@mmerterden/multi-agent-pipeline 20.5.0 → 20.7.0

package/pipeline/scripts/pre-commit-check.sh

@@ -174,6 +174,19 @@ scan_file() {
 
   [ -z "$content" ] && return 0
 
+  # A token written with an invisible character or a look-alike letter: scan a
+  # folded copy too. Only non-ASCII content pays for the node call.
+  if printf '%s' "$content" | LC_ALL=C grep -q '[^ -~[:space:]]' 2>/dev/null \
+     && command -v node >/dev/null 2>&1 \
+     && [ -f "$PRE_COMMIT_DIR/../lib/normalize-text.mjs" ]; then
+    local folded
+    folded=$(printf '%s' "$content" | node "$PRE_COMMIT_DIR/../lib/normalize-text.mjs" 2>/dev/null) || folded=""
+    if [ -n "$folded" ] && [ "$folded" != "$content" ]; then
+      content="$content
+$folded"
+    fi
+  fi
+
   # API keys / tokens (key = "long_string" pattern)
   if echo "$content" | grep -qiE '(api[_-]?key|api[_-]?secret|access[_-]?token|auth[_-]?token|secret[_-]?key)\s*[:=]\s*["'"'"'][A-Za-z0-9+/=_-]{20,}'; then
     echo "BLOCKED: Possible API key/token in $file" >&2
@@ -261,28 +274,58 @@ scan_file() {
   # repo-root-relative, so the full path can be anchored.
   if ! echo "$file" | grep -qiE '(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|Podfile\.lock|Cartfile\.resolved|Package\.resolved|\.lock$|\.map$|__snapshots__|\.snap$|\.min\.(js|css)$)' \
      && ! echo "$file" | grep -qE '^pipeline/scripts/smoke-pre-commit\.sh$'; then
-    candidates=$(echo "$content" | grep -oE '[A-Za-z0-9+/=_-]{40,}' || true)
+    # Staged and working-tree content arrives as diff lines, so the leading "+"
+    # is stripped first: it is in the candidate class and would otherwise glue
+    # onto a token that starts at column 0 and defeat every shape check below.
+    candidates=$(echo "$content" | sed 's/^+//' | grep -oE '[A-Za-z0-9+/=_-]{40,}' || true)
     if [ -n "$candidates" ]; then
       entropy_hit=$(printf '%s\n' "$candidates" | awk '
+        # Word-shaped identifier: letters and _ or - only, split into segments at
+        # separators and case boundaries (UIApplication -> UI, Application), where
+        # the segments read like words: average length 4+, none longer than 24,
+        # and at least 70 percent carrying a vowel. Random letters-only tokens
+        # flip case every one or two characters, so their segments average about
+        # two characters with few vowels; a long lowercase run is one oversized
+        # segment. Neither shape passes.
+        function wordlike(t,    n, i, c, p, nx, seg, nseg, total, maxlen, voweled, split_here) {
+          if (t !~ /^[A-Za-z_-]+$/) return 0;
+          n = length(t); seg = ""; nseg = 0; total = 0; maxlen = 0; voweled = 0;
+          for (i = 1; i <= n + 1; i++) {
+            c = (i <= n) ? substr(t, i, 1) : "_";
+            split_here = 0;
+            if (c == "_" || c == "-") split_here = 1;
+            else if (seg != "" && c ~ /[A-Z]/) {
+              p = substr(seg, length(seg), 1);
+              nx = (i < n) ? substr(t, i + 1, 1) : "";
+              if (p ~ /[a-z]/ || (nx ~ /[a-z]/ && length(seg) > 1)) split_here = 1;
+            }
+            if (split_here && seg != "") {
+              nseg++; total += length(seg);
+              if (length(seg) > maxlen) maxlen = length(seg);
+              if (tolower(seg) ~ /[aeiouy]/) voweled++;
+              seg = "";
+            }
+            if (c != "_" && c != "-") seg = seg c;
+          }
+          if (nseg == 0) return 0;
+          return (total / nseg >= 4 && maxlen <= 24 && voweled * 10 >= nseg * 7);
+        }
         {
           s=$0;
           # Scoring the joined string measures the variety of a whole SENTENCE
           # rather than of any token in it, so an ordinary doc path like
-          # "claude/commands/multi-agent/review-jira/SKILL" scores 4.35 and was
-          # blocked as a possible credential. 47 of the 400 committed markdown
-          # files in this repo carried such a path, so each was un-editable  -  and
-          # the gate only fired once such a file was staged, which is why it
-          # stayed invisible.
+          # "claude/commands/multi-agent/review-jira/SKILL" scores 4.35 and would
+          # be blocked as a possible credential, making every doc that cites
+          # such a path un-editable.
           #
-          # The reduction is applied ONLY to path-shaped candidates. An earlier
-          # version of this fix scored the longest slash-free segment for every
-          # candidate containing a slash, which structurally exempted any secret
-          # with a slash in it: the canonical 40-char AWS documentation-example
-          # secret access key (two slashes, full-match H=4.663, blocked before)
-          # reduced to an 18-char segment and sailed through, and roughly half
-          # of `openssl rand -base64 32` outputs contain a "/". It is not
-          # reproduced here on purpose  -  this gate flags credential-shaped
-          # strings in comments too, and it is right to.
+          # The reduction is applied ONLY to path-shaped candidates. Scoring the
+          # longest slash-free segment for every candidate containing a slash
+          # would structurally exempt any secret with a slash in it: the
+          # canonical 40-char AWS documentation-example secret access key (two
+          # slashes, full-match H=4.663) reduces to an 18-char segment, and
+          # roughly half of `openssl rand -base64 32` outputs contain a "/". The
+          # key is not reproduced here on purpose  -  this gate flags
+          # credential-shaped strings in comments too, and it is right to.
           # No other check here catches that key: the key-name regex above does
           # not match "secret_access_key", and the AKIA pattern only covers the
           # key ID, not the secret.
@@ -299,7 +342,7 @@ scan_file() {
           if (s ~ /^[0-9]+$/) next;        # pure digits
           if (s ~ /^[0-9a-f]+$/) next;     # lowercase hex (git sha / md5 / sha-*)
           if (s ~ /^[0-9A-F]+$/) next;     # uppercase hex
-          if (s ~ /^([A-Z][a-z]+)+[A-Z]*$/) next;  # CamelCase words only (label key / type name), never a credential
+          if (wordlike(s)) next;           # identifier made of words (plist key / type name), never a credential
           delete freq;
           for (i = 1; i <= n; i++) { c = substr(s, i, 1); freq[c]++ }
           H = 0;

package/pipeline/scripts/pre-push-check.sh

@@ -21,9 +21,9 @@
 #
 # Two modes, because a gate that runs INSIDE the push is a gate that breaks
 # pushes. Git opens the connection to the remote before this hook fires, so a
-# six-minute run idles that connection until the server drops it: the first two
-# attempts to push the v15.12.0 rename died on a broken pipe with every gate
-# green. The work has to happen outside the network window.
+# six-minute run idles that connection until the server drops it, and the push
+# dies on a broken pipe with every gate green. The work has to happen outside
+# the network window.
 #
 #   pre-push-check.sh --run    run every gate and stamp the tree as green
 #   pre-push-check.sh          verify the stamp only; refuse the push if absent

package/pipeline/scripts/run-ui-tests.sh

@@ -277,11 +277,11 @@ EOF
   fi
 }
 
-# Web had no arm here at all until v17.1.0, which meant a repo with a full
-# Playwright suite reported "no UI test target" and every downstream consumer
-# believed it: the evidence probe closed tier 1, the PR body said UI tests were
-# not run, and the reason it gave was true of the runner rather than of the repo.
-# That is the failure mode this file exists to avoid, and it was shipped for web.
+# Without a web arm, a repo with a full Playwright suite reports "no UI test
+# target" and every downstream consumer believes it: the evidence probe closes
+# tier 1, the PR body says UI tests were not run, and the reason it gives is
+# true of the runner rather than of the repo. That is the failure mode this file
+# exists to avoid.
 web_spec_files() {
   find "$REPO" \
     -name ".*" -type d -prune -o \

package/pipeline/scripts/website-deploy-commit.sh

@@ -7,8 +7,9 @@
 # refuses to build a commit whose author is not a contributor on the project. The
 # push still succeeds, the deployment is created and sits at UNKNOWN with a 0ms
 # build (API `readyState: BLOCKED`), and the live site keeps serving the previous
-# version. v16.4.0 and v16.5.0 were both pushed that way and neither was built,
-# while the sync reported the website as synced both times.
+# version. A successful push is therefore not evidence of a deploy, so the script
+# pins the author before committing and reads the deployment state back after
+# pushing instead of reporting the website as synced on the push alone.
 #
 # Usage:
 #   website-deploy-commit.sh <identity-name> <identity-email> <version> [repo-dir]

package/pipeline/skills/.skill-manifest.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": "1.0.0",
-  "generatedAt": "2026-09-25T16:25:54Z",
+  "generatedAt": "2026-09-26T16:00:24Z",
   "skillCount": 218,
   "entries": [
     {
@@ -265,7 +265,7 @@
     },
     {
       "path": "shared/external/agent-introspection-debugging/SKILL.md",
-      "sha256": "7a93e115f86092408d0b653968b396276243b49c5dc1543f7c2689c861719767"
+      "sha256": "8506e5cfede72a7d59ae79f108608e84054617c43a9101692a7e97fcea1a5d0a"
     },
     {
       "path": "shared/external/alarmkit/SKILL.md",
@@ -273,7 +273,7 @@
     },
     {
       "path": "shared/external/android-architecture/SKILL.md",
-      "sha256": "5a3b13a2376378ce4977d1df14003a8f65e2d1ef1561ae8c40f10e3e1759c204"
+      "sha256": "71f6af966558767378d0605fae9a280fdf05eeba3379835170ee4a274f1846a4"
     },
     {
       "path": "shared/external/android-build-quality-gates/SKILL.md",
@@ -297,11 +297,11 @@
     },
     {
       "path": "shared/external/android-performance/SKILL.md",
-      "sha256": "5cb7429516fbaccee318af0e3071df631c56381b6857ef4bbd921eb213adef64"
+      "sha256": "1e578cbb63244d461eb3a5ad78d2cff675eb3a5a18a5b5ddb7da60bdbe2d6391"
     },
     {
       "path": "shared/external/android-security/SKILL.md",
-      "sha256": "9d528fbed56fb1b40a34015bbd16b818a4ccccae61e0ab667ad9436efc4ccafa"
+      "sha256": "43c5ef4c6367eb1349b07673fbd3b0bf6922d7c3a2eff18edc48c5c74499bf92"
     },
     {
       "path": "shared/external/api-patterns/SKILL.md",
@@ -353,7 +353,7 @@
     },
     {
       "path": "shared/external/backlog/SKILL.md",
-      "sha256": "abb3b1d9f0efa8413ea73fc969c22caeadfa8f02d0d9f5395259befccdcda7ea"
+      "sha256": "f48d35654410bb800ab477c87b7ce6db8e758671cbb733c36429d8435b7d250f"
     },
     {
       "path": "shared/external/callkit-voip/SKILL.md",
@@ -361,7 +361,7 @@
     },
     {
       "path": "shared/external/ci-cd-pipelines/SKILL.md",
-      "sha256": "8776746817fea8f67bd12354822f674473fdad7018078766e420cef724b086fc"
+      "sha256": "753a90d54c392d0a120c4e36ab34d7a43f9e0fe63609e65154c9c1da6d824763"
     },
     {
       "path": "shared/external/clean-code/SKILL.md",
@@ -373,15 +373,15 @@
     },
     {
       "path": "shared/external/compose-components/SKILL.md",
-      "sha256": "756e0c44643b0688295bd8b896f12dd37f7c30447b3e3a4e08223dfd74f9473e"
+      "sha256": "03ad58d5552b37480978462907539fe1070eeafce80a2a3c943d1c3880983f3f"
     },
     {
       "path": "shared/external/compose-navigation/SKILL.md",
-      "sha256": "2b2ca56d7f61f334cc9089483597453dd16b67378e2f8fa9b3c440fd89cf91e8"
+      "sha256": "5be0bc654b17eb1c81b44ca2eb5273be4e935f6f59043c54157041a0a18926b5"
     },
     {
       "path": "shared/external/compose-testing/SKILL.md",
-      "sha256": "002c9420e063defc5cea13e59a4146bfb4e96075f2e5acb19aaa14bd215c6564"
+      "sha256": "e20c1c3e281778f5a11bbed04d4d42e9ba1c23a857b32d34a98806ed695e2c50"
     },
     {
       "path": "shared/external/contacts-framework/SKILL.md",
@@ -413,7 +413,7 @@
     },
     {
       "path": "shared/external/council/SKILL.md",
-      "sha256": "3556c03e41605785e4dad4e450511043e9c399100cc470587021359bae66e837"
+      "sha256": "6d69ba7de8cbfa06f94f551601b5517c91350f6dd09901df68acf979d3803134"
     },
     {
       "path": "shared/external/cryptokit/SKILL.md",
@@ -421,11 +421,11 @@
     },
     {
       "path": "shared/external/css-modern/SKILL.md",
-      "sha256": "355a6bb67131dcf52cf51fc4fb015ada15705234f5ca5f03124f25cc916b0d4d"
+      "sha256": "911a7f371b24ef43790568e358a941f8ff67c8cb6fa57b5daa1a388964d03310"
     },
     {
       "path": "shared/external/database-patterns/SKILL.md",
-      "sha256": "948044e98af068c315cfc1649f6f7769767a0c43f5f2e3ce3b04c2715d94f98b"
+      "sha256": "1551a9a5d505fd99cb1a618cfe6d64ade566f2935f09fec6d986274f1ddba98b"
     },
     {
       "path": "shared/external/debugging-instruments/SKILL.md",
@@ -453,11 +453,11 @@
     },
     {
       "path": "shared/external/evidence-github/SKILL.md",
-      "sha256": "9cc24e73cb8b66a7495567f83df4bca932d90c1de4dbf3b97b1dd59378dbb75b"
+      "sha256": "cdcd157ecb3579b0a664716b4f6099a17d43361157c28124e44622afb5b1af68"
     },
     {
       "path": "shared/external/evidence-registry/SKILL.md",
-      "sha256": "97d4cceb1a8c52ae15597312c14c54d84b6b55ab9fb007e1a203492c4bf1b046"
+      "sha256": "139a98ede546d2ac60e71ffa0b571fda714d0f5c266e248b3e527265c340ae37"
     },
     {
       "path": "shared/external/fastapi-pro/SKILL.md",
@@ -473,7 +473,7 @@
     },
     {
       "path": "shared/external/gradle-kotlin-dsl/SKILL.md",
-      "sha256": "b0eb32ef4fece08d58e89eebb20e906646be9525ae86261f4c02dd8e4acfb9c3"
+      "sha256": "af7b1e30e2448f43b5100b2a935bbaadde86ccd490844c901736c9270f8cc3ce"
     },
     {
       "path": "shared/external/healthkit/SKILL.md",
@@ -521,11 +521,11 @@
     },
     {
       "path": "shared/external/html-semantic/SKILL.md",
-      "sha256": "00c19304fb6195069d8fd42fe2ead8aeb03e9d01845bc17df17100cd814c829a"
+      "sha256": "43e05d6bf99d59fda858cef3c8c4837ae17e91826ffd1cd517612300cafff739"
     },
     {
       "path": "shared/external/humanizer/SKILL.md",
-      "sha256": "febdbb9843f6e5606d5f5aa9faa556edbc7a5fc387fc85a80aaa831789ea0092"
+      "sha256": "25097784b1724423aebb35fcee60ba6c458a4ff5aa2bb7f45eccfc810a63a192"
     },
     {
       "path": "shared/external/ios-accessibility/SKILL.md",
@@ -533,7 +533,7 @@
     },
     {
       "path": "shared/external/ios-coding-standard/SKILL.md",
-      "sha256": "e70a537cf4dd26fd9537d85bd997eaff307b7b2c26ec7004e88aa82c945cd17f"
+      "sha256": "43a0e7d7c87b6abc9db15c38be5984e79e551bc5d7957394ad802ba50ea3b713"
     },
     {
       "path": "shared/external/ios-debugger-agent/SKILL.md",
@@ -545,7 +545,7 @@
     },
     {
       "path": "shared/external/ios-module-structure/SKILL.md",
-      "sha256": "3a79c225026be7aaf8302be0c9bdf3cce1d54ac445c8a5085b6845a4f26c4a83"
+      "sha256": "abb85b305ffeb1f3cd5015fe630311b22a6914c88c59b8d4b71691496235f7b9"
     },
     {
       "path": "shared/external/ios-networking/SKILL.md",
@@ -553,7 +553,7 @@
     },
     {
       "path": "shared/external/ios-security/SKILL.md",
-      "sha256": "691c1bcc74e7e6445a4786c6ce7e94e5706d8dea725423e68089d37e1cfc7dc4"
+      "sha256": "48924d4faea93fdf435851cbc77ba26cb33f3f8256954787af539f410f64d5c0"
     },
     {
       "path": "shared/external/ios-simulator/SKILL.md",
@@ -569,7 +569,7 @@
     },
     {
       "path": "shared/external/localization-reuse-map/SKILL.md",
-      "sha256": "26ace50f907bc0c25afc323387e79d2eeaacc998c93b50456a5dab2ddc146152"
+      "sha256": "565fa80ffa729f49cb4a54fb8f1da98397de5aaf7fb308753d261b5dc9f51f46"
     },
     {
       "path": "shared/external/macos-menubar-tuist-app/SKILL.md",
@@ -601,7 +601,7 @@
     },
     {
       "path": "shared/external/nextjs-app-router/SKILL.md",
-      "sha256": "6fa24c3362f2b84c0e57390aac7e3c9e9dc69e9a937d260feb55584e5f224731"
+      "sha256": "a6948eb7d1feb1940b222e671d092c8e56e105dc580f009143ea863f0130922e"
     },
     {
       "path": "shared/external/nodejs-backend-patterns/SKILL.md",
@@ -633,7 +633,7 @@
     },
     {
       "path": "shared/external/play-store-review/SKILL.md",
-      "sha256": "30694b29888502dfa3a18626732f5b590f810d871a8ca1ffed136369e362993d"
+      "sha256": "8cfe6ac9c1c078089b92252f1600917f77b01dba80ae7e55f2fd347c409f64e1"
     },
     {
       "path": "shared/external/push-notifications/SKILL.md",
@@ -641,11 +641,11 @@
     },
     {
       "path": "shared/external/python-patterns/SKILL.md",
-      "sha256": "0e7af701790a10dcde9ef2d23f9b4f13a2658b400b093c08c2fda0c7b91b3071"
+      "sha256": "debcbd749acabf8f947b2e0bd1ae52126fdb0263f347b32b69281e6811f2cf99"
     },
     {
       "path": "shared/external/react-best-practices/SKILL.md",
-      "sha256": "c563e28cd54a07301b69147ab421999f67145c8e3989eccc7c2a116506749c0d"
+      "sha256": "6a629cefd6ed3186fbd475df3eef3ffaa0ebeaa62eb6a30c0af5f99b53fe7950"
     },
     {
       "path": "shared/external/realitykit-ar/SKILL.md",
@@ -653,19 +653,19 @@
     },
     {
       "path": "shared/external/rest-api-design/SKILL.md",
-      "sha256": "97ff96b96ca400bdb0a45c66e825afa4fded9230349972c1a4c1a61690f473b1"
+      "sha256": "23b6f35b17680b0e42af6123f063140e3a853d2b7847d4445fe6ddbd0a48f5e1"
     },
     {
       "path": "shared/external/retrofit-networking/SKILL.md",
-      "sha256": "9550ba78f34440019fa030a74ba42f8402fa2c8d9858fc2c9d805f2bfe641bb3"
+      "sha256": "b3991cb24b790e6bc159c9082ff21c6a276ceb0e7516f53111ecb6c5dd4094f0"
     },
     {
       "path": "shared/external/room-database/SKILL.md",
-      "sha256": "0cb50a75676df1e3e5e3f68781d9d5bede06d4ae8156266dac41ad7ed94705fd"
+      "sha256": "45fe377469f1fb4036431194d3b525d3caaa79231808625f643468863c6e814a"
     },
     {
       "path": "shared/external/search-first/SKILL.md",
-      "sha256": "02310dc0325efe94cdb3d3c20ccb3f75558550f7798b71d1abcbfe8665d43eed"
+      "sha256": "c9d5ffb698bbfb76a89da6a35dfc0f1d72a31d2b4a0e9e9f3e027be7a8fddfde"
     },
     {
       "path": "shared/external/security-review/SKILL.md",
@@ -677,11 +677,11 @@
     },
     {
       "path": "shared/external/signal-community/SKILL.md",
-      "sha256": "7d1b3030b3c139932cf983a200c82500800a2fa0a837c955ccda2d4f9c1ee63f"
+      "sha256": "0660107c2bf0e65847e72708a196b672ae7b9469bd98ec70793c988351024298"
     },
     {
       "path": "shared/external/skill-creator/SKILL.md",
-      "sha256": "edba3e08babf6993090edc4b8f3309c43e5a786864d4267b46620fac5297f241"
+      "sha256": "f80c5f74dc285240d0213a4e6e0c178a9f38142f0eb7d6956d7c89c061009b71"
     },
     {
       "path": "shared/external/speech-recognition/SKILL.md",
@@ -813,11 +813,11 @@
     },
     {
       "path": "shared/external/tailwind-css/SKILL.md",
-      "sha256": "2b71f2cf0f82292cf0ff9459378ea32faf8bb36cfa9193e3d8451ce1bec7ed4e"
+      "sha256": "9eda0a871962f52e381781b95c948128626984a82ddbd47be53ea869cd250b7e"
     },
     {
       "path": "shared/external/testing-backend/SKILL.md",
-      "sha256": "5f4c8d5b7e630b640e737aa73bfd0912a9d395ad62004d067ad2b6fdadf5d6ef"
+      "sha256": "d3eea1c6d1e2a40a0b66bc6460194ee313e17fc2af8f75047030b7840c2db857"
     },
     {
       "path": "shared/external/tipkit/SKILL.md",
@@ -825,7 +825,7 @@
     },
     {
       "path": "shared/external/typescript-patterns/SKILL.md",
-      "sha256": "45aea58d2f405f584358a73a71aff12d92410f29c50f38d6e57a41b9fd70214c"
+      "sha256": "784d294aa6ba09ff29bc7ec0f106eb512a006e79c96a01ec92d1699bfa122077"
     },
     {
       "path": "shared/external/vision-framework/SKILL.md",
@@ -833,7 +833,7 @@
     },
     {
       "path": "shared/external/vue-composition/SKILL.md",
-      "sha256": "13468da149715aa2127a1b9fbcaa9a92fee5033107598a4e46b4635b0b11e349"
+      "sha256": "429115ba7c4fdecd134e9ea546840d6341312d348f359a8bf35690cd113c1201"
     },
     {
       "path": "shared/external/weatherkit/SKILL.md",
@@ -841,15 +841,15 @@
     },
     {
       "path": "shared/external/web-accessibility/SKILL.md",
-      "sha256": "9e7f6371f8bc691ba6a385385d0e3dd3c1e4ec94976cbe34adcc297db23852b5"
+      "sha256": "a1cd782292982a3c37fd8d1eedaae85f860886f492b2666b73735c6261025594"
     },
     {
       "path": "shared/external/web-performance/SKILL.md",
-      "sha256": "53ef0855f094f214dd57aa24bc20ff30e1f2d75860dd5b9530569d5963920e03"
+      "sha256": "b9983bb39f9a65daad5aca4fb97c88ecbd7c0639b39023dc5c7c6784c4c1c868"
     },
     {
       "path": "shared/external/web-testing/SKILL.md",
-      "sha256": "f5ba76d7bdd45b8f8a1e6953e3ede67e95cde29487ce4d63d8acda479e954119"
+      "sha256": "3120db537a687adfbf396e500f4e146880e4b1a00ab339f85ab526853c947447"
     },
     {
       "path": "shared/external/widgetkit/SKILL.md",

package/pipeline/skills/shared/README.md

@@ -7,7 +7,7 @@ Single source of truth for skills delivered to both Claude Code (`~/.claude/skil
 ## Directory layout
 
 - **`core/`**  -  64 `multi-agent*` orchestration skills that are pipeline-critical. Edits here are core-code changes.
-- **`external/`**  -  154 iOS / Android / generic skills imported from the upstream skill library. Mirrors of third-party guidance.
+- **`external/`**  -  154 iOS / Android / generic skills that ship into the stack plugins. Each names its origin in `metadata.source`: `multi-agent-pipeline` when written here, or the upstream and license a `NOTICE-*.md` in this directory covers.
 - Install destinations (ADR-0009): Claude Code gets NO local copy of `external/` - it loads those skills from the `multi-agent-plugins` marketplace, namespaced (`ai-<stack>-toolkit:<name>`); only the two compliance catalogs from `core/` land in `~/.claude/skills/`. Copilot CLI and Codex CLI receive a flat copy filtered to the enabled stacks. `external/` remains the single authoring source that `build-stack-plugins.mjs` publishes from.
 
 Source layout is logical grouping only  -  skill discovery at runtime is unchanged.

package/pipeline/skills/shared/external/agent-introspection-debugging/SKILL.md

@@ -7,6 +7,7 @@ description: |
   progress, tool calls keep erroring, or you are about to retry without a new
   hypothesis.
 metadata:
+  source: multi-agent-pipeline
   version: 1.0.0
 ---
 

package/pipeline/skills/shared/external/android-architecture/SKILL.md

@@ -1,6 +1,8 @@
 ---
 name: android-architecture
 description: "Design and implement Clean Architecture with multi-module structure on Android. Covers domain/data/presentation layers, Hilt dependency injection with @Module/@Provides/@Binds, UseCase pattern with operator invoke, Repository pattern with Kotlin Flow, and mapper pattern between layers. Use when structuring a new Android project, adding feature modules, setting up DI, or reviewing architecture compliance."
+metadata:
+  source: multi-agent-pipeline
 ---
 
 # Android Clean Architecture

package/pipeline/skills/shared/external/android-performance/SKILL.md

@@ -1,6 +1,8 @@
 ---
 name: android-performance
 description: "Optimize Android app performance with Baseline Profiles for startup, Compose stability annotations (@Stable, @Immutable, strong skipping), recomposition debugging (Layout Inspector, recomposition counts), R8 optimization, LeakCanary memory leak detection, Macrobenchmark startup tracing, Coil image loading best practices, and LazyColumn/LazyGrid key-based performance. Use when diagnosing slow startup, janky scrolling, excessive recomposition, memory leaks, or optimizing release builds."
+metadata:
+  source: multi-agent-pipeline
 ---
 
 # Android Performance

package/pipeline/skills/shared/external/android-security/SKILL.md

@@ -1,6 +1,8 @@
 ---
 name: android-security
 description: "Secure Android apps with ProGuard/R8 obfuscation, OkHttp certificate pinning, BiometricPrompt authentication, EncryptedSharedPreferences, Play Integrity API, root detection, secure network communication, and API key protection via local.properties and BuildConfig. Use when implementing security features, auditing app security, handling sensitive data, or preparing for production release."
+metadata:
+  source: multi-agent-pipeline
 ---
 
 # Android Security

package/pipeline/skills/shared/external/backlog/BACKLOG.md

@@ -1,6 +1,6 @@
 # Backlog
 
-Deferred-but-approved work, kept whole. Entries move `deferred` -> `ready` -> `in-progress` -> `done` and are never deleted. The full spec travels verbatim from when the job was deferred.
+Deferred-but-approved work, kept whole. Entries move `deferred` -> `ready` -> `in-progress` -> `done`. An entry leaves only when a re-audit finds its subject gone, or when it is done and its lesson lives in the skill or doc that owns that area. The full spec travels verbatim from when the job was deferred.
 
 ## Ready
 

package/pipeline/skills/shared/external/backlog/SKILL.md

@@ -1,54 +1,77 @@
 ---
 name: backlog
-description: "The engineering backlog registry for deferred-but-approved work: each deferred job lands here with its spec, origin and unblock condition. Use when the user says 'defer it', 'add it to the list', 'later' or 'not now', asks what is on the backlog, says 'pick up {id}', or completes an item. BACKLOG.md is the registry; entries move deferred, ready, in-progress, done, and a re-audit deletes rotted ones."
+description: "Registry and routine for approved but postponed engineering work: each item keeps its full spec, origin and unblock condition, and moves through deferred, ready, in-progress and done. Use when the user postpones work ('later', 'not now', 'put it on the list', 'backlog this'), asks what is on the backlog or still owed, works the backlog, picks up an item by id or the next one, finishes an item, or when a rename, a deleted subject or a doubted claim calls for a re-audit. Not for Jira or GitHub tickets, and never for summarising or rewriting a deferred spec."
 user-invocable: true
 argument-hint: [list | add | pick <id> | done <id> | re-audit]
 allowed-tools: Read, Grep, Glob, Edit, Write
 metadata:
   version: 1.0.0
+  source: multi-agent-pipeline
 ---
 
-# backlog - deferred work, kept whole
+# backlog - postponed work without context loss
 
-> **Layer:** workflow - the deterministic registry routine for deferred jobs.
-> **Bundled:** [BACKLOG.md](BACKLOG.md) - the registry. The heart of this skill.
-> **Iron rule:** moving a job onto this list is a MOVE, never a rewrite - the FULL spec
-> travels verbatim. A compressed one-liner is a loss; the point of the backlog is that
-> deferring costs nothing later. The registry stays honest in the other direction too:
-> entries are re-audited against live code, and an entry whose named types or premises
-> no longer exist is DELETED, never left readable as live.
+> **Layer:** workflow in practice: a fixed routine over one registry file.
+> **Registry:** [BACKLOG.md](BACKLOG.md), bundled with this skill. Every operation below reads or edits it.
 
-## When to load
+## Why it exists
+Work that gets postponed as a single line tends to die there. By the time someone returns to it, the reasoning, the constraints and the edge cases are gone, and the job is either re-derived from scratch or quietly dropped. This registry pays the cost of "later" once, at the moment of deferral, by storing the job exactly as it was understood then.
 
-- The user defers work: "defer it", "add it to the list", "later", "not now", "backlog this".
-- The user asks about it: "what's on the backlog", "what's on the list", "what's owed".
-- The user works it: "work the backlog", "pick up <id>", "do the next one".
-- An item completes: mark it done, and retire the record once what it taught has a home.
-- A staleness signal arrives (a rename, a deleted subject, a doubted claim): re-audit.
+## Two rules
+1. **Deferral moves the spec; it does not edit it.** The full description goes into the entry word for word. Shortening it to one line is data loss, even when the line reads well.
+2. **The registry must stay true.** Entries are checked against the live code. One whose named types, files or premises have disappeared is deleted, not kept around looking actionable.
 
-## The registry contract
+## Entry fields
+| Field | Content |
+|---|---|
+| `id` | short, stable kebab-case slug, assigned when the entry is added and never changed |
+| `title` | one line |
+| `state` | `deferred`, `ready`, `in-progress` or `done` |
+| `origin` | the task, PR, review finding or conversation that produced the job |
+| `spec` | the complete description, verbatim, as a block literal; never a summary |
+| `unblock` | the dependency, decision or date that makes it actionable |
+
+The file layout (sections Ready, Deferred, In progress, Done, and the entry template) is fixed in `BACKLOG.md`: each item is a heading with its id and title, followed by bullets for state, origin, unblock and spec.
 
-Every entry in `BACKLOG.md` carries, verbatim:
+## State machine
+`deferred` -> `ready` -> `in-progress` -> `done`. States only move forward.
 
-- **id** - short stable slug (`kebab-case`), assigned on add.
-- **title** - one line.
-- **state** - `deferred` -> `ready` -> `in-progress` -> `done`. Entries move forward; they leave the registry only by the two rules below (rot, or a re-homed done record), never by being quietly rewritten.
-- **origin** - where it came from (the task/PR/finding/conversation that spawned it).
-- **spec** - the FULL description, verbatim from when it was deferred. Not a summary.
-- **unblock** - the condition that makes it actionable (a dependency, a decision, a date). `deferred` items without an unblock condition are just `ready`.
+An entry marked `deferred` with no unblock condition is not waiting for anything, so it is `ready`.
 
-Prefer an append-only markdown table or section list in `BACKLOG.md`; never overwrite an entry's spec on a state change - only its `state` line moves.
+Storage is append-only in spirit: when the state changes, only the state line (and the section the entry sits under) changes. The spec is never overwritten.
 
 ## Operations
 
-| Command | Action |
-|---|---|
-| `list` | Show entries grouped by state (ready first, then deferred, then in-progress; done collapsed). |
-| `add` | Capture the deferred job with its full spec + origin + unblock condition. Assign an id. |
-| `pick <id>` | Move `ready`/`deferred` -> `in-progress`; surface the full spec so work resumes with zero context loss. |
-| `done <id>` | Move -> `done` with the evidence (PR/commit + date). The record RETIRES from the registry once what it taught is written into the skill or doc that owns it - git history is the archive of what was owed and delivered. A done entry kept past that point is a second place for the same truth to rot. |
-| `re-audit` | Verify every entry's named types, paths and claims against LIVE code (binary-safe: `LC_ALL=C grep -a`, so a repo with binary blobs does not silently return nothing). A subject that no longer exists deletes its entry; a changed fact restates it. **Numbers move by measurement, never by edit** - a count adjusted to match an impression reads as evidence and is worse than no count. |
+### `list`
+Group entries by state in the order ready, deferred, in-progress. Show done entries collapsed, as a count or a one-line list of ids.
+
+### `add`
+Take the complete spec as it stands, the origin and the unblock condition. Derive an id. Write the entry under the section that matches its state (`ready` when nothing blocks it).
+
+### `pick <id>`
+Find the entry, which must be `ready` or `deferred`. Change its state to `in-progress`, move it to that section, and print the full spec so the work can resume with nothing to reconstruct.
+
+### `done <id>`
+Set the state to `done` and record the evidence: the PR or commit, and the date. The record is temporary. Once the lesson it carries has been written into the skill or document that owns that area, delete the entry: git history keeps the original, and a done entry left in place becomes a second copy of the truth that drifts from the real one.
+
+### `re-audit`
+For each entry, check every type, path and factual claim it names against the live repository. Use a binary-safe search so repos that contain binary blobs do not make grep silently skip files:
+
+```bash
+LC_ALL=C grep -rIa --line-number '<TypeOrPath>' .
+```
+
+(`LC_ALL=C` avoids locale decoding failures; `-a` treats every file as text.) Then:
+- subject gone: delete the entry;
+- a fact changed: restate that fact in the entry;
+- a number in the entry: measure it again and write the measured value.
+
+## Leaving the registry
+An entry is removed for exactly two reasons: its subject rotted away (found by re-audit), or it is done and its lesson now lives in the owning skill or doc. Nothing leaves by being rewritten until it no longer says what it said.
 
-## Why keep it whole
+## Numbers
+A count in an entry changes only when it is measured again. Editing a number to match an impression makes it look like evidence when it is not.
 
-The failure mode this skill prevents: an agent defers a job with a one-line note, the surrounding context evaporates, and picking it up later means re-deriving the spec (or silently dropping it). Storing the full spec at defer-time makes deferral safe - the cost of "later" is paid once, up front, not lost.
+## Not for
+- Work items that belong in the team's issue tracker (Jira, GitHub issues): file them there.
+- Condensing, paraphrasing or "cleaning up" a deferred spec.

package/pipeline/skills/shared/external/ci-cd-pipelines/SKILL.md

@@ -2,6 +2,7 @@
 name: ci-cd-pipelines
 description: "CI/CD pipelines: GitHub Actions workflows, Docker multi-stage builds, environment management, secret management, deployment strategies. Use when setting up or fixing a build, test or deploy pipeline."
 metadata:
+  source: multi-agent-pipeline
   tags: [ci-cd, github-actions, docker, deployment, devops, backend]
   version: "2025.1"
 ---

package/pipeline/skills/shared/external/compose-components/SKILL.md

@@ -1,6 +1,8 @@
 ---
 name: compose-components
 description: "Build Material 3 UI components and custom composables with Jetpack Compose. Covers TopAppBar, Scaffold, BottomSheet, SnackbarHost, slot-based API patterns, MaterialTheme customization, dynamic color, custom color schemes, shape/typography/color token mapping, and modifier ordering best practices. Use when building Compose UI, creating custom components, setting up theming, or reviewing Compose code."
+metadata:
+  source: multi-agent-pipeline
 ---
 
 # Jetpack Compose Components