@bongos/core 1.19.691 → 1.19.693

package/docs/copy-registry.json

@@ -3,9 +3,9 @@
   "generator": "scripts/gds/copy-inventory.js",
   "goal": 1000074,
   "counts": {
-    "strings": 1761,
-    "unique_ids": 1523,
-    "certain": 1761,
+    "strings": 1759,
+    "unique_ids": 1521,
+    "certain": 1759,
     "heuristic": 0,
     "duplicate_ids": 165
   },
@@ -13,7 +13,7 @@
     "builders-hall": {
       "at": "modules/hall-ui/public",
       "files": 81,
-      "strings": 1282
+      "strings": 1280
     },
     "status-dashboard": {
       "at": "modules/status-ui/public",
@@ -2056,7 +2056,7 @@
       "surface": "builders-hall",
       "text": "A Full Idea answers five questions, so that someone else can deliver against it without having to interview you first. Open to every role — the score below is the only filter, and it counts substance, not who you are.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 107,
+      "line": 104,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -2416,7 +2416,7 @@
       "surface": "builders-hall",
       "text": "Answer the five questions and this spark becomes a Full Idea.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 586,
+      "line": 601,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -2726,15 +2726,6 @@
       "origin": "js-notice",
       "confidence": "certain"
     },
-    {
-      "id": "f0576990e9fc",
-      "surface": "builders-hall",
-      "text": "Blocker resolution",
-      "file": "modules/hall-ui/public/ideas.html",
-      "line": 81,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "118026595c16",
       "surface": "builders-hall",
@@ -3748,7 +3739,7 @@
       "surface": "builders-hall",
       "text": "Could not load idea {…}.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 629,
+      "line": 644,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3793,7 +3784,7 @@
       "surface": "builders-hall",
       "text": "Could not load the idea template. Reload, or file from the terminal with capture.js.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 611,
+      "line": 626,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -3820,7 +3811,7 @@
       "surface": "builders-hall",
       "text": "Could not load the queue just now.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 550,
+      "line": 565,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -4225,7 +4216,7 @@
       "surface": "builders-hall",
       "text": "Counted, not judged: each question is worth the same, and earns its share in proportion to how much real text it carries. Whitespace and padding score nothing.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 167,
+      "line": 164,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4351,7 +4342,7 @@
       "surface": "builders-hall",
       "text": "Develop this idea",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 585,
+      "line": 600,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -4360,7 +4351,7 @@
       "surface": "builders-hall",
       "text": "Developing a Big Idea Spark",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 119,
+      "line": 116,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4396,7 +4387,7 @@
       "surface": "builders-hall",
       "text": "Discard draft",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 145,
+      "line": 142,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4828,7 +4819,7 @@
       "surface": "builders-hall",
       "text": "File it",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 99,
+      "line": 96,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4855,7 +4846,7 @@
       "surface": "builders-hall",
       "text": "File this idea",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 144,
+      "line": 141,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -4954,7 +4945,7 @@
       "surface": "builders-hall",
       "text": "Five questions, and a score that counts how much of each you actually answered.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 621,
+      "line": 636,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5188,7 +5179,7 @@
       "surface": "builders-hall",
       "text": "Goals could not be loaded. Refresh to try again.",
       "file": "modules/hall-ui/public/goals-page.js",
-      "line": 890,
+      "line": 896,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -5930,15 +5921,6 @@
       "origin": "js-text-assign",
       "confidence": "certain"
     },
-    {
-      "id": "19ad2430937d",
-      "surface": "builders-hall",
-      "text": "Learning capture",
-      "file": "modules/hall-ui/public/ideas.html",
-      "line": 78,
-      "origin": "html-text",
-      "confidence": "certain"
-    },
     {
       "id": "7c9b7a89353b",
       "surface": "builders-hall",
@@ -6115,7 +6097,7 @@
       "surface": "builders-hall",
       "text": "Loading the five questions…",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 138,
+      "line": 135,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -6970,7 +6952,7 @@
       "surface": "builders-hall",
       "text": "Nothing is waiting. A spark appears here when its author offers a quick idea up for development.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 528,
+      "line": 543,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -7060,7 +7042,7 @@
       "surface": "builders-hall",
       "text": "One line. This is what the idea is called everywhere else.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 127,
+      "line": 124,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -7888,7 +7870,7 @@
       "surface": "builders-hall",
       "text": "Recent history could not be loaded right now.",
       "file": "modules/hall-ui/public/work.js",
-      "line": 1232,
+      "line": 1236,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8707,7 +8689,7 @@
       "surface": "builders-hall",
       "text": "Showing {…} of {…}.",
       "file": "modules/hall-ui/public/ideas.js",
-      "line": 532,
+      "line": 547,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -8752,7 +8734,7 @@
       "surface": "builders-hall",
       "text": "Sign in to filter to your goals",
       "file": "modules/hall-ui/public/goals-page.js",
-      "line": 867,
+      "line": 873,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -9022,7 +9004,7 @@
       "surface": "builders-hall",
       "text": "Suggested as you type; leave it on \"no goal\" and it waits for triage.",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 91,
+      "line": 88,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -9715,7 +9697,7 @@
       "surface": "builders-hall",
       "text": "The task list could not be loaded right now.",
       "file": "modules/hall-ui/public/work.js",
-      "line": 1297,
+      "line": 1301,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -10255,7 +10237,7 @@
       "surface": "builders-hall",
       "text": "Welcome, {…}. Claim and release tasks and follow work in progress — no terminal needed.",
       "file": "modules/hall-ui/public/work.js",
-      "line": 1223,
+      "line": 1227,
       "origin": "js-text-assign",
       "confidence": "certain"
     },
@@ -10597,7 +10579,7 @@
       "surface": "builders-hall",
       "text": "Write a Full Idea",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 106,
+      "line": 103,
       "origin": "html-text",
       "confidence": "certain"
     },
@@ -12055,7 +12037,7 @@
       "surface": "builders-hall",
       "text": "repro steps, context, anything that helps…",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 87,
+      "line": 84,
       "origin": "html-attr:placeholder",
       "confidence": "certain"
     },
@@ -12361,7 +12343,7 @@
       "surface": "builders-hall",
       "text": "via goal",
       "file": "modules/hall-ui/public/dom-utils.js",
-      "line": 322,
+      "line": 364,
       "origin": "js-markup",
       "confidence": "certain"
     },
@@ -12397,7 +12379,7 @@
       "surface": "builders-hall",
       "text": "what the idea is, in one line",
       "file": "modules/hall-ui/public/ideas.html",
-      "line": 130,
+      "line": 127,
       "origin": "html-attr:placeholder",
       "confidence": "certain"
     },

package/docs/module-api-changelog.md

@@ -1841,5 +1841,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.689 with no explicit bump. run 34727464797. (task 1002620)
   1.19.691 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.690 with no explicit bump. run 34729018766. (task 1002620)
+  1.19.692 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.691 with no explicit bump. run 34730821372. (task 1002620)
+  1.19.693 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.692 with no explicit bump. run 34731402927. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/hall-ui/public/dom-utils.js

@@ -120,6 +120,48 @@
     return list && list.length ? list.slice() : ['engineer', 'ideator'];
   }
 
+  // Fill a Kind <select> from the vocabulary the SERVER serves (GET /me
+  // `task_kinds`, sourced from the lifecycle port's VALID_KINDS) — task 1003453.
+  // The board and the goals page each carried their own hardcoded copy and both
+  // had gone stale against the DB CHECK: 'verify' tasks existed, were claimable,
+  // and could not be filtered for on either. One filler here is what stops a
+  // third copy being the easiest option, the same reasoning `disciplines()`
+  // above was written on.
+  //
+  // Leading '— any —' is the page's own markup and is KEPT (`sel.length = 1`,
+  // the populateGoalFilter idiom). An absent or empty list leaves the select
+  // with just that row rather than a wrong list — an older server that serves no
+  // vocabulary should offer no lens, not a stale one.
+  // `keepFirst` is how many markup options survive: 1 for a FILTER, whose leading
+  // '— any —' belongs to the page, and 0 for a FILING select, which is cleared and
+  // rebuilt — its markup option is the degraded fallback that still lets someone
+  // file if the read never lands. `label` names a kind for a reader (the filters
+  // show the raw value, as their literals did; the filing select shows kindLabel).
+  function fillKindFilter(sel, kinds, { keepFirst = 1, label = (k) => k, selected = null } = {}) {
+    if (!sel) return;
+    const list = Array.isArray(kinds) ? kinds.filter((k) => typeof k === 'string' && k) : [];
+    if (!list.length) return; // no vocabulary served → leave the markup alone
+    const cur = sel.value;
+    sel.length = keepFirst;
+    for (const k of list) {
+      const opt = document.createElement('option');
+      opt.value = k;
+      opt.textContent = label(k);
+      sel.appendChild(opt);
+    }
+    // A refill must not drop the reader's pick; `selected` is the filing default.
+    const want = (cur && list.includes(cur)) ? cur : (list.includes(selected) ? selected : null);
+    if (want) sel.value = want;
+  }
+
+  // How a kind is named in a picker — 'blocker-resolution' → 'Blocker resolution'.
+  // The same shape disciplineLabel takes below, and it reproduces every label the
+  // hand-written <option> list in ideas.html carried, so no copy changes.
+  function kindLabel(k) {
+    const s = String(k || '').replace(/-/g, ' ');
+    return s ? s.charAt(0).toUpperCase() + s.slice(1) : '';
+  }
+
   // How a craft is named in a picker. An acronym stays upper-case ('ui' → 'UI');
   // anything else is Title Case, so a craft a module adds later needs no new entry.
   function disciplineLabel(d) {
@@ -324,6 +366,7 @@
 
   window.OTB = {
     escapeHtml, $, fmtNum, num, fmtInt, fmtCompact, fmtDate, rankLabel, toast, moduleOn, disciplines, disciplineLabel,
+    fillKindFilter, kindLabel, // task 1003453 — one Kind filler, all three surfaces
     errCode, errMessage, errDetails, // task 1002462 — ADR 0116 envelope readers
     contributeSettingsPanel, settingsPanels,
     contributeHallWidget, hallWidgets, hallWidgetIds,

package/modules/hall-ui/public/goals-page.js

@@ -862,6 +862,12 @@
     }
     try {
       state.me = await getJSON(`${API}/me`).catch(() => null);
+      // task 1003453 — the Kind lens is built from the served vocabulary.
+      // Optional-called on purpose: a browser holding an older cached dom-utils.js
+      // must lose one LENS, not the whole page. boot() is a single try block, so an
+      // unguarded call here throws before anything renders — which is exactly what
+      // it did to every goals render until this guard went in.
+      window.OTB.fillKindFilter?.($('#f-goal-kind'), state.me && state.me.task_kinds);
       // task 1828 — "My goals" needs an identity; disable it when signed out.
       const mineSel = $('#f-goal-mine');
       if (mineSel && !state.me) { mineSel.disabled = true; mineSel.title = 'Sign in to filter to your goals'; }
@@ -1028,9 +1034,10 @@
       ] },
     ],
     overflow: [
-      { id: 'f-goal-kind', label: 'Kind', options: [{ value: '', label: '— any —' },
-        'feature', 'bug', 'infra', 'refactor', 'spike', 'learning-capture',
-        'cleanup', 'decision', 'blocker-resolution', 'unclassified'] },
+      // task 1003453: filled from /me.task_kinds once boot lands it, never typed
+      // here — this copy had gone stale against the DB CHECK exactly as the
+      // board's had, so 'verify' work could not be filtered for on either.
+      { id: 'f-goal-kind', label: 'Kind', options: [{ value: '', label: '— any —' }] },
       { id: 'f-goal-discipline', label: 'Discipline', options: [{ value: '', label: '— any —' }, 'engineer', 'artist', 'ideator', 'ui', 'unclassified'] },
       { id: 'f-goal-newcomer', label: 'Newcomer', options: [{ value: '', label: '— any —' }, { value: 'yes', label: 'newcomer-friendly only' }] },
       { id: 'f-goal-fit', label: 'Run mode', options: [{ value: '', label: '— any —' },

package/modules/hall-ui/public/ideas.html

@@ -69,17 +69,14 @@
                    placeholder="what's wrong, or what you'd like to see">
 
             <label class="fi-label" for="fq-kind">Kind</label>
+            <!-- task 1003453: the options are FILLED from /me.task_kinds at boot
+                 (ideas.js), not written here. This markup used to spell the whole
+                 vocabulary and had gone stale against the DB CHECK exactly as the
+                 two board filters had — a third copy nobody was watching. The one
+                 option left is the degraded fallback: if the read never lands, a
+                 bug can still be filed. -->
             <select id="fq-kind" class="fi-input">
               <option value="bug" selected>Bug</option>
-              <option value="feature">Feature</option>
-              <option value="infra">Infra</option>
-              <option value="refactor">Refactor</option>
-              <option value="spike">Spike</option>
-              <option value="learning-capture">Learning capture</option>
-              <option value="cleanup">Cleanup</option>
-              <option value="decision">Decision</option>
-              <option value="blocker-resolution">Blocker resolution</option>
-              <option value="unclassified">Unclassified</option>
             </select>
 
             <label class="fi-label" for="fq-body">Details <span class="fi-hint">(optional)</span></label>

package/modules/hall-ui/public/ideas.js

@@ -508,6 +508,21 @@
       // The picker degrades to "homeless only" — filing itself never depends
       // on this read succeeding.
     }
+
+    // task 1003453 — the kind vocabulary, so this select is not a third hardcoded
+    // copy. Its OWN try, deliberately not folded into the Promise.all above: the
+    // goal picker is what this form is FOR and the kind list is cosmetic, so a
+    // vocabulary read must never be able to take the picker down with it. (It can:
+    // put it in that Promise.all and one rejection strands buildingVersionIds and
+    // allOpenGoals in the shared catch — two suites caught exactly that.)
+    // keepFirst 0 clears the markup's fallback and rebuilds with the served list,
+    // keeping 'bug' as the default this form has always opened on.
+    try {
+      const meRes = await api.me.getMe({});
+      window.OTB.fillKindFilter?.(fqKindEl(), meRes.ok && meRes.data && meRes.data.task_kinds, {
+        keepFirst: 0, label: window.OTB.kindLabel, selected: 'bug',
+      });
+    } catch (_) { /* the markup's Bug option stands — a report can still be filed */ }
   }
 
   // ---------------------------------------------------------------------------

package/modules/hall-ui/public/work.js

@@ -1217,6 +1217,10 @@
       throw err;
     }
     viewer.id = me?.builder?.id ?? null;
+    // task 1003453 — the Kind lens, from the served vocabulary. Optional-called so an
+    // older cached dom-utils.js costs one lens, not the board; see OTB.fillKindFilter.
+    window.OTB.fillKindFilter?.($('#f-kind'), me?.task_kinds);
+    restoreUrlFilter('f-kind'); // a shared URL's kind applies once the options exist
     const sub = $('#work-sub');
     if (sub) {
       const name = me?.builder?.display_name || me?.builder?.github_login || 'builder';
@@ -1364,13 +1368,9 @@
       ],
       overflow: [
         { id: 'f-goal', label: 'Goal', options: [{ value: '', label: '— all goals —' }] },
-        {
-          id: 'f-kind',
-          label: 'Kind',
-          options: [{ value: '', label: '— any —' },
-            'feature', 'bug', 'infra', 'refactor', 'spike', 'learning-capture',
-            'cleanup', 'decision', 'blocker-resolution', 'unclassified'],
-        },
+        // task 1003453: FILLED from /me.task_kinds at boot, never typed here — the
+        // literal was stale against the DB CHECK, so 'verify' was unfilterable.
+        { id: 'f-kind', label: 'Kind', options: [{ value: '', label: '— any —' }] },
         {
           id: 'f-newcomer',
           label: 'Newcomer',

package/modules/lifecycle/lifecycle.js

@@ -37,6 +37,12 @@ module.exports = {
   // (consumer: core cascade-dispatch.js, the dormant System-3 lib).
   get VOTABLE_TASK_STATUSES() { return classifier.VOTABLE_TASK_STATUSES; },
   classifyTaskKind: (...a) => classifier.classifyTaskKind(...a),
+  // TASK_KINDS: the kind vocabulary, as an ordered array (consumer: GET /me,
+  // which hands it to the hall so a filter can be BUILT from it instead of
+  // retyped — task 1003453). VALID_KINDS is a Set and Sets do not survive
+  // JSON.stringify, so the port hands over the array rather than making every
+  // caller remember to spread it.
+  get TASK_KINDS() { return [...classifier.VALID_KINDS]; },
   // suggestGoalForCapture: ONE goal for a filing that named none, or null (task
   // 1003067). Consumer: the discord #bugs vector, which files through the ideas
   // routing path and needs a home to offer it. Lives behind the port because

package/modules/lifecycle/routes/tasks.js

@@ -56,6 +56,10 @@ const { branding } = api;
 // above the 20 MB decoded ceiling. The decoded bytes are re-checked in the
 // handler (the JSON `limit` only bounds the ENCODED payload — SR-17 posture).
 const PUBLISH_BODY_LIMIT = '32mb';
+// The grade body is committed_files (one entry per changed path) + the panel's findings.
+// 1 MB covers a repo-wide change with room to spare and still bounds the route; the global
+// 64 KB cap is skipped for this path in src/bongos/routes.js. See task 1003850.
+const GRADE_BODY_LIMIT = '1mb';
 const PUBLISH_BUNDLE_B64_MAX = 30 * 1024 * 1024;   // validator guard on the b64 string
 const PUBLISH_BUNDLE_MAX_BYTES = 20 * 1024 * 1024; // 20 MB decoded bundle
 
@@ -881,6 +885,11 @@ module.exports = function buildTasksRouter() {
     }
   });
 
+  // Declared ABOVE the doc-comment on purpose: gen-api-docs.js reads only the `//`
+  // lines immediately preceding `router.post(`, so a const wedged between them blanks
+  // this endpoint's whole description in docs/api-reference.md and openapi.json.
+  const gradeUpload = express.json({ limit: GRADE_BODY_LIMIT });
+
   // GDS-V3 task V3.R18 (#209). Subagent grader credits gate.
   //
   // ship.js (or any caller) spawns an Opus subagent against the diff + task
@@ -905,7 +914,7 @@ module.exports = function buildTasksRouter() {
   // rank: any-builder — grader writes a row + auto-promotes only if grade clears
   // threshold; the grader subagent is the objectivity guarantee. Supervisor hot
   // path (preserved per CRITICAL §4 — no requireRank).
-  router.post('/tasks/:id/grade', auth.requireBuilder, async (req, res) => {
+  router.post('/tasks/:id/grade', auth.requireBuilder, gradeUpload, async (req, res) => {
     // Permissive on subagent_output type — the grader handles both object AND
     // JSON-string forms (see tests/grader.mjs "accepts JSON-string input").
     // Only enforce presence + light shape on signals (extras pass through).

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.691",
+  "version": "1.19.693",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.691",
+      "version": "1.19.693",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.691",
+  "version": "1.19.693",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/scripts/gds/ship-grade.js

@@ -111,10 +111,34 @@ function computeChangedFiles(baseline) {
   return out ? out.split('\n').map((s) => s.trim()).filter(Boolean) : [];
 }
 
+// How much diff we are willing to CAPTURE. Distinct from GRADER_DIFF_CHAR_CAP, which is
+// how much we are willing to SHOW the panel: the capture has to succeed first, and a
+// capture that FAILS is indistinguishable from "nothing changed" unless we look.
+const DIFF_CAPTURE_MAX_BYTES = 512 * 1024 * 1024;
+
 function computeDiffText(baseline) {
   if (!baseline) return '';
   // -M to track renames; --no-color so the subagent gets clean diff lines.
-  const diff = gitOk(`git diff --no-color -M ${baseline}...HEAD`);
+  //
+  // maxBuffer is set EXPLICITLY, and that is the whole point of this function. execSync
+  // defaults to 1 MB and gitOk swallows the resulting ENOBUFS as null, so a large change
+  // silently produced an EMPTY diff: the panel then graded a zero-character string and
+  // would have returned a verdict on nothing at all, reporting diff_chars=0 in a log line
+  // that reads like an ordinary stat rather than an error. A 1,141-file rename (task
+  // 1003705) measured 9,808,703 chars and is what surfaced it; every big change had the
+  // same hole. The GRADER_DIFF_CHAR_CAP truncation below still bounds what the subagent is
+  // asked to read — this only stops the capture itself from failing.
+  const diff = gitOk(`git diff --no-color -M ${baseline}...HEAD`, { maxBuffer: DIFF_CAPTURE_MAX_BYTES });
+  if (diff === null) {
+    // Capture failed even at that size. Fall back to the stat summary so the panel gets the
+    // SHAPE of the change and can Read any file in its post-resolve state — strictly better
+    // than an empty string, which reads as "no changes" and grades as a pass.
+    // gitOk returns null ONLY on failure; a genuinely empty diff comes back as ''.
+    const stat = gitOk(`git diff --no-color -M --stat ${baseline}...HEAD`, { maxBuffer: 64 * 1024 * 1024 });
+    return stat
+      ? `[diff too large to capture in full — stat summary only. Read any file for its post-resolve state.]\n\n${stat}`
+      : '';
+  }
   if (!diff) return '';
   if (diff.length > GRADER_DIFF_CHAR_CAP) {
     const head = diff.slice(0, GRADER_DIFF_CHAR_CAP);
@@ -147,11 +171,25 @@ function diffHash(rawDiff) {
 }
 
 // Compute the hash of the full (untruncated) diff against baseline. Returns
-// null when baseline is unavailable so callers can treat null as "unknown".
+// null when baseline is unavailable, OR when the diff cannot be captured, so
+// callers can treat null as "unknown".
+//
+// SAME BUFFER BUG AS computeDiffText, AND A WORSE CONSEQUENCE. This ran gitOk at
+// execSync's default 1 MB, so a large diff came back null and the old
+// `diffHash(raw || '')` hashed the EMPTY STRING — the same fixed SHA-256 for every
+// large diff. shouldReuseGrade compares that hash against the stored grade's
+// diff_hash, so two genuinely different large diffs on one task collided and a stale
+// PASS could be reused on changed code, skipping the panel outright. That is the
+// silent-pass failure this task exists to remove, reappearing in the reuse path.
+//
+// Returning null on a failed capture is the fail-safe answer, not a cosmetic one:
+// shouldReuseGrade already refuses a falsy currentDiffHash, so "unknown" now means
+// "run the panel", where "" meant "matches every other unknown".
 function computeRawDiffHash(baseline) {
   if (!baseline) return null;
-  const raw = gitOk(`git diff --no-color -M ${baseline}...HEAD`);
-  return diffHash(raw || '');
+  const raw = gitOk(`git diff --no-color -M ${baseline}...HEAD`, { maxBuffer: DIFF_CAPTURE_MAX_BYTES });
+  if (raw === null) return null; // capture failed — never collapse that to hash('')
+  return diffHash(raw);
 }
 
 // Pure predicate: should we reuse the stored grade instead of running the

package/src/bongos/routes/me.js

@@ -433,6 +433,14 @@ module.exports = function buildMeRouter() {
       // builder is uncapped (no cap set — the default; ADR 0085), in which case
       // level is always 'ok'. The whole object is null only if the read errored.
       cost: costStatus,
+      // task 1003453: the task-kind vocabulary, so a surface that offers a kind
+      // filter BUILDS it from the enum instead of retyping it. The board and the
+      // goals page each carried their own hardcoded copy, and both had gone stale
+      // against the DB — 'verify' existed, was claimable, and could not be
+      // filtered for. The lifecycle port's VALID_KINDS is the SSOT; [] when the
+      // lifecycle module is off, which reads as "no vocabulary served" and leaves
+      // the filter with just its '— any —' row rather than a wrong list.
+      task_kinds: lc() ? lc().TASK_KINDS : [],
       // task 1268: the per-builder "wandering" knob, resolved to an effective
       // level (clamped by rank) + its behavior contract. The Conductor + the
       // /settings UI read this; the builder-settings port's describeWandering is

package/src/bongos/routes.js

@@ -94,7 +94,15 @@ function buildGdsRouter() {
       // task 1003109: the ship-time task visual — a base64 image up to ~5.3 MB
       // encoded (4 MB decoded). Same dynamic-:id pattern as publish-branch above;
       // modules/lifecycle/routes/task-visuals.js mounts its own 8 MB parser.
-      /^\/tasks\/\d+\/visual$/.test(req.path)
+      /^\/tasks\/\d+\/visual$/.test(req.path) ||
+      // task 1003850: the grade body carries committed_files — EVERY changed path, tens of
+      // KB on its own for a mass change — plus the panel's findings. A 1,141-file rename
+      // (task 1003705) produced a body over the 64 KB cap, so the grade could not be
+      // recorded at all (413 payload_too_large) and fully verified work stranded at
+      // 'completed'. The list is NOT trimmable to fit: modules/grading/grader-score.js runs
+      // the server-side permission-path pre-pass against it (SR-9 / SEC #863), so a short
+      // list would quietly weaken a security check rather than merely lose detail.
+      /^\/tasks\/\d+\/grade$/.test(req.path)
     ) return next();
     return globalJson(req, res, next);
   });

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.691'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.693'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');