@mmerterden/multi-agent-pipeline 18.0.0 → 19.1.0

package/pipeline/scripts/validate-triage.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
-// validate-triage.mjs  -  behavioral validator for Phase 4 triage output.
+// validate-triage.mjs  -  behavioral validator for Phase 3 triage output.
 //
 // Zero dependencies. Reads a triage JSON from a path arg or STDIN, enforces
 // the contract documented in pipeline/schemas/triage-output.schema.json AND
-// the edge-case rules from phase-4-review.md section3.3.
+// the edge-case rules from phase-3-review.md section3.3.
 //
 // Unlike validate-schemas.mjs (which only checks schema files are well-formed),
 // this validates an ACTUAL triage run's output.
@@ -81,7 +81,7 @@ function validateRawFinding(f, label, errors) {
   }
 }
 
-// v3.2.0 verify-by-test outcome (Phase 4 Step 3.7). Optional; when present:
+// v3.2.0 verify-by-test outcome (Phase 3 Step 3.7). Optional; when present:
 // result is required, and confirmed/not-reproduced additionally require
 // testRef + evidencePath (the empirical claims must be traceable).
 function validateVerification(v, label, errors) {

package/pipeline/scripts/verify-citations.mjs

@@ -6,7 +6,7 @@
  * Two surfaces in this pipeline require a citation and neither has ever checked
  * one. `reviewer-output.schema.json` makes `file` and `line` required on every
  * finding; `analysis-spec.schema.json` carries `repoEvidence` entries of
- * `{name, file, line, tag}` and `analysis/locked.md` (Locked 37) asks for
+ * `{name, file, line, tag}` and `analysis/locked.md` (Locked 36) asks for
  * `repo/file:line` on every current-behaviour row. The only check that existed
  * was `validate-analysis-doc.mjs`'s `/:\d+\b/` - a test that the row LOOKS like
  * a citation, satisfied by `Foo.swift:9999` in a repo with no Foo.swift.

package/pipeline/scripts/worktree-finalize.sh

@@ -1,11 +1,11 @@
 #!/usr/bin/env bash
 #
 # worktree-finalize.sh  -  salvage a finished task's artefacts, then remove its
-# worktree. Called by Phase 6 once the PR is open.
+# worktree. Called by Phase 4 once the PR is open.
 #
 # The problem it solves: a task's worktree is dead weight the moment its PR
 # exists, but people forget to remove it, so `.worktrees/` accumulates full
-# checkouts. Removing it at PR-open is safe ONLY if the files Phase 7 and
+# checkouts. Removing it at PR-open is safe ONLY if the files Phase 5 and
 # `:resume` read are moved somewhere that outlives it  -  hence salvage first.
 #
 # What it deliberately does NOT do:
@@ -125,7 +125,7 @@ rp_pr="$(cd "$PROJECT_ROOT" 2>/dev/null && pwd -P || echo "")"
 [ "$rp_wt" != "$rp_pr" ] || skip "worktree equals project root (--local mode)  -  nothing to remove"
 
 # Refuse if the caller is standing inside the tree being removed. A shell left on
-# a deleted inode is worse than a leftover directory, and Phase 6 legitimately
+# a deleted inode is worse than a leftover directory, and Phase 4 legitimately
 # cd's into the worktree earlier, so this is a real case rather than a theoretical
 # one. The caller must cd out first.
 cwd_rp="$(pwd -P)"
@@ -213,7 +213,7 @@ fi
 [ "$head_sha" = "$upstream_sha" ] || skip "HEAD ($(echo "$head_sha" | cut -c1-8)) differs from remote ($(echo "$upstream_sha" | cut -c1-8))  -  push before finalizing"
 
 # --- salvage ---------------------------------------------------------------
-# Everything Phase 7, :resume, :status and :log read out of the worktree. Each is
+# Everything Phase 5, :resume, :status and :log read out of the worktree. Each is
 # copied only if present; a task that never reached Phase 4 has no triage output
 # and that is not an error.
 DEST="$LOGS_ROOT/${PROJECT:+$PROJECT/}$TASK_ID/artifacts"
@@ -309,7 +309,7 @@ if git -C "$rp_pr" worktree remove "$rp_wt" 2>/dev/null; then
   # Stamp the outcome into the SALVAGED agent-state.json here, rather than leaving
   # the caller to write it. In single-repo worktree mode the caller's $STATE_FILE
   # is the copy that just went away with the worktree, so a write there fails and
-  # `worktreeRemovedAt` / `artifactsPath` land nowhere  -  which then makes Phase 7
+  # `worktreeRemovedAt` / `artifactsPath` land nowhere  -  which then makes Phase 5
   # read a dead path, fall back to the removed worktree, and silently skip the
   # triage-memory ingest. Exactly the [ -f ]-guarded degradation this step exists
   # to prevent.

package/pipeline/scripts/write-state.mjs

@@ -441,6 +441,38 @@ async function main() {
     const tmp = `${dirname(path)}/.${basename(path)}.${process.pid}.tmp`;
     writeFileSync(tmp, JSON.stringify(next, null, 2) + "\n");
     renameSync(tmp, path); // atomic on POSIX
+
+    // The check above is a time-of-check, this is the time-of-use. No POSIX
+    // call renames a file conditionally on still holding a lock, so between
+    // stillOurs() and renameSync() there is a window - narrow, but real, and it
+    // widens exactly when the machine is loaded enough for a holder to be
+    // descheduled past the reclaim ceiling.
+    //
+    // Reading the file back closes it after the fact rather than before: our
+    // rev is the one we just wrote, so a different rev on disk means another
+    // writer's rename landed on top of ours. That is the difference between
+    // reporting success while losing an update - the one outcome this script
+    // exists to prevent - and refusing loudly enough for the caller to retry.
+    try {
+      const landed = JSON.parse(readFileSync(path, "utf-8"));
+      if (landed?.rev !== next.rev) {
+        console.error(
+          `write-state: our update was overwritten between the write and this check ` +
+            `(wrote rev ${next.rev}, found rev ${landed?.rev}). Re-read the state and retry.`,
+        );
+        releaseLock(path);
+        process.exit(4);
+      }
+    } catch (err) {
+      // An unreadable file here is not our write failing - it is the state
+      // being clobbered by something that is not this writer. Saying so beats
+      // exiting 0 over a file we can no longer parse.
+      console.error(
+        `write-state: the state was unreadable immediately after our write  -  ${err.message}`,
+      );
+      releaseLock(path);
+      process.exit(4);
+    }
   } catch (err) {
     console.error(`write-state: ${err.message}`);
     releaseLock(path);

package/pipeline/skills/.skill-manifest.json

@@ -1,15 +1,15 @@
 {
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-09-17T11:16:58Z",
-  "skillCount": 212,
+  "generatedAt": "2026-09-20T18:01:58Z",
+  "skillCount": 216,
   "entries": [
     {
       "path": "shared/core/apple-archive-compliance/SKILL.md",
-      "sha256": "0d2f81825bf1610c765a4a7a223247703812e86a642e78f4f367cfc35cea76af"
+      "sha256": "6675a53441f2f3bedc82284998f402bd51fa251c7491a595e12c6c4016830337"
     },
     {
       "path": "shared/core/google-play-compliance/SKILL.md",
-      "sha256": "356ff2b30f414e582bb215c4728696af8e249dfe924e16a550294e48fd9bdcf9"
+      "sha256": "2229d7b732b0523142b9c467049931b1d100343c1e318428f49e3fea73fc39ec"
     },
     {
       "path": "shared/core/multi-agent-analysis-jira/SKILL.md",
@@ -37,7 +37,7 @@
     },
     {
       "path": "shared/core/multi-agent-autopilot/SKILL.md",
-      "sha256": "c02525ad003c34d53834ecd04eb150764b36779f4e08941c9016926418e74333"
+      "sha256": "7446424d3dd480751358a0e3de917f3d22bb4f1ce6dec1b99217877c6b217e76"
     },
     {
       "path": "shared/core/multi-agent-build-optimize/SKILL.md",
@@ -45,7 +45,7 @@
     },
     {
       "path": "shared/core/multi-agent-channels/SKILL.md",
-      "sha256": "fa128726aa0009699e7ac2de566812e7192681db98c90dfc5da501ad50a05583"
+      "sha256": "414eead38b461c8aa95f6af3175366be905338233e6872313f5d4f59a02351af"
     },
     {
       "path": "shared/core/multi-agent-complaint-analysis/SKILL.md",
@@ -61,7 +61,7 @@
     },
     {
       "path": "shared/core/multi-agent-diff-explain/SKILL.md",
-      "sha256": "7cb37a224e61d66e350202ecfc5fbc6c33da3fe0718504a093602f5cde5b648f"
+      "sha256": "ec3827e0457c693812d11b3a96f88f0e2d186af369c353e1b5c40795d96933dd"
     },
     {
       "path": "shared/core/multi-agent-doctor/SKILL.md",
@@ -81,11 +81,11 @@
     },
     {
       "path": "shared/core/multi-agent-graph/SKILL.md",
-      "sha256": "918feff1a0a691535901c20a0625340a0f88cd5294cff1a1da20f799f6746f2a"
+      "sha256": "d6781a34d98a542aac3df4ce9c7c52d83902851de2d239bed022ac382716a26e"
     },
     {
       "path": "shared/core/multi-agent-help/SKILL.md",
-      "sha256": "87d45a04c782b03569b0ab9ee54da8414cbadd5a2a82a7701f38dc8a3ee94627"
+      "sha256": "6ebe7d4de1a1ff815f572abb5d5db5d5af9ea507b3047ec60597a54455176da5"
     },
     {
       "path": "shared/core/multi-agent-ios-coding-standard/SKILL.md",
@@ -105,15 +105,15 @@
     },
     {
       "path": "shared/core/multi-agent-language/SKILL.md",
-      "sha256": "c44d951996a208d962d969b0ac309ce88a38c048a2d8b332546c532045c189fc"
+      "sha256": "63e746bc63ec9963c54e852e6ca5cdb30afd9309a02ee3fdb35965eb931d0300"
     },
     {
       "path": "shared/core/multi-agent-local-autopilot/SKILL.md",
-      "sha256": "b0fac3509c2fa513b3fea9bfde4f2554642cb60373a5b570ef29ba8bf760e2a1"
+      "sha256": "5e367258e57fa710d16a1ad6363d5974b89aa99fb0ac791d1ce0070c81191f6b"
     },
     {
       "path": "shared/core/multi-agent-local/SKILL.md",
-      "sha256": "90dd95a0dc569f1451bf095a77cffccae607e4dedd271a3362cce32b53b5d819"
+      "sha256": "0a5f20782de81ac3376088579ff6fbc3a6f3781cb285860aae796408aa57e6aa"
     },
     {
       "path": "shared/core/multi-agent-log/SKILL.md",
@@ -121,7 +121,11 @@
     },
     {
       "path": "shared/core/multi-agent-manual-test/SKILL.md",
-      "sha256": "e7f7f8004d286c5b5b596f8659bcf57b2350eb9c67a55470bb2e9b714513a3a4"
+      "sha256": "53e1d58848673690aa0b146908eae98a2de9861dae8b613f63f63672adf6d69b"
+    },
+    {
+      "path": "shared/core/multi-agent-model/SKILL.md",
+      "sha256": "eb66f48b4772f41b395b0aff0c3d0303e29da0a470abae8b61a602b93ba7335c"
     },
     {
       "path": "shared/core/multi-agent-prune-logs/SKILL.md",
@@ -137,15 +141,15 @@
     },
     {
       "path": "shared/core/multi-agent-refactor/SKILL.md",
-      "sha256": "56b49a8216086961bc407a60b559942252a1aae3005b73811b1d40668758cc84"
+      "sha256": "56eb2be076a6840ddfbf57b8e82c8b4bcf76209553d41a06cc71e56dc894364e"
     },
     {
       "path": "shared/core/multi-agent-resume-local/SKILL.md",
-      "sha256": "a4bedf949ab648d977dd1409339d08af204341f555d69f71f58c1a54dffaff6d"
+      "sha256": "9f5089c748a8f0ae5983a3f392879a86017a33c883a87607169e32705c68c5e9"
     },
     {
       "path": "shared/core/multi-agent-resume/SKILL.md",
-      "sha256": "5e80eb098996fdea36f013acc8ddec44d462cace031c78341f11f0b59592a6ba"
+      "sha256": "6701424edde0a19b55a7de62bb5ba5f9dbaef7d9fb9ea2bce632374863145774"
     },
     {
       "path": "shared/core/multi-agent-review-analysis/SKILL.md",
@@ -163,6 +167,18 @@
       "path": "shared/core/multi-agent-review/SKILL.md",
       "sha256": "f3903b07fa7176ff9430f46cc1e981a0f0d06ab028df5ef1d45ad9271bada1e5"
     },
+    {
+      "path": "shared/core/multi-agent-route-off/SKILL.md",
+      "sha256": "c569e9ba1fbbebc879b69229cf2154edc89998fcdcfe74fb4220f5af70daafa0"
+    },
+    {
+      "path": "shared/core/multi-agent-route-on/SKILL.md",
+      "sha256": "40fab187a6054b90c9b8f1e8ad198a08ab94fdfd9cd89eef9b439e59b570d821"
+    },
+    {
+      "path": "shared/core/multi-agent-route-status/SKILL.md",
+      "sha256": "f104d3de6974837b8ebbcc6242269c06ea78a0d97a3e216c1b62cf6d91a72fd8"
+    },
     {
       "path": "shared/core/multi-agent-routines/SKILL.md",
       "sha256": "a8cc83140b5d84365348a2b0858f06a9e92808f608544eea61ab5760c82f9f97"
@@ -181,7 +197,7 @@
     },
     {
       "path": "shared/core/multi-agent-setup/SKILL.md",
-      "sha256": "d475f14de5db9ffe0c8ae5b3b83374d5f82a41c29da5271c7399d151e6bd4c1d"
+      "sha256": "d2c167082f40af3c2a7cbb0be55a8cdf8076a4f06a3df54c89b1318759421a29"
     },
     {
       "path": "shared/core/multi-agent-stack/SKILL.md",
@@ -189,11 +205,11 @@
     },
     {
       "path": "shared/core/multi-agent-status/SKILL.md",
-      "sha256": "3305fcce80bdad9ea0032e382276c5692a197749d9c012910daaea7a332bce0e"
+      "sha256": "ae9a7507e0a0291d8e786820b1a0394363f416fd7715f2deb162c9f542ae5351"
     },
     {
       "path": "shared/core/multi-agent-steer/SKILL.md",
-      "sha256": "a5988d6945dabea45d9827c76e270bb3d12fb2b7689e8893ea09f650ae97baa9"
+      "sha256": "d2a3602c1acbd1a01b30fcba65fbbe669ac825ec4ac9b0d6679bba07e0d1207c"
     },
     {
       "path": "shared/core/multi-agent-store-ready/SKILL.md",
@@ -201,7 +217,7 @@
     },
     {
       "path": "shared/core/multi-agent-sync/SKILL.md",
-      "sha256": "51e9a8a9053ce9d0450bcaf66555075f83c340203bb753946938f4b29cf93b79"
+      "sha256": "3d3331d34f9610ea02b96ee27c8029734f3a3447d2857fc0dca92d5b43d0f8e2"
     },
     {
       "path": "shared/core/multi-agent-test-accessibility/SKILL.md",
@@ -237,7 +253,7 @@
     },
     {
       "path": "shared/core/multi-agent/SKILL.md",
-      "sha256": "faac7ceb535d18778efe0ea91c19534c8e076bc709e7b1dbc567f5e71692bbbd"
+      "sha256": "9ab7af2ffb01f8eb0fae624ae40ea9ff2f6d69ad61544bd266b1b97f60eb4a0f"
     },
     {
       "path": "shared/external/accessibility-compliance-accessibility-audit/SKILL.md",
@@ -653,7 +669,7 @@
     },
     {
       "path": "shared/external/signal-community/SKILL.md",
-      "sha256": "98a5883811a58a352f229efaa2ff785bcb7f8174988a5d6cc8d0d57cabc569cf"
+      "sha256": "d5989a85c39856e451ce5e5f9dd5a250be02067c56e47b8667a4f2d78014a89c"
     },
     {
       "path": "shared/external/skill-creator/SKILL.md",

package/pipeline/skills/.skills-index.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "1.0.0",
-  "skillCount": 212,
+  "skillCount": 216,
   "entries": [
     {
       "name": "accessibility-compliance-accessibility-audit",
@@ -1038,7 +1038,7 @@
     },
     {
       "name": "multi-agent-channels",
-      "description": "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Phase 7 delegates to this skill; users can invoke post-hoc by Jira ID / PR URL / branch.",
+      "description": "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Phase 5 delegates to this skill; users can invoke post-hoc by Jira ID / PR URL / branch.",
       "platform": null,
       "group": "core",
       "plugin": null,
@@ -1082,7 +1082,7 @@
     },
     {
       "name": "multi-agent-diff-explain",
-      "description": "Map Phase 4 triage findings to branch diff lines. Read-only post-hoc command, used after review to answer 'which finding lines up with which code change'. Use when a review finding has to be traced to the exact lines that caused it.",
+      "description": "Map Phase 3 triage findings to branch diff lines. Read-only post-hoc command, used after review to answer 'which finding lines up with which code change'. Use when a review finding has to be traced to the exact lines that caused it.",
       "platform": null,
       "group": "core",
       "plugin": null,
@@ -1225,7 +1225,7 @@
     },
     {
       "name": "multi-agent-local-autopilot",
-      "description": "Full pipeline + local + autopilot  -  no worktree, no confirmations, all 8 phases run end-to-end on the current branch. Use when the full pipeline should run on the current branch with no worktree and no prompts.",
+      "description": "Full pipeline + local + autopilot  -  no worktree, no confirmations, all 6 phases run end-to-end on the current branch. Use when the full pipeline should run on the current branch with no worktree and no prompts.",
       "platform": null,
       "group": "core",
       "plugin": null,
@@ -1256,6 +1256,17 @@
       "triggerPaths": [],
       "relativePath": "shared/core/multi-agent-manual-test/SKILL.md"
     },
+    {
+      "name": "multi-agent-model",
+      "description": "Turn the top model rung on or off and keep the cost ledger's pricing in step with it. Use when asked to enable or disable Fable, or which model the pipeline dispatches.",
+      "platform": null,
+      "group": "core",
+      "plugin": null,
+      "invokeAs": "multi-agent-model",
+      "triggerKeywords": [],
+      "triggerPaths": [],
+      "relativePath": "shared/core/multi-agent-model/SKILL.md"
+    },
     {
       "name": "multi-agent-prune-logs",
       "description": "Delete per-task project logs under ~/.claude/logs/multi-agent (filter by age/project/task). Audit trail + metrics are preserved. Dry-run first; confirms before deleting. Use when task logs have built up and need trimming by age, project or task.",
@@ -1313,7 +1324,7 @@
     },
     {
       "name": "multi-agent-resume-local",
-      "description": "Continue already-done LOCAL work through the pipeline tail: Review → Build+Test → Commit/PR → Report (technical analysis + Jira test-scenario comment). No dev phase. Use when local work is already done and only review, build, commit and reporting remain.",
+      "description": "Continue already-done LOCAL work through the pipeline tail: Review (with its build gate) → Commit/PR → Report (technical analysis + Jira test-scenario comment). No dev phase. Use when local work is already done and only review, build, commit and reporting remain.",
       "platform": null,
       "group": "core",
       "plugin": null,
@@ -1366,6 +1377,39 @@
       "triggerPaths": [],
       "relativePath": "shared/core/multi-agent-review-jira/SKILL.md"
     },
+    {
+      "name": "multi-agent-route-off",
+      "description": "Disable model routing and keep its rules, so turning it back on does not re-ask for the same configuration. Use when asked to turn model routing off.",
+      "platform": null,
+      "group": "core",
+      "plugin": null,
+      "invokeAs": "multi-agent-route-off",
+      "triggerKeywords": [],
+      "triggerPaths": [],
+      "relativePath": "shared/core/multi-agent-route-off/SKILL.md"
+    },
+    {
+      "name": "multi-agent-route-on",
+      "description": "Enable policy-driven model routing: pick a strategy, a scope, and the rules that say which rung a call lands on. Use when asked to turn model routing on.",
+      "platform": null,
+      "group": "core",
+      "plugin": null,
+      "invokeAs": "multi-agent-route-on",
+      "triggerKeywords": [],
+      "triggerPaths": [],
+      "relativePath": "shared/core/multi-agent-route-on/SKILL.md"
+    },
+    {
+      "name": "multi-agent-route-status",
+      "description": "Report model routing: whether it is armed, which rule applies where, which rung the last dispatches took, and what this run has cost. Use when asked which model is being used or why.",
+      "platform": null,
+      "group": "core",
+      "plugin": null,
+      "invokeAs": "multi-agent-route-status",
+      "triggerKeywords": [],
+      "triggerPaths": [],
+      "relativePath": "shared/core/multi-agent-route-status/SKILL.md"
+    },
     {
       "name": "multi-agent-routines",
       "description": "List your saved /multi-agent routines (from /multi-agent:save) with what each one does, rendered in outputLanguage. Use when asked which saved routines exist or what one of them does.",

package/pipeline/skills/shared/README.md

@@ -2,11 +2,11 @@
 
 Single source of truth for skills delivered to both Claude Code (`~/.claude/skills/`) and Copilot CLI (`~/.copilot/skills/`) by the installer.
 
-**Total:** 212 skills (59 core + 153 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
+**Total:** 216 skills (63 core + 153 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
 
 ## Directory layout
 
-- **`core/`**  -  59 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
+- **`core/`**  -  63 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
 - **`external/`**  -  153 iOS / Android / generic skills imported from the upstream skill library. Mirrors of third-party guidance.
 - Install destinations (ADR-0009): Claude Code gets NO local copy of `external/` - it loads those skills from the `multi-agent-plugins` marketplace, namespaced (`ai-<stack>-toolkit:<name>`); only the two compliance catalogs from `core/` land in `~/.claude/skills/`. Copilot CLI and Codex CLI receive a flat copy filtered to the enabled stacks. `external/` remains the single authoring source that `build-stack-plugins.mjs` publishes from.
 
@@ -14,7 +14,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 
 ## Categories
 
-- [Pipeline Orchestration](#pipeline-orchestration)  -  59
+- [Pipeline Orchestration](#pipeline-orchestration)  -  63
 - [iOS / Apple Ecosystem](#ios-apple-ecosystem)  -  90
 - [Android / Kotlin](#android-kotlin)  -  13
 - [Web](#web)  -  10
@@ -40,7 +40,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`multi-agent-complaint-analysis`](./core/multi-agent-complaint-analysis/) | `core` | Customer-complaint triage. Ingests complaints (paste, csv/xlsx/txt/json file, Jira issue, Confluence URL), fetches Graylog evidence per trx/ |
 | [`multi-agent-create-jira`](./core/multi-agent-create-jira/) | `core` | Create a standards-compliant Jira issue (Task / Bug / Story): asks the type, mines project conventions, drafts from a standard template with |
 | [`multi-agent-design-check`](./core/multi-agent-design-check/) | `core` | Mock-mode vs Figma design audit (iOS / Android, local-only). Pick repo + module, gate on mock support, enumerate every state driver into a c |
-| [`multi-agent-diff-explain`](./core/multi-agent-diff-explain/) | `core` | Map Phase 4 triage findings to branch diff lines. Read-only post-hoc command, used after review to answer 'which finding lines up with which |
+| [`multi-agent-diff-explain`](./core/multi-agent-diff-explain/) | `core` | Map Phase 3 triage findings to branch diff lines. Read-only post-hoc command, used after review to answer 'which finding lines up with which |
 | [`multi-agent-doctor`](./core/multi-agent-doctor/) | `core` | Health check for the installed pipeline: layout, preferences, credentials, hooks and host capabilities, each with one actionable step. Exit  |
 | [`multi-agent-feedback`](./core/multi-agent-feedback/) | `core` | Send one message to the maintainer: a bug, an idea or a question. Only the text you type is sent - no logs, no repo names, no paths. Shows t |
 | [`multi-agent-forget`](./core/multi-agent-forget/) | `core` | Remove a saved /multi-agent routine (created by /multi-agent:save): deletes its local-only command and its registry entry. Asks which one an |
@@ -53,19 +53,23 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`multi-agent-kill`](./core/multi-agent-kill/) | `core` | Stop the given task, then remove its worktree and branch. Asks for confirmation. Use when a running or stuck task should be stopped and its  |
 | [`multi-agent-language`](./core/multi-agent-language/) | `core` | Toggle outputLanguage (assistant explanations, picker questions, PR/Jira/Confluence bodies). promptLanguage is fixed to English; commit mess |
 | [`multi-agent-local`](./core/multi-agent-local/) | `core` | Full pipeline in local mode  -  no worktree, runs directly on the current branch. Use when the full pipeline should run on the current branc |
-| [`multi-agent-local-autopilot`](./core/multi-agent-local-autopilot/) | `core` | Full pipeline + local + autopilot  -  no worktree, no confirmations, all 8 phases run end-to-end on the current branch. Use when the full pi |
+| [`multi-agent-local-autopilot`](./core/multi-agent-local-autopilot/) | `core` | Full pipeline + local + autopilot  -  no worktree, no confirmations, all 6 phases run end-to-end on the current branch. Use when the full pi |
 | [`multi-agent-log`](./core/multi-agent-log/) | `core` | Show the agent-log.md for the given task. With no ID, shows the most recent task. Use when asked what a task did, or to read its log. |
 | [`multi-agent-manual-test`](./core/multi-agent-manual-test/) | `core` | Switch to the active task's branch and prepare it for manual testing in Xcode. Phase 5 standalone (the UI Bug Hunter lives at multi-agent-te |
+| [`multi-agent-model`](./core/multi-agent-model/) | `core` | Turn the top model rung on or off and keep the cost ledger's pricing in step with it. Use when asked to enable or disable Fable, or which mo |
 | [`multi-agent-prune-logs`](./core/multi-agent-prune-logs/) | `core` | Delete per-task project logs under ~/.claude/logs/multi-agent (filter by age/project/task). Audit trail + metrics are preserved. Dry-run fir |
 | [`multi-agent-prune-prompts`](./core/multi-agent-prune-prompts/) | `core` | Zero-base prompt review: measure the always-on instruction footprint, classify every rule block, propose keep/trial-removal/delete; applies  |
 | [`multi-agent-purge`](./core/multi-agent-purge/) | `core` | ⚠️ Wipes every worktree, branch, log, and state file. Irreversible; asks for double confirmation. Use when every worktree, branch, log and s |
 | [`multi-agent-refactor`](./core/multi-agent-refactor/) | `core` | Analyse the project: extract adapted best-practices, hunt real bugs + improvement areas, check upstream drift of derived skills, research th |
 | [`multi-agent-resume`](./core/multi-agent-resume/) | `core` | Resume a stopped or failed task from the phase where it left off. Use when a task stopped or failed and should carry on from where it left o |
-| [`multi-agent-resume-local`](./core/multi-agent-resume-local/) | `core` | Continue already-done LOCAL work through the pipeline tail: Review → Build+Test → Commit/PR → Report (technical analysis + Jira test-scenari |
+| [`multi-agent-resume-local`](./core/multi-agent-resume-local/) | `core` | Continue already-done LOCAL work through the pipeline tail: Review (with its build gate) → Commit/PR → Report (technical analysis + Jira tes |
 | [`multi-agent-review`](./core/multi-agent-review/) | `core` | Run parallel review on a branch diff or a Pull Request: 3 models on Claude Code (Fable + Opus + Sonnet), 3 models on Copilot CLI (GPT + Opus |
 | [`multi-agent-review-analysis`](./core/multi-agent-review-analysis/) | `core` | Review a written analysis document instead of a diff: resolve it from a path, a Confluence page or a Jira issue, run the deterministic gates |
 | [`multi-agent-review-issue`](./core/multi-agent-review-issue/) | `core` | Assess whether a GitHub issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / sta |
 | [`multi-agent-review-jira`](./core/multi-agent-review-jira/) | `core` | Assess whether a Jira issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / stack |
+| [`multi-agent-route-off`](./core/multi-agent-route-off/) | `core` | Disable model routing and keep its rules, so turning it back on does not re-ask for the same configuration. Use when asked to turn model rou |
+| [`multi-agent-route-on`](./core/multi-agent-route-on/) | `core` | Enable policy-driven model routing: pick a strategy, a scope, and the rules that say which rung a call lands on. Use when asked to turn mode |
+| [`multi-agent-route-status`](./core/multi-agent-route-status/) | `core` | Report model routing: whether it is armed, which rule applies where, which rung the last dispatches took, and what this run has cost. Use wh |
 | [`multi-agent-routines`](./core/multi-agent-routines/) | `core` | List your saved /multi-agent routines (from /multi-agent:save) with what each one does, rendered in outputLanguage. Use when asked which sav |
 | [`multi-agent-save`](./core/multi-agent-save/) | `core` | Save a recurring job as a reusable /multi-agent:<name> command. Reviews the conversation + your CLAUDE.md for candidate routines, you pick o |
 | [`multi-agent-scan`](./core/multi-agent-scan/) | `core` | Skill security scan: walks local skill directories against a tiered pattern catalog. Use when local skill directories need checking for unsa |

package/pipeline/skills/shared/core/apple-archive-compliance/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: apple-archive-compliance
 language: en
-description: "Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code mapping + EN/TR humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 4 Security Auditor (catalog cross-ref on Info.plist / PrivacyInfo / entitlements diffs), /multi-agent:review (PR citation), /multi-agent:channels (PR body auto-augmentation). Wiring enforced by smoke-compliance-skills.sh. Use when an .xcarchive needs an App Store review check before submission, or a rejection has to be diagnosed."
+description: "Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code mapping + EN/TR humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 3 Security Auditor (catalog cross-ref on Info.plist / PrivacyInfo / entitlements diffs), /multi-agent:review (PR citation), /multi-agent:channels (PR body auto-augmentation). Wiring enforced by smoke-compliance-skills.sh. Use when an .xcarchive needs an App Store review check before submission, or a rejection has to be diagnosed."
 user-invocable: true
 argument-hint: '[archive-path] [--threshold=error|warning|info] [--format=markdown|json] [--lang=en|tr]   -  no-arg: picks most recent .xcarchive from ~/Library/Developer/Xcode/Archives/'
 standards-registry: references/rules.yml
@@ -18,7 +18,7 @@ Pre-submission compliance check for iOS `.xcarchive` bundles. Wraps the [`ios_ap
 | Consumer | How it uses this skill |
 |---|---|
 | `/multi-agent:test "store-ready"` (iOS) | Main entry point  -  runs the binary, renders the full report |
-| Phase 4 Security Auditor (iOS review) | Reads the rule catalog for cross-reference when diff touches Info.plist, PrivacyInfo.xcprivacy, or entitlements |
+| Phase 3 Security Auditor (iOS review) | Reads the rule catalog for cross-reference when diff touches Info.plist, PrivacyInfo.xcprivacy, or entitlements |
 | `/multi-agent:review` | On iOS diffs, cites guideline refs next to flagged symbols |
 | `/multi-agent:channels` | When PR touches release-relevant files, appends compliance warnings to PR body |
 
@@ -137,7 +137,7 @@ Apple App Store Review Guidelines + ITMS upload error codes that the underlying
 
 | Severity | What pipeline consumers do with it |
 |---|---|
-| `error` | **Blocker.** Report it as `blocking` in Phase 4 triage / channels PR body. Don't merge until fixed. |
+| `error` | **Blocker.** Report it as `blocking` in Phase 3 triage / channels PR body. Don't merge until fixed. |
 | `warning` | **Important.** Surface in PR description / Jira comment under "Compliance warnings". Merging OK but note it. |
 | `info` | **Informational.** Log to agent-log.md only. Don't pollute PR body. |
 
@@ -208,7 +208,7 @@ sim-test.md's "store-ready" scenario on iOS:
 4. Render humanizer template per `--lang` flag (default `en`; `promptLanguage` is locked to `"en"`)
 5. Exit with `1` if any blockers, `0` otherwise (CI-friendly)
 
-### Phase 4 Security Auditor (optional, on-demand)
+### Phase 3 Security Auditor (optional, on-demand)
 
 When reviewing an iOS PR, if diff touches ANY of:
 - `*/Info.plist`
@@ -261,12 +261,12 @@ multi-agent-test "store-ready" --format=json --auto-pick
 mcp__multi-agent-toolkit__ios_app_store_audit({ archive_path: "~/Library/Developer/Xcode/Archives/2026-04-21/MyApp.xcarchive", rules: "all" })
 ```
 
-### Phase 4 Security Auditor (catalog cross-ref, no binary invocation)
+### Phase 3 Security Auditor (catalog cross-ref, no binary invocation)
 
-When a Phase 4 review diff touches iOS release-relevant paths (`Info.plist`, `PrivacyInfo.xcprivacy`, `*.entitlements`, `AppDelegate.swift`, `project.pbxproj`), the security-auditor persona loads this skill's 18-rule catalog and cites matching ruleIDs next to its findings. No binary invocation at review time  -  catalog reads are free.
+When a Phase 3 review diff touches iOS release-relevant paths (`Info.plist`, `PrivacyInfo.xcprivacy`, `*.entitlements`, `AppDelegate.swift`, `project.pbxproj`), the security-auditor persona loads this skill's 18-rule catalog and cites matching ruleIDs next to its findings. No binary invocation at review time  -  catalog reads are free.
 
 ```
-# Example finding from Phase 4 Security Auditor (wired in v5.8.1):
+# Example finding from Phase 3 Security Auditor (wired in v5.8.1):
 [BLOCKING] Info.plist: new NSCameraUsageDescription without justification
   (apple-archive-compliance / info-plist  -  Guideline 5.1.1)
   File: MyApp/Info.plist:42
@@ -312,7 +312,7 @@ The appended section is structured:
 ## Version history
 
 - **v5.8.0**  -  Skill introduced. Wraps the (now-retired) standalone ArchiveGuard binary, 17-rule catalog, EN+TR humanizer. Primary consumer only (`/multi-agent:test "store-ready"`).
-- **v5.8.1**  -  3 additional consumer surfaces wired (Phase 4 Security Auditor cross-ref, `/multi-agent:review` citation, `/multi-agent:channels` PR-body auto-augmentation). Regression-locked by `smoke-compliance-skills.sh` (45 assertions).
+- **v5.8.1**  -  3 additional consumer surfaces wired (Phase 3 Security Auditor cross-ref, `/multi-agent:review` citation, `/multi-agent:channels` PR-body auto-augmentation). Regression-locked by `smoke-compliance-skills.sh` (45 assertions).
 - **v6.0.0**  -  `language: en` frontmatter tag; 4-consumer Examples section expanded.
 - **v8.4.0**  -  Migrated off the standalone ArchiveGuard Swift binary. Backend is now the `ios_app_store_audit` tool inside `@mmerterden/multi-agent-toolkit-mcp` ≥ v2.4 (full Node port of the 17 rules). All four consumer surfaces unchanged; rule IDs and JSON output shape preserved for backward compatibility. Rule catalog now points to `multi-agent-toolkit-mcp/tools/ios-app-store-audit/rules/`. ArchiveGuard repo deprecated.
 - **Unreleased**  -  Catalog grows to 18 rules: adds `sdk-floor` (ITMS-90725, iOS 26 / Xcode 26 build floor in force since 2026-04-28), which nothing previously checked. `embedded-sdk`'s missing-framework-privacy-manifest finding moves from a `5.1.1` WARNING to `ITMS-91061` ERROR, an enforced rejection since 2025-02-12  -  archives that used to pass with a warning now fail. Requires `@mmerterden/multi-agent-toolkit-mcp` ≥ v3.0.0.

package/pipeline/skills/shared/core/google-play-compliance/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: google-play-compliance
 language: en
-description: "Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error codes + humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 4 Security Auditor (catalog cross-ref on AndroidManifest / build.gradle / proguard / signing diffs), /multi-agent:review (PR citation), /multi-agent:channels (PR body auto-augmentation). Wiring enforced by smoke-compliance-skills.sh. Use when an .aab or .apk needs a Play policy check before upload, or a Play rejection has to be diagnosed."
+description: "Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error codes + humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 3 Security Auditor (catalog cross-ref on AndroidManifest / build.gradle / proguard / signing diffs), /multi-agent:review (PR citation), /multi-agent:channels (PR body auto-augmentation). Wiring enforced by smoke-compliance-skills.sh. Use when an .aab or .apk needs a Play policy check before upload, or a Play rejection has to be diagnosed."
 user-invocable: true
 argument-hint: '[bundle-path] [--threshold=error|warning|info] [--format=markdown|json] [--lang=en|tr]   -  no-arg: picks most recent .aab from app/build/outputs/bundle/release/'
 standards-registry: references/rules.yml
@@ -18,7 +18,7 @@ Pre-submission compliance check for Android App Bundle (`.aab`) and APK artifact
 | Consumer | How it uses this skill |
 |---|---|
 | `/multi-agent:test "store-ready"` (Android) | Main entry point  -  runs the tools, renders the full report |
-| Phase 4 Security Auditor (Android review) | Reads the rule catalog for cross-reference when diff touches AndroidManifest.xml, gradle config, or signing |
+| Phase 3 Security Auditor (Android review) | Reads the rule catalog for cross-reference when diff touches AndroidManifest.xml, gradle config, or signing |
 | `/multi-agent:review` | On Android diffs, cites Play policy refs next to flagged changes (e.g. new `MANAGE_EXTERNAL_STORAGE` without justification) |
 | `/multi-agent:channels` | When PR is release-relevant, appends compliance warnings to PR body |
 
@@ -158,7 +158,7 @@ Current Google Play policies + Play Console rejection codes. Sourced from `suppo
 
 | Severity | What pipeline consumers do with it |
 |---|---|
-| `error` | **Blocker.** Play Console will reject the upload (or the bundle build will fail). Report as `blocking` in Phase 4 triage / channels PR body. |
+| `error` | **Blocker.** Play Console will reject the upload (or the bundle build will fail). Report as `blocking` in Phase 3 triage / channels PR body. |
 | `warning` | **Policy review risk.** Might not reject immediately but increases manual review chance + user trust hit. Surface in PR description. |
 | `info` | **Best practice.** Log only. Don't pollute PR body. |
 
@@ -232,7 +232,7 @@ sim-test.md's "store-ready" scenario on Android:
 5. Render humanizer template per `--lang` flag (default `en`; `promptLanguage` is locked to `"en"`)
 6. Exit with `1` if any blockers, `0` otherwise (CI-friendly)
 
-### Phase 4 Security Auditor (optional, on-demand)
+### Phase 3 Security Auditor (optional, on-demand)
 
 When reviewing an Android PR, if diff touches ANY of:
 - `**/AndroidManifest.xml` (permissions / exported / targetSdk)
@@ -286,12 +286,12 @@ multi-agent-test "store-ready" --last-version-code=142 --auto-pick
 /multi-agent:test "store-ready" --format=json --auto-pick
 ```
 
-### Phase 4 Security Auditor (catalog cross-ref, no tool invocation)
+### Phase 3 Security Auditor (catalog cross-ref, no tool invocation)
 
-When a Phase 4 review diff touches Android release-relevant paths (`AndroidManifest.xml`, `build.gradle(.kts)`, `proguard-rules.pro`, `network_security_config.xml`), the security-auditor persona loads this skill's 21-rule policy catalog and cites matching ruleIDs next to its findings. No bundletool / aapt2 / apksigner invocation at review time  -  catalog reads are free.
+When a Phase 3 review diff touches Android release-relevant paths (`AndroidManifest.xml`, `build.gradle(.kts)`, `proguard-rules.pro`, `network_security_config.xml`), the security-auditor persona loads this skill's 21-rule policy catalog and cites matching ruleIDs next to its findings. No bundletool / aapt2 / apksigner invocation at review time  -  catalog reads are free.
 
 ```
-# Example finding from Phase 4 Security Auditor (wired in v5.8.1):
+# Example finding from Phase 3 Security Auditor (wired in v5.8.1):
 [BLOCKING] AndroidManifest.xml: new MANAGE_EXTERNAL_STORAGE permission added
   (google-play-compliance / dangerous-permissions  -  Policy  -  Permissions)
   File: app/src/main/AndroidManifest.xml:12
@@ -345,5 +345,5 @@ The appended section is structured:
 ## Version history
 
 - **v5.8.0**  -  Skill introduced. Orchestrates bundletool + aapt2 + apksigner, 21-rule catalog, EN+TR humanizer. Primary consumer only (`/multi-agent:test "store-ready"`).
-- **v5.8.1**  -  3 additional consumer surfaces wired (Phase 4 Security Auditor cross-ref, `/multi-agent:review` citation, `/multi-agent:channels` PR-body auto-augmentation). Regression-locked by `smoke-compliance-skills.sh` (45 assertions).
+- **v5.8.1**  -  3 additional consumer surfaces wired (Phase 3 Security Auditor cross-ref, `/multi-agent:review` citation, `/multi-agent:channels` PR-body auto-augmentation). Regression-locked by `smoke-compliance-skills.sh` (45 assertions).
 - **v6.0.0**  -  `language: en` frontmatter tag; 4-consumer Examples section expanded.