@mmerterden/multi-agent-pipeline 12.5.0 → 12.7.0

package/pipeline/scripts/uninstall.mjs

@@ -64,10 +64,7 @@ export const PIPELINE_AGENT_FILES = [
  * Non-multi-agent core skills the installer ships from
  * pipeline/skills/shared/core/ (the multi-agent* dirs are matched by prefix).
  */
-export const PIPELINE_CORE_SKILL_DIRS = [
-  "apple-archive-compliance",
-  "google-play-compliance",
-];
+export const PIPELINE_CORE_SKILL_DIRS = ["apple-archive-compliance", "google-play-compliance"];
 
 const flags = process.argv.slice(2).filter((a) => a !== "uninstall");
 
@@ -79,14 +76,15 @@ const TOOL_FLAGS = [
   "--antigravity",
   "--codex",
 ];
-const explicitlyTargeted =
-  flags.some((f) => TOOL_FLAGS.includes(f)) || flags.includes("--all");
+const explicitlyTargeted = flags.some((f) => TOOL_FLAGS.includes(f)) || flags.includes("--all");
 
 const forClaude = flags.includes("--claude") || flags.includes("--all") || !explicitlyTargeted;
 const forCopilot = flags.includes("--copilot") || flags.includes("--all") || !explicitlyTargeted;
 const forCursor = flags.includes("--cursor") || flags.includes("--all") || !explicitlyTargeted;
-const forCopilotChat = flags.includes("--copilot-chat") || flags.includes("--all") || !explicitlyTargeted;
-const forAntigravity = flags.includes("--antigravity") || flags.includes("--all") || !explicitlyTargeted;
+const forCopilotChat =
+  flags.includes("--copilot-chat") || flags.includes("--all") || !explicitlyTargeted;
+const forAntigravity =
+  flags.includes("--antigravity") || flags.includes("--all") || !explicitlyTargeted;
 const forCodex = flags.includes("--codex") || flags.includes("--all") || !explicitlyTargeted;
 
 const dryRun = flags.includes("--dry-run");
@@ -194,8 +192,7 @@ function legacyTrailingContent(section) {
 function stripManagedBlock(filePath) {
   if (!existsSync(filePath)) return false;
   const content = readFileSync(filePath, "utf-8");
-  const re =
-    /\s*<!-- multi-agent-pipeline:begin -->[\s\S]*?<!-- multi-agent-pipeline:end -->\s*/m;
+  const re = /\s*<!-- multi-agent-pipeline:begin -->[\s\S]*?<!-- multi-agent-pipeline:end -->\s*/m;
   if (!re.test(content)) {
     // Copilot's install (install/copilot.mjs) does not wrap the block in
     // begin/end markers. v11.4.1+ writes an explicit end marker after the
@@ -276,8 +273,10 @@ function cleanClaudeSettings(settingsPath) {
     // entry as ours either way.
     settings.hooks.PreToolUse = settings.hooks.PreToolUse.filter(
       (h) =>
-        !((h.matcher === "Bash" || h.matcher === "Bash(git commit:*)") &&
-          h.hooks?.some((sub) => sub.command?.includes("pre-commit-check.sh"))),
+        !(
+          (h.matcher === "Bash" || h.matcher === "Bash(git commit:*)") &&
+          h.hooks?.some((sub) => sub.command?.includes("pre-commit-check.sh"))
+        ),
     );
     if (settings.hooks.PreToolUse.length < before) touched = true;
     if (settings.hooks.PreToolUse.length === 0) delete settings.hooks.PreToolUse;
@@ -305,7 +304,7 @@ async function confirm(question) {
   });
 }
 
-async function main() {
+export async function main() {
   console.log("");
   console.log("  multi-agent-pipeline uninstaller");
   console.log("  ================================");
@@ -313,12 +312,28 @@ async function main() {
   if (dryRun) console.log("  [DRY-RUN] Nothing will be modified.");
   console.log("");
   console.log("  Targets:");
-  if (forClaude) console.log("    - Claude Code (~/.claude/{commands/multi-agent, scripts, multi-agent-refs, schemas, lib} + pipeline skills + pipeline agent files)");
-  if (forCopilot) console.log("    - Copilot CLI (~/.copilot/{scripts, schemas, lib} + pipeline skills + pipeline agent files + copilot-instructions.md section)");
-  if (forCursor) console.log(`    - Cursor (${adapterTarget}/.cursor/rules/multi-agent-* + .cursorrules)`);
-  if (forCopilotChat) console.log(`    - GitHub Copilot Chat (${adapterTarget}/.github/copilot-instructions.md block + .github/instructions/multi-agent-*)`);
-  if (forAntigravity) console.log(`    - Antigravity (${adapterTarget}/.agent/rules + .agent/workflows + AGENTS.md block + .agent/mcp_config.json)`);
-  if (forCodex) console.log("    - OpenAI Codex CLI (~/.codex/prompts/multi-agent.md + AGENTS.md block + config.toml mcp block)");
+  if (forClaude)
+    console.log(
+      "    - Claude Code (~/.claude/{commands/multi-agent, scripts, multi-agent-refs, schemas, lib} + pipeline skills + pipeline agent files)",
+    );
+  if (forCopilot)
+    console.log(
+      "    - Copilot CLI (~/.copilot/{scripts, schemas, lib} + pipeline skills + pipeline agent files + copilot-instructions.md section)",
+    );
+  if (forCursor)
+    console.log(`    - Cursor (${adapterTarget}/.cursor/rules/multi-agent-* + .cursorrules)`);
+  if (forCopilotChat)
+    console.log(
+      `    - GitHub Copilot Chat (${adapterTarget}/.github/copilot-instructions.md block + .github/instructions/multi-agent-*)`,
+    );
+  if (forAntigravity)
+    console.log(
+      `    - Antigravity (${adapterTarget}/.agent/rules + .agent/workflows + AGENTS.md block + .agent/mcp_config.json)`,
+    );
+  if (forCodex)
+    console.log(
+      "    - OpenAI Codex CLI (~/.codex/prompts/multi-agent.md + AGENTS.md block + config.toml mcp block)",
+    );
   console.log("");
   if (allData) {
     console.log("  FULL CLEANUP (--all-data) also removes:");
@@ -327,7 +342,9 @@ async function main() {
     console.log("");
   }
   console.log("  PRESERVED (never touched):");
-  console.log("    - Personal access tokens in OS credential store (Keychain / Credential Manager / libsecret)");
+  console.log(
+    "    - Personal access tokens in OS credential store (Keychain / Credential Manager / libsecret)",
+  );
   console.log("    - ~/.claude/CLAUDE.md (your customizations)");
   console.log("    - ~/.claude/rules/ (user-owned; installed write-if-missing, never overwritten)");
   if (!allData) console.log("    - ~/.claude/multi-agent-preferences.json (your settings)");
@@ -357,8 +374,18 @@ async function main() {
     // (e.g. the git-attribution rule) -- asymmetric data loss. Leave rules
     // in place on uninstall, exactly like CLAUDE.md and preferences.
     const skills = join(CLAUDE, "skills");
-    let n = rmMatchingDirs(skills, (name) => name === "multi-agent" || name.startsWith("multi-agent-"));
-    n += rmMatchingDirs(skills, (name) => name === "figma-ios" || name === "figma-android" || name === "figma-common" || name === "figma-to-component");
+    let n = rmMatchingDirs(
+      skills,
+      (name) => name === "multi-agent" || name.startsWith("multi-agent-"),
+    );
+    n += rmMatchingDirs(
+      skills,
+      (name) =>
+        name === "figma-ios" ||
+        name === "figma-android" ||
+        name === "figma-common" ||
+        name === "figma-to-component",
+    );
     n += rmMatchingDirs(skills, (name) => PIPELINE_CORE_SKILL_DIRS.includes(name));
     if (n > 0) console.log(`    removed ${n} skill dir(s) under ${skills}`);
     rmIfExists(join(skills, ".skills-index.json"));
@@ -380,8 +407,18 @@ async function main() {
     rmIfExists(join(COP, "lib"));
     rmIfExists(join(COP, ".pipeline-version"));
     const skills = join(COP, "skills");
-    let n = rmMatchingDirs(skills, (name) => name === "multi-agent" || name.startsWith("multi-agent-"));
-    n += rmMatchingDirs(skills, (name) => name === "figma-ios" || name === "figma-android" || name === "figma-common" || name === "figma-to-component");
+    let n = rmMatchingDirs(
+      skills,
+      (name) => name === "multi-agent" || name.startsWith("multi-agent-"),
+    );
+    n += rmMatchingDirs(
+      skills,
+      (name) =>
+        name === "figma-ios" ||
+        name === "figma-android" ||
+        name === "figma-common" ||
+        name === "figma-to-component",
+    );
     n += rmMatchingDirs(skills, (name) => PIPELINE_CORE_SKILL_DIRS.includes(name));
     if (n > 0) console.log(`    removed ${n} skill dir(s) under ${skills}`);
     rmIfExists(join(skills, ".skills-index.json"));
@@ -434,7 +471,9 @@ async function main() {
     if (n > 0) console.log(`    removed ${n} .agent file(s)`);
     stripManagedBlock(join(adapterTarget, "AGENTS.md"));
     if (existsSync(join(adapterTarget, ".agent", "mcp_config.json")))
-      console.log("    note: .agent/mcp_config.json left untouched (may hold user servers)  -  remove pipeline entries manually if present");
+      console.log(
+        "    note: .agent/mcp_config.json left untouched (may hold user servers)  -  remove pipeline entries manually if present",
+      );
   }
 
   if (forCodex && HOME) {
@@ -444,23 +483,29 @@ async function main() {
     rmIfExists(join(CODEX, "prompts", "multi-agent.md"));
     stripManagedBlock(join(CODEX, "AGENTS.md"));
     if (existsSync(join(CODEX, "config.toml")))
-      console.log("    note: ~/.codex/config.toml left untouched (may hold user MCP servers)  -  remove pipeline entries manually if present");
+      console.log(
+        "    note: ~/.codex/config.toml left untouched (may hold user MCP servers)  -  remove pipeline entries manually if present",
+      );
   }
 
   console.log("");
   console.log("  ✓ Pipeline removed.");
   if (!allData) {
     console.log("");
-    console.log("  Kept your pipeline settings + logs. To remove those too, re-run with --all-data.");
+    console.log(
+      "  Kept your pipeline settings + logs. To remove those too, re-run with --all-data.",
+    );
   } else {
     console.log("");
-    console.log("  Full cleanup done. Still on disk (user-owned, remove by hand if you want a bare system):");
+    console.log(
+      "  Full cleanup done. Still on disk (user-owned, remove by hand if you want a bare system):",
+    );
     console.log("    - ~/.claude/CLAUDE.md");
     console.log("    - ~/.claude/rules/");
   }
   console.log("");
   console.log("  Personal access tokens were NOT touched. Inspect with:");
-  console.log("    macOS:   security find-generic-password -s \"<service>\" -w");
+  console.log('    macOS:   security find-generic-password -s "<service>" -w');
   console.log("    Windows: cmdkey /list:<target>");
   console.log("    Linux:   secret-tool search service <service>");
   console.log("");
@@ -470,8 +515,7 @@ async function main() {
 
 // Run only when executed directly (node uninstall.mjs). Guard lets tests
 // import the exported constants without triggering the uninstall.
-const isMainModule =
-  process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
+const isMainModule = process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
 if (isMainModule) {
   main().catch((e) => {
     console.error("uninstall failed:", e.message);

package/pipeline/scripts/validate-analysis-doc.mjs

@@ -131,7 +131,9 @@ function main() {
       headingBlobLower.includes("ui test") ||
       headingBlobLower.includes("ui-test");
     if (!hasUi) {
-      errors.push("front-matter ui_tests: true but no Section 15.6 UI test scenarios found (Locked 31)");
+      errors.push(
+        "front-matter ui_tests: true but no Section 15.6 UI test scenarios found (Locked 31)",
+      );
     }
   }
   if (a11yDepth === "full") {
@@ -140,7 +142,9 @@ function main() {
       headingBlobLower.includes("walkthrough") ||
       headingBlobLower.includes("gezinme");
     if (!hasWalkthrough) {
-      errors.push("front-matter a11y_depth: full but no Section 16.2 screen-reader walkthrough found");
+      errors.push(
+        "front-matter a11y_depth: full but no Section 16.2 screen-reader walkthrough found",
+      );
     }
   }
 
@@ -156,7 +160,9 @@ function main() {
 
   // 4. Placeholder whole-section bodies (Locked 2)
   if (/^\s*(TBD|Not applicable|N\/A)\s*$/im.test(text)) {
-    warns.push('a line is a bare "TBD"/"Not applicable"/"N/A" body; omit the section instead (Locked 2)');
+    warns.push(
+      'a line is a bare "TBD"/"Not applicable"/"N/A" body; omit the section instead (Locked 2)',
+    );
   }
 
   // 5. Traceability (Full mode only, Locked 31)
@@ -173,7 +179,9 @@ function main() {
     }
     for (const [id, n] of counts) {
       if (n < 2) {
-        warns.push(`business rule ${id} is defined but never referenced downstream (test/acceptance/analytics) - Locked 31 traceability`);
+        warns.push(
+          `business rule ${id} is defined but never referenced downstream (test/acceptance/analytics) - Locked 31 traceability`,
+        );
       }
     }
   }
@@ -182,7 +190,9 @@ function main() {
   for (const w of warns) console.error(`WARN: ${w}`);
   for (const e of errors) console.error(`ERROR: ${e}`);
   if (errors.length > 0) {
-    console.error(`validate-analysis-doc: FAIL (${errors.length} error(s), ${warns.length} warning(s))`);
+    console.error(
+      `validate-analysis-doc: FAIL (${errors.length} error(s), ${warns.length} warning(s))`,
+    );
     process.exit(1);
   }
   if (strict && warns.length > 0) {

package/pipeline/scripts/validate-diff-risk.mjs

@@ -49,22 +49,27 @@ function validate(obj) {
   if (typeof obj !== "object" || obj === null || Array.isArray(obj)) {
     return ["root must be an object"];
   }
-  if (obj.schemaVersion !== "1.1.0") errors.push(`schemaVersion must be "1.1.0", got ${JSON.stringify(obj.schemaVersion)}`);
+  if (obj.schemaVersion !== "1.1.0")
+    errors.push(`schemaVersion must be "1.1.0", got ${JSON.stringify(obj.schemaVersion)}`);
 
   if (typeof obj.task !== "object" || obj.task === null) {
     errors.push("task must be an object");
   } else {
-    if (typeof obj.task.base !== "string" || !obj.task.base.length) errors.push("task.base must be a non-empty string");
-    if (typeof obj.task.head !== "string" || !obj.task.head.length) errors.push("task.head must be a non-empty string");
+    if (typeof obj.task.base !== "string" || !obj.task.base.length)
+      errors.push("task.base must be a non-empty string");
+    if (typeof obj.task.head !== "string" || !obj.task.head.length)
+      errors.push("task.head must be a non-empty string");
   }
 
   if (typeof obj.totals !== "object" || obj.totals === null) {
     errors.push("totals must be an object");
   } else {
     for (const k of ["files", "loc_added", "loc_removed"]) {
-      if (!Number.isInteger(obj.totals[k]) || obj.totals[k] < 0) errors.push(`totals.${k} must be a non-negative integer`);
+      if (!Number.isInteger(obj.totals[k]) || obj.totals[k] < 0)
+        errors.push(`totals.${k} must be a non-negative integer`);
     }
-    if (typeof obj.totals.max_score !== "number" || obj.totals.max_score < 0) errors.push("totals.max_score must be a non-negative number");
+    if (typeof obj.totals.max_score !== "number" || obj.totals.max_score < 0)
+      errors.push("totals.max_score must be a non-negative number");
   }
 
   if (!Array.isArray(obj.files)) {
@@ -73,25 +78,33 @@ function validate(obj) {
     obj.files.forEach((row, i) => {
       const p = `files[${i}]`;
       if (typeof row !== "object" || row === null) {
-        errors.push(`${p} must be an object`); return;
+        errors.push(`${p} must be an object`);
+        return;
       }
-      if (typeof row.path !== "string" || !row.path.length) errors.push(`${p}.path must be a non-empty string`);
-      if (typeof row.score !== "number" || row.score < 0) errors.push(`${p}.score must be a non-negative number`);
+      if (typeof row.path !== "string" || !row.path.length)
+        errors.push(`${p}.path must be a non-empty string`);
+      if (typeof row.score !== "number" || row.score < 0)
+        errors.push(`${p}.score must be a non-negative number`);
       for (const k of ["loc_added", "loc_removed"]) {
-        if (!Number.isInteger(row[k]) || row[k] < 0) errors.push(`${p}.${k} must be a non-negative integer`);
+        if (!Number.isInteger(row[k]) || row[k] < 0)
+          errors.push(`${p}.${k} must be a non-negative integer`);
       }
       if (!Array.isArray(row.signals)) errors.push(`${p}.signals must be an array`);
-      else row.signals.forEach((s, j) => {
-        const sp = `${p}.signals[${j}]`;
-        if (!ALLOWED_SIGNALS.has(s.name)) errors.push(`${sp}.name "${s.name}" not in allowed set`);
-        if (typeof s.weight !== "number") errors.push(`${sp}.weight must be a number`);
-        if (typeof s.value !== "number") errors.push(`${sp}.value must be a number`);
-      });
+      else
+        row.signals.forEach((s, j) => {
+          const sp = `${p}.signals[${j}]`;
+          if (!ALLOWED_SIGNALS.has(s.name))
+            errors.push(`${sp}.name "${s.name}" not in allowed set`);
+          if (typeof s.weight !== "number") errors.push(`${sp}.weight must be a number`);
+          if (typeof s.value !== "number") errors.push(`${sp}.value must be a number`);
+        });
     });
     // Sort invariant
     for (let i = 1; i < obj.files.length; i++) {
       if (obj.files[i].score > obj.files[i - 1].score) {
-        errors.push(`files[] must be sorted by score descending (row ${i} score ${obj.files[i].score} > row ${i - 1} score ${obj.files[i - 1].score})`);
+        errors.push(
+          `files[] must be sorted by score descending (row ${i} score ${obj.files[i].score} > row ${i - 1} score ${obj.files[i - 1].score})`,
+        );
         break;
       }
     }
@@ -103,8 +116,9 @@ function validate(obj) {
 (async () => {
   const raw = await readInput();
   let obj;
-  try { obj = JSON.parse(raw); }
-  catch (e) {
+  try {
+    obj = JSON.parse(raw);
+  } catch (e) {
     console.log(JSON.stringify({ ok: false, errors: [`JSON parse error: ${e.message}`] }));
     process.exit(1);
   }

package/pipeline/scripts/validate-test-gap.mjs

@@ -34,15 +34,18 @@ function readInput() {
 
 function validate(obj) {
   const errors = [];
-  if (typeof obj !== "object" || obj === null || Array.isArray(obj)) return ["root must be an object"];
+  if (typeof obj !== "object" || obj === null || Array.isArray(obj))
+    return ["root must be an object"];
   if (obj.schemaVersion !== "1.0.0") errors.push(`schemaVersion must be "1.0.0"`);
-  if (!ALLOWED_STACK.has(obj.stack)) errors.push(`stack must be one of ${Array.from(ALLOWED_STACK).join(",")}`);
+  if (!ALLOWED_STACK.has(obj.stack))
+    errors.push(`stack must be one of ${Array.from(ALLOWED_STACK).join(",")}`);
 
   if (typeof obj.totals !== "object" || obj.totals === null) {
     errors.push("totals must be an object");
   } else {
     for (const k of ["sourcesScanned", "testsScanned", "gapCount"]) {
-      if (!Number.isInteger(obj.totals[k]) || obj.totals[k] < 0) errors.push(`totals.${k} must be a non-negative integer`);
+      if (!Number.isInteger(obj.totals[k]) || obj.totals[k] < 0)
+        errors.push(`totals.${k} must be a non-negative integer`);
     }
     if (typeof obj.totals.gapBySeverity !== "object" || obj.totals.gapBySeverity === null) {
       errors.push("totals.gapBySeverity must be an object");
@@ -60,12 +63,17 @@ function validate(obj) {
   } else {
     obj.gaps.forEach((g, i) => {
       const p = `gaps[${i}]`;
-      if (typeof g !== "object" || g === null) { errors.push(`${p} must be object`); return; }
-      if (typeof g.sourcePath !== "string" || !g.sourcePath.length) errors.push(`${p}.sourcePath required`);
+      if (typeof g !== "object" || g === null) {
+        errors.push(`${p} must be object`);
+        return;
+      }
+      if (typeof g.sourcePath !== "string" || !g.sourcePath.length)
+        errors.push(`${p}.sourcePath required`);
       if (typeof g.symbol !== "string" || !g.symbol.length) errors.push(`${p}.symbol required`);
       if (typeof g.kind !== "string" || !g.kind.length) errors.push(`${p}.kind required`);
       if (!ALLOWED_SEVERITY.has(g.severity)) errors.push(`${p}.severity invalid: ${g.severity}`);
-      if (!Array.isArray(g.expectedTestPaths) || g.expectedTestPaths.length === 0) errors.push(`${p}.expectedTestPaths must be a non-empty array`);
+      if (!Array.isArray(g.expectedTestPaths) || g.expectedTestPaths.length === 0)
+        errors.push(`${p}.expectedTestPaths must be a non-empty array`);
       if (typeof g.hint !== "string") errors.push(`${p}.hint must be a string`);
     });
   }
@@ -76,7 +84,9 @@ function validate(obj) {
 (async () => {
   const raw = await readInput();
   let obj;
-  try { obj = JSON.parse(raw); } catch (e) {
+  try {
+    obj = JSON.parse(raw);
+  } catch (e) {
     console.log(JSON.stringify({ ok: false, errors: [`JSON parse error: ${e.message}`] }));
     process.exit(1);
   }

package/pipeline/scripts/validate-triage.mjs

@@ -25,7 +25,12 @@ import { readFileSync } from "node:fs";
 
 const ALLOWED_REVIEWERS = new Set(["fable", "opus", "sonnet", "gpt"]);
 const ALLOWED_SEVERITIES = new Set(["blocking", "important", "suggestion"]);
-const ALLOWED_CONSENSUS_VERDICTS = new Set(["unanimous-pass", "unanimous-block", "split", "unverified"]);
+const ALLOWED_CONSENSUS_VERDICTS = new Set([
+  "unanimous-pass",
+  "unanimous-block",
+  "split",
+  "unverified",
+]);
 const ALLOWED_VERIFICATION_RESULTS = new Set(["confirmed", "not-reproduced", "inconclusive"]);
 const OVER_REJECT_THRESHOLD = 0.8;
 const OVER_REJECT_MIN_FINDINGS = 5;
@@ -79,7 +84,9 @@ function validateVerification(v, label, errors) {
     return;
   }
   if (!ALLOWED_VERIFICATION_RESULTS.has(v.result)) {
-    errors.push(`${label}: bad result "${v.result}" (allowed: confirmed|not-reproduced|inconclusive)`);
+    errors.push(
+      `${label}: bad result "${v.result}" (allowed: confirmed|not-reproduced|inconclusive)`,
+    );
     return;
   }
   if (v.result === "confirmed" || v.result === "not-reproduced") {
@@ -115,10 +122,14 @@ function validateConsensus(c, errors) {
     return;
   }
   if (!Number.isInteger(c.reviewerCount) || c.reviewerCount < 1) {
-    errors.push(`consensus: reviewerCount must be an integer >= 1 (got ${JSON.stringify(c.reviewerCount)})`);
+    errors.push(
+      `consensus: reviewerCount must be an integer >= 1 (got ${JSON.stringify(c.reviewerCount)})`,
+    );
   }
   if (!ALLOWED_CONSENSUS_VERDICTS.has(c.verdict)) {
-    errors.push(`consensus: bad verdict "${c.verdict}" (allowed: unanimous-pass|unanimous-block|split|unverified)`);
+    errors.push(
+      `consensus: bad verdict "${c.verdict}" (allowed: unanimous-pass|unanimous-block|split|unverified)`,
+    );
   }
   if (c.disagreements !== undefined) {
     if (!Array.isArray(c.disagreements)) {
@@ -211,7 +222,8 @@ function validate(raw) {
         errors.push('consensus.verdict "unanimous-pass" contradicts an accepted blocking finding');
       }
       if (
-        typeof c.reviewerCount === "number" && c.reviewerCount < 2 &&
+        typeof c.reviewerCount === "number" &&
+        c.reviewerCount < 2 &&
         (c.verdict === "unanimous-pass" || c.verdict === "unanimous-block")
       ) {
         errors.push(

package/pipeline/scripts/write-state.mjs

@@ -5,7 +5,7 @@
  * Why this exists:
  *   Multiple worktrees can run the pipeline concurrently against the same
  *   task id. Two CLI instances writing agent-state.json in the usual
- *   fs.writeFileSync('path', JSON.stringify(...)) pattern is racy  - 
+ *   fs.writeFileSync('path', JSON.stringify(...)) pattern is racy  -
  *   second write wipes the first. This helper uses tmpfile + rename, which
  *   is atomic on POSIX, combined with an advisory .lock file for the tiny
  *   window between "read current state" and "write new state".
@@ -35,8 +35,7 @@ import {
   renameSync,
   existsSync,
   unlinkSync,
-  openSync,
-  closeSync,
+  linkSync,
   statSync,
 } from "fs";
 import { dirname, basename } from "path";
@@ -70,17 +69,36 @@ function parseArgs() {
  * @param {number} timeoutMs
  * @returns {Promise<void>}
  */
-async function acquireLock(path, timeoutMs = Number(process.env.WRITE_STATE_LOCK_TIMEOUT_MS) || 15_000) {
+async function acquireLock(
+  path,
+  timeoutMs = Number(process.env.WRITE_STATE_LOCK_TIMEOUT_MS) || 15_000,
+) {
   const lockPath = `${path}.lock`;
   const staleMs = Number(process.env.WRITE_STATE_LOCK_STALE_MS) || 30_000;
   const deadline = Date.now() + timeoutMs;
+  // The lock file must never be observable without its owning PID inside it.
+  // It used to be created with openSync(wx) and filled on the next line, so
+  // between those two calls it existed and was empty. A writer arriving in
+  // that window read an unparseable PID, concluded the lock was stale, and
+  // deleted a live one - after which two writers held it and one write was
+  // lost. Under CPU load that reproduced 3 times in 15 runs.
+  //
+  // Writing the PID into a private temp file and hard-linking it into place
+  // closes the window: link() fails with EEXIST if the lock is held, and the
+  // instant the lock exists it already has its contents.
+  const stagePath = `${lockPath}.${process.pid}.stage`;
   while (Date.now() < deadline) {
     try {
-      const fd = openSync(lockPath, "wx"); // O_EXCL  -  fails if exists
-      writeFileSync(fd, String(process.pid));
-      closeSync(fd);
+      writeFileSync(stagePath, String(process.pid));
+      linkSync(stagePath, lockPath); // fails EEXIST if another writer holds it
+      unlinkSync(stagePath);
       return;
     } catch (err) {
+      try {
+        unlinkSync(stagePath);
+      } catch {
+        /* already gone */
+      }
       if (err.code !== "EEXIST") throw err;
       if (isLockStale(lockPath, staleMs)) {
         // Holder crashed or the lock outlived any plausible writer  -  reclaim it.
@@ -105,7 +123,7 @@ async function acquireLock(path, timeoutMs = Number(process.env.WRITE_STATE_LOCK
 
 /**
  * A lock is stale when its owning PID is no longer alive, or when the lock
- * file is older than `staleMs` (covers PID reuse and unreadable PIDs).
+ * file is older than `staleMs` (which also covers PID reuse).
  * @param {string} lockPath
  * @param {number} staleMs
  * @returns {boolean}
@@ -121,7 +139,12 @@ function isLockStale(lockPath, staleMs) {
     return false;
   }
   if (Date.now() - mtimeMs > staleMs) return true;
-  if (!Number.isInteger(pid) || pid <= 0) return true;
+  // An unreadable PID is NOT proof of staleness. Treating it as such is what
+  // let a writer delete a live lock and lose another writer's update. With the
+  // link-based acquire above a lock is never observable without its PID, so
+  // this can only be genuine corruption - which the staleMs check reclaims
+  // anyway, without racing a writer that is merely mid-flight.
+  if (!Number.isInteger(pid) || pid <= 0) return false;
   try {
     process.kill(pid, 0); // probe liveness without signalling
     return false; // holder alive

package/pipeline/skills/.skill-manifest.json

@@ -1,11 +1,11 @@
 {
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-07-20T07:34:26Z",
-  "skillCount": 189,
+  "generatedAt": "2026-07-25T10:41:38Z",
+  "skillCount": 193,
   "entries": [
     {
       "path": "shared/core/apple-archive-compliance/SKILL.md",
-      "sha256": "38cb4c257f7b2915d1784ec6f355b9a7f14bb32427e09c01872d3c8d6a039a71"
+      "sha256": "d3826905606b6ec7d86d3434b03bfdbbd52a424f7108e58ca12a8cb490f1e4ad"
     },
     {
       "path": "shared/core/google-play-compliance/SKILL.md",
@@ -35,6 +35,10 @@
       "path": "shared/core/multi-agent-create-jira/SKILL.md",
       "sha256": "40caf0489ad8322cd00d792a244e772d4ddb6ccfd7c3807729d6b17590e7f81c"
     },
+    {
+      "path": "shared/core/multi-agent-design-check/SKILL.md",
+      "sha256": "a004cf24661789d2a3595c5246dfebe00b76aaee6ece057b458748f502a8cd5c"
+    },
     {
       "path": "shared/core/multi-agent-dev-autopilot/SKILL.md",
       "sha256": "82b1cf4a4bbd84fcfef54fcdbcdefa27f2747df6d4fac5c86b42e861013c6d58"
@@ -59,13 +63,17 @@
       "path": "shared/core/multi-agent-finish/SKILL.md",
       "sha256": "3e8e430f7aee626be96129a9d0ae6c9ac5ef0dbf80cbe580dde2d7fb5fccfed1"
     },
+    {
+      "path": "shared/core/multi-agent-forget/SKILL.md",
+      "sha256": "68f6a92a00844ed34c336548888d3e623534c12b5e85afe5762e7a9c8d41aae4"
+    },
     {
       "path": "shared/core/multi-agent-garbage-collect/SKILL.md",
       "sha256": "24736f163e645e2bee7d552e555ae6e32cd3fc3d15c844813a75b908a58d52fd"
     },
     {
       "path": "shared/core/multi-agent-help/SKILL.md",
-      "sha256": "00772bab27906cdbdcae72d115c4e1f12ddd914fa7aa274923618a3a906e6caa"
+      "sha256": "330780854ab3b48f788e34f918ecad585bd46ffbb44f14fd38de7b48a4b568aa"
     },
     {
       "path": "shared/core/multi-agent-issue/SKILL.md",
@@ -109,7 +117,7 @@
     },
     {
       "path": "shared/core/multi-agent-refactor/SKILL.md",
-      "sha256": "f8a9495f6aebacba634672d6c9416046521cbdfa769746c9ff3a4a993482a85a"
+      "sha256": "60766ee3a6b974b3872417db5c40d1fc03bfddd99daf4aca11d7a59b57a41b57"
     },
     {
       "path": "shared/core/multi-agent-resume/SKILL.md",
@@ -127,6 +135,14 @@
       "path": "shared/core/multi-agent-review/SKILL.md",
       "sha256": "b1fd57d2b80ee0fe2490439d9f2688fcf415857c2aab60549c5456e27693b9a9"
     },
+    {
+      "path": "shared/core/multi-agent-routines/SKILL.md",
+      "sha256": "91d3bdb15da7addadd1afd0b170057daf3d3fc335da3f6e1feb4feff1af0881e"
+    },
+    {
+      "path": "shared/core/multi-agent-save/SKILL.md",
+      "sha256": "f9c6e2ba1dd1b224b80cabe35f4327b5bcc0b1e05868b378547bec616193ef1b"
+    },
     {
       "path": "shared/core/multi-agent-scan/SKILL.md",
       "sha256": "266e4e7c9b702bc3205b7d926455c5863e144cddb1e4b883aa81e570a362fd3f"
@@ -149,11 +165,11 @@
     },
     {
       "path": "shared/core/multi-agent-sync/SKILL.md",
-      "sha256": "de38486056c99a599d93ae5166a2071875331a7d77f1e34f66d8b72657a73c2f"
+      "sha256": "3a9f7d8caa47d41d1a4759ce6673bfb94a1ef9f62f7113a4cd3b1e9451464601"
     },
     {
       "path": "shared/core/multi-agent-test/SKILL.md",
-      "sha256": "f90c34f71ea6cd5cccbfa128597eaaa221a0ca5f62924eb9cfb6b1ed2d07de04"
+      "sha256": "2b662ecd9497149c4c2e87cc79e906cc1cab7ea4a7d0efe300b0b018559960c4"
     },
     {
       "path": "shared/core/multi-agent-uninstall/SKILL.md",
@@ -425,7 +441,7 @@
     },
     {
       "path": "shared/external/humanizer/SKILL.md",
-      "sha256": "7f9d49b90eba79bf7acd8a5d8d5ae091cbc970188b8ecac310cce04b82add42e"
+      "sha256": "2fc8fe79a5832b9e1316f515c73f0545023153e85aba4645ba42060a0afdd049"
     },
     {
       "path": "shared/external/ios-accessibility/SKILL.md",