@bongos/core 1.24.58 → 1.24.60

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/bongos/package-core.js",
-  "core_version": "1.24.58",
-  "core_contract": "1.24.58",
-  "source_commit": "5d0373a2fc9f96cfacd4488757826a5ebd6942b4",
+  "core_version": "1.24.60",
+  "core_contract": "1.24.60",
+  "source_commit": "fef925d217da9148be0808c73ee46288043dc2de",
   "source_ref": "HEAD",
-  "built_at": "2026-11-07T14:15:06.231Z",
+  "built_at": "2026-11-07T15:39:07.882Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 638,
     "agent_docs_stubbed": 32,
-    "functional_verbatim": 3897,
+    "functional_verbatim": 3900,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 4568,
-  "tree_sha256": "e12981ebf9b882c4a0e83b648d1b5319525ddb38ab10765143743eef0b9a1f2e",
+  "file_count": 4571,
+  "tree_sha256": "02fb38f9111b66794f346c5bb82422a3f315f456b1c9d73a5b3eb1c136097fc1",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -2472,7 +2472,7 @@
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "351c01f41d4149c64f3b729f2fb55c7ba52e7202cc97c8621f120ba95f7c9fd6"
+      "sha256": "58b03efd477eb60e66022cce2e4adda65a359d20ee992c6bceb3320a995322c5"
     },
     {
       "path": "docs/branding-contract.md",
@@ -3007,7 +3007,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "51ac2ca6bc7322d551ec3374877f213009191c23df9f967f5a7b0996a17fb7d3"
+      "sha256": "71913622d0d94c4120e620d5aea32ff476a6e879c5e166da3144eedc75619dda"
     },
     {
       "path": "docs/modules-contract.md",
@@ -3097,7 +3097,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "73b2e41788d1a41b8ccc2bdda733cf9cd136aeb44b7b5f972184dc807ff4e5a2"
+      "sha256": "16e8909e4de1207587056fece1ee2fc2455778f569d3338043fd6bc5eb05543d"
     },
     {
       "path": "docs/project-context.template.md",
@@ -3192,7 +3192,7 @@
     {
       "path": "docs/recipes/ops-gotchas.md",
       "mode": "0000644",
-      "sha256": "6baf5e52b156463f928d084b6eb9f0974d9a9e620d4eb40802cad3f42f5d1982"
+      "sha256": "99193931238d13b50918ddc794136a3f5a499ef384cd5ff227c64a5cbb5dc116"
     },
     {
       "path": "docs/recipes/overnight-builder.md",
@@ -11332,7 +11332,7 @@
     {
       "path": "modules/status-ui/public/style.css",
       "mode": "0000644",
-      "sha256": "22d0198fb04024732ea119397c1d63163d1293811232d19c3cc1ccecba9c51df"
+      "sha256": "84b2a0c1e49eef8a7f87a586f250afce3a7c89d54a4211a0ac52820e3de63929"
     },
     {
       "path": "modules/ui-design/CLAUDE.md",
@@ -11702,12 +11702,12 @@
     {
       "path": "modules/ui-design/public/brand.css",
       "mode": "0000644",
-      "sha256": "02e8b06b640a7eebd905ecac18bde4b22b5718c0cde8d6abe3c99b17f6230e96"
+      "sha256": "4d80b05a7f569217a96df00e2c11a8005e540730d67ea94f0d2fa7fe66303343"
     },
     {
       "path": "modules/ui-design/public/brand.html",
       "mode": "0000644",
-      "sha256": "718ed7bf511946f9878a894d6019cf5ae667b970c7e45371515c357310ceb9fb"
+      "sha256": "9bd01c16060a9624f3f1e0e4467ca7b4da4df3b7527c8b005a669b331b171d1a"
     },
     {
       "path": "modules/ui-design/public/brand.states.json",
@@ -11759,6 +11759,11 @@
       "mode": "0000644",
       "sha256": "e168fdd0f4ac94754af089e7240be7cbba46704b36a617252f2942c97e8835e2"
     },
+    {
+      "path": "modules/ui-design/public/brand/png-sources.json",
+      "mode": "0000644",
+      "sha256": "6181696f80b70fab9daadc14f77963093223387ecff5d4f13b9e1f63e1c6ad6f"
+    },
     {
       "path": "modules/ui-design/public/tokens.css",
       "mode": "0000644",
@@ -11777,7 +11782,7 @@
     {
       "path": "modules/ui-design/scripts/gen-design-reference.js",
       "mode": "0000644",
-      "sha256": "f372163aa83a75e5d9ec5650d28e6a1c11a43c084a5db16d4284bbd60b68e70e"
+      "sha256": "d59b046a2aabda513d2d580a574c74ae43b04e97c847315c16eaa2ab50144ffb"
     },
     {
       "path": "modules/ui-design/scripts/gen-design-tokens.js",
@@ -11897,17 +11902,17 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "ff15a28e3b58b826fdf033ea0320275c687447782431dfe1e0932d36731af282"
+      "sha256": "dfea60d54c9a25b94f32d02e56aecb552db65f0a68d3ca9470db04acbd8b3fd3"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "8e6ce0901458e4035f4387b5bccff0893029342324492322e44f00a5be1689db"
+      "sha256": "fe9083b4b86df7ab6427311717f99a1bba6d8c7e079e2f37c32b4722a3bc4186"
     },
     {
       "path": "public-docs/index.html",
       "mode": "0000644",
-      "sha256": "e2be4b4b58abe21333727c23fd953a238edb4c8e6c087e2aacbfbef0271a496a"
+      "sha256": "6ec35589784910e09c362401b3e0468b90cbe58c56754d6e6d7e4353a8083444"
     },
     {
       "path": "public-docs/redoc.standalone.js",
@@ -11922,7 +11927,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "6fc3843a52303a6b7759157432db6166ef692a9d5fba2b51cb2d078788caa3f1"
+      "sha256": "2735b7f5e5d4c0bf2b24fc78d79738c5b57a9eaf4734823a79e67ea8e0fb39b2"
     },
     {
       "path": "scripts/bongos/CLAUDE.md",
@@ -12262,7 +12267,7 @@
     {
       "path": "scripts/bongos/css-literal-scan.js",
       "mode": "0000644",
-      "sha256": "8da46806402a840192f29f93d98afd6b5018715f6fd4ce6fbe060e23ffc977de"
+      "sha256": "1dbcdb46cfd195c1080bdd37bc8337b0926cd5f6e281cd131656801f6c92b236"
     },
     {
       "path": "scripts/bongos/cutover-codemod.js",
@@ -12297,7 +12302,7 @@
     {
       "path": "scripts/bongos/design-generators-fresh.js",
       "mode": "0000644",
-      "sha256": "f417e0ffcc884b018748a7f17062f52a6f247b8364ea4471efc97dd476143db3"
+      "sha256": "a51d725286fa198505ff57ceceb50412ffa18e9f659c88cbe01d501bac8da9f5"
     },
     {
       "path": "scripts/bongos/design-sync.js",
@@ -12517,7 +12522,7 @@
     {
       "path": "scripts/bongos/gen-brand.js",
       "mode": "0000644",
-      "sha256": "529c51487ccf9e5b302fd361343224db202f1d1f9726b7e2bfe2864dd54b34ca"
+      "sha256": "bc3ce6eebc646e7f2359ef2495a99878e060d7b41c27673833d824d428a379bd"
     },
     {
       "path": "scripts/bongos/gen-diagrams.js",
@@ -15302,7 +15307,7 @@
     {
       "path": "scripts/status-mirror-sync.js",
       "mode": "0000644",
-      "sha256": "be3152e3d9afc3c6ef81a8e059ef0b24e717b52bffd2a4f00f5df0bccb70516a"
+      "sha256": "41628e240bb4f5c9840f1ce3839d1a299df8cacd54b2706f4151dcda53e7495b"
     },
     {
       "path": "src/asset-version.js",
@@ -15672,7 +15677,7 @@
     {
       "path": "src/bongos/routes/auth.js",
       "mode": "0000644",
-      "sha256": "1591c366d5504c821d7a2dc31d160b09733ad8b51abbece6188da6f6f8e9f6b3"
+      "sha256": "6348ee00e6e60d899f3e98bc55a75e6b3f88562fcda7a1655a4d4df1c2273393"
     },
     {
       "path": "src/bongos/routes/backup.js",
@@ -15807,12 +15812,12 @@
     {
       "path": "src/bongos/serve-internal.js",
       "mode": "0000644",
-      "sha256": "2eb8bc66efdb69b965baae62bf6e2271910da8f791fb0dc39f7a5fc7ef5594a3"
+      "sha256": "0d5a45ed0f8b8f907169a886504749887a659fbd2bdff23c28fa8146c3742a05"
     },
     {
       "path": "src/bongos/sign-in-pages.js",
       "mode": "0000644",
-      "sha256": "c8cb78f67fce5c42bbe896207d1a0d323215592a36c5d231d7f586e41479b409"
+      "sha256": "cfd8a09da90e8f2a176e94c960736bbb295c216a1d6bf1f8027f7f0ce1ceacc8"
     },
     {
       "path": "src/bongos/software-update.js",
@@ -15832,7 +15837,7 @@
     {
       "path": "src/brand-mark.js",
       "mode": "0000644",
-      "sha256": "bd45563a5fe3cf9aee5dfddffd8d34d8898842e3871280b3fe924ec9fe7a4c16"
+      "sha256": "5484f9ff087a0d28d076f5079c49aaa55e704ba52e60be03a9454e3b8fc4b3c8"
     },
     {
       "path": "src/branding.js",
@@ -15847,7 +15852,7 @@
     {
       "path": "src/error-page.js",
       "mode": "0000644",
-      "sha256": "08fc77867dd4f9709cbf1983dabcddfd0e8835c728695a71762ac8ec106f1e66"
+      "sha256": "ddfd55f0581a32e31b26624e0e981b1768af896f7edc962bc1779eb05f64ccba"
     },
     {
       "path": "src/hall-look.js",
@@ -15872,7 +15877,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "fda44df6daf88d610dcbfb9d9c9f98e4da9d00cc09759adebfe7e598daa845b4"
+      "sha256": "66eed53ac99b04f6c4c0b5e33b13b44c2b1d53239198bf8b41fe13a454d866d9"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -15939,6 +15944,11 @@
       "mode": "0000644",
       "sha256": "1565fab25ca23066a460ef35f3693a56186fdc03f5461d3fc891b528d185885c"
     },
+    {
+      "path": "src/theme-markup.js",
+      "mode": "0000644",
+      "sha256": "7efca13206ba049b5958bcfdbb674e14e67ff4e8c1ddb33f0729bcbd6de4624f"
+    },
     {
       "path": "tests/abandon_creator_authz.mjs",
       "mode": "0000644",
@@ -16662,12 +16672,12 @@
     {
       "path": "tests/brand_mark.mjs",
       "mode": "0000644",
-      "sha256": "2b052667e604a1b0570353c2ce09016b7dd8716dee0acf8fa982d380dc8ec641"
+      "sha256": "68ff85560c05b7426139527cea3832429e17da4b64c96bbc26ba46c02305d97e"
     },
     {
       "path": "tests/brand_surfaces.mjs",
       "mode": "0000644",
-      "sha256": "6c8a84bda7dc9bfa4e10eadc6a9e489ba9847bd632f10eda0cafe33bcbcdcb63"
+      "sha256": "26684884f85c8ad99966ae4f7713552cc12709c0d41100b3d7a5b60b8d50c9af"
     },
     {
       "path": "tests/branding.mjs",
@@ -17402,12 +17412,12 @@
     {
       "path": "tests/design_counts_ratchet.mjs",
       "mode": "0000644",
-      "sha256": "99d6c3b98b6ec839fe4b4856ab081bc6b19e96a39b4db4be0c155eb2e09e4ed0"
+      "sha256": "3e7457685c915d01d11ba4dd1481e726f82c83a3ce481f5190893e4b0636b7bc"
     },
     {
       "path": "tests/design_reference.mjs",
       "mode": "0000644",
-      "sha256": "64a500720aa3d0179700366ce948a93a84dcf4e975a4e261ff95eb6575412c0e"
+      "sha256": "809766d9baedf5ed420935d3c94c7e1bcb27cfd46c307792cd556ea7eb4f24af"
     },
     {
       "path": "tests/design_tokens_generated.mjs",
@@ -22814,6 +22824,11 @@
       "mode": "0000644",
       "sha256": "486bb5b4af30db3ab3a6a0f047edf60a9d4ec5a70cb1c19cebbd1fcd89578799"
     },
+    {
+      "path": "tests/wordmark_and_faces.mjs",
+      "mode": "0000644",
+      "sha256": "bb1ac8d5fd24e2ea073b768298acbe4bcc55ca5f2e25d36d9904fdcd18037ac8"
+    },
     {
       "path": "tests/work_board_live_refresh.mjs",
       "mode": "0000644",

package/docs/architecture.md

@@ -456,7 +456,7 @@ markdown describes, the DB enforces.**
 
 - **the apex root itself** — the public front door (`/`, `/projects`, `/create`, `/privacy`, `/terms`, `/contact`). **Carved to the `public-landing` module in task 1003322** ([ADR 0218](adr/0218-the-apex-root-web-surface.md)): the surface moved from repo-root `public-landing/` to `modules/public-landing/public/` and is a loader-discovered web-surface module — the THIRD, and the first that is not a subdomain. Where `hall-ui`/`status-ui` declare a Host PREFIX, this one declares `{ apexRoot: true, dir }`, because the apex is whatever host is left once the subdomains are taken (`isApexHost` = `!isStatusHost && !isBuildersHost`); `host: ""` is rejected, since `host.startsWith("")` is true for every host and would swallow the other two surfaces. Like the hall it keeps its **dedicated** serving block — in `src/platform-server.js`, now resolving its root through `moduleWebSurfaces()` by the `apexRoot` predicate rather than a hardcoded path — so the apex-only sentinel strip, the brand-token stamp and the `?v=` content stamp are unchanged. Disable the module and the front door vanishes: every route falls through to the game-less 404 tail. Served bytes are identical across the carve apart from the module's own `window.__MODULES__` entry.
 - **`example.com`** — game (Phaser + Colyseus). Static files from `public/`. `/builders` + `/builders/*` now **301-redirect to `builders.example.com/<rest>`** ([#739](https://example.com/builders#/task/739) then promoted to permanent 301 in [#741](https://example.com/builders#/task/741), ADR 0036 cutover); the apex no longer serves the builder surface directly.
-- **`status.example.com`** — public build dashboard. **Carved to the `status-ui` module in BV1.R84** ([ADR 0093](adr/0093-tranche-2-core-carve-sequence.md) §1): the surface moved from `public-status/` to `modules/status-ui/public/`, now served by the loader's web-surface seam (`moduleWebSurfaces` → `serve-internal.js`, routed on the `status.` Host prefix the manifest declares) instead of a hardcoded block — no behavior change. Layout reorganized in [#726](https://example.com/builders#/task/726) (ADR 0036): Pulse / Watch(uptime) / Architects / Works / Treasury / Lately Inscribed / The World — the grade-aggregate, estimation-drift, and repo-health tablets moved to the Archon `/watch` page. **⚠ Served OFF the droplet** (ADR 0029, outage resilience): the live page is **GitHub Pages from the separate repo `example-owner/example-status`** (CNAME → Fastly), reading data cross-origin from the droplet's `/api/bongos/public/*` (CORS open) and an availability banner from the prober's `status-data` branch. The droplet still serves `modules/status-ui/public/` (on the `status.` host) as a same-origin fallback, but **DNS points at Pages, not the droplet** — so a droplet deploy does NOT update the live page. Changes to the surface publish to the mirror via `scripts/status-mirror-sync.js` (re-pointed at `modules/status-ui/public/`; status.js/style.css/cursors are byte-identical copies; index.html gets the off-box bits injected), run automatically by `.github/workflows/sync-status-mirror.yml` (needs the `STATUS_MIRROR_TOKEN` secret) ([#737](https://example.com/builders#/task/737)). **⚠ FOLLOW-UP (R84):** that workflow's path trigger still watches `public-status/**` and must be re-pointed at `modules/status-ui/public/**` by an owner/Archon — the GitHub App can't push `.github/workflows/*` (learning 107), so until then the mirror sync won't auto-fire on future status edits.
+- **`status.example.com`** — public build dashboard. **Carved to the `status-ui` module in BV1.R84** ([ADR 0093](adr/0093-tranche-2-core-carve-sequence.md) §1): the surface moved from `public-status/` to `modules/status-ui/public/`, now served by the loader's web-surface seam (`moduleWebSurfaces` → `serve-internal.js`, routed on the `status.` Host prefix the manifest declares) instead of a hardcoded block — no behavior change. Layout reorganized in [#726](https://example.com/builders#/task/726) (ADR 0036): Pulse / Watch(uptime) / Architects / Works / Treasury / Lately Inscribed / The World — the grade-aggregate, estimation-drift, and repo-health tablets moved to the Archon `/watch` page. **⚠ Served OFF the droplet** (ADR 0029, outage resilience): the live page is **GitHub Pages from the separate repo `example-owner/example-status`** (CNAME → Fastly), reading data cross-origin from the droplet's `/api/bongos/public/*` (CORS open) and an availability banner from the prober's `status-data` branch. The droplet still serves `modules/status-ui/public/` (on the `status.` host) as a same-origin fallback, but **DNS points at Pages, not the droplet** — so a droplet deploy does NOT update the live page. Changes to the surface publish to the mirror via `scripts/status-mirror-sync.js` (re-pointed at `modules/status-ui/public/`; status.js/style.css/cursors are byte-identical copies; index.html gets the off-box bits injected) ([#737](https://example.com/builders#/task/737)). **⚠ Run by hand:** no workflow runs the sync — `.github/workflows/sync-status-mirror.yml` is not in this repo — so a status-surface change reaches the live page only when someone runs `node scripts/status-mirror-sync.js --repo-dir <mirror-checkout> --push` (task 1005131).
 - **`builders.example.com`** — dedicated builder surface (`isBuildersHost`, ADR 0036). **Carved to the `hall-ui` module in BV1.R85** ([ADR 0093](adr/0093-tranche-2-core-carve-sequence.md) §1): the surface moved from `public-builders/` to `modules/hall-ui/public/` (~13k LOC, the largest module) and is a loader-discovered web-surface module (`contributes.webSurfaces` host `builders.`). UNLIKE the generic status surface it keeps its **dedicated** serving block in `serve-internal.js` (`BUILDERS_DIR = modules/hall-ui/public/`), partitioned out of the generic web-surface loop on the `isBuildersHost` predicate. A thin rewrite shim maps every non-API path onto the existing `/builders/*` tree (so all serving + gating + asset-stamping is reused), serving the hall (`/`), the Metic+ **`/watch`** monitoring page (gated by `requireGovernmentPage`), **`/settings`** (Voices + Craft prefs), plus ranks/sessions/primer/diagrams. No behavior change — byte-identical (only `window.__MODULES__.enabled` gains `hall-ui:true`). **Additive** — until its DNS A record + cert are live, the whole surface stays reachable at `example.com/builders/*`. No `.github/workflows/*` follow-up: unlike R84, no workflow path-trigger watches `public-builders/**`.
 - The `/api/bongos/*` surface is reachable from every host. **Cross-subdomain sign-in:** the `gds_session` cookie is scoped to `.example.com` on the production hosts (apex/www/builders/status) and host-only on localhost/staging (no cross-env token bleed); the OAuth handshake runs on the canonical origin with a validated `?return=` (open-redirect-guarded) so the subdomain can land a builder back on itself.
 - Caddy gets a site block per host (`infra/Caddyfile` (instance-side)), all reverse-proxying to `127.0.0.1:3000`.

package/docs/module-api-changelog.md

@@ -3370,5 +3370,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.24.56 with no explicit bump. run 42379442367. (task 1002620)
   1.24.58 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.24.57 with no explicit bump. run 42380593295. (task 1002620)
+  1.24.59 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.58 with no explicit bump. run 42385816081. (task 1002620)
+  1.24.60 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.24.59 with no explicit bump. run 42387285187. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/docs/page-readings.json

@@ -5031,7 +5031,7 @@
       "surface": "status",
       "title": "{{productName}} — build status",
       "states_read": ["loaded"],
-      "files_hash": "10ee56cc01853b2d",
+      "files_hash": "5b546389375906c5",
       "reading_hash": "5abba39cf5ec9226",
       "counts": {"lines":66,"placed":47,"shared":9,"unplaced":10},
       "omitted": {"data":90},

package/docs/recipes/ops-gotchas.md

@@ -276,11 +276,11 @@ Inside the namespace the file lists as `---------- 1 root root 0`. The runner un
 
 ### The live status page is NOT served by the droplet — editing the status surface + deploying does nothing
 
-> **Path note (BV1.R84):** the status surface moved from `public-status/` to `modules/status-ui/public/` (carved to the `status-ui` web-surface module). Everything below applies at the new path; `scripts/status-mirror-sync.js` was re-pointed. **Open follow-up:** `.github/workflows/sync-status-mirror.yml` still triggers on `public-status/**` and must be re-pointed at `modules/status-ui/public/**` by an owner/Archon (the GitHub App can't push `.github/workflows/*`, learning 107) — until then the auto-sync won't fire and you must run the script by hand.
+> **Path note (BV1.R84):** the status surface moved from `public-status/` to `modules/status-ui/public/` (carved to the `status-ui` web-surface module). Everything below applies at the new path; `scripts/status-mirror-sync.js` was re-pointed. **No auto-sync:** `.github/workflows/sync-status-mirror.yml` is not in this repo and nothing in CI runs the sync — you must run the script by hand (task 1005131).
 
 - **Symptom:** you change `modules/status-ui/public/`, deploy to the droplet, the origin serves the new page (verified via `curl` on the box), but `status.example.com` keeps showing the old version. Purging Cloudflare doesn't help.
 - **Root cause:** the off-box move (ADR 0029) repointed `status.example.com` DNS at **GitHub Pages from the separate repo `example-owner/example-status`** (served by Fastly — headers say `server: GitHub.com`, `via: varnish`, **no `cf-*` headers** → Cloudflare isn't even in the path). The droplet still serves `modules/status-ui/public/` as a same-origin fallback, but the public DNS goes to Pages. There was no sync, so droplet edits never reached the live page.
-- **Fix:** publish to the mirror with `node scripts/status-mirror-sync.js --repo-dir <mirror-checkout> --push` — or (once the workflow trigger is re-pointed, see the path note above) let `.github/workflows/sync-status-mirror.yml` do it on push (needs the `STATUS_MIRROR_TOKEN` repo secret). `status.js`/`style.css`/`cursors/` are byte-identical copies (the one off-box difference, the API base, is injected via `window.STATUS_API_BASE` in the mirror's `index.html`); the sync injects the off-box banner + API-base script into `index.html` at fixed anchors and **throws if an anchor is missing** rather than mis-publishing. GitHub Pages purges its own Fastly cache on deploy, so the live page updates ~1 min after the Pages build goes green (`gh api repos/example-owner/example-status/pages/builds/latest`). ([#737](https://example.com/builders#/task/737))
+- **Fix:** publish to the mirror with `node scripts/status-mirror-sync.js --repo-dir <mirror-checkout> --push` (by hand — no workflow runs it, see the path note above). `status.js`/`style.css`/`cursors/` are byte-identical copies (the one off-box difference, the API base, is injected via `window.STATUS_API_BASE` in the mirror's `index.html`); the sync injects the off-box banner + API-base script into `index.html` at fixed anchors and **throws if an anchor is missing** rather than mis-publishing. GitHub Pages purges its own Fastly cache on deploy, so the live page updates ~1 min after the Pages build goes green (`gh api repos/example-owner/example-status/pages/builds/latest`). ([#737](https://example.com/builders#/task/737))
 - **Why it bites:** the origin looks correct at every layer you can `curl` from the box, so you chase a phantom cache on the wrong CDN. The tell is the response headers — `server: GitHub.com` + Fastly, not `cloudflare`.
 
 ---

package/modules/status-ui/public/style.css

@@ -250,11 +250,14 @@ a:hover { text-decoration-color: currentColor; }
   /* drawn from the one mark (modules/ui-design/public/brand/mark.svg, task 1005088) */
   --mark-ink: var(--ink);
 }
+/* the wordmark: the pack's productName, lowercase and light, as the hall's lockup
+   (DESIGN.md "Naming"; task 1005135) */
 .topbar__name {
   font-family: var(--font-display);
-  font-size: var(--ds-text-xl);
-  font-weight: 500;
+  font-size: var(--ds-text-lg);
+  font-weight: 300;
   letter-spacing: -0.01em;
+  text-transform: lowercase;
   color: var(--ink);
   white-space: nowrap;
   overflow: hidden;

package/modules/ui-design/public/brand/png-sources.json

@@ -0,0 +1,10 @@
+{
+  "apple-touch-icon.png": {
+    "page": "b665654a1cdfa7fb91f9aef0ab4a06831922c2e12bd7eb3dea572dd0db4988a2",
+    "png": "953557984586881b25452b8642f595dfad39d17b86459cee5c5b080b74165362"
+  },
+  "og-card.png": {
+    "page": "5f7d738dd440ed4760017fe4e468ec8a593745536336f819d4a3bd2c32a5c38d",
+    "png": "e168fdd0f4ac94754af089e7240be7cbba46704b36a617252f2942c97e8835e2"
+  }
+}

package/modules/ui-design/public/brand.css

@@ -15,6 +15,11 @@ body[data-page="brand"] {
   font-family: var(--font-body);
 }
 
+/* The hall's sheet paints its plate veil as a fixed body::after over the page
+   (black in dark); the hall lifts its shell above it, and so does this page —
+   otherwise the whole reference reads through the veil, dimmed (task 1005135). */
+body[data-page="brand"] > * { position: relative; z-index: 1; }
+
 /* ---- the bar: the mark, the name, the sections ---- */
 .ref-head {
   box-sizing: border-box;
@@ -134,6 +139,7 @@ body[data-page="brand"] {
   font-weight: 300;
   font-size: var(--ds-text-headline);
   letter-spacing: -0.01em;
+  text-transform: lowercase;
   color: var(--ink);
 }
 .ref-lockup__mark { width: 72px; height: 72px; }

package/modules/ui-design/public/brand.html

@@ -13,7 +13,7 @@
 </head>
 <body data-page="brand">
 <header class="ref-head">
-  <a class="ref-head__brand" href="/"><svg class="ref-head__mark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg><span>cloud bongos</span></a>
+  <a class="ref-head__brand" href="/"><svg class="ref-head__mark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg><span>{{productName}}</span></a>
 </header>
 <main class="ref-main">
   <h1 class="ref-title">Design system</h1>
@@ -27,7 +27,7 @@
     
     <div class="ref-lockup">
       <svg class="ref-lockup__mark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
-      <span class="ref-lockup__name">cloud bongos</span>
+      <span class="ref-lockup__name">{{productName}}</span>
     </div>
     <div class="ref-naming">
       <p><strong>The wordmark is lowercase; the name in a sentence is capitalised</strong> (owner, 2026-11-06):</p>

package/modules/ui-design/scripts/gen-design-reference.js

@@ -152,7 +152,6 @@ function build(src = read()) {
   for (const cls of NEEDS) {
     if (!new RegExp(cls.replace(/[.[\]-]/g, '\\$&') + '(?![a-z0-9_-])').test(allCss)) throw new Error(`the hall's sheets no longer define ${cls}`);
   }
-  const product = (src.pack.identity && src.pack.identity.productName) || '';
   const naming = readNaming(src.design);
   const files = readBrandFiles(src.genBrand, SRC.brandDir);
   const OTB = src.otb;
@@ -199,7 +198,7 @@ function build(src = read()) {
   parts.push(section('ref-logo', 'Logo and name', 'The mark is one file every page draws from. The ring and the planet take the ink; the moon takes the accent.', `
     <div class="ref-lockup">
       <svg class="ref-lockup__mark" viewBox="0 0 200 200" aria-hidden="true"><use href="${BRAND_URL}mark.svg#mark"/></svg>
-      <span class="ref-lockup__name">${esc(product.toLowerCase())}</span>
+      <span class="ref-lockup__name">{{productName}}</span>
     </div>
     <div class="ref-naming">
       ${naming.lead.map((p) => `<p>${p}</p>`).join('\n      ')}
@@ -315,7 +314,7 @@ function build(src = read()) {
 </head>
 <body data-page="brand">
 <header class="ref-head">
-  <a class="ref-head__brand" href="/"><svg class="ref-head__mark" viewBox="0 0 200 200" aria-hidden="true"><use href="${BRAND_URL}mark.svg#mark"/></svg><span>${esc(product.toLowerCase())}</span></a>
+  <a class="ref-head__brand" href="/"><svg class="ref-head__mark" viewBox="0 0 200 200" aria-hidden="true"><use href="${BRAND_URL}mark.svg#mark"/></svg><span>{{productName}}</span></a>
 </header>
 <main class="ref-main">
   <h1 class="ref-title">Design system</h1>

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.58",
+  "version": "1.24.60",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.58",
+      "version": "1.24.60",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.58",
+  "version": "1.24.60",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/public-docs/index.html

@@ -54,6 +54,8 @@
     }
     #topbar .mark { width: 28px; height: 28px; flex-shrink: 0; --mark-ink: var(--ink); }
     #topbar strong { font-family: var(--font-display); font-size: var(--ds-text-xl); font-weight: 500; }
+    /* the wordmark: the pack's productName, lowercase and light (DESIGN.md "Naming"; task 1005135) */
+    #topbar .wordmark { font-size: var(--ds-text-lg); font-weight: 300; letter-spacing: -0.01em; text-transform: lowercase; }
     #topbar .muted {
       font-family: var(--font-mono); font-size: var(--ds-text-2xs); letter-spacing: .12em;
       text-transform: uppercase; color: var(--ink-soft);
@@ -72,7 +74,7 @@
 <body>
   <div id="topbar">
     <svg class="mark" viewBox="0 0 200 200" aria-hidden="true"><use href="/modules/ui-design/public/brand/mark.svg#mark"/></svg>
-    <strong>{{productName}} — API</strong>
+    <strong><span class="wordmark">{{productName}}</span> — API</strong>
     <span class="muted">OpenAPI 3.1</span>
     <span class="spacer"></span>
     <a href="/docs/openapi.json" download>Download spec</a>

package/release-notes.json

@@ -11319,5 +11319,21 @@
       "id": "1005128",
       "text": "A project's owner now takes a new Bongos version with one Update button; the \"ask the team for this upgrade\" step is gone for every hosted project."
     }
+  ],
+  "1.24.59": [
+    {
+      "id": "1005135",
+      "text": "The name beside the logo now reads 'cloud bongos' in lowercase everywhere, taken from the project's branding, and the sign-in and error pages use the same fonts and colours as the rest of the site."
+    },
+    {
+      "id": "1005133",
+      "text": "The logo files and the link-preview pictures are now checked automatically, so a logo change can no longer ship with out-of-date copies; the docs now say plainly that the off-site status page is updated by hand."
+    }
+  ],
+  "1.24.60": [
+    {
+      "id": "1005134",
+      "text": "The automatic check that stops pages from typing in their own colours and sizes now also catches colours given a custom name and styles written directly inside a page, so those shortcuts can no longer slip new colours past it."
+    }
   ]
 }

package/scripts/bongos/css-literal-scan.js

@@ -21,16 +21,28 @@
 //                 tokens; the count stops the set of breakpoints sprawling).
 // Sizes, radii, shadows and breakpoints are counted per DECLARATION / RULE.
 //
-// WHAT IT DOES NOT COUNT. A custom-property declaration (`--x: #123`) is a token
-// DEFINITION — tokens.css and the hall's token block are exactly where literals
-// belong — so its value is skipped. Page-private palettes are guarded separately
-// (tests/hall_private_palettes.mjs). Custom-property NAMES are removed from a
-// value before it is read (so --ds-space-12 is not a "12"), and url(...) bodies
-// are emptied (a data URI is not a colour). A literal inside a var() fallback
-// DOES count: a fallback is a typed-in value.
+// CUSTOM PROPERTIES (task 1005134). A colour typed into a custom-property
+// declaration (`:root{--mine:#123456}`, `body{--x:rgb(…)}`) COUNTS as a colour,
+// so a new sheet cannot dodge its zero start by naming its colours. Only the
+// shared token definitions are exempt, because they are exactly where literals
+// belong: the whole of the shared token sheet and the hall's token block (its
+// :root and the two byte-identical dark twins) — TOKEN_SHEETS. The pack splice
+// (serve-internal.js themeMarkup) is built in JavaScript at serve time and is
+// never scanned. A custom property's sizes/radii/shadows are not counted — those
+// kinds are read off the property that SPENDS a value, and a --x is not one.
+// Page-private palettes are also guarded by tests/hall_private_palettes.mjs.
+//
+// WHAT IT DOES NOT COUNT. Custom-property NAMES are removed from a value before
+// it is read (so --ds-space-12 is not a "12"), and url(...) bodies are emptied (a
+// data URI is not a colour). A literal inside a var() fallback DOES count: a
+// fallback is a typed-in value.
 //
 // Scope: every tracked *.css outside docs/ (the design mocks there are not
-// served), node_modules and vendor/.
+// served), node_modules and vendor/; the inline <style> blocks of every served
+// .html (one under a public/, public-docs/, views/ or content/ folder); and the
+// <style> blocks a server file writes as a string (STYLE_STRING_SOURCES: the
+// branded error page). Task 1005134: a page could otherwise type its colours into
+// a <style> tag and never be counted.
 //
 // Print the counts:  node scripts/bongos/css-literal-scan.js [--all]
 
@@ -42,6 +54,18 @@ const ROOT = path.resolve(__dirname, '..', '..');
 const KINDS = ['colours', 'font_sizes', 'radii', 'shadows', 'breakpoints'];
 
 const EXCLUDE_RE = /^docs\/|(^|\/)(node_modules|vendor)\//;
+// A served page: an .html under a folder the server serves or renders from.
+const SERVED_HTML_RE = /(^|\/)(public|public-docs|views|content)\/.*\.html$/;
+// Server files that write a page's <style> block as a string.
+const STYLE_STRING_SOURCES = ['src/error-page.js'];
+const STYLE_BLOCK_RE = /<style\b[^>]*>([\s\S]*?)<\/style>/gi;
+// The shared token definitions, where a typed-in colour belongs: `true` exempts
+// every custom property in the sheet; a RegExp exempts those in a rule whose
+// selector matches it (the hall's token block: :root and the two dark twins).
+const TOKEN_SHEETS = {
+  'modules/ui-design/public/tokens.css': true,
+  'modules/hall-ui/public/style.css': /^(?::root|html\[data-theme="dark"\]|html:not\(\[data-theme\]\))$/,
+};
 const COMMENT_RE = /\/\*[\s\S]*?\*\//g;
 const URL_RE = /url\(\s*(?:"[^"]*"|'[^']*'|[^)]*)\)/gi;
 const VAR_NAME_RE = /--[\w-]+/g;
@@ -84,17 +108,43 @@ function hasLength(value) {
   return false;
 }
 
-/** The five counts for one stylesheet's text. */
-function countSheet(text) {
+// The selector of the innermost rule around a position, read by walking the text
+// forward (positions must be asked in increasing order). '' at the top level.
+function selectorWalker(css) {
+  const stack = [];
+  let pos = 0;
+  let segStart = 0;
+  return (idx) => {
+    for (; pos < idx; pos += 1) {
+      const ch = css[pos];
+      if (ch === '{') { stack.push(css.slice(segStart, pos).replace(/\s+/g, ' ').trim()); segStart = pos + 1; }
+      else if (ch === '}') { stack.pop(); segStart = pos + 1; }
+      else if (ch === ';') segStart = pos + 1;
+    }
+    return stack.length ? stack[stack.length - 1] : '';
+  };
+}
+
+/**
+ * The five counts for one stylesheet's text. `tokens` marks the shared token
+ * definitions: true (the whole sheet) or a RegExp over a rule's selector.
+ */
+function countSheet(text, { tokens = false } = {}) {
   const counts = Object.fromEntries(KINDS.map((k) => [k, 0]));
   const css = String(text).replace(COMMENT_RE, ' ').replace(URL_RE, 'url()');
   AT_RULE_RE.lastIndex = 0;
   let m;
   while ((m = AT_RULE_RE.exec(css))) if (MEDIA_LENGTH_RE.test(m[2])) counts.breakpoints += 1;
+  const selectorAt = selectorWalker(css);
   DECL_RE.lastIndex = 0;
   while ((m = DECL_RE.exec(css))) {
     const prop = m[1].toLowerCase();
-    if (prop.startsWith('--')) continue; // a token definition
+    if (prop.startsWith('--')) {
+      // A custom property: its colours count unless it is a shared token definition.
+      const exempt = tokens === true || (tokens instanceof RegExp && tokens.test(selectorAt(m.index + m[0].indexOf(m[1]))));
+      if (!exempt) counts.colours += colourCount(m[2].replace(VAR_NAME_RE, ' '));
+      continue;
+    }
     const value = m[2].replace(VAR_NAME_RE, ' ');
     counts.colours += colourCount(value);
     if ((prop === 'font-size' || prop === 'font') && hasLength(value)) counts.font_sizes += 1;
@@ -106,8 +156,16 @@ function countSheet(text) {
 }
 
 function trackedStylesheets(root = ROOT) {
-  const out = execFileSync('git', ['ls-files', '-z', '--', '*.css'], { cwd: root, encoding: 'utf8' });
-  return out.split('\0').filter((f) => f && !EXCLUDE_RE.test(f)).sort();
+  const out = execFileSync('git', ['ls-files', '-z', '--', '*.css', '*.html', ...STYLE_STRING_SOURCES], { cwd: root, encoding: 'utf8' });
+  return out.split('\0').filter((f) => f && !EXCLUDE_RE.test(f)
+    && (f.endsWith('.css') || SERVED_HTML_RE.test(f) || STYLE_STRING_SOURCES.includes(f))).sort();
+}
+
+// The CSS a file carries: a stylesheet is all CSS; a page or a server file
+// carries only what sits inside its <style> blocks.
+function cssOf(file, text) {
+  if (file.endsWith('.css')) return text;
+  return [...String(text).matchAll(STYLE_BLOCK_RE)].map((b) => b[1]).join('\n');
 }
 
 /**
@@ -123,7 +181,7 @@ function scanCssLiterals({ root = ROOT, files = null, read = null } = {}) {
     let text;
     try { text = reader(f); } catch { continue; }
     scanned += 1;
-    const c = countSheet(text);
+    const c = countSheet(cssOf(f, text), { tokens: TOKEN_SHEETS[f] || false });
     if (KINDS.some((k) => c[k] > 0)) sheets[f] = c;
   }
   return { sheets, scanned };