@mmerterden/multi-agent-pipeline 13.5.0 → 14.0.0

package/pipeline/schemas/prefs.schema.json

@@ -10,22 +10,12 @@
       "description": "Documentation-only blocks shipped in preferences-template.json (_figmaConfigTemplate, _derivedSkillSourcesTemplate, _devToolkitTemplate). Copy-paste examples, never read by the pipeline."
     }
   },
-  "required": [
-    "schemaVersion",
-    "global",
-    "projects"
-  ],
+  "required": ["schemaVersion", "global", "projects"],
   "properties": {
     "schemaVersion": {
       "type": "string",
-      "enum": [
-        "2.0.0",
-        "2.1.0",
-        "2.2.0",
-        "2.3.0",
-        "2.4.0"
-      ],
-      "description": "v2.0.0: pre-v3.7. v2.1.0: v3.7+ adds identities[].servicePatMap, platformIdentityRouting, recentGroups, recentBranches, serviceStatus, settings, expanded keychainMapping. v2.2.0: v6.0.0 formalizes v5.7 / v5.8 additions (reportChannels, reportContent with technicalAnalysis, wikiScope, autopilotReportTimeoutSeconds) that had been running as 2.1.0 sub-migrations without a proper version bump."
+      "enum": ["2.0.0", "2.1.0", "2.2.0", "2.3.0", "2.4.0", "2.5.0"],
+      "description": "v2.0.0: pre-v3.7. v2.1.0: v3.7+ adds identities[].servicePatMap, platformIdentityRouting, recentGroups, recentBranches, serviceStatus, settings, expanded keychainMapping. v2.2.0: v6.0.0 formalizes v5.7 / v5.8 additions (reportChannels, reportContent with technicalAnalysis, wikiScope, autopilotReportTimeoutSeconds) that had been running as 2.1.0 sub-migrations without a proper version bump. v2.5.0: v14.0.0 adds global.skillConformance (Phase 4 criteria resolution) and declares global.ship.autoFix, which the tail command's spec had referenced as global.finish.autoFix without ever declaring it."
     },
     "global": {
       "type": "object",
@@ -37,10 +27,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "name",
-              "email"
-            ],
+            "required": ["name", "email"],
             "properties": {
               "name": {
                 "type": "string"
@@ -88,6 +75,21 @@
                   },
                   "jenkins": {
                     "type": "string"
+                  },
+                  "figma_pat": {
+                    "type": "string",
+                    "deprecated": true,
+                    "description": "DEPRECATED, pre-v13.6 name for `figma`. Declared only so a pre-migration identity still validates; `migrate-prefs.mjs` copies the value into `figma` and deletes this key."
+                  },
+                  "firebase_sa": {
+                    "type": "string",
+                    "deprecated": true,
+                    "description": "DEPRECATED, early-v2.1.0 name for `firebase`. Declared only so a pre-consolidation identity still validates; `migrate-prefs.mjs` copies the value into `firebase` and deletes this key."
+                  },
+                  "firebase_project": {
+                    "type": "string",
+                    "deprecated": true,
+                    "description": "DEPRECATED and unused. Declared only so a pre-consolidation identity still validates; `migrate-prefs.mjs` removes it."
                   }
                 }
               }
@@ -106,143 +108,94 @@
         "keychainMapping": {
           "type": "object",
           "additionalProperties": false,
-          "description": "Maps logical token names to actual Keychain item names. Pipeline looks up tokens via `security find-generic-password -s <mapped-name>` (or `pipeline/lib/credential-store.sh get` cross-platform). Covered keys: jira, bitbucket, bitbucket_token, bitbucket_user, github, confluence, figma, figma_pat, figma_user, figma_mcp, fortify, graylog, firebase, jenkins, npm, claude_oauth_token, claude_oauth_token_fallback.",
+          "description": "Maps logical token names to actual Keychain item names. Pipeline looks up tokens via `security find-generic-password -s <mapped-name>` (or `pipeline/lib/credential-store.sh get` cross-platform). Covered keys: jira, bitbucket, bitbucket_token, bitbucket_user, github, confluence, figma, figma_mcp, fortify, graylog, firebase, jenkins, npm, claude_oauth_token, claude_oauth_token_fallback. Deprecated and accepted only for backward compatibility: figma_pat (superseded by figma), figma_user (unused).",
           "properties": {
             "jira": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "bitbucket": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Legacy alias for bitbucket_token."
             },
             "bitbucket_token": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "bitbucket_user": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "github": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "confluence": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "figma": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"],
+              "description": "Figma Personal Access Token. The canonical Tier 2 (REST API) key of the Figma access chain - this is the key `figma-token.sh` resolves. Supersedes `figma_pat`."
             },
             "figma_mcp": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"],
+              "description": "Figma MCP token. Tier 1 of the Figma access chain. The `mcp__claude_ai_Figma__*` calls themselves authenticate through Anthropic-managed MCP auth, but the token must be onboarded so that flow has something to bind to, and so `lib/figma-mcp-refresh.sh` can renew it."
             },
             "fortify": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "graylog": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "figma_pat": {
-              "type": [
-                "string",
-                "null"
-              ],
-              "description": "Figma Personal Access Token. Tier 2 of the Figma access chain (REST API) resolves this key."
+              "type": ["string", "null"],
+              "deprecated": true,
+              "description": "DEPRECATED, pre-v13.6 name for `figma`. Kept so an un-migrated preferences file still validates; `migrate-prefs.mjs` copies the value into `figma` and deletes this key. Never write a new mapping here - the next migration removes it. Runtime lookups read `figma` first and fall back to this key only for installs that have not migrated yet."
             },
             "figma_user": {
-              "type": [
-                "string",
-                "null"
-              ],
-              "description": "Figma account identifier, when the REST flow needs it alongside figma_pat."
+              "type": ["string", "null"],
+              "deprecated": true,
+              "description": "DEPRECATED and unused. `migrate-prefs.mjs` removes this key; the REST flow authenticates with the PAT alone."
             },
             "claude_oauth_token": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Claude Code OAuth token used by headless / scheduled runs."
             },
             "claude_oauth_token_fallback": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Secondary OAuth token used when the primary is rate-limited or expired."
             },
             "firebase": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Firebase JSON (base64-encoded). project_id is parsed from the decoded JSON."
             },
+            "firebase_sa": {
+              "type": ["string", "null"],
+              "deprecated": true,
+              "description": "DEPRECATED, early-v2.1.0 name for `firebase`. Declared only so a pre-consolidation preferences file still validates long enough for `migrate-prefs.mjs` to copy the value into `firebase` and delete this key. Never write a new mapping here."
+            },
+            "firebase_project": {
+              "type": ["string", "null"],
+              "deprecated": true,
+              "description": "DEPRECATED and unused. Declared only so a pre-consolidation preferences file still validates; `migrate-prefs.mjs` removes it, because project_id is parsed from the decoded service-account JSON and needs no separate entry."
+            },
             "jenkins": {
-              "type": [
-                "string",
-                "null"
-              ]
+              "type": ["string", "null"]
             },
             "npm": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "NPM registry token (npm.pkg.github.com or npmjs.com). Used by package publish flow."
             },
             "appstore_connect_key_id": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "App Store Connect API key ID. Tier 1 of the App Store Connect access chain, used by /multi-agent:testflight-validation Gate 2. An identifier rather than a secret; mapped anyway so every credential is read through the same layer. Creating an API key needs an Admin or App Manager role, which is why Tier 2 exists."
             },
             "appstore_connect_issuer_id": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "App Store Connect API issuer ID. Required alongside appstore_connect_key_id; either alone leaves Tier 1 unusable and the resolver says so instead of silently dropping to Tier 2. The .p8 private key is a FILE and is never stored here - it belongs at ~/.appstoreconnect/private_keys/AuthKey_<keyId>.p8, one of the directories altool searches."
             },
             "appstore_connect_apple_id": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Apple ID for Tier 2 of the App Store Connect access chain. Usable by any Apple ID holder with no elevated role, which is the realistic path when API-key creation is not permitted on the account."
             },
             "appstore_connect_password_item": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "Name of the keychain item holding the app-specific password, created by `altool --store-password-in-keychain-item`. Holds an ITEM NAME, not a password: altool reads the secret itself via `-p @keychain:<item>`, so the value never reaches an argument list or the pipeline."
             }
           }
@@ -250,10 +203,7 @@
         "tokenScripts": {
           "type": "object",
           "additionalProperties": {
-            "type": [
-              "string",
-              "null"
-            ]
+            "type": ["string", "null"]
           },
           "default": {},
           "description": "Maps service ids to user-owned token generation scripts (absolute paths, personal - never synced). Used by the Phase 0 token pre-flight: figma_mcp silent renewal reads the .figma-oauth.json next to tokenScripts.figma_mcp; the 'Regenerate now (script)' option runs the script itself."
@@ -283,9 +233,7 @@
               {
                 "type": "object",
                 "additionalProperties": false,
-                "required": [
-                  "path"
-                ],
+                "required": ["path"],
                 "properties": {
                   "path": {
                     "type": "string"
@@ -315,9 +263,7 @@
             "items": {
               "type": "object",
               "additionalProperties": false,
-              "required": [
-                "branch"
-              ],
+              "required": ["branch"],
               "properties": {
                 "branch": {
                   "type": "string"
@@ -342,10 +288,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "name",
-              "description"
-            ],
+            "required": ["name", "description"],
             "properties": {
               "name": {
                 "type": "string",
@@ -366,10 +309,7 @@
                 "description": "Where the routine came from, e.g. a CLAUDE.md section name or 'user'."
               },
               "trigger": {
-                "type": [
-                  "string",
-                  "null"
-                ],
+                "type": ["string", "null"],
                 "description": "Optional natural-language trigger phrase the routine captures."
               }
             }
@@ -381,9 +321,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "repos"
-            ],
+            "required": ["repos"],
             "properties": {
               "label": {
                 "type": "string",
@@ -415,9 +353,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "repoSet"
-            ],
+            "required": ["repoSet"],
             "properties": {
               "repoSet": {
                 "type": "array",
@@ -437,11 +373,7 @@
               },
               "platform": {
                 "type": "string",
-                "enum": [
-                  "ios",
-                  "android",
-                  "mixed"
-                ]
+                "enum": ["ios", "android", "mixed"]
               },
               "hostScheme": {
                 "type": "string",
@@ -473,11 +405,7 @@
               },
               "lastResult": {
                 "type": "string",
-                "enum": [
-                  "success",
-                  "failed",
-                  "skipped"
-                ]
+                "enum": ["success", "failed", "skipped"]
               }
             }
           },
@@ -489,10 +417,7 @@
           "additionalProperties": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "ok",
-              "checkedAt"
-            ],
+            "required": ["ok", "checkedAt"],
             "properties": {
               "ok": {
                 "type": "boolean"
@@ -566,10 +491,7 @@
           }
         },
         "defaultJiraKey": {
-          "type": [
-            "string",
-            "null"
-          ],
+          "type": ["string", "null"],
           "description": "Default Jira project key used for placeholder replacement. null until /multi-agent:setup onboards a Jira project."
         },
         "modelFallback": {
@@ -583,10 +505,7 @@
               "description": "Master switch for tier fallback."
             },
             "premiumTierUntil": {
-              "type": [
-                "string",
-                "null"
-              ],
+              "type": ["string", "null"],
               "description": "ISO date after which the premium tier is assumed gone. null = no expiry known."
             },
             "fallbackModel": {
@@ -726,28 +645,14 @@
           "type": "array",
           "items": {
             "type": "string",
-            "enum": [
-              "main",
-              "ios",
-              "screenshots",
-              "index"
-            ]
+            "enum": ["main", "ios", "screenshots", "index"]
           },
-          "default": [
-            "main",
-            "ios",
-            "screenshots",
-            "index"
-          ],
+          "default": ["main", "ios", "screenshots", "index"],
           "description": "v5.7+ - Wiki Case A scope multi-select default'u. Component wiki dispatch'inde hangi artifact'lar yaz\u0131lacak: main (ana component sayfas\u0131), ios (iOS sub-page), screenshots (assets/ klas\u00f6r\u00fc), index (_Sidebar.md + ComponentImplementationStatus.md). Legacy wikiDefault=true \u2192 [main,ios,screenshots,index] migration; wikiDefault=false \u2192 [] (empty array = Wiki adapter Case B men\u00fcs\u00fcne d\u00fc\u015fer)."
         },
         "autoJiraFromGithubIssue": {
           "type": "string",
-          "enum": [
-            "ask",
-            "always",
-            "never"
-          ],
+          "enum": ["ask", "always", "never"],
           "default": "ask",
           "description": "Policy for the GitHub-issue Jira auto-create (WS-6 triad, Phase 0 Step 1). `ask` prompts the user when a GitHub issue has no Jira ID. `always` auto-creates silently (and patches the GitHub issue body with the link). `never` skips and uses the `feature/GH{issueNo}-kebab` branch. Autopilot treats `ask` as `always` - there is no interactive fallback when running unattended."
         },
@@ -758,29 +663,19 @@
         },
         "promptLanguage": {
           "type": "string",
-          "enum": [
-            "en",
-            "tr"
-          ],
+          "enum": ["en", "tr"],
           "default": "en",
           "description": "Language used for user-facing INTERACTIVE pipeline copy: pickers (account, project, dev-context, base branch, branch name, maturity ack, channels), Phase 5 test prompt, Phase 6 local-checkout prompt, Phase 6 commit/PR confirmations, TaskCreate card subjects, and phase-banner.sh headers (`PHASE_LANG` resolves from this field via the `auto` sentinel). Canonical label table lives in `pipeline/skills/shared/multi-agent/SKILL.md`. External payloads stay English regardless of this setting: reviewer/triage system prompts, commit messages, PR titles/bodies, Jira comments, wiki content, agent-log.md payloads. Set via `/multi-agent:language prompt <en|tr>` or answered on first run by `/multi-agent:setup`."
         },
         "outputLanguage": {
           "type": "string",
-          "enum": [
-            "en",
-            "tr"
-          ],
+          "enum": ["en", "tr"],
           "default": "en",
           "description": "Language used for the assistant's NON-INTERACTIVE explanations, status updates, error messages, and pipeline-generated reports rendered to the user (e.g. `/multi-agent:help` body, `/multi-agent:status` table headers, summary blocks at the end of a run). Independent of `promptLanguage` so a user can have Turkish pickers but English summaries (or vice versa). External payloads (commits, PR/Jira/wiki) and skill-picker / confirmation / error UI exposed by the CLI host stay English regardless of this setting. Set via `/multi-agent:language output <en|tr>` or answered on first run by `/multi-agent:setup`."
         },
         "progressVerbosity": {
           "type": "string",
-          "enum": [
-            "quiet",
-            "normal",
-            "verbose"
-          ],
+          "enum": ["quiet", "normal", "verbose"],
           "default": "normal",
           "description": "Verbosity of the live progress-line contract (`refs/progress-contract.md`). `quiet` shows only phase banners and user prompts (CI-friendly). `normal` shows banners + the canonical action set per phase - recommended for interactive use. `verbose` shows sub-agent internal actions, file-level reads, schema validations, retry internals - forced automatically when `mode: autopilot` is set in agent state so the run remains audit-grade when the user isn't watching live."
         },
@@ -803,9 +698,7 @@
             },
             "model": {
               "type": "string",
-              "enum": [
-                "sonnet"
-              ],
+              "enum": ["sonnet"],
               "default": "sonnet",
               "description": "Cross-check model. Locked to Sonnet - Opus would just agree with Opus."
             },
@@ -864,10 +757,7 @@
             },
             "model": {
               "type": "string",
-              "enum": [
-                "sonnet",
-                "opus"
-              ],
+              "enum": ["sonnet", "opus"],
               "default": "sonnet",
               "description": "Verifier agent model. Writing a minimal repro test is mechanical work; Sonnet is the cost-sane default."
             },
@@ -904,11 +794,7 @@
             },
             "mode": {
               "type": "string",
-              "enum": [
-                "per-tool-call",
-                "per-todo-step",
-                "off"
-              ],
+              "enum": ["per-tool-call", "per-todo-step", "off"],
               "default": "per-todo-step",
               "description": "Snapshot frequency. per-tool-call snapshots after each Edit/Write/Bash mutation; per-todo-step snapshots once per plan-todos.sh step boundary (cheaper, recommended). off is equivalent to enabled=false."
             },
@@ -945,10 +831,7 @@
             },
             "model": {
               "type": "string",
-              "enum": [
-                "haiku",
-                "sonnet"
-              ],
+              "enum": ["haiku", "sonnet"],
               "default": "haiku",
               "description": "Classifier model. Haiku is the cost default; Sonnet override for regulated domains where ambiguity nuance matters."
             },
@@ -968,11 +851,7 @@
             },
             "autopilotMode": {
               "type": "string",
-              "enum": [
-                "skip",
-                "log",
-                "abort"
-              ],
+              "enum": ["skip", "log", "abort"],
               "default": "log",
               "description": "What to do when stopAndAsk fires in autopilot. skip = drop questions and proceed (most aggressive); log = append to agent-log.md and proceed (default, preserves signal); abort = pause Phase 0 and require multi-agent:resume."
             }
@@ -1015,21 +894,13 @@
             },
             "onExceed": {
               "type": "string",
-              "enum": [
-                "warn",
-                "halt"
-              ],
+              "enum": ["warn", "halt"],
               "default": "warn",
               "description": "warn = surface the overage and continue (autopilot keeps going). halt = pause the run and require multi-agent:resume once the user accepts the cost. Interactive runs always surface the line regardless."
             },
             "pricingModel": {
               "type": "string",
-              "enum": [
-                "fable",
-                "opus",
-                "sonnet",
-                "haiku"
-              ],
+              "enum": ["fable", "opus", "sonnet", "haiku"],
               "default": "fable",
               "description": "Which cost-table.json rate to price accumulated tokens at. Defaults to fable (the top tier since v10.6.0) for a deliberately conservative (upper-bound) estimate, so the ceiling trips early rather than late."
             }
@@ -1120,11 +991,7 @@
             },
             "model": {
               "type": "string",
-              "enum": [
-                "sonnet",
-                "opus",
-                "haiku"
-              ],
+              "enum": ["sonnet", "opus", "haiku"],
               "default": "sonnet",
               "description": "Critic model. Sonnet is the cost/quality default. Opus override only when diff > 500 LOC or touches security-critical paths. Haiku is too brittle for checklist reasoning - use only for trivial verification tasks."
             },
@@ -1227,10 +1094,7 @@
               "description": "When true, also scan the repo tree (not just the diff) for existing tests that already mention the symbol - catches gaps that are technically covered by older tests outside the current diff. Slower but more accurate. Off by default - diff-only scan is sufficient for the common case."
             },
             "blockingThreshold": {
-              "type": [
-                "integer",
-                "null"
-              ],
+              "type": ["integer", "null"],
               "minimum": 1,
               "default": null,
               "description": "If set, gaps where `important + blocking` count exceeds the threshold are treated as a Phase 4 rework finding (loops back to Phase 3). null = advisory only - Phase 5 prints the report but never gates."
@@ -1261,7 +1125,7 @@
         "dynamicSkillLoading": {
           "type": "boolean",
           "default": false,
-          "description": "v7.0.0+ - Dynamic trigger-based skill loading. When enabled, the orchestrator reads `~/.claude/skills/.skills-index.json` after Phase 1 analysis and injects only the top-N matched skills into subagent prompts (via `match-skills.mjs`), instead of relying on eager-loaded SKILL.md bodies. Large token win on small tasks; no visible behavior change on big ones where many skills match. Requires either a full install (index is always shipped) or the `install.js --index-only` mode for users who want skill bodies fetched on demand. Off by default in v7.0 - flip to `true` to opt in; a future v7.x may flip the default once enough telemetry confirms no regression."
+          "description": "v7.0.0+ - Dynamic trigger-based skill loading. When enabled, the orchestrator reads `~/.claude/skills/.skills-index.json` after Phase 1 analysis and injects only the top-N matched skills into subagent prompts (via `match-skills.mjs`), instead of relying on eager-loaded SKILL.md bodies. Large token win on small tasks; no visible behavior change on big ones where many skills match. The index ships with every install - full and `--index-only` alike - so this is safe to flip on any installed tree. It was not always: until v13.6 only `--index-only` copied the index, and `match-skills.mjs` resolved its default index path relative to a repo checkout, so enabling this on a normal install produced `cannot read index` and a silent fall back to eager loading. Off by default - flip to `true` to opt in; a future release may flip the default once enough telemetry confirms no regression."
         },
         "derivedSkillSources": {
           "type": "array",
@@ -1269,12 +1133,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "label",
-              "localPath",
-              "upstreamPlugin",
-              "derivedFromVersion"
-            ],
+            "required": ["label", "localPath", "upstreamPlugin", "derivedFromVersion"],
             "properties": {
               "label": {
                 "type": "string",
@@ -1304,10 +1163,7 @@
                 "description": "Upstream version we last synced from, read from the manifest named by `upstreamVersionSource`. Bumped after a drift port is applied."
               },
               "upstreamVersionSource": {
-                "enum": [
-                  "marketplace.json",
-                  "plugin.json"
-                ],
+                "enum": ["marketplace.json", "plugin.json"],
                 "default": "marketplace.json",
                 "description": "Which upstream manifest carries the authoritative version. Defaults to marketplace.json because that is what a marketplace consumer resolves; some upstreams keep plugin.json deliberately unused, so reading it silently records a version nobody ships. Recording from the wrong manifest is how an entry here sat at 0.7.0 while the marketplace said 0.6.0."
               },
@@ -1351,11 +1207,7 @@
             },
             "registry": {
               "type": "string",
-              "enum": [
-                "github-packages",
-                "npmjs",
-                "none"
-              ],
+              "enum": ["github-packages", "npmjs", "none"],
               "default": "github-packages",
               "description": "Publish target for Step 3d. `none` means commit + push only, never publish. The concrete URL comes from the repo's publishConfig; the token comes from the `npm` logical Keychain key through a throwaway --userconfig."
             },
@@ -1371,9 +1223,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "id"
-            ],
+            "required": ["id"],
             "properties": {
               "id": {
                 "type": "string",
@@ -1401,9 +1251,7 @@
           "items": {
             "type": "object",
             "additionalProperties": false,
-            "required": [
-              "id"
-            ],
+            "required": ["id"],
             "properties": {
               "id": {
                 "type": "string",
@@ -1426,16 +1274,35 @@
               },
               "defaultProvider": {
                 "type": "string",
-                "enum": [
-                  "github",
-                  "bitbucket",
-                  "gitlab",
-                  "generic-git"
-                ]
+                "enum": ["github", "bitbucket", "gitlab", "generic-git"]
               }
             }
           },
           "maxItems": 20
+        },
+        "skillConformance": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v14.0.0+ - Phase 4 Step 1.78 criteria resolution. The stage itself has no on/off key and neither does its exception-expiry check: a run that can switch off its own anti-reward-hacking control cannot be trusted to report a pass (same reasoning as Step 1.76).",
+          "properties": {
+            "blockOnCoverageGap": {
+              "type": "boolean",
+              "default": false,
+              "description": "Whether a declared coverage gap halts the run. A gap means a language in the diff that no rule registry covers, and it is REPORTED either way - this key only decides whether it also stops the pipeline. Default false because only Swift plus the two store-compliance catalogs ship a scoped registry today, so defaulting true would block every Kotlin, Python, Node and Objective-C run on day one. Flip to true once your stack's registry exists and you want an uncovered file treated as a failure rather than a note."
+            }
+          }
+        },
+        "ship": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v14.0.0+ - /multi-agent:ship (formerly :finish), the tail that runs review + build/test + PR + report over work already on the branch.",
+          "properties": {
+            "autoFix": {
+              "type": "boolean",
+              "default": false,
+              "description": "When true, ship auto-fixes triage-accepted blocking/important findings and re-reviews instead of asking. Equivalent to passing `autopilot` on every run. Default false: ship operates on work the user wrote by hand, so silently rewriting it is the surprising option."
+            }
+          }
         }
       }
     },
@@ -1465,10 +1332,7 @@
             },
             "defaultPrMode": {
               "type": "string",
-              "enum": [
-                "draft",
-                "ready"
-              ],
+              "enum": ["draft", "ready"],
               "description": "Last-used draft/ready choice, shown as the default on next prompt."
             },
             "baseBranch": {
@@ -1507,12 +1371,7 @@
             },
             "remoteType": {
               "type": "string",
-              "enum": [
-                "bitbucket",
-                "github",
-                "gitlab",
-                "generic-git"
-              ],
+              "enum": ["bitbucket", "github", "gitlab", "generic-git"],
               "description": "Hint used when repo URL doesn't make platform obvious."
             },
             "taskCount": {
@@ -1566,10 +1425,7 @@
               "description": "Per-project App Store Connect delivery settings. Per-project rather than global because a user can ship for more than one team.",
               "properties": {
                 "providerPublicId": {
-                  "type": [
-                    "string",
-                    "null"
-                  ],
+                  "type": ["string", "null"],
                   "description": "Provider (team) public ID, required by altool when the account belongs to several providers. Resolve once with ios_testflight_validate({list_providers:true}); without it altool fails opaquely."
                 }
               }