fix: add ai/ to gitignore and fix D-Bus session for ui-mode

- Add ai/ to .gitignore for public repo mode (gitignored, not submodule)
- Fix GNOME winlike/maclike tasks to pass DBUS_SESSION_BUS_ADDRESS
  when running ui-mode script (resolves GitHub issue #1)

Author: Derek

.gitignore

@@ -54,6 +54,7 @@ installers/
 local-config/
 
 # AI assistant work files - never commit (local only, public repo)
+ai/
 STATE.md
 CLAUDE.md
 TODO.md

TODO.md

@@ -1,29 +1,27 @@
 # TODO - DFE Developer Environment
 
-## Immediate Tasks
-
-### GNOME RDP CPU Usage - Pending Verification
+## Completed This Session
 
-**Status:** Fix applied, pending VM restart
+- [x] Fix `ai/` directory management for public repos
+  - Keep `.git/` intact for manual updates via `git -C ai pull`
+  - `/load` uses Glob (no bash approval) to check if `ai/` exists
+  - Updated: `.gitignore`, `.claude/commands/load.md`
+  - Also fixed in `/projects/ai`: `attach-public.sh`, `README.md`
 
-VM 1000 was configured with `vga: virtio` (2D only) instead of `vga: virtio-gl` (VirGL 3D). Fix applied via `qm set 1000 -vga virtio-gl,memory=256`.
-
-**Next action:** Restart VM 1000 to verify VirGL is active and CPU usage drops.
+## Immediate Tasks
 
-**H.264 GPU Encoding Note:** VirGL will help desktop rendering, but H.264 RDP encoding will remain CPU-based until QEMU merges VA-API H.264 patches.
+### GitHub Issue #1: UI mode fails with D-Bus error when GNOME running
 
-### VSCode Wayland Fullscreen Bug - Monitor Upstream
+**Status:** Fix implemented, pending test
 
-**Status:** Documented, upstream bug, cannot fix locally
+**Root cause:** `ansible.builtin.command` with `become_user` doesn't inherit the user's D-Bus session environment. The `ui-mode` script uses `dconf` which requires `DBUS_SESSION_BUS_ADDRESS`.
 
-**Full Documentation:** [docs/VSCODE-WAYLAND.md](docs/VSCODE-WAYLAND.md)
+**Fix:** Get `DBUS_SESSION_BUS_ADDRESS` from gnome-shell's /proc environment and pass it to the command.
 
-**Future Work:**
+**Files modified:**
 
-- [ ] Monitor GNOME 49/50 for Mutter fixes
-- [ ] Test upcoming Electron versions
-- [ ] Investigate gnome-shell extensions that may help
-- [ ] File consolidated bug on GNOME GitLab if not tracked
+- `ansible/roles/dfe_developer/tasks/gnome_winlike.yml`
+- `ansible/roles/dfe_developer/tasks/gnome_maclike.yml`
 
 ## Platform Support
 

ansible/roles/dfe_developer/tasks/gnome_maclike.yml

@@ -20,12 +20,52 @@
 # APPLY MACLIKE MODE VIA UI-MODE UTILITY
 # ============================================================================
 
+- name: Check if GNOME Shell is running
+  ansible.builtin.shell: pgrep -x gnome-shell
+  register: gnome_shell_running
+  changed_when: false
+  failed_when: false
+  become: true
+  become_user: "{{ dfe_actual_user }}"
+
+- name: Get DBUS_SESSION_BUS_ADDRESS from running GNOME session
+  ansible.builtin.shell: |
+    gnome_pid=$(pgrep -u {{ dfe_actual_user }} -x gnome-shell | head -1)
+    if [ -n "$gnome_pid" ]; then
+      grep -z DBUS_SESSION_BUS_ADDRESS /proc/$gnome_pid/environ 2>/dev/null | tr '\0' '\n'
+    fi
+  register: dbus_addr_result
+  changed_when: false
+  failed_when: false
+  when: gnome_shell_running.rc == 0
+
 - name: Apply macOS-like UI mode
   ansible.builtin.command:
     cmd: /usr/local/sbin/ui-mode maclike
   become: true
   become_user: "{{ dfe_actual_user }}"
+  environment:
+    DBUS_SESSION_BUS_ADDRESS: "{{ dbus_addr_result.stdout | regex_replace('^DBUS_SESSION_BUS_ADDRESS=', '') }}"
   changed_when: true
+  when:
+    - gnome_shell_running.rc == 0
+    - dbus_addr_result.stdout | default('') | length > 0
+
+- name: Save UI mode preference for first login (when GNOME not running)
+  ansible.builtin.file:
+    path: "{{ dfe_user_home }}/.config/dfe"
+    state: directory
+    owner: "{{ dfe_actual_user }}"
+    mode: '0755'
+  when: gnome_shell_running.rc != 0
+
+- name: Write UI mode preference file for first login
+  ansible.builtin.copy:
+    dest: "{{ dfe_user_home }}/.config/dfe/ui-mode"
+    content: "maclike"
+    owner: "{{ dfe_actual_user }}"
+    mode: '0644'
+  when: gnome_shell_running.rc != 0
 
 # ============================================================================
 # WALLPAPER DEPLOYMENT (system-wide, safe from apt/dnf updates)

ansible/roles/dfe_developer/tasks/gnome_winlike.yml

@@ -26,13 +26,28 @@
   become: true
   become_user: "{{ dfe_actual_user }}"
 
+- name: Get DBUS_SESSION_BUS_ADDRESS from running GNOME session
+  ansible.builtin.shell: |
+    gnome_pid=$(pgrep -u {{ dfe_actual_user }} -x gnome-shell | head -1)
+    if [ -n "$gnome_pid" ]; then
+      grep -z DBUS_SESSION_BUS_ADDRESS /proc/$gnome_pid/environ 2>/dev/null | tr '\0' '\n'
+    fi
+  register: dbus_addr_result
+  changed_when: false
+  failed_when: false
+  when: gnome_shell_running.rc == 0
+
 - name: Apply Windows-like UI mode
   ansible.builtin.command:
     cmd: /usr/local/sbin/ui-mode winlike
   become: true
   become_user: "{{ dfe_actual_user }}"
+  environment:
+    DBUS_SESSION_BUS_ADDRESS: "{{ dbus_addr_result.stdout | regex_replace('^DBUS_SESSION_BUS_ADDRESS=', '') }}"
   changed_when: true
-  when: gnome_shell_running.rc == 0
+  when:
+    - gnome_shell_running.rc == 0
+    - dbus_addr_result.stdout | default('') | length > 0
 
 - name: Save UI mode preference for first login (when GNOME not running)
   ansible.builtin.file: