@mmerterden/multi-agent-pipeline 12.5.0 → 12.7.0

package/pipeline/commands/multi-agent/uninstall/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Uninstall the pipeline from Claude Code + Copilot CLI. Keychain access tokens are always left untouched; --all-data also clears pipeline settings and logs. Asks for double confirmation."
+description: "Uninstall the pipeline from Claude Code + Copilot CLI. Keychain access tokens are always left untouched; --all-data also clears pipeline settings and logs. Asks for double confirmation. Use when the pipeline should be removed from Claude Code and Copilot CLI."
 description-tr: "Pipeline'ı Claude Code + Copilot CLI'dan kaldırır. Keychain erişim token'larına asla dokunulmaz; --all-data ayrıca pipeline ayarlarını ve loglarını da siler. Çift onay ister."
 argument-hint: "[--dry-run] [--all-data] [--claude] [--copilot] [--target=<path>]"
 ---

package/pipeline/commands/multi-agent/update/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Update the pipeline to the latest version: git pull, install, migrate."
+description: "Update the pipeline to the latest version: git pull, install, migrate. Use when the installed pipeline is behind and should be brought to the latest version."
 description-tr: "Pipeline'ı son sürüme günceller: git pull, install, migrate."
 allowed-tools: Bash, Read, Write, AskUserQuestion
 ---
@@ -52,13 +52,13 @@ Update the pipeline in one command. Existing preferences are preserved; only ski
    fi
    ```
 
-4c. **Prune retired adapter files** (Cursor / Antigravity / Codex / Copilot Chat were removed in v10.7.0 — the pipeline now targets Claude Code + Copilot CLI only):
+4c. **Prune retired adapter files** (Cursor / Antigravity / Codex / Copilot Chat were removed in v10.7.0 - the pipeline now targets Claude Code + Copilot CLI only):
    ```bash
    # Global Codex adapter prompt is safe to remove (no longer produced).
    rm -f "$HOME/.codex/prompts/multi-agent.md"
    echo "  -> pruned retired global Codex adapter prompt (if present)"
    # Per-project adapter files (.cursor/, .agent/, .github/copilot-instructions.md)
-   # live in your repos and are left untouched — remove them manually if you like.
+   # live in your repos and are left untouched - remove them manually if you like.
    ```
 
 5. **Migrate preferences** (if there is an old schema):

package/pipeline/commands/sim-test.md

@@ -1,6 +1,6 @@
 ---
 description: "Mobile UI Bug Hunter  -  iOS Simulator (simctl) + Android Emulator (adb)  -  auto-detects platform"
-allowed-tools: Agent, Bash, Read, Write, Edit, TaskCreate, TaskUpdate, TaskList, TaskGet, mcp__dev_toolkit__ios_list_devices, mcp__dev_toolkit__ios_boot_device, mcp__dev_toolkit__ios_screenshot, mcp__dev_toolkit__ios_tap, mcp__dev_toolkit__ios_swipe, mcp__dev_toolkit__ios_type_text, mcp__dev_toolkit__ios_launch_app, mcp__dev_toolkit__ios_terminate_app, mcp__dev_toolkit__ios_list_apps, mcp__dev_toolkit__ios_go_home, mcp__dev_toolkit__ios_set_appearance, mcp__dev_toolkit__ios_set_content_size, mcp__dev_toolkit__ios_set_locale, mcp__dev_toolkit__ios_open_url, mcp__dev_toolkit__ios_status_bar, mcp__dev_toolkit__ios_push_notification, mcp__dev_toolkit__ios_grant_permission, mcp__dev_toolkit__ios_revoke_permission, mcp__dev_toolkit__ios_reset_permissions, mcp__dev_toolkit__ios_set_location, mcp__dev_toolkit__ios_clear_location, mcp__dev_toolkit__ios_set_increase_contrast, mcp__dev_toolkit__ios_record_video, mcp__dev_toolkit__ios_add_media, mcp__dev_toolkit__ios_keychain_reset, mcp__dev_toolkit__ios_get_app_container, mcp__dev_toolkit__ios_erase_device, mcp__dev_toolkit__ios_get_ui_tree, mcp__dev_toolkit__android_list_devices, mcp__dev_toolkit__android_screenshot, mcp__dev_toolkit__android_tap, mcp__dev_toolkit__android_swipe, mcp__dev_toolkit__android_type_text, mcp__dev_toolkit__android_key_event, mcp__dev_toolkit__android_launch_app, mcp__dev_toolkit__android_stop_app, mcp__dev_toolkit__android_list_packages, mcp__dev_toolkit__android_go_home, mcp__dev_toolkit__android_go_back, mcp__dev_toolkit__android_get_ui_tree, mcp__dev_toolkit__android_set_dark_mode, mcp__dev_toolkit__android_set_font_scale, mcp__dev_toolkit__android_set_locale, mcp__dev_toolkit__android_set_location, mcp__dev_toolkit__android_grant_permission, mcp__dev_toolkit__android_revoke_permission, mcp__dev_toolkit__android_record_screen, mcp__dev_toolkit__android_install_apk, mcp__dev_toolkit__android_uninstall_app, mcp__dev_toolkit__android_logcat, mcp__dev_toolkit__android_get_screen_size, mcp__dev_toolkit__android_open_url, mcp__dev_toolkit__android_clear_app_data
+allowed-tools: Agent, Bash, Read, Write, Edit, TaskCreate, TaskUpdate, TaskList, TaskGet, mcp__dev-toolkit__ios_list_devices, mcp__dev-toolkit__ios_boot_device, mcp__dev-toolkit__ios_screenshot, mcp__dev-toolkit__ios_tap, mcp__dev-toolkit__ios_swipe, mcp__dev-toolkit__ios_type_text, mcp__dev-toolkit__ios_launch_app, mcp__dev-toolkit__ios_terminate_app, mcp__dev-toolkit__ios_list_apps, mcp__dev-toolkit__ios_go_home, mcp__dev-toolkit__ios_set_appearance, mcp__dev-toolkit__ios_set_content_size, mcp__dev-toolkit__ios_set_locale, mcp__dev-toolkit__ios_open_url, mcp__dev-toolkit__ios_status_bar, mcp__dev-toolkit__ios_push_notification, mcp__dev-toolkit__ios_grant_permission, mcp__dev-toolkit__ios_revoke_permission, mcp__dev-toolkit__ios_reset_permissions, mcp__dev-toolkit__ios_set_location, mcp__dev-toolkit__ios_clear_location, mcp__dev-toolkit__ios_set_increase_contrast, mcp__dev-toolkit__ios_record_video, mcp__dev-toolkit__ios_add_media, mcp__dev-toolkit__ios_keychain_reset, mcp__dev-toolkit__ios_get_app_container, mcp__dev-toolkit__ios_erase_device, mcp__dev-toolkit__ios_get_ui_tree, mcp__dev-toolkit__android_list_devices, mcp__dev-toolkit__android_screenshot, mcp__dev-toolkit__android_tap, mcp__dev-toolkit__android_swipe, mcp__dev-toolkit__android_type_text, mcp__dev-toolkit__android_key_event, mcp__dev-toolkit__android_launch_app, mcp__dev-toolkit__android_stop_app, mcp__dev-toolkit__android_list_packages, mcp__dev-toolkit__android_go_home, mcp__dev-toolkit__android_go_back, mcp__dev-toolkit__android_get_ui_tree, mcp__dev-toolkit__android_set_dark_mode, mcp__dev-toolkit__android_set_font_scale, mcp__dev-toolkit__android_set_locale, mcp__dev-toolkit__android_set_location, mcp__dev-toolkit__android_grant_permission, mcp__dev-toolkit__android_revoke_permission, mcp__dev-toolkit__android_record_screen, mcp__dev-toolkit__android_install_apk, mcp__dev-toolkit__android_uninstall_app, mcp__dev-toolkit__android_logcat, mcp__dev-toolkit__android_get_screen_size, mcp__dev-toolkit__android_open_url, mcp__dev-toolkit__android_clear_app_data
 ---
 
 # Mobile UI Bug Hunter
@@ -22,8 +22,8 @@ Auto-detects platform: iOS (simctl) or Android (adb). No external apps needed.
 5. If argument contains "android" or "ios" -> use that
 ```
 
-For iOS: use `mcp__dev_toolkit__ios_*` tools
-For Android: use `mcp__dev_toolkit__android_*` tools
+For iOS: use `mcp__dev-toolkit__ios_*` tools
+For Android: use `mcp__dev-toolkit__android_*` tools
 
 **Android extras**: `get_ui_tree` returns XML with bounds/text/resource-id (uiautomator dump), `logcat` for crash detection, `go_back` button.
 
@@ -134,11 +134,11 @@ Step A  -  run the standard visual + accessibility sweep (light + dark + large t
 Step B  -  dispatch compliance skill:
   iOS:
     Load pipeline/skills/shared/core/apple-archive-compliance/SKILL.md
-    Prereq: @mmerterden/dev-toolkit-mcp ≥ v2.4 (provides ios_app_store_audit MCP tool)
+    Prereq: @mmerterden/dev-toolkit-mcp ≥ v2.9.0 (provides ios_app_store_audit MCP tool)
              -  installable via npm; standalone ArchiveGuard binary deprecated in v8.4.0
     Artifact: pick newest .xcarchive under ~/Library/Developer/Xcode/Archives/**
               OR accept explicit path argument after "store-ready"
-    Invoke:   mcp__dev_toolkit__ios_app_store_audit({ archive_path: <path>, rules: "all" })
+    Invoke:   mcp__dev-toolkit__ios_app_store_audit({ archive_path: <path>, rules: "all" })
               OR (Node fallback): node -e "import('@mmerterden/dev-toolkit-mcp/tools/ios-app-store-audit/index.js').then(m => m.runAudit({ archivePath: '<path>', rules: 'all' }).then(r => console.log(JSON.stringify(r))))"
               Humanize via --lang en (promptLanguage is locked to "en"; pass --lang=tr explicitly to opt into Turkish)
   Android:

package/pipeline/eval/run-metrics-fixture.json

@@ -2,29 +2,76 @@
   "taskId": "PROJ-101",
   "status": "complete",
   "currentPhase": 7,
-  "projects": [
-    { "project": "my-ios-app", "buildStatus": { "ok": true, "attempts": 1 } }
-  ],
+  "projects": [{ "project": "my-ios-app", "buildStatus": { "ok": true, "attempts": 1 } }],
   "reviewIterations": [
     {
       "reviewers": [
-        { "reviewer": "opus", "findings": [
-          { "severity": "blocking", "file": "Auth/Session.swift", "line": 54, "issue": "token logged in plaintext", "fix": "redact" },
-          { "severity": "suggestion", "file": "Auth/Session.swift", "line": 12, "issue": "rename helper", "fix": "rename" }
-        ], "approved": false },
-        { "reviewer": "sonnet", "findings": [
-          { "severity": "important", "file": "Auth/Session.swift", "line": 70, "issue": "no migration for legacy token", "fix": "add migration" }
-        ], "approved": false }
+        {
+          "reviewer": "opus",
+          "findings": [
+            {
+              "severity": "blocking",
+              "file": "Auth/Session.swift",
+              "line": 54,
+              "issue": "token logged in plaintext",
+              "fix": "redact"
+            },
+            {
+              "severity": "suggestion",
+              "file": "Auth/Session.swift",
+              "line": 12,
+              "issue": "rename helper",
+              "fix": "rename"
+            }
+          ],
+          "approved": false
+        },
+        {
+          "reviewer": "sonnet",
+          "findings": [
+            {
+              "severity": "important",
+              "file": "Auth/Session.swift",
+              "line": 70,
+              "issue": "no migration for legacy token",
+              "fix": "add migration"
+            }
+          ],
+          "approved": false
+        }
       ],
       "triage": {
         "accepted": [
-          { "severity": "blocking", "file": "Auth/Session.swift", "line": 54, "issue": "token logged in plaintext", "fix": "redact the token in the log", "reviewer": "opus" }
+          {
+            "severity": "blocking",
+            "file": "Auth/Session.swift",
+            "line": 54,
+            "issue": "token logged in plaintext",
+            "fix": "redact the token in the log",
+            "reviewer": "opus"
+          }
         ],
         "deferred": [
-          { "finding": { "severity": "important", "file": "Auth/Session.swift", "line": 70, "issue": "no migration for legacy token" }, "reason": "follow-up PR" }
+          {
+            "finding": {
+              "severity": "important",
+              "file": "Auth/Session.swift",
+              "line": 70,
+              "issue": "no migration for legacy token"
+            },
+            "reason": "follow-up PR"
+          }
         ],
         "rejected": [
-          { "finding": { "severity": "suggestion", "file": "Auth/Session.swift", "line": 12, "issue": "rename helper" }, "reason": "style only" }
+          {
+            "finding": {
+              "severity": "suggestion",
+              "file": "Auth/Session.swift",
+              "line": 12,
+              "issue": "rename helper"
+            },
+            "reason": "style only"
+          }
         ],
         "approved": false
       }

package/pipeline/lib/account-resolver.sh

@@ -18,7 +18,7 @@
 # Output schema (per account):
 #   { id, label, prefix, providers[], tokens{}, jiraHost, bitbucketHost, isWork }
 
-set -eu
+set -euo pipefail
 
 PRETTY=0
 FILTER=""

package/pipeline/lib/channels-multi-repo.sh

@@ -15,7 +15,7 @@
 # Single-repo tasks: every subcommand falls through to the single PR / single
 # body  -  `targets` returns one entry, render-* leaves the body unchanged.
 
-set -eu
+set -euo pipefail
 
 CMD="${1:-}"
 STATE="${2:-}"

package/pipeline/lib/context-link-extractor.sh

@@ -41,7 +41,7 @@
 #   0  always  -  emits "[]" when no input or no matches; downstream readers
 #               must tolerate an empty array.
 
-set -eu
+set -euo pipefail
 
 CONTEXT_LINK_INPUT=$(cat)
 export CONTEXT_LINK_INPUT

package/pipeline/lib/credential-store.sh

@@ -25,7 +25,7 @@
 # Returns 0 on success, 1 on missing/empty value, 2 on backend missing,
 # 3 on usage error.
 
-set -eu
+set -euo pipefail
 
 detect_platform() {
   case "$(uname -s 2>/dev/null)" in
@@ -84,10 +84,39 @@ require_cmd() {
   fi
 }
 
+# --- Logical key -> backend key --------------------------------------------
+# Callers pass a LOGICAL key ("github", "jira", "figma_pat"). The actual
+# Keychain / libsecret / Credential Manager entry is named by
+# prefs.global.keychainMapping, so a lookup that uses the logical key verbatim
+# finds nothing whenever the two differ -  silently, because a missing entry and
+# a missing mapping look identical from here. Resolve the mapping first and fall
+# back to the logical key when no mapping exists (backward compatible with
+# entries whose name already equals the logical key).
+PREFS_FILE="${MULTI_AGENT_PREFS:-$HOME/.claude/multi-agent-preferences.json}"
+
+resolve_key() {
+  local logical="$1" mapped=""
+  if [ -f "$PREFS_FILE" ] && command -v python3 >/dev/null 2>&1; then
+    mapped=$(python3 -c '
+import json, sys
+try:
+    with open(sys.argv[1], encoding="utf-8") as fh:
+        prefs = json.load(fh)
+except Exception:
+    sys.exit(0)
+name = prefs.get("global", {}).get("keychainMapping", {}).get(sys.argv[2])
+if isinstance(name, str) and name.strip():
+    sys.stdout.write(name.strip())
+' "$PREFS_FILE" "$logical" 2>/dev/null || true)
+  fi
+  printf '%s' "${mapped:-$logical}"
+}
+
 # --- Subcommands ------------------------------------------------------------
 do_get() {
   local key="${1:-}"
   [ -z "$key" ] && { echo "usage: $0 get <key>" >&2; exit 3; }
+  key=$(resolve_key "$key")
   if delegate_to_python; then
     local val rc
     val=$(python3 "$KEYCHAIN_PY" get "$key" 2>/dev/null) || rc=$?
@@ -128,6 +157,8 @@ if (\$c) { \$c.GetNetworkCredential().Password }
 do_set() {
   local key="${1:-}" val="${2:-}"
   [ -z "$key" ] && { echo "usage: $0 set <key> <value|->" >&2; exit 3; }
+  # Resolve through the same mapping as do_get so set/get stay symmetric.
+  key=$(resolve_key "$key")
   # "-" means: read the secret from stdin (keeps it off argv).
   if [ "$val" = "-" ]; then
     val=$(cat)
@@ -173,6 +204,7 @@ New-StoredCredential -Target '$key_esc' -UserName '${USER:-${USERNAME:-claude}}'
 do_delete() {
   local key="${1:-}"
   [ -z "$key" ] && { echo "usage: $0 delete <key>" >&2; exit 3; }
+  key=$(resolve_key "$key")
   if delegate_to_python; then
     python3 "$KEYCHAIN_PY" delete "$key" >/dev/null 2>&1 || true
     return 0

package/pipeline/lib/fetch-confluence.sh

@@ -41,7 +41,7 @@
 #   and exits 2  -  the orchestrator handles the Save Flow + retry. The script
 #   itself never prompts.
 
-set -eu
+set -euo pipefail
 
 URL=""
 HOST_OVERRIDE="${CONFLUENCE_HOST_OVERRIDE:-}"

package/pipeline/lib/fetch-crashlytics.sh

@@ -45,7 +45,7 @@
 #   orchestrator surfaces this as "fetcher unavailable, advisory only" to
 #   keep the pipeline moving.
 
-set -eu
+set -euo pipefail
 
 URL=""
 PROJECT_ID=""

package/pipeline/lib/fetch-fortify.sh

@@ -46,7 +46,7 @@
 #   High > 0       → blocking=false, reason="high-findings-warning"
 #   else           → blocking=false, reason="clean"
 
-set -eu
+set -euo pipefail
 
 URL=""
 VERSION_ID=""

package/pipeline/lib/fetch-graylog.sh

@@ -47,7 +47,7 @@
 #   4  bad usage
 #   6  host not configured (prefs.global.hosts.graylog is empty)
 
-set -eu
+set -euo pipefail
 
 TRX_ID=""
 CONV_ID=""

package/pipeline/lib/fetch-swagger.sh

@@ -42,7 +42,7 @@
 #   3  payload too large or malformed
 #   4  bad usage
 
-set -eu
+set -euo pipefail
 
 URL="${1:-}"
 [ -z "$URL" ] && { echo "usage: $0 <openapi-url>" >&2; exit 4; }

package/pipeline/lib/issue-fetcher.sh

@@ -34,7 +34,7 @@
 #   ACCOUNT_DEFAULT_REPO      fallback GitHub repo  (optional)
 #   PROMPT_LANG               tr|en  -  controls maturity.summary language (default: tr)
 
-set -eu
+set -euo pipefail
 
 INPUT="${1:-}"
 [ -z "$INPUT" ] && { echo '{"error":"input required"}'; exit 1; }

package/pipeline/lib/multi-repo-pipeline.sh

@@ -28,7 +28,7 @@
 # `bridge` writes agent-state.json v2.1.0 with projects[] populated  -  Phase 0
 # consumes this and skips its own picker steps.
 
-set -eu
+set -euo pipefail
 
 CMD="${1:-}"
 STATE="${2:-}"

package/pipeline/lib/repo-cache.sh

@@ -25,7 +25,7 @@
 #                LOCAL_SCAN_ROOTS env can override the default root list.
 #                LOCAL_SCAN_MAXDEPTH env (default 4) bounds traversal cost.
 
-set -eu
+set -euo pipefail
 
 PROVIDER="${1:-}"
 SCOPE="${2:-}"

package/pipeline/lib/submodule-detector.sh

@@ -24,7 +24,7 @@
 #   ]
 #
 
-set -eu
+set -euo pipefail
 
 MODE="local"
 TARGET="${1:-}"

package/pipeline/multi-agent-refs/component-dispatch.md

@@ -84,7 +84,7 @@ Phase 4 reviewer-skipping is **not** Phase 3's concern  -  Phase 4 decides based
 
 ## Cross-CLI behaviour (intentional divergence)
 
-Component dispatch is **no longer byte-identical across CLIs** and that is by design (see `cross-cli-contract.md` §1.1):
+Component dispatch is **no longer byte-identical across CLIs** and that is by design (see `cross-cli-contract.md` section 1.1):
 
 - **Claude Code**: dispatches to the enabled `ai-<platform>-engineering-toolkit` marketplace plugin via the Skill tool (this doc).
 - **Copilot CLI**: has no plugin loader; it continues to use its standalone `~/.copilot/skills/figma-*` skill copies (frozen fallback). Copilot's resolution + progress lines follow those local skills.

package/pipeline/multi-agent-refs/component-generation.md

@@ -0,0 +1,121 @@
+# Component Generation Guide (generic)
+
+> Lifted out of `core/multi-agent/SKILL.md`, where it was loaded on every
+> run of every mode. It applies only to a task that generates a UI
+> component from a design, so it now loads when that path is taken.
+> Component dispatch itself is in `component-dispatch.md`.
+
+When the task involves creating a SwiftUI component (any project, not just figma), follow this architecture:
+
+### Component Architecture: Configuration / View / Modifiers
+
+Every component produces up to 5 files:
+
+| File | When | Content |
+|------|------|---------|
+| `{Name}Configuration.swift` | Complex (>3 props) | Pure value type, all declarative properties |
+| `{Name}View.swift` | Always | SwiftUI view, renders Configuration |
+| `{Name}+Modifiers.swift` | Complex | Fluent modifier API chain |
+| `{Name}Preview.swift` | Always | All meaningful variant previews |
+| `{Name}Tests.swift` | Always | ViewInspector + Unit tests |
+
+### Configuration Purity Rule
+
+Configuration structs hold ONLY declarative, value-type properties:
+
+```swift
+// ✅ CORRECT  -  pure value type
+struct ButtonConfiguration {
+    var title: String = ""
+    var style: ButtonStyle = .primary
+    var isEnabled: Bool = true
+    var icon: Image? = nil
+}
+
+// ❌ WRONG  -  these do NOT belong in Configuration
+// Closures → View property
+// @Binding → View property
+// @State → View property
+// AnyView / @ViewBuilder → View generic parameter
+```
+
+### View Implementation
+
+```swift
+struct ButtonView: View {
+    let configuration: ButtonConfiguration
+    private var action: (() -> Void)?  // closure lives in View, not Config
+
+    var body: some View {
+        Button(action: { action?() }) {
+            HStack(spacing: .Spacing.spacing8) {
+                if let icon = configuration.icon { icon }
+                Text(configuration.title)
+                    .typographyStyle(.body1)
+            }
+        }
+        .disabled(!configuration.isEnabled)
+    }
+}
+```
+
+### Modifier Pattern
+
+```swift
+extension ButtonView {
+    func title(_ value: String) -> ButtonView {
+        var config = configuration
+        config.title = value
+        return ButtonView(configuration: config)
+    }
+    func style(_ value: ButtonStyle) -> ButtonView {
+        var config = configuration
+        config.style = value
+        return ButtonView(configuration: config)
+    }
+    func onTap(_ action: @escaping () -> Void) -> ButtonView {
+        var view = self
+        view.action = action
+        return view
+    }
+}
+```
+
+### Simple vs Complex Decision
+
+| Criteria | Simple | Complex |
+|----------|--------|---------|
+| Properties | ≤3 | >3 |
+| Configuration file | No  -  props in View directly | Yes  -  separate struct |
+| +Modifiers file | No | Yes |
+| View file | All-in-one | Renders Configuration |
+
+### 3-Layer Test Strategy
+
+| Layer | Tool | What It Validates |
+|-------|------|-------------------|
+| Structural | ViewInspector | Hierarchy, subview existence, applied modifiers |
+| Visual | Snapshot Tests | Pixel-correct render: light/dark, RTL/LTR |
+| Behavioral | Unit Tests | State changes, closures, configuration mutations |
+
+### Component Checklist (Before Commit)
+
+1. No magic numbers  -  all values are design tokens or named constants
+2. Configuration purity  -  no side-effects or view logic in Config
+3. Modifier correctness  -  fluent API valid, paired modifiers live in the View
+4. Accessibility  -  accessibility label/trait on every interactive element
+5. Preview  -  all meaningful variants in the preview
+6. Test  -  structural + unit tests written
+7. Dark mode  -  renders correctly in both color schemes
+8. Dynamic Type  -  text scales at large sizes without breaking the layout
+
+### When a Figma URL Is Provided
+
+If the user provides a Figma URL:
+1. Fetch the design data with Figma MCP tools (get_design_context, get_screenshot)
+2. Map the design's colors, spacing, and typography onto the project's token system
+3. Apply the Configuration/View/Modifiers pattern above
+4. Use the screenshot as a reference, do not copy it  -  adapt to the project's existing components
+
+---
+

package/pipeline/multi-agent-refs/cross-cli-contract.md

@@ -6,10 +6,10 @@
 
 ---
 
-## 1. Command Inventory (41 commands)
+## 1. Command Inventory (42 commands)
 
 ```
-analysis, analysis-resolve, autopilot, build-optimize, channels, create-jira, dev,
+analysis, analysis-resolve, autopilot, build-optimize, channels, create-jira, design-check, dev,
 dev-autopilot, dev-local, dev-local-autopilot, diff-explain, finish, forget, garbage-collect,
 help, issue, jira, kill, language, local,
 local-autopilot, log, manual-test, prune-logs, purge, refactor, resume, review, review-issue, review-jira,
@@ -43,14 +43,14 @@ Two parallel shared/core skills under `pipeline/skills/shared/core/` wrap extern
 
 | Skill | Path | Tool wrapper | Rules |
 |---|---|---|---|
-| `apple-archive-compliance` | `pipeline/skills/shared/core/apple-archive-compliance/` | `ios_app_store_audit` MCP tool (in `@mmerterden/dev-toolkit-mcp` ≥ v2.4) | 17 (Apple ITMS + App Store Review Guidelines) |
+| `apple-archive-compliance` | `pipeline/skills/shared/core/apple-archive-compliance/` | `ios_app_store_audit` MCP tool (in `@mmerterden/dev-toolkit-mcp` ≥ v2.9.0) | 18 (Apple ITMS + App Store Review Guidelines) |
 | `google-play-compliance` | `pipeline/skills/shared/core/google-play-compliance/` | bundletool + aapt2 + apksigner | 21 (4 categories: Technical / Security / Privacy / Hygiene) |
 
 Both skills are wired to 4 consumers: `/multi-agent:test "store-ready"` (primary), Phase 4 Security Auditor (`pipeline/agents/security-auditor.md`), `/multi-agent:review` + SKILL.md counterpart, `/multi-agent:channels` PR-body auto-augmentation. Contract enforced by `smoke-compliance-skills.sh` (46 assertions).
 
 ### 1.3 Figma-skill routing from multi-agent (superseded)
 
-Superseded by §1.1: Claude Code resolves component dispatch to the marketplace plugin (dual-name `create-component`/`create-ui-component`; full contract in `$HOME/.claude/multi-agent-refs/component-dispatch.md`); Copilot CLI uses its local `~/.copilot/skills/figma-*` copies. No shared filesystem-path routing table or figma-skill frontmatter/inventory parity remains under enforcement.
+Superseded by section 1.1: Claude Code resolves component dispatch to the marketplace plugin (dual-name `create-component`/`create-ui-component`; full contract in `$HOME/.claude/multi-agent-refs/component-dispatch.md`); Copilot CLI uses its local `~/.copilot/skills/figma-*` copies. No shared filesystem-path routing table or figma-skill frontmatter/inventory parity remains under enforcement.
 
 ---
 

package/pipeline/multi-agent-refs/features/model-fallback.md

@@ -9,7 +9,7 @@ without ever editing persona files at runtime.
 
 > **Fable 5 available again (2026-07).** `claude-fable-5` is the top tier once
 > more. Architect (`ios/android/backend-architect`), Reviewer-1 (`code-reviewer`),
-> and triage personas declare `preferredModel: fable` — the deepest-reasoning
+> and triage personas declare `preferredModel: fable` - the deepest-reasoning
 > roles. **If Fable 5 is unavailable, the first fallback is opus (`claude-opus-4-8`).**
 > Security and other `preferredModel: opus` personas keep opus as their top tier.
 > The `premiumTierUntil` date gate stays in the contract as a generic mechanism
@@ -98,6 +98,6 @@ per-phase `model` field already carries the override).
 - No edits to `pipeline/agents/*.md` at runtime; frontmatter is install-time
   configuration only.
 - Copilot CLI reviewer set is out of scope: Copilot CLI pins its own three
-  reviewer models (GPT-5.4 + Opus + Sonnet — Fable 5 is not offered there) and
+  reviewer models (GPT-5.4 + Opus + Sonnet - Fable 5 is not offered there) and
   does not use this persona ladder. Only Claude Code dispatches Reviewer-1 on
   Fable.

package/pipeline/multi-agent-refs/phases/phase-3-dev.md

@@ -164,7 +164,7 @@ For each task (respecting dependency order):
    **Preferred  -  MCP tool (token-efficient, dev-toolkit-mcp ≥ 2.3.0):**
    ```
    acquire_build_lock "$TASK_ID"
-   mcp__dev_toolkit__ios_xcodebuild({
+   mcp__dev-toolkit__ios_xcodebuild({
      project: "{projectPath}",        // or workspace
      scheme: "{scheme}",
      configuration: "Release",
@@ -173,7 +173,7 @@ For each task (respecting dependency order):
    })
    release_build_lock
    ```
-   Returns one line: `Build: SUCCESS|FAILURE (E errors, W warnings) [xcresult-<id>]`. On failure, drill in only when needed via `mcp__dev_toolkit__ios_xcresult({id, mode: "errors"})`. Saves thousands of tokens per build cycle vs. raw xcodebuild output.
+   Returns one line: `Build: SUCCESS|FAILURE (E errors, W warnings) [xcresult-<id>]`. On failure, drill in only when needed via `mcp__dev-toolkit__ios_xcresult({id, mode: "errors"})`. Saves thousands of tokens per build cycle vs. raw xcodebuild output.
 
    **Fallback  -  raw xcodebuild** (when MCP server is unavailable):
    ```bash

package/pipeline/multi-agent-refs/phases/phase-4-review.md

@@ -1,6 +1,6 @@
 ### Phase 4: Review (deterministic gates + parallel + triage)
 
-> **TLDR**  -  Three-stage review. Stage 1: deterministic gates (build + lint + test + secret scan) that MUST pass. Stage 2: AI models in parallel  -  reviewer set is **CLI-aware**: Claude Code dispatches 2 reviewers (Fable + Sonnet); Copilot CLI dispatches 3 reviewers (GPT-5.4 + Opus + Sonnet — Fable 5 is not offered on Copilot CLI). Stage 3: Fable triage (Opus on Copilot CLI)  -  evaluates raw findings, filters false-positives/out-of-scope, keeps only actionable items. Only triage-accepted blocking items loop back to Phase 3.
+> **TLDR**  -  Three-stage review. Stage 1: deterministic gates (build + lint + test + secret scan) that MUST pass. Stage 2: AI models in parallel  -  reviewer set is **CLI-aware**: Claude Code dispatches 2 reviewers (Fable + Sonnet); Copilot CLI dispatches 3 reviewers (GPT-5.4 + Opus + Sonnet - Fable 5 is not offered on Copilot CLI). Stage 3: Fable triage (Opus on Copilot CLI)  -  evaluates raw findings, filters false-positives/out-of-scope, keeps only actionable items. Only triage-accepted blocking items loop back to Phase 3.
 
 <!-- progress-contract: applied -->
 Progress emission per `$HOME/.claude/multi-agent-refs/progress-contract.md`  -  lines for each gate, each reviewer dispatch + finish, triage start, triage verdict, fix dispatch.

package/pipeline/multi-agent-refs/phases/phase-5-test.md

@@ -126,12 +126,12 @@ Before or during user testing, run device-level audits via Bash if user requests
 
 | Check               | When              | Command                                   |
 | ------------------- | ----------------- | ----------------------------------------- |
-| Accessibility audit | UI changes        | `mcp__dev_toolkit__ios_accessibility_audit` (or `swift ui-tree-dumper.swift`) |
-| Biometric test      | Auth flow changes | `mcp__dev_toolkit__ios_biometric` (or `xcrun simctl keychain biometric-match`) |
+| Accessibility audit | UI changes        | `mcp__dev-toolkit__ios_accessibility_audit` (or `swift ui-tree-dumper.swift`) |
+| Biometric test      | Auth flow changes | `mcp__dev-toolkit__ios_biometric` (or `xcrun simctl keychain biometric-match`) |
 | Launch time         | Android project   | `adb shell am start -W`                   |
 | Visual test         | Any UI changes    | `/multi-agent test` (sim-test)            |
-| Snapshot regression | Component / pixel-stable UI changes | `mcp__dev_toolkit__ios_visual_diff` (dev-toolkit-mcp ≥ 2.3.0) |
-| App Store screenshots | `taskType === screenshot` | `mcp__dev_toolkit__ios_status_bar({preset: "clean"})` before each capture |
+| Snapshot regression | Component / pixel-stable UI changes | `mcp__dev-toolkit__ios_visual_diff` (dev-toolkit-mcp ≥ 2.3.0) |
+| App Store screenshots | `taskType === screenshot` | `mcp__dev-toolkit__ios_status_bar({preset: "clean"})` before each capture |
 
 Results included in Phase 7 report. MCP tools preferred when available  -  concise structured output, lower token cost.
 

package/pipeline/preferences-template.json

@@ -45,12 +45,7 @@
       "autoDiff": false,
       "manualNote": false
     },
-    "wikiScope": [
-      "main",
-      "ios",
-      "screenshots",
-      "index"
-    ],
+    "wikiScope": ["main", "ios", "screenshots", "index"],
     "autopilotReportTimeoutSeconds": 1800,
     "promptLanguage": "en",
     "outputLanguage": "en",
@@ -73,7 +68,12 @@
       "onExceed": "warn",
       "pricingModel": "opus"
     },
-    "derivedSkillSources": []
+    "derivedSkillSources": [],
+    "devToolkit": {
+      "enabled": true,
+      "mcpServerName": "dev-toolkit",
+      "registry": "github-packages"
+    }
   },
   "projects": {},
   "_figmaConfigTemplate": {
@@ -157,18 +157,29 @@
     }
   },
   "_derivedSkillSourcesTemplate": {
-    "_comment": "Optional. Populate global.derivedSkillSources[] to let /multi-agent:refactor check whether skills you derived from an upstream marketplace plugin have been updated. Kept in your LOCAL prefs only (never synced), so it may reference private sources. Copy an entry like the one below.",
+    "_comment": "Optional. Populate global.derivedSkillSources[] to let /multi-agent:refactor check whether skills you derived from an upstream marketplace plugin have been updated. Kept in your LOCAL prefs only (never synced), so it may reference private sources. Copy an entry like the one below. Set upstreamLocalClone when you have a working copy: the installed plugin cache is only as fresh as your last marketplace update, and a stale cache makes the drift check answer 'up to date' when it is four releases behind.",
     "_example": {
       "label": "Component toolkit skills",
       "localPath": "plugins/<my-plugin>/skills/workflow",
       "upstreamMarketplace": "<installed-marketplace-name>",
       "upstreamPlugin": "<upstream-plugin-name>",
-      "upstreamSkills": [
-        "<skill-a>",
-        "<skill-b>"
-      ],
+      "upstreamSkills": ["<skill-a>", "<skill-b>"],
       "derivedFromVersion": "0.0.0",
+      "upstreamVersionSource": "marketplace.json",
+      "upstreamLocalClone": "$HOME/<upstream-repo-working-copy>",
       "upstreamRepoUrl": "https://github.com/<org>/<repo>"
     }
+  },
+  "_devToolkitTemplate": {
+    "_comment": "Optional. global.devToolkit points at the companion MCP server that serves the pipeline's device and browser tools. /multi-agent:refactor Step 0c researches current MCP practice and audits that repo against it (plan band E); /multi-agent:sync Step 3d ships it when it moved (gates, commit, publish). Leave localPath out and both commands auto-detect the repo from your mcpServers registration; set enabled:false to skip both.",
+    "_example": {
+      "enabled": true,
+      "label": "dev-toolkit MCP server",
+      "localPath": "$HOME/<repo-dir>",
+      "mcpServerName": "dev-toolkit",
+      "packageName": "@<scope>/<package>",
+      "registry": "github-packages",
+      "repoUrl": "https://github.com/<owner>/<repo>"
+    }
   }
 }