@bongos/core 1.19.526 → 1.19.527

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.526",
-  "core_contract": "1.19.526",
-  "source_commit": "cc35e48eb6199ca46a1e5f5b6cc20fc9cfd6db6f",
+  "core_version": "1.19.527",
+  "core_contract": "1.19.527",
+  "source_commit": "2ba9b8a5084d24406c9f56813939dd3abd17aac3",
   "source_ref": "HEAD",
-  "built_at": "2026-09-04T01:15:34.422Z",
+  "built_at": "2026-09-04T01:56:03.997Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 433,
+    "docs_redacted": 434,
     "agent_docs_stubbed": 24,
-    "functional_verbatim": 1971,
+    "functional_verbatim": 1975,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 2428,
-  "tree_sha256": "412b4c1a07121e150e646b60c72b020a57acab43ae48d35a0f35cde0c328f224",
+  "file_count": 2433,
+  "tree_sha256": "8864a6693cfc3aef15a04ae8938af1ff50dca2d6714eedc418c494739f486b57",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -27,7 +27,7 @@
     {
       "path": ".claude/skills/blocker-solve/SKILL.md",
       "mode": "0000644",
-      "sha256": "ca7662bafeafba5a56a95ca16df729b6779e40f4dbf91a788b5fd4aed4a1e20d"
+      "sha256": "f9a8cc82815777f88d8732cdf7d72a3076af4f4081943696de20bae12defb814"
     },
     {
       "path": ".claude/skills/builder-backup/SKILL.md",
@@ -37,7 +37,7 @@
     {
       "path": ".claude/skills/builder-box/SKILL.md",
       "mode": "0000644",
-      "sha256": "f4b8f70291a60551143dc5df9a1dca867f3cde4a492a4e244cc93e01e74eb8f5"
+      "sha256": "b110b50f85cee066250d7c975436c64dc8c4c343081b2f55e06a5361b1795abc"
     },
     {
       "path": ".claude/skills/builder-claim/SKILL.md",
@@ -47,7 +47,7 @@
     {
       "path": ".claude/skills/builder-connect/SKILL.md",
       "mode": "0000644",
-      "sha256": "15dea87889f89d2ae45f82a77aac069557028bf78b025f885db91ffaf6fc2f08"
+      "sha256": "c603f9fbeb3a3ac6691327e37bea385673206de69fbf8cd709bc16a8c9ca8c89"
     },
     {
       "path": ".claude/skills/builder-cost/SKILL.md",
@@ -57,17 +57,17 @@
     {
       "path": ".claude/skills/builder-end/SKILL.md",
       "mode": "0000644",
-      "sha256": "79afe09324f8b9ac27e0500972af701020d502f4a2502323b821ff5234216f70"
+      "sha256": "f4fa04333058038142df9a66c8526928b88b8d1d724c96afff3d29ce7cf2c038"
     },
     {
       "path": ".claude/skills/builder-exit/SKILL.md",
       "mode": "0000644",
-      "sha256": "24b37c6f647d8b1a6f92a864c9c77f26c3f3867ac1c4c7433947c090f0922919"
+      "sha256": "8a4cf834494968688d5b24434e3e4c350b9f119b5920b761e1838885761b0860"
     },
     {
       "path": ".claude/skills/builder-key/SKILL.md",
       "mode": "0000644",
-      "sha256": "4835ebedee470fc3da2716fc90dedc9a07c80848dcc06525c06ed27f110625c3"
+      "sha256": "482591cc4b2898d9e69de81eec2041e3b643817e290a8a131ae090d602a7257f"
     },
     {
       "path": ".claude/skills/builder-reauth/SKILL.md",
@@ -87,7 +87,7 @@
     {
       "path": ".claude/skills/builder-sequence/SKILL.md",
       "mode": "0000644",
-      "sha256": "838648912f0f058c58c42d943282346e2c35a90aea507b0ec136e9b0fbda50b0"
+      "sha256": "87a255974f2fe1010bda566f461b08fb68e26aa571ee48e692f5ca9413525a47"
     },
     {
       "path": ".claude/skills/builder-setup/SKILL.md",
@@ -102,7 +102,7 @@
     {
       "path": ".claude/skills/builder-stage/SKILL.md",
       "mode": "0000644",
-      "sha256": "7df63b87663e764b18fdc88d94f66d8fdb41effd53f1f43bc75d58f9ecf0f526"
+      "sha256": "6db340be8a490d786584c37e95504f21541085d727362bc3c9b28706752a13f7"
     },
     {
       "path": ".claude/skills/builder-start/SKILL.md",
@@ -127,7 +127,7 @@
     {
       "path": ".claude/skills/design/SKILL.md",
       "mode": "0000644",
-      "sha256": "7c159eef705ce081724fb21613f71f44679332022dcdca509a718cd39fa85265"
+      "sha256": "f58b813ac63b22f8bbbdc076434866309f6220434412a3aa723af8dff847c38e"
     },
     {
       "path": ".claude/skills/dev/SKILL.md",
@@ -152,22 +152,22 @@
     {
       "path": ".claude/skills/goal-create/SKILL.md",
       "mode": "0000644",
-      "sha256": "88494b0c9604992c43fb0efbb5d2cc34de51fd3645e7d65b22a65f0538e8f26f"
+      "sha256": "2df2c9d9ea817c52c47c074ada7aa725a96ea47db90d6d78acd2f986790edc6f"
     },
     {
       "path": ".claude/skills/goal-review/SKILL.md",
       "mode": "0000644",
-      "sha256": "71bc5b89e2b2793a8f30c0510f4c30249436a9dd26c0eda6d1bd0634620c26ce"
+      "sha256": "3626e1870a576a3016efc513e28363e72806a18cb117216fedd5eec46165a89e"
     },
     {
       "path": ".claude/skills/grade-audit/SKILL.md",
       "mode": "0000644",
-      "sha256": "2b4d33396291f58f1c0d7c01d173b64d587b2a0a483b17328e57eb602a8df9fe"
+      "sha256": "15dcb36a49adfc56e5fd3a51de6bf0dca33f6646ac4714c105d3665d4aa33684"
     },
     {
       "path": ".claude/skills/grade-recover/SKILL.md",
       "mode": "0000644",
-      "sha256": "db66b9abfd36829c37885e14644a9f0c2e7025e32975a1346a1adb9816df681a"
+      "sha256": "51cf032ec08279f0f6cbd22a528493917b674ce87f007bcc54eb9ef94a8aad22"
     },
     {
       "path": ".claude/skills/grader-health/SKILL.md",
@@ -182,7 +182,7 @@
     {
       "path": ".claude/skills/ideate/SKILL.md",
       "mode": "0000644",
-      "sha256": "7e2c13e70e3ac208c4754f32685c2453c501f35b3742310ee49a5855bc0c399b"
+      "sha256": "52bf6ab873aabc5e79cb97014793d2b237d04fd5e348938e5a63dbd7bedc10ca"
     },
     {
       "path": ".claude/skills/merge-mode/SKILL.md",
@@ -192,12 +192,12 @@
     {
       "path": ".claude/skills/new-project/SKILL.md",
       "mode": "0000644",
-      "sha256": "ce864614cf02126a8ccf46b4128f646fc9734d96ad2e3b5a3060249497449d35"
+      "sha256": "ad98b52f33db0e74cf1dc82c46efc6ec002db97c7888c602e02028cc3d43d240"
     },
     {
       "path": ".claude/skills/otb-character-review/SKILL.md",
       "mode": "0000644",
-      "sha256": "a2e7ed5a45623d486de940c40b6c9290e475f6a5f53b0c9838e4c624c00709dc"
+      "sha256": "480cd36dec2f350d150f101b152ba0c5dc1565cd5a244d7f69b81f77b0b5baa6"
     },
     {
       "path": ".claude/skills/otb-design-review/SKILL.md",
@@ -222,7 +222,7 @@
     {
       "path": ".claude/skills/paint/SKILL.md",
       "mode": "0000644",
-      "sha256": "54af43e9417eaa369d9f166e0bbc8567c4540e064504e67ef32186fe31b2f766"
+      "sha256": "05a42301ac128a9a7abe3aa93158a9005af5b45afed623e8bc8cb92380d09fb3"
     },
     {
       "path": ".claude/skills/planning-session/SKILL.md",
@@ -247,13 +247,18 @@
     {
       "path": ".claude/skills/scan-before-install/SKILL.md",
       "mode": "0000644",
-      "sha256": "b69a271b321fb0de129206795cbd5d3691da923bea18ca373b902d1acd8bc504"
+      "sha256": "77b5b26e1a4f45ce12f3fff1accc162a4331020ec9a9176cc05558572af9bdf0"
     },
     {
       "path": ".claude/skills/session-handoff/SKILL.md",
       "mode": "0000644",
       "sha256": "ddce51865985491a71bf89f734de3589cf2bb4f1ee76ac828b0c3905844db75f"
     },
+    {
+      "path": ".claude/skills/ship-check/SKILL.md",
+      "mode": "0000644",
+      "sha256": "ebd21fb5e3663ec26c1b987746a3bbc2ed6c768b4416f8e88318840329599221"
+    },
     {
       "path": ".claude/skills/status/SKILL.md",
       "mode": "0000644",
@@ -262,12 +267,12 @@
     {
       "path": ".claude/skills/strand-fix/SKILL.md",
       "mode": "0000644",
-      "sha256": "1444494f4a8f4168c025ef5ac0fd45f88c5217ec3293921cde3ae47b339b3699"
+      "sha256": "91d10f95fe5f1916717add40dc824b5c6f807ce84c09880a3fb858e0dd6d5889"
     },
     {
       "path": ".claude/skills/worktree-clean/SKILL.md",
       "mode": "0000644",
-      "sha256": "18ac872b38786a748b597351304ccead88a3f8f795b18ac7a258b558997921f6"
+      "sha256": "a07428135926ab03ce5ab4743f3f38b3c3d764fd294daf9e9c15dd82666b1da1"
     },
     {
       "path": ".devcontainer/Dockerfile",
@@ -317,7 +322,7 @@
     {
       "path": ".gitattributes",
       "mode": "0000644",
-      "sha256": "3848ed851a03fd11f8dae94c1e94b802c4aa625efaa7f4aff27438a1fdfb67ac"
+      "sha256": "7f5faf22678ad182025b2f3f9107c209f92e461200e15665fa2feb4a3cd86858"
     },
     {
       "path": "CLAUDE.md",
@@ -2597,7 +2602,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "b04bf1e46a5ee461e08c0b7e5c92360dde4baaaf706b12cfa7dfee6ecdc82299"
+      "sha256": "c7f035d61e8a45f2354256ae5fbbc16794ce6108ab3b5b712b054ade924df4ea"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2607,7 +2612,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "645d63e339e5392d92422641d77d4942713e1aa5fd4d06b8d8714fdc76e18759"
+      "sha256": "3fc93c649eb03183fdb896888121536f092f896aa26d203371968340ea2d8149"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2847,7 +2852,7 @@
     {
       "path": "docs/recipes/windows-builders.md",
       "mode": "0000644",
-      "sha256": "2e24454839aa02d1f3205dd92a6856254e59ca04f88573a1f42641ddb5924e32"
+      "sha256": "229da205775c6b84534633bc15be7355337d0d8cfacd81ff03860bc24bfc783f"
     },
     {
       "path": "docs/recipes/work-on-a-task-from-your-dev-box.md",
@@ -4382,7 +4387,7 @@
     {
       "path": "modules/grading/generated-provenance.js",
       "mode": "0000644",
-      "sha256": "43e94be02fe20891633f7fbe7abe0caf774d86743cbce4c5ec34b8499e22e125"
+      "sha256": "b76be7ce89c0b627d4fe14ac031af6d6b7793c25eeef7defb59aa1335f2de982"
     },
     {
       "path": "modules/grading/grader-config.js",
@@ -7317,12 +7322,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "ffc21421efa292da210129a95802bcff3a22555742015ec7898127f73806d87e"
+      "sha256": "dc5f5840b004b4b41aad0c07fdc120a887bad3dce2824cea30e5e54da61400d6"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "b5027375f7ecd4aed2e7e4764dab95828a9648a81860f5a9a459ddf55e56ddd0"
+      "sha256": "4b3a6ce000af625608a1cd4362413e7a57f409ab5cac66b05e7fafa98759e09c"
     },
     {
       "path": "public-docs/index.html",
@@ -7557,7 +7562,7 @@
     {
       "path": "scripts/gds/claude-materialize.js",
       "mode": "0000644",
-      "sha256": "0dec071ca3a6624b45c51b9429463edc1ef70d83b0ce28104c95ea298eca64ad"
+      "sha256": "6adb97e4fc26c64d7810e4b0bff873826c253e1b3e4e7bfd9304c38070e8dbb3"
     },
     {
       "path": "scripts/gds/claude-md-template.js",
@@ -7757,7 +7762,7 @@
     {
       "path": "scripts/gds/fitness.js",
       "mode": "0000644",
-      "sha256": "4cdce5dcc1a160d1ce3c6ac04f6dd778042c115657175fbcfbb7dfcabb4aa204"
+      "sha256": "c6a11cbffff99b725d60dff415622ff3ade8e9c56ede14edc01828ebb80d8415"
     },
     {
       "path": "scripts/gds/gate-review.js",
@@ -7822,7 +7827,7 @@
     {
       "path": "scripts/gds/gen-repo-map.js",
       "mode": "0000644",
-      "sha256": "138c53e17099ef3d5f8809f1be6311e07c4bdd4bd7dd6def2c7c6c57a2e8ba67"
+      "sha256": "b224041e4f6f71a581cfdaf8f2c0eb45b983b166b86bbeb23f9f80b209454936"
     },
     {
       "path": "scripts/gds/gen-session-index.js",
@@ -8342,7 +8347,7 @@
     {
       "path": "scripts/gds/session-cost.js",
       "mode": "0000644",
-      "sha256": "fdf3b9d8e0089078da550ac65d0c012583cc21103a668deecf481383a73c9da1"
+      "sha256": "231223f6a22190a85479e5f8967d4e3f3ebd61aa9a41e292df8c6a11651fb932"
     },
     {
       "path": "scripts/gds/session-digest-build.js",
@@ -8352,7 +8357,7 @@
     {
       "path": "scripts/gds/session-digest.js",
       "mode": "0000644",
-      "sha256": "81500cc2955e7159720a5cf260fa73e3790c0b4fd0c2e50cb64dbc481b5882ae"
+      "sha256": "3794f94f146661a3c98b09f08e4445f2db3e832c58ff912acad45765f824acd9"
     },
     {
       "path": "scripts/gds/session-eval.js",
@@ -8374,6 +8379,11 @@
       "mode": "0000644",
       "sha256": "087def1396283b19cb8a6deea4cc7f362d7a2f164d496a587220f0a48568aae6"
     },
+    {
+      "path": "scripts/gds/ship-check.js",
+      "mode": "0000644",
+      "sha256": "07fd20f374bdd512a54e55af6c4582a86da606d5c560fa44bb0ddec5024867d4"
+    },
     {
       "path": "scripts/gds/ship-deploy-target.js",
       "mode": "0000644",
@@ -8437,7 +8447,7 @@
     {
       "path": "scripts/gds/ship-regen.js",
       "mode": "0000644",
-      "sha256": "32599b3ae9c5f32dc82250dba824f9acea98ae1a4ac8b0d5d0e61870186921f6"
+      "sha256": "e7aa8ac4c98e4938e11167a353960954e480efde643e16161707bc4a416f6a70"
     },
     {
       "path": "scripts/gds/ship-resume.js",
@@ -8469,6 +8479,11 @@
       "mode": "0000644",
       "sha256": "a612a450145476ea8d6705d7a45b8a84e2dc861ad8cb5be8c6aa69252b5c54c5"
     },
+    {
+      "path": "scripts/gds/skill-lint.js",
+      "mode": "0000644",
+      "sha256": "cacae521e5580e66c74128142772abe93d6742e8438417bd4e5a19d48d611c9f"
+    },
     {
       "path": "scripts/gds/skill-preflight.js",
       "mode": "0000644",
@@ -8537,7 +8552,7 @@
     {
       "path": "scripts/gds/strand-watch.js",
       "mode": "0000644",
-      "sha256": "abcf87286fa3b3be81c18e5927495f64c140322a83223c4dc673d8325c08121f"
+      "sha256": "072c493cc549e16c6045abf5bf74a8cfe0004b45844c6f4fe9e846d55d88bf34"
     },
     {
       "path": "scripts/gds/task.js",
@@ -8992,7 +9007,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "f3ff5d629ae2e24b8e9358d2da8059ce156643f666246e2f264c6cec6c8906cc"
+      "sha256": "b1507f297c0f31d4df05c3826028c841d188eb75a824db8ed7ef1d53a4472b58"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -9522,7 +9537,7 @@
     {
       "path": "tests/claude_materialize.mjs",
       "mode": "0000644",
-      "sha256": "4be4d2a4791a7f0ed57f49332eafa938be9afe7ee0b011da0a496962c41ee901"
+      "sha256": "33c0631fa502e16f94329362e92374da8bdf2aa563645815b8e0fc22785a353b"
     },
     {
       "path": "tests/clawback_confirmed_backlog.mjs",
@@ -9884,6 +9899,11 @@
       "mode": "0000644",
       "sha256": "89e05751271dd18b96a2319d624403353bdc710b2e8b5c0cf6181b125cd17b76"
     },
+    {
+      "path": "tests/edit_hints.mjs",
+      "mode": "0000644",
+      "sha256": "1139ea32e7f723d97ac63dd2c862896945b69970ac5edbe0368fb427ff0fe3b2"
+    },
     {
       "path": "tests/effective_visibility_predicate.mjs",
       "mode": "0000644",
@@ -9987,7 +10007,7 @@
     {
       "path": "tests/git_merge_regen.mjs",
       "mode": "0000644",
-      "sha256": "f4e7ab5eec2d13404080c408c0a70819c4b398b38fa61474b9c4cc57069d119b"
+      "sha256": "1d5f97589b84b493f7406fba3b162443a70fbf0ad24190049d054dbd2fe17273"
     },
     {
       "path": "tests/github_push_ancestry.mjs",
@@ -10507,7 +10527,7 @@
     {
       "path": "tests/hooks_drain.mjs",
       "mode": "0000644",
-      "sha256": "d616a075d7e48e2123c08a60b023aad2d2c1cc1bb4a73caa9b6e8189dda30e6f"
+      "sha256": "b75138bf26c8ff950f4a14ade3bbb6a53c9010014843217d200aad60edab72dc"
     },
     {
       "path": "tests/host_topology_skips.mjs",
@@ -11437,7 +11457,7 @@
     {
       "path": "tests/repo_map.mjs",
       "mode": "0000644",
-      "sha256": "12fe5a30bfebce58aa179767590df53cc5f220a1f7257bded08aef94fbe43507"
+      "sha256": "a17ad725f50ac78367484ae5d39311c1c37d94cae87d4d8ec7de4378f083c23a"
     },
     {
       "path": "tests/reward_gate.mjs",
@@ -11824,6 +11844,11 @@
       "mode": "0000644",
       "sha256": "4557c934704a009612ed8858c0f59c5b53facb5d92fa2c0740b1aecb079aa5c9"
     },
+    {
+      "path": "tests/skill_lint.mjs",
+      "mode": "0000644",
+      "sha256": "da75748d8733b16c479686a350f4e648e85ccc171ce633b4561315bd6d7073bb"
+    },
     {
       "path": "tests/skill_preflight.mjs",
       "mode": "0000644",

package/.claude/skills/blocker-solve/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: blocker-solve
-description: Start a blocker-scoped working session that drives ONE Bongos blocker to done and auto-closes it. Unlike /blocker-review (which walks the whole list to record status), this points at a single blocker, gathers its context, does the parts it can itself, hands the owner-only parts back as precise step-by-step instructions, verifies the fix actually landed, then auto-resolves — which auto-promotes any task waiting on it (DB trigger). Triggers when the user says "/blocker-solve N", "solve blocker N", "work blocker N", "drive blocker N to done", "let's clear blocker N", or "fix the thing blocking task M". Metic+ rank only (Metic and Archon; not Xenos).
+description: >-
+  Drive ONE Bongos blocker to done and auto-close it: gather its context, do the parts Claude can, hand the owner-only parts back as precise steps, verify the fix landed, resolve — which auto-promotes any task waiting on it. Unlike /blocker-review, which walks the whole list. Triggers: "/blocker-solve N", "solve blocker N", "fix the thing blocking task M". Metic+ only.
 ---
 
 You are running a **blocker-solve session** — a session scoped to exactly one Bongos blocker, whose goal is to drive that blocker to resolution and close the loop automatically. Where `/blocker-review` is a daily list-walk that records status, this is a *working* session that actually moves one blocker toward done and, when the fix is verified, resolves it — which promotes every linked task `blocked → ready` via the migration-009 trigger.

package/.claude/skills/builder-box/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: builder-box
-description: Show the builder their own dev box — state, IP/hostname, cost, and their registered SSH keys — and help them get (back) on it: (re)connect, queue a hands-off auto-provision/wake (POST /box/ensure, #701), fetch the browser-terminal URL + password for a Chromebook (ADR 0038, #760), or find their live game-preview "sandbox" URL (ADR 0044, #898). Triggers when the user says "/builder-box", "what's my box doing", "is my box up", "my dev box status", "show my box", "list my ssh keys", "wake my box", "create my box", "how do I get back on my box", "what's my sandbox URL", or "preview my game". Own-scoped — the only mutation it may trigger is queuing an auto-provision/wake of the caller's OWN box; it never parks or destroys (that is the operator's `node scripts/gds/box.js`).
+description: >-
+  Show the builder their OWN dev box — state, address, cost, SSH keys — and get them back on it: reconnect, queue a wake or auto-provision, fetch the browser-terminal URL, or find the sandbox preview URL. Triggers: "/builder-box", "is my box up", "wake my box", "what's my sandbox URL". Own-scoped; never parks or destroys a box.
 ---
 
 You are showing a builder the status of **their own** dev box and helping them get (back) onto it. This is a read-only, own-scoped helper — it never mutates infrastructure (provision / park / wake / deprovision live on the operator control plane, `node scripts/gds/box.js`, gated by rank).

package/.claude/skills/builder-connect/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: builder-connect
-description: One-command connect of the builder's Claude Desktop to their Example dev box (ADR 0031, #685). Triggers when the user says "/builder-connect", "connect me to the dev box", "set up my dev box", "connect Claude Desktop to the box", or "onboard me to the box". Runs the self-contained bootstrap that signs the builder in with GitHub, creates + registers their SSH key, and installs the Claude Desktop connection file — then tells them to restart Desktop and pick "Example Dev Box". This is the BUILDER side; the OPERATOR side is `node scripts/gds/box.js onboard <login>`.
+description: >-
+  One-command connect of the builder's Claude Desktop to their dev box (ADR 0031, task 685): signs them in with GitHub, creates and registers their SSH key, installs the Claude Desktop connection file, then says to restart Desktop and pick the dev box. Builder side only; the operator side is node scripts/gds/box.js onboard. Triggers: "/builder-connect", "connect me to the dev box", "set up my dev box", "onboard me to the box".
 ---
 
 You are guiding a builder through connecting their **own machine's** Claude Desktop to their org dev box. The audience is often non-technical — narrate each step in plain language, and never make them hand-edit files or paste keys around. One command does everything.

package/.claude/skills/builder-end/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: builder-end
-description: One command to safely close out a Claude Code session — resolve the active claim (ship or release), verify the git tree is clean so nothing is lost, tear down this session's worktree, and (on a dev box) offer to shut the box down. Triggers when the user says "/builder-end", "close out my session", "close out my online terminal session", "end my session", "sign off", "wrap up and clean up", "I'm done for now, clean up", or "ship/release this and tear down the worktree". This is the session close-out a builder reaches for via /builder-exit — that one offboards a whole builder and is Archon-only; this is the everyday own-scoped close-out. Own-scoped: only this session's own claim + own worktree + own box.
+description: >-
+  Safely close out this Claude Code session: resolve the active claim (ship or release), confirm the git tree is clean so nothing is lost, tear down this session's worktree, and on a dev box offer to shut it down. Triggers: "/builder-end", "end my session", "sign off", "wrap up and clean up". Own-scoped — the everyday close-out; /builder-exit offboards a whole builder.
 ---
 
 You are closing out the current Claude Code **session** safely: resolve the held claim, confirm no work is stranded uncommitted, and clean up the session's git worktree. It is the bookend to `/builder-start` — one command so a session ends in a known-clean state instead of leaving a half-shipped claim and an orphaned worktree behind.

package/.claude/skills/builder-exit/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: builder-exit
-description: Gracefully offboard (or reactivate) a builder. Deactivating releases their active claims, seals each with a final session log, drops their rank to the sandboxed Xenos tier, blocks them from claiming new work, and archives their local memory — all while preserving their example, credit history, and shipped-task attribution indefinitely. Triggers when the user says "/builder-exit N", "offboard builder N", "builder X is leaving", "deactivate builder", or "reactivate builder N". Archon-only — the offboard endpoint is Archon-gated. If a non-Archon, or anyone who just wants to end their own session, invokes it, redirect them to /builder-end (the session close-out) instead of dead-ending on a 403.
+description: >-
+  Offboard (or reactivate) a builder: release their active claims, seal each with a final session log, drop their rank to sandboxed Xenos, block new claims, archive their local memory — keeping shipped-task attribution and credit history. Triggers: "/builder-exit N", "offboard builder N", "builder X is leaving", "reactivate builder N". Archon-only; to end your own session use /builder-end.
 ---
 
 **Script skill (authoritative).** The core action is the `PATCH /api/gds/builders/:id/status` API call via `cli-lib.js`. Once intent is confirmed, run it and print the response verbatim — do not summarize or editorialize the claims-released list.

package/.claude/skills/builder-key/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: builder-key
-description: List which API keys are set/unset for the caller, render a visual "key needed" callout for anything missing, and drive the UI-first add flow (open Settings, then re-sync + confirm). Triggers when the user says "/builder-key", "/api-key", "what keys do I have set", "do I have a Gemini key", "add my art key", "my key isn't working", or when the art pipeline errors with "No image-generation key found". HARD RULE: never accept a key pasted in chat — always redirect to Settings.
+description: >-
+  List which API keys are set/unset for the caller, render a visual "key needed" callout for anything missing, and drive the UI-first add flow (open Settings, then re-sync + confirm). Triggers when the user says "/builder-key", "/api-key", "what keys do I have set", "do I have a Gemini key", "add my art key", "my key isn't working", or when the art pipeline errors with "No image-generation key found". HARD RULE: never accept a key pasted in chat — always redirect to Settings.
 ---
 
 **Script skill (authoritative).** The core action is `node scripts/gds/key-status.js [--recheck]`. Run it and relay its output — the monospace status list, plus the visual callout it emits for any missing key (rendered per the marker convention below).

package/.claude/skills/builder-sequence/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: builder-sequence
-description: Walk a whole dependency chain from one kickoff — claim, build, ship, then pick up whatever that unblocked, and repeat until the chain is done or something needs a human. Triggers when the user says "/builder-sequence N", "work the chain from task N", "do these tasks in order", "run goal N end to end", "keep going until the chain is done", or "work through the rest of this chain". One task is claimed at a time; a task is always fully shipped before the next is claimed.
+description: >-
+  Walk a whole dependency chain from one kickoff — claim, build, ship, pick up what that unblocked, repeat until the chain is done or a human is needed; --goal N scopes it to one goal's open tasks. One task claimed at a time, always fully shipped before the next. Triggers: "/builder-sequence N", "work the chain from task N", "continue goal N", "let's tackle goal N", "run goal N end to end".
 ---
 
 You are running a **chain**: several dependency-linked tasks, one after another, from a single kickoff. Two-thirds of the open backlog sits behind a predecessor, and shipping a task auto-promotes its dependents `backlog`→`ready` — but nothing picks the newly-unblocked task up. That gap is what this skill closes.

package/.claude/skills/builder-stage/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: builder-stage
-description: Stage the builder's current working tree on their own live game preview (the sandbox) so they can review a game change in a browser BEFORE shipping it to the main game (#927, ADR 0046). On a dev box the sandbox is sandbox-<login>.example.com (ADR 0044); on a LOCAL full clone (laptop) it is a private http://localhost:<port> preview (task 1056). Triggers when the user says "/builder-stage", "stage my work", "stage this on my sandbox", "let me see it before shipping", "preview this change", "show me the change running", or right before /builder-ship when game surfaces changed. Own-scoped and machine-local — it only (re)starts the caller's own preview (box service or local process); it never touches prod or other builders' machines.
+description: >-
+  Stage the current working tree on the builder's own live preview (the sandbox) to review a game or UI change in a browser BEFORE shipping — a dev-box sandbox host, or a private localhost preview on a laptop. Triggers: "/builder-stage", "stage my work", "let me see it before shipping", "preview this change". Own-scoped and machine-local.
 ---
 
 You are staging a builder's in-progress work on **their own** sandbox — the live game preview running on their dev box (ADR 0044) — so they can see the change in a browser, suggest fixes, and only then decide to ship it to the main game (ADR 0046).

package/.claude/skills/design/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: design
-description: The UI design session — the operating playbook for ui-discipline work (layouts, pages, components, design systems, the hall / status / landing surfaces) on ANY Cloud Bongos instance. Triggers when the user says "/design", "design this page", "let's work on the UI", "make this look right", "start a design session", or when a claimed task's discipline routes here (claim.js prints a directive to invoke /design for ui tasks). Show-first like /paint — the interface is judged by looking at it — and world-first: the instance's branding pack + DESIGN.md are read before any taste rule applies. Shipped by the ui-design module (ADR 0197).
+description: >-
+  The UI design session — the operating playbook for ui-discipline work (layouts, pages, components, design systems, the hall / status / landing surfaces) on any Cloud Bongos instance. Show-first like /paint and world-first: the branding pack and DESIGN.md are read before any taste rule. Triggers: "/design", "design this page", "let's work on the UI", or a claimed ui task routing here.
 ---
 
 You are running a **UI design session**. Two things make it different from `/dev`: the work is judged **by looking at it** (so every step ends in a rendered screen, not a paragraph), and it is done **inside a world that is not yours** — the instance's, which you read first and never override. The `ui-design` module's [CLAUDE.md](../../../modules/ui-design/CLAUDE.md) is the reference; this file is the loop.

package/.claude/skills/goal-create/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: goal-create
-description: Plan and create ONE Bongos goal — the module-scoped workspace between a version and its criteria (ADR 0086) — in a single interactive session. Claude reads the goal board, decides reuse-vs-new, infers scope_modules from the LIVE module roster, drafts the goal's done-when criteria and a seed-task outline on its own, then asks only about genuine gray areas and for one sign-off before writing anything. Scoped smaller than /planning-session (one goal in one sitting, no spec file, no migration) and the opening end of /goal-review (which closes goals out). Triggers when the user says "/goal-create", "create a goal", "make a goal for this", "plan a goal", "we need a goal to hold this work", "what goal should this live in", or automatically when a task is created with no goal to live in — a POST /tasks response carrying a `goal_advisory`, or work about to land in a version's "<version> — general" catch-all. Metic+ rank only (Metic and Archon; not Xenos) — Archon for a protected-module scope.
+description: >-
+  Plan and create ONE Bongos goal — the module-scoped workspace between a version and its criteria (ADR 0086). Reads the goal board, infers scope from the live module roster, drafts done-when criteria and seed tasks, asks only about gray areas. Triggers: "/goal-create", "create a goal", "what goal should this live in", or a task created with no goal. Metic+ only.
 ---
 
 You are running the **goal-create** session for this Cloud Bongos instance. You produce **one goal**: a title, a scope wall, two to four done-when criteria, and a handful of seed tasks — written to Bongos in one sitting.

package/.claude/skills/goal-review/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: goal-review
-description: Walk the Bongos criterion review queue. As of task 1002069 (ADR 0183) this is NO LONGER A GATE — a criterion whose gating tasks have all shipped satisfies ITSELF, and a goal whose criteria are all satisfied achieves itself. What remains here is the residue automation deliberately refuses: chiefly a criterion whose linked tasks were ALL ABANDONED (nothing delivered), plus rejecting a criterion that is not actually met. Prompt to confirm (→ satisfied), reject, or note/defer. Triggers when the user says "/goal-review", "review goals", "review flagged criteria", "what criteria are ready to confirm", "confirm criteria", "walk the goal review queue", or runs as a scheduled daily task. Metic+ rank only (Metic and Archon; not Xenos).
+description: >-
+  Walk the criterion review queue. Since ADR 0183 this is not a gate — criteria whose tasks all shipped satisfy themselves; what remains is the residue automation refuses (all linked tasks abandoned, or a criterion not actually met). Confirm, reject, or defer each. Triggers: "/goal-review", "review goals", "confirm criteria". Metic+ only.
 ---
 
 You are running the **goal-review** session for this Cloud Bongos instance. It mirrors `/idea-triage`, but for the *closing* end of the work hierarchy (ADR 0086 §6): criteria that have **auto-flagged "met — pending review"** get walked one-at-a-time and dispositioned, so finished work actually closes out instead of sitting in limbo.

package/.claude/skills/grade-audit/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: grade-audit
-description: Manual-cadence accountability sweep over recent grades — the override ledger (what shipped despite a failing grade, and was it accounted for), dropped blocker/major findings on passing grades, a false-pass spot-check for runtime-behavior blindness, and an outage roll-up. Triggers when the user says "/grade-audit", "audit recent grades", "run the grade audit", "what shipped past the grader", or "weekly grader accountability sweep". Describes and queues follow-up work ONLY — it NEVER confirms a task, flips a status, or re-grades anything (ADR 0162; verdicts are advisory, never self-executing). Manually invoked; do not depend on scheduled routines.
+description: >-
+  Manual accountability sweep over recent grades: the override ledger (what shipped despite a failing grade), dropped blocker/major findings on passing grades, a false-pass spot-check, an outage roll-up. Describes and queues follow-ups only — never confirms, flips a status, or re-grades (ADR 0162). Triggers: "/grade-audit", "audit recent grades", "what shipped past the grader".
 ---
 
 You are auditing the last week of grades for accountability gaps: work that shipped past a failing grade unaccounted for, real findings that rode passing grades into production and evaporated, and passes the panel structurally could not have judged. You **describe and queue**. You never confirm, flip, re-grade, or add a gate — every follow-up lands as a queued idea or a handoff to another skill.

package/.claude/skills/grade-recover/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: grade-recover
-description: Walk a stuck, unavailable, or wrongly-failed grade to resolution — the "my grade failed, now what" loop. Diagnoses which of three shapes parked the task at completed (grader outage, fabricated/server-shape fail, or genuine quality fail), names the right recovery, and runs it. Triggers when the user says "/grade-recover N", "my grade failed", "the grader bounced my ship", "grader unavailable", "recover the grade on task N", "why did task N fail its grade", or after a /builder-ship lands at completed with a non-pass grade. Describes and recovers only — it adds no gate to the ship path (ADR 0162).
+description: >-
+  Walk a stuck, unavailable, or wrongly-failed grade to resolution: diagnose which of three shapes parked the task at completed (grader outage, fabricated fail, genuine quality fail), name the right recovery, run it. Adds no gate to the ship path (ADR 0162). Triggers: "/grade-recover N", "my grade failed", "grader unavailable", or a ship that landed at completed with a non-pass grade.
 ---
 
 You are recovering a task whose ship parked at `completed` because of its grade. Your job is to diagnose WHICH of three distinct shapes did it — they look similar in a terminal scrollback and need opposite responses — then run the right recovery. You never add a new approval step: everything here is a documented, existing path (ADR 0162).

package/.claude/skills/ideate/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: ideate
-description: The ideation session — the operating playbook for ideator-discipline work. Triggers when the user says "/ideate", "let's ideate", "I want to brainstorm", "help me think through an idea", "start an ideation session", or when a claimed task's discipline routes here (claim.js prints a directive to invoke /ideate for ideator tasks). Inverts the usual dynamic: the human ideator drives, Claude is the sounding board. Open to any rank for FILING ideas (Xenos+ can capture; only Metic+ can triage).
+description: >-
+  The ideation session — the operating playbook for ideator-discipline work. Triggers when the user says "/ideate", "let's ideate", "I want to brainstorm", "help me think through an idea", "start an ideation session", or when a claimed task's discipline routes here (claim.js prints a directive to invoke /ideate for ideator tasks). Inverts the usual dynamic: the human ideator drives, Claude is the sounding board. Open to any rank for FILING ideas (Xenos+ can capture; only Metic+ can triage).
 ---
 
 You are running an **ideation session** for Example. This is not the build-and-ship loop. Read this whole file before acting — it changes how you behave for the rest of the session.

package/.claude/skills/new-project/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: new-project
-description: The agent-guided runbook that takes a new owner from zero to a live, owned STANDALONE Cloud Bongos instance (own repo + pinned @cloudbongos/core, ADR 0108) through ONE canonical step sequence — decide name+address, bongos init, scaffold the standalone repo, provision core+DB+address+service, GitHub OAuth app + verified secret + first sign-in, verify, brand. Triggers when the user says "/new-project", "start a new project", "stand up a new instance", "onboard a new Cloud Bongos instance", "create a new project", or "spin up a new instance". This skill IS the canonical sequence; the `bongos onboard` CLI (task 1982) and the hall "start a project" wizard (task 1983) are forms over it. Standalone model only.
+description: >-
+  Agent-guided runbook from zero to a live, owned STANDALONE Cloud Bongos instance (own repo + pinned @cloudbongos/core, ADR 0108): name and address, bongos init, scaffold, provision core + DB + address + service, GitHub OAuth app and first sign-in, verify, brand. Triggers: "/new-project", "stand up a new instance", "start a new project".
 ---
 
 You are guiding a new owner from **zero to a live, owned Cloud Bongos instance**. This skill is the **canonical step sequence** (goal 35). The `bongos onboard` CLI and the hall wizard are just other front-ends over these same steps — keep them in lockstep by keeping the sequence here.

package/.claude/skills/otb-character-review/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: otb-character-review
-description: Review a painterly character ANIMATION (a character_anim family — many frames of one character in different poses) against the ADR 0088 animation criteria. Triggers when the user says "review this animation", "score the bongo idle", "check the character animation", "is this animation consistent", "rate these frames", or asks how a generated character/mascot animation holds up. Sibling to otb-design-review (which scores a single pixel-art tile). Returns a plain-language verdict per frame and for the sequence: same character throughout, correct anatomy, each frame on its intended pose, clean edges, and smooth in-order motion. Wraps family_orchestrator.run_family + family_review for the painterly path.
+description: >-
+  Review a painterly character ANIMATION (many frames of one character) against the ADR 0088 criteria — same character throughout, correct anatomy, each frame on its pose, clean edges, smooth in-order motion — with a plain-language verdict per frame and for the sequence. Triggers: "review this animation", "is this animation consistent", "rate these frames". Sibling of otb-design-review (one tile).
 ---
 
 You are reviewing a painterly **character animation** — a `character_anim` family: many frames of the *same* character in *different* poses (e.g. the Bongo Buddha idle-breathing cycle). This is the animation sibling of `otb-design-review` (which scores one pixel-art tile). Do NOT judge it as pixel art — there is no palette to match, no FireRed reference, no 32×32 grid.

package/.claude/skills/paint/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: paint
-description: The art session — the operating playbook for artist-discipline work. Triggers when the user says "/paint", "let's make art", "I want to work on a tile/sprite", "start an art session", or when a claimed task's discipline routes here (claim.js prints a directive to invoke /paint for artist tasks). Show-first, low-text: Claude communicates in pictures, not prose, and drives the existing pixel-art pipeline underneath.
+description: >-
+  The art session — the operating playbook for artist-discipline work. Triggers when the user says "/paint", "let's make art", "I want to work on a tile/sprite", "start an art session", or when a claimed task's discipline routes here (claim.js prints a directive to invoke /paint for artist tasks). Show-first, low-text: Claude communicates in pictures, not prose, and drives the existing pixel-art pipeline underneath.
 ---
 
 You are running an **art session** for Example. This is not the engineer's text-heavy build loop. Read this whole file before acting — it changes how you *communicate* for the rest of the session.

package/.claude/skills/scan-before-install/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: scan-before-install
-description: Scan a third-party GitHub repo or git-hosted Claude plugin/marketplace entry BEFORE anything from it is installed — hardened quarantine fetch, deterministic zero-LLM floor, tiered subagent panel over a scrubbed mirror, arithmetic verdict, honest-limits report, and three evidence-gated landings (print install command / sanitized copy / rebuild spec). The scanner itself NEVER installs anything. Triggers when the user says "/scan-before-install", "scan this repo before I install it", "is this plugin safe to install", "check this tool before I add it", "vet this GitHub repo", "scan this marketplace plugin", or pastes a repo/plugin URL and asks whether it's safe.
+description: >-
+  Scan a third-party GitHub repo or git-hosted Claude plugin BEFORE installing anything: quarantined fetch, deterministic floor, tiered subagent panel over a scrubbed mirror, arithmetic verdict, honest-limits report, three evidence-gated landings. The scanner never installs. Triggers: "/scan-before-install", "is this plugin safe to install", "vet this GitHub repo".
 ---
 
 You are scanning a third-party artifact someone wants to install. The engine lives in `modules/security/artifact-scan/` — this skill is the orchestration wrapper: it runs the pipeline, spawns the panel, and lands one of three offers. Every load-bearing decision below is an owner decision; do not soften any of them.