opencode-skills-collection 3.1.17 → 3.1.18

package/bundled-skills/routerbase-model-gateway/SKILL.md

@@ -0,0 +1,175 @@
+---
+name: routerbase-model-gateway
+description: "Integrate RouterBase as an OpenAI-compatible model gateway for routing GPT, Claude, Gemini, media, audio, and embedding requests."
+category: ai-ml
+risk: safe
+source: community
+source_repo: zenlee123/routerbase-agent-skills
+source_type: community
+date_added: "2026-07-07"
+author: zenlee123
+tags: [routerbase, llm-routing, openai-compatible, model-gateway]
+tools: [claude, cursor, gemini, codex, antigravity]
+license: "MIT-0"
+license_source: "https://github.com/zenlee123/routerbase-agent-skills/blob/main/LICENSE"
+---
+
+# RouterBase Model Gateway
+
+## Overview
+
+Use [routerbase](https://routerbase.com/) when an application needs one OpenAI-compatible API surface for model routing across GPT, Claude, Gemini, image, video, audio, and embedding workloads. This skill helps agents migrate existing OpenAI SDK calls, document model-selection tradeoffs, and produce safe implementation snippets without exposing credentials.
+
+RouterBase model availability, pricing, and provider capabilities can change, so treat examples as starting points and verify current catalog data before production recommendations.
+
+## When to Use This Skill
+
+- Use when migrating an OpenAI-compatible client to RouterBase by changing the base URL and model ID.
+- Use when selecting primary and fallback models for chat, reasoning, vision, media generation, audio, or embeddings.
+- Use when debugging RouterBase request setup, headers, environment variables, streaming, tool calls, JSON mode, or multimodal payloads.
+- Use when documenting an internal model-routing plan that balances cost, latency, quality, and provider redundancy.
+
+## How It Works
+
+### Step 1: Classify the Workload
+
+Identify the modality and hard constraints before choosing a model:
+
+- Modality: chat, vision, image, video, audio, embeddings, or mixed.
+- Quality target: draft, production, high-stakes review, or automated background task.
+- Runtime constraints: latency budget, context length, streaming, JSON mode, tool calling, and retry tolerance.
+- Business constraints: price ceiling, provider preference, regional requirements, and fallback rules.
+
+### Step 2: Configure the OpenAI-Compatible Client
+
+Keep the RouterBase API key server-side in an environment variable such as `ROUTERBASE_API_KEY`. Do not put keys in browser, mobile, or public repository code.
+
+```python
+import os
+from openai import OpenAI
+
+client = OpenAI(
+    api_key=os.environ["ROUTERBASE_API_KEY"],
+    base_url="https://routerbase.com/v1",
+)
+
+response = client.chat.completions.create(
+    model="google/gemini-2.5-flash",
+    messages=[{"role": "user", "content": "Write one sentence about model routing."}],
+)
+
+print(response.choices[0].message.content)
+```
+
+```js
+import OpenAI from "openai";
+
+const client = new OpenAI({
+  apiKey: process.env.ROUTERBASE_API_KEY,
+  baseURL: "https://routerbase.com/v1",
+});
+
+const response = await client.chat.completions.create({
+  model: "google/gemini-2.5-flash",
+  messages: [{ role: "user", content: "Write one sentence about model routing." }],
+});
+
+console.log(response.choices[0].message.content);
+```
+
+### Step 3: Validate Model IDs and Capabilities
+
+When credentials and network access are available, check the live catalog before locking in a model ID or price-sensitive recommendation.
+
+```bash
+curl "https://routerbase.com/api/v1/models?task=chat" \
+  -H "Authorization: Bearer $ROUTERBASE_API_KEY"
+```
+
+Confirm feature assumptions with a small request fixture:
+
+- Streaming works when `stream: true` is set.
+- Tool calling accepts the exact schema used by the app.
+- JSON mode returns parseable output and still passes application validation.
+- Vision or media payloads use the expected OpenAI-compatible content shape.
+
+### Step 4: Design Fallbacks Conservatively
+
+Use explicit application-level fallbacks unless the user's RouterBase account already has a smart-routing policy configured.
+
+```js
+const modelPlan = [
+  "anthropic/claude-sonnet-4-6",
+  "google/gemini-2.5-flash",
+];
+
+for (const model of modelPlan) {
+  try {
+    return await client.chat.completions.create({ model, messages });
+  } catch (error) {
+    if (!isRetryableRouterBaseError(error)) throw error;
+  }
+}
+```
+
+Treat transient network errors, timeouts, rate limits, and server errors as candidates for retry. Do not blindly retry authentication failures, invalid model IDs, validation errors, or policy refusals.
+
+## Examples
+
+### Migration Checklist
+
+When converting an existing OpenAI SDK integration:
+
+1. Change the base URL to `https://routerbase.com/v1`.
+2. Read `ROUTERBASE_API_KEY` from server-side environment configuration.
+3. Replace the model name with a RouterBase model ID that matches the task.
+4. Preserve standard OpenAI request fields unless RouterBase documentation says otherwise.
+5. Run one minimal smoke test before shipping.
+
+### Routing Plan Format
+
+Use this table when recommending a model strategy:
+
+| Use case | Primary model | Fallback model | Reason | Validation |
+| --- | --- | --- | --- | --- |
+| Support chat | Provider/model ID | Provider/model ID | Low latency and acceptable quality | Streaming smoke test |
+| Deep analysis | Provider/model ID | Provider/model ID | Strong reasoning, higher cost acceptable | Eval prompt plus human review |
+
+## Best Practices
+
+- Do keep RouterBase keys in server-side environment variables or secret managers.
+- Do verify current model availability and pricing before production decisions.
+- Do document primary and fallback model assumptions in the code or runbook.
+- Do validate structured outputs with application schemas.
+- Do not paste, log, commit, or screenshot real API keys.
+- Do not hard-code model pricing or provider availability as permanent facts.
+- Do not expose RouterBase keys in client-side JavaScript, mobile apps, or public repos.
+
+## Limitations
+
+- This skill does not replace RouterBase account configuration, live model catalog checks, or production observability.
+- Some model features are provider-specific and must be tested with the exact selected model.
+- High-stakes outputs still require human review and domain-specific evaluation.
+
+## Security & Safety Notes
+
+- Treat RouterBase credentials as production secrets.
+- Mask tokens in logs and support tickets.
+- Ask for explicit user approval before running live API calls that consume credits.
+- Use placeholders such as environment variables in examples; never invent or include realistic secret strings.
+
+## Common Pitfalls
+
+- **Problem:** The code works with one provider but fails after switching models.
+  **Solution:** Re-test tool calling, JSON mode, streaming, and multimodal payloads for each selected model.
+
+- **Problem:** Fallback logic retries non-retryable errors.
+  **Solution:** Retry only transient failures and fail fast on authentication, validation, and invalid model errors.
+
+- **Problem:** A model recommendation becomes stale.
+  **Solution:** Re-check the RouterBase catalog and pricing page before finalizing the plan.
+
+## Related Skills
+
+- `@api-analyzer` - Use when the task is only to validate one API request shape.
+- `@langfuse` - Use when the task needs production LLM observability, tracing, and evaluation.

package/bundled-skills/tree-ring-memory/SKILL.md

@@ -0,0 +1,218 @@
+---
+name: tree-ring-memory
+description: "Use Tree Ring Memory for local-first AI-agent memory lifecycle work: recall, evidence, audit, forgetting, and consolidation without transcript dumping."
+category: development
+risk: safe
+source: community
+source_repo: TerminallyLazy/Tree-Ring-Memory
+source_type: community
+date_added: "2026-07-08"
+author: TerminallyLazy
+tags: [agent-memory, local-first, recall, privacy, codex, sqlite, cli]
+tools: [claude, codex, cursor, gemini, antigravity, opencode]
+license: "Apache-2.0"
+license_source: "https://github.com/TerminallyLazy/Tree-Ring-Memory/blob/main/LICENSE"
+---
+
+# Tree Ring Memory
+
+## Overview
+
+Tree Ring Memory is a framework-agnostic, local-first memory lifecycle layer for
+AI agents. Use this skill when an agent should recall, preserve, audit, or
+forget durable project memory without treating raw conversation transcripts as
+memory.
+
+The public runtime is a Rust CLI/TUI with local SQLite/FTS storage, scoped
+recall, evidence records, audit, deterministic consolidation, maintenance,
+DOX/Revolve source adapters, framework discovery, redaction, and explicit
+forgetting.
+
+## When to Use This Skill
+
+- Use before resuming a project where prior decisions, warnings, preferences,
+  or failed approaches may matter.
+- Use before changing architecture, storage, security, privacy, release, or
+  agent-memory behavior.
+- Use when the user asks to remember, recall, audit, redact, forget, or
+  consolidate agent memory.
+- Use after tests, reviews, incidents, or production behavior validate a lesson
+  future agents should preserve.
+- Use when a project contains `.tree-ring/SKILL.md`, `.tree-ring/CLI.md`, or
+  other Tree Ring bridge files.
+
+## How It Works
+
+### Step 1: Discover Local Guidance
+
+Check whether the current project already has Tree Ring guidance:
+
+```bash
+test -f .tree-ring/SKILL.md && sed -n '1,220p' .tree-ring/SKILL.md
+test -f .tree-ring/CLI.md && sed -n '1,220p' .tree-ring/CLI.md
+```
+
+Treat project-local `.tree-ring` files as more authoritative than generic
+examples in this skill. If the CLI is installed, inspect the current command
+surface before assuming flags:
+
+```bash
+tree-ring --help
+tree-ring recall --help
+tree-ring remember --help
+tree-ring evidence --help
+tree-ring audit --help
+tree-ring forget --help
+```
+
+If Tree Ring is not installed, do not run remote installer commands
+automatically. Point the user to the project repository or install docs and ask
+whether they want installation help.
+
+## Step 2: Recall Before Risky Work
+
+Use narrow, project-scoped recall first:
+
+```bash
+tree-ring recall "release behavior" --scope project
+tree-ring recall "sqlite migration" --scope project
+tree-ring recall "user preference" --scope global
+```
+
+Use recalled memory as context, not authority. Verify it against current source
+files, tests, docs, issues, pull requests, logs, and runtime state before making
+changes.
+
+## Step 3: Write Only Durable Memory
+
+Write concise memory only when it is likely to help future agents:
+
+```bash
+tree-ring remember "Run project-scoped recall before release changes." --event-type lesson --scope project
+```
+
+Prefer specific event types when supported locally:
+
+- `decision`
+- `lesson`
+- `warning`
+- `correction`
+- `user_preference`
+- `tool_result`
+- `summary`
+- `hypothesis`
+
+Store the durable lesson, decision, warning, or follow-up. Do not store the
+full conversation.
+
+## Step 4: Record Evidence for Evaluated Outcomes
+
+Use evidence records for test runs, incidents, reviewed changes, or other
+evaluated outcomes:
+
+```bash
+tree-ring evidence \
+  --outcome observed \
+  --summary "Installer smoke test passed in an isolated HOME." \
+  --evidence-ref "ci/install-smoke/2026-07-08"
+```
+
+Outcome guidance:
+
+- `promoted`: durable truth backed by strong evidence
+- `rejected`: failed or rolled-back approach worth keeping visible
+- `deferred`: unresolved idea or future option
+- `observed`: normal evaluated result
+
+Do not promote weak, stale, or unreviewed claims to durable truth.
+
+## Step 5: Use Source Adapters Carefully
+
+When a repo has structured source records, run dry runs first:
+
+```bash
+tree-ring dox sync --source-root . --dry-run
+tree-ring revolve sync --source-root revolve --dry-run
+tree-ring integrations scan --source-root .
+```
+
+Only write adapter summaries when they are concise, source-linked, useful, and
+privacy-safe. Imported memory does not replace the underlying `AGENTS.md`,
+Revolve record, test, pull request, issue, or documentation.
+
+## Ring Selection
+
+Use the smallest durable ring that fits:
+
+- `cambium`: active or recent task context
+- `outer`: recent decisions and task lessons
+- `inner`: older compressed project knowledge
+- `heartwood`: durable high-confidence truths
+- `scar`: failures, regressions, rejected approaches, warnings
+- `seed`: unresolved ideas, hypotheses, follow-ups
+
+Prefer `outer` or `seed` unless the user confirms durability or the evidence is
+strong.
+
+## Best Practices
+
+- Recall before risky or repeat work.
+- Keep project memory project-scoped unless it is a durable cross-project user
+  preference.
+- Attach source references such as file paths, issue ids, PR ids, evaluation
+  runs, or docs paths.
+- Re-check current source files and runtime state before acting on recalled
+  memory.
+- Ask at closeout what future agents should remember, avoid, or revisit.
+- Use redaction, deletion, or supersession when memory is wrong, stale,
+  sensitive, or replaced by a newer decision.
+
+## Security & Safety Notes
+
+- Never use Tree Ring Memory as a hidden recorder.
+- Do not store secrets, credentials, tokens, private keys, recovery codes, raw
+  chain-of-thought, or temporary scratchpad content.
+- Do not store sensitive personal data unless the user explicitly asks and the
+  retention boundary is safe.
+- Do not store copyrighted source text beyond short allowed excerpts.
+- Do not run installer, network, destructive, or mutation commands without
+  explicit user approval and a clear target environment.
+- Treat all examples as commands to adapt after checking local `--help`, not as
+  guaranteed command surfaces.
+
+## Limitations
+
+- Tree Ring Memory is not a replacement for source control, issue trackers,
+  documentation, tests, logs, or live runtime verification.
+- Recalled memory can be stale or wrong. Always verify important claims against
+  the current project before using them to make changes.
+- The CLI surface can change across releases. Prefer local `.tree-ring`
+  guidance and `tree-ring --help` over copied command examples.
+- It should not be used for secret storage, comprehensive transcript archives,
+  compliance retention, or unreviewed collection of sensitive personal data.
+- Cross-agent interoperability depends on each tool's ability to call the local
+  CLI or read project-local guidance files.
+
+## Common Pitfalls
+
+- **Problem:** Recalled memory conflicts with current source.
+  **Solution:** Treat source files, tests, docs, and runtime evidence as
+  authoritative; supersede or forget stale memory.
+
+- **Problem:** Memory starts becoming transcript storage.
+  **Solution:** Store only durable decisions, warnings, preferences, outcomes,
+  and follow-ups.
+
+- **Problem:** A lesson is useful but contains sensitive detail.
+  **Solution:** Store a redacted summary or do not store it.
+
+## Related Skills
+
+- `@agent-memory-systems` - Use for broad agent-memory architecture choices.
+- `@agent-memory` - Use for the listed hybrid memory MCP system.
+- `@planning-with-files` - Use when simple persistent files are enough.
+
+## Additional Resources
+
+- Tree Ring Memory repository: <https://github.com/TerminallyLazy/Tree-Ring-Memory>
+- Codex plugin wrapper: <https://github.com/TerminallyLazy/tree-ring-memory-codex-plugin>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-skills-collection",
-  "version": "3.1.17",
+  "version": "3.1.18",
   "description": "OpenCode CLI plugin that automatically downloads and keeps skills up to date.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/skills_index.json

@@ -10138,6 +10138,28 @@
       ]
     }
   },
+  {
+    "id": "codex-profiles",
+    "path": "skills/codex-profiles",
+    "category": "productivity",
+    "name": "codex-profiles",
+    "description": "Use codex-profiles to run Codex CLI or Codex Desktop with isolated CODEX_HOME profiles for separate accounts, projects, and local state.",
+    "risk": "critical",
+    "source": "community",
+    "date_added": "2026-07-08",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "codex-review",
     "path": "skills/codex-review",
@@ -18768,6 +18790,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "go-in-depth",
+    "path": "skills/go-in-depth",
+    "category": "development",
+    "name": "go-in-depth",
+    "description": "Go in depth harness — fan-out web searches, fetch sources, adversarially verify claims, synthesize a cited report.",
+    "risk": "safe",
+    "source": "self",
+    "date_added": "2026-07-07",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "go-playwright",
     "path": "skills/go-playwright",
@@ -28921,6 +28965,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "pilot-protocol",
+    "path": "skills/pilot-protocol",
+    "category": "ai-agents",
+    "name": "pilot-protocol",
+    "description": "Give an AI agent a permanent network address, encrypted P2P messaging, and an installable app store via Pilot Protocol",
+    "risk": "critical",
+    "source": "community",
+    "date_added": "2026-07-07",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "pipecat-friday-agent",
     "path": "skills/pipecat-friday-agent",
@@ -29627,6 +29693,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "pre-ship-gate",
+    "path": "skills/pre-ship-gate",
+    "category": "quality",
+    "name": "pre-ship-gate",
+    "description": "A ship gate that runs before any production deploy: checks the silent failure modes that make a deploy 'succeed' while prod stays broken, then verifies the live revision instead of trusting deploy output.",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-07-07",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "premium-3d-website",
     "path": "skills/premium-3d-website",
@@ -32159,6 +32247,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "routerbase-model-gateway",
+    "path": "skills/routerbase-model-gateway",
+    "category": "ai-ml",
+    "name": "routerbase-model-gateway",
+    "description": "Integrate RouterBase as an OpenAI-compatible model gateway for routing GPT, Claude, Gemini, media, audio, and embedding requests.",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-07-07",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "ruby",
     "path": "skills/super-code/ruby",
@@ -38503,6 +38613,28 @@
       "reasons": []
     }
   },
+  {
+    "id": "tree-ring-memory",
+    "path": "skills/tree-ring-memory",
+    "category": "development",
+    "name": "tree-ring-memory",
+    "description": "Use Tree Ring Memory for local-first AI-agent memory lifecycle work: recall, evidence, audit, forgetting, and consolidation without transcript dumping.",
+    "risk": "safe",
+    "source": "community",
+    "date_added": "2026-07-08",
+    "plugin": {
+      "targets": {
+        "codex": "supported",
+        "claude": "supported"
+      },
+      "setup": {
+        "type": "none",
+        "summary": "",
+        "docs": null
+      },
+      "reasons": []
+    }
+  },
   {
     "id": "trello-automation",
     "path": "skills/trello-automation",