@bongos/core 1.19.387 → 1.19.389

package/public-landing/privacy.html

@@ -13,7 +13,7 @@
 <link rel="canonical" href="{{publicOrigin}}/privacy">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Baloo+2:wght@500;600;700&family=Quicksand:wght@400;500;600;700&family=Fira+Code:wght@400;500&display=swap">
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400&family=Manrope:wght@300;400;500;600&display=swap">
 <link rel="stylesheet" href="/assets/cosmos.css">
 <script>
 /* Mode, resolved before first paint — the same contract as every landing page. */

package/public-landing/projects.html

@@ -14,7 +14,7 @@
      correctly when viewed standalone. -->
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Baloo+2:wght@500;600;700&family=Quicksand:wght@400;500;600;700&family=Fira+Code:wght@400;500&display=swap">
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400&family=Manrope:wght@300;400;500;600&display=swap">
 <!-- The R07 redesign (task 1002696): shared token + component layer — the
      space sky both modes ride on, light/dark governing the cards. The server
      re-injects the branding :root AFTER stylesheets, so the pack stays
@@ -313,7 +313,7 @@ summary{min-height:24px;padding:3px 0;}
   background:var(--bg-card);border:2px solid var(--line);border-radius:999px;padding:9px 16px;
   transition:all .12s ease;}
 .tpill:hover{border-color:var(--accent);color:var(--accent-deep);}
-.tpill[aria-pressed=true]{background:var(--accent);border-color:var(--accent);color:#fff;}
+.tpill[aria-pressed=true]{background:var(--accent);border-color:var(--accent);color:var(--accent-on);}
 .typeCard{border:2px solid color-mix(in srgb,var(--type-acc) 35%,var(--bg-card));border-radius:18px;
   padding:16px 18px;margin-bottom:6px;
   background:linear-gradient(180deg,color-mix(in srgb,var(--type-acc) 9%,var(--bg-card)) 0%,var(--bg-card) 100%);}

package/public-landing/terms.html

@@ -13,7 +13,7 @@
 <link rel="canonical" href="{{publicOrigin}}/terms">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Baloo+2:wght@500;600;700&family=Quicksand:wght@400;500;600;700&family=Fira+Code:wght@400;500&display=swap">
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400&family=Manrope:wght@300;400;500;600&display=swap">
 <link rel="stylesheet" href="/assets/cosmos.css">
 <script>
 /* Mode, resolved before first paint — the same contract as every landing page. */

package/scripts/gds/ship-grade-steps.js

@@ -306,6 +306,33 @@ function formatGradeOutcome(g, taskId, cliFinding = null) {
     return out.join('\n');
   }
 
+  // task 1003318: ONE gating lens went dark (the Quality worker died on a
+  // context-window overflow before it started) while the rest of the panel
+  // judged the diff and found nothing substantive. The server records that axis
+  // as unavailable instead of fabricating a 0 (validateAndScore
+  // cq_lens_unavailable); present it the way #943 presents a total outage —
+  // there are no findings to fix, and the paths forward are re-grade or
+  // manual-confirm. Sits BELOW the authorization wall (a refusal is never an
+  // outage) and steps aside when any lens raised a blocker/major (then the
+  // ordinary FAIL block prints the findings). The task stays at completed.
+  const cqLensOutage = !g.passed
+    && g.signals?.cq_lens_unavailable === true
+    && g.rubric_scores?.code_quality === null
+    && !(g.issues || []).some((i) => i && (i.severity === 'blocker' || i.severity === 'major'));
+  if (cqLensOutage) {
+    out.push('');
+    out.push('Subagent grade: QUALITY LENS UNAVAILABLE  ·  the Quality worker did not run — NOT a quality rejection');
+    if (g.notes_md) out.push(g.notes_md.split('\n').map((l) => '  ' + l).join('\n'));
+    out.push(...formatOutageDiagnostic(g, null));
+    out.push('');
+    out.push('The other lenses judged the diff and found nothing substantive; code_quality is recorded as unavailable, not 0. Task stays at completed.');
+    out.push('When the grader is healthy again, re-grade:');
+    out.push(`  node scripts/gds/ship.js ${taskId} --regrade`);
+    out.push('Or land it now via manual-confirm:');
+    out.push(`  curl -X POST -H "Authorization: Bearer <token>" ${resolveInstanceBase() || '<instance-origin>'}/api/gds/tasks/${taskId}/confirm`);
+    return out.join('\n');
+  }
+
   const verdict = g.passed ? 'PASS' : 'FAIL';
   out.push('');
   out.push(`Subagent grade: ${verdict}  ·  blended ${g.score}/10  ·  threshold ${g.threshold} (both axes)`);

package/src/bongos/platform-visibility-gate.js

@@ -153,19 +153,20 @@ function doorHtml({ productName: name, signIn }) {
 :root{color-scheme:light dark}
 *{box-sizing:border-box}
 body{margin:0;min-height:100vh;display:grid;place-items:center;padding:24px;
-  font:500 15px/1.5 ui-rounded,"Quicksand",system-ui,-apple-system,"Segoe UI",sans-serif;
-  background:#f9d9a8;color:#2b170e}
-@media(prefers-color-scheme:dark){body{background:#150c06;color:#f4e6cd}}
+  font:500 15px/1.5 "Manrope",system-ui,-apple-system,"Segoe UI",sans-serif;
+  background:#edecee;color:#17181a}
+@media(prefers-color-scheme:dark){body{background:#000000;color:#ffffff}}
 .box{width:min(380px,100%);text-align:center}
 .dots{display:flex;gap:10px;justify-content:center;margin-bottom:22px}
-.dots i{display:block;border-radius:50%;background:#ce4806}
+.dots i{display:block;border-radius:50%;background:#fb9569}
 .dots i:first-child{width:38px;height:38px}
-.dots i:last-child{width:28px;height:28px;background:#855b3d;align-self:flex-end}
+.dots i:last-child{width:28px;height:28px;background:#c9512c;align-self:flex-end}
 h1{font-size:20px;font-weight:700;margin:0 0 6px}
 p{margin:0 0 20px;opacity:.72;font-size:14px}
-a.btn{display:inline-block;padding:11px 22px;border-radius:999px;background:#ce4806;color:#fff;
+/* dark ink on the accent fill: the chrome world's salmon carries white at 2.19:1 */
+a.btn{display:inline-block;padding:11px 22px;border-radius:999px;background:#fb9569;color:#2a1305;
   font:700 14px/1 inherit;text-decoration:none}
-a.btn:focus{outline:2px solid #ce4806;outline-offset:2px}
+a.btn:focus{outline:2px solid #a3481a;outline-offset:2px}
 </style></head><body><div class="box">
 <div class="dots"><i></i><i></i></div>
 <h1>${safe}</h1>

package/src/bongos/stealth-gate.js

@@ -139,22 +139,23 @@ function formHtml({ productName, wrong, returnTo }) {
 :root{color-scheme:light dark}
 *{box-sizing:border-box}
 body{margin:0;min-height:100vh;display:grid;place-items:center;padding:24px;
-  font:500 15px/1.5 ui-rounded,"Quicksand",system-ui,-apple-system,"Segoe UI",sans-serif;
-  background:#f9d9a8;color:#2b170e}
-@media(prefers-color-scheme:dark){body{background:#150c06;color:#f4e6cd}}
+  font:500 15px/1.5 "Manrope",system-ui,-apple-system,"Segoe UI",sans-serif;
+  background:#edecee;color:#17181a}
+@media(prefers-color-scheme:dark){body{background:#000000;color:#ffffff}}
 .box{width:min(380px,100%);text-align:center}
 .dots{display:flex;gap:10px;justify-content:center;margin-bottom:22px}
-.dots i{display:block;border-radius:50%;background:#ce4806}
+.dots i{display:block;border-radius:50%;background:#fb9569}
 .dots i:first-child{width:38px;height:38px}
-.dots i:last-child{width:28px;height:28px;background:#855b3d;align-self:flex-end}
+.dots i:last-child{width:28px;height:28px;background:#c9512c;align-self:flex-end}
 h1{font-size:20px;font-weight:700;margin:0 0 6px}
 p{margin:0 0 20px;opacity:.72;font-size:14px}
 form{display:flex;gap:8px}
-input{flex:1;min-width:0;padding:11px 14px;border-radius:999px;border:1.5px solid rgba(206,72,6,.35);
+input{flex:1;min-width:0;padding:11px 14px;border-radius:999px;border:1.5px solid rgba(163,72,26,.35);
   background:rgba(255,255,255,.72);color:inherit;font:inherit}
 @media(prefers-color-scheme:dark){input{background:rgba(255,255,255,.08)}}
-input:focus{outline:2px solid #ce4806;outline-offset:1px}
-button{padding:11px 20px;border:0;border-radius:999px;background:#ce4806;color:#fff;
+input:focus{outline:2px solid #a3481a;outline-offset:1px}
+/* dark ink on the accent fill: the chrome world's salmon carries white at 2.19:1 */
+button{padding:11px 20px;border:0;border-radius:999px;background:#fb9569;color:#2a1305;
   font:700 14px/1 inherit;cursor:pointer}
 .err{margin:14px 0 0;color:#b3261e;font-size:13.5px}
 @media(prefers-color-scheme:dark){.err{color:#ffb4a8}}

package/src/module-api.js

@@ -1214,8 +1214,12 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 //         landed since 1.19.385 with no explicit bump. run 33120468176. (task 1002620)
 //   1.19.387 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
 //         landed since 1.19.386 with no explicit bump. run 33121066592. (task 1002620)
+//   1.19.388 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.387 with no explicit bump. run 33125589814. (task 1002620)
+//   1.19.389 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+//         landed since 1.19.388 with no explicit bump. run 33126279278. (task 1002620)
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.387'; // CI auto-patch carrier (ADR 0161); see changelog above
+const CORE_VERSION = '1.19.389'; // CI auto-patch carrier (ADR 0161); see changelog above
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/src/ui/adapters/claude-design/index.js

@@ -28,8 +28,8 @@ const FALLBACK_ACCENT = (() => {
   try {
     return JSON.parse(fs.readFileSync(
       path.resolve(__dirname, '..', '..', '..', '..', 'config', 'design-tokens.neutral.json'), 'utf8',
-    )).colors.accent || '#ce4806';
-  } catch { return '#ce4806'; }
+    )).colors.accent || '#fb9569';
+  } catch { return '#fb9569'; }
 })();
 
 // ── token helpers ─────────────────────────────────────────────────────────────

package/tests/cloud_bongos_pack.mjs

@@ -1,7 +1,8 @@
 // tests/cloud_bongos_pack.mjs — the Cloud Bongos vanilla brand pack (R74 / task 1216,
 // ADR 0064). "Verified on the standalone boot", executable: a vanilla instance (no
 // config/branding.json → the neutral starter ALONE) resolves to the Cloud Bongos
-// identity, and the served-HTML theme injection paints the sunrise look. This is
+// identity, and the served-HTML theme injection paints the chrome look (the chrome
+// world replaced the sunrise on 2026-08-27, task 1003298). This is
 // the customer-0 pack Cloud Bongos itself runs on.
 import assert from 'node:assert/strict';
 import { test } from 'node:test';
@@ -30,36 +31,39 @@ test('R74: a vanilla boot resolves to the Cloud Bongos identity', () => {
   assert.equal(b.envPrefix, 'CLOUDBONGOS');
 });
 
-test('R74: the vanilla pack carries the Cloud Bongos LOOK (sunrise palette, Baloo 2/Quicksand, bongo favicon)', () => {
+test('R74: the vanilla pack carries the Cloud Bongos LOOK (chrome palette, Manrope, bongo favicon)', () => {
   const c = clientBranding(vanilla());
-  // fired down from the original #f97316 so white-on-accent clears WCAG AA
-  // (2.80:1 -> 4.61:1, task 1002749) — same ember hue, readable
-  assert.equal(c.theme.colors.accent, '#ce4806', 'ember orange accent');
-  // ember marigold (task 1002748): the base is PIGMENTED, not near-white. The
-  // old #fff7ed sat within a few points of the cards and the page read as fog.
-  assert.equal(c.theme.colors.bg, '#f9d9a8', 'marigold base');
-  assert.match(c.theme.fonts.display, /Baloo 2/);
-  assert.match(c.theme.fonts.body, /Quicksand/);
-  assert.ok(c.theme.fonts.links.some((l) => /Baloo\+2/.test(l) && /Quicksand/.test(l) && /Fira\+Code/.test(l)), 'loads Baloo 2 + Quicksand + Fira Code');
+  // the chrome world (owner, 2026-08-27; task 1003298): a salmon accent that is a
+  // FILL, never a text colour — white on it is 2.19:1, so cosmos.css paints labels
+  // on it with a derived dark --accent-on and accent WORDS with --accent-deep.
+  assert.equal(c.theme.colors.accent, '#fb9569', 'salmon accent');
+  // the ground is a cool near-grey paper, not the old marigold #f9d9a8: the chrome
+  // sculpture reads as metal on it, and the cards still lift off it.
+  assert.equal(c.theme.colors.bg, '#edecee', 'chrome paper base');
+  assert.match(c.theme.fonts.display, /Manrope/);
+  assert.match(c.theme.fonts.body, /Manrope/);
+  assert.ok(c.theme.fonts.links.some((l) => /JetBrains\+Mono/.test(l) && /Manrope/.test(l)), 'loads Manrope + JetBrains Mono');
   assert.match(c.theme.favicon, /circle/, 'bongo-pair favicon (circles), not the Greek Α');
   assert.doesNotMatch(c.theme.favicon, /font-family='serif'>Α/);
-  assert.equal(c.theme.backdrop, '#f9d9a8', 'the marigold ground holds all the way down');
+  // the backdrop is the TOKEN, not a hex: the served body follows the mode,
+  // because the sheets' dark blocks are (0,2,0) and outrank the injected :root.
+  assert.equal(c.theme.backdrop, 'var(--bg)', 'the ground follows the mode all the way down');
   // task 1002934: the owner's homepage rewrite retitled the platform.
   assert.equal(c.copy.tagline, 'Building Digitally, as simple as Bongos.');
   assert.equal(c.rankLabels.archon, 'Owner', 'plain rank labels, not "Archon"');
 });
 
-test('R74: serving the hall on a vanilla boot injects the Cloud Bongos sunrise theme', () => {
+test('R74: serving the hall on a vanilla boot injects the Cloud Bongos chrome theme', () => {
   const c = clientBranding(vanilla());
   const html = '<head><link rel="stylesheet" href="/builders/style.css"><title>x</title></head><body></body>';
   const out = injectBrandingGlobal(html, c);
-  // palette override + the marigold body backdrop + bongo favicon + the type links
-  assert.match(out, /:root\{[^}]*--accent:#ce4806;/);
-  assert.match(out, /body\{background:#f9d9a8;\}/);
+  // palette override + the token-valued body backdrop + bongo favicon + the type links
+  assert.match(out, /:root\{[^}]*--accent:#fb9569;/);
+  assert.match(out, /body\{background:var\(--bg\);\}/);
   assert.match(out, /<link rel="icon" href="data:image\/svg\+xml[^"]*circle/);
-  assert.match(out, /fonts\.googleapis\.com\/css2\?family=Baloo\+2/);
+  assert.match(out, /fonts\.googleapis\.com\/css2\?family=JetBrains\+Mono/);
   // and it lands AFTER the stylesheet so the Cloud Bongos look wins
-  assert.ok(out.indexOf('/builders/style.css') < out.indexOf('--accent:#ce4806'));
+  assert.ok(out.indexOf('/builders/style.css') < out.indexOf('--accent:#fb9569'));
 });
 
 test('R74: themeMarkup paints the backdrop only when the pack supplies one', () => {

package/tests/cosmos_token_contrast.mjs

@@ -169,8 +169,13 @@ const deltaE76 = (a, b) => {
 // need: 4.5 normal text · 3.0 large text and meaningful non-text
 const CARD = 'var(--bg-card)';
 const PAIRS = [
-  // primary + secondary action
-  ['.btn label on its fill',            '#ffffff',              'var(--accent)',        4.5],
+  // primary + secondary action.
+  // The label ink on an accent FILL is --accent-on since task 1003298 (2026-08-27):
+  // the chrome world's salmon accent carries white at 2.19:1, so every filled accent
+  // control took a derived DARK ink. (The marigold pack this file was written for
+  // shipped a fired-down ember where #ffffff measured 4.61:1 — that is history now,
+  // and any prose below still naming those values is history too.)
+  ['.btn label on its fill',            'var(--accent-on)',     'var(--accent)',        4.5],
   ['.btn.ghost:hover label',            'var(--accent-deep)',   CARD,                   4.5],
   ['.btn.danger label',                 'var(--err)',           CARD,                   4.5],
   // Code chips, pills, the now-step number, the hover inks: --accent-deep is
@@ -212,8 +217,11 @@ const PAIRS = [
   ['strip indicator on the strip tint', 'var(--sea-ink)',       'color-mix(in srgb,var(--sea) 8%,var(--bg-card))', 3.0],
   ['strip done tick on its fill',       'var(--on-ok)',         'var(--sea-ink)',       3.0],
   ['flowDown done tick on its fill',    'var(--on-ok)',         'var(--ink-faint)',     3.0],
-  ['.steps done/now ring on card',      'var(--accent)',        CARD,                   3.0],
-  ['.steps done vs idle connector',     'var(--accent)',        'var(--line)',          3.0],
+  // the create rail's ring + connector: non-text at 1.4.11's 3:1. --accent-deep,
+  // not --accent, since task 1003298 — the chrome world's salmon is 2.10:1 on the
+  // card, so the mark that IDENTIFIES a done step had to move to the deep twin.
+  ['.steps done/now ring on card',      'var(--accent-deep)',   CARD,                   3.0],
+  ['.steps done vs idle connector',     'var(--accent-deep)',   'var(--line)',          3.0],
   // the opted-out address card swaps to the page ground (--bg); its muted copy
   // must still measure (19px/700 headline = large text, 3.0)
   ['optedOut .addrBig (large) on --bg', 'var(--ink-soft)',      'var(--bg)',            3.0],
@@ -221,10 +229,11 @@ const PAIRS = [
   // ?view=mine (task 1002823) — both surfaces traded a subtree opacity for muted
   // tokens, so the tokens themselves now carry the de-emphasis and must measure.
   // The two pill rows are the pair that proves the split: one mute cannot serve
-  // both grounds, because on the pressed --accent fill no ink token clears 4.5
-  // (--ink is the best at 3.70 light / 4.05 dark) and only the button's #fff does.
+  // both grounds, because on the pressed --accent fill no muted ink token clears
+  // 4.5 — the count inherits the button's own label ink, which is --accent-on
+  // since task 1003298 (it was the button's #fff under the marigold pack).
   ['.filters .n count, resting pill',   'var(--ink-faint)',     CARD,                   4.5],
-  ['.filters .n count, pressed pill',   '#ffffff',              'var(--accent)',        4.5],
+  ['.filters .n count, pressed pill',   'var(--accent-on)',     'var(--accent)',        4.5],
   ['.proj.gone name (muted)',           'var(--ink-soft)',      CARD,                   4.5],
   ['.proj.gone meta (dim removed)',     'var(--ink-faint)',     CARD,                   4.5],
   // lifecycle strip: 12px/700
@@ -265,7 +274,13 @@ const PAIRS = [
   ['--ctl-line boundary on the card',   'var(--ctl-line)',      'var(--card)',          3.0],
   ['--ctl-line boundary vs input fill', 'var(--ctl-line)',      CARD,                   3.0],
   ['?view=new input ::placeholder',     'var(--ink-faint)',     CARD,                   4.5],
-  ['?view=new .ghlist .hint on deep',   'var(--ink-faint)',     'var(--bg-deep)',       4.5],
+  // the repo-picker panel's own ground. Retargeted 2026-08-27 (task 1003298) from
+  // --ink-faint to --ink-soft: under the chrome palette the pack's --ink-faint
+  // measures 4.45:1 on --bg-deep, and NO rule paints it there — .ghlist's own copy
+  // is .ghrow (--ink) and .ghrow .priv (--ink-soft); the .hint blocks are siblings
+  // of #ghList and sit on the card. So the floor now measures the ink the deep
+  // panel actually uses, instead of a pairing nothing renders.
+  ['?view=new .ghlist copy on deep',    'var(--ink-soft)',      'var(--bg-deep)',       4.5],
   ['--chrome-accent wordmark',          'var(--chrome-accent)', 'var(--page-bg)',       4.5],
   ['--chrome-ink',                      'var(--chrome-ink)',    'var(--page-bg)',       4.5],
   ['--foot-ink footer copy',            'var(--foot-ink)',      'var(--page-bg)',       4.5],

package/tests/grader.mjs

@@ -842,20 +842,20 @@ test('selectGraderModel: builder Haiku → grader Opus', () => {
 
 // --- task 1002660: per-worker model tiering (cross-model-guarded) ---
 
-test('workerModelFor: Quality tiers down to haiku; other workers keep the panel model', () => {
+test('workerModelFor: Quality runs on its sonnet tier (task 1003318 — haiku\'s window overflowed); other workers keep the panel model', () => {
   assert.equal(
-    grader.workerModelFor('quality', 'claude-sonnet-5', 'claude-fable-5'),
-    'claude-haiku-4-5-20251001'
+    grader.workerModelFor('quality', 'claude-opus-5', 'claude-fable-5'),
+    'claude-sonnet-5'
   );
   for (const kind of ['narc', 'hacker', 'efficiency']) {
-    assert.equal(grader.workerModelFor(kind, 'claude-sonnet-5', 'claude-fable-5'), 'claude-sonnet-5');
+    assert.equal(grader.workerModelFor(kind, 'claude-opus-5', 'claude-fable-5'), 'claude-opus-5');
   }
 });
 
 test('workerModelFor: a tier override landing on the BUILDER family is refused (cross-model guarantee)', () => {
-  // A haiku builder must not be quality-judged by haiku — fall back to the panel model.
+  // A sonnet builder must not be quality-judged by sonnet — fall back to the panel model.
   assert.equal(
-    grader.workerModelFor('quality', 'claude-opus-5', 'claude-haiku-4-5-20251001'),
+    grader.workerModelFor('quality', 'claude-opus-5', 'claude-sonnet-5'),
     'claude-opus-5'
   );
 });
@@ -1795,6 +1795,7 @@ test('v4 #465/#467: TRANSIENT_WORKER_ERRORS covers infra noise but NOT timeout',
     assert.ok(t.has(code), `${code} should be retryable`);
   }
   assert.ok(!t.has('SUBAGENT_TIMEOUT'), 'timeout is a real budget signal, never retried');
+  assert.ok(!t.has('PROMPT_TOO_LONG'), 'a window overflow is deterministic, never retried (task 1003318)');
 });
 
 test('v4 #467: audit-exports classifyExports — consumed / test-only / DEAD', () => {