@bongos/core 1.19.519 → 1.19.521

package/.bongos-core.json

@@ -2,11 +2,11 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.19.519",
-  "core_contract": "1.19.519",
-  "source_commit": "90936b1d6d76a6e72180bcda5829a33cd130e23e",
+  "core_version": "1.19.521",
+  "core_contract": "1.19.521",
+  "source_commit": "e4f2e1b87d89acb6c50a86896af501eff629a49f",
   "source_ref": "HEAD",
-  "built_at": "2026-09-03T20:29:09.958Z",
+  "built_at": "2026-09-03T22:32:55.137Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 431,
@@ -17,7 +17,7 @@
     "gate": "passed"
   },
   "file_count": 2424,
-  "tree_sha256": "ac3f45936dd7cae4fca5673e5a6f137a59f8fc05c173c58ed0c1ee2a22d9fc64",
+  "tree_sha256": "5cf629aad21665a1b205bb6529f9103bde6140bdaa5d5bb8bb950677b588c058",
   "files": [
     {
       "path": ".claude/skills/blocker-review/SKILL.md",
@@ -1747,12 +1747,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "10bd22616cb454025f410701f7771b4bafca3cbb789378e48955e820bdb6e0c6"
+      "sha256": "804238f39cba79b0503aee0079bde0272398c96b713e26c4f32298cd1db0fc06"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "f1ef1d8ebf1e6de8c8d9d2f88d0cc05001d6c7666ff2805dd9300998d01c91c7"
+      "sha256": "2df6e1780324aa67c25e347010082441d8267ff754ca3bb76c4071228f0c579d"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2597,7 +2597,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "0006d40a2c0f79224da4831191e3c1d64a5adf42cadfca08507369a5026bc044"
+      "sha256": "f19fae1616ebe6fcb885f54592364bc673ed8df8ac23c857377c7959490c87b6"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4517,7 +4517,7 @@
     {
       "path": "modules/hall-ui/public/builders.js",
       "mode": "0000644",
-      "sha256": "18e113894ddb8d8e86faa01d20edde978f8710f8eb546e0baa8b7732d46cf00c"
+      "sha256": "b9cf0c5dc9e0df09eb16a8c14b3d50d9d8ebcf899da5c7b10318f81fe5615d45"
     },
     {
       "path": "modules/hall-ui/public/chime.wav",
@@ -4552,7 +4552,7 @@
     {
       "path": "modules/hall-ui/public/copy-desk.css",
       "mode": "0000644",
-      "sha256": "8c44e1147a48d906d354cbd87a196c805c6aa813ce8b8d658402d6d1681622ef"
+      "sha256": "d67e5be0a1f2497d5c28d8daa2206cccf1eb81c8aaa2c41b4e41230e88a4baac"
     },
     {
       "path": "modules/hall-ui/public/copy-desk.html",
@@ -5077,7 +5077,7 @@
     {
       "path": "modules/hall-ui/public/style.css",
       "mode": "0000644",
-      "sha256": "25e2ade6a51158e430fb0e49d1c50f654b13e5f272544fc4b592dc022a4ddd60"
+      "sha256": "41aae0ec3164d3f0e4d485ad029c98980b2d18e791a04aa4e7714ba94e776ef9"
     },
     {
       "path": "modules/hall-ui/public/task-detail.js",
@@ -7297,12 +7297,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "a98e002e52d95a3fbdeee7753bdee264e9beb75b05e98ec78d76e717f761a6a6"
+      "sha256": "b18f028ece28c2fd6605db03201f068504d5b57a2a402d79f2f28bad551e2ddc"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "b949b82136e44474714296bbac73758f16c34d51ccafd1fa68859ad701500520"
+      "sha256": "d6b8d673c517a74dc369500ba850c49d367d860455f97c3a265525c5588057a4"
     },
     {
       "path": "public-docs/index.html",
@@ -7702,7 +7702,7 @@
     {
       "path": "scripts/gds/fetch-sound-prefs.js",
       "mode": "0000644",
-      "sha256": "30b30ed76d772e3f2a1b74791b9de08db9ea782258e8e818c34ce3037bff7912"
+      "sha256": "ea36d22031b18f2682ca2e1475a556b21fc2b5817de1f94d872e947247553144"
     },
     {
       "path": "scripts/gds/figma-design-sync.js",
@@ -8972,7 +8972,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "96bec9279e853e935c59aeb89ed60538750db43c6b34c2fc0f363cb214b300e5"
+      "sha256": "192a36ccb6a9fb1b60332dda5c8ad12c5b53d104d9f9554d72505645ed66d7d3"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -10357,7 +10357,7 @@
     {
       "path": "tests/hall_audit.mjs",
       "mode": "0000644",
-      "sha256": "0b30e949b0479adb4b436aa32e741c9f2ab3925a1ac4327daf6e8a95700a8c14"
+      "sha256": "de4b33fd78de12daf1b6e07eeb3834ffd19e912ea81c1d2ba91a129a19e7382a"
     },
     {
       "path": "tests/hall_board_world.mjs",
@@ -10372,7 +10372,7 @@
     {
       "path": "tests/hall_collab_world.mjs",
       "mode": "0000644",
-      "sha256": "d5608c37de6e17a7ec4c0bb48e0815b7df2726609933baebad8975739a343d2d"
+      "sha256": "b597173a0d280286f0f5ff5d13e0065b2c1dc311024d1f13b5c2d0c3915daf45"
     },
     {
       "path": "tests/hall_error_envelope.mjs",
@@ -10822,7 +10822,7 @@
     {
       "path": "tests/memory_pull.mjs",
       "mode": "0000644",
-      "sha256": "22f442f147994e81aed89692fdfd777bd6132448f6dc64019b5474533f75dbc8"
+      "sha256": "d05b6e354ac08cf5512a62b76b213df44ab1ef8639a1ba635319e9b5e8511a5c"
     },
     {
       "path": "tests/merge_lease.mjs",

package/docs/copy-inventory.md

@@ -132,7 +132,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1b326b0be1a4` | certain | A {…} — you are a {…}. Mingle pairs across crafts. | `modules/hall-ui/public/collab.js:173` |
 | `996edffc1966` | certain | Access requests | `modules/hall-ui/public/watch.html:46` |
 | `996edffc1966` | certain | Access requests | `modules/hall-ui/public/watch.html:61` |
-| `303f8d90266f` | certain | Achievements could not be loaded. | `modules/hall-ui/public/builders.js:1150` |
+| `303f8d90266f` | certain | Achievements could not be loaded. | `modules/hall-ui/public/builders.js:1154` |
 | `6ca31dd5eb91` | certain | Acknowledge the primer | `modules/hall-ui/public/primer.html:99` |
 | `4461b13f95c2` | certain | Actions apply at once. Closing stops and deletes the box; you can start a fresh one anytime. | `modules/hall-ui/public/settings.html:209` |
 | `524188fe0078` | certain | Active sessions | `modules/hall-ui/public/settings.html:162` |
@@ -365,7 +365,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `541127601291` | certain | Download for Mac | `modules/hall-ui/public/settings.html:224` |
 | `2ed2fd8376c0` | certain | Download for Windows | `modules/hall-ui/public/settings.html:225` |
 | `c7af57097d94` | certain | Download the Dev Box app: | `modules/hall-ui/public/hall-render.js:750` |
-| `9cf07334a5a9` | certain | Downvote (−1) | `modules/hall-ui/public/builders.js:735` |
+| `9cf07334a5a9` | certain | Downvote (−1) | `modules/hall-ui/public/builders.js:739` |
 | `9c728558d6e7` | certain | Drachmae & karma | `modules/hall-ui/public/drachmae.html:22` |
 | `9c728558d6e7` | certain | Drachmae & karma | `modules/hall-ui/public/drachmae.html:22` |
 | `9c728558d6e7` | certain | Drachmae & karma | `modules/hall-ui/public/drachmae.html:37` |
@@ -474,7 +474,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `a4ff1e9c34e3` | certain | Idea {…} | `modules/hall-ui/public/idea.js:267` |
 | `ba82ec56f1e3` | certain | Idea — {{worldName}} | `modules/hall-ui/public/idea.html:6` |
 | `ba82ec56f1e3` | certain | Idea — {{worldName}} | `modules/hall-ui/public/idea.html:6` |
-| `e181637c5a5e` | certain | Ideas awaiting triage | `modules/hall-ui/public/builders.js:855` |
+| `e181637c5a5e` | certain | Ideas awaiting triage | `modules/hall-ui/public/builders.js:859` |
 | `d4e21769ce1c` | certain | Ideas filed, and what became of them | `modules/hall-ui/public/profile.html:152` |
 | `379b20d548ad` | certain | Ideas whose author has said "I had the thought but not the full picture". Anyone can develop one — the author  | `modules/hall-ui/public/ideas.html:42` |
 | `ef224c9de7c8` | certain | Ideas — {{worldName}} | `modules/hall-ui/public/ideas.html:6` |
@@ -509,7 +509,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `93c17262bacf` | certain | Key storage is being set up by an Archon — check back shortly. {…} | `modules/hall-ui/public/settings.js:1072` |
 | `2a3c9e501f8e` | certain | Key storage isn't set up yet. As an Archon you can turn it on now — the server generates and safely stores the | `modules/hall-ui/public/settings.js:1068` |
 | `7d6eaa8d4514` | certain | Kinds of work shipped | `modules/hall-ui/public/hall-render.js:1165` |
-| `81f62e066dbf` | certain | Last 14 days: {…} / 10 average across {…} graded work{…} ({…} passed). | `modules/hall-ui/public/builders.js:591` |
+| `81f62e066dbf` | certain | Last 14 days: {…} / 10 average across {…} graded work{…} ({…} passed). | `modules/hall-ui/public/builders.js:595` |
 | `35a15eb0a117` | certain | Last 30 days | `modules/hall-ui/public/hall-widgets.js:129` |
 | `9be8b839eff8` | certain | Last 7 days | `modules/hall-ui/public/hall-widgets.js:129` |
 | `59f0bc78a28f` | certain | Last 90 days | `modules/hall-ui/public/hall-widgets.js:130` |
@@ -552,7 +552,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `df335a1224ae` | certain | Member since {…} | `modules/hall-ui/public/hall-render.js:499` |
 | `df335a1224ae` | certain | Member since {…} | `modules/hall-ui/public/profile.js:65` |
 | `c7a670e9552d` | certain | Merged into | `modules/hall-ui/public/profile.js:377` |
-| `7637613c231b` | certain | Metic rank and above may vote | `modules/hall-ui/public/builders.js:739` |
+| `7637613c231b` | certain | Metic rank and above may vote | `modules/hall-ui/public/builders.js:743` |
 | `1c485c956f90` | certain | Mingle pairs you with someone from a different craft. Saying no costs nothing at all — no rank, no karma, no s | `modules/hall-ui/public/collab.html:57` |
 | `d7ce4a3bb745` | certain | Minimize the welcome panel | `modules/hall-ui/public/hall-widgets.js:52` |
 | `19b0ed5781ae` | certain | Minimum rank required to claim this task | `modules/hall-ui/public/task-lib.js:65` |
@@ -873,7 +873,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `381f29be7497` | certain | The most recently shipped tasks. | `modules/hall-ui/public/work.html:108` |
 | `82479c539fca` | certain | The name shown beside your work — in the roster, the leaderboard, and the work feed. Your sign-in and the cred | `modules/hall-ui/public/settings.html:75` |
 | `b88dd8b96b72` | certain | The next person to notice this sentence reads your note instead of re-litigating it. | `modules/hall-ui/public/copy-desk.html:135` |
-| `aa716f3dd551` | certain | The page could not be loaded. Try again. | `modules/hall-ui/public/builders.js:1392` |
+| `aa716f3dd551` | certain | The page could not be loaded. Try again. | `modules/hall-ui/public/builders.js:1396` |
 | `74bc22f38140` | certain | The platform confirmed this request came from the account it names. | `modules/hall-ui/public/watch.js:349` |
 | `6c3d88de42de` | certain | The primer | `modules/hall-ui/public/primer.html:41` |
 | `dea378cd4837` | certain | The primer did not load | `modules/hall-ui/public/primer.html:88` |
@@ -935,14 +935,14 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `1a64679fbb42` | certain | Typo or grammar | `modules/hall-ui/public/copy-desk.html:94` |
 | `2c1c20785a6e` | certain | Unclear — a person would not know what to do | `modules/hall-ui/public/copy-desk.html:91` |
 | `aa445f06cc5e` | certain | Unlink failed: {…} | `modules/hall-ui/public/settings.js:944` |
-| `67fbc770b3b3` | certain | Upvote (+1) | `modules/hall-ui/public/builders.js:735` |
+| `67fbc770b3b3` | certain | Upvote (+1) | `modules/hall-ui/public/builders.js:739` |
 | `6200bac6bdca` | certain | View all sessions | `modules/hall-ui/public/watch.html:106` |
 | `9b92aa01516d` | certain | View all {…} {…} → | `modules/hall-ui/public/goals-render.js:585` |
 | `4babdfeaf27f` | certain | View full standing → | `modules/hall-ui/public/hall-widgets.js:86` |
 | `f8546b3e285e` | certain | View tasks {…} | `modules/hall-ui/public/roadmap.js:134` |
 | `71c09cda8246` | certain | Voice for {…} | `modules/hall-ui/public/settings.js:76` |
 | `2940b7828d26` | certain | Volume {…}%. | `modules/hall-ui/public/settings.js:218` |
-| `6905f2ee5702` | certain | Vote on this work | `modules/hall-ui/public/builders.js:735` |
+| `6905f2ee5702` | certain | Vote on this work | `modules/hall-ui/public/builders.js:739` |
 | `b2937e14ee9b` | certain | Vote yes | `modules/hall-ui/public/government.js:962` |
 | `8cc425582984` | certain | Vulnerability reports | `modules/hall-ui/public/watch.html:128` |
 | `b1e63e33f739` | certain | Vulnerability reports, engagement reports, override requests, and the audit log. | `modules/hall-ui/public/watch.html:125` |
@@ -1069,7 +1069,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `89cc9754d633` | certain | e.g. runaway cost — paused pending review | `modules/hall-ui/public/harbor.js:148` |
 | `12a23cc46ace` | certain | ends every session including this one — you will be asked to sign in again. | `modules/hall-ui/public/settings.html:172` |
 | `5321f9da0841` | certain | exists in schema, no behavior yet | `modules/hall-ui/public/diagrams.html:44` |
-| `df941da50c7c` | certain | fell short | `modules/hall-ui/public/builders.js:568` |
+| `df941da50c7c` | certain | fell short | `modules/hall-ui/public/builders.js:572` |
 | `31735e119a04` | certain | first vote | `modules/hall-ui/public/government.js:584` |
 | `9563bd9f4971` | certain | first — your username is all we need. | `modules/hall-ui/public/hall-render.js:284` |
 | `2e111f3a4912` | certain | flagged by | `modules/hall-ui/public/copy-desk.js:148` |
@@ -1114,8 +1114,8 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `33ca71bef112` | certain | no tasks yet | `modules/hall-ui/public/goals-render.js:163` |
 | `739a4bd6bd83` | certain | node scripts/setup-builder.js | `modules/hall-ui/public/hall-render.js:817` |
 | `61f0f4b2f4ab` | certain | not categorised yet | `modules/hall-ui/public/goals-page.js:277` |
-| `01a3d68d80c1` | certain | not graded (grader outage) | `modules/hall-ui/public/builders.js:563` |
-| `d43b9bbb8d4d` | certain | not graded (quality lens unavailable) | `modules/hall-ui/public/builders.js:565` |
+| `01a3d68d80c1` | certain | not graded (grader outage) | `modules/hall-ui/public/builders.js:567` |
+| `d43b9bbb8d4d` | certain | not graded (quality lens unavailable) | `modules/hall-ui/public/builders.js:569` |
 | `3916a3dc8e98` | certain | not started | `modules/hall-ui/public/roadmap.js:108` |
 | `3916a3dc8e98` | certain | not started | `modules/hall-ui/public/roadmap.js:263` |
 | `b5567b42fa52` | certain | not yet | `modules/hall-ui/public/not-ready.html:25` |
@@ -1240,7 +1240,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `3d74668f69e5` | certain | {…}{…} · {…} | `modules/hall-ui/public/task.js:546` |
 | `9588652a7aff` | certain | · follows your profile setting | `modules/hall-ui/public/settings.js:636` |
 | `4a5ff4f662df` | certain | — ${…} of ${…} this month ({…}%). {…} | `modules/hall-ui/public/hall-render.js:461` |
-| `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:671` |
+| `a6ae9cbdee30` | certain | — all builders — | `modules/hall-ui/public/builders.js:675` |
 | `729d4ce22b99` | certain | — any — | `modules/hall-ui/public/hall-widgets.js:132` |
 | `9ac518dfa95e` | certain | — none (the version's general bucket) — | `modules/hall-ui/public/task-detail.js:320` |
 | `da9962dc1729` | certain | — or open any diagram fullscreen. | `modules/hall-ui/public/diagrams.html:33` |
@@ -1253,7 +1253,7 @@ Identical copy within one surface. Sometimes right (a repeated button), sometime
 | `5b9fa7cb4fb0` | certain | …and {…} more waiting — | `modules/hall-ui/public/goal-inbox.js:121` |
 | `b2a04abfead0` | certain | …{…} more awaiting a nod. | `modules/hall-ui/public/goal-inbox.js:264` |
 | `616fb9adf3cf` | certain | …{…} more going quiet. | `modules/hall-ui/public/goal-inbox.js:353` |
-| `e35f11bdc5d7` | certain | …{…} more open ideas — triage clears them one at a time. | `modules/hall-ui/public/builders.js:853` |
+| `e35f11bdc5d7` | certain | …{…} more open ideas — triage clears them one at a time. | `modules/hall-ui/public/builders.js:857` |
 | `de8fa5223aee` | certain | ‹ Prev | `modules/hall-ui/public/hall-kit.js:71` |
 | `d4b84b7fbdeb` | certain | ← All goals | `modules/hall-ui/public/goals.html:80` |
 | `7926e30955d2` | certain | ← Back to goal | `modules/hall-ui/public/goals.html:184` |

package/docs/copy-registry.json

@@ -2099,7 +2099,7 @@
       "surface": "builders-hall",
       "text": "Achievements could not be loaded.",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 1150,
+      "line": 1154,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4196,7 +4196,7 @@
       "surface": "builders-hall",
       "text": "Downvote (−1)",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 735,
+      "line": 739,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5177,7 +5177,7 @@
       "surface": "builders-hall",
       "text": "Ideas awaiting triage",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 855,
+      "line": 859,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -5492,7 +5492,7 @@
       "surface": "builders-hall",
       "text": "Last 14 days: {…} / 10 average across {…} graded work{…} ({…} passed).",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 591,
+      "line": 595,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5879,7 +5879,7 @@
       "surface": "builders-hall",
       "text": "Metic rank and above may vote",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 739,
+      "line": 743,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8768,7 +8768,7 @@
       "surface": "builders-hall",
       "text": "The page could not be loaded. Try again.",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 1392,
+      "line": 1396,
       "origin": "js-notice",
       "confidence": "certain"
     },
@@ -9326,7 +9326,7 @@
       "surface": "builders-hall",
       "text": "Upvote (+1)",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 735,
+      "line": 739,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -9389,7 +9389,7 @@
       "surface": "builders-hall",
       "text": "Vote on this work",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 735,
+      "line": 739,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10532,7 +10532,7 @@
       "surface": "builders-hall",
       "text": "fell short",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 568,
+      "line": 572,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10937,7 +10937,7 @@
       "surface": "builders-hall",
       "text": "not graded (grader outage)",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 563,
+      "line": 567,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10946,7 +10946,7 @@
       "surface": "builders-hall",
       "text": "not graded (quality lens unavailable)",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 565,
+      "line": 569,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12071,7 +12071,7 @@
       "surface": "builders-hall",
       "text": "— all builders —",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 671,
+      "line": 675,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12188,7 +12188,7 @@
       "surface": "builders-hall",
       "text": "…{…} more open ideas — triage clears them one at a time.",
       "file": "modules/hall-ui/public/builders.js",
-      "line": 853,
+      "line": 857,
       "origin": "js-markup",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1475,5 +1475,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.517 with no explicit bump. run 33801792364. (task 1002620)
   1.19.519 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.518 with no explicit bump. run 33802471495. (task 1002620)
+  1.19.520 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.519 with no explicit bump. run 33810716476. (task 1002620)
+  1.19.521 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.520 with no explicit bump. run 33813285951. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/builders.js

@@ -559,13 +559,17 @@
       // is likewise not a judgment: the score is the surviving axis, not a fail.
       const isLensOut = !isOutage && !!g.rubric_scores && g.rubric_scores.code_quality === null;
       const score = isOutage || isLensOut ? '—' : Number(g.score).toFixed(1);
+      // A verdict is verification state: it wears the fixed vocabulary through
+      // .ledger__verdict--* (style.css), never an inline colour. The literals
+      // that stood here painted `passed` from a --olive that is not a token of
+      // the world, so every hall ever rendered it as the fallback (task 1003495).
       const verdict = isOutage
-        ? `<span style="color:var(--ink-soft,#8a8577)">not graded (grader outage)</span>`
+        ? `<span class="ledger__verdict--none">not graded (grader outage)</span>`
         : isLensOut
-          ? `<span style="color:var(--ink-soft,#8a8577)">not graded (quality lens unavailable)</span>`
+          ? `<span class="ledger__verdict--none">not graded (quality lens unavailable)</span>`
           : g.passed
-          ? `<span style="color:var(--olive,#5b7a4d);font-weight:600">passed</span>`
-          : `<span style="color:#a04040;font-weight:600">fell short</span>`;
+          ? `<span class="ledger__verdict--ok">passed</span>`
+          : `<span class="ledger__verdict--danger">fell short</span>`;
       return `
         <tr>
           <td class="ledger__num">#${g.task_id}</td>

package/modules/hall-ui/public/copy-desk.css

@@ -68,12 +68,12 @@
 .cd-search-count { margin: 0 0 14px; }
 
 /* The three dialogs are the family modal on a native <dialog>: bg-card, one rule
-   hairline, no shadow. The backdrop is the one literal this sheet keeps — pure
-   black with alpha as a SCRIM is the exception the Fifteen Rule names, and a
-   backdrop cannot take a ground token: it has to darken whatever is behind it
-   in either mode. */
+   hairline, no shadow. The backdrop is a SCRIM — it has to darken what is behind
+   it in EITHER mode, so it can take no ground token and no mix of --ink (which is
+   white on black). That is why it was a literal; task 1003495 gave the value a
+   home in style.css as --scrim instead, so the sheet keeps none. */
 .cd-dialog { width: min(480px, calc(100vw - 32px)); color: var(--ink); }
-.cd-dialog::backdrop { background: rgba(0, 0, 0, 0.55); }
+.cd-dialog::backdrop { background: var(--scrim); }
 .cd-dialog .ov-form { margin: 14px 0 0; }
 .cd-dialog textarea { resize: vertical; line-height: 1.5; }
 .ov-modal .cd-dialog__err { min-height: 18px; margin: 8px 0 0; font-size: 13px; line-height: 1.45; color: var(--danger); }

package/modules/hall-ui/public/style.css

@@ -146,6 +146,12 @@
           its own edge over whatever it lands on. ---- */
   --focus: color-mix(in srgb, var(--accent-deep) 82%, #3a1400);
 
+  /* ---- derived: the modal scrim. A backdrop DARKENS whatever is behind it
+          in BOTH modes, so it cannot be mixed from --ink (white on black) —
+          it is black with alpha, and lives here so no sheet keeps its own
+          literal. Both modes take this one value (task 1003495). ---- */
+  --scrim: rgba(0, 0, 0, .55);
+
   /* ---- derived: the label face flips. Mono caps read as precise on paper and
           thin on black, so light takes the mono and dark takes the body face.
           Take the token, never the family. ---- */
@@ -1476,6 +1482,13 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
 .ledger__date { color: var(--ink-soft); white-space: nowrap; font-variant-numeric: tabular-nums; }
 .ledger__rank { white-space: nowrap; }
 .ledger__note { font-size: 12.5px; color: var(--ink-faint); margin: 10px 0 0; }
+/* A grade verdict is verification STATE, so it wears the fixed vocabulary
+   (--ok / --danger / --ink-soft) the same way .rec-pill does on the record
+   pages — never a page-local literal, and never a hex fallback standing in
+   for a token the world does not define (task 1003495). */
+.ledger__verdict--ok { color: var(--ok); font-weight: 600; }
+.ledger__verdict--danger { color: var(--danger); font-weight: 600; }
+.ledger__verdict--none { color: var(--ink-soft); }
 .ledger th.ledger__sortable { cursor: pointer; user-select: none; }
 .ledger th.ledger__sortable:hover { color: var(--ink); }
 .ledger th.ledger__sortable[aria-sort="ascending"]::after { content: " ↑"; }
@@ -3190,6 +3203,17 @@ a.stat-tile:hover .stat-tile__sub { color: var(--ink-soft); }
   outline: none;
 }
 .palette__input::placeholder { color: var(--ink-faint); }
+/* palette.js auto-focuses this on open, so the ring is the first thing a
+   keyboard user needs — and it had none. .palette__panel clips (overflow:
+   hidden), which ate the world's ring (a 3px-offset outline inside an 8px
+   halo) and is why the outline was dropped here in the first place. So the
+   indication moves INSIDE the input's own box — the same inset form the 64px
+   rail's items use, for the same reason (task 1003496). */
+.palette__input:focus-visible {
+  outline: 2px solid var(--focus);
+  outline-offset: -2px;
+  box-shadow: none;
+}
 .palette__list {
   list-style: none;
   margin: 0;

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.519",
+  "version": "1.19.521",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.519",
+      "version": "1.19.521",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.519",
+  "version": "1.19.521",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/fetch-sound-prefs.js

@@ -85,4 +85,7 @@ async function main() {
   }
 }
 
-main().then(() => process.exit(0)).catch(() => process.exit(0));
+// No process.exit: calling it while undici is still tearing down the fetches above
+// aborts this hook on Windows with the win/async.c UV_HANDLE_CLOSING assertion, so
+// SessionStart reports a hook error. Nothing else holds the loop — it exits on its own.
+main().catch(() => {});

package/src/module-api.js

@@ -45,7 +45,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.519'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.521'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/hall_audit.mjs

@@ -384,3 +384,146 @@ test('no page declares a private copy of a pack color var', () => {
   }
   assert.deepEqual(offenders, [], 'palette comes from style.css + the instance pack (themeMarkup), never from a page');
 });
+
+// ---- 9. verification state wears the token tier (task 1003495) ------------
+
+// The walk (task 1003309) found Standing's grade column painting its verdicts
+// with inline literals — including a `var(--olive, #5b7a4d)` whose token the
+// world never defined, so every hall that ever rendered it showed the fallback.
+// A colour in a DECLARATION VALUE is the thing worth catching; a bare `#807`
+// in a comment is a task reference, which is why this matches a colour property
+// and not a hash. style.css is the token tier itself and is where literals
+// belong; the two exceptions below carry their reason.
+const LITERAL_EXEMPT = {
+  'style.css': 'the token tier — this is the ONE file whose job is to hold the literals',
+  'settings.css': 'the Discord button wears Discord\'s brand colour (#5865F2); a third-party mark is not a theme colour',
+};
+const COLOUR_PROPS = 'color|background|background-color|border|border-color|border-top-color|border-bottom-color|fill|stroke|outline|outline-color|box-shadow|text-shadow';
+const colourLiteralRe = () =>
+  new RegExp(`(?:^|[;{"'\\s(])(${COLOUR_PROPS})\\s*:\\s*[^;{}"'\\n]*?(#[0-9a-fA-F]{3,8}\\b|\\b(?:rgb|rgba|hsl|hsla)\\()`, 'g');
+
+function literalOffenders(files) {
+  const out = [];
+  for (const f of files) {
+    if (LITERAL_EXEMPT[f]) continue;
+    for (const m of read(f).matchAll(colourLiteralRe())) out.push(`${f}: ${m[1]}: … ${m[2]}`);
+  }
+  return out;
+}
+
+const hallSources = () =>
+  fs.readdirSync(HALL).filter((f) => /\.(css|js|html)$/.test(f)).sort();
+
+test('no hall sheet or script paints from a colour literal — style.css holds them', () => {
+  assert.deepEqual(literalOffenders(hallSources()), [],
+    'a colour in a declaration value belongs to the token tier (style.css), not to a page');
+});
+
+test('the colour-literal guard CATCHES a reintroduction, and tolerates a task ref', () => {
+  const re = colourLiteralRe();
+  assert.ok('a { color: #a04040; }'.match(re), 'a bare hex in a colour value is caught');
+  assert.ok('x = \'<span style="color:var(--olive,#5b7a4d)">\''.match(colourLiteralRe()),
+    'a hex FALLBACK behind a var() is caught — that is how --olive hid');
+  assert.equal('// #807: the dev-box panel'.match(colourLiteralRe()), null,
+    'a task reference in a comment is not a colour');
+  assert.equal('a { color: var(--ok); }'.match(colourLiteralRe()), null,
+    'a token is exactly what this rule wants');
+});
+
+test("Standing's grade column renders its three verdicts through the vocabulary", () => {
+  const js = read('builders.js');
+  const start = js.indexOf('function renderRecentGrades');
+  assert.ok(start > 0, 'renderRecentGrades present');
+  const body = js.slice(start, js.indexOf('\n  }', start));
+  for (const cls of ['ledger__verdict--ok', 'ledger__verdict--danger', 'ledger__verdict--none']) {
+    assert.ok(body.includes(cls), `the grade column uses .${cls}`);
+  }
+  assert.equal(/style="color:/.test(body), false, 'no inline colour survives in the grade column');
+  assert.equal(/var\(\s*--olive/.test(js), false, 'nothing PAINTS from --olive — the world never defined it (naming it in a comment is the point)');
+});
+
+test('the verdict classes and the scrim exist in the token tier, in both modes', () => {
+  const css = read('style.css');
+  // A verdict wears --ok / --danger / --ink-soft, which style.css redefines per
+  // mode — so pinning the RULE pins both modes at once.
+  assert.match(css, /\.ledger__verdict--ok\s*\{[^}]*var\(--ok\)/, 'passed → --ok');
+  assert.match(css, /\.ledger__verdict--danger\s*\{[^}]*var\(--danger\)/, 'fell short → --danger');
+  assert.match(css, /\.ledger__verdict--none\s*\{[^}]*var\(--ink-soft\)/, 'not graded → --ink-soft');
+  assert.match(css, /--scrim:/, 'the modal scrim is a token, not a sheet-local literal');
+  assert.match(read('copy-desk.css'), /::backdrop\s*\{[^}]*var\(--scrim\)/, 'the copy-desk backdrop takes it');
+});
+
+// ---- 10. an outline: none always names its replacement (task 1003496) -----
+
+// The walk (task 1003309) found the command palette's input dropping the
+// world's focus ring with nothing put back — and palette.js AUTO-FOCUSES it on
+// open, so a keyboard user landed in a field with no indication of where they
+// were. A rule may drop the outline; it may not drop the INDICATION. The
+// exceptions are selectors that are not keyboard stops at all.
+const OUTLINE_NONE_EXEMPT = {
+  main: 'the skip link\'s programmatic target — main takes tabindex="-1" focus so the reader lands past the nav, and ringing the whole page would be noise, not information',
+};
+
+// Innermost rule blocks only, so a rule inside @media is read as itself and the
+// wrapping at-rule is never mistaken for a selector.
+function rulesDeclaring(css, decl) {
+  const out = [];
+  const clean = css.replace(/\/\*[\s\S]*?\*\//g, '');
+  for (const m of clean.matchAll(/([^{}]+)\{([^{}]*)\}/g)) {
+    if (decl.test(m[2])) out.push(m[1].trim().replace(/\s+/g, ' '));
+  }
+  return out;
+}
+
+const OUTLINE_OFF = /outline\s*:\s*(none|0)\s*[;}]|outline\s*:\s*(none|0)\s*$/;
+// The base a focus rule would be written against: `.x:focus` and `.x` both want
+// a `.x:focus-visible`.
+const baseSelectors = (sel) =>
+  sel.split(',').map((s) => s.trim().replace(/:(focus-visible|focus-within|focus|hover|active)\b/g, '').trim()).filter(Boolean);
+
+function unringed(sheets) {
+  const all = sheets.map(([, css]) => css).join('\n');
+  const offenders = [];
+  for (const [file, css] of sheets) {
+    for (const rule of rulesDeclaring(css, OUTLINE_OFF)) {
+      for (const base of baseSelectors(rule)) {
+        if (OUTLINE_NONE_EXEMPT[base]) continue;
+        // The replacement may live in any hall sheet — they all load together.
+        if (all.includes(base + ':focus-visible')) continue;
+        offenders.push(`${file}: "${rule}" drops the outline with no ${base}:focus-visible`);
+      }
+    }
+  }
+  return offenders;
+}
+
+const hallSheets = () =>
+  fs.readdirSync(HALL).filter((f) => f.endsWith('.css')).sort().map((f) => [f, read(f)]);
+
+test('no hall sheet drops a focus ring without putting an indication back', () => {
+  assert.deepEqual(unringed(hallSheets()), [],
+    'outline: none is allowed only next to a :focus-visible replacement for the same selector');
+});
+
+test('the focus-ring guard CATCHES a suppression, and reads a replacement', () => {
+  const bad = [['x.css', '.thing { outline: none; }']];
+  assert.equal(unringed(bad).length, 1, 'a bare suppression is caught');
+  const paired = [['x.css', '.thing { outline: none; }\n.thing:focus-visible { outline: 2px solid var(--focus); }']];
+  assert.deepEqual(unringed(paired), [], 'a replacement in the same sheet satisfies it');
+  const crossSheet = [['a.css', '.thing { outline: none; }'], ['b.css', '.thing:focus-visible { outline: 2px solid var(--focus); }']];
+  assert.deepEqual(unringed(crossSheet), [], 'the hall loads its sheets together, so the replacement may sit in another one');
+  const media = [['x.css', '@media (min-width: 900px) { .thing { outline: none; } }']];
+  assert.equal(unringed(media).length, 1, 'a rule inside @media is read as itself, not as the at-rule');
+});
+
+test('the command palette input rings from the token tier, inside its own box', () => {
+  const css = read('style.css');
+  const rule = /\.palette__input:focus-visible\s*\{([^}]*)\}/.exec(css);
+  assert.ok(rule, '.palette__input:focus-visible exists');
+  assert.match(rule[1], /var\(--focus\)/, 'the ring is the world\'s --focus, which style.css redefines per mode');
+  // .palette__panel clips (overflow: hidden), which is WHY the global ring — a
+  // 3px-offset outline inside an 8px halo — was suppressed here. The
+  // replacement has to sit INSIDE the input's box or the panel eats it.
+  assert.match(css, /\.palette__panel\s*\{[^}]*overflow:\s*hidden/, 'the panel still clips, so the inset form is still the right one');
+  assert.match(rule[1], /outline-offset:\s*-|inset/, 'the indication sits inside the input, not outside it');
+});

package/tests/hall_collab_world.mjs

@@ -46,11 +46,14 @@ test('the page sheets spend only the fifteen, in px, and never opacity', () => {
     assert.ok(!/opacity\s*:/.test(css), `${p}.css carries state as colour, never opacity`);
     assert.ok(!/border-left/.test(css), `${p}.css paints no coloured band`);
   }
-  // The one literal the copy desk keeps: the native dialog's scrim.
+  // The copy desk's last literal was the native dialog's scrim. A scrim still
+  // cannot be mixed from a ground token — it darkens in BOTH modes — but the
+  // value now has a home in style.css as --scrim, so this sheet keeps none
+  // (task 1003495).
   const cd = read('copy-desk.css');
   const literals = cd.match(/rgba?\([^)]*\)/g) || [];
-  assert.deepEqual(literals, ['rgba(0, 0, 0, 0.55)'], 'black with alpha as a scrim, and nothing else');
-  assert.match(cd, /\.cd-dialog::backdrop \{ background: rgba\(0, 0, 0, 0\.55\); \}/, 'and it is spent on ::backdrop');
+  assert.deepEqual(literals, [], 'not even the scrim is a literal here any more');
+  assert.match(cd, /\.cd-dialog::backdrop \{ background: var\(--scrim\); \}/, 'the backdrop spends the token');
 });
 
 test('every list is the family\'s row, and the card-in-a-card is gone', () => {

package/tests/memory_pull.mjs

@@ -23,9 +23,11 @@ import { createRequire } from 'node:module';
 import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
+import { spawnSync } from 'node:child_process';
 
 const require = createRequire(import.meta.url);
 const pull = require('../.claude/hooks/pull-memory.js');
+const hookPath = require.resolve('../.claude/hooks/pull-memory.js');
 
 let passed = 0;
 let failed = 0;
@@ -186,6 +188,17 @@ test('encodeProjectPath: replaces / and . with -', () => {
   assert.equal(pull.encodeProjectPath('/Users/x/Desktop/Claude-OTB'), '-Users-x-Desktop-Claude-OTB');
 });
 
+// The old /[/.]/ class silently no-opped on a Windows path — separator, drive
+// colon and spaces all survived, so resolveMemoryDir built a path with a drive
+// letter buried mid-string that no mkdir could create and every file "failed"
+// (task 1003567). Must match the encoder in scripts/gds/ship-memory-sync.js.
+test('encodeProjectPath: Windows path — separator, drive colon and spaces all become -', () => {
+  assert.equal(
+    pull.encodeProjectPath(String.raw`C:\Users\x\Desktop\Cloud Bongos\cloud-bongos`),
+    'C--Users-x-Desktop-Cloud-Bongos-cloud-bongos',
+  );
+});
+
 test('tsToMs: ISO string, epoch ms, Date, and garbage', () => {
   assert.equal(pull.tsToMs('2026-05-30T00:00:00Z'), Date.parse('2026-05-30T00:00:00Z'));
   assert.equal(pull.tsToMs(1234), 1234);
@@ -413,14 +426,20 @@ await testAsync('pullMemory: 0 written + skips → summary does not read like a
 });
 
 await testAsync('pullMemory: no session → silent null', async () => {
+  // cli-lib freezes its session-file paths at require time, so an in-process
+  // HOME swap cannot unsee a real session — this must run in a FRESH process
+  // with a stubbed home, or it silently passes only where no session exists
+  // (i.e. CI) and fires a REAL network pull on a signed-in box (task 1003567).
   const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'otb-pull-nosess-'));
-  const origHome = process.env.HOME;
-  process.env.HOME = tmpHome;
   try {
-    const r = await pull.pullMemory({ startCwd: process.cwd() });
-    assert.equal(r, null);
+    const child = spawnSync(
+      process.execPath,
+      ['-e', 'require(process.argv[1]).pullMemory({ startCwd: process.argv[2] }).then((r) => console.log(JSON.stringify(r)))', hookPath, process.cwd()],
+      { env: { ...process.env, HOME: tmpHome, USERPROFILE: tmpHome }, encoding: 'utf8' },
+    );
+    assert.equal(child.status, 0, `child exited ${child.status}: ${child.stderr}`);
+    assert.equal(child.stdout.trim(), 'null', `expected null, got: ${child.stdout.trim()}`);
   } finally {
-    process.env.HOME = origHome;
     fs.rmSync(tmpHome, { recursive: true, force: true });
   }
 });