@mmerterden/multi-agent-pipeline 16.14.0 → 16.16.0

package/CHANGELOG.md

@@ -16,6 +16,38 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ## [Unreleased]
 
+## [16.16.0] - 2026-08-31
+
+### Added
+
+- **`/multi-agent:steer #N "<instruction>"` corrects a run without stopping it.** `kill` deletes a task and `resume` picks a stopped one back up; neither helps while a phase is in flight, so a correction that arrived mid-run had nowhere to go and the run finished in the wrong direction. The command queues one instruction into `state.pendingSteer`, written through `write-state.mjs` rather than by editing a file the running task is also writing to, and the next phase reads it at entry, applies it, and marks it consumed with `appliedAt`/`appliedPhase` while keeping the record as a trace. Entry rather than mid-phase on purpose: a phase that changes target halfway discards the work it already did, which is the outcome the command exists to avoid. An instruction that contradicts an approved plan halts for the user instead of silently rewriting it. `smoke-steer.sh` walks the whole path - schema, writer, phase-entry contract, help and both READMEs - because a command whose only value is a phase reading the field back is exactly the shape that ships green and dead.
+- **`state.rev`, a monotonic revision counter.** The advisory lock makes a single write atomic and nothing more; it does not cover the gap between a phase reading state and writing it back, and `steer` above puts a deliberate second writer inside that gap. A reader that keeps the `rev` it read can tell the record moved underneath it instead of silently dropping whatever landed in between. Every successful write bumps `rev`; the writer takes the higher of the on-disk value and the incoming patch, so a stale patch cannot walk the counter backwards. A record written before this has none - treat a missing `rev` as 0.
+- **`npm run gate:linux`** runs the ci-lite job on a real Ubuntu image through `act`, covering the Linux leg and a clean `npm ci` that the macOS pre-push gate cannot answer. Deliberately not part of `npm run gate`: `act` is not installed everywhere, and a required gate that cannot run is the failure ADR-0011 exists to avoid.
+
+### Fixed
+
+- **A live lock holder could lose its lock to the age rule.** `write-state.mjs` judged a lock stale when its holder PID was dead **or** the file was older than 30 seconds - age checked first, and returning on its own. So a writer that was demonstrably alive had its lock deleted the moment the file aged out, and the next writer overwrote the update behind it. Liveness now outranks age: an alive holder keeps its lock, `WRITE_STATE_LOCK_STALE_MS` applies only to a lock with no readable PID, and a new `WRITE_STATE_LOCK_ABANDON_MS` (default ten times that) is the last-resort ceiling for a recycled PID. No heartbeat: the writer holds the lock across one synchronous write, so there is no window for a timer to refresh anything, and a refreshed timestamp is weaker evidence than the liveness probe already gives.
+- **Prettier was enforced nowhere, and `main` was failing it.** `format:check` was declared in `package.json`, wired into ci-lite, and ci-lite has not executed since 2026-07-02; `eslint-config-prettier` only disables conflicting rules, it does not check formatting. Twenty-five files were failing the project's own declared style. `format:check` now runs inside `npm test`, so the pre-push gate carries it, and a `.prettierignore` exempts two trees with reasons: git worktrees checked out inside the repo, and `pipeline/skills/shared/external/`, which stays byte-identical to upstream so a re-derivation diff remains readable.
+- **The installed-tree leak sweep was running against a private copy of the pattern list, drifted to under half of it.** `smoke-install-leak-gate.sh` carried its own patterns under a comment saying it mirrored `smoke-personal-data.sh`. It did not: personal domains, the maintainer's name, one spelling of the machine username, corporate symbol prefixes and product literals were all missing, so the sweep that runs on every `npm test` was weaker than the one in ci-lite - which has not executed since 2026-07-02. The step now delegates to the file that owns the list, and ci-lite's inline copy of the same dance was replaced by a call to that smoke. Three shapes the private copy caught and the owner did not (a trailing-underscore username compound, the bare organisation name, an address with no local part) were added to the owner, so the union is preserved rather than traded away - and the first of them immediately caught a real leak that had been sitting in `docs/internal/`, which the narrower pattern could not match. That file is not in the published tarball, so nothing reached a user.
+
+### Changed
+
+- **CI is dormant in the repository, not only in platform state.** `test.yml` and `ci-lite.yml` still declared `on: push` and `on: pull_request` while both had already been disabled from the Actions UI - true only for a fork, or for whoever re-enables one without reading further. Both trigger blocks are commented out with the reason beside them, `workflow_dispatch` stays live, and [ADR-0011](./docs/adr/0011-dormant-ci.md) records why, what stays unverified while they sleep (the `windows-test` job, a clean Linux runner, a clean `npm ci` from the lockfile) and the two-line wake-up. `CONTRIBUTING.md` now tells an outside contributor that no workflow will run on their PR and to paste the `npm run gate` output instead of waiting for a green tick.
+- **The scorecard covers moderate advisories and registry signatures.** It measured high and critical only; `--audit-level=moderate` and `npm audit signatures` lived in ci-lite and stopped running with it. Both are scorecard metrics now, the moderate ceiling locked at the measured value of 0. An unreachable registry fails the signature metric rather than skipping it: a supply-chain check that reports green when it could not reach the registry is worse than no check.
+
+## [16.15.0] - 2026-08-30
+
+### Fixed
+
+- **Usage reporting only ever reported runs that finished.** The reporter was called from Phase 7, and Phase 7 is the phase a run is least likely to reach: across the whole local log history, exactly one run got there. So the admin dashboard read zero of everything while the table held real rows, and the question it exists to answer - who is using this - had no answer. Phase 0's exit gate now reports the run as started, on the same upsert key, so Phase 7 replaces that row with the final state and nothing is double-counted. The read side of the same bug is fixed in the dashboard: its rollup folded only `terminal` rows, and an unfinished run was scored `fail`.
+
+
+### Changed
+
+- **`/multi-agent:help` now covers the plugins and the toolkit MCP.** It named both in passing - a `refactor` line, a `sync` line, a `design-check` footnote - and never said what they are or how to call one. The catalog gained a Plugins & tools block in both languages: how a stack skill is invoked, which plugins are always on, and the MCP's 83 tools grouped by what they drive (device control, web, design comparison, store and accessibility audits), with the note that its registration survives uninstall. Paid for by compressing the `design-check` entry, which was restating its own contract in fifteen lines: 353 tokens reclaimed before a byte was added, so the file sits within its 8500 ceiling. The tool count that went in with it was wrong and is now absent: `rules/outside-the-pipeline.md` said 83 while the server serves 84, and the pipeline cannot check either number because it does not vendor the toolkit. Both places now say 80+, which stays true; the exact count lives in the toolkit's own README, where a gate boots the server and compares `tools/list` against it.
+
+- **ADR-0010 now says where its numbers come from.** The coverage and token figures were published with no path to the harness that produced them, because the harness names a private codebase and cannot ship. It lives beside the graph it measured, under `~/.claude/knowledge/<project>/gate/`, and the ADR points at it: a number nobody can re-derive is an assertion, not a measurement.
+
 ## [16.14.0] - 2026-08-28
 
 ### Added

package/README.md

@@ -89,7 +89,7 @@ Depth, autopilot and `--local` are the only knobs on the run itself; everything
 
 ## Commands
 
-`/multi-agent` plus 54 sub-commands. `/multi-agent:help` renders the same catalog in your terminal, in your `outputLanguage`.
+`/multi-agent` plus 55 sub-commands. `/multi-agent:help` renders the same catalog in your terminal, in your `outputLanguage`.
 
 ### Pipeline entries
 
@@ -109,6 +109,7 @@ Depth, autopilot and `--local` are the only knobs on the run itself; everything
 | `/multi-agent:log [#N]` | Show a task's `agent-log.md` (most recent by default) |
 | `/multi-agent:resume [#N]` | Carry a stopped or failed task on from its last phase |
 | `/multi-agent:kill [#N]` | Stop a task, remove its worktree and branch |
+| `/multi-agent:steer #N "<instruction>"` | Correct a running task without stopping it; applied at the next phase boundary |
 | `/multi-agent:search` | Ranked search across every task log; `--semantic` queries the triage corpus |
 | `/multi-agent:garbage-collect` | Sweep leftover scratch, orphan worktrees and offloaded payloads. Dry-run first |
 | `/multi-agent:prune-logs` | Delete per-task logs by age / project / task. Audit trail and metrics kept |
@@ -208,13 +209,13 @@ This enables the matching plugin (+ the shared `ai-common` plugin) in the repo's
 
 ## Tool support
 
-The pipeline runs natively on **Claude Code**, **Copilot CLI** and **Codex CLI** - all three install from the same `pipeline/` source and get the same 54 commands.
+The pipeline runs natively on **Claude Code**, **Copilot CLI** and **Codex CLI** - all three install from the same `pipeline/` source and get the same 55 commands.
 
 | Tool | Flag | What it installs |
 |---|---|---|
 | Claude Code | `--claude` (default) | slash commands + skills + agents + `PreToolUse` secret-scan hook |
-| Copilot CLI | `--copilot` | instructions + 54 sub-command skills + scripts |
-| Codex CLI | `--codex` | one router skill + 54 specs as refs + 8 agent TOML + `AGENTS.md` block + `codex mcp add` |
+| Copilot CLI | `--copilot` | instructions + 55 sub-command skills + scripts |
+| Codex CLI | `--codex` | one router skill + 55 specs as refs + 8 agent TOML + `AGENTS.md` block + `codex mcp add` |
 
 Filter skills by stack with `--platform=ios\|android\|all`.
 

package/README.tr.md

@@ -89,7 +89,7 @@ Koşunun kendisinde ayarlanabilen tek şey derinlik, autopilot ve `--local`; ger
 
 ## Komutlar
 
-`/multi-agent` ve 54 alt komut. `/multi-agent:help` aynı katalogu terminalde, `outputLanguage` ayarına göre gösterir.
+`/multi-agent` ve 55 alt komut. `/multi-agent:help` aynı katalogu terminalde, `outputLanguage` ayarına göre gösterir.
 
 ### Pipeline girişleri
 
@@ -109,6 +109,7 @@ Koşunun kendisinde ayarlanabilen tek şey derinlik, autopilot ve `--local`; ger
 | `/multi-agent:log [#N]` | Görevin `agent-log.md` dosyası (varsayılan: en son görev) |
 | `/multi-agent:resume [#N]` | Durmuş ya da hata almış görevi kaldığı fazdan sürdürür |
 | `/multi-agent:kill [#N]` | Görevi durdurur, worktree'sini ve branch'ini siler |
+| `/multi-agent:steer #N "<talimat>"` | Koşan bir görevi durdurmadan düzeltir; talimat bir sonraki faz sınırında uygulanır |
 | `/multi-agent:search` | Tüm görev loglarında sıralamalı arama; `--semantic` triyaj corpus'unu sorgular |
 | `/multi-agent:garbage-collect` | Artık scratch, sahipsiz worktree ve offload edilmiş payload'ları süpürür. Önce dry-run |
 | `/multi-agent:prune-logs` | Görev loglarını yaş / proje / görev filtresiyle siler. Denetim izi ve metrikler kalır |
@@ -208,13 +209,13 @@ Bu, ilgili plugin'i (+ ortak `ai-common` plugin'ini) repo'nun `.claude/settings.
 
 ## Araç desteği
 
-Pipeline **Claude Code**, **Copilot CLI** ve **Codex CLI** üzerinde native çalışır - üçü de aynı `pipeline/` kaynağından kurulur ve aynı 54 komutu alır.
+Pipeline **Claude Code**, **Copilot CLI** ve **Codex CLI** üzerinde native çalışır - üçü de aynı `pipeline/` kaynağından kurulur ve aynı 55 komutu alır.
 
 | Araç | Bayrak | Ne kurar |
 |---|---|---|
 | Claude Code | `--claude` (varsayılan) | slash komutları + skill'ler + agent'lar + `PreToolUse` secret-scan hook'u |
-| Copilot CLI | `--copilot` | talimatlar + 54 alt-komut skill'i + script'ler |
-| Codex CLI | `--codex` | bir router skill + ref olarak 54 spec + 8 agent TOML + `AGENTS.md` bloğu + `codex mcp add` |
+| Copilot CLI | `--copilot` | talimatlar + 55 alt-komut skill'i + script'ler |
+| Codex CLI | `--codex` | bir router skill + ref olarak 55 spec + 8 agent TOML + `AGENTS.md` bloğu + `codex mcp add` |
 
 Skill'leri stack'e göre filtrele: `--platform=ios\|android\|all`.
 

package/docs/adr/0010-own-code-graph.md

@@ -96,6 +96,12 @@ domain words, the graph scored 63.3% against 32.0% at 10,937 tokens against
 24,983. The value is in narrowing an open-ended search, not in replacing a
 grep for a name you already know.
 
+The harness, the ten graded questions and the raw per-question result live
+beside the graph they measured, under `~/.claude/knowledge/<project>/gate/`.
+They stay there rather than in this repo because they name the private
+codebase's files and symbols, and a number nobody can re-derive is an assertion
+rather than a measurement: `node run-gate.mjs` reproduces the table above.
+
 That measurement covers the context each strategy assembles, not the quality
 of an answer written from it. graphify's numbers measure the latter. The two
 are not directly comparable and this ADR does not claim they are.

package/docs/adr/0011-dormant-ci.md

@@ -0,0 +1,87 @@
+# 11. CI stays in the repository but dormant; the pre-push gate is primary
+
+**Status:** Accepted · 2026-08-31
+
+## Context
+
+The repository carries four workflows. `test.yml` runs the full chain across a
+macOS/Ubuntu matrix plus a separate `windows-test` job, `ci-lite.yml` runs a
+single cheap Ubuntu job, `release.yml`
+publishes on a version tag and `live-eval.yml` is a manual, budgeted evaluation.
+
+None of the first three has executed since 2026-07-02. That day's last run took
+318 seconds and passed; every attempt after it - five, the last on 2026-07-25 -
+finished in about four seconds with zero steps recorded, which is the shape of a
+quota block rather than a test failure. All three were then disabled from the
+Actions UI. That stopped the noise but moved the fact out of the repository:
+the files still declared `on: push` and `on: pull_request`, so anyone reading
+them, forking them, or re-enabling the workflow inherited a promise the project
+does not keep.
+
+Meanwhile the gate did not disappear. `pipeline/scripts/pre-push-check.sh` runs
+the canonical `npm test` chain, stamps the exact tree it verified, and refuses
+any push whose tree carries no stamp. It is installed as `.git/hooks/pre-push`.
+So the question was never "is this code verified" but "verified where, and what
+does that leave uncovered".
+
+There is no plan to run this on a server in the near term. There is a possible
+later direction (an issue-triggered run that starts development automatically),
+which argues for keeping the workflow files rather than deleting them.
+
+## Decision
+
+Keep every workflow file. Comment out the `push` and `pull_request` triggers in
+`test.yml` and `ci-lite.yml`, leaving `workflow_dispatch` live, and state the
+dormancy in the file header next to the triggers.
+
+Treat `npm run gate` as the primary gate, not as a fallback, and close the parts
+of the ci-lite job that had no local equivalent: `format:check` joins the `npm
+test` chain, the install dry-run plus personal-data audit moves onto the
+existing `smoke-install-leak-gate.sh` (which was already doing the same install
+into a temp HOME, against a private copy of the pattern list that had drifted to
+less than half of it), the scorecard gains the two dependency checks that lived
+only in ci-lite - moderate advisories and `npm audit signatures` - and the Linux
+leg is reachable as `npm run gate:linux` through `act`.
+
+Waking CI is a two-line edit: uncomment the trigger blocks and re-enable the
+workflow in the Actions UI. Nothing else in the files changes.
+
+## Consequences
+
+A reader of the repository now sees what actually runs. A fork does not
+inherit surprise runs that fail for a reason belonging to this account.
+
+The local gate runs the canonical chain rather than a hand-picked subset: the
+hook calls `npm test`, so a step added to that script is a step the hook runs.
+`ci-lite.yml` still enumerates its steps one by one and can therefore drift
+behind the script - which is a further reason the local gate, not the workflow,
+is the one being trusted.
+
+What stays unverified while the workflows sleep, stated rather than implied:
+
+- Windows. `lib/credential-store.sh` has a Windows branch exercised only by
+  `test.yml`'s separate `windows-test` job (the matrix itself is Ubuntu and
+  macOS).
+- A clean `npm ci` from the lockfile into an empty tree. The local gate runs
+  against an installed `node_modules` that has accumulated across months.
+- Linux, unless someone actually runs `npm run gate:linux`. It is deliberately
+  not a required step: `act` is not installed everywhere, and a required gate
+  that cannot run is the failure this ADR exists to avoid.
+
+`release.yml` keeps its tag trigger and stays disabled in the UI. Publishing is
+done locally from a clean tag clone, so the tag flow is what a future wake-up
+would want unchanged.
+
+## Alternatives
+
+**Pay for Actions minutes.** Buys the matrix and the clean room. Rejected for
+now: there is no server-side plan to justify a recurring cost, and the local
+gate already covers everything except the three items listed above.
+
+**Make this machine a self-hosted runner.** Free and real. Rejected: it covers
+only macOS, disappears when the laptop is closed, and a self-hosted runner on a
+public repository executes code from any fork's pull request.
+
+**Delete the workflows.** Honest but lossy. The files encode which steps matter
+and in what order, and the possible issue-triggered direction would have to
+rebuild them from nothing.

package/docs/adr/README.md

@@ -20,6 +20,7 @@ Format: lightly adapted from [Michael Nygard's ADR template](https://cognitect.c
 | [0008](./0008-installer-modularization-and-secret-leak-defense.md) | Installer modularization + secret-leak defense | Accepted (amended v10.7.0: adapter module removed) |
 | [0009](./0009-claude-stack-skills-plugin-only.md) | Claude Code stack skills are plugin-only; local copy retired | Accepted (supersedes ADR-0006 install-destination clause) |
 | [0010](./0010-own-code-graph.md) | Own code graph, referenced from graphify, not forked | Accepted |
+| [0011](./0011-dormant-ci.md) | CI dormant in-repo; pre-push gate is primary | Accepted |
 
 ## Writing a New ADR
 

package/docs/architecture.md

@@ -117,7 +117,7 @@ graph TB
     end
 
     subgraph "Pipeline Specs"
-        CMD[commands/<br/>54 command files]
+        CMD[commands/<br/>55 command files]
         AGT[agents/<br/>8 agent personas]
         RUL[rules/<br/>12 domain rules]
         PHS[multi-agent-refs/phases/<br/>phase specs + contracts]
@@ -170,7 +170,7 @@ revisions of this diagram - Codex CLI and the two independently-shipped repos
 graph TD
     CC["Claude Code<br/>(source of truth)"]
     COP["Copilot CLI<br/>(instructions + 51 skills)"]
-    COD["Codex CLI<br/>(1 router skill + 54 refs)"]
+    COD["Codex CLI<br/>(1 router skill + 55 refs)"]
     REPO["Pipeline Repo<br/>(npm package)"]
     WEB["Website"]
     PLUGREPO["multi-agent-plugins<br/>(5 stack plugins, own repo)"]

package/docs/ecosystem.md

@@ -5,7 +5,7 @@ separately, wired together at install time and at run time:
 
 | Repo | What it owns | Ships as |
 |---|---|---|
-| **`multi-agent-pipeline`** (this repo) | Orchestration: the 8-phase flow, the 54 slash commands, quality gates, review/triage, cross-CLI parity | npm package (`@mmerterden/multi-agent-pipeline`), installs itself onto Claude Code / Copilot CLI / Codex CLI |
+| **`multi-agent-pipeline`** (this repo) | Orchestration: the 8-phase flow, the 55 slash commands, quality gates, review/triage, cross-CLI parity | npm package (`@mmerterden/multi-agent-pipeline`), installs itself onto Claude Code / Copilot CLI / Codex CLI |
 | **`multi-agent-plugins`** | Stack knowledge: per-platform component/lifecycle skills (iOS, Android, Frontend, Backend) + shared knowledge | Claude Code marketplace, 5 independently-versioned plugins |
 | **`multi-agent-toolkit-mcp`** | The pipeline's hands on devices and browsers: 80 MCP tools across 6 categories (simulator/emulator control, accessibility audit, store compliance, web automation, Figma-vs-mock design audit, an agent-DSL batch runner) | npm package, registered as a standard stdio MCP server on every host |
 
@@ -18,7 +18,7 @@ Either can be swapped or removed without touching the other two's source.
 graph LR
     subgraph PIPE ["multi-agent-pipeline (orchestrator)"]
         direction TB
-        PHASES["8 phases · 54 commands"]
+        PHASES["8 phases · 55 commands"]
         GATES["deterministic gates + review triage"]
     end
 
@@ -64,8 +64,8 @@ only those:
 graph TD
     CC["Claude Code<br/>~/.claude/commands/multi-agent/<br/>(source of truth)"]
 
-    CC -->|"Step 2: copy + reformat<br/>54 sub-command skills"| COP["Copilot CLI<br/>~/.copilot/skills/"]
-    CC -->|"Step 2b: transform<br/>(install.js --codex)"| COD["Codex CLI<br/>1 router skill + 54 refs<br/>+ 8 agent TOML"]
+    CC -->|"Step 2: copy + reformat<br/>55 sub-command skills"| COP["Copilot CLI<br/>~/.copilot/skills/"]
+    CC -->|"Step 2b: transform<br/>(install.js --codex)"| COD["Codex CLI<br/>1 router skill + 55 refs<br/>+ 8 agent TOML"]
     CC -->|"Step 3: genericize<br/>(strip personal data)"| REPO["multi-agent-pipeline repo<br/>pipeline/"]
     CC -->|"Step 4: version + feature sync"| WEB["Website<br/>projects.ts / i18n.tsx"]
 
@@ -153,7 +153,7 @@ measurements behind this table):
 
 | | Claude Code | Copilot CLI | Codex CLI |
 |---|---|---|---|
-| **Pipeline commands** | 54 slash-command skills, native | 54 skills, `multi-agent-{cmd}` naming, copied in | 1 router skill (`multi-agent`) + 54 command specs as reference files - Codex silently truncates its skills block past a few dozen entries, so sub-commands are not peer skills here |
+| **Pipeline commands** | 55 slash-command skills, native | 55 skills, `multi-agent-{cmd}` naming, copied in | 1 router skill (`multi-agent`) + 55 command specs as reference files - Codex silently truncates its skills block past a few dozen entries, so sub-commands are not peer skills here |
 | **Stack plugins** | Marketplace plugin, loaded natively, resolved by `.claude/settings.json` enabled-list | Enabled plugin's authored skills copied flat into `~/.copilot/skills/`; `knowledge/` **not** re-copied (already delivered via `shared/external`) | Copied as reference files under `~/.codex/multi-agent-refs/skills/`, plugin-prefixed on name clash (e.g. `architecture` → `ai-ios-toolkit-architecture`) |
 | **Component dispatch (Phase 3)** | Marketplace plugin's `create-component`/`create-screen` skill via the Skill tool | No plugin loader - the enabled stack plugin's authored skills (incl. `create-component`) are copied flat into `~/.copilot/skills/` at install time (the old frozen `figma-*` copies are pruned, they were never a fallback) | Not part of the enforced parity axis; classification + state-shape must match, skill *inventory* does not |
 | **multi-agent-toolkit-mcp** | `claude mcp add multi-agent-toolkit -- npx -y @mmerterden/multi-agent-toolkit-mcp` | `copilot mcp add multi-agent-toolkit -- npx -y @mmerterden/multi-agent-toolkit-mcp` | `codex mcp add multi-agent-toolkit -- npx -y @mmerterden/multi-agent-toolkit-mcp` (skipped with a warning if `codex` isn't on `PATH`) |

package/install/_common.mjs

@@ -523,7 +523,6 @@ export function wipeDir(dir) {
   }
 }
 
-
 /**
  * @param {string} a
  * @param {string} b

package/install/_dev-only-files.mjs

@@ -64,6 +64,7 @@ const DEV_ONLY_TOOLING = Object.freeze([
   "validate-schemas.mjs", // validates the repo's own schema files, needs ajv
   "sync-parity-check.sh",
   "benchmark-phase-0.sh",
+  "gate-linux.sh", // drives .github/workflows/ci-lite.yml through act; no consumer has either
 ]);
 
 /** Eval harnesses (`eval-*.mjs`) read `pipeline/eval/**`, which never ships. */

package/install/claude.mjs

@@ -97,7 +97,14 @@ export function installClaude(ctx) {
   installSchemas(pipelineSrc, CLAUDE_SCHEMAS, useSymlinks);
   installLib(pipelineSrc, CLAUDE_LIB, useSymlinks);
   runPreDeployScans(pipelineSrc);
-  installSkills({ pipelineSrc, dest: CLAUDE_SKILLS, indexOnly, useSymlinks, platformFlag, pruneExternal });
+  installSkills({
+    pipelineSrc,
+    dest: CLAUDE_SKILLS,
+    indexOnly,
+    useSymlinks,
+    platformFlag,
+    pruneExternal,
+  });
   ensureClaudeMd(home, pipelineSrc);
   ensurePreferences(PREFS_PATH, pipelineSrc);
   configureSettings(home);
@@ -458,7 +465,9 @@ function installSkills(opts) {
     console.log(`    -> pruned ${orphans} stale flat skill file(s) from an older layout`);
   }
 
-  console.log(`    -> ${claudeSkillCount} skill files installed to ${dest} (stack skills: marketplace plugins)`);
+  console.log(
+    `    -> ${claudeSkillCount} skill files installed to ${dest} (stack skills: marketplace plugins)`,
+  );
 
   // The shared skills README described the full local catalog; with the catalog
   // gone it would document skills that are not here. Drop it, including copies
@@ -604,7 +613,9 @@ function migratePreManifestExternalSkills(dest, externalSrc, opts) {
     );
   }
   if (flagged > 0) {
-    console.log(`    -> --prune-external: removed ${flagged} catalog-named skill dir(s) that had local differences`);
+    console.log(
+      `    -> --prune-external: removed ${flagged} catalog-named skill dir(s) that had local differences`,
+    );
   }
   if (leftover.length > 0) {
     console.log(
@@ -614,7 +625,6 @@ function migratePreManifestExternalSkills(dest, externalSrc, opts) {
   }
 }
 
-
 function ensureClaudeMd(home, pipelineSrc) {
   console.log("  [Claude Code] Checking CLAUDE.md template...");
   const CLAUDE_MD = join(home, ".claude", "CLAUDE.md");

package/install/index.mjs

@@ -46,7 +46,14 @@ export async function runInstall(argv) {
   //   `multi-agent-pipeline install --all` (via bin, argv[2]="install")
   const flags = argv.slice(2).filter((a) => a !== "install");
 
-  const KNOWN_FLAGS = [...TOOL_FLAGS, "--all", "--link", "--index-only", "--dry-run", "--prune-external"];
+  const KNOWN_FLAGS = [
+    ...TOOL_FLAGS,
+    "--all",
+    "--link",
+    "--index-only",
+    "--dry-run",
+    "--prune-external",
+  ];
   const KNOWN_PREFIXES = ["--target=", "--platform="];
   const unknown = flags.filter(
     (f) =>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "16.14.0",
+  "version": "16.16.0",
   "description": "8-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",
@@ -14,7 +14,7 @@
   },
   "scripts": {
     "start": "node index.js",
-    "test": "node --test test/*.test.mjs && node pipeline/scripts/run-smokes.mjs && node pipeline/scripts/lint-skills.mjs && node pipeline/scripts/lint-mcp-refs.mjs && node pipeline/scripts/eval-triage.mjs && node pipeline/scripts/eval-golden-tasks.mjs && node pipeline/scripts/eval-intent.mjs && node pipeline/scripts/eval-recall.mjs && node pipeline/scripts/validate-schemas.mjs && node pipeline/scripts/validate-prefs.mjs && node pipeline/scripts/scorecard.mjs",
+    "test": "npm run format:check && node --test test/*.test.mjs && node pipeline/scripts/run-smokes.mjs && node pipeline/scripts/lint-skills.mjs && node pipeline/scripts/lint-mcp-refs.mjs && node pipeline/scripts/eval-triage.mjs && node pipeline/scripts/eval-golden-tasks.mjs && node pipeline/scripts/eval-intent.mjs && node pipeline/scripts/eval-recall.mjs && node pipeline/scripts/validate-schemas.mjs && node pipeline/scripts/validate-prefs.mjs && node pipeline/scripts/scorecard.mjs",
     "test:unit": "node --test test/*.test.mjs",
     "test:smoke": "node pipeline/scripts/run-smokes.mjs",
     "lint:skills": "node pipeline/scripts/lint-skills.mjs",
@@ -22,10 +22,11 @@
     "test:coverage": "c8 --clean --reporter=none node --test test/*.test.mjs && c8 --clean=false --check-coverage --reporter=text --reporter=lcov node pipeline/scripts/run-smokes.mjs",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
-    "format": "prettier --write \"**/*.{js,mjs,json,yml}\" --ignore-path .gitignore",
-    "format:check": "prettier --check \"**/*.{js,mjs,json,yml}\" --ignore-path .gitignore",
+    "format": "prettier --write \"**/*.{js,mjs,json,yml}\" --ignore-path .gitignore --ignore-path .prettierignore",
+    "format:check": "prettier --check \"**/*.{js,mjs,json,yml}\" --ignore-path .gitignore --ignore-path .prettierignore",
     "scorecard": "node pipeline/scripts/scorecard.mjs",
-    "gate": "bash pipeline/scripts/pre-push-check.sh --run"
+    "gate": "bash pipeline/scripts/pre-push-check.sh --run",
+    "gate:linux": "bash pipeline/scripts/gate-linux.sh"
   },
   "keywords": [
     "multi-agent",

package/pipeline/commands/multi-agent/help/SKILL.md

@@ -108,6 +108,7 @@ Status & Resume:
   /multi-agent:log [#id]      Show task log (defaults to most recent)
   /multi-agent:resume [#id]   Resume a paused or failed task from where it stopped
   /multi-agent:kill [#id]     Stop task + delete worktree (logs preserved)
+  /multi-agent:steer #id "..."  Correct a running task without stopping it (applied at the next phase)
   /multi-agent:prune-logs     Delete per-task project logs (audit + metrics kept; age/project/task filters, dry-run first)
   /multi-agent:prune-prompts  Zero-base prompt review: measure always-on instruction footprint, propose keep/trial/delete per rule (report first, apply on approval)
   /multi-agent:garbage-collect  Sweep leftover /tmp scratch from past runs (dry-run first)
@@ -147,8 +148,17 @@ Setup & Maintenance:
 
 ------------------------------------------------------------
 
-Stack plugin skills: call directly as ai-<stack>-toolkit:<skill>. Catalog:
-  ai-<stack>-toolkit:help. Active plugins per repo: /multi-agent:stack.
+Plugins & tools (called directly, no wrappers):
+
+  Stack plugins    ai-<stack>-toolkit:<skill>, e.g. ai-ios-toolkit:create-component
+                   Catalog: ai-<stack>-toolkit:help   Enable per repo: /multi-agent:stack
+                   common + analyst are always on; the rest follow the repo's stack.
+  Toolkit MCP      multi-agent-toolkit  -  80+ tools for a RUNNING app, no pipeline run needed:
+                   ios_* / android_* (launch, tap, screenshot, ui tree, logs, crashes,
+                   locale, dark mode), web_*, design_* (Design Check above), and the
+                   audits (ios_app_store_audit, ios_testflight_validate, android_apk_audit,
+                   *_accessibility_audit). Use them instead of guessing about on-screen
+                   state. Its registration survives uninstall. Not registered = silent no-op.
 
 ------------------------------------------------------------
 
@@ -202,24 +212,17 @@ Manual Test (Phase 5 standalone  -  Xcode hint flow):
   /multi-agent:manual-test           Checkout task branch, print Xcode/SourceTree hints,
   /multi-agent:manual-test #N        wait for your "ok" / "fix: ..." verdict.
 
-Design Check (mock-mode vs Figma, local-only  -  powered by the toolkit MCP design_* tools):
-
-  /multi-agent:design-check                Whole-module design audit: pick repo+module, gate on mock support,
-                                           enumerate every state driver (launch args, scenario cases, scenario codes,
-                                           fixtures, deep links) into a countable target set, build Debug in a worktree,
-                                           drive each target in mock mode via idb, compare each vs its Figma frame
-                                           (padding/width/spacing/font/color/component/localization), and export a
-                                           report (HTML+PDF, ~/DesignChecks).
-  /multi-agent:design-check <screen>       Scope to one screen's targets (e.g. boarding-pass).
-  /multi-agent:design-check <screen@var>   Scope to a single variant (e.g. boarding-pass@expired).
-  /multi-agent:design-check <figma-url...>   Scope to the frame(s) those URLs name.
-  /multi-agent:design-check --resume       Audit the unaudited remainder of the last run for this repo+module.
-  # COVERAGE GATE: every target is either audited or skipped WITH a concrete reason. Anything else fails the
-  # gate and the run is reported INCOMPLETE with the missing target ids  -  a partial audit never reads as clean.
-  # "Requires a scenario / prefix / launch-arg" is not a reason; reaching those states is the run's job.
-  # When a live screen has no confident Figma match, it SHOWS you the screenshot and asks for the node-id.
-
-  Drives the toolkit design_* tools (+ ios_* / android_* device control).
+Design Check (mock-mode vs Figma, local-only):
+
+  /multi-agent:design-check                Whole-module audit: enumerate every state driver into a countable
+                                           target set, build Debug in a worktree, drive each in mock mode,
+                                           diff against its Figma frame, export HTML+PDF to ~/DesignChecks.
+  /multi-agent:design-check <screen>       Scope to one screen (e.g. boarding-pass).
+  /multi-agent:design-check <screen@var>   Scope to one variant (e.g. boarding-pass@expired).
+  /multi-agent:design-check <figma-url...> Scope to the frame(s) those URLs name.
+  /multi-agent:design-check --resume       Audit what the last run for this repo+module left unaudited.
+  # COVERAGE GATE: every target is audited or skipped WITH a concrete reason; anything else reports
+  # INCOMPLETE with the missing ids. "Needs a scenario/launch-arg" is not a reason, reaching it is the job.
 
 ------------------------------------------------------------
 
@@ -382,6 +385,7 @@ Status & Resume:
   /multi-agent:log [#id]      Task log'unu göster (varsayılan: en son task)
   /multi-agent:resume [#id]   Duraklamış / hata almış task'ı kaldığı yerden devam ettir
   /multi-agent:kill [#id]     Task'ı durdur + worktree'yi sil (log'lar korunur)
+  /multi-agent:steer #id "..."  Koşan task'ı durdurmadan düzelt (sonraki fazda uygulanır)
   /multi-agent:prune-logs     Task bazlı proje log'larını sil (audit + metrics korunur; yaş/proje/task filtresi, önce dry-run)
   /multi-agent:prune-prompts  Sıfır-tabanlı prompt incelemesi: sürekli yüklü talimat yükünü ölç, kural başına tut/dene/sil öner (önce rapor, onayla uygula)
   /multi-agent:garbage-collect  Geçmiş koşumların /tmp artıklarını süpür (önce dry-run)
@@ -421,9 +425,17 @@ Setup & Maintenance:
 
 ------------------------------------------------------------
 
-Stack plugin skill'leri: doğrudan ai-<stack>-toolkit:<skill> olarak çağrılır
-  (örn. ai-ios-toolkit:create-component). Lokal kopya ve sarmalayıcı yok. Katalog:
-  ai-<stack>-toolkit:help. Aktif plugin'ler repo bazında: /multi-agent:stack.
+Plugin'ler ve tool'lar (doğrudan çağrılır, sarmalayıcı yok):
+
+  Stack plugin     ai-<stack>-toolkit:<skill>, örn. ai-ios-toolkit:create-component
+                   Katalog: ai-<stack>-toolkit:help   Repo bazında aç: /multi-agent:stack
+                   common + analyst hep açık; gerisi repo'nun stack'ini izler.
+  Toolkit MCP      multi-agent-toolkit  -  ÇALIŞAN uygulama için 80+ tool, pipeline koşusu
+                   gerektirmez: ios_* / android_* (başlat, tap, screenshot, ui ağacı, log,
+                   crash, locale, koyu mod), web_*, design_* (yukarıdaki Design Check), ve
+                   denetimler (ios_app_store_audit, ios_testflight_validate,
+                   android_apk_audit, *_accessibility_audit). Ekrandaki durumu tahmin etmek
+                   yerine bunları kullan. Kaydı uninstall'dan sağ çıkar. Kayıtlı değilse sessizce devre dışı.
 
 ------------------------------------------------------------
 
@@ -477,24 +489,17 @@ Manuel Test (Phase 5 standalone  -  Xcode hint akışı):
   /multi-agent:manual-test           Task branch'ine checkout, Xcode/SourceTree hint basar,
   /multi-agent:manual-test #N        "ok" / "fix: ..." yanıtını bekler.
 
-Design Check (mock-mod vs Figma, yalnızca lokal  -  multi-agent-toolkit-mcp design_* tool'larıyla):
+Design Check (mock-mod vs Figma, yalnızca lokal):
 
-  /multi-agent:design-check                Tüm modül tasarım denetimi: repo+modül seç, mock desteğini geçitle,
-                                           her state sürücüsünü (launch arg, senaryo case'leri, senaryo kodları,
-                                           fixture'lar, deep link'ler) sayılabilir bir hedef kümesine çıkar,
-                                           worktree'de Debug derle, her hedefi mock modda idb ile sür, her birini
-                                           Figma frame'iyle karşılaştır (padding/genişlik/spacing/font/renk/
-                                           component/localization), rapor çıkar (HTML+PDF, ~/DesignChecks).
-  /multi-agent:design-check <ekran>        Tek ekranın hedeflerine kapsa (örn. boarding-pass).
+  /multi-agent:design-check                Tüm modül denetimi: her state sürücüsünü sayılabilir hedef kümesine
+                                           çıkar, worktree'de Debug derle, her hedefi mock modda sür, Figma
+                                           frame'iyle diff'le, HTML+PDF raporu ~/DesignChecks'e yaz.
+  /multi-agent:design-check <ekran>        Tek ekrana kapsa (örn. boarding-pass).
   /multi-agent:design-check <ekran@varyant> Tek varyanta kapsa (örn. boarding-pass@expired).
-  /multi-agent:design-check <figma-url...>   URL'lerin işaret ettiği frame'lere kapsa.
-  /multi-agent:design-check --resume       Bu repo+modül için son koşunun denetlenmemiş kalanını denetle.
-  # KAPSAM GEÇİDİ: her hedef ya denetlenir ya da SOMUT bir gerekçeyle atlanır. Başka her durum geçidi
-  # düşürür ve koşu eksik hedef id'leriyle EKSİK raporlanır  -  kısmi denetim asla temiz görünmez.
-  # "Senaryo / prefix / launch-arg gerektirir" gerekçe değildir; o state'lere ulaşmak koşunun işidir.
-  # Canlı ekranın Figma karşılığı kesin bulunamazsa SANA screenshot'ı gösterip node-id sorar.
-
-  multi-agent-toolkit-mcp design_* tool takımını sürer (+ ios_* / android_* cihaz kontrolü).
+  /multi-agent:design-check <figma-url...> URL'lerin işaret ettiği frame'lere kapsa.
+  /multi-agent:design-check --resume       Son koşunun denetlenmemiş kalanını denetle.
+  # KAPSAM GEÇİDİ: her hedef ya denetlenir ya da SOMUT gerekçeyle atlanır; başka her durum eksik hedef
+  # id'leriyle EKSİK raporlanır. "Senaryo/launch-arg gerektirir" gerekçe değil, oraya ulaşmak koşunun işi.
 
 ------------------------------------------------------------