@mmerterden/multi-agent-pipeline 20.2.1 → 20.3.0

package/pipeline/skills/shared/README.md

@@ -2,24 +2,24 @@
 
 Single source of truth for skills delivered to both Claude Code (`~/.claude/skills/`) and Copilot CLI (`~/.copilot/skills/`) by the installer.
 
-**Total:** 219 skills (61 core + 158 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
+**Total:** 218 skills (64 core + 154 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
 
 ## Directory layout
 
-- **`core/`**  -  61 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
-- **`external/`**  -  158 iOS / Android / generic skills imported from the upstream skill library. Mirrors of third-party guidance.
+- **`core/`**  -  64 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
+- **`external/`**  -  154 iOS / Android / generic skills imported from the upstream skill library. Mirrors of third-party guidance.
 - Install destinations (ADR-0009): Claude Code gets NO local copy of `external/` - it loads those skills from the `multi-agent-plugins` marketplace, namespaced (`ai-<stack>-toolkit:<name>`); only the two compliance catalogs from `core/` land in `~/.claude/skills/`. Copilot CLI and Codex CLI receive a flat copy filtered to the enabled stacks. `external/` remains the single authoring source that `build-stack-plugins.mjs` publishes from.
 
 Source layout is logical grouping only  -  skill discovery at runtime is unchanged.
 
 ## Categories
 
-- [Pipeline Orchestration](#pipeline-orchestration)  -  61
-- [iOS / Apple Ecosystem](#ios-apple-ecosystem)  -  90
-- [Android / Kotlin](#android-kotlin)  -  17
+- [Pipeline Orchestration](#pipeline-orchestration)  -  64
+- [iOS / Apple Ecosystem](#ios-apple-ecosystem)  -  89
+- [Android / Kotlin](#android-kotlin)  -  16
 - [Web](#web)  -  10
 - [Backend / API](#backend-api)  -  11
-- [Cross-cutting](#cross-cutting)  -  30
+- [Cross-cutting](#cross-cutting)  -  28
 
 ## Pipeline Orchestration
 
@@ -28,7 +28,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`apple-archive-compliance`](./core/apple-archive-compliance/) | `core` | Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code  |
 | [`google-play-compliance`](./core/google-play-compliance/) | `core` | Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error c |
 | [`multi-agent`](./core/multi-agent/) | `core` | Task orchestrator: runs the full pipeline from a Jira ID or GitHub Issue URL  -  analysis → plan → TDD development → parallel review (Fable  |
-| [`multi-agent-analysis`](./core/multi-agent-analysis/) | `core` | Standalone feature-spec analysis. Two profiles picked at intake: global (23-section development handoff, 8 of them in Lite mode) or corporat |
+| [`multi-agent-analysis`](./core/multi-agent-analysis/) | `core` | Standalone feature-spec analysis. Two profiles picked at intake: global (23-section development handoff, evidence-trimmed) or corporate (IG/ |
 | [`multi-agent-analysis-jira`](./core/multi-agent-analysis-jira/) | `core` | Turn a rendered analysis document into a Jira story tree: derive stories from the document's own rule ids, check coverage both ways, preview |
 | [`multi-agent-analysis-resolve`](./core/multi-agent-analysis-resolve/) | `core` | Resolve the Section 20 Risks and Open Questions of an analysis v3 document one row at a time: up to 3 source-labeled answer candidates per r |
 | [`multi-agent-autopilot`](./core/multi-agent-autopilot/) | `core` | Launch any task in autopilot mode: skips every confirmation, runs end-to-end autonomously. Use when a task should run end to end with no con |
@@ -59,8 +59,9 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`multi-agent-prune-prompts`](./core/multi-agent-prune-prompts/) | `core` | Zero-base prompt review: measure the always-on instruction footprint, classify every rule block, propose keep/trial-removal/delete; applies  |
 | [`multi-agent-purge`](./core/multi-agent-purge/) | `core` | ⚠️ Wipes every worktree, branch, log, and state file. Irreversible; asks for double confirmation. Use when every worktree, branch, log and s |
 | [`multi-agent-refactor`](./core/multi-agent-refactor/) | `core` | Analyse the project: extract adapted best-practices, hunt real bugs + improvement areas, check upstream drift of derived skills, research th |
+| [`multi-agent-research`](./core/multi-agent-research/) | `core` | Research an item's open gaps from the tracker, linked docs and the repo before anyone is asked; a script decides which closed. Use when a ru |
 | [`multi-agent-resume`](./core/multi-agent-resume/) | `core` | Pick up unfinished work: a pipeline run that stopped mid-phase, or work already written on the current branch that never went through the pi |
-| [`multi-agent-review`](./core/multi-agent-review/) | `core` | Run parallel review on a branch diff or a Pull Request: 3 models on Claude Code (Fable + Opus + Sonnet), 3 models on Copilot CLI (GPT + Opus |
+| [`multi-agent-review`](./core/multi-agent-review/) | `core` | Run parallel review on a branch diff or a Pull Request: 3 models on Claude Code (Fable + Opus + Sonnet; Opus + Sonnet while the fable rung i |
 | [`multi-agent-review-analysis`](./core/multi-agent-review-analysis/) | `core` | Review a written analysis document instead of a diff: resolve it from a path, a Confluence page or a Jira issue, run the deterministic gates |
 | [`multi-agent-review-issue`](./core/multi-agent-review-issue/) | `core` | Assess whether a GitHub issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / sta |
 | [`multi-agent-review-jira`](./core/multi-agent-review-jira/) | `core` | Assess whether a Jira issue is ready for multi-agent development: fetch it, grade scope / acceptance criteria / repro / design / API / stack |
@@ -68,10 +69,12 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`multi-agent-route-on`](./core/multi-agent-route-on/) | `core` | Enable policy-driven model routing: pick a strategy, a scope, and the rules that say which rung a call lands on. Use when asked to turn mode |
 | [`multi-agent-route-status`](./core/multi-agent-route-status/) | `core` | Report model routing: whether it is armed, which rule applies where, which rung the last dispatches took, and what this run has cost. Use wh |
 | [`multi-agent-routines`](./core/multi-agent-routines/) | `core` | List your saved /multi-agent routines (from /multi-agent:save) with what each one does, rendered in outputLanguage. Use when asked which sav |
-| [`multi-agent-save`](./core/multi-agent-save/) | `core` | Save a recurring job as a reusable /multi-agent:<name> command. Reviews the conversation + your CLAUDE.md for candidate routines, you pick o |
+| [`multi-agent-save`](./core/multi-agent-save/) | `core` | Save a recurring job as a reusable /multi-agent:{name} command. Reviews the conversation + your CLAUDE.md for candidate routines, you pick o |
+| [`multi-agent-scaffold`](./core/multi-agent-scaffold/) | `core` | Create a project skeleton with the enabled toolkit's scaffold skill and prove it builds, tests and lints before the first commit; no remote  |
 | [`multi-agent-scan`](./core/multi-agent-scan/) | `core` | Skill security scan: walks local skill directories against a tiered pattern catalog. Use when local skill directories need checking for unsa |
 | [`multi-agent-search`](./core/multi-agent-search/) | `core` | Log search across every agent-log.md with smart ranking and filters. Optional --semantic flag queries the per-repo triage corpus. Use when s |
 | [`multi-agent-security-review`](./core/multi-agent-security-review/) | `core` | Run a standalone defensive, static security review of a diff, branch or repo: run-scoped threat model, reviewer-shaped findings joined to OW |
+| [`multi-agent-serve`](./core/multi-agent-serve/) | `core` | Start the local contract server a client (the macOS toolbox, a web page) reads runs, commands, questions, issues and worktrees from, on 127. |
 | [`multi-agent-setup`](./core/multi-agent-setup/) | `core` | First-run setup wizard: keychain token discovery, Git Identity onboarding, and pipeline preparation. Use when the pipeline is being set up f |
 | [`multi-agent-stack`](./core/multi-agent-stack/) | `core` | Select the active stack(s) for this repo by enabling the matching marketplace plugin(s) in .claude/settings.json. Multi-select: pass several |
 | [`multi-agent-status`](./core/multi-agent-status/) | `core` | Show every multi-agent task's ID, phase, branch, and status. Use when asked what is running, or for an overview of every task. |
@@ -91,7 +94,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 
 | Skill | Group | Description |
 |-------|-------|-------------|
-| [`accessibility-compliance-accessibility-audit`](./external/accessibility-compliance-accessibility-audit/) | `external` | You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, i |
+| [`accessibility-compliance-accessibility-audit`](./external/accessibility-compliance-accessibility-audit/) | `external` | WCAG 2.2 AA audit process for web, iOS and Android: scope, automated scans, screen-reader and keyboard checks, severity, report, retest. Use |
 | [`alarmkit`](./external/alarmkit/) | `external` | Implement AlarmKit alarms and countdown timers for iOS and iPadOS with Lock Screen, Dynamic Island, StandBy, and paired Apple Watch system U |
 | [`app-clips`](./external/app-clips/) | `external` | Build iOS App Clips with invocation URLs, App Clip Codes, NFC, QR codes, Safari banners, Maps, Messages, target setup, App Store Connect exp |
 | [`app-intents`](./external/app-intents/) | `external` | Implement App Intents for Siri, Shortcuts, Spotlight, widgets, Control Center, and Apple Intelligence on iOS. Covers AppIntent actions, AppE |
@@ -113,20 +116,19 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`eventkit-calendar`](./external/eventkit-calendar/) | `external` | Create, read, and manage calendar events and reminders using EventKit and EventKitUI. Use when adding events to the user's calendar, creatin |
 | [`firebase`](./external/firebase/) | `external` | You're a developer who has shipped dozens of Firebase projects. You've seen the easy path lead to security breaches, runaway costs, and impo |
 | [`healthkit`](./external/healthkit/) | `external` | Read, write, and query Apple Health data using HealthKit. Covers HKHealthStore authorization, sample queries, statistics queries, statistics |
-| [`hig-components-content`](./external/hig-components-content/) | `external` | Apple Human Interface Guidelines for content display components. Use when designing or reviewing how content is displayed on an Apple platfo |
-| [`hig-components-layout`](./external/hig-components-layout/) | `external` | Apple Human Interface Guidelines for layout and navigation components. Use when designing or reviewing layout and navigation on an Apple pla |
-| [`hig-components-status`](./external/hig-components-status/) | `external` | Apple HIG guidance for status and progress UI components including progress indicators, status bars, and activity rings. Use when designing  |
-| [`hig-components-system`](./external/hig-components-system/) | `external` | Apple HIG guidance for system experience components: widgets, live activities, notifications, complications, home screen quick actions, top  |
-| [`hig-foundations`](./external/hig-foundations/) | `external` | Apple Human Interface Guidelines design foundations. Use when a design decision turns on Apple's foundations: layout, typography, colour, mo |
-| [`hig-inputs`](./external/hig-inputs/) | `external` | Apple Human Interface Guidelines for input methods: touch gestures, keyboards, Apple Pencil, pointing devices, game controllers, Digital Cro |
-| [`hig-patterns`](./external/hig-patterns/) | `external` | Apple Human Interface Guidelines interaction and UX patterns. Use when an interaction or UX pattern on an Apple platform needs designing or  |
-| [`hig-platforms`](./external/hig-platforms/) | `external` | Apple Human Interface Guidelines for platform-specific design. Use when a design has to fit a specific Apple platform's conventions. |
-| [`hig-technologies`](./external/hig-technologies/) | `external` | Apple Human Interface Guidelines for Apple technologies: Siri, Apple Pay, Wallet, HealthKit, CarPlay, iCloud, Maps, in-app purchase and Sign |
+| [`hig-components-content`](./external/hig-components-content/) | `external` | Apple HIG for content views mapped to SwiftUI: lists, tables, grids, charts, images, text, web views, empty states. Use when choosing or rev |
+| [`hig-components-layout`](./external/hig-components-layout/) | `external` | Apple HIG for app structure mapped to SwiftUI: tab bars, split views, navigation stacks, toolbars, sheets, popovers, alerts, windows, iOS 26 |
+| [`hig-components-status`](./external/hig-components-status/) | `external` | Apple HIG for status UI mapped to SwiftUI: progress views, gauges, placeholders, status bar, activity rings, success and failure feedback. U |
+| [`hig-components-system`](./external/hig-components-system/) | `external` | Apple HIG for system surfaces: widgets, controls, Live Activities, Dynamic Island, notifications, complications, quick actions, App Shortcut |
+| [`hig-foundations`](./external/hig-foundations/) | `external` | Apple HIG foundations mapped to SwiftUI: Dynamic Type, semantic color, contrast, safe areas, SF Symbols, materials and Liquid Glass, motion, |
+| [`hig-inputs`](./external/hig-inputs/) | `external` | Apple HIG for input mapped to SwiftUI: touch gestures, keyboards, pointer, Apple Pencil, focus and game controllers, Digital Crown, eyes and |
+| [`hig-patterns`](./external/hig-patterns/) | `external` | Apple HIG interaction patterns mapped to SwiftUI: modality, loading, empty and error states, feedback, undo, search, data entry, settings, s |
+| [`hig-platforms`](./external/hig-platforms/) | `external` | Apple HIG per platform: iPhone, iPad, Mac, Watch, TV and Vision Pro conventions, and adapting one SwiftUI codebase across them. Use when a d |
+| [`hig-technologies`](./external/hig-technologies/) | `external` | Apple HIG for system technologies: Sign in with Apple, passkeys, Apple Pay, Wallet, Siri and App Intents, HealthKit, HomeKit, iCloud, Maps,  |
 | [`homekit-matter`](./external/homekit-matter/) | `external` | Control smart-home accessories and commission Matter devices using HomeKit and MatterSupport. Use when managing homes/rooms/accessories, cre |
 | [`ios-accessibility`](./external/ios-accessibility/) | `external` | Implements, reviews, or improves accessibility in iOS/macOS apps with SwiftUI, UIKit, and AppKit. Use when adding VoiceOver, Voice Control,  |
 | [`ios-coding-standard`](./external/ios-coding-standard/) | `external` | The iOS coding-standard rule registry: 99 stable-ID rules across readability, security, service layer, business rules, concurrency, testing, |
 | [`ios-debugger-agent`](./external/ios-debugger-agent/) | `external` | Debug the current iOS project on a booted simulator with XcodeBuildMCP. Use when an iOS bug has to be reproduced and diagnosed on a booted s |
-| [`ios-developer`](./external/ios-developer/) | `external` | Develop native iOS applications with Swift/SwiftUI. Masters iOS 18, SwiftUI, UIKit integration, Core Data, networking, and App Store optimiz |
 | [`ios-localization`](./external/ios-localization/) | `external` | Implement, review, or improve localization and internationalization in iOS/macOS apps  -  String Catalogs (.xcstrings), generated localizabl |
 | [`ios-module-structure`](./external/ios-module-structure/) | `external` | The ios-module-structure rule registry: stable-ID rules over where a declaration lives, what its file is called and what its folder must con |
 | [`ios-networking`](./external/ios-networking/) | `external` | Build, review, or improve networking code in iOS/macOS apps using URLSession with async/await, structured concurrency, and modern Swift patt |
@@ -152,11 +154,11 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`swift-architecture`](./external/swift-architecture/) | `external` | Select, implement, or migrate between app architecture patterns for Apple platform apps. Use when choosing between MV (Model-View with @Obse |
 | [`swift-charts`](./external/swift-charts/) | `external` | Implement, review, or improve data visualizations using Swift Charts. Use when building bar, line, area, point, pie, donut, or iOS 26 3D cha |
 | [`swift-codable`](./external/swift-codable/) | `external` | Implement Swift Codable models for JSON and property-list encoding and decoding with JSONDecoder, JSONEncoder, CodingKeys, and custom init(f |
-| [`swift-concurrency`](./external/swift-concurrency/) | `external` | Resolve Swift concurrency compiler errors, adopt approachable concurrency (SE-0466), and write data-race-safe async code. Use when fixing Se |
+| [`swift-concurrency`](./external/swift-concurrency/) | `external` | Swift concurrency language reference and migration: Sendable and actor-isolation diagnostics, approachable concurrency (SE-0466 default Main |
 | [`swift-concurrency-expert`](./external/swift-concurrency-expert/) | `external` | Review and fix Swift concurrency issues such as actor isolation and Sendable violations. Use when a Swift concurrency problem needs diagnosi |
 | [`swift-concurrency-pro`](./external/swift-concurrency-pro/) | `external` | Reviews Swift code for concurrency correctness, modern API usage, and common async/await pitfalls. Use when reading, writing, or reviewing S |
 | [`swift-formatstyle`](./external/swift-formatstyle/) | `external` | Format values for display using the FormatStyle protocol and its concrete types. Use when formatting numbers (integers, floating-point, deci |
-| [`swift-language`](./external/swift-language/) | `external` | Apply modern Swift language patterns and idioms for non-concurrency, non-SwiftUI code. Covers if/switch expressions (Swift 5.9+), typed thro |
+| [`swift-language`](./external/swift-language/) | `external` | Modern Swift language patterns for code outside concurrency and SwiftUI: if/switch expressions, typed throws, result builders, property wrap |
 | [`swift-security`](./external/swift-security/) | `external` | Use when working with iOS/macOS Keychain Services (SecItem queries, kSecClass, OSStatus errors), biometric authentication (LAContext, Face I |
 | [`swift-testing`](./external/swift-testing/) | `external` | Writes and migrates Swift Testing framework tests with @Test, @Suite, #expect, #require, confirmation, traits, withKnownIssue, Attachment.re |
 | [`swift-testing-pro`](./external/swift-testing-pro/) | `external` | Writes, reviews, and improves Swift Testing code using modern APIs and best practices. Use when reading, writing, or reviewing projects that |
@@ -169,8 +171,8 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`swiftui-layout-components`](./external/swiftui-layout-components/) | `external` | Build SwiftUI layouts using stacks, grids, lists, scroll views, forms, and controls. Covers VStack/HStack/ZStack, LazyVGrid/LazyHGrid, List  |
 | [`swiftui-liquid-glass`](./external/swiftui-liquid-glass/) | `external` | Implement, review, or improve SwiftUI Liquid Glass effects for iOS 26+. Covers glassEffect modifier, GlassEffectContainer, glass button styl |
 | [`swiftui-navigation`](./external/swiftui-navigation/) | `external` | Implement SwiftUI navigation patterns including NavigationStack, NavigationSplitView, sheet presentation, tab-based navigation, and deep lin |
-| [`swiftui-patterns`](./external/swiftui-patterns/) | `external` | Builds SwiftUI views with modern MV architecture, state management, and view composition patterns. Covers @Observable ownership rules, @Stat |
-| [`swiftui-performance`](./external/swiftui-performance/) | `external` | Audit and improve SwiftUI runtime performance. Use when diagnosing slow rendering, janky scrolling, high CPU, memory usage, excessive view u |
+| [`swiftui-patterns`](./external/swiftui-patterns/) | `external` | Builds SwiftUI views with MV architecture: @Observable ownership, @State/@Bindable/@Environment wiring, view decomposition, custom ViewModif |
+| [`swiftui-performance`](./external/swiftui-performance/) | `external` | Audit and improve SwiftUI runtime performance: slow rendering, janky scrolling, high CPU or memory, excessive view updates, layout thrash, b |
 | [`swiftui-performance-audit`](./external/swiftui-performance-audit/) | `external` | Audit SwiftUI performance issues from code review and profiling evidence. Use when a SwiftUI view is slow and the cause has to be found from |
 | [`swiftui-pro`](./external/swiftui-pro/) | `external` | Comprehensively reviews SwiftUI code for best practices on modern APIs, maintainability, and performance. Use when reading, writing, or revi |
 | [`swiftui-ui-patterns`](./external/swiftui-ui-patterns/) | `external` | Apply proven SwiftUI UI patterns for navigation, sheets, async state, and reusable screens. Use when a SwiftUI screen needs a proven pattern |
@@ -190,16 +192,15 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`android-build-quality-gates`](./external/android-build-quality-gates/) | `external` | Encode Android module and quality rules as build-failing Gradle tasks: layer-dependency checks, coverage floors, a Compose-stability gate, l |
 | [`android-datastore`](./external/android-datastore/) | `external` | Typed Jetpack DataStore as the modern SharedPreferences replacement: Preferences and typed stores, serializer-layer encryption, and migratio |
 | [`android-design-tokens-codegen`](./external/android-design-tokens-codegen/) | `external` | A single-source JSON to typed-Kotlin codegen pipeline for design tokens, UI-test ids, analytics events and deeplink manifests, run as Gradle |
-| [`android-jetpack-compose-expert`](./external/android-jetpack-compose-expert/) | `external` | Expert guidance for building modern Android UIs with Jetpack Compose, covering state management, navigation, performance, and Material Desig |
-| [`android-mvi-viewmodel`](./external/android-mvi-viewmodel/) | `external` | A reusable generic BaseViewModel<State, Intent, Event> for MVI Compose apps: StateFlow state, one-shot events over a rendezvous Channel, a s |
+| [`android-jetpack-compose-expert`](./external/android-jetpack-compose-expert/) | `external` | Compose runtime expertise: state ownership, recomposition and stability, side-effect APIs, lazy lists, modifier order, Modifier.Node. Use wh |
+| [`android-mvi-viewmodel`](./external/android-mvi-viewmodel/) | `external` | A reusable generic BaseViewModel typed on State, Intent and Event for MVI Compose apps: StateFlow state, one-shot events over a rendezvous C |
 | [`android-performance`](./external/android-performance/) | `external` | Optimize Android app performance with Baseline Profiles for startup, Compose stability annotations (@Stable, @Immutable, strong skipping), r |
 | [`android-security`](./external/android-security/) | `external` | Secure Android apps with ProGuard/R8 obfuscation, OkHttp certificate pinning, BiometricPrompt authentication, EncryptedSharedPreferences, Pl |
-| [`android-ui-verification`](./external/android-ui-verification/) | `external` | Automated end-to-end UI testing and verification on an Android Emulator using ADB. Use when an Android build needs driving on an emulator to |
 | [`compose-components`](./external/compose-components/) | `external` | Build Material 3 UI components and custom composables with Jetpack Compose. Covers TopAppBar, Scaffold, BottomSheet, SnackbarHost, slot-base |
-| [`compose-navigation`](./external/compose-navigation/) | `external` | Implement type-safe navigation in Jetpack Compose using Navigation 2.8+ with @Serializable routes, NavHost, composable<Route>, nested naviga |
+| [`compose-navigation`](./external/compose-navigation/) | `external` | Implement type-safe navigation in Jetpack Compose using Navigation 2.8+ with @Serializable routes, NavHost, typed composable routes, nested  |
 | [`compose-testing`](./external/compose-testing/) | `external` | Test Jetpack Compose UI with createComposeRule, semantic matchers (onNodeWithText, onNodeWithTag, onNodeWithContentDescription), actions (pe |
 | [`gradle-kotlin-dsl`](./external/gradle-kotlin-dsl/) | `external` | Configure Android builds with Gradle Kotlin DSL, version catalogs (libs.versions.toml), convention plugins (build-logic module), common conf |
-| [`kotlin-coroutines-expert`](./external/kotlin-coroutines-expert/) | `external` | Expert patterns for Kotlin Coroutines and Flow, covering structured concurrency, error handling, and testing. Use when writing or reviewing  |
+| [`kotlin-coroutines-expert`](./external/kotlin-coroutines-expert/) | `external` | Kotlin coroutines and Flow: scopes, structured concurrency, cancellation, exception handling, dispatcher injection, StateFlow versus SharedF |
 | [`play-store-review`](./external/play-store-review/) | `external` | Prepare Android apps for Google Play Store review and compliance. Covers Google Play policy requirements, content rating questionnaire, targ |
 | [`retrofit-networking`](./external/retrofit-networking/) | `external` | Build networking layers on Android with Retrofit, OkHttp, and Kotlin Coroutines. Covers suspend functions in API interfaces, OkHttp intercep |
 | [`room-database`](./external/room-database/) | `external` | Implement Room database persistence on Android with @Entity, @Dao, @Database, Flow-based reactive queries, TypeConverters for complex types, |
@@ -223,14 +224,14 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 
 | Skill | Group | Description |
 |-------|-------|-------------|
-| [`api-patterns`](./external/api-patterns/) | `external` | API design principles and decision-making. REST vs GraphQL vs tRPC selection, response formats, versioning, pagination. Use when choosing be |
-| [`api-security-best-practices`](./external/api-security-best-practices/) | `external` | Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common |
+| [`api-patterns`](./external/api-patterns/) | `external` | Choosing an API style (REST, GraphQL, gRPC, webhooks, events) and the contracts every style needs: versioning, cursor pagination, idempotenc |
+| [`api-security-best-practices`](./external/api-security-best-practices/) | `external` | API security against the OWASP API Top 10: object-level authorization, token handling, input validation, rate limits, secrets. Use when buil |
 | [`database-patterns`](./external/database-patterns/) | `external` | Database patterns: SQL best practices (PostgreSQL), indexing, query optimization, migrations, schema design, ORMs (SQLAlchemy, Prisma, Drizz |
-| [`docker-expert`](./external/docker-expert/) | `external` | You are an advanced Docker containerization expert with comprehensive, practical knowledge of container optimization, security hardening, mu |
-| [`fastapi-pro`](./external/fastapi-pro/) | `external` | Build high-performance async APIs with FastAPI, SQLAlchemy 2.0, and Pydantic V2. Master microservices, WebSockets, and modern Python async p |
-| [`monorepo-architect`](./external/monorepo-architect/) | `external` | Expert in monorepo architecture, build systems, and dependency management at scale. Masters Nx, Turborepo, Bazel, and Lerna for efficient mu |
-| [`nodejs-backend-patterns`](./external/nodejs-backend-patterns/) | `external` | Comprehensive guidance for building scalable, maintainable, and production-ready Node.js backend applications with modern frameworks, archit |
-| [`observability-engineer`](./external/observability-engineer/) | `external` | Build production-ready monitoring, logging, and tracing systems. Implements comprehensive observability strategies, SLI/SLO management, and  |
+| [`docker-expert`](./external/docker-expert/) | `external` | Dockerfiles and images: multi-stage builds, BuildKit cache and secret mounts, slim or distroless bases, non-root, healthchecks, scanning, mu |
+| [`fastapi-pro`](./external/fastapi-pro/) | `external` | FastAPI with Pydantic v2: lifespan, settings, Annotated dependencies, async SQLAlchemy 2.0 sessions, error handlers, background work, httpx  |
+| [`monorepo-architect`](./external/monorepo-architect/) | `external` | Monorepo structure: pnpm workspaces, Turborepo or Nx task graphs, affected-only CI, remote cache, package boundaries, Changesets, CODEOWNERS |
+| [`nodejs-backend-patterns`](./external/nodejs-backend-patterns/) | `external` | Node.js 22/24 services in ESM: structure, validated config, error mapping, graceful shutdown, AsyncLocalStorage, streams, queues, node:test. |
+| [`observability-engineer`](./external/observability-engineer/) | `external` | Observability with OpenTelemetry: traces, metrics and logs, semantic conventions, structured logging, RED and USE, SLOs and burn-rate alerts |
 | [`python-patterns`](./external/python-patterns/) | `external` | Modern Python 3.12+: type hints, dataclasses, Pydantic v2, async/await, context managers, generators, pattern matching. Use when writing or  |
 | [`rest-api-design`](./external/rest-api-design/) | `external` | REST API design: HTTP methods, status codes, pagination, versioning, rate limiting, caching headers, OpenAPI documentation. Use when a REST  |
 | [`testing-backend`](./external/testing-backend/) | `external` | Backend testing: pytest patterns (Python), Jest patterns (Node.js), integration testing, database fixtures/factories, API contract testing.  |
@@ -240,22 +241,20 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | Skill | Group | Description |
 |-------|-------|-------------|
 | [`agent-introspection-debugging`](./external/agent-introspection-debugging/) | `external` | \| |
-| [`agentflow`](./external/agentflow/) | `external` | Orchestrate autonomous AI development pipelines through your Kanban board (Asana, GitHub Projects, Linear). Manages multi-worker Claude Code |
-| [`architecture`](./external/architecture/) | `external` | Architectural decision-making framework. Requirements analysis, trade-off evaluation, ADR documentation. Use when making architecture decisi |
+| [`architecture`](./external/architecture/) | `external` | Stack-neutral architecture decisions: quality drivers, options with a trade-off matrix, reversibility, ADRs, fitness checks. Use when making |
 | [`avkit`](./external/avkit/) | `external` | Create media playback experiences using AVKit. Use when adding video players with AVPlayerViewController, enabling Picture-in-Picture, routi |
-| [`backlog`](./external/backlog/) | `external` | The engineering backlog registry for deferred-but-approved work in this codebase. Every job the user defers ('defer it', 'add it to the list |
+| [`backlog`](./external/backlog/) | `external` | The engineering backlog registry for deferred-but-approved work: each deferred job lands here with its spec, origin and unblock condition. U |
 | [`ci-cd-pipelines`](./external/ci-cd-pipelines/) | `external` | CI/CD pipelines: GitHub Actions workflows, Docker multi-stage builds, environment management, secret management, deployment strategies. Use  |
-| [`clean-code`](./external/clean-code/) | `external` | This skill embodies the principles of \"Clean Code\" by Robert C. Martin (Uncle Bob). Use it to transform \"code that works\" into \"code th |
-| [`closed-loop-delivery`](./external/closed-loop-delivery/) | `external` | Use when a coding task must be completed against explicit acceptance criteria with minimal user re-intervention across implementation, revie |
-| [`context-compression`](./external/context-compression/) | `external` | When agent sessions generate millions of tokens of conversation history, compression becomes mandatory. The naive approach is aggressive com |
+| [`clean-code`](./external/clean-code/) | `external` | Readability checks for code in any language: names, function focus, control flow, side effects, errors, comments, duplication. Use when writ |
+| [`context-compression`](./external/context-compression/) | `external` | Keeping long LLM agent sessions on track: what a summary must preserve, incremental structured summaries, state in files, compact versus res |
 | [`core-data`](./external/core-data/) | `external` | Build, review, or improve Core Data persistence in apps that have not adopted SwiftData. Use when working with NSManagedObject subclasses, N |
 | [`council`](./external/council/) | `external` | \| |
 | [`cryptokit`](./external/cryptokit/) | `external` | Use Apple CryptoKit for Swift cryptographic primitives. Use when hashing with SHA-2 or SHA-3, generating HMACs, encrypting with AES-GCM or C |
 | [`debugging-instruments`](./external/debugging-instruments/) | `external` | Debug iOS apps and profile performance using LLDB, Memory Graph Debugger, and Instruments. Use when diagnosing crashes, memory leaks, retain |
-| [`debugging-strategies`](./external/debugging-strategies/) | `external` | Transform debugging from frustrating guesswork into systematic problem-solving with proven strategies, powerful tools, and methodical approa |
+| [`debugging-strategies`](./external/debugging-strategies/) | `external` | Language-neutral debugging method: reproduce, minimise, falsifiable hypotheses, git bisect, instrumentation, production traces, concurrency  |
 | [`evidence-github`](./external/evidence-github/) | `external` | Search GitHub for facts an analysis can cite - a known issue in a dependency, the PR that fixed it, what a release actually changed, prior a |
 | [`evidence-registry`](./external/evidence-registry/) | `external` | Check a package's real version, deprecation status and release notes on npm, PyPI, Maven Central or Swift Package Index. Use when a spec or  |
-| [`github-actions-templates`](./external/github-actions-templates/) | `external` | Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications. Use when a GitHub Actions workflow has  |
+| [`github-actions-templates`](./external/github-actions-templates/) | `external` | Authoring GitHub Actions workflows: triggers, matrices, caching, concurrency, least-privilege permissions, SHA pinning, OIDC, reusable workf |
 | [`humanizer`](./external/humanizer/) | `external` | \| |
 | [`localization-reuse-map`](./external/localization-reuse-map/) | `external` | >- |
 | [`pdfkit`](./external/pdfkit/) | `external` | Display and manipulate PDF documents using PDFKit. Use when embedding PDFView to show PDF files, creating or modifying PDFDocument instances |

package/pipeline/skills/shared/core/apple-archive-compliance/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: apple-archive-compliance
-language: en
 description: "Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code mapping + EN/TR humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 3 Security Auditor (catalog cross-ref on Info.plist / PrivacyInfo / entitlements diffs), /multi-agent:review (PR citation), /multi-agent:channels (PR body auto-augmentation). Wiring enforced by smoke-compliance-skills.sh. Use when an .xcarchive needs an App Store review check before submission, or a rejection has to be diagnosed."
 user-invocable: true
 argument-hint: '[archive-path] [--threshold=error|warning|info] [--format=markdown|json] [--lang=en|tr]   -  no-arg: picks most recent .xcarchive from ~/Library/Developer/Xcode/Archives/'
-standards-registry: references/rules.yml
+metadata:
+  language: en
+  standards-registry: references/rules.yml
 ---
 
 # apple-archive-compliance  -  Apple App Store Review Compliance Skill

package/pipeline/skills/shared/core/google-play-compliance/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: google-play-compliance
-language: en
 description: "Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error codes + humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 3 Security Auditor (catalog cross-ref on AndroidManifest / build.gradle / proguard / signing diffs), /multi-agent:review (PR citation), /multi-agent:channels (PR body auto-augmentation). Wiring enforced by smoke-compliance-skills.sh. Use when an .aab or .apk needs a Play policy check before upload, or a Play rejection has to be diagnosed."
 user-invocable: true
 argument-hint: '[bundle-path] [--threshold=error|warning|info] [--format=markdown|json] [--lang=en|tr]   -  no-arg: picks most recent .aab from app/build/outputs/bundle/release/'
-standards-registry: references/rules.yml
+metadata:
+  language: en
+  standards-registry: references/rules.yml
 ---
 
 # google-play-compliance  -  Google Play Store Publication Compliance Skill

package/pipeline/skills/shared/core/multi-agent/SKILL.md

@@ -1,9 +1,10 @@
 ---
 name: multi-agent
-language: en
 description: "Task orchestrator: runs the full pipeline from a Jira ID or GitHub Issue URL  -  analysis → plan → TDD development → parallel review (Fable + Opus + Sonnet on Claude Code, GPT + Opus + Sonnet on Copilot CLI) → commit → log. Every step is written to agent-log.md. Use when given a Jira ID, a GitHub issue or a free-text task and the whole pipeline should run."
 user-invocable: true
-argument-hint: '"PROJ-12345" "feature/PROJ-12345-flight-filter" | "https://github.com/.../issues/316" | status | log #1 | resume #1 | kill #1 | clear-logs | purge | review'
+argument-hint: '"PROJ-12345" "feature/PROJ-12345-order-filter" | "https://github.com/.../issues/316" | status | log #1 | resume #1 | kill #1 | clear-logs | purge | review'
+metadata:
+  language: en
 ---
 
 Read and follow the instructions in this file's INSTRUCTION.md section below.
@@ -75,8 +76,8 @@ multi-agent "LoginView dark mode fix" autopilot
 
 | Phase | Normal | Autopilot |
 |-------|--------|-----------|
-| Phase 1 (Plan Approval Gate) | Clarification (max 2 rounds) + approval loop  -  user replies `onayla`/`iptal`/free-text | **Gate skip**  -  log the plan, go straight to Phase 3 (autopilot contract: zero interaction) |
-| Phase 5 (User Test) | "Want to test it?" → wait | Skip → go straight to Phase 4 |
+| Phase 1 (Plan Approval Gate) | Clarification (max 2 rounds) + approval loop  -  user replies `onayla`/`iptal`/free-text | **Gate skip**  -  log the plan, go straight to Phase 2 (autopilot contract: zero interaction) |
+| Phase 3 (User test) | "Want to test it?" → wait | Skip → go straight to Phase 4 |
 | Phase 4 (Commit) | "Want to commit?" → wait | Automatic commit + push |
 | Phase 4 (PR) | "Want to open a PR?" → wait | Automatically create the PR |
 
@@ -94,10 +95,10 @@ multi-agent "LoginView dark mode fix" autopilot
 Every task gets an **auto-incremented short ID** for easy reference:
 
 ```
-multi-agent "PROJ-12345" "feature/PROJ-12345-flight-filter"
+multi-agent "PROJ-12345" "feature/PROJ-12345-order-filter"
 → ✅ Task #1 started  -  PROJ-12345
 
-multi-agent "PROJ-67890" "feature/PROJ-67890-booking-flow"
+multi-agent "PROJ-67890" "feature/PROJ-67890-checkout-flow"
 → ✅ Task #2 started  -  PROJ-67890
 ```
 
@@ -350,8 +351,8 @@ Full contract: `refs/tracker-contract.md` section "TaskCreate ordering (strict)"
 **Step 1  -  Project detection + input parsing:**
 
 #### my-ios-app (Jira + branch)
-1. Input: `"PROJ-12345" "feature/PROJ-12345-flight-filter"`
-2. Parse directly: `jiraId = PROJ-12345`, `branch = feature/PROJ-12345-flight-filter`
+1. Input: `"PROJ-12345" "feature/PROJ-12345-order-filter"`
+2. Parse directly: `jiraId = PROJ-12345`, `branch = feature/PROJ-12345-order-filter`
 3. No GitHub interaction needed
 
 #### my-figma-app (GitHub Issue URL)
@@ -393,7 +394,7 @@ Full contract: `refs/tracker-contract.md` section "TaskCreate ordering (strict)"
    ```json
    {
      "taskId": "PROJ-12345",
-     "branch": "feature/PROJ-12345-flight-filter",
+     "branch": "feature/PROJ-12345-order-filter",
      "project": "my-ios-app",
      "currentPhase": 0,
      "status": "in_progress",

package/pipeline/skills/shared/core/multi-agent-analysis/SKILL.md

@@ -1,14 +1,15 @@
 ---
 name: multi-agent-analysis
-language: en
-description: "Standalone feature-spec analysis. Two profiles picked at intake: global (23-section development handoff, 8 of them in Lite mode) or corporate (IG/UC/FG requirements document with traceability matrices). Platform-agnostic concept layer with repo-driven convention extraction and per-platform Pass B render; stack selection is optional. Collects Figma / Swagger / Confluence / Jira / Standards / Firebase / repo inputs, then stops. Does not chain into dev or create branches. Use when a feature needs a written specification before any code."
+description: "Standalone feature-spec analysis. Two profiles picked at intake: global (23-section development handoff, evidence-trimmed) or corporate (IG/UC/FG requirements document with traceability matrices). Platform-agnostic concept layer with repo-driven convention extraction and per-platform Pass B render; stack selection is optional. Collects Figma / Swagger / Confluence / Jira / Standards / Firebase / repo inputs, then stops. Does not chain into dev or create branches. Use when a feature needs a written specification before any code."
 user-invocable: true
-argument-hint: "[\"<analysis-name>\"] [--lite | --full] [--no-cache] [--preview-conventions]"
+argument-hint: "[\"<analysis-name>\"] [--no-cache] [--preview-conventions]"
+metadata:
+  language: en
 ---
 
 # multi-agent-analysis - Feature Spec Analysis (v3)
 
-**Input**: $ARGUMENTS (optional analysis name, e.g. `"FlightStatus"`)
+**Input**: $ARGUMENTS (optional analysis name, e.g. `"OrderStatus"`)
 
 Produces a stakeholder-ready, platform-agnostic feature-spec document set (one markdown file per selected platform) before any implementation starts. Do not confuse with the orchestrator's Phase 1 (which is an in-pipeline stack detector). This command is **independent and side-effect free**: no branches, worktrees, commits, or PRs.
 
@@ -37,7 +38,7 @@ One run emits one profile. A missing input never blocks either: the gap is writt
 
 ## Template (v3)
 
-Full mode renders 23 sections (Glossary, Changelog, References). Lite mode renders 7 sections (Summary, Goals + Non-Goals, User Stories, API Contracts, Architecture, Files to Add, References) and auto-activates for small features via three scored signals; `--lite` / `--full` flags always win.
+The template has 23 main sections plus footer (Glossary, Changelog). The rendered set is chosen from evidence by the omission table (Locked 2), not by a mode: a section with no evidence drops, and 19 Alternatives, 22 Glossary and 18 Rollout are default-drop.
 
 **Section omission**: zero-evidence sections are dropped entirely (no "TBD" placeholder); numbering re-flows to stay sequential. Sections 1, 2, 4, 9, 13, 14, 20, 21 are never omitted.
 

package/pipeline/skills/shared/core/multi-agent-analysis-jira/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: multi-agent-analysis-jira
-language: en
 description: "Turn a rendered analysis document into a Jira story tree: derive stories from the document's own rule ids, check coverage both ways, preview every byte, then create only what does not already exist. Use when an analysis is final and the work needs tickets."
 user-invocable: true
 argument-hint: "[analysis.md] [--project KEY]  -  optional; with no argument, pick from the documents this run emitted"
-not-for: create-jira, jira
+metadata:
+  language: en
+  not-for: create-jira, jira
 ---
 
 # multi-agent analysis-jira
@@ -28,6 +29,13 @@ Exit 4 means the document still carries an open placeholder. Stop and report it:
 the step is `/multi-agent:analysis-resolve`, and a tree built from an open
 question publishes the gap as work somebody is now assigned.
 
+With the quality gates active (autopilot, or `MULTI_AGENT_UNATTENDED=1`), exit 4
+also means the spec-consistency check failed: a requirement with no story or no
+Test Plan row, or a row that waives a binding constitution rule. Stop and report
+the listed ids. Attended, the same check is the advisory `consistency:` line of
+the preview and changes nothing else
+(`$HOME/.claude/multi-agent-refs/features/constitution.md`).
+
 Exit 2 means nothing could be derived. Say so; do not improvise a tree.
 
 ## Phase 2 - Preview, in full
@@ -36,7 +44,7 @@ Show the human-readable output verbatim, in `outputLanguage`. It already carries
 what makes a preview meaningful:
 
 - every node, its source ids and its identity label
-- the coverage verdict **on its own line**
+- the coverage verdict **on its own line**, and the consistency verdict below it
 - every field beside the pref key it came from, so a wrong setting shows here
   rather than in Jira afterwards
 - the write count

package/pipeline/skills/shared/core/multi-agent-analysis-resolve/SKILL.md

@@ -1,9 +1,10 @@
 ---
 name: multi-agent-analysis-resolve
-language: en
 description: "Resolve the Section 20 Risks and Open Questions of an analysis v3 document one row at a time: up to 3 source-labeled answer candidates per row (evidence / repo / AI reasoned), chosen answer merged into the target section, doc updated in place with a changelog bump. Same locked decisions as /multi-agent:analysis. Use when an analysis document's open questions need answering before development starts."
 user-invocable: true
 argument-hint: "[path/to/analysis/<feature>-<platform>.md] [--autonomous]"
+metadata:
+  language: en
 ---
 
 # multi-agent-analysis-resolve - Open Question Resolver for Analysis Docs

package/pipeline/skills/shared/core/multi-agent-autopilot/SKILL.md

@@ -1,9 +1,10 @@
 ---
 name: multi-agent-autopilot
-language: en
 description: "Launch any task in autopilot mode: skips every confirmation, runs end-to-end autonomously. Use when a task should run end to end with no confirmation prompts."
 user-invocable: true
 argument-hint: '"task"  -  issue URL, Jira ID, free-text, or #id (for resume)'
+metadata:
+  language: en
 ---
 
 # multi-agent autopilot  -  Autonomous Pipeline
@@ -16,8 +17,8 @@ Run the task end-to-end with no confirmations.
 
 | Phase | Normal | Autopilot |
 |-----|--------|-----------|
-| Phase 2 (Plan) | "Shall I continue?" → wait | Go straight to Phase 3 |
-| Phase 5 (Test) | "Do you want to test?" → wait | Skip → Phase 4 |
+| Phase 1 (Plan) | "Shall I continue?" → wait | Go straight to Phase 2 |
+| Phase 3 (User test, the tail of Review) | "Do you want to test?" → wait | Skip → Phase 4 |
 | Phase 4 (Commit) | "Shall I commit?" → wait | Automatic commit + push |
 | Phase 4 (PR) | "Shall I open a PR?" → wait | Create PR automatically |
 

package/pipeline/skills/shared/core/multi-agent-autopilot-off/SKILL.md

@@ -1,9 +1,10 @@
 ---
 name: multi-agent-autopilot-off
-language: en
 description: "Turn off continuous mode on this machine: the schedule is removed, work already running finishes, the repo selection is kept. Use when the machine should stop picking work up."
 user-invocable: true
 argument-hint: "[--now]  -  --now also stops the item currently running"
+metadata:
+  language: en
 ---
 
 
@@ -11,7 +12,7 @@ argument-hint: "[--now]  -  --now also stops the item currently running"
 
 Removes the schedule. **Work already in flight finishes** unless you pass
 `--now`: an item stopped mid-development leaves a worktree and a half-written
-branch, which is the exact state this release spent its time cleaning up.
+branch, so stopping it is a destructive step that is asked for, never a default.
 
 ## Steps
 
@@ -37,17 +38,42 @@ The plist is removed rather than left disabled, because its presence is the
 definition of on: a disabled-but-present job is a third state nobody can read
 from the outside.
 
-### 3. Release the sleep assertion and the indicator
+The awake agent goes with it, the same way:
 
 ```bash
-pkill -f 'caffeinate -i -w' 2>/dev/null || true       # only the one this mode holds
+. "$HOME/.claude/lib/autopilot-state.sh"
+node "$(ma_ap_asset scripts/autopilot-awake.mjs)" remove
+```
+
+It holds sleep off for as long as it is loaded, and it has no meaning without
+the schedule: left behind, it keeps a Mac awake for a mode that is off.
+
+### 3. Release the in-flight sleep lock and the indicator
+
+```bash
+INH="$HOME/.claude/autopilot/inhibitor.json"
+if [ -f "$INH" ]; then
+  RP=$(jq -r '.runnerPid // empty' "$INH"); IP=$(jq -r '.pid // empty' "$INH")
+  if [ -n "$RP" ] && kill -0 "$RP" 2>/dev/null; then
+    echo "the tick in flight holds sleep until it ends"
+  else
+    [ -n "$IP" ] && kill "$IP" 2>/dev/null; rm -f "$INH"
+  fi
+fi
 pkill -f "$HOME/.claude/autopilot/bin/menubar" 2>/dev/null || true
 ```
 
+The in-flight sleep lock belongs to a tick, not to the mode: the runner releases it
+when the tick ends and it exits with the runner's pid, so the only one left to
+stop is one whose runner is already gone - by the pid it recorded, never by name.
+
 ### 4. `--now` only: end the in-flight item deliberately
 
-Without `--now` nothing here runs. With it, the child session is stopped and the
-run is marked `abandoned`, its worktree is removed **unless it holds uncommitted
+Without `--now` nothing here runs. With it, first name the item, its worktree and
+whether it holds uncommitted work, and ask before stopping anything; the command
+is declared `destructive: true` with `confirm: required`, so a client confirms
+before it even starts. On a yes, the child session is stopped and the run is
+marked `abandoned`, its worktree is removed **unless it holds uncommitted
 work**, in which case the work is stashed to `autopilot/abandoned/<task-id>` and
 the worktree is kept. Same contract as `gc-abandoned.sh`; losing a day of edits
 is worse than 750 MB.