@mmerterden/multi-agent-pipeline 20.34.0 → 20.35.0

package/pipeline/schemas/agent-state.schema.json

@@ -1268,6 +1268,20 @@
               "minimum": 0,
               "maximum": 3
             },
+            "trackerStatus": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["status", "at"],
+              "description": "Phase 2 Step 1: the issue's move to In Progress (Jira) / In Develop (Projects V2), re-read after the write. verified = the re-read showed it; declined = the user refused the write; not-tracked = the run has no board to move; failed = the write or its re-read did not land. write-state.mjs refuses to leave Phase 2 in an attended run with a tracked issue unless this is verified, declined or not-tracked.",
+              "properties": {
+                "status": {
+                  "type": "string",
+                  "enum": ["verified", "declined", "not-tracked", "failed"]
+                },
+                "observed": { "type": "string", "description": "The status the re-read returned." },
+                "at": { "type": "string", "format": "date-time" }
+              }
+            },
             "subStep": {
               "type": "string",
               "description": "Sub-step checkpoint for long phases (2, 5) so resume re-does only the unfinished tail instead of the whole phase. Short token, e.g. 'red'|'green'|'build'|'pr-opened'|'confluence-synced'. See operations.md 'Sub-step checkpoints'."
@@ -1909,6 +1923,10 @@
             "minimum": 0,
             "description": "v2.1.0+ push-must-succeed retry counter. Increments per rebase-retry."
           },
+          "pushStatus": {
+            "enum": ["pushed", "rebase-pushed", "skipped", "paused"],
+            "description": "Phase 4 push outcome for this repo. A commit counts as delivered once this is pushed, rebase-pushed or skipped (left to the user and reported in Phase 5), or the repo has a pr; run-completion.mjs refuses complete otherwise."
+          },
           "buildStatus": {
             "description": "Latest Phase 3 build outcome for this repo. A string in early phases ('pending'/'green'/'passed'/'failed') or null before any attempt; once Phase 3 runs a build it becomes a {ok, attempts, lastError} object (see phase-2-dev.md). run-metrics.mjs reads both the string and object forms.",
             "anyOf": [

package/pipeline/schemas/planning-output.schema.json

@@ -71,6 +71,24 @@
             "items": { "type": "string", "minLength": 1 },
             "description": "Interfaces or symbols this task calls or relies on without changing them. Paired against other tasks' produces and removes."
           },
+          "design": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["component", "mapping"],
+            "description": "The design source of a UI task. validate-planning.mjs --spec checks the component against the analysis Section 6 (Component Inventory) rows.",
+            "properties": {
+              "component": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The component name exactly as its Section 6 row names it."
+              },
+              "mapping": {
+                "type": "string",
+                "enum": ["code-connect", "new", "best-fit"],
+                "description": "code-connect = the Code Connect mapped component, used verbatim; new = a Section 6 row marked not existing; best-fit = no mapping, pending design review (needs a Risk row; Phase 3 gates it review_blocking)."
+              }
+            }
+          },
           "complexity": {
             "type": "object",
             "additionalProperties": false,

package/pipeline/schemas/pr-reach.schema.json

@@ -0,0 +1,55 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/pr-reach.schema.json",
+  "title": "Pull request reach",
+  "description": "What GET /v1/prs/reach returns (`work-items.mjs reach`): for each open GitHub pull request (at most 20), how many files in the repository's own code graph depend on what it changes, widest first. Changed paths serve only as keys into the local graph and are never returned. A pull request that cannot be measured carries reach null and its reason.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["contractVersion", "depth", "items"],
+  "properties": {
+    "contractVersion": {
+      "type": "string",
+      "pattern": "^1\\.[0-9]+\\.[0-9]+$",
+      "x-sensitivity": "none"
+    },
+    "depth": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Reverse-dependency depth the count was taken at."
+    },
+    "items": {
+      "type": "array",
+      "maxItems": 20,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["source", "repo", "number", "project", "reach"],
+        "properties": {
+          "source": { "enum": ["github", "bitbucket"] },
+          "repo": { "type": "string" },
+          "number": { "type": "integer" },
+          "project": {
+            "type": ["string", "null"],
+            "description": "The knowledge-folder project whose graph answered, or null."
+          },
+          "changed": {
+            "type": "integer",
+            "minimum": 0,
+            "description": "Files the pull request changes."
+          },
+          "inGraph": {
+            "type": "integer",
+            "minimum": 0,
+            "description": "Of those, files the graph knows."
+          },
+          "reach": {
+            "type": ["integer", "null"],
+            "minimum": 0,
+            "description": "Files that depend on the changed ones, within depth. Null when not measured."
+          },
+          "reason": { "type": "string", "description": "Why reach is null." }
+        }
+      }
+    }
+  }
+}

package/pipeline/schemas/prefs.schema.json

@@ -311,7 +311,7 @@
         },
         "office": {
           "type": "object",
-          "description": "The office panel (/multi-agent:office-on). page overrides the installed panel page; toolkitVersion pins an @latest toolkit registration for the panel's tool calls; remote is read only to report that a separately installed remote layer is present, and no remote code ships with the pipeline.",
+          "description": "The office panel (/multi-agent:office-on). page overrides the installed panel page; toolkitVersion pins an @latest toolkit registration for the panel's tool calls; remote configures the office remote layer (features/office-remote-protocol.md), which stays off until office-pair pairs a phone.",
           "additionalProperties": false,
           "properties": {
             "page": {
@@ -324,7 +324,13 @@
             },
             "remote": {
               "type": "object",
-              "description": "Configuration owned by a separately installed remote layer; the pipeline only checks that it exists."
+              "description": "The office remote layer. relayUrl is the origin office-pair registers pairings with and the phone page is served from.",
+              "properties": {
+                "relayUrl": {
+                  "type": "string",
+                  "pattern": "^https://[^/?#@]+$"
+                }
+              }
             }
           }
         },
@@ -1938,17 +1944,17 @@
         "attendedCommitGate": {
           "type": "object",
           "additionalProperties": false,
-          "description": "What pre-commit-check.sh does with an attended `git commit` inside a pipeline run whose gate ledger holds no passing build and test verdict (evidence-gate/build, evidence-gate/test) for HEAD. evidence-gate.mjs records both in an attended run, marked attended. Read by gate-ledger.mjs `evidence`; a commit outside a run, or in a mode that commits nothing, is never checked. Unattended commits are held to the full ledger regardless of this setting.",
+          "description": "What pre-commit-check.sh does with an attended `git commit` inside a pipeline run whose gate ledger holds no passing build and test verdict (evidence-gate/build, evidence-gate/test) for HEAD, or, from Phase 4 on, no passing review-decision. evidence-gate.mjs records both in an attended run, marked attended. Read by gate-ledger.mjs `evidence`; a commit outside a run, or in a mode that commits nothing, is never checked. Unattended commits are held to the full ledger regardless of this setting.",
           "properties": {
             "mode": {
               "type": "string",
-              "enum": ["off", "warn", "block"],
-              "default": "warn",
-              "description": "warn = say so on stderr and let the commit through. block = refuse the commit (exit 2) until the evidence is recorded. off = no check."
+              "enum": ["off", "warn", "block", "auto"],
+              "default": "auto",
+              "description": "auto = block when the committing session is the one driving the run (its hostSessionId or launch sessionId), warn otherwise. warn = say so on stderr and let the commit through. block = refuse the commit (exit 2) until the evidence is recorded. off = no check."
             }
           },
           "default": {
-            "mode": "warn"
+            "mode": "auto"
           }
         },
         "mutationProbe": {

package/pipeline/schemas/triage-output.schema.json

@@ -120,6 +120,11 @@
       "type": "string",
       "enum": ["blocking", "important", "suggestion"]
     },
+    "foundBy": {
+      "type": "string",
+      "pattern": "^(Source [A-Z]|security-auditor)$",
+      "description": "The anonymized source label triage judged the finding under, carried through verbatim. anonymize-findings.mjs --restore writes the reviewer family back from the label map after validation; validate-triage.mjs --anonymized refuses a verdict that names a reviewer itself."
+    },
     "reviewer": {
       "type": "string",
       "enum": ["fable", "opus", "sonnet", "gpt"],
@@ -232,6 +237,9 @@
         "reviewer": {
           "$ref": "#/$defs/reviewer"
         },
+        "foundBy": {
+          "$ref": "#/$defs/foundBy"
+        },
         "verification": {
           "$ref": "#/$defs/verification"
         },
@@ -272,7 +280,7 @@
         {
           "type": "object",
           "additionalProperties": false,
-          "required": ["severity", "file", "line", "issue", "reviewer", "fix"],
+          "required": ["severity", "file", "line", "issue", "fix"],
           "properties": {
             "severity": {
               "$ref": "#/$defs/severity"
@@ -292,6 +300,9 @@
             "reviewer": {
               "$ref": "#/$defs/reviewer"
             },
+            "foundBy": {
+              "$ref": "#/$defs/foundBy"
+            },
             "fix": {
               "type": "string",
               "minLength": 4,

package/pipeline/schemas/unattended-policy.json

@@ -135,6 +135,7 @@
     "credential-store.sh": ["get", "set", "delete"],
     "keychain.py": ["get", "set", "delete"],
     "gate-ledger.mjs": ["append"],
-    "phone-devices.mjs": ["add", "revoke", "launch"]
+    "phone-devices.mjs": ["add", "revoke", "launch"],
+    "office-pair.mjs": null
   }
 }