@mmerterden/multi-agent-pipeline 20.34.0 → 20.35.0

package/pipeline/scripts/worktree-prepare-all.mjs

@@ -0,0 +1,200 @@
+#!/usr/bin/env node
+/**
+ * @file worktree-prepare-all.mjs  -  the multi-repo worktree setup as one
+ * step: every repo gets its worktree, or none keeps one this step created.
+ *
+ * Phase 0 creates one worktree per repo of a multi-repo task. When the third
+ * repo's add fails, the first two must not stay behind on a half-made task.
+ * This runs worktree-prepare.sh serially in the given order and, on the first
+ * failure, rolls back what this call created, newest first:
+ *
+ *   - the worktree is removed without --force, so a worktree holding changes
+ *     is kept and reported instead of discarded;
+ *   - the branch is deleted only when worktree-prepare created it here
+ *     (newBranch) and it still points at origin/<base>, so a branch that
+ *     existed before, or gained a commit, is never deleted.
+ *
+ * A worktree that was reused (it existed before the call) is never touched.
+ *
+ * Usage:
+ *   worktree-prepare-all.mjs --repos <repos.json>
+ *     repos.json: [{project, path, branch, base, name?, email?}, ...]
+ *
+ * Output (stdout, JSON): {ok, results[], failed, rolledBack[], kept[]}
+ *   results     each repo's worktree-prepare.sh output, in order, up to the failure
+ *   failed      the failing repo's output, or null
+ *   rolledBack  [{project, worktreePath, branchDeleted}]
+ *   kept        [{project, worktreePath, reason}]  what the rollback left in place
+ *
+ * Exit: 0 every repo ready, 1 a repo failed (rollback done; see kept[]),
+ *       2 usage or a repos file that does not parse.
+ */
+
+import { execFileSync, spawnSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { invokedDirectly } from "../lib/invoked-directly.mjs";
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const PREPARE = join(HERE, "worktree-prepare.sh");
+
+const git = (cwd, ...args) =>
+  execFileSync("git", ["-C", cwd, ...args], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+    timeout: 60_000,
+  }).trim();
+
+function prepareOne(repo, prepare) {
+  try {
+    return prepareOnce(repo, prepare);
+  } catch (err) {
+    return {
+      ok: false,
+      out: {
+        project: repo.project,
+        worktreePath: repo.path,
+        branch: repo.branch,
+        baseBranch: repo.base,
+        action: "failed",
+        error: String(err?.message || err).slice(0, 500),
+      },
+    };
+  }
+}
+
+function prepareOnce(repo, prepare) {
+  const args = [
+    prepare,
+    "--project",
+    repo.project,
+    "--path",
+    repo.path,
+    "--branch",
+    repo.branch,
+    "--base",
+    repo.base,
+  ];
+  if (repo.name) args.push("--name", repo.name);
+  if (repo.email) args.push("--email", repo.email);
+  const r = spawnSync("bash", args, { encoding: "utf8", timeout: 300_000 });
+  let out;
+  try {
+    out = JSON.parse(r.stdout);
+  } catch {
+    out = null;
+  }
+  if (r.status === 0 && out && (out.action === "created" || out.action === "reused"))
+    return { ok: true, out };
+  return {
+    ok: false,
+    out: out ?? {
+      project: repo.project,
+      worktreePath: repo.path,
+      branch: repo.branch,
+      baseBranch: repo.base,
+      action: "failed",
+      error: (r.stderr || r.error?.message || `exit ${r.status}`).trim().slice(0, 500),
+    },
+  };
+}
+
+/** Undo one worktree this call created. Returns a rolledBack or kept record. */
+export function rollbackOne(res) {
+  const where = { project: res.project, worktreePath: res.worktreePath };
+  try {
+    git(res.project, "worktree", "remove", res.worktreePath);
+  } catch (err) {
+    return {
+      kept: {
+        ...where,
+        reason: `worktree not removed: ${String(err.stderr || err.message)
+          .trim()
+          .slice(0, 200)}`,
+      },
+    };
+  }
+  let branchDeleted = false;
+  if (res.newBranch === true) {
+    try {
+      const tip = git(res.project, "rev-parse", "--verify", `refs/heads/${res.branch}`);
+      const base = git(
+        res.project,
+        "rev-parse",
+        "--verify",
+        `refs/remotes/origin/${res.baseBranch}`,
+      );
+      if (tip === base) {
+        git(res.project, "branch", "-D", "--", res.branch);
+        branchDeleted = true;
+      }
+    } catch {
+      branchDeleted = false;
+    }
+  }
+  return { rolledBack: { ...where, branchDeleted } };
+}
+
+export function prepareAll(repos, { prepare = PREPARE } = {}) {
+  const results = [];
+  for (const repo of repos) {
+    const r = prepareOne(repo, prepare);
+    if (r.ok) {
+      results.push(r.out);
+      continue;
+    }
+    const rolledBack = [];
+    const kept = [];
+    for (const done of [...results].reverse()) {
+      if (done.action !== "created") continue;
+      const u = rollbackOne(done);
+      if (u.rolledBack) rolledBack.push(u.rolledBack);
+      else kept.push(u.kept);
+    }
+    return { ok: false, results, failed: r.out, rolledBack, kept };
+  }
+  return { ok: true, results, failed: null, rolledBack: [], kept: [] };
+}
+
+const FIELD = /^[^\0\n]+$/;
+
+export function readRepos(text) {
+  const list = JSON.parse(text);
+  if (!Array.isArray(list) || !list.length) throw new Error("repos must be a non-empty array");
+  for (const r of list) {
+    for (const k of ["project", "path", "branch", "base"]) {
+      if (typeof r?.[k] !== "string" || !FIELD.test(r[k]))
+        throw new Error(`each repo needs a string ${k}`);
+    }
+    for (const k of ["branch", "base"])
+      if (r[k].startsWith("-")) throw new Error(`${k} must not start with -`);
+    for (const k of ["name", "email"]) {
+      if (r[k] !== undefined && (typeof r[k] !== "string" || !FIELD.test(r[k]))) {
+        throw new Error(`${k} must be a string when given`);
+      }
+    }
+  }
+  return list;
+}
+
+function main() {
+  const i = process.argv.indexOf("--repos");
+  if (i < 0 || !process.argv[i + 1] || process.argv.length !== 4) {
+    console.error("usage: worktree-prepare-all.mjs --repos <repos.json>");
+    return 2;
+  }
+  let repos;
+  try {
+    repos = readRepos(readFileSync(process.argv[i + 1], "utf8"));
+  } catch (err) {
+    console.error(`worktree-prepare-all: ${err.message}`);
+    return 2;
+  }
+  const out = prepareAll(repos);
+  process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+  return out.ok ? 0 : 1;
+}
+
+if (invokedDirectly(import.meta.url)) process.exit(main());

package/pipeline/scripts/worktree-prepare.sh

@@ -27,10 +27,13 @@
 #                       [--email <git user.email>]
 #
 # Output (stdout, JSON): {project, worktreePath, branch, baseBranch,
-#   action: created|reused|failed, pulled: true|false|null, error}
+#   action: created|reused|failed, pulled: true|false|null, newBranch, error}
+#   newBranch is true only when this call created the branch from origin/<base>,
+#   which is what tells worktree-prepare-all.mjs a rollback may delete it.
 #
 # Exit: 0 ready, 1 the add failed (nothing was created; the caller runs its
-#       rollback / collision flow), 2 usage.
+#       rollback / collision flow), 2 usage, a path outside <project>/.worktrees/,
+#       or a new branch outside the naming convention.
 set -uo pipefail
 
 HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -59,11 +62,43 @@ git -C "$PROJECT" rev-parse --git-dir >/dev/null 2>&1 || {
   exit 2
 }
 
+# The worktree lives in the project's own .worktrees/ directory, compared on
+# physical paths so a symlink cannot place it elsewhere.
+physical() { # nearest existing ancestor resolved, the rest appended
+  local p="$1" tail=""
+  while [ ! -e "$p" ] && [ "$p" != "/" ] && [ "$p" != "." ]; do
+    tail="/$(basename "$p")$tail"
+    p="$(dirname "$p")"
+  done
+  printf '%s%s' "$(cd "$p" 2>/dev/null && pwd -P)" "$tail"
+}
+WT_ROOT="$(physical "$PROJECT")/.worktrees/"
+case "$(physical "$WT")/" in
+  "$WT_ROOT"?*/) ;;
+  *)
+    echo "worktree-prepare: --path must be inside $PROJECT/.worktrees/ (got $WT)" >&2
+    exit 2
+    ;;
+esac
+# A branch this call creates follows the naming convention; an existing one
+# is re-entered as it is.
+if ! git -C "$PROJECT" show-ref --verify --quiet "refs/heads/$BRANCH" &&
+  ! git -C "$PROJECT" show-ref --verify --quiet "refs/remotes/origin/$BRANCH"; then
+  case "$BRANCH" in
+    feature/?* | bugfix/?* | hotfix/?* | release/?*) ;;
+    *)
+      echo "worktree-prepare: a new branch is named feature/<key>-<desc>, bugfix/<key>-<desc>, hotfix/<desc> or release/<version> (got $BRANCH)" >&2
+      exit 2
+      ;;
+  esac
+fi
+NEW_BRANCH=false
 report() { # $1 action, $2 pulled (true|false|null), $3 error
   jq -n --arg project "$PROJECT" --arg wt "$WT" --arg branch "$BRANCH" --arg base "$BASE" \
-    --arg action "$1" --argjson pulled "$2" --arg error "$3" \
+    --arg action "$1" --argjson pulled "$2" --argjson newBranch "$NEW_BRANCH" --arg error "$3" \
     '{project: $project, worktreePath: $wt, branch: $branch, baseBranch: $base,
-      action: $action, pulled: $pulled, error: (if $error == "" then null else $error end)}'
+      action: $action, pulled: $pulled, newBranch: $newBranch,
+      error: (if $error == "" then null else $error end)}'
 }
 
 # Physical path of $1, for comparing paths that may go through a symlink.
@@ -122,5 +157,6 @@ if ! err=$(git -C "$PROJECT" worktree add -q "${add_args[@]}" 2>&1); then
   report failed null "$err"
   exit 1
 fi
+[ "${add_args[1]}" = "-b" ] && NEW_BRANCH=true
 set_identity
 report created null ""

package/pipeline/scripts/write-state.mjs

@@ -69,8 +69,9 @@ import {
 import { dirname, basename } from "path";
 import { Buffer } from "node:buffer";
 import { runMain } from "../lib/fatal.mjs";
+import { readLockOwner, reapLock } from "../lib/json-file-lock.mjs";
 import { invokedDirectly } from "../lib/invoked-directly.mjs";
-import { completionGaps } from "../lib/run-completion.mjs";
+import { completionGaps, modeOf } from "../lib/run-completion.mjs";
 
 /**
  * @typedef {{ replace: boolean, path: string, ifRev: number|null }} ParsedArgs
@@ -156,15 +157,7 @@ async function acquireLock(
       // file that is there.
       const stale = lockIdentityIfStale(lockPath, staleMs);
       if (stale) {
-        try {
-          const now = statSync(lockPath);
-          if (now.ino === stale.ino && now.mtimeMs === stale.mtimeMs) {
-            unlinkSync(lockPath);
-          }
-          // Changed under us: somebody else's live lock. Leave it and retry.
-        } catch {
-          /* vanished on its own  -  fall through and retry */
-        }
+        reapLock(lockPath, stale);
         continue;
       }
       await new Promise((r) => setTimeout(r, 50));
@@ -205,19 +198,11 @@ async function acquireLock(
  * @returns {{ino: number, mtimeMs: number} | null}
  */
 function lockIdentityIfStale(lockPath, staleMs) {
-  let pid;
-  let mtimeMs;
-  let ino;
-  try {
-    pid = parseInt(readFileSync(lockPath, "utf-8").trim(), 10);
-    const st = statSync(lockPath);
-    mtimeMs = st.mtimeMs;
-    ino = st.ino;
-  } catch {
-    // Lock vanished between EEXIST and our read  -  let the retry re-open it.
-    return null;
-  }
-  const identity = { ino, mtimeMs };
+  // Lock vanished between EEXIST and our read: let the retry re-open it.
+  const owner = readLockOwner(lockPath);
+  if (!owner) return null;
+  const { pid, mtimeMs } = owner;
+  const identity = { ino: owner.ino, mtimeMs };
   const abandonMs = Number(process.env.WRITE_STATE_LOCK_ABANDON_MS) || staleMs * 10;
   const age = Date.now() - mtimeMs;
 
@@ -397,6 +382,62 @@ export function completionRefusal(next, payload, replace, diskStatus) {
   return `write-state: refusing status "${next.status}": ${gaps.join("; ")}. Nothing was written. Finish the missing step, or record a halt (status "paused" with a haltReason).`;
 }
 
+/**
+ * The refusal message for a phase move the run has not earned, or null.
+ *
+ * - Phase 1 to a later phase in an attended full run needs the plan approval
+ *   the Phase 1 gate writes (`phases["1"].planApprovedAt`). Autopilot and
+ *   background launches approve nothing by design, and in analysis mode
+ *   Phase 1 is not a plan, so neither is asked.
+ * - A `sessionId` already set is the run's identity for resume; a write that
+ *   changes it detaches the run from the session that started it.
+ * - Phase 2 to a later phase in an attended run with a tracked issue (jiraId
+ *   or githubIssue) needs `phases["2"].trackerStatus` verified, declined or
+ *   not-tracked: the issue moves to In Progress before any code, and a failed
+ *   move stops the phase. Unattended runs leave tracker writes to the runner.
+ *
+ * @param {object} next     the document as it would be written
+ * @param {unknown} payload the patch as sent
+ * @param {object} current  the document on disk
+ * @returns {string|null}
+ */
+export function transitionRefusal(next, payload, current) {
+  const patch = payload && typeof payload === "object" ? payload : {};
+  const was = current && typeof current === "object" ? current : {};
+  if (
+    typeof was.sessionId === "string" &&
+    was.sessionId &&
+    Object.hasOwn(patch, "sessionId") &&
+    next.sessionId !== was.sessionId
+  ) {
+    return `write-state: refusing to change sessionId from "${was.sessionId}". It identifies the run for resume; nothing was written.`;
+  }
+  const unattended =
+    next.autopilot === true || ["autopilot", "background"].includes(next.launchRequest?.mode);
+  if (
+    modeOf(next) === "full" &&
+    !unattended &&
+    Number(was.currentPhase) === 1 &&
+    Number(next.currentPhase) > 1 &&
+    !next.phases?.["1"]?.planApprovedAt
+  ) {
+    return 'write-state: refusing to leave Phase 1: the plan has no approval (phases["1"].planApprovedAt). Nothing was written. Record the approval when the user approves the plan, or a halt.';
+  }
+  const tracked = Boolean(next.jiraId) || Boolean(next.githubIssue?.number);
+  const tracker = next.phases?.["2"]?.trackerStatus?.status;
+  if (
+    ["full", "dev"].includes(modeOf(next)) &&
+    !unattended &&
+    tracked &&
+    Number(was.currentPhase) === 2 &&
+    Number(next.currentPhase) > 2 &&
+    !["verified", "declined", "not-tracked"].includes(tracker)
+  ) {
+    return `write-state: refusing to leave Phase 2: the issue's move to In Progress is ${tracker ? `"${tracker}"` : "not recorded"} (phases["2"].trackerStatus). Nothing was written. Move the issue and re-read it, record "declined" if the user refused the write, or record a halt.`;
+  }
+  return null;
+}
+
 /**
  * Bind the run to the host session that drives it.
  *
@@ -554,7 +595,9 @@ async function main() {
       }
     }
 
-    const refusal = completionRefusal(next, payload, replace, diskStatus);
+    const refusal =
+      completionRefusal(next, payload, replace, diskStatus) ||
+      transitionRefusal(next, payload, current);
     if (refusal) {
       console.error(refusal);
       releaseLock(path);

package/pipeline/skills/.skill-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-10-26T11:41:43Z",
+  "generatedAt": "2026-10-27T13:35:46Z",
   "skillCount": 237,
   "entries": [
     {
@@ -9,7 +9,7 @@
     },
     {
       "path": "shared/core/google-play-compliance/SKILL.md",
-      "sha256": "3089e8c5f99c1ec7c1358394c398335ccb5ebc20ca05d60d870127da4592de34"
+      "sha256": "34e87f1e6fde51dd19c9ccff00e21cd7cee74f487b5dec54deec2268ff831b3b"
     },
     {
       "path": "shared/core/multi-agent-analysis-jira/SKILL.md",
@@ -49,7 +49,7 @@
     },
     {
       "path": "shared/core/multi-agent-channels/SKILL.md",
-      "sha256": "b55e8461a1bcdc1b4b88c42e086f599fccda2a89d7f56a29ac11e5ebc12a3623"
+      "sha256": "74008ae717bb9662ac6ab8838e3659a5006859fc6129f655094780bc97b90423"
     },
     {
       "path": "shared/core/multi-agent-complaint-analysis/SKILL.md",
@@ -137,7 +137,7 @@
     },
     {
       "path": "shared/core/multi-agent-office-status/SKILL.md",
-      "sha256": "fba0513f8941c026172ea0ce76cbc76d88a5e813fd713d68a1377eb5a4204c86"
+      "sha256": "fbe2f99e789facebe89f10655389ea1988dd5a6db03b054487a9c4a8e6d43f2f"
     },
     {
       "path": "shared/core/multi-agent-postmortem/SKILL.md",
@@ -361,7 +361,7 @@
     },
     {
       "path": "shared/external/app-store-review/SKILL.md",
-      "sha256": "073d99485665497229750b5f040c3a196c1e5de2bbcff281b8aec7e53817d3f4"
+      "sha256": "32e8b9de2894010fd584e6e4aada7270b85756be8608d7593127255fd6737a6e"
     },
     {
       "path": "shared/external/apple-on-device-ai/SKILL.md",

package/pipeline/skills/shared/core/google-play-compliance/SKILL.md

@@ -10,7 +10,7 @@ metadata:
 
 # google-play-compliance  -  Google Play Store Publication Compliance Skill
 
-Pre-submission compliance check for Android App Bundle (`.aab`) and APK artifacts. Unlike the iOS side (single MCP-tool wrapper around `ios_app_store_audit`), Android has **no single official scanner**  -  this skill orchestrates Google's own tools (`bundletool`, `aapt2`, `apksigner`, `adb`) plus a curated policy catalog to produce an equivalent pre-flight report.
+Pre-submission compliance check for Android App Bundle (`.aab`) and APK artifacts. Unlike the iOS side (single wrapper around the multi-agent-toolkit MCP server's `ios_app_store_audit`), Android has **no single official scanner**  -  this skill orchestrates Google's own tools (`bundletool`, `aapt2`, `apksigner`, `adb`) plus a curated policy catalog to produce an equivalent pre-flight report.
 
 **The catalog is the value.** The 21-rule knowledge base reflects current Google Play policies (target API requirements, 64-bit enforcement, data safety rules, permission policies). Tool invocations gather the evidence; this skill maps it against policy and humanizes.
 
@@ -118,7 +118,7 @@ Current Google Play policies + Play Console rejection codes. Sourced from `suppo
 
 | # | ruleID | Play ref | What it checks | Default severity |
 |---|---|---|---|---|
-| 1 | `target-api-level` | Policy  -  Target API | `android:targetSdkVersion` ≥ 34 for new apps (Aug 2024+), ≥ 34 for updates (Nov 2024+). Lower → rejected. | error |
+| 1 | `target-api-level` | Policy  -  Target API | `android:targetSdkVersion` ≥ 36 for new apps and updates on phones and tablets (from 31 Aug 2026, extension to 1 Nov 2026), ≥ 35 on Wear OS and Automotive, ≥ 34 on TV and XR. Lower → rejected. | error |
 | 2 | `native-64bit` | Policy  -  64-bit | Every native `.so` has an `arm64-v8a` counterpart. `armeabi-v7a`-only rejected since Aug 2019. | error |
 | 3 | `app-bundle-format` | Policy  -  AAB | New apps must ship `.aab`. `.apk` uploads rejected on new apps since Aug 2021. | error |
 | 4 | `base-module-size` | Platform limit | Base APK from bundle ≤ 150 MB (bundletool `--mode=universal` size). Beyond → rejected. | error |
@@ -331,7 +331,7 @@ The appended section is structured:
 
 ⚠️ 3 blocker(s), 2 warning(s)  -  run /multi-agent:test "store-ready" for the full report.
 
-- `target-api-level`  -  Policy  -  Target API: targetSdkVersion = 33 but Play Console requires ≥ 34 for updates
+- `target-api-level`  -  Policy  -  Target API: targetSdkVersion = 35 but Play Console requires ≥ 36 for new apps and updates
 - `native-64bit`  -  Policy  -  64-bit: lib/armeabi-v7a/libfoo.so has no arm64-v8a counterpart
 - `foreground-service-types`  -  Android 14: <service> missing android:foregroundServiceType
 + 2 more
@@ -339,9 +339,9 @@ The appended section is structured:
 
 ## Notes
 
-- **Policy thresholds change yearly.** Target API level (currently 34) advances each August for new apps / November for updates. When a new Android version ships, update Rule #1 `target-api-level` with the new threshold.
+- **Policy thresholds change yearly.** The target API level in Rule #1 advances each August for new apps / November for updates. When a new Android version ships, update Rule #1 `target-api-level` with the new threshold.
 - **Not a substitute for Play Console pre-launch report.** This skill catches static issues (manifest, signing, size, debug tools). Dynamic issues (crashes, ANRs, security vulnerabilities) require Play Console's own pre-launch testing on real devices.
-- **Data Safety form audit is partial.** Rule #14 flags manifest permissions that commonly trigger form updates, but the declared answers live in Play Console and cannot be cross-checked from here. The Android Publisher API has no Data Safety read: its only operation, `applications.dataSafety`, writes the declaration. With `google_play` onboarded, `store_search` / `store_call` reach the rest of the Android Publisher and Play Developer Reporting APIs (tracks, bundles, vitals), but the gap for Data Safety stays.
+- **Data Safety form audit is partial.** Rule #14 flags manifest permissions that commonly trigger form updates, but the declared answers live in Play Console and cannot be cross-checked from here. The Android Publisher API has no Data Safety read: its only operation, `applications.dataSafety`, writes the declaration. With `google_play` onboarded, the toolkit's `store_search` / `store_call` reach the rest of the Android Publisher and Play Developer Reporting APIs (tracks, bundles, vitals), but the gap for Data Safety stays.
 
 ## Version history
 

package/pipeline/skills/shared/core/google-play-compliance/references/rules.yml

@@ -37,7 +37,7 @@ enforcement_kinds:
 rules:
   - id: target-api-level
     title: >
-      `android:targetSdkVersion` ≥ 34 for new apps (Aug 2024+), ≥ 34 for updates (Nov 2024+). Lower → rejected.
+      `android:targetSdkVersion` ≥ 36 for new apps and updates on phones and tablets (from 31 Aug 2026, extension to 1 Nov 2026), ≥ 35 on Wear OS and Automotive, ≥ 34 on TV and XR. Lower → rejected.
     severity: blocking
     enforcement: scan
     policy_ref: Policy  -  Target API

package/pipeline/skills/shared/core/multi-agent-channels/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: multi-agent-channels
-description: "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Phase 5 delegates to this skill; users can invoke post-hoc by Jira ID / PR URL / branch."
+description: "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Use to post or redo a run's report; Phase 5 delegates here, or invoke by Jira ID / PR URL / branch."
 user-invocable: true
 argument-hint: '<Jira-id | PR-url | #N | Jira-url> [--channels pr,jira,confluence,wiki] [--content normal,technical,test,auto-diff,note,test-run] [--flow-run <runId>[,<runId>...]] [--message "..."] [--message-file path] [--dry-run] [--append] [--ready]'
 metadata:

package/pipeline/skills/shared/core/multi-agent-office-status/SKILL.md

@@ -10,8 +10,8 @@ metadata:
 
 1. `node "$HOME/.copilot/scripts/office-control.mjs" status --json`
 2. Report in `outputLanguage`: `running`, `url` and `idleMinutes`; the
-   `remote` line as given ("not available in this installation" unless a
-   separate remote layer is installed); `pairedDevices`; `recentActions`
+   `remote` line as given ("off" until `office-pair.mjs` pairs a phone, then
+   "paired"); `pairedDevices`; `recentActions`
    (route, step, status, when; never a request body).
 
 Never print the token or read the token file.

package/pipeline/skills/shared/external/alarmkit/references/alarmkit-patterns.md

@@ -1,5 +1,19 @@
 # AlarmKit patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Full alarm flow with intents](#full-alarm-flow-with-intents)
+- [Full timer flow](#full-timer-flow)
+- [Authorization manager](#authorization-manager)
+- [State store with async sequences](#state-store-with-async-sequences)
+- [Widget extension for countdown and paused UI](#widget-extension-for-countdown-and-paused-ui)
+- [Recurrence](#recurrence)
+- [Snooze and custom secondary actions](#snooze-and-custom-secondary-actions)
+- [Info.plist](#infoplist)
+- [Error handling](#error-handling)
+- [Apple documentation](#apple-documentation)
+<!-- /toc -->
+
 Longer, end-to-end examples. Everything here targets iOS 26 and iPadOS 26 with
 Swift 6.3. Code that uses the stopButton-free
 `AlarmPresentation.Alert(title:secondaryButton:secondaryButtonBehavior:)`

package/pipeline/skills/shared/external/android-architecture/references/patterns.md

@@ -1,5 +1,11 @@
 # Android Clean Architecture -- Reference Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Feature api/impl Split](#feature-apiimpl-split)
+- [Cross-Module Navigation Graph Aggregation](#cross-module-navigation-graph-aggregation)
+<!-- /toc -->
+
 Full code for the patterns summarized in `SKILL.md`. Load the section you need
 when implementing that specific structure.
 

package/pipeline/skills/shared/external/android-build-quality-gates/references/patterns.md

@@ -1,5 +1,15 @@
 # Android Build Quality Gates - Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Layer-dependency gate](#layer-dependency-gate)
+- [Coverage floor with Kover](#coverage-floor-with-kover)
+- [Compose-stability gate](#compose-stability-gate)
+- [Lint on diff](#lint-on-diff)
+- [Screenshot validation task](#screenshot-validation-task)
+- [Wiring gates into check](#wiring-gates-into-check)
+<!-- /toc -->
+
 Full, copy-ready code for the gates summarized in
 [../SKILL.md](../SKILL.md). Each section mirrors a heading there. Adapt names to
 the project's module conventions; nothing here hardcodes a product.

package/pipeline/skills/shared/external/android-datastore/references/patterns.md

@@ -1,5 +1,16 @@
 # Android DataStore Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Preferences DataStore](#preferences-datastore)
+- [Typed DataStore with a Serializer](#typed-datastore-with-a-serializer)
+- [Encrypted Typed DataStore](#encrypted-typed-datastore)
+- [Migrating from SharedPreferences](#migrating-from-sharedpreferences)
+- [Versioned Data Migrations](#versioned-data-migrations)
+- [Reading and Writing as Flow](#reading-and-writing-as-flow)
+- [Testing](#testing)
+<!-- /toc -->
+
 Full code examples backing the guidance in `SKILL.md`. Headings mirror the
 SKILL.md sections. Package, class, and key names are placeholders; adapt them.
 

package/pipeline/skills/shared/external/android-design-tokens-codegen/references/patterns.md

@@ -1,5 +1,13 @@
 # Android Design Tokens Codegen - Patterns
 
+<!-- toc -->
+- [Task wrapper](#task-wrapper)
+- [preBuild wiring](#prebuild-wiring)
+- [Check mode](#check-mode)
+- [Caching](#caching)
+- [Generated shapes](#generated-shapes)
+<!-- /toc -->
+
 Copy-ready Gradle and Kotlin for the schema-to-typed-code pipeline. Each heading
 mirrors a section in `SKILL.md`. All input is a local JSON schema; all output is
 generated Kotlin under the build directory. Names are illustrative and generic.

package/pipeline/skills/shared/external/android-jetpack-compose-expert/references/patterns.md

@@ -1,5 +1,11 @@
 # Compose runtime patterns
 
+<!-- toc -->
+- [Who owns a piece of state](#who-owns-a-piece-of-state)
+- [Side effects](#side-effects)
+- [Modifiers](#modifiers)
+<!-- /toc -->
+
 Loaded on demand from `../SKILL.md`.
 
 ## Who owns a piece of state

package/pipeline/skills/shared/external/android-mvi-viewmodel/references/patterns.md

@@ -1,5 +1,15 @@
 # Android MVI BaseViewModel Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Assembled BaseViewModel](#assembled-baseviewmodel)
+- [MVI contracts for a screen](#mvi-contracts-for-a-screen)
+- [A concrete ViewModel](#a-concrete-viewmodel)
+- [Lifecycle-aware event collector](#lifecycle-aware-event-collector)
+- [Stateless screen composable](#stateless-screen-composable)
+- [Testing the ViewModel](#testing-the-viewmodel)
+<!-- /toc -->
+
 Full code examples backing the guidance in `SKILL.md`. Load this file when you
 need a complete implementation to adapt. Headings mirror the SKILL.md sections.
 

package/pipeline/skills/shared/external/android-performance/references/patterns.md

@@ -1,5 +1,18 @@
 # Android Performance Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Baseline Profiles](#baseline-profiles)
+- [Compose Stability](#compose-stability)
+- [Recomposition Debugging](#recomposition-debugging)
+- [Lazy Layout Performance](#lazy-layout-performance)
+- [R8 Optimization](#r8-optimization)
+- [Memory Leak Detection](#memory-leak-detection)
+- [Startup Optimization](#startup-optimization)
+- [Image Loading with Coil](#image-loading-with-coil)
+- [General Performance Patterns](#general-performance-patterns)
+<!-- /toc -->
+
 Full code examples for the Android Performance skill. Each section mirrors a
 heading in `SKILL.md`. Load the section named in the guide when implementing or
 reviewing that area.

package/pipeline/skills/shared/external/android-security/references/patterns.md

@@ -1,5 +1,21 @@
 # Android Security -- Reference Patterns
 
+<!-- toc -->
+- [Contents](#contents)
+- [Secure Data Storage](#secure-data-storage)
+- [Encrypted DataStore](#encrypted-datastore)
+- [Database Key Hierarchy](#database-key-hierarchy)
+- [Build-Type Security Gating](#build-type-security-gating)
+- [Biometric Authentication](#biometric-authentication)
+- [Certificate Pinning](#certificate-pinning)
+- [API Key Protection](#api-key-protection)
+- [R8 Obfuscation](#r8-obfuscation)
+- [Play Integrity API](#play-integrity-api)
+- [Root Detection](#root-detection)
+- [Secure Network Communication](#secure-network-communication)
+- [Secure Coding Patterns](#secure-coding-patterns)
+<!-- /toc -->
+
 Full code for the patterns summarized in `SKILL.md`. Load the section you need
 when implementing that specific security feature.