@mmerterden/multi-agent-pipeline 10.9.0 → 10.12.0

package/pipeline/scripts/smoke-token-preflight.sh

@@ -0,0 +1,82 @@
+#!/usr/bin/env bash
+# smoke-token-preflight.sh  -  contract for the Phase 0 Step 0.7 token expiry pre-flight
+# and the Figma MCP token lifecycle (silent refresh + generation-script escalation).
+#
+# Verifies:
+#   1. phase-0-init.md has Step 0.7 with the probe table and figma-mcp-critical path.
+#   2. Silent renewal runs BEFORE any question; autopilot never prompts.
+#   3. keychain.md documents the Figma MCP lifecycle (refresh entry, tokenScripts, init cross-ref).
+#   4. lib/figma-mcp-refresh.sh exists, is executable, parses, and never prints token values.
+#   5. prefs.schema.json + preferences-template.json declare global.tokenScripts.
+#   6. Network failure is not treated as expiry; mid-run 401 stays as safety net.
+
+set -euo pipefail
+
+HERE="$(cd "$(dirname "$0")" && pwd)"
+ROOT="$(cd "$HERE/../.." && pwd)"
+PHASE0="$ROOT/pipeline/commands/multi-agent/refs/phases/phase-0-init.md"
+KEYCHAIN="$ROOT/pipeline/commands/multi-agent/refs/keychain.md"
+REFRESH="$ROOT/pipeline/lib/figma-mcp-refresh.sh"
+SCHEMA="$ROOT/pipeline/schemas/prefs.schema.json"
+TEMPLATE="$ROOT/pipeline/preferences-template.json"
+
+PASS=0
+FAIL=0
+pass() { PASS=$((PASS+1)); echo "  ✓ $1"; }
+fail() { FAIL=$((FAIL+1)); echo "  ✗ $1"; }
+
+need() { command -v "$1" >/dev/null 2>&1 || { echo "error: $1 required" >&2; exit 127; }; }
+need jq
+
+for f in "$PHASE0" "$KEYCHAIN" "$REFRESH" "$SCHEMA" "$TEMPLATE"; do
+  [ -f "$f" ] || { echo "error: missing $f" >&2; exit 1; }
+done
+
+echo "→ 1. Step 0.7 pre-flight section"
+grep -Fq "Step 0.7 - Token expiry pre-flight" "$PHASE0" && pass "Step 0.7 present" || fail "Step 0.7 missing"
+for marker in "rest/api/2/myself" "mcp.figma.com/mcp" "serviceStatus" "CRITICAL"; do
+  grep -Fq "$marker" "$PHASE0" && pass "probe marker: $marker" || fail "probe marker missing: $marker"
+done
+
+echo ""
+echo "→ 2. silent renewal first, autopilot never prompts"
+grep -Fq "figma-mcp-refresh.sh" "$PHASE0" && pass "silent renewal wired" || fail "silent renewal missing"
+grep -Fq "Silent renewal first" "$PHASE0" && pass "renewal precedes question" || fail "renewal-first rule missing"
+grep -Fq "never prompt" "$PHASE0" && pass "autopilot no-prompt rule" || fail "autopilot no-prompt rule missing"
+grep -Fq "Regenerate now (script)" "$PHASE0" && pass "script escalation option" || fail "script escalation option missing"
+grep -Fq "Continue degraded" "$PHASE0" && pass "degrade option" || fail "degrade option missing"
+
+echo ""
+echo "→ 3. keychain.md lifecycle section"
+grep -Fq "Figma MCP token lifecycle" "$KEYCHAIN" && pass "lifecycle section present" || fail "lifecycle section missing"
+grep -Fq "_Refresh" "$KEYCHAIN" && pass "refresh Keychain entry documented" || fail "refresh entry missing"
+grep -Fq "tokenScripts" "$KEYCHAIN" && pass "tokenScripts documented" || fail "tokenScripts missing"
+grep -Fq "Step 0.7" "$KEYCHAIN" && pass "init cross-ref present" || fail "init cross-ref missing"
+grep -Fq "never in synced command files" "$KEYCHAIN" && pass "personal-path hygiene rule" || fail "personal-path hygiene rule missing"
+
+echo ""
+echo "→ 4. figma-mcp-refresh.sh integrity"
+[ -x "$REFRESH" ] && pass "executable" || fail "not executable"
+bash -n "$REFRESH" && pass "parses (bash -n)" || fail "syntax error"
+grep -Fq "grant_type=refresh_token" "$REFRESH" && pass "refresh grant" || fail "refresh grant missing"
+if grep -E 'echo .*\$(NEW_ACCESS|NEW_REFRESH|REFRESH_TOKEN)' "$REFRESH" >/dev/null; then
+  fail "token value printed to stdout"
+else
+  pass "no token values printed"
+fi
+grep -Fq 'security add-generic-password' "$REFRESH" && pass "saves back to Keychain" || fail "Keychain save missing"
+
+echo ""
+echo "→ 5. prefs schema + template declare tokenScripts"
+TS_TYPE=$(jq -r '.properties.global.properties.tokenScripts.type // "missing"' "$SCHEMA")
+[ "$TS_TYPE" = "object" ] && pass "schema tokenScripts is object" || fail "schema tokenScripts type = '$TS_TYPE'"
+jq -e '.global | has("tokenScripts")' "$TEMPLATE" >/dev/null && pass "template has tokenScripts" || fail "template missing tokenScripts"
+
+echo ""
+echo "→ 6. network failure is not expiry; 401 safety net stays"
+grep -Fq "NOT treated as expiry" "$PHASE0" && pass "network-failure rule" || fail "network-failure rule missing"
+grep -Fq "safety net" "$PHASE0" && pass "401 safety net documented" || fail "401 safety net missing"
+
+echo ""
+echo "══ token-preflight smoke: $PASS passed, $FAIL failed ══"
+[ "$FAIL" -eq 0 ]

package/pipeline/scripts/smoke-tracker-contract.sh

@@ -123,6 +123,68 @@ for mode_file in "${MODE_FILES[@]}"; do
   fi
 done
 
+# ──────────────────────────────────────────────────────────────────────────
+echo "→ 7. Live-tracker UX contract (now/cost actions, mirror rule, continuation)"
+if grep -q 'phase-tracker.sh now' "$CONTRACT_FILE" \
+   && grep -q 'cost <N>' "$CONTRACT_FILE"; then
+  pass "tracker-contract documents now + cost actions"
+else
+  fail "tracker-contract missing now/cost action docs"
+fi
+if grep -q '\[cached\]' "$CONTRACT_FILE" || grep -q '\[cached_count\]' "$CONTRACT_FILE"; then
+  pass "tracker-contract documents the 4th cached tokens arg"
+else
+  fail "tracker-contract missing the cached tokens arg"
+fi
+if grep -q 'Progress-line mirror' "$CONTRACT_FILE"; then
+  pass "tracker-contract declares the progress-line mirror rule"
+else
+  fail "tracker-contract missing the progress-line mirror rule"
+fi
+if grep -q 'Continuation runs' "$CONTRACT_FILE" \
+   && grep -q 'never re-initialized' "$CONTRACT_FILE"; then
+  pass "tracker-contract declares the continuation-runs rule"
+else
+  fail "tracker-contract missing the continuation-runs rule"
+fi
+if grep -q 'Completion tile suffix' "$CONTRACT_FILE"; then
+  pass "tracker-contract declares the completion tile suffix"
+else
+  fail "tracker-contract missing the completion tile suffix"
+fi
+
+# ──────────────────────────────────────────────────────────────────────────
+echo "→ 8. Continuation wiring in finish + manual-test + phase-5"
+FINISH_FILE="$CMDS_DIR/finish.md"
+if grep -q '\[ ! -f "\$STATE" \]' "$FINISH_FILE"; then
+  pass "finish.md guards init behind a state-file existence check"
+else
+  fail "finish.md must not init the tracker unconditionally"
+fi
+if grep -q 'Continuing' "$FINISH_FILE" && grep -q 'cost total' "$FINISH_FILE"; then
+  pass "finish.md prints the inherited-history line via cost total"
+else
+  fail "finish.md missing the continuation summary line"
+fi
+MANUAL_FILE="$CMDS_DIR/manual-test.md"
+if grep -q 'now 5 "awaiting local test (user)"' "$MANUAL_FILE"; then
+  pass "manual-test.md sets the waiting state via now 5"
+else
+  fail "manual-test.md missing the now 5 waiting state"
+fi
+PHASE5_FILE="$CMDS_DIR/refs/phases/phase-5-test.md"
+if grep -q 'now 5 "awaiting local test (user)"' "$PHASE5_FILE"; then
+  pass "phase-5-test.md sets the waiting state via now 5"
+else
+  fail "phase-5-test.md missing the now 5 waiting state"
+fi
+RESUME_FILE="$CMDS_DIR/resume.md"
+if grep -q 'Rebuild the phase tiles' "$RESUME_FILE"; then
+  pass "resume.md rebuilds the phase tiles from state"
+else
+  fail "resume.md missing the tile-rebuild step"
+fi
+
 # ──────────────────────────────────────────────────────────────────────────
 echo ""
 echo "══ tracker-contract smoke: $PASS passed, $FAIL failed ══"

package/pipeline/skills/.skills-index.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-07-02T18:42:58.207Z",
-  "skillCount": 222,
+  "generatedAt": "2026-07-06T11:38:47.307Z",
+  "skillCount": 224,
   "entries": [
     {
       "name": "accessibility-compliance-accessibility-audit",
@@ -1031,7 +1031,7 @@
     },
     {
       "name": "multi-agent",
-      "description": "Task orchestrator: runs the full pipeline from a Jira ID or GitHub Issue URL  -  analysis → plan → TDD development → parallel review (Opus + Sonnet on Claude Code, GPT + Opus + Sonnet on Copilot CLI) → commit → log. Every step is written to agent-log.md.",
+      "description": "Task orchestrator: runs the full pipeline from a Jira ID or GitHub Issue URL  -  analysis → plan → TDD development → parallel review (Fable + Sonnet on Claude Code, GPT + Opus + Sonnet on Copilot CLI) → commit → log. Every step is written to agent-log.md.",
       "platform": null,
       "group": "core",
       "triggerKeywords": [],
@@ -1155,6 +1155,24 @@
       "triggerPaths": [],
       "relativePath": "shared/core/multi-agent-garbage-collect/SKILL.md"
     },
+    {
+      "name": "multi-agent-generate-bug",
+      "description": "Create a standards-compliant Jira Bug: mines project conventions, drafts in outputLanguage, full preview + explicit approval before create.",
+      "platform": null,
+      "group": "core",
+      "triggerKeywords": [],
+      "triggerPaths": [],
+      "relativePath": "shared/core/multi-agent-generate-bug/SKILL.md"
+    },
+    {
+      "name": "multi-agent-generate-task",
+      "description": "Create a standards-compliant Jira Task: mines project conventions, drafts in outputLanguage, full preview + explicit approval before create.",
+      "platform": null,
+      "group": "core",
+      "triggerKeywords": [],
+      "triggerPaths": [],
+      "relativePath": "shared/core/multi-agent-generate-task/SKILL.md"
+    },
     {
       "name": "multi-agent-help",
       "description": "Multi-agent pipeline usage guide  -  renders in EN or TR per prefs.global.outputLanguage (falls back to promptLanguage for backward compatibility).",
@@ -1274,7 +1292,7 @@
     },
     {
       "name": "multi-agent-review",
-      "description": "Run parallel review on the current branch's diff: 2 models on Claude Code (Opus + Sonnet), 3 models on Copilot CLI (GPT + Opus + Sonnet). Review-only slice of the pipeline.",
+      "description": "Run parallel review on the current branch's diff: 2 models on Claude Code (Fable + Sonnet), 3 models on Copilot CLI (GPT + Opus + Sonnet). Review-only slice of the pipeline.",
       "platform": null,
       "group": "core",
       "triggerKeywords": [],

package/pipeline/skills/shared/core/multi-agent/SKILL.md

@@ -309,7 +309,8 @@ Every user-facing phase title  -  TaskCreate cards, `phase-banner.sh` headers, a
 All TaskCreate calls fire in strict phase-number order BEFORE any TaskUpdate is applied (Claude Code path; Copilot CLI does not have a TaskList widget so this rule is Claude-only). The native widget renders by creation order, not by phase-number metadata  -  out-of-order calls produce visually scrambled tile stacks (e.g. `1 ✓ · 2 ✓ · 4 ✓ · 0 ▶ · 3 ☐`) even when the underlying state file is correct. Pre-marking phases as completed/skipped before Phase 0 starts is FORBIDDEN: register the tile in order with default `pending` status, then flip via TaskUpdate when the phase actually short-circuits. Mode-specific phase sets:
 
 - Full pipeline (`multi-agent`, `multi-agent-autopilot`, `multi-agent-local`, `multi-agent-local-autopilot`): 0 → 1 → 2 → 3 → 4 → 5 → 6 → 7
-- `--dev` modes (`multi-agent-dev`, `multi-agent-dev-autopilot`, `multi-agent-dev-local`, `multi-agent-dev-local-autopilot`): 0 → 3 → 5 → 6 → 7 (phases 1/2/4 are NOT TaskCreate'd at all)
+- `multi-agent-dev`: 0 → 3 → 5 → 6 → 7 (phases 1/2/4 are NOT TaskCreate'd at all)
+- `multi-agent-dev-autopilot`, `multi-agent-dev-local`, `multi-agent-dev-local-autopilot`: 0 → 3 → 6 → 7 (phases 1/2/4/5 are NOT TaskCreate'd at all  -  the autopilot/local variants drop the interactive Phase 5 test gate)
 
 Full contract: `refs/tracker-contract.md` section "TaskCreate ordering (strict)".
 

package/pipeline/skills/shared/core/multi-agent-channels/SKILL.md

@@ -41,8 +41,9 @@ multi-agent-channels PROJ-12345 --dry-run                  # preview, no POST
 3. **Menu (multi-select)**  -  channel + content, previous selections pre-ticked from `prefs.global.reportChannels` + `prefs.global.reportContent`. Greyed-out rules per context availability.
 4. **Mode short-circuit**  -  `--channels X,Y` + `--content A,B` flags skip menu. Autopilot ALWAYS pauses at the menu (v5.7+ Phase 7 exception).
 5. **Generator**  -  for each selected content source, produce a section body. Humanizer pass per channel separately.
-6. **Channel dispatch**  -  parallel adapter calls: PR description (reviewer-preserving PUT on Bitbucket), Jira comment (wiki markup), Confluence page (storage format + parent page), Wiki (component adapter  -  Case A scope multi-select or Case B precondition menu).
-7. **Summary**  -  per-adapter status line, persist selections to prefs.
+6. **Body preview + approval gate**  -  interactive runs render every selected channel's final body and ask Approve & post / Edit (loop) / Skip channels / Cancel BEFORE any external write. Skipped only by autopilot and `--dry-run`. What is posted is byte-identical to the approved preview.
+7. **Channel dispatch**  -  parallel adapter calls, never before the gate resolves: PR description (reviewer-preserving PUT on Bitbucket), Jira comment (wiki markup), Confluence page (storage format + parent page), Wiki (component adapter  -  Case A scope multi-select or Case B precondition menu).
+8. **Summary**  -  per-adapter status line, persist selections to prefs.
 
 ## Multi-select menu
 
@@ -222,6 +223,7 @@ Target length: < 80 lines (fits one screen). Auto-diff capped at 5 lines per sec
 - No markers  -  full replace each run, no `<!-- channels:start -->` bookmarks.
 - Every body item references a file/symbol/line from diff or pipeline log. No generic sentences.
 - Adapter failures are non-blocking  -  one channel failing does NOT abort others.
+- Approval before post  -  interactive runs never write to an external channel without the step 6 preview + approval. Autopilot and `--dry-run` are the only bypasses.
 
 ## Error handling
 

package/pipeline/skills/shared/core/multi-agent-generate-bug/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: multi-agent-generate-bug
+language: en
+description: "Create a standards-compliant Jira Bug: mines project conventions, drafts in outputLanguage, full preview + explicit approval before create."
+user-invocable: true
+argument-hint: "[\"<free-text description>\"] [figma-url]  -  both optional; pasted logs/screens in the text land in Steps to Reproduce / Environment"
+---
+
+# multi-agent generate-bug  -  Standards-Compliant Jira Bug Creator
+
+**Input**: $ARGUMENTS
+
+Creates exactly one Jira **Bug**, and only after explicit approval. No branches, no commits, no worktrees. Profile: `ISSUE_TYPE=Bug`; default description sections: Steps to Reproduce, Expected Result, Actual Result, Environment, Design Reference (only when a Figma URL is given), Notes.
+
+> **Language**: issue content (summary + description) and user-facing questions follow `prefs.global.outputLanguage`  -  intentional exception to the "external payloads stay English" default (the issue is authored for the user's team). Code identifiers and URLs stay verbatim.
+
+## Steps
+
+1. **Account + token**  -  pick the Jira account (auto-select when single), then:
+   ```bash
+   TOKEN=$(~/.copilot/lib/credential-store.sh get "$ACCOUNT_JIRA_TOKEN_KEY")
+   ```
+   Missing/expired (401) → Token Save Flow; user skips → abort, nothing created.
+2. **Project key**  -  `figmaConfig.jira.projectKey` → `prefs.global.defaultJiraKey` → fetch `GET /rest/api/2/project`, ask, cache the choice.
+3. **Parse input**  -  `figma.com` URL in `$ARGUMENTS` → `FIGMA_URL` (node-id `-` → `:`); the rest is `FREE_TEXT`. Logs, stack traces, and device/OS mentions map into Steps to Reproduce / Environment. Both empty → ask for a description. Figma URL is always optional.
+4. **Convention mining + field discovery + sprint** (read-only GETs):
+   - Sample: `GET /rest/api/2/search?jql=project={KEY} AND issuetype=Bug ORDER BY created DESC&fields=summary,description,labels,components,priority,fixVersions&maxResults=30`. Extract summary prefix pattern (>= 40% threshold), dominant description heading set (>= 50% overrides the profile sections), top-5 labels/components, modal priority, epic usage rate.
+   - `GET /rest/api/2/issue/createmeta?projectKeys={KEY}&issuetypeNames=Bug&expand=projects.issuetypes.fields` (404/empty → paged DC endpoint fallback). Required custom fields → step 6 questions with allowedValues options. Detect Sprint/Epic/Team fields generically via `schema.custom` ids.
+   - `GET /rest/agile/1.0/board?projectKeyOrId={KEY}` → (ask when multiple) → `GET /rest/agile/1.0/board/{id}/sprint?state=active`. No board/Agile 404 → sprint option silently omitted.
+5. **Figma context** (only when `FIGMA_URL` set)  -  3-tier chain (MCP → REST figma_pat → user screenshot); standalone command, MCP allowed here. Figma failures never block issue creation.
+6. **Draft + clarifying questions**  -  compose summary (`{minedPrefix} {title}`, 255 trunc) + description (mined heading set or profile sections, Jira wiki markup `h3.`, humanizer pass) in `outputLanguage`; body to a file for `jq -n --rawfile` (UTF-8 verbatim, `--data-binary @file`, no re-encode). Ask ONLY genuinely unknown fields: component, epic (when usage rate is high), priority (when norm ambiguous), labels, assignee, sprint vs backlog, required customs, missing Steps to Reproduce / Environment. Never invent repro steps or environments the user did not supply.
+7. **Full preview + approval gate (never skipped)**  -  render the complete issue (all fields + full description + attachment plan, screenshot default off). Ask: `Approve` / `Edit` (apply → re-render → re-ask, loop) / `Cancel` (nothing created). No flag or mode bypasses this gate.
+8. **Create**  -  `POST /rest/api/2/issue` with `jq -n --rawfile` payload + `curl --data-binary @file`. 400 field errors → show verbatim, re-ask those fields, re-preview.
+9. **Post-create** (each failure-isolated: warn + continue): sprint chosen → `POST /rest/agile/1.0/sprint/{id}/issue` `{"issues":["KEY"]}`; Figma → `POST /rest/api/2/issue/{KEY}/remotelink`; screenshot opt-in → `POST /rest/api/2/issue/{KEY}/attachments` with `X-Atlassian-Token: no-check`.
+10. **Report**  -  `Created {KEY}: https://{host}/browse/{KEY}` + which post-steps ran.
+
+## Error paths
+
+401 token → Save Flow or abort (nothing created); mining/createmeta 403 → profile defaults + reactive 400 handling; zero sampled issues → skip mining, note in preview; no board/active sprint → backlog implied, say so; create 5xx → one retry then abort keeping the draft file; post-create failure → warn + continue.

package/pipeline/skills/shared/core/multi-agent-generate-task/SKILL.md

@@ -0,0 +1,39 @@
+---
+name: multi-agent-generate-task
+language: en
+description: "Create a standards-compliant Jira Task: mines project conventions, drafts in outputLanguage, full preview + explicit approval before create."
+user-invocable: true
+argument-hint: "[\"<free-text description>\"] [figma-url]  -  both optional, asked interactively when missing"
+---
+
+# multi-agent generate-task  -  Standards-Compliant Jira Task Creator
+
+**Input**: $ARGUMENTS
+
+Creates exactly one Jira **Task**, and only after explicit approval. No branches, no commits, no worktrees. Profile: `ISSUE_TYPE=Task`; default description sections: Goal, Scope, Acceptance Criteria, Design Reference (only when a Figma URL is given), Notes.
+
+> **Language**: issue content (summary + description) and user-facing questions follow `prefs.global.outputLanguage`  -  intentional exception to the "external payloads stay English" default (the issue is authored for the user's team). Code identifiers and URLs stay verbatim.
+
+## Steps
+
+1. **Account + token**  -  pick the Jira account (auto-select when single), then:
+   ```bash
+   TOKEN=$(~/.copilot/lib/credential-store.sh get "$ACCOUNT_JIRA_TOKEN_KEY")
+   ```
+   Missing/expired (401) → Token Save Flow; user skips → abort, nothing created.
+2. **Project key**  -  `figmaConfig.jira.projectKey` → `prefs.global.defaultJiraKey` → fetch `GET /rest/api/2/project`, ask, cache the choice.
+3. **Parse input**  -  `figma.com` URL in `$ARGUMENTS` → `FIGMA_URL` (node-id `-` → `:`); the rest is `FREE_TEXT`. Both empty → ask for a description. Figma URL is always optional.
+4. **Convention mining + field discovery + sprint** (read-only GETs):
+   - Sample: `GET /rest/api/2/search?jql=project={KEY} AND issuetype=Task ORDER BY created DESC&fields=summary,description,labels,components,priority,fixVersions&maxResults=30`. Extract summary prefix pattern (>= 40% threshold), dominant description heading set (>= 50% overrides the profile sections), top-5 labels/components, modal priority, epic usage rate.
+   - `GET /rest/api/2/issue/createmeta?projectKeys={KEY}&issuetypeNames=Task&expand=projects.issuetypes.fields` (404/empty → paged DC endpoint fallback). Required custom fields → step 6 questions with allowedValues options. Detect Sprint/Epic/Team fields generically via `schema.custom` ids.
+   - `GET /rest/agile/1.0/board?projectKeyOrId={KEY}` → (ask when multiple) → `GET /rest/agile/1.0/board/{id}/sprint?state=active`. No board/Agile 404 → sprint option silently omitted.
+5. **Figma context** (only when `FIGMA_URL` set)  -  3-tier chain (MCP → REST figma_pat → user screenshot); standalone command, MCP allowed here. Figma failures never block issue creation.
+6. **Draft + clarifying questions**  -  compose summary (`{minedPrefix} {title}`, 255 trunc) + description (mined heading set or profile sections, Jira wiki markup `h3.`, humanizer pass) in `outputLanguage`; body to a file for `jq -n --rawfile` (UTF-8 verbatim, `--data-binary @file`, no re-encode). Ask ONLY genuinely unknown fields: component, epic (when usage rate is high), priority (when norm ambiguous), labels, assignee, sprint vs backlog, required customs. Never invent content the user did not supply.
+7. **Full preview + approval gate (never skipped)**  -  render the complete issue (all fields + full description + attachment plan, screenshot default off). Ask: `Approve` / `Edit` (apply → re-render → re-ask, loop) / `Cancel` (nothing created). No flag or mode bypasses this gate.
+8. **Create**  -  `POST /rest/api/2/issue` with `jq -n --rawfile` payload + `curl --data-binary @file`. 400 field errors → show verbatim, re-ask those fields, re-preview.
+9. **Post-create** (each failure-isolated: warn + continue): sprint chosen → `POST /rest/agile/1.0/sprint/{id}/issue` `{"issues":["KEY"]}`; Figma → `POST /rest/api/2/issue/{KEY}/remotelink`; screenshot opt-in → `POST /rest/api/2/issue/{KEY}/attachments` with `X-Atlassian-Token: no-check`.
+10. **Report**  -  `Created {KEY}: https://{host}/browse/{KEY}` + which post-steps ran.
+
+## Error paths
+
+401 token → Save Flow or abort (nothing created); mining/createmeta 403 → profile defaults + reactive 400 handling; zero sampled issues → skip mining, note in preview; no board/active sprint → backlog implied, say so; create 5xx → one retry then abort keeping the draft file; post-create failure → warn + continue.

package/pipeline/skills/shared/core/multi-agent-help/SKILL.md

@@ -98,6 +98,8 @@ Utility Commands (dash form on Copilot, colon form on Claude Code):
   /multi-agent:purge          Worktree + logs  -  full reset (double confirm)
   /multi-agent:channels       Post multi-channel report (Jira/Confluence/Wiki/PR)
   /multi-agent:review         Review current diff only
+  /multi-agent:generate-task ["desc"] [figma-url]  Create a Jira Task matching team conventions (preview + approval)
+  /multi-agent:generate-bug ["desc"] [figma-url]   Create a Jira Bug matching team conventions (preview + approval)
   /multi-agent:sync           Sync ecosystem (Claude + Copilot + website + remote-control)
   /multi-agent:setup          Keychain tokens + Git identity + language onboarding
   /multi-agent:language [en|tr]  Show or set prompt language
@@ -233,6 +235,8 @@ Utility Komutları:
   /multi-agent:purge          Worktree + log'lar  -  tam reset (çift onay)
   /multi-agent:channels       Multi-channel rapor gönder (Jira/Confluence/Wiki/PR)
   /multi-agent:review         Sadece mevcut diff'i review et
+  /multi-agent:generate-task ["açıklama"] [figma-url]  Takım standartlarına uygun Jira Task oluştur (önizleme + onay)
+  /multi-agent:generate-bug ["açıklama"] [figma-url]   Takım standartlarına uygun Jira Bug oluştur (önizleme + onay)
   /multi-agent:sync           Ekosistemi senkronize et
   /multi-agent:setup          Keychain token + Git kimliği + dil onboarding
   /multi-agent:language [en|tr]  Prompt dilini göster veya ayarla

package/pipeline/skills/shared/core/multi-agent-sync/SKILL.md

@@ -33,7 +33,7 @@ Run all steps automatically:
 Step 0: FIGMA_SYNC  (opt-in) pipeline/scripts/sync-figma-source.sh
                     -- incremental pull from upstream if figmaSource.path is set
 Step 1: DETECT      Compare timestamps, find stale targets
-Step 2: COPILOT     Claude Code -> Copilot CLI (instructions + 35 sub-command skills)
+Step 2: COPILOT     Claude Code -> Copilot CLI (instructions + 37 sub-command skills)
 Step 3: REPO        Claude Code -> pipeline repo (genericized, personal data scrub)
 Step 4: WEBSITE     Version + phase/model counts -> {website-host} (i18n + projects.ts)
 Step 5: REMOTE      Pipeline references -> remote-control README
@@ -158,14 +158,14 @@ When invoked with the `release` argument:
 |-------------|-------------|
 | `~/.claude/commands/multi-agent/{cmd}.md` | `~/.copilot/skills/multi-agent-{cmd}/SKILL.md` |
 
-**35 commands are synced** (canonical inventory  -  must match `cross-cli-contract.md` section 1; drift = contract violation):
+**37 commands are synced** (canonical inventory  -  must match `cross-cli-contract.md` section 1; drift = contract violation):
 
 ```
 analysis, analysis-resolve, autopilot, build-optimize, channels, delete, dev,
 dev-autopilot, dev-local, dev-local-autopilot, diff-explain, finish, garbage-collect,
-help, issue, jira, kill, language, local, local-autopilot, log, manual-test,
-prune-logs, purge, refactor, resume, review, scan, search, setup, stack, status,
-sync, test, update
+generate-bug, generate-task, help, issue, jira, kill, language, local,
+local-autopilot, log, manual-test, prune-logs, purge, refactor, resume, review,
+scan, search, setup, stack, status, sync, test, update
 ```
 
 **NOT synced**: `refs/*`  -  Lazy-load references, Claude Code specific

package/pipeline/skills/skills-index.md

@@ -3,7 +3,7 @@
 > Auto-generated by `pipeline/scripts/build-skills-index.mjs`  -  do not hand-edit.
 > Regenerate with `node pipeline/scripts/build-skills-index.mjs`.
 
-**222 skills** across 5 groups.
+**224 skills** across 5 groups.
 
 | Group | Name | Platform | Description |
 |-------|------|----------|-------------|
@@ -121,7 +121,7 @@
 | external | `mapkit-location` |  -  | Implement, review, or improve maps and location features in iOS/macOS apps using MapKit and CoreLocation. Use when working with Map views, a |
 | external | `metrickit-diagnostics` |  -  | Collect and analyze on-device performance metrics and crash diagnostics using MetricKit. Use when setting up MXMetricManager, handling MXMet |
 | external | `monorepo-architect` |  -  | Expert in monorepo architecture, build systems, and dependency management at scale. Masters Nx, Turborepo, Bazel, and Lerna for efficient mu |
-| core | `multi-agent` |  -  | Task orchestrator: runs the full pipeline from a Jira ID or GitHub Issue URL  -  analysis → plan → TDD development → parallel review (Opus + |
+| core | `multi-agent` |  -  | Task orchestrator: runs the full pipeline from a Jira ID or GitHub Issue URL  -  analysis → plan → TDD development → parallel review (Fable  |
 | core | `multi-agent-analysis` |  -  | Standalone feature-spec analysis (v3 template). Platform-agnostic concept layer with repo-driven convention extraction and per-platform Pass |
 | core | `multi-agent-analysis-resolve` |  -  | Resolve the Section 20 Risks and Open Questions of an analysis v3 document one row at a time. Proposes up to 3 source-labeled answer candida |
 | core | `multi-agent-autopilot` |  -  | Launch any task in autopilot mode: skips every confirmation, runs end-to-end autonomously. |
@@ -135,6 +135,8 @@
 | core | `multi-agent-diff-explain` |  -  | Map Phase 4 triage findings to branch diff lines. Read-only post-hoc command, used after review to answer 'which finding lines up with which |
 | core | `multi-agent-finish` |  -  | Continue already-done LOCAL work through the pipeline tail: Review → Build+Test → Commit/PR → Report (technical analysis + Jira test-scenari |
 | core | `multi-agent-garbage-collect` |  -  | Sweep leftover /tmp scratch (picker state, review diffs, channel payloads, analysis drafts) from past runs. Dry-run first; confirms before d |
+| core | `multi-agent-generate-bug` |  -  | Create a standards-compliant Jira Bug: mines project conventions, drafts in outputLanguage, full preview + explicit approval before create. |
+| core | `multi-agent-generate-task` |  -  | Create a standards-compliant Jira Task: mines project conventions, drafts in outputLanguage, full preview + explicit approval before create. |
 | core | `multi-agent-help` |  -  | Multi-agent pipeline usage guide  -  renders in EN or TR per prefs.global.outputLanguage (falls back to promptLanguage for backward compatib |
 | core | `multi-agent-issue` |  -  | List unassigned GitHub issues, pick one, auto-assign, and launch the multi-agent pipeline. |
 | core | `multi-agent-jira` |  -  | List open Jira issues, pick one, and launch the multi-agent pipeline. |
@@ -148,7 +150,7 @@
 | core | `multi-agent-purge` |  -  | ⚠️ Wipes every worktree, branch, log, and state file. Irreversible; asks for double confirmation. |
 | core | `multi-agent-refactor` |  -  | Analyse the project, score it, draft an improvement plan, take approval, develop, then ask whether to sync. |
 | core | `multi-agent-resume` |  -  | Resume a stopped or failed task from the phase where it left off. |
-| core | `multi-agent-review` |  -  | Run parallel review on the current branch's diff: 2 models on Claude Code (Opus + Sonnet), 3 models on Copilot CLI (GPT + Opus + Sonnet). Re |
+| core | `multi-agent-review` |  -  | Run parallel review on the current branch's diff: 2 models on Claude Code (Fable + Sonnet), 3 models on Copilot CLI (GPT + Opus + Sonnet). R |
 | core | `multi-agent-scan` |  -  | Skill security scan: walks local skill directories against a tiered pattern catalog. |
 | core | `multi-agent-search` |  -  | Log search across every agent-log.md with smart ranking and filters. Optional --semantic flag queries the per-repo triage corpus. |
 | core | `multi-agent-setup` |  -  | First-run setup wizard: keychain token discovery, Git Identity onboarding, and pipeline preparation. |