@mmerterden/multi-agent-pipeline 12.6.0 → 12.8.0

package/pipeline/schemas/test-gap.schema.json

@@ -19,14 +19,14 @@
       "required": ["sourcesScanned", "testsScanned", "gapCount", "gapBySeverity"],
       "properties": {
         "sourcesScanned": { "type": "integer", "minimum": 0 },
-        "testsScanned":   { "type": "integer", "minimum": 0 },
-        "gapCount":       { "type": "integer", "minimum": 0 },
+        "testsScanned": { "type": "integer", "minimum": 0 },
+        "gapCount": { "type": "integer", "minimum": 0 },
         "gapBySeverity": {
           "type": "object",
           "additionalProperties": false,
           "properties": {
-            "blocking":   { "type": "integer", "minimum": 0 },
-            "important":  { "type": "integer", "minimum": 0 },
+            "blocking": { "type": "integer", "minimum": 0 },
+            "important": { "type": "integer", "minimum": 0 },
             "suggestion": { "type": "integer", "minimum": 0 }
           },
           "required": ["blocking", "important", "suggestion"]
@@ -41,7 +41,7 @@
         "required": ["sourcePath", "symbol", "kind", "severity", "expectedTestPaths", "hint"],
         "properties": {
           "sourcePath": { "type": "string", "minLength": 1 },
-          "symbol":     { "type": "string", "minLength": 1 },
+          "symbol": { "type": "string", "minLength": 1 },
           "kind": {
             "type": "string",
             "description": "Pattern id from the rules file (e.g. public_func, composable_fun, named_export)."

package/pipeline/schemas/token-budget.json

@@ -3,14 +3,14 @@
   "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/token-budget.json",
   "description": "Per-phase token budget for lazy-loaded pipeline docs. Enforced by smoke-token-budget.sh.",
   "phases": {
-    "phase-0-init":      { "max_tokens": 12400, "warn_tokens": 10900 },
-    "phase-1-analysis":  { "max_tokens": 3750, "warn_tokens": 3300 },
-    "phase-2-planning":  { "max_tokens": 6500, "warn_tokens": 5750 },
-    "phase-3-dev":       { "max_tokens": 7900, "warn_tokens": 6950 },
-    "phase-4-review":    { "max_tokens": 13250, "warn_tokens": 11650 },
-    "phase-5-test":      { "max_tokens": 2550, "warn_tokens": 2250 },
-    "phase-6-commit":    { "max_tokens": 6150, "warn_tokens": 5400 },
-    "phase-7-report":    { "max_tokens": 5600, "warn_tokens": 4950 }
+    "phase-0-init": { "max_tokens": 12400, "warn_tokens": 10900 },
+    "phase-1-analysis": { "max_tokens": 3750, "warn_tokens": 3300 },
+    "phase-2-planning": { "max_tokens": 6500, "warn_tokens": 5750 },
+    "phase-3-dev": { "max_tokens": 7900, "warn_tokens": 6950 },
+    "phase-4-review": { "max_tokens": 13250, "warn_tokens": 11650 },
+    "phase-5-test": { "max_tokens": 2550, "warn_tokens": 2250 },
+    "phase-6-commit": { "max_tokens": 6150, "warn_tokens": 5400 },
+    "phase-7-report": { "max_tokens": 5600, "warn_tokens": 4950 }
   },
   "total_max_tokens": 51000,
   "note": "Token estimate = ceil(chars / 4). Per-phase budget rule: warn = current+10% (rounded to nearest 50), max = current+25%. Gives ~6 edit cycles of headroom before warn trips  -  intentionally quiet under normal maintenance, loud when a phase grows unusually. Only the active phase is loaded (lazy). Recalibrated at v10.0.0 after the validator/consistency/simplifier/lesson gate contracts landed in phases 1-4. Recalibrated again at v10.9.0 after the verify-by-test (Phase 4 Step 3.7), update-check (Phase 0 Step 0.6), immutable-test (Phase 3 GREEN) and redTests re-entry contracts landed  -  Step 3.7 prose was compressed to a pointer into refs/features/verify-by-test.md before the recalibration. Total bumped 50000 -> 51000 at v12.5.0 after the worktree residue/traversal-prune contract (Phase 0 + Phase 5 heal) and the Reflexion causal-diagnosis contract (Phase 4 lesson memory) landed; the prose was compressed first (161 tokens reclaimed) and every per-phase max still passes  -  only the aggregate needed room."

package/pipeline/schemas/triage-corpus.schema.json

@@ -24,7 +24,7 @@
     "file": { "type": "string" },
     "line": { "type": ["integer", "null"] },
     "issue": { "type": "string", "minLength": 1 },
-    "fix":  { "type": ["string", "null"] },
+    "fix": { "type": ["string", "null"] },
     "reason": { "type": ["string", "null"] },
     "reviewer": { "type": ["string", "null"] },
     "file_sha": {

package/pipeline/scripts/_smoke-root.sh

@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+#
+# _smoke-root.sh  -  resolve the pipeline tree for a smoke that must run in BOTH
+# the repo checkout and an end-user install.
+#
+# Why this exists: the repo and an install have different shapes.
+#
+#   repo checkout          install (~/.claude or ~/.copilot)
+#   ------------------     --------------------------------
+#   pipeline/scripts/      scripts/
+#   pipeline/schemas/      schemas/
+#   pipeline/multi-agent-refs/  multi-agent-refs/
+#   pipeline/commands/     commands/
+#   package.json           (absent)
+#
+# A smoke that hardcodes `REPO_ROOT="$(dirname "$0")/../.."` and then reads
+# `$REPO_ROOT/pipeline/...` resolves to `$HOME/pipeline/...` once installed, so
+# every path check fails. Whoever ran it sees a red report and concludes the
+# install is broken. Source this file instead and read the MA_* variables.
+#
+# Usage (from any script in pipeline/scripts/):
+#   . "$(dirname "${BASH_SOURCE[0]}")/_smoke-root.sh"
+#   grep -q needle "$MA_REFS/phases/phase-4-review.md"
+#
+# Exports:
+#   MA_LAYOUT     "repo" | "install"
+#   MA_ROOT       repo root, or the install root (~/.claude)
+#   MA_SCRIPTS    directory holding this script
+#   MA_SCHEMAS    JSON schemas
+#   MA_REFS       multi-agent-refs
+#   MA_COMMANDS   slash-command tree
+#   MA_SKILLS     skills tree
+#
+# Every exported directory is verified to exist; a missing one is left empty so
+# the caller can skip that check rather than report a false failure.
+
+MA_SCRIPTS="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# The repo is the only layout with pipeline/ beside package.json. Checking both
+# rules out an install that happens to sit next to an unrelated pipeline/ dir.
+_ma_candidate="$(cd "$MA_SCRIPTS/../.." && pwd)"
+if [ -f "$_ma_candidate/package.json" ] && [ -d "$_ma_candidate/pipeline" ]; then
+  MA_LAYOUT="repo"
+  MA_ROOT="$_ma_candidate"
+  _ma_base="$_ma_candidate/pipeline"
+else
+  MA_LAYOUT="install"
+  MA_ROOT="$(cd "$MA_SCRIPTS/.." && pwd)"
+  _ma_base="$MA_ROOT"
+fi
+unset _ma_candidate
+
+_ma_dir() { [ -d "$1" ] && echo "$1" || echo ""; }
+
+MA_SCHEMAS="$(_ma_dir "$_ma_base/schemas")"
+MA_REFS="$(_ma_dir "$_ma_base/multi-agent-refs")"
+MA_COMMANDS="$(_ma_dir "$_ma_base/commands")"
+MA_SKILLS="$(_ma_dir "$_ma_base/skills")"
+unset _ma_base
+
+export MA_LAYOUT MA_ROOT MA_SCRIPTS MA_SCHEMAS MA_REFS MA_COMMANDS MA_SKILLS

package/pipeline/scripts/aggregate-metrics.mjs

@@ -230,7 +230,9 @@ if (opts.markdown) {
   const lines = [];
   lines.push(`# Pipeline Metrics Summary`);
   lines.push(``);
-  lines.push(`_Source: \`${summary.source}\` · Events: ${summary.total_events} (${summary.parse_errors} parse errors) · Unique tasks: ${summary.unique_tasks}_`);
+  lines.push(
+    `_Source: \`${summary.source}\` · Events: ${summary.total_events} (${summary.parse_errors} parse errors) · Unique tasks: ${summary.unique_tasks}_`,
+  );
   lines.push(``);
   lines.push(`## Reviews`);
   lines.push(``);
@@ -245,9 +247,13 @@ if (opts.markdown) {
   lines.push(`| Category | Count | Rate |`);
   lines.push(`|----------|-------|------|`);
   lines.push(`| Raw findings | ${summary.triage_totals.raw} |  -  |`);
-  lines.push(`| Accepted | ${summary.triage_totals.accepted} | ${summary.triage_totals.accept_rate ?? " - "} |`);
+  lines.push(
+    `| Accepted | ${summary.triage_totals.accepted} | ${summary.triage_totals.accept_rate ?? " - "} |`,
+  );
   lines.push(`| Deferred | ${summary.triage_totals.deferred} |  -  |`);
-  lines.push(`| Rejected | ${summary.triage_totals.rejected} | ${summary.triage_totals.reject_rate ?? " - "} |`);
+  lines.push(
+    `| Rejected | ${summary.triage_totals.rejected} | ${summary.triage_totals.reject_rate ?? " - "} |`,
+  );
 
   if (Object.keys(summary.edge_cases).length) {
     lines.push(``);
@@ -266,14 +272,20 @@ if (opts.markdown) {
     lines.push(``);
     lines.push(`| Model | Calls | Duration (ms) | Tokens In | Tokens Out | Cached | Cache % |`);
     lines.push(`|-------|-------|---------------|-----------|------------|--------|---------|`);
-    for (const [m, t] of Object.entries(summary.cost_per_model).sort((a, b) => b[1].calls - a[1].calls)) {
+    for (const [m, t] of Object.entries(summary.cost_per_model).sort(
+      (a, b) => b[1].calls - a[1].calls,
+    )) {
       const pct = t.cache_ratio === null ? " - " : `${Math.round(t.cache_ratio * 100)}%`;
-      lines.push(`| \`${m}\` | ${t.calls} | ${t.duration_ms} | ${t.tokens_in} | ${t.tokens_out} | ${t.tokens_cached} | ${pct} |`);
+      lines.push(
+        `| \`${m}\` | ${t.calls} | ${t.duration_ms} | ${t.tokens_in} | ${t.tokens_out} | ${t.tokens_cached} | ${pct} |`,
+      );
     }
     const oc = summary.cache_reuse;
     const ocPct = oc.cache_ratio === null ? " - " : `${Math.round(oc.cache_ratio * 100)}%`;
     lines.push(``);
-    lines.push(`_Overall prompt-cache reuse: ${oc.tokens_cached.toLocaleString()} cached / ${(oc.tokens_in + oc.tokens_cached).toLocaleString()} total input tokens = **${ocPct}**._`);
+    lines.push(
+      `_Overall prompt-cache reuse: ${oc.tokens_cached.toLocaleString()} cached / ${(oc.tokens_in + oc.tokens_cached).toLocaleString()} total input tokens = **${ocPct}**._`,
+    );
   }
   console.log(lines.join("\n"));
   process.exit(0);

package/pipeline/scripts/audit-log.sh

@@ -80,3 +80,28 @@ LINE="{\"ts\":\"${TS}\",\"event\":\"$(json_escape "$EVENT")\",\"service\":\"$(js
 LINE="${LINE}}"
 
 echo "$LINE" >> "$AUDIT_FILE" 2>/dev/null || true
+
+# Opportunistic rotation. audit-log-rotate.sh documents a launchd/cron install,
+# but nothing ever told a user to set that up, so an unrotated trail would grow
+# without bound now that credential-store.sh writes an event on every PAT lookup.
+# Self-triggering removes the operator step: check a cheap size threshold and hand
+# off to the real rotator, which is atomic against concurrent appenders (it moves
+# the live inode first). Silent and non-blocking - telemetry never fails a run.
+ROTATE_AT_BYTES="${AUDIT_ROTATE_AT_BYTES:-1048576}"
+_audit_size() {
+  case "$(uname -s)" in
+    Darwin|*BSD*) stat -f %z "$1" 2>/dev/null || echo 0 ;;
+    *)            stat -c %s "$1" 2>/dev/null || echo 0 ;;
+  esac
+}
+if [ "${AUDIT_SELF_ROTATE:-1}" = "1" ] && [ -f "$AUDIT_FILE" ]; then
+  SIZE="$(_audit_size "$AUDIT_FILE")"
+  if [ "${SIZE:-0}" -ge "$ROTATE_AT_BYTES" ]; then
+    ROTATOR="$(dirname "${BASH_SOURCE[0]:-$0}")/audit-log-rotate.sh"
+    # The rotator derives AUDIT_FILE from AUDIT_DIR, so pass the DIRECTORY.
+    # Handing it AUDIT_FILE would leave it rotating the default path while a
+    # caller-overridden trail kept growing.
+    [ -f "$ROTATOR" ] &&
+      AUDIT_DIR="$(dirname "$AUDIT_FILE")" bash "$ROTATOR" >/dev/null 2>&1 || true
+  fi
+fi

package/pipeline/scripts/build-skills-index.mjs

@@ -40,7 +40,11 @@ function* walkSkills(dir) {
   for (const entry of readdirSync(dir)) {
     const full = join(dir, entry);
     let st;
-    try { st = statSync(full); } catch { continue; }
+    try {
+      st = statSync(full);
+    } catch {
+      continue;
+    }
     if (st.isDirectory()) yield* walkSkills(full);
     else if (entry === "SKILL.md") yield full;
   }
@@ -56,7 +60,7 @@ function parseFrontmatter(raw) {
     const m = line.match(/^([\w-]+):\s*(.*)$/);
     if (!m) continue;
     let value = m[2].trim();
-    if (value.startsWith("\"") && value.endsWith("\"")) value = value.slice(1, -1);
+    if (value.startsWith('"') && value.endsWith('"')) value = value.slice(1, -1);
     out[m[1]] = value;
   }
   return out;

package/pipeline/scripts/build-stack-plugins.mjs

@@ -10,7 +10,7 @@
  * publish artifact.
  *
  * The authored lifecycle skills (index / reference / workflow / tools) live in the
- * plugin repo and are NEVER touched here — only the `knowledge/` layer + plugin.json
+ * plugin repo and are NEVER touched here - only the `knowledge/` layer + plugin.json
  * knowledge entries are regenerated.
  *
  * Routing uses the per-stack skill patterns (formerly carried by stack-swap.sh). Genuinely cross-stack
@@ -23,37 +23,83 @@
  * Exit code 0 always (report-only); prints a JSON-ish summary + per-plugin diff.
  */
 import {
-  readdirSync, existsSync, rmSync, cpSync, readFileSync, writeFileSync, mkdirSync, statSync,
-} from 'node:fs';
-import { join } from 'node:path';
+  readdirSync,
+  existsSync,
+  rmSync,
+  cpSync,
+  readFileSync,
+  writeFileSync,
+  mkdirSync,
+  statSync,
+} from "node:fs";
+import { join } from "node:path";
 
 const args = process.argv.slice(2);
-const getArg = (k, d) => { const i = args.indexOf(k); return i >= 0 ? args[i + 1] : d; };
+const getArg = (k, d) => {
+  const i = args.indexOf(k);
+  return i >= 0 ? args[i + 1] : d;
+};
 const HOME = process.env.HOME;
-const PLUGINS_REPO = getArg('--plugins-repo', join(HOME, 'multi-agent-plugins'));
-const PIPE_ROOT = getArg('--pipeline', join(HOME, 'multi-agent-pipeline'));
-const EXTERNAL = join(PIPE_ROOT, 'pipeline/skills/shared/external');
-const DRY = args.includes('--dry-run');
+const PLUGINS_REPO = getArg("--plugins-repo", join(HOME, "multi-agent-plugins"));
+const PIPE_ROOT = getArg("--pipeline", join(HOME, "multi-agent-pipeline"));
+const EXTERNAL = join(PIPE_ROOT, "pipeline/skills/shared/external");
+const DRY = args.includes("--dry-run");
 
-const COMMON_PLUGIN = 'ai-common-engineering-toolkit';
-const COMMON_SKILLS = ['accessibility-compliance-accessibility-audit', 'firebase', 'humanizer', 'council', 'search-first', 'agent-introspection-debugging', 'skill-creator', 'backlog'];
+const COMMON_PLUGIN = "ai-common-engineering-toolkit";
+const COMMON_SKILLS = [
+  "accessibility-compliance-accessibility-audit",
+  "firebase",
+  "humanizer",
+  "council",
+  "search-first",
+  "agent-introspection-debugging",
+  "skill-creator",
+  "backlog",
+];
 
 // Apple/Xcode-only skills that match no stack pattern → iOS plugin only.
 const APPLE_ONLY = [
-  'avkit', 'cryptokit', 'metrickit-diagnostics', 'pdfkit', 'spm-build-analysis',
-  'swiftlint', 'xcode-build-benchmark', 'xcode-build-fixer', 'xcode-build-orchestrator',
-  'xcode-compilation-analyzer', 'xcode-project-analyzer',
+  "avkit",
+  "cryptokit",
+  "metrickit-diagnostics",
+  "pdfkit",
+  "spm-build-analysis",
+  "swiftlint",
+  "xcode-build-benchmark",
+  "xcode-build-fixer",
+  "xcode-build-orchestrator",
+  "xcode-compilation-analyzer",
+  "xcode-project-analyzer",
 ];
 
 // stack → matching pattern (per-stack routing patterns (formerly in stack-swap.sh))
+//
+// A skill lands in every plugin whose pattern it matches, so a bare substring
+// alternative that is also a suffix of another stack's skill name silently ships
+// that skill twice. `architecture` did exactly that: it pulled
+// `android-architecture` and `swift-architecture` into ai-backend-toolkit
+// alongside their correct plugins, so a backend project loading the toolkit got
+// Compose and SwiftUI architecture skills. It is anchored to the exact name now.
+// Keep any new single-word alternative anchored unless it genuinely reads as a
+// substring across stacks.
 const STACK_PATTERNS = {
-  'ai-ios-engineering-toolkit': /(swiftui|swift-|ios-|hig-|apple-|storekit|widgetkit|healthkit|homekit|mapkit|musickit|passkit|pencilkit|realitykit|weatherkit|alarmkit|callkit|cloudkit|coreml|core-|eventkit|energykit|permissionkit|tipkit|shareplay|live-activities|background-processing|app-store|app-clips|app-intents|authentication|contacts-framework|device-integrity|macos-|natural-language|photos-camera|push-notifications|speech-recognition|swiftdata|vision-framework|debugging-instruments|help-skills)/i,
-  'ai-android-engineering-toolkit': /(android|compose-|kotlin-|room-database|retrofit-|gradle-|play-store)/i,
-  'ai-backend-toolkit': /(fastapi|nodejs|docker|api-pattern|api-security|github-actions|observability|architecture|monorepo|clean-code|debugging-strategies|agentflow|closed-loop|context-compression|python-patterns|database-patterns|rest-api-design|testing-backend|ci-cd-pipelines)/i,
-  'ai-frontend-engineering-toolkit': /(react-|nextjs-|typescript-|tailwind-|vue-|web-accessibility|web-performance|css-modern|web-testing|html-semantic)/i,
+  "ai-ios-engineering-toolkit":
+    /(swiftui|swift-|ios-|hig-|apple-|storekit|widgetkit|healthkit|homekit|mapkit|musickit|passkit|pencilkit|realitykit|weatherkit|alarmkit|callkit|cloudkit|coreml|core-|eventkit|energykit|permissionkit|tipkit|shareplay|live-activities|background-processing|app-store|app-clips|app-intents|authentication|contacts-framework|device-integrity|macos-|natural-language|photos-camera|push-notifications|speech-recognition|swiftdata|vision-framework|debugging-instruments|help-skills)/i,
+  "ai-android-engineering-toolkit":
+    /(android|compose-|kotlin-|room-database|retrofit-|gradle-|play-store)/i,
+  "ai-backend-toolkit":
+    /(fastapi|nodejs|docker|api-pattern|api-security|github-actions|observability|^architecture$|monorepo|clean-code|debugging-strategies|agentflow|closed-loop|context-compression|python-patterns|database-patterns|rest-api-design|testing-backend|ci-cd-pipelines)/i,
+  "ai-frontend-engineering-toolkit":
+    /(react-|nextjs-|typescript-|tailwind-|vue-|web-accessibility|web-performance|css-modern|web-testing|html-semantic)/i,
 };
 
-const isDir = (p) => { try { return statSync(p).isDirectory(); } catch { return false; } };
+const isDir = (p) => {
+  try {
+    return statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
+};
 const listDirs = (p) => (existsSync(p) ? readdirSync(p).filter((n) => isDir(join(p, n))) : []);
 
 // --- 1. enumerate authoring source ---------------------------------------
@@ -69,22 +115,67 @@ for (const p of Object.keys(STACK_PATTERNS)) desired[p] = new Set();
 
 const unrouted = [];
 for (const skill of allSkills) {
-  if (COMMON_SKILLS.includes(skill)) { desired[COMMON_PLUGIN].add(skill); continue; }
-  if (APPLE_ONLY.includes(skill)) { desired['ai-ios-engineering-toolkit'].add(skill); continue; }
+  if (COMMON_SKILLS.includes(skill)) {
+    desired[COMMON_PLUGIN].add(skill);
+    continue;
+  }
+  if (APPLE_ONLY.includes(skill)) {
+    desired["ai-ios-engineering-toolkit"].add(skill);
+    continue;
+  }
   let matched = false;
   for (const [plugin, re] of Object.entries(STACK_PATTERNS)) {
-    if (re.test(skill)) { desired[plugin].add(skill); matched = true; }
+    if (re.test(skill)) {
+      desired[plugin].add(skill);
+      matched = true;
+    }
   }
   if (!matched) unrouted.push(skill);
 }
 
+// --- 2b. routing audit ---------------------------------------------------
+// The loop above adds a skill to EVERY plugin whose pattern matches, so a bare
+// substring alternative that also reads as a suffix of another stack's skill
+// name ships that skill into two plugins. `architecture` did that to
+// android-architecture and swift-architecture, which is how ai-backend-toolkit
+// came to carry Compose and SwiftUI guidance.
+//
+// --check-routing runs this audit alone. It reads nothing but the authoring
+// source in this repo, so CI can gate it without a checkout of the plugins repo.
+const multiRouted = [];
+for (const skill of allSkills) {
+  if (COMMON_SKILLS.includes(skill) || APPLE_ONLY.includes(skill)) continue;
+  const owners = Object.entries(STACK_PATTERNS)
+    .filter(([, re]) => re.test(skill))
+    .map(([p]) => p);
+  if (owners.length > 1) multiRouted.push(`${skill} -> ${owners.join(" + ")}`);
+}
+
+if (args.includes("--check-routing")) {
+  if (multiRouted.length) {
+    console.error(
+      `check-routing: ${multiRouted.length} skill(s) routed to more than one stack plugin`,
+    );
+    for (const m of multiRouted) console.error(`  FAIL ${m}`);
+    console.error("fix: anchor the offending STACK_PATTERNS alternative to the exact skill name");
+    process.exit(1);
+  }
+  console.log(
+    `check-routing: clean (${allSkills.length} skills, ${unrouted.length} unrouted, 0 multi-routed)`,
+  );
+  process.exit(0);
+}
+
 // --- 3. sync each plugin's knowledge/ + regenerate plugin.json -----------
 const report = [];
 for (const [plugin, want] of Object.entries(desired)) {
-  const pdir = join(PLUGINS_REPO, 'plugins', plugin);
-  const kdir = join(pdir, 'skills', 'knowledge');
-  const pjPath = join(pdir, '.claude-plugin', 'plugin.json');
-  if (!existsSync(pjPath)) { report.push({ plugin, error: 'plugin.json missing' }); continue; }
+  const pdir = join(PLUGINS_REPO, "plugins", plugin);
+  const kdir = join(pdir, "skills", "knowledge");
+  const pjPath = join(pdir, ".claude-plugin", "plugin.json");
+  if (!existsSync(pjPath)) {
+    report.push({ plugin, error: "plugin.json missing" });
+    continue;
+  }
 
   const have = new Set(listDirs(kdir));
   const toAdd = [...want].filter((s) => !have.has(s)).sort();
@@ -98,16 +189,16 @@ for (const [plugin, want] of Object.entries(desired)) {
   }
 
   // regenerate plugin.json skills[]: keep non-knowledge entries, rebuild knowledge set
-  const pj = JSON.parse(readFileSync(pjPath, 'utf8'));
-  const nonKnowledge = (pj.skills || []).filter((s) => !s.startsWith('./skills/knowledge/'));
+  const pj = JSON.parse(readFileSync(pjPath, "utf8"));
+  const nonKnowledge = (pj.skills || []).filter((s) => !s.startsWith("./skills/knowledge/"));
   const finalKnowledge = (DRY ? [...want] : listDirs(kdir)).map((s) => `./skills/knowledge/${s}`);
   const newSkills = [...new Set([...nonKnowledge, ...finalKnowledge])].sort();
   const skillsChanged = JSON.stringify(pj.skills) !== JSON.stringify(newSkills);
 
-  const oldV = pj.version || '0.1.0';
+  const oldV = pj.version || "0.1.0";
   let newV = oldV;
   if (changed || skillsChanged) {
-    const [maj, min, patch] = oldV.split('.').map((n) => parseInt(n, 10) || 0);
+    const [maj, min, patch] = oldV.split(".").map((n) => parseInt(n, 10) || 0);
     newV = `${maj}.${min}.${patch + 1}`;
   }
   if (!DRY && (changed || skillsChanged)) {
@@ -115,23 +206,35 @@ for (const [plugin, want] of Object.entries(desired)) {
     pj.version = newV;
     writeFileSync(pjPath, `${JSON.stringify(pj, null, 2)}\n`);
   }
-  report.push({ plugin, added: toAdd, removed: toRemove, skillCount: newSkills.length, version: oldV === newV ? oldV : `${oldV} → ${newV}`, bumped: oldV !== newV });
+  report.push({
+    plugin,
+    added: toAdd,
+    removed: toRemove,
+    skillCount: newSkills.length,
+    version: oldV === newV ? oldV : `${oldV} → ${newV}`,
+    bumped: oldV !== newV,
+  });
 }
 
 // --- 4. report ------------------------------------------------------------
-console.log(`build-stack-plugins ${DRY ? '(dry-run)' : ''}`);
+console.log(`build-stack-plugins ${DRY ? "(dry-run)" : ""}`);
 console.log(`source: ${EXTERNAL} (${allSkills.length} skills)`);
 console.log(`target: ${PLUGINS_REPO}`);
 for (const r of report) {
-  if (r.error) { console.log(`  ✗ ${r.plugin}: ${r.error}`); continue; }
-  const flag = r.bumped ? 'BUMPED' : 'unchanged';
+  if (r.error) {
+    console.log(`  ✗ ${r.plugin}: ${r.error}`);
+    continue;
+  }
+  const flag = r.bumped ? "BUMPED" : "unchanged";
   console.log(`  ${r.plugin}: skills=${r.skillCount} version=${r.version} [${flag}]`);
-  if (r.added.length) console.log(`      + ${r.added.join(', ')}`);
-  if (r.removed.length) console.log(`      - ${r.removed.join(', ')}`);
+  if (r.added.length) console.log(`      + ${r.added.join(", ")}`);
+  if (r.removed.length) console.log(`      - ${r.removed.join(", ")}`);
 }
 if (unrouted.length) {
-  console.log(`  ⚠ unrouted (matched no stack, not common/apple-only) — NOT copied anywhere:`);
-  console.log(`      ${unrouted.join(', ')}`);
+  console.log(`  ⚠ unrouted (matched no stack, not common/apple-only) - NOT copied anywhere:`);
+  console.log(`      ${unrouted.join(", ")}`);
 }
 const anyBump = report.some((r) => r.bumped);
-console.log(anyBump ? 'result: changes detected (versions bumped)' : 'result: all plugins up to date');
+console.log(
+  anyBump ? "result: changes detected (versions bumped)" : "result: all plugins up to date",
+);