@mmerterden/multi-agent-pipeline 12.6.0 → 12.8.0

package/pipeline/commands/multi-agent/dev-local/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Fast mode + local  -  Init → Dev(Opus) → Commit → Report, no worktree."
+description: "Fast mode + local  -  Init → Dev(Opus) → Commit → Report, no worktree. Use when a change should be developed on the current branch without creating a worktree."
 description-tr: "Hızlı mod + lokal - Init → Dev(Opus) → Commit → Report, worktree yok."
 allowed-tools: Agent, Bash, Read, Write, Edit, Glob, Grep, TaskCreate, TaskUpdate, TaskList, TaskGet, AskUserQuestion, WebFetch, Skill
 ---

package/pipeline/commands/multi-agent/dev-local-autopilot/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Fastest + local  -  Dev(Opus) + autopilot, no worktree, zero interaction."
+description: "Fastest + local  -  Dev(Opus) + autopilot, no worktree, zero interaction. Use when a change should be developed on the current branch with no worktree and no prompts."
 description-tr: "En hızlı + lokal - Dev(Opus) + autopilot, worktree yok, sıfır etkileşim."
 allowed-tools: Agent, Bash, Read, Write, Edit, Glob, Grep, TaskCreate, TaskUpdate, TaskList, TaskGet, WebFetch, Skill
 ---

package/pipeline/commands/multi-agent/diff-explain/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Map Phase 4 triage findings to branch diff lines. Read-only post-hoc command, used after review to answer 'which finding lines up with which code change'."
+description: "Map Phase 4 triage findings to branch diff lines. Read-only post-hoc command, used after review to answer 'which finding lines up with which code change'. Use when a review finding has to be traced to the exact lines that caused it."
 description-tr: "Faz 4 triyaj bulgularını branch diff satırlarına eşler. Review sonrası kullanılan salt-okunur komut: hangi bulgu hangi kod değişikliğine denk geliyor sorusunu cevaplar."
 argument-hint: "[#task-id | --triage <path> | --state <path>] [--branch <name>] [--base <name>]"
 ---

package/pipeline/commands/multi-agent/finish/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Continue already-done LOCAL work through the pipeline tail: Review → Build+Test → Commit/PR → Report (technical analysis + Jira test-scenario comment). No dev phase."
+description: "Continue already-done LOCAL work through the pipeline tail: Review → Build+Test → Commit/PR → Report (technical analysis + Jira test-scenario comment). No dev phase. Use when local work is already done and only review, build, commit and reporting remain."
 description-tr: "Halihazırda bitmiş LOKAL işi pipeline kuyruğundan geçirir: Review → Build+Test → Commit/PR → Report (teknik analiz + Jira test-senaryosu yorumu). Dev fazı yok."
 allowed-tools: Agent, Bash, Read, Write, Edit, Glob, Grep, TaskCreate, TaskUpdate, TaskList, TaskGet, AskUserQuestion, WebFetch, WebSearch, Skill
 ---
@@ -52,12 +52,12 @@ Phases 1-3 (Analysis / Planning / Dev) are skipped by design  -  `finish` treats
 
 ## Phase execution (reuse the existing phase contracts)
 
-- **Phase 4 Review** — run per `$HOME/.claude/multi-agent-refs/phases/phase-4-review.md` against the resolved diff: deterministic gates (Step 1.x), stack-specific parallel reviewers (Fable + Sonnet on Claude Code; GPT + Opus + Sonnet on Copilot CLI), Fable triage → `triage.accepted`. Blocking/important accepted findings:
+- **Phase 4 Review** - run per `$HOME/.claude/multi-agent-refs/phases/phase-4-review.md` against the resolved diff: deterministic gates (Step 1.x), stack-specific parallel reviewers (Fable + Sonnet on Claude Code; GPT + Opus + Sonnet on Copilot CLI), Fable triage → `triage.accepted`. Blocking/important accepted findings:
   - interactive: present them and ask (`AskUserQuestion`) whether to fix now (loop back through a minimal Phase-3-style TDD fix) or proceed;
   - `autopilot` (or `prefs.global.finish.autoFix == true`): auto-fix accepted blocking/important findings, then re-review the fix, before advancing.
-- **Phase 5 Build+Test** — the **automated success gate** (this is what "build+test success" means here; the interactive device user-test is `/multi-agent:manual-test`). Stack-aware: build via `figma-config.build` (iOS scheme / Android gradle / detected backend/frontend build) and run the existing test suite if present (`swift test` / `xcodebuild test` / `./gradlew test` / `pytest` / `npm test` / `vitest`). Require success to advance; on failure, surface logs and (interactive) stop or (autopilot) attempt a bounded fix loop. **If the repo has no tests, report "no tests present" — never fabricate test results.**
-- **Phase 6 Commit/PR** — per `$HOME/.claude/multi-agent-refs/phases/phase-6-commit.md`: stage + commit any remaining local changes with a conventional message (`{type}(scope): desc [{JIRA_KEY}-{id}]`), push, and open a PR **only if one does not already exist** for the branch. PR body per `$HOME/.claude/multi-agent-refs/pipeline-output-formatting` and `rules/git-conventions` — `Ref: #N` / `Related: #N`, never `Closes/Fixes/Resolves`; NO AI/bot attribution anywhere.
-- **Phase 7 Report** — per `$HOME/.claude/multi-agent-refs/phases/phase-7-report.md` + `channels.md`: produce the **technical analysis** and **test scenarios**, then post to the configured channels. Default content for `finish`: a Jira **comment** carrying the technical analysis + the test scenarios (and, when the PR was opened, the PR description). Every body runs through the humanizer; bot/tool/AI signatures are FORBIDDEN in comments.
+- **Phase 5 Build+Test** - the **automated success gate** (this is what "build+test success" means here; the interactive device user-test is `/multi-agent:manual-test`). Stack-aware: build via `figma-config.build` (iOS scheme / Android gradle / detected backend/frontend build) and run the existing test suite if present (`swift test` / `xcodebuild test` / `./gradlew test` / `pytest` / `npm test` / `vitest`). Require success to advance; on failure, surface logs and (interactive) stop or (autopilot) attempt a bounded fix loop. **If the repo has no tests, report "no tests present" - never fabricate test results.**
+- **Phase 6 Commit/PR** - per `$HOME/.claude/multi-agent-refs/phases/phase-6-commit.md`: stage + commit any remaining local changes with a conventional message (`{type}(scope): desc [{JIRA_KEY}-{id}]`), push, and open a PR **only if one does not already exist** for the branch. PR body per `$HOME/.claude/multi-agent-refs/pipeline-output-formatting` and `rules/git-conventions` - `Ref: #N` / `Related: #N`, never `Closes/Fixes/Resolves`; NO AI/bot attribution anywhere.
+- **Phase 7 Report** - per `$HOME/.claude/multi-agent-refs/phases/phase-7-report.md` + `channels.md`: produce the **technical analysis** and **test scenarios**, then post to the configured channels. Default content for `finish`: a Jira **comment** carrying the technical analysis + the test scenarios (and, when the PR was opened, the PR description). Every body runs through the humanizer; bot/tool/AI signatures are FORBIDDEN in comments.
 
 ## Modes
 
@@ -103,6 +103,6 @@ No TaskList widget. After every state change call `bash $HOME/.claude/scripts/ph
 
 ```bash
 /multi-agent:dev-local "PROJ-12345"     # develop locally (Init→Dev→Commit→Report, no review/test)
-# … you inspect / hand-test the change …
+# ... you inspect / hand-test the change ...
 /multi-agent:finish                        # now: review + build/test + PR + Jira analysis & test scenarios
 ```

package/pipeline/commands/multi-agent/forget/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Remove a saved /multi-agent routine (created by /multi-agent:save): deletes its local-only command and its registry entry. Asks which one and confirms."
+description: "Remove a saved /multi-agent routine (created by /multi-agent:save): deletes its local-only command and its registry entry. Asks which one and confirms. Use when a saved routine is no longer wanted and should be removed."
 description-tr: "Kaydedilmiş bir /multi-agent rutinini (/multi-agent:save ile oluşturulan) siler: local-only komutunu ve registry kaydını kaldırır. Hangisini soracak ve onay alacak."
 argument-hint: "[name]  -  routine to remove; asked if omitted"
 allowed-tools: Bash, Read, AskUserQuestion

package/pipeline/commands/multi-agent/garbage-collect/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Sweep leftover /tmp scratch (picker state, review diffs, channel payloads, analysis drafts) and worktree residue (orphan .worktrees dirs, gitlink index entries) from past runs. Dry-run first; confirms before deleting."
+description: "Sweep leftover /tmp scratch (picker state, review diffs, channel payloads, analysis drafts) and worktree residue (orphan .worktrees dirs, gitlink index entries) from past runs. Dry-run first; confirms before deleting. Use when scratch files from earlier runs need clearing out."
 description-tr: "Geçmiş çalışmalardan kalan /tmp scratch'ini (picker durumu, review diff'leri, kanal payload'ları, analiz taslakları) ve worktree kalıntılarını (sahipsiz .worktrees klasörleri, gitlink index kayıtları) süpürür. Önce dry-run; silmeden önce onay alır."
 argument-hint: "[--older-than=<minutes>] [--yes]  -  dry-run unless confirmed"
 ---

package/pipeline/commands/multi-agent/help/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Multi-agent pipeline usage guide  -  renders in EN or TR per prefs.global.outputLanguage (falls back to promptLanguage for backward compatibility)."
+description: "Multi-agent pipeline usage guide  -  renders in EN or TR per prefs.global.outputLanguage (falls back to promptLanguage for backward compatibility). Use when asked what the pipeline can do, which mode to pick, or what a command means."
 description-tr: "Multi-agent pipeline kullanım kılavuzu - prefs.global.outputLanguage'e göre EN veya TR render edilir (geriye uyumluluk için promptLanguage'e düşer)."
 ---
 
@@ -180,7 +180,7 @@ Design Check (mock-mode vs Figma, local-only  -  powered by dev-toolkit-mcp desi
                                            report (HTML+PDF, ~/DesignChecks).
   /multi-agent:design-check <screen>       Scope to one screen's targets (e.g. boarding-pass).
   /multi-agent:design-check <screen@var>   Scope to a single variant (e.g. boarding-pass@expired).
-  /multi-agent:design-check <figma-url…>   Scope to the frame(s) those URLs name.
+  /multi-agent:design-check <figma-url...>   Scope to the frame(s) those URLs name.
   /multi-agent:design-check --resume       Audit the unaudited remainder of the last run for this repo+module.
   # COVERAGE GATE: every target is either audited or skipped WITH a concrete reason. Anything else fails the
   # gate and the run is reported INCOMPLETE with the missing target ids  -  a partial audit never reads as clean.
@@ -423,7 +423,7 @@ Design Check (mock-mod vs Figma, yalnızca lokal  -  dev-toolkit-mcp design_* to
                                            component/localization), rapor çıkar (HTML+PDF, ~/DesignChecks).
   /multi-agent:design-check <ekran>        Tek ekranın hedeflerine kapsa (örn. boarding-pass).
   /multi-agent:design-check <ekran@varyant> Tek varyanta kapsa (örn. boarding-pass@expired).
-  /multi-agent:design-check <figma-url…>   URL'lerin işaret ettiği frame'lere kapsa.
+  /multi-agent:design-check <figma-url...>   URL'lerin işaret ettiği frame'lere kapsa.
   /multi-agent:design-check --resume       Bu repo+modül için son koşunun denetlenmemiş kalanını denetle.
   # KAPSAM GEÇİDİ: her hedef ya denetlenir ya da SOMUT bir gerekçeyle atlanır. Başka her durum geçidi
   # düşürür ve koşu eksik hedef id'leriyle EKSİK raporlanır  -  kısmi denetim asla temiz görünmez.

package/pipeline/commands/multi-agent/issue/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "List unassigned GitHub issues, pick one, auto-assign, and launch the multi-agent pipeline."
+description: "List unassigned GitHub issues, pick one, auto-assign, and launch the multi-agent pipeline. Use when a GitHub issue should be picked up and started without knowing its number in advance."
 description-tr: "Atanmamış GitHub issue'larını listeler, birini seçtirir, otomatik atar ve multi-agent pipeline'ı başlatır."
 argument-hint: "[autopilot]  -  optional: run the pipeline without confirmations"
 ---

package/pipeline/commands/multi-agent/jira/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "List open Jira issues, pick one, and launch the multi-agent pipeline."
+description: "List open Jira issues, pick one, and launch the multi-agent pipeline. Use when a Jira issue should be picked up and started without knowing its key in advance."
 description-tr: "Açık Jira issue'larını listeler, birini seçtirir ve multi-agent pipeline'ı başlatır."
 argument-hint: "[autopilot]  -  optional: run the pipeline without confirmations"
 ---

package/pipeline/commands/multi-agent/kill/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Stop the given task, then remove its worktree and branch. Asks for confirmation."
+description: "Stop the given task, then remove its worktree and branch. Asks for confirmation. Use when a running or stuck task should be stopped and its worktree removed."
 description-tr: "Verilen görevi durdurur, ardından worktree'sini ve branch'ini kaldırır. Onay ister."
 argument-hint: "#id  -  task ID to delete (e.g. #2)"
 ---

package/pipeline/commands/multi-agent/language/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Toggle outputLanguage (assistant explanations). promptLanguage is fixed to English. External payloads stay English."
+description: "Toggle outputLanguage (assistant explanations). promptLanguage is fixed to English. External payloads stay English. Use when the assistant should explain itself in a different language."
 description-tr: "outputLanguage'i değiştirir (asistan açıklamaları). promptLanguage İngilizce sabittir. Dış payload'lar İngilizce kalır."
 argument-hint: "[en|tr]  -  sets outputLanguage; omit for interactive picker; use 'output en|tr' for explicit form"
 ---

package/pipeline/commands/multi-agent/local/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Full pipeline in local mode  -  no worktree, runs directly on the current branch."
+description: "Full pipeline in local mode  -  no worktree, runs directly on the current branch. Use when the full pipeline should run on the current branch without creating a worktree."
 description-tr: "Tam pipeline lokal modda - worktree yok, doğrudan mevcut branch üzerinde çalışır."
 allowed-tools: Agent, Bash, Read, Write, Edit, Glob, Grep, TaskCreate, TaskUpdate, TaskList, TaskGet, AskUserQuestion, WebFetch, WebSearch, Skill
 ---

package/pipeline/commands/multi-agent/local-autopilot/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Full pipeline + local + autopilot  -  no worktree, no confirmations; runs 7 phases (User Test skipped) end-to-end on the current branch."
+description: "Full pipeline + local + autopilot  -  no worktree, no confirmations; runs 7 phases (User Test skipped) end-to-end on the current branch. Use when the full pipeline should run on the current branch with no worktree and no prompts."
 description-tr: "Tam pipeline + lokal + autopilot - worktree yok, onay yok; 7 fazı (Kullanıcı Testi atlanır) mevcut branch üzerinde uçtan uca koşar."
 argument-hint: '"task"  -  issue URL, Jira ID, free-text, or #id (for resume)'
 allowed-tools: Agent, Bash, Read, Write, Edit, Glob, Grep, TaskCreate, TaskUpdate, TaskList, TaskGet, AskUserQuestion, WebFetch, WebSearch, Skill

package/pipeline/commands/multi-agent/log/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Show the agent-log.md for the given task. With no ID, shows the most recent task."
+description: "Show the agent-log.md for the given task. With no ID, shows the most recent task. Use when asked what a task did, or to read its log."
 description-tr: "Verilen görevin agent-log.md dosyasını gösterir. ID verilmezse en son görevi gösterir."
 argument-hint: "[#id]  -  optional: task ID (e.g. #3). If omitted, the most recent task is used."
 ---

package/pipeline/commands/multi-agent/manual-test/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Switch to the active task's branch and prepare it for manual testing in Xcode. Phase 5 standalone (the UI Bug Hunter lives at /multi-agent:test)."
+description: "Switch to the active task's branch and prepare it for manual testing in Xcode. Phase 5 standalone (the UI Bug Hunter lives at /multi-agent:test). Use when a finished change needs trying by hand on a device or simulator."
 description-tr: "Aktif görevin branch'ine geçer ve Xcode'da manuel test için hazırlar. Faz 5'in bağımsız hali (UI Bug Hunter /multi-agent:test'te)."
 ---
 

package/pipeline/commands/multi-agent/prune-logs/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Delete per-task project logs under ~/.claude/logs/multi-agent (filter by age/project/task). Audit trail + metrics are preserved. Dry-run first; confirms before deleting."
+description: "Delete per-task project logs under ~/.claude/logs/multi-agent (filter by age/project/task). Audit trail + metrics are preserved. Dry-run first; confirms before deleting. Use when task logs have built up and need trimming by age, project or task."
 description-tr: "~/.claude/logs/multi-agent altındaki görev bazlı proje loglarını siler (yaş/proje/görev filtresi). Denetim izi + metrikler korunur. Önce dry-run; silmeden önce onay alır."
 argument-hint: "[--older-than=<days>] [--project=<name>] [--task=<id>] [--yes]"
 ---

package/pipeline/commands/multi-agent/purge/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "⚠️ Wipes every worktree, branch, log, and state file. Irreversible; asks for double confirmation."
+description: "⚠️ Wipes every worktree, branch, log, and state file. Irreversible; asks for double confirmation. Use when every worktree, branch, log and state file should be wiped and the pipeline reset."
 description-tr: "⚠️ Tüm worktree, branch, log ve state dosyalarını siler. Geri alınamaz; çift onay ister."
 ---
 

package/pipeline/commands/multi-agent/refactor/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Analyse the project: extract adapted best-practices, hunt real bugs + improvement areas, check upstream drift of derived skills, research the companion dev-toolkit MCP server against current MCP practice, draft one plan, take approval, develop, then ask whether to sync."
+description: "Analyse the project: extract adapted best-practices, hunt real bugs + improvement areas, check upstream drift of derived skills, research the companion dev-toolkit MCP server against current MCP practice, draft one plan, take approval, develop, then ask whether to sync. Use when asked to review a project for bugs, gaps or improvements, or to check whether derived skills have drifted from upstream."
 description-tr: "Projeyi analiz eder: uyarlanmış best-practice'leri çıkarır, gerçek bug + iyileştirme alanlarını avlar, türetilmiş skill'lerin upstream drift'ini kontrol eder, dev-toolkit MCP sunucusunu güncel MCP pratiklerine göre araştırır, tek plan taslağı çıkarır, onay alır, geliştirir, sonra sync isteyip istemediğini sorar."
 allowed-tools: Read, Write, Edit, Bash, Glob, Grep, Agent, AskUserQuestion, WebFetch, WebSearch
 ---
@@ -75,19 +75,27 @@ The upstream mapping is **configuration, never hardcoded** (it can reference pri
   "upstreamPlugin": "<plugin name>",
   "upstreamSkills": ["<skill-a>", "<skill-b>"],            // the upstream skills we took
   "derivedFromVersion": "<x.y.z>",                         // the version we last synced from
-  "upstreamRepoUrl": "<optional https url>"                // used only if the marketplace is not installed locally
+  "upstreamVersionSource": "marketplace.json",             // which manifest is authoritative; default marketplace.json
+  "upstreamLocalClone": "<optional path>",                 // working copy of the upstream repo, preferred over the cache
+  "upstreamRepoUrl": "<optional https url>"                // used when neither a clone nor the marketplace is available
 }
 ```
 
+**The plugin cache is a mirror, not the authority.** `~/.claude/plugins/cache/<marketplace>/<plugin>/<version>/` only holds whatever the last `claude marketplace update` fetched. Reading it as the current upstream version is how this step reported "up to date" while the derivation was four releases behind: the cache sat at 0.2.1 and upstream was at 0.4.1. Resolve in the order below and never let the cache alone produce an "up to date" verdict.
+
+**Which manifest carries the version** is `upstreamVersionSource`, default `marketplace.json`. That is what a marketplace consumer actually resolves, and some upstreams keep per-plugin `plugin.json` versions deliberately unused - reading those records a version nobody ships. An entry here was recorded at 0.7.0 from `plugin.json` while the upstream marketplace said 0.6.0 and its CHANGELOG stated in as many words that `plugin.json` is not used.
+
 Procedure:
 1. If `global.derivedSkillSources` is missing or empty -> **skip** this step and report "no derived-skill sources configured" (nothing to check). Never invent a source.
-2. For each entry, resolve the current upstream version:
-   - **Preferred**: read the newest installed version under `~/.claude/plugins/cache/<upstreamMarketplace>/<upstreamPlugin>/*/` (its `.claude-plugin/plugin.json` `version`), plus that version's `CHANGELOG.md`.
-   - **Fallback**: if the marketplace is not installed locally and `upstreamRepoUrl` is set, `WebFetch` the upstream `plugin.json` + `CHANGELOG.md`.
-   - If neither is reachable, record the entry as "upstream unreachable" and move on (do not fail the whole run).
+2. For each entry, resolve the current upstream version, in this order, stopping at the first that answers:
+   - **`upstreamLocalClone`** if set: read `<clone>/.claude-plugin/<upstreamVersionSource>`. Also run `git -C <clone> fetch --dry-run` (or compare against `@{u}`) and say so when the clone is itself behind, so a stale working copy is not silently trusted either.
+   - **`upstreamRepoUrl`**: read the same manifest over the API (`gh api` / `WebFetch`). A private upstream can 404 for the currently active account even when the repo exists - that is an unreachable result, not a "no drift" result.
+   - **Plugin cache** under `~/.claude/plugins/cache/<upstreamMarketplace>/<upstreamPlugin>/*/`: last resort only. When the cache is the only source that answered, report the entry as **`unverified (cache only)`**, never as "up to date", and add a plan item to configure `upstreamLocalClone`.
+   - If nothing is reachable, record the entry as "upstream unreachable" and move on (do not fail the whole run).
 3. Compare the resolved upstream version to `derivedFromVersion`:
-   - equal -> "up to date" (no drift)
-   - newer -> **drift**: read the CHANGELOG entries between the two versions, and diff each `upstreamSkills` SKILL.md (+ any templates) against our `localPath` copy. Summarize what changed upstream (bug fixes, new sections, new templates, renamed inputs).
+   - equal, from an authoritative source -> "up to date" (no drift)
+   - equal, from the cache only -> "unverified (cache only)"
+   - newer -> **drift**: read the CHANGELOG entries between the two versions, and diff each `upstreamSkills` SKILL.md (+ any templates) against our `localPath` copy. Summarize what changed upstream (bug fixes, new sections, new templates, renamed inputs). Ignore changelog entries that only touch skills outside `upstreamSkills` - they are not ours to port.
 4. Emit the drift table (plan band D):
 
 ```

package/pipeline/commands/multi-agent/resume/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Resume a stopped or failed task from the phase where it left off."
+description: "Resume a stopped or failed task from the phase where it left off. Use when a task stopped or failed and should carry on from where it left off."
 description-tr: "Durmuş veya hata almış bir görevi kaldığı fazdan devam ettirir."
 argument-hint: "[#id]  -  optional: task ID (e.g. #2). If omitted, the most recent paused task is used."
 ---
@@ -10,7 +10,7 @@ argument-hint: "[#id]  -  optional: task ID (e.g. #2). If omitted, the most rece
 
 Resume a paused or failed task from the last successful phase.
 
-> **Not the same as `/multi-agent:finish`.** `resume` continues a **tracked pipeline task** (needs its `agent-state.json`/worktree) from where it stopped. `/multi-agent:finish` takes **ad-hoc local work** on the current branch (no prior task required) and runs the pipeline tail — Review → Build+Test → PR → Jira report — over it.
+> **Not the same as `/multi-agent:finish`.** `resume` continues a **tracked pipeline task** (needs its `agent-state.json`/worktree) from where it stopped. `/multi-agent:finish` takes **ad-hoc local work** on the current branch (no prior task required) and runs the pipeline tail - Review → Build+Test → PR → Jira report - over it.
 
 ## Steps
 

package/pipeline/commands/multi-agent/review/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Run parallel review on a branch's diff or a Pull Request: 2 models on Claude Code (Fable + Sonnet), 3 models on Copilot CLI (GPT + Opus + Sonnet). On PR input, posts per-finding inline comments and sets approve/needs-work review state."
+description: "Run parallel review on a branch's diff or a Pull Request: 2 models on Claude Code (Fable + Sonnet), 3 models on Copilot CLI (GPT + Opus + Sonnet). On PR input, posts per-finding inline comments and sets approve/needs-work review state. Use when a branch diff or a pull request needs reviewing before it merges."
 description-tr: "Bir branch diff'i veya Pull Request üzerinde paralel review koşar: Claude Code'da 2 model (Fable + Sonnet), Copilot CLI'da 3 model (GPT + Opus + Sonnet). PR girdisinde bulgu başına inline yorum atar ve approve/needs-work durumunu işaretler."
 argument-hint: "[#N | repo#N | PR-URL | branch]  -  optional: PR by number/URL, repo+number, or local branch. Supports GitHub and Bitbucket Server URLs. If omitted (interactive), open GitHub + Bitbucket PRs are listed for multi-select; autopilot falls back to the current branch."
 ---

package/pipeline/commands/multi-agent/review-issue/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Assess whether a GitHub issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / stack readiness, then (after confirm) post the gaps as an issue comment. Read-only on code."
+description: "Assess whether a GitHub issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / stack readiness, then (after confirm) post the gaps as an issue comment. Read-only on code. Use when deciding whether a GitHub issue is specified well enough to hand to development."
 description-tr: "Bir GitHub issue'sunun multi-agent geliştirmeye hazır olup olmadığını değerlendirir: getirir; kapsam / kabul kriterleri / repro / tasarım / API / stack hazırlığını puanlar, sonra (onay sonrası) eksikleri issue yorumu olarak gönderir. Kodda salt-okunur."
 argument-hint: "[#N | repo#N | GitHub issue URL]  -  optional; with no argument, pick from open issues"
 ---

package/pipeline/commands/multi-agent/review-jira/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Assess whether a Jira issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / stack readiness, then (after confirm) post the gaps as a Jira comment. Read-only on code."
+description: "Assess whether a Jira issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / stack readiness, then (after confirm) post the gaps as a Jira comment. Read-only on code. Use when deciding whether a Jira issue is specified well enough to hand to development."
 description-tr: "Bir Jira issue'sunun multi-agent geliştirmeye hazır olup olmadığını değerlendirir: getirir; kapsam / kabul kriterleri / repro / tasarım / API / stack hazırlığını puanlar, sonra (onay sonrası) eksikleri Jira yorumu olarak gönderir. Kodda salt-okunur."
 argument-hint: "[JIRA-KEY | Jira URL]  -  optional; with no argument, pick from your open Jira issues"
 ---

package/pipeline/commands/multi-agent/routines/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "List your saved /multi-agent routines (from /multi-agent:save) with what each one does, rendered in outputLanguage."
+description: "List your saved /multi-agent routines (from /multi-agent:save) with what each one does, rendered in outputLanguage. Use when asked which saved routines exist or what one of them does."
 description-tr: "Kaydettiğin /multi-agent rutinlerini (/multi-agent:save ile) listeler; her birinin ne yaptığını outputLanguage'e göre gösterir."
 argument-hint: ""
 allowed-tools: Bash, Read

package/pipeline/commands/multi-agent/save/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Save a recurring job as a reusable /multi-agent:<name> command. Reviews the conversation + your CLAUDE.md for candidate routines, you pick one and name it; it is stored local-only and never synced."
+description: "Save a recurring job as a reusable /multi-agent:<name> command. Reviews the conversation + your CLAUDE.md for candidate routines, you pick one and name it; it is stored local-only and never synced. Use when a job keeps recurring and should become its own reusable command."
 description-tr: "Sık yaptığın bir işi yeniden kullanılabilir /multi-agent:<ad> komutu olarak kaydeder. Konuşmayı + CLAUDE.md'ni tarayıp aday rutinler önerir, sen seçip ad verirsin; local-only saklanır, asla sync edilmez."
 argument-hint: "[name]  -  optional command name; asked if omitted"
 allowed-tools: Bash, Read, AskUserQuestion

package/pipeline/commands/multi-agent/scan/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Skill security scan: walks local skill directories against a tiered pattern catalog."
+description: "Skill security scan: walks local skill directories against a tiered pattern catalog. Use when local skill directories need checking for unsafe or unexpected content."
 description-tr: "Skill güvenlik taraması: yerel skill dizinlerini kademeli desen kataloğuna göre tarar."
 allowed-tools: Bash, Read
 argument-hint: "[--strict] [--threshold critical|high|medium|low] [--json] [--root PATH]"

package/pipeline/commands/multi-agent/search/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Log search across every agent-log.md with smart ranking and filters. Optional --semantic flag queries the per-repo triage corpus."
+description: "Log search across every agent-log.md with smart ranking and filters. Optional --semantic flag queries the per-repo triage corpus. Use when something has to be found across past task logs."
 description-tr: "Tüm agent-log.md dosyalarında akıllı sıralama ve filtrelerle log araması. İsteğe bağlı --semantic bayrağı repo bazlı triyaj korpusunu sorgular."
 allowed-tools: Bash, Read
 argument-hint: "\"query\" [--project NAME] [--since 7d] [--phase N] [--semantic] [--json|--tsv]"

package/pipeline/commands/multi-agent/setup/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "First-run setup wizard: keychain token discovery, Git Identity onboarding, and pipeline preparation."
+description: "First-run setup wizard: keychain token discovery, Git Identity onboarding, and pipeline preparation. Use when the pipeline is being set up for the first time, or tokens and git identity need onboarding."
 description-tr: "İlk kurulum sihirbazı: keychain token keşfi, Git Identity kaydı ve pipeline hazırlığı."
 allowed-tools: Bash, Read, Write, AskUserQuestion, WebFetch
 ---
@@ -823,4 +823,4 @@ Stack skills ship as versioned plugins in the `{owner}/multi-agent-plugins` mark
    `ai-common-engineering-toolkit@multi-agent-plugins` is always set `true` alongside the stack plugin.
 3. Report the enabled set. To change later, run `/multi-agent:stack <ios|android|frontend|backend|...>` in the repo. Pipeline Phase 1 auto-detects the stack for its own routing regardless of enablement.
 
-The marketplace repo name (`multi-agent-plugins`) is generic; a different org points `{owner}` at its own fork — nothing in the pipeline is coupled to a specific account.
+The marketplace repo name (`multi-agent-plugins`) is generic; a different org points `{owner}` at its own fork - nothing in the pipeline is coupled to a specific account.

package/pipeline/commands/multi-agent/stack/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Select the active stack for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json (ios/android/mobile/backend/frontend/fullstack/all)."
+description: "Select the active stack for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json (ios/android/mobile/backend/frontend/fullstack/all). Use when a repo's stack changed or the wrong plugins are enabled for it."
 description-tr: "Bu repo için aktif stack'i seçer: eşleşen marketplace plugin'lerini .claude/settings.json'da etkinleştirir (ios/android/mobile/backend/frontend/fullstack/all)."
 allowed-tools: Bash, Read, Edit, Write
 ---
@@ -8,7 +8,7 @@ allowed-tools: Bash, Read, Edit, Write
 
 Stack skills ship as plugins in the `{owner}/multi-agent-plugins` marketplace. Selecting a stack = **enabling the matching plugin(s)** in the current repo's `.claude/settings.json` `enabledPlugins`. The `ai-common-engineering-toolkit` (accessibility audit, humanizer, Firebase) is always enabled alongside the stack plugin.
 
-This replaces the old `stack-swap.sh` mechanic that physically moved skill directories in `~/.claude/skills/`. There is no SessionStart hook and no directory shuffling — enablement is declarative, per-repo, and versioned.
+This replaces the old `stack-swap.sh` mechanic that physically moved skill directories in `~/.claude/skills/`. There is no SessionStart hook and no directory shuffling - enablement is declarative, per-repo, and versioned.
 
 ## Usage
 
@@ -89,7 +89,7 @@ Use the Read + Edit/Write tools (JSON must stay valid). Then print the resulting
 
 ## Notes
 
-- Enablement is per-repo and declarative — commit `.claude/settings.json` so teammates get the same stack.
+- Enablement is per-repo and declarative - commit `.claude/settings.json` so teammates get the same stack.
 - Restart the conversation (or reload the window) for Claude Code to pick up newly enabled plugins.
 - Pipeline Phase 1 stack detection is independent (it reads project files); `stack` only sets which plugin skill set is active.
 - The old `stack-swap.sh` skill-dir swap has been removed; stack selection is entirely plugin enablement.

package/pipeline/commands/multi-agent/status/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Show every multi-agent task's ID, phase, branch, and status."
+description: "Show every multi-agent task's ID, phase, branch, and status. Use when asked what is running, or for an overview of every task."
 description-tr: "Tüm multi-agent görevlerinin ID, faz, branch ve durumunu gösterir."
 ---
 

package/pipeline/commands/multi-agent/sync/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "One-shot sync of the entire multi-agent ecosystem: Claude Code, Copilot CLI, pipeline repo, website, and the dev-toolkit MCP server."
+description: "One-shot sync of the entire multi-agent ecosystem: Claude Code, Copilot CLI, pipeline repo, website, and the dev-toolkit MCP server. Use when work is finished and should be propagated across Claude Code, Copilot CLI, the repos, the website and the dev-toolkit server."
 description-tr: "Tüm multi-agent ekosisteminin tek atımlık senkronu: Claude Code, Copilot CLI, pipeline repo, website ve dev-toolkit MCP sunucusu."
 argument-hint: "[release] [dev-toolkit] [--platform=<macos|linux|windows>]"
 allowed-tools: Read, Write, Edit, Bash, Glob, Grep, AskUserQuestion, WebFetch
@@ -125,7 +125,7 @@ If nothing is stale → report "All targets up to date" and stop.
    - `~/.claude/CLAUDE.md`, `~/.claude/rules/`, `~/.claude/knowledge/`
    - `~/.claude/scripts/`  -  EXCEPT `pre-commit-check.sh`, `agent-guard.sh`, `agent-guard.py`, and `build-stack-plugins.mjs` (generic, synced)
    - `~/.claude/settings.json`
-   - **Any `~/.claude/commands/multi-agent/*.md` whose frontmatter has `local-only: true`** — these are user/repo-specific alias wrappers that delegate to a private marketplace plugin (e.g. corporate `ai-ios-engineering-toolkit` skills exposed as `multi-agent:<name>`). Syncing them would leak the private plugin/skill names into the public pipeline. Filter before copy: skip every source file containing `local-only: true`, and after copy assert none reached `pipeline/commands/`.
+   - **Any `~/.claude/commands/multi-agent/*.md` whose frontmatter has `local-only: true`** - these are user/repo-specific alias wrappers that delegate to a private marketplace plugin (e.g. corporate `ai-ios-engineering-toolkit` skills exposed as `multi-agent:<name>`). Syncing them would leak the private plugin/skill names into the public pipeline. Filter before copy: skip every source file containing `local-only: true`, and after copy assert none reached `pipeline/commands/`.
      ```bash
      # backstop: no local-only wrapper may exist in the synced target
      grep -rl "^local-only: true" ~/multi-agent-pipeline/pipeline/commands/ 2>/dev/null \
@@ -192,7 +192,7 @@ node "$HOME/multi-agent-pipeline/pipeline/scripts/build-stack-plugins.mjs" --dry
 node "$HOME/multi-agent-pipeline/pipeline/scripts/build-stack-plugins.mjs"
 ```
 
-**Version-based management:** the generator bumps a plugin's `version` (patch) only when its skill set actually changed. Idempotent — a no-op run bumps nothing. Consumers pick up new versions via `/multi-agent:update` (which runs `claude marketplace update multi-agent-plugins`).
+**Version-based management:** the generator bumps a plugin's `version` (patch) only when its skill set actually changed. Idempotent - a no-op run bumps nothing. Consumers pick up new versions via `/multi-agent:update` (which runs `claude marketplace update multi-agent-plugins`).
 
 **Publish (only if the generator reported bumps):**
 
@@ -207,7 +207,7 @@ if ! git diff --quiet; then
 fi
 ```
 
-Never author skills directly in the plugins repo's `knowledge/` — they will be overwritten on the next rebuild. Author in `shared/external`, then run this step.
+Never author skills directly in the plugins repo's `knowledge/` - they will be overwritten on the next rebuild. Author in `shared/external`, then run this step.
 
 ---
 
@@ -357,7 +357,7 @@ When invoked with the `release` argument:
 
 ## Sub-Command Sync (Claude Code <-> Copilot CLI Skills)
 
-This runs on the Claude <-> Copilot axis — the two CLIs the pipeline supports natively.
+This runs on the Claude <-> Copilot axis - the two CLIs the pipeline supports natively.
 
 | Claude Code | Copilot CLI |
 |-------------|-------------|

package/pipeline/commands/multi-agent/test/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "UI Bug Hunter  -  iOS Simulator (simctl) + Android Emulator (adb). Auto-detects platform. Screenshot + tap + analyze on the booted device. The Phase 5 Manual Test flow lives at /multi-agent:manual-test."
+description: "UI Bug Hunter  -  iOS Simulator (simctl) + Android Emulator (adb). Auto-detects platform. Screenshot + tap + analyze on the booted device. The Phase 5 Manual Test flow lives at /multi-agent:manual-test. Use when a running app should be driven on a simulator or emulator to hunt UI bugs."
 description-tr: "UI Bug Hunter - iOS Simulator (simctl) + Android Emulator (adb). Platformu otomatik algılar. Açık cihazda screenshot + tap + analiz. Faz 5 Manuel Test akışı /multi-agent:manual-test'te."
 argument-hint: '[scenario]  -  e.g. "dark mode" | "accessibility" | "dynamic type" | "screenshot tr" | "store-ready" | (empty = full sweep)'
 ---

package/pipeline/commands/multi-agent/uninstall/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Uninstall the pipeline from Claude Code + Copilot CLI. Keychain access tokens are always left untouched; --all-data also clears pipeline settings and logs. Asks for double confirmation."
+description: "Uninstall the pipeline from Claude Code + Copilot CLI. Keychain access tokens are always left untouched; --all-data also clears pipeline settings and logs. Asks for double confirmation. Use when the pipeline should be removed from Claude Code and Copilot CLI."
 description-tr: "Pipeline'ı Claude Code + Copilot CLI'dan kaldırır. Keychain erişim token'larına asla dokunulmaz; --all-data ayrıca pipeline ayarlarını ve loglarını da siler. Çift onay ister."
 argument-hint: "[--dry-run] [--all-data] [--claude] [--copilot] [--target=<path>]"
 ---

package/pipeline/commands/multi-agent/update/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Update the pipeline to the latest version: git pull, install, migrate."
+description: "Update the pipeline to the latest version: git pull, install, migrate. Use when the installed pipeline is behind and should be brought to the latest version."
 description-tr: "Pipeline'ı son sürüme günceller: git pull, install, migrate."
 allowed-tools: Bash, Read, Write, AskUserQuestion
 ---
@@ -52,13 +52,13 @@ Update the pipeline in one command. Existing preferences are preserved; only ski
    fi
    ```
 
-4c. **Prune retired adapter files** (Cursor / Antigravity / Codex / Copilot Chat were removed in v10.7.0 — the pipeline now targets Claude Code + Copilot CLI only):
+4c. **Prune retired adapter files** (Cursor / Antigravity / Codex / Copilot Chat were removed in v10.7.0 - the pipeline now targets Claude Code + Copilot CLI only):
    ```bash
    # Global Codex adapter prompt is safe to remove (no longer produced).
    rm -f "$HOME/.codex/prompts/multi-agent.md"
    echo "  -> pruned retired global Codex adapter prompt (if present)"
    # Per-project adapter files (.cursor/, .agent/, .github/copilot-instructions.md)
-   # live in your repos and are left untouched — remove them manually if you like.
+   # live in your repos and are left untouched - remove them manually if you like.
    ```
 
 5. **Migrate preferences** (if there is an old schema):

package/pipeline/lib/account-resolver.sh

@@ -18,7 +18,7 @@
 # Output schema (per account):
 #   { id, label, prefix, providers[], tokens{}, jiraHost, bitbucketHost, isWork }
 
-set -eu
+set -euo pipefail
 
 PRETTY=0
 FILTER=""

package/pipeline/lib/channels-multi-repo.sh

@@ -15,7 +15,7 @@
 # Single-repo tasks: every subcommand falls through to the single PR / single
 # body  -  `targets` returns one entry, render-* leaves the body unchanged.
 
-set -eu
+set -euo pipefail
 
 CMD="${1:-}"
 STATE="${2:-}"

package/pipeline/lib/context-link-extractor.sh

@@ -41,7 +41,7 @@
 #   0  always  -  emits "[]" when no input or no matches; downstream readers
 #               must tolerate an empty array.
 
-set -eu
+set -euo pipefail
 
 CONTEXT_LINK_INPUT=$(cat)
 export CONTEXT_LINK_INPUT

package/pipeline/lib/credential-store.sh

@@ -25,7 +25,7 @@
 # Returns 0 on success, 1 on missing/empty value, 2 on backend missing,
 # 3 on usage error.
 
-set -eu
+set -euo pipefail
 
 detect_platform() {
   case "$(uname -s 2>/dev/null)" in
@@ -113,18 +113,36 @@ if isinstance(name, str) and name.strip():
 }
 
 # --- Subcommands ------------------------------------------------------------
+# Append one PAT-lookup audit event. Every `get` goes through here, which is the
+# point of the control: the audit trail described in the .gitignore hardening and
+# managed by `/multi-agent:prune-logs` was written by audit-log.sh, but nothing
+# ever called it, so the trail was always empty and the control was inert.
+#
+# Never fails the caller and never echoes a secret: audit-log.sh hashes the repo
+# URL, logs the logical key (not the value), and is silent on error by design.
+audit_lookup() {
+  local logical="$1" success="$2"
+  local audit="$SCRIPT_DIR/../scripts/audit-log.sh"
+  [ -f "$audit" ] || return 0
+  bash "$audit" pat_lookup "$logical" "${USER:-unknown}" "${MULTI_AGENT_REPO_URL:-}" "$success" \
+    >/dev/null 2>&1 || true
+}
+
 do_get() {
   local key="${1:-}"
   [ -z "$key" ] && { echo "usage: $0 get <key>" >&2; exit 3; }
+  local logical="$key"
   key=$(resolve_key "$key")
   if delegate_to_python; then
     local val rc
     val=$(python3 "$KEYCHAIN_PY" get "$key" 2>/dev/null) || rc=$?
     rc=${rc:-0}
     if [ "$rc" -eq 0 ] && [ -n "$val" ]; then
+      audit_lookup "$logical" true
       printf '%s' "$val"
       return 0
     fi
+    audit_lookup "$logical" false
     return 1
   fi
   local val=""
@@ -149,8 +167,10 @@ if (\$c) { \$c.GetNetworkCredential().Password }
       echo "ERR: unsupported platform" >&2; exit 2 ;;
   esac
   if [ -z "$val" ]; then
+    audit_lookup "$logical" false
     return 1
   fi
+  audit_lookup "$logical" true
   printf '%s' "$val"
 }
 

package/pipeline/lib/fetch-confluence.sh

@@ -41,7 +41,7 @@
 #   and exits 2  -  the orchestrator handles the Save Flow + retry. The script
 #   itself never prompts.
 
-set -eu
+set -euo pipefail
 
 URL=""
 HOST_OVERRIDE="${CONFLUENCE_HOST_OVERRIDE:-}"

package/pipeline/lib/fetch-crashlytics.sh

@@ -45,7 +45,7 @@
 #   orchestrator surfaces this as "fetcher unavailable, advisory only" to
 #   keep the pipeline moving.
 
-set -eu
+set -euo pipefail
 
 URL=""
 PROJECT_ID=""

package/pipeline/lib/fetch-fortify.sh

@@ -46,7 +46,7 @@
 #   High > 0       → blocking=false, reason="high-findings-warning"
 #   else           → blocking=false, reason="clean"
 
-set -eu
+set -euo pipefail
 
 URL=""
 VERSION_ID=""

package/pipeline/lib/fetch-graylog.sh

@@ -47,7 +47,7 @@
 #   4  bad usage
 #   6  host not configured (prefs.global.hosts.graylog is empty)
 
-set -eu
+set -euo pipefail
 
 TRX_ID=""
 CONV_ID=""

package/pipeline/lib/fetch-swagger.sh

@@ -42,7 +42,7 @@
 #   3  payload too large or malformed
 #   4  bad usage
 
-set -eu
+set -euo pipefail
 
 URL="${1:-}"
 [ -z "$URL" ] && { echo "usage: $0 <openapi-url>" >&2; exit 4; }