@mmerterden/multi-agent-pipeline 20.10.0 → 20.11.0

package/manifest.json

@@ -1,12 +1,12 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "20.10.0",
-  "commit": "ffc4f8074972531eb3e882e932c29ff63f0ae845",
-  "generatedAt": "2026-09-28T10:25:30.524Z",
+  "version": "20.11.0",
+  "commit": "5124f984fab4c9ec2413942e9e9d30020dd046d1",
+  "generatedAt": "2026-09-29T13:01:15.322Z",
   "algorithm": "sha256",
-  "fileCount": 1227,
+  "fileCount": 1230,
   "files": {
-    "CHANGELOG.md": "77f53924e2a1ba32035e9fa1690fc4ed95fefd6f84c318aedad0533d942a8e40",
+    "CHANGELOG.md": "c23b53aae6aa02d811dcb0a1698d36e23f5c19f77b10ea4677d62e28e1f56920",
     "LICENSE": "8d8c51aaf1e1538b180c69965fa038db71be86798cc3e26a143bebfefe16a43e",
     "README.md": "0613eebb0b38062bd94c44043595d1950b5c9b470874dd8e402c052fd20960cf",
     "README.tr.md": "0c6b5e6943d6c3d3bf3a7ed99c705fb9a78d15d7722e6252f58404d3f6d3524d",
@@ -33,7 +33,7 @@
     "docs/best-practices.md": "f8b75b0d38b5896a6a852bb30a1edddeb24dab8b5b7b1d9313290e1241c72024",
     "docs/ecosystem.md": "e6c00f30e95b5e178f77bdfbefd686c8a4164f39c03865a89ab23465d1a37acf",
     "docs/engineering.md": "550528cd47c7d2c921729c68d0782a00ac8e77a4bdfec479f6749f9c3235d188",
-    "docs/facts.json": "4cb62f5043b4010101e67069d0f99ee94d84e8f25c558c52f22628c63bc6b33e",
+    "docs/facts.json": "ec1d8856d83f528813d5a3c5777c717753248fb287ae0427ba1b2f14c16d92fa",
     "docs/features.md": "6c9f0efb00c683e6f611c440c87847b187f8b0eee59e9e812f3a241695bc2ae1",
     "docs/performance.md": "bbf2f3922c25dcba0c1a9e69ef420e3871a729af5b35009a49b48a5d3c5cd151",
     "docs/recovery-guide.md": "59a8f1b66b34cb9ff5507b3d54dac3b9915e184aa044d9c758d18cac818d510e",
@@ -51,7 +51,7 @@
     "install/_plugin-skills.mjs": "bf287053133f940df0ca434cfc5ee522fd27e80dc7f7e60ccc963ecaabee047a",
     "install/_telemetry.mjs": "5433d753f909beed2c8789272bba05e245482c472f83d3444f58000c4c9a634b",
     "install/_unattended-profile.mjs": "e1ed82bde35d19105ee12c2a551eb778912b0e5c93ab227fd15c993098d98de0",
-    "install/catalog-history.json": "fd545686999f2231b902eb2a614614b8e0b0b2812a94b236fdfa96cd01d31f5b",
+    "install/catalog-history.json": "3bc89ad70da08bfea483551fb3d38fab2219e7dffe16dd97c636c2a2e52dd532",
     "install/claude.mjs": "c7b0a6eff15e967778e6ab8c463949c79dade05309878b03836f023da704fb3a",
     "install/codex.mjs": "2c2238cd9dd2f95b4a50a505387e8e49ddc1513ae13998f05f1ed3e3a71b18e7",
     "install/copilot.mjs": "300a74f17084d1a38f16428ca7477394c29e33cd755156e19b92e457999be234",
@@ -62,7 +62,7 @@
     "install/templates/multi-agent-autopilot-awake.plist.template": "ddd25c76c56fcbb38a89de8e35637372d70ace993d6bc487a88ca9cfb702fe1f",
     "install/templates/multi-agent-autopilot.plist.template": "122c8a61cd927edd99375d6e3da40f1d42bcceed5b6641785c8b28bb930bc77e",
     "install/unattended-profile-legacy.json": "f52e86b998956f09ad306b1735a6c10b58580d7082d8a55665a4c6bb15c3aa1f",
-    "package.json": "a410a59d303611c205a5c870cf63d7ed642e3fa74242fdda73d109bf886d66f6",
+    "package.json": "eb7cea544573dc7c026884f773d1c644de4eb5818c2c42ab787777d8ee0fd37d",
     "pipeline/agents/android-architect.md": "11fb74543cb0ebcf9525ca6654fe95d53da7229e0bf4a1149b31fd9005abc453",
     "pipeline/agents/backend-architect.md": "b02a606c301e4714131aed70ae6d16eeb77fbc819a001e2752cff2488d4246de",
     "pipeline/agents/bulk-reader.md": "6597052cd7d205bac2b1c7633f5232fe1a40730664a913b8eb77efd5a786dc25",
@@ -77,7 +77,7 @@
     "pipeline/commands/archive-guard.md": "16c5d3feaa91950402d62e66adc7fcf519a25d028a9303cb1e9c08af2765c04b",
     "pipeline/commands/deploy.md": "d20f95f3b1d2357c8c92f3047e8fe11eadf539ff13cab9b54f072f0ad697242a",
     "pipeline/commands/figma-to-swiftui.md": "cb198d279d36c6c34648ab9834433d00f81c9d427934cc1641c0e09f1878b0a6",
-    "pipeline/commands/multi-agent/SKILL.md": "974ee683523b29a6b9c426158c2a73d4f24c6521b934476a37b1d4b0df354b57",
+    "pipeline/commands/multi-agent/SKILL.md": "ba1c37843adf8c3c23ca88245ae92a6456e605c674a401bfd889e0430eb529dc",
     "pipeline/commands/multi-agent/analysis-jira/SKILL.md": "3b656d82f6d83599e34c871e66127caf3f8522eafd22c5527404c8f854e2e8f1",
     "pipeline/commands/multi-agent/analysis-resolve/SKILL.md": "3c712e86d4b2e80d1ba51811ea32c8d5fa11291ab62c6dae944f9c19ddfd9868",
     "pipeline/commands/multi-agent/analysis/SKILL.md": "a20662c5c3495bb3fe676e43a8d71ce3148886f2ace582496b094dec6d7aea78",
@@ -96,7 +96,7 @@
     "pipeline/commands/multi-agent/forget/SKILL.md": "7a7e7480919cc732bee02aa8eb0d5051ed3908dede500df1f942085d1a01a8a1",
     "pipeline/commands/multi-agent/garbage-collect/SKILL.md": "9f3c31a54c5dde24817bf249e514a0a1d4c86a82cd5c6a4909774e918bb8ce6c",
     "pipeline/commands/multi-agent/graph/SKILL.md": "3a3dd8c6c5d8c865426111e8ec02af2eac21b6197acea1c63305914de5362c39",
-    "pipeline/commands/multi-agent/help/SKILL.md": "1edef50940b29a9b0d391270347e52032de91ead07e5c0c02bf047ea382425ab",
+    "pipeline/commands/multi-agent/help/SKILL.md": "95fbe46f66b6c449498f560ded22ba5caa1192e42693e74017a37a8d691f8598",
     "pipeline/commands/multi-agent/ios-coding-standard/SKILL.md": "436d00f345601b6b3fac369af48cf3c73109022cc4218e8df0625a6c62f1ae70",
     "pipeline/commands/multi-agent/issue/SKILL.md": "9a7ca4c1cb107f91841922bfcc369d3ea5424772b1fe3e9855717e645954b16d",
     "pipeline/commands/multi-agent/jira/SKILL.md": "3e67461c2fd6e3dbf45340b6ee1e12bae30ebf596e476d620d1582378af75dd1",
@@ -125,11 +125,11 @@
     "pipeline/commands/multi-agent/search/SKILL.md": "231f0dd266907423cc45feeadc4170852dc6fd45239e0bee3ee4e08d4d0f5958",
     "pipeline/commands/multi-agent/security-review/SKILL.md": "dfc2fad484c81169912062391f7ad97500ef113d95741902e5e18e7dd60b6da1",
     "pipeline/commands/multi-agent/serve/SKILL.md": "88f6f0350cb0abcd2a4ed54c12f6cfb5bf4298909bff06891fede25888ae69ec",
-    "pipeline/commands/multi-agent/setup/SKILL.md": "6bd501bb8ec23a45a53337e383e4ed077e0aeb939580935b92ae8bb708e2e264",
+    "pipeline/commands/multi-agent/setup/SKILL.md": "9ae2238c554e297849349948bb70df2222944a9b7292554c9174b97672a53aec",
     "pipeline/commands/multi-agent/stack/SKILL.md": "6d64e96b9a2d41d25ff077afa84300172cac9bf9dd78ec1d9fbbaf45df34f5dd",
     "pipeline/commands/multi-agent/status/SKILL.md": "a2ed316434aca49f692aafe11f95873822b9b955558a53f4f6a9667ee32a3659",
     "pipeline/commands/multi-agent/steer/SKILL.md": "07e738c228ba328f717f86e97e7af207df090b16433e28e613d430c3ff0aee3e",
-    "pipeline/commands/multi-agent/store-ready/SKILL.md": "0fa95a4bb2c355b360bf0943e1d69f0319ded18d7af540f2a154f31101514558",
+    "pipeline/commands/multi-agent/store-ready/SKILL.md": "746d04a4766cb6bd2a8b615ac43c4fed000302a4adc0bd2a9e51f92975bbb7ad",
     "pipeline/commands/multi-agent/sync/SKILL.md": "17049e9ef98613825b0c4d074655477f033df460c9b760728c661f6c843a7276",
     "pipeline/commands/multi-agent/test-accessibility/SKILL.md": "d62992541303a0776ca088d5f3d5475108fd3fba5e25af04efb3ea4bbbd1fe21",
     "pipeline/commands/multi-agent/test-dark-mode/SKILL.md": "6bfe158c94f76fc6f4d06454978d0c5cad6ec00645ab48c1d1cee15ad93ae095",
@@ -172,7 +172,7 @@
     "pipeline/lib/confusables.json": "64a31eba5d1f44c6177abf6d9dfddee671201336f76c0db71e96a0d49cb4fdaa",
     "pipeline/lib/context-link-extractor.sh": "84a154dcabf57136be17199b21d02120d70cc0ca34e8f48fe24bdda74eddda1d",
     "pipeline/lib/count-lib.sh": "7bafe152b0ffb9ca6fb9296b7ecaaef33deb9410286b3579fefbb37796044f79",
-    "pipeline/lib/credential-inventory.sh": "adff81b265a9cf4f8c9135011686c12963cf5eeeafcb266be54456c803ffde38",
+    "pipeline/lib/credential-inventory.sh": "a32b4caecd8534c30a4f037941f3e558317fad83bd3205ceb69831074c9c3de4",
     "pipeline/lib/credential-store-resolver.sh": "62d16fae85f02739c925bd62911d8594518ea1fe7224ac30ec8dc2dedcca7dc9",
     "pipeline/lib/credential-store.sh": "88b09c60fd024e347c0de08c27df372b8c6ef7a54a164d85bfa7c763e850c1d2",
     "pipeline/lib/extract-conventions.sh": "b324b7883f7d3bb296be4ac30323673de5a701ccd9102de419ec02371c40a85c",
@@ -263,7 +263,7 @@
     "pipeline/multi-agent-refs/features/cost-analysis.md": "42f1b90b41ef454f29ccfd3f93c959920f0e74cbca65e140695e9a30d6d90b87",
     "pipeline/multi-agent-refs/features/design-conformance.md": "a88ca595827cafa0c87c2facfcf9190dac69485e0596e5c198c6fc1613880452",
     "pipeline/multi-agent-refs/features/dev-critic.md": "08e01edef04b5ac216f8f43332126966d33da7b95625e47a8a6cd8ac105b263f",
-    "pipeline/multi-agent-refs/features/doctor.md": "4e4ff5f4ec03b017f4d1b8e6a0cb64cd86fbde063aee72d7589875c90567b019",
+    "pipeline/multi-agent-refs/features/doctor.md": "cf26e9fe4b51a47223ea0160c7c3c9c7ea177e70ec60c379271687e42fd4f594",
     "pipeline/multi-agent-refs/features/external-context-injection.md": "fe0373f27c3e9aae660a55a3ba9a8163df329b4d95c727d6023b6b3afaf71d66",
     "pipeline/multi-agent-refs/features/jira-context.md": "7d14802ed9ad1747e1a06dec26f22ff9e8959e03c47d7a018af45b8274aea47c",
     "pipeline/multi-agent-refs/features/maturity-followup.md": "e663e5bcf0b3b4d4d2a67f4516dbb9fb12520dfbdedb47a9c5f57c13a9a0633e",
@@ -297,10 +297,10 @@
     "pipeline/multi-agent-refs/features/worktree-finalize.md": "628f627b94927a9c4a5b0b261fed1f0ffa42d4155390d57b5e56566a26ed8193",
     "pipeline/multi-agent-refs/generate-issue.md": "61e762456d2748525fbbea0ee5f9dde863d75d3bb9bbece14a36f6e3c9e82b3d",
     "pipeline/multi-agent-refs/issue-jira-triad.md": "a12f4e3b75badf8a466e0c3531a5f0e12e44a1dd7799522fb03ff11068ce391d",
-    "pipeline/multi-agent-refs/keychain.md": "8f775488ed846cc11470bfe5a4db1803f4145a16e12e8fa17a3f338380f096a7",
+    "pipeline/multi-agent-refs/keychain.md": "d2c6a915595f25570dfc5c24ba1d86a133003af517fa348e077da4643664e43c",
     "pipeline/multi-agent-refs/knowledge.md": "33f6a4cc0ced930d192f32e0f7b2adf785395562f9dedd82ce939306c3d7a0e5",
     "pipeline/multi-agent-refs/multi-repo-integration-build.md": "ff4ad08d382d1d31f5c4f3c382cb340058bbe5cb1cffbfef520500cad7b9c05c",
-    "pipeline/multi-agent-refs/outside-the-pipeline.md": "34f9f79b8fcc0ac58dc45905ca8b285477f7604d10391ace1bbde0b249593fbf",
+    "pipeline/multi-agent-refs/outside-the-pipeline.md": "f62960921b2fbebd54914cec7503bfb5e3c3024f30fb3e0ead7e08e36a8139aa",
     "pipeline/multi-agent-refs/payload-contracts.md": "77b10f1d616c20b96c8f83185f9b507c9764fdc69eae1795bff9127ecbc6f37e",
     "pipeline/multi-agent-refs/phases.md": "730d598b27b8df4776adece9487f51e4835dbdb5a7d33c097e272f3360cbe844",
     "pipeline/multi-agent-refs/phases/log-format.md": "62d51e57cca8445ab40f3c0dc29615e4b5c8e4743286bf9ef0173610e81397aa",
@@ -321,8 +321,9 @@
     "pipeline/multi-agent-refs/refactor/toolkit-research.md": "1ef7f36345c5a7d2f6bb8529ef39e9e00865c6ca851aec942891bc2f8a57ea2b",
     "pipeline/multi-agent-refs/research/engine.md": "6e812c2637f563a6fa53ade6690dcc69fa819450a74405eb138883dd19cef0b2",
     "pipeline/multi-agent-refs/rules.md": "0b272d9ee2ba4a2fde28313f3084b8caa3d26f10e78d6099547a800e6c33534a",
-    "pipeline/multi-agent-refs/setup/app-store-connect.md": "6208a8125212e3ef44faf61236c5dd8ec3e8f71817fa477e8cd92415906a0759",
+    "pipeline/multi-agent-refs/setup/app-store-connect.md": "6230406b14615f7a412f95542c3c10ea8f4d2681d9a39f7910c9f5f8592184bd",
     "pipeline/multi-agent-refs/setup/firebase.md": "a82031c67993762303a7ecd222e2574fbbf8d65dcc6b17e051a8dd53a9e31474",
+    "pipeline/multi-agent-refs/setup/google-play.md": "c60117fb8b13c709da93d379064aa0d56869bfde88fc5d5737996b7c1fc02ff7",
     "pipeline/multi-agent-refs/setup/repo-discovery.md": "06944e7b7677d998b6d169fbf5bebcac08c0f5eab808f9f1f3e5b6b2dc6a1f55",
     "pipeline/multi-agent-refs/swiftui-guide.md": "3f86cb3e2161389da5a466793dae570d854e35354490f58249b5defbaccb1375",
     "pipeline/multi-agent-refs/threat-model.md": "3628881538b846f94decd78e389b34b473ba6f91b6e6dcf5c927d307ed264bea",
@@ -331,7 +332,7 @@
     "pipeline/multi-agent-refs/web-guide.md": "714cba0d92fa45bf71fbff21bb2f09c88534ebf785b3a2ea96d18037e2e7f7f9",
     "pipeline/multi-agent-refs/website-deploy.md": "ce819c8b1ef8e8ec3257611379aaf0ab4678e08e0b58bd88c936e98cb8ead609",
     "pipeline/multi-agent-refs/wiki-capture.md": "bfd33cf097b966e61f80c9235d98c8139e4c9ede2e47c14b920a5b910cdc76d8",
-    "pipeline/preferences-template.json": "b15b2de33b88e21ae01b8e09d9920abdc8e7e5767d61c158b271354b68e5ac6d",
+    "pipeline/preferences-template.json": "8c74c0fa9f182a6c474aa7d4d2cfe6d67635ec0917c847f19ddae3095e6af944",
     "pipeline/rules/app-store-guidelines.md": "cdfa4f8a2e0e642460bb72517f9f430638d6f09eb4a37898747cb8d55df03405",
     "pipeline/rules/code-review.md": "b18eec5cec31710fe76cdae6f03b53e7403d4f0406274691ab38a4771505a1c5",
     "pipeline/rules/code-style.md": "cd7d8fa872d1d640d143a573a0bdeeb7a9095f62a4d69741a11b4f0cee9d5a48",
@@ -390,7 +391,7 @@
     "pipeline/schemas/plan-todos.schema.json": "f1dcf8df338b29bbc1d874addd3408c0841a5f869c0b6075efd9242e3e8552d6",
     "pipeline/schemas/planning-output.schema.json": "bc6eda32ecd435cf84d846078f9d38347f8f741f8a427cff15913dd6c380d4b8",
     "pipeline/schemas/pr-request.schema.json": "ae75c4856349d62834802b1189af516bb6fb3d36646831b7ff2fa61d938afcd0",
-    "pipeline/schemas/prefs.schema.json": "c327827b65c01cec5c73fdde0b4ad553daf157fb7786c4d0e97a335cfc687282",
+    "pipeline/schemas/prefs.schema.json": "5cf90665e47381279202e15806ad19026c507c4876b4028de5c87bc6187845d2",
     "pipeline/schemas/repo-profile.schema.json": "1a74ef8330da9a26a5a70955f6f9cbb20eda54a8615efaf86c7993d420a7f04e",
     "pipeline/schemas/research-output.schema.json": "54e3ba1b04fdc20fbaa84333b943a8ab95d1395c7b0e0aedc67929184cb49523",
     "pipeline/schemas/review-file-exclusions.json": "2e8c44b45d21d2c82fc95aa2bf76ad3fbf2d5c68180c7b2ebf89c4a926688d77",
@@ -480,7 +481,7 @@
     "pipeline/scripts/crush-json.mjs": "303382670f8f170c8c6710202853a2de2915625813cd157185f9be4e2b27258e",
     "pipeline/scripts/diff-explain.mjs": "194d0635639607cb1af3de064453162e01c0d59dc0c2e187d21d45bae3bc559c",
     "pipeline/scripts/diff-risk-score.mjs": "b3e8da42fea1258162e40f4eb7809074831339b7563874527f7e825f7aa795ca",
-    "pipeline/scripts/doctor.mjs": "d903ffcf79e37175047e2b662d324ad7db67bd355297672e9383ba1a991ffcfb",
+    "pipeline/scripts/doctor.mjs": "a832682b5afb5641fbae180aa9f1cf8a0678d8c8daded452b86b9d717e049b19",
     "pipeline/scripts/evidence-gate.mjs": "347a8d3fa1d17d996de345585c216bd7071f4c1d687999daf6e48881720ea5df",
     "pipeline/scripts/feedback-send.mjs": "d3ed66e9dacdfb4b5eacf1b244bf66752304fb4fcb144531441b458f3ab806be",
     "pipeline/scripts/finding-fingerprint.mjs": "fa12ab10701db5d2bfff014e41d1cd4c0b2b772aee5fc69205de14b2761b0c83",
@@ -534,9 +535,10 @@
     "pipeline/scripts/plan-critique-gate.mjs": "b139394e5f16d11e4997d0bb0b08529f439dbd7fad39781ef4c2475247d8fa97",
     "pipeline/scripts/plugin-refresh.sh": "687a33199ad963616ab537e32210ec8c967e76ecc42f494ee8a1dc9fe947fc30",
     "pipeline/scripts/pr-request.mjs": "e6f4ded2366c6599bb345b3011ecc771e13b8a1561afa4c9a50bca4edff17456",
-    "pipeline/scripts/pre-commit-check.sh": "8a2dd546e3712e6915d67729d84b89c0b98c76d48e02348d41773e4a182e7223",
+    "pipeline/scripts/pre-commit-check.sh": "3692ef40b08968e15e8a4c7b873f1e9fd264f4809976cb616063782f2ef993b1",
     "pipeline/scripts/pre-push-check.sh": "e449aff7f0336d7d624eff4c6221f56d8621ba9d010669601755e57fd4ee02c7",
     "pipeline/scripts/probe-evidence-capability.sh": "ac74252eed6b773fdbc7ec475a63606925f1ba7b5e7c6f911329f46fd920eae7",
+    "pipeline/scripts/probe-store-key.mjs": "b46dfcf444c95d0bb61de36823314945dacaaacb8f35841d153dcfcde8e4df1a",
     "pipeline/scripts/prune-logs.sh": "c5587b33104c7253e07be8cce8249b50014c52dfdf232de637811ffdd88e95e4",
     "pipeline/scripts/purge.sh": "95c60b272ae47209893dba9b17528538592bb5636da47940a02734cd9b4f0ce5",
     "pipeline/scripts/record-phase.mjs": "041dc262e54f38b66299f45c44db7918812e599a773f5a3dc78cfd09ab5e155e",
@@ -606,12 +608,13 @@
     "pipeline/scripts/worktree-prepare.sh": "9391c828375b127f77c86e3c830dbbaf355a61464c6437319969f2f1eecc72b1",
     "pipeline/scripts/worktrees.mjs": "90dfd09b70fffe9b56c331a4ae2692cc248f4898f4ee6aee4239ef0b20888a90",
     "pipeline/scripts/write-state.mjs": "e1198bf970eace07d3eff22b394808a526e473df65d3d58aa2d5a12cfdac8b49",
-    "pipeline/skills/.skill-manifest.json": "449e794ee0d3e0661bd6143f0a2670955ae943b8caae53857a7614417771d1be",
+    "pipeline/scripts/write-store-config.mjs": "b994a061f6febb2ca3d396074d8b51d2c1c1f991d3072d321703380da3639a56",
+    "pipeline/skills/.skill-manifest.json": "d387288c7de2f39f0b58a95eae996e30639b04187f3f7b3cbddaa97bab78034e",
     "pipeline/skills/.skills-index.json": "042b1090f3e2ca310c6ce70d1bb304e8c7f96bd73133e504b95d83801608e470",
     "pipeline/skills/shared/README.md": "a144fb39993470b6379d9660e0ee0371bdc858aee3d7c1b375cb6aba03d046db",
     "pipeline/skills/shared/core/apple-archive-compliance/SKILL.md": "7239fef717ea45b79276bfcc2c3903acd57950b6e00dd6a2a66399c4b09cbd51",
     "pipeline/skills/shared/core/apple-archive-compliance/references/rules.yml": "25129ce6d416242ac04c4032f7561e0c2761ab8bbadf08d9c9f49b573a663389",
-    "pipeline/skills/shared/core/google-play-compliance/SKILL.md": "3d15929685bb84bcdd2fee621176b9c12686a2f5152bd46ed19b959d7e851cc0",
+    "pipeline/skills/shared/core/google-play-compliance/SKILL.md": "3089e8c5f99c1ec7c1358394c398335ccb5ebc20ca05d60d870127da4592de34",
     "pipeline/skills/shared/core/google-play-compliance/references/rules.yml": "21fc058762e7341a8917442f1ab4dc50def59aa3145eea120c474b0d0de6a5c1",
     "pipeline/skills/shared/core/multi-agent-analysis-jira/SKILL.md": "8c5916a32156bc4c75f97cac1b57dbfe9e49f16027178128d12e50f6e326ae12",
     "pipeline/skills/shared/core/multi-agent-analysis-resolve/SKILL.md": "9e405b0f7403c72b00a7ddf1e4b8518cfe37feb31d91d8e5ba70f0341efa5d0c",
@@ -660,11 +663,11 @@
     "pipeline/skills/shared/core/multi-agent-search/SKILL.md": "5f5177cd28cbb13583441fb98402cfa251c78e69de693540584e9a1dcc7692cb",
     "pipeline/skills/shared/core/multi-agent-security-review/SKILL.md": "3c483d5942f2c2b81c0537d4db0b36804c13cabd66fd7fae2972d07a8f239f69",
     "pipeline/skills/shared/core/multi-agent-serve/SKILL.md": "01853f3a4726ef4374177fb0c3bd753520435fc7ccc263f3ef2399352cba8f04",
-    "pipeline/skills/shared/core/multi-agent-setup/SKILL.md": "d57769a5857c6ed06f1c2c9995da77901af14c5ae493c8ec8c454b977c5666e9",
+    "pipeline/skills/shared/core/multi-agent-setup/SKILL.md": "f73388e0a64ba8a1606e3364441b078f3df6f7e99e589fb9bc8b93269a2733b2",
     "pipeline/skills/shared/core/multi-agent-stack/SKILL.md": "ac964cd00dd6ed06512530489d867efbc51d7d7614265f9aa022679325d5defe",
     "pipeline/skills/shared/core/multi-agent-status/SKILL.md": "444c3773b52e6786e40bc67c8833ea6aecadbcd4459b01127b4aff152157040a",
     "pipeline/skills/shared/core/multi-agent-steer/SKILL.md": "20f332bd2fe2745da5341f8d8187211fc47c06b4b5f5031e217affee0282ddb5",
-    "pipeline/skills/shared/core/multi-agent-store-ready/SKILL.md": "86838f9b922cdaebfebdc019aab7861e8e0d436620e43a715b3e3da1ddfc804b",
+    "pipeline/skills/shared/core/multi-agent-store-ready/SKILL.md": "514cb5b80f9584da035f6ac23681b42c765fdced25d704f8e36b6cc079b8093d",
     "pipeline/skills/shared/core/multi-agent-sync/SKILL.md": "a56f1148343024ad53cbe4562c3fd00379ead33e189a0b370c09d6554e1b60b3",
     "pipeline/skills/shared/core/multi-agent-test-accessibility/SKILL.md": "78305bd6c591836badb903c18a6ac2e619fcec51a7a08589f8a1281c4fdd90ee",
     "pipeline/skills/shared/core/multi-agent-test-dark-mode/SKILL.md": "f24c6c5ee9c8f7221527a9a809ca24ee86a2225a0bac48323449660af215c99f",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "20.10.0",
+  "version": "20.11.0",
   "description": "6-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/commands/multi-agent/SKILL.md

@@ -86,7 +86,7 @@ Lib scripts (`~/.claude/lib/`):
 | `create-jira ["desc"] [figma-url] [swagger-url]` | Create a standards-compliant Jira issue: asks the type (**Task** / **Bug** / **Story**), mines the project's recent same-type issues for conventions (summary format, labels, priority, test-scenario style), detects the active sprint, drafts from a standard template with auto-sizing sections (Design Reference / API Contract / Screenshots appear only when their source is given), asks about unknown fields, then full draft preview + explicit approval before create. No worktree, no commits. |
 | `test` or `test [args]` | UI Bug Hunter  -  screenshot + tap + analyze on booted simulator via MCP (read `$HOME/.claude/commands/sim-test.md`). `/multi-agent:test` also resolves here via the `commands/multi-agent/test/SKILL.md` delegate. |
 | `test-dark-mode` · `test-accessibility` · `test-dynamic-type` · `test-screenshots [locale]` | Fixed-scenario aliases for the four parameterless / single-parameter `test` scenarios, so the tag autocompletes instead of having to be quoted. Each delegates to the same `sim-test.md` with its scenario pinned; behaviour is identical to the quoted form, which is not deprecated. |
-| `store-ready [repo] [--archive=\|--ipa=\|--aab=\|--apk=] [--skip-sweep]` | Pre-submission store readiness for a built **package**, iOS and Android, local-only. Three symmetric gates per platform  -  static package audit, the store's own validator, policy review vs repo source  -  plus the running-app sweep as Step A. A skipped gate is never folded into the pass count, and an Android run clears at most 2 of 3 because Play's authoritative check is server-side only. Validates only, never uploads. `testflight-validation` is the iOS-pinned alias; `test "store-ready"` hands off here. |
+| `store-ready [repo] [--archive=\|--ipa=\|--aab=\|--apk=] [--skip-sweep]` | Pre-submission store readiness for a built **package**, iOS and Android, local-only. Three symmetric gates per platform  -  static package audit, the store's own validator, policy review vs repo source  -  plus the running-app sweep as Step A. A skipped gate is never folded into the pass count, and an Android run clears at most 2 of 3 unless Google Play is onboarded, because Play's authoritative check is server-side only (with it, Gate 2 validates in a throwaway edit that is deleted). Validates only, never ships a build. `testflight-validation` is the iOS-pinned alias; `test "store-ready"` hands off here. |
 | `manual-test [#id]` | Phase 5 standalone Manual Test  -  checks out the task branch, prints Xcode / SourceTree hints, waits for user verdict (`ok` / `fix: ...`). |
 | `design-check [scope]` | Mock-mode vs Figma design audit (iOS / Android, local-only). Pick repo + module → mock-support feasibility gate (halts if unsupported) → **scenario inventory** (every launch arg / scenario case / scenario code / fixture / deep link becomes a countable target with file+line evidence) → scope resolve (empty = module, screen, `screen@variant`, target id, Figma URLs, `--resume`) → worktree Debug build + mock launch → drive EACH target by its own driver, capturing tap-reachable sub-states with it → per-variant pixel + px-spacing + typography + color compare → report (side-by-side + annotated overlay + stacked findings + fix prompt) exported to `~/DesignChecks/` as HTML + PDF (+ Confluence if enabled). **Coverage gate**: a target is audited or skipped with a concrete reason, else the run is reported INCOMPLETE with the missing ids. No commits, no CI. |
 | `stack [ios\|android\|backend\|mobile\|all]` | Swap skills for next conversation. No arg = show current stack. |

package/pipeline/commands/multi-agent/help/SKILL.md

@@ -136,7 +136,7 @@ Post-Hoc & Side-Channel:
   /multi-agent:doctor         Would a run work here? Layout, prefs, credentials, hooks; exit code is the verdict
   /multi-agent:refactor       Best practices + bug hunt + upstream drift + toolkit MCP research -> one plan, approval, dev + sync
   /multi-agent:refactor backlog  Decide the friction already recorded about the pipeline itself, nothing re-derived
-  /multi-agent:store-ready [repo] [flags]  Pre-submission store readiness, iOS + Android, local-only; a skipped gate is never a pass; never uploads.
+  /multi-agent:store-ready [repo] [flags]  Pre-submission store readiness, iOS + Android, local-only; a skipped gate is never a pass; never ships a build.
   /multi-agent:testflight-validation [repo] [--ipa=|--archive=]  iOS-pinned alias of :store-ready. Same three gates, one implementation.
   /multi-agent:ios-coding-standard [module]  Audit an iOS module against the 99-rule coding-standard registry -> remediation
                               plan + one-page onboarding summary -> hand off to /multi-agent. Read-only, never edits source.
@@ -409,7 +409,7 @@ Post-Hoc & Side-Channel:
   /multi-agent:doctor         Burada bir koşu çalışır mı? Yerleşim, prefs, kimlik bilgileri, hook'lar; çıkış kodu kararı verir
   /multi-agent:refactor       Uyarlanmış best-practice + bug avı + upstream-drift + multi-agent-toolkit MCP araştırması -> tek plan, onay, dev + sync
   /multi-agent:refactor backlog  Pipeline'ın kendisi hakkında kaydedilmiş sürtünmeyi karara bağlar, sıfırdan türetmez
-  /multi-agent:store-ready [repo] [flags]  Yükleme öncesi store hazırlığı, iOS + Android, yalnızca lokal; atlanan kapı asla pass sayılmaz; asla yüklemez.
+  /multi-agent:store-ready [repo] [flags]  Yükleme öncesi store hazırlığı, iOS + Android, yalnızca lokal; atlanan kapı asla pass sayılmaz; build'i asla yayına göndermez.
   /multi-agent:testflight-validation [repo] [--ipa=|--archive=]  :store-ready'nin iOS alias'ı. Aynı 3 kapı, tek implementasyon.
   /multi-agent:ios-coding-standard [modül]  Bir iOS modülünü 99 kurallık kodlama-standardı registry'sine göre denetler -> düzeltme
                               planı + tek sayfalık onboarding özeti -> /multi-agent'a devreder. Read-only, kaynağı hiç düzenlemez.

package/pipeline/commands/multi-agent/setup/SKILL.md

@@ -117,12 +117,14 @@ Standard key names  -  the ones to use when creating a NEW key  -  live in `$HOM
 | `jenkins` | `jenkins` |
 | `appstore_connect_key_id` | (`appstore` or `asc` or `app_store`) + (`key` or `keyid`) |
 | `appstore_connect_issuer_id` | (`appstore` or `asc` or `app_store`) + `issuer` |
+| `appstore_connect_private_key` | (`appstore` or `asc` or `app_store`) + (`private` or `p8`) |
 | `appstore_connect_apple_id` | (`appstore` or `asc`) + (`apple` or `account` or `user`) |
 | `appstore_connect_password_item` | (`appstore` or `asc` or `altool`) + (`password` or `app_specific`) |
+| `google_play` | (`googleplay` or `google_play` or `play_console` or `play`) + (`service` or `account` or `access` or `json` or `console`), NOT `firebase` |
 
 > Multi-agent setup onboards **both** Figma tokens because the pipeline's 3-tier Figma access chain (see `$HOME/.claude/rules/figma-pipeline.md`) uses them in priority order: Tier 1 = MCP (`figma_mcp`), Tier 2 = REST PAT (`figma`), Tier 3 = user screenshot fallback. Missing either token forces a downshift; missing both leaves Tier 3 as the only path. The Tier 2 logical key is `figma`, not `figma_pat`: `figma_pat` is the pre-v13.6 name that `migrate-prefs.mjs` consolidates away, and writing a new mapping under it means the next migration deletes it.
 
-> The four App Store Connect entries are **iOS-only and optional**  -  skipping them all reports Gate 2 of `/multi-agent:store-ready` as `SKIPPED`, never as a pass. Two hold identifiers rather than secrets and one holds a keychain ITEM NAME, yet all four go through the mapping layer so every credential is read the same way. Tiers, the role constraint that decides which to offer first, and the onboarding mechanics: Step 3b and `$HOME/.claude/multi-agent-refs/setup/app-store-connect.md`.
+> The five App Store Connect entries are **iOS-only and optional**  -  skipping them all reports Gate 2 of `/multi-agent:store-ready` as `SKIPPED`, never as a pass. Two hold identifiers, one an email, one a keychain ITEM NAME, and `appstore_connect_private_key` the `.p8` itself; all go through the mapping layer. `google_play` is the Android-only counterpart (Step 3d). Tiers and mechanics: Step 3b and `$HOME/.claude/multi-agent-refs/setup/app-store-connect.md`.
 
 > The `firebase` entry is **optional and any-platform**. Discovery maps a stored service-account JSON like any other credential but cannot see what decides whether Crashlytics is readable: a fresh `firebase-adminsdk-*` account authenticates perfectly and holds no Crashlytics role. Step 3c measures the tier rather than assuming it.
 
@@ -278,6 +280,7 @@ The Step 2 discovery summary is never the end of setup. Immediately after showin
 9. `firebase`
 10. `jenkins`
 11. App Store Connect block (Step 3b; only when the target repo is iOS)
+12. Google Play block (Step 3d; only when the target repo is Android)
 
 Loop rules:
 
@@ -355,11 +358,7 @@ For JSON file (Firebase)  -  same clipboard flow, JSON content never lands in ar
   Press Enter when ready...
 ```
 
-Pipeline runs silently:
-```bash
-pbpaste | ~/.claude/lib/credential-store.sh set "<KEY_NAME>" -
-pbcopy < /dev/null   # clear clipboard
-```
+The pipeline then runs the same `pbpaste | ... set "<KEY_NAME>" -` and `pbcopy < /dev/null` as above. A key that arrives as a file (the App Store Connect `.p8`, the Google Play JSON) skips the clipboard: `set <key> - < <file>`.
 
 **Firebase repeats per project.** Teams own several Firebase projects (legacy plus redesign, staging plus prod), each with its own key, and a crash URL from the second one used to fail the `project_id` check as if it were misconfigured. After each saved key, read `project_id` from the stored JSON (never ask) and offer another round: `Saved: <project_id>. Add another Firebase project? [y/N]`.
 
@@ -423,12 +422,16 @@ This builds `platformIdentityRouting` incrementally  -  no separate Step 7 neede
 
 ### Step 3b  -  App Store Connect onboarding (iOS only, optional)
 
-Runs inside Step 3 alongside the other missing credentials. The four `appstore_connect_*` entries, their non-secret handling (three hold identifiers / a keychain item name, not pasteable secrets), the API-key vs Apple-ID tier picker, and the verification probes live in `$HOME/.claude/multi-agent-refs/setup/app-store-connect.md`. Read that file when the user opts into App Store Connect onboarding; on Skip, nothing is written.
+Runs inside Step 3. Every part of the API key lives in the Keychain, the `.p8` included: ask for the `.p8` as a path, validate it BEFORE saving with `node "$HOME/.claude/scripts/probe-store-key.mjs" --asc ...` (exit 0 only), map `appstore_connect_private_key`, store it from the file with `credential-store.sh set appstore_connect_private_key - < <AuthKey_<keyId>.p8>`, run `node "$HOME/.claude/scripts/write-store-config.mjs"`, then offer (picker, default keep) to delete the file. `store_asc_*` and `ios_testflight_validate` then read the key from the Keychain. The five entries, the tier picker and the probes: `$HOME/.claude/multi-agent-refs/setup/app-store-connect.md`. On Skip, nothing is written.
 
 ### Step 3c  -  Firebase / Crashlytics onboarding (optional)
 
 Runs inside Step 3. Measure first  -  `bash "$HOME/.claude/lib/fetch-crashlytics.sh" --probe` answers `tier-1-ready` / `tier-1-no-grant` / `malformed` / `unreachable`  -  then ask by that answer, never blind. Store the JSON as issued; never base64 it. Skip writes nothing. Then offer appId discovery: `bash "$HOME/.claude/scripts/firebase-app-discovery.sh" <repo> --json` reads the pairs the repo already carries, for `firebase.accounts[].apps[]`  -  it saves a round trip per run; skipping costs nothing. The picker, both tiers, the role-request wording and the v1alpha caveat: `$HOME/.claude/multi-agent-refs/setup/firebase.md`.
 
+### Step 3d  -  Google Play onboarding (Android only, optional)
+
+Runs inside Step 3, only when the target repo is Android. One entry, `google_play`: the service-account JSON the toolkit's `store_play_*` tools use, which lets `/multi-agent:store-ready` run Android Gate 2. Ask for the JSON's path, validate BEFORE saving with `node "$HOME/.claude/scripts/probe-store-key.mjs" --play --service-account <path>`, map `google_play`, then `credential-store.sh set google_play - < <path>` and `write-store-config.mjs`. Account prerequisites, the picker and the probe hints: `$HOME/.claude/multi-agent-refs/setup/google-play.md`. Skip writes nothing.
+
 ### Step 3.5  -  Host Prompt (embedded in Token Save Flow)
 
 **Not a standalone step**  -  runs inline at the end of the Token Save Flow whenever the saved token belongs to a **hosted service** (Jira, Confluence, Bitbucket, Fortify, Graylog) AND the host is not yet in `prefs.global.hosts`. Firebase tokens skip this step  -  Crashlytics is always on Google's fixed domains and `project_id` is embedded in the service-account JSON.
@@ -704,18 +707,14 @@ Standard key names are a convention for NEW tokens; discovery may find existing
 All tokens go through `~/.claude/lib/credential-store.sh`, which auto-delegates to the deterministic Python helper (`~/.claude/scripts/keychain.py`). The Python path writes both `-l` (label) and `-s` (service) attributes so existing manually-added entries with either convention remain findable.
 
 ```bash
-# PAT / API Key (from clipboard)
+# PAT / API Key / JSON contents (from clipboard)
 pbpaste | ~/.claude/lib/credential-store.sh set "<SERVICE_NAME>" -
 pbcopy < /dev/null  # clear clipboard
 
 # Non-secret value typed inline (a secret on argv is visible to ps and lands in shell history)
 ~/.claude/lib/credential-store.sh set "<SERVICE_NAME>" "<VALUE>"
 
-# JSON file from clipboard (preferred  -  no file path leaks into history)
-pbpaste | ~/.claude/lib/credential-store.sh set "<SERVICE_NAME>" -
-pbcopy < /dev/null
-
-# JSON file from disk (fallback when clipboard backend unavailable)
+# Key file from disk (the .p8, the Google Play JSON; or when the clipboard is unavailable)
 ~/.claude/lib/credential-store.sh set "<SERVICE_NAME>" - < /path/to/file.json
 
 # Read  -  a JSON value comes back exactly as it was stored, newlines included

package/pipeline/commands/multi-agent/store-ready/SKILL.md

@@ -1,12 +1,12 @@
 ---
-description: "Pre-submission store readiness for a built package, iOS and Android, local-only. Three symmetric gates per platform: a static package audit, the store's own authoritative validation, and a policy review against repo source. Separate verdict per gate, a skipped gate never counted as a pass. Validates only, never uploads. Use when a build is about to go to TestFlight or a Play track, or when a submission was rejected and the reason is not obvious."
-description-tr: "Üretilmiş paketin yükleme öncesi store hazırlığı, iOS + Android, yalnızca lokal. Platform başına üç simetrik kapı: statik paket denetimi, store'un kendi doğrulayıcısı, ve kaynağa karşı politika incelemesi. Kapı başına ayrı verdict, atlanan kapı asla pass sayılmaz. Sadece doğrular, asla yüklemez."
+description: "Pre-submission store readiness for a built package, iOS and Android, local-only. Three symmetric gates per platform: a static package audit, the store's own authoritative validation, and a policy review against repo source. Separate verdict per gate, a skipped gate never counted as a pass. Validates only, never ships a build. Use when a build is about to go to TestFlight or a Play track, or when a submission was rejected and the reason is not obvious."
+description-tr: "Üretilmiş paketin yükleme öncesi store hazırlığı, iOS + Android, yalnızca lokal. Platform başına üç simetrik kapı: statik paket denetimi, store'un kendi doğrulayıcısı, ve kaynağa karşı politika incelemesi. Kapı başına ayrı verdict, atlanan kapı asla pass sayılmaz. Sadece doğrular, build'i asla yayına göndermez."
 argument-hint: "[repo]  -  empty = pick; repo name or path; --ipa= | --archive= | --aab= | --apk=; --skip-sweep; --resume"
 parameters: [{"name":"repo","kind":"text"},{"name":"--ipa","kind":"path"},{"name":"--archive","kind":"path"},{"name":"--aab","kind":"path"},{"name":"--apk","kind":"path"},{"name":"--skip-sweep","kind":"flag"},{"name":"--resume","kind":"flag"}]
 gui: form
 destructive: false
 confirm: none
-allowed-tools: Agent, Bash, Read, Write, Edit, Glob, Grep, TaskCreate, TaskUpdate, AskUserQuestion, Skill, mcp__multi-agent-toolkit__ios_app_store_audit, mcp__multi-agent-toolkit__ios_export_ipa, mcp__multi-agent-toolkit__ios_testflight_validate, mcp__multi-agent-toolkit__ios_xcodebuild, mcp__multi-agent-toolkit__ios_xcresult, mcp__multi-agent-toolkit__android_apk_audit, mcp__multi-agent-toolkit__ios_screenshot, mcp__multi-agent-toolkit__ios_get_ui_tree, mcp__multi-agent-toolkit__ios_set_appearance, mcp__multi-agent-toolkit__ios_set_content_size, mcp__multi-agent-toolkit__android_screenshot, mcp__multi-agent-toolkit__android_get_ui_tree, mcp__multi-agent-toolkit__android_set_dark_mode, mcp__multi-agent-toolkit__android_set_font_scale
+allowed-tools: Agent, Bash, Read, Write, Edit, Glob, Grep, TaskCreate, TaskUpdate, AskUserQuestion, Skill, mcp__multi-agent-toolkit__ios_app_store_audit, mcp__multi-agent-toolkit__ios_export_ipa, mcp__multi-agent-toolkit__ios_testflight_validate, mcp__multi-agent-toolkit__ios_xcodebuild, mcp__multi-agent-toolkit__ios_xcresult, mcp__multi-agent-toolkit__android_apk_audit, mcp__multi-agent-toolkit__store_status, mcp__multi-agent-toolkit__store_asc_apps, mcp__multi-agent-toolkit__store_asc_next_build_number, mcp__multi-agent-toolkit__store_play_validate_bundle, mcp__multi-agent-toolkit__ios_screenshot, mcp__multi-agent-toolkit__ios_get_ui_tree, mcp__multi-agent-toolkit__ios_set_appearance, mcp__multi-agent-toolkit__ios_set_content_size, mcp__multi-agent-toolkit__android_screenshot, mcp__multi-agent-toolkit__android_get_ui_tree, mcp__multi-agent-toolkit__android_set_dark_mode, mcp__multi-agent-toolkit__android_set_font_scale
 ---
 
 # /multi-agent:store-ready  -  pre-submission validation, iOS + Android
@@ -18,8 +18,10 @@ back after you do.
 A worktree, when one is needed, exists only to archive without touching your
 working tree.
 
-**It never uploads.** iOS runs `--validate-app`, never `--upload-app`. Android
-never commits a Play edit. A validation run must not be able to ship a build by
+**It never ships.** iOS runs `--validate-app`, never `--upload-app`. Android
+never commits a Play edit: when Google Play is onboarded, Gate 2 uploads the
+bundle into a throwaway edit that is validated and deleted, and only after the
+user approves that plan. A validation run must not be able to ship a build by
 accident.
 
 **Input**: $ARGUMENTS
@@ -42,13 +44,19 @@ a package the store itself refuses, and a policy a human enforces.
 | Gate | iOS | Android |
 |---|---|---|
 | 1 Static | `ios_app_store_audit({archive_path, rules: "all"})`  -  18 rules with real ITMS codes. Needs an `.xcarchive`. Reference: `apple-archive-compliance` skill | `android_apk_audit` plus the `google-play-compliance` skill's 21 rules: `bundletool validate` + manifest dump, `aapt2 dump badging`, `apksigner verify`, ABI / native scan. Needs an `.aab` (an `.apk` narrows it, see Step 3) |
-| 2 Authoritative | `ios_testflight_validate({ipa_path, platform: "ios", <credentials>})` → `xcrun altool --validate-app`. Needs an `.ipa` + credentials | **No client shipped.** Play's authoritative check exists only server-side, through a Publishing API draft edit that is validated and then abandoned. The pipeline has no tool for it, so this gate reports `SKIPPED (no local Play validator)` and the report says so. Do not substitute `bundletool validate`  -  that is Gate 1 |
+| 2 Authoritative | `ios_testflight_validate({ipa_path, platform: "ios", <credentials>})` → `xcrun altool --validate-app`, plus `store_asc_next_build_number` for whether the build number is already used. Needs an `.ipa` + credentials | With `google_play` onboarded: `store_play_validate_bundle({package_name, bundle_path})`  -  Google validates the `.aab` in a throwaway Publishing API edit that is then deleted, never committed. Without it, Play's check exists only server-side and nothing local reproduces it, so this gate reports `SKIPPED (no local Play validator)` with the reason `Google Play not onboarded`. Do not substitute `bundletool validate`  -  that is Gate 1 |
 | 3 Policy | `ai-ios-toolkit:app-store-review` skill vs repo source | `ai-android-toolkit:play-store-review` skill vs repo source |
 
 Gate 2's asymmetry is real and is reported as an asymmetry, not smoothed over. On
 iOS it is the only gate that catches a version+build pair already used  -  the most
-common wasted upload. On Android nothing local reproduces it, so an Android run
-clears at most 2 of 3 gates and must never print `passed`.
+common wasted upload. On Android nothing local reproduces it: Gate 2 runs only when
+Google Play is onboarded and the user approves the upload into a throwaway edit.
+Without both, an Android run clears at most 2 of 3 gates and must never print
+`passed`.
+
+The `store_*` tools need `@mmerterden/multi-agent-toolkit-mcp` ≥ v3.17.0. On an
+older server they are absent, and each branch below that uses one falls back to
+the behaviour it has without the credential.
 
 ## Step 0  -  parse input, detect platform
 
@@ -123,7 +131,7 @@ Then resolve credentials, and **state which tier is active in the report**:
 
 | Tier | Source | Effect |
 |---|---|---|
-| 1 | ASC API key  -  key id + issuer id from the keychain via `prefs.global.keychainMapping`, `.p8` at `~/.appstoreconnect/private_keys/AuthKey_<keyId>.p8` | Gate 2 runs |
+| 1 | ASC API key  -  key id, issuer id and `.p8` in the Keychain (`appstore_connect_key_id`, `appstore_connect_issuer_id`, `appstore_connect_private_key`), read by the toolkit through the store reference file. `store_status` reports it as `appStoreConnect.configured` | Gate 2 runs; call `ios_testflight_validate` with neither `api_key_id` nor `apple_id` so it uses that key |
 | 2 | Apple ID + app-specific password, referenced as a keychain item | Gate 2 runs |
 | 3 | neither | **Gate 2 reports `SKIPPED`, and the run says so in the verdict line** |
 
@@ -138,9 +146,17 @@ command -v aapt2      >/dev/null || echo "MISSING: aapt2 (Android SDK build-tool
 command -v apksigner  >/dev/null || echo "MISSING: apksigner (Android SDK build-tools)"
 ```
 
-There is no credential tier to resolve: Gate 2 has no local client, so it is
-`SKIPPED` by construction rather than by configuration. Say which of the two it is
- -  a user who thinks a credential would unlock it will go looking for one.
+Then resolve whether Gate 2 can run. Call `store_status` (no probe) and read
+`googlePlay.configured`:
+
+| State | Gate 2 |
+|---|---|
+| `googlePlay.configured: true` and `MULTI_AGENT_UNATTENDED` unset | runs `store_play_validate_bundle`, after the user approves the upload (Step 5) |
+| `googlePlay.configured: true` and `MULTI_AGENT_UNATTENDED=1` | `SKIPPED (no local Play validator)`, reason: the toolkit refuses the upload in an unattended run |
+| not configured, or no `store_status` tool | `SKIPPED (no local Play validator)`, reason: `Google Play not onboarded` (`/multi-agent:setup` Step 3d) |
+
+Say which one it is: a user without the credential will go looking for one, and
+one with it needs to know why Gate 2 did not run.
 
 Credentials come from `/multi-agent:setup`; never prompt for a secret value in
 chat.
@@ -254,10 +270,34 @@ Render the verdict exactly as returned:
 Gate 2 is the only gate that catches a build number already used  -  so when it
 fails on that, say so plainly and name the next free build number.
 
-**Android**: report `SKIPPED (no local Play validator)` with one line on why: the
-authoritative check is a Play Publishing API draft edit, the pipeline ships no
-client for it, and no local tool substitutes. `bundletool validate` is Gate 1 and
-reporting it here would fake a cleared gate.
+**Build number** (App Store Connect onboarded, `store_status` reports
+`appStoreConnect.configured`): find the app with `store_asc_apps` by the archive's
+bundle id, then `store_asc_next_build_number({app_id, version: <CFBundleShortVersionString>})`.
+Report the archive's `CFBundleVersion` as `already used` (not above the highest
+uploaded one, with the suggested next) or `free`. Read-only; it never changes the
+project. Without the credential, skip this line and say why.
+
+**Android**, by the state resolved in Step 2:
+
+- **Google Play onboarded, attended run.** Call
+  `store_play_validate_bundle({package_name: <applicationId>, bundle_path: <.aab>})`
+  without `confirm`. It returns the plan only: it would open an edit, upload the
+  bundle, validate the edit, then delete it, committing nothing and changing no
+  track. Show that plan to the user and ask (picker, `question` / `description` in
+  `outputLanguage`, `header` `Play check`, labels `Validate on Play` / `Skip`).
+  Only on **Validate on Play**, call it again with `confirm: true`. Render the
+  verdict from `valid`: `true` → `PASS`, `false` → `FAIL` with the returned
+  `error`. On **Skip**, report `SKIPPED (no local Play validator)` with the reason
+  `user declined the upload`.
+- **Otherwise** (unattended, or not onboarded) do not call the tool: report
+  `SKIPPED (no local Play validator)` with the reason from the Step 2 table.
+
+`bundletool validate` is Gate 1 in every case; reporting it here would fake a
+cleared gate.
+
+**Open question, not a fact:** whether an upload into a deleted edit consumes its
+`versionCode` is not verified. After a Gate 2 run that uploaded, say so in the
+report, so the user decides whether to re-use that `versionCode`.
 
 ## Step 6  -  Gate 3, policy review
 
@@ -320,7 +360,10 @@ Advisory
   ...
 
 Not run
-  Gate 2: no local Play validator  -  authoritative check is server-side only
+  Gate 2: no local Play validator  -  Google Play not onboarded; the authoritative check is server-side only
+
+Open questions
+  Gate 2 (Android): whether the throwaway-edit upload consumed versionCode <n> is not verified
 
 Before rollout (human inputs, not verified)
   Phased rollout: <1% -> 10% -> 50% -> 100% | full>
@@ -332,7 +375,8 @@ Before rollout (human inputs, not verified)
 Rules for the report:
 
 - A skipped gate is never folded into the pass count. The verdict line states the
-  skip. An Android run therefore reads `2 of 3 gates cleared, 1 skipped` at best.
+  skip. An Android run whose Gate 2 did not run therefore reads
+  `2 of 3 gates cleared, 1 skipped` at best.
 - Every blocking finding carries a file path or a store code. A finding the user
   cannot act on is noise.
 - The `Before rollout` block is filled by a human, never inferred. When it is
@@ -357,7 +401,7 @@ Print, and stop:
 - `/multi-agent:channels` to land the findings in Jira / Confluence / Wiki / PR
 - the enabled stack plugin's `fix-bug` skill (`ai-ios-toolkit:fix-bug` or the stack equivalent) when Gate 3 produced code-level findings
 
-Never upload, never commit a Play edit, never bump the build number, never commit.
+Never upload a build for release, never commit a Play edit, never bump the build number, never commit.
 
 ## Related surfaces
 

package/pipeline/lib/credential-inventory.sh

@@ -363,8 +363,9 @@ capability_of() {
     jenkins)           echo "read build results" ;;
     npm)               echo "publish to the npm registry" ;;
     vercel)            echo "deploy the website to Vercel and read its deployment status" ;;
-    appstore_connect_key_id|appstore_connect_issuer_id)
-                       echo "validate an archive against App Store rules before submission (the .p8 itself is a file at ~/.appstoreconnect/private_keys/, never a mapping)" ;;
+    appstore_connect_key_id|appstore_connect_issuer_id|appstore_connect_private_key)
+                       echo "validate an archive against App Store rules before submission and read App Store Connect through the toolkit's store_asc_* tools (key id, issuer id and .p8 together, via the store reference file)" ;;
+    google_play)       echo "read Google Play apps, tracks, reviews and vitals and validate an .aab in a throwaway edit through the toolkit's store_play_* tools (via the store reference file)" ;;
     appstore_connect_apple_id|appstore_connect_password_item)
                        echo "upload a build with an app-specific password (Tier 2 of the App Store Connect chain)" ;;
     claude_oauth_token|claude_oauth_token_fallback)

package/pipeline/multi-agent-refs/features/doctor.md

@@ -188,6 +188,23 @@ re-onboard a token that was never the problem is the exact failure the keychain
 rules warn about one layer up. **SKIP unless `--probe` is passed**, and the
 skip is printed, because a network check is the user's decision to spend.
 
+### store-reference
+
+Whether the toolkit's store reference file (`~/.config/multi-agent-toolkit/store.json`,
+or `MCP_TOOLKIT_STORE_CONFIG`) names the Keychain items that `keychainMapping`
+holds for App Store Connect (`appstore_connect_key_id`, `appstore_connect_issuer_id`,
+`appstore_connect_private_key`) and Google Play (`google_play`). The `store_*`
+tools and `ios_testflight_validate` read the keys only through that file, so a
+key that is in the Keychain but not in the file is invisible to them.
+
+Asked through `write-store-config.mjs --check`, which checks each item's presence
+with `credential-store.sh probe` and never reads a value. OK when none of the
+four keys is mapped: nothing was claimed. WARN when the file is missing or stale,
+with the single step `run node "$HOME/.claude/scripts/write-store-config.mjs"`.
+INFO when a store is only partly onboarded (for example the key id and issuer id
+mapped without the `.p8`), with setup as the step. SKIP when the writer is not
+installed or the credential store does not answer.
+
 ### embedded-credentials
 
 A token in a git remote URL or a tracked config file. BLOCK: this one leaks

package/pipeline/multi-agent-refs/keychain.md

@@ -163,6 +163,8 @@ The shell driver auto-delegates to `~/.claude/scripts/keychain.py` for determini
 | `vercel`           | Vercel deploys     | `${USER}_Vercel_Access_Token`      | Access Token | Vercel -> Account Settings -> Tokens. Read by `vercel-deploy.sh`; never passed on argv |
 | `appstore_connect_key_id` | App Store Connect | `${USER}_AppStoreConnect_Key_Id` | Identifier, not a secret | App Store Connect -> Users and Access -> Integrations -> App Store Connect API |
 | `appstore_connect_issuer_id` | App Store Connect | `${USER}_AppStoreConnect_Issuer_Id` | Identifier, not a secret | Same page as the key id; one issuer id per team |
+| `appstore_connect_private_key` | App Store Connect | `${USER}_AppStoreConnect_Private_Key` | Full PEM text of `AuthKey_<keyId>.p8` | Same page as the key id; downloadable once. Stored from the file via stdin (`set appstore_connect_private_key - < AuthKey_<keyId>.p8`), probed first with `probe-store-key.mjs --asc` |
+| `google_play` | Google Play | `${USER}_GooglePlay_Access_Json` | Service-account JSON, as issued | Play Console -> Setup -> API access; invite the account with app permissions and enable the Google Play Android Developer API and the Google Play Developer Reporting API. Probed first with `probe-store-key.mjs --play` |
 | `appstore_connect_apple_id` | App Store Connect | `${USER}_AppStoreConnect_Apple_Id` | Email address | The Apple ID itself; no generation step |
 | `appstore_connect_password_item` | App Store Connect | `${USER}_AppStoreConnect_Password_Item` | Keychain ITEM NAME, not a password | `xcrun altool --store-password-in-keychain-item`; map only the item NAME |
 |  -                   | Git Identity       | Stored in preferences JSON         | Not Keychain | Written to preferences by setup Step 4 |

package/pipeline/multi-agent-refs/outside-the-pipeline.md

@@ -104,6 +104,7 @@ another stack's toolkit in its place.
 | `design_*` (`design_visual_compare`, `design_ui_geometry`, `design_report`, ...) | a built screen has to be compared against its design |
 | `ios_app_store_audit` | a package is heading for review |
 | `ios_testflight_validate` | validating a build before upload |
+| `store_*` (`store_status`, `store_asc_*`, `store_play_*`, `store_search` / `store_call`) | a question about App Store Connect or Google Play data: builds and build numbers, reviews, subscriptions, tracks, vitals. Keys come from the Keychain via the store reference file `/multi-agent:setup` writes; `store_status` says which store resolves. Writes return a preview until `confirm: true` and are refused unattended |
 
 Registered at user scope by the installer, and preserved by uninstall - the tools are
 useful with no pipeline at all. If it is not registered the tools simply are not