@mmerterden/multi-agent-pipeline 8.6.1 → 8.6.2

package/README.md

@@ -46,38 +46,24 @@ Full version history lives in [CHANGELOG.md](./CHANGELOG.md). Every release entr
 
 - Node.js 18+
 - Claude Code (https://claude.ai/code) **or** GitHub Copilot CLI
-- macOS/Linux (Keychain-based token storage is available on macOS)
-
-This is a **private package** hosted on GitHub Packages. You need:
-
-1. **Collaborator access** to `mmerterden/multi-agent-pipeline` (granted by the repo owner).
-2. A **Classic** Personal Access Token (fine-grained PATs are not fully supported for GitHub Packages on private repos).
-
-### 1. Create a Classic PAT
-
-Go to https://github.com/settings/tokens/new?scopes=read:packages,repo and create a token with:
-
-- ✅ `read:packages`
-- ✅ `repo` (required for private package access)
-
-If your GitHub account belongs to an SSO-enforced organization, after creating the token click **"Configure SSO" → Authorize** on the token row.
-
-### 2. Configure `~/.npmrc`
-
-```bash
-# Replace ghp_xxx with the token from step 1
-echo "@mmerterden:registry=https://npm.pkg.github.com" >> ~/.npmrc
-echo "//npm.pkg.github.com/:_authToken=ghp_xxx"        >> ~/.npmrc
-```
-
-### 3. Verify access
+- macOS, Linux, or Windows (Git Bash / WSL). Native credential storage everywhere:
+  - **macOS** → Keychain (`security`)
+  - **Linux** → libsecret (`secret-tool` — `apt install libsecret-tools` / `dnf install libsecret`)
+  - **Windows** → Credential Manager (PowerShell `CredentialManager` module — `Install-Module CredentialManager`)
+- Runtime CLIs the pipeline shells out to:
+  - `gh` (GitHub CLI) for issue / PR flows
+  - `jq` for JSON parsing
+  - `python3` (stdlib only, used by the deterministic keychain helper)
+  - `bash` 4+
+
+The package is **public on npmjs.org** — no auth, no PAT, no `~/.npmrc` setup needed:
 
 ```bash
 npm view @mmerterden/multi-agent-pipeline version
-# → prints "3.0.0" (or newer) when everything is wired up
+# → prints "8.6.1" (or newer)
 ```
 
-If this fails, see [Troubleshooting](#troubleshooting) below.
+If `npm view` shows a stale version, run `npm cache clean --force` and retry.
 
 > **New here?** Worked end-to-end transcripts live in [`examples/`](./examples/) — bug fix from Jira, feature in autopilot, `--dev` fast path, and recovery from a broken run. Read one before you run the pipeline on your own code.
 >
@@ -87,9 +73,9 @@ If this fails, see [Troubleshooting](#troubleshooting) below.
 
 ## Quick Start
 
-### Option A — Install from source (recommended, no registry auth)
+### Option A — Install from source (recommended for development)
 
-The simplest path. Works even if you haven't configured `~/.npmrc` yet.
+Clone the repo and run the installer directly — full read access to source files.
 
 ```bash
 git clone git@github.com:mmerterden/multi-agent-pipeline.git
@@ -127,7 +113,7 @@ This discovers your Keychain tokens (Jira, Bitbucket, GitHub, etc.), sets up you
 
 Update later with `git pull && npm install` inside the clone. Pin to a specific version by checking out the corresponding tag (`git tag -l` to list).
 
-### Option B — npx (requires registry setup above)
+### Option B — npx (public registry, no auth)
 
 ```bash
 npx @mmerterden/multi-agent-pipeline install            # Claude Code (default)
@@ -143,7 +129,7 @@ npx @mmerterden/multi-agent-pipeline uninstall          # interactive, all targe
 npx @mmerterden/multi-agent-pipeline uninstall --dry-run # preview only
 ```
 
-### Option C — Global install (requires registry setup above)
+### Option C — Global install (public registry, no auth)
 
 ```bash
 npm install -g @mmerterden/multi-agent-pipeline
@@ -177,32 +163,27 @@ slows down the install.
 
 ### `sh: multi-agent-pipeline: command not found`
 
-npx couldn't fetch the package and fell back to running it as a shell command. Registry auth is missing or wrong — re-check steps 1–3 under [Prerequisites](#prerequisites).
+`npx` couldn't fetch the package. Most common causes:
 
-### `npm error code E401` — "User cannot be authenticated with the token provided"
+- Network blocked or proxy in front of npmjs.org.
+- Stale npx cache — `npx clear-npx-cache` then retry.
+- Wrong package name (it is `@mmerterden/multi-agent-pipeline`, with the scope).
 
-Your token is being rejected by GitHub Packages. Usually one of:
-
-- PAT is fine-grained instead of **Classic**. Recreate as Classic.
-- PAT is missing `repo` scope. Private packages require both `read:packages` **and** `repo`.
-- SSO not authorized. On the token row, click **"Configure SSO" → Authorize** for the relevant org.
-- Token expired or revoked.
+### `npm error code E404` on `registry.npmjs.org`
 
-Quick diagnostic:
+The package wasn't reachable. Quick checks:
 
 ```bash
-curl -I -H "Authorization: Bearer $(grep _authToken ~/.npmrc | tail -1 | cut -d= -f2)" \
-  https://npm.pkg.github.com/@mmerterden%2Fmulti-agent-pipeline
+curl -fsSL "https://registry.npmjs.org/@mmerterden/multi-agent-pipeline" | jq -r '."dist-tags".latest'
+# Should print 8.6.1 (or newer)
 ```
 
-- `200` — auth is fine; likely an npx cache issue (`npx clear-npx-cache`).
-- `401` — token invalid, expired, or not SSO-authorized.
-- `403` — token valid but no repo access. Ask the repo owner to add you as a collaborator.
-- `404` — scope misconfigured in `~/.npmrc`, or package name is wrong.
+- If this prints a version → your local npm cache is stale; run `npm cache clean --force` and retry.
+- If it 404s → registry outage or scope/package-name typo. Verify the URL hits the JSON above.
 
-### `npm error code E404` on `registry.npmjs.org`
+### Older PAT / GitHub Packages docs
 
-Your `~/.npmrc` does not have the `@mmerterden:registry=...` line. npm defaulted to public npm, which doesn't host this package. Redo step 2.
+Earlier README revisions referenced GitHub Packages with a Classic PAT and `~/.npmrc` setup. The package moved to **public npmjs.org** in v8.6.1; no token, no `~/.npmrc` line is needed. If you set one up previously, you can leave it — it just won't be consulted.
 
 ## Tool support
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "8.6.1",
+  "version": "8.6.2",
   "description": "8-phase AI development pipeline. Full orchestration on Claude Code + Copilot CLI; knowledge layer (rules + skills) ports to Cursor, Windsurf, and Cline. Analysis, planning, TDD, CLI-aware parallel review with Opus triage, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/commands/multi-agent/_account-picker.md

@@ -75,7 +75,7 @@ was used last and surfaces it first on the next autopilot invocation.
 
 ```json
 {
-  "accountId": "m-erden3",
+  "accountId": "my-account",
   "accountPrefix": "${USER}",
   "tokens": {
     "github": "${USER}_Github_Access_Token",

package/pipeline/commands/multi-agent/sync.md

@@ -312,7 +312,7 @@ refactor, resume, review, scan, search, setup, stack, status, sync, test, update
 | Islem | Token Kaynagi |
 |-------|---------------|
 | `gh` CLI (personal) | `{owner}` gh auth (Keychain) |
-| `gh` CLI (work) | `M-ERDEN3_tkgithub` gh auth (Keychain) |
+| `gh` CLI (work) | `{user}_<work-label>` gh auth (Keychain) — see `prefs.global.accounts[]` |
 | npm publish | `NODE_AUTH_TOKEN` — CI'da `GITHUB_TOKEN`, local'de Keychain PAT |
 
 ```bash

package/pipeline/schemas/prefs.schema.json

@@ -977,7 +977,7 @@
             "properties": {
               "id": {
                 "type": "string",
-                "description": "Short id from account-resolver, e.g. m-erden3"
+                "description": "Short id from account-resolver, e.g. my-account"
               },
               "prefix": {
                 "type": "string",
@@ -997,7 +997,7 @@
         },
         "accounts": {
           "type": "array",
-          "description": "v7.4.0+. Per-account overrides \u2014 host, label, default platform. Resolved by account-resolver.sh by matching `id` (e.g. m-erden3). When unset, hosts fall back to global.hosts.{jira,bitbucket}.",
+          "description": "v7.4.0+. Per-account overrides \u2014 host, label, default platform. Resolved by account-resolver.sh by matching `id` (e.g. my-account). When unset, hosts fall back to global.hosts.{jira,bitbucket}.",
           "items": {
             "type": "object",
             "additionalProperties": false,

package/pipeline/scripts/smoke-personal-data.sh

@@ -40,8 +40,11 @@ FORBIDDEN=(
   'mmerterden\.dev'
   'mmerterden/remote-control'
   'mmerterden/mmerterden\.dev'
-  # Author's macOS username in keychain lookups
-  'M_ERDEN3_'
+  # Author's macOS username — both forms: M_ERDEN3 (underscore) appears in
+  # Keychain labels, M-ERDEN3 (dash) appears in gh auth usernames + paths
+  # encoded by the Claude projects convention (/ → -).
+  '\bM_ERDEN3\b'
+  '\bM-ERDEN3\b'
 )
 
 PASS=0
@@ -56,7 +59,6 @@ for pattern in "${FORBIDDEN[@]}"; do
     --exclude="smoke-personal-data.sh" \
     --exclude="smoke-install-leak-gate.sh" \
     --exclude="figma-placeholder-map.json" \
-    --exclude=".last-figma-sync-plan.json" \
     --exclude="REVIEW_CHECKLIST.md" \
     "$pattern" "$PIPELINE_DIR" 2>/dev/null || true)
   if [ -n "$matches" ]; then

package/pipeline/scripts/smoke-plan-todos.sh

@@ -95,8 +95,11 @@ else
 fi
 
 # 5-8. Lifecycle test against a temp state dir
+# Use a temp directory derived from $HOME so the path stays cross-user.
 TEST_TASK="SMOKE-PT-$$"
-TEST_DIR="$HOME/.claude/projects/-Users-M-ERDEN3-test-plan-todos-smoke/state/$TEST_TASK"
+TEST_PROJECT_KEY=$(printf '%s' "$HOME/test-plan-todos-smoke" | tr '/' '-')
+TEST_PROJECT_ROOT="$HOME/.claude/projects/$TEST_PROJECT_KEY"
+TEST_DIR="$TEST_PROJECT_ROOT/state/$TEST_TASK"
 mkdir -p "$TEST_DIR"
 echo '{"task":{"id":"'"$TEST_TASK"'"}}' > "$TEST_DIR/agent-state.json"
 PLAN='{"title":"Smoke","todos":[
@@ -157,7 +160,7 @@ else
 fi
 
 # Cleanup the test state
-rm -rf "$HOME/.claude/projects/-Users-M-ERDEN3-test-plan-todos-smoke"
+rm -rf "$TEST_PROJECT_ROOT"
 
 # 9. Prefs schema toggle
 if jq -e '.properties.global.properties.planTodos.properties.enabled

package/pipeline/skills/shared/core/multi-agent-issue/SKILL.md

@@ -19,7 +19,7 @@ Unassigned GitHub issue'ları interactive olarak listele, seçtir ve pipeline'a
    - `my-figma-app` → `my-org/my-figma-app`
    - Başka → kullanıcıya repo sor
 
-2. **gh auth switch** — İş reposu ise `M-ERDEN3_tkgithub`'a geç
+2. **gh auth switch** — İş reposu ise `prefs.global.accounts[]` içindeki work account label'ına geç (`gh auth switch --user {work-label}`)
 
 3. **Issue'ları çek** — `gh issue list --state open --assignee "" --json number,title,labels --limit 50`
    - `implemented` veya `in progress` label'lı olanları filtrele

package/pipeline/scripts/.last-figma-sync-plan.json

@@ -1,23 +0,0 @@
-{
-  "source": { "path": "/Users/M_ERDEN3/turkish-airlines-ios-figma", "branch": "develop", "commit": "6702673562d797e5bb77364922f211a4b5d5c0ae", "lastCommit": "cd0cde2f25abbc2524f3f20407d8c0d9ff6c2245" },
-  "summary": { "changedSkills": 12 },
-  "changes": [
-    { "upstream": "figma-cli-iterate", "local": "figma-cli-iterate", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-cli-lean-iterate", "local": "figma-cli-lean-iterate", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-form-integration", "local": "figma-form-integration", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-issue", "local": "figma-issue", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-iterate", "local": "figma-iterate", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-iteration-commit", "local": "figma-iteration-commit", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "figma-to-swift-ui-implement", "local": "figma-component-implement", "tree": "figma-ios", "renamed": true, "overlaySkip": true },
-    { "upstream": "figma-to-swift-ui-start", "local": "figma-component-start", "tree": "figma-common", "renamed": true, "overlaySkip": false },
-    { "upstream": "figma-to-swiftui", "local": "figma-to-component", "tree": "figma-ios", "renamed": true, "overlaySkip": false },
-    { "upstream": "figma-ui-patterns", "local": "figma-ui-patterns", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "performance-swiftui", "local": "performance-swiftui", "tree": "figma-common", "renamed": false, "overlaySkip": false },
-    { "upstream": "performance-tour", "local": "performance-tour", "tree": "figma-common", "renamed": false, "overlaySkip": false }
-  ],
-  "postActions": [
-    "run `npm run test:smoke` — all 28 suites must stay green",
-    "review figma-ios/REVIEW_CHECKLIST.md for skills still WIP",
-    "commit with \"chore(sync): upstream @ 6702673562d797e5bb77364922f211a4b5d5c0ae\""
-  ]
-}