@bongos/core 1.19.1044 → 1.19.1046

package/modules/hall-ui/public/goals.html

@@ -235,7 +235,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>
@@ -243,6 +243,9 @@
 <script src="/builders/hall-kit.js"></script>
 <!-- shared TASK-DOMAIN helpers (window.OTBTaskLib) — priority/touches/prompt/refusal-copy, one copy for both boards (task 1002463). -->
 <script src="/builders/task-lib.js"></script>
+<!-- task 1003458: the hall's ONE claim/release action + refusal copy (window.OTBClaimAction).
+     Before goals-render.js, which destructures errCode/errDetails/friendlyClaimError from it. -->
+<script src="/builders/claim-action.js?v=2026-09-26-claimaction1"></script>
 <script src="/builders/task-detail.js?v=2026-07-03-taskdetail"></script>
 <script src="/builders/brand-apply.js?v=2026-06-27-r75"></script>
 <script src="/builders/goals-lib.js?v=2026-08-21-goalslib1"></script>
@@ -258,7 +261,7 @@
 <!-- task 1003206: the page RENDERERS, the second half of the carve goals-lib.js
      began — goals-lib took the pure helpers, this takes the view painters.
      Loaded BEFORE goals-page.js, which calls window.OTBGoalsRender(ctx). -->
-<script src="/builders/goals-render.js?v=2026-08-24-goalsrender1"></script>
-<script src="/builders/goals-page.js?v=2026-08-21-goals7"></script>
+<script src="/builders/goals-render.js?v=2026-09-26-claimaction1"></script>
+<script src="/builders/goals-page.js?v=2026-09-26-claimaction1"></script>
 </body>
 </html>

package/modules/hall-ui/public/government.html

@@ -134,7 +134,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/idea.html

@@ -52,7 +52,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N overlay, so a ref

package/modules/hall-ui/public/ideas.html

@@ -225,7 +225,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- task 1003069 (R08) — the quick-filing form's routed result links a task

package/modules/hall-ui/public/index.html

@@ -102,7 +102,7 @@
 <script src="/builders/brand-apply.js?v=2026-06-27-r75" defer></script>
 <!-- The app shell (sidebar + top bar + view router). Dependency-free; loaded
      BEFORE builders.js so the chrome ids exist when events are wired. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate" defer></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople" defer></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 2166: the shared component kit (window.OTBKit) — pager/ledger/rail.

package/modules/hall-ui/public/modules.html

@@ -80,7 +80,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>

package/modules/hall-ui/public/primer.html

@@ -115,7 +115,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- the shared markdown reader (window.OTBMdReader) — primer.js renders through

package/modules/hall-ui/public/profile.html

@@ -187,7 +187,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before profile.js, which pulls from it. -->

package/modules/hall-ui/public/project-settings.html

@@ -58,7 +58,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-16-gate"></script>

package/modules/hall-ui/public/ranks.html

@@ -68,7 +68,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before ranks.js, which pulls from it. -->

package/modules/hall-ui/public/roadmap.html

@@ -41,7 +41,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-14-domutils"></script>

package/modules/hall-ui/public/{people.css → roster.css}

@@ -1,13 +1,11 @@
-/* people.css — page-local styles for the cross-project builder directory
-   (task 1003470, goal 1000081), served at /people — its legacy door /scouting
-   was deleted in task 1003440 and now 301s here. Only the identity cell lives
-   here: the
-   ledger, the filter bar, the pager, the chips and the empty state are the
-   shell's and the kit's. Tokens are the world's real names — no compat alias. */
+/* roster.css — page-local styles for the Builders page (/roster). The identity
+   cell was shared with the cross-project directory at /people until task
+   1003444 deleted that page from the hall; it lives here now. Only the
+   identity cell and the place/id cell live here: the ledger, the filter bar,
+   the pager and the empty state are the shell's and the kit's. Tokens are the
+   world's real names — no compat alias. */
 
-/* The who cell: avatar, then the name over the login. A row that carries an
-   avatar centres its figures on it, so the numbers line up with the name. */
-#people-body .ledger td { vertical-align: middle; }
+/* The who cell: avatar, then the name over the login. */
 .dir-who { display: inline-flex; align-items: center; gap: 11px; min-width: 0; }
 .dir-avatar {
   width: 30px; height: 30px; border-radius: 50%; flex: none;
@@ -33,5 +31,3 @@
   font-size: 11.5px;
   color: var(--ink-faint);
 }
-.dir-crafts { display: inline-flex; flex-wrap: wrap; gap: 6px; }
-.dir-none { color: var(--ink-faint); }

package/modules/hall-ui/public/roster.html

@@ -9,9 +9,9 @@
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
   <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
-  <!-- task 1003441: the identity cell (avatar, name, login) is shared with the
-       cross-project directory — one definition, both rosters. -->
-  <link rel="stylesheet" href="/builders/people.css">
+  <!-- task 1003441: the identity cell (avatar, name, login). It was shared with
+       the cross-project /people page until task 1003444 deleted it. -->
+  <link rel="stylesheet" href="/builders/roster.css">
 </head>
 <body data-page="roster" data-page-title="Builders">
 
@@ -25,7 +25,7 @@
            rewritten by roster.js once the roster has loaded. -->
       <div class="page-head page-head--board">
         <h1 class="page-head__h">Builders</h1>
-        <p class="page-head__sub" id="roster-sub">Who builds on this project, ranked by work shipped. This project's own ledger — unlike the cross-project directory, it lists everyone who builds here.</p>
+        <p class="page-head__sub" id="roster-sub">Who builds on this project, ranked by work shipped. This project's own ledger — everyone who builds here is listed.</p>
       </div>
 
       <main id="hall-main">
@@ -50,7 +50,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB — rank labels, number formats) + the

package/modules/hall-ui/public/roster.js

@@ -5,9 +5,9 @@
 // Community nav group read as one real page plus a link into the home page. It
 // is a page now, and `/#leaderboard` redirects here (shell.js VIEW_REDIRECTS).
 //
-// PROJECT-OWN, not cross-project. /people is the cross-project directory behind
-// `project.curate`; this is the project's own ledger and is deliberately
-// ungated, because its one data source — GET /leaderboard
+// PROJECT-OWN, not cross-project: the hall's only builder directory since task
+// 1003444 deleted /people (cross-project discovery is the hub's, ADR 0337). It
+// is deliberately ungated, because its one data source — GET /leaderboard
 // (modules/economy/routes/leaderboard.js) — is deliberately unauthenticated and
 // mirrors the public status surface. No visibility predicate is applied and that
 // is CORRECT: privacy suppresses cross-project surfaces only, so a builder
@@ -77,10 +77,9 @@
   function httpUrl(u) {
     return /^https?:\/\//i.test(String(u || '')) ? String(u) : null;
   }
-  // The identity cell, shared with /people through people.css. The name opens
-  // the builder's profile PAGE here: this is a project surface, so a local
-  // profile id exists — unlike the cross-project directory, which can only
-  // offer GitHub. Guarded on b.id so a row without one degrades to plain text
+  // The identity cell (roster.css). The name opens the builder's profile PAGE:
+  // this is a project surface, so a local profile id exists. Guarded on b.id
+  // so a row without one degrades to plain text
   // rather than a broken /profile?id=undefined link (task 1467).
   function whoHtml(b) {
     var name = esc(builderName(b));

package/modules/hall-ui/public/roster.states.json

@@ -1,5 +1,5 @@
 {
-  "_": "Builders — this project's OWN roster, ranked by credits earned (task 1003441, goal 1000075). Was the #leaderboard hash view on index.html; /#leaderboard now redirects here. Deliberately UNGATED, because its one data source (GET /leaderboard) is deliberately unauthenticated and mirrors the public status surface — so unlike people.states.json the `out` state below renders the real page rather than a seal. Populated look: the hall-preview harness (scripts/hall-preview/fixtures/leaderboard.json carries thirteen builders with avatars, ranks, karma and tokens).",
+  "_": "Builders — this project's OWN roster, ranked by credits earned (task 1003441, goal 1000075). Was the #leaderboard hash view on index.html; /#leaderboard now redirects here. Deliberately UNGATED, because its one data source (GET /leaderboard) is deliberately unauthenticated and mirrors the public status surface — so unlike a gated page's states file the `out` state below renders the real page rather than a seal. Populated look: the hall-preview harness (scripts/hall-preview/fixtures/leaderboard.json carries thirteen builders with avatars, ranks, karma and tokens).",
   "page": "/builders/roster",
   "surface": "hall-ui",
   "stub": {

package/modules/hall-ui/public/sessions.html

@@ -99,7 +99,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded BEFORE sessions.js so it can pull from it. -->

package/modules/hall-ui/public/settings.html

@@ -96,7 +96,7 @@
               <p class="scroll__lede">
                 Your track record across every project you build on, shown on your
                 public profile. Hiding it takes effect immediately everywhere —
-                your profile, the People directory, and recruiting views.
+                your profile, the recruiting directory, and a recruiter's look-up of one builder.
               </p>
               <div id="cross-project-rows"></div>
               <p class="settings-status" id="cross-project-status" role="status" aria-live="polite"></p>
@@ -436,7 +436,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page scripts run. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before consuming IIFEs. -->

package/modules/hall-ui/public/settings.js

@@ -490,7 +490,7 @@
   // GET/PATCH /api/bongos/me/cross-project (platform-identity module — hub only).
   // One on/off toggle: "show my cross-project record on my public profile".
   // Enforcement is server-side in the module's read functions, so flipping it
-  // takes effect immediately on the profile and /people. The section
+  // takes effect immediately on the profile and /scouting. The section
   // reveals ONLY when the module's endpoint answers (404 on a vanilla instance →
   // stays hidden, no error state). P04 later re-homes this in the Profile rail
   // group; storage is account-global on the hub (not behavior_prefs).
@@ -562,7 +562,7 @@
       privacyRow('visibility', 'Public profile page', isPublic ? 'Public' : 'Private', isPublic,
         'Public means anyone can open your profile page and find you by name. Private hides the page from everyone — including you: it answers "not found" to every visitor, and you read your own record here in Settings instead.', '') +
       privacyRow('discoverable', 'Discoverable by recruiters', discoverable ? 'On' : 'Off', discoverable,
-        `Recruiters looking for builders can find you. ${grant}${despitePrivate} Turning this off removes you from both recruiting surfaces — the People directory, and a recruiter's look-up of one builder — straight away.`,
+        `Recruiters looking for builders can find you. ${grant}${despitePrivate} Turning this off removes you from both recruiting surfaces — the recruiting directory, and a recruiter's look-up of one builder — straight away.`,
         follows ? ' <span class="voices__default">· follows your profile setting</span>' : '');
   }
 

package/modules/hall-ui/public/shell.js

@@ -92,7 +92,6 @@
     goals: '<circle cx="9" cy="9" r="6.5"/><circle cx="9" cy="9" r="3.5"/><circle cx="9" cy="9" r="0.8" fill="currentColor"/>',
     roadmap: '<path d="M3 15.5V3.5l4 2 4-2 4 2v10l-4-2-4 2-4-2Z"/><path d="M7 3.5v10M11 5.5v10"/>',
     leaderboard: '<path d="M3.5 15.5v-6M9 15.5V3.5m5.5 12v-9"/>',
-    people: '<circle cx="6.5" cy="6.5" r="2.5"/><path d="M2.5 15c.5-2.4 2-3.7 4-3.7s3.5 1.3 4 3.7"/><circle cx="12.5" cy="7" r="2"/><path d="M12 11.5c1.8.1 3 1.3 3.5 3.3"/>',
     docs: '<path d="M4 3.5h7l3 3v10H4v-13Z"/><path d="M11 3.5v3h3"/>',
     // task 1003117 (R06 of goal 1000074): the Studio (artist mode). A sprout —
     // the zen-garden reading of "a place an artist wants to be", so it does not
@@ -293,15 +292,9 @@
       // page, so no `view` key. Labelled Builders — 'roster' is the word
       // modules/hall-ui/CLAUDE.md uses, but Builders is what a reader scans for.
       { id: 'roster', label: 'Builders', icon: 'leaderboard', href: '/roster', gate: 'signed' },
-      // task 1002577: the cross-project builder directory (/scouting graduated
-      // into the hall). Gated to MATCH its data — /api/bongos/scouting checks
-      // `project.curate`, whose catalog floor is METIC. This read 'archon' until
-      // task 1002710: the nav was stricter than the wall, so a Metic could open
-      // /people by URL but never saw the link. Cosmetic either way —
-      // requireProjectCuratePage is the wall — but a nav that disagrees with the
-      // gate teaches the ladder wrong. The module gate hides the tab on
-      // instances without the platform-identity hub.
-      { id: 'people', label: 'People', icon: 'people', href: '/people', gate: 'government', module: 'platform-identity' },
+      // task 1003444: 'People', the cross-project directory, was deleted (owner
+      // call 2026-09-25, ADR 0337 D5). Cross-project discovery is the hub's, and
+      // /people redirects to /roster.
     ] },
     { group: 'Docs', gate: 'signed', items: [
       // task 1002710: primer + diagrams were gate:'member' (rank !== xenos) to

package/modules/hall-ui/public/studio.html

@@ -66,7 +66,7 @@
 
 <div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
 
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/dom-utils.js?v=2026-06-23-contrib"></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure

package/modules/hall-ui/public/style.css

@@ -3391,15 +3391,8 @@ main [id] { scroll-margin-top: calc(var(--topbar-h) + 16px); }
    does not exist, so "Someone helped" rendered full-size on every row. */
 .btn--sm { min-height: 26px; padding: 0 11px; font-size: 12.5px; }
 
-/* people.js:45 — the builder's name cell. The hall's only definition used to
-   live in scouting.html's inline <style>, so the same data read bold on
-   Scouting and plain on People. It lives here now, and scouting.html itself
-   went with task 1003440. */
-.who { font-weight: 600; }
-
-/* people.js:105 — notice() sets body.className='note'. .note lives in
-   my-projects.css, which People never loads, so every gated / empty / error
-   message on that page rendered unstyled. */
+/* The notice line: roster.js and blockers.js notice() set body.className='note'
+   for an empty / error message, and neither page's sheet defines it. */
 .note { margin: 0; font-size: 13.5px; color: var(--ink-soft); }
 
 .empty-state { padding: 8px 0; }

package/modules/hall-ui/public/task.html

@@ -57,7 +57,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so task.js can pull from it. -->

package/modules/hall-ui/public/watch.html

@@ -162,7 +162,7 @@
 
 <!-- The app shell (sidebar + top bar). Dependency-free; loaded FIRST so the
      chrome exists before the page script runs. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded before watch.js, which pulls from it. -->

package/modules/hall-ui/public/work.html

@@ -171,7 +171,7 @@
 
 <!-- The app shell (sidebar + top bar + footer). Dependency-free; runs at parse
      time so the chrome exists before the deferred page scripts execute. -->
-<script src="/builders/shell.js?v=2026-09-26-swupdate"></script>
+<script src="/builders/shell.js?v=2026-09-26-nopeople"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared frontend toolkit (window.OTB) — loaded FIRST so work.js can pull from it. -->
@@ -180,13 +180,16 @@
 <script src="/builders/hall-kit.js" defer></script>
 <!-- shared TASK-DOMAIN helpers (window.OTBTaskLib) — priority/touches/prompt/refusal-copy, one copy for both boards (task 1002463). -->
 <script src="/builders/task-lib.js" defer></script>
+<!-- task 1003458: the hall's ONE claim/release action + refusal copy (window.OTBClaimAction).
+     Before work.js, which destructures friendlyClaimError from it. -->
+<script src="/builders/claim-action.js?v=2026-09-26-claimaction1" defer></script>
 <!-- the hall's one definition of "mine" (window.OTBMineLens) — goals you are on, claims you hold, ships you made; shared with the goal board. -->
 <script src="/builders/mine-lens.js" defer></script>
 <!-- the Completed tab's project-wide momentum card (window.OTBWorkSummary), carved out of work.js. -->
 <script src="/builders/work-summary.js" defer></script>
 <script src="/builders/task-detail.js?v=2026-07-03-taskdetail" defer></script>
 <script src="/builders/brand-apply.js?v=2026-06-19-r56" defer></script>
-<script src="/builders/work.js?v=2026-07-03-workboard3" defer></script>
+<script src="/builders/work.js?v=2026-09-26-claimaction1" defer></script>
 <script src="/builders/copy-on-click.js?v=2026-06-01-copy-1" defer></script>
 </body>
 </html>

package/modules/hall-ui/public/work.js

@@ -36,6 +36,10 @@
   // file's exact variants (date-only fmtDate; a 2200ms clearing toast).
   // fmtAgo / toAuth / getJSON / postJSON stay local below.
   const { escapeHtml, $, fmtNum, errCode, errDetails } = window.OTB; // task 1002462: envelope readers
+  // The hall's ONE claim/release refusal copy (task 1003458). This board's own
+  // copy is gone: a second surface that wants a claim button consumes this
+  // instead of lifting the switch, which is how the two drifted apart before.
+  const { friendlyClaimError, makeClaimAction } = window.OTBClaimAction;
   // Shared task-domain helpers (task 1002463). These lived in two copies here and
   // in the other board and had already drifted — goals-page.js had silently lost
   // friendlyBatchReason's MODULE_CONFLICT case. Destructured so every call site
@@ -180,6 +184,18 @@
     return data;
   }
 
+  // The hall's ONE claim/release action (task 1003458). Everything this board
+  // used to hand-roll four times — the POST, the refusal sentence, the
+  // stale-view refresh, the all-or-nothing batch report — lives in
+  // claim-action.js now; doClaim/doRelease/doBulkClaim/doBulkRelease below keep
+  // only what is genuinely this page: button text, the re-entrancy guard, the
+  // confirm() wording and the selection. friendlyBatchReason is injected rather
+  // than imported there, so claim-action.js stays dependency-free.
+  // refreshLive is a hoisted declaration; toast and API are already bound above.
+  const claimAction = makeClaimAction({
+    postJSON, toast, API, refresh: refreshLive, describeBatchReason: friendlyBatchReason,
+  });
+
   // ---- paginated lists (task 1931/1955 → kit, task 2170) --------------------
   // All four Work-page lists paginate through the shared OTBKit pager (the
   // canonical copy of the helper that used to live here). localStorage keys are
@@ -627,51 +643,6 @@
       }
     }
   }
-
-  // ---- claim / release actions ---------------------------------------------
-
-  // Map the server's typed error code to a builder-readable line. The codes are
-  // exactly those POST /claims and POST /claims/:id/resolve can return.
-  function friendlyActionError(status, data) {
-    // task 1002462: read the ADR 0116 envelope. `data.error` is an OBJECT, so the
-    // old `const code = data && data.error` compared a string to an object and
-    // EVERY case below fell through to the generic default — a wrong-but-plausible
-    // toast on every claim/release refusal.
-    const det = errDetails(data);
-    switch (errCode(data)) {
-      case 'ALREADY_CLAIMED':
-        return 'Someone else claimed that task first. The board will refresh.';
-      case 'TASK_NOT_READY':
-        return 'That task is no longer ready to be claimed.';
-      case 'TOUCHES_CONFLICT': {
-        const titles = Array.isArray(det.conflicts) ? det.conflicts.map((c) => c.title).filter(Boolean) : [];
-        return titles.length
-          ? `That task overlaps an active claim: ${titles.join('; ')}. Wait for it to ship.`
-          : 'That task overlaps another active claim. Wait for it to ship.';
-      }
-      case 'DEPS_NOT_SHIPPED':
-        return 'That task waits on unshipped dependencies. Pick another for now.';
-      case 'rank_too_low_for_task':
-      case 'XENOS_RESTRICTED':
-      case 'INSUFFICIENT_RANK':
-        return 'Your rank is not yet high enough for that task.';
-      case 'newcomer_must_ship_first':
-        return det.what_to_do || 'Ship your current claim before opening another.';
-      case 'NOT_YOUR_CLAIM':
-        return 'That claim is not yours to release.';
-      case 'ALREADY_RESOLVED':
-        return 'That claim was already resolved. The board will refresh.';
-      case 'BUILDER_INACTIVE':
-        return 'Your account is inactive. Contact an Archon.';
-      default:
-        return `The board could not complete that (${status}). Try again.`;
-    }
-  }
-
-  // Maps a single batch-item failure reason (POST /claims/batch,
-  // /claims/batch/validate) to a builder-readable fragment. Distinct from
-  // friendlyActionError above because a batch item's shape differs (reason,
-  // not error; extra fields like conflictsWithTaskId/module_key).
   async function copyText(text) {
     try { await navigator.clipboard.writeText(text); return true; }
     catch (_) {
@@ -735,18 +706,15 @@
   async function scheduleValidate(key, ids) {
     if (validateDebounce) clearTimeout(validateDebounce);
     validateDebounce = setTimeout(async () => {
-      try {
-        const result = await postJSON(`${API}/claims/batch/validate`, { task_ids: ids });
-        validateCache.key = key;
-        validateCache.parallelSafe = !!result.parallel_safe;
-        validateCache.byId = new Map((result.results || []).map((r) => [String(r.task_id), r]));
-      } catch (_) {
-        // Best-effort — leave Parallel disabled-with-a-generic-title on failure
-        // rather than risk copying a prompt for tasks we couldn't verify.
-        validateCache.key = key;
-        validateCache.parallelSafe = false;
-        validateCache.byId = new Map();
-      }
+      // The dry run lives in claim-action.js with the rest of the claim path; it
+      // is best-effort there, so a failure lands as parallelSafe:false with an
+      // empty map rather than a throw — Parallel stays disabled with a generic
+      // title instead of copying a prompt for tasks nobody verified. The
+      // debounce, the cache key and the re-render stay here: page furniture.
+      const out = await claimAction.validateMany(ids);
+      validateCache.key = key;
+      validateCache.parallelSafe = out.parallelSafe;
+      validateCache.byId = out.byId;
       renderBulkToolbar();
     }, 350);
   }
@@ -911,33 +879,8 @@
     const btn = $('#bulk-claim-btn');
     if (btn) { btn.disabled = true; btn.textContent = 'Claiming…'; }
     try {
-      if (ids.length === 1) {
-        await postJSON(`${API}/claims`, { task_id: ids[0], bind_session: false });
-        toast(`You claimed #${ids[0]}. Open a terminal to start work.`);
-      } else {
-        await postJSON(`${API}/claims/batch`, { task_ids: ids, bind_session: false });
-        toast(`Claimed ${ids.length} tasks. Open a terminal to start work.`);
-      }
-      selection.claim.clear();
-      await refreshLive();
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      // task 1002462: same envelope defect — this tested `err.data.error === 'batch_failed'`
-      // against an object, so an all-or-nothing batch refusal rendered as the generic toast
-      // and the per-task reasons were dropped on the floor.
-      if (err.status === 409 && errCode(err.data) === 'batch_failed') {
-        // One read covers both envelopes — errDetails falls back to the body (task 1003657).
-        const bdet = errDetails(err.data);
-        const failures = Array.isArray(bdet.failures) ? bdet.failures : [];
-        const lines = failures.map((f) => `#${f.task_id} (${friendlyBatchReason(f)})`);
-        toast(lines.length
-          ? `The batch could not be claimed — ${lines.join('; ')}.`
-          : 'The batch could not be claimed. It was left untouched (all-or-nothing).');
-        await refreshLive().catch(() => {});
-      } else {
-        toast(friendlyActionError(err.status, err.data));
-        if (err.status === 409) await refreshLive().catch(() => {});
-      }
+      const out = await claimAction.claimMany(ids);
+      if (out.ok) selection.claim.clear();
     } finally {
       renderBulkToolbar();
     }
@@ -952,22 +895,8 @@
     const btn = $('#bulk-release-btn');
     if (btn) { btn.disabled = true; btn.textContent = 'Releasing…'; }
     try {
-      if (entries.length === 1) {
-        await postJSON(`${API}/claims/${encodeURIComponent(entries[0][0])}/resolve`, { outcome: 'abandoned' });
-        toast(`Released #${entries[0][1]}. It returns to the queue.`);
-      } else {
-        const result = await postJSON(`${API}/claims/batch/release`, { claim_ids: entries.map(([cid]) => Number(cid)) });
-        const released = Array.isArray(result.released) ? result.released.length : 0;
-        const failed = Array.isArray(result.failures) ? result.failures.length : 0;
-        toast(failed
-          ? `Released ${released} of ${entries.length} — ${failed} could not be released.`
-          : `Released ${released} tasks. They return to the queue.`);
-      }
-      selection.release.clear();
-      await refreshLive();
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      toast(friendlyActionError(err.status, err.data));
+      const out = await claimAction.releaseMany(entries);
+      if (out.ok) selection.release.clear();
     } finally {
       renderBulkToolbar();
     }
@@ -979,18 +908,10 @@
     pending.add(key);
     if (btn) { btn.disabled = true; btn.textContent = 'Claiming…'; }
     try {
-      // bind_session:false — a web claim has no working session, so leave it
-      // unbound (see claims.js resolveCreatorSessionId) and the builder can ship
-      // it later from any of their own terminals.
-      await postJSON(`${API}/claims`, { task_id: Number(taskId), bind_session: false });
-      toast(`You claimed #${taskId}. Open a terminal to start work.`);
-      await refreshLive();
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      toast(friendlyActionError(err.status, err.data));
-      // A conflict/already-claimed means our view is stale — pull fresh truth.
-      if (err.status === 409) await refreshLive().catch(() => {});
-      if (btn) { btn.disabled = false; btn.textContent = 'Claim'; }
+      const out = await claimAction.claim(taskId);
+      // Leave the button disabled while the page is navigating to sign-in —
+      // re-enabling it invites a click that cannot land.
+      if (!out.ok && !out.redirected && btn) { btn.disabled = false; btn.textContent = 'Claim'; }
     } finally {
       pending.delete(key);
     }
@@ -1003,17 +924,8 @@
     pending.add(key);
     if (btn) { btn.disabled = true; btn.textContent = 'Releasing…'; }
     try {
-      // No DELETE /claims/:id exists — release is resolve(outcome=abandoned),
-      // the same path /builder-release uses. Scoped to the caller's own claim
-      // server-side (NOT_YOUR_CLAIM).
-      await postJSON(`${API}/claims/${encodeURIComponent(claimId)}/resolve`, { outcome: 'abandoned' });
-      toast(`Released #${taskId}. It returns to the queue.`);
-      await refreshLive();
-    } catch (err) {
-      if (err && err.message === 'redirecting to auth') return;
-      toast(friendlyActionError(err.status, err.data));
-      if (err.status === 409) await refreshLive().catch(() => {});
-      if (btn) { btn.disabled = false; btn.textContent = 'Release'; }
+      const out = await claimAction.release(claimId, taskId);
+      if (!out.ok && !out.redirected && btn) { btn.disabled = false; btn.textContent = 'Release'; }
     } finally {
       pending.delete(key);
     }

package/modules/hall-ui/records/builders-roster.md

@@ -2,7 +2,7 @@
 
 **The BUILDERS page landed next (task 1003441, goal 1000075)** — the in-project roster, at `/roster`. It is not a redesign but a MOVE: the Roll was a `#leaderboard` HASH VIEW on `index.html`, which is why the Community group read as one real page plus a link into the home page. Four things it settled:
 
-- **The load-bearing part was not the markup.** `shell.js` `VIEWS`, `dom-utils.js` `HALL_VIEWS` and `hall-widgets.js` all declared `leaderboard`; the table, its pager, its sort lenses (`LB_SORT_HEADERS`, `sortedLeaderboardRows`) and the achievement laurels (`ACH_EMOJI`) lived in `hall-render.js`. All of it MOVED to `roster.js` rather than being copied, so Home carries no dead renderer. `roster.html` is the board archetype at people.html’s shape and reuses `people.css` for the identity cell — one definition, both rosters.
+- **The load-bearing part was not the markup.** `shell.js` `VIEWS`, `dom-utils.js` `HALL_VIEWS` and `hall-widgets.js` all declared `leaderboard`; the table, its pager, its sort lenses (`LB_SORT_HEADERS`, `sortedLeaderboardRows`) and the achievement laurels (`ACH_EMOJI`) lived in `hall-render.js`. All of it MOVED to `roster.js` rather than being copied, so Home carries no dead renderer. `roster.html` is the board archetype at people.html’s shape and reuses `people.css` for the identity cell — one definition, both rosters, until task 1003444 deleted `/people` and the sheet became `roster.css`.
 - **`lbState` and `leaderboardPlace()` STAYED on Home**, shrunk to `{ rows: [] }`. The Standing card still says "#N on the leaderboard", and it needs the same rows; the fetch stays too. Verified live: the card reads `#4 on the leaderboard` with the table gone.
 - **The hash REDIRECTS, it does not alias.** `#achievements` could fold into Standing because Standing exists on that page; there is no host view for a Roll that left. So `VIEW_REDIRECTS` in `shell.js` sends `#leaderboard` to `/roster` via `location.replace`, guarded to the index — without it `viewFromHash` returns nothing and `route()` silently leaves the reader on Home, a dead link that looks like it worked.
 - **It is deliberately UNGATED,** and `tests/hall_page_gate_map.mjs` spells that out rather than defaulting. Its one data source, `GET /leaderboard`, is deliberately unauthenticated and mirrors the public status surface; a page must not be gated tighter than the API it fronts, and it was already reachable to a stranger as a view on the ungated index. No visibility predicate is applied and that is correct — privacy suppresses cross-project surfaces only, so a `private` builder still appears on the roster of a project they build on (ADR 0225).