@mmerterden/multi-agent-pipeline 8.6.0

package/pipeline/schemas/prefs.schema.json

@@ -0,0 +1,1137 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/mmerterden/multi-agent-pipeline/pipeline/schemas/prefs.schema.json",
+  "title": "Multi-Agent Pipeline \u2014 multi-agent-preferences.json",
+  "description": "User-level preferences. Written to $HOME/.claude/multi-agent-preferences.json. Never committed. Never synced to the open-source repo \u2014 may contain personal data.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "global",
+    "projects"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "type": "string",
+      "enum": [
+        "2.0.0",
+        "2.1.0",
+        "2.2.0",
+        "2.3.0"
+      ],
+      "description": "v2.0.0: pre-v3.7. v2.1.0: v3.7+ adds identities[].servicePatMap, platformIdentityRouting, recentGroups, recentBranches, serviceStatus, settings, expanded keychainMapping. v2.2.0: v6.0.0 formalizes v5.7 / v5.8 additions (reportChannels, reportContent with technicalAnalysis, wikiScope, autopilotReportTimeoutSeconds) that had been running as 2.1.0 sub-migrations without a proper version bump."
+    },
+    "global": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "identities": {
+          "type": "array",
+          "description": "Git identities the user can pick from in Phase 0. v2.1.0+: each identity may own per-service PAT keys via servicePatMap.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "name",
+              "email"
+            ],
+            "properties": {
+              "name": {
+                "type": "string"
+              },
+              "email": {
+                "type": "string",
+                "format": "email"
+              },
+              "username": {
+                "type": "string",
+                "description": "SCM username (optional)."
+              },
+              "isDefault": {
+                "type": "boolean"
+              },
+              "servicePatMap": {
+                "type": "object",
+                "additionalProperties": false,
+                "description": "v2.1.0+. Maps a service name to the Keychain key name this identity owns for that service. Enables cross-identity isolation \u2014 corporate identity's Jira PAT is not accidentally used for personal repos.",
+                "properties": {
+                  "jira": {
+                    "type": "string"
+                  },
+                  "bitbucket": {
+                    "type": "string"
+                  },
+                  "github": {
+                    "type": "string"
+                  },
+                  "confluence": {
+                    "type": "string"
+                  },
+                  "figma": {
+                    "type": "string"
+                  },
+                  "figma_mcp": {
+                    "type": "string"
+                  },
+                  "firebase": {
+                    "type": "string",
+                    "description": "Firebase JSON (base64-encoded). project_id is parsed from the decoded JSON \u2014 no separate firebase_project entry."
+                  },
+                  "fortify": {
+                    "type": "string"
+                  },
+                  "jenkins": {
+                    "type": "string"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "gitIdentities": {
+          "type": "array",
+          "deprecated": true,
+          "description": "DEPRECATED in v2.1.0 \u2014 renamed to 'identities'. Migration script converts automatically. Kept in schema temporarily for migration compatibility.",
+          "items": {
+            "type": "object",
+            "additionalProperties": true
+          }
+        },
+        "keychainMapping": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Maps logical token names to actual Keychain item names. Pipeline looks up tokens via `security find-generic-password -s <mapped-name>` (or `pipeline/lib/credential-store.sh get` cross-platform). 12 services covered: jira, bitbucket, bitbucket_token, bitbucket_user, github, confluence, figma, figma_mcp, fortify, firebase, jenkins, npm.",
+          "properties": {
+            "jira": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "bitbucket": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Legacy alias for bitbucket_token."
+            },
+            "bitbucket_token": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "bitbucket_user": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "github": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "confluence": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "figma": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "figma_mcp": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "fortify": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "firebase": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Firebase JSON (base64-encoded). project_id is parsed from the decoded JSON."
+            },
+            "jenkins": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "npm": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "NPM registry token (npm.pkg.github.com or npmjs.com). Used by package publish flow."
+            }
+          }
+        },
+        "platformIdentityRouting": {
+          "type": "object",
+          "description": "v2.1.0+. Maps repo URL glob patterns to identity names. Used in Phase 0 to auto-select git identity + PAT based on repo origin. Prevents corporate identity leaking into personal repos and vice versa.",
+          "additionalProperties": {
+            "type": "string",
+            "description": "An identity name present in identities[]."
+          },
+          "examples": [
+            {
+              "bitbucket.company.com/*": "work",
+              "github.com/mmerterden/*": "personal"
+            }
+          ]
+        },
+        "recentProjects": {
+          "type": "array",
+          "description": "v2.1.0+ structured form. Last-used-first LRU of project slugs.",
+          "items": {
+            "oneOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                  "path"
+                ],
+                "properties": {
+                  "path": {
+                    "type": "string"
+                  },
+                  "label": {
+                    "type": "string"
+                  },
+                  "count": {
+                    "type": "integer",
+                    "minimum": 0
+                  },
+                  "lastUsed": {
+                    "type": "string",
+                    "format": "date-time"
+                  }
+                }
+              }
+            ]
+          },
+          "maxItems": 20
+        },
+        "recentBranches": {
+          "type": "object",
+          "description": "v2.1.0+. Per-project recent branch LRU. Keys are project paths or slugs. TTL 15 days (settings.branchTtlDays).",
+          "additionalProperties": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "branch"
+              ],
+              "properties": {
+                "branch": {
+                  "type": "string"
+                },
+                "count": {
+                  "type": "integer",
+                  "minimum": 0
+                },
+                "lastUsed": {
+                  "type": "string",
+                  "format": "date-time"
+                }
+              }
+            },
+            "maxItems": 10
+          }
+        },
+        "recentGroups": {
+          "type": "array",
+          "description": "v2.1.0+. LRU of multi-repo selection groups. Each group is a set of repo paths chosen together for multi-repo tasks. Max 10.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "repos"
+            ],
+            "properties": {
+              "label": {
+                "type": "string",
+                "description": "Optional human-readable name."
+              },
+              "repos": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                },
+                "minItems": 2,
+                "maxItems": 10
+              },
+              "count": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "lastUsed": {
+                "type": "string",
+                "format": "date-time"
+              }
+            }
+          },
+          "maxItems": 10
+        },
+        "multiRepoIntegrationHosts": {
+          "type": "array",
+          "description": "v5.6.0+. Learn-once registry of host projects that build together with a multi-repo combo (codegen producer \u2192 consumer + host integration project). Pipeline checks this registry in Phase 6 before commit; on match, auto-runs the host build. On miss for a \u22652-repo task, prompts the user once and persists the answer. See refs/multi-repo-integration-build.md for the full contract.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "repoSet"
+            ],
+            "properties": {
+              "repoSet": {
+                "type": "array",
+                "description": "Sorted array of repo names (just the basenames, not full paths) that trigger this host build when touched together.",
+                "items": {
+                  "type": "string"
+                },
+                "minItems": 2
+              },
+              "noHost": {
+                "type": "boolean",
+                "description": "True if the user explicitly said this combo has no host project. Presence of this field with true skips the build step entirely; other fields may be omitted."
+              },
+              "hostPath": {
+                "type": "string",
+                "description": "Absolute path to the host project that integrates the repoSet via submodules or package dependencies."
+              },
+              "platform": {
+                "type": "string",
+                "enum": [
+                  "ios",
+                  "android",
+                  "mixed"
+                ]
+              },
+              "hostScheme": {
+                "type": "string",
+                "description": "iOS: xcodebuild scheme. Android: gradle module."
+              },
+              "submodulePaths": {
+                "type": "array",
+                "description": "Relative submodule paths inside hostPath that must be refreshed before building.",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "resolveCommand": {
+                "type": "string",
+                "description": "Shell command run inside hostPath to flush package-manager caches (e.g. xcodebuild -resolvePackageDependencies)."
+              },
+              "buildCommand": {
+                "type": "string",
+                "description": "Shell command run inside hostPath to build the integration scheme/module. Pipeline greps stderr for 'error:' / 'FAILURE:' lines."
+              },
+              "lastUsed": {
+                "type": "string",
+                "format": "date-time"
+              },
+              "count": {
+                "type": "integer",
+                "minimum": 0,
+                "description": "How many times this entry has fired. Used by autopilot to decide confidence level."
+              },
+              "lastResult": {
+                "type": "string",
+                "enum": [
+                  "success",
+                  "failed",
+                  "skipped"
+                ]
+              }
+            }
+          },
+          "maxItems": 20
+        },
+        "serviceStatus": {
+          "type": "object",
+          "description": "v2.1.0+. Ephemeral per-service reachability cache. TTL 5 minutes (settings.serviceStatusCacheSeconds). Each service is independent \u2014 Jira may be reachable while Bitbucket is not.",
+          "additionalProperties": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "ok",
+              "checkedAt"
+            ],
+            "properties": {
+              "ok": {
+                "type": "boolean"
+              },
+              "checkedAt": {
+                "type": "string",
+                "format": "date-time"
+              },
+              "error": {
+                "type": "string",
+                "description": "Optional last-error message if ok=false."
+              }
+            }
+          }
+        },
+        "settings": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v2.1.0+. Tunable behavior knobs. Defaults are used when missing.",
+          "properties": {
+            "branchTtlDays": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 365,
+              "default": 15,
+              "description": "How many days a branch stays visible in recentBranches picker before being filtered."
+            },
+            "pushRetryMax": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 20,
+              "default": 5,
+              "description": "Phase 6 push-must-succeed rebase-retry count before prompting user."
+            },
+            "buildRetryMax": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 10,
+              "default": 3,
+              "description": "Phase 3 build retry count before prompting user."
+            },
+            "serviceStatusCacheSeconds": {
+              "type": "integer",
+              "minimum": 60,
+              "maximum": 3600,
+              "default": 300,
+              "description": "Per-service reachability cache TTL (seconds)."
+            },
+            "repoScanDays": {
+              "type": "integer",
+              "minimum": 7,
+              "maximum": 365,
+              "default": 90,
+              "description": "Bitbucket/GitHub API repo-discovery filter: show repos active in the last N days."
+            },
+            "identityRoutingEnabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "When true, Phase 0 uses platformIdentityRouting to auto-select identity. When false, shows the identity picker."
+            },
+            "multiRepoEnabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "When true, Phase 0 project picker allows multi-select. When false, single-select only."
+            },
+            "pushMustSucceed": {
+              "type": "boolean",
+              "default": true,
+              "description": "Phase 6 policy. When true, commit + push with rebase-retry up to pushRetryMax. When false, single push attempt, pause on fail."
+            }
+          }
+        },
+        "defaultJiraKey": {
+          "type": "string",
+          "description": "Default Jira project key used for placeholder replacement."
+        },
+        "hosts": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Corporate service hosts used by Jira / Confluence / Bitbucket / email-domain placeholders. Collected inline during Token Save Flow (Step 3.5) when a hosted-service token is added for the first time. Per-user, never committed \u2014 lives in ~/.claude/multi-agent-preferences.json only.",
+          "properties": {
+            "jira": {
+              "type": "string",
+              "description": "Jira host without scheme, e.g. jira.example.com. Resolves {JIRA_HOST}."
+            },
+            "confluence": {
+              "type": "string",
+              "description": "Confluence host without scheme, e.g. confluence.example.com. Resolves {CONFLUENCE_HOST}."
+            },
+            "bitbucket": {
+              "type": "string",
+              "description": "Bitbucket Server host without scheme, e.g. bitbucket.example.com. Resolves {BITBUCKET_HOST}."
+            },
+            "fortify": {
+              "type": "string",
+              "description": "Fortify SSC host without scheme, e.g. ssc.example.com. Used by Phase 0 Step 1b URL enrichment to validate pasted Fortify URLs and for direct SSC REST API calls. Resolves {FORTIFY_HOST}."
+            },
+            "corpDomain": {
+              "type": "string",
+              "description": "Corporate email / cookie domain, e.g. example.com. Resolves {CORP_DOMAIN}."
+            }
+          }
+        },
+        "reportChannels": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v5.7+ \u2014 Phase 7 / /multi-agent:channels kanal se\u00e7imi default'lar\u0131. Multi-select men\u00fcde tick'li gelecek kanallar. Her kanal ba\u011f\u0131ms\u0131z boolean. Autopilot Phase 7'de ALWAYS pauses (30-min timeout) \u2014 bu de\u011ferler sadece men\u00fcn\u00fcn \u00f6nceden se\u00e7ili halini belirler.",
+          "properties": {
+            "pr": {
+              "type": "boolean",
+              "default": true,
+              "description": "PR description update (replace/append). Default ON \u2014 en yayg\u0131n kanal."
+            },
+            "jira": {
+              "type": "boolean",
+              "default": true,
+              "description": "Jira comment on linked issue. Default ON \u2014 task'a jiraId varsa tick'li gelir."
+            },
+            "confluence": {
+              "type": "boolean",
+              "default": false,
+              "description": "Confluence page creation. Default OFF \u2014 bir kez parent page se\u00e7ince LRU'dan \u00f6ner."
+            },
+            "wiki": {
+              "type": "boolean",
+              "default": false,
+              "description": "Component wiki pages (Case A scope multi-select). Default OFF \u2014 taskType=component + figmaConfig.wiki.enabled gerekli, yoksa men\u00fcde greyed out."
+            }
+          },
+          "default": {
+            "pr": true,
+            "jira": true,
+            "confluence": false,
+            "wiki": false
+          }
+        },
+        "reportContent": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v5.7+ \u2014 Phase 7 / /multi-agent:channels i\u00e7erik se\u00e7imi default'lar\u0131. Multi-select men\u00fcde tick'li gelecek content source'lar\u0131.",
+          "properties": {
+            "normalAnalysis": {
+              "type": "boolean",
+              "default": true,
+              "description": "Phase 1+2+4 pipeline log'undan impact summary + risks + architectural decisions (y\u00fcksek seviye). Greyed out post-hoc \u00e7a\u011fr\u0131da pipeline log yoksa."
+            },
+            "technicalAnalysis": {
+              "type": "boolean",
+              "default": false,
+              "description": "Changes (de\u011fi\u015fen dosyalar gruplan\u0131p ne/neden), Architecture (structural decisions), Dependencies (yeni import/framework/paket). PR body'deki 'Technical Details' b\u00f6l\u00fcm\u00fcn\u00fcn \u00f6zeti; user'\u0131n kanal se\u00e7imi PR i\u00e7ermedi\u011fi durumlarda (\u00f6r. sadece Jira/Confluence) teknik i\u00e7erik aktarmak istiyorsa devreye girer. Source: Phase 2 planning + Phase 3 dev log + PR diff stat."
+            },
+            "testScenarios": {
+              "type": "boolean",
+              "default": true,
+              "description": "Precondition / steps / expected tablosu (4-8 sat\u0131r, user perspective). Pipeline log source."
+            },
+            "autoDiff": {
+              "type": "boolean",
+              "default": false,
+              "description": "PR diff'ten auto-generate \u00f6zet (eski enrich behavior \u2014 root cause / solution / changed files / test scenarios). PR linked de\u011filse greyed out."
+            },
+            "manualNote": {
+              "type": "boolean",
+              "default": false,
+              "description": "Serbest metin paragraf (--message / --message-file). Her durumda se\u00e7ilebilir."
+            },
+            "costSummary": {
+              "type": "boolean",
+              "default": false,
+              "description": "v6.1.0+ \u2014 Per-phase token cost summary (phase name, tokens_in, tokens_out, est. USD). Source: phase-tracker.sh token tallies + optional OTel spans (MULTI_AGENT_OTEL_SPANS=1). Greyed out if tracker has no token data for the task. Opt-in \u2014 off by default so baseline PR body stays unchanged."
+            },
+            "workSummary": {
+              "type": "boolean",
+              "default": false,
+              "description": "v7.1.0+ \u2014 Executive 'Work Done' summary block. Distills the whole pipeline run into a single-screen section: task + branch + base + PR number, scope delivered (\u2705/\u23f3 per Phase 2 task), changed files with +/- counts (capped at 20 rows), review outcome (accepted/deferred/rejected counts + approved flag), and a one-line phase tick strip (0 Init \u2705 \u00b7 1 Analysis \u2705 \u00b7 \u2026). Source: `agent-state.json` + `phase-tracker.json` + `git diff --numstat` between `baseBranch`\u2026HEAD. Consumed by `render-work-summary.sh`. Greyed out if no state file exists for the task. Opt-in \u2014 off by default so baseline PR body stays unchanged."
+            }
+          },
+          "default": {
+            "normalAnalysis": true,
+            "technicalAnalysis": false,
+            "testScenarios": true,
+            "autoDiff": false,
+            "manualNote": false,
+            "costSummary": false,
+            "workSummary": false
+          }
+        },
+        "autopilotReportTimeoutSeconds": {
+          "type": "integer",
+          "default": 1800,
+          "minimum": 60,
+          "maximum": 7200,
+          "description": "v5.7+ \u2014 Phase 7'de autopilot always-pause men\u00fcs\u00fcnde kullan\u0131c\u0131 cevap vermezse session'\u0131 sonland\u0131rma s\u00fcresi (saniye). Default 1800 (30 dk). Timeout'ta external delivery aborted, internal capture (agent-log, telemetry, knowledge) yine \u00e7al\u0131\u015f\u0131r, session /multi-agent:resume ile devam ettirilebilir."
+        },
+        "wikiScope": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "enum": [
+              "main",
+              "ios",
+              "screenshots",
+              "index"
+            ]
+          },
+          "default": [
+            "main",
+            "ios",
+            "screenshots",
+            "index"
+          ],
+          "description": "v5.7+ \u2014 Wiki Case A scope multi-select default'u. Component wiki dispatch'inde hangi artifact'lar yaz\u0131lacak: main (ana component sayfas\u0131), ios (iOS sub-page), screenshots (assets/ klas\u00f6r\u00fc), index (_Sidebar.md + ComponentImplementationStatus.md). Legacy wikiDefault=true \u2192 [main,ios,screenshots,index] migration; wikiDefault=false \u2192 [] (empty array = Wiki adapter Case B men\u00fcs\u00fcne d\u00fc\u015fer)."
+        },
+        "autoJiraFromGithubIssue": {
+          "type": "string",
+          "enum": [
+            "ask",
+            "always",
+            "never"
+          ],
+          "default": "ask",
+          "description": "Policy for the GitHub-issue Jira auto-create (WS-6 triad, Phase 0 Step 1). `ask` prompts the user when a GitHub issue has no Jira ID. `always` auto-creates silently (and patches the GitHub issue body with the link). `never` skips and uses the `feature/GH{issueNo}-kebab` branch. Autopilot treats `ask` as `always` \u2014 there is no interactive fallback when running unattended."
+        },
+        "wikiToJiraComment": {
+          "type": "boolean",
+          "default": true,
+          "description": "When the Wiki channel produces component wiki content AND a Jira issue is linked (`state.jiraId` set), also post a humanizer-passed summary of the wiki content as a Jira comment so QA + PMs see the component docs inline. Independent of `reportChannels.jira` (which controls whether the main Jira comment runs). Set `false` to suppress only the wiki-summary comment."
+        },
+        "figmaSource": {
+          "type": [
+            "object",
+            "null"
+          ],
+          "additionalProperties": false,
+          "description": "Upstream figma-to-component source for incremental sync (WS-9). Set manually by users who maintain a separate source project and want `/multi-agent:sync` to keep `pipeline/skills/figma-ios/` in step. Null = no sync, import was one-shot.",
+          "properties": {
+            "path": {
+              "type": "string",
+              "description": "Absolute path to the source project root (expects `.instructions/figma/` and `.claude/skills/` subtrees)."
+            },
+            "branch": {
+              "type": "string",
+              "default": "develop",
+              "description": "Source branch to pull from."
+            },
+            "lastSyncedAt": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "format": "date-time",
+              "description": "ISO timestamp of the most recent successful sync."
+            },
+            "lastCommit": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "Source commit SHA captured at the most recent successful sync. Used as the floor for incremental diff."
+            }
+          }
+        },
+        "promptLanguage": {
+          "type": "string",
+          "enum": [
+            "en",
+            "tr"
+          ],
+          "default": "en",
+          "description": "Language used for user-facing INTERACTIVE pipeline copy: pickers (account, project, dev-context, base branch, branch name, maturity ack, channels), Phase 5 test prompt, Phase 6 local-checkout prompt, Phase 6 commit/PR confirmations, TaskCreate card subjects, and phase-banner.sh headers (`PHASE_LANG` resolves from this field via the `auto` sentinel). Canonical label table lives in `pipeline/skills/shared/multi-agent/SKILL.md`. External payloads stay English regardless of this setting: reviewer/triage system prompts, commit messages, PR titles/bodies, Jira comments, wiki content, agent-log.md payloads. Set via `/multi-agent:language prompt <en|tr>` or answered on first run by `/multi-agent:setup`."
+        },
+        "outputLanguage": {
+          "type": "string",
+          "enum": [
+            "en",
+            "tr"
+          ],
+          "default": "en",
+          "description": "Language used for the assistant's NON-INTERACTIVE explanations, status updates, error messages, and pipeline-generated reports rendered to the user (e.g. `/multi-agent:help` body, `/multi-agent:status` table headers, summary blocks at the end of a run). Independent of `promptLanguage` so a user can have Turkish pickers but English summaries (or vice versa). External payloads (commits, PR/Jira/wiki) and skill-picker / confirmation / error UI exposed by the CLI host stay English regardless of this setting. Set via `/multi-agent:language output <en|tr>` or answered on first run by `/multi-agent:setup`."
+        },
+        "progressVerbosity": {
+          "type": "string",
+          "enum": [
+            "quiet",
+            "normal",
+            "verbose"
+          ],
+          "default": "normal",
+          "description": "Verbosity of the live progress-line contract (`refs/progress-contract.md`). `quiet` shows only phase banners and user prompts (CI-friendly). `normal` shows banners + the canonical action set per phase \u2014 recommended for interactive use. `verbose` shows sub-agent internal actions, file-level reads, schema validations, retry internals \u2014 forced automatically when `mode: autopilot` is set in agent state so the run remains audit-grade when the user isn't watching live."
+        },
+        "triageCrossCheck": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Optional second-opinion check on Phase 4 triage decisions. When enabled, a configurable percentage of triage outputs are re-classified by Sonnet and the diff vs. Opus's verdict is logged for audit. Mitigates the single-point-of-failure risk that Opus triage hallucinates or drifts. Adds latency + cost; default off.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "Master switch."
+            },
+            "samplePct": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100,
+              "default": 10,
+              "description": "Percentage of triage runs to spot-check (1-100). 10 = roughly 1 in 10."
+            },
+            "model": {
+              "type": "string",
+              "enum": [
+                "sonnet"
+              ],
+              "default": "sonnet",
+              "description": "Cross-check model. Locked to Sonnet \u2014 Opus would just agree with Opus."
+            },
+            "blockOnDisagreement": {
+              "type": "boolean",
+              "default": false,
+              "description": "If true, a cross-check disagreement pauses Phase 5/6 for human review. If false (default), the disagreement is logged to metrics.jsonl as `triage.cross_check_diff` and the pipeline proceeds with Opus's original verdict."
+            }
+          }
+        },
+        "reviewDisagreementRound": {
+          "type": "boolean",
+          "default": false,
+          "description": "v6.1.0+ \u2014 Phase 4 Step 2.5 rebuttal round. When reviewers disagree (mixed blocker/approved verdict), each reviewer is re-prompted with the others' opposing arguments for one additional round before triage. Lifts signal quality on ambiguous findings at ~1\u00d7 Step 2 token cost. Off by default \u2014 flip for security-critical or release-branch reviews."
+        },
+        "review": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.6+ — Standalone /multi-agent:review knobs. Only affects the post-pr-review.sh path (PR-mode comment posting); does not change Phase 4 reviewer dispatch inside the full pipeline.",
+          "properties": {
+            "dedupeInlineComments": {
+              "type": "boolean",
+              "default": true,
+              "description": "Bugbot/Devin Review behaviour: before posting an inline comment, scan existing PR comments for a stable fingerprint marker (sha-16 of path|line|issue). If a comment with the same marker exists, skip — preserves audit trail without flooding the PR on re-runs. Provider-agnostic: GitHub /pulls/{n}/comments + /issues/{n}/comments and Bitbucket Server /pull-requests/{id}/activities?fromType=COMMENT are both checked. Set to false to restore the pre-v8.6 behavior (every run posts fresh comments, original spec)."
+            }
+          }
+        },
+        "shadowGit": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.6+ — Cline-style per-tool-call shadow Git checkpoints. A separate git repo under ~/.claude/state/shadow-git/<task-id>/.git/ snapshots the worktree at each Phase 3 step boundary (per Plan Todo) and optionally after each Edit/Write/MultiEdit/Bash mutation. The shadow lives outside the project's real .git so semantic commits stay clean. Pattern source: Cline checkpoints (https://docs.cline.bot/features/checkpoints). Off by default — adds a per-step git commit on top of the existing TDD loop; flip on for risky refactors where sub-phase rollback is worth ~50ms per snapshot.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "Master switch."
+            },
+            "mode": {
+              "type": "string",
+              "enum": ["per-tool-call", "per-todo-step", "off"],
+              "default": "per-todo-step",
+              "description": "Snapshot frequency. per-tool-call mirrors Cline (one snapshot after each Edit/Write/Bash mutation); per-todo-step snapshots once per plan-todos.sh step boundary (cheaper, recommended). off is equivalent to enabled=false."
+            },
+            "pruneAfterDays": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 90,
+              "default": 14,
+              "description": "Shadow snapshots older than N days are garbage-collected on the next /multi-agent:purge or by an explicit shadow-git.sh prune --older-than-days call."
+            }
+          }
+        },
+        "planTodos": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.6+ — Plan-as-live-Todo-list. Phase 2 emits agent-state.plan.todos[] conforming to pipeline/schemas/plan-todos.schema.json; Phase 3 iterates step-by-step via pipeline/lib/plan-todos.sh next/start/complete; Phase 7 renders the rollup into agent-log.md and the PR body. Pattern source: Windsurf Cascade (https://docs.windsurf.com/windsurf/cascade) Todo list inside the conversation; Cursor Plan Mode (https://cursor.com/docs/agent/planning) reviewable plan. Off by default — opt in to add status-transition writes per Phase 3 step in exchange for sub-step visibility + per-step notes.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "Master switch. When true, Phase 2 Step 4.5 emits plan.todos[] and Phase 3 / 7 read from it."
+            }
+          }
+        },
+        "clarifyAmbiguous": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.6+ — Phase 0 Step 9 clarifying-question loop. Before Phase 1 starts, a cheap Haiku classifier scores task ambiguity (0-10) and emits up to N questions if score < threshold. Pattern source: Devin Knowledge / Ask Devin (https://docs.devin.ai/work-with-devin/devin-review) and Cursor Plan Mode clarifying questions (https://cursor.com/docs/agent/planning). Cost: ~$0.0025 per Haiku call. Off by default — flip on for teams burned by ambiguity-driven rework or when working on cross-team issues where the spec lives in someone else's head.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "Master switch. When true, Phase 0 dispatches task-clarifier after maturity check and before Phase 1."
+            },
+            "model": {
+              "type": "string",
+              "enum": ["haiku", "sonnet"],
+              "default": "haiku",
+              "description": "Classifier model. Haiku is the cost default; Sonnet override for regulated domains where ambiguity nuance matters."
+            },
+            "minScoreToProceed": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 10,
+              "default": 6,
+              "description": "Clarity threshold. Score ≥ threshold → proceed silently. Below → questions fire. 6 is the borderline 'the what is clear but the how is fuzzy' line."
+            },
+            "maxQuestions": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 5,
+              "default": 3,
+              "description": "Hard cap on questions per round. Clarifier picks the highest-leverage N even if more ambiguity exists."
+            },
+            "autopilotMode": {
+              "type": "string",
+              "enum": ["skip", "log", "abort"],
+              "default": "log",
+              "description": "What to do when stopAndAsk fires in autopilot. skip = drop questions and proceed (most aggressive); log = append to agent-log.md and proceed (default, preserves signal); abort = pause Phase 0 and require multi-agent:resume."
+            }
+          }
+        },
+        "reviewWatch": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.6+ — Auto-review incoming PRs via gh CLI polling. Inspired by Cursor Bugbot (https://cursor.com/docs/bugbot) and Devin Review (https://docs.devin.ai/work-with-devin/devin-review): trigger /multi-agent:review on PRs the user did NOT author. Disabled by default. Configure repos via .repos[] then either run pipeline/lib/review-watch.sh --watch as a background process or schedule it via cron.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "Master switch."
+            },
+            "repos": {
+              "type": "array",
+              "items": { "type": "string", "pattern": "^[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$" },
+              "default": [],
+              "description": "owner/repo entries to watch. The watcher only considers PRs not authored by the current gh user."
+            },
+            "intervalSeconds": {
+              "type": "integer",
+              "minimum": 30,
+              "maximum": 86400,
+              "default": 300,
+              "description": "Polling interval for --watch loop. Clamped to ≥30s to stay polite with GitHub rate limits."
+            },
+            "labelFilter": {
+              "type": "string",
+              "description": "Optional GitHub label. When set, only PRs carrying this label are considered."
+            }
+          }
+        },
+        "repoMap": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.6+ — Aider-style token-budgeted repo map injection. When enabled, the orchestrator runs pipeline/scripts/repo-map.mjs BEFORE Phase 1 (Analysis) and BEFORE Phase 4 (Review) and injects the resulting markdown as ${REPO_MAP} into the reviewer/analyser prompts. Deterministic — no embeddings, no network. Pattern source: https://aider.chat/docs/repomap.html. Off by default (introduces a ~150-300ms repo scan + repo-shaped prompt growth); flip on to lower per-call token cost on follow-up exploration phases.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "Master switch. When true, Phase 1 and Phase 4 receive ${REPO_MAP} as additional context. When false, both phases run with only the diff + their normal prompt shell."
+            },
+            "tokenBudget": {
+              "type": "integer",
+              "minimum": 200,
+              "maximum": 6000,
+              "default": 1500,
+              "description": "Soft token cap on the rendered map. The renderer fills greedily until the budget is hit, then truncates with a footer note. 1500 tokens ~ top 15-25 files with their top declarations."
+            },
+            "topFiles": {
+              "type": "integer",
+              "minimum": 5,
+              "maximum": 100,
+              "default": 25,
+              "description": "Maximum number of ranked files to consider for inclusion. The token budget further trims this list — topFiles is an upper bound, not a guarantee."
+            },
+            "include": {
+              "type": "string",
+              "description": "Comma-separated path substrings — files NOT containing any of these are skipped. Empty/unset = include all supported sources. Use to scope the map to a sub-tree on monorepos (e.g. 'Sources/,Tests/')."
+            },
+            "exclude": {
+              "type": "string",
+              "description": "Comma-separated path substrings — files containing ANY of these are skipped. Stacks with their own caches (e.g. 'Generated/,.pb.swift,_mocks.kt') benefit from this."
+            }
+          }
+        },
+        "devCritic": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.6+ \u2014 Phase 3.5 evaluator-optimizer. After the Dev generator's last edit and BEFORE Phase 4 reviewers, dispatch agents/dev-critic.md (Sonnet by default) to run deterministic gates (build/lint/test/secrets) + the platform checklist (rules/*.md). Max 2 critic iterations, then escalate. Catches gate failures and checklist violations that would otherwise burn 2\u20133 Phase 4 reviewer calls + Opus triage. Off by default \u2014 introduces 1\u00d7 Sonnet call per Dev iteration; flip on for feature work, security-touching paths, or multi-file refactors. Source: Anthropic 'Building Effective Agents' (Dec 2024) evaluator-optimizer pattern.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": false,
+              "description": "Master switch. When true, Phase 3 dispatches dev-critic after the generator's last edit; when false, Phase 3 hands off directly to Phase 4."
+            },
+            "maxIterations": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 3,
+              "default": 2,
+              "description": "Critic loop cap. Round 1 = full pass. Round 2 = re-check round 1 failures only. Round 3 NOT recommended \u2014 escalate to user (interactive) or proceed with logged failure (autopilot)."
+            },
+            "model": {
+              "type": "string",
+              "enum": ["sonnet", "opus", "haiku"],
+              "default": "sonnet",
+              "description": "Critic model. Sonnet is the cost/quality default. Opus override only when diff > 500 LOC or touches security-critical paths. Haiku is too brittle for checklist reasoning \u2014 use only for trivial verification tasks."
+            },
+            "minDiffLoc": {
+              "type": "integer",
+              "minimum": 0,
+              "default": 0,
+              "description": "Skip dev-critic when diff LOC is below this threshold (avoid the overhead on trivial typo/copy fixes). 0 = always run when enabled. 200 = a common 'feature work' threshold."
+            }
+          }
+        },
+        "diffRiskAdvisory": {
+          "type": "boolean",
+          "default": true,
+          "description": "v8.3+ \u2014 Phase 4 Step 1.75 advisory diff risk scoring. When enabled, `pipeline/scripts/diff-risk-score.mjs` runs before reviewer dispatch and the top-N risk-ranked files are injected into each reviewer's prompt as a priority hint (security paths, public API surfaces, untested source changes, schema migrations). Heuristic, deterministic, no LLM cost. Default ON \u2014 the run is sub-second and never gates the pipeline. Flip to false to skip the script and the prompt injection entirely."
+        },
+        "priorArtEnrichment": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.3+ — Per-repo triage memory layer. When enabled, Phase 7 ingests every triage output's accepted/deferred/rejected rows into ~/.claude/memory/multi-agent/<repo-slug>/triage-corpus.jsonl (idempotent), and Phase 4 triage queries the corpus for similar past findings to inject as context. Per-repo isolation — never cross-leaks between projects.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": true,
+              "description": "Master switch for the lookup side. When false, Phase 4 triage runs without prior-art injection. Ingest still runs unless ingestOnComplete is also flipped."
+            },
+            "ingestOnComplete": {
+              "type": "boolean",
+              "default": true,
+              "description": "When false, Phase 7 skips the corpus append. Use to keep an existing corpus frozen while still benefiting from lookups against it."
+            },
+            "topN": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 10,
+              "default": 3,
+              "description": "Number of prior-art entries to attach per current finding."
+            }
+          },
+          "default": {
+            "enabled": true,
+            "ingestOnComplete": true,
+            "topN": 3
+          }
+        },
+        "testGap": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "v8.3+ \u2014 Phase 5 Step 0 advisory test-gap detector. Walks the diff for newly added public symbols and reports those without a paired test (or test method covering them). Heuristic, deterministic, no LLM cost.",
+          "properties": {
+            "enabled": {
+              "type": "boolean",
+              "default": true,
+              "description": "Master switch. Default ON \u2014 the scan is sub-second."
+            },
+            "scanTree": {
+              "type": "boolean",
+              "default": false,
+              "description": "When true, also scan the repo tree (not just the diff) for existing tests that already mention the symbol \u2014 catches gaps that are technically covered by older tests outside the current diff. Slower but more accurate. Off by default \u2014 diff-only scan is sufficient for the common case."
+            },
+            "blockingThreshold": {
+              "type": ["integer", "null"],
+              "minimum": 1,
+              "default": null,
+              "description": "If set, gaps where `important + blocking` count exceeds the threshold are treated as a Phase 4 rework finding (loops back to Phase 3). null = advisory only \u2014 Phase 5 prints the report but never gates."
+            },
+            "promoteSeverity": {
+              "type": "boolean",
+              "default": false,
+              "description": "When true, the scan runs with --severity-promote, forcing every gap to 'important'. Useful for release branches and audit mode."
+            }
+          },
+          "default": {
+            "enabled": true,
+            "scanTree": false,
+            "blockingThreshold": null,
+            "promoteSeverity": false
+          }
+        },
+        "perRepoMemory": {
+          "type": "boolean",
+          "default": false,
+          "description": "v6.2.0+ \u2014 Per-repo file-system memory layer. When enabled, Phase 0 reads `$PROJECT_ROOT/.multi-agent/memory/MEMORY.md` (if present) and injects it into the pipeline context, and Phase 7 dispatches a scoped synthesis subagent that may write new memory files to the same directory. Categories: user / feedback / project / reference (same taxonomy as the conversation-level auto-memory). Memory is local to each repo \u2014 never synced to remote, never committed to git (pipeline installer adds `.multi-agent/memory/` to `.gitignore`). Off by default \u2014 flip when working on a repo long enough that accumulated project context starts paying for itself."
+        },
+        "autopilotSafetyGate": {
+          "type": "boolean",
+          "default": true,
+          "description": "v7.0.0+ \u2014 Phase 2 autopilot safety classifier. Before autopilot mode consumes the user's approval skip, run `classify-plan-safety.mjs` over the approved plan. If the heuristic score \u2265 50 (e.g. >15 files touched, or security-path touch, or delete-without-test, or schema migration) inject a ONE-TIME pause asking for explicit manual approval \u2014 even in autopilot. Default ON because the risk of skipping this gate is asymmetric: a pause on a high-blast-radius plan costs seconds; a silent auto-merge of a bad one costs hours of rollback. Flip to `false` only for tightly-scoped autopilot workflows (e.g. batch figma component iteration) where the task class is known-safe."
+        },
+        "dynamicSkillLoading": {
+          "type": "boolean",
+          "default": false,
+          "description": "v7.0.0+ \u2014 Dynamic trigger-based skill loading. When enabled, the orchestrator reads `~/.claude/skills/.skills-index.json` after Phase 1 analysis and injects only the top-N matched skills into subagent prompts (via `match-skills.mjs`), instead of relying on eager-loaded SKILL.md bodies. Large token win on small tasks; no visible behavior change on big ones where many skills match. Requires either a full install (index is always shipped) or the `install.js --index-only` mode for users who want skill bodies fetched on demand. Off by default in v7.0 \u2014 flip to `true` to opt in; a future v7.x may flip the default once enough telemetry confirms no regression."
+        },
+        "recentAccounts": {
+          "type": "array",
+          "description": "v7.3.0+. Last-used-first LRU of account ids (from account-resolver.sh). Used by autopilot to pick the most recent account when multiple are configured.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "id"
+            ],
+            "properties": {
+              "id": {
+                "type": "string",
+                "description": "Short id from account-resolver, e.g. m-erden3"
+              },
+              "prefix": {
+                "type": "string",
+                "description": "Original keychain prefix, e.g. ${USER}"
+              },
+              "lastUsed": {
+                "type": "string",
+                "format": "date-time"
+              },
+              "count": {
+                "type": "integer",
+                "minimum": 0
+              }
+            }
+          },
+          "maxItems": 10
+        },
+        "accounts": {
+          "type": "array",
+          "description": "v7.4.0+. Per-account overrides \u2014 host, label, default platform. Resolved by account-resolver.sh by matching `id` (e.g. m-erden3). When unset, hosts fall back to global.hosts.{jira,bitbucket}.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "id"
+            ],
+            "properties": {
+              "id": {
+                "type": "string",
+                "description": "Short id matching account-resolver output (lowercase, dashes)."
+              },
+              "label": {
+                "type": "string",
+                "description": "Display label override; otherwise the resolver's auto-generated label is used."
+              },
+              "jiraHost": {
+                "type": "string",
+                "description": "Per-account Jira host override (no scheme). Wins over global.hosts.jira."
+              },
+              "bitbucketHost": {
+                "type": "string",
+                "description": "Per-account Bitbucket host override (no scheme). Wins over global.hosts.bitbucket."
+              },
+              "confluenceHost": {
+                "type": "string"
+              },
+              "defaultProvider": {
+                "type": "string",
+                "enum": [
+                  "github",
+                  "bitbucket",
+                  "gitlab",
+                  "generic-git"
+                ]
+              }
+            }
+          },
+          "maxItems": 20
+        }
+      }
+    },
+    "projects": {
+      "type": "object",
+      "description": "Per-project overrides. Key = project slug.",
+      "patternProperties": {
+        "^[a-z0-9][a-z0-9\\-_]*$": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "defaultReviewers": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "maxItems": 10,
+              "description": "Bitbucket/generic default reviewers (usernames)."
+            },
+            "githubDefaultReviewers": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "maxItems": 10,
+              "description": "GitHub fallback reviewers \u2014 @user or org/team slug. Used only when no CODEOWNERS / branch protection surfaces reviewers."
+            },
+            "defaultPrMode": {
+              "type": "string",
+              "enum": [
+                "draft",
+                "ready"
+              ],
+              "description": "Last-used draft/ready choice, shown as the default on next prompt."
+            },
+            "baseBranch": {
+              "type": "string",
+              "description": "Project default base branch. Falls back to repo HEAD."
+            },
+            "confluenceUrls": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "format": "uri"
+              },
+              "maxItems": 5,
+              "description": "Recent parent page URLs, most recent first."
+            },
+            "branches": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "maxItems": 10,
+              "description": "Legacy field. Recent branches for this project (pre-v2.1.0). v2.1.0+ prefers global.recentBranches[projectPath]."
+            },
+            "lastIdentity": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Legacy field. Index into global.gitIdentities (v2.0.0). v2.1.0+ uses platformIdentityRouting."
+            },
+            "jiraProjectKeys": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "maxItems": 10,
+              "description": "Per-project Jira project keys (can override global.defaultJiraKey)."
+            },
+            "remoteType": {
+              "type": "string",
+              "enum": [
+                "bitbucket",
+                "github",
+                "gitlab",
+                "generic-git"
+              ],
+              "description": "Hint used when repo URL doesn't make platform obvious."
+            },
+            "taskCount": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "How many times this project has been used."
+            },
+            "lastUsed": {
+              "type": "string",
+              "format": "date-time",
+              "description": "Timestamp of last task start against this project."
+            },
+            "figmaConfigPath": {
+              "type": "string",
+              "description": "Path to per-project figma-config.json (for Figma pipeline projects)."
+            }
+          }
+        }
+      }
+    }
+  }
+}