@bongos/core 1.21.86 → 1.21.88

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.86",
-  "core_contract": "1.21.86",
-  "source_commit": "7183f6e501a4de2ea256ffa4c2d19ccc62d7fdc1",
+  "core_version": "1.21.88",
+  "core_contract": "1.21.88",
+  "source_commit": "4bfba51c57c0f602ad9c166e149b64f3440e88b9",
   "source_ref": "HEAD",
-  "built_at": "2026-10-09T04:48:08.126Z",
+  "built_at": "2026-10-09T05:24:37.080Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 590,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 2998,
+    "functional_verbatim": 3001,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3617,
-  "tree_sha256": "391c304f1f86515a2c812e6764e83ba98b5fe6a67757909baf15d8e88009694b",
+  "file_count": 3620,
+  "tree_sha256": "9c2cd52bac9f184d7097d5da786d1a69fe8403ddf698d36b914c4b39da21eeb7",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2432,7 +2432,7 @@
     {
       "path": "docs/design/project-startup-direction.md",
       "mode": "0000644",
-      "sha256": "8b95dbb81af5cad9a85d3ffe9532d60391329cc957d5c79327e187bbfb3551de"
+      "sha256": "8cac194bfa4e7e0cfa6785ff72fd141980eb2abed6497ce56e42585c2f4a918c"
     },
     {
       "path": "docs/design/projects-hub-direction-v2.md",
@@ -2862,7 +2862,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "007f5683bb299be37f78f220958ae14bb8a8069fc59b81cc6fb94a12c5b3712f"
+      "sha256": "ada2da687d2c0d7dbb14e027ab755e6fbd771ff026e48d62aeda44b5d14fa923"
     },
     {
       "path": "docs/modules-contract.md",
@@ -10097,12 +10097,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "9d3ecc5f558e51dc8e4e66a6f3f0a6e9773e517ce9571ae4ec130b33128536ff"
+      "sha256": "cfe8ee2b06d54070a847c417dc95352c7817ef56bf8a49e4ffe0d0bce8615c26"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "ce90ad007650b7bcf0705bf0743acf66507496e0a043d7d6c2d9b84795b94f9b"
+      "sha256": "50698c5b17011dbaf2098ae3bdcef8540a946ab36e2d5555c824666f778287ae"
     },
     {
       "path": "public-docs/index.html",
@@ -10122,7 +10122,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "99cc3e08c1384339c868c499061c081eade1bcb0a996c47d3e644066d22ca536"
+      "sha256": "7d25584e81384714b841f849588e0ed95a630ed13d2adc5b106d9bc2940b5728"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -10427,7 +10427,7 @@
     {
       "path": "scripts/gds/claude-materialize.js",
       "mode": "0000644",
-      "sha256": "3dbededc4c7c82f844bc772ef10a9aefdf73bc3b1357db70177d164c7e2be87e"
+      "sha256": "1d141943f8367b8814e5a455c0c5d68a3915ac802df6cae9c3550f0628dbc384"
     },
     {
       "path": "scripts/gds/claude-md-template.js",
@@ -11304,6 +11304,11 @@
       "mode": "0000644",
       "sha256": "084fa5c4da1e755fa0edde5ec770e5151a9f66a247bca222bc7a2366ccf61748"
     },
+    {
+      "path": "scripts/gds/retired-core-skills.json",
+      "mode": "0000644",
+      "sha256": "74dda013c4482bcd6a42bcfb36d0affa435044e7981a3c98c9e861f99ba3ade2"
+    },
     {
       "path": "scripts/gds/review-sheet.js",
       "mode": "0000644",
@@ -11734,10 +11739,15 @@
       "mode": "0000644",
       "sha256": "9f6ce80e5325f4cfe68cfa6cb82bec52d594af7e461b6734724819b23cbb0d37"
     },
+    {
+      "path": "scripts/gds/start-goals.js",
+      "mode": "0000644",
+      "sha256": "8c4e1f1c7871c82b0fefd5402c93888831543dcd776a1e761e7b1238b3afafaa"
+    },
     {
       "path": "scripts/gds/start.js",
       "mode": "0000644",
-      "sha256": "4bc438bb7859c7a405088b2e386b33fb550532a71dbe66866d711e5b1d4b3e69"
+      "sha256": "181f07b8d62f03ae001d08dd5e5b15a65b33f512fb548e55401b97f7f484f31f"
     },
     {
       "path": "scripts/gds/status.js",
@@ -12372,7 +12382,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "2fd52ee0afe6fc9ade992a558ebb0fc3ad5904f876f7c5093dd60ea5d201b448"
+      "sha256": "5408eebecc30a0da2527855d9aa1aff7b66658f32b504f4e71517938ad7dcb83"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -13157,7 +13167,7 @@
     {
       "path": "tests/claude_materialize.mjs",
       "mode": "0000644",
-      "sha256": "bf30601c49fb27cc0b230e6f48e4ed75af68c9cb6b8e8b5f7e13b38eb0241eec"
+      "sha256": "da076e811015020cb8a7cc730dc8f403d1b9e29749871078998ebca64113b0e5"
     },
     {
       "path": "tests/clawback_confirmed_backlog.mjs",
@@ -17529,6 +17539,11 @@
       "mode": "0000644",
       "sha256": "39e62a5fc50113e719cdaacf15e6fd054f38f8703fc64137eddee7901b374f16"
     },
+    {
+      "path": "tests/start_goal_first.mjs",
+      "mode": "0000644",
+      "sha256": "a3addba1547bf0a9ce95f5d6c2ea676f63495669154e2f4c161cb8cc543b30bf"
+    },
     {
       "path": "tests/start_inbox_count.mjs",
       "mode": "0000644",

package/docs/design/project-startup-direction.md

@@ -10,7 +10,64 @@ This document is what every build task in goal 1000121 cites. Name a screen by i
 - **what the new design ADDS**;
 - the decisions that govern both.
 
-## The blended flow — supersedes the hub-side screens (owner, 2026-10-01)
+## One-page flow — supersedes the blended six screens (owner, 2026-10-08)
+
+> *Summary wins, do it in the night-room look, if it's day time let's make a day view, and likewise, same for the artist page.* Then: *approved.* — the owner, 2026-10-08.
+
+The owner found the six-screen flow still overcomplicated, and the GitHub steps after Create still failing. The mockup in [`mocks/day-night-rooms/`](mocks/day-night-rooms/README.md) is now the design of record for **every hub-side creation screen and for the artist studio's room**. Where it disagrees with the blended flow below, the mockup wins. Genesis (part 2) and the blend rule are unchanged.
+
+### The owner's decisions
+
+1. **One page, three parts.** Sign-in stays the gate in front. Then one page:
+   - **01 Your project:** name, kind, the optional sentence, and the four quick checks (country, anyone under 18, where builders will be, who's behind it). The screening stop still fires before anything is created.
+   - **02 How it's run:** a summary to skim. Each row (code, address, team, extras, rewards, hosting, we run, look) has a **Change** link that opens the real control in place.
+   - **03 Connect GitHub:** opens once the project exists, below **Create my project**.
+2. **The summary wins.** No row needs confirming and Create is not gated on the rows. This **replaces** the blended flow's "the review must not be skippable" rule. The terms stay a required checkbox above Create, and the terms version stamp still records the acceptance.
+3. **GitHub in one trip (option A).** One click: approve the project's app on GitHub, go straight on to installing it on the repo, and land back on the page. A checklist ticks itself from what the server has verified (approve the app · install it on your repo · builders can sign in · command-line sign-in is on). Coming back works from any tab or device. The founder chooses a personal or an organisation account. A failure says what stopped, and "Pick up where it stopped" resumes without making a second app.
+4. **Day room and night room, by the viewer's own clock.** Day from 07:00 to 18:59 local time, night otherwise. The day room is the same drawing in daylight: a sunny sky with clouds, a sun for the moon, lighter towers with unlit windows, a warm wall and floor, the lamp off and a patch of sun on the floor. Its palette is the mockup's `[data-sky="day"]` tokens. **The artist studio gets the same day room**, and its greeting follows the time of day.
+5. **The demo is a small link** under the heading, not its own screen.
+
+### Nothing the live wizard does is lost
+
+This table replaces the blended flow's table below for every hub-side capability. The mockup draws the simple path; each row's capability is a reveal or sits behind a summary row's **Change**.
+
+| Today | In the one-page flow |
+|---|---|
+| Q1 new or existing, and what already exists | Part 02's Code row: "A repo I already have" reveals what already exists and the adopt path. |
+| Adopt: GitHub repo picker, manual fallback, conflict pre-flight, backlog import | Behind the Code row's Change, unchanged. |
+| Q2 geography | Part 01's "Where are you?", with state or province revealed beside the country for the countries that need it, and "Where will builders be?". |
+| Q3 under-18s and the age tiers | Part 01; "Yes" reveals the tiers and the guardian rules in place. |
+| Q4 entity, new intent or existing legal type | Part 01's "Who's behind it?"; a company or nonprofit reveals the full entity list. |
+| The screening stop | Unchanged: an answer the platform cannot serve stops the page before Create, with the reason in place. |
+| Q5 one or many, count, growth guess | Part 02's Team row; Change opens the count, the growth guess and how people join. |
+| Q6 rewards | Part 02's Rewards row (pick several). |
+| Q7 framing A–D and the hybrid suite | Part 02's **We run** row ("Everything, for you" by default); "Some of it" reveals the service checklist. |
+| Auto-fill from my account | Kept, as an offer at the top of part 01 when the account has a last project. |
+| Resume a saved draft | Kept, as an offer at the top of the page (there is no fork screen any more). |
+| Type and About | Part 01's Kind and "In a sentence". |
+| Modules picker and search | Part 02's Extras row; Change opens the searchable picker. |
+| Address: handle, own domain, no address | Part 02's Address row (PS19: shown on every path, the demo included). |
+| App: Render key check, workspace, runtime, commands, plan, database | Part 02's Hosting row; Render opens today's settings in place. |
+| Look, logo, night tint | Part 02's Look row; Change opens the look picker, the logo and the night tint. |
+| Terms acknowledgement | The required checkbox above Create; the terms version stamp still records it. |
+| Review | Part 02 itself, plus the one-line recap beside Create. Nothing is gated on confirming rows. |
+| Done: standup strip, the owner-only steps, invite | Part 03 on the same page: the GitHub checklist replaces the paged owner-only steps, then "is alive" with the invite box (once the hall is live, PS15) and the genesis door. |
+| Demo: fit check, settings, teammates, 30-day notice | The "Try a small demo instead" link opens the demo's people, hours, idea and teammates in place at the top of part 01, marks the page "demo", and shows the fit sentence; the rest of the page is unchanged. |
+
+### Who builds it
+
+| Task | Builds |
+|---|---|
+| task 1004647 | This record and the mockup. |
+| task 1004648 | The one page, the day room on it, and removing the old panels. |
+| task 1004649 | GitHub in one trip, with the self-ticking checklist. |
+| task 1004650 | The hand-back from any tab or device, and checking while the page is hidden. |
+| task 1004651 | A personal or organisation account for the app. |
+| task 1004652 | Resuming a stopped step, and a fixing button for every failure. |
+| task 1004653 | The end-to-end walk, day and night, desktop and phone. |
+| task 1004654 | The artist studio's day room and time-of-day greeting. |
+
+## The blended flow — superseded by the one-page flow above (owner, 2026-10-01)
 
 > *Go for this as the design of record.* — the owner, approving the blended mockup (task 1004515).
 

package/docs/module-api-changelog.md

@@ -3004,5 +3004,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.84 with no explicit bump. run 37884200093. (task 1002620)
   1.21.86 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.85 with no explicit bump. run 37885516955. (task 1002620)
+  1.21.87 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.86 with no explicit bump. run 37886940909. (task 1002620)
+  1.21.88 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.87 with no explicit bump. run 37888371878. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.86",
+  "version": "1.21.88",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.21.86",
+      "version": "1.21.88",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.86",
+  "version": "1.21.88",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -9342,5 +9342,21 @@
       "id": "1004399",
       "text": "Published module packages are now kept in the project's own data folder instead of inside the installed core, so a core upgrade no longer deletes them; any already stored in the old place are moved over when the server starts."
     }
+  ],
+  "1.21.87": [
+    {
+      "id": "1004647",
+      "text": "The new project creation design is now on record for every builder: one page in three parts instead of seven screens, a skimmable summary instead of confirming every row, GitHub in a single trip with a checklist that ticks its"
+    },
+    {
+      "id": "1002852",
+      "text": "The task list a builder sees at the start of a session now opens with the goals they have joined and how much work in each is ready, and groups the tasks under their goals, with the builder's own goals first and anything witho"
+    }
+  ],
+  "1.21.88": [
+    {
+      "id": "1004482",
+      "text": "Upgrading a project now clears out commands Bongos used to ship but has since retired (the old dev-box commands, the old /dev /ideate /paint playbooks, the pixel-art commands), so the Commands page and Claude's menu only list"
+    }
   ]
 }

package/scripts/gds/claude-materialize.js

@@ -30,6 +30,7 @@
 const fs = require('node:fs');
 const path = require('node:path');
 const { spawnSync } = require('node:child_process');
+const crypto = require('node:crypto');
 const { VERBS } = require('../../bin/bongos.js'); // side-effect-free require (guarded main)
 const ic = require('../../src/instance-config'); // neutral configDir/envPrefix fallbacks (never a founder literal)
 const { isCorePackageName, CORE_PACKAGE_NAMES } = require('../../src/module-loader/catalog'); // one definition of "this checkout IS the core"
@@ -277,6 +278,59 @@ function moduleSkillSources(opts) {
   return out;
 }
 
+// ---- retired core skills: the tombstone list (task 1004482) -----------------
+// A skill the core USED to ship from its own .claude/skills/ and no longer does (the dev-box
+// verbs, the old /dev /ideate /paint role playbooks, the pixel-art skills that moved into a
+// default-off module). Every instance materialized before task 1004482 received them as core
+// skills, and the provenance manifest then recorded only module-declared names — so step 1c
+// could never prove it had put them there and they stayed in .claude/skills/ for the harness to
+// load and the hall's Commands page to list, forever.
+//
+// From task 1004482 on the manifest records EVERY skill a materialize lands, so a skill the core
+// drops later is withdrawn by step 1c's ordinary rule. This list closes the historical gap only,
+// and is therefore a closed set: it should not need a new entry.
+//
+// "Never touch a skill the instance authored" is held by a fingerprint, not by the name: each
+// entry lists sha256 digests (first 16 hex) of every description the core ever shipped under that
+// name, as written and as bongosify() rewrote it. A dir whose SKILL.md description matches none of
+// them is not ours and is left in place with a note — an owner who wrote their own /dev keeps it.
+const RETIRED_CORE_SKILLS_FILE = path.join(__dirname, 'retired-core-skills.json');
+
+// The `description:` value of a SKILL.md's frontmatter, whitespace-collapsed — a plain scalar,
+// a quoted one, or a block scalar (`>` / `|`) with its indented continuation lines. null when
+// the file has no frontmatter or no description. PURE + exported.
+function skillDescription(text) {
+  const m = String(text == null ? '' : text).replace(/\r\n/g, '\n').match(/^---\n([\s\S]*?)\n---(?:\n|$)/);
+  if (!m) return null;
+  const lines = m[1].split('\n');
+  const i = lines.findIndex((l) => /^description:/.test(l));
+  if (i < 0) return null;
+  const parts = [lines[i].replace(/^description:\s*/, '')];
+  if (/^[>|][+-]?$/.test(parts[0])) parts[0] = '';
+  for (let j = i + 1; j < lines.length && /^\s+\S/.test(lines[j]); j += 1) parts.push(lines[j]);
+  const value = parts.join(' ').replace(/\s+/g, ' ').trim().replace(/^(["'])([\s\S]*)\1$/, '$2').trim();
+  return value || null;
+}
+
+function descriptionDigest(desc) {
+  return crypto.createHash('sha256').update(String(desc)).digest('hex').slice(0, 16);
+}
+
+// Does this instance skill dir carry a description the core shipped under `name`? Reads the
+// tombstone's digests; an unreadable SKILL.md or a missing description answers "no" (keep it).
+function isRetiredCoreCopy(dir, digests) {
+  if (!Array.isArray(digests) || !digests.length) return false;
+  let text;
+  try { text = fs.readFileSync(path.join(dir, 'SKILL.md'), 'utf8'); } catch { return false; }
+  const desc = skillDescription(text);
+  return desc != null && digests.includes(descriptionDigest(desc));
+}
+
+function readRetiredCoreSkills(file = RETIRED_CORE_SKILLS_FILE) {
+  const j = readJsonSafe(file);
+  return j && j.skills && typeof j.skills === 'object' ? j.skills : {};
+}
+
 // ---- I/O: copy a tree, transforming text files through bongosify ----------
 
 const TEXT_EXT = new Set(['.md', '.txt', '.sh']); // command-bearing text we rewrite (skills are SKILL.md)
@@ -759,10 +813,38 @@ function materializeClaude({ coreRoot, instanceDir, dryRun = false, overwrite =
   // exists to fix. Deliberately asked of the CORE source tree rather than the roster, so a
   // name no enabled module declares any more is still recognised as legitimately sourced.
   const coreShipsNow = (name) => fs.existsSync(path.join(skillsSrc, name)) && !skipSkills.has(name);
+  // Every CORE skill step 1 landed is recorded too (task 1004482), so a skill the core stops
+  // shipping in a later release is withdrawn by the rule below instead of lingering forever.
+  // When the core's .claude/skills/ could not be read at all, nothing was landed from it and
+  // nothing may be withdrawn on that account: the previous core entries are carried forward.
+  const coreTreeRead = skillsRes.present;
+  if (coreTreeRead) {
+    for (const name of fs.readdirSync(skillsSrc)) {
+      if (landedNow[name] || !SKILL_NAME_RE.test(name) || skillSkip(name)) continue;
+      if (!fs.statSync(path.join(skillsSrc, name)).isDirectory()) continue;
+      if (!dryRun && !fs.existsSync(path.join(skillsDest, name))) continue;
+      landedNow[name] = { source: `.claude/skills/${name}`, coreShipped: true };
+    }
+  } else {
+    for (const [name, rec] of Object.entries(landedPreviously)) if (rec && rec.coreShipped && !rec.module && !landedNow[name]) landedNow[name] = rec;
+  }
   const withdrawable = Object.keys(landedPreviously).filter((n) => SKILL_NAME_RE.test(n) && !landedNow[n] && !coreShipsNow(n));
+  // The historical half (task 1004482): a skill the core retired BEFORE the manifest recorded
+  // core skills is withdrawn when its dir still carries a description the core shipped under
+  // that name. Anything else under a retired name is the instance's own and stays.
+  const retired = readRetiredCoreSkills();
+  const keptAsOwn = [];
+  for (const [name, entry] of Object.entries(retired)) {
+    if (!SKILL_NAME_RE.test(name) || landedNow[name] || coreShipsNow(name) || withdrawable.includes(name)) continue;
+    const dir = path.join(skillsDest, name);
+    if (!fs.existsSync(dir)) continue;
+    if (isRetiredCoreCopy(dir, entry && entry.descriptionDigests)) withdrawable.push(name);
+    else keptAsOwn.push(name);
+  }
+  if (keptAsOwn.length) summary.notes.push(`${keptAsOwn.length} skill dir(s) share a name the core once shipped but are not the core's copy (their description is not one it shipped), so they were left in place as the instance's own: ${keptAsOwn.sort().join(', ')}.`);
   if (!overwrite) {
     // adopt mode never clobbers what the owner already has; withdrawing is a clobber.
-    if (withdrawable.length) summary.notes.push(`${withdrawable.length} skill(s) of a now-disabled module were left in place (adopt mode does not withdraw): ${withdrawable.sort().join(', ')}.`);
+    if (withdrawable.length) summary.notes.push(`${withdrawable.length} skill(s) the core no longer lands here were left in place (adopt mode does not withdraw): ${withdrawable.sort().join(', ')}.`);
   } else {
     for (const name of withdrawable.sort()) {
       const dir = path.join(skillsDest, name);
@@ -774,7 +856,7 @@ function materializeClaude({ coreRoot, instanceDir, dryRun = false, overwrite =
       if (!dryRun) fs.rmSync(dir, { recursive: true, force: true });
       summary.withdrawnSkills.push(name);
     }
-    if (summary.withdrawnSkills.length) log(`  ${dryRun ? '[dry-run] would withdraw' : '✓ withdrew'} ${summary.withdrawnSkills.length} stale skill dir(s) whose module is no longer enabled: ${summary.withdrawnSkills.join(', ')}`);
+    if (summary.withdrawnSkills.length) log(`  ${dryRun ? '[dry-run] would withdraw' : '✓ withdrew'} ${summary.withdrawnSkills.length} stale skill dir(s) the core no longer ships here (retired, or its module is off): ${summary.withdrawnSkills.join(', ')}`);
   }
   if (!Object.keys(landedPreviously).length && summary.excludedSkills.length) {
     summary.notes.push('no .instance-skills.json provenance in .claude/skills/ yet, so nothing was withdrawn — this run records it; a later run can withdraw the skills of a module that has since been disabled.');
@@ -788,7 +870,7 @@ function materializeClaude({ coreRoot, instanceDir, dryRun = false, overwrite =
   // the pre-flight halts on and the real run then rewrites anyway.
   if (overwrite) {
     const names = Object.keys(landedNow).sort();
-    const manifest = { _doc: 'GENERATED by scripts/gds/claude-materialize.js (task 1003632): the module-declared skills a materialize landed in this instance. It is the provenance record that lets a later run WITHDRAW a skill whose module has since been disabled — a name absent from here is never deleted, so a hand-written skill is safe. Commit it; do not hand-edit.', skills: Object.fromEntries(names.map((n) => [n, landedNow[n]])) };
+    const manifest = { _doc: 'GENERATED by scripts/gds/claude-materialize.js (tasks 1003632, 1004482): every skill a materialize landed in this instance, core and module alike. It is the provenance record that lets a later run WITHDRAW a skill the core stopped shipping or whose module has since been disabled — a name absent from here is never deleted on that account, so a hand-written skill is safe. Commit it; do not hand-edit.', skills: Object.fromEntries(names.map((n) => [n, landedNow[n]])) };
     if (!dryRun) {
       fs.mkdirSync(skillsDest, { recursive: true });
       fs.writeFileSync(path.join(skillsDest, INSTANCE_SKILLS_MANIFEST), JSON.stringify(manifest, null, 2) + '\n');
@@ -1112,4 +1194,4 @@ if (require.main === module) {
   process.exit(s.refused.length ? 1 : 0);
 }
 
-module.exports = { scriptToVerb, bongosify, PROJECT_CLI, topUpNpxAllowTwins, transformSettings, readSettingsTransform, renderStarterSettings, STARTER_ALLOW, copyTreeTransformed, materializeClaude, materializeWillRewrite, materializeModuleSkillsIntoCore, isCoreCheckoutRoot, readModuleSkillsManifest, MODULE_SKILLS_MANIFEST, readInstanceSkillsManifest, INSTANCE_SKILLS_MANIFEST, GDS_INVOCATION_RE, buildRebrandRules, rebrandText, disabledModuleSkills, moduleSkillRoster, moduleSkillSources, vendoredSkillGate, SKILL_NAME_RE, VENDOR_DEFAULT_POLICY };
+module.exports = { skillDescription, descriptionDigest, isRetiredCoreCopy, readRetiredCoreSkills, RETIRED_CORE_SKILLS_FILE, scriptToVerb, bongosify, PROJECT_CLI, topUpNpxAllowTwins, transformSettings, readSettingsTransform, renderStarterSettings, STARTER_ALLOW, copyTreeTransformed, materializeClaude, materializeWillRewrite, materializeModuleSkillsIntoCore, isCoreCheckoutRoot, readModuleSkillsManifest, MODULE_SKILLS_MANIFEST, readInstanceSkillsManifest, INSTANCE_SKILLS_MANIFEST, GDS_INVOCATION_RE, buildRebrandRules, rebrandText, disabledModuleSkills, moduleSkillRoster, moduleSkillSources, vendoredSkillGate, SKILL_NAME_RE, VENDOR_DEFAULT_POLICY };

package/scripts/gds/retired-core-skills.json

@@ -0,0 +1,101 @@
+{
+  "_doc": "Tombstone list (task 1004482): skills the core once shipped from its own .claude/skills/ and no longer does, from before materialize recorded core skills in an instance's .instance-skills.json. Each lists sha256 digests (first 16 hex) of every description the core ever shipped under that name, as written and as bongosify() rewrote it; claude-materialize.js withdraws an instance dir under one of these names ONLY when its SKILL.md description matches, so a skill the instance wrote itself is never touched. A closed historical set: a skill the core drops from now on is withdrawn through the manifest, with no entry here.",
+  "skills": {
+    "builder-box": {
+      "descriptionDigests": [
+        "14913228d8aefa2a",
+        "3a8458946af072fb",
+        "7695811a3bb4fa8a",
+        "d77e96d673b77f5b"
+      ]
+    },
+    "builder-connect": {
+      "descriptionDigests": [
+        "27137471966e6a98",
+        "2bc0f02001bf7311",
+        "5bfb4795ceb3e77a",
+        "a9442b55f9588a06",
+        "d661c46a8076a1ea"
+      ]
+    },
+    "builder-sync": {
+      "descriptionDigests": [
+        "3fad042c07a1d8e7",
+        "50c1a8505aead99b"
+      ]
+    },
+    "close-box": {
+      "descriptionDigests": [
+        "03d839f2e5909448",
+        "4f30758956f46d88",
+        "66aef8299b4c39af",
+        "b3f6743fdb4a07fe",
+        "d119bb63ffaba1e8"
+      ]
+    },
+    "dev": {
+      "descriptionDigests": [
+        "7836b393796e9ee0",
+        "8cf08a65be57d5f1"
+      ]
+    },
+    "feedback": {
+      "descriptionDigests": [
+        "211c55ddd59ef937",
+        "2f58da0a75816b09",
+        "3b48dc4cf9e43692",
+        "7bca081fc8092577",
+        "85bb6d1200234a28",
+        "a309ad6d9ea56a5f",
+        "ab21803079a7530c",
+        "e090c86c838c0f97"
+      ]
+    },
+    "ideate": {
+      "descriptionDigests": [
+        "466396868c0d2d37"
+      ]
+    },
+    "otb-character-review": {
+      "descriptionDigests": [
+        "518356210d594d2e",
+        "af216311f26edffd",
+        "eb529abb98348cd1"
+      ]
+    },
+    "otb-design-review": {
+      "descriptionDigests": [
+        "1b1375bc9ea12faa",
+        "9f97a32f15c805bc"
+      ]
+    },
+    "otb-feedback-capture": {
+      "descriptionDigests": [
+        "6ba86ab812dd9495",
+        "c915f0de7ab1e8fd"
+      ]
+    },
+    "otb-figma-sync": {
+      "descriptionDigests": [
+        "281987db3241a779",
+        "61132c40a0388319"
+      ]
+    },
+    "otb-tile-generate": {
+      "descriptionDigests": [
+        "57981088137a89ee",
+        "b1db07959665a454"
+      ]
+    },
+    "paint": {
+      "descriptionDigests": [
+        "944ae7795b04d726"
+      ]
+    },
+    "tweak": {
+      "descriptionDigests": [
+        "a8d84a40f2e3d8a2"
+      ]
+    }
+  }
+}

package/scripts/gds/start-goals.js

@@ -0,0 +1,102 @@
+// scripts/gds/start-goals.js — /builder-start, goal-first (task 1002852).
+//
+// WHY. Work is organised in goals, but /builder-start opened on a flat list of
+// tasks, so a builder saw "task 1002852" and never which goal it served or which of
+// their own goals had work waiting. This leads with the goals the builder has
+// JOINED, then shows the same claimable table grouped under each task's goal.
+//
+// The owner's two rules (2026-10-08, WA6 chain kickoff):
+//   - the goals sit ABOVE the claimable table and never replace it, so nothing
+//     claimable is hidden from a builder who has joined no goal;
+//   - a task with no goal is listed under "Other work". Nothing is backfilled.
+//
+// PURE: no I/O. start.js fetches GET /goals (best-effort: a failed read groups by
+// goal id with a generic name and lists no joined goals) and hands both lists in.
+
+'use strict';
+
+const OTHER_WORK = 'Other work';
+const JOINED_SHOWN = 5;
+
+// The open goals this builder is a member of, in the board's own order (version,
+// sort order). `viewer_is_member` is the server's answer, never re-derived here.
+function joinedGoals(goals) {
+  return (Array.isArray(goals) ? goals : [])
+    .filter((g) => g && g.viewer_is_member === true && g.status === 'open');
+}
+
+function goalName(id, byId) {
+  const g = byId.get(String(id));
+  return (g && g.title) || `Goal ${id}`;
+}
+
+// Group claimable rows by goal, keeping each row's place in the server's order
+// (priority, then estimate) inside its group. Groups run: the builder's joined
+// goals first (board order), then every other goal by its first row, then
+// "Other work" last. Every row lands in exactly one group, so the grouped table
+// lists precisely the rows the flat one did.
+function groupByGoal(rows, goals) {
+  const list = Array.isArray(rows) ? rows : [];
+  const byId = new Map((Array.isArray(goals) ? goals : []).map((g) => [String(g.id), g]));
+  const joinedOrder = joinedGoals(goals).map((g) => String(g.id));
+  const groups = new Map();
+  for (const t of list) {
+    const key = t.goal_id == null ? null : String(t.goal_id);
+    if (!groups.has(key)) {
+      groups.set(key, {
+        goal_id: key,
+        title: key == null ? OTHER_WORK : goalName(key, byId),
+        joined: key != null && joinedOrder.includes(key),
+        rows: [],
+      });
+    }
+    groups.get(key).rows.push(t);
+  }
+  const all = [...groups.values()];
+  const joined = joinedOrder.map((id) => groups.get(id)).filter(Boolean);
+  const others = all.filter((g) => g.goal_id != null && !g.joined);
+  const other = groups.get(null);
+  return [...joined, ...others, ...(other ? [other] : [])];
+}
+
+// The "Your goals" lines above the table: each joined goal and how many tasks in
+// it are claimable for this builder right now (from the FULL filtered set, not
+// the capped card rows, so a count never under-reports). Empty when the builder
+// has joined no open goal; the table below still lists everything.
+function yourGoals(goals, claimable) {
+  const counts = new Map();
+  for (const t of Array.isArray(claimable) ? claimable : []) {
+    if (t.goal_id == null) continue;
+    const k = String(t.goal_id);
+    counts.set(k, (counts.get(k) || 0) + 1);
+  }
+  const joined = joinedGoals(goals);
+  return {
+    goals: joined.slice(0, JOINED_SHOWN).map((g) => ({
+      id: String(g.id),
+      title: g.title || `Goal ${g.id}`,
+      claimable: counts.get(String(g.id)) || 0,
+    })),
+    more: Math.max(0, joined.length - JOINED_SHOWN),
+  };
+}
+
+// Goal-first ordering for the capped card: rows in a goal the builder joined come
+// first, everything else after, each half keeping the server's order. Without it
+// the card's top rows were the board's top rows and a builder's own goals could
+// show "5 to claim" above a table holding none of them. A stable partition, so it
+// only moves rows, never drops one.
+function joinedFirst(rows, goals) {
+  const list = Array.isArray(rows) ? rows : [];
+  const joined = new Set(joinedGoals(goals).map((g) => String(g.id)));
+  const mine = [];
+  const rest = [];
+  for (const t of list) (t.goal_id != null && joined.has(String(t.goal_id)) ? mine : rest).push(t);
+  return mine.concat(rest);
+}
+
+function claimableWord(n) {
+  return n === 0 ? 'nothing to claim right now' : `${n} to claim`;
+}
+
+module.exports = { OTHER_WORK, joinedGoals, joinedFirst, groupByGoal, yourGoals, claimableWord };

package/scripts/gds/start.js

@@ -233,23 +233,30 @@ function whatItIs(t) {
 // Ids are emitted as hall links (renders as a clean #N) — a bare "#NNN" in a
 // relayed chat message autolinks to GitHub and 404s (CLAUDE.md ref rule).
 const surface = require('./surface');
+const startGoals = require('./start-goals');
 const HALL_TASK = `${hallBase()}#/task/`;
-function claimableTable(rows, rewardFromServer) {
+function claimableTable(rows, rewardFromServer, goals) {
   // On a cost-plus-only instance the Reward column is an advertised estimate that
   // is never paid — say so in the header so the column can't read as a promise,
   // and footnote what IS paid below the table (task 1002469).
   const perTask = rewardPolicy(rewardFromServer).perTaskCredit;
   const rewardHead = perTask ? 'Reward' : 'Reward (est.)';
   const headers = ['#', 'Version', ROLE_AXIS_LABEL, rewardHead, 'Est.', 'What it is'];
-  const body = rows.map((t) => [
+  const rowCells = (t) => [
     surface.taskRef(t.id, HALL_TASK),
     cell(t.version_id || '?'),
     cell(roleLabel(t) || '—'),
     `${t.credits_reward ?? 0}c`,
     estimateShort(t),
     cell(whatItIs(t)),
-  ]);
-  const out = [surface.table(headers, body)];
+  ];
+  // task 1002852: one table per goal, each under its goal's name; goal-less work
+  // last under "Other work". An empty goal list (a failed read) still groups by id.
+  const out = [];
+  for (const g of startGoals.groupByGoal(rows, goals)) {
+    if (out.length) out.push('');
+    out.push(surface.strong(g.title) + (g.joined ? ' · your goal' : ''), surface.table(headers, g.rows.map(rowCells)));
+  }
   const cpNote = costPlusOnlyNote(rewardFromServer);
   if (cpNote) out.push('', surface.em(cpNote));
   return out.join('\n');
@@ -374,6 +381,7 @@ const WIDGET_STYLE = `<style>
 .bs-thead{text-align:left;color:var(--color-text-tertiary);font-size:12px;}
 .bs-th{padding:0 6px 4px;font-weight:400;}
 .bs-tr{cursor:pointer;}
+.bs-group td{padding:10px 0 4px;font-size:12px;font-weight:500;color:var(--color-text-secondary);}
 .bs-td{padding:7px 6px;border-top:0.5px solid var(--color-border-tertiary);}
 .bs-id{color:var(--color-text-secondary);font-family:var(--font-mono);font-size:12px;}
 .bs-nowrap{white-space:nowrap;}
@@ -384,7 +392,7 @@ const WIDGET_STYLE = `<style>
 .bs-foot{font-size:13px;color:var(--color-text-tertiary);margin-top:12px;}
 </style>`;
 
-function renderWidget({ builder, claims, claimable, total, streak, recommendations, header, routingByPreference, preferred, filters, readyToClose, needsRebaseTasks }) {
+function renderWidget({ builder, claims, claimable, total, streak, recommendations, header, routingByPreference, preferred, filters, readyToClose, needsRebaseTasks, goals, yourGoals }) {
   const b = builder || {};
   // ADR 0120 part 5: the owed-rebase gate warning, rendered at the top of the
   // card (before status/holdings) since it blocks new claims. '' when none owed.
@@ -443,7 +451,7 @@ function renderWidget({ builder, claims, claimable, total, streak, recommendatio
 
   // rows — click to claim. Columns: # / Version / Type / Reward /
   // Est. / What it is (the work lane is its own column, not baked into the title).
-  const rows = claimable.map((t) => {
+  const taskRow = (t) => {
     const claimMsg = jsq(`Claim task ${t.id}`);
     const titleAttr = hesc(`Claim #${t.id}: ${t.title || ''}`);
     const d = t.discipline;
@@ -458,7 +466,16 @@ function renderWidget({ builder, claims, claimable, total, streak, recommendatio
       + TD(hesc(estimateShort(t)), 'bs-sub')
       + TD(hesc(t.title || ''), 'bs-ellip')
       + `</tr>`;
-  }).join('');
+  };
+  // task 1002852: the same rows, grouped under each task's goal ("Other work" last).
+  const rows = startGoals.groupByGoal(claimable, goals).map((g) =>
+    `<tr class="bs-group"><td colspan="6">${hesc(g.title)}${g.joined ? '<span class="bs-sub"> · your goal</span>' : ''}</td></tr>`
+    + g.rows.map(taskRow).join('')).join('');
+  // task 1002852: the goals this builder joined, ABOVE the table (never instead of it).
+  const goalsBlock = yourGoals.goals.length
+    ? `<div class="bs-menuh">Your goals</div>${yourGoals.goals.map((g) =>
+      `<div class="bs-line"><i class="ti ti-target" aria-hidden="true"></i>${hesc(clip(g.title, 60))}<span class="bs-dot"> · </span><span class="bs-sub">${hesc(startGoals.claimableWord(g.claimable))}</span></div>`).join('')}${yourGoals.more ? `<div class="bs-line bs-sub">and ${yourGoals.more} more</div>` : ''}`
+    : '';
 
   const menu = claimable.length
     ? `<table class="bs-table">
@@ -495,6 +512,7 @@ function renderWidget({ builder, claims, claimable, total, streak, recommendatio
   ${statusRow}
   ${holdings}
   ${closeBanner}
+  ${goalsBlock}
   <div class="bs-menuh">Claim one to start — ${total || claimable.length} ready for you right now${matched}${fNote}</div>
   ${menu}
   <div class="bs-foot">Click a task to claim it${moreLink}${crossLane}</div>
@@ -679,9 +697,9 @@ async function main() {
   // endpoint fails, that widget degrades to "N/A" rather than killing
   // /builder-start.
   const api = await cliClient();
-  let me, r, closeRes, progressRes, costRes, recentRes, inboxRes, blockersRes;
+  let me, r, closeRes, progressRes, costRes, recentRes, inboxRes, blockersRes, goalsRes;
   try {
-    [me, r, closeRes, progressRes, costRes, recentRes, inboxRes, blockersRes] = await Promise.all([
+    [me, r, closeRes, progressRes, costRes, recentRes, inboxRes, blockersRes, goalsRes] = await Promise.all([
       api.me.getMe(),
       api.tasks.getTasksClaimable({ query: claimableQuery }),
       api.versions.getVersionsCloseSuggestions(),
@@ -690,6 +708,8 @@ async function main() {
       api.public.getPublicRecentShipped(),
       api.inbox.getInbox({ query: { status: 'open' } }),
       api.blockers.getBlockers(),
+      // task 1002852: best-effort — a failed goals read leaves the table flat-grouped by id.
+      api.goals.getGoals({ query: { status: 'open' } }).catch(() => ({ ok: false })),
     ]);
   } catch (err) {
     // A fresh-clone instance that was never brought up refuses the connection.
@@ -741,7 +761,10 @@ async function main() {
   const filtered = routingByPreference
     ? rawClaimable.filter((t) => preferred.includes(t.discipline))
     : rawClaimable;
-  const claimable = filtered.slice(0, limit);
+  // task 1002852: goal-first. The open goals (with the server's viewer_is_member)
+  // group the table and put the builder's joined goals' rows ahead of the cap.
+  const goals = goalsRes && goalsRes.ok && Array.isArray(goalsRes.data?.goals) ? goalsRes.data.goals : [];
+  const claimable = startGoals.joinedFirst(filtered, goals).slice(0, limit);
 
   // "You might enjoy" — up to 3 claimable tasks outside the builder's lanes.
   // Computed from the FULL set so it can reach across disciplines. Suppressed
@@ -758,6 +781,7 @@ async function main() {
     ? closeRes.data.suggestions
     : [];
   const readyToClose = closeSuggestions.filter((s) => s.ready);
+  const yourGoals = startGoals.yourGoals(goals, filtered);
 
   // Header widget data (each independently optional).
   const progress = progressRes.ok && Array.isArray(progressRes.data?.progress) ? progressRes.data.progress : null;
@@ -781,6 +805,7 @@ async function main() {
         me: me.data,
         claimable,
         recommendations,
+        your_goals: yourGoals.goals,
         discipline_routing: {
           preferred_disciplines: preferred,
           applied: routingByPreference,
@@ -836,6 +861,8 @@ async function main() {
       filters: { version, discipline, fit },
       readyToClose,
       needsRebaseTasks,
+      goals,
+      yourGoals,
     }) + '\n');
     return;
   }
@@ -951,11 +978,18 @@ async function main() {
     fit && `fit=${fit}`,
   ].filter(Boolean);
   const filterNote = filterBits.length ? ` (${filterBits.join(', ')})` : '';
+  // task 1002852: the goals this builder joined, above the table (never instead of it).
+  if (yourGoals.goals.length) {
+    console.log(surface.strong('Your goals'));
+    for (const g of yourGoals.goals) console.log(`  ${clip(g.title, 60)} · ${startGoals.claimableWord(g.claimable)}`);
+    if (yourGoals.more) console.log(`  and ${yourGoals.more} more`);
+    console.log('');
+  }
   console.log(`${surface.strong('Claim one to start')} — ${filtered.length} ready for you right now${matched}${filterNote}:`);
   console.log('');
   if (claimable.length) {
     const cardRows = claimable.slice(0, CARD_ROWS);
-    console.log(claimableTable(cardRows, me.ok ? me.data?.reward : null));
+    console.log(claimableTable(cardRows, me.ok ? me.data?.reward : null, goals));
     const moreN = filtered.length - cardRows.length;
     if (moreN > 0) {
       console.log('');
@@ -1012,6 +1046,8 @@ async function main() {
         filters: { version, discipline, fit },
         readyToClose,
         needsRebaseTasks,
+        goals,
+        yourGoals,
       })
       : null;
     const markdown = captureLog(emitMarkdownCard).join('\n');

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.86'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.88'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/claude_materialize.mjs

@@ -19,6 +19,7 @@ import { strict as assert } from 'node:assert';
 import { createRequire } from 'node:module';
 import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, readdirSync, rmSync } from 'node:fs';
 import { tmpdir, homedir } from 'node:os';
+import { execFileSync } from 'node:child_process';
 import { join, dirname, relative, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
@@ -420,6 +421,87 @@ t('materializeClaude: --dry-run reports the withdrawal without performing it; ad
   for (const d of [core, inst]) rmSync(d, { recursive: true, force: true });
 });
 
+// ---- withdrawing skills the CORE stopped shipping (task 1004482) ----------------
+// The bug: the manifest recorded only module-declared skills, so a skill the core shipped
+// from its own .claude/skills/ and later dropped (the dev-box verbs, /dev /ideate /paint,
+// the pixel-art skills) stayed in every upgraded instance, loaded by the harness and listed
+// on the hall's Commands page. Two halves: the manifest now records core skills (future
+// retirements), and a tombstone list fingerprinted by description covers the past ones.
+
+// The /ideate description the core shipped until 2026-09-09, verbatim — a block scalar.
+const IDEATE_SHIPPED = '---\nname: ideate\ndescription: >-\n  The ideation session — the operating playbook for ideator-discipline work. Triggers when the user says "/ideate", "let\'s ideate", "I want to brainstorm", "help me think through an idea", "start an ideation session", or when a claimed task\'s discipline routes here (claim.js prints a directive to invoke /ideate for ideator tasks). Inverts the usual dynamic: the human ideator drives, Claude is the sounding board. Open to any rank for FILING ideas (Xenos+ can capture; only Metic+ can triage).\n---\nbody\n';
+
+function coreSkillFixture() {
+  const core = mkdtempSync(join(tmpdir(), 'rt-core-'));
+  const inst = mkdtempSync(join(tmpdir(), 'rt-inst-'));
+  for (const n of ['keep', 'gamma']) {
+    mkdirSync(join(core, '.claude', 'skills', n), { recursive: true });
+    writeFileSync(join(core, '.claude', 'skills', n, 'SKILL.md'), `---\nname: ${n}\ndescription: ${n} skill\n---\nbody\n`);
+  }
+  return { core, inst };
+}
+
+t('skillDescription: reads plain, quoted and block-scalar descriptions; null without one', () => {
+  assert.equal(m.skillDescription('---\nname: a\ndescription: one line\n---\n'), 'one line');
+  assert.equal(m.skillDescription('---\r\nname: a\r\ndescription: "quoted"\r\n---\r\n'), 'quoted');
+  assert.equal(m.skillDescription('---\ndescription: >-\n  folded\n  over two\nname: a\n---\n'), 'folded over two');
+  assert.equal(m.skillDescription('---\nname: a\n---\n'), null);
+  assert.equal(m.skillDescription('no frontmatter'), null);
+});
+
+t('materializeClaude: a core skill the core STOPPED shipping is withdrawn on the next upgrade (task 1004482)', () => {
+  const { core, inst } = coreSkillFixture();
+  m.materializeClaude({ coreRoot: core, instanceDir: inst, dryRun: false });
+  const mani = m.readInstanceSkillsManifest(join(inst, '.claude', 'skills'));
+  assert.ok(mani.skills.gamma && mani.skills.gamma.coreShipped, 'core skills are recorded as landed now');
+  rmSync(join(core, '.claude', 'skills', 'gamma'), { recursive: true, force: true });
+  const res = m.materializeClaude({ coreRoot: core, instanceDir: inst, dryRun: false });
+  assert.deepEqual(res.withdrawnSkills, ['gamma']);
+  assert.ok(!existsSync(join(inst, '.claude', 'skills', 'gamma')), 'the retired core skill is gone');
+  assert.ok(existsSync(join(inst, '.claude', 'skills', 'keep')), 'a skill the core still ships stays');
+  assert.ok(res.writtenPaths.includes('.claude/skills/gamma/SKILL.md'), 'the deletion is reported so the pin commit carries it');
+  for (const d of [core, inst]) rmSync(d, { recursive: true, force: true });
+});
+
+t('materializeClaude: a core with no readable .claude/skills/ withdraws no core skill (task 1004482)', () => {
+  const { core, inst } = coreSkillFixture();
+  m.materializeClaude({ coreRoot: core, instanceDir: inst, dryRun: false });
+  rmSync(join(core, '.claude', 'skills'), { recursive: true, force: true });
+  const res = m.materializeClaude({ coreRoot: core, instanceDir: inst, dryRun: false });
+  assert.deepEqual(res.withdrawnSkills, [], 'nothing landed from the core, so nothing is withdrawn on that account');
+  assert.ok(existsSync(join(inst, '.claude', 'skills', 'gamma')));
+  assert.ok(m.readInstanceSkillsManifest(join(inst, '.claude', 'skills')).skills.gamma, 'and the provenance is carried forward');
+  for (const d of [core, inst]) rmSync(d, { recursive: true, force: true });
+});
+
+t('materializeClaude: a RETIRED core skill with the description the core shipped is withdrawn; one the instance wrote under that name is kept (task 1004482)', () => {
+  const { core, inst } = coreSkillFixture();
+  const skills = join(inst, '.claude', 'skills');
+  // an instance materialized before core skills were recorded: no manifest names either dir
+  mkdirSync(join(skills, 'ideate'), { recursive: true });
+  writeFileSync(join(skills, 'ideate', 'SKILL.md'), IDEATE_SHIPPED);
+  mkdirSync(join(skills, 'dev'), { recursive: true });
+  writeFileSync(join(skills, 'dev', 'SKILL.md'), '---\nname: dev\ndescription: our own dev loop\n---\nMINE\n');
+  const res = m.materializeClaude({ coreRoot: core, instanceDir: inst, dryRun: false });
+  assert.deepEqual(res.withdrawnSkills, ['ideate'], 'the core\'s old /ideate goes');
+  assert.ok(!existsSync(join(skills, 'ideate')));
+  assert.equal(readFileSync(join(skills, 'dev', 'SKILL.md'), 'utf8'), '---\nname: dev\ndescription: our own dev loop\n---\nMINE\n', 'the owner\'s /dev is untouched');
+  assert.ok(res.notes.some((n) => /left in place as the instance's own: dev/.test(n)), 'and the run says why it kept it');
+  for (const d of [core, inst]) rmSync(d, { recursive: true, force: true });
+});
+
+t('retired-core-skills.json: names the dev-box verbs, the old role playbooks and the pixel-art skills, none of which the core ships now', () => {
+  const retired = m.readRetiredCoreSkills();
+  for (const n of ['builder-box', 'builder-connect', 'builder-sync', 'close-box', 'dev', 'ideate', 'paint', 'otb-tile-generate', 'otb-design-review']) {
+    assert.ok(retired[n] && retired[n].descriptionDigests.length, `${n} is tombstoned with at least one digest`);
+  }
+  // A tombstone on a name the core still ships would be inert (step 1 lands it), but it would
+  // also mean the list was built wrong — tracked files only, since a checkout holds untracked
+  // module-skill copies (ADR 0224) under the same directory.
+  const tracked = execFileSync('git', ['-C', ROOT, 'ls-files', '.claude/skills'], { encoding: 'utf8' });
+  for (const n of Object.keys(retired)) assert.ok(!tracked.includes(`.claude/skills/${n}/`), `${n} is not a skill the core ships from .claude/skills/`);
+});
+
 // ---- module-owned skills (task 1003321 / ADR 0198) ---------------------------
 // A module ships a skill from modules/<key>/skills/<name>/ (its own) or
 // modules/<key>/skills/vendor/<name>/ (third-party + PROVENANCE.md); only a DECLARED

package/tests/start_goal_first.mjs

@@ -0,0 +1,90 @@
+// tests/start_goal_first.mjs — /builder-start leads with the builder's goals
+// (task 1002852).
+//
+// The owner's rules (2026-10-08): the joined goals sit ABOVE the claimable table
+// and never replace it, and a task with no goal is listed under "Other work".
+// These drive the pure helpers in scripts/gds/start-goals.js and the real table
+// renderer start.js uses, so the property that matters — every claimable row is
+// still listed, exactly once — is checked on what the builder actually sees.
+
+import { strict as assert } from 'node:assert';
+import { createRequire } from 'node:module';
+import { makeRunner } from './helpers.mjs';
+
+const require = createRequire(import.meta.url);
+const { test, summary } = makeRunner();
+const sg = require('../scripts/gds/start-goals.js');
+
+const GOALS = [
+  { id: 10, title: 'Alpha', status: 'open', viewer_is_member: false },
+  { id: 20, title: 'Mine', status: 'open', viewer_is_member: true },
+  { id: 30, title: 'Done one', status: 'achieved', viewer_is_member: true },
+  { id: 40, title: 'Also mine', status: 'open', viewer_is_member: true },
+];
+const ROWS = [
+  { id: 1, goal_id: 10, title: 'a1' },
+  { id: 2, goal_id: null, title: 'loose' },
+  { id: 3, goal_id: 20, title: 'm1' },
+  { id: 4, goal_id: 99, title: 'unknown goal' },
+  { id: 5, goal_id: 20, title: 'm2' },
+];
+
+await test('joined goals are the open ones the server says the viewer is a member of', () => {
+  assert.deepEqual(sg.joinedGoals(GOALS).map((g) => g.id), [20, 40]);
+});
+
+await test('groups: joined goals first, then other goals, then "Other work" last; every row exactly once', () => {
+  const groups = sg.groupByGoal(ROWS, GOALS);
+  assert.deepEqual(groups.map((g) => g.title), ['Mine', 'Alpha', 'Goal 99', sg.OTHER_WORK]);
+  assert.deepEqual(groups[0].rows.map((r) => r.id), [3, 5], 'server order kept inside a group');
+  assert.equal(groups[0].joined, true);
+  assert.equal(groups[3].goal_id, null);
+  const ids = groups.flatMap((g) => g.rows.map((r) => r.id)).sort();
+  assert.deepEqual(ids, [1, 2, 3, 4, 5]);
+});
+
+await test('with no goal list (a failed read) nothing is hidden: goals by id, goal-less under Other work', () => {
+  const groups = sg.groupByGoal(ROWS, []);
+  assert.equal(groups.flatMap((g) => g.rows).length, ROWS.length);
+  assert.equal(groups.at(-1).title, sg.OTHER_WORK);
+  assert.ok(groups.every((g) => !g.joined));
+});
+
+await test('joinedFirst moves the joined goals\' rows ahead of the cap and drops nothing', () => {
+  const out = sg.joinedFirst(ROWS, GOALS);
+  assert.deepEqual(out.map((r) => r.id), [3, 5, 1, 2, 4]);
+  assert.deepEqual(sg.joinedFirst(ROWS, []).map((r) => r.id), [1, 2, 3, 4, 5], 'no joined goal: order unchanged');
+});
+
+await test('"Your goals" counts claimable work per joined goal from the full set', () => {
+  const y = sg.yourGoals(GOALS, ROWS);
+  assert.deepEqual(y.goals, [
+    { id: '20', title: 'Mine', claimable: 2 },
+    { id: '40', title: 'Also mine', claimable: 0 },
+  ]);
+  assert.equal(y.more, 0);
+  assert.equal(sg.claimableWord(0), 'nothing to claim right now');
+  assert.equal(sg.claimableWord(2), '2 to claim');
+});
+
+await test('a builder in no goal gets no goals list, and the table still lists everything', () => {
+  const none = GOALS.map((g) => ({ ...g, viewer_is_member: false }));
+  assert.deepEqual(sg.yourGoals(none, ROWS).goals, []);
+  assert.equal(sg.groupByGoal(ROWS, none).flatMap((g) => g.rows).length, ROWS.length);
+});
+
+await test('start.js renders "Your goals" ABOVE the table and groups the table by goal (the wiring)', () => {
+  const fs = require('node:fs');
+  const src = fs.readFileSync(require.resolve('../scripts/gds/start.js'), 'utf8');
+  const goalsAt = src.indexOf("surface.strong('Your goals')");
+  const tableAt = src.indexOf("surface.strong('Claim one to start')");
+  assert.ok(goalsAt > 0 && goalsAt < tableAt, 'markdown: goals before the table');
+  const wGoals = src.indexOf('${goalsBlock}');
+  const wMenu = src.indexOf('<div class="bs-menuh">Claim one to start');
+  assert.ok(wGoals > 0 && wGoals < wMenu, 'widget: goals before the table');
+  assert.match(src, /claimableTable\(cardRows, [^)]*, goals\)/, 'the markdown table is grouped');
+  assert.equal((src.match(/\n\s+goals,\n\s+yourGoals,\n/g) || []).length, 2, 'both widget calls carry the goals');
+  assert.match(src, /startGoals\.joinedFirst\(filtered, goals\)\.slice\(0, limit\)/);
+});
+
+summary();