[adriannoes]

#851 and #852 stack on this branch. Merge this PR first.

Summary

• pipefy-process-design returns a specification with 14 fields and writes nothing to Pipefy.
• Authorization levels are advise only, build, build inactive, and publish. Each webhook, external email, or member invitation needs separate consent.
• build starts automations and AI agents on, except for the five off cases in the specification.
• Selection happens per step: native rule first, then AI automation or AI agent according to the task.
• The automation recipe creates inactive AI in one call. Simulation uses saved aiParams and writable event values, without response-only fields.

Accepted limits

The diff exceeds the 300-line guideline. The two new references contain the specification contract and selection rules. Consider reviewing them separately.

Until #852 merges, the domain skills retain their earlier consent wording and can ask about AI again after specification approval.

The five off cases cover an inactive request, an unconfirmed assumption, and a missing phase connection. They also cover a pre-existing pipe with matching cards or a time rule in a pipe with cards. The builder reads the two card cases again before activation. The other cases wait for the required consent or connection.

Test plan

• Clean combined stack: 75 focused tests passed. Linters passed for 19 skills and 57 references.
• Plugin packaging and Claude validation passed. Claude loaded the catalog, and the skills CLI listed all 19 skills.
• Earlier MCP simulation passed with the corrected payload and kept the AI automation inactive. That recipe and execution path remain unchanged. Cleanup completed.
• Merge simulation against current dev: no conflict.
• Latest-commit CI: 5,676 passed, 6 skipped, 46 deselected. Lint, DCO, skills, shell, and installation checks passed.
• Cursor-specific smoke: not run.
• Autonomous run of the final instructions: not run. The new consumer assessment was offline.

Docs / skills

• docs/parity.md updated when MCP ↔ CLI coverage changed (no coverage change)
• Affected skills in plugins/pipefy/skills/ updated in this PR (or a paired PR)
• No docs/skills update needed

Legal / contributions

• Commits include DCO sign-off (git commit -s)
• Regulated-domain skills include COMPLIANCE.md when applicable (none added)