@mmerterden/multi-agent-pipeline 20.15.0 → 20.16.0

package/pipeline/skills/shared/README.md

@@ -2,11 +2,11 @@
 
 Single source of truth for skills delivered to both Claude Code (`~/.claude/skills/`) and Copilot CLI (`~/.copilot/skills/`) by the installer.
 
-**Total:** 220 skills (66 core + 154 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
+**Total:** 221 skills (67 core + 154 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
 
 ## Directory layout
 
-- **`core/`**  -  66 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
+- **`core/`**  -  67 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
 - **`external/`**  -  154 iOS / Android / generic skills that ship into the stack plugins. Each names its origin in `metadata.source`: `multi-agent-pipeline` when written here, or the upstream and license a `NOTICE-*.md` in this directory covers.
 - Install destinations (ADR-0009): Claude Code gets NO local copy of `external/` - it loads those skills from the `multi-agent-plugins` marketplace, namespaced (`ai-<stack>-toolkit:<name>`); only the two compliance catalogs from `core/` land in `~/.claude/skills/`. Copilot CLI and Codex CLI receive a flat copy filtered to the enabled stacks. `external/` remains the single authoring source that `build-stack-plugins.mjs` publishes from.
 
@@ -14,7 +14,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 
 ## Categories
 
-- [Pipeline Orchestration](#pipeline-orchestration)  -  66
+- [Pipeline Orchestration](#pipeline-orchestration)  -  67
 - [iOS / Apple Ecosystem](#ios-apple-ecosystem)  -  89
 - [Android / Kotlin](#android-kotlin)  -  16
 - [Web](#web)  -  10
@@ -91,6 +91,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`multi-agent-testflight-validation`](./core/multi-agent-testflight-validation/) | `core` | iOS-pinned alias of store-ready: same three gates on an iOS build, one implementation. Validates a TestFlight / App Store package, never upl |
 | [`multi-agent-uninstall`](./core/multi-agent-uninstall/) | `core` | Uninstall the pipeline from Claude Code + Copilot CLI. Keychain access tokens are always left untouched; --all-data also clears pipeline set |
 | [`multi-agent-update`](./core/multi-agent-update/) | `core` | Update the pipeline to the latest version: git pull, install, migrate. Use when the installed pipeline is behind and should be brought to th |
+| [`valven-rules`](./core/valven-rules/) | `core` | Delivery-flow rules from the metrics Valven reports: PR size, one concern per PR, tests with source, issue keys, no WIP commits, rework, PR  |
 
 ## iOS / Apple Ecosystem
 

package/pipeline/skills/shared/core/multi-agent-review/SKILL.md

@@ -37,6 +37,8 @@ Skip Phase 0-3 and review a diff only. Input shapes: a PR (`#N`, `repo#N`, GitHu
    # bitbucket PR: curl -u "$BB_USER:$BB_TOKEN" .../pull-requests/$N/diff?contextLines=10
    ```
 
+2c. **Valven delivery rules**  -  required on every input. Run `node "$HOME/.claude/scripts/valven-gate.mjs" --mode review --out "$VG_FILE"` plus the input's sources: a branch adds `--repo . --base origin/develop --head <ref>`; a PR adds `--branch <headRef> --pr-body-file <body> --commits-file <one subject per line>` (GitHub `gh pr view --json headRefName,body,commits`, Bitbucket `fromRef.displayId`, `description`, `/commits`) and either `--repo . --base origin/<baseRef> --head FETCH_HEAD` after `git fetch origin <headRef>` when the cwd is that repo, or `--diff-file <patch>` (rework then reports `not-measured`). Exit 0 clean, 1 findings, 2 could not run: print `Valven: not measured (<reason>)`, never "passed". `findings[]` (`tag: valven`) join the reviewer findings at step 5 and are accepted unless the task is exempt, so an `important` one makes step 7 NEEDS WORK. Old-work findings (`VLV-AGE-01`, `VLV-BEHIND-01`, `VLV-TRACE-03`; commit lines are `<ISO author date>\t<subject>`) get the `valven-port.mjs` plan in their fix: new branch, dropped commits, then "open the new PR, close this one". When `splitRequired`, run `valven-split.mjs` with the same base and head (no `--apply`) and add its slice table to the `VLV-SIZE-01` fix. The registry's judgement rules (`VLV-SCOPE-02`, `VLV-PRDESC-02`, from `$HOME/.claude/skills/valven-rules/references/rules.yml`) go into every reviewer prompt in step 3. Contract: `$HOME/.claude/skills/valven-rules/SKILL.md`.
+
 3. **Start parallel reviewers**  -  three on every host; only the second slot differs, because GPT-5.4 exists on Copilot and Codex but not on Claude Code, where Opus fills it:
 
    **Claude Code (3 in parallel while the fable rung is on, 2 while it is off).** Resolve the fable slots first; this command has no Phase 0:

package/pipeline/skills/shared/core/valven-rules/SKILL.md

@@ -0,0 +1,62 @@
+---
+name: valven-rules
+description: "Delivery-flow rules from the metrics Valven reports: PR size, one concern per PR, tests with source, issue keys, no WIP commits, rework, PR body, small hotfixes. Use when developing, committing or reviewing a change held to these rules, or splitting a branch into stacked PRs."
+user-invocable: false
+metadata:
+  language: en
+  standards-registry: references/rules.yml
+---
+
+# valven-rules
+
+The registry is `references/rules.yml`. It holds two blocks:
+
+| Block | Who checks it | Read by |
+|---|---|---|
+| `gate_rules` | `scripts/valven-gate.mjs`, from the diff, the commit subjects, the branch name and the PR body | the gate only |
+| `rules` | the reviewers, as judgement | `skill-conformance.mjs`, which puts them in `${CRITERIA}` |
+
+Measured rules stay out of `rules` on purpose: a reviewer asked for a verdict on a line count
+either recounts it or guesses, and both are worse than the number the script already has.
+
+## Where it runs
+
+| Point | Command | A violation |
+|---|---|---|
+| Phase 1 Step 6 | plan estimates lines per task against `VLV-SIZE-01` | the plan proposes stacked slices before any code exists |
+| Phase 2 exit, Gate 6 | `valven-gate.mjs --mode dev` | blocks the handoff to Review; size findings set `state.valven.splitRequired` |
+| Phase 4, before push | `valven-gate.mjs --mode commit`, then `valven-split.mjs` when a split is required | the branch ships as stacked pull requests, one per slice |
+| Phase 3 Step 3.0 and `/multi-agent:review` | `valven-gate.mjs --mode review` | findings merge into triage with `tag: valven`; an accepted one sets NEEDS WORK |
+
+## Build on one branch, ship as small pull requests
+
+Work happens on one branch. When the gate reports `VLV-SIZE-01`, `VLV-SIZE-02` or
+`VLV-SCOPE-01`, `valven-split.mjs` plans slices of at most the size budget:
+
+1. Pure renames and moves go first, as their own slice.
+2. Each test file travels with the source file it pairs with.
+3. Slices follow layer order: models and services, then view models and use cases, then views,
+   then everything else.
+4. A single file larger than the budget becomes its own slice and is reported, never cut.
+
+`--apply` materialises the plan as stacked branches `<branch>-p1` .. `<branch>-pN`: `-p1` from the
+base, each next one from the previous. The top of the stack has the same tree as the original
+branch, which the script verifies before it reports success. Each slice is built before its
+pull request opens; a slice that does not build is merged into its neighbour and the plan is
+re-run.
+
+## Old work moves, it is not rebased
+
+`VLV-AGE-01`, `VLV-BEHIND-01` and `VLV-TRACE-03` mean the branch carries old or foreign work.
+`valven-port.mjs --apply` cuts `<branch>-v2` from the current base tip and applies the net change
+with `git apply --3way` as one commit; a conflict rolls back and names the paths. Port first, then
+split. Contract: `multi-agent-refs/features/valven.md`, "Old work".
+
+## Thresholds
+
+Defaults live in `gate_rules`. `prefs.global.valven.thresholds` overrides them per rule ID, for
+example `{"VLV-SIZE-01": {"important_over": 300}}`. `prefs.global.valven.enabled: false` turns the
+gate off; the run then logs `valven: disabled by prefs` so a skipped check never reads as a pass.
+
+A rule the gate cannot measure (no checkout for the rework blame, no PR body in branch mode) is
+reported as `not-measured` with the reason.

package/pipeline/skills/shared/core/valven-rules/references/rules.yml

@@ -0,0 +1,140 @@
+version: 1.0.0
+updated: 2026-10-02
+owner: delivery flow
+description: >
+  Delivery-flow rules derived from the metrics Valven reports per team and per
+  developer: cycle time, rework rate, review responsiveness, PR complexity,
+  commit risk, lead time for changes and change failure rate. Valven publishes no
+  formulas or thresholds, so every threshold below is a stated default that
+  prefs.global.valven.thresholds overrides.
+
+# The whole change set is in scope: these rules judge the shape of a pull
+# request, not the language inside it. Generated output, lockfiles and recorded
+# snapshots are removed first by schemas/review-file-exclusions.json, so a
+# regenerated client never counts toward a size budget.
+scope:
+  paths: ["**"]
+  notCovered:
+    code-quality: language rules live in the stack registries (ios-coding-standard and the like)
+
+severity_levels: [blocking, important, suggestion]
+enforcement_kinds:
+  gate: measured by scripts/valven-gate.mjs from the diff, the commits, the branch name and the PR body
+  judgement: requires a reviewer
+
+# Measured rules. valven-gate.mjs reads this block; skill-conformance.mjs does
+# not, so reviewers are never asked for a verdict on something a script counts.
+# `modes` names the pipeline points the rule runs at: dev (Phase 2 exit), commit
+# (Phase 4 before push) and review (Phase 3 and /multi-agent:review).
+gate_rules:
+  - id: VLV-SIZE-01
+    title: A pull request changes at most 250 human-authored lines; past 600 it cannot merge as one
+    metric: PR Complexity, Cycle Time, Review Responsiveness
+    severity: important
+    important_over: 250
+    blocking_over: 600
+    modes: [dev, commit, review]
+    fix: split the branch into stacked pull requests with scripts/valven-split.mjs
+  - id: VLV-SIZE-02
+    title: A pull request touches at most 25 human-authored files
+    metric: PR Complexity, Commit Risk Score
+    severity: important
+    important_over: 25
+    modes: [dev, commit, review]
+    fix: split the branch into stacked pull requests with scripts/valven-split.mjs
+  - id: VLV-SCOPE-01
+    title: Renames and moves do not share a pull request with content changes
+    metric: PR Complexity, Rework Rate
+    severity: important
+    renames_at_least: 3
+    content_lines_over: 50
+    modes: [dev, commit, review]
+    fix: ship the renames as their own pull request first; valven-split.mjs puts them in slice 1
+  - id: VLV-TEST-01
+    title: A change to source code carries a change to its tests
+    metric: Change Failure Rate, Rework Rate
+    severity: important
+    modes: [dev, commit, review]
+    fix: add or update the test that exercises the changed behaviour
+  - id: VLV-TRACE-01
+    title: The branch name carries the issue key
+    metric: Cycle Time, Lead Time for Changes
+    severity: important
+    key_pattern: "[A-Z][A-Z0-9]+-[0-9]+"
+    modes: [dev, commit, review]
+    fix: rename the branch to feature/<KEY>-<id> or bugfix/<KEY>-<id>
+  - id: VLV-TRACE-02
+    title: Every commit subject carries the issue key
+    metric: Cycle Time, Lead Time for Changes
+    severity: important
+    key_pattern: "[A-Z][A-Z0-9]+-[0-9]+"
+    modes: [commit, review]
+    fix: reword the commits so each subject ends with [<KEY>-<id>]
+  - id: VLV-COMMIT-01
+    title: No WIP, fixup, squash or temp commits reach the pull request
+    metric: Commit Risk Score, Rework Rate
+    severity: important
+    subject_pattern: "^(wip\\b|fixup!|squash!|amend!|temp\\b|tmp\\b)"
+    modes: [commit, review]
+    fix: squash them into the commit they amend before pushing
+  - id: VLV-REWORK-01
+    title: At most 30% of the removed lines were written in the last 21 days
+    metric: Rework Rate
+    severity: important
+    ratio_over: 0.30
+    window_days: 21
+    min_removed_lines: 20
+    modes: [dev, commit, review]
+    fix: settle the requirement before rewriting; if the earlier code was wrong, say so in the PR body
+  - id: VLV-PRDESC-01
+    title: The PR body exists, is at least 80 characters and says how the change was tested
+    metric: Review Responsiveness, Cycle Time
+    severity: important
+    min_chars: 80
+    test_pattern: "(test|verified|how to verify|nasıl test)"
+    modes: [review]
+    fix: add what changed, why, and how it was tested; attach a screenshot for UI changes
+  - id: VLV-HOTFIX-01
+    title: A hotfix branch changes at most 150 human-authored lines
+    metric: Mean Time To Recover, Change Failure Rate
+    severity: important
+    important_over: 150
+    branch_pattern: "^hotfix/"
+    modes: [dev, commit, review]
+    fix: keep the fix to the incident; move everything else to a follow-up pull request
+  - id: VLV-AGE-01
+    title: No commit in the pull request is older than 14 days
+    metric: Lead Time for Changes, Cycle Time
+    severity: important
+    days_over: 14
+    modes: [dev, commit, review]
+    fix: start a fresh branch from the current base, carry the change with scripts/valven-port.mjs, open a new PR and close this one
+  - id: VLV-BEHIND-01
+    title: The branch is at most 50 commits behind its base and its merge-base is at most 14 days old
+    metric: Lead Time for Changes, Change Failure Rate
+    severity: important
+    behind_over: 50
+    base_days_over: 14
+    modes: [dev, commit, review]
+    fix: carry the change onto a fresh branch from the current base with scripts/valven-port.mjs
+  - id: VLV-TRACE-03
+    title: Every commit carries the same issue key as the branch
+    metric: PR Complexity, Lead Time for Changes
+    severity: important
+    key_pattern: "[A-Z][A-Z0-9]+-[0-9]+"
+    modes: [commit, review]
+    fix: move the commits of the other issue to their own branch and PR
+
+# Judgement rules. skill-conformance.mjs selects these for every diff, so each
+# reviewer returns a verdict per ID.
+rules:
+  - id: VLV-SCOPE-02
+    title: The pull request does one thing; a feature, a refactor and a fix are separate pull requests
+    severity: important
+    enforcement: judgement
+    rationale: mixed pull requests are the main input to PR Complexity and Rework Rate
+  - id: VLV-PRDESC-02
+    title: The PR body explains why the change exists and how a reviewer verifies it
+    severity: important
+    enforcement: judgement
+    rationale: review waiting time drops when the reviewer does not have to reconstruct the intent

package/pipeline/skills/skills-index.md

@@ -3,13 +3,13 @@
 > Auto-generated by `pipeline/scripts/build-skills-index.mjs`  -  do not hand-edit.
 > Regenerate with `node pipeline/scripts/build-skills-index.mjs`.
 
-**218 skills** across 2 groups.
+**221 skills** across 2 groups.
 
 | Group | Name | Platform | Description |
 |-------|------|----------|-------------|
 | external | `accessibility-compliance-accessibility-audit` |  -  | WCAG 2.2 AA audit process for web, iOS and Android: scope, automated scans, screen-reader and keyboard checks, severity, report, retest. Use |
 | external | `agent-introspection-debugging` |  -  | Structured self-debugging for an agent that is stuck, looping, or failing repeatedly. Replaces blind re-prompting with capture, diagnose, co |
-| external | `alarmkit` |  -  | Implement AlarmKit alarms and countdown timers for iOS and iPadOS with Lock Screen, Dynamic Island, StandBy, and paired Apple Watch system U |
+| external | `alarmkit` |  -  | AlarmKit alarms and countdown timers on iOS and iPadOS 26: AlarmManager scheduling and authorization, AlarmAttributes, AlarmPresentation, Al |
 | external | `android-architecture` |  -  | Design and implement Clean Architecture with multi-module structure on Android. Covers domain/data/presentation layers, Hilt dependency inje |
 | external | `android-build-quality-gates` |  -  | Encode Android module and quality rules as build-failing Gradle tasks: layer-dependency checks, coverage floors, a Compose-stability gate, l |
 | external | `android-datastore` |  -  | Typed Jetpack DataStore as the modern SharedPreferences replacement: Preferences and typed stores, serializer-layer encryption, and migratio |
@@ -20,42 +20,42 @@
 | external | `android-security` |  -  | Secure Android apps with ProGuard/R8 obfuscation, OkHttp certificate pinning, BiometricPrompt authentication, EncryptedSharedPreferences, Pl |
 | external | `api-patterns` |  -  | Choosing an API style (REST, GraphQL, gRPC, webhooks, events) and the contracts every style needs: versioning, cursor pagination, idempotenc |
 | external | `api-security-best-practices` |  -  | API security against the OWASP API Top 10: object-level authorization, token handling, input validation, rate limits, secrets. Use when buil |
-| external | `app-clips` |  -  | Build iOS App Clips with invocation URLs, App Clip Codes, NFC, QR codes, Safari banners, Maps, Messages, target setup, App Store Connect exp |
-| external | `app-intents` |  -  | Implement App Intents for Siri, Shortcuts, Spotlight, widgets, Control Center, and Apple Intelligence on iOS. Covers AppIntent actions, AppE |
+| external | `app-clips` |  -  | iOS App Clips: target setup, invocation from NFC, App Clip Codes, QR, Messages, Maps and Safari banners, App Store Connect experiences, size |
+| external | `app-intents` |  -  | App Intents for Siri, Shortcuts, Spotlight, widgets, Control Center and Apple Intelligence: AppIntent actions, AppEntity and EntityQuery, Ap |
 | external | `app-store-changelog` |  -  | Generate user-facing App Store release notes from git history since the last tag. Use when release notes have to be written from the commits |
-| external | `app-store-optimization` |  -  | Optimize App Store product pages for search visibility and conversion. Use for App Store Optimization (ASO), keyword research, app name/subt |
-| external | `app-store-review` |  -  | Prepare for App Store review and prevent rejections. Covers App Store review guidelines, app rejection reasons, PrivacyInfo.xcprivacy privac |
+| external | `app-store-optimization` |  -  | App Store Optimization (ASO) for ranking and conversion: keyword research; app name, subtitle and 100-byte keyword field; description and pr |
+| external | `app-store-review` |  -  | App Store submission readiness and rejection prevention: Review Guidelines 2.1, 2.3, 2.5.1, 3.1.1, 4.2 and 5.1.2, PrivacyInfo.xcprivacy mani |
 | core | `apple-archive-compliance` |  -  | Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code  |
-| external | `apple-on-device-ai` |  -  | Integrate on-device AI using Foundation Models framework, Core ML, and open-source LLM runtimes on Apple Silicon. Covers Foundation Models ( |
+| external | `apple-on-device-ai` |  -  | On-device AI on Apple hardware: Foundation Models (SystemLanguageModel, LanguageModelSession, @Generable and @Guide structured output, tool  |
 | external | `architecture` |  -  | Stack-neutral architecture decisions: quality drivers, options with a trade-off matrix, reversibility, ADRs, fitness checks. Use when making |
-| external | `authentication` |  -  | Implement iOS authentication flows with AuthenticationServices and LocalAuthentication. Use when building Sign in with Apple, passkey/WebAut |
-| external | `avkit` |  -  | Create media playback experiences using AVKit. Use when adding video players with AVPlayerViewController, enabling Picture-in-Picture, routi |
-| external | `background-processing` |  -  | Schedule and execute background work on iOS using BGTaskScheduler. Use when registering BGAppRefreshTask for short background fetches, BGPro |
-| external | `backlog` |  -  | The engineering backlog registry for deferred-but-approved work: each deferred job lands here with its spec, origin and unblock condition. U |
-| external | `callkit-voip` |  -  | Implement VoIP calling with CallKit and PushKit. Use when building incoming/outgoing call flows, registering for VoIP push notifications, co |
+| external | `authentication` |  -  | iOS sign-in with AuthenticationServices and LocalAuthentication: Sign in with Apple, passkey (WebAuthn) sign-up and login via ASAuthorizatio |
+| external | `avkit` |  -  | AVKit playback UI: AVPlayerViewController, SwiftUI VideoPlayer, Picture-in-Picture, AirPlay routing, transport controls, subtitles and close |
+| external | `background-processing` |  -  | iOS background work with BGTaskScheduler: BGAppRefreshTask short fetches, BGProcessingTask long maintenance, BGContinuedProcessingTask (iOS  |
+| external | `backlog` |  -  | Registry and routine for approved but postponed engineering work: each item keeps its full spec, origin and unblock condition, and moves thr |
+| external | `callkit-voip` |  -  | CallKit and PushKit VoIP calling: CXProvider and CXCallController, incoming and outgoing call flows, call actions, VoIP push registration an |
 | external | `ci-cd-pipelines` |  -  | CI/CD pipelines: GitHub Actions workflows, Docker multi-stage builds, environment management, secret management, deployment strategies. Use  |
 | external | `clean-code` |  -  | Readability checks for code in any language: names, function focus, control flow, side effects, errors, comments, duplication. Use when writ |
-| external | `cloudkit-sync` |  -  | Implement, review, or improve CloudKit and iCloud sync in iOS/macOS apps. Use when working with CKContainer, CKRecord, CKQuery, CKSubscripti |
+| external | `cloudkit-sync` |  -  | CloudKit and iCloud sync on iOS and macOS: CKContainer public, private and shared databases, CKRecord, CKQuery, CKSubscription, CKSyncEngine |
 | external | `compose-components` |  -  | Build Material 3 UI components and custom composables with Jetpack Compose. Covers TopAppBar, Scaffold, BottomSheet, SnackbarHost, slot-base |
 | external | `compose-navigation` |  -  | Implement type-safe navigation in Jetpack Compose using Navigation 2.8+ with @Serializable routes, NavHost, typed composable routes, nested  |
 | external | `compose-testing` |  -  | Test Jetpack Compose UI with createComposeRule, semantic matchers (onNodeWithText, onNodeWithTag, onNodeWithContentDescription), actions (pe |
-| external | `contacts-framework` |  -  | Read, create, update, and pick contacts using the Contacts and ContactsUI frameworks. Use when fetching contact data, saving new contacts, w |
+| external | `contacts-framework` |  -  | Contacts and ContactsUI: CNContactStore authorization and limited access, fetch and save requests, creating, updating and deleting contacts, |
 | external | `context-compression` |  -  | Keeping long LLM agent sessions on track: what a summary must preserve, incremental structured summaries, state in files, compact versus res |
-| external | `core-bluetooth` |  -  | Build direct Bluetooth Low Energy workflows with Core Bluetooth. Use when implementing BLE central or peripheral GATT communication, scannin |
-| external | `core-data` |  -  | Build, review, or improve Core Data persistence in apps that have not adopted SwiftData. Use when working with NSManagedObject subclasses, N |
-| external | `core-motion` |  -  | Access Core Motion accelerometer, gyroscope, magnetometer, device-motion, pedometer, activity-recognition, altitude, headphone motion, batch |
-| external | `core-nfc` |  -  | Read and write NFC tags using CoreNFC. Use when scanning NDEF tags, reading ISO7816/ISO15693/FeliCa/MIFARE tags, writing NDEF messages, hand |
-| external | `coreml` |  -  | Integrate Core ML models in iOS apps for on-device machine learning inference. Covers model loading (.mlmodel, .mlpackage, .mlmodelc), predi |
+| external | `core-bluetooth` |  -  | Direct BLE with Core Bluetooth: central and peripheral GATT communication, CBCentralManager scanning and connecting, service and characteris |
+| external | `core-data` |  -  | Create, audit or refine Core Data persistence for apps still on Core Data rather than SwiftData: stack setup, NSManagedObject subclasses, NS |
+| external | `core-motion` |  -  | Core Motion on iOS and watchOS: accelerometer, gyroscope, magnetometer, fused device motion and reference frames, CMPedometer steps, distanc |
+| external | `core-nfc` |  -  | Core NFC on iPhone: reading and writing NDEF tags, ISO7816, ISO15693, FeliCa and MIFARE access, reader session lifecycle, NFC entitlement an |
+| external | `coreml` |  -  | Swift-side Core ML: loading .mlmodel, .mlpackage and .mlmodelc, predictions via generated classes and MLFeatureProvider, compute units, asyn |
 | external | `council` |  -  | Convene a multi-voice council for ambiguous decisions, tradeoffs, and go/no-go calls. Use when several valid paths exist and you need struct |
-| external | `cryptokit` |  -  | Use Apple CryptoKit for Swift cryptographic primitives. Use when hashing with SHA-2 or SHA-3, generating HMACs, encrypting with AES-GCM or C |
+| external | `cryptokit` |  -  | CryptoKit in Swift: SHA-2, SHA-3, HMAC, AES-GCM, ChaChaPoly, P256, P384, P521, Curve25519 and ML-DSA signatures, ECDH with HKDF, HPKE, ML-KE |
 | external | `css-modern` |  -  | Modern CSS: container queries, nesting, @layer, Grid/Flexbox patterns, custom properties, animations, and transitions. Use when writing or r |
 | external | `database-patterns` |  -  | Database patterns: SQL best practices (PostgreSQL), indexing, query optimization, migrations, schema design, ORMs (SQLAlchemy, Prisma, Drizz |
-| external | `debugging-instruments` |  -  | Debug iOS apps and profile performance using LLDB, Memory Graph Debugger, and Instruments. Use when diagnosing crashes, memory leaks, retain |
+| external | `debugging-instruments` |  -  | Xcode debugging and profiling: LLDB, Memory Graph Debugger, Instruments, crashes, leaks and retain cycles, main-thread hangs, slow rendering |
 | external | `debugging-strategies` |  -  | Language-neutral debugging method: reproduce, minimise, falsifiable hypotheses, git bisect, instrumentation, production traces, concurrency  |
-| external | `device-integrity` |  -  | Verify device legitimacy and app integrity using DeviceCheck (DCDevice per-device bits) and App Attest (DCAppAttestService key generation, a |
+| external | `device-integrity` |  -  | DeviceCheck and App Attest: DCDevice tokens and per-device bits, DCAppAttestService key generation, attestation and assertions. Use when add |
 | external | `docker-expert` |  -  | Dockerfiles and images: multi-stage builds, BuildKit cache and secret mounts, slim or distroless bases, non-root, healthchecks, scanning, mu |
-| external | `energykit` |  -  | Query grid electricity forecasts and submit load events using EnergyKit to help users optimize home electricity usage. Use when building sma |
-| external | `eventkit-calendar` |  -  | Create, read, and manage calendar events and reminders using EventKit and EventKitUI. Use when adding events to the user's calendar, creatin |
+| external | `energykit` |  -  | EnergyKit on iOS 26: grid electricity forecasts via ElectricityGuidance, EnergyVenue, EV and HVAC load events, ElectricityInsightService his |
+| external | `eventkit-calendar` |  -  | EventKit and EventKitUI: adding events to the user's calendar, creating reminders, recurrence rules, calendar or reminders access, event edi |
 | external | `evidence-github` |  -  | Search GitHub for facts an analysis can cite - a known issue in a dependency, the PR that fixed it, what a release actually changed, prior a |
 | external | `evidence-registry` |  -  | Check a package's real version, deprecation status and release notes on npm, PyPI, Maven Central or Swift Package Index. Use when a spec or  |
 | external | `fastapi-pro` |  -  | FastAPI with Pydantic v2: lifespan, settings, Annotated dependencies, async SQLAlchemy 2.0 sessions, error handlers, background work, httpx  |
@@ -63,7 +63,7 @@
 | external | `github-actions-templates` |  -  | Authoring GitHub Actions workflows: triggers, matrices, caching, concurrency, least-privilege permissions, SHA pinning, OIDC, reusable workf |
 | core | `google-play-compliance` |  -  | Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error c |
 | external | `gradle-kotlin-dsl` |  -  | Configure Android builds with Gradle Kotlin DSL, version catalogs (libs.versions.toml), convention plugins (build-logic module), common conf |
-| external | `healthkit` |  -  | Read, write, and query Apple Health data using HealthKit. Covers HKHealthStore authorization, sample queries, statistics queries, statistics |
+| external | `healthkit` |  -  | HealthKit on iOS, iPadOS, watchOS and visionOS: HKHealthStore authorization, sample, statistics and chart-ready collection queries, saving H |
 | external | `hig-components-content` |  -  | Apple HIG for content views mapped to SwiftUI: lists, tables, grids, charts, images, text, web views, empty states. Use when choosing or rev |
 | external | `hig-components-layout` |  -  | Apple HIG for app structure mapped to SwiftUI: tab bars, split views, navigation stacks, toolbars, sheets, popovers, alerts, windows, iOS 26 |
 | external | `hig-components-status` |  -  | Apple HIG for status UI mapped to SwiftUI: progress views, gauges, placeholders, status bar, activity rings, success and failure feedback. U |
@@ -73,24 +73,24 @@
 | external | `hig-patterns` |  -  | Apple HIG interaction patterns mapped to SwiftUI: modality, loading, empty and error states, feedback, undo, search, data entry, settings, s |
 | external | `hig-platforms` |  -  | Apple HIG per platform: iPhone, iPad, Mac, Watch, TV and Vision Pro conventions, and adapting one SwiftUI codebase across them. Use when a d |
 | external | `hig-technologies` |  -  | Apple HIG for system technologies: Sign in with Apple, passkeys, Apple Pay, Wallet, Siri and App Intents, HealthKit, HomeKit, iCloud, Maps,  |
-| external | `homekit-matter` |  -  | Control smart-home accessories and commission Matter devices using HomeKit and MatterSupport. Use when managing homes/rooms/accessories, cre |
+| external | `homekit-matter` |  -  | HomeKit and MatterSupport: managing homes, rooms, zones and accessories, reading characteristics, action sets and triggers, Matter commissio |
 | external | `html-semantic` |  -  | Semantic HTML5: elements, forms with validation and accessibility, SEO best practices, structured data, Open Graph, Twitter Cards. Use when  |
 | external | `humanizer` |  -  | Remove AI-generated writing patterns from text. Makes output sound natural and human-written. Detects inflated language, filler phrases, AI  |
-| external | `ios-accessibility` |  -  | Implements, reviews, or improves accessibility in iOS/macOS apps with SwiftUI, UIKit, and AppKit. Use when adding VoiceOver, Voice Control,  |
+| external | `ios-accessibility` |  -  | VoiceOver, Voice Control, Switch Control and Full Keyboard Access in SwiftUI, UIKit and AppKit on iOS, iPadOS and macOS: labels, hints, valu |
 | external | `ios-coding-standard` |  -  | The iOS coding-standard rule registry: 99 stable-ID rules across readability, security, service layer, business rules, concurrency, testing, |
 | external | `ios-debugger-agent` |  -  | Debug the current iOS project on a booted simulator with XcodeBuildMCP. Use when an iOS bug has to be reproduced and diagnosed on a booted s |
-| external | `ios-localization` |  -  | Implement, review, or improve localization and internationalization in iOS/macOS apps  -  String Catalogs (.xcstrings), generated localizabl |
+| external | `ios-localization` |  -  | i18n and l10n for iOS and macOS: String Catalogs (.xcstrings), generated localizable symbols with compile-time-checked keys, stable key nami |
 | external | `ios-module-structure` |  -  | The ios-module-structure rule registry: stable-ID rules over where a declaration lives, what its file is called and what its folder must con |
-| external | `ios-networking` |  -  | Build, review, or improve networking code in iOS/macOS apps using URLSession with async/await, structured concurrency, and modern Swift patt |
+| external | `ios-networking` |  -  | URLSession with async/await and structured concurrency on iOS and macOS: HTTP requests, REST API clients, response validation, error handlin |
 | external | `ios-security` |  -  | Secure iOS apps with Keychain Services, CryptoKit encryption, biometric authentication (Face ID, Touch ID), Secure Enclave key storage, LACo |
-| external | `ios-simulator` |  -  | Manages iOS Simulator devices and tests app behaviour with xcrun simctl: device lifecycle, app install and launch, push notification and loc |
+| external | `ios-simulator` |  -  | xcrun simctl from the command line: create, boot, erase and delete devices, install and launch apps, simulated pushes without APNs, GPS loca |
 | external | `kotlin-coroutines-expert` |  -  | Kotlin coroutines and Flow: scopes, structured concurrency, cancellation, exception handling, dispatcher injection, StateFlow versus SharedF |
-| external | `live-activities` |  -  | Implement, review, or improve Live Activities and Dynamic Island experiences in iOS apps using ActivityKit. Use when building real-time upda |
-| external | `localization-reuse-map` |  -  | Builds a per-screen localization-reuse map for one redesigned screen (iOS, Android, web): pairs each UI element's new key and values with th |
+| external | `live-activities` |  -  | ActivityKit Live Activities on the Lock Screen and Dynamic Island: ActivityAttributes and ContentState, request/update/end lifecycle, compac |
+| external | `localization-reuse-map` |  -  | Localization reuse map for one redesigned screen on iOS, Android and web: new keys set against each platform's legacy key, legacy values and |
 | external | `macos-menubar-tuist-app` |  -  | Build, refactor, or review SwiftUI macOS menubar apps that use Tuist. Use when building, refactoring or reviewing a SwiftUI macOS menubar ap |
 | external | `macos-spm-app-packaging` |  -  | Scaffold, build, sign, and package SwiftPM macOS apps without Xcode projects. Use when a SwiftPM macOS app has to be built, signed or packag |
-| external | `mapkit-location` |  -  | Implement, review, or improve maps and location features in iOS/macOS apps using MapKit and CoreLocation. Use when working with Map views, a |
-| external | `metrickit-diagnostics` |  -  | Collect and analyze on-device performance metrics and crash diagnostics using MetricKit. Use when setting up MXMetricManager, handling MXMet |
+| external | `mapkit-location` |  -  | MapKit and CoreLocation on iOS and macOS: SwiftUI Map, markers, annotations, polylines and overlays, camera control, user location tracking, |
+| external | `metrickit-diagnostics` |  -  | MetricKit field telemetry from shipping apps: MXMetricManager subscribers, MXMetricPayload and MXDiagnosticPayload, crash, hang and disk-wri |
 | external | `monorepo-architect` |  -  | Monorepo structure: pnpm workspaces, Turborepo or Nx task graphs, affected-only CI, remote cache, package boundaries, Changesets, CODEOWNERS |
 | core | `multi-agent` |  -  | Task orchestrator: runs the full pipeline from a Jira ID or GitHub Issue URL  -  analysis → plan → TDD development → parallel review (Fable  |
 | core | `multi-agent-analysis` |  -  | Standalone feature-spec analysis. Two profiles picked at intake: global (23-section development handoff, evidence-trimmed) or corporate (IG/ |
@@ -107,6 +107,7 @@
 | core | `multi-agent-design-check` |  -  | Mock-mode vs Figma design audit (iOS / Android, local-only). Pick repo + module, gate on mock support, enumerate every state driver into a c |
 | core | `multi-agent-diff-explain` |  -  | Map Phase 3 triage findings to branch diff lines. Read-only post-hoc command, used after review to answer 'which finding lines up with which |
 | core | `multi-agent-doctor` |  -  | Health check for the installed pipeline: layout, preferences, credentials, hooks and host capabilities, each with one actionable step. Exit  |
+| core | `multi-agent-estimate` |  -  | Estimate new work from similar closed Jira work: a P25-P75 range per role from logged time, with the tickets behind it and the modules touch |
 | core | `multi-agent-feedback` |  -  | Send one message to the maintainer: a bug, an idea or a question. Only the text you type is sent - no logs, no repo names, no paths. Shows t |
 | core | `multi-agent-forget` |  -  | Remove a saved /multi-agent routine (created by /multi-agent:save): deletes its local-only command and its registry entry. Asks which one an |
 | core | `multi-agent-garbage-collect` |  -  | Sweep leftover /tmp scratch (picker state, review diffs, channel payloads, analysis drafts) from past runs. Dry-run first; confirms before d |
@@ -137,6 +138,7 @@
 | core | `multi-agent-save` |  -  | Save a recurring job as a reusable /multi-agent:{name} command. Reviews the conversation + your CLAUDE.md for candidate routines, you pick o |
 | core | `multi-agent-scaffold` |  -  | Create a project skeleton with the enabled toolkit's scaffold skill and prove it builds, tests and lints before the first commit; no remote  |
 | core | `multi-agent-scan` |  -  | Skill security scan: walks local skill directories against a tiered pattern catalog. Use when local skill directories need checking for unsa |
+| core | `multi-agent-scenario-audit` |  -  | Audit test scenarios from a CSV against the code: mark each PRESENT, PARTIAL, ABSENT or UNCLEAR, every PRESENT backed by a file:line that re |
 | core | `multi-agent-search` |  -  | Log search across every agent-log.md with smart ranking and filters. Optional --semantic flag queries the per-repo triage corpus. Use when s |
 | core | `multi-agent-security-review` |  -  | Run a standalone defensive, static security review of a diff, branch or repo: run-scoped threat model, reviewer-shaped findings joined to OW |
 | core | `multi-agent-serve` |  -  | Start the local contract server a client (the macOS toolbox, a web page) reads runs, commands, questions, issues and worktrees from, on 127. |
@@ -154,72 +156,73 @@
 | core | `multi-agent-testflight-validation` |  -  | iOS-pinned alias of store-ready: same three gates on an iOS build, one implementation. Validates a TestFlight / App Store package, never upl |
 | core | `multi-agent-uninstall` |  -  | Uninstall the pipeline from Claude Code + Copilot CLI. Keychain access tokens are always left untouched; --all-data also clears pipeline set |
 | core | `multi-agent-update` |  -  | Update the pipeline to the latest version: git pull, install, migrate. Use when the installed pipeline is behind and should be brought to th |
-| external | `musickit-audio` |  -  | Integrate Apple Music playback, catalog search, and Now Playing metadata using MusicKit and MediaPlayer. Use when adding music search, Apple |
-| external | `natural-language` |  -  | Tokenize, tag, and analyze natural language text using Apple's NaturalLanguage framework and translate between languages with the Translatio |
+| external | `musickit-audio` |  -  | MusicKit and MediaPlayer on iOS: Apple Music authorization, catalog search, subscription checks and offers, ApplicationMusicPlayer playback  |
+| external | `natural-language` |  -  | NaturalLanguage and Translation frameworks: tokenizing, language identification, part-of-speech tagging, named entities, sentiment, word and |
 | external | `nextjs-app-router` |  -  | Next.js 15+ App Router: Server/Client Components, Server Actions, data fetching, layouts, middleware, ISR/SSG/SSR, and routing patterns. Use |
 | external | `nodejs-backend-patterns` |  -  | Node.js 22/24 services in ESM: structure, validated config, error mapping, graceful shutdown, AsyncLocalStorage, streams, queues, node:test. |
 | external | `observability-engineer` |  -  | Observability with OpenTelemetry: traces, metrics and logs, semantic conventions, structured logging, RED and USE, SLOs and burn-rate alerts |
-| external | `passkit-wallet` |  -  | Integrate Apple Pay payments and Wallet passes using PassKit. Use when adding Apple Pay buttons, creating payment requests, handling payment |
-| external | `pdfkit` |  -  | Display and manipulate PDF documents using PDFKit. Use when embedding PDFView to show PDF files, creating or modifying PDFDocument instances |
-| external | `pencilkit-drawing` |  -  | Add Apple Pencil drawing with PKCanvasView, PKToolPicker, PKDrawing serialization/export, stroke inspection, and PencilKit/PaperKit handoffs |
-| external | `permissionkit` |  -  | Create child communication safety experiences using PermissionKit to request parental permission for children. Use when building apps that i |
-| external | `photos-camera-media` |  -  | Implement, review, or improve photo picking, camera capture, and media handling in iOS apps using PhotoKit and AVFoundation. Use when workin |
+| external | `passkit-wallet` |  -  | Apple Pay and Wallet passes with PassKit: Apple Pay buttons, payment requests, authorization flow, merchant capabilities, shipping and conta |
+| external | `pdfkit` |  -  | PDFKit on iOS: PDFView display and SwiftUI wrapping, creating and editing PDFDocument and PDFPage, highlight, note, signature and form annot |
+| external | `pencilkit-drawing` |  -  | PencilKit drawing with Apple Pencil or finger: PKCanvasView, PKToolPicker and custom items, PKDrawing persistence and export, stroke inspect |
+| external | `permissionkit` |  -  | PermissionKit parental approval for minors: CommunicationLimits handle checks, PermissionQuestion, AskCenter requests and responses, Permiss |
+| external | `photos-camera-media` |  -  | PhotoKit and AVFoundation media on iOS: PhotosPicker and PHPickerViewController, Transferable loading of images, movies and Live Photos, pho |
 | external | `play-store-review` |  -  | Prepare Android apps for Google Play Store review and compliance. Covers Google Play policy requirements, content rating questionnaire, targ |
-| external | `push-notifications` |  -  | Implement, review, or debug push notifications in iOS/macOS apps  -  local notifications, remote (APNs) notifications, rich notifications, n |
+| external | `push-notifications` |  -  | UserNotifications and APNs on iOS and macOS, local and remote: permission (standard, provisional, critical), device-token registration, trig |
 | external | `python-patterns` |  -  | Modern Python 3.12+: type hints, dataclasses, Pydantic v2, async/await, context managers, generators, pattern matching. Use when writing or  |
 | external | `react-best-practices` |  -  | React 19+ best practices: Server Components, use() hook, Actions, hooks patterns, state management, and performance optimization. Use when b |
-| external | `realitykit-ar` |  -  | Build iOS augmented reality and 3D experiences with RealityKit and ARKit. Use when adding RealityView content, loading entities or USDZ mode |
+| external | `realitykit-ar` |  -  | RealityKit and ARKit on iOS: RealityView camera content, AR camera availability and permission, entities and components, USDZ loading, plane |
 | external | `rest-api-design` |  -  | REST API design: HTTP methods, status codes, pagination, versioning, rate limiting, caching headers, OpenAPI documentation. Use when a REST  |
 | external | `retrofit-networking` |  -  | Build networking layers on Android with Retrofit, OkHttp, and Kotlin Coroutines. Covers suspend functions in API interfaces, OkHttp intercep |
 | external | `room-database` |  -  | Implement Room database persistence on Android with @Entity, @Dao, @Database, Flow-based reactive queries, TypeConverters for complex types, |
 | external | `search-first` |  -  | Research-before-coding workflow. Before writing a custom implementation, check what already exists (repo utilities, installed libraries, pac |
 | external | `security-review` |  -  | Run a defensive, static security review of a diff or a repo: build a run-scoped threat model, find vulnerabilities joined to OWASP + CWE wit |
-| external | `shareplay-activities` |  -  | Build shared real-time experiences using GroupActivities and SharePlay. Use when implementing shared media playback, collaborative app featu |
+| external | `shareplay-activities` |  -  | GroupActivities and SharePlay on iOS, macOS, tvOS and visionOS: GroupActivity, GroupSession lifecycle, messengers, playback sync, file trans |
 | external | `signal-community` |  -  | Check whether other people hit the same problem, via Stack Overflow and Hacker News (keyless) plus opt-in Reddit and X. Use when a bug repor |
-| external | `skill-creator` |  -  | Author and refine skills for a plugin/toolkit efficiently. Use when creating a new skill, trimming or splitting an existing one, writing a s |
-| external | `speech-recognition` |  -  | Transcribe speech to text using Apple's Speech framework. Use when implementing live microphone transcription with AVAudioEngine, recognizin |
+| external | `skill-creator` |  -  | House guide for authoring plugin skills: creating a new skill, trimming or splitting a bloated one, writing or sharpening a description, and |
+| external | `speech-recognition` |  -  | Speech framework speech-to-text: live microphone transcription with AVAudioEngine, recorded audio files, speech and microphone permission, o |
 | external | `spm-build-analysis` |  -  | Analyze Swift Package Manager dependencies, package plugins, module variants, and CI-oriented build overhead that slow Xcode builds. Use whe |
-| external | `storekit` |  -  | Implement, review, or improve in-app purchases and subscriptions using StoreKit 2. Use when building paywalls with SubscriptionStoreView or  |
-| external | `swift-api-design-guidelines` |  -  | Swift API Design Guidelines: clarity at the point of use, naming for readability over brevity, argument labels and prepositional phrases, me |
-| external | `swift-architecture` |  -  | Select, implement, or migrate between app architecture patterns for Apple platform apps. Use when choosing between MV (Model-View with @Obse |
-| external | `swift-charts` |  -  | Implement, review, or improve data visualizations using Swift Charts. Use when building bar, line, area, point, pie, donut, or iOS 26 3D cha |
-| external | `swift-codable` |  -  | Implement Swift Codable models for JSON and property-list encoding and decoding with JSONDecoder, JSONEncoder, CodingKeys, and custom init(f |
-| external | `swift-concurrency` |  -  | Swift concurrency language reference and migration: Sendable and actor-isolation diagnostics, approachable concurrency (SE-0466 default Main |
+| external | `storekit` |  -  | StoreKit 2 in-app purchases and subscriptions: SubscriptionStoreView, StoreView and ProductView paywalls, consumable, non-consumable and aut |
+| external | `swift-api-design-guidelines` |  -  | Swift API Design Guidelines: call-site clarity over brevity, argument labels and prepositions, method versus property, side-effect naming, m |
+| external | `swift-architecture` |  -  | App architecture on Apple platforms (Swift 6.3, SwiftUI, UIKit): MV with @Observable, MVVM, MVI, TCA, Clean Architecture, VIPER, Coordinator |
+| external | `swift-charts` |  -  | Swift Charts: bar, line, area, point, pie, donut, iOS 26 3D charts (Chart3D, SurfacePlot), axes, scales, legends, annotations, scrolling, se |
+| external | `swift-codable` |  -  | Codable JSON and property-list models: JSONDecoder, JSONEncoder, CodingKeys, custom init(from:)/encode(to:), nested containers, date, data a |
+| external | `swift-concurrency` |  -  | Swift 6.2+ concurrency: actor isolation, Sendable, sending, approachable concurrency (SE-0466 default MainActor, @concurrent, nonisolated(no |
 | external | `swift-concurrency-expert` |  -  | Review and fix Swift concurrency issues such as actor isolation and Sendable violations. Use when a Swift concurrency problem needs diagnosi |
 | external | `swift-concurrency-pro` |  -  | Reviews Swift code for concurrency correctness, modern API usage, and common async/await pitfalls. Use when reading, writing, or reviewing S |
-| external | `swift-formatstyle` |  -  | Format values for display using the FormatStyle protocol and its concrete types. Use when formatting numbers (integers, floating-point, deci |
-| external | `swift-language` |  -  | Modern Swift language patterns for code outside concurrency and SwiftUI: if/switch expressions, typed throws, result builders, property wrap |
-| external | `swift-security` |  -  | Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face I |
-| external | `swift-testing` |  -  | Writes and migrates Swift Testing framework tests with @Test, @Suite, #expect, #require, confirmation, traits, withKnownIssue, Attachment.re |
+| external | `swift-formatstyle` |  -  | Display formatting with FormatStyle (iOS 15+): integers, floating point, decimals, currency, percentages, dates, date ranges, relative and a |
+| external | `swift-language` |  -  | Core Swift 6.3 outside concurrency and SwiftUI: if and switch expressions, typed throws, result builders, property wrappers, some vs any, gu |
+| external | `swift-security` |  -  | Apple client security: Keychain (SecItem, kSecClass, OSStatus, iOS, macOS), Face ID/Touch ID keychain items, CryptoKit (AES-GCM, ChaChaPoly, |
+| external | `swift-testing` |  -  | Writing, migrating and reviewing Swift Testing tests: @Test, @Suite, #expect, #require, confirmation, traits, withKnownIssue, Attachment.rec |
 | external | `swift-testing-pro` |  -  | Writes, reviews, and improves Swift Testing code using modern APIs and best practices. Use when reading, writing, or reviewing projects that |
-| external | `swiftdata` |  -  | Implement, review, or improve data persistence using SwiftData. Use when defining @Model classes with @Attribute, @Relationship, @Transient, |
+| external | `swiftdata` |  -  | SwiftData persistence for Apple apps: @Model classes with @Attribute, @Relationship, @Transient, #Unique and #Index; @Query, #Predicate, Fet |
 | external | `swiftdata-pro` |  -  | Writes, reviews, and improves SwiftData code using modern APIs and best practices. Use when reading, writing, or reviewing projects that use |
-| external | `swiftlint` |  -  | Configures and enforces SwiftLint via build tool plugins, run scripts and CI: .swiftlint.yml rule sets, analyzer rules, baselines, autocorre |
-| external | `swiftui-animation` |  -  | Implement, review, or improve SwiftUI animations and transitions. Use when adding explicit animations with withAnimation, configuring implic |
+| external | `swiftlint` |  -  | SwiftLint setup and enforcement: build tool and command plugins, Xcode run scripts, CI, .swiftlint.yml rule sets (default, opt-in, analyzer) |
+| external | `swiftui-animation` |  -  | SwiftUI motion: withAnimation, scoped implicit .animation(_:body:) and .animation(_:value:), timing curves and springs (.smooth, .snappy, .b |
 | external | `swiftui-expert-skill` |  -  | Write, review, or improve SwiftUI code following best practices for state management, view composition, performance, macOS-specific APIs, an |
-| external | `swiftui-gestures` |  -  | Implement, review, or improve SwiftUI gesture handling. Use when adding tap, long press, drag, magnify, or rotate gestures, composing gestur |
-| external | `swiftui-layout-components` |  -  | Build SwiftUI layouts using stacks, grids, lists, scroll views, forms, and controls. Covers VStack/HStack/ZStack, LazyVGrid/LazyHGrid, List  |
-| external | `swiftui-liquid-glass` |  -  | Implement, review, or improve SwiftUI Liquid Glass effects for iOS 26+. Covers glassEffect modifier, GlassEffectContainer, glass button styl |
-| external | `swiftui-navigation` |  -  | Implement SwiftUI navigation patterns including NavigationStack, NavigationSplitView, sheet presentation, tab-based navigation, and deep lin |
-| external | `swiftui-patterns` |  -  | Builds SwiftUI views with MV architecture: @Observable ownership, @State/@Bindable/@Environment wiring, view decomposition, custom ViewModif |
-| external | `swiftui-performance` |  -  | Audit and improve SwiftUI runtime performance: slow rendering, janky scrolling, high CPU or memory, excessive view updates, layout thrash, b |
+| external | `swiftui-gestures` |  -  | SwiftUI gestures: tap, spatial tap, long press, drag, magnify, rotate, composition (simultaneously, sequenced, exclusively), @GestureState,  |
+| external | `swiftui-layout-components` |  -  | SwiftUI layouts: stacks, lazy stacks, LazyVGrid/LazyHGrid, List sections, swipe actions, ScrollView with ScrollPosition, validated Form, Tog |
+| external | `swiftui-liquid-glass` |  -  | Liquid Glass in SwiftUI (iOS 26+): glassEffect, Glass tint/interactive variants, GlassEffectContainer, glassEffectID morphing, glassEffectUn |
+| external | `swiftui-navigation` |  -  | SwiftUI navigation: NavigationStack typed paths, routers, NavigationSplitView, sheets, TabView and Tab API, universal links, URL schemes, Ha |
+| external | `swiftui-patterns` |  -  | SwiftUI Model-View structure: @Observable ownership, @State, @Bindable, @Environment, view decomposition, custom ViewModifiers, .task loadin |
+| external | `swiftui-performance` |  -  | SwiftUI performance: slow rendering, janky scrolling, high CPU/memory, excess updates, layout thrash, costly body, identity churn, lazy load |
 | external | `swiftui-performance-audit` |  -  | Audit SwiftUI performance issues from code review and profiling evidence. Use when a SwiftUI view is slow and the cause has to be found from |
 | external | `swiftui-pro` |  -  | Comprehensively reviews SwiftUI code for best practices on modern APIs, maintainability, and performance. Use when reading, writing, or revi |
 | external | `swiftui-ui-patterns` |  -  | Apply proven SwiftUI UI patterns for navigation, sheets, async state, and reusable screens. Use when a SwiftUI screen needs a proven pattern |
-| external | `swiftui-uikit-interop` |  -  | Bridges UIKit and SwiftUI by wrapping UIKit views and view controllers in SwiftUI with UIViewRepresentable and UIViewControllerRepresentable |
+| external | `swiftui-uikit-interop` |  -  | UIKit and SwiftUI interop: UIViewRepresentable, UIViewControllerRepresentable, UIHostingController, UIHostingConfiguration, Coordinator dele |
 | external | `swiftui-view-refactor` |  -  | Refactor SwiftUI views into smaller components with stable, explicit data flow. Use when a SwiftUI view has grown too large and needs splitt |
-| external | `swiftui-webkit` |  -  | Embeds and controls web content in SwiftUI with WebKit for SwiftUI, including WebView, WebPage, navigation policies, JavaScript execution, o |
+| external | `swiftui-webkit` |  -  | Web content in SwiftUI with WebKit for SwiftUI: WebView, WebPage, observable page state, navigation policies, link interception, JavaScript  |
 | external | `tailwind-css` |  -  | Tailwind CSS v4: utility-first styling, responsive design, dark mode, custom themes, component patterns, and cn() utility. Use when styling  |
 | external | `testing-backend` |  -  | Backend testing: pytest patterns (Python), Jest patterns (Node.js), integration testing, database fixtures/factories, API contract testing.  |
-| external | `tipkit` |  -  | Implement, review, or improve in-app tips and onboarding using Apple's TipKit framework. Use when adding feature discovery tooltips, onboard |
+| external | `tipkit` |  -  | TipKit in-app tips (iOS 17+): Tip protocol, TipView, popoverTip, rules, events, TipGroup, styles, CloudKit sync. Use when building or review |
 | external | `typescript-patterns` |  -  | Modern TypeScript patterns: strict mode, utility types, generics, conditional types, type guards, discriminated unions, Zod validation. Use  |
-| external | `vision-framework` |  -  | Implement computer vision features including text recognition (OCR), face detection, barcode scanning, image segmentation, object tracking,  |
+| core | `valven-rules` |  -  | Delivery-flow rules from the metrics Valven reports: PR size, one concern per PR, tests with source, issue keys, no WIP commits, rework, PR  |
+| external | `vision-framework` |  -  | On-device computer vision with Vision and VisionKit: OCR, face detection and landmarks, barcode and QR scanning, person and instance segment |
 | external | `vue-composition` |  -  | Vue 3 Composition API: ref, reactive, computed, watch, composables, Pinia state management, Vue Router 4, script setup. Use when building or |
-| external | `weatherkit` |  -  | Fetch current, hourly, and daily weather forecasts and display required attribution using WeatherKit. Use when integrating weather data, sho |
+| external | `weatherkit` |  -  | WeatherKit on iOS: current, hourly, daily and minute forecasts, alerts, historical statistics, dataset selection, caching. Use when integrat |
 | external | `web-accessibility` |  -  | WCAG 2.2 AA web accessibility: ARIA roles/states, keyboard navigation, screen readers, color contrast, focus management, axe-core testing. U |
 | external | `web-performance` |  -  | Web performance: Core Web Vitals (LCP, INP, CLS), image optimization, code splitting, caching strategies, bundle analysis, Lighthouse. Use w |
 | external | `web-testing` |  -  | Web testing: Vitest unit tests, React Testing Library, Playwright E2E, MSW API mocking, testing hooks and async operations. Use when writing |
-| external | `widgetkit` |  -  | Implement, review, or improve widgets, Live Activities, and controls using WidgetKit and ActivityKit. Use when building home screen, Lock Sc |
+| external | `widgetkit` |  -  | WidgetKit surfaces on iOS 26+: timeline-driven widgets for the Home Screen, the Lock Screen and StandBy, interactive widgets using Button or |
 | external | `xcode-build-benchmark` |  -  | Benchmark Xcode clean and incremental builds with repeatable inputs, timing summaries, and timestamped `.build-benchmark/` artifacts. Use wh |
 | external | `xcode-build-fixer` |  -  | Apply approved Xcode build optimization changes following best practices, then re-benchmark to verify improvement. Use when a developer has  |
 | external | `xcode-build-orchestrator` |  -  | Orchestrate Xcode build optimization by benchmarking first, running the specialist analysis skills, prioritizing findings, requesting explic |