@bongos/core 1.19.482 → 1.19.484

package/docs/module-api-changelog.md

@@ -1401,5 +1401,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.480 with no explicit bump. run 33670051626. (task 1002620)
   1.19.482 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.481 with no explicit bump. run 33670786915. (task 1002620)
+  1.19.483 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.482 with no explicit bump. run 33674657478. (task 1002620)
+  1.19.484 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.483 with no explicit bump. run 33675143968. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/builders.js

@@ -173,6 +173,11 @@
   // (same pattern as lastNeedsState). These are un-landed confirmed tasks that
   // GATE new claims and whose reward is pending until they land on ship.
   let lastRebaseState = null;
+  // task 1003464: the two halves of the greeting's status sentence — the
+  // public version progress and how many tasks the claimable feed returned.
+  // Null until each lands; the sentence says only what it knows.
+  let lastProgressState = null;
+  let lastClaimableCount = null;
 
   // Cached /me payload from the most recent loadAll() call. Used by the
   // welcome-chip reopen path (#408) so we can re-render the welcome panel
@@ -891,6 +896,10 @@
     if (!wrap || !list) return;
     try {
       const resp = await getJSON(`${API}/tasks/claimable`, { softAuth: true });
+      // task 1003464: the same feed answers the greeting's "N tasks are
+      // claimable right now" — rank-scoped, so it is THIS builder's number.
+      lastClaimableCount = resp && Array.isArray(resp.claimable) ? resp.claimable.length : null;
+      renderGreeting();
       const rows = (resp && Array.isArray(resp.claimable) ? resp.claimable : []).slice(0, 2);
       if (!rows.length) { wrap.hidden = true; if (subhead) subhead.hidden = true; return; }
       const cur = (window.__BRANDING__ && window.__BRANDING__.currency && window.__BRANDING__.currency.label) || 'credits';
@@ -1039,6 +1048,7 @@
     window.__buildersSelfId = me.builder?.id ?? null;
     renderWelcome(me.builder, me.onboarding || null);
     renderProfile(me.builder);
+    renderGreeting(); // task 1003464: "Good morning, <name>" — the h1 — as soon as /me answers
     // #731: the CLI-token re-issue card (V3.R91 #401) and the Discord connect/
     // link card (F7, ADR 0033) moved to /builders/settings — the hall's Standing
     // card is identity-only now.
@@ -1087,13 +1097,19 @@
     // down the page — log and show an inline placeholder.
     // #726: the per-skill model picker (Voices) moved to /builders/settings,
     // so the hall no longer fetches /me/skill-prefs here.
-    const [achAll, ships, versionsResp, lb] = await Promise.allSettled([
+    const [achAll, ships, versionsResp, lb, progress] = await Promise.allSettled([
       getJSON(`${API}/achievements`),
       getJSON(`${API}/me/recent-ships?limit=all`),
       getJSON(`${API}/versions`),
       getJSON(`${API}/leaderboard`),
+      getJSON(`${API}/public/progress`), // task 1003464: "<version> is N percent shipped"
     ]);
 
+    if (progress.status === 'fulfilled') {
+      lastProgressState = progress.value;
+      renderGreeting();
+    }
+
     if (achAll.status === 'fulfilled') {
       // Show top 10 by sort_order — already ordered server-side. (Set is locked at 8
       // for V2, so the slice is defensive.) Unlocked + locked-with-progress come
@@ -1314,13 +1330,15 @@
   // reads what this page holds NOW rather than what it held at boot. Everything
   // else is stable for the life of the page. This call sits AFTER every
   // declaration it passes — moving it earlier is a temporal-dead-zone crash.
-  const { SETUP_CONFIG_KEY, analyticsState, lbState, mountHallWidgets, onboardingBox, renderCurveBody, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey } = window.OTBHallRender({
+  const { SETUP_CONFIG_KEY, analyticsState, lbState, mountHallWidgets, onboardingBox, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey } = window.OTBHallRender({
     API, RANK_ORDER, api, brandWorld, curLabel, emptyRow, fmtDate, mins, normalizeRank, pct, postJSON, rankLabel, rankWeight, signClasses, toast, usd,
     get instanceRepo() { return instanceRepo; },
+    get lastClaimableCount() { return lastClaimableCount; },
     get lastCostState() { return lastCostState; },
     get lastKarmaState() { return lastKarmaState; },
     get lastMeState() { return lastMeState; },
     get lastNeedsState() { return lastNeedsState; },
+    get lastProgressState() { return lastProgressState; },
     get lastRebaseState() { return lastRebaseState; },
     get newcomerGated() { return newcomerGated; },
   });

package/modules/hall-ui/public/goal-inbox.js

@@ -272,6 +272,13 @@
     host.hidden = true; // stays hidden until a slice finds something actionable
     host.innerHTML =
       '<h2 id="attention-h" class="scroll__h">Needs your attention<span class="count-pill" id="attention-count" hidden></span></h2>' +
+      // task 1003464: the system's own notices — rebase owed, an input the
+      // system needs, the monthly budget — used to stack as banners INSIDE the
+      // Standing card. They are lines here now (rendered by hall-render.js
+      // renderSystemNotices from the /me state it already holds), first because
+      // a paused queue outranks an invitation. Rows carry .ginbox__item so
+      // refresh() counts them.
+      '<div id="attention-system"></div>' +
       '<div id="attention-goals"></div>' +
       // task 1002802 (P06): "Complete your profile" — a DISMISSIBLE nudge when
       // bio or preferred_disciplines are empty. Rendered by builders.js (which

package/modules/hall-ui/public/hall-render.js

@@ -508,7 +508,7 @@
         </div>
         <div class="profile__disciplines">
           <span class="profile__disc-label">Preferred work:</span>
-          <span class="profile__disc-value">${prefs.length ? escapeHtml(prefs.join(', ')) : 'none chosen yet'}</span>
+          <span class="profile__disc-value">${prefs.length ? escapeHtml(prefs.join(', ')) : PREFS_EMPTY}</span>
           <a class="profile__disc-edit" href="/settings">Change in Settings →</a>
         </div>
       </div>
@@ -542,30 +542,121 @@
     const statsSection = document.getElementById('home-stats');
     if (statsSection && !ctx.newcomerGated) statsSection.hidden = false;
 
+    // task 1003464: the Home card as the mock draws it — an identity LINE and a
+    // three-row fact ledger. The mock repeats Credits and the place even though
+    // the stat band above carries both; the card is built as approved, all three
+    // rows, because that content is also what makes it end level with Goals.
+    // The notices that used to stack in here are inbox lines now.
     const homeStanding = document.getElementById('home-standing-body');
     if (homeStanding) {
+      const place = rollPlace ? `${ordinal(rollPlace.place)} of ${fmtNum(rollPlace.total)}` : '—';
       homeStanding.innerHTML = `
-        ${rebaseBanner}
-        ${needsBanner}
-        ${budgetBanner}
-        <div class="profile profile--compact">
-          ${avatar}
-          <div>
-            <div class="profile__name-row">
-              <p class="profile__name">${escapeHtml(builder.display_name || builder.github_login || 'Builder')}</p>
-              ${rankBadge}
-            </div>
-            <p class="profile__handle">@${escapeHtml(builder.github_login || 'unknown')}</p>
-            <div class="profile__stats">
-              <span>Member since ${fmtDate(builder.created_at)}</span>
-              <span>${prefs.length ? escapeHtml(prefs.join(', ')) : 'no preferred work yet'}</span>
-            </div>
+        <div class="home-who">
+          ${builder.avatar_url
+            ? `<img class="home-who__avatar" src="${escapeHtml(builder.avatar_url)}" alt="">`
+            : '<span class="home-who__avatar" aria-hidden="true"></span>'}
+          <div class="home-who__meta">
+            <p class="home-who__name">${escapeHtml(builder.display_name || builder.github_login || 'Builder')}</p>
+            <p class="home-who__handle">@${escapeHtml(builder.github_login || 'unknown')}</p>
           </div>
+          <span class="home-who__rank">${builder.rank ? renderRankBadge(normalizeRank(builder.rank), { tip: false }) : ''}</span>
         </div>
+        <dl class="home-facts">
+          <div><dt>${escapeHtml(curLabel(true))}</dt><dd>${fmtNum(builder.total_credits)}</dd></div>
+          <div><dt>On the board</dt><dd>${place}</dd></div>
+          <div><dt>Preferred work</dt><dd>${prefs.length ? escapeHtml(prefs.join(', ')) : PREFS_EMPTY}</dd></div>
+        </dl>
       `;
     }
     const homeStandingSection = document.getElementById('home-standing');
     if (homeStandingSection && !ctx.newcomerGated) homeStandingSection.hidden = false;
+    renderSystemNotices({ rebaseTasks, need, cost });
+  }
+
+  // The ONE string for "no preferred work chosen" — the mock's copy — on both
+  // Standing surfaces (the Home card and the full view), so they cannot drift.
+  const PREFS_EMPTY = 'Not set yet';
+
+  const ordinal = (n) => {
+    const v = Number(n) || 0;
+    const s = (v % 100 >= 11 && v % 100 <= 13) ? 'th' : ({ 1: 'st', 2: 'nd', 3: 'rd' }[v % 10] || 'th');
+    return `${v}${s}`;
+  };
+
+  // task 1003464: the three system notices as inbox LINES on Home (the
+  // placement rule in modules/hall-ui/CLAUDE.md: an action awaiting the builder
+  // is a line item in Needs-attention, never a card). Only what awaits the
+  // builder lands here — a "we cover it" note is information, and stays on the
+  // full Standing view with the other two, where the banners still render.
+  function renderSystemNotices({ rebaseTasks, need, cost }) {
+    const box = document.getElementById('attention-system');
+    if (!box) return;
+    const rows = [];
+    if (rebaseTasks.length) {
+      const refs = rebaseTasks.map((t) => {
+        const id = String(t.id);
+        const href = window.OTBTaskDetail && typeof window.OTBTaskDetail.href === 'function' ? window.OTBTaskDetail.href(id) : `/task/${encodeURIComponent(id)}`;
+        return `<a href="${escapeHtml(href)}">task ${escapeHtml(id)}</a>`;
+      }).join(', ');
+      const one = rebaseTasks.length === 1;
+      rows.push(`<li class="ginbox__item ginbox__item--danger"><div class="ginbox__body">` +
+        `<span class="ginbox__kind">Rebase owed</span>` +
+        `<span class="ginbox__line">New claims are paused: ${rebaseTasks.length} confirmed ${one ? 'task' : 'tasks'} can't land yet, so ${one ? 'its' : 'their'} reward is pending. Rebase and re-ship, or release: ${refs}.</span>` +
+        `</div></li>`);
+    }
+    if (need && need.state === 'action_needed') {
+      const act = need.action && need.action.href
+        ? `<div class="ginbox__actions"><a class="btn-ghost" href="${escapeHtml(need.action.href)}">${escapeHtml(need.action.label || 'Set it up')}</a></div>`
+        : '';
+      rows.push(`<li class="ginbox__item ginbox__item--warn"><div class="ginbox__body">` +
+        `<span class="ginbox__kind">${escapeHtml(need.title)}</span>` +
+        `<span class="ginbox__line">${escapeHtml(need.message)}</span>` +
+        `</div>${act}</li>`);
+    }
+    if (cost && (cost.level === 'warn' || cost.level === 'over')) {
+      const over = cost.level === 'over';
+      rows.push(`<li class="ginbox__item ginbox__item--${over ? 'danger' : 'warn'}"><div class="ginbox__body">` +
+        `<span class="ginbox__kind">${over ? 'Monthly budget exceeded' : 'Approaching monthly budget'}</span>` +
+        `<span class="ginbox__line">$${escapeHtml(String(cost.spend_mtd_usd))} of $${escapeHtml(String(cost.budget_mtd_usd))} this month (${escapeHtml(String(cost.pct_used))}%). ${over ? 'Shipping and art generation are paused until an Archon raises your budget.' : 'At 100% these actions pause until an Archon raises your budget.'}</span>` +
+        `</div></li>`);
+    }
+    box.innerHTML = rows.length ? `<h3 class="ginbox__sec-h">From the system</h3><ul class="ginbox">${rows.join('')}</ul>` : '';
+    if (window.OTBAttention && typeof window.OTBAttention.refresh === 'function') window.OTBAttention.refresh();
+  }
+
+  // task 1003464: the greeting IS Home's one h1 (the mock opens with it), and
+  // the sub-line is the live status sentence — how far the version is and
+  // whether there is anything to do — the one line a returning builder needs.
+  // Each half renders as its data lands; the line stays hidden until one has.
+  const SMALL_NUMBERS = ['', 'one', 'two', 'three', 'four', 'five', 'six', 'seven', 'eight', 'nine', 'ten', 'eleven', 'twelve'];
+  const greetingWord = (hour) => (hour < 12 ? 'Good morning' : (hour < 18 ? 'Good afternoon' : 'Good evening'));
+  // The version the sentence is about: the one being built with the most work in it.
+  function currentVersion(progress) {
+    const rows = progress && Array.isArray(progress.progress) ? progress.progress : [];
+    return rows.filter((r) => r && r.status === 'building')
+      .sort((a, b) => (Number(b.total_count) || 0) - (Number(a.total_count) || 0))[0] || null;
+  }
+  function renderGreeting() {
+    const h1 = document.getElementById('hall-h1');
+    const sub = document.getElementById('hall-sub');
+    const builder = ctx.lastMeState && ctx.lastMeState.builder;
+    if (h1 && builder) {
+      h1.textContent = `${greetingWord(new Date().getHours())}, ${builder.display_name || builder.github_login || 'builder'}`;
+    }
+    if (!sub) return;
+    const parts = [];
+    const v = currentVersion(ctx.lastProgressState);
+    if (v) parts.push(`${v.version_id} is ${Math.round(Number(v.percent_complete) || 0)} percent shipped.`);
+    const n = ctx.lastClaimableCount;
+    if (typeof n === 'number') {
+      if (n === 0) parts.push('Nothing is claimable right now.');
+      else {
+        const word = n < SMALL_NUMBERS.length ? SMALL_NUMBERS[n] : fmtNum(n);
+        parts.push(`${word.charAt(0).toUpperCase()}${word.slice(1)} ${n === 1 ? 'task is' : 'tasks are'} claimable right now.`);
+      }
+    }
+    sub.textContent = parts.join(' ');
+    sub.hidden = parts.length === 0;
   }
   const ONBOARDING_STAGE_ORDER = [
     'auth_complete',
@@ -1116,6 +1207,6 @@
     return idx === -1 ? null : { place: idx + 1, total: ranked.length };
   }
 
-    return { SETUP_CONFIG_KEY, analyticsState, lbState, mountHallWidgets, onboardingBox, renderCurveBody, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey };
+    return { SETUP_CONFIG_KEY, analyticsState, lbState, mountHallWidgets, onboardingBox, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey };
   };
 })();

package/modules/hall-ui/public/index.html

@@ -34,7 +34,17 @@
            it sets document.title + this element's text from the branding pack.
            The visible brand mark lives in the sidebar (shell.js reads the pack
            directly); this stays as the invisible chrome hook + a11y page title. -->
-      <h1 id="hall-h1" class="sr-only">Builders' Hall</h1>
+      <!-- task 1003464: the mock opens with a greeting, and it IS the page's one h1
+           (one-header-main-h1 — never a second one). The static text is the no-JS /
+           signed-out fallback and what brand-apply.js writes the hall's name into;
+           hall-render.js renderGreeting turns it into "Good morning, <name>" once
+           /me answers, and fills the sub-line — the live status sentence (how far
+           the version is, whether anything is claimable) — hidden until it has
+           something to say. The label voice is the board's own (.page-head--board). -->
+      <div class="page-head page-head--board page-head--hall">
+        <h1 id="hall-h1" class="page-head__h">Builders' Hall</h1>
+        <p id="hall-sub" class="page-head__sub" hidden></p>
+      </div>
 
       <!-- BV1.R75 (ADR 0062 §4): hall widgets are NOT hardcoded here. Every widget
            — core (hall-widgets.js) and module-contributed (a module's own client

package/modules/hall-ui/public/style.css

@@ -926,11 +926,13 @@ main:focus { outline: none; }
 }
 
 .app-views .view > .view-zone + .view-zone { margin-top: var(--sp-md); }
+/* No align-items (task 1003464): the mock's .band declares none, so the grid
+   default — stretch — makes both cards fill the row and end level. `start` let
+   each card shrink to its content, and Standing stopped short under Goals. */
 .view-zone--band {
   display: grid;
   grid-template-columns: 1fr 1fr;
   gap: var(--sp-md);
-  align-items: start;
 }
 .view-zone--band > .scroll { margin: 0; }
 .view-zone:empty { display: none; }
@@ -2782,6 +2784,73 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
 .ginbox__note { margin: 3px 0 0; font-size: 12.5px; color: var(--ink-soft); font-style: italic; }
 .ginbox__actions { flex: 0 0 auto; display: flex; gap: 6px; }
 .ginbox__pending { font-size: 12.5px; margin: 10px 0 0; color: var(--ink-soft); }
+/* task 1003464: the system's notices are inbox LINES on Home (rebase owed, an
+   input the system needs, the monthly budget) — the placement rule, not a
+   banner inside the Standing card. A row is a kind in the label voice over one
+   line of ink; tone marks the exception, on the kind only. */
+.ginbox__kind {
+  font-family: var(--label-face);
+  font-size: var(--label-size);
+  letter-spacing: var(--label-space);
+  text-transform: var(--label-case);
+  color: var(--ink-faint);
+}
+.ginbox__line { font-size: 13.5px; color: var(--ink); }
+/* a task ref inside a line (rebase owed) is a link in prose: the same 24px
+   row recipe as the row links below, or it sits under the floor at 13.5px */
+.ginbox__line a {
+  display: inline-block;
+  min-height: 24px;
+  padding: 3px 0;
+  line-height: 18px;
+  box-sizing: border-box;
+  color: var(--ink);
+  text-decoration: underline;
+  text-underline-offset: 3px;
+}
+.ginbox__item--warn .ginbox__kind { color: var(--warn); }
+.ginbox__item--danger .ginbox__kind { color: var(--danger); }
+/* The link in a Home row takes the mock's row recipe (.att__line a, .g__t): 3px
+   of vertical padding lifts a 13–14px line to the 24px floor without re-spacing
+   the row. The populated harness measured these at 21–23px (task 1003464); the
+   kit's own stub never showed it, because it serves no rows. */
+.ginbox__goal, .triage-inbox__link, .next-up__title {
+  display: inline-block;
+  min-height: 24px;
+  padding: 3px 0;
+  line-height: 18px;
+  box-sizing: border-box;
+}
+
+/* ---------- Home: the Standing card as the mock draws it (task 1003464) ----------
+   docs/design/mocks/hall/board/v3.html: an identity LINE (a 36px avatar, the
+   name over the handle, the rank on the right) and a three-row fact ledger —
+   Credits, On the board, Preferred work. With .view-zone--band stretching its
+   two cards, this content is what makes Standing end level with Goals. */
+.home-who { display: flex; align-items: center; gap: 12px; padding-bottom: 14px; }
+.home-who__avatar {
+  width: 36px; height: 36px; flex: none;
+  border-radius: 50%;
+  background: var(--skeleton);
+  border: 1px solid var(--rule);
+  object-fit: cover;
+}
+.home-who__meta { display: flex; flex-direction: column; min-width: 0; }
+.home-who__name { margin: 0; font-size: 15px; font-weight: 500; color: var(--ink); }
+.home-who__handle { margin: 0; font-family: var(--font-mono); font-size: 12px; color: var(--ink-faint); }
+.home-who__rank { margin-left: auto; }
+.home-facts { margin: 0; display: grid; grid-template-columns: 1fr auto; gap: 0; }
+.home-facts > div { display: contents; }
+.home-facts dt, .home-facts dd { margin: 0; padding: 9px 0; border-top: 1px solid var(--rule-soft); }
+.home-facts dt {
+  font-family: var(--label-face);
+  font-size: var(--label-size);
+  letter-spacing: var(--label-space);
+  text-transform: var(--label-case);
+  color: var(--ink-faint);
+}
+.home-facts dd { text-align: right; font-size: 14px; color: var(--ink); font-variant-numeric: tabular-nums; }
+.home-facts > div:first-child dt, .home-facts > div:first-child dd { border-top: 0; padding-top: 0; }
 
 /* ---------- hall-kit components (task 2166) ----------
    Styles for the shared kit (hall-kit.js / window.OTBKit): pager bar,

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.482",
+  "version": "1.19.484",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.482",
+      "version": "1.19.484",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.482",
+  "version": "1.19.484",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/claim.js

@@ -67,18 +67,49 @@ async function printRelevantLearnings(task) {
 // invalid map, or a discipline with no entry (engineer/artist today), prints
 // nothing and never breaks a successful claim.
 function printDisciplineMode(task) {
+  let mode = null;
   try {
     const discipline = task && task.discipline;
     if (!discipline) return;
     const raw = fs.readFileSync(path.join(__dirname, 'discipline-modes.json'), 'utf8');
     const modes = (JSON.parse(raw) || {}).modes || {};
-    const mode = modes[discipline];
+    mode = modes[discipline];
     if (!mode || !mode.directive) return;
     console.log('');
     console.log(`▶ ${mode.label || 'Working mode'} — /${mode.skill}`);
     console.log(`  ${mode.directive}`);
   } catch (_) {
     // never let the mode hint break a successful claim
+    return;
+  }
+  materializeModeSkills(mode);
+}
+
+// A task brings its own tools (task 1003486). A mode whose entry opts in with
+// `materializeModuleSkills` lands the module-owned skills its playbook names — for
+// `ui`, the ui-design taste kit /design sends the session to use — into THIS
+// checkout's .claude/skills/, as the untracked, self-ignored copies ADR 0224 defined.
+// Without it a builder is routed to /design, reads that impeccable and minimalist-ui
+// are the tools, and finds none of them on the machine with no error saying why.
+// Carried by the claim rather than a hook or a session start because a workbench is
+// not re-provisioned every session (owner decision 2026-09-02): it runs only when
+// someone actually claims work of that discipline.
+//
+// Fail-open in every branch, like the hint above it: the server already granted the
+// claim, so nothing here may throw past this point — a failure prints the one command
+// that does it by hand. The require is lazy so a claim of any other discipline never
+// pays for loading the materialiser (and a broken materialiser cannot stop a claim).
+function materializeModeSkills(mode) {
+  if (!mode || mode.materializeModuleSkills !== true) return;
+  try {
+    const { materializeModuleSkillsIntoCore, isCoreCheckoutRoot } = require('./claude-materialize');
+    const coreRoot = path.resolve(__dirname, '..', '..');
+    if (!isCoreCheckoutRoot(coreRoot)) return; // a scaffolded instance already has them from `bongos init`
+    const s = materializeModuleSkillsIntoCore({ coreRoot });
+    const n = s.materialized.length;
+    if (n) console.log(`  ✓ ${n} module-owned skill(s) for this mode are in .claude/skills/ (untracked copies — ADR 0224).`);
+  } catch (e) {
+    console.log(`  ⚠ could not land this mode's module-owned skills — run \`node scripts/gds/claude-materialize.js --module-skills-only\` (${e && e.message}).`);
   }
 }
 
@@ -638,4 +669,4 @@ if (require.main === module) {
   });
 }
 
-module.exports = { formatClaimFailure, claimErrorInfo, goalMembershipOfferPlan };
+module.exports = { formatClaimFailure, claimErrorInfo, goalMembershipOfferPlan, materializeModeSkills };

package/scripts/gds/claude-materialize.js

@@ -28,6 +28,7 @@ const path = require('node:path');
 const { spawnSync } = require('node:child_process');
 const { VERBS } = require('../../bin/bongos.js'); // side-effect-free require (guarded main)
 const ic = require('../../src/instance-config'); // neutral configDir/envPrefix fallbacks (never a founder literal)
+const { isCorePackageName } = require('../../src/module-loader/catalog'); // one definition of "this checkout IS the core"
 const { renderInstanceClaudeMd } = require('./claude-md-template'); // task 2104 — the starter CLAUDE.md
 
 // script basename (e.g. "ship.js") → dedicated bongos verb, for verbs that map to a bare script with
@@ -469,6 +470,24 @@ function materializeClaude({ coreRoot, instanceDir, dryRun = false, overwrite =
 // core's own tracked .claude/skills/ carries is left to the core. Idempotent: every run first
 // removes what the last manifest named (so a skill a module stopped declaring does not
 // linger), then lands the current set; `clean` stops after the removal.
+// Is `root` the core CHECKOUT — a workbench a builder edits — rather than the core
+// package installed under a scaffolded instance's node_modules? Only a checkout's own
+// .claude/skills/ is the directory Claude Code reads for that project, so only there
+// does materialising the module-owned skills put them in front of anyone; an instance
+// already received them at ITS root from `bongos init`, and a second copy under
+// node_modules/@bongos/core would be invisible (task 1003486). Fail-soft by
+// construction: an unreadable package.json answers "not the core checkout", which is
+// the conservative no-op rather than a copy into a tree we could not identify.
+function isCoreCheckoutRoot(root) {
+  try {
+    const abs = path.resolve(root);
+    if (abs.split(/[\\/]+/).includes('node_modules')) return false;
+    return isCorePackageName(JSON.parse(fs.readFileSync(path.join(abs, 'package.json'), 'utf8')).name);
+  } catch (_) {
+    return false;
+  }
+}
+
 const MODULE_SKILLS_MANIFEST = '.module-skills.json';
 function readModuleSkillsManifest(skillsDir) {
   const m = readJsonSafe(path.join(skillsDir, MODULE_SKILLS_MANIFEST));
@@ -535,4 +554,4 @@ if (require.main === module) {
   process.exit(s.refused.length ? 1 : 0);
 }
 
-module.exports = { scriptToVerb, bongosify, transformSettings, copyTreeTransformed, materializeClaude, materializeModuleSkillsIntoCore, readModuleSkillsManifest, MODULE_SKILLS_MANIFEST, GDS_INVOCATION_RE, buildRebrandRules, rebrandText, disabledModuleSkills, moduleSkillRoster, moduleSkillSources, vendoredSkillGate, SKILL_NAME_RE, VENDOR_DEFAULT_POLICY };
+module.exports = { scriptToVerb, bongosify, transformSettings, copyTreeTransformed, materializeClaude, materializeModuleSkillsIntoCore, isCoreCheckoutRoot, readModuleSkillsManifest, MODULE_SKILLS_MANIFEST, GDS_INVOCATION_RE, buildRebrandRules, rebrandText, disabledModuleSkills, moduleSkillRoster, moduleSkillSources, vendoredSkillGate, SKILL_NAME_RE, VENDOR_DEFAULT_POLICY };

package/scripts/gds/discipline-modes.json

@@ -1,5 +1,5 @@
 {
-  "_doc": "Discipline -> operating-playbook map (task 1267). A discipline whose work is best done as a *mode of working* rather than the default claim->build->ship loop names the skill that IS its playbook here. claim.js reads this after a successful claim: if the claimed task's `discipline` has an entry, it prints the entry's `directive` so the session opens the right playbook. There is NO classification step at claim time — `discipline` is already a column on the task. This is the whole discipline-fork mechanism: one carrier (the claim the builder already runs), one data lookup, no hooks, the Conductor untouched. Absence of an entry is the default: engineer and artist are intentionally NOT listed, so their claim output is unchanged and they stay in the standard build-and-ship loop. To give a discipline its own experience later, add an entry here and write the skill — no code change in claim.js. A missing or invalid version of this file must never break a claim (claim.js fails open).",
+  "_doc": "Discipline -> operating-playbook map (task 1267). A discipline whose work is best done as a *mode of working* rather than the default claim->build->ship loop names the skill that IS its playbook here. claim.js reads this after a successful claim: if the claimed task's `discipline` has an entry, it prints the entry's `directive` so the session opens the right playbook. There is NO classification step at claim time — `discipline` is already a column on the task. This is the whole discipline-fork mechanism: one carrier (the claim the builder already runs), one data lookup, no hooks, the Conductor untouched. Absence of an entry is the default: engineer and artist are intentionally NOT listed, so their claim output is unchanged and they stay in the standard build-and-ship loop. To give a discipline its own experience later, add an entry here and write the skill — no code change in claim.js. A missing or invalid version of this file must never break a claim (claim.js fails open). A mode entry may also set `\"materializeModuleSkills\": true` to have the claim land that mode's module-owned skills into this checkout's .claude/skills/ (task 1003486) — opt-in per discipline, core-checkout only, and fail-open like the hint itself, so a discipline that omits it claims exactly as before.",
   "modes": {
     "engineer": {
       "skill": "dev",
@@ -18,6 +18,7 @@
     },
     "ui": {
       "skill": "design",
+      "materializeModuleSkills": true,
       "label": "UI design session",
       "directive": "This is a UI task — interface DESIGN work (layout, wireframes, design systems, Figma / Claude-Design), split out of the pixel-art `artist` lane (ADR 0079). To work it, invoke the /design skill — the operating playbook for UI-design sessions, the only place the experience is defined. Like /paint it is show-first: communicate in mock-ups and rendered screens, not paragraphs about layout decisions — stage the change on your sandbox preview (/builder-stage) and look at the real interface before shipping. Keep the locked branding (config/branding.json) and the existing component conventions of the surface you touch (modules/status-ui, modules/hall-ui, public/game/ui). If no human is present (autonomous / bypass-permissions), produce the design, stage it for review, and park the screens rather than shipping interface changes blind. Open /design now rather than working this task the default way."
     }

package/src/module-api.js

@@ -34,7 +34,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.482'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.484'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/claude_materialize.mjs

@@ -9,6 +9,9 @@
 //   3. transformSettings — rewrites only the scripts/gds hook commands, keeps .claude/hooks/ ones.
 //   4. materializeClaude — copies + transforms skills into a target dir (no leftover node scripts/gds),
 //      writes settings.json, copies hooks; and NO-OPS when the target IS the core root (self-copy guard).
+//   5. task 1003486 — a UI task brings its own tools: the `materializeModuleSkills` opt-in on a
+//      discipline-modes entry, the core-checkout probe that keeps it out of a scaffolded instance,
+//      and the fail-open contract (a materialise error never breaks a claim the server already granted).
 //
 // Run:  node tests/claude_materialize.mjs
 
@@ -22,6 +25,7 @@ import { fileURLToPath } from 'node:url';
 const require = createRequire(import.meta.url);
 const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 const m = require('../scripts/gds/claude-materialize.js');
+const claim = require('../scripts/gds/claim.js');
 
 let passed = 0;
 let failed = 0;
@@ -484,5 +488,77 @@ t('--module-skills-only: the CLI entry refuses without the flag (usage, exit 2)
   rmSync(dir, { recursive: true, force: true });
 });
 
+// ---- task 1003486: claiming a ui task lands /design's tools in the checkout ----
+
+t('the materialise-at-claim trigger is DATA: the ui mode opts in, every other discipline claims exactly as before', () => {
+  const modes = JSON.parse(readFileSync(join(ROOT, 'scripts', 'gds', 'discipline-modes.json'), 'utf8')).modes;
+  assert.equal(modes.ui.materializeModuleSkills, true, 'a ui claim brings the skills /design names');
+  assert.equal(modes.ui.skill, 'design', 'and still routes to /design');
+  for (const d of ['engineer', 'ideator', 'artist']) {
+    assert.ok(!modes[d].materializeModuleSkills, `${d} did not opt in, so its claim output is unchanged`);
+  }
+});
+
+t('isCoreCheckoutRoot: true for a real core checkout, false for the core installed into an instance, false for anything unreadable', () => {
+  assert.equal(m.isCoreCheckoutRoot(ROOT), true, 'this checkout names itself the core and is not under node_modules');
+  assert.equal(m.isCoreCheckoutRoot(join(ROOT, 'node_modules', '@bongos', 'core')), false,
+    'a scaffolded instance runs claim.js from node_modules — materialising there would be invisible');
+  const other = mkdtempSync(join(tmpdir(), 'cm-not-core-'));
+  writeFileSync(join(other, 'package.json'), JSON.stringify({ name: 'some-instance' }));
+  assert.equal(m.isCoreCheckoutRoot(other), false, 'another checkout is that instance, not the core');
+  assert.equal(m.isCoreCheckoutRoot(join(other, 'nope')), false, 'an unreadable tree answers no — the conservative no-op');
+  rmSync(other, { recursive: true, force: true });
+});
+
+t('materializeModeSkills: a discipline that did not opt in does nothing, and a materialise failure prints one hint instead of breaking the claim', () => {
+  const lines = [];
+  const realLog = console.log;
+  console.log = (...a) => lines.push(a.join(' '));
+  const mPath = require.resolve('../scripts/gds/claude-materialize.js');
+  const realExports = require.cache[mPath].exports;
+  try {
+    for (const mode of [null, undefined, {}, { skill: 'dev' }, { materializeModuleSkills: false }, { materializeModuleSkills: 'yes' }]) {
+      claim.materializeModeSkills(mode);
+    }
+    assert.deepEqual(lines, [], 'no opt-in => nothing printed and nothing copied');
+
+    // forced failure in the materialise step: swallowed, one line, the manual command named
+    require.cache[mPath].exports = {
+      isCoreCheckoutRoot: () => true,
+      materializeModuleSkillsIntoCore: () => { throw new Error('disk on fire'); },
+    };
+    claim.materializeModeSkills({ materializeModuleSkills: true });
+    assert.equal(lines.length, 1, 'exactly one line, not a wall');
+    assert.match(lines[0], /claude-materialize\.js --module-skills-only/, 'the hint names the command that does it by hand');
+    assert.match(lines[0], /disk on fire/, 'and why it could not');
+
+    // a tree that is not the core checkout is a no-op even with the flag on
+    lines.length = 0;
+    require.cache[mPath].exports = {
+      isCoreCheckoutRoot: () => false,
+      materializeModuleSkillsIntoCore: () => { throw new Error('must never be called in an instance'); },
+    };
+    claim.materializeModeSkills({ materializeModuleSkills: true });
+    assert.deepEqual(lines, [], 'in a scaffolded instance the claim is unchanged — init already landed them');
+  } finally {
+    require.cache[mPath].exports = realExports;
+    console.log = realLog;
+  }
+});
+
+t('materializeModeSkills lands the real module-owned skills, self-ignored, and is byte-identical on a re-claim', () => {
+  const core = fakeCore();
+  // the real function resolves its own coreRoot, so drive the library the way it does
+  const first = m.materializeModuleSkillsIntoCore({ coreRoot: core });
+  assert.deepEqual(first.materialized, ['alpha']);
+  const manifest1 = readFileSync(join(core, '.claude', 'skills', m.MODULE_SKILLS_MANIFEST), 'utf8');
+  const ignore = readFileSync(join(core, '.claude', 'skills', '.gitignore'), 'utf8');
+  assert.ok(ignore.split('\n').includes('/alpha/'), 'a re-claim leaves git status clean: the copy ignores itself');
+  const second = m.materializeModuleSkillsIntoCore({ coreRoot: core });
+  assert.deepEqual(second.materialized, ['alpha'], 'idempotent: the re-claim lands the same set');
+  assert.equal(readFileSync(join(core, '.claude', 'skills', m.MODULE_SKILLS_MANIFEST), 'utf8'), manifest1, 'byte-identical manifest');
+  rmSync(core, { recursive: true, force: true });
+});
+
 console.log(`\nclaude_materialize: ${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);