@mmerterden/multi-agent-pipeline 20.36.0 → 20.37.0

package/pipeline/skills/shared/external/mapkit-location/references/code-examples.md

@@ -0,0 +1,117 @@
+# MapKit and Core Location Code Examples
+
+<!-- toc -->
+- [SwiftUI Map (iOS 17+)](#swiftui-map-ios-17)
+- [Selection](#selection)
+- [CLLocationUpdate.liveUpdates() (iOS 17+)](#cllocationupdateliveupdates-ios-17)
+- [Authorization](#authorization)
+<!-- /toc -->
+
+Full code samples for the SKILL.md sections that link here. The rules and the decision guidance stay in SKILL.md; each heading below matches the SKILL.md section the code belongs to.
+
+## SwiftUI Map (iOS 17+)
+
+```swift
+import SwiftUI
+import MapKit
+
+struct TrailheadMap: View {
+    @State private var camera: MapCameraPosition = .automatic
+
+    private let lot = CLLocationCoordinate2D(latitude: 46.852, longitude: -121.760)
+    private let summit = CLLocationCoordinate2D(latitude: 46.853, longitude: -121.727)
+
+    var body: some View {
+        Map(position: $camera) {
+            Marker("Parking", coordinate: lot)
+            Marker("Summit", systemImage: "mountain.2.fill", coordinate: summit)
+        }
+        .mapStyle(.standard(elevation: .realistic))
+        .mapControls {
+            MapUserLocationButton()
+            MapCompass()
+            MapScaleView()
+        }
+    }
+}
+```
+
+## Selection
+
+```swift
+struct CampsiteMap: View {
+    let sites: [Campsite]
+    @State private var chosen: MKMapItem?
+    @State private var headline = ""
+
+    var body: some View {
+        Map(selection: $chosen) {
+            ForEach(sites) { site in
+                Marker(site.name, coordinate: site.coordinate)
+                    .tag(site.mapItem)
+            }
+        }
+        .onChange(of: chosen) { _, item in
+            guard let item else { return }
+            headline = item.name ?? ""
+        }
+    }
+}
+```
+
+## CLLocationUpdate.liveUpdates() (iOS 17+)
+
+```swift
+import CoreLocation
+import Observation
+
+@MainActor
+@Observable
+final class RunTracker {
+    private(set) var lastFix: CLLocation?
+    private var stream: Task<Void, Never>?
+
+    func begin() {
+        stream?.cancel()
+        stream = Task {
+            do {
+                for try await reading in CLLocationUpdate.liveUpdates() {
+                    guard let fix = reading.location,
+                          fix.horizontalAccuracy >= 0,
+                          fix.horizontalAccuracy < 50 else { continue }
+                    lastFix = fix
+                }
+            } catch is CancellationError {
+            } catch {
+                lastFix = nil
+            }
+        }
+    }
+
+    func end() {
+        stream?.cancel()
+        stream = nil
+    }
+}
+```
+
+## Authorization
+
+```swift
+struct LocationOffView: View {
+    @Environment(\.openURL) private var openURL
+
+    var body: some View {
+        ContentUnavailableView {
+            Label("Location is off", systemImage: "location.slash")
+        } description: {
+            Text("Allow location access to see trails near you.")
+        } actions: {
+            Button("Open Settings") {
+                guard let settings = URL(string: UIApplication.openSettingsURLString) else { return }
+                openURL(settings)
+            }
+        }
+    }
+}
+```

package/pipeline/skills/shared/external/nextjs-app-router/SKILL.md

@@ -98,69 +98,7 @@ export function SearchBar() {
 
 ## Server Actions
 
-```tsx
-// app/actions.ts
-'use server';
-
-import { revalidatePath } from 'next/cache';
-import { redirect } from 'next/navigation';
-import { z } from 'zod';
-
-const CreatePostSchema = z.object({
-  title: z.string().min(1).max(200),
-  content: z.string().min(1),
-});
-
-export async function createPost(prevState: ActionState, formData: FormData) {
-  const validated = CreatePostSchema.safeParse({
-    title: formData.get('title'),
-    content: formData.get('content'),
-  });
-
-  if (!validated.success) {
-    return { errors: validated.error.flatten().fieldErrors };
-  }
-
-  try {
-    await db.post.create({ data: validated.data });
-  } catch (error) {
-    return { message: 'Database Error: Failed to create post.' };
-  }
-
-  revalidatePath('/posts');
-  redirect('/posts');
-}
-```
-
-```tsx
-// app/posts/new/page.tsx
-'use client';
-
-import { useActionState } from 'react';
-import { createPost } from '@/app/actions';
-
-export default function NewPostPage() {
-  const [state, formAction, isPending] = useActionState(createPost, { errors: {} });
-
-  return (
-    <form action={formAction}>
-      <div>
-        <label htmlFor="title">Title</label>
-        <input id="title" name="title" />
-        {state.errors?.title && <p className="error">{state.errors.title}</p>}
-      </div>
-      <div>
-        <label htmlFor="content">Content</label>
-        <textarea id="content" name="content" />
-        {state.errors?.content && <p className="error">{state.errors.content}</p>}
-      </div>
-      <button type="submit" disabled={isPending}>
-        {isPending ? 'Creating...' : 'Create Post'}
-      </button>
-    </form>
-  );
-}
-```
+Code for this section: [App Router examples](references/app-router-examples.md).
 
 ## Data Fetching Patterns
 
@@ -293,52 +231,11 @@ export default function Error({
 
 ## Middleware
 
-```tsx
-// middleware.ts (project root)
-import { NextResponse } from 'next/server';
-import type { NextRequest } from 'next/server';
-
-export function middleware(request: NextRequest) {
-  const token = request.cookies.get('session')?.value;
-
-  if (!token && request.nextUrl.pathname.startsWith('/dashboard')) {
-    return NextResponse.redirect(new URL('/login', request.url));
-  }
-
-  const response = NextResponse.next();
-  response.headers.set('x-request-id', crypto.randomUUID());
-  return response;
-}
-
-export const config = {
-  matcher: ['/dashboard/:path*', '/api/:path*'],
-};
-```
+Code for this section: [App Router examples](references/app-router-examples.md).
 
 ## Route Handlers (API Routes)
 
-```tsx
-// app/api/users/route.ts
-import { NextRequest, NextResponse } from 'next/server';
-
-export async function GET(request: NextRequest) {
-  const searchParams = request.nextUrl.searchParams;
-  const page = parseInt(searchParams.get('page') ?? '1');
-
-  const users = await db.user.findMany({
-    skip: (page - 1) * 10,
-    take: 10,
-  });
-
-  return NextResponse.json(users);
-}
-
-export async function POST(request: NextRequest) {
-  const body = await request.json();
-  const user = await db.user.create({ data: body });
-  return NextResponse.json(user, { status: 201 });
-}
-```
+Code for this section: [App Router examples](references/app-router-examples.md).
 
 ## Rendering Strategies
 
@@ -419,3 +316,7 @@ export default async function ProfilePage() {
 | Hydration errors | Server/client HTML mismatch | Check for browser-only APIs; use `useEffect` for client-only logic |
 | Dynamic route 404 | Missing `generateStaticParams` | Add params generation or set `dynamicParams = true` |
 | Server Action fails | Not marked with 'use server' | Add 'use server' at top of file or inline function |
+
+## References
+
+- [App Router examples](references/app-router-examples.md): open when writing a Server Action, middleware or a route handler.

package/pipeline/skills/shared/external/nextjs-app-router/references/app-router-examples.md

@@ -0,0 +1,124 @@
+# App Router examples
+
+<!-- toc -->
+- [Server Actions](#server-actions)
+- [Middleware](#middleware)
+- [Route Handlers (API Routes)](#route-handlers-api-routes)
+<!-- /toc -->
+
+Code for Server Actions, middleware and route handlers. SKILL.md keeps the component model, data fetching, rendering strategies and rules.
+
+## Server Actions
+
+```tsx
+// app/actions.ts
+'use server';
+
+import { revalidatePath } from 'next/cache';
+import { redirect } from 'next/navigation';
+import { z } from 'zod';
+
+const CreatePostSchema = z.object({
+  title: z.string().min(1).max(200),
+  content: z.string().min(1),
+});
+
+export async function createPost(prevState: ActionState, formData: FormData) {
+  const validated = CreatePostSchema.safeParse({
+    title: formData.get('title'),
+    content: formData.get('content'),
+  });
+
+  if (!validated.success) {
+    return { errors: validated.error.flatten().fieldErrors };
+  }
+
+  try {
+    await db.post.create({ data: validated.data });
+  } catch (error) {
+    return { message: 'Database Error: Failed to create post.' };
+  }
+
+  revalidatePath('/posts');
+  redirect('/posts');
+}
+```
+
+```tsx
+// app/posts/new/page.tsx
+'use client';
+
+import { useActionState } from 'react';
+import { createPost } from '@/app/actions';
+
+export default function NewPostPage() {
+  const [state, formAction, isPending] = useActionState(createPost, { errors: {} });
+
+  return (
+    <form action={formAction}>
+      <div>
+        <label htmlFor="title">Title</label>
+        <input id="title" name="title" />
+        {state.errors?.title && <p className="error">{state.errors.title}</p>}
+      </div>
+      <div>
+        <label htmlFor="content">Content</label>
+        <textarea id="content" name="content" />
+        {state.errors?.content && <p className="error">{state.errors.content}</p>}
+      </div>
+      <button type="submit" disabled={isPending}>
+        {isPending ? 'Creating...' : 'Create Post'}
+      </button>
+    </form>
+  );
+}
+```
+
+## Middleware
+
+```tsx
+// middleware.ts (project root)
+import { NextResponse } from 'next/server';
+import type { NextRequest } from 'next/server';
+
+export function middleware(request: NextRequest) {
+  const token = request.cookies.get('session')?.value;
+
+  if (!token && request.nextUrl.pathname.startsWith('/dashboard')) {
+    return NextResponse.redirect(new URL('/login', request.url));
+  }
+
+  const response = NextResponse.next();
+  response.headers.set('x-request-id', crypto.randomUUID());
+  return response;
+}
+
+export const config = {
+  matcher: ['/dashboard/:path*', '/api/:path*'],
+};
+```
+
+## Route Handlers (API Routes)
+
+```tsx
+// app/api/users/route.ts
+import { NextRequest, NextResponse } from 'next/server';
+
+export async function GET(request: NextRequest) {
+  const searchParams = request.nextUrl.searchParams;
+  const page = parseInt(searchParams.get('page') ?? '1');
+
+  const users = await db.user.findMany({
+    skip: (page - 1) * 10,
+    take: 10,
+  });
+
+  return NextResponse.json(users);
+}
+
+export async function POST(request: NextRequest) {
+  const body = await request.json();
+  const user = await db.user.create({ data: body });
+  return NextResponse.json(user, { status: 201 });
+}
+```

package/pipeline/skills/shared/external/permissionkit/SKILL.md

@@ -245,37 +245,7 @@ both. When the question carries an `expirationDate`, use that date for the
 local expiry so the app and the parent's window close together. When a flow combines known-handle checks with responses, keep the
 bundle-identifier guard from the section above.
 
-```swift
-enum RequestState { case pending, approved, denied, expired }
-
-@MainActor @Observable
-final class ContactRequests {
-    private(set) var states: [UUID: RequestState] = [:]
-
-    func markPending(_ id: UUID) { states[id] = .pending }
-
-    func expire(_ id: UUID) {
-        guard states[id] == .pending else { return }
-        states[id] = .expired              // lets the child ask again
-    }
-
-    @available(iOS 26.2, *)
-    func listen() async {
-        for await response in AskCenter.shared.responses(for: CommunicationTopic.self) {
-            let id = response.question.id
-            switch response.choice.answer {
-            case .approval: states[id] = .approved
-            case .denial: states[id] = .denied
-            @unknown default: states[id] = .denied
-            }
-            let people = response.question.topic.personInformation
-            refreshContacts(people.map(\.handle))
-        }
-    }
-
-    private func refreshContacts(_ handles: [CommunicationHandle]) {}
-}
-```
+Code: [Handling responses](references/code-examples.md#handling-responses).
 
 - `responses(for:)` is an async sequence of `PermissionResponse<Topic>`; each
   element has `.question` and `.choice`.
@@ -386,3 +356,4 @@ produces no response.
   - https://developer.apple.com/documentation/permissionkit/significantappupdatetopic
   - https://developer.apple.com/documentation/permissionkit/askerror
   - https://developer.apple.com/documentation/permissionkit/creating-a-communication-experience
+- [Code examples](references/code-examples.md): open for the full code behind Handling responses.

package/pipeline/skills/shared/external/permissionkit/references/code-examples.md

@@ -0,0 +1,37 @@
+# PermissionKit Code Examples
+
+Full code samples for the SKILL.md sections that link here. The rules and the decision guidance stay in SKILL.md; each heading below matches the SKILL.md section the code belongs to.
+
+## Handling responses
+
+```swift
+enum RequestState { case pending, approved, denied, expired }
+
+@MainActor @Observable
+final class ContactRequests {
+    private(set) var states: [UUID: RequestState] = [:]
+
+    func markPending(_ id: UUID) { states[id] = .pending }
+
+    func expire(_ id: UUID) {
+        guard states[id] == .pending else { return }
+        states[id] = .expired              // lets the child ask again
+    }
+
+    @available(iOS 26.2, *)
+    func listen() async {
+        for await response in AskCenter.shared.responses(for: CommunicationTopic.self) {
+            let id = response.question.id
+            switch response.choice.answer {
+            case .approval: states[id] = .approved
+            case .denial: states[id] = .denied
+            @unknown default: states[id] = .denied
+            }
+            let people = response.question.topic.personInformation
+            refreshContacts(people.map(\.handle))
+        }
+    }
+
+    private func refreshContacts(_ handles: [CommunicationHandle]) {}
+}
+```

package/pipeline/skills/shared/external/play-store-review/SKILL.md

@@ -207,43 +207,7 @@ of receiving each item type before purchase.
 
 ### Play App Signing (Required for New Apps)
 
-Google manages your app signing key. You upload with an upload key.
-
-```bash
-# Generate upload key
-keytool -genkeypair -v -keystore upload-keystore.jks \
-    -keyalg RSA -keysize 2048 -validity 10000 \
-    -alias upload-key
-
-# Build AAB (not APK)
-./gradlew bundleRelease
-```
-
-### AAB Requirements
-
-- New apps must upload AAB (Android App Bundle), not APK
-- Maximum download size: 200 MB (on-demand delivery for larger)
-- Use Play Feature Delivery for conditional/on-demand modules
-
-### Signing Config
-
-```kotlin
-android {
-    signingConfigs {
-        create("release") {
-            storeFile = file(System.getenv("UPLOAD_KEYSTORE_PATH") ?: "upload.jks")
-            storePassword = System.getenv("UPLOAD_KEYSTORE_PASSWORD") ?: ""
-            keyAlias = System.getenv("UPLOAD_KEY_ALIAS") ?: ""
-            keyPassword = System.getenv("UPLOAD_KEY_PASSWORD") ?: ""
-        }
-    }
-    buildTypes {
-        release {
-            signingConfig = signingConfigs.getByName("release")
-        }
-    }
-}
-```
+Google holds the app signing key; you upload with your own upload key and build an AAB with `bundleRelease`. New apps must upload an AAB, not an APK (200 MB download limit, Play Feature Delivery beyond that), and the release signing config reads keystore values from environment variables. Commands, AAB rules and the Gradle config: [Signing and policy details](references/signing-and-policies.md).
 
 ## Common Rejection Reasons
 
@@ -266,43 +230,7 @@ android {
 
 ## Policy Categories
 
-### Restricted Content
-
-- No hate speech, violence, or terrorism
-- No sexually explicit content (except in apps with IARC rating)
-- No gambling without proper licensing
-- No marijuana or pharmaceutical sales
-- No weapons or dangerous products
-
-### Privacy and Security
-
-- Data collected must match Data Safety declaration
-- Sensitive permissions require justification
-- Background location requires approval
-- QUERY_ALL_PACKAGES requires approved use case
-- Apps targeting children must comply with COPPA
-
-### Monetization
-
-- No deceptive subscription flows
-- In-app purchase prices must be clear before purchase
-- Free trials must state duration and post-trial price
-- Refund policy must be accessible
-
-### User-Generated Content
-
-Apps with UGC must include:
-- Content moderation
-- Reporting mechanism
-- User blocking
-- Published content policy
-
-### Account Deletion
-
-If your app allows account creation, you must:
-- Offer account deletion within the app
-- Provide a web-based deletion option
-- Delete data within 60 days of request (or explain legal retention)
+Restricted content, privacy and security, monetization, user-generated content (moderation, reporting, blocking, published policy) and account deletion (in-app and web, data deleted within 60 days). Full lists: [Signing and policy details](references/signing-and-policies.md).
 
 ## Do's and Don'ts
 
@@ -350,3 +278,7 @@ If your app allows account creation, you must:
 - [ ] Monitor ANR rate (target < 0.47%)
 - [ ] Respond to user reviews promptly
 - [ ] Set up staged rollout for production releases (10% -> 50% -> 100%)
+
+## References
+
+- [Signing and policy details](references/signing-and-policies.md): generating an upload key, configuring release signing and AAB delivery, or checking an app against the restricted content, privacy, monetization, UGC and account deletion policies.

package/pipeline/skills/shared/external/play-store-review/references/signing-and-policies.md

@@ -0,0 +1,83 @@
+# Signing and policy details
+
+Play App Signing setup, AAB requirements, the Gradle signing config, and the policy categories. SKILL.md keeps the checklists, data safety, privacy, rating, billing and rejection reasons.
+
+## Play App Signing (Required for New Apps)
+
+Google manages your app signing key. You upload with an upload key.
+
+```bash
+# Generate upload key
+keytool -genkeypair -v -keystore upload-keystore.jks \
+    -keyalg RSA -keysize 2048 -validity 10000 \
+    -alias upload-key
+
+# Build AAB (not APK)
+./gradlew bundleRelease
+```
+
+## AAB Requirements
+
+- New apps must upload AAB (Android App Bundle), not APK
+- Maximum download size: 200 MB (on-demand delivery for larger)
+- Use Play Feature Delivery for conditional/on-demand modules
+
+## Signing Config
+
+```kotlin
+android {
+    signingConfigs {
+        create("release") {
+            storeFile = file(System.getenv("UPLOAD_KEYSTORE_PATH") ?: "upload.jks")
+            storePassword = System.getenv("UPLOAD_KEYSTORE_PASSWORD") ?: ""
+            keyAlias = System.getenv("UPLOAD_KEY_ALIAS") ?: ""
+            keyPassword = System.getenv("UPLOAD_KEY_PASSWORD") ?: ""
+        }
+    }
+    buildTypes {
+        release {
+            signingConfig = signingConfigs.getByName("release")
+        }
+    }
+}
+```
+
+## Policy Categories
+
+### Restricted Content
+
+- No hate speech, violence, or terrorism
+- No sexually explicit content (except in apps with IARC rating)
+- No gambling without proper licensing
+- No marijuana or pharmaceutical sales
+- No weapons or dangerous products
+
+### Privacy and Security
+
+- Data collected must match Data Safety declaration
+- Sensitive permissions require justification
+- Background location requires approval
+- QUERY_ALL_PACKAGES requires approved use case
+- Apps targeting children must comply with COPPA
+
+### Monetization
+
+- No deceptive subscription flows
+- In-app purchase prices must be clear before purchase
+- Free trials must state duration and post-trial price
+- Refund policy must be accessible
+
+### User-Generated Content
+
+Apps with UGC must include:
+- Content moderation
+- Reporting mechanism
+- User blocking
+- Published content policy
+
+### Account Deletion
+
+If your app allows account creation, you must:
+- Offer account deletion within the app
+- Provide a web-based deletion option
+- Delete data within 60 days of request (or explain legal retention)