@mmerterden/multi-agent-pipeline 20.34.0 → 20.36.0

package/pipeline/scripts/worktree-prepare-all.mjs

@@ -0,0 +1,200 @@
+#!/usr/bin/env node
+/**
+ * @file worktree-prepare-all.mjs  -  the multi-repo worktree setup as one
+ * step: every repo gets its worktree, or none keeps one this step created.
+ *
+ * Phase 0 creates one worktree per repo of a multi-repo task. When the third
+ * repo's add fails, the first two must not stay behind on a half-made task.
+ * This runs worktree-prepare.sh serially in the given order and, on the first
+ * failure, rolls back what this call created, newest first:
+ *
+ *   - the worktree is removed without --force, so a worktree holding changes
+ *     is kept and reported instead of discarded;
+ *   - the branch is deleted only when worktree-prepare created it here
+ *     (newBranch) and it still points at origin/<base>, so a branch that
+ *     existed before, or gained a commit, is never deleted.
+ *
+ * A worktree that was reused (it existed before the call) is never touched.
+ *
+ * Usage:
+ *   worktree-prepare-all.mjs --repos <repos.json>
+ *     repos.json: [{project, path, branch, base, name?, email?}, ...]
+ *
+ * Output (stdout, JSON): {ok, results[], failed, rolledBack[], kept[]}
+ *   results     each repo's worktree-prepare.sh output, in order, up to the failure
+ *   failed      the failing repo's output, or null
+ *   rolledBack  [{project, worktreePath, branchDeleted}]
+ *   kept        [{project, worktreePath, reason}]  what the rollback left in place
+ *
+ * Exit: 0 every repo ready, 1 a repo failed (rollback done; see kept[]),
+ *       2 usage or a repos file that does not parse.
+ */
+
+import { execFileSync, spawnSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { invokedDirectly } from "../lib/invoked-directly.mjs";
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const PREPARE = join(HERE, "worktree-prepare.sh");
+
+const git = (cwd, ...args) =>
+  execFileSync("git", ["-C", cwd, ...args], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "pipe"],
+    timeout: 60_000,
+  }).trim();
+
+function prepareOne(repo, prepare) {
+  try {
+    return prepareOnce(repo, prepare);
+  } catch (err) {
+    return {
+      ok: false,
+      out: {
+        project: repo.project,
+        worktreePath: repo.path,
+        branch: repo.branch,
+        baseBranch: repo.base,
+        action: "failed",
+        error: String(err?.message || err).slice(0, 500),
+      },
+    };
+  }
+}
+
+function prepareOnce(repo, prepare) {
+  const args = [
+    prepare,
+    "--project",
+    repo.project,
+    "--path",
+    repo.path,
+    "--branch",
+    repo.branch,
+    "--base",
+    repo.base,
+  ];
+  if (repo.name) args.push("--name", repo.name);
+  if (repo.email) args.push("--email", repo.email);
+  const r = spawnSync("bash", args, { encoding: "utf8", timeout: 300_000 });
+  let out;
+  try {
+    out = JSON.parse(r.stdout);
+  } catch {
+    out = null;
+  }
+  if (r.status === 0 && out && (out.action === "created" || out.action === "reused"))
+    return { ok: true, out };
+  return {
+    ok: false,
+    out: out ?? {
+      project: repo.project,
+      worktreePath: repo.path,
+      branch: repo.branch,
+      baseBranch: repo.base,
+      action: "failed",
+      error: (r.stderr || r.error?.message || `exit ${r.status}`).trim().slice(0, 500),
+    },
+  };
+}
+
+/** Undo one worktree this call created. Returns a rolledBack or kept record. */
+export function rollbackOne(res) {
+  const where = { project: res.project, worktreePath: res.worktreePath };
+  try {
+    git(res.project, "worktree", "remove", res.worktreePath);
+  } catch (err) {
+    return {
+      kept: {
+        ...where,
+        reason: `worktree not removed: ${String(err.stderr || err.message)
+          .trim()
+          .slice(0, 200)}`,
+      },
+    };
+  }
+  let branchDeleted = false;
+  if (res.newBranch === true) {
+    try {
+      const tip = git(res.project, "rev-parse", "--verify", `refs/heads/${res.branch}`);
+      const base = git(
+        res.project,
+        "rev-parse",
+        "--verify",
+        `refs/remotes/origin/${res.baseBranch}`,
+      );
+      if (tip === base) {
+        git(res.project, "branch", "-D", "--", res.branch);
+        branchDeleted = true;
+      }
+    } catch {
+      branchDeleted = false;
+    }
+  }
+  return { rolledBack: { ...where, branchDeleted } };
+}
+
+export function prepareAll(repos, { prepare = PREPARE } = {}) {
+  const results = [];
+  for (const repo of repos) {
+    const r = prepareOne(repo, prepare);
+    if (r.ok) {
+      results.push(r.out);
+      continue;
+    }
+    const rolledBack = [];
+    const kept = [];
+    for (const done of [...results].reverse()) {
+      if (done.action !== "created") continue;
+      const u = rollbackOne(done);
+      if (u.rolledBack) rolledBack.push(u.rolledBack);
+      else kept.push(u.kept);
+    }
+    return { ok: false, results, failed: r.out, rolledBack, kept };
+  }
+  return { ok: true, results, failed: null, rolledBack: [], kept: [] };
+}
+
+const FIELD = /^[^\0\n]+$/;
+
+export function readRepos(text) {
+  const list = JSON.parse(text);
+  if (!Array.isArray(list) || !list.length) throw new Error("repos must be a non-empty array");
+  for (const r of list) {
+    for (const k of ["project", "path", "branch", "base"]) {
+      if (typeof r?.[k] !== "string" || !FIELD.test(r[k]))
+        throw new Error(`each repo needs a string ${k}`);
+    }
+    for (const k of ["branch", "base"])
+      if (r[k].startsWith("-")) throw new Error(`${k} must not start with -`);
+    for (const k of ["name", "email"]) {
+      if (r[k] !== undefined && (typeof r[k] !== "string" || !FIELD.test(r[k]))) {
+        throw new Error(`${k} must be a string when given`);
+      }
+    }
+  }
+  return list;
+}
+
+function main() {
+  const i = process.argv.indexOf("--repos");
+  if (i < 0 || !process.argv[i + 1] || process.argv.length !== 4) {
+    console.error("usage: worktree-prepare-all.mjs --repos <repos.json>");
+    return 2;
+  }
+  let repos;
+  try {
+    repos = readRepos(readFileSync(process.argv[i + 1], "utf8"));
+  } catch (err) {
+    console.error(`worktree-prepare-all: ${err.message}`);
+    return 2;
+  }
+  const out = prepareAll(repos);
+  process.stdout.write(JSON.stringify(out, null, 2) + "\n");
+  return out.ok ? 0 : 1;
+}
+
+if (invokedDirectly(import.meta.url)) process.exit(main());

package/pipeline/scripts/worktree-prepare.sh

@@ -27,10 +27,13 @@
 #                       [--email <git user.email>]
 #
 # Output (stdout, JSON): {project, worktreePath, branch, baseBranch,
-#   action: created|reused|failed, pulled: true|false|null, error}
+#   action: created|reused|failed, pulled: true|false|null, newBranch, error}
+#   newBranch is true only when this call created the branch from origin/<base>,
+#   which is what tells worktree-prepare-all.mjs a rollback may delete it.
 #
 # Exit: 0 ready, 1 the add failed (nothing was created; the caller runs its
-#       rollback / collision flow), 2 usage.
+#       rollback / collision flow), 2 usage, a path outside <project>/.worktrees/,
+#       or a new branch outside the naming convention.
 set -uo pipefail
 
 HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -59,11 +62,43 @@ git -C "$PROJECT" rev-parse --git-dir >/dev/null 2>&1 || {
   exit 2
 }
 
+# The worktree lives in the project's own .worktrees/ directory, compared on
+# physical paths so a symlink cannot place it elsewhere.
+physical() { # nearest existing ancestor resolved, the rest appended
+  local p="$1" tail=""
+  while [ ! -e "$p" ] && [ "$p" != "/" ] && [ "$p" != "." ]; do
+    tail="/$(basename "$p")$tail"
+    p="$(dirname "$p")"
+  done
+  printf '%s%s' "$(cd "$p" 2>/dev/null && pwd -P)" "$tail"
+}
+WT_ROOT="$(physical "$PROJECT")/.worktrees/"
+case "$(physical "$WT")/" in
+  "$WT_ROOT"?*/) ;;
+  *)
+    echo "worktree-prepare: --path must be inside $PROJECT/.worktrees/ (got $WT)" >&2
+    exit 2
+    ;;
+esac
+# A branch this call creates follows the naming convention; an existing one
+# is re-entered as it is.
+if ! git -C "$PROJECT" show-ref --verify --quiet "refs/heads/$BRANCH" &&
+  ! git -C "$PROJECT" show-ref --verify --quiet "refs/remotes/origin/$BRANCH"; then
+  case "$BRANCH" in
+    feature/?* | bugfix/?* | hotfix/?* | release/?*) ;;
+    *)
+      echo "worktree-prepare: a new branch is named feature/<key>-<desc>, bugfix/<key>-<desc>, hotfix/<desc> or release/<version> (got $BRANCH)" >&2
+      exit 2
+      ;;
+  esac
+fi
+NEW_BRANCH=false
 report() { # $1 action, $2 pulled (true|false|null), $3 error
   jq -n --arg project "$PROJECT" --arg wt "$WT" --arg branch "$BRANCH" --arg base "$BASE" \
-    --arg action "$1" --argjson pulled "$2" --arg error "$3" \
+    --arg action "$1" --argjson pulled "$2" --argjson newBranch "$NEW_BRANCH" --arg error "$3" \
     '{project: $project, worktreePath: $wt, branch: $branch, baseBranch: $base,
-      action: $action, pulled: $pulled, error: (if $error == "" then null else $error end)}'
+      action: $action, pulled: $pulled, newBranch: $newBranch,
+      error: (if $error == "" then null else $error end)}'
 }
 
 # Physical path of $1, for comparing paths that may go through a symlink.
@@ -122,5 +157,6 @@ if ! err=$(git -C "$PROJECT" worktree add -q "${add_args[@]}" 2>&1); then
   report failed null "$err"
   exit 1
 fi
+[ "${add_args[1]}" = "-b" ] && NEW_BRANCH=true
 set_identity
 report created null ""

package/pipeline/scripts/write-state.mjs

@@ -69,8 +69,9 @@ import {
 import { dirname, basename } from "path";
 import { Buffer } from "node:buffer";
 import { runMain } from "../lib/fatal.mjs";
+import { readLockOwner, reapLock } from "../lib/json-file-lock.mjs";
 import { invokedDirectly } from "../lib/invoked-directly.mjs";
-import { completionGaps } from "../lib/run-completion.mjs";
+import { completionGaps, modeOf } from "../lib/run-completion.mjs";
 
 /**
  * @typedef {{ replace: boolean, path: string, ifRev: number|null }} ParsedArgs
@@ -156,15 +157,7 @@ async function acquireLock(
       // file that is there.
       const stale = lockIdentityIfStale(lockPath, staleMs);
       if (stale) {
-        try {
-          const now = statSync(lockPath);
-          if (now.ino === stale.ino && now.mtimeMs === stale.mtimeMs) {
-            unlinkSync(lockPath);
-          }
-          // Changed under us: somebody else's live lock. Leave it and retry.
-        } catch {
-          /* vanished on its own  -  fall through and retry */
-        }
+        reapLock(lockPath, stale);
         continue;
       }
       await new Promise((r) => setTimeout(r, 50));
@@ -205,19 +198,11 @@ async function acquireLock(
  * @returns {{ino: number, mtimeMs: number} | null}
  */
 function lockIdentityIfStale(lockPath, staleMs) {
-  let pid;
-  let mtimeMs;
-  let ino;
-  try {
-    pid = parseInt(readFileSync(lockPath, "utf-8").trim(), 10);
-    const st = statSync(lockPath);
-    mtimeMs = st.mtimeMs;
-    ino = st.ino;
-  } catch {
-    // Lock vanished between EEXIST and our read  -  let the retry re-open it.
-    return null;
-  }
-  const identity = { ino, mtimeMs };
+  // Lock vanished between EEXIST and our read: let the retry re-open it.
+  const owner = readLockOwner(lockPath);
+  if (!owner) return null;
+  const { pid, mtimeMs } = owner;
+  const identity = { ino: owner.ino, mtimeMs };
   const abandonMs = Number(process.env.WRITE_STATE_LOCK_ABANDON_MS) || staleMs * 10;
   const age = Date.now() - mtimeMs;
 
@@ -397,6 +382,62 @@ export function completionRefusal(next, payload, replace, diskStatus) {
   return `write-state: refusing status "${next.status}": ${gaps.join("; ")}. Nothing was written. Finish the missing step, or record a halt (status "paused" with a haltReason).`;
 }
 
+/**
+ * The refusal message for a phase move the run has not earned, or null.
+ *
+ * - Phase 1 to a later phase in an attended full run needs the plan approval
+ *   the Phase 1 gate writes (`phases["1"].planApprovedAt`). Autopilot and
+ *   background launches approve nothing by design, and in analysis mode
+ *   Phase 1 is not a plan, so neither is asked.
+ * - A `sessionId` already set is the run's identity for resume; a write that
+ *   changes it detaches the run from the session that started it.
+ * - Phase 2 to a later phase in an attended run with a tracked issue (jiraId
+ *   or githubIssue) needs `phases["2"].trackerStatus` verified, declined or
+ *   not-tracked: the issue moves to In Progress before any code, and a failed
+ *   move stops the phase. Unattended runs leave tracker writes to the runner.
+ *
+ * @param {object} next     the document as it would be written
+ * @param {unknown} payload the patch as sent
+ * @param {object} current  the document on disk
+ * @returns {string|null}
+ */
+export function transitionRefusal(next, payload, current) {
+  const patch = payload && typeof payload === "object" ? payload : {};
+  const was = current && typeof current === "object" ? current : {};
+  if (
+    typeof was.sessionId === "string" &&
+    was.sessionId &&
+    Object.hasOwn(patch, "sessionId") &&
+    next.sessionId !== was.sessionId
+  ) {
+    return `write-state: refusing to change sessionId from "${was.sessionId}". It identifies the run for resume; nothing was written.`;
+  }
+  const unattended =
+    next.autopilot === true || ["autopilot", "background"].includes(next.launchRequest?.mode);
+  if (
+    modeOf(next) === "full" &&
+    !unattended &&
+    Number(was.currentPhase) === 1 &&
+    Number(next.currentPhase) > 1 &&
+    !next.phases?.["1"]?.planApprovedAt
+  ) {
+    return 'write-state: refusing to leave Phase 1: the plan has no approval (phases["1"].planApprovedAt). Nothing was written. Record the approval when the user approves the plan, or a halt.';
+  }
+  const tracked = Boolean(next.jiraId) || Boolean(next.githubIssue?.number);
+  const tracker = next.phases?.["2"]?.trackerStatus?.status;
+  if (
+    ["full", "dev"].includes(modeOf(next)) &&
+    !unattended &&
+    tracked &&
+    Number(was.currentPhase) === 2 &&
+    Number(next.currentPhase) > 2 &&
+    !["verified", "declined", "not-tracked"].includes(tracker)
+  ) {
+    return `write-state: refusing to leave Phase 2: the issue's move to In Progress is ${tracker ? `"${tracker}"` : "not recorded"} (phases["2"].trackerStatus). Nothing was written. Move the issue and re-read it, record "declined" if the user refused the write, or record a halt.`;
+  }
+  return null;
+}
+
 /**
  * Bind the run to the host session that drives it.
  *
@@ -554,7 +595,9 @@ async function main() {
       }
     }
 
-    const refusal = completionRefusal(next, payload, replace, diskStatus);
+    const refusal =
+      completionRefusal(next, payload, replace, diskStatus) ||
+      transitionRefusal(next, payload, current);
     if (refusal) {
       console.error(refusal);
       releaseLock(path);

package/pipeline/skills/.skill-manifest.json

@@ -1,15 +1,15 @@
 {
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-10-26T11:41:43Z",
-  "skillCount": 237,
+  "generatedAt": "2026-10-31T07:29:16Z",
+  "skillCount": 238,
   "entries": [
     {
       "path": "shared/core/apple-archive-compliance/SKILL.md",
-      "sha256": "08d5277e4a6c246c613bd3bea27646f580f1bdc1937cb4acbbd93a156e15b24e"
+      "sha256": "2bffd220fd3e3b59160f5b6834633c3ad144c89b192556f01b9405da706b221b"
     },
     {
       "path": "shared/core/google-play-compliance/SKILL.md",
-      "sha256": "3089e8c5f99c1ec7c1358394c398335ccb5ebc20ca05d60d870127da4592de34"
+      "sha256": "5da8befd481459823fd5945d11215e70d751bad14b71b6050417a550282a4f03"
     },
     {
       "path": "shared/core/multi-agent-analysis-jira/SKILL.md",
@@ -49,7 +49,7 @@
     },
     {
       "path": "shared/core/multi-agent-channels/SKILL.md",
-      "sha256": "b55e8461a1bcdc1b4b88c42e086f599fccda2a89d7f56a29ac11e5ebc12a3623"
+      "sha256": "74008ae717bb9662ac6ab8838e3659a5006859fc6129f655094780bc97b90423"
     },
     {
       "path": "shared/core/multi-agent-complaint-analysis/SKILL.md",
@@ -135,9 +135,13 @@
       "path": "shared/core/multi-agent-office-on/SKILL.md",
       "sha256": "b46a2f79beeee65ae7ad6cbfc58b4631c5146a7761e91a99b8a056d6f49c690d"
     },
+    {
+      "path": "shared/core/multi-agent-office-pair/SKILL.md",
+      "sha256": "6693c2453922bf87e22d5acd203f201c56b3389c831e297145b99186bb466ae5"
+    },
     {
       "path": "shared/core/multi-agent-office-status/SKILL.md",
-      "sha256": "fba0513f8941c026172ea0ce76cbc76d88a5e813fd713d68a1377eb5a4204c86"
+      "sha256": "a34e42dc79bfe9bc8ca87456558baf1601b49168e94c7b28fb6cd3e853bf3d2e"
     },
     {
       "path": "shared/core/multi-agent-postmortem/SKILL.md",
@@ -249,7 +253,7 @@
     },
     {
       "path": "shared/core/multi-agent-sync/SKILL.md",
-      "sha256": "17f734fa2b84d9a4c757f9745be8ff40d3097f5de89caf55124b48439a737093"
+      "sha256": "e4d247d7b4708cb0984d81b6584851bea0a2cdee97ebcfad8498adcd194b7675"
     },
     {
       "path": "shared/core/multi-agent-test-accessibility/SKILL.md",
@@ -361,7 +365,7 @@
     },
     {
       "path": "shared/external/app-store-review/SKILL.md",
-      "sha256": "073d99485665497229750b5f040c3a196c1e5de2bbcff281b8aec7e53817d3f4"
+      "sha256": "32e8b9de2894010fd584e6e4aada7270b85756be8608d7593127255fd6737a6e"
     },
     {
       "path": "shared/external/apple-on-device-ai/SKILL.md",

package/pipeline/skills/.skills-index.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "1.0.0",
-  "skillCount": 237,
+  "skillCount": 238,
   "entries": [
     {
       "name": "accessibility-compliance-accessibility-audit",
@@ -202,7 +202,7 @@
     },
     {
       "name": "apple-archive-compliance",
-      "description": "Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code mapping + EN/TR humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 3 Security Auditor (catalog cross-ref on Info.plist ",
+      "description": "Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code mapping + EN/TR humanizer templates. Used by /multi-agent:test store-ready, the Phase 3 security auditor, /multi-agent:review and /multi-agent:channels. Use whe",
       "platform": null,
       "group": "core",
       "plugin": null,
@@ -620,7 +620,7 @@
     },
     {
       "name": "google-play-compliance",
-      "description": "Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error codes + humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 3 Security Auditor (catalog cross-ref on AndroidManifest / bu",
+      "description": "Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error codes + humanizer templates. Used by /multi-agent:test store-ready, the Phase 3 security auditor, /multi-agent:review and /multi-agent:channels. Use when an .aab",
       "platform": null,
       "group": "core",
       "plugin": null,
@@ -1137,7 +1137,7 @@
     },
     {
       "name": "multi-agent-channels",
-      "description": "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Phase 5 delegates to this skill; users can invoke post-hoc by Jira ID / PR URL / branch.",
+      "description": "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Use to post or redo a run's report; Phase 5 delegates here, or invoke by Jira ID / PR URL / branch.",
       "platform": null,
       "group": "core",
       "plugin": null,
@@ -1377,6 +1377,17 @@
       "triggerPaths": [],
       "relativePath": "shared/core/multi-agent-office-on/SKILL.md"
     },
+    {
+      "name": "multi-agent-office-pair",
+      "description": "Pair a phone with the office: QR, wait, compare the code with the user, enrol. Use when the office should be reachable from a phone.",
+      "platform": null,
+      "group": "core",
+      "plugin": null,
+      "invokeAs": "multi-agent-office-pair",
+      "triggerKeywords": [],
+      "triggerPaths": [],
+      "relativePath": "shared/core/multi-agent-office-pair/SKILL.md"
+    },
     {
       "name": "multi-agent-office-status",
       "description": "Whether the office panel is running, its URL (never the token) and its last actions. Use when unsure if the panel is open.",

package/pipeline/skills/shared/README.md

@@ -2,11 +2,11 @@
 
 Single source of truth for skills delivered to both Claude Code (`~/.claude/skills/`) and Copilot CLI (`~/.copilot/skills/`) by the installer.
 
-**Total:** 237 skills (72 core + 165 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
+**Total:** 238 skills (73 core + 165 external). Auto-generated by `scripts/gen-skills-index.mjs`  -  do not edit by hand.
 
 ## Directory layout
 
-- **`core/`**  -  72 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
+- **`core/`**  -  73 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
 - **`external/`**  -  165 iOS / Android / generic skills that ship into the stack plugins. Each names its origin in `metadata.source`: `multi-agent-pipeline` when written here, or the upstream and license a `NOTICE-*.md` in this directory covers.
 - Install destinations (ADR-0009): Claude Code gets NO local copy of `external/` - it loads those skills from the `multi-agent-plugins` marketplace, namespaced (`ai-<stack>-toolkit:<name>`); only the two compliance catalogs from `core/` land in `~/.claude/skills/`. Copilot CLI and Codex CLI receive a flat copy filtered to the enabled stacks. `external/` remains the single authoring source that `build-stack-plugins.mjs` publishes from.
 
@@ -14,7 +14,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 
 ## Categories
 
-- [Pipeline Orchestration](#pipeline-orchestration)  -  72
+- [Pipeline Orchestration](#pipeline-orchestration)  -  73
 - [iOS / Apple Ecosystem](#ios-apple-ecosystem)  -  94
 - [Android / Kotlin](#android-kotlin)  -  16
 - [Web](#web)  -  10
@@ -59,6 +59,7 @@ Source layout is logical grouping only  -  skill discovery at runtime is unchang
 | [`multi-agent-model`](./core/multi-agent-model/) | `core` | Turn the top model rung on or off and keep the cost ledger's pricing in step with it. Use when asked to enable or disable Fable, or which mo |
 | [`multi-agent-office-off`](./core/multi-agent-office-off/) | `core` | Close the office panel and stop its local server. Use when done with the panel. |
 | [`multi-agent-office-on`](./core/multi-agent-office-on/) | `core` | Open the office: a local browser page that shows runs and agents live and drives the ecosystem (new runs, jobs, PRs, keys, memory, system, c |
+| [`multi-agent-office-pair`](./core/multi-agent-office-pair/) | `core` | Pair a phone with the office: QR, wait, compare the code with the user, enrol. Use when the office should be reachable from a phone. |
 | [`multi-agent-office-status`](./core/multi-agent-office-status/) | `core` | Whether the office panel is running, its URL (never the token) and its last actions. Use when unsure if the panel is open. |
 | [`multi-agent-postmortem`](./core/multi-agent-postmortem/) | `core` | Post-mortem of a run from its session transcripts: loops, stalls, root-cause hypotheses on file:line, fixes. Read-only, redacted. Use when a |
 | [`multi-agent-prune-logs`](./core/multi-agent-prune-logs/) | `core` | Delete per-task project logs under ~/.claude/logs/multi-agent (filter by age/project/task). Audit trail + metrics are preserved. Dry-run fir |

package/pipeline/skills/shared/core/apple-archive-compliance/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: apple-archive-compliance
-description: "Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code mapping + EN/TR humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 3 Security Auditor (catalog cross-ref on Info.plist / PrivacyInfo / entitlements diffs), /multi-agent:review (PR citation), /multi-agent:channels (PR body auto-augmentation). Wiring enforced by smoke-compliance-skills.sh. Use when an .xcarchive needs an App Store review check before submission, or a rejection has to be diagnosed."
+description: "Apple App Store Review compliance  -  wraps the multi-agent-toolkit-mcp `ios_app_store_audit` tool (18-rule deep scan) with ITMS error code mapping + EN/TR humanizer templates. Used by /multi-agent:test store-ready, the Phase 3 security auditor, /multi-agent:review and /multi-agent:channels. Use when an .xcarchive needs an App Store review check before submission, or a rejection has to be diagnosed."
 user-invocable: true
 argument-hint: '[archive-path] [--threshold=error|warning|info] [--format=markdown|json] [--lang=en|tr]   -  no-arg: picks most recent .xcarchive from ~/Library/Developer/Xcode/Archives/'
 metadata:

package/pipeline/skills/shared/core/google-play-compliance/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: google-play-compliance
-description: "Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error codes + humanizer templates. Consumed by: /multi-agent:test 'store-ready' (primary dispatch), Phase 3 Security Auditor (catalog cross-ref on AndroidManifest / build.gradle / proguard / signing diffs), /multi-agent:review (PR citation), /multi-agent:channels (PR body auto-augmentation). Wiring enforced by smoke-compliance-skills.sh. Use when an .aab or .apk needs a Play policy check before upload, or a Play rejection has to be diagnosed."
+description: "Google Play Store publication compliance  -  bundletool + aapt2 + apksigner orchestration + 21-rule policy catalog with Play Console error codes + humanizer templates. Used by /multi-agent:test store-ready, the Phase 3 security auditor, /multi-agent:review and /multi-agent:channels. Use when an .aab or .apk needs a Play policy check before upload, or a Play rejection has to be diagnosed."
 user-invocable: true
 argument-hint: '[bundle-path] [--threshold=error|warning|info] [--format=markdown|json] [--lang=en|tr]   -  no-arg: picks most recent .aab from app/build/outputs/bundle/release/'
 metadata:
@@ -10,7 +10,7 @@ metadata:
 
 # google-play-compliance  -  Google Play Store Publication Compliance Skill
 
-Pre-submission compliance check for Android App Bundle (`.aab`) and APK artifacts. Unlike the iOS side (single MCP-tool wrapper around `ios_app_store_audit`), Android has **no single official scanner**  -  this skill orchestrates Google's own tools (`bundletool`, `aapt2`, `apksigner`, `adb`) plus a curated policy catalog to produce an equivalent pre-flight report.
+Pre-submission compliance check for Android App Bundle (`.aab`) and APK artifacts. Unlike the iOS side (single wrapper around the multi-agent-toolkit MCP server's `ios_app_store_audit`), Android has **no single official scanner**  -  this skill orchestrates Google's own tools (`bundletool`, `aapt2`, `apksigner`, `adb`) plus a curated policy catalog to produce an equivalent pre-flight report.
 
 **The catalog is the value.** The 21-rule knowledge base reflects current Google Play policies (target API requirements, 64-bit enforcement, data safety rules, permission policies). Tool invocations gather the evidence; this skill maps it against policy and humanizes.
 
@@ -118,7 +118,7 @@ Current Google Play policies + Play Console rejection codes. Sourced from `suppo
 
 | # | ruleID | Play ref | What it checks | Default severity |
 |---|---|---|---|---|
-| 1 | `target-api-level` | Policy  -  Target API | `android:targetSdkVersion` ≥ 34 for new apps (Aug 2024+), ≥ 34 for updates (Nov 2024+). Lower → rejected. | error |
+| 1 | `target-api-level` | Policy  -  Target API | `android:targetSdkVersion` ≥ 36 for new apps and updates on phones and tablets (from 31 Aug 2026, extension to 1 Nov 2026), ≥ 35 on Wear OS and Automotive, ≥ 34 on TV and XR. Lower → rejected. | error |
 | 2 | `native-64bit` | Policy  -  64-bit | Every native `.so` has an `arm64-v8a` counterpart. `armeabi-v7a`-only rejected since Aug 2019. | error |
 | 3 | `app-bundle-format` | Policy  -  AAB | New apps must ship `.aab`. `.apk` uploads rejected on new apps since Aug 2021. | error |
 | 4 | `base-module-size` | Platform limit | Base APK from bundle ≤ 150 MB (bundletool `--mode=universal` size). Beyond → rejected. | error |
@@ -331,7 +331,7 @@ The appended section is structured:
 
 ⚠️ 3 blocker(s), 2 warning(s)  -  run /multi-agent:test "store-ready" for the full report.
 
-- `target-api-level`  -  Policy  -  Target API: targetSdkVersion = 33 but Play Console requires ≥ 34 for updates
+- `target-api-level`  -  Policy  -  Target API: targetSdkVersion = 35 but Play Console requires ≥ 36 for new apps and updates
 - `native-64bit`  -  Policy  -  64-bit: lib/armeabi-v7a/libfoo.so has no arm64-v8a counterpart
 - `foreground-service-types`  -  Android 14: <service> missing android:foregroundServiceType
 + 2 more
@@ -339,9 +339,9 @@ The appended section is structured:
 
 ## Notes
 
-- **Policy thresholds change yearly.** Target API level (currently 34) advances each August for new apps / November for updates. When a new Android version ships, update Rule #1 `target-api-level` with the new threshold.
+- **Policy thresholds change yearly.** The target API level in Rule #1 advances each August for new apps / November for updates. When a new Android version ships, update Rule #1 `target-api-level` with the new threshold.
 - **Not a substitute for Play Console pre-launch report.** This skill catches static issues (manifest, signing, size, debug tools). Dynamic issues (crashes, ANRs, security vulnerabilities) require Play Console's own pre-launch testing on real devices.
-- **Data Safety form audit is partial.** Rule #14 flags manifest permissions that commonly trigger form updates, but the declared answers live in Play Console and cannot be cross-checked from here. The Android Publisher API has no Data Safety read: its only operation, `applications.dataSafety`, writes the declaration. With `google_play` onboarded, `store_search` / `store_call` reach the rest of the Android Publisher and Play Developer Reporting APIs (tracks, bundles, vitals), but the gap for Data Safety stays.
+- **Data Safety form audit is partial.** Rule #14 flags manifest permissions that commonly trigger form updates, but the declared answers live in Play Console and cannot be cross-checked from here. The Android Publisher API has no Data Safety read: its only operation, `applications.dataSafety`, writes the declaration. With `google_play` onboarded, the toolkit's `store_search` / `store_call` reach the rest of the Android Publisher and Play Developer Reporting APIs (tracks, bundles, vitals), but the gap for Data Safety stays.
 
 ## Version history
 

package/pipeline/skills/shared/core/google-play-compliance/references/rules.yml

@@ -37,7 +37,7 @@ enforcement_kinds:
 rules:
   - id: target-api-level
     title: >
-      `android:targetSdkVersion` ≥ 34 for new apps (Aug 2024+), ≥ 34 for updates (Nov 2024+). Lower → rejected.
+      `android:targetSdkVersion` ≥ 36 for new apps and updates on phones and tablets (from 31 Aug 2026, extension to 1 Nov 2026), ≥ 35 on Wear OS and Automotive, ≥ 34 on TV and XR. Lower → rejected.
     severity: blocking
     enforcement: scan
     policy_ref: Policy  -  Target API

package/pipeline/skills/shared/core/multi-agent-channels/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: multi-agent-channels
-description: "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Phase 5 delegates to this skill; users can invoke post-hoc by Jira ID / PR URL / branch."
+description: "Multi-channel reporter  -  Jira/Confluence/Wiki/PR description. Multi-select channels + content, humanizer pass, reviewer-preserving Bitbucket PR PUT. Use to post or redo a run's report; Phase 5 delegates here, or invoke by Jira ID / PR URL / branch."
 user-invocable: true
 argument-hint: '<Jira-id | PR-url | #N | Jira-url> [--channels pr,jira,confluence,wiki] [--content normal,technical,test,auto-diff,note,test-run] [--flow-run <runId>[,<runId>...]] [--message "..."] [--message-file path] [--dry-run] [--append] [--ready]'
 metadata:

package/pipeline/skills/shared/core/multi-agent-office-pair/SKILL.md

@@ -0,0 +1,19 @@
+---
+name: multi-agent-office-pair
+description: "Pair a phone with the office: QR, wait, compare the code with the user, enrol. Use when the office should be reachable from a phone."
+user-invocable: true
+metadata:
+  language: en
+---
+
+# multi-agent-office-pair
+
+1. `node "$HOME/.copilot/scripts/office-pair.mjs" start` (add `--relay <url>`
+   when prefs `global.office.remote.relayUrl` is unset). The QR opens as a
+   local page; never print it here, it carries the one-time secret. In a
+   terminal of their own the user can run `start --terminal` instead.
+2. Tell the user to scan it with the phone and finish the passkey step.
+3. `node "$HOME/.copilot/scripts/office-pair.mjs" wait` (blocks up to 10 minutes).
+4. Ask the user whether the phone shows the same `code`; never answer it yourself.
+5. Same: `office-pair.mjs confirm <code>` and report the device. Different:
+   `office-pair.mjs cancel`; nothing is enrolled.

package/pipeline/skills/shared/core/multi-agent-office-status/SKILL.md

@@ -10,8 +10,8 @@ metadata:
 
 1. `node "$HOME/.copilot/scripts/office-control.mjs" status --json`
 2. Report in `outputLanguage`: `running`, `url` and `idleMinutes`; the
-   `remote` line as given ("not available in this installation" unless a
-   separate remote layer is installed); `pairedDevices`; `recentActions`
+   `remote` line as given ("off" until `/multi-agent:office-pair` pairs a phone, then
+   "paired"); `pairedDevices`; `recentActions`
    (route, step, status, when; never a request body).
 
 Never print the token or read the token file.