@mmerterden/multi-agent-pipeline 8.6.0 → 8.6.2

package/pipeline/skills/figma-common/figma-issue/SKILL.md

@@ -38,12 +38,12 @@ JIRA_ISSUE_TYPE = Task
 Jira token is stored in macOS Keychain under service name `JIRA_TOKEN`:
 
 ```bash
-JIRA_TOKEN=$(security find-generic-password -a "$USER" -s "JIRA_TOKEN" -w 2>/dev/null)
+JIRA_TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null)
 ```
 
 If not found, prompt the user to add it:
 ```bash
-security add-generic-password -a "$USER" -s "JIRA_TOKEN" -w "<PAT>"
+"$HOME/.claude/lib/credential-store.sh" set \1 \"\2\"
 ```
 
 ### Project Field IDs
@@ -540,7 +540,7 @@ Read the issue body and check the `### Jira Issue` section for a linked key.
 If a Jira key is found (not `_No response_`):
 
 ```bash
-JIRA_TOKEN=$(security find-generic-password -a "$USER" -s "JIRA_TOKEN" -w 2>/dev/null)
+JIRA_TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null)
 USERNAME=$(curl -s "${JIRA_BASE_URL}/rest/api/2/myself" \
   -H "Authorization: Bearer ${JIRA_TOKEN}" | python3 -c "import sys,json; print(json.load(sys.stdin)['name'])")
 
@@ -592,7 +592,7 @@ gh api graphql -f query='mutation { updateProjectV2ItemFieldValue(input: { proje
 ### STEP 3 — Update Jira Description with GitHub Link
 
 ```bash
-JIRA_TOKEN=$(security find-generic-password -a "$USER" -s "JIRA_TOKEN" -w 2>/dev/null)
+JIRA_TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null)
 
 # Get current Jira description
 JIRA_DESC=$(curl -s "${JIRA_BASE_URL}/rest/api/2/issue/<JIRA_KEY>?fields=description" \
@@ -739,7 +739,7 @@ Print as a table.
 - **Invalid phase**: Print valid options: `implementation`, `testing`, `code-connect`, `documentation`.
 - **Duplicate issue**: Print existing issue link and stop — do not create.
 - **GraphQL errors**: Print the error message from the API response.
-- **Jira token not found**: Prompt user to add to keychain: `security add-generic-password -a "$USER" -s "JIRA_TOKEN" -w "YOUR_PAT"`.
+- **Jira token not found**: Prompt user to add to keychain: `"$HOME/.claude/lib/credential-store.sh" set \1 \"\2\"`.
 - **Jira API error (401/403)**: Token expired or invalid — prompt user to update keychain.
 - **Jira API error (404)**: Wrong issue key — print error and continue.
 - **Jira VPN not reachable**: Print warning, skip Jira steps, continue with GitHub-only operations.

package/pipeline/skills/figma-common/figma-setup/SKILL.md

@@ -115,13 +115,13 @@ Scripts like `remote-mcp-fetch.py` need the MCP OAuth token to call remote MCP o
 #### 3b-a. Check if token already exists and works
 
 ```bash
-TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" -w 2>/dev/null) && [ -n "$TOKEN" ] && echo "TOKEN_EXISTS" || echo "TOKEN_MISSING"
+TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null) && [ -n "$TOKEN" ] && echo "TOKEN_EXISTS" || echo "TOKEN_MISSING"
 ```
 
 If TOKEN_EXISTS, verify it works:
 
 ```bash
-TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" -w 2>/dev/null) && curl -s -o /dev/null -w "%{http_code}" -X POST "https://mcp.figma.com/mcp" -H "Content-Type: application/json" -H "Accept: application/json, text/event-stream" -H "Authorization: Bearer $TOKEN" -d '{"jsonrpc":"2.0","method":"initialize","params":{"capabilities":{},"clientInfo":{"name":"setup-check","version":"1.0.0"},"protocolVersion":"2025-03-26"},"id":1}'
+TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null) && curl -s -o /dev/null -w "%{http_code}" -X POST "https://mcp.figma.com/mcp" -H "Content-Type: application/json" -H "Accept: application/json, text/event-stream" -H "Authorization: Bearer $TOKEN" -d '{"jsonrpc":"2.0","method":"initialize","params":{"capabilities":{},"clientInfo":{"name":"setup-check","version":"1.0.0"},"protocolVersion":"2025-03-26"},"id":1}'
 ```
 
 - `200` → PASS, token is valid
@@ -150,7 +150,7 @@ else:
 #### 3b-c. If extraction succeeded — save to keychain
 
 ```bash
-TOKEN="<extracted_token>" && security delete-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" >/dev/null 2>&1; security add-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" -w "$TOKEN" >/dev/null 2>&1 && echo "MCP_TOKEN_STORED" || echo "MCP_TOKEN_STORE_FAILED"
+TOKEN="<extracted_token>" && "$HOME/.claude/lib/credential-store.sh" set \1 \"\2\" >/dev/null 2>&1 && echo "MCP_TOKEN_STORED" || echo "MCP_TOKEN_STORE_FAILED"
 ```
 
 **IMPORTANT:** Do NOT echo the token in chat. Capture the python3 output into a variable directly:
@@ -161,7 +161,7 @@ import subprocess, os, re
 raw = subprocess.check_output(['security', 'find-generic-password', '-s', 'Claude Code-credentials', '-a', os.environ['USER'], '-w'], stderr=subprocess.DEVNULL).decode()
 match = re.search(r'\"figma-remote\|[^\\\"]+\":\{[^}]*\"accessToken\":\"([^\\\"]+)\"', raw)
 print(match.group(1) if match else '')
-" 2>/dev/null) && [ -n "$MCP_TOKEN" ] && security delete-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" >/dev/null 2>&1; security add-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" -w "$MCP_TOKEN" >/dev/null 2>&1 && echo "MCP_TOKEN_STORED" || echo "MCP_TOKEN_STORE_FAILED"
+" 2>/dev/null) && [ -n "$MCP_TOKEN" ] && "$HOME/.claude/lib/credential-store.sh" set \1 \"\2\" >/dev/null 2>&1 && echo "MCP_TOKEN_STORED" || echo "MCP_TOKEN_STORE_FAILED"
 ```
 
 Then verify (repeat 3b-a verification curl).
@@ -186,13 +186,13 @@ Record as `skipped`. Scripts will fall back to extracting at runtime (slower but
 #### 4a. Check if token already exists
 
 ```bash
-security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w >/dev/null 2>&1 && echo "TOKEN_EXISTS" || echo "TOKEN_MISSING"
+"$HOME/.claude/lib/credential-store.sh" get \1 >/dev/null 2>&1 && echo "TOKEN_EXISTS" || echo "TOKEN_MISSING"
 ```
 
 #### 4b. If TOKEN_EXISTS — verify it works
 
 ```bash
-curl -s -o /dev/null -w "%{http_code}" -H "X-Figma-Token: $(security find-generic-password -a "$USER" -s 'FIGMA_ACCESS_TOKEN' -w 2>/dev/null)" "https://api.figma.com/v1/me"
+curl -s -o /dev/null -w "%{http_code}" -H "X-Figma-Token: $("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null)" "https://api.figma.com/v1/me"
 ```
 
 - `200` → PASS, token is valid
@@ -215,7 +215,7 @@ Ask: "Confirm when the token is copied to your clipboard."
 After user confirms, run this SINGLE command:
 
 ```bash
-security delete-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" >/dev/null 2>&1; security add-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w "$(pbpaste)" >/dev/null 2>&1 && echo "TOKEN_STORED" || echo "TOKEN_STORE_FAILED"
+"$HOME/.claude/lib/credential-store.sh" set \1 \"\2\" >/dev/null 2>&1 && echo "TOKEN_STORED" || echo "TOKEN_STORE_FAILED"
 ```
 
 Then immediately clear clipboard:
@@ -231,7 +231,7 @@ Then verify (repeat 4b). If still failing → HALT.
 ### CHECK 5: Figma API User
 
 ```bash
-security find-generic-password -a "$USER" -s "FIGMA_API_USER" -w >/dev/null 2>&1 && echo "USER_EXISTS" || echo "USER_MISSING"
+"$HOME/.claude/lib/credential-store.sh" get \1 >/dev/null 2>&1 && echo "USER_EXISTS" || echo "USER_MISSING"
 ```
 
 **If USER_MISSING:**
@@ -241,7 +241,7 @@ Ask: "What is your Figma account email address?"
 After user provides email:
 
 ```bash
-security delete-generic-password -a "$USER" -s "FIGMA_API_USER" >/dev/null 2>&1; security add-generic-password -a "$USER" -s "FIGMA_API_USER" -w "<EMAIL>" >/dev/null 2>&1 && echo "USER_STORED" || echo "USER_STORE_FAILED"
+"$HOME/.claude/lib/credential-store.sh" set \1 \"\2\" >/dev/null 2>&1 && echo "USER_STORED" || echo "USER_STORE_FAILED"
 ```
 
 ---
@@ -330,14 +330,14 @@ If `INSUFFICIENT_SCOPES` error mentioning `project`:
 ### CHECK 9: Jira Token
 
 ```bash
-security find-generic-password -a "$USER" -s "JIRA_TOKEN" -w >/dev/null 2>&1 && echo "TOKEN_EXISTS" || echo "TOKEN_MISSING"
+"$HOME/.claude/lib/credential-store.sh" get \1 >/dev/null 2>&1 && echo "TOKEN_EXISTS" || echo "TOKEN_MISSING"
 ```
 
 #### 9a. If TOKEN_EXISTS — verify
 
 ```bash
 curl -s -o /dev/null -w "%{http_code}" "{jira.baseUrl}/rest/api/2/myself" \
-  -H "Authorization: Bearer $(security find-generic-password -a '$USER' -s 'JIRA_TOKEN' -w 2>/dev/null)"
+  -H "Authorization: Bearer $("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null)"
 ```
 
 - `200` → PASS
@@ -357,7 +357,7 @@ Tell the user:
 Ask: "Confirm when token is copied to clipboard."
 
 ```bash
-security delete-generic-password -a "$USER" -s "JIRA_TOKEN" >/dev/null 2>&1; security add-generic-password -a "$USER" -s "JIRA_TOKEN" -w "$(pbpaste)" >/dev/null 2>&1 && echo "TOKEN_STORED" || echo "TOKEN_STORE_FAILED"
+"$HOME/.claude/lib/credential-store.sh" set \1 \"\2\" >/dev/null 2>&1 && echo "TOKEN_STORED" || echo "TOKEN_STORE_FAILED"
 ```
 
 Clear clipboard:
@@ -372,7 +372,7 @@ Verify (repeat 9a). If VPN not connected, accept as `pass (stored, not verified)
 ### CHECK 10: Confluence Token
 
 ```bash
-security find-generic-password -a "$USER" -s "CONFLUENCE_TOKEN" -w >/dev/null 2>&1 && echo "TOKEN_EXISTS" || echo "TOKEN_MISSING"
+"$HOME/.claude/lib/credential-store.sh" get \1 >/dev/null 2>&1 && echo "TOKEN_EXISTS" || echo "TOKEN_MISSING"
 ```
 
 Same flow as CHECK 9 but for Confluence:
@@ -419,7 +419,7 @@ Looks up the Figma remote MCP OAuth token (`figu_` prefix) and prints it for the
 1. **Keychain `FIGMA_MCP_TOKEN`** — the dedicated keychain entry saved by `save-token` or CHECK 3b.
 
 ```bash
-security find-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" -w 2>/dev/null
+"$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null
 ```
 
 2. **Claude Code credentials** — if not in dedicated keychain, extract from Claude Code's credential store.
@@ -484,14 +484,14 @@ Then clear clipboard: `pbcopy < /dev/null`
 3. **Save to keychain:**
 
 ```bash
-security delete-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" >/dev/null 2>&1
-security add-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" -w "$MCP_TOKEN" >/dev/null 2>&1 && echo "TOKEN_SAVED" || echo "TOKEN_SAVE_FAILED"
+"$HOME/.claude/lib/credential-store.sh" delete \1 >/dev/null 2>&1
+"$HOME/.claude/lib/credential-store.sh" set \1 \"\2\" >/dev/null 2>&1 && echo "TOKEN_SAVED" || echo "TOKEN_SAVE_FAILED"
 ```
 
 4. **Verify** the saved token works:
 
 ```bash
-TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_MCP_TOKEN" -w 2>/dev/null) && curl -s -o /dev/null -w "%{http_code}" -X POST "https://mcp.figma.com/mcp" -H "Content-Type: application/json" -H "Accept: application/json, text/event-stream" -H "Authorization: Bearer $TOKEN" -d '{"jsonrpc":"2.0","method":"initialize","params":{"capabilities":{},"clientInfo":{"name":"setup-check","version":"1.0.0"},"protocolVersion":"2025-03-26"},"id":1}'
+TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null) && curl -s -o /dev/null -w "%{http_code}" -X POST "https://mcp.figma.com/mcp" -H "Content-Type: application/json" -H "Accept: application/json, text/event-stream" -H "Authorization: Bearer $TOKEN" -d '{"jsonrpc":"2.0","method":"initialize","params":{"capabilities":{},"clientInfo":{"name":"setup-check","version":"1.0.0"},"protocolVersion":"2025-03-26"},"id":1}'
 ```
 
 - `200` → print "Token saved and verified."

package/pipeline/skills/figma-common/figma-validate/SKILL.md

@@ -557,7 +557,7 @@ These are logged but do NOT affect the VALID/INVALID verdict:
 | Registry file not found | Show command: `cd ${COMMON_PATH} && swift build --product FigmaRegistryUtility && .build/debug/FigmaRegistryUtility update` |
 | FigmaRegistryUtility not built | Show: `cd ${COMMON_PATH} && swift build --product FigmaRegistryUtility` |
 | Invalid URL format | Ask user for correct URL via AskUserQuestion |
-| Figma token not found | Show: `security add-generic-password -s "FIGMA_ACCESS_TOKEN" -w "<YOUR_TOKEN>"` |
+| Figma token not found | Show: `"$HOME/.claude/lib/credential-store.sh" set FIGMA_ACCESS_TOKEN "<YOUR_TOKEN>"` |
 
 ---
 

package/pipeline/skills/figma-ios/figma-to-component/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: figma
+name: figma-to-component
 description: Figma-to-SwiftUI component implementation workflow. Takes a Figma URL and produces a production-ready SwiftUI component through 8 phases — data gathering, analysis, code generation, testing, Code Connect, and documentation.
 user-invocable: true
 argument-hint: <figma-url> | phase-<N> | status

package/pipeline/skills/figma-ios/figma-to-component/phases/phase-6-code-connect.md

@@ -46,7 +46,7 @@ Requires Swift 6.0+ (Xcode 16.0+). Lower version → HALT.
 ### 3. Verify Token
 
 ```bash
-TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w 2>/dev/null) && echo "OK" || echo "MISSING"
+TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null) && echo "OK" || echo "MISSING"
 ```
 
 | Result | Action |
@@ -57,7 +57,7 @@ TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w 2>/
 **CRITICAL — Token prefix check:**
 
 ```bash
-TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w 2>/dev/null)
+TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1 2>/dev/null)
 if [[ "$TOKEN" == figd_* ]]; then
   echo "VALID_PAT"
 elif [[ "$TOKEN" == figu_* ]]; then
@@ -70,7 +70,7 @@ fi
 | Result | Action |
 |--------|--------|
 | `VALID_PAT` | Proceed — this is a Figma Personal Access Token |
-| `WRONG_TOKEN_TYPE` | **HALT** — `figu_` prefix = MCP OAuth token. This token does NOT work with Code Connect CLI (returns 403). The `FIGMA_ACCESS_TOKEN` keychain entry contains an MCP token instead of a PAT. User must save a valid PAT: `security add-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w "<figd_...token>"` |
+| `WRONG_TOKEN_TYPE` | **HALT** — `figu_` prefix = MCP OAuth token. This token does NOT work with Code Connect CLI (returns 403). The `FIGMA_ACCESS_TOKEN` keychain entry contains an MCP token instead of a PAT. User must save a valid PAT: `"$HOME/.claude/lib/credential-store.sh" set \1 \"\2\"` |
 | `UNKNOWN_TOKEN` | Proceed with caution, verify publish output for 403 errors |
 
 **Do NOT use `FIGMA_MCP_TOKEN`** for Code Connect. MCP OAuth tokens (`figu_*`) lack the scopes needed by the Code Connect REST API.
@@ -314,7 +314,7 @@ bash .instructions/figma/figma-to-swiftui/scripts/validate-phase6.sh \
 ## GATE 4: VALIDATE
 
 ```bash
-export FIGMA_ACCESS_TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w)
+export FIGMA_ACCESS_TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1)
 figma connect parse
 ```
 
@@ -352,7 +352,7 @@ USER_ACTION_REQUIRED: Options:
 ### 5.1 Set Token
 
 ```bash
-export FIGMA_ACCESS_TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w)
+export FIGMA_ACCESS_TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1)
 ```
 
 ### 5.2 Publish via Wrapper Script

package/pipeline/skills/figma-ios/figma-to-component/reference/code-connect.md

@@ -474,7 +474,7 @@ Auth: set `FIGMA_ACCESS_TOKEN` env var, or use `--token=YOUR_TOKEN` flag.
 
 Keychain retrieve:
 ```bash
-export FIGMA_ACCESS_TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w)
+export FIGMA_ACCESS_TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1)
 ```
 
 All commands work with npx: `npx @figma/code-connect@latest connect <command>`

package/pipeline/skills/figma-ios/figma-to-component/reference/rest-api-script.md

@@ -8,7 +8,7 @@ How the Phase 1 script (`scripts/phase1-gather.py`) uses the Figma REST API for
 
 ```bash
 # Token stored in macOS Keychain by /figma-setup (CHECK 4)
-TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w)
+TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1)
 ```
 
 ```python

package/pipeline/skills/figma-ios/figma-to-component/reference/tools.md

@@ -142,7 +142,7 @@ Header: X-Figma-Token: figd_your_token_here
 
 **Retrieve token from macOS Keychain:**
 ```bash
-export TOKEN=$(security find-generic-password -a "$USER" -s "FIGMA_ACCESS_TOKEN" -w)
+export TOKEN=$("$HOME/.claude/lib/credential-store.sh" get \1)
 curl -H "X-Figma-Token: $TOKEN" "https://api.figma.com/v1/..."
 ```
 

package/pipeline/skills/figma-ios/figma-to-component/scripts/phase1-gather.py

@@ -1100,7 +1100,7 @@ def main():
             ).decode().strip()
         except (subprocess.CalledProcessError, KeyError):
             halt("PRE_CHECK", "FIGMA_ACCESS_TOKEN not found", [], [],
-                 "Pass --figma-token or: security add-generic-password -a $USER -s FIGMA_ACCESS_TOKEN -w <token>")
+                 "Pass --figma-token or: "$HOME/.claude/lib/credential-store.sh" set \1 \2
 
     # Resolve MCP OAuth token (for remote MCP)
     MCP_TOKEN = get_mcp_token(args.mcp_token)

package/pipeline/skills/shared/core/multi-agent-issue/SKILL.md

@@ -19,7 +19,7 @@ Unassigned GitHub issue'ları interactive olarak listele, seçtir ve pipeline'a
    - `my-figma-app` → `my-org/my-figma-app`
    - Başka → kullanıcıya repo sor
 
-2. **gh auth switch** — İş reposu ise `M-ERDEN3_tkgithub`'a geç
+2. **gh auth switch** — İş reposu ise `prefs.global.accounts[]` içindeki work account label'ına geç (`gh auth switch --user {work-label}`)
 
 3. **Issue'ları çek** — `gh issue list --state open --assignee "" --json number,title,labels --limit 50`
    - `implemented` veya `in progress` label'lı olanları filtrele

package/pipeline/scripts/.last-figma-sync-plan.json

@@ -1,23 +0,0 @@
-{
-  "source": { "path": "/Users/M_ERDEN3/turkish-airlines-ios-figma", "branch": "develop", "commit": "6702673562d797e5bb77364922f211a4b5d5c0ae", "lastCommit": "cd0cde2f25abbc2524f3f20407d8c0d9ff6c2245" },
-  "summary": { "changedSkills": 12 },
-  "changes": [
-    { "upstream": "figma-cli-iterate", "local": "figma-cli-iterate", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-cli-lean-iterate", "local": "figma-cli-lean-iterate", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-form-integration", "local": "figma-form-integration", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-issue", "local": "figma-issue", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-iterate", "local": "figma-iterate", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-iteration-commit", "local": "figma-iteration-commit", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-to-swift-ui-implement", "local": "figma-component-implement", "tree": "figma-ios", "renamed": true, "overlaySkip": true },
-    { "upstream": "figma-to-swift-ui-start", "local": "figma-component-start", "tree": "figma-common", "renamed": true, "overlaySkip": false },
-    { "upstream": "figma-to-swiftui", "local": "figma-to-component", "tree": "figma-ios", "renamed": true, "overlaySkip": false },
-    { "upstream": "figma-ui-patterns", "local": "figma-ui-patterns", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "performance-swiftui", "local": "performance-swiftui", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "performance-tour", "local": "performance-tour", "tree": "figma-common", "renamed": false, "overlaySkip": false }
-  ],
-  "postActions": [
-    "run `npm run test:smoke` — all 28 suites must stay green",
-    "review figma-ios/REVIEW_CHECKLIST.md for skills still WIP",
-    "commit with \"chore(sync): upstream @ 6702673562d797e5bb77364922f211a4b5d5c0ae\""
-  ]
-}