@mmerterden/multi-agent-pipeline 10.4.0 → 10.5.0

package/CHANGELOG.md

@@ -14,6 +14,40 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ---
 
+## [10.5.0] - 2026-07-02
+
+Stack skills move from the local `stack-swap` mechanic to versioned marketplace plugins.
+
+### Added
+
+- **`build-stack-plugins.mjs`** — rebuilds each stack plugin's `knowledge/`
+  layer in the `{owner}/multi-agent-plugins` marketplace from the pipeline's
+  authoring source (`pipeline/skills/shared/external/`), regenerates each
+  `plugin.json` `skills[]`, and **bumps the patch version of any plugin whose
+  skill set changed**. Idempotent (`--dry-run` supported); a no-op run bumps
+  nothing. Cross-stack skills (accessibility audit, humanizer, Firebase) route
+  to `ai-common-engineering-toolkit`; Apple/Xcode-only skills stay in the iOS
+  plugin. This is the version-based-management backbone: the pipeline is the
+  single authoring source, the marketplace is a derived, versioned artifact.
+- **`multi-agent:sync` Step 3c (PLUGINS)** — runs the generator, then commits +
+  pushes the plugins repo when a plugin version was bumped.
+
+### Changed
+
+- **`/multi-agent:stack`** — selecting a stack no longer moves skill directories
+  via `stack-swap.sh`. It now enables the matching marketplace plugin(s) (stack
+  toolkit + `ai-common-engineering-toolkit`) in the current repo's
+  `.claude/settings.json` `enabledPlugins`, disabling the stack toolkits that
+  don't apply. Declarative, per-repo, versioned. No SessionStart hook.
+- **`/multi-agent:update`** — added a step that refreshes the plugin marketplace
+  (`claude marketplace update multi-agent-plugins`) so the latest published
+  plugin versions are picked up alongside the pipeline update.
+
+### Deprecated
+
+- **`stack-swap.sh`** — no longer wired to any SessionStart hook. Retained for
+  manual/offline use only; stack selection is now plugin enablement.
+
 ## [10.4.0] - 2026-07-02
 
 New `finish` command: run the pipeline tail over work you already did locally.

package/README.md

@@ -528,7 +528,7 @@ Stack is auto-detected. Build commands, test runners, lint tools, and review foc
 | Fastest | `/multi-agent:dev-autopilot "task"` | `multi-agent-dev-autopilot "task"` | Zero interaction |
 | Test | `/multi-agent:test` | `multi-agent-test` | UI Bug Hunter - visual + accessibility |
 | Channels | `/multi-agent:channels <target>` | `multi-agent-channels <target>` | Post report to Jira / Confluence / Wiki / PR (multi-select, humanizer pass, reviewer-preserving) |
-| Stack | `/multi-agent:stack ios` | `multi-agent-stack ios` | Manually swap skill set per platform |
+| Stack | `/multi-agent:stack ios` | `multi-agent-stack ios` | Select stack by enabling the matching marketplace plugin(s) |
 | Language | `/multi-agent:language [prompt\|output] <en\|tr>` | `multi-agent-language [prompt\|output] <en\|tr>` | Toggle `promptLanguage` (interactive prompts) and/or `outputLanguage` (assistant explanations). External payloads stay English. |
 
 ## UI Bug Hunter + Audit Tools
@@ -563,22 +563,22 @@ All audits run via **direct Bash commands** - no MCP server dependency. Pipeline
 
 **No external dependencies** - only standard Xcode CLI tools (iOS) and Android SDK (Android). Platform guides include **compliance rules** that map 1:1 to audit checks - follow the guide, pass the audit.
 
-## Stack Swap
+## Stack Selection (marketplace plugins)
 
-Stack is auto-detected at session start by `pipeline/scripts/stack-swap.sh` (SessionStart hook) based on project markers (`.xcodeproj`, `build.gradle`, `package.json`, etc.). To override manually:
+Stack skills ship as versioned plugins in the `{owner}/multi-agent-plugins` marketplace. Selecting a stack **enables the matching plugin(s)** in the repo's `.claude/settings.json` `enabledPlugins` — the stack toolkit plus `ai-common-engineering-toolkit` (cross-stack skills). This replaced the old `stack-swap.sh` mechanic (which physically moved skill directories on a SessionStart hook); enablement is now declarative, per-repo, and versioned.
 
 ```bash
 # Claude Code                              # Copilot CLI
-/multi-agent:stack                          multi-agent-stack                # show current
-/multi-agent:stack ios                      multi-agent-stack ios            # SwiftUI + Xcode
-/multi-agent:stack android                  multi-agent-stack android        # Compose + Gradle
-/multi-agent:stack backend                  multi-agent-stack backend        # Python/Node/Go
-/multi-agent:stack frontend                 multi-agent-stack frontend       # React/Vue/Next
-/multi-agent:stack mobile                   multi-agent-stack mobile         # iOS + Android
-/multi-agent:stack all                      multi-agent-stack all            # load everything
+/multi-agent:stack                          multi-agent-stack                # show enabled plugins
+/multi-agent:stack ios                      multi-agent-stack ios            # SwiftUI toolkit + common
+/multi-agent:stack android                  multi-agent-stack android        # Compose toolkit + common
+/multi-agent:stack backend                  multi-agent-stack backend        # Python/Node toolkit + common
+/multi-agent:stack frontend                 multi-agent-stack frontend       # React/TSX toolkit + common
+/multi-agent:stack mobile                   multi-agent-stack mobile         # iOS + Android + common
+/multi-agent:stack all                      multi-agent-stack all            # all four toolkits + common
 ```
 
-Re-runs `stack-swap.sh` with a forced mode and loads the matching guide (`swiftui-guide.md`, `android-guide.md`, `backend-guide.md`, `frontend-guide.md`).
+Add the marketplace once with `claude marketplace add {owner}/multi-agent-plugins`. Newly published plugin versions are pulled by `/multi-agent:update`. The plugins are rebuilt from `pipeline/skills/shared/external/` via `pipeline/scripts/build-stack-plugins.mjs` (run by `multi-agent:sync` Step 3c), which bumps the patch version of any plugin whose skill set changed. `stack-swap.sh` is retained for manual/offline use but is no longer wired to any hook.
 
 ## Setup
 
@@ -638,7 +638,8 @@ Runs unit tests, smoke suites, eval fixtures, schema validation, and lint - the
 | Script                 | Purpose                                          |
 | ---------------------- | ------------------------------------------------ |
 | `pre-commit-check.sh`  | Secret detection before commits                  |
-| `stack-swap.sh`        | Auto-detect project stack on session start       |
+| `build-stack-plugins.mjs` | Rebuild stack plugins from `shared/external`, bump changed plugin versions |
+| `stack-swap.sh`        | Legacy stack skill-dir swap (manual/offline; no longer hooked) |
 | `keychain-save.sh`     | Save tokens/JSON to macOS Keychain (interactive) |
 | `keychain.py`          | Deterministic Python Keychain helper (get/set/delete/list/doctor); shell driver auto-delegates on macOS/Linux |
 | `github-ssh-setup.sh`  | GitHub SSH key generation + config               |
@@ -783,7 +784,8 @@ pipeline/
       01-10/                    10 adversarial eval fixtures
   scripts/
     pre-commit-check.sh         Secret detection hook
-    stack-swap.sh               Auto stack detection (SessionStart)
+    build-stack-plugins.mjs     Rebuild stack plugins + version bump
+    stack-swap.sh               Legacy stack swap (manual; no longer hooked)
     keychain-save.sh            Save tokens/JSON to macOS Keychain
     github-ssh-setup.sh         GitHub SSH key generation + setup
     ui-tree-dumper.swift        iOS accessibility tree dumper

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "10.4.0",
+  "version": "10.5.0",
   "description": "8-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI, Cursor, Antigravity, and VS Code Copilot Chat. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Opus triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/commands/multi-agent/help.md

@@ -120,7 +120,7 @@ Setup & Maintenance:
 
   /multi-agent:setup          First-run wizard  -  Keychain tokens + Git identity + language
   /multi-agent:language [en|tr]   Show or set outputLanguage (promptLanguage stays English)
-  /multi-agent:stack <id>     Manually switch active skill set (ios / android / backend / frontend / fullstack / all)
+  /multi-agent:stack <id>     Select stack by enabling the matching marketplace plugin(s) (ios / android / backend / frontend / fullstack / all)
   /multi-agent:sync           Sync ecosystem (Claude Code + Copilot CLI + pipeline + website + remote-control)
   /multi-agent:update         Pull latest pipeline + reinstall + run migrations
   /multi-agent:delete         Uninstall pipeline from every CLI (Keychain tokens left intact, double confirm)
@@ -177,7 +177,7 @@ Key Features:
 
   Multi-Platform   iOS, Android, Backend, Frontend  -  auto-detected
   Build Queue      xcodebuild/Gradle serialized with lock file  -  parallel safe
-  Stack Aware      Auto-detects iOS/Android/Python/Node/Go/Docker, loads matching skill set
+  Stack Aware      Auto-detects iOS/Android/Python/Node/Go/Docker, uses the enabled stack plugin's skills
   Det. Gates       Build + lint + test + secret scan BEFORE AI review
   Multi-Repo       Per-repo worktrees, per-repo identity, integration build before commit
   Identity Routing Git identity auto-picked from repo origin URL (corporate vs personal)
@@ -327,7 +327,7 @@ Setup & Maintenance:
 
   /multi-agent:setup              İlk kurulum sihirbazı  -  Keychain token + Git kimliği + dil
   /multi-agent:language [en|tr]   outputLanguage'ı göster veya ayarla (promptLanguage İngilizce kalır)
-  /multi-agent:stack <id>         Aktif skill set'i manuel değiştir (ios / android / backend / frontend / fullstack / all)
+  /multi-agent:stack <id>         Stack'i eşleşen marketplace plugin'i etkinleştirerek seç (ios / android / backend / frontend / fullstack / all)
   /multi-agent:sync               Ekosistemi senkronize et (Claude Code + Copilot CLI + pipeline + website + remote-control)
   /multi-agent:update             En son pipeline'ı çek + reinstall + migration çalıştır
   /multi-agent:delete             Pipeline'ı tüm CLI'lerden kaldır (Keychain token dokunulmaz, çift onay)
@@ -384,7 +384,7 @@ Temel Özellikler:
 
   Multi-Platform   iOS, Android, Backend, Frontend  -  otomatik tespit
   Build Queue      xcodebuild/Gradle lock file ile seri  -  parallel güvenli
-  Stack Aware      iOS/Android/Python/Node/Go/Docker algılanır, eşleşen skill set yüklenir
+  Stack Aware      iOS/Android/Python/Node/Go/Docker algılanır, etkin stack plugin'inin skilleri kullanılır
   Det. Gates       AI review'dan ÖNCE build + lint + test + secret scan
   Multi-Repo       Repo başına worktree, repo başına identity, commit öncesi entegrasyon build'i
   Identity Routing Repo origin URL'sinden git kimliği seçimi (kurumsal vs kişisel)

package/pipeline/commands/multi-agent/stack.md

@@ -1,48 +1,94 @@
 ---
-description: "Manually switch the active skill set by platform (ios/android/mobile/backend/frontend/fullstack/all)."
-allowed-tools: Bash
+description: "Select the active stack for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json (ios/android/mobile/backend/frontend/fullstack/all)."
+allowed-tools: Bash, Read, Edit, Write
 ---
 
-# multi-agent stack  -  Manual Stack Swap
+# multi-agent stack  -  Select Stack via Plugin Enablement
 
-The `pipeline/scripts/stack-swap.sh` SessionStart hook auto-detects the stack from the project. This command manually overrides that decision  -  it switches the active skill set in `~/.claude/skills/` and moves the non-matching skills to `~/.claude/skills-inactive/`.
+Stack skills ship as plugins in the `{owner}/multi-agent-plugins` marketplace. Selecting a stack = **enabling the matching plugin(s)** in the current repo's `.claude/settings.json` `enabledPlugins`. The `ai-common-engineering-toolkit` (accessibility audit, humanizer, Firebase) is always enabled alongside the stack plugin.
+
+This replaces the old `stack-swap.sh` mechanic that physically moved skill directories in `~/.claude/skills/`. There is no SessionStart hook and no directory shuffling — enablement is declarative, per-repo, and versioned.
 
 ## Usage
 
 ```bash
-/multi-agent:stack                 # show current state
-/multi-agent:stack ios             # SwiftUI + Xcode
-/multi-agent:stack android         # Compose + Gradle
-/multi-agent:stack mobile          # iOS + Android together
-/multi-agent:stack backend         # Python / Node / Go
-/multi-agent:stack frontend        # React / Vue / Next
-/multi-agent:stack fullstack       # backend + frontend
-/multi-agent:stack all             # activate everything
+/multi-agent:stack                 # show which plugins are enabled here
+/multi-agent:stack ios             # SwiftUI toolkit + common
+/multi-agent:stack android         # Compose toolkit + common
+/multi-agent:stack mobile          # iOS + Android + common
+/multi-agent:stack backend         # Python / Node spec-driven toolkit + common
+/multi-agent:stack frontend        # React / TSX toolkit + common
+/multi-agent:stack fullstack       # frontend + backend + common
+/multi-agent:stack all             # all four stack toolkits + common
 ```
 
+## Stack → plugin map
+
+| Stack | Plugins enabled (all `@multi-agent-plugins`) |
+|---|---|
+| `ios` | `ai-common-engineering-toolkit`, `ai-ios-engineering-toolkit` |
+| `android` | `ai-common-engineering-toolkit`, `ai-android-engineering-toolkit` |
+| `frontend` | `ai-common-engineering-toolkit`, `ai-frontend-engineering-toolkit` |
+| `backend` | `ai-common-engineering-toolkit`, `ai-backend-toolkit` |
+| `mobile` | common + `ai-ios-engineering-toolkit` + `ai-android-engineering-toolkit` |
+| `fullstack` | common + `ai-frontend-engineering-toolkit` + `ai-backend-toolkit` |
+| `all` | common + all four stack toolkits |
+
 ## Behaviour
 
-1. No arg → status mode: print the active skill count, do **not** move any files.
-2. Arg present → run `$HOME/.claude/scripts/stack-swap.sh <arg>`.
-3. The script prints JSON on stdout (`{"systemMessage": "..."}`)  -  show the `systemMessage` value to the user.
-4. Unknown arg → the script returns `exit 1` with an error message; do not re-prompt, show the list to the user.
+1. **No arg → status mode.** Read `.claude/settings.json` (repo) + `~/.claude/settings.json` (global) and print which `@multi-agent-plugins` plugins are currently enabled. Do not modify anything.
+2. **Arg present → enable mode.** Ensure the marketplace is known, then write the matching `enabledPlugins` entries into the **current repo's** `.claude/settings.json`, disabling the stack toolkits that don't belong to the selected stack. `ai-common-engineering-toolkit` is always set to `true`.
+3. **Unknown arg** → show the list above; do not guess.
 
 ## Implementation
 
 ```bash
-SCRIPT="$HOME/.claude/scripts/stack-swap.sh"
+REPO_SETTINGS=".claude/settings.json"
+MP="multi-agent-plugins"
+ARG="${1:-status}"
 
-if [ ! -x "$SCRIPT" ]; then
-  echo "stack-swap.sh not found at $SCRIPT  -  run install.js --all to deploy pipeline scripts."
-  exit 1
+# --- ensure the marketplace is known (idempotent) -------------------------
+if ! claude marketplace list 2>/dev/null | grep -q "$MP"; then
+  claude marketplace add {owner}/multi-agent-plugins 2>/dev/null \
+    || echo "note: add the marketplace once with: claude marketplace add {owner}/multi-agent-plugins"
 fi
 
-ARG="${1:-status}"
-"$SCRIPT" "$ARG"
+COMMON="ai-common-engineering-toolkit@${MP}"
+IOS="ai-ios-engineering-toolkit@${MP}"
+ANDROID="ai-android-engineering-toolkit@${MP}"
+FRONTEND="ai-frontend-engineering-toolkit@${MP}"
+BACKEND="ai-backend-toolkit@${MP}"
+
+if [ "$ARG" = "status" ]; then
+  echo "Enabled multi-agent plugins (repo + global):"
+  { [ -f "$REPO_SETTINGS" ] && cat "$REPO_SETTINGS"; cat "$HOME/.claude/settings.json"; } 2>/dev/null \
+    | grep -oE "ai-[a-z-]+@${MP}\"[[:space:]]*:[[:space:]]*(true|false)" | sort -u
+  exit 0
+fi
+
+# resolve the desired ON set
+case "$ARG" in
+  ios)       ON="$COMMON $IOS" ;;
+  android)   ON="$COMMON $ANDROID" ;;
+  frontend)  ON="$COMMON $FRONTEND" ;;
+  backend)   ON="$COMMON $BACKEND" ;;
+  mobile)    ON="$COMMON $IOS $ANDROID" ;;
+  fullstack) ON="$COMMON $FRONTEND $BACKEND" ;;
+  all)       ON="$COMMON $IOS $ANDROID $FRONTEND $BACKEND" ;;
+  *) echo "Unknown stack '$ARG'. One of: ios android mobile backend frontend fullstack all"; exit 1 ;;
+esac
 ```
 
+After resolving `$ON`, edit `.claude/settings.json` (create `{ "enabledPlugins": {} }` if absent) so that:
+- every plugin in `$ON` is set to `true`,
+- every stack toolkit **not** in `$ON` is set to `false` (leave non-`@multi-agent-plugins` entries untouched),
+- `ai-common-engineering-toolkit@multi-agent-plugins` is always `true`.
+
+Use the Read + Edit/Write tools (JSON must stay valid). Then print the resulting `enabledPlugins` block.
+
 ## Notes
 
-- A manual swap takes effect immediately, but to refresh Claude Code's skill discovery completely, **restart the conversation**.
-- If you want auto-detect to take over again, the next SessionStart is enough  -  the hook re-evaluates `cwd`. Manual overrides are not persisted.
-- Pipeline Phase 1 stack detection is independent of this command (it reads project files). `stack` only affects which skill set is active.
+- Enablement is per-repo and declarative — commit `.claude/settings.json` so teammates get the same stack.
+- Restart the conversation (or reload the window) for Claude Code to pick up newly enabled plugins.
+- Pipeline Phase 1 stack detection is independent (it reads project files); `stack` only sets which plugin skill set is active.
+- Legacy: `~/.claude/scripts/stack-swap.sh` is retained for manual/offline use but is no longer wired to any hook. Prefer plugin enablement.

package/pipeline/commands/multi-agent/sync.md

@@ -61,7 +61,7 @@ Run every step automatically:
 Step 0: FIGMA_SYNC  SKIP (deprecated  -  feedback_figma_source_deprecated)
 Step 1: PLATFORM    Detect macOS / Linux / Windows (Git Bash / WSL); export PLATFORM env
 Step 1.5: DETECT    Compare timestamps, find stale targets
-Step 2: COPILOT     Claude Code -> Copilot CLI (instructions + 35 sub-command skills)
+Step 2: COPILOT     Claude Code -> Copilot CLI (instructions + 34 sub-command skills)
 Step 2a: CODEX      Claude Code -> Codex CLI (global ~/.codex prompt + AGENTS.md + config.toml mcp)
                      -  runs via `node pipeline/scripts/sync-adapters.mjs`, which fires the
                         codex adapter ONCE (global) when `~/.codex` exists on this machine
@@ -70,6 +70,8 @@ Step 2b: ADAPTERS   Cursor / Antigravity / Copilot Chat per-project rule files r
                      -  `--no-adapters` skips this step entirely
                      -  writes files + a LOCAL commit per project; push stays the user's call
 Step 3: REPO        Claude Code -> pipeline repo (genericized, personal data scrub, bash -n on all sh)
+Step 3c: PLUGINS    pipeline shared/external -> multi-agent-plugins marketplace (rebuild knowledge/,
+                     bump changed plugins' patch version, commit + push the plugins repo)
 Step 4: WEBSITE     Version + phase/model counts -> {website-host} (i18n + projects.ts)
 Step 5: REMOTE      Pipeline references -> remote-control README
 Step 6: Commit      Commit + push all changed repos
@@ -215,7 +217,7 @@ Adapter sync orchestration goes through `pipeline/scripts/sync-adapters.mjs`  -
 5. **Files NOT synced** (local-only, may contain personal data):
    - `~/.claude/multi-agent-preferences.json`
    - `~/.claude/CLAUDE.md`, `~/.claude/rules/`, `~/.claude/knowledge/`
-   - `~/.claude/scripts/`  -  EXCEPT `pre-commit-check.sh` and `stack-swap.sh` (generic, synced)
+   - `~/.claude/scripts/`  -  EXCEPT `pre-commit-check.sh`, `stack-swap.sh` (legacy, retained for manual use), and `build-stack-plugins.mjs` (generic, synced)
    - `~/.claude/settings.json`
 
 6. **Cross-platform smoke gate** (final step of the REPO sync, before push):
@@ -234,6 +236,48 @@ Adapter sync orchestration goes through `pipeline/scripts/sync-adapters.mjs`  -
 
 ---
 
+## Stack-Plugin Sync (Step 3c)
+
+Stack skills are distributed as versioned plugins in the `{owner}/multi-agent-plugins` marketplace. The pipeline's `pipeline/skills/shared/external/` is the **single authoring source**; the marketplace is a derived, versioned publish artifact. This step rebuilds it and publishes only when something changed.
+
+**Source of truth:** author/vendor knowledge skills in `pipeline/skills/shared/external/` (the pipeline's own phases also consume them). The plugins' authored lifecycle skills (`index` / `reference` / `workflow` / `tools`) live in the plugins repo and are never touched by sync.
+
+**Flow:**
+
+```bash
+PLUGINS_REPO="$HOME/multi-agent-plugins"
+[ ! -d "$PLUGINS_REPO/.git" ] && gh repo clone {owner}/multi-agent-plugins "$PLUGINS_REPO"
+cd "$PLUGINS_REPO" && git pull origin main
+
+# 1. Preview what would change (routing + version bumps), no writes:
+node "$HOME/multi-agent-pipeline/pipeline/scripts/build-stack-plugins.mjs" --dry-run
+
+# 2. Apply: rebuild each stack plugin's knowledge/ from shared/external,
+#    regenerate plugin.json skills[], bump the patch version of any plugin
+#    whose skill set changed. Cross-stack skills -> ai-common-engineering-toolkit;
+#    Apple/Xcode-only skills -> iOS plugin only.
+node "$HOME/multi-agent-pipeline/pipeline/scripts/build-stack-plugins.mjs"
+```
+
+**Version-based management:** the generator bumps a plugin's `version` (patch) only when its skill set actually changed. Idempotent — a no-op run bumps nothing. Consumers pick up new versions via `/multi-agent:update` (which runs `claude marketplace update multi-agent-plugins`).
+
+**Publish (only if the generator reported bumps):**
+
+```bash
+cd "$PLUGINS_REPO"
+if ! git diff --quiet; then
+  git config user.name "$(git config user.name)"; git config user.email "$(git config user.email)"
+  git add -A
+  git commit -m "chore: rebuild stack plugins from pipeline shared/external"
+  gh auth switch --user {owner} 2>/dev/null || true
+  git push origin main
+fi
+```
+
+Never author skills directly in the plugins repo's `knowledge/` — they will be overwritten on the next rebuild. Author in `shared/external`, then run this step.
+
+---
+
 ## Website Sync (Step 4)
 
 Propagate pipeline version, phase count, model count, and feature descriptions to the website.
@@ -302,11 +346,11 @@ This step runs only on the Claude <-> Copilot axis. Cursor / Copilot Chat do not
 |-------------|-------------|
 | `~/.claude/commands/multi-agent/{cmd}.md` | `~/.copilot/skills/multi-agent-{cmd}/SKILL.md` |
 
-**35 commands are synced** (canonical inventory  -  must match `cross-cli-contract.md` section 1; drift = contract violation):
+**34 commands are synced** (canonical inventory  -  must match `cross-cli-contract.md` section 1; drift = contract violation):
 
 ```
 analysis, analysis-resolve, autopilot, build-optimize, channels, delete, dev,
-dev-autopilot, dev-local, dev-local-autopilot, diff-explain, finish, garbage-collect,
+dev-autopilot, dev-local, dev-local-autopilot, diff-explain, garbage-collect,
 help, issue, jira, kill, language, local, local-autopilot, log, manual-test,
 prune-logs, purge, refactor, resume, review, scan, search, setup, stack, status,
 sync, test, update

package/pipeline/commands/multi-agent/update.md

@@ -17,7 +17,7 @@ Update the pipeline in one command. Existing preferences are preserved; only ski
    done
    if [ -z "$PIPE_DIR" ]; then
      echo "Pipeline repo not found. Clone it:"
-     echo "  git clone git@github.com:mmerterden/multi-agent-pipeline.git"
+     echo "  git clone git@github.com:{owner}/multi-agent-pipeline.git"
      exit 1
    fi
    ```
@@ -38,6 +38,19 @@ Update the pipeline in one command. Existing preferences are preserved; only ski
    node "$PIPE_DIR/install.js" --all
    ```
 
+4b. **Update the stack-plugin marketplace** (pulls the latest plugin versions):
+   ```bash
+   # Stack skills ship as versioned plugins in {owner}/multi-agent-plugins.
+   # Refresh the marketplace so newly published plugin versions are picked up.
+   if claude marketplace list 2>/dev/null | grep -q "multi-agent-plugins"; then
+     claude marketplace update multi-agent-plugins 2>/dev/null \
+       || claude marketplace add {owner}/multi-agent-plugins 2>/dev/null
+     echo "  -> marketplace multi-agent-plugins refreshed"
+   else
+     echo "  -> marketplace not added yet; add with: claude marketplace add {owner}/multi-agent-plugins"
+   fi
+   ```
+
 5. **Migrate preferences** (if there is an old schema):
    ```bash
    if [ -f "$HOME/.claude/scripts/migrate-prefs.mjs" ]; then

package/pipeline/scripts/build-stack-plugins.mjs

@@ -0,0 +1,137 @@
+#!/usr/bin/env node
+/**
+ * build-stack-plugins.mjs
+ *
+ * Rebuild the per-stack plugin `knowledge/` trees in the multi-agent-plugins
+ * marketplace from the pipeline's authoring source (pipeline/skills/shared/external),
+ * regenerate each plugin.json `skills[]`, and bump the patch version of any plugin
+ * whose skill set changed. This is the version-based management backbone: the
+ * pipeline is the single authoring source; the marketplace is a derived, versioned
+ * publish artifact.
+ *
+ * The authored lifecycle skills (index / reference / workflow / tools) live in the
+ * plugin repo and are NEVER touched here — only the `knowledge/` layer + plugin.json
+ * knowledge entries are regenerated.
+ *
+ * Routing mirrors pipeline/scripts/stack-swap.sh patterns. Genuinely cross-stack
+ * skills go to ai-common-engineering-toolkit (not into each stack plugin). Apple/
+ * Xcode-only vendored skills that match no stack pattern belong to iOS only.
+ *
+ * Usage:
+ *   node build-stack-plugins.mjs [--plugins-repo <path>] [--pipeline <path>] [--dry-run]
+ *
+ * Exit code 0 always (report-only); prints a JSON-ish summary + per-plugin diff.
+ */
+import {
+  readdirSync, existsSync, rmSync, cpSync, readFileSync, writeFileSync, mkdirSync, statSync,
+} from 'node:fs';
+import { join } from 'node:path';
+
+const args = process.argv.slice(2);
+const getArg = (k, d) => { const i = args.indexOf(k); return i >= 0 ? args[i + 1] : d; };
+const HOME = process.env.HOME;
+const PLUGINS_REPO = getArg('--plugins-repo', join(HOME, 'multi-agent-plugins'));
+const PIPE_ROOT = getArg('--pipeline', join(HOME, 'multi-agent-pipeline'));
+const EXTERNAL = join(PIPE_ROOT, 'pipeline/skills/shared/external');
+const DRY = args.includes('--dry-run');
+
+const COMMON_PLUGIN = 'ai-common-engineering-toolkit';
+const COMMON_SKILLS = ['accessibility-compliance-accessibility-audit', 'firebase', 'humanizer'];
+
+// Apple/Xcode-only skills that match no stack pattern → iOS plugin only.
+const APPLE_ONLY = [
+  'avkit', 'cryptokit', 'metrickit-diagnostics', 'pdfkit', 'spm-build-analysis',
+  'swiftlint', 'xcode-build-benchmark', 'xcode-build-fixer', 'xcode-build-orchestrator',
+  'xcode-compilation-analyzer', 'xcode-project-analyzer',
+];
+
+// stack → matching pattern (mirrors stack-swap.sh IOS/ANDROID/BACKEND/FRONTEND patterns)
+const STACK_PATTERNS = {
+  'ai-ios-engineering-toolkit': /(swiftui|swift-|ios-|hig-|apple-|storekit|widgetkit|healthkit|homekit|mapkit|musickit|passkit|pencilkit|realitykit|weatherkit|alarmkit|callkit|cloudkit|coreml|core-|eventkit|energykit|permissionkit|tipkit|shareplay|live-activities|background-processing|app-store|app-clips|app-intents|authentication|contacts-framework|device-integrity|macos-|natural-language|photos-camera|push-notifications|speech-recognition|swiftdata|vision-framework|debugging-instruments|help-skills)/i,
+  'ai-android-engineering-toolkit': /(android|compose-|kotlin-|room-database|retrofit-|gradle-|play-store)/i,
+  'ai-backend-toolkit': /(fastapi|nodejs|docker|api-pattern|api-security|github-actions|observability|architecture|monorepo|clean-code|debugging-strategies|agentflow|closed-loop|context-compression|python-patterns|database-patterns|rest-api-design|testing-backend|ci-cd-pipelines)/i,
+  'ai-frontend-engineering-toolkit': /(react-|nextjs-|typescript-|tailwind-|vue-|web-accessibility|web-performance|css-modern|web-testing|html-semantic)/i,
+};
+
+const isDir = (p) => { try { return statSync(p).isDirectory(); } catch { return false; } };
+const listDirs = (p) => (existsSync(p) ? readdirSync(p).filter((n) => isDir(join(p, n))) : []);
+
+// --- 1. enumerate authoring source ---------------------------------------
+if (!existsSync(EXTERNAL)) {
+  console.error(`source not found: ${EXTERNAL}`);
+  process.exit(0);
+}
+const allSkills = listDirs(EXTERNAL);
+
+// --- 2. compute desired knowledge set per plugin -------------------------
+const desired = { [COMMON_PLUGIN]: new Set() };
+for (const p of Object.keys(STACK_PATTERNS)) desired[p] = new Set();
+
+const unrouted = [];
+for (const skill of allSkills) {
+  if (COMMON_SKILLS.includes(skill)) { desired[COMMON_PLUGIN].add(skill); continue; }
+  if (APPLE_ONLY.includes(skill)) { desired['ai-ios-engineering-toolkit'].add(skill); continue; }
+  let matched = false;
+  for (const [plugin, re] of Object.entries(STACK_PATTERNS)) {
+    if (re.test(skill)) { desired[plugin].add(skill); matched = true; }
+  }
+  if (!matched) unrouted.push(skill);
+}
+
+// --- 3. sync each plugin's knowledge/ + regenerate plugin.json -----------
+const report = [];
+for (const [plugin, want] of Object.entries(desired)) {
+  const pdir = join(PLUGINS_REPO, 'plugins', plugin);
+  const kdir = join(pdir, 'skills', 'knowledge');
+  const pjPath = join(pdir, '.claude-plugin', 'plugin.json');
+  if (!existsSync(pjPath)) { report.push({ plugin, error: 'plugin.json missing' }); continue; }
+
+  const have = new Set(listDirs(kdir));
+  const toAdd = [...want].filter((s) => !have.has(s)).sort();
+  const toRemove = [...have].filter((s) => !want.has(s)).sort();
+  const changed = toAdd.length > 0 || toRemove.length > 0;
+
+  if (!DRY && changed) {
+    if (!existsSync(kdir)) mkdirSync(kdir, { recursive: true });
+    for (const s of toAdd) cpSync(join(EXTERNAL, s), join(kdir, s), { recursive: true });
+    for (const s of toRemove) rmSync(join(kdir, s), { recursive: true, force: true });
+  }
+
+  // regenerate plugin.json skills[]: keep non-knowledge entries, rebuild knowledge set
+  const pj = JSON.parse(readFileSync(pjPath, 'utf8'));
+  const nonKnowledge = (pj.skills || []).filter((s) => !s.startsWith('./skills/knowledge/'));
+  const finalKnowledge = (DRY ? [...want] : listDirs(kdir)).map((s) => `./skills/knowledge/${s}`);
+  const newSkills = [...new Set([...nonKnowledge, ...finalKnowledge])].sort();
+  const skillsChanged = JSON.stringify(pj.skills) !== JSON.stringify(newSkills);
+
+  const oldV = pj.version || '0.1.0';
+  let newV = oldV;
+  if (changed || skillsChanged) {
+    const [maj, min, patch] = oldV.split('.').map((n) => parseInt(n, 10) || 0);
+    newV = `${maj}.${min}.${patch + 1}`;
+  }
+  if (!DRY && (changed || skillsChanged)) {
+    pj.skills = newSkills;
+    pj.version = newV;
+    writeFileSync(pjPath, `${JSON.stringify(pj, null, 2)}\n`);
+  }
+  report.push({ plugin, added: toAdd, removed: toRemove, skillCount: newSkills.length, version: oldV === newV ? oldV : `${oldV} → ${newV}`, bumped: oldV !== newV });
+}
+
+// --- 4. report ------------------------------------------------------------
+console.log(`build-stack-plugins ${DRY ? '(dry-run)' : ''}`);
+console.log(`source: ${EXTERNAL} (${allSkills.length} skills)`);
+console.log(`target: ${PLUGINS_REPO}`);
+for (const r of report) {
+  if (r.error) { console.log(`  ✗ ${r.plugin}: ${r.error}`); continue; }
+  const flag = r.bumped ? 'BUMPED' : 'unchanged';
+  console.log(`  ${r.plugin}: skills=${r.skillCount} version=${r.version} [${flag}]`);
+  if (r.added.length) console.log(`      + ${r.added.join(', ')}`);
+  if (r.removed.length) console.log(`      - ${r.removed.join(', ')}`);
+}
+if (unrouted.length) {
+  console.log(`  ⚠ unrouted (matched no stack, not common/apple-only) — NOT copied anywhere:`);
+  console.log(`      ${unrouted.join(', ')}`);
+}
+const anyBump = report.some((r) => r.bumped);
+console.log(anyBump ? 'result: changes detected (versions bumped)' : 'result: all plugins up to date');

package/pipeline/skills/shared/core/multi-agent-stack/SKILL.md

@@ -1,55 +1,50 @@
 ---
 name: multi-agent-stack
 language: en
-description: "Manually switch the active skill set by platform (ios/android/mobile/backend/frontend/fullstack/all)."
+description: "Select the active stack for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json (ios/android/mobile/backend/frontend/fullstack/all)."
 user-invocable: true
 ---
 
-# multi-agent stack  -  Manual Stack Swap
+# multi-agent stack  -  Select Stack via Plugin Enablement
 
-The `pipeline/scripts/stack-swap.sh` SessionStart hook auto-detects the stack from the project. This command manually overrides that decision  -  it changes the active skill set and moves non-matching skills to `skills-inactive/`.
+Stack skills ship as plugins in the `{owner}/multi-agent-plugins` marketplace. Selecting a stack = **enabling the matching plugin(s)** in the current repo's `.claude/settings.json` `enabledPlugins`. The `ai-common-engineering-toolkit` (accessibility audit, humanizer, Firebase) is always enabled alongside the stack plugin.
+
+This replaces the old `stack-swap.sh` mechanic that physically moved skill directories. No SessionStart hook, no directory shuffling — enablement is declarative, per-repo, and versioned.
 
 ## Usage
 
 ```bash
-multi-agent-stack                  # show the current state
-multi-agent-stack ios              # SwiftUI + Xcode
-multi-agent-stack android          # Compose + Gradle
-multi-agent-stack mobile           # iOS + Android together
-multi-agent-stack backend          # Python / Node / Go
-multi-agent-stack frontend         # React / Vue / Next
-multi-agent-stack fullstack        # backend + frontend
-multi-agent-stack all              # activate everything
+multi-agent-stack                  # show which plugins are enabled here
+multi-agent-stack ios              # SwiftUI toolkit + common
+multi-agent-stack android          # Compose toolkit + common
+multi-agent-stack mobile           # iOS + Android + common
+multi-agent-stack backend          # Python / Node spec-driven toolkit + common
+multi-agent-stack frontend         # React / TSX toolkit + common
+multi-agent-stack fullstack        # frontend + backend + common
+multi-agent-stack all              # all four stack toolkits + common
 ```
 
-## Behaviour
+## Stack → plugin map
 
-1. No arg → status mode: show the active skill count, do **not** move any files.
-2. With an arg → run `stack-swap.sh <arg>`.
-3. The script's stdout is JSON (`{"systemMessage": "..."}`)  -  print the `systemMessage` value to the user.
-4. Unknown arg → the script returns `exit 1` + an error message; do not ask for the value again, show the user the list.
+| Stack | Plugins enabled (all `@multi-agent-plugins`) |
+|---|---|
+| `ios` | `ai-common-engineering-toolkit`, `ai-ios-engineering-toolkit` |
+| `android` | `ai-common-engineering-toolkit`, `ai-android-engineering-toolkit` |
+| `frontend` | `ai-common-engineering-toolkit`, `ai-frontend-engineering-toolkit` |
+| `backend` | `ai-common-engineering-toolkit`, `ai-backend-toolkit` |
+| `mobile` | common + `ai-ios-engineering-toolkit` + `ai-android-engineering-toolkit` |
+| `fullstack` | common + `ai-frontend-engineering-toolkit` + `ai-backend-toolkit` |
+| `all` | common + all four stack toolkits |
 
-## Implementation
+## Behaviour
 
-```bash
-# Both CLIs install pipeline scripts under their own home dir. Prefer Copilot's
-# own scripts if present; fall back to Claude Code's scripts when running under
-# --all install (shared machine, either CLI's copy is up-to-date).
-if [ -x "$HOME/.copilot/scripts/stack-swap.sh" ]; then
-  SCRIPT="$HOME/.copilot/scripts/stack-swap.sh"
-elif [ -x "$HOME/.claude/scripts/stack-swap.sh" ]; then
-  SCRIPT="$HOME/.claude/scripts/stack-swap.sh"
-else
-  echo "stack-swap.sh not found  -  run install.js --copilot (or --all) to deploy pipeline scripts."
-  exit 1
-fi
-
-ARG="${1:-status}"
-"$SCRIPT" "$ARG"
-```
+1. **No arg → status mode.** Read `.claude/settings.json` (repo) + the global settings and print which `@multi-agent-plugins` plugins are enabled. Modify nothing.
+2. **Arg present → enable mode.** Ensure the marketplace is known (`claude marketplace add {owner}/multi-agent-plugins`), then write the matching `enabledPlugins` entries into the current repo's `.claude/settings.json`, setting the stack toolkits that don't belong to `false`. `ai-common-engineering-toolkit` is always `true`.
+3. **Unknown arg** → show the list above; do not guess.
 
 ## Notes
 
-- A manual swap takes effect immediately, but to fully refresh Copilot CLI's skill discovery, **restart the conversation**.
-- If you want auto-detect to take over again, the next SessionStart is enough  -  the hook looks at `cwd` and decides again. The manual override is not permanent.
-- Pipeline Phase 1 stack detection is independent of this command (it looks at project files). `stack` only affects which skill set is active.
+- Enablement is per-repo and declarative — commit `.claude/settings.json` so teammates get the same stack.
+- Restart the conversation to pick up newly enabled plugins.
+- Pipeline Phase 1 stack detection is independent (it reads project files); `stack` only sets which plugin skill set is active.
+- Legacy: `stack-swap.sh` is retained for manual/offline use but is no longer wired to any hook.

package/pipeline/skills/shared/core/multi-agent-sync/SKILL.md

@@ -90,7 +90,8 @@ If nothing is stale -> report "All targets up to date" and stop.
 5. **Files NOT synced** (local-only, may contain personal data):
    - `~/.claude/multi-agent-preferences.json`
    - `~/.claude/CLAUDE.md`, `~/.claude/rules/`, `~/.claude/knowledge/`
-   - `~/.claude/scripts/`  -  EXCEPT `pre-commit-check.sh` and `stack-swap.sh` (generic, synced)
+   - `~/.claude/scripts/`  -  EXCEPT `pre-commit-check.sh`, `stack-swap.sh` (legacy, retained), and `build-stack-plugins.mjs` (generic, synced)
+   - Step 3c (PLUGINS): rebuild the `{owner}/multi-agent-plugins` marketplace from `shared/external` via `build-stack-plugins.mjs` (bumps changed plugins' patch version), then commit + push the plugins repo
    - `~/.claude/settings.json`
 
 

package/pipeline/skills/shared/core/multi-agent-update/SKILL.md

@@ -16,6 +16,8 @@ Update the pipeline with a single command. Preferences are preserved; only skill
 2. Record the current version
 3. `git pull origin main`
 4. `node install.js --all` (Claude + Copilot)
+4b. Refresh the stack-plugin marketplace so the latest plugin versions are picked up:
+   `claude marketplace update multi-agent-plugins` (or `claude marketplace add {owner}/multi-agent-plugins` if not yet added)
 5. `node migrate-prefs.mjs` (if there is a schema upgrade)
 6. Show the new version + changelog
 7. Smoke test (schema + cross-cli)