@bongos/core 1.19.134 → 1.19.136

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.134",
-  "core_contract": "1.19.134",
-  "source_commit": "7823db141a9cd6375e337f63779958b76c9b064b",
+  "core_version": "1.19.136",
+  "core_contract": "1.19.136",
+  "source_commit": "e8baa6b4bb7636ec78d0d37a48fafb861e716dad",
   "source_ref": "HEAD",
-  "built_at": "2026-08-15T03:48:20.281Z",
+  "built_at": "2026-08-15T14:17:27.560Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 303,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1249,
+    "functional_verbatim": 1250,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1573,
-  "tree_sha256": "545ba84996f88bbbb913baafcf7d5dd429dff68ba6178562f03a90efcdf2e807",
+  "file_count": 1574,
+  "tree_sha256": "c4c465a8bb9c113e17dd02666d74907f5d4057d06743e14d73bcc57ff7482290",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -3012,7 +3012,7 @@
     {
       "path": "modules/grading/grader-workers/worker-prompt.js",
       "mode": "0000644",
-      "sha256": "5b614e96ed951c5eebb5c40c93612f59ff79da768055233b59790599421a70ec"
+      "sha256": "986c7b039f392704613160c7ee10738030ef47972150d867e0972f6dfb761ae4"
     },
     {
       "path": "modules/grading/grader-workers/worker-verdict.js",
@@ -3022,7 +3022,7 @@
     {
       "path": "modules/grading/grader.js",
       "mode": "0000644",
-      "sha256": "edf6ecc725b37fe2c515174e6b06025f82fae10172e6f13d8fcfbb060c11474a"
+      "sha256": "49ae9286fea73fbf67a89e42bf10a14f9fb04d7857582accaab402ad966fafd6"
     },
     {
       "path": "modules/grading/module.json",
@@ -3239,15 +3239,20 @@
       "mode": "0000644",
       "sha256": "9df48fd541deabb6765cb622fc00f829edc4d6605c746f28a6d76cbfc07e22ad"
     },
+    {
+      "path": "modules/hall-ui/public/my-projects.css",
+      "mode": "0000644",
+      "sha256": "5c702a9c2054287a8523b6901cd46e7caa1cb9580b7e8f04a3898b2c8bd82fd0"
+    },
     {
       "path": "modules/hall-ui/public/my-projects.html",
       "mode": "0000644",
-      "sha256": "9a0fc70a8cabe59d8888a863fa9339d43f3ad2ae7d980f69c9f5fa0c81283d4b"
+      "sha256": "49c63ef48e0fc6450ba15d76743c8220b5d5f27702843be71fa077551d92c35b"
     },
     {
       "path": "modules/hall-ui/public/my-projects.js",
       "mode": "0000644",
-      "sha256": "39252c26f1ca28fce403b195868ceae01041daf064507fc5760378c134e9eee5"
+      "sha256": "30d22956e21c9ac371d989d8b295631e7bd5df89647457e81a71e0dfffe07cce"
     },
     {
       "path": "modules/hall-ui/public/not-ready.html",
@@ -3337,12 +3342,12 @@
     {
       "path": "modules/hall-ui/public/scouting.html",
       "mode": "0000644",
-      "sha256": "ee43e485888979ab7431add208be879526b545d504bd4e0fd2f293f4f765d31c"
+      "sha256": "4f1656ab1deab1a748d294e70bf705173516254dbe3cb8a560a2ea811d5afcb0"
     },
     {
       "path": "modules/hall-ui/public/scouting.js",
       "mode": "0000644",
-      "sha256": "075d4e256fc4bc81bfffc1e8fd02df198d06759a0768b4507d4079751b37edb0"
+      "sha256": "0109d6715ba097f2c4329fc01d7e2378a09be728d4cc829354cad3c5af1d8e89"
     },
     {
       "path": "modules/hall-ui/public/sessions.css",
@@ -4172,12 +4177,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "97adf4b1513014f9dbcf8a3dfb9182e606b4b4f5e7a4da13dd4b4188e670789d"
+      "sha256": "8f0f435bc22d3f90b635703d6255ab5707be608c2263b7d62d2a22f84b239401"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "f17e6fe30f33a4f990ab5be6afe7cc9067d0e1d2ab7eca51dcdac886e5bcfd1d"
+      "sha256": "f67d85ba93fc5babadfce8e44653c771fc0ac07471c0f5ffdcb0b13b0fab244c"
     },
     {
       "path": "public-docs/index.html",
@@ -5762,7 +5767,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "681070293ecb18cd5bf028ce0c7367372d5212d0cb7c578e31d323b64b98b639"
+      "sha256": "096a5ae6bd847f8cfff0cb8e12ebeae0c99f3116f0420babdaea9e683a2b9fd3"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6792,7 +6797,7 @@
     {
       "path": "tests/grader.mjs",
       "mode": "0000644",
-      "sha256": "31557b08f8886f5d76201b5afbe0332e834504b67a391699798170aede9541e8"
+      "sha256": "e97bbe1f1d9bc1b602adbae26e5144675a9324c5b729d0046ffa43407a88922c"
     },
     {
       "path": "tests/grader_bypass.mjs",
@@ -6822,7 +6827,7 @@
     {
       "path": "tests/hall_audit.mjs",
       "mode": "0000644",
-      "sha256": "7fad8a81bf0bff3611b7273913e6f2b1c594f5d1cb21737094063fdaf8532542"
+      "sha256": "a048f93e0962bf30869c797e53be26954af276522adba4644a5b233d870e5286"
     },
     {
       "path": "tests/hall_nav.mjs",

package/modules/grading/grader-workers/worker-prompt.js

@@ -115,12 +115,21 @@ function buildWorkerPrompt({
     lines.push('---');
     lines.push(`## Post-change file contents (${contextBundle.files.length} of ${(changedFiles || []).length} changed files, bundled)`);
     lines.push('');
-    lines.push('The post-change contents of the changed files below are included inline — use your Read tool ONLY for files not bundled here (listed after the blocks) or for unchanged context files.');
+    lines.push('The post-change contents of the changed files below are included inline — use your Read tool ONLY for files not bundled here (listed after the blocks), for any block marked TRUNCATED, or for unchanged context files.');
+    lines.push('');
+    // task 1002905: a TRUNCATED block is a head PREFIX, not the file. A worker
+    // that searched the prefix, missed a change 62k chars in, and reported it as
+    // absent produced five fabricated blockers on a correct ship — so say what
+    // truncation means and forbid the absence claim it invites.
+    lines.push('A block marked TRUNCATED shows only the first N characters of that file — everything past that point is ABSENT FROM THIS PROMPT, not absent from the file. Never report code as missing, unexported, unchanged, or "not applied" on the strength of a truncated block: Read the file first, and if you cannot, say so rather than asserting absence.');
     lines.push('');
     for (const f of contextBundle.files) {
       // The filename is builder-controlled — scrub it like every other
       // untrusted string that lands OUTSIDE a fence (panel hacker finding).
-      const label = `FILE: ${scrubUntrusted(String(f.file))}${f.truncated ? ' (truncated)' : ''}`;
+      const truncNote = f.truncated
+        ? ` (TRUNCATED — first ${f.content.length} of ${f.chars_total ?? 'unknown'} chars; the rest is NOT shown)`
+        : '';
+      const label = `FILE: ${scrubUntrusted(String(f.file))}${truncNote}`;
       lines.push(...fenceBlock(label, f.content));
       lines.push('');
     }

package/modules/grading/grader.js

@@ -1166,22 +1166,59 @@ const CONTEXT_BUNDLE_MAX_FILE_CHARS = 16_000;
 // Binary-ish extensions never worth inlining (the diff already names them).
 const CONTEXT_BUNDLE_SKIP_RE = /\.(?:png|jpe?g|gif|webp|ico|svgz|woff2?|ttf|eot|zip|gz|tgz|tar|pdf|mp[34]|wav|ogg|bin|exe|dll|node)$/i;
 
+// Added lines per file, from the unified diff. Only lines long enough to be a
+// meaningful fingerprint (a bare `}` or `});` matches anywhere) — used to prove
+// a truncated bundle prefix actually SHOWS the change (task 1002905).
+const BUNDLE_EVIDENCE_MIN_CHARS = 12;
+function diffAddedLinesByFile(diff) {
+  const byFile = new Map();
+  let cur = null;
+  let prevWasOldHeader = false;
+  for (const line of String(diff || '').split('\n')) {
+    // A '+++ ' header only counts right after its '--- ' partner: a content line
+    // reading '++ x' arrives as '+++ x' and must not be mistaken for a header.
+    if (prevWasOldHeader && line.startsWith('+++ ')) {
+      prevWasOldHeader = false;
+      const p = line.slice(4).trim().replace(/^b\//, '');
+      cur = p === '/dev/null' ? null : p;
+      continue;
+    }
+    prevWasOldHeader = line.startsWith('--- ');
+    if (prevWasOldHeader || line.startsWith('diff --git')) continue;
+    if (!cur || !line.startsWith('+')) continue;
+    const t = line.slice(1).trim();
+    if (t.length < BUNDLE_EVIDENCE_MIN_CHARS) continue;
+    if (!byFile.has(cur)) byFile.set(cur, []);
+    byFile.get(cur).push(t);
+  }
+  return byFile;
+}
+
 // Pure-ish (fs reads only, injectable): returns { files: [{file, content,
-// truncated}], skipped: [file...], total_chars } for the post-change contents
-// of changedFiles under cwd. Deleted/unreadable files land in skipped —
+// truncated, chars_total}], skipped: [file...], total_chars } for the post-change
+// contents of changedFiles under cwd. Deleted/unreadable files land in skipped —
 // their absence from the bundle is visible, never silent.
 //
-// Security (panel hacker finding, this task): changedFiles is builder-
+// Security (panel hacker finding, task 1002660): changedFiles is builder-
 // controlled and git commits symlinks, so a naive readFileSync would follow a
 // committed link OUT of the repo (SSH keys, session tokens) and inject the
 // target into worker prompts + the stored grade. lstat-refuse symlinks and
 // non-files, and require the resolved path to stay under cwd (containment) —
 // a refused entry lands in skipped, visible like every other exclusion.
-function buildContextBundle({ changedFiles, cwd, fsImpl = fs } = {}) {
+function buildContextBundle({ changedFiles, cwd, diff, fsImpl = fs } = {}) {
   const files = [];
   const skipped = [];
   let total = 0;
   const root = path.resolve(cwd || process.cwd());
+  // task 1002905: the fabricated all-blocker FAIL. A file over the per-file cap
+  // is truncated from the HEAD, so on a large file (ship.js: 250k chars) a change
+  // at char 62k lands entirely outside the bundle — and the prompt presents what
+  // IS bundled as "the post-change contents". A worker then searches the prefix,
+  // doesn't find the new code, and reports it as absent (5 blockers, every claim
+  // exactly the pre-change state). A prefix that contains none of the change is
+  // worse than no bundle at all, so refuse it: skipped[] already tells the worker
+  // to Read the file.
+  const addedByFile = diffAddedLinesByFile(diff);
   for (const rel of (Array.isArray(changedFiles) ? changedFiles : [])) {
     if (files.length >= CONTEXT_BUNDLE_MAX_FILES || total >= CONTEXT_BUNDLE_MAX_TOTAL_CHARS) {
       skipped.push(rel);
@@ -1196,14 +1233,19 @@ function buildContextBundle({ changedFiles, cwd, fsImpl = fs } = {}) {
       if (!st.isFile() || st.isSymbolicLink()) { skipped.push(rel); continue; }
       content = fsImpl.readFileSync(abs, 'utf8');
     } catch (_) { skipped.push(rel); continue; } // deleted by the diff, or unreadable
+    const charsTotal = content.length;
     let truncated = false;
     if (content.length > CONTEXT_BUNDLE_MAX_FILE_CHARS) {
       content = content.slice(0, CONTEXT_BUNDLE_MAX_FILE_CHARS);
       truncated = true;
     }
+    if (truncated) {
+      const added = addedByFile.get(rel);
+      if (added && added.length && !added.some((a) => content.includes(a))) { skipped.push(rel); continue; }
+    }
     if (total + content.length > CONTEXT_BUNDLE_MAX_TOTAL_CHARS) { skipped.push(rel); continue; }
     total += content.length;
-    files.push({ file: rel, content, truncated });
+    files.push({ file: rel, content, truncated, chars_total: charsTotal });
   }
   return { files, skipped, total_chars: total };
 }
@@ -1727,7 +1769,9 @@ async function gradeSubagent({ task, valueSummary, diff, changedFiles, diffStats
 
   // task 1002660: one read of the changed files, shared by all four workers —
   // kills the per-worker re-exploration that dominated panel cost.
-  const contextBundle = buildContextBundle({ changedFiles, cwd: runOpts.cwd });
+  // diff (task 1002905): lets the bundle prove a truncated prefix actually shows
+  // the change instead of handing a worker a head fragment as "post-change".
+  const contextBundle = buildContextBundle({ changedFiles, cwd: runOpts.cwd, diff });
   // task 1002660: cache-wrapped spawns. Same prompt + model replays at $0
   // (llm-cache, System 5) — the prompt embeds the diff + bundle, so the key
   // needs no separate scope sha. Absent llm-cache → plain runSubagent.
@@ -1767,6 +1811,17 @@ async function gradeSubagent({ task, valueSummary, diff, changedFiles, diffStats
     builder_model_assumed: builderModel || ASSUMED_BUILDER_MODEL,
     grader_model: graderModel,
     total_ms: totalMs,
+    // task 1002905: what the panel could actually SEE, recorded on every grade.
+    // Diagnosing the fabricated all-blocker FAIL cost a session because the grade
+    // record said nothing about the read root or how much of each file the workers
+    // were shown; a "the panel read the wrong tree" claim is now one field away.
+    context_bundle: {
+      read_root: path.resolve(runOpts.cwd || process.cwd()),
+      bundled: contextBundle.files.map((f) => ({
+        file: f.file, chars: f.content.length, chars_total: f.chars_total ?? null, truncated: f.truncated,
+      })),
+      skipped: contextBundle.skipped,
+    },
   });
 }
 
@@ -1997,6 +2052,7 @@ module.exports = {
   selectGraderModel,
   workerModelFor,                 // task 1002660: per-worker tier override (cross-model-guarded)
   buildContextBundle,             // task 1002660: shared post-change file contents, read once per panel
+  diffAddedLinesByFile,           // task 1002905: added-line fingerprints proving a truncated prefix shows the change
   validateAndScore,
   aggregateShots,
   runSubagent,

package/modules/hall-ui/public/my-projects.css

@@ -0,0 +1,40 @@
+/* my-projects.css — page styles for the cross-project view (task 1002868).
+   Every color derives from the style.css tokens (pack-driven); this file owns
+   only the page's own layout — rows, the join form, the inline notes. */
+
+.row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--radius-sm);
+  padding: 10px 12px;
+  margin-bottom: 8px;
+}
+.row .meta { flex: 1; min-width: 0; }
+.row .name { font-weight: 600; }
+.row .origin { color: var(--accent-text); font-size: 12.5px; word-break: break-all; }
+.row .owner-pill {
+  font-size: 11px;
+  background: var(--accent);
+  color: #fff;
+  border-radius: 999px;
+  padding: 2px 8px;
+}
+
+.empty { margin: 0; color: var(--ink-soft); font-size: 13.5px; }
+
+.join { display: flex; gap: 8px; }
+.join input {
+  flex: 1;
+  font: inherit;
+  font-size: 13px;
+  padding: 0 10px;
+  height: 30px;
+  border: 1px solid var(--border-strong);
+  border-radius: var(--radius-sm);
+  background: var(--surface);
+  color: var(--ink);
+}
+.note { margin: 10px 0 0; color: var(--ink-soft); font-size: 13px; min-height: 1.2em; }

package/modules/hall-ui/public/my-projects.html

@@ -3,76 +3,66 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>My Projects</title>
-  <style>
-    :root {
-      --bg: #fff7ed; --card: #ffffff; --ink: #2a1f17; --ink-soft: #6b5d52;
-      --rule: #fed7aa; --accent: #ea580c; --accent-deep: #c2410c;
-    }
-    * { box-sizing: border-box; }
-    body {
-      margin: 0; padding: 2.5rem 1.25rem 4rem; background: var(--bg); color: var(--ink);
-      font-family: "Quicksand", system-ui, -apple-system, "Segoe UI", sans-serif; line-height: 1.5;
-    }
-    .wrap { max-width: 820px; margin: 0 auto; }
-    h1 { font-size: 1.9rem; margin: 0 0 .3rem; }
-    .sub { color: var(--ink-soft); margin: 0 0 2rem; }
-    h2 { font-size: 1.1rem; margin: 2rem 0 .75rem; border-bottom: 1px solid var(--rule); padding-bottom: .35rem; }
-    .row {
-      display: flex; align-items: center; gap: .75rem; background: var(--card);
-      border: 1px solid var(--rule); border-radius: 12px; padding: .8rem 1rem; margin-bottom: .6rem;
-    }
-    .row .meta { flex: 1; min-width: 0; }
-    .row .name { font-weight: 600; }
-    .row .origin { color: var(--accent); font-size: .82rem; word-break: break-all; }
-    .row .owner-pill { font-size: .72rem; background: var(--accent); color: #fff; border-radius: 999px; padding: .1rem .55rem; }
-    button {
-      font: inherit; cursor: pointer; border: 1px solid var(--rule); background: #fff; color: var(--ink);
-      border-radius: 9px; padding: .4rem .8rem;
-    }
-    button:hover { border-color: var(--accent); color: var(--accent-deep); }
-    .join { display: flex; gap: .5rem; margin-top: .75rem; }
-    .join input { flex: 1; font: inherit; padding: .5rem .7rem; border: 1px solid var(--rule); border-radius: 9px; }
-    .empty { color: var(--ink-soft); }
-    .note { margin-top: .5rem; color: var(--ink-soft); font-size: .9rem; min-height: 1.2em; }
-    a.home { color: var(--accent); text-decoration: none; font-size: .9rem; }
-    @media (prefers-color-scheme: dark) {
-      :root { --bg: #1a1410; --card: #241c16; --ink: #f5ece3; --ink-soft: #b9a998; --rule: #4a3728; }
-      button { background: #241c16; }
-      .join input { background: #241c16; color: inherit; }
-    }
-  </style>
+  <title>My Projects — {{worldName}}</title>
+  <meta name="description" content="Your cross-project view: the projects you own and build on across {{worldName}}.">
+  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <link rel="stylesheet" href="/builders/my-projects.css">
 </head>
-<body>
-  <div class="wrap">
-    <a class="home" href="/builders">← Back to the hall</a>
-    <h1>My Projects</h1>
-    <p class="sub">Every project you build on across the platform.</p>
+<body data-page="my-projects" data-page-title="My Projects">
 
-    <section>
-      <h2>Projects you own</h2>
-      <div id="owned"><p class="empty">—</p></div>
-    </section>
+<div class="app">
+  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
+  <div class="app-scrim" id="app-scrim" hidden></div>
+  <div class="app-body">
+    <header class="app-topbar" id="app-topbar"></header>
+    <div class="app-content">
+      <div class="page-head">
+        <p class="page-head__sub">Every project you build on across the platform.</p>
+      </div>
 
-    <section id="invites-section" hidden>
-      <h2>Invitations</h2>
-      <div id="invites"></div>
-    </section>
+      <main>
+        <section class="scroll" aria-labelledby="owned-h">
+          <h2 id="owned-h" class="scroll__h">Projects you own</h2>
+          <div id="owned"><p class="empty">—</p></div>
+        </section>
 
-    <section>
-      <h2>Projects you build on</h2>
-      <div id="building"><p class="empty">—</p></div>
-    </section>
+        <section class="scroll" id="invites-section" hidden aria-labelledby="invites-h">
+          <h2 id="invites-h" class="scroll__h">Invitations</h2>
+          <div id="invites"></div>
+        </section>
 
-    <section>
-      <h2>Join a project</h2>
-      <div class="join">
-        <input id="join-origin" type="url" placeholder="https://project.cloudbongos.com" autocomplete="off">
-        <button id="join-btn" type="button">Request to join</button>
-      </div>
-      <p id="join-note" class="note"></p>
-    </section>
+        <section class="scroll" aria-labelledby="building-h">
+          <h2 id="building-h" class="scroll__h">Projects you build on</h2>
+          <div id="building"><p class="empty">—</p></div>
+        </section>
+
+        <section class="scroll" aria-labelledby="join-h">
+          <h2 id="join-h" class="scroll__h">Join a project</h2>
+          <div class="join">
+            <input id="join-origin" type="url" placeholder="https://project.cloudbongos.com" autocomplete="off">
+            <button id="join-btn" type="button" class="btn-ghost">Request to join</button>
+          </div>
+          <p id="join-note" class="note"></p>
+        </section>
+      </main>
+
+      <footer class="app-foot" id="app-foot"></footer>
+    </div>
   </div>
-  <script src="/my-projects.js"></script>
+</div>
+
+<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
+
+<!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
+     chrome exists before the page script runs. -->
+<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
+<script src="/builders/palette.js" defer></script>
+<script src="/builders/brand-apply.js"></script>
+<script src="/builders/my-projects.js"></script>
 </body>
 </html>

package/modules/hall-ui/public/my-projects.js

@@ -46,7 +46,7 @@
         row.appendChild(pill);
       }
       if (opts.leavable) {
-        var btn = el('button');
+        var btn = el('button', 'btn-ghost');
         btn.type = 'button';
         btn.textContent = 'Leave';
         btn.addEventListener('click', function () { leave(m.client_id, row, btn); });
@@ -91,8 +91,8 @@
           var host = safeOriginHost(inv.origin);
           if (host) { var o = el('div', 'origin'); o.textContent = host; meta.appendChild(o); }
           row.appendChild(meta);
-          var accept = el('button'); accept.type = 'button'; accept.textContent = 'Accept';
-          var decline = el('button'); decline.type = 'button'; decline.textContent = 'Decline';
+          var accept = el('button', 'btn-ghost'); accept.type = 'button'; accept.textContent = 'Accept';
+          var decline = el('button', 'btn-ghost'); decline.type = 'button'; decline.textContent = 'Decline';
           accept.addEventListener('click', function () { resolveInvite(inv.client_id, true, row, [accept, decline]); });
           decline.addEventListener('click', function () { resolveInvite(inv.client_id, false, row, [accept, decline]); });
           row.appendChild(accept); row.appendChild(decline);

package/modules/hall-ui/public/scouting.html

@@ -3,43 +3,49 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Scouting — cross-project builders</title>
+  <title>Scouting — {{worldName}}</title>
+  <meta name="description" content="Cross-project builder activity — an internal talent view for project curators.">
+  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
   <style>
-    :root {
-      --bg: #fff7ed; --card: #ffffff; --ink: #2a1f17; --ink-soft: #6b5d52;
-      --rule: #fed7aa; --accent: #ea580c;
-    }
-    * { box-sizing: border-box; }
-    body {
-      margin: 0; padding: 2.5rem 1.25rem 4rem; background: var(--bg); color: var(--ink);
-      font-family: "Quicksand", system-ui, -apple-system, "Segoe UI", sans-serif; line-height: 1.5;
-    }
-    .wrap { max-width: 960px; margin: 0 auto; }
-    a.home { color: var(--accent); text-decoration: none; font-size: .9rem; }
-    h1 { font-size: 1.9rem; margin: .4rem 0 .3rem; }
-    .sub { color: var(--ink-soft); margin: 0 0 1.75rem; }
-    .badge { display: inline-block; font-size: .7rem; text-transform: uppercase; letter-spacing: .06em;
-      background: var(--accent); color: #fff; border-radius: 999px; padding: .12rem .6rem; vertical-align: middle; }
-    table { width: 100%; border-collapse: collapse; background: var(--card); border: 1px solid var(--rule); border-radius: 12px; overflow: hidden; }
-    th, td { text-align: left; padding: .6rem .8rem; border-bottom: 1px solid var(--rule); font-size: .92rem; }
-    th { color: var(--ink-soft); font-weight: 600; }
-    td.num, th.num { text-align: right; font-variant-numeric: tabular-nums; }
-    tr:last-child td { border-bottom: none; }
-    .who { font-weight: 600; }
-    .note { color: var(--ink-soft); padding: 2.5rem 1rem; text-align: center; }
-    .scroll { overflow-x: auto; }
-    @media (prefers-color-scheme: dark) {
-      :root { --bg: #1a1410; --card: #241c16; --ink: #f5ece3; --ink-soft: #b9a998; --rule: #4a3728; }
-    }
+    #body .who { font-weight: 600; }
   </style>
 </head>
-<body>
-  <div class="wrap">
-    <a class="home" href="/builders">← Back to the hall</a>
-    <h1>Scouting <span class="badge">Archon only</span></h1>
-    <p class="sub">Builders active across all hosted projects — an internal talent view. Descriptive only; it grants no authority anywhere.</p>
-    <div id="body" class="note">Loading…</div>
+<body data-page="scouting" data-page-title="Scouting">
+
+<div class="app">
+  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
+  <div class="app-scrim" id="app-scrim" hidden></div>
+  <div class="app-body">
+    <header class="app-topbar" id="app-topbar"></header>
+    <div class="app-content">
+      <div class="page-head">
+        <p class="page-head__sub">Builders active across all hosted projects — an internal talent view. Descriptive only; it grants no authority anywhere.</p>
+      </div>
+
+      <main>
+        <section class="scroll" aria-labelledby="scouting-h">
+          <h2 id="scouting-h" class="scroll__h">Cross-project builders</h2>
+          <div id="body" class="profile__placeholder">Loading…</div>
+        </section>
+      </main>
+
+      <footer class="app-foot" id="app-foot"></footer>
+    </div>
   </div>
-  <script src="/scouting.js"></script>
+</div>
+
+<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
+
+<!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
+     chrome exists before the page script runs. -->
+<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
+<script src="/builders/palette.js" defer></script>
+<script src="/builders/brand-apply.js"></script>
+<script src="/builders/scouting.js"></script>
 </body>
 </html>

package/modules/hall-ui/public/scouting.js

@@ -25,15 +25,16 @@
     body.className = '';
     body.textContent = '';
     if (!builders || builders.length === 0) {
-      body.className = 'note';
+      body.className = 'profile__placeholder';
       body.textContent = 'No cross-project activity reported yet.';
       return;
     }
-    var scroll = el('div', 'scroll');
-    var table = el('table');
+    // table.ledger, appended straight into #body: the design system's table
+    // styling, and #body becomes the :has(> .ledger) phone scroll strip.
+    var table = el('table', 'ledger');
     var thead = el('thead');
     var hr = el('tr');
-    [['Builder', ''], ['Projects', 'num'], ['Credits', 'num'], ['Ships', 'num'], ['Karma', 'num'], ['Disciplines', ''], ['Last active', '']]
+    [['Builder', ''], ['Projects', 'ledger__num'], ['Credits', 'ledger__num'], ['Ships', 'ledger__num'], ['Karma', 'ledger__num'], ['Disciplines', ''], ['Last active', '']]
       .forEach(function (h) { var th = el('th', h[1]); th.textContent = h[0]; hr.appendChild(th); });
     thead.appendChild(hr); table.appendChild(thead);
     var tbody = el('tbody');
@@ -44,17 +45,16 @@
       name.textContent = b.github_login || b.display_name || ('#' + b.github_id);
       who.appendChild(name);
       tr.appendChild(who);
-      tr.appendChild(td(String(b.project_count != null ? b.project_count : '—'), 'num'));
-      tr.appendChild(td(String(b.total_credits != null ? b.total_credits : 0), 'num'));
-      tr.appendChild(td(String(b.total_tasks_shipped != null ? b.total_tasks_shipped : 0), 'num'));
-      tr.appendChild(td(String(b.total_karma != null ? b.total_karma : 0), 'num'));
+      tr.appendChild(td(String(b.project_count != null ? b.project_count : '—'), 'ledger__num'));
+      tr.appendChild(td(String(b.total_credits != null ? b.total_credits : 0), 'ledger__num'));
+      tr.appendChild(td(String(b.total_tasks_shipped != null ? b.total_tasks_shipped : 0), 'ledger__num'));
+      tr.appendChild(td(String(b.total_karma != null ? b.total_karma : 0), 'ledger__num'));
       tr.appendChild(td(Array.isArray(b.disciplines) ? b.disciplines.join(', ') : '—'));
       tr.appendChild(td(fmtRecency(b.last_active)));
       tbody.appendChild(tr);
     });
     table.appendChild(tbody);
-    scroll.appendChild(table);
-    body.appendChild(scroll);
+    body.appendChild(table);
   }
 
   fetch('/api/gds/scouting', { headers: { Accept: 'application/json' } })
@@ -65,7 +65,7 @@
     })
     .then(function (data) { render(data && data.builders); })
     .catch(function (e) {
-      body.className = 'note';
+      body.className = 'profile__placeholder';
       body.textContent = (e && e.archon)
         ? 'This view is Archon-only.'
         : 'Couldn’t load the scouting view right now.';

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.134",
+  "version": "1.19.136",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.134",
+      "version": "1.19.136",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.134",
+  "version": "1.19.136",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -695,8 +695,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.132 with no explicit bump. run 31862484011. (task 1002620)
 //   1.19.134 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.133 with no explicit bump. run 31862749526. (task 1002620)
+//   1.19.135 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.134 with no explicit bump. run 31863235867. (task 1002620)
+//   1.19.136 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.135 with no explicit bump. run 31889474899. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.134'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.136'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/grader.mjs

@@ -908,6 +908,74 @@ test('buildContextBundle truncates oversized files and marks them', () => {
   assert.ok(bundle.files[0].content.length <= 16_000);
 });
 
+// task 1002905 — the fabricated all-blocker FAIL.
+//
+// Task 1001916 shipped a 2-file diff from a feature worktree. ship.js is
+// 250,432 chars; the change (a new helper, its call site, its export) sits at
+// char ~62,000 — far past the 16,000-char per-file bundle cap. The bundle
+// therefore carried ONLY lines 1-265 of ship.js, and the prompt told the worker
+// to Read only files NOT bundled. The Quality worker searched the prefix, did
+// not find the new symbols, and returned 5 blockers asserting the change "does
+// not exist" — every claim exactly the pre-change state. (Three sibling workers
+// in the SAME process with the SAME cwd read the real files and passed, which
+// rules out the spawn cwd.) A truncated prefix that contains none of the change
+// must never be presented as "the post-change contents".
+test('buildContextBundle REFUSES a truncated prefix that shows none of the change (task 1002905)', () => {
+  const head = '// preamble\n'.repeat(2_000);            // ~24k chars, all before the change
+  const big = `${head}function formatPublishFailure(data, status, branch) {\n  return 'x';\n}\n`;
+  const diff = [
+    'diff --git a/scripts/gds/ship.js b/scripts/gds/ship.js',
+    '--- a/scripts/gds/ship.js',
+    '+++ b/scripts/gds/ship.js',
+    '@@ -1226,0 +1226,3 @@',
+    '+function formatPublishFailure(data, status, branch) {',
+    "+  return 'x';",
+    '+}',
+  ].join('\n');
+  const bundle = grader.buildContextBundle({
+    changedFiles: ['scripts/gds/ship.js'], cwd: '/r', diff,
+    fsImpl: { lstatSync: () => plainFileStat, readFileSync: () => big },
+  });
+  assert.deepEqual(bundle.files, [], 'a prefix with none of the change is not bundled');
+  assert.deepEqual(bundle.skipped, ['scripts/gds/ship.js'], 'it lands in skipped, where the prompt tells the worker to Read it');
+});
+
+test('buildContextBundle still bundles a truncated file when the change IS visible in the prefix (task 1002905)', () => {
+  const big = `const NEW_HELPER_MARKER = 1;\n${'// filler\n'.repeat(4_000)}`;
+  const diff = [
+    '--- a/src/a.js',
+    '+++ b/src/a.js',
+    '@@ -1,0 +1,1 @@',
+    '+const NEW_HELPER_MARKER = 1;',
+  ].join('\n');
+  const bundle = grader.buildContextBundle({
+    changedFiles: ['src/a.js'], cwd: '/r', diff,
+    fsImpl: { lstatSync: () => plainFileStat, readFileSync: () => big },
+  });
+  assert.equal(bundle.files.length, 1, 'the cost saving survives when the prefix carries the change');
+  assert.equal(bundle.files[0].truncated, true);
+  assert.equal(bundle.files[0].chars_total, big.length, 'the full size rides along so the prompt can state the extent');
+});
+
+test('worker prompts mark a TRUNCATED block and exempt it from the do-not-Read rule (task 1002905)', () => {
+  const prompt = grader.WORKERS.quality.buildPrompt({
+    task: { id: 1, title: 't', description: 'd' },
+    valueSummary: 'v',
+    diff: 'diff --git a/x b/x',
+    changedFiles: ['src/big.js'],
+    contextBundle: {
+      files: [{ file: 'src/big.js', content: 'const a = 1;', truncated: true, chars_total: 250_432 }],
+      skipped: [],
+      total_chars: 12,
+    },
+  });
+  assert.ok(/FILE: src\/big\.js \(TRUNCATED/.test(prompt), 'the label says TRUNCATED, not a quiet "(truncated)"');
+  assert.ok(prompt.includes('250432'), 'the label states how much of the file is missing');
+  assert.ok(/TRUNCATED/.test(prompt.split('Post-change file contents')[1].split('```')[0]),
+    'the lead instruction names truncated blocks as a Read exemption');
+  assert.ok(/never report code as missing/i.test(prompt), 'absence claims from a truncated block are forbidden');
+});
+
 test('buildContextBundle REFUSES symlinks — a committed link cannot pull out-of-repo content into prompts (hacker finding)', () => {
   const files = { 'src/a.js': 'ok', 'evil-link.js': 'should never be read' };
   const bundle = grader.buildContextBundle({

package/tests/hall_audit.mjs

@@ -30,14 +30,8 @@ const pages = () => fs.readdirSync(HALL).filter((f) => f.endsWith('.html'));
 // reader whether promoting it would actually fix anything.
 const INLINE_STYLE_BUDGET = {
   'task.html': 27,        // the task-751 detail-page block, deliberate
-  // my-projects + scouting are standalone surfaces that load neither style.css
-  // nor shell.js: their block is not page-local styling ON the design system,
-  // it IS their whole stylesheet, down to a hardcoded palette. Moving those
-  // bytes into a .css file would change nothing that matters — what they
-  // actually need is adoption into the shell + the branding contract, which is
-  // a far larger change than a CSS relocation.
-  'my-projects.html': 36,
-  'scouting.html': 26,
+  // (my-projects + scouting were carried here as standalone surfaces until task
+  // 1002868 adopted them into the shell; their exceptions are gone with them.)
   // Genuinely page-local, and already token-derived. One line over the default;
   // a whole stylesheet for the legend strip is not worth the extra request, and
   // diagram-viewer.css is shared with primer.html so it is the wrong home.
@@ -221,3 +215,43 @@ test('the module doc still records where the 2179 density pass landed', () => {
   assert.match(doc, /97cbef0/, 'names the commit that actually shipped part 1');
   assert.match(doc, /--space-1/, 'and an anchor a reader can go verify it against');
 });
+
+// ---- 8. every page rides the shell + the design system (task 1002868) -----
+
+// my-projects + scouting were the last two standalone surfaces: no style.css,
+// no shell.js, a private hardcoded palette that silently kept the WCAG-failing
+// accent when the pack moved (idea 1000600). Task 1002868 adopted them, so the
+// rule is now universal and exception-free.
+test('every hall page loads style.css and shell.js', () => {
+  const missing = [];
+  for (const f of pages()) {
+    const html = read(f);
+    if (!/<link[^>]+href="[^"]*\bstyle\.css[^"]*"/.test(html)) missing.push(`${f}: no style.css link`);
+    if (!/<script[^>]+src="[^"]*\bshell\.js[^"]*"/.test(html)) missing.push(`${f}: no shell.js`);
+  }
+  assert.deepEqual(missing, [], 'standalone hall surfaces are gone (task 1002868) — adopt the shell, do not fork it');
+});
+
+// A page that re-declares a pack color var carries a private palette: it keeps
+// rendering its baked-in colors however the instance pack (or the neutral
+// defaults) move. Definitions only — `var(--accent)` USAGE is the design system
+// working as intended. The 13 names are style.css's theming contract (§3 above
+// pins the same list on the defining side).
+const PACK_COLOR_VARS = [
+  'bg', 'bg-card', 'bg-deep', 'bg-frame', 'ink', 'ink-soft', 'ink-faint',
+  'rule', 'rule-soft', 'accent', 'accent-deep', 'sea', 'terracotta',
+];
+
+test('no page declares a private copy of a pack color var', () => {
+  const offenders = [];
+  for (const f of pages()) {
+    for (const m of read(f).matchAll(/<style[^>]*>([\s\S]*?)<\/style>/g)) {
+      for (const v of PACK_COLOR_VARS) {
+        // exact-name declaration: `--accent :` never matches `--accent-deep:`
+        // (next char is `-`) nor `var(--accent)` (next char is `)`).
+        if (new RegExp(`--${v}\\s*:`).test(m[1])) offenders.push(`${f}: defines --${v}`);
+      }
+    }
+  }
+  assert.deepEqual(offenders, [], 'palette comes from style.css + the instance pack (themeMarkup), never from a page');
+});