@mmerterden/multi-agent-pipeline 20.33.0 → 20.35.0

package/pipeline/scripts/write-state.mjs

@@ -69,8 +69,9 @@ import {
 import { dirname, basename } from "path";
 import { Buffer } from "node:buffer";
 import { runMain } from "../lib/fatal.mjs";
+import { readLockOwner, reapLock } from "../lib/json-file-lock.mjs";
 import { invokedDirectly } from "../lib/invoked-directly.mjs";
-import { completionGaps } from "../lib/run-completion.mjs";
+import { completionGaps, modeOf } from "../lib/run-completion.mjs";
 
 /**
  * @typedef {{ replace: boolean, path: string, ifRev: number|null }} ParsedArgs
@@ -156,15 +157,7 @@ async function acquireLock(
       // file that is there.
       const stale = lockIdentityIfStale(lockPath, staleMs);
       if (stale) {
-        try {
-          const now = statSync(lockPath);
-          if (now.ino === stale.ino && now.mtimeMs === stale.mtimeMs) {
-            unlinkSync(lockPath);
-          }
-          // Changed under us: somebody else's live lock. Leave it and retry.
-        } catch {
-          /* vanished on its own  -  fall through and retry */
-        }
+        reapLock(lockPath, stale);
         continue;
       }
       await new Promise((r) => setTimeout(r, 50));
@@ -205,19 +198,11 @@ async function acquireLock(
  * @returns {{ino: number, mtimeMs: number} | null}
  */
 function lockIdentityIfStale(lockPath, staleMs) {
-  let pid;
-  let mtimeMs;
-  let ino;
-  try {
-    pid = parseInt(readFileSync(lockPath, "utf-8").trim(), 10);
-    const st = statSync(lockPath);
-    mtimeMs = st.mtimeMs;
-    ino = st.ino;
-  } catch {
-    // Lock vanished between EEXIST and our read  -  let the retry re-open it.
-    return null;
-  }
-  const identity = { ino, mtimeMs };
+  // Lock vanished between EEXIST and our read: let the retry re-open it.
+  const owner = readLockOwner(lockPath);
+  if (!owner) return null;
+  const { pid, mtimeMs } = owner;
+  const identity = { ino: owner.ino, mtimeMs };
   const abandonMs = Number(process.env.WRITE_STATE_LOCK_ABANDON_MS) || staleMs * 10;
   const age = Date.now() - mtimeMs;
 
@@ -397,6 +382,62 @@ export function completionRefusal(next, payload, replace, diskStatus) {
   return `write-state: refusing status "${next.status}": ${gaps.join("; ")}. Nothing was written. Finish the missing step, or record a halt (status "paused" with a haltReason).`;
 }
 
+/**
+ * The refusal message for a phase move the run has not earned, or null.
+ *
+ * - Phase 1 to a later phase in an attended full run needs the plan approval
+ *   the Phase 1 gate writes (`phases["1"].planApprovedAt`). Autopilot and
+ *   background launches approve nothing by design, and in analysis mode
+ *   Phase 1 is not a plan, so neither is asked.
+ * - A `sessionId` already set is the run's identity for resume; a write that
+ *   changes it detaches the run from the session that started it.
+ * - Phase 2 to a later phase in an attended run with a tracked issue (jiraId
+ *   or githubIssue) needs `phases["2"].trackerStatus` verified, declined or
+ *   not-tracked: the issue moves to In Progress before any code, and a failed
+ *   move stops the phase. Unattended runs leave tracker writes to the runner.
+ *
+ * @param {object} next     the document as it would be written
+ * @param {unknown} payload the patch as sent
+ * @param {object} current  the document on disk
+ * @returns {string|null}
+ */
+export function transitionRefusal(next, payload, current) {
+  const patch = payload && typeof payload === "object" ? payload : {};
+  const was = current && typeof current === "object" ? current : {};
+  if (
+    typeof was.sessionId === "string" &&
+    was.sessionId &&
+    Object.hasOwn(patch, "sessionId") &&
+    next.sessionId !== was.sessionId
+  ) {
+    return `write-state: refusing to change sessionId from "${was.sessionId}". It identifies the run for resume; nothing was written.`;
+  }
+  const unattended =
+    next.autopilot === true || ["autopilot", "background"].includes(next.launchRequest?.mode);
+  if (
+    modeOf(next) === "full" &&
+    !unattended &&
+    Number(was.currentPhase) === 1 &&
+    Number(next.currentPhase) > 1 &&
+    !next.phases?.["1"]?.planApprovedAt
+  ) {
+    return 'write-state: refusing to leave Phase 1: the plan has no approval (phases["1"].planApprovedAt). Nothing was written. Record the approval when the user approves the plan, or a halt.';
+  }
+  const tracked = Boolean(next.jiraId) || Boolean(next.githubIssue?.number);
+  const tracker = next.phases?.["2"]?.trackerStatus?.status;
+  if (
+    ["full", "dev"].includes(modeOf(next)) &&
+    !unattended &&
+    tracked &&
+    Number(was.currentPhase) === 2 &&
+    Number(next.currentPhase) > 2 &&
+    !["verified", "declined", "not-tracked"].includes(tracker)
+  ) {
+    return `write-state: refusing to leave Phase 2: the issue's move to In Progress is ${tracker ? `"${tracker}"` : "not recorded"} (phases["2"].trackerStatus). Nothing was written. Move the issue and re-read it, record "declined" if the user refused the write, or record a halt.`;
+  }
+  return null;
+}
+
 /**
  * Bind the run to the host session that drives it.
  *
@@ -554,7 +595,9 @@ async function main() {
       }
     }
 
-    const refusal = completionRefusal(next, payload, replace, diskStatus);
+    const refusal =
+      completionRefusal(next, payload, replace, diskStatus) ||
+      transitionRefusal(next, payload, current);
     if (refusal) {
       console.error(refusal);
       releaseLock(path);

package/pipeline/skills/.skill-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-10-25T17:09:06Z",
+  "generatedAt": "2026-10-27T13:35:46Z",
   "skillCount": 237,
   "entries": [
     {
@@ -9,7 +9,7 @@
     },
     {
       "path": "shared/core/google-play-compliance/SKILL.md",
-      "sha256": "3089e8c5f99c1ec7c1358394c398335ccb5ebc20ca05d60d870127da4592de34"
+      "sha256": "34e87f1e6fde51dd19c9ccff00e21cd7cee74f487b5dec54deec2268ff831b3b"
     },
     {
       "path": "shared/core/multi-agent-analysis-jira/SKILL.md",
@@ -49,7 +49,7 @@
     },
     {
       "path": "shared/core/multi-agent-channels/SKILL.md",
-      "sha256": "b55e8461a1bcdc1b4b88c42e086f599fccda2a89d7f56a29ac11e5ebc12a3623"
+      "sha256": "74008ae717bb9662ac6ab8838e3659a5006859fc6129f655094780bc97b90423"
     },
     {
       "path": "shared/core/multi-agent-complaint-analysis/SKILL.md",
@@ -89,7 +89,7 @@
     },
     {
       "path": "shared/core/multi-agent-graph/SKILL.md",
-      "sha256": "14204e089cbe76702a6d3492859a3a63d99f5bfa4cb69873f96a3b1873e04ed0"
+      "sha256": "d81b8470c9d571f3c1b70529bf9f010ab830b71086663e1075573c229345f235"
     },
     {
       "path": "shared/core/multi-agent-help/SKILL.md",
@@ -113,7 +113,7 @@
     },
     {
       "path": "shared/core/multi-agent-language/SKILL.md",
-      "sha256": "ca4932ca4491546309666b67c8a9a676700ecc09c6ddab8696788464991b435f"
+      "sha256": "0d3b7df6702356073c11c9ec76e69b39a0d9ecc45b1cf3e3270a639324b3633f"
     },
     {
       "path": "shared/core/multi-agent-log/SKILL.md",
@@ -137,7 +137,7 @@
     },
     {
       "path": "shared/core/multi-agent-office-status/SKILL.md",
-      "sha256": "fba0513f8941c026172ea0ce76cbc76d88a5e813fd713d68a1377eb5a4204c86"
+      "sha256": "fbe2f99e789facebe89f10655389ea1988dd5a6db03b054487a9c4a8e6d43f2f"
     },
     {
       "path": "shared/core/multi-agent-postmortem/SKILL.md",
@@ -181,7 +181,7 @@
     },
     {
       "path": "shared/core/multi-agent-review/SKILL.md",
-      "sha256": "4a110e0cc6c36185d76e1a99d7a397a937460377c6bc426714a236a5371a26b0"
+      "sha256": "91e238e9a6d1144582a0a73c580630fd1356214672db3cb399acad77ee8b19e5"
     },
     {
       "path": "shared/core/multi-agent-route-off/SKILL.md",
@@ -229,7 +229,7 @@
     },
     {
       "path": "shared/core/multi-agent-setup/SKILL.md",
-      "sha256": "28e80bacb521b3c41aac18859ca3921735970b0bf27f064bfc2b496db9f85016"
+      "sha256": "eaf7d4db93ddd392ba96da48d6dc2859b645b8c630ed9a73423498dd3e1d0b4a"
     },
     {
       "path": "shared/core/multi-agent-stack/SKILL.md",
@@ -361,7 +361,7 @@
     },
     {
       "path": "shared/external/app-store-review/SKILL.md",
-      "sha256": "073d99485665497229750b5f040c3a196c1e5de2bbcff281b8aec7e53817d3f4"
+      "sha256": "32e8b9de2894010fd584e6e4aada7270b85756be8608d7593127255fd6737a6e"
     },
     {
       "path": "shared/external/apple-on-device-ai/SKILL.md",

package/pipeline/skills/shared/core/google-play-compliance/SKILL.md

@@ -10,7 +10,7 @@ metadata:
 
 # google-play-compliance  -  Google Play Store Publication Compliance Skill
 
-Pre-submission compliance check for Android App Bundle (`.aab`) and APK artifacts. Unlike the iOS side (single MCP-tool wrapper around `ios_app_store_audit`), Android has **no single official scanner**  -  this skill orchestrates Google's own tools (`bundletool`, `aapt2`, `apksigner`, `adb`) plus a curated policy catalog to produce an equivalent pre-flight report.
+Pre-submission compliance check for Android App Bundle (`.aab`) and APK artifacts. Unlike the iOS side (single wrapper around the multi-agent-toolkit MCP server's `ios_app_store_audit`), Android has **no single official scanner**  -  this skill orchestrates Google's own tools (`bundletool`, `aapt2`, `apksigner`, `adb`) plus a curated policy catalog to produce an equivalent pre-flight report.
 
 **The catalog is the value.** The 21-rule knowledge base reflects current Google Play policies (target API requirements, 64-bit enforcement, data safety rules, permission policies). Tool invocations gather the evidence; this skill maps it against policy and humanizes.
 
@@ -118,7 +118,7 @@ Current Google Play policies + Play Console rejection codes. Sourced from `suppo
 
 | # | ruleID | Play ref | What it checks | Default severity |
 |---|---|---|---|---|
-| 1 | `target-api-level` | Policy  -  Target API | `android:targetSdkVersion` ≥ 34 for new apps (Aug 2024+), ≥ 34 for updates (Nov 2024+). Lower → rejected. | error |
+| 1 | `target-api-level` | Policy  -  Target API | `android:targetSdkVersion` ≥ 36 for new apps and updates on phones and tablets (from 31 Aug 2026, extension to 1 Nov 2026), ≥ 35 on Wear OS and Automotive, ≥ 34 on TV and XR. Lower → rejected. | error |
 | 2 | `native-64bit` | Policy  -  64-bit | Every native `.so` has an `arm64-v8a` counterpart. `armeabi-v7a`-only rejected since Aug 2019. | error |
 | 3 | `app-bundle-format` | Policy  -  AAB | New apps must ship `.aab`. `.apk` uploads rejected on new apps since Aug 2021. | error |
 | 4 | `base-module-size` | Platform limit | Base APK from bundle ≤ 150 MB (bundletool `--mode=universal` size). Beyond → rejected. | error |
@@ -331,7 +331,7 @@ The appended section is structured:
 
 ⚠️ 3 blocker(s), 2 warning(s)  -  run /multi-agent:test "store-ready" for the full report.
 
-- `target-api-level`  -  Policy  -  Target API: targetSdkVersion = 33 but Play Console requires ≥ 34 for updates
+- `target-api-level`  -  Policy  -  Target API: targetSdkVersion = 35 but Play Console requires ≥ 36 for new apps and updates
 - `native-64bit`  -  Policy  -  64-bit: lib/armeabi-v7a/libfoo.so has no arm64-v8a counterpart
 - `foreground-service-types`  -  Android 14: <service> missing android:foregroundServiceType
 + 2 more
@@ -339,9 +339,9 @@ The appended section is structured:
 
 ## Notes
 
-- **Policy thresholds change yearly.** Target API level (currently 34) advances each August for new apps / November for updates. When a new Android version ships, update Rule #1 `target-api-level` with the new threshold.
+- **Policy thresholds change yearly.** The target API level in Rule #1 advances each August for new apps / November for updates. When a new Android version ships, update Rule #1 `target-api-level` with the new threshold.
 - **Not a substitute for Play Console pre-launch report.** This skill catches static issues (manifest, signing, size, debug tools). Dynamic issues (crashes, ANRs, security vulnerabilities) require Play Console's own pre-launch testing on real devices.
-- **Data Safety form audit is partial.** Rule #14 flags manifest permissions that commonly trigger form updates, but the declared answers live in Play Console and cannot be cross-checked from here. The Android Publisher API has no Data Safety read: its only operation, `applications.dataSafety`, writes the declaration. With `google_play` onboarded, `store_search` / `store_call` reach the rest of the Android Publisher and Play Developer Reporting APIs (tracks, bundles, vitals), but the gap for Data Safety stays.
+- **Data Safety form audit is partial.** Rule #14 flags manifest permissions that commonly trigger form updates, but the declared answers live in Play Console and cannot be cross-checked from here. The Android Publisher API has no Data Safety read: its only operation, `applications.dataSafety`, writes the declaration. With `google_play` onboarded, the toolkit's `store_search` / `store_call` reach the rest of the Android Publisher and Play Developer Reporting APIs (tracks, bundles, vitals), but the gap for Data Safety stays.
 
 ## Version history
 

package/pipeline/skills/shared/core/google-play-compliance/references/rules.yml

@@ -37,7 +37,7 @@ enforcement_kinds:
 rules:
   - id: target-api-level
     title: >
-      `android:targetSdkVersion` ≥ 34 for new apps (Aug 2024+), ≥ 34 for updates (Nov 2024+). Lower → rejected.
+      `android:targetSdkVersion` ≥ 36 for new apps and updates on phones and tablets (from 31 Aug 2026, extension to 1 Nov 2026), ≥ 35 on Wear OS and Automotive, ≥ 34 on TV and XR. Lower → rejected.
     severity: blocking
     enforcement: scan
     policy_ref: Policy  -  Target API

package/pipeline/skills/shared/core/multi-agent-channels/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: multi-agent-channels
-description: "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Phase 5 delegates to this skill; users can invoke post-hoc by Jira ID / PR URL / branch."
+description: "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Use to post or redo a run's report; Phase 5 delegates here, or invoke by Jira ID / PR URL / branch."
 user-invocable: true
 argument-hint: '<Jira-id | PR-url | #N | Jira-url> [--channels pr,jira,confluence,wiki] [--content normal,technical,test,auto-diff,note,test-run] [--flow-run <runId>[,<runId>...]] [--message "..."] [--message-file path] [--dry-run] [--append] [--ready]'
 metadata:

package/pipeline/skills/shared/core/multi-agent-graph/SKILL.md

@@ -2,7 +2,7 @@
 name: multi-agent-graph
 description: "Build and query this repo's code graph: a deterministic, LLM-free map of symbols, imports and references used to narrow Phase 1's Explore scope and to keep the knowledge base current. Read-only on code, costs no API tokens. Use when a task needs to know where something lives or what depends on it before reading files."
 user-invocable: true
-argument-hint: "[build | refresh | ask \"<question>\" | affected \"<symbol>\" | report | status]"
+argument-hint: "[build | refresh | ask \"<question>\" | affected \"<symbol>\" | path <from> <to> | links <a,b> | report | diff <older> | status]"
 metadata:
   language: en
 ---
@@ -27,7 +27,10 @@ No worktree, no branch, no commit, no pipeline chaining.
 | `refresh` | same as `build` | A full rebuild takes seconds, so there is no separate incremental path |
 | `ask "<question>"` | `graph-query.mjs "<question>" --budget N` | Token-budgeted traversal; default budget 2000 |
 | `affected "<symbol>"` | `graph-affected.mjs "<symbol>" --depth N` | Reverse traversal: the blast radius of a change |
-| `report` | `graph-report.mjs` | Writes `GRAPH_REPORT.md` beside the graph |
+| `path <from> <to>` | `graph-query.mjs --path <from> <to>` | Shortest path between two symbols or files (id or name). An ambiguous name is refused with candidate ids, an unknown one gets its nearest names (exit 3); external modules are never walked through |
+| `links <a,b,...>` | `graph-links.mjs build --projects <a,b,...>`, then `graph-links.mjs affected --project <b>` | Which files of one repository import another (package, module or Kotlin type names), for a run across a main repo and its libraries. Graphs stay separate (ADR-0018) |
+| `report` | `graph-report.mjs` | Writes `GRAPH_REPORT.md` beside the graph: hubs, import cycles, clusters with cohesion, questions worth asking, modules, external dependencies, unconnected files, and symbols no other file references (candidates only - the extractor is regex, not a parser, so nothing gates on that list) |
+| `diff <older-graph>` | `graph-report.mjs --diff <older-graph>` | Files, symbols and edges added or removed since an older build, and the import-cycle count before and after |
 | `status` | `graph-report.mjs --status` | One line: stack, scale, build time and whether `baseCommit` still matches HEAD. Never read the graph file yourself - it is 22MB on a large repo |
 
 With no argument, run `status`, then offer `build` when no graph exists and

package/pipeline/skills/shared/core/multi-agent-language/SKILL.md

@@ -16,11 +16,11 @@ Two-axis language preference for the pipeline:
 | Field | Controls | Stored at | Mutability |
 |---|---|---|---|
 | `promptLanguage` | Interactive prompts during a pipeline run (account picker, project picker, dev-context picker, base-branch picker, branch-name picker, maturity ack, channels picker, Phase 3 test prompt, Phase 4 local-checkout prompt) | `prefs.global.promptLanguage` | **Fixed to `en`**  -  never toggled by this skill |
-| `outputLanguage` | Assistant's explanations, status updates, error messages, and pipeline-generated reports rendered to the user (NOT external payloads) | `prefs.global.outputLanguage` | Toggled by this skill |
+| `outputLanguage` | Assistant's explanations, status updates, error messages, and pipeline-generated reports rendered to the user, and PR, Jira, issue and wiki bodies (commits, branch names and agent prompts stay English) | `prefs.global.outputLanguage` | Toggled by this skill |
 
 **Why promptLanguage is fixed:** it governs the picker's structural chrome only  -  the `AskUserQuestion` `header` chip, host error UI, and internal contract identifiers. The chip stays English because it is capped at 12 characters and most Turkish equivalents overflow it. Everything a user actually reads follows `outputLanguage`: the picker `question`, each option's `label`, and each option's `description`, per the canonical per-field matrix in `multi-agent-refs/rules.md`. A picker whose question or buttons are English on a Turkish run is a bug, not the contract. The host's own **Other** row is injected by the CLI and stays English on every run; nothing in the pipeline can localize it.
 
-**Always English regardless of either field**: commit messages, PR titles/bodies, Jira comments, wiki pages, reviewer/triage system prompts, agent-log.md payloads, skill-picker / confirmation / error UI exposed by the CLI host.
+**Always English regardless of either field**: commit messages, PR title prefixes (`feat:`, `fix:`), branch names, code identifiers, file paths, `agent-log.md` payloads, reviewer/triage system prompts, and confirmation / error UI exposed by the CLI host. PR descriptions, Jira comments, GitHub issue comments and wiki/Confluence page **bodies** follow `outputLanguage`, per the `rules.md` matrix.
 
 ## Invocations
 
@@ -72,8 +72,8 @@ jq --arg ol "$NEW_OUTPUT" '
 
 Render in the new outputLanguage:
 
-- `en`: `outputLanguage=<Y>. promptLanguage stays "en". External payloads remain English.`
-- `tr`: `outputLanguage=<Y>. promptLanguage "en" sabit. Dış çıktılar İngilizce kalır.`
+- `en`: `outputLanguage=<Y>. promptLanguage stays "en". Commits, branch names and agent prompts stay English; PR, Jira and wiki bodies follow outputLanguage.`
+- `tr`: `outputLanguage=<Y>. promptLanguage "en" sabit. Commit'ler, branch adları ve ajan istemleri İngilizce kalır; PR, Jira ve wiki metinleri outputLanguage'i izler.`
 
 ## Validation
 

package/pipeline/skills/shared/core/multi-agent-office-status/SKILL.md

@@ -10,8 +10,8 @@ metadata:
 
 1. `node "$HOME/.copilot/scripts/office-control.mjs" status --json`
 2. Report in `outputLanguage`: `running`, `url` and `idleMinutes`; the
-   `remote` line as given ("not available in this installation" unless a
-   separate remote layer is installed); `pairedDevices`; `recentActions`
+   `remote` line as given ("off" until `office-pair.mjs` pairs a phone, then
+   "paired"); `pairedDevices`; `recentActions`
    (route, step, status, when; never a request body).
 
 Never print the token or read the token file.

package/pipeline/skills/shared/core/multi-agent-review/SKILL.md

@@ -120,6 +120,8 @@ Skip Phase 0-3 and review a diff only. Input shapes: a PR (`#N`, `repo#N`, GitHu
    - 🟡 **Important** → fix recommended
    - 🟢 **Suggestion** → optional
 
+   Triage also settles every reviewer `cannotVerify` row: `verified` with the file:line read, `finding` with the file:line of the accepted or deferred finding, or `out-of-scope`. Unsettled rows are listed in the summary.
+
 6. **Show a summary** (always prints, any mode):
    ```
    🔍 Review Complete

package/pipeline/skills/shared/core/multi-agent-setup/SKILL.md

@@ -39,7 +39,7 @@ Ask BEFORE anything else, so every subsequent setup prompt and the rest of the p
 - `promptLanguage`: picker chrome only (the `AskUserQuestion` `header` chip, host error UI, internal contract identifiers). **Not configurable  -  fixed to `en`**; the chip is capped at 12 chars, which most Turkish equivalents overflow.
 - `outputLanguage`: the assistant's non-interactive explanations, status updates, error messages and pipeline-generated reports. Set here, changeable later via `/multi-agent-language <en|tr>`.
 
-`promptLanguage` is seeded as `"en"` and never offered to the user. **External payloads always stay English** (commits, PR titles/bodies, Jira comments, wiki content, reviewer/triage prompts, agent-log.md).
+`promptLanguage` is seeded as `"en"` and never offered to the user. Language matrix: `multi-agent-refs/rules.md`.
 
 The wizard asks one question (English UI per skill-prompt rules):
 
@@ -55,8 +55,8 @@ Select (1-2):
 
 - **Already set in prefs** → skip silently. User can change later with `/multi-agent-language <en|tr>` or `/multi-agent-language output <en|tr>`.
 - **New value** → validate against the schema enum (`en`, `tr`), write `prefs.global.outputLanguage` via atomic rename, force `prefs.global.promptLanguage = "en"`, then echo a confirmation in the just-chosen `outputLanguage`:
-  - `en`: `outputLanguage=<Y>. promptLanguage stays "en". External payloads (PR bodies, Jira comments, reviewer prompts) stay English regardless.`
-  - `tr`: `outputLanguage=<Y>. promptLanguage "en" sabit. Dış çıktılar (PR açıklamaları, Jira yorumları, review istemleri) her durumda İngilizce kalır.`
+  - `en`: `outputLanguage=<Y>. promptLanguage stays "en". Commits stay English; PR/Jira/wiki bodies follow it.`
+  - `tr`: `outputLanguage=<Y>. promptLanguage "en" sabit. Commit'ler İngilizce; PR/Jira/wiki metinleri onu izler.`
 - **Unknown input** → re-ask once, then abort setup with a hint pointing to `/multi-agent-language`.
 
 From here on, every prompt in Steps 1-6 follows the per-field matrix in
@@ -324,7 +324,7 @@ All tokens are optional in the sense that every service can be answered with Ski
 
 ### Step 8  -  Enforcement hooks (optional)
 
-On Claude Code, offer to merge `$HOME/.claude/templates/claude-hooks.json`: three blocking `PreToolUse` gates (secret scan, agent-guard, read-size) plus four non-blocking hooks (`PreCompact`, `SessionEnd`, `SessionStart`, `PostToolUse`). What each does: `$HOME/.claude/multi-agent-refs/picker-contract.md`.
+On Claude Code, offer to merge `$HOME/.claude/templates/claude-hooks.json`: three blocking `PreToolUse` gates (secret scan, agent-guard, read-size) plus non-blocking hooks on `PreCompact`, `SessionEnd`, `SessionStart` and `PostToolUse`, and a blocking `Stop` hook (`run-stop-guard.sh`). What each does: `$HOME/.claude/multi-agent-refs/picker-contract.md`.
 
 - Ask (picker): "Install the pipeline's hooks into `~/.claude/settings.json`?" Default Yes.
 - On Yes, deep-merge EVERY event in the template's `hooks` object (merging `PreToolUse` alone drops the capture hooks); keep existing hooks, never duplicate a matcher calling the same script.

package/pipeline/skills/shared/external/alarmkit/references/alarmkit-patterns.md

@@ -1,5 +1,19 @@
 # AlarmKit patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Full alarm flow with intents](#full-alarm-flow-with-intents)
+- [Full timer flow](#full-timer-flow)
+- [Authorization manager](#authorization-manager)
+- [State store with async sequences](#state-store-with-async-sequences)
+- [Widget extension for countdown and paused UI](#widget-extension-for-countdown-and-paused-ui)
+- [Recurrence](#recurrence)
+- [Snooze and custom secondary actions](#snooze-and-custom-secondary-actions)
+- [Info.plist](#infoplist)
+- [Error handling](#error-handling)
+- [Apple documentation](#apple-documentation)
+<!-- /toc -->
+
 Longer, end-to-end examples. Everything here targets iOS 26 and iPadOS 26 with
 Swift 6.3. Code that uses the stopButton-free
 `AlarmPresentation.Alert(title:secondaryButton:secondaryButtonBehavior:)`

package/pipeline/skills/shared/external/android-architecture/references/patterns.md

@@ -1,5 +1,11 @@
 # Android Clean Architecture -- Reference Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Feature api/impl Split](#feature-apiimpl-split)
+- [Cross-Module Navigation Graph Aggregation](#cross-module-navigation-graph-aggregation)
+<!-- /toc -->
+
 Full code for the patterns summarized in `SKILL.md`. Load the section you need
 when implementing that specific structure.
 

package/pipeline/skills/shared/external/android-build-quality-gates/references/patterns.md

@@ -1,5 +1,15 @@
 # Android Build Quality Gates - Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Layer-dependency gate](#layer-dependency-gate)
+- [Coverage floor with Kover](#coverage-floor-with-kover)
+- [Compose-stability gate](#compose-stability-gate)
+- [Lint on diff](#lint-on-diff)
+- [Screenshot validation task](#screenshot-validation-task)
+- [Wiring gates into check](#wiring-gates-into-check)
+<!-- /toc -->
+
 Full, copy-ready code for the gates summarized in
 [../SKILL.md](../SKILL.md). Each section mirrors a heading there. Adapt names to
 the project's module conventions; nothing here hardcodes a product.

package/pipeline/skills/shared/external/android-datastore/references/patterns.md

@@ -1,5 +1,16 @@
 # Android DataStore Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Preferences DataStore](#preferences-datastore)
+- [Typed DataStore with a Serializer](#typed-datastore-with-a-serializer)
+- [Encrypted Typed DataStore](#encrypted-typed-datastore)
+- [Migrating from SharedPreferences](#migrating-from-sharedpreferences)
+- [Versioned Data Migrations](#versioned-data-migrations)
+- [Reading and Writing as Flow](#reading-and-writing-as-flow)
+- [Testing](#testing)
+<!-- /toc -->
+
 Full code examples backing the guidance in `SKILL.md`. Headings mirror the
 SKILL.md sections. Package, class, and key names are placeholders; adapt them.
 

package/pipeline/skills/shared/external/android-design-tokens-codegen/references/patterns.md

@@ -1,5 +1,13 @@
 # Android Design Tokens Codegen - Patterns
 
+<!-- toc -->
+- [Task wrapper](#task-wrapper)
+- [preBuild wiring](#prebuild-wiring)
+- [Check mode](#check-mode)
+- [Caching](#caching)
+- [Generated shapes](#generated-shapes)
+<!-- /toc -->
+
 Copy-ready Gradle and Kotlin for the schema-to-typed-code pipeline. Each heading
 mirrors a section in `SKILL.md`. All input is a local JSON schema; all output is
 generated Kotlin under the build directory. Names are illustrative and generic.

package/pipeline/skills/shared/external/android-jetpack-compose-expert/references/patterns.md

@@ -1,5 +1,11 @@
 # Compose runtime patterns
 
+<!-- toc -->
+- [Who owns a piece of state](#who-owns-a-piece-of-state)
+- [Side effects](#side-effects)
+- [Modifiers](#modifiers)
+<!-- /toc -->
+
 Loaded on demand from `../SKILL.md`.
 
 ## Who owns a piece of state

package/pipeline/skills/shared/external/android-mvi-viewmodel/references/patterns.md

@@ -1,5 +1,15 @@
 # Android MVI BaseViewModel Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Assembled BaseViewModel](#assembled-baseviewmodel)
+- [MVI contracts for a screen](#mvi-contracts-for-a-screen)
+- [A concrete ViewModel](#a-concrete-viewmodel)
+- [Lifecycle-aware event collector](#lifecycle-aware-event-collector)
+- [Stateless screen composable](#stateless-screen-composable)
+- [Testing the ViewModel](#testing-the-viewmodel)
+<!-- /toc -->
+
 Full code examples backing the guidance in `SKILL.md`. Load this file when you
 need a complete implementation to adapt. Headings mirror the SKILL.md sections.
 

package/pipeline/skills/shared/external/android-performance/references/patterns.md

@@ -1,5 +1,18 @@
 # Android Performance Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Baseline Profiles](#baseline-profiles)
+- [Compose Stability](#compose-stability)
+- [Recomposition Debugging](#recomposition-debugging)
+- [Lazy Layout Performance](#lazy-layout-performance)
+- [R8 Optimization](#r8-optimization)
+- [Memory Leak Detection](#memory-leak-detection)
+- [Startup Optimization](#startup-optimization)
+- [Image Loading with Coil](#image-loading-with-coil)
+- [General Performance Patterns](#general-performance-patterns)
+<!-- /toc -->
+
 Full code examples for the Android Performance skill. Each section mirrors a
 heading in `SKILL.md`. Load the section named in the guide when implementing or
 reviewing that area.

package/pipeline/skills/shared/external/android-security/references/patterns.md

@@ -1,5 +1,21 @@
 # Android Security -- Reference Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Secure Data Storage](#secure-data-storage)
+- [Encrypted DataStore](#encrypted-datastore)
+- [Database Key Hierarchy](#database-key-hierarchy)
+- [Build-Type Security Gating](#build-type-security-gating)
+- [Biometric Authentication](#biometric-authentication)
+- [Certificate Pinning](#certificate-pinning)
+- [API Key Protection](#api-key-protection)
+- [R8 Obfuscation](#r8-obfuscation)
+- [Play Integrity API](#play-integrity-api)
+- [Root Detection](#root-detection)
+- [Secure Network Communication](#secure-network-communication)
+- [Secure Coding Patterns](#secure-coding-patterns)
+<!-- /toc -->
+
 Full code for the patterns summarized in `SKILL.md`. Load the section you need
 when implementing that specific security feature.
 

package/pipeline/skills/shared/external/api-patterns/references/contract-details.md

@@ -1,5 +1,14 @@
 # API contract details
 
+<!-- toc -->
+- [Contents](#contents)
+- [Evolving a contract](#evolving-a-contract)
+- [Pagination](#pagination)
+- [Idempotency for retried writes](#idempotency-for-retried-writes)
+- [One error shape everywhere](#one-error-shape-everywhere)
+- [Webhooks done properly](#webhooks-done-properly)
+<!-- /toc -->
+
 Versioning rules and worked examples for the pagination, idempotency, error-shape and webhook rules summarised in SKILL.md.
 
 ## Contents

package/pipeline/skills/shared/external/api-security-best-practices/references/abuse-controls.md

@@ -1,5 +1,17 @@
 # Abuse Controls
 
+<!-- toc -->
+- [Contents](#contents)
+- [1. Layers of limits](#1-layers-of-limits)
+- [2. Choosing a rate limit algorithm](#2-choosing-a-rate-limit-algorithm)
+- [3. Keys: what to limit by](#3-keys-what-to-limit-by)
+- [4. A shared-store limiter](#4-a-shared-store-limiter)
+- [5. Telling clients about limits](#5-telling-clients-about-limits)
+- [6. Size, time and cost limits](#6-size-time-and-cost-limits)
+- [7. Protecting business flows](#7-protecting-business-flows)
+- [8. Operating the limits](#8-operating-the-limits)
+<!-- /toc -->
+
 Limits that keep one caller, script or bug from exhausting the service or its
 budget. Covers OWASP API4 (unrestricted resource consumption) and API6
 (unrestricted access to sensitive business flows).

package/pipeline/skills/shared/external/api-security-best-practices/references/identity-and-access.md

@@ -1,5 +1,18 @@
 # Identity and Access
 
+<!-- toc -->
+- [Contents](#contents)
+- [1. Choosing a credential type](#1-choosing-a-credential-type)
+- [2. Validating JWT access tokens](#2-validating-jwt-access-tokens)
+- [3. Refresh tokens and sessions](#3-refresh-tokens-and-sessions)
+- [4. API keys for machine clients](#4-api-keys-for-machine-clients)
+- [5. Service-to-service identity](#5-service-to-service-identity)
+- [6. Authorization models](#6-authorization-models)
+- [7. Enforcing authorization in code](#7-enforcing-authorization-in-code)
+- [8. Credential endpoints](#8-credential-endpoints)
+- [9. Scoping a lookup by principal](#9-scoping-a-lookup-by-principal)
+<!-- /toc -->
+
 How a request proves who it is, and how the server decides what that identity
 may do. Examples use TypeScript on Node with `jose` and Python with `PyJWT`;
 the rules are the same in any stack.

package/pipeline/skills/shared/external/api-security-best-practices/references/request-handling.md

@@ -1,5 +1,17 @@
 # Request Handling
 
+<!-- toc -->
+- [Contents](#contents)
+- [1. Validate at the edge with a schema](#1-validate-at-the-edge-with-a-schema)
+- [2. Writable fields only (mass assignment)](#2-writable-fields-only-mass-assignment)
+- [3. Shape every response explicitly](#3-shape-every-response-explicitly)
+- [4. Injection](#4-injection)
+- [5. Files and uploads](#5-files-and-uploads)
+- [6. Fetching user-supplied URLs (SSRF)](#6-fetching-user-supplied-urls-ssrf)
+- [7. Errors that do not leak](#7-errors-that-do-not-leak)
+- [8. Consuming third-party APIs](#8-consuming-third-party-apis)
+<!-- /toc -->
+
 Everything that crosses the boundary is untrusted until a schema says
 otherwise: body, query, path, headers, cookies, uploaded files, and responses
 from other services.

package/pipeline/skills/shared/external/app-clips/references/data-handoff-notifications-location.md

@@ -1,5 +1,14 @@
 # Data handoff, notifications and location
 
+<!-- toc -->
+- [Handing data to the full app](#handing-data-to-the-full-app)
+- [Keychain](#keychain)
+- [Sign in with Apple](#sign-in-with-apple)
+- [Ephemeral notifications](#ephemeral-notifications)
+- [Location confirmation](#location-confirmation)
+- [Lifecycle and short-lived state](#lifecycle-and-short-lived-state)
+<!-- /toc -->
+
 Moving state to the full app, signing people in once, notifying them within
 the clip's window, and proving they are where the code is. Summary in
 `../SKILL.md`.

package/pipeline/skills/shared/external/app-clips/references/routing-and-experiences.md

@@ -1,5 +1,13 @@
 # Routing and experiences
 
+<!-- toc -->
+- [Handling the invocation URL](#handling-the-invocation-url)
+- [App Store Connect experiences](#app-store-connect-experiences)
+- [Invocation sources](#invocation-sources)
+- [Smart App Banner](#smart-app-banner)
+- [Local testing](#local-testing)
+<!-- /toc -->
+
 How an App Clip learns what to show, how App Store Connect maps URLs to
 experiences, which sources can launch a clip, and how to test it. Summary in
 `../SKILL.md`.