@bongos/core 1.19.135 → 1.19.136

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.135",
-  "core_contract": "1.19.135",
-  "source_commit": "888206791acb8371163b4909f0d01592cd8d8a1f",
+  "core_version": "1.19.136",
+  "core_contract": "1.19.136",
+  "source_commit": "e8baa6b4bb7636ec78d0d37a48fafb861e716dad",
   "source_ref": "HEAD",
-  "built_at": "2026-08-15T03:59:48.918Z",
+  "built_at": "2026-08-15T14:17:27.560Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 303,
     "agent_docs_stubbed": 21,
-    "functional_verbatim": 1249,
+    "functional_verbatim": 1250,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 1573,
-  "tree_sha256": "8caf88024c497018a5d895be214220b6aa689b494d915c19cfeba7976ae93205",
+  "file_count": 1574,
+  "tree_sha256": "c4c465a8bb9c113e17dd02666d74907f5d4057d06743e14d73bcc57ff7482290",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -3239,15 +3239,20 @@
       "mode": "0000644",
       "sha256": "9df48fd541deabb6765cb622fc00f829edc4d6605c746f28a6d76cbfc07e22ad"
     },
+    {
+      "path": "modules/hall-ui/public/my-projects.css",
+      "mode": "0000644",
+      "sha256": "5c702a9c2054287a8523b6901cd46e7caa1cb9580b7e8f04a3898b2c8bd82fd0"
+    },
     {
       "path": "modules/hall-ui/public/my-projects.html",
       "mode": "0000644",
-      "sha256": "9a0fc70a8cabe59d8888a863fa9339d43f3ad2ae7d980f69c9f5fa0c81283d4b"
+      "sha256": "49c63ef48e0fc6450ba15d76743c8220b5d5f27702843be71fa077551d92c35b"
     },
     {
       "path": "modules/hall-ui/public/my-projects.js",
       "mode": "0000644",
-      "sha256": "39252c26f1ca28fce403b195868ceae01041daf064507fc5760378c134e9eee5"
+      "sha256": "30d22956e21c9ac371d989d8b295631e7bd5df89647457e81a71e0dfffe07cce"
     },
     {
       "path": "modules/hall-ui/public/not-ready.html",
@@ -3337,12 +3342,12 @@
     {
       "path": "modules/hall-ui/public/scouting.html",
       "mode": "0000644",
-      "sha256": "ee43e485888979ab7431add208be879526b545d504bd4e0fd2f293f4f765d31c"
+      "sha256": "4f1656ab1deab1a748d294e70bf705173516254dbe3cb8a560a2ea811d5afcb0"
     },
     {
       "path": "modules/hall-ui/public/scouting.js",
       "mode": "0000644",
-      "sha256": "075d4e256fc4bc81bfffc1e8fd02df198d06759a0768b4507d4079751b37edb0"
+      "sha256": "0109d6715ba097f2c4329fc01d7e2378a09be728d4cc829354cad3c5af1d8e89"
     },
     {
       "path": "modules/hall-ui/public/sessions.css",
@@ -4172,12 +4177,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "2ab902a16af6a378e0d37d108096211715103b4b1cfeccc4d8bb2f1619b5fe4a"
+      "sha256": "8f0f435bc22d3f90b635703d6255ab5707be608c2263b7d62d2a22f84b239401"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "30e48a7fe9316928d30c21508aaadc2f8a4aa9963acc74da16f1decfeb6ef7b3"
+      "sha256": "f67d85ba93fc5babadfce8e44653c771fc0ac07471c0f5ffdcb0b13b0fab244c"
     },
     {
       "path": "public-docs/index.html",
@@ -5762,7 +5767,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "705d95d94403240aa779f550a285fbc72f9c0729c83568dc5d28e7b4f5ceebbe"
+      "sha256": "096a5ae6bd847f8cfff0cb8e12ebeae0c99f3116f0420babdaea9e683a2b9fd3"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -6822,7 +6827,7 @@
     {
       "path": "tests/hall_audit.mjs",
       "mode": "0000644",
-      "sha256": "7fad8a81bf0bff3611b7273913e6f2b1c594f5d1cb21737094063fdaf8532542"
+      "sha256": "a048f93e0962bf30869c797e53be26954af276522adba4644a5b233d870e5286"
     },
     {
       "path": "tests/hall_nav.mjs",

package/modules/hall-ui/public/my-projects.css

@@ -0,0 +1,40 @@
+/* my-projects.css — page styles for the cross-project view (task 1002868).
+   Every color derives from the style.css tokens (pack-driven); this file owns
+   only the page's own layout — rows, the join form, the inline notes. */
+
+.row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--radius-sm);
+  padding: 10px 12px;
+  margin-bottom: 8px;
+}
+.row .meta { flex: 1; min-width: 0; }
+.row .name { font-weight: 600; }
+.row .origin { color: var(--accent-text); font-size: 12.5px; word-break: break-all; }
+.row .owner-pill {
+  font-size: 11px;
+  background: var(--accent);
+  color: #fff;
+  border-radius: 999px;
+  padding: 2px 8px;
+}
+
+.empty { margin: 0; color: var(--ink-soft); font-size: 13.5px; }
+
+.join { display: flex; gap: 8px; }
+.join input {
+  flex: 1;
+  font: inherit;
+  font-size: 13px;
+  padding: 0 10px;
+  height: 30px;
+  border: 1px solid var(--border-strong);
+  border-radius: var(--radius-sm);
+  background: var(--surface);
+  color: var(--ink);
+}
+.note { margin: 10px 0 0; color: var(--ink-soft); font-size: 13px; min-height: 1.2em; }

package/modules/hall-ui/public/my-projects.html

@@ -3,76 +3,66 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>My Projects</title>
-  <style>
-    :root {
-      --bg: #fff7ed; --card: #ffffff; --ink: #2a1f17; --ink-soft: #6b5d52;
-      --rule: #fed7aa; --accent: #ea580c; --accent-deep: #c2410c;
-    }
-    * { box-sizing: border-box; }
-    body {
-      margin: 0; padding: 2.5rem 1.25rem 4rem; background: var(--bg); color: var(--ink);
-      font-family: "Quicksand", system-ui, -apple-system, "Segoe UI", sans-serif; line-height: 1.5;
-    }
-    .wrap { max-width: 820px; margin: 0 auto; }
-    h1 { font-size: 1.9rem; margin: 0 0 .3rem; }
-    .sub { color: var(--ink-soft); margin: 0 0 2rem; }
-    h2 { font-size: 1.1rem; margin: 2rem 0 .75rem; border-bottom: 1px solid var(--rule); padding-bottom: .35rem; }
-    .row {
-      display: flex; align-items: center; gap: .75rem; background: var(--card);
-      border: 1px solid var(--rule); border-radius: 12px; padding: .8rem 1rem; margin-bottom: .6rem;
-    }
-    .row .meta { flex: 1; min-width: 0; }
-    .row .name { font-weight: 600; }
-    .row .origin { color: var(--accent); font-size: .82rem; word-break: break-all; }
-    .row .owner-pill { font-size: .72rem; background: var(--accent); color: #fff; border-radius: 999px; padding: .1rem .55rem; }
-    button {
-      font: inherit; cursor: pointer; border: 1px solid var(--rule); background: #fff; color: var(--ink);
-      border-radius: 9px; padding: .4rem .8rem;
-    }
-    button:hover { border-color: var(--accent); color: var(--accent-deep); }
-    .join { display: flex; gap: .5rem; margin-top: .75rem; }
-    .join input { flex: 1; font: inherit; padding: .5rem .7rem; border: 1px solid var(--rule); border-radius: 9px; }
-    .empty { color: var(--ink-soft); }
-    .note { margin-top: .5rem; color: var(--ink-soft); font-size: .9rem; min-height: 1.2em; }
-    a.home { color: var(--accent); text-decoration: none; font-size: .9rem; }
-    @media (prefers-color-scheme: dark) {
-      :root { --bg: #1a1410; --card: #241c16; --ink: #f5ece3; --ink-soft: #b9a998; --rule: #4a3728; }
-      button { background: #241c16; }
-      .join input { background: #241c16; color: inherit; }
-    }
-  </style>
+  <title>My Projects — {{worldName}}</title>
+  <meta name="description" content="Your cross-project view: the projects you own and build on across {{worldName}}.">
+  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
+  <link rel="stylesheet" href="/builders/my-projects.css">
 </head>
-<body>
-  <div class="wrap">
-    <a class="home" href="/builders">← Back to the hall</a>
-    <h1>My Projects</h1>
-    <p class="sub">Every project you build on across the platform.</p>
+<body data-page="my-projects" data-page-title="My Projects">
 
-    <section>
-      <h2>Projects you own</h2>
-      <div id="owned"><p class="empty">—</p></div>
-    </section>
+<div class="app">
+  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
+  <div class="app-scrim" id="app-scrim" hidden></div>
+  <div class="app-body">
+    <header class="app-topbar" id="app-topbar"></header>
+    <div class="app-content">
+      <div class="page-head">
+        <p class="page-head__sub">Every project you build on across the platform.</p>
+      </div>
 
-    <section id="invites-section" hidden>
-      <h2>Invitations</h2>
-      <div id="invites"></div>
-    </section>
+      <main>
+        <section class="scroll" aria-labelledby="owned-h">
+          <h2 id="owned-h" class="scroll__h">Projects you own</h2>
+          <div id="owned"><p class="empty">—</p></div>
+        </section>
 
-    <section>
-      <h2>Projects you build on</h2>
-      <div id="building"><p class="empty">—</p></div>
-    </section>
+        <section class="scroll" id="invites-section" hidden aria-labelledby="invites-h">
+          <h2 id="invites-h" class="scroll__h">Invitations</h2>
+          <div id="invites"></div>
+        </section>
 
-    <section>
-      <h2>Join a project</h2>
-      <div class="join">
-        <input id="join-origin" type="url" placeholder="https://project.cloudbongos.com" autocomplete="off">
-        <button id="join-btn" type="button">Request to join</button>
-      </div>
-      <p id="join-note" class="note"></p>
-    </section>
+        <section class="scroll" aria-labelledby="building-h">
+          <h2 id="building-h" class="scroll__h">Projects you build on</h2>
+          <div id="building"><p class="empty">—</p></div>
+        </section>
+
+        <section class="scroll" aria-labelledby="join-h">
+          <h2 id="join-h" class="scroll__h">Join a project</h2>
+          <div class="join">
+            <input id="join-origin" type="url" placeholder="https://project.cloudbongos.com" autocomplete="off">
+            <button id="join-btn" type="button" class="btn-ghost">Request to join</button>
+          </div>
+          <p id="join-note" class="note"></p>
+        </section>
+      </main>
+
+      <footer class="app-foot" id="app-foot"></footer>
+    </div>
   </div>
-  <script src="/my-projects.js"></script>
+</div>
+
+<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
+
+<!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
+     chrome exists before the page script runs. -->
+<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
+<script src="/builders/palette.js" defer></script>
+<script src="/builders/brand-apply.js"></script>
+<script src="/builders/my-projects.js"></script>
 </body>
 </html>

package/modules/hall-ui/public/my-projects.js

@@ -46,7 +46,7 @@
         row.appendChild(pill);
       }
       if (opts.leavable) {
-        var btn = el('button');
+        var btn = el('button', 'btn-ghost');
         btn.type = 'button';
         btn.textContent = 'Leave';
         btn.addEventListener('click', function () { leave(m.client_id, row, btn); });
@@ -91,8 +91,8 @@
           var host = safeOriginHost(inv.origin);
           if (host) { var o = el('div', 'origin'); o.textContent = host; meta.appendChild(o); }
           row.appendChild(meta);
-          var accept = el('button'); accept.type = 'button'; accept.textContent = 'Accept';
-          var decline = el('button'); decline.type = 'button'; decline.textContent = 'Decline';
+          var accept = el('button', 'btn-ghost'); accept.type = 'button'; accept.textContent = 'Accept';
+          var decline = el('button', 'btn-ghost'); decline.type = 'button'; decline.textContent = 'Decline';
           accept.addEventListener('click', function () { resolveInvite(inv.client_id, true, row, [accept, decline]); });
           decline.addEventListener('click', function () { resolveInvite(inv.client_id, false, row, [accept, decline]); });
           row.appendChild(accept); row.appendChild(decline);

package/modules/hall-ui/public/scouting.html

@@ -3,43 +3,49 @@
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Scouting — cross-project builders</title>
+  <title>Scouting — {{worldName}}</title>
+  <meta name="description" content="Cross-project builder activity — an internal talent view for project curators.">
+  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
+  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
   <style>
-    :root {
-      --bg: #fff7ed; --card: #ffffff; --ink: #2a1f17; --ink-soft: #6b5d52;
-      --rule: #fed7aa; --accent: #ea580c;
-    }
-    * { box-sizing: border-box; }
-    body {
-      margin: 0; padding: 2.5rem 1.25rem 4rem; background: var(--bg); color: var(--ink);
-      font-family: "Quicksand", system-ui, -apple-system, "Segoe UI", sans-serif; line-height: 1.5;
-    }
-    .wrap { max-width: 960px; margin: 0 auto; }
-    a.home { color: var(--accent); text-decoration: none; font-size: .9rem; }
-    h1 { font-size: 1.9rem; margin: .4rem 0 .3rem; }
-    .sub { color: var(--ink-soft); margin: 0 0 1.75rem; }
-    .badge { display: inline-block; font-size: .7rem; text-transform: uppercase; letter-spacing: .06em;
-      background: var(--accent); color: #fff; border-radius: 999px; padding: .12rem .6rem; vertical-align: middle; }
-    table { width: 100%; border-collapse: collapse; background: var(--card); border: 1px solid var(--rule); border-radius: 12px; overflow: hidden; }
-    th, td { text-align: left; padding: .6rem .8rem; border-bottom: 1px solid var(--rule); font-size: .92rem; }
-    th { color: var(--ink-soft); font-weight: 600; }
-    td.num, th.num { text-align: right; font-variant-numeric: tabular-nums; }
-    tr:last-child td { border-bottom: none; }
-    .who { font-weight: 600; }
-    .note { color: var(--ink-soft); padding: 2.5rem 1rem; text-align: center; }
-    .scroll { overflow-x: auto; }
-    @media (prefers-color-scheme: dark) {
-      :root { --bg: #1a1410; --card: #241c16; --ink: #f5ece3; --ink-soft: #b9a998; --rule: #4a3728; }
-    }
+    #body .who { font-weight: 600; }
   </style>
 </head>
-<body>
-  <div class="wrap">
-    <a class="home" href="/builders">← Back to the hall</a>
-    <h1>Scouting <span class="badge">Archon only</span></h1>
-    <p class="sub">Builders active across all hosted projects — an internal talent view. Descriptive only; it grants no authority anywhere.</p>
-    <div id="body" class="note">Loading…</div>
+<body data-page="scouting" data-page-title="Scouting">
+
+<div class="app">
+  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
+  <div class="app-scrim" id="app-scrim" hidden></div>
+  <div class="app-body">
+    <header class="app-topbar" id="app-topbar"></header>
+    <div class="app-content">
+      <div class="page-head">
+        <p class="page-head__sub">Builders active across all hosted projects — an internal talent view. Descriptive only; it grants no authority anywhere.</p>
+      </div>
+
+      <main>
+        <section class="scroll" aria-labelledby="scouting-h">
+          <h2 id="scouting-h" class="scroll__h">Cross-project builders</h2>
+          <div id="body" class="profile__placeholder">Loading…</div>
+        </section>
+      </main>
+
+      <footer class="app-foot" id="app-foot"></footer>
+    </div>
   </div>
-  <script src="/scouting.js"></script>
+</div>
+
+<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
+
+<!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
+     chrome exists before the page script runs. -->
+<script src="/builders/shell.js?v=2026-07-02-shell1"></script>
+<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
+<script src="/builders/palette.js" defer></script>
+<script src="/builders/brand-apply.js"></script>
+<script src="/builders/scouting.js"></script>
 </body>
 </html>

package/modules/hall-ui/public/scouting.js

@@ -25,15 +25,16 @@
     body.className = '';
     body.textContent = '';
     if (!builders || builders.length === 0) {
-      body.className = 'note';
+      body.className = 'profile__placeholder';
       body.textContent = 'No cross-project activity reported yet.';
       return;
     }
-    var scroll = el('div', 'scroll');
-    var table = el('table');
+    // table.ledger, appended straight into #body: the design system's table
+    // styling, and #body becomes the :has(> .ledger) phone scroll strip.
+    var table = el('table', 'ledger');
     var thead = el('thead');
     var hr = el('tr');
-    [['Builder', ''], ['Projects', 'num'], ['Credits', 'num'], ['Ships', 'num'], ['Karma', 'num'], ['Disciplines', ''], ['Last active', '']]
+    [['Builder', ''], ['Projects', 'ledger__num'], ['Credits', 'ledger__num'], ['Ships', 'ledger__num'], ['Karma', 'ledger__num'], ['Disciplines', ''], ['Last active', '']]
       .forEach(function (h) { var th = el('th', h[1]); th.textContent = h[0]; hr.appendChild(th); });
     thead.appendChild(hr); table.appendChild(thead);
     var tbody = el('tbody');
@@ -44,17 +45,16 @@
       name.textContent = b.github_login || b.display_name || ('#' + b.github_id);
       who.appendChild(name);
       tr.appendChild(who);
-      tr.appendChild(td(String(b.project_count != null ? b.project_count : '—'), 'num'));
-      tr.appendChild(td(String(b.total_credits != null ? b.total_credits : 0), 'num'));
-      tr.appendChild(td(String(b.total_tasks_shipped != null ? b.total_tasks_shipped : 0), 'num'));
-      tr.appendChild(td(String(b.total_karma != null ? b.total_karma : 0), 'num'));
+      tr.appendChild(td(String(b.project_count != null ? b.project_count : '—'), 'ledger__num'));
+      tr.appendChild(td(String(b.total_credits != null ? b.total_credits : 0), 'ledger__num'));
+      tr.appendChild(td(String(b.total_tasks_shipped != null ? b.total_tasks_shipped : 0), 'ledger__num'));
+      tr.appendChild(td(String(b.total_karma != null ? b.total_karma : 0), 'ledger__num'));
       tr.appendChild(td(Array.isArray(b.disciplines) ? b.disciplines.join(', ') : '—'));
       tr.appendChild(td(fmtRecency(b.last_active)));
       tbody.appendChild(tr);
     });
     table.appendChild(tbody);
-    scroll.appendChild(table);
-    body.appendChild(scroll);
+    body.appendChild(table);
   }
 
   fetch('/api/gds/scouting', { headers: { Accept: 'application/json' } })
@@ -65,7 +65,7 @@
     })
     .then(function (data) { render(data && data.builders); })
     .catch(function (e) {
-      body.className = 'note';
+      body.className = 'profile__placeholder';
       body.textContent = (e && e.archon)
         ? 'This view is Archon-only.'
         : 'Couldn’t load the scouting view right now.';

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.135",
+  "version": "1.19.136",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.135",
+      "version": "1.19.136",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.135",
+  "version": "1.19.136",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -697,8 +697,10 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.133 with no explicit bump. run 31862749526. (task 1002620)
 //   1.19.135 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.134 with no explicit bump. run 31863235867. (task 1002620)
+//   1.19.136 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.135 with no explicit bump. run 31889474899. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.135'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.136'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_audit.mjs

@@ -30,14 +30,8 @@ const pages = () => fs.readdirSync(HALL).filter((f) => f.endsWith('.html'));
 // reader whether promoting it would actually fix anything.
 const INLINE_STYLE_BUDGET = {
   'task.html': 27,        // the task-751 detail-page block, deliberate
-  // my-projects + scouting are standalone surfaces that load neither style.css
-  // nor shell.js: their block is not page-local styling ON the design system,
-  // it IS their whole stylesheet, down to a hardcoded palette. Moving those
-  // bytes into a .css file would change nothing that matters — what they
-  // actually need is adoption into the shell + the branding contract, which is
-  // a far larger change than a CSS relocation.
-  'my-projects.html': 36,
-  'scouting.html': 26,
+  // (my-projects + scouting were carried here as standalone surfaces until task
+  // 1002868 adopted them into the shell; their exceptions are gone with them.)
   // Genuinely page-local, and already token-derived. One line over the default;
   // a whole stylesheet for the legend strip is not worth the extra request, and
   // diagram-viewer.css is shared with primer.html so it is the wrong home.
@@ -221,3 +215,43 @@ test('the module doc still records where the 2179 density pass landed', () => {
   assert.match(doc, /97cbef0/, 'names the commit that actually shipped part 1');
   assert.match(doc, /--space-1/, 'and an anchor a reader can go verify it against');
 });
+
+// ---- 8. every page rides the shell + the design system (task 1002868) -----
+
+// my-projects + scouting were the last two standalone surfaces: no style.css,
+// no shell.js, a private hardcoded palette that silently kept the WCAG-failing
+// accent when the pack moved (idea 1000600). Task 1002868 adopted them, so the
+// rule is now universal and exception-free.
+test('every hall page loads style.css and shell.js', () => {
+  const missing = [];
+  for (const f of pages()) {
+    const html = read(f);
+    if (!/<link[^>]+href="[^"]*\bstyle\.css[^"]*"/.test(html)) missing.push(`${f}: no style.css link`);
+    if (!/<script[^>]+src="[^"]*\bshell\.js[^"]*"/.test(html)) missing.push(`${f}: no shell.js`);
+  }
+  assert.deepEqual(missing, [], 'standalone hall surfaces are gone (task 1002868) — adopt the shell, do not fork it');
+});
+
+// A page that re-declares a pack color var carries a private palette: it keeps
+// rendering its baked-in colors however the instance pack (or the neutral
+// defaults) move. Definitions only — `var(--accent)` USAGE is the design system
+// working as intended. The 13 names are style.css's theming contract (§3 above
+// pins the same list on the defining side).
+const PACK_COLOR_VARS = [
+  'bg', 'bg-card', 'bg-deep', 'bg-frame', 'ink', 'ink-soft', 'ink-faint',
+  'rule', 'rule-soft', 'accent', 'accent-deep', 'sea', 'terracotta',
+];
+
+test('no page declares a private copy of a pack color var', () => {
+  const offenders = [];
+  for (const f of pages()) {
+    for (const m of read(f).matchAll(/<style[^>]*>([\s\S]*?)<\/style>/g)) {
+      for (const v of PACK_COLOR_VARS) {
+        // exact-name declaration: `--accent :` never matches `--accent-deep:`
+        // (next char is `-`) nor `var(--accent)` (next char is `)`).
+        if (new RegExp(`--${v}\\s*:`).test(m[1])) offenders.push(`${f}: defines --${v}`);
+      }
+    }
+  }
+  assert.deepEqual(offenders, [], 'palette comes from style.css + the instance pack (themeMarkup), never from a page');
+});