feat(helm): route Helm sync to per-project GitHub boards

.agents/skills/project-management/SKILL.md

@@ -59,6 +59,11 @@ Clone into `projects/<name>` and add the registry entry only after the destinati
 A `no-mistakes` or `no-mistakes-prod-only` project must have an `origin` remote and must complete the initialization procedure below, because a conditional policy's product-facing work runs the pipeline while its internal-only work still takes the direct PR.
 A `direct-PR` project needs an `origin` remote but skips no-mistakes initialization.
 A `local-only` project may have no remote and skips no-mistakes initialization.
+When Helm is enabled (`config/helm.json` exists), also offer the new project a
+dedicated GitHub Project board or the shared Helm default; skipping that choice
+is fine and keeps future cards on the default. If the captain chooses a
+dedicated board, run `bin/fm-helm-project-map.sh link <name>` after the project
+is registered.
 
 ## Create a project
 
@@ -69,6 +74,9 @@ After remote creation succeeds, clone it locally, add the registry entry, and in
 
 For a purely `local-only` project, create a local Git repository under its unused `projects/<name>` path, add the registry entry, and make no GitHub call.
 The captain's request to create that local project authorizes this local initialization, but it does not authorize an unmentioned remote repository.
+When Helm is enabled (`config/helm.json` exists), offer the same dedicated-board
+or shared-default choice for the new project. If a dedicated board is accepted,
+run `bin/fm-helm-project-map.sh link <name>` after registration.
 
 ## Initialize
 

README.md

@@ -49,7 +49,7 @@ Launching a supported harness inside it instantiates your first mate - and makes
 - **Optional secondmates** - opt in to persistent second mates that run from isolated firstmate homes with their own `FM_HOME`, state, projects, and session lock, either locally or as a whole home on an SSH-reachable host, with guarded updates and recovery that never turns an unavailable remote route into a local replacement.
 - **Event-driven, zero-token supervision** - a bash watcher sleeps on the fleet and wakes the first mate only when something needs you; verified primary harnesses also get a turn-end backstop that blocks or follows up on a blind stop when work is under way and supervision is not live.
 - **Optional Relay** - opt in with one local `.env` pairing token so firstmate can answer your public mentions on X and Discord alike, act on normal reversible mention requests through the same lifecycle as chat requests, acknowledge spawned work, and post up to three public-safe completion follow-ups within seven days for genuine milestones and the final outcome without changing non-Relay behavior; a final reply promised in a thread becomes durable state that is reconciled from disk, so a restart or a compacted conversation cannot lose it; dry-run preview records would-be replies and dismissals locally before go-live.
-- **Optional Helm board** - opt in with a home-local `config/helm.json` so a GitHub Project v2 board follows the backlog and can submit durable dispatch requests back to firstmate.
+- **Optional Helm boards** - opt in with a home-local `config/helm.json` so a default GitHub Project v2 board follows the backlog; `bin/fm-helm-project-map.sh` can route registered projects to dedicated or intentionally shared boards and submit durable dispatch requests back to firstmate.
 - **Strict project boundary** - the first mate is read-only over your projects except for the narrow guarded and captain-approved operations authorized by [hard rule 1](AGENTS.md#1-identity-and-prime-directives), including fleet sync's guarded safe branch pruning; crewmates make every other project change behind the configured merge authority.
 - **Restart-proof** - all state lives on disk and in the active session backend (tmux by hard default, herdr or cmux when selected or auto-detected, zellij/orca when explicitly selected); kill the session anytime and the next one reconciles, including confirmed-dead secondmate agents, and carries on.
 

bin/fm-bootstrap.sh

@@ -1124,9 +1124,10 @@ EOF
 # surface as durable check wakes.  The sync itself aggregates local secondmate
 # backlogs, so a secondmate needs no competing board writer or copied config.
 helm_watch_setup() {
-  local sync_shim board_shim sync_body board_body
+  local sync_shim board_shim reconcile_shim sync_body board_body reconcile_body
   sync_shim="$STATE/helm-sync.check.sh"
   board_shim="$STATE/helm-board.check.sh"
+  reconcile_shim="$STATE/helm-reconcile.check.sh"
 
   if [ ! -f "$CONFIG/helm.json" ]; then
     if [ -e "$sync_shim" ] || [ -L "$sync_shim" ] || [ -e "$STATE/helm-sync.check-trust" ] || [ -L "$STATE/helm-sync.check-trust" ]; then
@@ -1139,6 +1140,11 @@ helm_watch_setup() {
         "$SCRIPT_DIR/fm-check-unregister.sh" helm-board >/dev/null 2>&1 \
         || echo "HELM: could not retire Helm watcher board poll"
     fi
+    if [ -e "$reconcile_shim" ] || [ -L "$reconcile_shim" ] || [ -e "$STATE/helm-reconcile.check-trust" ] || [ -L "$STATE/helm-reconcile.check-trust" ]; then
+      FM_HOME="$FM_HOME" FM_ROOT_OVERRIDE="$FM_ROOT" FM_STATE_OVERRIDE="$STATE" \
+        "$SCRIPT_DIR/fm-check-unregister.sh" helm-reconcile >/dev/null 2>&1 \
+        || echo "HELM: could not retire Helm watcher reconciliation"
+    fi
     return 0
   fi
 
@@ -1152,17 +1158,27 @@ EOF
 #!/usr/bin/env bash
 exec "$FM_ROOT/bin/fm-helm-poll.sh"
 EOF
+)
+  reconcile_body=$(cat <<EOF
+#!/usr/bin/env bash
+exec "$FM_ROOT/bin/fm-helm-reconcile.sh"
+EOF
 )
   x_mode_write_if_changed "$sync_shim" "$sync_body" 700 \
     || { echo "HELM: could not arm Helm watcher sync"; return 0; }
   x_mode_write_if_changed "$board_shim" "$board_body" 700 \
     || { echo "HELM: could not arm Helm watcher board poll"; return 0; }
+  x_mode_write_if_changed "$reconcile_shim" "$reconcile_body" 700 \
+    || { echo "HELM: could not arm Helm watcher reconciliation"; return 0; }
   FM_HOME="$FM_HOME" FM_ROOT_OVERRIDE="$FM_ROOT" FM_STATE_OVERRIDE="$STATE" \
     "$SCRIPT_DIR/fm-check-register.sh" helm-sync >/dev/null 2>&1 \
     || echo "HELM: could not arm Helm watcher sync"
   FM_HOME="$FM_HOME" FM_ROOT_OVERRIDE="$FM_ROOT" FM_STATE_OVERRIDE="$STATE" \
     "$SCRIPT_DIR/fm-check-register.sh" helm-board >/dev/null 2>&1 \
     || echo "HELM: could not arm Helm watcher board poll"
+  FM_HOME="$FM_HOME" FM_ROOT_OVERRIDE="$FM_ROOT" FM_STATE_OVERRIDE="$STATE" \
+    "$SCRIPT_DIR/fm-check-register.sh" helm-reconcile >/dev/null 2>&1 \
+    || echo "HELM: could not arm Helm watcher reconciliation"
 }
 
 crew_dispatch_validate() {