@bongos/core 1.17.1 → 1.17.3

package/modules/hall-ui/public/builders.js

@@ -335,16 +335,42 @@
   // element ids the data-render + event-wiring code expects (#welcome-minimize,
   // #recent-ships, #lb-prev, …) are present. Each widget mount is
   // failure-isolated so one bad widget can't blank the hall.
+  // task 2169: zone budgets — Home cannot grow unbounded again. Caps count
+  // REGISTERED widgets per Home zone (phase/data gating of visibility stays
+  // each widget's own business). A widget past its zone's budget mounts into a
+  // hidden overflow container and surfaces as a one-line link in a "More" row
+  // at the end of home-main — clicking reveals that one section in place.
+  // The budgets themselves become a CI fitness assertion in task 2177.
+  const ZONE_BUDGETS = { 'home-stats': 1, 'home-band': 2, 'home-main': 3 };
+
   function mountHallWidgets() {
     const main = document.querySelector('main');
     if (!main || typeof window.OTB.hallWidgets !== 'function') return;
+    const zoneCounts = {};
+    const overflow = [];
+    let overflowHost = null;
     for (const wgt of window.OTB.hallWidgets()) {
       try {
+        let host = widgetHost(wgt) || main;
+        const isHomeZone = (wgt.view || 'home') === 'home' && wgt.zone && ZONE_BUDGETS[wgt.zone] != null;
+        if (isHomeZone) {
+          zoneCounts[wgt.zone] = (zoneCounts[wgt.zone] || 0) + 1;
+          if (zoneCounts[wgt.zone] > ZONE_BUDGETS[wgt.zone]) {
+            if (!overflowHost) {
+              overflowHost = document.createElement('div');
+              overflowHost.id = 'zone-home-overflow';
+              overflowHost.hidden = true;
+              document.getElementById('zone-home-main')?.appendChild(overflowHost);
+            }
+            host = overflowHost || host;
+            overflow.push({ id: wgt.id, label: wgt.label });
+          }
+        }
         let section = document.getElementById(wgt.id);
         if (!section) {
           section = document.createElement('section');
           section.id = wgt.id;
-          (widgetHost(wgt) || main).appendChild(section);
+          host.appendChild(section);
         }
         section.className = wgt.sectionClass || 'scroll';
         if (wgt.labelledby) section.setAttribute('aria-labelledby', wgt.labelledby);
@@ -357,6 +383,26 @@
         console.error(`[builders] hall widget "${wgt && wgt.id}" failed to mount`, err);
       }
     }
+    if (overflow.length) {
+      const more = document.createElement('section');
+      more.className = 'scroll scroll--bare';
+      more.id = 'home-more-row';
+      more.innerHTML = `<p class="home-more">More: ${overflow.map((o) =>
+        `<a href="#" data-reveal="${o.id}">${o.label}</a>`).join(' · ')}</p>`;
+      document.getElementById('zone-home-main')?.appendChild(more);
+      more.addEventListener('click', (e) => {
+        const a = e.target.closest('[data-reveal]');
+        if (!a) return;
+        e.preventDefault();
+        const section = document.getElementById(a.dataset.reveal);
+        if (section) {
+          document.getElementById('zone-home-main')?.insertBefore(section, more);
+          section.hidden = false;
+        }
+        a.remove();
+        if (!more.querySelector('[data-reveal]')) more.remove();
+      });
+    }
     // brand-apply.js's currency-label pass ran at DOMContentLoaded, BEFORE these
     // skeletons existed — re-run it over the mounted widgets so [data-currency-
     // label]/[data-currency-tmpl] cells show the instance's unit, not the fallback.
@@ -889,7 +935,20 @@
     try { window.localStorage.setItem(SETUP_CONFIG_KEY, v === 'online' ? 'online' : 'desktop'); } catch (_) { /* private mode — won't persist, fine */ }
   }
 
+  // task 2169 (banner budget): exactly one banner panel at a time. The
+  // checklist render runs before the welcome render in the boot pass, so after
+  // the welcome panel's visibility settles we re-evaluate the checklist —
+  // welcome visible → checklist waits; welcome dismissed/hidden → checklist
+  // takes the banner slot (renderOnboarding carries the mirror check).
   function renderWelcome(builder, onboarding) {
+    renderWelcomeCore(builder, onboarding);
+    renderOnboarding(
+      onboarding || (lastMeState && lastMeState.onboarding) || null,
+      lastMeState && lastMeState.discord
+    );
+  }
+
+  function renderWelcomeCore(builder, onboarding) {
     const scroll = $('#welcome-scroll');
     const body = $('#welcome-body');
     if (!scroll || !body) return;
@@ -1080,6 +1139,15 @@
       scroll.hidden = true;
       return;
     }
+    // task 2169 (banner budget: one at a time): while the welcome panel is
+    // showing, the checklist waits its turn — it appears when the welcome is
+    // dismissed or outgrown. renderWelcome runs first in the same loadAll pass
+    // (and every SSE nudge re-runs both), so this stays current.
+    const welcomeEl = document.getElementById('welcome-scroll');
+    if (welcomeEl && !welcomeEl.hidden) {
+      scroll.hidden = true;
+      return;
+    }
     scroll.hidden = false;
 
     const discordConfigured = !!(discord && discord.configured);
@@ -1782,6 +1850,42 @@
     }).join('');
   }
 
+  // ---- idea-inbox triage cue (task 1471) -----------------------------------
+
+  // task 2169: renders the IDEAS slice of the "Needs your attention" card —
+  // goal-inbox.js owns the card (id 'attention-scroll') + the goals slice;
+  // visibility and the headline count derive from both via OTBAttention.
+  // Only ever called for a Metic+ viewer (loadAll gates the fetch) — a
+  // non-triager never loads or sees any idea data. An empty inbox renders
+  // nothing: the attention card never shows an "all clear" row.
+  function renderTriageInbox(data) {
+    const box = document.getElementById('attention-ideas');
+    if (!box) return;
+    const open = (data && Array.isArray(data.ideas) ? data.ideas : [])
+      .filter((i) => i && i.status === 'open');
+    const openCount = data && data.open_count != null ? data.open_count : open.length;
+    if (!open.length) {
+      box.innerHTML = '';
+    } else {
+      const rows = open.slice(0, 5).map((i) => {
+        const title = escapeHtml(i.title || `idea #${i.id}`);
+        const kind = i.kind
+          ? `<span class="triage-inbox__kind">${escapeHtml(i.kind)}</span>`
+          : '';
+        return `<li class="triage-inbox__item">`
+          + `<a class="triage-inbox__link" href="#/idea/${encodeURIComponent(i.id)}">${title}</a>`
+          + kind
+          + `</li>`;
+      }).join('');
+      const more = openCount > 5
+        ? `<p class="ginbox__pending">…${fmtNum(openCount - 5)} more open ideas — open any row to triage in place.</p>`
+        : '';
+      box.innerHTML = `<h3 class="ginbox__sec-h">Ideas awaiting triage <span class="count-pill">${fmtNum(openCount)}</span></h3>`
+        + `<ul class="triage-inbox">${rows}</ul>${more}`;
+    }
+    window.OTBAttention?.refresh();
+  }
+
   // ---- leaderboard ---------------------------------------------------------
 
   // Locked at 8 for V2 (per limitations/pms-v2.md). Hardcoding here avoids an
@@ -1816,7 +1920,7 @@
     page: 0,
     pageSize: 25,   // task 1750: top-100 Roll — 25/page keeps it to a few pages
 
-    sortBy: 'drachmae',     // 'rank' | 'drachmae' | 'karma'
+    sortBy: 'drachmae',     // 'rank' | 'drachmae' | 'karma' | 'tokens'
     sortDir: 'desc',        // 'desc' | 'asc'
   };
 
@@ -1852,6 +1956,23 @@
         })
         .map(({ row }) => row);
     }
+    if (lbState.sortBy === 'tokens') {
+      // task 1473: sort by total tokens used. tokens_used arrives as a string
+      // (pg bigint), so coerce. Tie-break on drachmae DESC then server order,
+      // matching the karma branch.
+      return indexed
+        .sort((a, b) => {
+          const at = Number(a.row.tokens_used) || 0;
+          const bt = Number(b.row.tokens_used) || 0;
+          const diff = (at - bt) * dir;
+          if (diff !== 0) return diff;
+          const ac = Number(a.row.total_credits) || 0;
+          const bc = Number(b.row.total_credits) || 0;
+          if (ac !== bc) return bc - ac;
+          return a.idx - b.idx;
+        })
+        .map(({ row }) => row);
+    }
     if (lbState.sortBy === 'drachmae') {
       // Server already DESCs by drachmae, so the default mode is a no-op
       // copy. The ASC branch flips it.
@@ -1869,13 +1990,14 @@
   }
 
   // Map a sortable column id → the lbState.sortBy key. Adding a new sortable
-  // column means adding an entry here + a header in index.html with id
-  // `lb-sort-<key>`. The handler walks aria-sort across all three headers so
+  // column means adding an entry here + a header in hall-widgets.js with id
+  // `lb-sort-<key>`. The handler walks aria-sort across all sortable headers so
   // only one column shows its arrow at a time.
   const LB_SORT_HEADERS = {
     rank: 'lb-sort-rank',
     drachmae: 'lb-sort-drachmae',
     karma: 'lb-sort-karma',
+    tokens: 'lb-sort-tokens',
   };
 
   // #757: this builder's place on the Roll, ranked by drachmae (total_credits)
@@ -1902,7 +2024,7 @@
     const tbody = $('#leaderboard tbody');
 
     if (!slice.length) {
-      tbody.innerHTML = emptyRow(5, 'No more builders to show.');
+      tbody.innerHTML = emptyRow(6, 'No more builders to show.');
     } else {
       tbody.innerHTML = slice.map((b, i) => {
         const place = start + i + 1;
@@ -1922,6 +2044,7 @@
             <td class="ledger__rank">${rank}</td>
             <td class="ledger__drachmae">${fmtNum(b.total_credits)}</td>
             <td class="ledger__drachmae">${fmtNum(b.karma)}</td>
+            <td class="ledger__drachmae" title="${Number(b.total_credits) > 0 ? `${fmtNum(Math.round(Number(b.tokens_used) / Number(b.total_credits)))} tokens per drachma` : 'no drachmae earned yet'}">${fmtNum(b.tokens_used)}</td>
           </tr>
         `;
       }).join('');
@@ -1968,525 +2091,6 @@
     renderLeaderboard();
   }
 
-  // ---- Archon security watch (V3.R66 / #285) -------------------------------
-  //
-  // Hidden by default; revealed only when /me returns rank='archon'. The
-  // table renders open vulnerability reports + adjudication actions
-  // (confirm / dispute / fix / link-fix). The audit log is collapsed
-  // behind a <details> and loads on first open.
-
-  const SEVERITY_RANK = { critical: 4, high: 3, medium: 2, low: 1 };
-
-  let securityState = {
-    statusFilter: '',
-    auditLoaded: false,
-  };
-
-  function severityBadge(sev) {
-    const cls = `sev-${sev}`;
-    return `<span class="sev-badge ${cls}">${escapeHtml(sev || '?')}</span>`;
-  }
-
-  function renderSecurityReports(payload) {
-    const tbody = document.querySelector('#security-reports tbody');
-    if (!tbody) return;
-    const reports = Array.isArray(payload?.reports) ? payload.reports : [];
-    const bounty = payload?.bounty_table || {};
-    if (reports.length === 0) {
-      tbody.innerHTML = emptyRow(7, 'No reports match this filter.');
-      return;
-    }
-    // Sort: open first (by severity desc), then everything else newest first.
-    const sorted = reports.slice().sort((a, b) => {
-      const aOpen = a.status === 'open' || a.status === 'repro_attempted' ? 1 : 0;
-      const bOpen = b.status === 'open' || b.status === 'repro_attempted' ? 1 : 0;
-      if (aOpen !== bOpen) return bOpen - aOpen;
-      const aS = SEVERITY_RANK[a.severity] || 0;
-      const bS = SEVERITY_RANK[b.severity] || 0;
-      if (aS !== bS) return bS - aS;
-      return new Date(b.reported_at) - new Date(a.reported_at);
-    });
-    tbody.innerHTML = sorted.map((r) => {
-      const reporter = r.reporter_builder_id ? `#${escapeHtml(String(r.reporter_builder_id))}` : '—';
-      const drachmae = r.drachmae_awarded != null ? fmtNum(r.drachmae_awarded) : (bounty[r.severity] ? `(${fmtNum(bounty[r.severity])} if confirmed)` : '—');
-      const actions = renderSecurityActions(r);
-      return `
-        <tr data-report-id="${r.id}">
-          <td class="ledger__num">${escapeHtml(String(r.id))}</td>
-          <td>${severityBadge(r.severity)}</td>
-          <td>${escapeHtml(r.title || '')}<div style="font-size:0.78rem;opacity:0.7;">${escapeHtml(r.target || '')}</div></td>
-          <td>${escapeHtml(r.status || '')}</td>
-          <td>${reporter}</td>
-          <td class="ledger__drachmae">${drachmae}</td>
-          <td>${actions}</td>
-        </tr>
-      `;
-    }).join('');
-  }
-
-  function renderSecurityActions(report) {
-    const id = report.id;
-    const isTerminal = report.status === 'fixed' || report.status === 'wontfix';
-    const buttons = [];
-    if (!isTerminal && report.status !== 'confirmed') {
-      buttons.push(`<button type="button" class="btn-ghost sec-act" data-action="confirm" data-id="${id}">Confirm</button>`);
-    }
-    if (!isTerminal && report.status !== 'disputed') {
-      buttons.push(`<button type="button" class="btn-ghost sec-act" data-action="dispute" data-id="${id}">Dispute</button>`);
-    }
-    if (report.status !== 'fixed') {
-      buttons.push(`<button type="button" class="btn-ghost sec-act" data-action="fix" data-id="${id}">Mark fixed</button>`);
-    }
-    buttons.push(`<button type="button" class="btn-ghost sec-act" data-action="link-fix" data-id="${id}" title="Attach a fix-task ID">Link fix…</button>`);
-    return buttons.join(' ');
-  }
-
-  async function loadSecurityReports() {
-    const status = securityState.statusFilter;
-    const url = status ? `${API}/security/reports?status=${encodeURIComponent(status)}` : `${API}/security/reports`;
-    try {
-      const payload = await getJSON(url);
-      renderSecurityReports(payload);
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      const tbody = document.querySelector('#security-reports tbody');
-      if (tbody) tbody.innerHTML = emptyRow(7, 'Could not load reports.');
-      console.error('[builders] load security reports failed', err);
-    }
-  }
-
-  async function adjudicateReport(id, action) {
-    const status = $('#security-status');
-    if (status) { status.hidden = false; status.textContent = 'Working…'; }
-    try {
-      let body = {};
-      let path = `${API}/security/reports/${encodeURIComponent(id)}/${action}`;
-      if (action === 'link-fix') {
-        const taskIdRaw = window.prompt(`Task ID to link as the fix for report #${id}?`, '');
-        if (taskIdRaw == null) {
-          if (status) status.textContent = 'Cancelled.';
-          return;
-        }
-        const taskId = Number(taskIdRaw);
-        if (!Number.isInteger(taskId) || taskId <= 0) {
-          if (status) status.textContent = 'Bad task id — must be a positive integer.';
-          return;
-        }
-        body = { task_id: taskId };
-      }
-      const resp = await api.request('POST', path, { body });
-      if (resp.status === 401) { window.location.assign(`${API}/auth/web/start`); throw new Error('redirecting to auth'); }
-      const data = resp.data || {};
-      if (!resp.ok) {
-        if (status) status.textContent = `Failed: ${data.error || resp.status}`;
-        return;
-      }
-      if (status) status.textContent = `Report #${id} → ${data.report?.status || action}`;
-      await loadSecurityReports();
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      console.error('[builders] adjudication failed', err);
-      if (status) status.textContent = 'Adjudication failed. Try again.';
-    }
-  }
-
-  async function loadAuditLog() {
-    const tbody = document.querySelector('#security-audit-log tbody');
-    if (!tbody) return;
-    tbody.innerHTML = emptyRow(5, 'Loading…');
-    const method = $('#f-audit-method')?.value || '';
-    const builderId = $('#f-audit-builder')?.value || '';
-    const params = new URLSearchParams();
-    params.set('limit', '50');
-    if (method) params.set('method', method);
-    if (builderId) params.set('builder_id', builderId);
-    try {
-      const payload = await getJSON(`${API}/audit-log?${params}`);
-      const rows = Array.isArray(payload?.rows) ? payload.rows : [];
-      if (rows.length === 0) {
-        tbody.innerHTML = emptyRow(5, 'No matching audit entries.');
-        return;
-      }
-      tbody.innerHTML = rows.map((r) => `
-        <tr>
-          <td>${escapeHtml(fmtDate(r.recorded_at))}</td>
-          <td>#${escapeHtml(String(r.builder_id))}</td>
-          <td>${escapeHtml(r.method)}</td>
-          <td><code>${escapeHtml(r.route)}</code></td>
-          <td>${escapeHtml(String(r.response_status))}</td>
-        </tr>
-      `).join('');
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      console.error('[builders] audit-log load failed', err);
-      tbody.innerHTML = emptyRow(5, 'Could not load audit log.');
-    }
-  }
-
-  // task 1723: unhideArchonView is gone — the Archon nav group (Watch, Harbor,
-  // Gate, Sessions) is the shell's, revealed by renderNav's applyAccess call
-  // once /me confirms rank === 'archon' (shell.js gates Harbor on the dev-box
-  // module too). The data still loads only on the Archon pages, each behind its
-  // own archon-gated endpoint (#726).
-
-  // ---- Archon roster + management (V3.R14 / #238) --------------------------
-  //
-  // Archon-only roster of every builder, with promote / demote /
-  // release-stale-claim controls. Hidden via #roster-scroll[hidden] for
-  // non-Archons; unhideArchonView flips it on.
-  //
-  // Rank ladder is xenos < thetes < metic < archon (RANK_ORDER above). Promote
-  // walks the ladder up ONE rung; demote walks it down one. The server enforces
-  // the one-rung-promotion rule (#707), so the button must offer the true next
-  // rung per row — a xenos promotes to thetes (not metic), a thetes to metic.
-
-  const ROSTER_LADDER = ['xenos', 'thetes', 'metic', 'archon'];
-  // #408: paginate the Archon roster — it can grow past a screenful as the
-  // community scales (200+ rows seen during stress test). 20 rows/page
-  // matches the cardinality of "one comfortable scroll" inside the section
-  // without forcing the user to scan further than they can hold in working
-  // memory. Filter dropdowns still scope the dataset *before* pagination,
-  // so a Show:onboarding filter still narrows to onboarding builders.
-  const ROSTER_PAGE_SIZE = 20;
-
-  let rosterState = {
-    rows: [],
-    show: 'all',
-    staleHours: 24,
-    selfId: null,
-    loading: false,
-    page: 0,
-  };
-
-  function nextRank(rank, direction /* 'up' | 'down' */) {
-    const idx = ROSTER_LADDER.indexOf((rank || '').toLowerCase());
-    if (idx < 0) return null;
-    if (direction === 'up' && idx < ROSTER_LADDER.length - 1) return ROSTER_LADDER[idx + 1];
-    if (direction === 'down' && idx > 0) return ROSTER_LADDER[idx - 1];
-    return null;
-  }
-
-  function fmtTtfsMinutes(min) {
-    if (min === null || min === undefined) return '—';
-    const n = Number(min);
-    if (!Number.isFinite(n) || n < 0) return '—';
-    if (n < 60) return `${n}m`;
-    const hours = n / 60;
-    if (hours < 24) return `${hours.toFixed(1)}h`;
-    const days = hours / 24;
-    if (days < 30) return `${days.toFixed(1)}d`;
-    const months = days / 30;
-    return `${months.toFixed(1)}mo`;
-  }
-
-  function rosterFilterRows(rows) {
-    switch (rosterState.show) {
-      case 'onboarding':
-        return rows.filter((r) => !r.first_ship_at && r.status !== 'inactive');
-      case 'active':
-        return rows.filter((r) => Number(r.active_claim_count) > 0);
-      case 'stale':
-        return rows.filter((r) => r.stale_claim);
-      case 'inactive':
-        return rows.filter((r) => r.status === 'inactive');
-      case 'all':
-      default:
-        return rows;
-    }
-  }
-
-  function renderRoster() {
-    const tbody = document.querySelector('#roster-table tbody');
-    const countEl = $('#roster-count');
-    const pagerEl = $('#roster-pager');
-    const rangeEl = $('#roster-range');
-    const prevBtn = $('#roster-prev');
-    const nextBtn = $('#roster-next');
-    if (!tbody) return;
-    const rows = rosterFilterRows(rosterState.rows);
-    if (countEl) {
-      countEl.textContent = `${rows.length} / ${rosterState.rows.length}`;
-    }
-    if (rows.length === 0) {
-      tbody.innerHTML = emptyRow(9, 'No builders match this filter.');
-      if (pagerEl) pagerEl.hidden = true;
-      return;
-    }
-    // #408: client-side pagination. renderPager clamps the page index in case a
-    // filter/refresh shrank the dataset under our feet (e.g. on page 4, then
-    // switch to a filter with only 30 matching rows → snap back to the last
-    // legal page) and updates the range + prev/next controls.
-    const { start } = renderPager(rosterState, rows.length, ROSTER_PAGE_SIZE, { pagerEl, rangeEl, prevBtn, nextBtn });
-    const slice = rows.slice(start, start + ROSTER_PAGE_SIZE);
-
-    tbody.innerHTML = slice.map((b) => {
-      const isSelf = String(b.id) === String(rosterState.selfId);
-      const isInactive = b.status === 'inactive';
-      const upRank = nextRank(b.rank, 'up');
-      const downRank = nextRank(b.rank, 'down');
-      const claimCount = Number(b.active_claim_count) || 0;
-      const stale = !!b.stale_claim;
-      const claimsCell = claimCount === 0
-        ? '<span style="opacity:0.6;">none</span>'
-        : `${claimCount}${stale ? ' <span class="roster__stale" title="At least one claim is stale (no pulse beyond threshold)">⚠ stale</span>' : ''}`;
-      const actions = [];
-      if (isSelf) {
-        actions.push('<span style="opacity:0.55;font-size:0.8rem;">— self —</span>');
-      } else if (isInactive) {
-        actions.push('<span style="opacity:0.55;font-size:0.8rem;">inactive</span>');
-      } else {
-        if (upRank) {
-          actions.push(`<button type="button" class="btn-ghost roster__promote" data-id="${escapeHtml(String(b.id))}" data-current="${escapeHtml(b.rank || '')}" data-next="${upRank}">Promote → ${upRank}</button>`);
-        }
-        if (downRank) {
-          actions.push(`<button type="button" class="btn-ghost roster__demote" data-id="${escapeHtml(String(b.id))}" data-current="${escapeHtml(b.rank || '')}" data-next="${downRank}">Demote → ${downRank}</button>`);
-        }
-        if (stale) {
-          actions.push(`<button type="button" class="btn-ghost roster__release-stale" data-id="${escapeHtml(String(b.id))}">Release stale claim</button>`);
-        }
-      }
-      const inactiveTag = isInactive ? ' <span class="roster__inactive">inactive</span>' : '';
-      const selfTag = isSelf ? ' <span class="roster__self">you</span>' : '';
-      const handle = b.display_name || b.github_login || `builder #${b.id}`;
-      return `
-        <tr data-builder-id="${escapeHtml(String(b.id))}">
-          <td>${escapeHtml(handle)}${selfTag}${inactiveTag}<div style="font-size:0.75rem;opacity:0.65;">#${escapeHtml(String(b.id))} · @${escapeHtml(b.github_login || '')}</div></td>
-          <td>${renderRankBadge(b.rank)}</td>
-          <td class="ledger__drachmae">${fmtNum(b.total_credits)}</td>
-          <td>${fmtNum(b.karma)}</td>
-          <td class="ledger__date">${escapeHtml(fmtDate(b.onboarded_at))}</td>
-          <td class="ledger__date">${b.first_ship_at ? escapeHtml(fmtDate(b.first_ship_at)) : '<span style="opacity:0.6;">— not yet —</span>'}</td>
-          <td>${fmtTtfsMinutes(b.time_to_first_ship_minutes)}</td>
-          <td>${claimsCell}</td>
-          <td>${actions.join(' ')}</td>
-        </tr>
-      `;
-    }).join('');
-  }
-
-  async function loadRoster() {
-    const status = $('#roster-status');
-    if (rosterState.loading) return;
-    rosterState.loading = true;
-    if (status) { status.hidden = false; status.textContent = 'Loading roster…'; }
-    try {
-      const payload = await getJSON(`${API}/builders/roster?stale_hours=${encodeURIComponent(rosterState.staleHours)}`);
-      rosterState.rows = Array.isArray(payload?.builders) ? payload.builders : [];
-      renderRoster();
-      if (status) status.hidden = true;
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      console.error('[builders] load roster failed', err);
-      const tbody = document.querySelector('#roster-table tbody');
-      if (tbody) tbody.innerHTML = emptyRow(9, 'Could not load the roster.');
-      if (status) { status.hidden = false; status.textContent = `Could not load roster: ${err.message}`; }
-    } finally {
-      rosterState.loading = false;
-    }
-  }
-
-  async function rosterChangeRank(builderId, nextRankName, currentRankName) {
-    const status = $('#roster-status');
-    const ok = window.confirm(
-      `Change builder #${builderId} from ${currentRankName || '?'} to ${nextRankName}?`
-    );
-    if (!ok) return;
-    if (status) { status.hidden = false; status.textContent = `Setting rank to ${nextRankName}…`; }
-    try {
-      const resp = await patchJSON(`${API}/builders/${encodeURIComponent(builderId)}/rank`, { rank: nextRankName });
-      const newRank = resp?.builder?.rank || nextRankName;
-      if (status) status.textContent = `Builder #${builderId} → ${newRank}.`;
-      toast(`Builder #${builderId} is now ${newRank}.`);
-      await loadRoster();
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      console.error('[builders] rank change failed', err);
-      if (status) { status.hidden = false; status.textContent = `Rank change failed: ${err.message}`; }
-      toast('Rank change failed.');
-    }
-  }
-
-  async function rosterReleaseStale(builderId) {
-    const status = $('#roster-status');
-    let claims;
-    if (status) { status.hidden = false; status.textContent = 'Looking up stale claims…'; }
-    try {
-      const payload = await getJSON(`${API}/builders/${encodeURIComponent(builderId)}/active-claims?stale_hours=${encodeURIComponent(rosterState.staleHours)}`);
-      claims = Array.isArray(payload?.claims) ? payload.claims : [];
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      if (status) status.textContent = `Could not fetch claims: ${err.message}`;
-      return;
-    }
-    const stale = claims.filter((c) => c.stale_claim);
-    if (stale.length === 0) {
-      if (status) status.textContent = 'No stale claims left to release for that builder.';
-      // The roster row was probably stale-from-cache — refresh.
-      await loadRoster();
-      return;
-    }
-    // Pick the oldest stale claim (the queue order matches claimed_at ASC
-    // from the server). For multiple stale claims, surface the count so
-    // the Archon knows another action may be needed.
-    const target = stale[0];
-    const reason = window.prompt(
-      `Release stale claim #${target.claim_id} (task #${target.task_id} "${target.task_title || ''}") for builder #${builderId}?\n\nReason (required):`,
-      'pulse heartbeat went silent; freeing the task'
-    );
-    if (reason == null) {
-      if (status) status.textContent = 'Cancelled.';
-      return;
-    }
-    const trimmed = String(reason).trim();
-    if (!trimmed) {
-      if (status) status.textContent = 'A reason is required for an on-behalf release.';
-      return;
-    }
-    if (status) status.textContent = `Releasing claim #${target.claim_id}…`;
-    try {
-      const resp = await api.request('POST', `${API}/claims/${encodeURIComponent(target.claim_id)}/release-on-behalf`, { body: { reason: trimmed } });
-      if (resp.status === 401) { window.location.assign(`${API}/auth/web/start`); return; }
-      const data = resp.data || {};
-      if (!resp.ok) {
-        if (status) status.textContent = `Release failed: ${data.error || resp.status}`;
-        toast('Release failed.');
-        return;
-      }
-      const remaining = stale.length - 1;
-      if (status) status.textContent = `Released claim #${target.claim_id}.` + (remaining > 0 ? ` ${remaining} more stale claim(s) on this builder — click again to release the next.` : '');
-      toast('Claim released.');
-      await loadRoster();
-    } catch (err) {
-      if (status) status.textContent = `Release failed: ${err.message}`;
-      toast('Release failed.');
-    }
-  }
-
-  // ---- override requests (V3.R74 / #293) -----------------------------------
-  //
-  // Archon-only. Lists open requests where a builder asked the Archon to
-  // override a failed grader. Approve flips task to confirmed + pays the
-  // requester; deny only stamps the decision row.
-
-  async function loadOverrideRequests() {
-    const tbody = document.querySelector('#override-requests tbody');
-    if (!tbody) return;
-    try {
-      const data = await getJSON(`${API}/override-requests?status=open`);
-      const rows = Array.isArray(data?.requests) ? data.requests : [];
-      if (rows.length === 0) {
-        tbody.innerHTML = emptyRow(6, 'No open requests.');
-        return;
-      }
-      tbody.innerHTML = rows.map((r) => `
-        <tr data-request-id="${escapeHtml(String(r.id))}">
-          <td>${escapeHtml(String(r.id))}</td>
-          <td>#${escapeHtml(String(r.task_id))} — ${escapeHtml(r.task_title || '')}</td>
-          <td>@${escapeHtml(r.requester_login || '')}</td>
-          <td class="override__rationale">${escapeHtml(r.rationale || '')}</td>
-          <td>${escapeHtml(String(r.credits_reward ?? '—'))}</td>
-          <td>
-            <button class="btn-ghost override__approve" type="button">Approve</button>
-            <button class="btn-ghost override__deny" type="button">Deny</button>
-          </td>
-        </tr>
-      `).join('');
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      console.error('[builders] override-requests failed', err);
-      tbody.innerHTML = emptyRow(6, 'Could not load override requests.');
-    }
-  }
-
-  async function decideOverride(requestId, decision) {
-    const status = $('#override-status');
-    const verb = decision === 'approve' ? 'Approve' : 'Deny';
-    const note = window.prompt(`${verb} request #${requestId} — optional note (sent to audit log):`, '');
-    if (note === null) return; // user cancelled
-    try {
-      const res = await api.request('POST', `${API}/override-requests/${encodeURIComponent(requestId)}/decide`, { body: { decision, note: note || undefined } });
-      if (res.status === 401) { window.location.assign(`${API}/auth/web/start`); return; }
-      const body = res.data || {};
-      if (!res.ok) throw new Error(body.error || `HTTP ${res.status}`);
-      if (status) {
-        status.hidden = false;
-        status.textContent = decision === 'approve'
-          ? `Approved — task flipped to confirmed, ${curLabel()} paid: ${body.confirmResult?.creditsAwarded ?? 0}.`
-          : `Denied — the task stays at completed.`;
-      }
-      await loadOverrideRequests();
-    } catch (err) {
-      console.error('[builders] decide override failed', err);
-      if (status) { status.hidden = false; status.textContent = `Could not decide: ${err.message}`; }
-    }
-  }
-
-  // ---- skill model preferences (V3.R85 / #304) -----------------------------
-  //
-  // The matrix lets each builder override the system default model for each
-  // slash-command skill. System defaults come from the audit in
-  // src/bongos/skill-prefs.js (mechanism vs judgment classification) and are
-  // echoed back in the GET response so the table can label them.
-
-  const MODEL_LABELS = {
-    opus: 'Opus',
-    sonnet: 'Sonnet',
-    haiku: 'Haiku',
-    script: 'no LLM',
-  };
-
-  function modelLabel(m) {
-    return MODEL_LABELS[m] || m || '—';
-  }
-
-  function renderSkillPrefs(data) {
-    const tbody = $('#skill-prefs-table tbody');
-    if (!tbody) return;
-    const rows = Array.isArray(data?.effective) ? data.effective : [];
-    const allowed = Array.isArray(data?.allowed_models) ? data.allowed_models : ['opus', 'sonnet', 'haiku', 'script'];
-    if (rows.length === 0) {
-      tbody.innerHTML = emptyRow(3, 'No skills registered.');
-      return;
-    }
-    tbody.innerHTML = rows.map((row) => {
-      const opts = ['<option value="">— default —</option>']
-        .concat(allowed.map((m) => {
-          const sel = row.override_model === m ? ' selected' : '';
-          return `<option value="${m}"${sel}>${modelLabel(m)}</option>`;
-        }))
-        .join('');
-      const defaultCell = `<span class="skill-prefs__default" title="System default for this skill">${modelLabel(row.default_model)}</span>`;
-      return `
-        <tr data-skill="${escapeHtml(row.skill)}">
-          <td><code>${escapeHtml(row.skill)}</code></td>
-          <td>${defaultCell}</td>
-          <td>
-            <select class="skill-prefs__select" data-skill="${escapeHtml(row.skill)}" aria-label="Model for ${escapeHtml(row.skill)}">
-              ${opts}
-            </select>
-          </td>
-        </tr>
-      `;
-    }).join('');
-  }
-
-  async function saveSkillPref(skill, modelOrNull) {
-    const status = $('#skill-prefs-status');
-    if (status) { status.hidden = false; status.textContent = 'Saving…'; }
-    try {
-      const body = { [skill]: modelOrNull };
-      const resp = await patchJSON(`${API}/me/skill-prefs`, body);
-      renderSkillPrefs(resp);
-      if (status) status.textContent = modelOrNull
-        ? `Set ${skill} → ${modelLabel(modelOrNull)}.`
-        : `Cleared ${skill} override (falls back to default).`;
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      console.error('[builders] save skill pref failed', err);
-      if (status) status.textContent = 'Could not save. Try again.';
-    }
-  }
-
   // ---- onboarding live-tick poll (task 1444) -------------------------------
   //
   // The onboarding checklist is rendered once from the page-load /me snapshot.
@@ -2621,8 +2225,6 @@
     // /me because it spans all builders' work), loaded fire-and-forget so a
     // slow/failed feed can't hold up the rest of the hall.
     loadAcclaimFeed();
-    // Capture self id for the roster's "cannot change your own rank" guard.
-    rosterState.selfId = me.builder?.id ?? null;
 
     // #408: build the sticky nav now that every section has settled its
     // hidden state (welcome → karma → onboarding → security/roster).
@@ -2633,6 +2235,15 @@
     applyNewcomerGate();
     renderNav(me.builder, me.onboarding || null);
 
+    // task 1471: idea-inbox triage cue — Metic+ only (triage is a Metic+ action).
+    // Fetched fire-and-forget so a slow/large inbox can't hold up the hall; the
+    // widget is hiddenByDefault, so a non-triager never loads or sees idea data.
+    if (['metic', 'archon'].includes(normalizeRank(me.builder?.rank))) {
+      getJSON(`${API}/inbox`)
+        .then((data) => renderTriageInbox(data))
+        .catch(() => { /* nice-to-have; never break the hall */ });
+    }
+
     // Then the rest, in parallel. Any individual section failure shouldn't take
     // down the page — log and show an inline placeholder.
     // #726: the per-skill model picker (Voices) moved to /builders/settings,
@@ -2794,100 +2405,6 @@
       });
     }
 
-    // Security watch (Archon-only) — status filter + delegated action clicks.
-    // The section is hidden for non-Archons via unhideArchonView, so these
-    // listeners are safe to attach unconditionally (they just won't fire).
-    $('#f-security-status')?.addEventListener('change', (e) => {
-      securityState.statusFilter = e.target.value || '';
-      loadSecurityReports();
-    });
-    $('#security-reports')?.addEventListener('click', (e) => {
-      const btn = e.target.closest('.sec-act');
-      if (!btn) return;
-      const id = btn.dataset.id;
-      const action = btn.dataset.action;
-      if (id && action) adjudicateReport(id, action);
-    });
-    // Override-requests approve/deny — delegated to the table body.
-    $('#override-requests')?.addEventListener('click', (e) => {
-      const tr = e.target.closest('tr[data-request-id]');
-      if (!tr) return;
-      const id = tr.dataset.requestId;
-      if (e.target.classList.contains('override__approve')) decideOverride(id, 'approve');
-      else if (e.target.classList.contains('override__deny')) decideOverride(id, 'deny');
-    });
-    // Audit log — lazy-load on first <details> open, refresh on filter change.
-    $('#security-audit-details')?.addEventListener('toggle', (e) => {
-      if (e.target.open && !securityState.auditLoaded) {
-        securityState.auditLoaded = true;
-        loadAuditLog();
-      }
-    });
-    $('#f-audit-method')?.addEventListener('change', loadAuditLog);
-    $('#f-audit-builder')?.addEventListener('change', loadAuditLog);
-    $('#audit-refresh')?.addEventListener('click', loadAuditLog);
-
-    // Skill-prefs table — change handler delegated so post-render select
-    // elements still fire. The empty value ("— default —") clears the override
-    // via the null sentinel; everything else PATCHes the named model.
-    const prefsTable = $('#skill-prefs-table');
-    if (prefsTable) {
-      prefsTable.addEventListener('change', (e) => {
-        const sel = e.target.closest('.skill-prefs__select');
-        if (!sel) return;
-        const skill = sel.dataset.skill;
-        if (!skill) return;
-        const next = sel.value === '' ? null : sel.value;
-        saveSkillPref(skill, next);
-      });
-    }
-
-    // Roster — Archon-only. Filter change, threshold change, refresh button.
-    // Action buttons (promote / demote / release-stale) delegated to the
-    // table body; the table is re-rendered on every action so listeners can
-    // safely be one-shot at the container.
-    $('#f-roster-show')?.addEventListener('change', (e) => {
-      rosterState.show = e.target.value || 'all';
-      // #408: changing the filter changes the dataset, so jump back to the
-      // first page — otherwise a "show: onboarding (3 rows)" filter could
-      // leave the user stranded on page 4 of "all".
-      rosterState.page = 0;
-      renderRoster();
-    });
-    $('#f-roster-stale')?.addEventListener('change', (e) => {
-      const n = Number(e.target.value);
-      if (Number.isFinite(n) && n > 0 && n <= 720) {
-        rosterState.staleHours = n;
-        rosterState.page = 0;
-        loadRoster();
-      } else {
-        e.target.value = String(rosterState.staleHours);
-        toast('Stale threshold must be 1–720 hours.');
-      }
-    });
-    $('#roster-refresh')?.addEventListener('click', loadRoster);
-    // #408: roster pager — prev/next buttons mirroring the leaderboard
-    // pattern. Page index is clamped inside renderRoster, so we don't need
-    // to guard the bounds here.
-    $('#roster-prev')?.addEventListener('click', () => {
-      if (rosterState.page > 0) { rosterState.page--; renderRoster(); }
-    });
-    $('#roster-next')?.addEventListener('click', () => {
-      rosterState.page++;
-      renderRoster();
-    });
-    $('#roster-table')?.addEventListener('click', (e) => {
-      const btn = e.target.closest('button');
-      if (!btn) return;
-      const id = btn.dataset.id;
-      if (!id) return;
-      if (btn.classList.contains('roster__promote') || btn.classList.contains('roster__demote')) {
-        rosterChangeRank(id, btn.dataset.next, btn.dataset.current);
-      } else if (btn.classList.contains('roster__release-stale')) {
-        rosterReleaseStale(id);
-      }
-    });
-
     // Logout link: the /api/bongos/auth/logout endpoint is POST + requires the
     // session cookie. Convert the anchor click into a fetch then bounce home.
     $('#logout-link').addEventListener('click', async (e) => {