@bongos/core 1.20.7 → 1.20.9

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.7",
-  "core_contract": "1.20.7",
-  "source_commit": "9a8e336459336ffc6beebeac8b6496960dec3bdd",
+  "core_version": "1.20.9",
+  "core_contract": "1.20.9",
+  "source_commit": "2b36b101931a77f890370e4ca5bfe3c52380aa86",
   "source_ref": "HEAD",
-  "built_at": "2026-09-30T04:20:20.175Z",
+  "built_at": "2026-09-30T04:43:40.633Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 556,
     "agent_docs_stubbed": 25,
-    "functional_verbatim": 2621,
+    "functional_verbatim": 2624,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3203,
-  "tree_sha256": "dcbd562f300693a4aac156ab9d3d09aa65f2ec33fe5f0b469846f0eaca1a6005",
+  "file_count": 3206,
+  "tree_sha256": "da9805685f777ab35786f149befb6dbcacca93c0a0e53c2ffee30b11544aa62d",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -1842,7 +1842,7 @@
     {
       "path": "docs/adr/0274-one-kernel-three-role-packs.md",
       "mode": "0000644",
-      "sha256": "d37cbce118162e144969efde564d92778bb6175c3af0d4e1502195aea18aa004"
+      "sha256": "4164f1f1fb3cf0317ee19e168420aef85d7c529a5300d3fc46566010f42d9fbf"
     },
     {
       "path": "docs/adr/0275-one-source-for-a-written-role-responsibility.md",
@@ -2762,7 +2762,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "803f616840f604487828796195cdc74a3f834dc5f5117309ef01725b9d13b7aa"
+      "sha256": "fd6ec16a880ab7b3ef0e31674c51ab9733ffda14855043aa6cc5afaddb20c03e"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2772,7 +2772,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "20bca63270af7e3ccc11037fc0faf76c5d7ed75d8bde9b115c96b1b6f4e985a2"
+      "sha256": "030b3fb4cd9862ccb5e1d96644271f79485912b6b6abba869dafde16715c4d84"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2837,22 +2837,22 @@
     {
       "path": "docs/onboarding/slash-commands.md",
       "mode": "0000644",
-      "sha256": "92ce9c4de763330c4ac877a1ba79d0b11d88797c711b3517adebe8604bdf59ea"
+      "sha256": "cc792eb9391d147e443ba646f991f99f88245fbb96adeda7bf96364fa9bc7a85"
     },
     {
       "path": "docs/packs/artist.md",
       "mode": "0000644",
-      "sha256": "9d317443b3676bf68b7818473e75448e26a16c6316cad7298de7a4037d73cf5c"
+      "sha256": "d9a0b37fb3e03ab2e0f874abf3db40fed123cae5c0f6443a0e176adcdfc30b1b"
     },
     {
       "path": "docs/packs/engineer.md",
       "mode": "0000644",
-      "sha256": "416aa7f4303a0148d52ab5c0e5720a327fa260a034a9558774df125e8876eee2"
+      "sha256": "30e4d2363f1fea52cb347ba8a642277fe5046249f77858e947b4434150ff5746"
     },
     {
       "path": "docs/packs/ideator.md",
       "mode": "0000644",
-      "sha256": "bcb98ba4302f46c2001eb7081684300150966a7b05cc43691199fa1573292f90"
+      "sha256": "e09e80d1bd99951f9edde09a743ef4e597b26810fca26c37045c2d1f9dc8b2f6"
     },
     {
       "path": "docs/page-inventory.json",
@@ -3939,6 +3939,11 @@
       "mode": "0000644",
       "sha256": "b80e47e3a9d27909521d8a9adca0376381705fc6618435b91c9f5ee585135afa"
     },
+    {
+      "path": "migrations/core_263_closeness_history_indexes.sql",
+      "mode": "0000644",
+      "sha256": "6f502903c02f48a65370d2ca167b42a5ea514bed38bb9862d34465ea627191f2"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -6042,7 +6047,7 @@
     {
       "path": "modules/lifecycle/closeness.js",
       "mode": "0000644",
-      "sha256": "4ea4fe1c93ffe6d6f42af31d96dfe402d7dbccb4a5825b71c571024548a87c25"
+      "sha256": "d464e808e8854e68f4796cd92be96a326104375bb7b82c570291939910e48c39"
     },
     {
       "path": "modules/lifecycle/collab-settle.js",
@@ -6567,7 +6572,7 @@
     {
       "path": "modules/lifecycle/ship-card.js",
       "mode": "0000644",
-      "sha256": "a055854c667a30b46465db35e8d88dd92b0d6438a5609281e1c49e1ae66f3a7f"
+      "sha256": "1935e6f0a3fb9089c2aacd9bbdf1ff1296487065c8c5a25beaf96306d88a9f5b"
     },
     {
       "path": "modules/lifecycle/ship-files.js",
@@ -8852,12 +8857,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "1822db240575bf86013d014572456d1f007004bfdc29209929938288ba43e3b2"
+      "sha256": "51e46a6ba6eb82e2c829d8c5a220cdc835fe959e0b73f12dcffa69b61de3325c"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "1b1b7816c342fed258f9eaa453ce64588f26fe28beb4ab3eb1dfc06ec8f4529e"
+      "sha256": "131c787425281094366c5871f082c5b8340e593eaa7c5d9aaf779ceb906da786"
     },
     {
       "path": "public-docs/index.html",
@@ -8877,7 +8882,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "59dcfa061d238c013470c67e6a82249f559fdbc4509c0c1d4ba8c29c03cc68ab"
+      "sha256": "7c9e016bd4bcc8e7f702fb3dc2aa9112cf6b7c27f27ed638b2d357a906f30088"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -9172,7 +9177,7 @@
     {
       "path": "scripts/gds/claim.js",
       "mode": "0000644",
-      "sha256": "7c1917a46bad730419a57047cc34ab21ff9fb2268d4c090a18effa0625e9678a"
+      "sha256": "78a7e407218051892c1aa0934474084deec94768fdd28fe2c3fa447fe48905fd"
     },
     {
       "path": "scripts/gds/classify-discipline.js",
@@ -9327,7 +9332,7 @@
     {
       "path": "scripts/gds/discipline-modes.json",
       "mode": "0000644",
-      "sha256": "a62a714209198f02ca4f964ecfd1211dd3712b946f049843a7ec921b5907f1d0"
+      "sha256": "467b66fbb778b9f8eeb03989b18fc085e4c4ccb6b397ca2777cdd82360675c42"
     },
     {
       "path": "scripts/gds/discord-channels.js",
@@ -10017,7 +10022,7 @@
     {
       "path": "scripts/gds/role-pack-guard.js",
       "mode": "0000644",
-      "sha256": "7ac55428d01852cd169bd5cb319af306a8f7798489fa89780921f4119c2f552f"
+      "sha256": "34edfb2553f3441387b8bca2f0608b95b089f9d3efd7cd370e83fd9bc3652296"
     },
     {
       "path": "scripts/gds/route-shadow-guard.js",
@@ -10699,6 +10704,11 @@
       "mode": "0000644",
       "sha256": "27630af327d56e6eea77eb7e402086ec695f9fd02f419e48af463ed1adbfab8c"
     },
+    {
+      "path": "src/bongos/craft-mode.js",
+      "mode": "0000644",
+      "sha256": "6df8bd98fbd15d3be903465390ab8f300aa029b1847c42cbe0e10c7af2e62a74"
+    },
     {
       "path": "src/bongos/db-kernel.js",
       "mode": "0000644",
@@ -10912,7 +10922,7 @@
     {
       "path": "src/bongos/routes/me.js",
       "mode": "0000644",
-      "sha256": "375859169dde72844541a62a1ff0e97b97321faeed058a287ad7b9c31cdc3a82"
+      "sha256": "989cb7aeb70d956dcd6e93f9fea3acf27fca85f17c5fd2f185b6a99541ede0ae"
     },
     {
       "path": "src/bongos/routes/modules.js",
@@ -10987,7 +10997,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "37545c18b037b0de0faaba69a716f67b779a48815d0f5e8937a7202ac7bb8f65"
+      "sha256": "154bd9ea1d7f6ea701c30fcfc8b2c4f26133710f2c2b30f0a1942894fb07c357"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11762,7 +11772,7 @@
     {
       "path": "tests/closeness.mjs",
       "mode": "0000644",
-      "sha256": "be10e63b6a424914ba71537dbfa653dcb247b28b3e6a9a8caf4696268e4500cf"
+      "sha256": "a1d1e2a77e0ad6b1a00c187775859dfcd646389959062b8b78173fc27c2c02ed"
     },
     {
       "path": "tests/cloud_bongos_pack.mjs",
@@ -11807,7 +11817,7 @@
     {
       "path": "tests/conductor_main_e2e.mjs",
       "mode": "0000644",
-      "sha256": "c3b01032ebd3d2c4093bfc1101c2a445c93c52ff520341d6f39a5f582a1e2b97"
+      "sha256": "b81e385b1c1cc3a7b6981b7c3ee4cbe169d24384404fd0e9681560e85a6cf9a1"
     },
     {
       "path": "tests/confirm_attribution.mjs",
@@ -11959,6 +11969,11 @@
       "mode": "0000644",
       "sha256": "50f195ef2060df92016b58f541a28e7492dd95ad4da8bd0781bdc07007193338"
     },
+    {
+      "path": "tests/craft_mode.mjs",
+      "mode": "0000644",
+      "sha256": "26e499e01ee9ec71094e5d2b3b0a0cf367513b9f25a54d1bd716b0d8e318f91d"
+    },
     {
       "path": "tests/credential_presence.mjs",
       "mode": "0000644",
@@ -15947,7 +15962,7 @@
     {
       "path": "tests/visual_review.mjs",
       "mode": "0000644",
-      "sha256": "102e80ed4c6c61583d9dfeca23db321be9b871cab3d8f47e4594674b7ecd3cf5"
+      "sha256": "c6f6846bfcfd73ec9e7c47062d26a4ff0c38b6bf5ade1eab6293f458011de8c9"
     },
     {
       "path": "tests/wandering_prefs.mjs",

package/docs/adr/0274-one-kernel-three-role-packs.md

@@ -22,7 +22,7 @@ Meanwhile the craft-specific material that *did* exist lived in three slash-comm
 
 3. **`/dev`, `/ideate` and `/paint` are deleted.** The skill listing drops to 25,624 chars and 17 over-length descriptions.
 
-4. **`scripts/gds/discipline-modes.json` becomes the role registry.** A core craft names a `pack` (a file to *read*); a module-contributed discipline may still name a `skill` (a command to *invoke*), which is how `ui` → `/design` survives unchanged, as ADR 0272 requires. `claim.js` prints whichever the entry carries, with the right verb.
+4. **`scripts/gds/discipline-modes.json` becomes the role registry.** A core craft names a `pack` (a file to *read*); a module-contributed discipline may still name a `skill` (a command to *invoke*), which is how `ui` → `/design` survives unchanged, as ADR 0272 requires. `claim.js` prints whichever the entry carries, with the right verb. *(Since task 1002992 the full pointer is injected by the Conductor from GET /me and `claim.js` prints only the one role line.)*
 
 5. **`scripts/gds/role-pack-guard.js` hard-fails CI** when an entry names a pack that is not in the tree, when an entry names neither pointer, when fewer than three crafts carry a pack, or when a pack exceeds its character budget (16,000 hard / 13,000 target, ratcheted just above the packs as authored).
 

package/docs/file-map.md

@@ -143,7 +143,7 @@
 │       ├── discord-channels.js  ← Archon CLI: plan/apply the Discord channel layout via the API (ADR 0036, #727)
 │       ├── setup.js             ← one-time GitHub Device Flow → ~/.config/otb/gds-session.json
 │       ├── start.js             ← list claimable tasks + active claims (`/builder-start`)
-│       ├── claim.js             ← atomic POST /api/bongos/claims (`/builder-claim`); runs the worktree-per-claim guard (worktree-claim-guard.js) BEFORE the session check and the POST; prints the claim-time context pack incl. next-free ADR/migration numbers (V4.R26); printDisciplineMode() reads discipline-modes.json to route a claimed task to its playbook skill
+│       ├── claim.js             ← atomic POST /api/bongos/claims (`/builder-claim`); runs the worktree-per-claim guard (worktree-claim-guard.js) BEFORE the session check and the POST; prints the claim-time context pack incl. next-free ADR/migration numbers (V4.R26); printRoleLine() prints the claimed craft's one role line from discipline-modes.json and lands a ui claim's module-owned skills (the full pack pointer is injected by the Conductor from GET /me, task 1002992)
 │       ├── discipline-modes.json ← the ROLE REGISTRY read by claim.js: engineer/artist/ideator → their role pack under docs/packs/, module-contributed ui → the /design skill; absence of an entry = the default build-and-ship loop, fail-open at claim time — but scripts/gds/role-pack-guard.js hard-fails CI if an entry names a pack that is not in the tree ([#1267](https://example.com/builders#/task/1267))
 │       ├── next-number.js       ← deterministic next-free ADR + migration number from origin/main ∪ local working tree; supersedes the drift-prone claim-time DB counter (V4.R26, [#964](https://example.com/builders#/task/964)). `node scripts/gds/next-number.js [--json]`
 │       ├── gen-repo-map.js      ← Path B (ADR 0063, [#1224](https://example.com/builders#/task/1224)): zero-dep, deterministic symbol-skeleton generator → docs/repo-map.md + the generated factual block in each nested CLAUDE.md; ranks exported symbols by reference frequency. `--check` = CI gate; regenerated on deploy by ship.js regenerateRepoMap()

package/docs/module-api-changelog.md

@@ -2671,5 +2671,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.20.5 with no explicit bump. run 36667238912. (task 1002620)
   1.20.7 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.20.6 with no explicit bump. run 36668328505. (task 1002620)
+  1.20.8 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.7 with no explicit bump. run 36669272909. (task 1002620)
+  1.20.9 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.20.8 with no explicit bump. run 36669791458. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/onboarding/slash-commands.md

@@ -60,7 +60,7 @@ Every one of these talks to the build system. They're grouped by when you'd reac
 
 ### Discipline modes — not slash commands any more
 
-The three core crafts no longer have a slash command. `/dev`, `/paint` and `/ideate` were **deleted** when the root instructions split into a role-neutral kernel (`CLAUDE.md`) plus one **role pack** per craft: `docs/packs/engineer.md`, `docs/packs/artist.md`, `docs/packs/ideator.md`. A claimed task's discipline routes you to your pack — `claim.js` prints its path — and you read it. A module-contributed discipline can still ship a skill, which is how `ui` → `/design` below works.
+The three core crafts no longer have a slash command. `/dev`, `/paint` and `/ideate` were **deleted** when the root instructions split into a role-neutral kernel (`CLAUDE.md`) plus one **role pack** per craft: `docs/packs/engineer.md`, `docs/packs/artist.md`, `docs/packs/ideator.md`. A claimed task's discipline routes you to your pack — the Conductor injects its path into your session on the next prompt, and `claim.js` prints a one-line reminder — and you read it. A module-contributed discipline can still ship a skill, which is how `ui` → `/design` below works.
 
 ### Design and art pipeline
 

package/docs/packs/artist.md

@@ -1,6 +1,6 @@
 # Artist pack
 
-> **The role pack for `discipline = artist`.** The kernel ([`CLAUDE.md`](../../CLAUDE.md)) is what every session reads whatever its craft; this file is the half that is only true for artists. Read the whole thing before acting — it changes how you *communicate* for the rest of the session. Registered in [`scripts/gds/discipline-modes.json`](../../scripts/gds/discipline-modes.json), which `claim.js` prints on a claim.
+> **The role pack for `discipline = artist`.** The kernel ([`CLAUDE.md`](../../CLAUDE.md)) is what every session reads whatever its craft; this file is the half that is only true for artists. Read the whole thing before acting — it changes how you *communicate* for the rest of the session. Registered in [`scripts/gds/discipline-modes.json`](../../scripts/gds/discipline-modes.json); the Conductor injects this pointer into a session holding a claim of this craft (task 1002992).
 
 An art session is not the engineer's text-heavy build loop. The artist's subject is how the project **looks and reads** — its visuals, its copy, its voice, the feeling of the thing. A craft is an identity, not a toolchain ([ADR 0272](../adr/0272-a-craft-is-an-identity-not-a-toolchain.md)): an instance has artists whether or not it ships an art pipeline.
 

package/docs/packs/engineer.md

@@ -1,6 +1,6 @@
 # Engineer pack
 
-> **The role pack for `discipline = engineer`.** The kernel ([`CLAUDE.md`](../../CLAUDE.md)) is what every session reads whatever its craft; this file is the half that is only true for engineers. Read it once at the top of an engineering session. Registered in [`scripts/gds/discipline-modes.json`](../../scripts/gds/discipline-modes.json), which `claim.js` prints on a claim.
+> **The role pack for `discipline = engineer`.** The kernel ([`CLAUDE.md`](../../CLAUDE.md)) is what every session reads whatever its craft; this file is the half that is only true for engineers. Read it once at the top of an engineering session. Registered in [`scripts/gds/discipline-modes.json`](../../scripts/gds/discipline-modes.json); the Conductor injects this pointer into a session holding a claim of this craft (task 1002992).
 
 Engineering is the project's **default loop**, so this pack introduces no new dynamic — its job is to make the standard explicit and keep you on it. Lean on it hardest when you are new here or running autonomously. (The Ideator pack flips *who drives*; the Artist pack flips *the medium*. This one is the baseline they invert from.)
 

package/docs/packs/ideator.md

@@ -1,6 +1,6 @@
 # Ideator pack
 
-> **The role pack for `discipline = ideator`.** The kernel ([`CLAUDE.md`](../../CLAUDE.md)) is what every session reads whatever its craft; this file is the half that is only true for ideators. Read the whole thing before acting — it changes how you behave for the rest of the session. Registered in [`scripts/gds/discipline-modes.json`](../../scripts/gds/discipline-modes.json), which `claim.js` prints on a claim.
+> **The role pack for `discipline = ideator`.** The kernel ([`CLAUDE.md`](../../CLAUDE.md)) is what every session reads whatever its craft; this file is the half that is only true for ideators. Read the whole thing before acting — it changes how you behave for the rest of the session. Registered in [`scripts/gds/discipline-modes.json`](../../scripts/gds/discipline-modes.json); the Conductor injects this pointer into a session holding a claim of this craft (task 1002992).
 
 An ideation session is not the build-and-ship loop, and **it needs no claim**. "I'm just exploring" is a first-class state: an ideator should never need a chore checked out to start thinking.
 

package/migrations/core_263_closeness_history_indexes.sql

@@ -0,0 +1,56 @@
+-- core_263 — index the history the closeness signals join on (task 1003268)
+--
+-- modules/lifecycle/closeness.js builds a builder's "who have I worked near" graph
+-- from three self-joins (task 1003174): overlapping CLAIMS in a shared goal,
+-- SESSION LOGS on a shared goal's tasks, and SHIPS in a shared goal. The grader of
+-- 1003174 flagged that the join keys might be unindexed, which would make each
+-- query scale with the whole table instead of with one builder's goals. Checked
+-- against the tree, key by key:
+--
+--   tasks.goal_id      — ALREADY COVERED. The task was filed before core_228 added
+--                        idx_tasks_goal ON tasks (goal_id). A second index on the
+--                        same column would only cost writes, so none is added.
+--   claims.builder_id  — only idx_claims_builder_active (003), partial on
+--                        released_at IS NULL. Closeness reads SETTLED claims
+--                        (`mine.builder_id = $1 AND mine.claimed_at > now() - …`),
+--                        which a partial-on-active index cannot serve. Added below,
+--                        with claimed_at second so the time window is a range scan.
+--   claims.task_id     — only the partial UNIQUE on active claims (003). The join
+--                        `other.task_id = t_other.id` walks every claim, settled
+--                        ones included. Added below.
+--   tasks.shipped_by   — idx_tasks_needs_rebase (core_193) is partial on
+--                        needs_rebase, and idx_tasks_shipped_by_shipped_at
+--                        (core_228) is partial on status = 'shipped'. The ship
+--                        signal filters `shipped_by = $1 AND goal_id IS NOT NULL`
+--                        with no status predicate, so the planner can use neither.
+--                        Added below, partial on exactly that query's predicates.
+--   session_logs       — covered by idx_session_logs_task / _builder (003).
+--
+-- Not urgent at today's size (a few thousand tasks, fifteen builders); this closes
+-- the gap before it grows rather than after it hurts.
+--
+-- Additive and idempotent: indexes only, no column, no constraint, no data. Safe
+-- to run forward against a live database, and an older release running against it
+-- just has unused indexes. Rollback is DROP INDEX.
+--
+-- NOT a lifecycle_* module migration: `tasks` and `claims` are CORE tables, and a
+-- module migration may only touch its own namespaced tables (fitness.js
+-- checkModuleMigrationsAdditive, ADR 0083 Decision #5). That boundary is why this
+-- was split out of task 1003174 in the first place.
+
+CREATE INDEX IF NOT EXISTS idx_claims_builder_history
+  ON claims (builder_id, claimed_at);
+
+CREATE INDEX IF NOT EXISTS idx_claims_task_all
+  ON claims (task_id);
+
+CREATE INDEX IF NOT EXISTS idx_tasks_shipped_by_goal
+  ON tasks (shipped_by, goal_id)
+  WHERE shipped_by IS NOT NULL AND goal_id IS NOT NULL;
+
+COMMENT ON INDEX idx_claims_builder_history IS
+  'Closeness (modules/lifecycle/closeness.js): a builder''s settled claims in a time window. idx_claims_builder_active is partial on active claims and cannot serve history.';
+COMMENT ON INDEX idx_claims_task_all IS
+  'Closeness: joins every claim (settled too) on task_id. The 003 unique index covers active claims only.';
+COMMENT ON INDEX idx_tasks_shipped_by_goal IS
+  'Closeness ship signal: shipped_by = $1 AND goal_id IS NOT NULL, no status predicate, so core_228''s status-partial index does not apply.';

package/modules/lifecycle/closeness.js

@@ -37,13 +37,13 @@
 // The gate FAILS CLOSED: a consent read that throws or returns null yields the
 // empty set, and so the empty graph.
 //
-// A KNOWN PERFORMANCE GAP, measured rather than assumed. The signal joins key on
-// tasks.goal_id (NO index), claims.builder_id and claims.task_id (indexed only
-// partially, on ACTIVE claims — closeness reads history) and tasks.shipped_by
-// (partial too). At today's size that is fine; it scales with total table size
-// rather than goal size. The indexes belong in a core_ migration, not here — a
-// module migration may only touch its own lifecycle_ tables (ADR 0083 §5), and
-// the fitness check enforces it. Filed with the SQL as task 1003268.
+// INDEXES. The signal joins key on tasks.goal_id (idx_tasks_goal, core_228),
+// claims.builder_id + claimed_at and claims.task_id over HISTORY, not just active
+// claims, and tasks.shipped_by + goal_id with no status predicate. The last three
+// were unindexed for this shape and are added by migrations/core_263 (from
+// task 1003268). They live in a core_ migration, not here — a module migration may only
+// touch its own lifecycle_ tables (ADR 0083 §5), and the fitness check enforces it.
+// Change a join key or predicate here and re-check that migration still serves it.
 //
 // Reaches core only through the doorway (ADR 0083). The core tables it reads
 // (claims, tasks, session_logs, builders) are read-only here.

package/modules/lifecycle/ship-card.js

@@ -198,7 +198,7 @@ function fmtMins(n) {
   return m ? `~${h}h${m}m` : `~${h}h`;
 }
 
-// Mirrors scripts/gds/discipline-modes.json, which is what claim.js prints. 'ui'
+// Mirrors scripts/gds/discipline-modes.json, which routes a claim to its playbook. 'ui'
 // was missing here, so a UI task's card sent the builder to /dev while the claim
 // had just sent them to /design (task 1003487).
 //

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.7",
+  "version": "1.20.9",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.20.7",
+      "version": "1.20.9",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.7",
+  "version": "1.20.9",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8094,5 +8094,17 @@
       "id": "1002458",
       "text": "The starter task that asks a new builder to add a test now finds its own targets from the current code, so it no longer goes out of date every time someone completes it."
     }
+  ],
+  "1.20.8": [
+    {
+      "id": "1002992",
+      "text": "When you claim a task, your assistant is now told on its own which playbook to work from: engineer, artist, ideator or UI. Before, the instructions only reached it if someone read the claim output. Each workspace gets only its"
+    }
+  ],
+  "1.20.9": [
+    {
+      "id": "1003268",
+      "text": "Added three database lookups so the 'who have I worked near' view stays fast as the project grows. Nothing changes on screen today."
+    }
   ]
 }

package/scripts/gds/claim.js

@@ -8,7 +8,6 @@
 // builder knows the parallel-safety boundary they're working within.
 
 const { execSync } = require('node:child_process');
-const fs = require('node:fs');
 const path = require('node:path');
 const { cliClient, requireSession, fmtTouches, printOnboardingNudge, rewardPolicy, costPlusOnlyNote, detectWorktreeName, cliExit } = require('./cli-lib');
 const { nextNumbers, padAdr, padMig } = require('./next-number');
@@ -60,40 +59,30 @@ async function printRelevantLearnings(task) {
   }
 }
 
-// Discipline-fork at claim (task 1267; pack-aware since task 1002990). If the
-// claimed task's `discipline` has an entry in the role registry
-// (discipline-modes.json), print a directive so the session opens that craft's
-// playbook instead of working the task the default way. Since the kernel/pack
-// split a CORE craft names a `pack` — a markdown role pack under docs/packs/
-// carrying what the role-neutral root CLAUDE.md deliberately leaves out — while a
-// module-contributed discipline may still name a `skill` slash-command (`ui` ->
-// /design). This IS the whole fork — one data lookup on the claim the builder
-// already runs; no hook, the Conductor untouched. `discipline` is already a
-// column, so there is no classification step here. Fail-open in every branch: a
-// missing or invalid map, or a discipline with no entry, prints nothing and never
-// breaks a successful claim. (The registry itself is NOT trusted to be intact by
-// luck: fitness.js hard-fails CI when an entry names a pack that is not in the
-// tree, so this fail-open path cannot silently swallow a broken registry.)
-function printDisciplineMode(task) {
+// The claimed task's craft (task 1267; pack-aware since 1002990; INJECTED since
+// 1002992). The directive itself — which role pack or skill this craft works
+// from — no longer prints here: GET /me carries it on the active claim and the
+// Conductor relays it on the session's next prompt (src/bongos/craft-mode.js), so
+// it reaches the session whether or not anyone read the claim output. What stays
+// is ONE role indicator line, and the side effect that must happen where the claim
+// happens: landing the mode's module-owned skills (materializeModeSkills below).
+//
+// Reads the registry beside this CLI (the file fitness.js hard-fails on when a
+// pack is missing), through the same helper the server uses. Fail-open in every
+// branch: a missing or invalid map, or a discipline with no entry, prints nothing
+// and never breaks a successful claim.
+function printRoleLine(task) {
   let mode = null;
   try {
     const discipline = task && task.discipline;
     if (!discipline) return;
-    const raw = fs.readFileSync(path.join(__dirname, 'discipline-modes.json'), 'utf8');
-    const modes = (JSON.parse(raw) || {}).modes || {};
-    mode = modes[discipline];
+    const { readModes, roleLine } = require('../../src/bongos/craft-mode');
+    mode = readModes(path.join(__dirname, 'discipline-modes.json'))[discipline] || null;
     if (!mode || !mode.directive) return;
-    // The pointer a session actually follows. A pack is a file to READ (there is no
-    // slash command behind it any more); a skill is one to INVOKE. Naming the wrong
-    // verb sends the session hunting for a command that was deleted, so the two
-    // shapes print differently and an entry with neither prints only the label.
-    const opener = mode.pack ? `read ${mode.pack}` : (mode.skill ? `/${mode.skill}` : null);
     console.log('');
-    console.log(`▶ ${mode.label || 'Working mode'}${opener ? ` — ${opener}` : ''}`);
-    console.log(`  ${mode.directive}`);
-    if (mode.pack) console.log(`  Your pack: ${mode.pack}  (the kernel is CLAUDE.md; this is the half that is only true for your craft)`);
+    console.log(roleLine(mode));
   } catch (_) {
-    // never let the mode hint break a successful claim
+    // never let the role line break a successful claim
     return;
   }
   materializeModeSkills(mode);
@@ -719,10 +708,10 @@ async function main() {
       console.log('');
       console.log(task.description);
     }
-    // Discipline-fork: route ideator (and any future discipline with a mapped
-    // playbook) into its skill. Printed right after the description so it's the
-    // last thing the builder reads before deciding how to work — task 1267.
-    printDisciplineMode(task);
+    // The craft's role line (and, for a mode that opts in, its module-owned
+    // skills). The full directive reaches the session through the Conductor —
+    // task 1002992.
+    printRoleLine(task);
     // task 1004202: a task that changes a page is told to use /design and get its
     // human's OK on the before/after. A nudge, never a gate: gating on that OK would
     // put a person's approval in the land path, which ADR 0162 retired.
@@ -782,4 +771,4 @@ if (require.main === module) {
   });
 }
 
-module.exports = { formatClaimFailure, claimErrorInfo, goalMembershipOfferPlan, materializeModeSkills, worktreeDetectionNote };
+module.exports = { formatClaimFailure, claimErrorInfo, goalMembershipOfferPlan, materializeModeSkills, printRoleLine, worktreeDetectionNote };

package/scripts/gds/discipline-modes.json

@@ -1,5 +1,5 @@
 {
-  "_doc": "The ROLE REGISTRY: discipline -> the operating playbook that craft works from (task 1267; reshaped by task 1002990). Since the kernel/pack split, a CORE craft names a `pack` — a markdown role pack under docs/packs/ that carries everything the root CLAUDE.md kernel deliberately does not, because it is true for one craft only. A module-contributed discipline may instead name a `skill` (a slash-command playbook under .claude/skills/), which is how `ui` -> /design still works (ADR 0272 keeps ui-design's contribution unchanged). An entry may carry both; it must carry at least one. claim.js reads this after a successful claim and prints the entry's `directive` plus its pack path, so the session opens the right playbook. There is NO classification step at claim time — `discipline` is already a column on the task. One carrier (the claim the builder already runs), one data lookup, no hooks, the Conductor untouched. A missing or invalid version of this file must never break a claim (claim.js fails open) — but fitness.js DOES hard-fail CI when an entry names a pack that is not in the tree, so the fail-open runtime cannot hide a broken registry from the build. GOVERNOR IS DEFERRED: three packs, not four, until the owner decides (criterion wa6-kernel-and-packs). A mode entry may also set \"materializeModuleSkills\": true to have the claim land that mode's module-owned skills into this checkout's .claude/skills/ (task 1003486) — opt-in per discipline, core-checkout only, and fail-open like the hint itself.",
+  "_doc": "The ROLE REGISTRY: discipline -> the operating playbook that craft works from (task 1267; reshaped by task 1002990). Since the kernel/pack split, a CORE craft names a `pack` — a markdown role pack under docs/packs/ that carries everything the root CLAUDE.md kernel deliberately does not, because it is true for one craft only. A module-contributed discipline may instead name a `skill` (a slash-command playbook under .claude/skills/), which is how `ui` -> /design still works (ADR 0272 keeps ui-design's contribution unchanged). An entry may carry both; it must carry at least one. GET /me reads this (src/bongos/craft-mode.js) and puts each active claim's entry — `directive` plus pack path — on the claim as `craft_mode`; the Conductor hook injects the one for the claim bound to the session's worktree, so the session opens the right playbook without anyone reading terminal output (task 1002992). claim.js reads it too, printing only the one role line and running `materializeModuleSkills`. There is NO classification step — `discipline` is already a column on the task. One registry, never a server-side copy. A missing or invalid version of this file must never break a claim (claim.js fails open) — but fitness.js DOES hard-fail CI when an entry names a pack that is not in the tree, so the fail-open runtime cannot hide a broken registry from the build. GOVERNOR IS DEFERRED: three packs, not four, until the owner decides (criterion wa6-kernel-and-packs). A mode entry may also set \"materializeModuleSkills\": true to have the claim land that mode's module-owned skills into this checkout's .claude/skills/ (task 1003486) — opt-in per discipline, core-checkout only, and fail-open like the hint itself.",
   "modes": {
     "engineer": {
       "pack": "docs/packs/engineer.md",

package/scripts/gds/role-pack-guard.js

@@ -72,8 +72,8 @@ function checkRolePacks(fsImpl = fs) {
       violations.push(`role registry entry '${discipline}' is not an object — every entry must carry a directive plus a pack or a skill.`);
       continue;
     }
-    // An entry with neither pointer routes a claim nowhere: claim.js prints the
-    // label and the session is left to guess its own playbook.
+    // An entry with neither pointer routes a claim nowhere: the session is told the
+    // label only and is left to guess its own playbook.
     if (!mode.pack && !mode.skill) {
       violations.push(`role registry entry '${discipline}' names neither a 'pack' (docs/packs/<craft>.md) nor a 'skill' — a claim of this discipline would be routed to no playbook at all.`);
     }

package/src/bongos/craft-mode.js

@@ -0,0 +1,87 @@
+// src/bongos/craft-mode.js — a claimed task's craft, as the pointer a session
+// follows to its playbook (task 1002992).
+//
+// WHY. The role registry (scripts/gds/discipline-modes.json) says which role
+// pack or skill each craft works from. claim.js used to PRINT that as a directive
+// block, which reaches the session only if someone reads the claim scroll by —
+// and a role pack skipped that way is invisible. This turns an entry into the same
+// { inject, contract } shape the interaction profile and the speciality contract
+// use, so GET /me can carry it on each active claim and the Conductor can relay it
+// on the next prompt, exactly as it relays those.
+//
+// ONE REGISTRY. This reads the file claim.js and fitness.js (role-pack-guard.js)
+// read — never a server-side copy of the map — so CI's hard-fail on a pack that is
+// not in the tree covers what the session is told, too.
+//
+// Fail-open throughout: an unreadable or invalid registry, or a craft with no
+// entry, yields nothing, never an error, so /me and a claim behave as before.
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { resolveCoreRoot } = require('../instance-config');
+
+function registryPath() {
+  return path.join(resolveCoreRoot(), 'scripts', 'gds', 'discipline-modes.json');
+}
+
+// The `modes` map, or {} for a missing / unparsable file.
+//
+// The DEFAULT registry is read once per process and memoised: GET /me calls this
+// on every request, and the file ships with the core, so it changes only on a
+// deploy, which restarts the process. A failed read is NOT memoised, so a
+// transient error does not pin {} for the life of the server. An explicit `file`
+// (claim.js, tests) is always read fresh.
+let memo = null;
+function readModes(file) {
+  if (file === undefined) {
+    if (!memo) {
+      const modes = readModesFile(registryPath());
+      if (Object.keys(modes).length) memo = modes;
+      return modes;
+    }
+    return memo;
+  }
+  return readModesFile(file);
+}
+
+function readModesFile(file) {
+  try {
+    const parsed = JSON.parse(fs.readFileSync(file, 'utf8'));
+    const modes = parsed && parsed.modes;
+    return modes && typeof modes === 'object' ? modes : {};
+  } catch (_) {
+    return {};
+  }
+}
+
+// The opener a session acts on. A pack is a file to READ (no slash command sits
+// behind it); a skill is one to INVOKE. The wrong verb sends a session hunting for
+// a command that does not exist, so the two shapes stay distinct.
+function opener(mode) {
+  if (!mode) return null;
+  if (mode.pack) return `read ${mode.pack}`;
+  if (mode.skill) return `/${mode.skill}`;
+  return null;
+}
+
+// The one-line role indicator claim.js prints, or null.
+function roleLine(mode) {
+  if (!mode) return null;
+  const o = opener(mode);
+  return `▶ ${mode.label || 'Working mode'}${o ? ` — ${o}` : ''}`;
+}
+
+// The injected fragment for one craft, or null when the registry has no entry
+// for it. Static registry text only — no task or builder text is interpolated —
+// so this adds no prompt-injection surface to the session.
+function describeCraftMode(discipline, modes) {
+  if (!discipline || !modes) return null;
+  const mode = modes[discipline];
+  if (!mode || typeof mode !== 'object' || !mode.directive) return null;
+  const parts = [`${roleLine(mode)} (the craft of the task claimed in this worktree).`, String(mode.directive).trim()];
+  if (mode.pack) parts.push(`Your pack: ${mode.pack} (the kernel is CLAUDE.md; this is the half that is only true for your craft).`);
+  return { discipline, inject: true, contract: parts.join('\n') };
+}
+
+module.exports = { readModes, roleLine, describeCraftMode };

package/src/bongos/routes/me.js

@@ -33,6 +33,7 @@ const db = require('../db');
 // provider is default-on (present in prod); resolveOptional degrades on a
 // prefs-module-less instance so the slices simply render their unset/default shape.
 const { validateOrRespond } = require('./_helpers');
+const { readModes: readCraftModes, describeCraftMode } = require('../craft-mode'); // task 1002992
 const { branding } = require('../../branding'); // task 2011: instance model-allocation default
 // The onboarding state machine carved into modules/onboarding/ (BV1.R81 / ADR
 // 0093 §1): the GET /me aggregator + PATCH /me/disciplines resolve the
@@ -333,10 +334,15 @@ module.exports = function buildMeRouter() {
     };
     // For each active claim, compute the streak preview (cheap; pool query).
     // Lets the CLI render "shipping this would extend streak to N days" hints.
+    // task 1002992: each claim also carries its craft's pack pointer
+    // (craft_mode: { discipline, inject, contract } or null), read from the one
+    // role registry, so the Conductor can tell the session which playbook to open
+    // for the claim in ITS worktree. Read once per request; fail-open to null.
+    const craftModes = readCraftModes();
     const activeClaimsWithPreview = await Promise.all(
       activeClaims.map(async (c) => {
         const preview = await reward.wouldExtendStreak(req.builder.id, c.task_id);
-        return { ...c, streak_preview: preview };
+        return { ...c, streak_preview: preview, craft_mode: describeCraftMode(c.discipline, craftModes) };
       })
     );
     const payload = {

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.20.7'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.20.9'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/closeness.mjs

@@ -434,10 +434,25 @@ test('the index gap the grader raised is ANSWERED, not left open', () => {
   // and these are core tables. That makes it a core_ migration, which needs a
   // reserved number and human eyes. Filed as task 1003268 with the SQL.
   //
-  // This test pins the REFERENCE so the finding cannot be quietly dropped: if
-  // someone lands the indexes and deletes the note, they should delete this too.
+  // Task 1003268 then landed them as migrations/core_263 — minus a goal_id index,
+  // because core_228 had already added idx_tasks_goal. This test now pins that the
+  // source still points at the migration and that the migration carries every
+  // index the three signals need, so a later edit cannot drop one quietly.
   assert.match(SRC, /task 1003268/,
-    'the closeness source cites the follow-up that carries the indexes');
+    'the closeness source cites the task that carries the indexes');
+  assert.match(SRC, /core_263/, 'and names the migration that serves its joins');
+  const core = fs.readFileSync(path.join(ROOT, 'migrations', 'core_263_closeness_history_indexes.sql'), 'utf8');
+  for (const [name, shape] of [
+    ['idx_claims_builder_history', /ON claims \(builder_id, claimed_at\)/],
+    ['idx_claims_task_all', /ON claims \(task_id\)/],
+    ['idx_tasks_shipped_by_goal', /ON tasks \(shipped_by, goal_id\)/],
+  ]) {
+    assert.match(core, new RegExp(`CREATE INDEX IF NOT EXISTS ${name}\\b`), `${name} is created`);
+    assert.match(core, shape, `${name} has the shape the closeness join needs`);
+  }
+  const goalIdx = fs.readFileSync(path.join(ROOT, 'migrations', 'core_228_idea_inbox_captured_by_idx.sql'), 'utf8');
+  assert.match(goalIdx, /CREATE INDEX IF NOT EXISTS idx_tasks_goal ON tasks \(goal_id\)/,
+    'tasks.goal_id is served by core_228, which is why core_263 does not repeat it');
   const files = fs.readdirSync(path.join(ROOT, 'modules', 'lifecycle', 'migrations'));
   assert.ok(!files.some((f) => /closeness/i.test(f)),
     'and no module migration tries to index a core table again');

package/tests/conductor_main_e2e.mjs

@@ -14,7 +14,7 @@
 
 import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
-import { spawn } from 'node:child_process';
+import { spawn, execFileSync } from 'node:child_process';
 import http from 'node:http';
 import fs from 'node:fs';
 import os from 'node:os';
@@ -47,7 +47,9 @@ function mePayload({ discipline = 'engineer' } = {}) {
 }
 
 // Run the hook once in a throwaway HOME whose session points at `base`.
-async function runHook(me) {
+// `worktree` names a git repo created under the fake home for the hook to stand
+// in — its basename is what binds a claim to "this" tree (task 1002992).
+async function runHook(me, { worktree = null } = {}) {
   const server = http.createServer((req, res) => {
     if (req.url.startsWith('/api/bongos/me')) { res.writeHead(200, { 'Content-Type': 'application/json' }); res.end(JSON.stringify(me)); return; }
     res.writeHead(404); res.end('{}');
@@ -62,12 +64,18 @@ async function runHook(me) {
   fs.writeFileSync(sessionPath, JSON.stringify({ token: 'test-token', api_base: base, builder: { id: 4242 } }));
   const env = { ...process.env, HOME: home, USERPROFILE: home };
   for (const k of Object.keys(env)) if (/_API_BASE$/.test(k) || k === 'OTB_CONDUCTOR_OFF' || k === 'OTB_SUBAGENT') delete env[k];
+  let cwd = home;
+  if (worktree) {
+    cwd = path.join(home, worktree);
+    fs.mkdirSync(cwd, { recursive: true });
+    execFileSync('git', ['init', '-q'], { cwd, stdio: 'ignore' });
+  }
   try {
-    const child = spawn(process.execPath, [HOOK], { env, cwd: home, stdio: ['pipe', 'pipe', 'pipe'] });
+    const child = spawn(process.execPath, [HOOK], { env, cwd, stdio: ['pipe', 'pipe', 'pipe'] });
     let out = ''; let err = '';
     child.stdout.on('data', (d) => { out += d; });
     child.stderr.on('data', (d) => { err += d; });
-    child.stdin.end(JSON.stringify({ session_id: 'e2e-' + Date.now(), prompt: 'hello', cwd: home }));
+    child.stdin.end(JSON.stringify({ session_id: 'e2e-' + Date.now(), prompt: 'hello', cwd }));
     const code = await new Promise((r) => child.on('close', r));
     return { out, err, code };
   } finally {
@@ -94,4 +102,30 @@ await test('with an artist claim, the artist contract is the one injected', asyn
   assert.ok(!r.out.includes(SPECIALITY));
 });
 
+// task 1002992: the craft's pack pointer, built by the SERVER's own helper from
+// the real registry (what GET /me puts on each claim), run through the real hook.
+const craftMode = require('../src/bongos/craft-mode.js');
+const MODES = craftMode.readModes();
+function twoTreePayload() {
+  const claim = (id, discipline) => ({ task_id: id, title: 't', touches: [], worktree_name: `task-${id}`, discipline, craft_mode: craftMode.describeCraftMode(discipline, MODES) });
+  return { ...mePayload(), specialities: [], active_claims: [claim(77, 'engineer'), claim(88, 'ideator')] };
+}
+
+await test('a session in a claimed worktree is told its craft\'s pack on the first prompt, and not the other tree\'s', async () => {
+  const r = await runHook(twoTreePayload(), { worktree: 'task-77' });
+  assert.equal(r.code, 0);
+  assert.ok(r.out.includes('docs/packs/engineer.md'), `the engineer pack pointer reaches the session; stdout was: ${JSON.stringify(r.out.slice(0, 400))}`);
+  assert.ok(!r.out.includes('docs/packs/ideator.md'), 'worktree task-88\'s ideator craft does not');
+  const other = await runHook(twoTreePayload(), { worktree: 'task-88' });
+  assert.ok(other.out.includes('docs/packs/ideator.md'));
+  assert.ok(!other.out.includes('docs/packs/engineer.md'));
+});
+
+await test('outside any claimed worktree no craft is guessed', async () => {
+  const r = await runHook(twoTreePayload());
+  assert.equal(r.code, 0);
+  assert.ok(!r.out.includes('docs/packs/'), 'no tree, no craft — silent rather than pooled');
+  assert.ok(r.out.includes(INTERACTION), 'and the rest of the hook still runs');
+});
+
 summary();

package/tests/craft_mode.mjs

@@ -0,0 +1,141 @@
+// tests/craft_mode.mjs — the claimed craft's pack pointer is INJECTED, not
+// printed (task 1002992).
+//
+// Four altitudes: the server helper over the real registry, the /me wiring, the
+// Conductor's worktree-scoped relay, and claim.js — which now prints one role line
+// but must still land a ui claim's module-owned skills (the regression this task
+// was most likely to ship). The hook itself is run end to end, against the
+// helper's real output, in tests/conductor_main_e2e.mjs.
+//
+// Run:  node tests/craft_mode.mjs
+
+import { strict as assert } from 'node:assert';
+import { createRequire } from 'node:module';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { makeRunner } from './helpers.mjs';
+
+const require = createRequire(import.meta.url);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const craft = require('../src/bongos/craft-mode.js');
+const conductor = require('../.claude/hooks/conductor.js');
+const { test, summary } = makeRunner();
+
+const REGISTRY = path.join(ROOT, 'scripts', 'gds', 'discipline-modes.json');
+const MODES = craft.readModes();
+
+// ---- the helper, over the ONE registry ---------------------------------------
+await test('the server reads the same registry file claim.js and fitness read', () => {
+  assert.deepEqual(MODES, JSON.parse(fs.readFileSync(REGISTRY, 'utf8')).modes);
+});
+
+await test('every registry craft yields a contract naming its pack or skill, with its directive', () => {
+  const names = Object.keys(MODES);
+  assert.ok(names.length >= 3, 'the registry was read at all');
+  for (const d of names) {
+    const m = craft.describeCraftMode(d, MODES);
+    assert.ok(m && m.inject, `${d} injects`);
+    assert.equal(m.discipline, d);
+    const pointer = MODES[d].pack || `/${MODES[d].skill}`;
+    assert.ok(m.contract.includes(pointer), `${d} names ${pointer}`);
+    assert.ok(m.contract.includes(MODES[d].directive.slice(0, 40)), `${d} carries its directive`);
+  }
+  assert.match(craft.describeCraftMode('engineer', MODES).contract, /read docs\/packs\/engineer\.md/);
+  assert.match(craft.describeCraftMode('ui', MODES).contract, /— \/design/, 'a skill is a command to invoke, not a file to read');
+});
+
+await test('fail-open: no craft, an unknown craft, or an unreadable registry yields nothing', () => {
+  assert.equal(craft.describeCraftMode(null, MODES), null);
+  assert.equal(craft.describeCraftMode('governor', MODES), null);
+  assert.equal(craft.describeCraftMode('engineer', null), null);
+  assert.deepEqual(craft.readModes(path.join(os.tmpdir(), 'no-such-registry.json')), {});
+  const bad = path.join(fs.mkdtempSync(path.join(os.tmpdir(), 'craft-')), 'modes.json');
+  fs.writeFileSync(bad, '{ not json');
+  assert.deepEqual(craft.readModes(bad), {});
+});
+
+await test('the default registry is read once per process; an explicit file is read fresh', () => {
+  assert.equal(craft.readModes(), craft.readModes(), 'GET /me does not re-read and re-parse per request');
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'craft-'));
+  const f = path.join(dir, 'modes.json');
+  fs.writeFileSync(f, JSON.stringify({ modes: { a: { directive: 'x' } } }));
+  assert.deepEqual(Object.keys(craft.readModes(f)), ['a']);
+  fs.writeFileSync(f, JSON.stringify({ modes: { b: { directive: 'y' } } }));
+  assert.deepEqual(Object.keys(craft.readModes(f)), ['b'], 'claim.js always sees the file as it is now');
+});
+
+// ---- /me carries it on each claim ---------------------------------------------
+await test('GET /me puts each claim\'s craft_mode on the claim, from the helper', () => {
+  const me = fs.readFileSync(path.join(ROOT, 'src/bongos/routes/me.js'), 'utf8');
+  assert.match(me, /require\('\.\.\/craft-mode'\)/);
+  assert.match(me, /craft_mode: describeCraftMode\(c\.discipline, craftModes\)/);
+  assert.doesNotMatch(me, /"modes"\s*:/, 'no second copy of the registry in the route');
+});
+
+// ---- the Conductor relays THIS worktree's craft only ---------------------------
+const claim = (id, discipline) => ({ task_id: String(id), title: 't', touches: [], worktree_name: `task-${id}`, discipline, craft_mode: craft.describeCraftMode(discipline, MODES) });
+const craftIds = (out) => out.filter((a) => String(a.id).startsWith('craft:')).map((a) => a.id);
+
+await test('the claim bound to this worktree gets its craft; the other tree\'s does not', () => {
+  const claims = [claim(1, 'engineer'), claim(2, 'ideator')];
+  assert.deepEqual(craftIds(conductor.evaluateTriggers({ activeClaims: claims, worktree: 'task-1' })), ['craft:engineer']);
+  assert.deepEqual(craftIds(conductor.evaluateTriggers({ activeClaims: claims, worktree: 'task-2' })), ['craft:ideator']);
+});
+
+await test('no bound claim, no session, or no registry entry: nothing is injected', () => {
+  const claims = [claim(1, 'engineer')];
+  assert.deepEqual(craftIds(conductor.evaluateTriggers({ activeClaims: claims, worktree: 'task-9' })), [], 'an unrelated tree');
+  assert.deepEqual(craftIds(conductor.evaluateTriggers({ activeClaims: claims, worktree: null })), [], 'not in a worktree');
+  assert.deepEqual(craftIds(conductor.evaluateTriggers({ activeClaims: null, worktree: 'task-1' })), [], 'no session / no network');
+  assert.deepEqual(craftIds(conductor.evaluateTriggers({ activeClaims: [{ ...claim(1, 'governor') }], worktree: 'task-1' })), [], 'a craft with no entry');
+  assert.deepEqual(craftIds(conductor.evaluateTriggers({ activeClaims: [{ ...claim(1, 'engineer'), craft_mode: { inject: true, contract: '' } }], worktree: 'task-1' })), [], 'an empty contract');
+});
+
+// ---- claim.js: one role line, and the ui skills still land ---------------------
+const claimCli = require('../scripts/gds/claim.js');
+const materialize = require('../scripts/gds/claude-materialize.js');
+
+function capture(fn) {
+  const lines = [];
+  const orig = console.log;
+  console.log = (...a) => { lines.push(a.join(' ')); };
+  try { fn(); } finally { console.log = orig; }
+  return lines.filter((l) => l !== '');
+}
+
+await test('claim.js prints exactly one role line and no directive block', () => {
+  const lines = capture(() => claimCli.printRoleLine({ discipline: 'engineer' }));
+  assert.deepEqual(lines, ['▶ Engineering session — read docs/packs/engineer.md']);
+  const src = fs.readFileSync(path.join(ROOT, 'scripts/gds/claim.js'), 'utf8');
+  assert.doesNotMatch(src, /mode\.directive\}/, 'the directive is no longer printed');
+  assert.doesNotMatch(src, /Your pack:/);
+});
+
+await test('claiming a ui task STILL materialises its module-owned skills', () => {
+  const saved = { into: materialize.materializeModuleSkillsIntoCore, root: materialize.isCoreCheckoutRoot };
+  const calls = [];
+  materialize.isCoreCheckoutRoot = () => true;
+  materialize.materializeModuleSkillsIntoCore = (opts) => { calls.push(opts); return { materialized: ['impeccable', 'minimalist-ui'] }; };
+  try {
+    const lines = capture(() => claimCli.printRoleLine({ discipline: 'ui' }));
+    assert.equal(calls.length, 1, 'the ui claim landed its skills');
+    assert.equal(lines[0], '▶ UI design session — /design');
+    assert.match(lines[1], /2 module-owned skill\(s\)/);
+    calls.length = 0;
+    capture(() => claimCli.printRoleLine({ discipline: 'engineer' }));
+    assert.equal(calls.length, 0, 'a craft that did not opt in lands nothing');
+  } finally {
+    materialize.materializeModuleSkillsIntoCore = saved.into;
+    materialize.isCoreCheckoutRoot = saved.root;
+  }
+});
+
+await test('claim.js fails open: no craft or an unknown craft prints nothing and never throws', () => {
+  assert.deepEqual(capture(() => claimCli.printRoleLine({})), []);
+  assert.deepEqual(capture(() => claimCli.printRoleLine({ discipline: 'governor' })), []);
+  assert.deepEqual(capture(() => claimCli.printRoleLine(null)), []);
+});
+
+summary();

package/tests/visual_review.mjs

@@ -90,10 +90,12 @@ await test('a backend task is not nudged — no noise on work that renders nothi
   assert.equal(visualReviewNudge(task()), null);
 });
 
-await test('claim.js prints the nudge after the craft directive, and cannot fail a claim with it', () => {
+await test('claim.js prints the nudge after the craft role line, and cannot fail a claim with it', () => {
   const src = read('scripts/gds/claim.js');
   const at = src.indexOf('visualReviewNudge(task)');
-  assert.ok(at > src.indexOf('printDisciplineMode(task);'), 'right after the craft directive');
+  const role = src.indexOf('printRoleLine(task);');
+  assert.ok(role > -1, 'the role line call exists (task 1002992 renamed it from printDisciplineMode)');
+  assert.ok(at > role, 'right after the craft role line');
   assert.match(src.slice(at - 200, at + 300), /catch \(_\)/, 'wrapped, so a hint can never break a successful claim');
 });