@bongos/core 1.19.1002 → 1.19.1004

package/docs/module-api-changelog.md

@@ -2478,5 +2478,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.1000 with no explicit bump. run 36016738965. (task 1002620)
   1.19.1002 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.1001 with no explicit bump. run 36019839845. (task 1002620)
+  1.19.1003 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.1002 with no explicit bump. run 36028273772. (task 1002620)
+  1.19.1004 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.1003 with no explicit bump. run 36030644887. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/goal-inbox.js

@@ -92,7 +92,44 @@
   // ideas slice (#attention-ideas) belongs to builders.js's triage renderer.
   // Card visibility + the headline count derive from BOTH via OTBAttention.
   const MAX_GOAL_ROWS = 5;
+
+  // task 1001741 (part 3): goals I own or lead whose open tasks collide while
+  // live work is involved. The server already limited this to medium/high
+  // pairs on goals the viewer manages, so a row here is always actionable: the
+  // resolve actions (sequence / request release / rescope) live on the goal's
+  // conflicts view, which the row links to. Advisory — it never blocks work.
+  // A title is builder-authored prose; the card writes the sentence around it, so a
+  // dash inside it is normalised the way the public feed does (cleanTitle).
+  const cleanTitle = (raw) => String(raw == null ? '' : raw).replace(/\s*[—–]\s*/g, ', ').replace(/,\s*,/g, ',').trim();
+  function conflictRow(c) {
+    const n = Number(c.count) || 0;
+    const live = Number(c.high) > 0
+      ? `${c.high} with both sides claimed`
+      : 'in each, one side is already claimed';
+    const top = c.top
+      ? `<p class="ginbox__note">e.g. “${escapeHtml(cleanTitle(c.top.title_a))}” and “${escapeHtml(cleanTitle(c.top.title_b))}”</p>`
+      : '';
+    return `<li class="ginbox__item">
+        <div class="ginbox__body">
+          <a class="ginbox__goal" href="/goals#/goal/${encodeURIComponent(c.goal_id)}/conflicts" title="Open the conflicts for ${escapeHtml(cleanTitle(c.goal_title) || 'goal')}">${escapeHtml(cleanTitle(c.goal_title) || 'a goal')}</a>
+          <p class="ginbox__facts">${n} task ${n === 1 ? 'pair overlaps' : 'pairs overlap'} on live work — ${escapeHtml(live)}. Sequence them before two builders collide.</p>
+          ${top}
+        </div>
+      </li>`;
+  }
+
+  function renderConflicts(list) {
+    const box = host && host.querySelector('#attention-conflicts');
+    if (!box) return;
+    const rows = Array.isArray(list) ? list : [];
+    box.innerHTML = rows.length
+      ? `<h3 class="ginbox__sec-h">File conflicts in your goals</h3><ul class="ginbox">${rows.slice(0, MAX_GOAL_ROWS).map(conflictRow).join('')}</ul>`
+        + (rows.length > MAX_GOAL_ROWS ? `<p class="ginbox__pending">…and ${rows.length - MAX_GOAL_ROWS} more goals — <a href="/goals">open your goals</a>.</p>` : '')
+      : '';
+  }
+
   function render(inbox) {
+    renderConflicts(inbox.conflicts);
     const box = host && host.querySelector('#attention-goals');
     if (!box) return;
     const invitations = inbox.invitations || [];
@@ -135,6 +172,7 @@
       // nothing in the goals slice; the ideas slice may still have content.
       const box = host.querySelector('#attention-goals');
       if (box) box.innerHTML = '';
+      renderConflicts([]);
       window.OTBAttention.refresh();
       if (err.code !== 'auth-needed' && err.code !== 'not-found') {
         console.error('[hall] goal inbox load failed', err);
@@ -565,6 +603,9 @@
       // refresh() counts them.
       '<div id="attention-system"></div>' +
       '<div id="attention-goals"></div>' +
+      // task 1001741: file conflicts between open tasks in goals the viewer
+      // owns or leads — filled from the same /goals/inbox read as the slice above.
+      '<div id="attention-conflicts"></div>' +
       // task 1002802 (P06): "Complete your profile" — a DISMISSIBLE nudge when
       // bio or preferred_disciplines are empty. Rendered by builders.js (which
       // already holds the /me state the condition reads), exactly like the

package/modules/hall-ui/public/style.css

@@ -2746,6 +2746,15 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
   cursor: help;
 }
 
+/* task 1001741: per-row file-overlap flag. Amber, never red — it is advisory
+   (ADR 0049) and blocks nothing. */
+.task__conflict {
+  font-size: 11.5px;
+  white-space: nowrap;
+  color: var(--warn);
+  cursor: help;
+}
+
 /* task 1753: the whole card is clickable → toggles selection (task 1869). */
 .task { cursor: pointer; }
 

package/modules/hall-ui/public/task-lib.js

@@ -54,6 +54,26 @@
     return false;
   }
 
+  // task 1001741: which OTHER tasks in `pool` collide with `task`? The board's
+  // per-row conflict flag — the same predicate as the run-mode filter, but named
+  // per row so the row itself says what it collides with. Returns ids, sorted.
+  function conflictPeers(task, pool) {
+    if (!task || !Array.isArray(task.touches) || !task.touches.length) return [];
+    const ids = new Set();
+    for (const o of (Array.isArray(pool) ? pool : [])) {
+      if (o && String(o.id) !== String(task.id) && touchesConflict(task.touches, o.touches)) ids.add(Number(o.id));
+    }
+    return [...ids].sort((a, b) => a - b);
+  }
+
+  // Chip HTML for a row's conflict peers; '' when there are none. Advisory, like
+  // every touches[] signal (ADR 0049) — it never blocks a claim.
+  function conflictChipHtml(peers) {
+    if (!peers || !peers.length) return '';
+    const shown = peers.slice(0, 5).map((n) => `#${n}`).join(', ') + (peers.length > 5 ? ', …' : '');
+    return `<span class="task__conflict" title="Declared files overlap: ${esc(shown)} (advisory)">⚠ overlaps ${peers.length}</span>`;
+  }
+
   // The rank-floor chip. 'xenos' means no floor at all, which reads as an
   // invitation ("Any rank") rather than a restriction.
   function rankTagHtml(requiresRank) {
@@ -161,7 +181,7 @@
 
   const api = {
     msOf, taskActivityMs, STALE_CHOICES, isStale,
-    priorityRank, touchesConflict, rankTagHtml, deHashRefs,
+    priorityRank, touchesConflict, conflictPeers, conflictChipHtml, rankTagHtml, deHashRefs,
     creditsPerMinute, buildPromptForTask, friendlyBatchReason,
   };
   if (typeof window !== 'undefined') window.OTBTaskLib = api;

package/modules/hall-ui/public/work.js

@@ -41,7 +41,7 @@
   // friendlyBatchReason's MODULE_CONFLICT case. Destructured so every call site
   // below reads exactly as before; the single copy lives in task-lib.js.
   const {
-    priorityRank, touchesConflict, rankTagHtml,
+    priorityRank, touchesConflict, conflictPeers, conflictChipHtml, rankTagHtml,
     creditsPerMinute, buildPromptForTask, friendlyBatchReason,
   } = window.OTBTaskLib;   // deHashRefs is not called here — it is used inside buildPromptForTask
   // Shared component kit (hall-kit.js, task 2166): tabs, pager, filter bar.
@@ -379,6 +379,12 @@
     if (mine) mine.setTab(tabId);
   }
 
+  // task 1001741: the set a row is checked against for its conflict flag — every
+  // open task this page has loaded (Ready + Backlog), not just the filtered view.
+  function conflictPool() {
+    return taskState.all.concat(backlogRows);
+  }
+
   function renderClaimable() {
     const root = $('#task-list');
     if (!root) return;
@@ -425,6 +431,7 @@
     // RESETS the page (only an explicit filter/sort/per-page change does), so a
     // background poll keeps the viewer on their current page.
     const shown = paginate(list, pagers.ready);
+    const pool = conflictPool();
     root.innerHTML = shown.map((t) => {
       const cpm = creditsPerMinute(t);
       const cpmText = Number.isFinite(cpm) ? `${cpm.toFixed(2)} d/min` : '— d/min';
@@ -472,6 +479,7 @@
               <span>${minutesText}</span>
               <span>${cpmText}</span>
               ${touchesChip}
+              ${conflictChipHtml(conflictPeers(t, pool))}
               ${ageChip}
               ${catChip}
             </div>
@@ -1095,6 +1103,7 @@
       return;
     }
     const shown = paginate(list, pagers.backlog);
+    const pool = conflictPool();
     root.innerHTML = shown.map((t) => {
       const ver = t.version_id ? `<span class="task__tag">${escapeHtml(t.version_id)}</span>` : '';
       // task 1003828 — the row says WHOSE CRAFT and WHICH GOAL. A Ready card has
@@ -1115,7 +1124,7 @@
       return `
         <div class="history__row" data-task-id="${escapeHtml(String(t.id))}" title="Open task #${escapeHtml(String(t.id))}">
           <span class="history__id">#${escapeHtml(String(t.id))}</span>
-          <span class="history__title">${escapeHtml(t.title || '(untitled)').replace(/\//g, '/<wbr>')} ${ver} ${disciplineTag} ${rankTagHtml(t.requires_rank)}<br>${goalTag}</span>
+          <span class="history__title">${escapeHtml(t.title || '(untitled)').replace(/\//g, '/<wbr>')} ${ver} ${disciplineTag} ${rankTagHtml(t.requires_rank)} ${conflictChipHtml(conflictPeers(t, pool))}<br>${goalTag}</span>
           <span class="history__when">${window.OTB.kindIsUnset(t.kind) ? '' : escapeHtml(t.kind)}</span>
         </div>`;
     }).join('');

package/modules/lifecycle/db-claims.js

@@ -27,6 +27,7 @@ const { unsatisfiedDeps } = require('./db-deps-criteria.js');
 // claim paths below use it — hand-building the object here is what made task
 // 1003107's merge pointer invisible on the live path (see its header).
 const { depRefusalRow } = require('./dead-deps.js');
+const { siblingOverlaps, RESOLVED_STATUSES } = require('./goal-conflicts.js');
 const { claimGate, claimPermissionsFor, disambiguateWorktreeName, foldWorktreeName } = require('./db-rank-authz.js');
 const { sealSessionLog } = require('./db-shared.js');
 const { gatingRebaseTasksForBuilder, shouldRefuseClaimResolve } = require('./db-ship.js');
@@ -293,6 +294,32 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
       overlapWarning = titles;
     }
 
+    // task 1001741: goal-aware proactive surfacing — also warn when an OPEN
+    // sibling in the same goal (not yet claimed) declares overlapping touches.
+    // Advisory only (ADR 0049); a failure here must never block the claim.
+    let siblingWarning = null;
+    if (task.goal_id != null) {
+      // SAVEPOINT-wrapped (the db-grade.js precedent): a failed statement inside
+      // an open pg transaction aborts the whole transaction, so without it the
+      // catch below would not make this check best-effort.
+      await client.query('SAVEPOINT sibling_overlap');
+      try {
+        const { rows: sibs } = await client.query(
+          `SELECT id, title, status, touches FROM tasks
+            WHERE goal_id = $1 AND id <> $2 AND cardinality(touches) > 0
+              AND NOT (status = ANY($3))`,
+          [task.goal_id, taskId, [...RESOLVED_STATUSES]]
+        );
+        const claimedIds = new Set(activeClaimRows.map((r) => String(r.task_id)));
+        const hits = siblingOverlaps(task, sibs, claimedIds);
+        await client.query('RELEASE SAVEPOINT sibling_overlap');
+        if (hits.length > 0) siblingWarning = hits;
+      } catch (err) {
+        await client.query('ROLLBACK TO SAVEPOINT sibling_overlap');
+        log.warn({ err: err.message, taskId }, '[claim] sibling-overlap check skipped');
+      }
+    }
+
     // Pre-allocate a migration number if the task signals it'll add one.
     // Trigger: the tasks.needs_migration boolean (migration 081, touches[]
     // cleanup [1/8] / task 876). Replaced the old touches[]-contains-'migrations/'
@@ -385,7 +412,7 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
         console.log('[gds] graduation broadcast post-claim failed:', e && e.message);
       }
     }
-    return { ...insertClaim.rows[0], just_unlocked: justUnlocked, overlap_warning: overlapWarning };
+    return { ...insertClaim.rows[0], just_unlocked: justUnlocked, overlap_warning: overlapWarning, sibling_overlap_warning: siblingWarning };
   } catch (err) {
     await client.query('ROLLBACK').catch(() => {});
     if (err && err.code === '23505') {

package/modules/lifecycle/db-goals.js

@@ -1223,7 +1223,7 @@ async function acceptMembershipRequestAndAddMember({ id, resolvedBy = null }, de
 // builder owns/manages so it doesn't drown an Archon in every goal's queue.
 async function listInboxFor(builderId, deps = {}) {
   const activePool = (deps.pool && process.env.NODE_ENV === 'test') ? deps.pool : pool;
-  const [invitations, joinRequests, myPendingRequests] = await Promise.all([
+  const [invitations, joinRequests, myPendingRequests, managedGoals] = await Promise.all([
     activePool.query(
       `SELECT r.id, r.goal_id, r.kind, r.status, r.note, r.created_at,
               g.title AS goal_title, g.version_id, g.visibility,
@@ -1259,11 +1259,25 @@ async function listInboxFor(builderId, deps = {}) {
         ORDER BY r.created_at, r.id`,
       [builderId]
     ),
+    // task 1001741: the OPEN goals this builder owns or leads — the set whose
+    // task conflicts they are told about (the route computes the conflicts; this
+    // only names the goals, so no task data is read here).
+    activePool.query(
+      `SELECT g.id, g.title
+         FROM goals g
+        WHERE g.status = 'open'
+          AND (g.created_by = $1
+               OR EXISTS (SELECT 1 FROM goal_members gm
+                           WHERE gm.goal_id = g.id AND gm.builder_id = $1 AND gm.membership_kind = 'lead'))
+        ORDER BY g.id`,
+      [builderId]
+    ),
   ]);
   return {
     invitations: invitations.rows,
     joinRequests: joinRequests.rows,
     myPendingRequests: myPendingRequests.rows,
+    managedGoals: managedGoals.rows,
   };
 }
 

package/modules/lifecycle/goal-conflicts.js

@@ -123,7 +123,64 @@ function computeGoalConflicts({ goalTasks = [], activeClaimTaskIds = new Set(),
   return out;
 }
 
+// siblingOverlaps — the CLAIM-TIME view (task 1001741): which OPEN sibling tasks
+// in the claimed task's own goal declare touches that overlap it. Advisory, like
+// every touches[] signal (ADR 0049); it names the sibling and the paths so the
+// claimer can self-serialize, and never refuses. Siblings already holding an
+// active claim are excluded — the active-claim warning already reports those.
+function siblingOverlaps(task, siblings = [], activeClaimTaskIds = new Set()) {
+  if (!isOpenWithTouches(task)) return [];
+  const out = [];
+  for (const s of siblings) {
+    if (!s || String(s.id) === String(task.id)) continue;
+    if (activeClaimTaskIds.has(String(s.id)) || !isOpenWithTouches(s)) continue;
+    const paths = overlappingPaths(task.touches, s.touches);
+    if (paths.length) out.push({ task_id: Number(s.id), title: s.title || '', overlapping_paths: paths });
+  }
+  return out.sort((a, b) => a.task_id - b.task_id);
+}
+
+// summarizeLiveConflicts — the owner/manager NOTIFICATION view (task 1001741):
+// only pairs where live work is involved (severity medium|high — at least one
+// side holds an active claim) are worth interrupting a person for; 'low' is a
+// planning-time heads-up that stays on the goal's own page. Returns counts plus
+// the single most urgent pair so the card can name something concrete.
+function summarizeLiveConflicts(pairs = []) {
+  const live = pairs.filter((p) => p.severity === 'high' || p.severity === 'medium');
+  const high = live.filter((p) => p.severity === 'high').length;
+  const top = live[0] || null; // computeGoalConflicts sorts most-severe first
+  return {
+    count: live.length,
+    high,
+    medium: live.length - high,
+    top: top && { task_a: top.task_a, task_b: top.task_b, title_a: top.title_a, title_b: top.title_b },
+  };
+}
+
+// goalConflictSummaries — the inbox slice (task 1001741): per goal, the live
+// conflict summary over its OWN tasks (cross-goal pairs stay on the goal page).
+// `db` is the lifecycle db facade, passed in so this file stays import-free.
+// Bounded on purpose: this runs on the Home boot read, so it looks at the first
+// MAX_INBOX_GOALS managed goals only, all in parallel, never one goal after another.
+const MAX_INBOX_GOALS = 10;
+async function goalConflictSummaries(db, goals = []) {
+  const rows = await Promise.all(goals.slice(0, MAX_INBOX_GOALS).map(async (g) => {
+    const goalTasks = await db.listTasks({ goalId: g.id });
+    const claims = await db.listActiveClaimsForTasks(goalTasks.map((t) => t.id));
+    const summary = summarizeLiveConflicts(computeGoalConflicts({
+      goalTasks,
+      activeClaimTaskIds: new Set(claims.map((c) => String(c.task_id))),
+    }));
+    return summary.count > 0 ? { goal_id: Number(g.id), goal_title: g.title || '', ...summary } : null;
+  }));
+  return rows.filter(Boolean);
+}
+
 module.exports = {
+  MAX_INBOX_GOALS,
+  goalConflictSummaries,
+  summarizeLiveConflicts,
+  siblingOverlaps,
   RESOLVED_STATUSES,
   isOpenWithTouches,
   normalizeEntry,

package/modules/lifecycle/routes/claims.js

@@ -292,7 +292,7 @@ module.exports = function buildClaimsRouter() {
         creatorSessionId: resolveCreatorSessionId(bindSession, req.gdsSession?.session_id),
         enforceOverlap: enforceTouches === true,
       });
-      const { just_unlocked: justUnlocked, overlap_warning: overlapWarning, ...claim } = claimResult;
+      const { just_unlocked: justUnlocked, overlap_warning: overlapWarning, sibling_overlap_warning: siblingOverlapWarning, ...claim } = claimResult;
       const task = await db.getTask(Number(taskId));
       // task 1168: keep the evergreen newcomer-chore shelf full. If this claim
       // took a chore instance, stamp a replacement NOW (before responding) so
@@ -326,7 +326,7 @@ module.exports = function buildClaimsRouter() {
         const p = rw && typeof rw.rewardConfig === 'function' ? rw.rewardConfig() : null;
         if (p && typeof p.mode === 'string') rewardMode = { mode: p.mode, perTaskCredit: p.perTaskCredit !== false };
       } catch (_) { /* display-only: a claim must never fail over this */ }
-      res.status(201).json({ claim, task, just_unlocked: justUnlocked ?? [], overlap_warning: overlapWarning ?? null, reward: rewardMode });
+      res.status(201).json({ claim, task, just_unlocked: justUnlocked ?? [], overlap_warning: overlapWarning ?? null, sibling_overlap_warning: siblingOverlapWarning ?? null, reward: rewardMode });
     } catch (err) {
       if (err && err.code) {
         const status =

package/modules/lifecycle/routes/goals.js

@@ -275,15 +275,15 @@ module.exports = function buildGoalsRouter() {
   // GET /goals/inbox — the caller's private-goals inbox (task 1952 / ADR 0112):
   // { invitations: invites addressed to me (accept/decline); joinRequests: pending
   // join-requests on goals I own or manage (approve/deny); myPendingRequests: my own
-  // outstanding requests }. Powers the home-page inbox widget (task 1954) + the
-  // goals page. Mounted BEFORE GET /goals/:id so the literal 'inbox' path is matched
-  // as its own route, not captured as an id (the /goals/reorder precedent).
-  // rank: any-builder — every builder reads their OWN inbox (db.listInboxFor scopes
-  // by req.builder.id; a builder can't read another's).
+  // outstanding requests; conflicts: live file conflicts in goals I manage, task 1001741,
+  // best effort }. Powers the home inbox widget (task 1954) + the goals page. Mounted BEFORE
+  // GET /goals/:id so 'inbox' is not captured as an id (/goals/reorder precedent).
+  // rank: any-builder — every builder reads their OWN inbox (listInboxFor scopes by req.builder.id).
   router.get('/goals/inbox', auth.requireBuilder, async (req, res) => {
     try {
-      const inbox = await db.listInboxFor(req.builder.id);
-      return res.json(inbox);
+      const { managedGoals = [], ...inbox } = await db.listInboxFor(req.builder.id);
+      const conflicts = await goalConflicts.goalConflictSummaries(db, managedGoals).catch((cErr) => { log.error('[gds] inbox conflicts skipped', cErr); return []; });
+      return res.json({ ...inbox, conflicts });
     } catch (err) {
       log.error('[gds] GET /goals/inbox', err);
       return res.fail('inbox_failed', { status: 500, message: 'internal error' });

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.1002",
+  "version": "1.19.1004",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.1002",
+      "version": "1.19.1004",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.1002",
+  "version": "1.19.1004",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/claim.js

@@ -672,6 +672,15 @@ async function main() {
       console.log(`\n⚠ touches[] overlaps an active claim: ${r.data.overlap_warning.join(', ')}`);
       console.log('  Advisory only — your claim stands; git merge is the authoritative collision check.');
     }
+    // task 1001741: goal-aware — an unclaimed OPEN sibling in the same goal
+    // declares overlapping files. Same advisory posture as above.
+    if (Array.isArray(r.data.sibling_overlap_warning) && r.data.sibling_overlap_warning.length > 0) {
+      console.log('\n⚠ touches[] overlaps open sibling task(s) in this goal:');
+      for (const s of r.data.sibling_overlap_warning) {
+        console.log(`  #${s.task_id} ${s.title} — ${s.overlapping_paths.join(', ')}`);
+      }
+      console.log('  Advisory only — a goal owner can sequence or rescope these from the goal page.');
+    }
     for (const ach of (r.data.just_unlocked || [])) {
       const bonus = ach.credit_bonus > 0 ? ` (+${ach.credit_bonus}c bonus)` : '';
       console.log(`✨ Achievement unlocked: ${ach.name}${bonus}`);

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.1002'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.1004'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/goal_conflicts.mjs

@@ -31,6 +31,10 @@ const { validate, LIMITS } = require('../src/bongos/routes/_helpers.js');
 const {
   RESOLVED_STATUSES, isOpenWithTouches, normalizeEntry, overlappingPaths,
   severityFor, computeGoalConflicts,
+  siblingOverlaps,
+  summarizeLiveConflicts,
+  goalConflictSummaries,
+  MAX_INBOX_GOALS,
 } = require('../modules/lifecycle/goal-conflicts.js');
 const { authorizeGoalManagement, RESOLVE_ACTIONS } = require('../modules/lifecycle/routes/goals.js');
 const { listActiveClaimsForTasks, requestClaimRelease, rescopeTaskTouches } = require('../modules/lifecycle/db.js');
@@ -294,6 +298,90 @@ await test('rescope wall: the route runs goal-scope-check verbatim (source contr
     'the rescope branch re-runs the scope wall on the new touches');
 });
 
+// =========================================================================
+// 4b. claim-time sibling overlap (task 1001741)
+// =========================================================================
+
+await test('siblingOverlaps: names open unclaimed siblings with overlapping touches, sorted', () => {
+  const me = { id: 1, status: 'ready', touches: ['src/bongos/'] };
+  const sibs = [
+    { id: 9, title: 'b', status: 'ready', touches: ['src/bongos/db.js'] },
+    { id: 3, title: 'a', status: 'backlog', touches: ['src/bongos/*'] },
+    { id: 4, title: 'far', status: 'ready', touches: ['docs/'] },
+  ];
+  const out = siblingOverlaps(me, sibs);
+  assert.deepEqual(out.map((x) => x.task_id), [3, 9]);
+  assert.deepEqual(out[1].overlapping_paths, ['src/bongos/db.js']);
+});
+
+await test('siblingOverlaps: skips self, resolved, claimed, and touch-less siblings', () => {
+  const me = { id: 1, status: 'ready', touches: ['a/'] };
+  const sibs = [
+    { id: 1, title: 'self', status: 'ready', touches: ['a/'] },
+    { id: 2, title: 'done', status: 'shipped', touches: ['a/'] },
+    { id: 3, title: 'held', status: 'active', touches: ['a/'] },
+    { id: 4, title: 'none', status: 'ready', touches: [] },
+  ];
+  assert.deepEqual(siblingOverlaps(me, sibs, new Set(['3'])), []);
+  assert.deepEqual(siblingOverlaps({ id: 1, touches: [] }, sibs), []);
+});
+
+await test('summarizeLiveConflicts: only medium/high pairs notify; low stays on the goal page', () => {
+  const pairs = [
+    { severity: 'high', task_a: 1, task_b: 2, title_a: 'A', title_b: 'B' },
+    { severity: 'medium', task_a: 3, task_b: 4, title_a: 'C', title_b: 'D' },
+    { severity: 'low', task_a: 5, task_b: 6, title_a: 'E', title_b: 'F' },
+  ];
+  const out = summarizeLiveConflicts(pairs);
+  assert.equal(out.count, 2);
+  assert.equal(out.high, 1);
+  assert.equal(out.medium, 1);
+  assert.deepEqual(out.top, { task_a: 1, task_b: 2, title_a: 'A', title_b: 'B' });
+  assert.deepEqual(summarizeLiveConflicts([pairs[2]]), { count: 0, high: 0, medium: 0, top: null });
+  assert.equal(summarizeLiveConflicts().count, 0);
+});
+
+await test('goalConflictSummaries: per managed goal, live pairs only, capped and parallel', async () => {
+  const byGoal = {
+    1: [task(10, ['a/'], 'active'), task(11, ['a/x.js'], 'ready')],   // medium pair → reported
+    2: [task(20, ['b/'], 'ready'), task(21, ['b/y.js'], 'ready')],    // low pair → not reported
+  };
+  const db = {
+    listTasks: async ({ goalId }) => byGoal[goalId] || [],
+    listActiveClaimsForTasks: async (ids) => ids.filter((id) => id === 10).map((id) => ({ task_id: id })),
+  };
+  const out = await goalConflictSummaries(db, [{ id: 1, title: 'One' }, { id: 2, title: 'Two' }]);
+  assert.equal(out.length, 1);
+  assert.equal(out[0].goal_id, 1);
+  assert.equal(out[0].goal_title, 'One');
+  assert.equal(out[0].count, 1);
+  assert.equal(out[0].medium, 1);
+
+  let asked = 0;
+  const counting = { listTasks: async () => { asked++; return []; }, listActiveClaimsForTasks: async () => [] };
+  const many = Array.from({ length: MAX_INBOX_GOALS + 7 }, (_, i) => ({ id: i + 1, title: 'g' }));
+  await goalConflictSummaries(counting, many);
+  assert.equal(asked, MAX_INBOX_GOALS, 'a builder leading many goals cannot make Home boot unbounded');
+});
+
+await test('inbox card: cleanTitle really strips dashes (regex keeps its \s, not a literal s)', async () => {
+  const fs = await import('node:fs');
+  const src = fs.readFileSync(new URL('../modules/hall-ui/public/goal-inbox.js', import.meta.url), 'utf8');
+  const line = src.split('\n').find((l) => l.includes('const cleanTitle ='));
+  assert.ok(line, 'cleanTitle exists');
+  const clean = new Function('return ' + line.split('const cleanTitle =')[1].trim().replace(/;$/, ''))();
+  assert.equal(clean('Fix A — B'), 'Fix A, B');
+  assert.equal(clean('tools—stuff'), 'tools, stuff', 'no adjacent letter is eaten');
+});
+
+await test('inbox route: conflicts ride GET /goals/inbox for managed goals, best-effort', async () => {
+  const fs = await import('node:fs');
+  const src = fs.readFileSync(new URL('../modules/lifecycle/routes/goals.js', import.meta.url), 'utf8');
+  const inboxBranch = src.split("router.get('/goals/inbox'")[1].split("router.get('/goals/:id'")[0];
+  assert.match(inboxBranch, /goalConflicts\.goalConflictSummaries\(db, managedGoals\)/);
+  assert.match(inboxBranch, /\.catch\(\(cErr\)/, 'a conflict failure must not take the inbox down');
+});
+
 // =========================================================================
 // 5. the route-rank pin
 // =========================================================================

package/tests/hall_mine_lens.mjs

@@ -163,7 +163,7 @@ function bootWorkBoard({ signedIn = true, goalsFail = false } = {}) {
     OTBKit: kit,
     OTBTaskDetail: { href: (id) => `/task/${id}`, open() {} },
     OTBTaskLib: {
-      priorityRank: () => 0, touchesConflict: () => false, rankTagHtml: () => '',
+      priorityRank: () => 0, touchesConflict: () => false, conflictPeers: () => [], conflictChipHtml: () => '', rankTagHtml: () => '',
       creditsPerMinute: () => 0, buildPromptForTask: () => '', friendlyBatchReason: () => '',
       taskActivityMs: () => 0, STALE_CHOICES: [{ value: '', label: '— any —' }], isStale: () => false,
     },