@bongos/core 1.20.8 → 1.20.10

package/migrations/core_263_closeness_history_indexes.sql

@@ -0,0 +1,56 @@
+-- core_263 — index the history the closeness signals join on (task 1003268)
+--
+-- modules/lifecycle/closeness.js builds a builder's "who have I worked near" graph
+-- from three self-joins (task 1003174): overlapping CLAIMS in a shared goal,
+-- SESSION LOGS on a shared goal's tasks, and SHIPS in a shared goal. The grader of
+-- 1003174 flagged that the join keys might be unindexed, which would make each
+-- query scale with the whole table instead of with one builder's goals. Checked
+-- against the tree, key by key:
+--
+--   tasks.goal_id      — ALREADY COVERED. The task was filed before core_228 added
+--                        idx_tasks_goal ON tasks (goal_id). A second index on the
+--                        same column would only cost writes, so none is added.
+--   claims.builder_id  — only idx_claims_builder_active (003), partial on
+--                        released_at IS NULL. Closeness reads SETTLED claims
+--                        (`mine.builder_id = $1 AND mine.claimed_at > now() - …`),
+--                        which a partial-on-active index cannot serve. Added below,
+--                        with claimed_at second so the time window is a range scan.
+--   claims.task_id     — only the partial UNIQUE on active claims (003). The join
+--                        `other.task_id = t_other.id` walks every claim, settled
+--                        ones included. Added below.
+--   tasks.shipped_by   — idx_tasks_needs_rebase (core_193) is partial on
+--                        needs_rebase, and idx_tasks_shipped_by_shipped_at
+--                        (core_228) is partial on status = 'shipped'. The ship
+--                        signal filters `shipped_by = $1 AND goal_id IS NOT NULL`
+--                        with no status predicate, so the planner can use neither.
+--                        Added below, partial on exactly that query's predicates.
+--   session_logs       — covered by idx_session_logs_task / _builder (003).
+--
+-- Not urgent at today's size (a few thousand tasks, fifteen builders); this closes
+-- the gap before it grows rather than after it hurts.
+--
+-- Additive and idempotent: indexes only, no column, no constraint, no data. Safe
+-- to run forward against a live database, and an older release running against it
+-- just has unused indexes. Rollback is DROP INDEX.
+--
+-- NOT a lifecycle_* module migration: `tasks` and `claims` are CORE tables, and a
+-- module migration may only touch its own namespaced tables (fitness.js
+-- checkModuleMigrationsAdditive, ADR 0083 Decision #5). That boundary is why this
+-- was split out of task 1003174 in the first place.
+
+CREATE INDEX IF NOT EXISTS idx_claims_builder_history
+  ON claims (builder_id, claimed_at);
+
+CREATE INDEX IF NOT EXISTS idx_claims_task_all
+  ON claims (task_id);
+
+CREATE INDEX IF NOT EXISTS idx_tasks_shipped_by_goal
+  ON tasks (shipped_by, goal_id)
+  WHERE shipped_by IS NOT NULL AND goal_id IS NOT NULL;
+
+COMMENT ON INDEX idx_claims_builder_history IS
+  'Closeness (modules/lifecycle/closeness.js): a builder''s settled claims in a time window. idx_claims_builder_active is partial on active claims and cannot serve history.';
+COMMENT ON INDEX idx_claims_task_all IS
+  'Closeness: joins every claim (settled too) on task_id. The 003 unique index covers active claims only.';
+COMMENT ON INDEX idx_tasks_shipped_by_goal IS
+  'Closeness ship signal: shipped_by = $1 AND goal_id IS NOT NULL, no status predicate, so core_228''s status-partial index does not apply.';

package/modules/lifecycle/closeness.js

@@ -37,13 +37,13 @@
 // The gate FAILS CLOSED: a consent read that throws or returns null yields the
 // empty set, and so the empty graph.
 //
-// A KNOWN PERFORMANCE GAP, measured rather than assumed. The signal joins key on
-// tasks.goal_id (NO index), claims.builder_id and claims.task_id (indexed only
-// partially, on ACTIVE claims — closeness reads history) and tasks.shipped_by
-// (partial too). At today's size that is fine; it scales with total table size
-// rather than goal size. The indexes belong in a core_ migration, not here — a
-// module migration may only touch its own lifecycle_ tables (ADR 0083 §5), and
-// the fitness check enforces it. Filed with the SQL as task 1003268.
+// INDEXES. The signal joins key on tasks.goal_id (idx_tasks_goal, core_228),
+// claims.builder_id + claimed_at and claims.task_id over HISTORY, not just active
+// claims, and tasks.shipped_by + goal_id with no status predicate. The last three
+// were unindexed for this shape and are added by migrations/core_263 (from
+// task 1003268). They live in a core_ migration, not here — a module migration may only
+// touch its own lifecycle_ tables (ADR 0083 §5), and the fitness check enforces it.
+// Change a join key or predicate here and re-check that migration still serves it.
 //
 // Reaches core only through the doorway (ADR 0083). The core tables it reads
 // (claims, tasks, session_logs, builders) are read-only here.

package/modules/ui-design/skills/brandkit/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   first, holds the logo standard and the five concept methods, and lands the system as the instance's own
   materials — the mark as SVG, the colours as the pack, the type as its faces. Triggers on "brand kit",
   "identity system", "logo system". Never generates a logo, wordmark or UI mockup.
+plain: >-
+  Builds the project's visual identity, its logo, colours and typefaces, as the project's own files.
+reach-for: >-
+  When the project needs a brand identity, or its identity needs pulling together.
+cost: >-
+  Uses your session. It adds brand files to the project and never generates a logo image.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/design-taste-frontend/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   Says the design read in one line, sets three dials (variance, motion, density), locks one world for the
   whole page, and ends on a pre-flight the kit measures. Triggers on "design a landing page", "make this not
   look templated", "taste pass", "anti-slop". Not for dashboards or native mobile.
+plain: >-
+  The default way to give a landing page or marketing page a strong, considered look that does not feel like a template.
+reach-for: >-
+  When a landing or marketing page looks generic.
+cost: >-
+  Uses your session. It changes the page, and you check it on a preview.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/design-taste-frontend-v1/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   gets exactly this behaviour while the default (design-taste-frontend) evolves separately. A fixed triple of
   dials, the layout bans, full interaction cycles, and a named vocabulary of premium patterns. Triggers on
   "design-taste-frontend-v1", "the fixed dials", "the pattern vocabulary".
+plain: >-
+  The earlier version of the landing-page style guide, kept so work that asked for it gets exactly the same results.
+reach-for: >-
+  Only when a task asks for this older version by name.
+cost: >-
+  Uses your session. It changes the page, and you check it on a preview.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/gpt-taste/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   every other one. A written plan block before any markup, derived deterministically from the route; the
   four-stage attention-interest-desire-action structure; an ultra-wide hero; a dense tile grid with zero empty
   cells. Triggers on "it looks generic", "award-tier", "anti-default".
+plain: >-
+  A stricter style pass for a long, persuasive page that keeps coming out looking like every other one.
+reach-for: >-
+  When a scrolling sales or landing page still looks generic after a first try.
+cost: >-
+  Uses your session. It changes the page, and you check it on a preview.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/high-end-visual-design/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   one layout archetype per project, the container anatomy, the pill button, the spatial rhythm, the motion
   choreography inside the Kill Switch, the mobile collapse, then a pre-output checklist. Triggers on "make it
   feel premium", "agency-grade", "this looks cheap", "the polish pass".
+plain: >-
+  Makes a page look expensive and professionally made, while staying in the project's own style.
+reach-for: >-
+  When a page looks cheap or unfinished.
+cost: >-
+  Uses your session. It changes the page, and you check it on a preview.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/image-to-code/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   design source of truth is the owner's reference images and the instance's world, read per image and
   extracted into a full spec before a line is written. Triggers on "build this from the reference", "implement
   the mock faithfully". Never generates a section, comp or screen.
+plain: >-
+  Builds a page faithfully from reference pictures you provide, studying each one first.
+reach-for: >-
+  When you have images of how a page should look and want it built to match.
+cost: >-
+  Uses your session. It builds the page and never generates images itself.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/imagegen-frontend-mobile/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   portrait plates and hero objects for the 390 and 320 compositions the kit renders, sized for the fold and
   clear of what a phone reserves, with a sidecar beside every file. Triggers on "a plate for the mobile hero",
   "the masthead at 390". Never a screen, a phone mockup or code.
+plain: >-
+  Makes the large picture at the top of a page, sized for phones, with no text in it.
+reach-for: >-
+  When a page's phone layout needs its main picture.
+cost: >-
+  Paid: each image is made on the project's image key. It adds the picture files to the project.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/imagegen-frontend-web/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   objects and atmosphere backdrops for the slots a composition already has — never one per section, never a
   screen, never a UI comp, and no page code. One material, light and camera across the family, landed with a
   provenance sidecar. Triggers on "make a hero plate", "an atmosphere backdrop".
+plain: >-
+  Makes the large background or hero pictures for a web page, with no text in them.
+reach-for: >-
+  When a page needs its main picture or a background image.
+cost: >-
+  Paid: each image is made on the project's image key. It adds the picture files to the project.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/impeccable/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   ("impeccable audit /projects"). Sixteen playbooks — shape, audit, critique, polish, harden, animate,
   typeset, colorize, layout, adapt, distill, clarify, onboard, optimize, document, extract — one per request.
   Triggers on "impeccable", "critique this page", "audit the UI". Web surfaces only.
+plain: >-
+  A toolbox of design checks and fixes for a web page, such as a review, a polish, better type or better layout, one job at a time.
+reach-for: >-
+  When you want a page reviewed or improved in one specific way.
+cost: >-
+  Uses your session. A review changes nothing; a fix changes the page.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/industrial-brutalist-ui/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   per project (Swiss industrial print or dark tactical terminal, never mixed), massive uppercase display
   against tracked-out mono metadata, strict grid anchoring, zero corner rounding, halftone and scanline
   degradation inside the Kill Switch. Triggers on "brutalist", "industrial", "make it raw".
+plain: >-
+  Gives a page a raw, mechanical look, like a technical document or a control terminal.
+reach-for: >-
+  When you want a bold, stark look.
+cost: >-
+  Uses your session. It changes the page, and you check it on a preview.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/minimalist-ui/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   whitespace first, a capped measure, one display job and one body job, exactly one hairline weight for every
   border, flat tile cards with no shadow, entry motion inside the Kill Switch. Triggers on "make it minimal",
   "clean and editorial", "this feels busy". Declines dense surfaces.
+plain: >-
+  Gives a page a calm, clean look built from text and white space.
+reach-for: >-
+  When a page feels too busy.
+cost: >-
+  Uses your session. It changes the page, and you check it on a preview.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/redesign-existing-projects/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   breaking it. Three fixed steps — scan the stack, diagnose against a written audit, apply targeted fixes —
   with the instance's world as the answer key and a fixed impact-per-risk fix order. Triggers on "redesign
   this", "upgrade the existing page", "audit this UI".
+plain: >-
+  Improves the look of an existing site in place, without rebuilding it or breaking what works.
+reach-for: >-
+  When an existing page or app needs a visual upgrade.
+cost: >-
+  Uses your session. It changes the existing pages, and you check them on a preview.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/stitch-design-taste/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   platform's own frontmatter shape. Four dials with named bands and stated defaults, then eight fixed sections
   pairing descriptive language with exact values. The thirteen colours are transcribed from the instance's
   pack, never invented. Triggers on "a design brief for Stitch".
+plain: >-
+  Writes a design brief in the project's style for an outside screen-design tool such as Google Stitch.
+reach-for: >-
+  When you want to design screens in Stitch using the project's look.
+cost: >-
+  Uses your session. It writes one brief document and changes no pages.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/modules/ui-design/skills/style/SKILL.md

@@ -5,6 +5,12 @@ description: >-
   the fifteen-token contract, and proves it clean before it lands. Four steps and no more — SEARCH, CREATE,
   PROVE, ADOPT. Triggers on "/style", "make a look", "author a style", "I want our own theme", "add a style to
   the library".
+plain: >-
+  A short guided session for creating your own look for the project, checked before it is used.
+reach-for: >-
+  When you want the project to have its own theme.
+cost: >-
+  Uses your session. The new look is only used once you choose to adopt it.
 ---
 
 <!-- BEGIN PLATFORM PREAMBLE · ui-design module · one block, byte-identical in every skill the module ships (vendored or rebuilt in-house) so an upstream refresh is a three-way merge; the source is modules/ui-design/skills/PREAMBLE.md and tests/ui_design_skills.mjs fails on drift -->

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.8",
+  "version": "1.20.10",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.20.8",
+      "version": "1.20.10",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.20.8",
+  "version": "1.20.10",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8100,5 +8100,17 @@
       "id": "1002992",
       "text": "When you claim a task, your assistant is now told on its own which playbook to work from: engineer, artist, ideator or UI. Before, the instructions only reached it if someone read the claim output. Each workspace gets only its"
     }
+  ],
+  "1.20.9": [
+    {
+      "id": "1003268",
+      "text": "Added three database lookups so the 'who have I worked near' view stays fast as the project grows. Nothing changes on screen today."
+    }
+  ],
+  "1.20.10": [
+    {
+      "id": "1004403",
+      "text": "When you adopt a speciality, each skill it offers is now explained in plain words: what it does, when you would use it, and what it costs, including which ones spend money. Before, those explanations were guessed from technica"
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.20.8'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.20.10'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/closeness.mjs

@@ -434,10 +434,25 @@ test('the index gap the grader raised is ANSWERED, not left open', () => {
   // and these are core tables. That makes it a core_ migration, which needs a
   // reserved number and human eyes. Filed as task 1003268 with the SQL.
   //
-  // This test pins the REFERENCE so the finding cannot be quietly dropped: if
-  // someone lands the indexes and deletes the note, they should delete this too.
+  // Task 1003268 then landed them as migrations/core_263 — minus a goal_id index,
+  // because core_228 had already added idx_tasks_goal. This test now pins that the
+  // source still points at the migration and that the migration carries every
+  // index the three signals need, so a later edit cannot drop one quietly.
   assert.match(SRC, /task 1003268/,
-    'the closeness source cites the follow-up that carries the indexes');
+    'the closeness source cites the task that carries the indexes');
+  assert.match(SRC, /core_263/, 'and names the migration that serves its joins');
+  const core = fs.readFileSync(path.join(ROOT, 'migrations', 'core_263_closeness_history_indexes.sql'), 'utf8');
+  for (const [name, shape] of [
+    ['idx_claims_builder_history', /ON claims \(builder_id, claimed_at\)/],
+    ['idx_claims_task_all', /ON claims \(task_id\)/],
+    ['idx_tasks_shipped_by_goal', /ON tasks \(shipped_by, goal_id\)/],
+  ]) {
+    assert.match(core, new RegExp(`CREATE INDEX IF NOT EXISTS ${name}\\b`), `${name} is created`);
+    assert.match(core, shape, `${name} has the shape the closeness join needs`);
+  }
+  const goalIdx = fs.readFileSync(path.join(ROOT, 'migrations', 'core_228_idea_inbox_captured_by_idx.sql'), 'utf8');
+  assert.match(goalIdx, /CREATE INDEX IF NOT EXISTS idx_tasks_goal ON tasks \(goal_id\)/,
+    'tasks.goal_id is served by core_228, which is why core_263 does not repeat it');
   const files = fs.readdirSync(path.join(ROOT, 'modules', 'lifecycle', 'migrations'));
   assert.ok(!files.some((f) => /closeness/i.test(f)),
     'and no module migration tries to index a core table again');

package/tests/speciality_skills.mjs

@@ -73,6 +73,48 @@ await test('every skill in the real tree reads a real description — none is a
   assert.deepEqual(bad, [], `these would teach nothing in the walkthrough: ${bad.join(', ')}`);
 });
 
+// task 1004403: every skill a speciality could offer — every core skill and
+// every module's, enabled here or not — carries its own people-facing lines, so
+// the walkthrough never has to derive them and a new skill cannot arrive without.
+const { JARGON_TERMS } = require('../modules/sessions/accessibility.js');
+// The words task 1004403 named as the ones the derived text leaked, plus the
+// repo nouns a newcomer would not know.
+const SKILL_JARGON = ['DB', 'grep', 'grepping', 'rank-scoped', 'status=', 'residue', 'criterion', 'criteria', 'touches[]', 'branch', 'commit', 'diff', 'SHA', 'CI', 'repo', 'PR'];
+const everySkill = () => skills.installedSkills({ coreRoot: ROOT, isModuleEnabled: () => true });
+
+await test('every installable skill carries plain, reach-for and cost — none is derived', () => {
+  const all = [...everySkill().values()];
+  assert.ok(all.length >= 60, `the whole tree was read (${all.length})`);
+  const missing = all.flatMap((s) => ['plain', 'reachFor', 'cost'].filter((k) => !s[k] || s[k].length < 15).map((k) => `${s.name}.${k}`));
+  assert.deepEqual(missing, [], 'add plain: / reach-for: / cost: to the SKILL.md frontmatter, written for someone with no engineering background');
+  const derived = all.filter((s) => { const d = skills.explainSkill(s).derived; return d.does || d.reachFor || d.cost; }).map((s) => s.name);
+  assert.deepEqual(derived, [], 'the walkthrough shows the author\'s own words for every skill');
+});
+
+await test('the people-facing lines stay out of the vocabulary they exist to translate', () => {
+  const banned = [...JARGON_TERMS, ...SKILL_JARGON];
+  const hits = [];
+  for (const s of everySkill().values()) {
+    for (const k of ['plain', 'reachFor', 'cost']) {
+      for (const term of banned) {
+        const re = new RegExp(`(^|[^A-Za-z])${term.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}([^A-Za-z]|$)`, /^[A-Z+-]+$/.test(term) ? '' : 'i');
+        if (re.test(s[k] || '')) hits.push(`${s.name}.${k}: "${term}"`);
+      }
+    }
+  }
+  assert.deepEqual(hits, []);
+});
+
+await test('a skill with a paid step says so in its cost line', () => {
+  // The ones whose run spends money: every hand-in pays for a quality review,
+  // and image generation is billed per image. Named, so dropping the word from
+  // one of them is caught rather than trusted.
+  const paid = ['builder-ship', 'fix-task', 'builder-sequence', 'grade-recover', 'tweak', 'otb-tile-generate', 'imagegen-frontend-web', 'imagegen-frontend-mobile'];
+  const all = everySkill();
+  const quiet = paid.filter((n) => !/\bpaid\b|costs money/i.test((all.get(n) || {}).cost || ''));
+  assert.deepEqual(quiet, []);
+});
+
 await test('explainSkill splits a model-facing description into what it does, when, and what it costs', () => {
   const e = skills.explainSkill({
     name: 'goal-review', source: 'core',