@mmerterden/multi-agent-pipeline 12.6.0 → 12.8.0

package/pipeline/schemas/prefs.schema.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/prefs.schema.json",
-  "title": "Multi-Agent Pipeline \u2014 multi-agent-preferences.json",
-  "description": "User-level preferences. Written to $HOME/.claude/multi-agent-preferences.json. Never committed. Never synced to the open-source repo \u2014 may contain personal data.",
+  "title": "Multi-Agent Pipeline - multi-agent-preferences.json",
+  "description": "User-level preferences. Written to $HOME/.claude/multi-agent-preferences.json. Never committed. Never synced to the open-source repo - may contain personal data.",
   "type": "object",
   "additionalProperties": false,
   "patternProperties": {
@@ -10,21 +10,11 @@
       "description": "Documentation-only blocks shipped in preferences-template.json (_figmaConfigTemplate, _derivedSkillSourcesTemplate, _devToolkitTemplate). Copy-paste examples, never read by the pipeline."
     }
   },
-  "required": [
-    "schemaVersion",
-    "global",
-    "projects"
-  ],
+  "required": ["schemaVersion", "global", "projects"],
   "properties": {
     "schemaVersion": {
       "type": "string",
-      "enum": [
-        "2.0.0",
-        "2.1.0",
-        "2.2.0",
-        "2.3.0",
-        "2.4.0"
-      ],
+      "enum": ["2.0.0", "2.1.0", "2.2.0", "2.3.0", "2.4.0"],
       "description": "v2.0.0: pre-v3.7. v2.1.0: v3.7+ adds identities[].servicePatMap, platformIdentityRouting, recentGroups, recentBranches, serviceStatus, settings, expanded keychainMapping. v2.2.0: v6.0.0 formalizes v5.7 / v5.8 additions (reportChannels, reportContent with technicalAnalysis, wikiScope, autopilotReportTimeoutSeconds) that had been running as 2.1.0 sub-migrations without a proper version bump."
     },
     "global": {
@@ -37,10 +27,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "name",
-              "email"
-            ],
+            "required": ["name", "email"],
             "properties": {
               "name": {
                 "type": "string"
@@ -59,7 +46,7 @@
               "servicePatMap": {
                 "type": "object",
                 "additionalProperties": false,
-                "description": "v2.1.0+. Maps a service name to the Keychain key name this identity owns for that service. Enables cross-identity isolation \u2014 corporate identity's Jira PAT is not accidentally used for personal repos.",
+                "description": "v2.1.0+. Maps a service name to the Keychain key name this identity owns for that service. Enables cross-identity isolation - corporate identity's Jira PAT is not accidentally used for personal repos.",
                 "properties": {
                   "jira": {
                     "type": "string"
@@ -81,7 +68,7 @@
                   },
                   "firebase": {
                     "type": "string",
-                    "description": "Firebase JSON (base64-encoded). project_id is parsed from the decoded JSON \u2014 no separate firebase_project entry."
+                    "description": "Firebase JSON (base64-encoded). project_id is parsed from the decoded JSON - no separate firebase_project entry."
                   },
                   "fortify": {
                     "type": "string"
@@ -97,7 +84,7 @@
         "gitIdentities": {
           "type": "array",
           "deprecated": true,
-          "description": "DEPRECATED in v2.1.0 \u2014 renamed to 'identities'. Migration script converts automatically. Kept in schema temporarily for migration compatibility.",
+          "description": "DEPRECATED in v2.1.0 - renamed to 'identities'. Migration script converts automatically. Kept in schema temporarily for migration compatibility.",
           "items": {
             "type": "object",
             "additionalProperties": true
@@ -109,112 +96,61 @@
           "description": "Maps logical token names to actual Keychain item names. Pipeline looks up tokens via `security find-generic-password -s <mapped-name>` (or `pipeline/lib/credential-store.sh get` cross-platform). Covered keys: jira, bitbucket, bitbucket_token, bitbucket_user, github, confluence, figma, figma_pat, figma_user, figma_mcp, fortify, graylog, firebase, jenkins, npm, claude_oauth_token, claude_oauth_token_fallback.",
           "properties": {
             "jira": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "bitbucket": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Legacy alias for bitbucket_token."
             },
             "bitbucket_token": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "bitbucket_user": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "github": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "confluence": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "figma": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "figma_mcp": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "fortify": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "graylog": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "figma_pat": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Figma Personal Access Token. Tier 2 of the Figma access chain (REST API) resolves this key."
             },
             "figma_user": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Figma account identifier, when the REST flow needs it alongside figma_pat."
             },
             "claude_oauth_token": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Claude Code OAuth token used by headless / scheduled runs."
             },
             "claude_oauth_token_fallback": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Secondary OAuth token used when the primary is rate-limited or expired."
             },
             "firebase": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Firebase JSON (base64-encoded). project_id is parsed from the decoded JSON."
             },
             "jenkins": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "npm": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "NPM registry token (npm.pkg.github.com or npmjs.com). Used by package publish flow."
             }
           }
@@ -222,10 +158,7 @@
         "tokenScripts": {
           "type": "object",
           "additionalProperties": {
-            "type": [
-              "string",
-              "null"
-            ]
+            "type": ["string", "null"]
           },
           "default": {},
           "description": "Maps service ids to user-owned token generation scripts (absolute paths, personal - never synced). Used by the Phase 0 token pre-flight: figma_mcp silent renewal reads the .figma-oauth.json next to tokenScripts.figma_mcp; the 'Regenerate now (script)' option runs the script itself."
@@ -255,9 +188,7 @@
               {
                 "type": "object",
                 "additionalProperties": false,
-                "required": [
-                  "path"
-                ],
+                "required": ["path"],
                 "properties": {
                   "path": {
                     "type": "string"
@@ -287,9 +218,7 @@
             "items": {
               "type": "object",
               "additionalProperties": false,
-              "required": [
-                "branch"
-              ],
+              "required": ["branch"],
               "properties": {
                 "branch": {
                   "type": "string"
@@ -347,9 +276,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "repos"
-            ],
+            "required": ["repos"],
             "properties": {
               "label": {
                 "type": "string",
@@ -381,9 +308,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "repoSet"
-            ],
+            "required": ["repoSet"],
             "properties": {
               "repoSet": {
                 "type": "array",
@@ -403,11 +328,7 @@
               },
               "platform": {
                 "type": "string",
-                "enum": [
-                  "ios",
-                  "android",
-                  "mixed"
-                ]
+                "enum": ["ios", "android", "mixed"]
               },
               "hostScheme": {
                 "type": "string",
@@ -439,11 +360,7 @@
               },
               "lastResult": {
                 "type": "string",
-                "enum": [
-                  "success",
-                  "failed",
-                  "skipped"
-                ]
+                "enum": ["success", "failed", "skipped"]
               }
             }
           },
@@ -451,14 +368,11 @@
         },
         "serviceStatus": {
           "type": "object",
-          "description": "v2.1.0+. Ephemeral per-service reachability cache. TTL 5 minutes (settings.serviceStatusCacheSeconds). Each service is independent \u2014 Jira may be reachable while Bitbucket is not.",
+          "description": "v2.1.0+. Ephemeral per-service reachability cache. TTL 5 minutes (settings.serviceStatusCacheSeconds). Each service is independent - Jira may be reachable while Bitbucket is not.",
           "additionalProperties": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "ok",
-              "checkedAt"
-            ],
+            "required": ["ok", "checkedAt"],
             "properties": {
               "ok": {
                 "type": "boolean"
@@ -532,10 +446,7 @@
           }
         },
         "defaultJiraKey": {
-          "type": [
-            "string",
-            "null"
-          ],
+          "type": ["string", "null"],
           "description": "Default Jira project key used for placeholder replacement. null until /multi-agent:setup onboards a Jira project."
         },
         "modelFallback": {
@@ -549,10 +460,7 @@
               "description": "Master switch for tier fallback."
             },
             "premiumTierUntil": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "ISO date after which the premium tier is assumed gone. null = no expiry known."
             },
             "fallbackModel": {
@@ -569,7 +477,7 @@
         "hosts": {
           "type": "object",
           "additionalProperties": false,
-          "description": "Corporate service hosts used by Jira / Confluence / Bitbucket / email-domain placeholders. Collected inline during Token Save Flow (Step 3.5) when a hosted-service token is added for the first time. Per-user, never committed \u2014 lives in ~/.claude/multi-agent-preferences.json only.",
+          "description": "Corporate service hosts used by Jira / Confluence / Bitbucket / email-domain placeholders. Collected inline during Token Save Flow (Step 3.5) when a hosted-service token is added for the first time. Per-user, never committed - lives in ~/.claude/multi-agent-preferences.json only.",
           "properties": {
             "jira": {
               "type": "string",
@@ -600,27 +508,27 @@
         "reportChannels": {
           "type": "object",
           "additionalProperties": false,
-          "description": "v5.7+ \u2014 Phase 7 / /multi-agent:channels kanal se\u00e7imi default'lar\u0131. Multi-select men\u00fcde tick'li gelecek kanallar. Her kanal ba\u011f\u0131ms\u0131z boolean. Autopilot Phase 7'de ALWAYS pauses (30-min timeout) \u2014 bu de\u011ferler sadece men\u00fcn\u00fcn \u00f6nceden se\u00e7ili halini belirler.",
+          "description": "v5.7+ - Phase 7 / /multi-agent:channels kanal se\u00e7imi default'lar\u0131. Multi-select men\u00fcde tick'li gelecek kanallar. Her kanal ba\u011f\u0131ms\u0131z boolean. Autopilot Phase 7'de ALWAYS pauses (30-min timeout) - bu de\u011ferler sadece men\u00fcn\u00fcn \u00f6nceden se\u00e7ili halini belirler.",
           "properties": {
             "pr": {
               "type": "boolean",
               "default": true,
-              "description": "PR description update (replace/append). Default ON \u2014 en yayg\u0131n kanal."
+              "description": "PR description update (replace/append). Default ON - en yayg\u0131n kanal."
             },
             "jira": {
               "type": "boolean",
               "default": true,
-              "description": "Jira comment on linked issue. Default ON \u2014 task'a jiraId varsa tick'li gelir."
+              "description": "Jira comment on linked issue. Default ON - task'a jiraId varsa tick'li gelir."
             },
             "confluence": {
               "type": "boolean",
               "default": false,
-              "description": "Confluence page creation. Default OFF \u2014 bir kez parent page se\u00e7ince LRU'dan \u00f6ner."
+              "description": "Confluence page creation. Default OFF - bir kez parent page se\u00e7ince LRU'dan \u00f6ner."
             },
             "wiki": {
               "type": "boolean",
               "default": false,
-              "description": "Component wiki pages (Case A scope multi-select). Default OFF \u2014 taskType=component + figmaConfig.wiki.enabled gerekli, yoksa men\u00fcde greyed out."
+              "description": "Component wiki pages (Case A scope multi-select). Default OFF - taskType=component + figmaConfig.wiki.enabled gerekli, yoksa men\u00fcde greyed out."
             }
           },
           "default": {
@@ -633,7 +541,7 @@
         "reportContent": {
           "type": "object",
           "additionalProperties": false,
-          "description": "v5.7+ \u2014 Phase 7 / /multi-agent:channels i\u00e7erik se\u00e7imi default'lar\u0131. Multi-select men\u00fcde tick'li gelecek content source'lar\u0131.",
+          "description": "v5.7+ - Phase 7 / /multi-agent:channels i\u00e7erik se\u00e7imi default'lar\u0131. Multi-select men\u00fcde tick'li gelecek content source'lar\u0131.",
           "properties": {
             "normalAnalysis": {
               "type": "boolean",
@@ -653,7 +561,7 @@
             "autoDiff": {
               "type": "boolean",
               "default": false,
-              "description": "PR diff'ten auto-generate \u00f6zet (eski enrich behavior \u2014 root cause / solution / changed files / test scenarios). PR linked de\u011filse greyed out."
+              "description": "PR diff'ten auto-generate \u00f6zet (eski enrich behavior - root cause / solution / changed files / test scenarios). PR linked de\u011filse greyed out."
             },
             "manualNote": {
               "type": "boolean",
@@ -663,12 +571,12 @@
             "costSummary": {
               "type": "boolean",
               "default": false,
-              "description": "v6.1.0+ \u2014 Per-phase token cost summary (phase name, tokens_in, tokens_out, est. USD). Source: phase-tracker.sh token tallies + optional OTel spans (MULTI_AGENT_OTEL_SPANS=1). Greyed out if tracker has no token data for the task. Opt-in \u2014 off by default so baseline PR body stays unchanged."
+              "description": "v6.1.0+ - Per-phase token cost summary (phase name, tokens_in, tokens_out, est. USD). Source: phase-tracker.sh token tallies + optional OTel spans (MULTI_AGENT_OTEL_SPANS=1). Greyed out if tracker has no token data for the task. Opt-in - off by default so baseline PR body stays unchanged."
             },
             "workSummary": {
               "type": "boolean",
               "default": false,
-              "description": "v7.1.0+ \u2014 Executive 'Work Done' summary block. Distills the whole pipeline run into a single-screen section: task + branch + base + PR number, scope delivered (\u2705/\u23f3 per Phase 2 task), changed files with +/- counts (capped at 20 rows), review outcome (accepted/deferred/rejected counts + approved flag), and a one-line phase tick strip (0 Init \u2705 \u00b7 1 Analysis \u2705 \u00b7 \u2026). Source: `agent-state.json` + `phase-tracker.json` + `git diff --numstat` between `baseBranch`\u2026HEAD. Consumed by `render-work-summary.sh`. Greyed out if no state file exists for the task. Opt-in \u2014 off by default so baseline PR body stays unchanged."
+              "description": "v7.1.0+ - Executive 'Work Done' summary block. Distills the whole pipeline run into a single-screen section: task + branch + base + PR number, scope delivered (\u2705/\u23f3 per Phase 2 task), changed files with +/- counts (capped at 20 rows), review outcome (accepted/deferred/rejected counts + approved flag), and a one-line phase tick strip (0 Init \u2705 \u00b7 1 Analysis \u2705 \u00b7 ...). Source: `agent-state.json` + `phase-tracker.json` + `git diff --numstat` between `baseBranch`...HEAD. Consumed by `render-work-summary.sh`. Greyed out if no state file exists for the task. Opt-in - off by default so baseline PR body stays unchanged."
             }
           },
           "default": {
@@ -686,36 +594,22 @@
           "default": 1800,
           "minimum": 60,
           "maximum": 7200,
-          "description": "v5.7+ \u2014 Phase 7'de autopilot always-pause men\u00fcs\u00fcnde kullan\u0131c\u0131 cevap vermezse session'\u0131 sonland\u0131rma s\u00fcresi (saniye). Default 1800 (30 dk). Timeout'ta external delivery aborted, internal capture (agent-log, telemetry, knowledge) yine \u00e7al\u0131\u015f\u0131r, session /multi-agent:resume ile devam ettirilebilir."
+          "description": "v5.7+ - Phase 7'de autopilot always-pause men\u00fcs\u00fcnde kullan\u0131c\u0131 cevap vermezse session'\u0131 sonland\u0131rma s\u00fcresi (saniye). Default 1800 (30 dk). Timeout'ta external delivery aborted, internal capture (agent-log, telemetry, knowledge) yine \u00e7al\u0131\u015f\u0131r, session /multi-agent:resume ile devam ettirilebilir."
         },
         "wikiScope": {
           "type": "array",
           "items": {
             "type": "string",
-            "enum": [
-              "main",
-              "ios",
-              "screenshots",
-              "index"
-            ]
+            "enum": ["main", "ios", "screenshots", "index"]
           },
-          "default": [
-            "main",
-            "ios",
-            "screenshots",
-            "index"
-          ],
-          "description": "v5.7+ \u2014 Wiki Case A scope multi-select default'u. Component wiki dispatch'inde hangi artifact'lar yaz\u0131lacak: main (ana component sayfas\u0131), ios (iOS sub-page), screenshots (assets/ klas\u00f6r\u00fc), index (_Sidebar.md + ComponentImplementationStatus.md). Legacy wikiDefault=true \u2192 [main,ios,screenshots,index] migration; wikiDefault=false \u2192 [] (empty array = Wiki adapter Case B men\u00fcs\u00fcne d\u00fc\u015fer)."
+          "default": ["main", "ios", "screenshots", "index"],
+          "description": "v5.7+ - Wiki Case A scope multi-select default'u. Component wiki dispatch'inde hangi artifact'lar yaz\u0131lacak: main (ana component sayfas\u0131), ios (iOS sub-page), screenshots (assets/ klas\u00f6r\u00fc), index (_Sidebar.md + ComponentImplementationStatus.md). Legacy wikiDefault=true \u2192 [main,ios,screenshots,index] migration; wikiDefault=false \u2192 [] (empty array = Wiki adapter Case B men\u00fcs\u00fcne d\u00fc\u015fer)."
         },
         "autoJiraFromGithubIssue": {
           "type": "string",
-          "enum": [
-            "ask",
-            "always",
-            "never"
-          ],
+          "enum": ["ask", "always", "never"],
           "default": "ask",
-          "description": "Policy for the GitHub-issue Jira auto-create (WS-6 triad, Phase 0 Step 1). `ask` prompts the user when a GitHub issue has no Jira ID. `always` auto-creates silently (and patches the GitHub issue body with the link). `never` skips and uses the `feature/GH{issueNo}-kebab` branch. Autopilot treats `ask` as `always` \u2014 there is no interactive fallback when running unattended."
+          "description": "Policy for the GitHub-issue Jira auto-create (WS-6 triad, Phase 0 Step 1). `ask` prompts the user when a GitHub issue has no Jira ID. `always` auto-creates silently (and patches the GitHub issue body with the link). `never` skips and uses the `feature/GH{issueNo}-kebab` branch. Autopilot treats `ask` as `always` - there is no interactive fallback when running unattended."
         },
         "wikiToJiraComment": {
           "type": "boolean",
@@ -724,31 +618,21 @@
         },
         "promptLanguage": {
           "type": "string",
-          "enum": [
-            "en",
-            "tr"
-          ],
+          "enum": ["en", "tr"],
           "default": "en",
           "description": "Language used for user-facing INTERACTIVE pipeline copy: pickers (account, project, dev-context, base branch, branch name, maturity ack, channels), Phase 5 test prompt, Phase 6 local-checkout prompt, Phase 6 commit/PR confirmations, TaskCreate card subjects, and phase-banner.sh headers (`PHASE_LANG` resolves from this field via the `auto` sentinel). Canonical label table lives in `pipeline/skills/shared/multi-agent/SKILL.md`. External payloads stay English regardless of this setting: reviewer/triage system prompts, commit messages, PR titles/bodies, Jira comments, wiki content, agent-log.md payloads. Set via `/multi-agent:language prompt <en|tr>` or answered on first run by `/multi-agent:setup`."
         },
         "outputLanguage": {
           "type": "string",
-          "enum": [
-            "en",
-            "tr"
-          ],
+          "enum": ["en", "tr"],
           "default": "en",
           "description": "Language used for the assistant's NON-INTERACTIVE explanations, status updates, error messages, and pipeline-generated reports rendered to the user (e.g. `/multi-agent:help` body, `/multi-agent:status` table headers, summary blocks at the end of a run). Independent of `promptLanguage` so a user can have Turkish pickers but English summaries (or vice versa). External payloads (commits, PR/Jira/wiki) and skill-picker / confirmation / error UI exposed by the CLI host stay English regardless of this setting. Set via `/multi-agent:language output <en|tr>` or answered on first run by `/multi-agent:setup`."
         },
         "progressVerbosity": {
           "type": "string",
-          "enum": [
-            "quiet",
-            "normal",
-            "verbose"
-          ],
+          "enum": ["quiet", "normal", "verbose"],
           "default": "normal",
-          "description": "Verbosity of the live progress-line contract (`refs/progress-contract.md`). `quiet` shows only phase banners and user prompts (CI-friendly). `normal` shows banners + the canonical action set per phase \u2014 recommended for interactive use. `verbose` shows sub-agent internal actions, file-level reads, schema validations, retry internals \u2014 forced automatically when `mode: autopilot` is set in agent state so the run remains audit-grade when the user isn't watching live."
+          "description": "Verbosity of the live progress-line contract (`refs/progress-contract.md`). `quiet` shows only phase banners and user prompts (CI-friendly). `normal` shows banners + the canonical action set per phase - recommended for interactive use. `verbose` shows sub-agent internal actions, file-level reads, schema validations, retry internals - forced automatically when `mode: autopilot` is set in agent state so the run remains audit-grade when the user isn't watching live."
         },
         "triageCrossCheck": {
           "type": "object",
@@ -769,11 +653,9 @@
             },
             "model": {
               "type": "string",
-              "enum": [
-                "sonnet"
-              ],
+              "enum": ["sonnet"],
               "default": "sonnet",
-              "description": "Cross-check model. Locked to Sonnet \u2014 Opus would just agree with Opus."
+              "description": "Cross-check model. Locked to Sonnet - Opus would just agree with Opus."
             },
             "blockOnDisagreement": {
               "type": "boolean",
@@ -785,7 +667,7 @@
         "reviewDisagreementRound": {
           "type": "boolean",
           "default": false,
-          "description": "v6.1.0+ \u2014 Phase 4 Step 2.5 rebuttal round. When reviewers disagree (mixed blocker/approved verdict), each reviewer is re-prompted with the others' opposing arguments for one additional round before triage. Lifts signal quality on ambiguous findings at ~1\u00d7 Step 2 token cost. Off by default \u2014 flip for security-critical or release-branch reviews."
+          "description": "v6.1.0+ - Phase 4 Step 2.5 rebuttal round. When reviewers disagree (mixed blocker/approved verdict), each reviewer is re-prompted with the others' opposing arguments for one additional round before triage. Lifts signal quality on ambiguous findings at ~1\u00d7 Step 2 token cost. Off by default - flip for security-critical or release-branch reviews."
         },
         "updateCheck": {
           "type": "object",
@@ -830,10 +712,7 @@
             },
             "model": {
               "type": "string",
-              "enum": [
-                "sonnet",
-                "opus"
-              ],
+              "enum": ["sonnet", "opus"],
               "default": "sonnet",
               "description": "Verifier agent model. Writing a minimal repro test is mechanical work; Sonnet is the cost-sane default."
             },
@@ -1048,7 +927,7 @@
         "devCritic": {
           "type": "object",
           "additionalProperties": false,
-          "description": "v8.6+ \u2014 Phase 3.5 evaluator-optimizer. After the Dev generator's last edit and BEFORE Phase 4 reviewers, dispatch agents/dev-critic.md (Sonnet by default) to run deterministic gates (build/lint/test/secrets) + the platform checklist (rules/*.md). Max 2 critic iterations, then escalate. Catches gate failures and checklist violations that would otherwise burn 2\u20133 Phase 4 reviewer calls + Opus triage. Off by default \u2014 introduces 1\u00d7 Sonnet call per Dev iteration; flip on for feature work, security-touching paths, or multi-file refactors. Source: Anthropic 'Building Effective Agents' (Dec 2024) evaluator-optimizer pattern.",
+          "description": "v8.6+ - Phase 3.5 evaluator-optimizer. After the Dev generator's last edit and BEFORE Phase 4 reviewers, dispatch agents/dev-critic.md (Sonnet by default) to run deterministic gates (build/lint/test/secrets) + the platform checklist (rules/*.md). Max 2 critic iterations, then escalate. Catches gate failures and checklist violations that would otherwise burn 2-3 Phase 4 reviewer calls + Opus triage. Off by default - introduces 1\u00d7 Sonnet call per Dev iteration; flip on for feature work, security-touching paths, or multi-file refactors. Source: Anthropic 'Building Effective Agents' (Dec 2024) evaluator-optimizer pattern.",
           "properties": {
             "enabled": {
               "type": "boolean",
@@ -1060,13 +939,13 @@
               "minimum": 1,
               "maximum": 3,
               "default": 2,
-              "description": "Critic loop cap. Round 1 = full pass. Round 2 = re-check round 1 failures only. Round 3 NOT recommended \u2014 escalate to user (interactive) or proceed with logged failure (autopilot)."
+              "description": "Critic loop cap. Round 1 = full pass. Round 2 = re-check round 1 failures only. Round 3 NOT recommended - escalate to user (interactive) or proceed with logged failure (autopilot)."
             },
             "model": {
               "type": "string",
               "enum": ["sonnet", "opus", "haiku"],
               "default": "sonnet",
-              "description": "Critic model. Sonnet is the cost/quality default. Opus override only when diff > 500 LOC or touches security-critical paths. Haiku is too brittle for checklist reasoning \u2014 use only for trivial verification tasks."
+              "description": "Critic model. Sonnet is the cost/quality default. Opus override only when diff > 500 LOC or touches security-critical paths. Haiku is too brittle for checklist reasoning - use only for trivial verification tasks."
             },
             "minDiffLoc": {
               "type": "integer",
@@ -1079,7 +958,13 @@
         "diffRiskAdvisory": {
           "type": "boolean",
           "default": true,
-          "description": "v8.3+ \u2014 Phase 4 Step 1.75 advisory diff risk scoring. When enabled, `pipeline/scripts/diff-risk-score.mjs` runs before reviewer dispatch and the top-N risk-ranked files are injected into each reviewer's prompt as a priority hint (security paths, public API surfaces, untested source changes, schema migrations). Heuristic, deterministic, no LLM cost. Default ON \u2014 the run is sub-second and never gates the pipeline. Flip to false to skip the script and the prompt injection entirely."
+          "description": "v8.3+ - Phase 4 Step 1.75 advisory diff risk scoring. When enabled, `pipeline/scripts/diff-risk-score.mjs` runs before reviewer dispatch and the top-N risk-ranked files are injected into each reviewer's prompt as a priority hint (security paths, public API surfaces, untested source changes, schema migrations). Heuristic, deterministic, no LLM cost. Default ON - the run is sub-second and never gates the pipeline. Flip to false to skip the script and the prompt injection entirely."
+        },
+        "reviewScopeGate": {
+          "type": "boolean",
+          "default": true,
+          "description": "v12.8+ - Phase 4 Step 1.77 reviewer-scope gate. Decides the reviewer count from the deterministic diff-risk report via `pipeline/scripts/review-scope.mjs`: a diff under 20 lines of churn with max_score < 3.0 and no security_path / migration / public_api / no_test_change / test_lines_removed signal runs ONE reviewer instead of the full CLI-aware set (2 on Claude Code, 3 on Copilot CLI). No LLM. Fails safe in one direction only - any error, empty report or validator rejection resolves to the full set, because skipping a reviewer trades coverage for cost. Set false to force the full set on every diff.",
+          "$comment": "Shipped inert for a release: the script existed, was unit- and smoke-tested, and no phase doc referenced it, so every diff paid for the full reviewer set. Wired in Step 1.77; smoke-gate-wiring.sh keeps it reachable."
         },
         "priorArtEnrichment": {
           "type": "object",
@@ -1148,23 +1033,23 @@
         "testGap": {
           "type": "object",
           "additionalProperties": false,
-          "description": "v8.3+ \u2014 Phase 5 Step 0 advisory test-gap detector. Walks the diff for newly added public symbols and reports those without a paired test (or test method covering them). Heuristic, deterministic, no LLM cost.",
+          "description": "v8.3+ - Phase 5 Step 0 advisory test-gap detector. Walks the diff for newly added public symbols and reports those without a paired test (or test method covering them). Heuristic, deterministic, no LLM cost.",
           "properties": {
             "enabled": {
               "type": "boolean",
               "default": true,
-              "description": "Master switch. Default ON \u2014 the scan is sub-second."
+              "description": "Master switch. Default ON - the scan is sub-second."
             },
             "scanTree": {
               "type": "boolean",
               "default": false,
-              "description": "When true, also scan the repo tree (not just the diff) for existing tests that already mention the symbol \u2014 catches gaps that are technically covered by older tests outside the current diff. Slower but more accurate. Off by default \u2014 diff-only scan is sufficient for the common case."
+              "description": "When true, also scan the repo tree (not just the diff) for existing tests that already mention the symbol - catches gaps that are technically covered by older tests outside the current diff. Slower but more accurate. Off by default - diff-only scan is sufficient for the common case."
             },
             "blockingThreshold": {
               "type": ["integer", "null"],
               "minimum": 1,
               "default": null,
-              "description": "If set, gaps where `important + blocking` count exceeds the threshold are treated as a Phase 4 rework finding (loops back to Phase 3). null = advisory only \u2014 Phase 5 prints the report but never gates."
+              "description": "If set, gaps where `important + blocking` count exceeds the threshold are treated as a Phase 4 rework finding (loops back to Phase 3). null = advisory only - Phase 5 prints the report but never gates."
             },
             "promoteSeverity": {
               "type": "boolean",
@@ -1182,17 +1067,17 @@
         "perRepoMemory": {
           "type": "boolean",
           "default": false,
-          "description": "v6.2.0+ \u2014 Per-repo file-system memory layer. When enabled, Phase 0 reads `$PROJECT_ROOT/.multi-agent/memory/MEMORY.md` (if present) and injects it into the pipeline context, and Phase 7 dispatches a scoped synthesis subagent that may write new memory files to the same directory. Categories: user / feedback / project / reference (same taxonomy as the conversation-level auto-memory). Memory is local to each repo \u2014 never synced to remote, never committed to git (pipeline installer adds `.multi-agent/memory/` to `.gitignore`). Off by default \u2014 flip when working on a repo long enough that accumulated project context starts paying for itself."
+          "description": "v6.2.0+ - Per-repo file-system memory layer. When enabled, Phase 0 reads `$PROJECT_ROOT/.multi-agent/memory/MEMORY.md` (if present) and injects it into the pipeline context, and Phase 7 dispatches a scoped synthesis subagent that may write new memory files to the same directory. Categories: user / feedback / project / reference (same taxonomy as the conversation-level auto-memory). Memory is local to each repo - never synced to remote, never committed to git (pipeline installer adds `.multi-agent/memory/` to `.gitignore`). Off by default - flip when working on a repo long enough that accumulated project context starts paying for itself."
         },
         "autopilotSafetyGate": {
           "type": "boolean",
           "default": true,
-          "description": "v7.0.0+ \u2014 Phase 2 autopilot safety classifier. Before autopilot mode consumes the user's approval skip, run `classify-plan-safety.mjs` over the approved plan. If the heuristic score \u2265 50 (e.g. >15 files touched, or security-path touch, or delete-without-test, or schema migration) inject a ONE-TIME pause asking for explicit manual approval \u2014 even in autopilot. Default ON because the risk of skipping this gate is asymmetric: a pause on a high-blast-radius plan costs seconds; a silent auto-merge of a bad one costs hours of rollback. Flip to `false` only for tightly-scoped autopilot workflows (e.g. batch figma component iteration) where the task class is known-safe."
+          "description": "v7.0.0+ - Phase 2 autopilot safety classifier. Before autopilot mode consumes the user's approval skip, run `classify-plan-safety.mjs` over the approved plan. If the heuristic score \u2265 50 (e.g. >15 files touched, or security-path touch, or delete-without-test, or schema migration) inject a ONE-TIME pause asking for explicit manual approval - even in autopilot. Default ON because the risk of skipping this gate is asymmetric: a pause on a high-blast-radius plan costs seconds; a silent auto-merge of a bad one costs hours of rollback. Flip to `false` only for tightly-scoped autopilot workflows (e.g. batch figma component iteration) where the task class is known-safe."
         },
         "dynamicSkillLoading": {
           "type": "boolean",
           "default": false,
-          "description": "v7.0.0+ \u2014 Dynamic trigger-based skill loading. When enabled, the orchestrator reads `~/.claude/skills/.skills-index.json` after Phase 1 analysis and injects only the top-N matched skills into subagent prompts (via `match-skills.mjs`), instead of relying on eager-loaded SKILL.md bodies. Large token win on small tasks; no visible behavior change on big ones where many skills match. Requires either a full install (index is always shipped) or the `install.js --index-only` mode for users who want skill bodies fetched on demand. Off by default in v7.0 \u2014 flip to `true` to opt in; a future v7.x may flip the default once enough telemetry confirms no regression."
+          "description": "v7.0.0+ - Dynamic trigger-based skill loading. When enabled, the orchestrator reads `~/.claude/skills/.skills-index.json` after Phase 1 analysis and injects only the top-N matched skills into subagent prompts (via `match-skills.mjs`), instead of relying on eager-loaded SKILL.md bodies. Large token win on small tasks; no visible behavior change on big ones where many skills match. Requires either a full install (index is always shipped) or the `install.js --index-only` mode for users who want skill bodies fetched on demand. Off by default in v7.0 - flip to `true` to opt in; a future v7.x may flip the default once enough telemetry confirms no regression."
         },
         "derivedSkillSources": {
           "type": "array",
@@ -1200,12 +1085,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "label",
-              "localPath",
-              "upstreamPlugin",
-              "derivedFromVersion"
-            ],
+            "required": ["label", "localPath", "upstreamPlugin", "derivedFromVersion"],
             "properties": {
               "label": {
                 "type": "string",
@@ -1230,11 +1110,20 @@
               },
               "derivedFromVersion": {
                 "type": "string",
-                "description": "Upstream version we last synced from. Bumped after a drift port is applied."
+                "description": "Upstream version we last synced from, read from the manifest named by `upstreamVersionSource`. Bumped after a drift port is applied."
+              },
+              "upstreamVersionSource": {
+                "enum": ["marketplace.json", "plugin.json"],
+                "default": "marketplace.json",
+                "description": "Which upstream manifest carries the authoritative version. Defaults to marketplace.json because that is what a marketplace consumer resolves; some upstreams keep plugin.json deliberately unused, so reading it silently records a version nobody ships. Recording from the wrong manifest is how an entry here sat at 0.7.0 while the marketplace said 0.6.0."
+              },
+              "upstreamLocalClone": {
+                "type": "string",
+                "description": "Working copy of the upstream repository, checked before the plugin cache. The cache under ~/.claude/plugins/cache is only as fresh as the last `claude marketplace update`, so it is a mirror and never the authority. A private upstream may also be unreachable over the API from the active account, in which case this clone is the only source."
               },
               "upstreamRepoUrl": {
                 "type": "string",
-                "description": "Used only when the marketplace is not installed locally (WebFetch fallback)."
+                "description": "Used when neither a local clone nor the installed marketplace is available (WebFetch / gh fallback)."
               }
             }
           }
@@ -1268,11 +1157,7 @@
             },
             "registry": {
               "type": "string",
-              "enum": [
-                "github-packages",
-                "npmjs",
-                "none"
-              ],
+              "enum": ["github-packages", "npmjs", "none"],
               "default": "github-packages",
               "description": "Publish target for Step 3d. `none` means commit + push only, never publish. The concrete URL comes from the repo's publishConfig; the token comes from the `npm` logical Keychain key through a throwaway --userconfig."
             },
@@ -1288,9 +1173,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "id"
-            ],
+            "required": ["id"],
             "properties": {
               "id": {
                 "type": "string",
@@ -1314,13 +1197,11 @@
         },
         "accounts": {
           "type": "array",
-          "description": "v7.4.0+. Per-account overrides \u2014 host, label, default platform. Resolved by account-resolver.sh by matching `id` (e.g. my-account). When unset, hosts fall back to global.hosts.{jira,bitbucket}.",
+          "description": "v7.4.0+. Per-account overrides - host, label, default platform. Resolved by account-resolver.sh by matching `id` (e.g. my-account). When unset, hosts fall back to global.hosts.{jira,bitbucket}.",
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "id"
-            ],
+            "required": ["id"],
             "properties": {
               "id": {
                 "type": "string",
@@ -1343,12 +1224,7 @@
               },
               "defaultProvider": {
                 "type": "string",
-                "enum": [
-                  "github",
-                  "bitbucket",
-                  "gitlab",
-                  "generic-git"
-                ]
+                "enum": ["github", "bitbucket", "gitlab", "generic-git"]
               }
             }
           },
@@ -1378,14 +1254,11 @@
                 "type": "string"
               },
               "maxItems": 10,
-              "description": "GitHub fallback reviewers \u2014 @user or org/team slug. Used only when no CODEOWNERS / branch protection surfaces reviewers."
+              "description": "GitHub fallback reviewers - @user or org/team slug. Used only when no CODEOWNERS / branch protection surfaces reviewers."
             },
             "defaultPrMode": {
               "type": "string",
-              "enum": [
-                "draft",
-                "ready"
-              ],
+              "enum": ["draft", "ready"],
               "description": "Last-used draft/ready choice, shown as the default on next prompt."
             },
             "baseBranch": {
@@ -1424,12 +1297,7 @@
             },
             "remoteType": {
               "type": "string",
-              "enum": [
-                "bitbucket",
-                "github",
-                "gitlab",
-                "generic-git"
-              ],
+              "enum": ["bitbucket", "github", "gitlab", "generic-git"],
               "description": "Hint used when repo URL doesn't make platform obvious."
             },
             "taskCount": {