧证据：必然 FAIL（缺 `channel`）。这是设计意图——宁可在发布关口停下，
+  也不放行一份无法证明模型来源的证据；把「三个不同模型真的跑过」降级为可选项，等于让门禁只剩形式。
+- 临时降级开关：**没有**。既没有 `XP_GATE_SKIP_MW` 之类的环境变量，也不允许 `--no-verify`
+  （见 `githooks/QUALITY-GATES-CODE-OF-CONDUCT.md`）。如果评审确实无法完成，处理方式是缩小
+  `--range` 或按席位调整 prompt 预算重跑，而不是放行。
+
 ---
 
 ## 与现有系统集成

package/plugins/dsh/skills/delphi-review/references/requirements.md

@@ -190,9 +190,9 @@ Round 2: delphi-review --mode requirements（带 Round 1 gaps 上下文）
   "context_file_used": null,
   "round": 1,
    "expert_verdicts": [
-     { "role": "architecture", "verdict": "APPROVED", "confidence": 9, "result_type": "delphi_expert_result", "requested_model": "bailian-tp/qwen-plus" },
-     { "role": "technical", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "bailian-tp/deepseek-v3" },
-     { "role": "feasibility", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "bailian-tp/glm-4.5" }
+     { "role": "architecture", "verdict": "APPROVED", "confidence": 9, "result_type": "delphi_expert_result", "requested_model": "bailian-tp/qwen-plus", "resolved_model": "qwen-plus", "channel": "external" },
+     { "role": "technical", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "bailian-tp/deepseek-v3", "resolved_model": "deepseek-v3", "channel": "external" },
+     { "role": "feasibility", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "bailian-tp/glm-4.5", "resolved_model": "glm-4.5", "channel": "external" }
    ],
   "requirements_statement": "实现用户注册流程，支持邮箱验证和密码重置",
   "gaps_found": [],
@@ -214,9 +214,9 @@ Round 2: delphi-review --mode requirements（带 Round 1 gaps 上下文）
   "context_file_used": null,
   "round": 1,
   "expert_verdicts": [
-    { "role": "architecture", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-a" },
-    { "role": "technical", "verdict": "GAPS_FOUND", "confidence": 7, "result_type": "delphi_expert_result", "requested_model": "provider/model-b" },
-    { "role": "feasibility", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-c" }
+    { "role": "architecture", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-a", "resolved_model": "provider/model-a", "channel": "external" },
+    { "role": "technical", "verdict": "GAPS_FOUND", "confidence": 7, "result_type": "delphi_expert_result", "requested_model": "provider/model-b", "resolved_model": "provider/model-b", "channel": "external" },
+    { "role": "feasibility", "verdict": "APPROVED", "confidence": 8, "result_type": "delphi_expert_result", "requested_model": "provider/model-c", "resolved_model": "provider/model-c", "channel": "external" }
   ],
   "requirements_statement": "实现用户注册流程，支持邮箱验证和密码重置",
   "gaps_found": [

package/plugins/dsh/skills/sprint-flow/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/SPRINT-FLOW KNOWLEDGE BASE
 
-**Generated:** 2026-09-22
-**Commit:** 3d1d1bf
-**Branch:** main
-**Version:** 0.19.2.0
+**Generated:** 2026-10-07
+**Commit:** ff55f35b
+**Branch:** fix/batch-defects-20261007
+**Version:** 0.20.0.0
 
 ## OVERVIEW
 **6-phase** development pipeline (v2.0 compact redesign, Issue #290): PREP → DESIGN → BUILD → VERIFY → SHIP → CLOSE. Phase 3/6 BUILD default build mode is **ralph-loop** (REQ-level iteration, 40-67% token savings vs parallel). HARD-GATE between DESIGN (2/6) and BUILD (3/6): design must pass Delphi review (≥90% consensus) before any coding.

package/plugins/dsh/skills/sprint-flow/references/phase-2-design.md

@@ -89,9 +89,9 @@ grill 访谈达成共享理解后（或 CONTEXT.md 快速路径下读取已有
   "head_commit": "<git rev-parse HEAD>",
   "consensus_ratio": 1.0,
   "expert_verdicts": [
-    { "role": "architecture", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-a" },
-    { "role": "technical", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-b" },
-    { "role": "feasibility", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-c" }
+    { "role": "architecture", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-a", "resolved_model": "provider/model-a", "channel": "external" },
+    { "role": "technical", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-b", "resolved_model": "provider/model-b", "channel": "external" },
+    { "role": "feasibility", "verdict": "APPROVED", "result_type": "delphi_expert_result", "requested_model": "provider/model-c", "resolved_model": "provider/model-c", "channel": "external" }
   ],
   "rounds": 1,
   "gaps": []

package/plugins/dsh/skills/test-specification-alignment/AGENTS.md

@@ -1,9 +1,9 @@
 # SKILLS/TEST-SPECIFICATION-ALIGNMENT KNOWLEDGE BASE
 
-**Generated:** 2026-09-22
-**Commit:** 3d1d1bf
-**Branch:** main
-**Version:** 0.19.2.0
+**Generated:** 2026-10-07
+**Commit:** ff55f35b
+**Branch:** fix/batch-defects-20261007
+**Version:** 0.20.0.0
 
 ## OVERVIEW
 Test-Specification Alignment Engine — two-stage validation ensuring tests accurately reflect requirements and design specs.

package/plugins/dsh/src/command.test.ts

@@ -1,4 +1,5 @@
 import { describe, it, expect } from "vitest"
+import { resolve } from "node:path"
 import {
   FALLBACK_MESSAGE,
   GATE_WHITELIST,
@@ -89,7 +90,13 @@ describe("resolveTarget", () => {
   })
 
   it("resolves relative paths against the session cwd", () => {
-    expect(resolveTarget("src", "/workspace")).toBe("/workspace/src")
+    // path.resolve is platform-native, so assert against the same call rather
+    // than a POSIX literal (which fails on Windows by construction).
+    expect(resolveTarget("src", "/workspace")).toBe(resolve("/workspace", "src"))
+  })
+
+  it("resolves a Windows-relative path against a Windows cwd", () => {
+    expect(resolveTarget("src", "C:\\workspace")).toBe(resolve("C:\\workspace", "src"))
   })
 })
 
@@ -99,4 +106,61 @@ describe("GATE_WHITELIST", () => {
     expect(GATE_WHITELIST).toContain("arch")
     expect(GATE_WHITELIST).toContain("secrets")
   })
-})
+})
+
+/**
+ * @test REQ-DSH-010
+ * @intent 验证 PowerShell 方言下生成的命令使用 Get-Command/Write-Output 而非 POSIX 的
+ *         command -v/printf，避免 DSH 在 win32（pwsh executor）下因语法错误导致三个工具全部不可用
+ * @covers AC-DSH-010-01
+ */
+describe("PowerShell dialect (regression: DSH win32 uses the pwsh executor)", () => {
+  it("uses Get-Command instead of command -v", () => {
+    const cmd = buildCommand({ subcommand: "principles", target: "src/x.ts", dialect: "powershell" })
+    expect(cmd).toContain("Get-Command xp-gate -ErrorAction SilentlyContinue")
+    expect(cmd).not.toContain("command -v")
+  })
+
+  it("uses Write-Output instead of printf for the fallback hint", () => {
+    const cmd = buildCommand({ subcommand: "check", target: "src", dialect: "powershell" })
+    expect(cmd).toContain("Write-Output")
+    expect(cmd).not.toContain("printf")
+    expect(cmd).toContain(FALLBACK_MESSAGE)
+  })
+
+  it("never emits POSIX shell syntax that PowerShell cannot parse", () => {
+    const cmd = buildCommand({ subcommand: "check", target: "src", gates: ["principles"], dialect: "powershell" })
+    // `/dev/null` and `; then … ; fi` are the constructs that produced
+    // "if语句中的'if'后缺少\"(\"" under the pwsh executor.
+    expect(cmd).not.toContain("/dev/null")
+    expect(cmd).not.toContain("then ")
+    expect(cmd).not.toContain("; fi")
+    expect(cmd).not.toContain("2>&1")
+  })
+
+  it("preserves the xp-gate invocation and gate subset", () => {
+    const cmd = buildCommand({
+      subcommand: "check",
+      target: "src",
+      gates: ["principles", "arch"],
+      dialect: "powershell",
+    })
+    expect(cmd).toContain("xp-gate check 'src' --gates 'principles,arch'")
+  })
+
+  it("still drops non-whitelisted gates", () => {
+    const cmd = buildCommand({
+      subcommand: "check",
+      target: "src",
+      gates: ["principles", "bogus$(id)"],
+      dialect: "powershell",
+    })
+    expect(cmd).toContain("--gates 'principles'")
+    expect(cmd).not.toContain("bogus")
+  })
+
+  it("defaults to the POSIX dialect when none is given (backwards compatible)", () => {
+    const cmd = buildCommand({ subcommand: "arch" })
+    expect(cmd).toContain("command -v xp-gate")
+  })
+})