@mmerterden/multi-agent-pipeline 14.2.2 → 15.0.0

package/pipeline/skills/shared/README.md

@@ -2,24 +2,24 @@
 
 Single source of truth for skills delivered to both Claude Code (`~/.claude/skills/`) and Copilot CLI (`~/.copilot/skills/`) by the installer.
 
-**Total:** 201 skills (52 core + 149 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
+**Total:** 205 skills (54 core + 151 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
 
 ## Directory layout
 
-- **`core/`**  -  52 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
-- **`external/`**  -  149 iOS / Android / generic skills imported from the upstream skill library. Mirrors of third-party guidance.
-- Install destination stays flat: both trees flatten into `~/.claude/skills/` and `~/.copilot/skills/`. See ADR-0006 for the rationale.
+- **`core/`**  -  54 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
+- **`external/`**  -  151 iOS / Android / generic skills imported from the upstream skill library. Mirrors of third-party guidance.
+- Install destinations (ADR-0009): Claude Code gets NO local copy of `external/` - it loads those skills from the `multi-agent-plugins` marketplace, namespaced (`ai-<stack>-toolkit:<name>`); only the two compliance catalogs from `core/` land in `~/.claude/skills/`. Copilot CLI and Codex CLI receive a flat copy filtered to the enabled stacks. `external/` remains the single authoring source that `build-stack-plugins.mjs` publishes from.
 
 Source layout is logical grouping only  -  skill discovery at runtime is unchanged.
 
 ## Categories
 
-- [Pipeline Orchestration](#pipeline-orchestration)  -  52
-- [iOS / Apple Ecosystem](#ios-apple-ecosystem)  -  89
+- [Pipeline Orchestration](#pipeline-orchestration)  -  54
+- [iOS / Apple Ecosystem](#ios-apple-ecosystem)  -  90
 - [Android / Kotlin](#android-kotlin)  -  13
 - [Web / Frontend](#web-frontend)  -  10
 - [Backend / API](#backend-api)  -  11
-- [Cross-cutting](#cross-cutting)  -  26
+- [Cross-cutting](#cross-cutting)  -  27
 
 ## Pipeline Orchestration
 
@@ -29,10 +29,11 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`google-play-compliance`](./core/google-play-compliance/) | `core` | Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error c |
 | [`multi-agent`](./core/multi-agent/) | `core` | Task orchestrator: runs the full pipeline from a Jira ID or GitHub Issue URL  -  analysis → plan → TDD development → parallel review (Fable  |
 | [`multi-agent-analysis`](./core/multi-agent-analysis/) | `core` | Standalone feature-spec analysis (v3 template). Platform-agnostic concept layer with repo-driven convention extraction and per-platform Pass |
-| [`multi-agent-analysis-resolve`](./core/multi-agent-analysis-resolve/) | `core` | Resolve the Section 20 Risks and Open Questions of an analysis v3 document one row at a time. Proposes up to 3 source-labeled answer candida |
+| [`multi-agent-analysis-resolve`](./core/multi-agent-analysis-resolve/) | `core` | Resolve the Section 20 Risks and Open Questions of an analysis v3 document one row at a time: up to 3 source-labeled answer candidates per r |
 | [`multi-agent-autopilot`](./core/multi-agent-autopilot/) | `core` | Launch any task in autopilot mode: skips every confirmation, runs end-to-end autonomously. Use when a task should run end to end with no con |
 | [`multi-agent-build-optimize`](./core/multi-agent-build-optimize/) | `core` | Wrapper that dispatches to xcode-build-orchestrator on iOS repos. Benchmarks the current Xcode build, runs compilation / project / SPM analy |
 | [`multi-agent-channels`](./core/multi-agent-channels/) | `core` | Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbuck |
+| [`multi-agent-complaint-analysis`](./core/multi-agent-complaint-analysis/) | `core` | Customer-complaint triage. Ingests complaints (paste, csv/xlsx/txt/json file, Jira issue, Confluence URL), fetches Graylog evidence per trx/ |
 | [`multi-agent-create-jira`](./core/multi-agent-create-jira/) | `core` | Create a standards-compliant Jira issue (Task / Bug / Story): asks the type, mines project conventions, drafts from a standard template with |
 | [`multi-agent-design-check`](./core/multi-agent-design-check/) | `core` | Mock-mode vs Figma design audit (iOS / Android, local-only). Pick repo + module, gate on mock support, enumerate every state driver into a c |
 | [`multi-agent-dev`](./core/multi-agent-dev/) | `core` | Fast development mode: Init → Dev (Opus) → Review → Test → Commit → Report. Analysis and planning are skipped, review is not. Use when the w |
@@ -53,9 +54,11 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`multi-agent-log`](./core/multi-agent-log/) | `core` | Show the agent-log.md for the given task. With no ID, shows the most recent task. Use when asked what a task did, or to read its log. |
 | [`multi-agent-manual-test`](./core/multi-agent-manual-test/) | `core` | Switch to the active task's branch and prepare it for manual testing in Xcode. Phase 5 standalone (the UI Bug Hunter lives at multi-agent-te |
 | [`multi-agent-prune-logs`](./core/multi-agent-prune-logs/) | `core` | Delete per-task project logs under ~/.claude/logs/multi-agent (filter by age/project/task). Audit trail + metrics are preserved. Dry-run fir |
+| [`multi-agent-prune-prompts`](./core/multi-agent-prune-prompts/) | `core` | Zero-base prompt review: measure the always-on instruction footprint, classify every rule block, propose keep/trial-removal/delete; applies  |
 | [`multi-agent-purge`](./core/multi-agent-purge/) | `core` | ⚠️ Wipes every worktree, branch, log, and state file. Irreversible; asks for double confirmation. Use when every worktree, branch, log and s |
 | [`multi-agent-refactor`](./core/multi-agent-refactor/) | `core` | Analyse the project: extract adapted best-practices, hunt real bugs + improvement areas, check upstream drift of derived skills, research th |
 | [`multi-agent-resume`](./core/multi-agent-resume/) | `core` | Resume a stopped or failed task from the phase where it left off. Use when a task stopped or failed and should carry on from where it left o |
+| [`multi-agent-resume-local`](./core/multi-agent-resume-local/) | `core` | Continue already-done LOCAL work through the pipeline tail: Review → Build+Test → Commit/PR → Report (technical analysis + Jira test-scenari |
 | [`multi-agent-review`](./core/multi-agent-review/) | `core` | Run parallel review on a branch diff or a Pull Request: 2 models on Claude Code (Fable + Sonnet), 3 models on Copilot CLI (GPT + Opus + Sonn |
 | [`multi-agent-review-issue`](./core/multi-agent-review-issue/) | `core` | Assess whether a GitHub issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / sta |
 | [`multi-agent-review-jira`](./core/multi-agent-review-jira/) | `core` | Assess whether a Jira issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / stack |
@@ -64,8 +67,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`multi-agent-scan`](./core/multi-agent-scan/) | `core` | Skill security scan: walks local skill directories against a tiered pattern catalog. Use when local skill directories need checking for unsa |
 | [`multi-agent-search`](./core/multi-agent-search/) | `core` | Log search across every agent-log.md with smart ranking and filters. Optional --semantic flag queries the per-repo triage corpus. Use when s |
 | [`multi-agent-setup`](./core/multi-agent-setup/) | `core` | First-run setup wizard: keychain token discovery, Git Identity onboarding, and pipeline preparation. Use when the pipeline is being set up f |
-| [`multi-agent-ship`](./core/multi-agent-ship/) | `core` | Continue already-done LOCAL work through the pipeline tail: Review → Build+Test → Commit/PR → Report (technical analysis + Jira test-scenari |
-| [`multi-agent-stack`](./core/multi-agent-stack/) | `core` | Select the active stack for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json (ios/android/mobile/backend/fr |
+| [`multi-agent-stack`](./core/multi-agent-stack/) | `core` | Select the active stack(s) for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json. Multi-select: pass several |
 | [`multi-agent-status`](./core/multi-agent-status/) | `core` | Show every multi-agent task's ID, phase, branch, and status. Use when asked what is running, or for an overview of every task. |
 | [`multi-agent-store-ready`](./core/multi-agent-store-ready/) | `core` | Pre-submission store readiness for a built package, iOS and Android, local-only. Three symmetric gates per platform: a static package audit, |
 | [`multi-agent-sync`](./core/multi-agent-sync/) | `core` | One-shot sync of the entire multi-agent ecosystem: Claude Code, Copilot CLI, pipeline repo, website, and the dev-toolkit MCP server. Use whe |
@@ -119,6 +121,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`ios-debugger-agent`](./external/ios-debugger-agent/) | `external` | Debug the current iOS project on a booted simulator with XcodeBuildMCP. Use when an iOS bug has to be reproduced and diagnosed on a booted s |
 | [`ios-developer`](./external/ios-developer/) | `external` | Develop native iOS applications with Swift/SwiftUI. Masters iOS 18, SwiftUI, UIKit integration, Core Data, networking, and App Store optimiz |
 | [`ios-localization`](./external/ios-localization/) | `external` | Implement, review, or improve localization and internationalization in iOS/macOS apps  -  String Catalogs (.xcstrings), generated localizabl |
+| [`ios-module-structure`](./external/ios-module-structure/) | `external` | The ios-module-structure rule registry: stable-ID rules over where a declaration lives, what its file is called and what its folder must con |
 | [`ios-networking`](./external/ios-networking/) | `external` | Build, review, or improve networking code in iOS/macOS apps using URLSession with async/await, structured concurrency, and modern Swift patt |
 | [`ios-security`](./external/ios-security/) | `external` | Secure iOS apps with Keychain Services, CryptoKit encryption, biometric authentication (Face ID, Touch ID), Secure Enclave key storage, LACo |
 | [`ios-simulator`](./external/ios-simulator/) | `external` | Manages iOS Simulator devices and tests app behaviour with xcrun simctl: device lifecycle, app install and launch, push notification and loc |
@@ -242,6 +245,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`github-actions-templates`](./external/github-actions-templates/) | `external` | Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications. Use when a GitHub Actions workflow has  |
 | [`help-skills`](./external/help-skills/) | `external` | Mevcut tum iOS/Swift skill'lerini listeler ve ne ise yaradiklarini aciklar. Use when asked which iOS or Swift skills are available and what  |
 | [`humanizer`](./external/humanizer/) | `external` | \| |
+| [`localization-reuse-map`](./external/localization-reuse-map/) | `external` | >- |
 | [`pdfkit`](./external/pdfkit/) | `external` | Display and manipulate PDF documents using PDFKit. Use when embedding PDFView to show PDF files, creating or modifying PDFDocument instances |
 | [`search-first`](./external/search-first/) | `external` | \| |
 | [`skill-creator`](./external/skill-creator/) | `external` | Author and refine skills for a plugin/toolkit efficiently. Use when creating a new skill, trimming or splitting an existing one, writing a s |

package/pipeline/skills/shared/core/multi-agent-analysis-resolve/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multi-agent-analysis-resolve
 language: en
-description: "Resolve the Section 20 Risks and Open Questions of an analysis v3 document one row at a time. Proposes up to 3 source-labeled answer candidates per row (from evidence / from repo / AI reasoned), merges the chosen answer into the target body section, and updates the doc in place with a changelog bump. Companion to multi-agent-analysis. Use when an analysis document's open questions and risks need answering row by row before development starts."
+description: "Resolve the Section 20 Risks and Open Questions of an analysis v3 document one row at a time: up to 3 source-labeled answer candidates per row (evidence / repo / AI reasoned), chosen answer merged into the target section, doc updated in place with a changelog bump. Same locked decisions as /multi-agent:analysis. Use when an analysis document's open questions need answering before development starts."
 user-invocable: true
 argument-hint: "[path/to/analysis/<feature>-<platform>.md] [--autonomous]"
 ---

package/pipeline/skills/shared/core/multi-agent-build-optimize/SKILL.md

@@ -39,7 +39,7 @@ Thin wrapper around the vendored `xcode-build-orchestrator` skill so iOS users d
 ## Detailed implementation
 
 Full steps: `$HOME/.claude/commands/multi-agent/build-optimize/SKILL.md`.
-Upstream attribution: `$HOME/.claude/skills/NOTICE-xcode-build-skills.md`.
+Upstream attribution: ai-ios-toolkit plugin NOTICE (xcode build skills).
 
 ## Notes
 

package/pipeline/skills/shared/core/multi-agent-complaint-analysis/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: multi-agent-complaint-analysis
+language: en
+description: "Customer-complaint triage. Ingests complaints (paste, csv/xlsx/txt/json file, Jira issue, Confluence URL), fetches Graylog evidence per trx/conversation id, correlates read-only against the selected client + BFF repos; per complaint: client/bff root cause + fix plan + dev prompt, or core routing recommendation, or insufficient-evidence. Report only, no dev chaining. Use when customer-reported errors need layer triage."
+user-invocable: true
+argument-hint: "[\"<run-name>\"] [--file <path>] [<jira-id | jira-url | confluence-url> ...]"
+---
+
+# multi-agent-complaint-analysis - Customer Complaint Triage
+
+**Input**: $ARGUMENTS (optional run name, optional `--file <path>`, optional Jira ids / Confluence URLs; remaining free text = pasted complaints)
+
+Triage of customer-reported errors across the layers the team owns. Per complaint: Graylog evidence by trx/conversation id, read-only repo correlation, and a verdict. Core failures get a routing recommendation to the backend core team, never a fix analysis. **Independent and read-only**: no branches, worktrees, commits, PRs, or dev chaining - the run ends at the report.
+
+## When to use
+
+- A batch of customer complaints / store reviews / support tickets needs to be mapped to responsible layers (ios / android / web / mobile-bff / web-bff vs backend core)
+- Production error reports carry trxId / conversationId values worth pulling from Graylog
+- The team needs a forwardable routing record for core-side failures
+
+## Key rules
+
+- Graylog is the primary evidence in this command (deliberate departure from the dev pipeline's advisory-only rule); a failed fetch degrades that complaint to `insufficient-evidence`, never halts the run.
+- Ids are never guessed: complaints without trx/conv ids trigger a supply-or-skip prompt.
+- Complaint text is redacted at intake (email / phone / card / national-id / PNR shapes); raw PII never reaches state or any output.
+- Core is a residual classification, not a repo: no core-repo grepping, no fix speculation.
+- Client/bff verdicts carry a development handoff: a fix plan referencing the existing architecture (`file:line` reuse-first steps) plus a fenced English dev prompt ready for the dev pipeline or a Jira description. The command still never runs dev itself.
+- Output default is Local file; Confluence / Jira are posted only on request. Never closes or transitions issues.
+
+## Flow
+
+| Phase | Action |
+|---|---|
+| 0. Intake | Run name + account picker + repo multi-select + layer-tag confirmation + multi-source complaint ingestion (`lib/parse-complaints.sh`) + id confirmation loop |
+| 1. Graylog | Per-complaint `lib/fetch-graylog.sh --trx/--conv`; credential/host failure degrades and continues |
+| 2. Correlate | Extract signals (endpoints, error codes, exceptions, source services) from Graylog hits; read-only grep across selected repos |
+| 3. Triage | Verdict per complaint: `client:<layer>` / `bff:<layer>` (citations + fix plan grounded in the existing architecture + ready-to-run dev prompt) or `core` (routing recommendation) or `insufficient-evidence` |
+| 4. Draft | Render 8-section report, humanizer pass, punctuation gate |
+| 4.5 Output picker | Local file (default) / Confluence page / Jira comment (asked only after the draft exists) |
+| 5. Dispatch | `validate-complaint-doc.mjs` gate, write/post, verdict-count summary. **Stop.** |
+
+Pickers route through `lib/ask-choice.sh` per the picker contract.
+
+## Detailed implementation
+
+Full steps: the Claude-side command doc for `complaint-analysis` (same phase structure and locked decisions).
+Report template: `complaint-analysis-template.md` (8 sections; routing section required per core verdict).
+State schema: `schemas/complaint-analysis-spec.schema.json`.
+Report gate: `scripts/validate-complaint-doc.mjs` (front-matter, sections, verdict tokens, routing entries, punctuation, redaction-leak scan).

package/pipeline/skills/shared/core/multi-agent-dev/SKILL.md

@@ -70,4 +70,4 @@ Before writing anything outward-facing  -  PR body, Jira comment, Confluence pag
 
 ## Intake warnings (`--dev` family)
 
-Two checks belong at the top of every `--dev` run and are specified once in `$HOME/.claude/multi-agent-refs/phases/modes.md` "Intake warnings shared by the whole `--dev` family": an analysis document supplied to a mode that skips Analysis and Planning, and a branch that already carries the work (which wants `/multi-agent:ship`, not a second Dev pass). Read that section rather than reasoning about it from scratch.
+Two checks belong at the top of every `--dev` run and are specified once in `$HOME/.claude/multi-agent-refs/phases/modes.md` "Intake warnings shared by the whole `--dev` family": an analysis document supplied to a mode that skips Analysis and Planning, and a branch that already carries the work (which wants `/multi-agent:resume-local`, not a second Dev pass). Read that section rather than reasoning about it from scratch.

package/pipeline/skills/shared/core/multi-agent-dev-autopilot/SKILL.md

@@ -62,4 +62,4 @@ Before writing anything outward-facing  -  PR body, Jira comment, Confluence pag
 
 ## Intake warnings (`--dev` family)
 
-Two checks belong at the top of every `--dev` run and are specified once in `$HOME/.claude/multi-agent-refs/phases/modes.md` "Intake warnings shared by the whole `--dev` family": an analysis document supplied to a mode that skips Analysis and Planning, and a branch that already carries the work (which wants `/multi-agent:ship`, not a second Dev pass). Read that section rather than reasoning about it from scratch.
+Two checks belong at the top of every `--dev` run and are specified once in `$HOME/.claude/multi-agent-refs/phases/modes.md` "Intake warnings shared by the whole `--dev` family": an analysis document supplied to a mode that skips Analysis and Planning, and a branch that already carries the work (which wants `/multi-agent:resume-local`, not a second Dev pass). Read that section rather than reasoning about it from scratch.

package/pipeline/skills/shared/core/multi-agent-dev-local/SKILL.md

@@ -42,4 +42,4 @@ Before writing anything outward-facing  -  PR body, Jira comment, Confluence pag
 
 ## Intake warnings (`--dev` family)
 
-Two checks belong at the top of every `--dev` run and are specified once in `$HOME/.claude/multi-agent-refs/phases/modes.md` "Intake warnings shared by the whole `--dev` family": an analysis document supplied to a mode that skips Analysis and Planning, and a branch that already carries the work (which wants `/multi-agent:ship`, not a second Dev pass). Read that section rather than reasoning about it from scratch.
+Two checks belong at the top of every `--dev` run and are specified once in `$HOME/.claude/multi-agent-refs/phases/modes.md` "Intake warnings shared by the whole `--dev` family": an analysis document supplied to a mode that skips Analysis and Planning, and a branch that already carries the work (which wants `/multi-agent:resume-local`, not a second Dev pass). Read that section rather than reasoning about it from scratch.

package/pipeline/skills/shared/core/multi-agent-dev-local-autopilot/SKILL.md

@@ -48,4 +48,4 @@ Before writing anything outward-facing  -  PR body, Jira comment, Confluence pag
 
 ## Intake warnings (`--dev` family)
 
-Two checks belong at the top of every `--dev` run and are specified once in `$HOME/.claude/multi-agent-refs/phases/modes.md` "Intake warnings shared by the whole `--dev` family": an analysis document supplied to a mode that skips Analysis and Planning, and a branch that already carries the work (which wants `/multi-agent:ship`, not a second Dev pass). Read that section rather than reasoning about it from scratch.
+Two checks belong at the top of every `--dev` run and are specified once in `$HOME/.claude/multi-agent-refs/phases/modes.md` "Intake warnings shared by the whole `--dev` family": an analysis document supplied to a mode that skips Analysis and Planning, and a branch that already carries the work (which wants `/multi-agent:resume-local`, not a second Dev pass). Read that section rather than reasoning about it from scratch.

package/pipeline/skills/shared/core/multi-agent-ios-coding-standard/SKILL.md

@@ -10,9 +10,9 @@ argument-hint: "[module name or path]"
 
 **Input**: $ARGUMENTS  -  optionally a module name or path. When absent, Phase 1 discovers and asks.
 
-This routine is the **procedure**. The rules live in the `ios-coding-standard` skill, whose registry is
+This routine is the **procedure**. The rules live in the `ai-ios-toolkit:ios-coding-standard` skill, whose registry is
 `references/rules.yml` and whose teaching doc is `references/STANDARD.md`. Load that
-skill first; it is installed on every host and carried by the iOS stack plugin, so
+skill first; Claude Code loads it from the iOS stack plugin, Copilot/Codex from their local copy, so
 there is one registry rather than a copy per CLI. Never restate a rule here  -  cite its ID. A rule that is not in the
 registry is not a rule; if the audit needs one, propose it as `status: proposed` and say so.
 

package/pipeline/skills/shared/core/multi-agent-prune-prompts/SKILL.md

@@ -0,0 +1,83 @@
+---
+name: multi-agent-prune-prompts
+language: en
+description: "Zero-base prompt review: measure the always-on instruction footprint, classify every rule block, propose keep/trial-removal/delete; applies only approved rows. Use when a new model ships or instructions have accumulated."
+user-invocable: true
+argument-hint: "[--report-only]"
+---
+
+# multi-agent prune-prompts - Zero-Base Prompt Review
+
+Instruction files only grow. Every rule was added because some model once got
+something wrong, and nobody deletes a rule once a workaround ships. A newer
+model needs fewer of them; the ones it no longer needs are pure context tax on
+every session, and stale rules actively mislead.
+
+The discipline this command applies (after Boris Cherny's advice): on a model
+upgrade, assume ZERO instructions are needed, and let each line earn its way
+back. A line earns its way back only after the model gets the same thing wrong
+repeatedly (three strikes) WITHOUT it. Instructions are a cache of past model
+failures; a new model invalidates that cache.
+
+## Flow
+
+### 1. MEASURE - the always-on footprint
+
+Estimate tokens (chars/4) for each layer the model carries into every session:
+
+```bash
+wc -c "$HOME/.claude/CLAUDE.md" 2>/dev/null
+wc -c "$HOME"/.claude/rules/*.md 2>/dev/null
+find "$PWD" -maxdepth 2 -name "CLAUDE.md" -exec wc -c {} + 2>/dev/null
+```
+
+Report a table: layer, file, estimated tokens, share of total. Flag any single
+file above ~2,000 estimated tokens.
+
+### 2. CLASSIFY - what kind of line is each rule
+
+Walk CLAUDE.md + each rules/ file section by section. Classify every
+instruction block:
+
+| Class | Meaning | Default verdict |
+|---|---|---|
+| **Constraint** | Facts the model cannot infer (hosts, key names, branch formats, team conventions) | keep |
+| **Failure patch** | "Never do X" added after a model did X | trial removal - the current model may not need it |
+| **Restatement** | Something the model does correctly anyway (write tests, guard early) | delete |
+| **Stale** | References files, commands or workflows that no longer exist | delete |
+
+For failure patches, note WHEN the patch was added if git history shows it -
+a patch older than the current model's release is the strongest removal
+candidate.
+
+### 3. REPORT - the zero-base proposal
+
+One table, every block accounted for: file, section, class, verdict
+(keep / trial-removal / delete), and the one-line reason. Never a sample -
+if a section is not in the table, the review did not happen.
+
+With `--report-only`, stop here.
+
+### 4. APPLY - only what the user approves
+
+Present the table, ask which verdicts to apply (all deletes / all
+trial-removals too / pick rows). For approved rows, edit the files. Trial
+removals move the block into `~/.claude/rules/.pruned/<file>.md` with a
+dated header rather than deleting outright, so a strike-out can be reverted
+by moving the block back.
+
+### 5. THE THREE-STRIKE RULE going forward
+
+After a prune, when the model gets something wrong that a removed rule used
+to cover, do NOT restore it on the first miss. Record the miss (the
+`.pruned/` file has a `strikes:` line per block). Restore the line only on
+the third occurrence of the SAME failure. One line back at a time - never
+the whole file.
+
+## Boundaries
+
+- Never touches skill bodies or command files - those load on demand and are
+  not part of the always-on footprint. The lint gate (`lint-skills.mjs`)
+  owns their budgets.
+- Never touches `multi-agent-preferences.json` or anything under `logs/`.
+- Applies nothing without explicit approval on the report table.

package/pipeline/skills/shared/core/{multi-agent-ship → multi-agent-resume-local}/SKILL.md

@@ -1,11 +1,11 @@
 ---
-name: multi-agent-ship
+name: multi-agent-resume-local
 language: en
 description: "Continue already-done LOCAL work through the pipeline tail: Review → Build+Test → Commit/PR → Report (technical analysis + Jira test-scenario comment). No dev phase. Use when local work is already done and only review, build, commit and reporting remain."
 user-invocable: true
 ---
 
-# multi-agent ship  -  Take Existing Branch Work Through the Pipeline Tail
+# multi-agent resume-local  -  Take Existing Branch Work Through the Pipeline Tail
 
 You already wrote (and maybe hand-tested) the change on the current branch, or committed it outside the pipeline entirely. `ship` picks up from there and runs the **pipeline tail** over that existing work in one command, without re-developing. (As of v14.0.0 the `--dev` family reviews its own output, so this is for work with no pipeline run behind it.)
 
@@ -34,10 +34,10 @@ Phases 1-3 (Analysis / Planning / Dev) are skipped by design  -  the branch's lo
 ## Input
 
 ```bash
-multi-agent ship                   # current branch vs base; Jira id from branch name
-multi-agent ship PROJ-12345      # explicit Jira id for the Phase 7 comment
-multi-agent ship --base develop     # override base branch for the diff
-multi-agent ship autopilot          # no gate prompts: auto-fix, auto-PR, auto-comment
+multi-agent resume-local                   # current branch vs base; Jira id from branch name
+multi-agent resume-local PROJ-12345      # explicit Jira id for the Phase 7 comment
+multi-agent resume-local --base develop     # override base branch for the diff
+multi-agent resume-local autopilot          # no gate prompts: auto-fix, auto-PR, auto-comment
 ```
 
 ## Notes

package/pipeline/skills/shared/core/multi-agent-stack/SKILL.md

@@ -1,50 +1,107 @@
 ---
 name: multi-agent-stack
 language: en
-description: "Select the active stack for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json (ios/android/mobile/backend/frontend/fullstack/all). Use when a repo's stack changed or the wrong plugins are enabled for it."
+description: "Select the active stack(s) for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json. Multi-select: pass several stacks (ios backend) or pick them in the native picker. Use when a repo's stack changed or the wrong plugins are enabled for it."
 user-invocable: true
 ---
 
-# multi-agent stack  -  Select Stack via Plugin Enablement
+# multi-agent stack  -  Select Stack(s) via Plugin Enablement
 
-Stack skills ship as plugins in the `{owner}/multi-agent-plugins` marketplace. Selecting a stack = **enabling the matching plugin(s)** in the current repo's `.claude/settings.json` `enabledPlugins`. The `ai-common-engineering-toolkit` (accessibility audit, humanizer, Firebase) is always enabled alongside the stack plugin.
+Stack skills ship as plugins in the `{owner}/multi-agent-plugins` marketplace. Selecting a stack = **enabling the matching plugin(s)** in the current repo's `.claude/settings.json` `enabledPlugins`. The `ai-common-toolkit` (accessibility audit, humanizer, Firebase) is always enabled alongside the stack plugin(s).
 
-This replaces the old `stack-swap.sh` mechanic that physically moved skill directories. No SessionStart hook, no directory shuffling - enablement is declarative, per-repo, and versioned.
+On Claude Code the marketplace plugins are the ONLY source of stack skills - nothing is copied into `~/.claude/skills` anymore. A stack that is not enabled here is simply absent from the session. Copilot CLI and Codex CLI have no plugin loader; they receive a local copy filtered to the enabled stacks at install time, which is why step 5 below offers to refresh those copies after a change.
+
+This replaces the old `stack-swap.sh` mechanic that physically moved skill directories in `~/.claude/skills/`. There is no SessionStart hook and no directory shuffling - enablement is declarative, per-repo, and versioned.
 
 ## Usage
 
 ```bash
-multi-agent-stack                  # show which plugins are enabled here
-multi-agent-stack ios              # SwiftUI toolkit + common
-multi-agent-stack android          # Compose toolkit + common
-multi-agent-stack mobile           # iOS + Android + common
-multi-agent-stack backend          # Python / Node spec-driven toolkit + common
-multi-agent-stack frontend         # React / TSX toolkit + common
-multi-agent-stack fullstack        # frontend + backend + common
-multi-agent-stack all              # all four stack toolkits + common
+/multi-agent:stack                 # no arg → native multi-select picker (current state pre-noted)
+/multi-agent:stack ios             # SwiftUI toolkit + common
+/multi-agent:stack ios backend     # any combination, space-separated
+/multi-agent:stack android         # Compose toolkit + common
+/multi-agent:stack mobile          # alias: ios + android + common
+/multi-agent:stack backend         # Python / Node spec-driven toolkit + common
+/multi-agent:stack frontend        # React / TSX toolkit + common (alias: web)
+/multi-agent:stack fullstack       # alias: frontend + backend + common
+/multi-agent:stack all             # all four stack toolkits + common
 ```
 
 ## Stack → plugin map
 
 | Stack | Plugins enabled (all `@multi-agent-plugins`) |
 |---|---|
-| `ios` | `ai-common-engineering-toolkit`, `ai-ios-engineering-toolkit` |
-| `android` | `ai-common-engineering-toolkit`, `ai-android-engineering-toolkit` |
-| `frontend` | `ai-common-engineering-toolkit`, `ai-frontend-engineering-toolkit` |
-| `backend` | `ai-common-engineering-toolkit`, `ai-backend-toolkit` |
-| `mobile` | common + `ai-ios-engineering-toolkit` + `ai-android-engineering-toolkit` |
-| `fullstack` | common + `ai-frontend-engineering-toolkit` + `ai-backend-toolkit` |
+| `ios` | `ai-common-toolkit`, `ai-ios-toolkit` |
+| `android` | `ai-common-toolkit`, `ai-android-toolkit` |
+| `frontend` / `web` | `ai-common-toolkit`, `ai-frontend-toolkit` |
+| `backend` | `ai-common-toolkit`, `ai-backend-toolkit` |
+| `mobile` | common + `ai-ios-toolkit` + `ai-android-toolkit` |
+| `fullstack` | common + `ai-frontend-toolkit` + `ai-backend-toolkit` |
 | `all` | common + all four stack toolkits |
 
+Multiple args union their plugin sets: `ios backend` → common + iOS + backend.
+
 ## Behaviour
 
-1. **No arg → status mode.** Read `.claude/settings.json` (repo) + the global settings and print which `@multi-agent-plugins` plugins are enabled. Modify nothing.
-2. **Arg present → enable mode.** Ensure the marketplace is known (`claude marketplace add {owner}/multi-agent-plugins`), then write the matching `enabledPlugins` entries into the current repo's `.claude/settings.json`, setting the stack toolkits that don't belong to `false`. `ai-common-engineering-toolkit` is always `true`.
-3. **Unknown arg** → show the list above; do not guess.
+1. **No arg → native multi-select picker.** Read `.claude/settings.json` (repo) + `~/.claude/settings.json` (global) to learn the current state, then ask with `AskUserQuestion` (`multiSelect: true`) - NEVER a numbered text menu:
+   - `question` (in `outputLanguage`): which stacks should be active in this repo, noting the currently enabled ones
+   - `header`: "Stacks" (English, UI contract)
+   - `options` (4): `ios` / `android` / `frontend (web)` / `backend`, each `description` (in `outputLanguage`) naming the plugin it enables and marking the ones already enabled with "(currently on)" / "(şu an açık)"
+   - Empty selection or cancel → **status mode**: print the currently enabled `@multi-agent-plugins` plugins and exit without modifying anything.
+2. **Arg(s) present → enable mode.** Accept multiple space-separated stacks. Resolve each through the alias table (`web`→`frontend`, `mobile`→`ios android`, `fullstack`→`frontend backend`, `all`→every stack), union the plugin sets, then write the **current repo's** `.claude/settings.json`.
+3. **Write rules:**
+   - every plugin in the union is set to `true`
+   - every stack toolkit **not** in the union is set to `false` (leave non-`@multi-agent-plugins` entries untouched)
+   - `ai-common-toolkit@multi-agent-plugins` is always `true`
+   - **legacy-key cleanup**: delete any `ai-*-engineering-toolkit@multi-agent-plugins` keys - those plugin names were retired by the `ai-<stack>-toolkit` rename and a stale `true` there enables a plugin that no longer exists in the marketplace
+4. **Unknown arg** → show the table above; do not guess.
+5. **Copilot/Codex refresh offer.** Their local skill copies are filtered to the enabled stacks at install time, so after a change ask (single `AskUserQuestion`, not silent): "Refresh Copilot/Codex local copies now?" - Yes runs `node <pipelineRepo>/install.js --copilot --codex`, No leaves them stale with a one-line warning naming the command to run later. Skip this question entirely when neither `~/.copilot` nor `~/.codex` exists.
+
+## Implementation
+
+```bash
+REPO_SETTINGS=".claude/settings.json"
+MP="multi-agent-plugins"
+
+# --- ensure the marketplace is known (idempotent) -------------------------
+if ! claude marketplace list 2>/dev/null | grep -q "$MP"; then
+  claude marketplace add {owner}/multi-agent-plugins 2>/dev/null \
+    || echo "note: add the marketplace once with: claude marketplace add {owner}/multi-agent-plugins"
+fi
+
+COMMON="ai-common-toolkit@${MP}"
+IOS="ai-ios-toolkit@${MP}"
+ANDROID="ai-android-toolkit@${MP}"
+FRONTEND="ai-frontend-toolkit@${MP}"
+BACKEND="ai-backend-toolkit@${MP}"
+
+# resolve every arg through the alias table, union the ON set
+ON="$COMMON"
+for ARG in "$@"; do
+  case "$ARG" in
+    ios)            ON="$ON $IOS" ;;
+    android)        ON="$ON $ANDROID" ;;
+    frontend|web)   ON="$ON $FRONTEND" ;;
+    backend)        ON="$ON $BACKEND" ;;
+    mobile)         ON="$ON $IOS $ANDROID" ;;
+    fullstack)      ON="$ON $FRONTEND $BACKEND" ;;
+    all)            ON="$ON $IOS $ANDROID $FRONTEND $BACKEND" ;;
+    *) echo "Unknown stack '$ARG'. One of: ios android mobile backend frontend web fullstack all"; exit 1 ;;
+  esac
+done
+```
+
+After resolving `$ON`, edit `.claude/settings.json` (create `{ "enabledPlugins": {} }` if absent) so that:
+- every plugin in `$ON` is set to `true`,
+- every stack toolkit **not** in `$ON` is set to `false` (leave non-`@multi-agent-plugins` entries untouched),
+- `ai-common-toolkit@multi-agent-plugins` is always `true`,
+- every `ai-*-engineering-toolkit@multi-agent-plugins` key is **deleted** (retired names).
+
+Use the Read + Edit/Write tools (JSON must stay valid). Then print the resulting `enabledPlugins` block and run step 5 (Copilot/Codex refresh offer).
 
 ## Notes
 
 - Enablement is per-repo and declarative - commit `.claude/settings.json` so teammates get the same stack.
-- Restart the conversation to pick up newly enabled plugins.
+- Restart the conversation (or reload the window) for Claude Code to pick up newly enabled plugins.
 - Pipeline Phase 1 stack detection is independent (it reads project files); `stack` only sets which plugin skill set is active.
 - The old `stack-swap.sh` skill-dir swap has been removed; stack selection is entirely plugin enablement.

package/pipeline/skills/shared/core/multi-agent-store-ready/SKILL.md

@@ -37,7 +37,7 @@ doc is the contract.
 |---|---|---|
 | 1 Static | `ios_app_store_audit` 18 rules, needs an `.xcarchive` | `android_apk_audit` + `google-play-compliance` 21 rules, needs an `.aab` |
 | 2 Authoritative | `ios_testflight_validate` → `altool --validate-app`, needs credentials | `SKIPPED`  -  Play's authoritative check is server-side only and no client ships here |
-| 3 Policy | `app-store-review` skill vs repo source | `play-store-review` skill vs repo source |
+| 3 Policy | `ai-ios-toolkit:app-store-review` skill vs repo source | `ai-android-toolkit:play-store-review` skill vs repo source |
 
 Gate 2's asymmetry is reported as an asymmetry. An Android run clears at most 2 of 3
 gates and must never print `passed`. A skipped gate is never folded into the pass

package/pipeline/skills/shared/core/multi-agent-sync/SKILL.md

@@ -31,8 +31,8 @@ Run all steps automatically:
 
 ```
 Step 1: DETECT      Compare timestamps, find stale targets
-Step 2: COPILOT     Claude Code -> Copilot CLI (instructions + 49 sub-command skills)
-Step 2b: CODEX      Claude Code -> Codex CLI (1 router skill + 49 specs as refs + 8 agent TOML)
+Step 2: COPILOT     Claude Code -> Copilot CLI (instructions + 51 sub-command skills)
+Step 2b: CODEX      Claude Code -> Codex CLI (1 router skill + 51 specs as refs + 8 agent TOML)
 Step 3: REPO        Claude Code -> pipeline repo (genericized, personal data scrub)
 Step 3d: DEV-TOOLKIT Companion MCP server -> detect movement, ship gates, commit + publish
 Step 4: WEBSITE     Version + phase/model counts -> {website-host} (i18n + projects.ts)
@@ -91,14 +91,14 @@ If nothing is stale -> report "All targets up to date" and stop.
    - `~/.claude/multi-agent-preferences.json`
    - `~/.claude/CLAUDE.md`, `~/.claude/rules/`, `~/.claude/knowledge/`
    - `~/.claude/scripts/`  -  EXCEPT `pre-commit-check.sh` and `build-stack-plugins.mjs` (generic, synced)
-   - Step 3c (PLUGINS): rebuild the `{owner}/multi-agent-plugins` marketplace from `shared/external` via `build-stack-plugins.mjs` (bumps changed plugins' patch version), then commit + push the plugins repo
+   - Step 3c (PLUGINS): rebuild the `{owner}/multi-agent-plugins` marketplace from `shared/external` via `build-stack-plugins.mjs` (bumps changed plugins' patch version), then commit + push the plugins repo. On any change also verify help + README freshness: every plugin registers `./skills/tools/help` in plugin.json, `tools/bump.py --check` shows no DRIFT, `tools/validate.py` clean (CHANGELOG entry per bumped version), and pipeline help/READMEs reflect any command-surface change from Step 3
    - `~/.claude/settings.json`
 
 
 ## Codex Sync (Step 2b)
 
 This step does **not** hand-copy files. The Codex tree is a *transform* of the Claude
-tree, not a mirror: the 49 sub-command specs become reference files (Codex silently
+tree, not a mirror: the 51 sub-command specs become reference files (Codex silently
 truncates its skills block  -  see `cross-cli-contract.md` 2.6), every reference to a
 CLI-owned tree is retargeted (`agents/<persona>.md` becomes `.toml`, the dispatcher
 becomes the router skill), the 8 personas are regenerated as TOML with a model +
@@ -223,14 +223,14 @@ When invoked with the `release` argument:
 |-------------|-------------|
 | `~/.claude/commands/multi-agent/{cmd}.md` | `~/.copilot/skills/multi-agent-{cmd}/SKILL.md` |
 
-**49 commands are synced** (canonical inventory  -  must match `cross-cli-contract.md` section 1; drift = contract violation):
+**51 commands are synced** (canonical inventory  -  must match `cross-cli-contract.md` section 1; drift = contract violation):
 
 ```
-analysis, analysis-resolve, autopilot, build-optimize, channels, create-jira, design-check, dev,
+analysis, analysis-resolve, autopilot, build-optimize, channels, complaint-analysis, create-jira, design-check, dev,
 dev-autopilot, dev-local, dev-local-autopilot, diff-explain, forget, garbage-collect,
 help, ios-coding-standard, issue, jira, kill, language, local,
-local-autopilot, log, manual-test, prune-logs, purge, refactor, resume, review, review-issue, review-jira,
-routines, save, scan, search, setup, ship, stack, status, store-ready, sync, test, test-accessibility,
+local-autopilot, log, manual-test, prune-logs, prune-prompts, purge, refactor, resume, review, review-issue, review-jira,
+routines, save, scan, search, setup, resume-local, stack, status, store-ready, sync, test, test-accessibility,
 test-dark-mode, test-dynamic-type, test-screenshots, testflight-validation, uninstall, update
 ```
 

package/pipeline/skills/shared/core/multi-agent-testflight-validation/SKILL.md

@@ -42,7 +42,7 @@ Unchanged from before the merge, on the iOS path:
 |---|---|---|
 | **1. Static** | `ios_app_store_audit` (18 rules, real ITMS codes) | an `.xcarchive` |
 | **2. Authoritative** | `ios_testflight_validate` → `altool --validate-app` | an `.ipa` + credentials |
-| **3. Policy** | `app-store-review` skill vs repo source | repo checkout |
+| **3. Policy** | `ai-ios-toolkit:app-store-review` skill vs repo source | repo checkout |
 
 A skipped gate is never folded into the pass count, and the run never uploads. The
 report lands in `~/StoreChecks/ios-<repo>-<branch>-<timestamp>/report.md`.

package/pipeline/skills/shared/external/ios-coding-standard/modules/_TEMPLATE.yml

@@ -18,7 +18,7 @@
 
 module: <YourModule>
 path: <Path/To/Module>
-role: feature          # feature | common | app
+role: feature # feature | common | app
 registry_version: 1.1.0
 updated: <YYYY-MM-DD>
 
@@ -52,7 +52,7 @@ dialect:
 # An unfilled slot disables the rules that read it.
 vocabulary:
   ScreenRoot: <Sources/<Module>/Screens>
-  ScreenRoleSuffixes: []      # e.g. [Scene, ViewModel, UseCase, Repository, Mapper]
+  ScreenRoleSuffixes: [] # e.g. [Scene, ViewModel, UseCase, Repository, Mapper]
   HandlerName: "<Screen><Suffix>"
 
 # --- Sensitive data inventory -----------------------------------------