@bongos/core 1.19.483 → 1.19.484

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.483",
-  "core_contract": "1.19.483",
-  "source_commit": "c26693cacb1d002d315e791fae45610e5f58d173",
+  "core_version": "1.19.484",
+  "core_contract": "1.19.484",
+  "source_commit": "5f998b05487ff6dac9dc1e6686c1f570537ed4dd",
   "source_ref": "HEAD",
-  "built_at": "2026-09-02T19:40:27.740Z",
+  "built_at": "2026-09-02T19:45:20.749Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 421,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2288,
-  "tree_sha256": "c396255616cb72c04bb08391f634addfc62353497eaeb4159a3a25de2f900215",
+  "tree_sha256": "b7d00c3aefcc1320f168d63aba78e046d1378d513d1b5d24da3247163d92fce1",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -92,7 +92,7 @@
     {
       "path": ".claude/skills/builder-setup/SKILL.md",
       "mode": "0000644",
-      "sha256": "dd7ea117475f9beb5ff854d90f18a884f3a62ae8a17cc623f182bc70b1a9cc1d"
+      "sha256": "ebe8b4b4109d4c6547bb4141e8c2d724a428390523ac94f14ab275a3dfdc913b"
     },
     {
       "path": ".claude/skills/builder-ship/SKILL.md",
@@ -127,7 +127,7 @@
     {
       "path": ".claude/skills/design/SKILL.md",
       "mode": "0000644",
-      "sha256": "c9beec980b3abf853b1b6f5d2eaeda42366aeaa77214e90c4a77b26a032e7b35"
+      "sha256": "7c159eef705ce081724fb21613f71f44679332022dcdca509a718cd39fa85265"
     },
     {
       "path": ".claude/skills/dev/SKILL.md",
@@ -2157,7 +2157,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "2887e62895b9c062025048b048cfbb3244a2723ed7c51f06614fc7447438f059"
+      "sha256": "45f8f6be3350501d2dd5ba92994768724b6a8e40ddafc5ba2a1018e3e9e15361"
     },
     {
       "path": "docs/modules-contract.md",
@@ -6752,12 +6752,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "5718d105f66e0618daf8927c0fd17dd7f40f98d9afad3a80250516f0b261eac7"
+      "sha256": "faf10c9622d2ee995150d1773c5e7f1dce88835ba40976bc575b7de0becb628f"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "50f98b1003715a84d22b845f1c59f0b122a746e11778963338d5083900ec7a75"
+      "sha256": "b79d9b6a1c531fc84e21f1077608c444a124514ddf260df94d5674d850b7b0f7"
     },
     {
       "path": "public-docs/index.html",
@@ -6982,7 +6982,7 @@
     {
       "path": "scripts/gds/claim.js",
       "mode": "0000644",
-      "sha256": "d2710556d771f5dcc7298806c91f3a33c7ad16b9f7738eef7edd14b7868d143b"
+      "sha256": "7c81b6c9e85aab5f230f72a4638402061fa516d7bb9fb7997b1151bef5b117e6"
     },
     {
       "path": "scripts/gds/classify-discipline.js",
@@ -6992,7 +6992,7 @@
     {
       "path": "scripts/gds/claude-materialize.js",
       "mode": "0000644",
-      "sha256": "450c1a12c5e8c125db6794d74bb2c25251804d8613d83fa50a463e4007a46ddd"
+      "sha256": "0dec071ca3a6624b45c51b9429463edc1ef70d83b0ce28104c95ea298eca64ad"
     },
     {
       "path": "scripts/gds/claude-md-template.js",
@@ -7107,7 +7107,7 @@
     {
       "path": "scripts/gds/discipline-modes.json",
       "mode": "0000644",
-      "sha256": "ae93a1068fa02259bc68372ce374e00db99df048730e3b3734619ec7f20da2dc"
+      "sha256": "6b740035b0d793dd2063de32b660a202da518b920742892a09058943c54e60c5"
     },
     {
       "path": "scripts/gds/discord-channels.js",
@@ -8412,7 +8412,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "6582fb440c524389c8c6bb3d11559e41a5f1bfc420c275f24bff258db863757b"
+      "sha256": "3c086bb8bf6cbdead414ae11a969d0e2aba7abd7f7962eda123f951671f93c54"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -8932,7 +8932,7 @@
     {
       "path": "tests/claude_materialize.mjs",
       "mode": "0000644",
-      "sha256": "6599b89948d3289d869f94fd87072f26a37d10a1e67727faf6c05b5052a035c8"
+      "sha256": "4be4d2a4791a7f0ed57f49332eafa938be9afe7ee0b011da0a496962c41ee901"
     },
     {
       "path": "tests/clawback_confirmed_backlog.mjs",

package/.claude/skills/builder-setup/SKILL.md

@@ -48,6 +48,8 @@ Runs `node scripts/gds/setup.js`. The script:
 
 6. **Suggest next step.** The Xenos path is action-only (#766) — no primer to read first. `setup.js` prints a "Newcomer path" footer (1. choose thy craft · 2. `/builder-start` · 3. `/builder-claim N` → `/builder-ship` · 4. ship three works and you rise to Thetes); relay it verbatim instead of paraphrasing. For a returning builder (rank ≥ Metic), `setup.js` prints no newcomer footer and `/builder-start` is the right immediate next step.
 
+7. **If they will do UI work, name the one extra step.** The design skills `/design` sends a session to use (`impeccable`, the taste and look skills) are module-owned and are not in a fresh core checkout: claiming a `ui` task lands them automatically, or `node scripts/gds/claude-materialize.js --module-skills-only` puts them there now (untracked copies, `--clean` removes them; ADR 0224).
+
 ## Constraints
 
 - **Never write the session token to chat or any file other than `~/.config/otb/gds-session.json`.** It's a bearer token equivalent to a GitHub OAuth grant for this user.

package/.claude/skills/design/SKILL.md

@@ -5,8 +5,9 @@ description: The UI design session — the operating playbook for ui-discipline
 
 You are running a **UI design session**. Two things make it different from `/dev`: the work is judged **by looking at it** (so every step ends in a rendered screen, not a paragraph), and it is done **inside a world that is not yours** — the instance's, which you read first and never override. The `ui-design` module's [CLAUDE.md](../../../modules/ui-design/CLAUDE.md) is the reference; this file is the loop.
 
-## Step 0 — detect the mode
+## Step 0 — the tools, then the mode
 
+- **The skills named below have to be ON THE MACHINE.** Claiming a `ui` task lands them as part of the claim (`scripts/gds/claim.js`, the `materializeModuleSkills` flag in `scripts/gds/discipline-modes.json`); opening `/design` without one does not. If `.claude/skills/` has no `impeccable`, run `node scripts/gds/claude-materialize.js --module-skills-only` — it copies every enabled module's `skills/` into this checkout as untracked, self-ignored dirs ([ADR 0224](../../../docs/adr/<redacted>.md)), so `git status` stays clean and `--clean` takes them away again. A scaffolded instance already received them at `bongos init`. A skill of the same name in your own `~/.claude/skills` is **not** the module's — it carries no platform preamble and was never scanned ([ADR 0220](../../../docs/adr/<redacted>.md)).
 - **Interactive** (someone is here to look and react): show, let them steer, iterate. One or two lines per step, then a screen.
 - **Autonomous** (no one will look): build inside the contract, prove it in both modes, stage or park the screens for review, and **never ship an interface change blind** — a task that cannot be verified visually gets a release with a reason, not a guess.
 

package/docs/module-api-changelog.md

@@ -1403,5 +1403,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.481 with no explicit bump. run 33670786915. (task 1002620)
   1.19.483 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.482 with no explicit bump. run 33674657478. (task 1002620)
+  1.19.484 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.483 with no explicit bump. run 33675143968. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.483",
+  "version": "1.19.484",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.483",
+      "version": "1.19.484",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.483",
+  "version": "1.19.484",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/claim.js

@@ -67,18 +67,49 @@ async function printRelevantLearnings(task) {
 // invalid map, or a discipline with no entry (engineer/artist today), prints
 // nothing and never breaks a successful claim.
 function printDisciplineMode(task) {
+  let mode = null;
   try {
     const discipline = task && task.discipline;
     if (!discipline) return;
     const raw = fs.readFileSync(path.join(__dirname, 'discipline-modes.json'), 'utf8');
     const modes = (JSON.parse(raw) || {}).modes || {};
-    const mode = modes[discipline];
+    mode = modes[discipline];
     if (!mode || !mode.directive) return;
     console.log('');
     console.log(`▶ ${mode.label || 'Working mode'} — /${mode.skill}`);
     console.log(`  ${mode.directive}`);
   } catch (_) {
     // never let the mode hint break a successful claim
+    return;
+  }
+  materializeModeSkills(mode);
+}
+
+// A task brings its own tools (task 1003486). A mode whose entry opts in with
+// `materializeModuleSkills` lands the module-owned skills its playbook names — for
+// `ui`, the ui-design taste kit /design sends the session to use — into THIS
+// checkout's .claude/skills/, as the untracked, self-ignored copies ADR 0224 defined.
+// Without it a builder is routed to /design, reads that impeccable and minimalist-ui
+// are the tools, and finds none of them on the machine with no error saying why.
+// Carried by the claim rather than a hook or a session start because a workbench is
+// not re-provisioned every session (owner decision 2026-09-02): it runs only when
+// someone actually claims work of that discipline.
+//
+// Fail-open in every branch, like the hint above it: the server already granted the
+// claim, so nothing here may throw past this point — a failure prints the one command
+// that does it by hand. The require is lazy so a claim of any other discipline never
+// pays for loading the materialiser (and a broken materialiser cannot stop a claim).
+function materializeModeSkills(mode) {
+  if (!mode || mode.materializeModuleSkills !== true) return;
+  try {
+    const { materializeModuleSkillsIntoCore, isCoreCheckoutRoot } = require('./claude-materialize');
+    const coreRoot = path.resolve(__dirname, '..', '..');
+    if (!isCoreCheckoutRoot(coreRoot)) return; // a scaffolded instance already has them from `bongos init`
+    const s = materializeModuleSkillsIntoCore({ coreRoot });
+    const n = s.materialized.length;
+    if (n) console.log(`  ✓ ${n} module-owned skill(s) for this mode are in .claude/skills/ (untracked copies — ADR 0224).`);
+  } catch (e) {
+    console.log(`  ⚠ could not land this mode's module-owned skills — run \`node scripts/gds/claude-materialize.js --module-skills-only\` (${e && e.message}).`);
   }
 }
 
@@ -638,4 +669,4 @@ if (require.main === module) {
   });
 }
 
-module.exports = { formatClaimFailure, claimErrorInfo, goalMembershipOfferPlan };
+module.exports = { formatClaimFailure, claimErrorInfo, goalMembershipOfferPlan, materializeModeSkills };

package/scripts/gds/claude-materialize.js

@@ -28,6 +28,7 @@ const path = require('node:path');
 const { spawnSync } = require('node:child_process');
 const { VERBS } = require('../../bin/bongos.js'); // side-effect-free require (guarded main)
 const ic = require('../../src/instance-config'); // neutral configDir/envPrefix fallbacks (never a founder literal)
+const { isCorePackageName } = require('../../src/module-loader/catalog'); // one definition of "this checkout IS the core"
 const { renderInstanceClaudeMd } = require('./claude-md-template'); // task 2104 — the starter CLAUDE.md
 
 // script basename (e.g. "ship.js") → dedicated bongos verb, for verbs that map to a bare script with
@@ -469,6 +470,24 @@ function materializeClaude({ coreRoot, instanceDir, dryRun = false, overwrite =
 // core's own tracked .claude/skills/ carries is left to the core. Idempotent: every run first
 // removes what the last manifest named (so a skill a module stopped declaring does not
 // linger), then lands the current set; `clean` stops after the removal.
+// Is `root` the core CHECKOUT — a workbench a builder edits — rather than the core
+// package installed under a scaffolded instance's node_modules? Only a checkout's own
+// .claude/skills/ is the directory Claude Code reads for that project, so only there
+// does materialising the module-owned skills put them in front of anyone; an instance
+// already received them at ITS root from `bongos init`, and a second copy under
+// node_modules/@bongos/core would be invisible (task 1003486). Fail-soft by
+// construction: an unreadable package.json answers "not the core checkout", which is
+// the conservative no-op rather than a copy into a tree we could not identify.
+function isCoreCheckoutRoot(root) {
+  try {
+    const abs = path.resolve(root);
+    if (abs.split(/[\\/]+/).includes('node_modules')) return false;
+    return isCorePackageName(JSON.parse(fs.readFileSync(path.join(abs, 'package.json'), 'utf8')).name);
+  } catch (_) {
+    return false;
+  }
+}
+
 const MODULE_SKILLS_MANIFEST = '.module-skills.json';
 function readModuleSkillsManifest(skillsDir) {
   const m = readJsonSafe(path.join(skillsDir, MODULE_SKILLS_MANIFEST));
@@ -535,4 +554,4 @@ if (require.main === module) {
   process.exit(s.refused.length ? 1 : 0);
 }
 
-module.exports = { scriptToVerb, bongosify, transformSettings, copyTreeTransformed, materializeClaude, materializeModuleSkillsIntoCore, readModuleSkillsManifest, MODULE_SKILLS_MANIFEST, GDS_INVOCATION_RE, buildRebrandRules, rebrandText, disabledModuleSkills, moduleSkillRoster, moduleSkillSources, vendoredSkillGate, SKILL_NAME_RE, VENDOR_DEFAULT_POLICY };
+module.exports = { scriptToVerb, bongosify, transformSettings, copyTreeTransformed, materializeClaude, materializeModuleSkillsIntoCore, isCoreCheckoutRoot, readModuleSkillsManifest, MODULE_SKILLS_MANIFEST, GDS_INVOCATION_RE, buildRebrandRules, rebrandText, disabledModuleSkills, moduleSkillRoster, moduleSkillSources, vendoredSkillGate, SKILL_NAME_RE, VENDOR_DEFAULT_POLICY };

package/scripts/gds/discipline-modes.json

@@ -1,5 +1,5 @@
 {
-  "_doc": "Discipline -> operating-playbook map (task 1267). A discipline whose work is best done as a *mode of working* rather than the default claim->build->ship loop names the skill that IS its playbook here. claim.js reads this after a successful claim: if the claimed task's `discipline` has an entry, it prints the entry's `directive` so the session opens the right playbook. There is NO classification step at claim time — `discipline` is already a column on the task. This is the whole discipline-fork mechanism: one carrier (the claim the builder already runs), one data lookup, no hooks, the Conductor untouched. Absence of an entry is the default: engineer and artist are intentionally NOT listed, so their claim output is unchanged and they stay in the standard build-and-ship loop. To give a discipline its own experience later, add an entry here and write the skill — no code change in claim.js. A missing or invalid version of this file must never break a claim (claim.js fails open).",
+  "_doc": "Discipline -> operating-playbook map (task 1267). A discipline whose work is best done as a *mode of working* rather than the default claim->build->ship loop names the skill that IS its playbook here. claim.js reads this after a successful claim: if the claimed task's `discipline` has an entry, it prints the entry's `directive` so the session opens the right playbook. There is NO classification step at claim time — `discipline` is already a column on the task. This is the whole discipline-fork mechanism: one carrier (the claim the builder already runs), one data lookup, no hooks, the Conductor untouched. Absence of an entry is the default: engineer and artist are intentionally NOT listed, so their claim output is unchanged and they stay in the standard build-and-ship loop. To give a discipline its own experience later, add an entry here and write the skill — no code change in claim.js. A missing or invalid version of this file must never break a claim (claim.js fails open). A mode entry may also set `\"materializeModuleSkills\": true` to have the claim land that mode's module-owned skills into this checkout's .claude/skills/ (task 1003486) — opt-in per discipline, core-checkout only, and fail-open like the hint itself, so a discipline that omits it claims exactly as before.",
   "modes": {
     "engineer": {
       "skill": "dev",
@@ -18,6 +18,7 @@
     },
     "ui": {
       "skill": "design",
+      "materializeModuleSkills": true,
       "label": "UI design session",
       "directive": "This is a UI task — interface DESIGN work (layout, wireframes, design systems, Figma / Claude-Design), split out of the pixel-art `artist` lane (ADR 0079). To work it, invoke the /design skill — the operating playbook for UI-design sessions, the only place the experience is defined. Like /paint it is show-first: communicate in mock-ups and rendered screens, not paragraphs about layout decisions — stage the change on your sandbox preview (/builder-stage) and look at the real interface before shipping. Keep the locked branding (config/branding.json) and the existing component conventions of the surface you touch (modules/status-ui, modules/hall-ui, public/game/ui). If no human is present (autonomous / bypass-permissions), produce the design, stage it for review, and park the screens rather than shipping interface changes blind. Open /design now rather than working this task the default way."
     }

package/src/module-api.js

@@ -34,7 +34,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.483'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.484'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/claude_materialize.mjs

@@ -9,6 +9,9 @@
 //   3. transformSettings — rewrites only the scripts/gds hook commands, keeps .claude/hooks/ ones.
 //   4. materializeClaude — copies + transforms skills into a target dir (no leftover node scripts/gds),
 //      writes settings.json, copies hooks; and NO-OPS when the target IS the core root (self-copy guard).
+//   5. task 1003486 — a UI task brings its own tools: the `materializeModuleSkills` opt-in on a
+//      discipline-modes entry, the core-checkout probe that keeps it out of a scaffolded instance,
+//      and the fail-open contract (a materialise error never breaks a claim the server already granted).
 //
 // Run:  node tests/claude_materialize.mjs
 
@@ -22,6 +25,7 @@ import { fileURLToPath } from 'node:url';
 const require = createRequire(import.meta.url);
 const ROOT = join(dirname(fileURLToPath(import.meta.url)), '..');
 const m = require('../scripts/gds/claude-materialize.js');
+const claim = require('../scripts/gds/claim.js');
 
 let passed = 0;
 let failed = 0;
@@ -484,5 +488,77 @@ t('--module-skills-only: the CLI entry refuses without the flag (usage, exit 2)
   rmSync(dir, { recursive: true, force: true });
 });
 
+// ---- task 1003486: claiming a ui task lands /design's tools in the checkout ----
+
+t('the materialise-at-claim trigger is DATA: the ui mode opts in, every other discipline claims exactly as before', () => {
+  const modes = JSON.parse(readFileSync(join(ROOT, 'scripts', 'gds', 'discipline-modes.json'), 'utf8')).modes;
+  assert.equal(modes.ui.materializeModuleSkills, true, 'a ui claim brings the skills /design names');
+  assert.equal(modes.ui.skill, 'design', 'and still routes to /design');
+  for (const d of ['engineer', 'ideator', 'artist']) {
+    assert.ok(!modes[d].materializeModuleSkills, `${d} did not opt in, so its claim output is unchanged`);
+  }
+});
+
+t('isCoreCheckoutRoot: true for a real core checkout, false for the core installed into an instance, false for anything unreadable', () => {
+  assert.equal(m.isCoreCheckoutRoot(ROOT), true, 'this checkout names itself the core and is not under node_modules');
+  assert.equal(m.isCoreCheckoutRoot(join(ROOT, 'node_modules', '@bongos', 'core')), false,
+    'a scaffolded instance runs claim.js from node_modules — materialising there would be invisible');
+  const other = mkdtempSync(join(tmpdir(), 'cm-not-core-'));
+  writeFileSync(join(other, 'package.json'), JSON.stringify({ name: 'some-instance' }));
+  assert.equal(m.isCoreCheckoutRoot(other), false, 'another checkout is that instance, not the core');
+  assert.equal(m.isCoreCheckoutRoot(join(other, 'nope')), false, 'an unreadable tree answers no — the conservative no-op');
+  rmSync(other, { recursive: true, force: true });
+});
+
+t('materializeModeSkills: a discipline that did not opt in does nothing, and a materialise failure prints one hint instead of breaking the claim', () => {
+  const lines = [];
+  const realLog = console.log;
+  console.log = (...a) => lines.push(a.join(' '));
+  const mPath = require.resolve('../scripts/gds/claude-materialize.js');
+  const realExports = require.cache[mPath].exports;
+  try {
+    for (const mode of [null, undefined, {}, { skill: 'dev' }, { materializeModuleSkills: false }, { materializeModuleSkills: 'yes' }]) {
+      claim.materializeModeSkills(mode);
+    }
+    assert.deepEqual(lines, [], 'no opt-in => nothing printed and nothing copied');
+
+    // forced failure in the materialise step: swallowed, one line, the manual command named
+    require.cache[mPath].exports = {
+      isCoreCheckoutRoot: () => true,
+      materializeModuleSkillsIntoCore: () => { throw new Error('disk on fire'); },
+    };
+    claim.materializeModeSkills({ materializeModuleSkills: true });
+    assert.equal(lines.length, 1, 'exactly one line, not a wall');
+    assert.match(lines[0], /claude-materialize\.js --module-skills-only/, 'the hint names the command that does it by hand');
+    assert.match(lines[0], /disk on fire/, 'and why it could not');
+
+    // a tree that is not the core checkout is a no-op even with the flag on
+    lines.length = 0;
+    require.cache[mPath].exports = {
+      isCoreCheckoutRoot: () => false,
+      materializeModuleSkillsIntoCore: () => { throw new Error('must never be called in an instance'); },
+    };
+    claim.materializeModeSkills({ materializeModuleSkills: true });
+    assert.deepEqual(lines, [], 'in a scaffolded instance the claim is unchanged — init already landed them');
+  } finally {
+    require.cache[mPath].exports = realExports;
+    console.log = realLog;
+  }
+});
+
+t('materializeModeSkills lands the real module-owned skills, self-ignored, and is byte-identical on a re-claim', () => {
+  const core = fakeCore();
+  // the real function resolves its own coreRoot, so drive the library the way it does
+  const first = m.materializeModuleSkillsIntoCore({ coreRoot: core });
+  assert.deepEqual(first.materialized, ['alpha']);
+  const manifest1 = readFileSync(join(core, '.claude', 'skills', m.MODULE_SKILLS_MANIFEST), 'utf8');
+  const ignore = readFileSync(join(core, '.claude', 'skills', '.gitignore'), 'utf8');
+  assert.ok(ignore.split('\n').includes('/alpha/'), 'a re-claim leaves git status clean: the copy ignores itself');
+  const second = m.materializeModuleSkillsIntoCore({ coreRoot: core });
+  assert.deepEqual(second.materialized, ['alpha'], 'idempotent: the re-claim lands the same set');
+  assert.equal(readFileSync(join(core, '.claude', 'skills', m.MODULE_SKILLS_MANIFEST), 'utf8'), manifest1, 'byte-identical manifest');
+  rmSync(core, { recursive: true, force: true });
+});
+
 console.log(`\nclaude_materialize: ${passed} passed, ${failed} failed`);
 process.exit(failed ? 1 : 0);