@bongos/core 1.19.1072 → 1.19.1074

package/modules/hall-ui/public/builders.js

@@ -88,6 +88,11 @@
       const err = new Error(detail);
       err.status = res.status;
       err.code = code;
+      // task 1003459 — the { status, data } shape claim-action.js's
+      // errCode/errDetails/errMessage read. err.code/detail above stay exactly
+      // as before for the existing /vote caller (which reads only .status and
+      // .message); this is additive.
+      err.data = res.data || {};
       throw err;
     }
     return res.data;
@@ -118,10 +123,11 @@
   // ---- repo info (the clone URL the welcome walkthrough hands a newcomer) ---
   //
   // The /builder-* commands live INSIDE the repo (.claude/skills/, shelling out
-  // to scripts/gds/*.js). Setup now runs on a hosted dev box (#777), so the
-  // newcomer never clones a repo locally — the old repo-clone walkthrough (and
-  // the /public/repo-info fetch that fed it) was removed with the setup-first
-  // redesign. The /public/repo-info surface still exists for other callers.
+  // to scripts/gds/*.js). The old repo-clone walkthrough (and the
+  // /public/repo-info fetch that fed it) was removed with the setup-first
+  // redesign (#777); the welcome panel's clone block now reads the instance's
+  // repo coords instead. The /public/repo-info surface still exists for other
+  // callers.
 
   // ---- rank badge (V3.R16 #240) -------------------------------------------
   // Three live ranks per ADR 0018: archon > metic > xenos. Missing rank
@@ -386,14 +392,6 @@
 
 
 
-  // #785: remember which setup config the builder picked (Desktop app vs Claude
-  // Online) so it survives a re-render / reload / tab switch — renderWelcome used
-  // to hardcode 'desktop' every time. Device-level (not per-builder): it's "how I
-  // connect from this machine". Fail-open to 'desktop' (the recommended default).
-  function writeSetupConfig(v) {
-    try { window.localStorage.setItem(SETUP_CONFIG_KEY, v === 'online' ? 'online' : 'desktop'); } catch (_) { /* private mode — won't persist, fine */ }
-  }
-
   // task 2169 (banner budget): exactly one banner panel at a time. The
   // checklist render runs before the welcome render in the boot pass, so after
   // the welcome panel's visibility settles we re-evaluate the checklist —
@@ -966,9 +964,13 @@
       list.innerHTML = rows.map((t) => {
         const credits = window.OTBBranding?.taskCreditValue?.(t) ?? t.credits_reward;
         const mins = t.est_minutes ? ` · ~${escapeHtml(String(t.est_minutes))}m` : '';
+        // task 1003459 — this row now claims directly (the extracted claim
+        // action, task 1003458) rather than only linking to the record and
+        // making the builder find the door there.
         return `<li class="next-up__item">
             <a class="next-up__title" href="/task/${encodeURIComponent(t.id)}">${escapeHtml(t.title || `task ${t.id}`)}</a>
             <span class="next-up__meta">#${escapeHtml(String(t.id))}${mins} · ${fmtNum(credits)} ${escapeHtml(cur)} est.</span>
+            <button class="task__claim next-up__claim" type="button" data-task-id="${escapeHtml(String(t.id))}" aria-label="Claim task ${escapeHtml(String(t.id))}">Claim</button>
           </li>`;
       }).join('');
       // Name the size of the queue these two came off. Silent when the count is
@@ -1006,24 +1008,20 @@
   // ---- onboarding live-tick poll (task 1444) -------------------------------
   //
   // The onboarding checklist is rendered once from the page-load /me snapshot.
-  // But three of its steps clear from LIVE server signals that flip WITHOUT any
+  // But two of its steps clear from LIVE server signals that flip WITHOUT any
   // local action or page reload while the hall sits open:
-  //   * box_connect — stamped by the box's heartbeat the first time a `claude`
-  //                   process runs on the dev box (builder_boxes.first_connected_at);
-  //   * cli_setup   — stamped when the Bongos CLI is first authenticated on the box;
+  //   * cli_setup   — stamped when the Bongos CLI is first authenticated;
   //   * join_discord — flips on the OAuth link (usually a full redirect, but can
   //                    also land from another tab).
-  // Without a poll, a newcomer who connects their box AFTER opening the hall sees
+  // Without a poll, a newcomer who signs the CLI in AFTER opening the hall sees
   // the step stay unchecked until they manually reload — exactly the bug scootermack
   // hit. "The city watches" only worked on the next full reload. So while any
   // live-signal step is still uncleared, re-fetch /me on an interval and re-render
-  // the checklist; stop once they all clear (or the builder graduates). The box
-  // panel runs its OWN poll and is never re-mounted here (renderOnboarding touches
-  // a different DOM subtree), so this doesn't disturb an in-flight setup.
+  // the checklist; stop once they all clear (or the builder graduates).
   let onboardingPollTimer = null;
   const ONBOARDING_POLL_MS = 15000;
 
-  // True while at least one step that clears from a live signal (box/cli/discord)
+  // True while at least one step that clears from a live signal (cli/discord)
   // is still uncleared and the builder hasn't graduated. The pick_disciplines and
   // ship_three steps flip via local action (PATCH re-renders) or shipping, so they
   // don't need a poll — scoping to the live-signal steps bounds polling to the
@@ -1032,7 +1030,7 @@
     if (!onboarding || onboarding.graduated) return false;
     const stages = Array.isArray(onboarding.stages) ? onboarding.stages : [];
     return stages.some((s) =>
-      (s.source === 'box' || s.source === 'cli' || s.source === 'discord') && !s.cleared);
+      (s.source === 'cli' || s.source === 'discord') && !s.cleared);
   }
 
   function stopOnboardingPoll() {
@@ -1129,8 +1127,8 @@
     // carries the builder's own state directly so this is a render-only call.
     renderOnboarding(me.onboarding || null, me.discord);
     // task 1444: keep the checklist live — re-fetch /me on an interval while a
-    // box/cli/discord step is still uncleared, so it ticks itself without a manual
-    // reload the moment the dev box connects (or the CLI/Discord links).
+    // cli/discord step is still uncleared, so it ticks itself without a manual
+    // reload the moment the CLI or Discord links.
     scheduleOnboardingPoll(me.onboarding || null);
     renderRecentGrades(me.grades?.recent || []);
     renderRollingNote(me.grades?.rolling || null);
@@ -1276,20 +1274,6 @@
       // Both new steps (join_discord, cli_setup) auto-detect server-side.
     });
 
-    // #777: setup-config toggle in the welcome panel. Flips which config pane
-    // (Desktop app vs Claude Online) is shown — pure client-side, no round-trip.
-    $('#welcome-body')?.addEventListener('click', (e) => {
-      const tab = e.target.closest('.setup__tab[data-config]');
-      if (!tab) return;
-      const setup = tab.closest('.setup');
-      if (!setup) return;
-      setup.dataset.config = tab.dataset.config;
-      setup.querySelectorAll('.setup__tab').forEach((t) => {
-        t.setAttribute('aria-selected', String(t === tab));
-      });
-      writeSetupConfig(tab.dataset.config); // #785: remember the choice
-    });
-
     // Welcome panel minimize toggle (replaces full dismiss).
     $('#welcome-minimize')?.addEventListener('click', () => {
       const scroll = $('#welcome-scroll');
@@ -1302,6 +1286,11 @@
     // V3.R25 (#245): delegated click handler for the peer-acclaim vote buttons.
     $('#acclaim-feed')?.addEventListener('click', onAcclaimClick);
 
+    // task 1003459 — the Claim button on each Next-up row; the action + the
+    // delegated listener live in hall-render.js (builders.js is at the
+    // 1,500-line ratchet, hall-ui/CLAUDE.md's "growth goes in the lib/renderer").
+    wireNextUpClaim();
+
     $('#f-ships-window')?.addEventListener('change', onShipsFilterChange);
     $('#f-ships-version')?.addEventListener('change', onShipsFilterChange);
     $('#f-ships-sort')?.addEventListener('change', renderRecentShips);
@@ -1416,8 +1405,8 @@
   // reads what this page holds NOW rather than what it held at boot. Everything
   // else is stable for the life of the page. This call sits AFTER every
   // declaration it passes — moving it earlier is a temporal-dead-zone crash.
-  const { SETUP_CONFIG_KEY, acclaimEvidenceHtml, analyticsState, lbState, mountHallWidgets, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey } = window.OTBHallRender({
-    API, RANK_ORDER, api, brandWorld, curLabel, emptyRow, fmtDate, mins, normalizeRank, pct, postJSON, rankLabel, rankWeight, signClasses, toast, usd,
+  const { acclaimEvidenceHtml, analyticsState, lbState, mountHallWidgets, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey, wireNextUpClaim } = window.OTBHallRender({
+    API, RANK_ORDER, api, brandWorld, curLabel, emptyRow, fmtDate, loadNextUp, mins, normalizeRank, pct, postJSON, rankLabel, rankWeight, signClasses, toast, usd,
     get instanceRepo() { return instanceRepo; },
     get lastClaimableCount() { return lastClaimableCount; },
     get lastCostState() { return lastCostState; },

package/modules/hall-ui/public/collab.html

@@ -38,7 +38,7 @@
         <!-- The glass figure strip task 1003942 promised and did not build, and
              the artist's verdict (task 1004041) asked for by name: three calm
              numbers a person meets BEFORE any age pill. The shell's .stat-row,
-             the same band Harbor, Gate and the copy desk open on; collab.js
+             the same band Gate and the copy desk open on; collab.js
              fills it from the two reads it already makes. -->
         <div class="stat-row ov-summary cb-figs" id="cb-figs" aria-label="Where the asks stand"></div>
 

package/modules/hall-ui/public/collab.js

@@ -425,7 +425,7 @@
   // grader's narc worker caught the omission and the artist named what it cost:
   // with no numbers to open on, the first thing a person meets is the wall of
   // age pills, which is why the two findings were one defect seen twice. So the
-  // strip is the shell's .stat-row, the same glass band Harbor, Gate and the
+  // strip is the shell's .stat-row, the same glass band Gate and the
   // copy desk open on, and it is drawn BEFORE the blocks in the markup.
   //
   // The figures repeat what the block heads count, and that is the point rather

package/modules/hall-ui/public/diagrams.html

@@ -71,10 +71,10 @@
 
         <section class="scroll" aria-labelledby="d4-h">
           <h2 id="d4-h" class="scroll__h">4 · The complete architecture</h2>
-          <p class="scroll__lede">Where your work runs and how it reaches production, in one diagram. Your <strong>device</strong> is only the screen; the <strong>dev box</strong> holds the worker, the code, and your local memory; the <strong>server</strong> (the droplet) is both the authority and production; <strong>GitHub</strong> holds the repo. Follow the numbered path to see how a credential-less box gets its work to prod. This is the largest diagram — <em>drag to pan, scroll to zoom, or open it fullscreen</em>.</p>
+          <p class="scroll__lede">Where your work runs and how it reaches production, in one diagram. <strong>Your machine</strong> holds the worker, the code, and your local memory; the <strong>server</strong> is both the authority and production; <strong>GitHub</strong> holds the repo. Follow the numbered path to see how your work gets to prod. This is the largest diagram — <em>drag to pan, scroll to zoom, or open it fullscreen</em>.</p>
           <figure class="diagram">
-            <img src="diagrams/04-architecture.png" alt="The complete architecture: your device (screen only), the dev box (worker, code, and local memory), the server droplet (authority and production, with Postgres, the server-side memory store, and the push credential), and GitHub (branch-protected main + Actions). Numbered edges show the box-to-production ship flow; the per-builder memory layer syncs between the box and the server.">
-            <figcaption>Device · dev box · memory · server (authority + prod) · GitHub — and the full box→production ship flow.</figcaption>
+            <img src="diagrams/04-architecture.png" alt="The complete architecture: your machine (the worker, the code, and local memory), the server (authority and production, with Postgres, the server-side memory store, and the push credential), and GitHub (branch-protected main). Numbered edges show how a change travels from your machine to production; the per-builder memory layer syncs between your machine and the server.">
+            <figcaption>Your machine · memory · server (authority + prod) · GitHub — and the full path from your machine to production.</figcaption>
           </figure>
         </section>
 

package/modules/hall-ui/public/dom-utils.js

@@ -95,7 +95,7 @@
   }
 
   // Feature-module gate (R60, task 1199 / ADR 0062 §4). serve-internal.js injects
-  // window.__MODULES__ = { enabled: { game, 'art-pipeline', discord, 'dev-box' }, … }
+  // window.__MODULES__ = { enabled: { game, 'art-pipeline', discord, … }, … }
   // synchronously (the same path as window.__BRANDING__), so hall/status pages can
   // hide an off module's UI. Defaults to TRUE when the global or key is missing, so
   // a stale cache / fetch hiccup degrades to showing the full UI, never silently

package/modules/hall-ui/public/gate.js

@@ -7,7 +7,7 @@
 // classifier the CI runs), and an Approve button that records the owner's seal
 // (a server-set gate-owner-approved status) and re-runs the check so the PR merges.
 //
-// Like The Watch + The Harbor, this reads /api/bongos/me to show a Sealed notice for
+// Like The Watch, this reads /api/bongos/me to show a Sealed notice for
 // non-Archons — DEFENCE IN DEPTH only. GET /gate-approvals + POST
 // /gate-approvals/:pr/approve are ALSO archon-gated server-side (ADR 0016), and
 // the page itself is gated by server.js requireGovernmentPage. On 401 → web sign-in.
@@ -25,7 +25,7 @@
   const rankLabel = (rank) => window.OTB.rankLabel(rank, { empty: '' });
   const toast = (msg) => window.OTB.toast(msg);
 
-  // ---- fetch helpers (mirror harbor.js / watch.js) -------------------------
+  // ---- fetch helpers (mirror watch.js) -------------------------------------
 
   async function fetchJson(path) {
     const res = await api.request('GET', `${API}${path}`);

package/modules/hall-ui/public/gate.states.json

@@ -1,5 +1,5 @@
 {
-  "_": "Gate — the access-request queue behind requireGovernmentPage. Same confirm-modal component as harbor, which is why the two had guessed two different z-indexes for it. Written with the re-skin (task 1003307) so this page is MEASURED at three widths in both modes rather than looked at once.",
+  "_": "Gate — the access-request queue behind requireGovernmentPage. Its confirm modal once had a second user, and the two had guessed two different z-indexes for it. Written with the re-skin (task 1003307) so this page is MEASURED at three widths in both modes rather than looked at once.",
   "page": "/builders/gate",
   "surface": "hall-ui",
   "stub": {

package/modules/hall-ui/public/hall-render.js

@@ -22,7 +22,7 @@
   'use strict';
 
   window.OTBHallRender = function createHallRender(ctx) {
-    const { API, RANK_ORDER, api, brandWorld, curLabel, emptyRow, fmtDate, mins, normalizeRank, pct, postJSON, rankLabel, rankWeight, signClasses, toast, usd } = ctx;
+    const { API, RANK_ORDER, api, brandWorld, curLabel, emptyRow, fmtDate, loadNextUp, mins, normalizeRank, pct, postJSON, rankLabel, rankWeight, signClasses, toast, usd } = ctx;
     const { escapeHtml, $, fmtNum, moduleOn } = window.OTB;
 
   const RANK_UNLOCKS = {
@@ -768,13 +768,6 @@
       return null;
     }
   }
-  const SETUP_CONFIG_KEY = 'builders:setup-config';
-  function readSetupConfig() {
-    try {
-      const v = window.localStorage.getItem(SETUP_CONFIG_KEY);
-      return v === 'online' ? 'online' : 'desktop';
-    } catch (_) { return 'desktop'; }
-  }
   function renderWelcomeCore(builder, onboarding) {
     const scroll = $('#welcome-scroll');
     const body = $('#welcome-body');
@@ -802,78 +795,24 @@
     const rankBadge = renderRankBadge(normalizeRank(builder.rank), { tip: true });
     const greeting = `Welcome, ${escapeHtml(builder.display_name || builder.github_login || 'builder')}.`;
 
-    // #777: the welcome panel now shows ONLY setup — a two-config selector that
-    // gets a zero-technical newcomer from "signed into the hall" to a working
-    // `claude` session on their dev box. Both paths reach the SAME hosted dev
-    // box (Xenos are box-only, ADR 0035): the Desktop app connects over an
-    // automated SSH link (/builder-connect — no keys to copy), and Claude Online
-    // is the in-browser ttyd terminal (ADR 0038 — no install, no SSH). Steps are
-    // short, scannable, and plain-spoken (theme stays in the headings). The
-    // "what to do next" arc lives in the Path checklist below — not here.
-    // #785: restore the builder's last-chosen config (persisted in localStorage)
-    // so a re-render / reload / tab switch doesn't snap back to Desktop.
-    const setupCfg = readSetupConfig();
-    // R60 (task 1199): the hosted dev-box onboarding below is the `dev-box`
-    // feature module's UI. A vanilla Cloud Bongos instance has dev-box OFF, so
-    // there is no box to host — show the bring-your-own-machine path instead.
-    // OTB (dev-box ON) renders the existing flow verbatim, so prod is unchanged.
-    const devBoxOn = moduleOn('dev-box');
+    // #777: the welcome panel shows ONLY setup — the steps that get a newcomer
+    // from "signed into the hall" to a working `claude` session on their own
+    // machine. The "what to do next" arc lives in the Path checklist below — not
+    // here.
     // The #support pointer assumes the Discord module; drop it when discord is off.
     const supportFoot = moduleOn('discord')
       ? `Stuck on any step? <a href="${API}/auth/discord/start">Join our Discord</a> and ask in <strong>#support</strong>.`
       : `Stuck on any step? See the project's README and docs.`;
-    const setupPanes = devBoxOn ? `
-        <p class="setup__intro">Your work runs on a dev box we host for you — there's almost nothing to install. Choose how to connect:</p>
-        <div class="setup__toggle" role="tablist" aria-label="Choose a setup">
-          <button type="button" class="setup__tab setup__tab--desktop" data-config="desktop" role="tab" aria-selected="${setupCfg === 'desktop'}">Claude Desktop app <span class="setup__tab-tag setup__tab-tag--rec">recommended</span></button>
-          <button type="button" class="setup__tab setup__tab--online" data-config="online" role="tab" aria-selected="${setupCfg === 'online'}">Claude Online <span class="setup__tab-tag">browser only</span></button>
-        </div>
-
-        <div class="setup__pane setup__pane--desktop">
-          <ol class="setup__steps">
-            <li><strong>Download the Dev Box app:</strong>
-              <a href="/downloads/devbox/mac-arm64">Mac</a> ·
-              <a href="/downloads/devbox/mac-x64">Mac (Intel)</a> ·
-              <a href="/downloads/devbox/win-x64">Windows</a> ·
-              <a href="/downloads/devbox/win-arm64">Windows (ARM)</a>.
-              <span class="setup__hint">First open: your computer warns about an unknown developer — that's
-              expected (we haven't bought the signing certificates yet; the app is ours). Mac: System Settings
-              → Privacy &amp; Security → “Open Anyway”. Windows: “More info” → “Run anyway”.</span></li>
-            <li><strong>Sign in from the app.</strong> It opens this hall in your browser — click one
-              <em>Approve</em> button and you're in. No terminal, nothing to paste.</li>
-            <li><strong>Flip the switch.</strong> Your dev box builds itself in a minute or two and the app
-              chimes when it's ready. It lives in the menu bar on Mac and the system tray on Windows, and it
-              wires up Claude Desktop for you along the way.</li>
-            <li><strong><a href="https://claude.com/download" target="_blank" rel="noopener noreferrer">Download Claude</a></strong>
-              for Mac or Windows, sign in with your <a href="https://claude.com" target="_blank" rel="noopener noreferrer">Claude</a>
-              account, then open <strong>Code → Environment → “${brandWorld()} Dev Box”</strong>. You're inside —
-              build from <code>/workspace</code>.</li>
-          </ol>
-        </div>
-
-        <div class="setup__pane setup__pane--online">
-          <ol class="setup__steps">
-            <li><strong>Create your <a href="https://claude.com" target="_blank" rel="noopener noreferrer">Claude</a> account.</strong></li>
-            <li><strong>Open your online environment.</strong> This is the environment you will build in — no SSH, nothing to install.</li>
-            <li><strong>Sign in when Claude prompts you.</strong> Claude starts automatically when you open the terminal.
-              <span class="setup__hint">To paste the sign-in code: <strong>Ctrl+Shift+V</strong> or right-click — plain Ctrl+V will not paste here. Claude takes over the terminal with its own interface once you're signed in. This guide stays open in its own tab. If Claude didn't start automatically, type <code>claude</code> and press Enter.</span></li>
-            <li><strong>Then drive it however you like:</strong>
-              <span class="setup__hint"><strong>Remote control (recommended)</strong> — type <code>/remote-control</code> for a link that runs this session in Claude's own web/app interface, the same UI you'd use on a computer. <strong>Or just stay in the online terminal</strong> and build right here in the browser — no remote control needed. Either way, reopening the online terminal later resumes your session right where you left it (closing the tab keeps it running).</span></li>
-          </ol>
-        </div>
-    ` : `
+    const setupSteps = `
         <p class="setup__intro">Build from your own machine — clone the repository, run the platform locally, and sign in from the terminal.</p>
-        <div class="setup__pane">
-          <ol class="setup__steps">
-            <li><strong>Clone the repository</strong> and install dependencies (<code>npm install</code>).</li>
-            <li><strong><a href="https://claude.com/download" target="_blank" rel="noopener noreferrer">Download Claude</a></strong> (or use the Claude Code CLI) and open the project.</li>
-            <li><strong>Run <code>/builder-setup</code></strong> to authenticate this machine, then <code>/builder-start</code> to claim your first task.</li>
-          </ol>
-        </div>
+        <ol class="setup__steps">
+          <li><strong>Clone the repository</strong> and install dependencies (<code>npm install</code>).</li>
+          <li><strong><a href="https://claude.com/download" target="_blank" rel="noopener noreferrer">Download Claude</a></strong> (or use the Claude Code CLI) and open the project.</li>
+          <li><strong>Run <code>/builder-setup</code></strong> to authenticate this machine, then <code>/builder-start</code> to claim your first task.</li>
+        </ol>
     `;
-    // task 469: a "Set up your machine / get the code" door, available in BOTH
-    // the hosted dev-box flow and the bring-your-own-machine flow. The flows
-    // above get you a session running; this section answers the separate
+    // task 469: a "Set up your machine / get the code" door. The steps above
+    // get you a session running; this section answers the separate
     // question a first-timer always has — "where does the code come from, and
     // how do I get it onto my own laptop?". It's the hall mirror of the primer's
     // "Step 0 — get the project onto your machine". Collapsed by default so it
@@ -901,8 +840,8 @@
         </details>`;
     body.innerHTML = `
       <div class="welcome__lede">${greeting} Your standing is ${rankBadge}.</div>
-      <div class="setup" data-config="${setupCfg}">
-        ${setupPanes}
+      <div class="setup">
+        ${setupSteps}
         ${getCode}
         <p class="setup__foot">${supportFoot}</p>
       </div>
@@ -944,7 +883,7 @@
 
     // task 470: a static, INFORMATIONAL lead-in step that sits AHEAD of the
     // data-driven steps — the genuine first action into the city is "obtain the
-    // repo" (clone it, or open the hosted dev box where it's already cloned).
+    // repo" (clone it onto your machine).
     // It mirrors onboarding-state.js PRE_AUTH_STEP. It is NOT one of the tracked
     // checklist steps (it carries no engine stage, never gates graduation, and
     // isn't counted in the "N of M steps cleared" status line) — it just makes
@@ -955,7 +894,7 @@
         <span class="onboarding-item__mark" aria-hidden="true">›</span>
         <div class="onboarding-item__body">
           <p class="onboarding-item__label">First — obtain the repo</p>
-          <p class="onboarding-item__hint">Clone the project to your machine, or open your hosted dev box (where it is already cloned). The build commands live inside the repo, so this comes first. The remaining steps below are tracked automatically.</p>
+          <p class="onboarding-item__hint">Clone the project to your machine. The build commands live inside the repo, so this comes first. The remaining steps below are tracked automatically.</p>
         </div>
       </li>`;
 
@@ -1335,6 +1274,31 @@
     return idx === -1 ? null : { place: idx + 1, total: ranked.length };
   }
 
-    return { SETUP_CONFIG_KEY, acclaimEvidenceHtml, analyticsState, lbState, mountHallWidgets, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey };
+  // task 1003459 — the Claim button on each Home "Next up" row, through the
+  // hall's ONE claim action (task 1003458) rather than a third hand-rolled
+  // POST /claims. Lives here, not builders.js, because that file is at the
+  // 1,500-line ratchet (hall-ui/CLAUDE.md: "growth in the page half has to be
+  // paid for; new pure helper → the lib/renderer"). refresh re-fetches the
+  // two-row slice so a claimed task drops out of it immediately.
+  function wireNextUpClaim() {
+    const claimAction = window.OTBClaimAction.makeClaimAction({ postJSON, toast, API, refresh: loadNextUp });
+    $('#home-next-list')?.addEventListener('click', (e) => {
+      const btn = e.target.closest('.next-up__claim');
+      if (!btn || btn.disabled) return;
+      const taskId = btn.dataset.taskId;
+      btn.disabled = true;
+      btn.textContent = '…';
+      claimAction.claim(taskId).then((out) => {
+        // A redirect to sign-in is already navigating away; re-enabling here
+        // would just invite a click that can't land.
+        if (!out.ok && !out.redirected) {
+          btn.disabled = false;
+          btn.textContent = 'Claim';
+        }
+      });
+    });
+  }
+
+    return { acclaimEvidenceHtml, analyticsState, lbState, mountHallWidgets, renderCurveBody, renderGreeting, renderLanding, renderNav, renderOnboarding, renderProfile, renderRecentShips, renderWelcomeCore, shipState, shipsPager, welcomeDismissalKey, wireNextUpClaim };
   };
 })();

package/modules/hall-ui/public/index.html

@@ -135,7 +135,11 @@
      window.OTBProfileNudge; goal-inbox.js's mount() calls it once it has
      created the #attention-profile div, so load order is not load-bearing. -->
 <script src="/builders/profile-nudge.js?v=2026-08-25-profile-nudge" defer></script>
-<script src="/builders/builders.js?v=2026-06-27-r75" defer></script>
+<!-- task 1003459: the hall's ONE claim/release action (task 1003458) — the
+     Home "Next up" row's Claim button consumes it rather than a second
+     hand-rolled POST /claims. Loaded BEFORE builders.js, which wires it. -->
+<script src="/builders/claim-action.js?v=2026-09-26-claimaction1" defer></script>
+<script src="/builders/builders.js?v=2026-09-28-nextupclaim" defer></script>
 <script src="/builders/copy-on-click.js?v=2026-06-01-copy-1" defer></script>
 </body>
 </html>

package/modules/hall-ui/public/modules.js

@@ -104,6 +104,7 @@
     const lines = [];
     const line = (k, v) => { if (v) lines.push(`<li><span class="ov-key ov-key--faint">${escapeHtml(k)}</span><span class="ov-lines__v">${v}</span></li>`); };
     line('key', `<span class="ov-mono">${escapeHtml(m.key)}</span>`);
+    if (m.version) line('version', `<span class="ov-mono">${escapeHtml(String(m.version))}</span>`);
     if (m.coreVersion) line('needs core', `<span class="ov-mono">${escapeHtml(String(m.coreVersion))}</span>`);
     const c = m.contributes || {};
     for (const kind of Object.keys(c)) {

package/modules/hall-ui/public/oversight.css

@@ -1,6 +1,6 @@
 /* oversight.css — the oversight family's archetype (task 1003469, goal
    1000081): what an oversight ROW is in the chrome world, and the pieces the
-   four pages (government, watch, harbor, gate) share around it — the figure
+   pages (government, watch, gate) share around it — the figure
    band inside a panel, the group head, the inline form, the grant toggle, the
    confirm modal. The third family sheet after record.css and room.css: a page
    sheet holds only what one page has and the others do not. The collaboration
@@ -15,8 +15,8 @@
 /* ---- the figure band, inside a panel ---------------------------------------
    The record family's band (.rec-figs), restated for this family: hairline
    columns, the figure in the display face at 300, the label above it. A glass
-   .stat-row is the TOP-of-page strip (Watch's attention row, Harbor and Gate's
-   summaries); this is the figure row a panel carries under its own heading. */
+   .stat-row is the TOP-of-page strip (Watch's attention row, Gate's
+   summary); this is the figure row a panel carries under its own heading. */
 .ov-figs {
   display: grid;
   grid-template-columns: repeat(auto-fit, minmax(132px, 1fr));
@@ -210,7 +210,7 @@ a.fact-chip:hover { color: var(--accent-ink); border-color: var(--accent-ink); t
 .gov-held-note { font-size: 12.5px; color: var(--ok); white-space: nowrap; }
 
 /* Detail lines under a row: a reason per line (the gate's holds), or a key and
-   a value (the harbor's make and cost). Hairlines between, none on the first. */
+   a value. Hairlines between, none on the first. */
 .ov-lines { list-style: none; margin: 10px 0 0; padding: 0; max-width: 72ch; }
 .ov-lines li { display: flex; gap: 12px; align-items: baseline; padding: 6px 0; border-top: var(--line) solid var(--rule-soft); font-size: 13px; line-height: 1.45; color: var(--ink-soft); }
 .ov-lines li:first-child { border-top: 0; padding-top: 0; }
@@ -336,7 +336,7 @@ a.fact-chip:hover { color: var(--accent-ink); border-color: var(--accent-ink); t
 .ov-foot a { display: inline-block; color: var(--accent-ink); min-height: 24px; min-width: 24px; padding: 3px 4px; margin: -3px -4px; line-height: 18px; }
 
 /* ---- the confirm modal ----------------------------------------------------------
-   Harbor and Gate share one confirm dialog. A --bg-card panel closed by one rule
+   Gate's confirm dialog. A --bg-card panel closed by one rule
    hairline and no shadow (the hub's project card is the reference), on the
    shell's --z-modal layer, over a scrim mixed from the ink. */
 .ov-modal-bg {

package/modules/hall-ui/public/palette.js

@@ -56,9 +56,6 @@
     { parent: 'Settings', gate: 'shell-user', items: [
       { label: 'Account', href: '/settings#account' },
       { label: 'Access', href: '/settings#access' },
-      // settings.js builds this panel only when the dev-box module is on, so the
-      // jump must carry the same condition or it lands on a panel that isn't there.
-      { label: 'Dev box', href: '/settings#devbox', module: 'dev-box' },
       { label: 'Extensions', href: '/settings#extensions' },
       { label: 'Preferences', href: '/settings#preferences' },
       { label: 'Sound', href: '/settings#sound' },
@@ -92,13 +89,6 @@
     var el = document.getElementById(id);
     return !!(el && !el.hidden);
   }
-  // Same contract as shell.js moduleOn: an unknown key is treated as ON, so a
-  // core instance that publishes no module map keeps every destination.
-  function moduleOn(name) {
-    var m = window.__MODULES__;
-    if (!m || !m.enabled || !(name in m.enabled)) return true;
-    return m.enabled[name] === true;
-  }
 
   // Pages, straight from the rendered sidebar. Skips the external API-docs link's
   // target rewrite by reading the href attribute as authored.
@@ -128,7 +118,6 @@
     SECTIONS.forEach(function (s) {
       if (!visible(s.gate)) return;
       s.items.forEach(function (it) {
-        if (it.module && !moduleOn(it.module)) return;
         out.push({ label: it.label, group: s.parent, href: it.href });
       });
     });

package/modules/hall-ui/public/primer.js

@@ -45,7 +45,7 @@
     { match: 'claim → ship lifecycle',      src: '/builders/diagrams/01-task-lifecycle.png',       alt: 'The full task lifecycle from backlog through shipped' },
     { match: 'rank ladder',                 src: '/builders/diagrams/02-rank-ladder.png',          alt: 'The rank ladder — the ranks a builder can hold and how to rise' },
     { match: 'drachmae and karma',          src: '/builders/diagrams/03-drachmae-karma.png',       alt: 'How the reward currency and karma differ — pay for shipped work vs. reputation signals' },
-    { match: 'get set up',                   src: '/builders/diagrams/04-architecture.png',         alt: 'The complete architecture: your device is just the screen, the dev box holds the worker, the code, and your local memory, the droplet is the authority and production, GitHub holds the repo — and how code travels from the box to prod' },
+    { match: 'get set up',                   src: '/builders/diagrams/04-architecture.png',         alt: 'The complete architecture: your machine holds the worker, the code, and your local memory, the server is the authority and production, GitHub holds the repo — and how code travels from your machine to prod' },
   ];
 
   // -----------------------------------------------------------------------

package/modules/hall-ui/public/sessions.html

@@ -42,7 +42,7 @@
         </section>
 
         <!-- Totals — the shell's glass strip at the top of the page (the way
-             Watch, Harbor and Gate carry theirs), not a strip inside a panel. -->
+             Watch and Gate carry theirs), not a strip inside a panel. -->
         <section class="ov-summary" id="stats-scroll" aria-labelledby="stats-h" hidden>
           <h2 id="stats-h" class="sr-only">Totals</h2>
           <div class="stat-row" id="stats-body"></div>

package/modules/hall-ui/public/settings-sessions.js

@@ -24,7 +24,7 @@
 
   // The words a person recognises, not the column value. `source` is the same
   // three-value set the session-scope registry declares.
-  const SOURCE_LABELS = { cli: 'Terminal', web: 'Browser', box: 'Dev box' };
+  const SOURCE_LABELS = { cli: 'Terminal', web: 'Browser' };
   const sourceLabel = (s) => SOURCE_LABELS[s] || 'Session';
 
   // "3 minutes ago" beats a timestamp for the one question this panel exists to

package/modules/hall-ui/public/settings.css

@@ -22,7 +22,6 @@
    reveal logic in settings.js is unchanged. */
 .settings-groups > [data-group] { display: none; }
 .settings-groups[data-active="account"] > [data-group="account"],
-.settings-groups[data-active="devbox"] > [data-group="devbox"],
 .settings-groups[data-active="access"] > [data-group="access"],
 .settings-groups[data-active="preferences"] > [data-group="preferences"],
 .settings-groups[data-active="sound"] > [data-group="sound"],

package/modules/hall-ui/public/settings.html

@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>Settings — {{worldName}}</title>
-  <meta name="description" content="Your preferences — connections, dev box, access keys, skill voices, and sounds.">
+  <meta name="description" content="Your preferences — connections, access keys, skill voices, and sounds.">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
@@ -38,14 +38,14 @@
              grouped layout: full-width, ungrouped. -->
         <section class="scroll gate" id="gate-scroll" aria-labelledby="gate-h" hidden>
           <h2 id="gate-h" class="gate__h">Not signed in</h2>
-          <p class="gate__lede" id="gate-body">You're not signed in yet. Sign in to manage your connections, your keys, your dev box and the way the hall behaves.</p>
+          <p class="gate__lede" id="gate-body">You're not signed in yet. Sign in to manage your connections, your keys and the way the hall behaves.</p>
           <div class="row-end"><a class="pbtn pbtn--save" href="/api/bongos/auth/web/start">Sign in</a></div>
         </section>
 
         <!-- Grouped layout (task 1723 → kit, task 2172): the sections sit in six
              groups behind a left sub-nav rail built by OTBKit.makeSectionRail
              (switch mode). settings.js wires the rail + per-panel anchor deep
-             links (/settings#cli, /settings#dev-box, …); only the active group's
+             links (/settings#cli, /settings#voices, …); only the active group's
              sections display. -->
         <div class="settings-layout" id="settings-layout">
           <nav class="section-rail" id="settings-rail" aria-label="Settings sections"></nav>
@@ -162,7 +162,7 @@
               <h2 id="sessions-h" class="scroll__h">Active sessions</h2>
               <p class="scroll__lede">
                 Every place you are currently signed in — this browser, your terminal,
-                any dev box. A session refreshes for another 24 hours each time it is
+                any other machine. A session refreshes for another 24 hours each time it is
                 used, so one you have forgotten about can stay alive indefinitely. If a
                 token has leaked, end it here.
               </p>
@@ -193,35 +193,6 @@
               <p class="section-note">Stored encrypted; never shown again after saving — only its last four digits.</p>
             </section>
 
-            <!-- ============ group: devbox ============ -->
-
-            <!-- DEV BOX APP — the desktop switch (#904, ADR 0044). Static download
-                 links; the /downloads/devbox/* redirects resolve to the current
-                 release (config/devbox-app.json). -->
-            <section class="scroll" id="boxapp-scroll" aria-labelledby="boxapp-h" data-group="devbox" hidden>
-              <h2 id="boxapp-h" class="scroll__h">Dev box app</h2>
-              <p class="scroll__lede">
-                A small app for your menu bar (Mac) or system tray (Windows): one
-                switch to start and stop your dev box, with a chime when it's ready.
-                It signs in with browser clicks and sets up Claude Desktop for you —
-                no terminal at all.
-              </p>
-              <div class="settings-card">
-                <a class="settings-btn" href="/downloads/devbox/mac-arm64">Download for Mac</a>
-                <a class="settings-btn" href="/downloads/devbox/win-x64">Download for Windows</a>
-              </div>
-              <p class="panel-hint">Intel Mac? <a href="/downloads/devbox/mac-x64">This one</a>.
-                ARM Windows (Surface, Snapdragon, Parallels)? <a href="/downloads/devbox/win-arm64">This one</a>.
-                <!-- #924: latest-release courtesy line; populated from /downloads/devbox/version -->
-                <span id="boxapp-latest" hidden></span></p>
-              <p class="section-note">
-                First open: your computer warns about an unknown developer — expected
-                (we haven't bought the signing certificates yet; the app is ours).
-                Mac: System Settings → Privacy &amp; Security → “Open Anyway”.
-                Windows: “More info” → “Run anyway”.
-              </p>
-            </section>
-
             <!-- ============ group: preferences ============ -->
 
             <!-- INTERACTION PROFILE — how replies are pitched for you (task 2010,