@bongos/core 1.19.469 → 1.19.471

package/modules/hall-ui/public/modules.js

@@ -1,20 +1,23 @@
 // public-builders/modules.js — the hall "Modules" tab (/builders/modules).
 //
-// ADR 0107 §9 (task 1776) + §2/§3 the browsable catalog (task 1001772). Jobs:
+// ADR 0107 §9 (task 1776) + §2/§3 the browsable catalog (task 1001772);
+// redesigned onto the oversight family's row in task 1003472. Jobs:
 //   1. BROWSE the catalog — every module the core ships that this instance can
-//      enable, each with its author + origin credit, filterable by a single
-//      search box over name/author/origin/licence. Split from the instance's
-//      OWN modules by `source` (which TREE it ships from — the core package or
-//      this repo), which GET /api/bongos/modules reads structurally off the
-//      loader's discovery roots. That is a different axis from `provenance`
-//      (WHO built it, read off the manifest's origin) and both are shown: the
-//      section says where it ships from, the chips say who to credit.
+//      enable, each with its author + origin credit, filterable by one search
+//      over name/author/origin/licence and a state lens. Split from the
+//      instance's OWN modules by `source` (which TREE it ships from — the core
+//      package or this repo), which GET /api/bongos/modules reads structurally
+//      off the loader's discovery roots. That is a different axis from
+//      `provenance` (WHO built it, read off the manifest's origin) and both are
+//      shown: the group says where it ships from, the facts say who to credit.
 //   2. Enable/disable — a toggle over config/modules.json (POST /modules/:key/enable).
 //      Any signed-in builder sees the state; only metic+archon can flip it (the
 //      server enforces this — a lower-rank click just gets a 403 + a friendly
-//      toast, same as every other rank-gated write in this hall).
+//      toast, same as every other rank-gated write in this hall). A viewer below
+//      the floor sees the state as a pill rather than a dead control.
 //   3. "Submit for review" front door — files one of this project's own modules
 //      into the upstreaming review queue (POST /modules/:key/submit, task 1770).
+//      The door sits on the module's own row.
 //
 // The rows come from the SAME builder as `bongos module list --catalog`
 // (src/module-loader/catalog.js), so the two surfaces cannot drift.
@@ -27,31 +30,41 @@
   // /lib/bongos-client.js. baseUrl:'' passes the full `${API}/...` URLs below
   // through unchanged; result-mode ({ status, ok, data }) preserves control flow 1:1.
   const api = window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false });
-  const { escapeHtml, $, toast } = window.OTB;
+  const { escapeHtml, $, toast, rankLabel } = window.OTB;
+  const kit = window.OTBKit;
 
   let viewerRank = 'xenos';
   let canToggle = false;
-  // The last payload, held so the search box can re-filter without a refetch.
+  let submitLive = false;
+  // The last payload, held so the filter bar can re-render without a refetch.
   let allModules = [];
+  // The filter bar's current values (search + state lens).
+  let query = '';
+  let stateLens = '';
+  // Which rows a builder has opened, by key, so a re-render (a toggle, a
+  // filter) does not fold the description they were reading.
+  const openKeys = new Set();
 
-  function provenanceChip(m) {
+  const floor = () => rankLabel('metic');
+
+  function provenancePill(m) {
     return m.provenance === 'core'
-      ? '<span class="mod-chip mod-chip--core">core-loaded</span>'
-      : '<span class="mod-chip mod-chip--own">built here</span>';
+      ? '<span class="fact-pill fact-pill--info">core-loaded</span>'
+      : '<span class="fact-pill">built here</span>';
   }
 
   // Author + origin credit (ADR 0107 §2/§3 — credit now, money later). Reads
   // `credit`, not the raw manifest fields, so a core module whose manifest
-  // declares no author still shows who ships it rather than a blank card; an
+  // declares no author still shows who ships it rather than a blank row; an
   // INFERRED credit is marked so it never reads as something the author typed.
-  function attributionChips(m) {
+  function attributionFacts(m) {
     const credit = m.credit || { author: m.author, origin: m.origin, inferred: false };
     const mark = credit.inferred ? '<abbr class="mod-inferred" title="Not declared in module.json — this is who ships the module.">*</abbr>' : '';
-    const chips = [];
-    if (credit.author) chips.push(`<span class="mod-chip">by ${escapeHtml(credit.author)}${mark}</span>`);
-    if (credit.origin && credit.origin !== credit.author) chips.push(`<span class="mod-chip">from ${escapeHtml(credit.origin)}${mark}</span>`);
-    if (m.license) chips.push(`<span class="mod-chip">${escapeHtml(m.license)}</span>`);
-    return chips.join('');
+    const facts = [];
+    if (credit.author) facts.push(`<span class="ov-fact">by <b>${escapeHtml(credit.author)}</b>${mark}</span>`);
+    if (credit.origin && credit.origin !== credit.author) facts.push(`<span class="ov-fact">from <b>${escapeHtml(credit.origin)}</b>${mark}</span>`);
+    if (m.license) facts.push(`<span class="fact-chip">${escapeHtml(m.license)}</span>`);
+    return facts.join('');
   }
 
   // Free-text browse over the fields a builder would search by. Mirrors
@@ -63,41 +76,77 @@
     return [m.key, m.title, m.description, credit.author, credit.origin, m.license]
       .some((f) => f && String(f).toLowerCase().includes(q));
   }
+  function matchesLens(m) {
+    if (stateLens === 'enabled') return !!m.enabled;
+    if (stateLens === 'disabled') return !m.enabled;
+    return true;
+  }
 
   // Upkeep posture (ADR 0107 §7 / ADR 0166) — who keeps this module true as the
-  // core advances. A module with no declared maintenance is shown as such rather
-  // than silently: an unowned catalog entry is the thing the policy exists to
-  // catch, so it must be visible here, not only in `bongos upgrade`'s output.
-  function maintenanceChip(m) {
+  // core advances. Colour marks the EXCEPTION: an unowned entry is the thing the
+  // policy exists to catch, so it is the warn pill; a maintained one is a plain
+  // fact, since seventeen "core-maintained" pills would be the loudest thing on
+  // the page and none of them would be news.
+  function upkeepFact(m) {
     const mt = m.maintenance;
-    if (!mt || !mt.status) return '<span class="mod-chip" title="No maintenance declared — nobody is on the hook for this module as the core advances.">upkeep: undeclared</span>';
-    const detail = [
-      mt.status === 'maintained' && m.maintainer ? `Maintainer: ${m.maintainer}` : '',
-      mt.successor ? `Superseded by "${mt.successor}"` : '',
-      mt.removeAfter ? `Removable after core ${mt.removeAfter}` : '',
-      mt.note || '',
-    ].filter(Boolean).join(' — ');
-    return `<span class="mod-chip" title="${escapeHtml(detail || mt.status)}">upkeep: ${escapeHtml(mt.status)}</span>`;
+    if (!mt || !mt.status) return '<span class="fact-pill fact-pill--warn" title="No maintenance declared — nobody is on the hook for this module as the core advances.">upkeep undeclared</span>';
+    const status = String(mt.status);
+    if (status === 'deprecated' || status === 'superseded' || mt.successor || mt.removeAfter) {
+      return `<span class="fact-pill fact-pill--warn">${escapeHtml(status)}</span>`;
+    }
+    return `<span class="ov-fact">upkeep <b>${escapeHtml(status)}</b></span>`;
   }
 
-  function cardHTML(m) {
+  // The lines the row's details disclosure opens onto: the facts the payload
+  // carries that the card never rendered — what the module contributes, the
+  // core it needs, who maintains it and what it hands off to.
+  function detailLines(m) {
+    const lines = [];
+    const line = (k, v) => { if (v) lines.push(`<li><span class="ov-key ov-key--faint">${escapeHtml(k)}</span><span class="ov-lines__v">${v}</span></li>`); };
+    line('key', `<span class="ov-mono">${escapeHtml(m.key)}</span>`);
+    if (m.coreVersion) line('needs core', `<span class="ov-mono">${escapeHtml(String(m.coreVersion))}</span>`);
+    const c = m.contributes || {};
+    for (const kind of Object.keys(c)) {
+      const items = Array.isArray(c[kind]) ? c[kind] : [];
+      if (items.length) line(kind, items.map((x) => `<span class="fact-chip">${escapeHtml(String(x))}</span>`).join(''));
+    }
+    const mt = m.maintenance || {};
+    if (m.maintainer) line('maintainer', escapeHtml(String(m.maintainer)));
+    if (mt.successor) line('superseded by', escapeHtml(String(mt.successor)));
+    if (mt.removeAfter) line('removable after core', `<span class="ov-mono">${escapeHtml(String(mt.removeAfter))}</span>`);
+    if (mt.note) line('note', escapeHtml(String(mt.note)));
+    if (m.default != null) line('ships', m.default ? 'default on' : 'default off');
+    return lines.length ? `<ul class="ov-lines">${lines.join('')}</ul>` : '';
+  }
+
+  // The right column: ONE control. The family's grant toggle when the viewer
+  // can flip it (enabled in ink, disabled faint, the accent on hover); the
+  // state as a pill when they cannot. A module built here also carries its
+  // submit door, since that door is about this module and no other.
+  function rightHtml(m) {
+    const on = !!m.enabled;
+    const control = canToggle
+      ? `<button type="button" class="ov-toggle mod-toggle" aria-pressed="${on ? 'true' : 'false'}" data-key="${escapeHtml(m.key)}">${on ? 'enabled' : 'disabled'}</button>`
+      : `<span class="fact-pill ${on ? 'fact-pill--ok' : ''}" title="${escapeHtml(floor())} and above can enable or disable a module">${on ? 'enabled' : 'disabled'}</span>`;
+    const submit = sourceOf(m) === 'instance'
+      ? `<button type="button" class="btn-ghost btn--sm mod-submit" data-submit-key="${escapeHtml(m.key)}"${submitLive ? '' : ' disabled title="Submit pipeline not live yet — tracked by task 1770"'}>submit for review</button>`
+      : '';
+    return control + submit;
+  }
+
+  function rowHTML(m) {
+    const desc = String(m.description || '').trim();
+    const lines = detailLines(m);
     return `
-      <div class="mod-card" data-key="${escapeHtml(m.key)}">
-        <div class="mod-card__head">
-          <div>
-            <div class="mod-card__title">${escapeHtml(m.title || m.key)}</div>
-            <div class="mod-card__key">${escapeHtml(m.key)}</div>
-          </div>
-        </div>
-        <p class="mod-card__desc">${escapeHtml(m.description || '')}</p>
-        <div class="mod-chips">${provenanceChip(m)}${attributionChips(m)}${maintenanceChip(m)}</div>
-        <div class="mod-card__actions">
-          <button type="button" class="mod-toggle" data-on="${m.enabled ? '1' : '0'}"
-            ${canToggle ? '' : 'disabled title="Metic+ can enable or disable a module"'}>
-            ${m.enabled ? 'Enabled' : 'Disabled'}
-          </button>
+      <li class="ov-row mod-row" data-key="${escapeHtml(m.key)}">
+        <div class="ov-row__main">
+          <span class="ov-row__title">${escapeHtml(m.title || m.key)}<span class="ov-mono">${escapeHtml(m.key)}</span></span>
+          ${desc ? `<p class="ov-row__sub mod-row__desc">${escapeHtml(desc)}</p>` : ''}
+          <div class="ov-row__facts">${provenancePill(m)}${attributionFacts(m)}${upkeepFact(m)}</div>
+          ${lines ? `<details class="mod-more"${openKeys.has(m.key) ? ' open' : ''}><summary aria-label="Details for ${escapeHtml(m.title || m.key)}"></summary>${lines}</details>` : ''}
         </div>
-      </div>`;
+        <div class="ov-row__right mod-row__right">${rightHtml(m)}</div>
+      </li>`;
   }
 
   // `source` splits the page: 'core' = shipped by the core package (the
@@ -109,81 +158,126 @@
     return m.provenance === 'core' ? 'core' : 'instance';
   }
 
-  function renderGrids() {
-    const input = $('#mod-search');
-    const q = input ? input.value.trim().toLowerCase() : '';
-    const matching = allModules.filter((m) => matchesQuery(m, q));
+  // The figure band: the four numbers the page head used to carry as prose.
+  function figsHTML() {
+    const core = allModules.filter((m) => sourceOf(m) === 'core');
+    const own = allModules.filter((m) => sourceOf(m) === 'instance');
+    const enabled = allModules.filter((m) => m.enabled).length;
+    const undeclared = allModules.filter((m) => !m.maintenance || !m.maintenance.status).length;
+    const fig = (l, v, s) => `<div class="ov-fig"><span class="ov-fig__l">${l}</span><span class="ov-fig__v">${v}</span>${s ? `<span class="ov-fig__s">${s}</span>` : ''}</div>`;
+    // Short labels on purpose: the band is two columns at 390px and a label
+    // that wraps a phone's column is cut with an ellipsis.
+    return fig('modules', allModules.length, `${core.length} from the core`)
+      + fig('enabled', enabled, `of ${allModules.length}`)
+      + fig('built here', own.length, own.length ? 'can go upstream' : 'none on disk')
+      + fig('no upkeep', undeclared, undeclared ? 'nobody on the hook' : 'every module owned');
+  }
+
+  function renderRows() {
+    const matching = allModules.filter((m) => matchesQuery(m, query) && matchesLens(m));
     const core = matching.filter((m) => sourceOf(m) === 'core');
     const own = matching.filter((m) => sourceOf(m) === 'instance');
+    const narrowed = !!(query || stateLens);
 
-    const coreGrid = $('#core-grid');
-    if (coreGrid) {
-      coreGrid.innerHTML = core.length ? core.map(cardHTML).join('')
-        : `<div class="mod-empty">${q ? 'No catalog module matches that search.' : 'The core ships no modules this instance can see.'}</div>`;
+    const coreList = $('#core-grid');
+    if (coreList) {
+      coreList.innerHTML = core.length ? core.map(rowHTML).join('')
+        : `<li>${kit.emptyStateHtml(narrowed ? 'No catalog module matches that search.' : 'The core ships no modules this instance can see.')}</li>`;
     }
-    const ownGrid = $('#own-grid');
-    if (ownGrid) {
-      ownGrid.innerHTML = own.length ? own.map(cardHTML).join('')
-        : `<div class="mod-empty">${q ? 'None of this project\'s own modules match that search.' : 'None on disk — everything here ships with the core.'}</div>`;
+    const ownList = $('#own-grid');
+    if (ownList) {
+      ownList.innerHTML = own.length ? own.map(rowHTML).join('')
+        : `<li>${kit.emptyStateHtml(narrowed ? 'None of this project\'s own modules match that search.' : 'None on disk — everything here ships with the core.')}</li>`;
     }
+    const coreN = $('#core-n');
+    if (coreN) coreN.textContent = String(core.length);
+    const ownN = $('#own-n');
+    if (ownN) ownN.textContent = String(own.length);
 
-    const count = $('#mod-browse-count');
+    // The count line speaks only while a filter narrows the list — the figure
+    // band under it already says how many there are.
+    const count = $('#mod-count');
     if (count) {
-      count.textContent = q
-        ? `${matching.length} of ${allModules.length} module(s) match “${input.value.trim()}”.`
+      const n = allModules.length;
+      count.textContent = narrowed
+        ? `${matching.length} of ${n} ${n === 1 ? 'module' : 'modules'} match${query ? ` “${query}”` : ''}${stateLens ? ` · ${stateLens}` : ''}.`
         : '';
     }
+  }
 
-    document.querySelectorAll('.mod-toggle').forEach((btn) => btn.addEventListener('click', onToggle));
+  // One listener on the panel outlives every re-render: the toggle, the submit
+  // door and the details disclosure all bubble to it.
+  let wired = false;
+  function wire() {
+    if (wired) return;
+    wired = true;
+    const panel = $('#core-scroll');
+    if (!panel) return;
+    panel.addEventListener('click', (ev) => {
+      const toggle = ev.target.closest('.mod-toggle');
+      if (toggle) { onToggle(toggle); return; }
+      const submit = ev.target.closest('.mod-submit');
+      if (submit) onSubmit(submit);
+    });
+    panel.addEventListener('toggle', (ev) => {
+      const d = ev.target;
+      if (!(d instanceof HTMLDetailsElement) || !d.classList.contains('mod-more')) return;
+      const row = d.closest('.mod-row');
+      const key = row && row.dataset.key;
+      if (!key) return;
+      if (d.open) openKeys.add(key); else openKeys.delete(key);
+    }, true);
   }
 
   function render(data) {
     allModules = Array.isArray(data.modules) ? data.modules : [];
-    const core = allModules.filter((m) => sourceOf(m) === 'core');
-    const own = allModules.filter((m) => sourceOf(m) === 'instance');
-    const enabled = core.filter((m) => m.enabled).length;
+    submitLive = !!data.submit_pipeline_live;
+
+    const figs = $('#mod-figs');
+    if (figs) figs.innerHTML = figsHTML();
 
-    const sub = $('#modules-sub');
-    if (sub) {
-      sub.textContent = `${allModules.length} module(s) — ${core.length} in the core catalog (${enabled} enabled here), `
-        + `${own.length} built by this project.`;
+    const mount = $('#mod-filters');
+    if (mount && !mount.childElementCount) {
+      kit.makeFilterBar({
+        mount,
+        search: { id: 'mod-search', label: 'Search', placeholder: 'name, author, origin or licence' },
+        primary: [
+          { id: 'mod-state', label: 'State', options: [
+            { value: '', label: 'all' }, { value: 'enabled', label: 'enabled' }, { value: 'disabled', label: 'disabled' }] },
+        ],
+        onChange: (vals) => {
+          query = String(vals['mod-search'] || '').trim().toLowerCase();
+          stateLens = String(vals['mod-state'] || '');
+          renderRows();
+        },
+      });
     }
 
-    renderGrids();
-
-    // Only this project's OWN modules can be submitted upstream: a module that
-    // already ships with the core is, by definition, already in the catalog.
-    const submitStatus = $('#submit-status');
-    if (submitStatus) {
-      submitStatus.innerHTML = own.length
-        ? own.map((m) => `
-          <span style="display:inline-flex;align-items:center;gap:8px;margin:4px 12px 4px 0;">
-            <button type="button" class="mod-submit" data-submit-key="${escapeHtml(m.key)}"
-              ${data.submit_pipeline_live ? '' : 'disabled title="Submit pipeline not live yet — tracked by task 1770"'}>
-              Submit "${escapeHtml(m.key)}" for review
-            </button>
-          </span>`).join('')
-        : '<span class="mod-note">Nothing to submit — every module here already ships with the core.</span>';
-      document.querySelectorAll('[data-submit-key]').forEach((btn) => btn.addEventListener('click', onSubmit));
+    const lede = $('#submit-lede');
+    if (lede && !allModules.some((m) => sourceOf(m) === 'instance')) {
+      lede.textContent = 'Nothing to submit — every module here ships with the core.';
     }
 
-    const search = $('#mod-search');
-    if (search) search.addEventListener('input', renderGrids);
+    wire();
+    renderRows();
   }
 
-  async function onToggle(ev) {
-    const btn = ev.currentTarget;
-    const card = btn.closest('.mod-card');
-    const key = card && card.dataset.key;
+  async function onToggle(btn) {
+    const key = btn.dataset.key;
     if (!key) return;
-    const next = btn.dataset.on !== '1';
+    const next = btn.getAttribute('aria-pressed') !== 'true';
     btn.disabled = true;
     try {
       const res = await api.request('POST', `${API}/modules/${encodeURIComponent(key)}/enable`, { body: { enabled: next } });
       const body = res.data || {};
       if (!res.ok) throw new Error(body.message || `enable → ${res.status}`);
-      btn.dataset.on = next ? '1' : '0';
-      btn.textContent = next ? 'Enabled' : 'Disabled';
+      const m = allModules.find((x) => x.key === key);
+      if (m) m.enabled = next;
+      btn.setAttribute('aria-pressed', next ? 'true' : 'false');
+      btn.textContent = next ? 'enabled' : 'disabled';
+      const figs = $('#mod-figs');
+      if (figs) figs.innerHTML = figsHTML();
+      renderRows();
       toast(body.note || (next ? `${key} enabled.` : `${key} disabled.`), { duration: 3200 });
     } catch (err) {
       console.error('[modules] toggle failed', err);
@@ -193,8 +287,7 @@
     }
   }
 
-  async function onSubmit(ev) {
-    const btn = ev.currentTarget;
+  async function onSubmit(btn) {
     const key = btn.dataset.submitKey;
     try {
       const res = await api.request('POST', `${API}/modules/${encodeURIComponent(key)}/submit`);
@@ -217,12 +310,11 @@
       const res = await api.request('GET', `${API}/modules`);
       if (res.status === 401) { window.location.assign(`${API}/auth/web/start`); return; }
       if (!res.ok) throw new Error(`modules → ${res.status}`);
-      const data = res.data;
-      render(data);
+      render(res.data);
     } catch (err) {
       console.error('[modules] failed to load', err);
-      const sub = $('#modules-sub');
-      if (sub) sub.textContent = 'Could not load modules. Return to the hall and try again.';
+      const list = $('#core-grid');
+      if (list) list.innerHTML = `<li>${kit.emptyStateHtml('Could not load modules. Return to the hall and try again.')}</li>`;
       toast('Could not load modules.', { duration: 3200 });
     }
   }

package/modules/hall-ui/public/modules.states.json

@@ -1,5 +1,5 @@
 {
-  "_": "Modules — the core + instance module grids under one search. The empty state matters more than the populated one: a filter that matches nothing is the state a browse page spends real time in. Written with the re-skin (task 1003307) so this page is MEASURED at three widths in both modes rather than looked at once.",
+  "_": "Modules — the catalog as ONE panel of oversight rows (task 1003472): the kit filter bar, the figure band, two groups under heads. The empty state matters more than the populated one: a filter that matches nothing is the state a browse page spends real time in. Written with the re-skin (task 1003307) so this page is MEASURED at three widths in both modes rather than looked at once; the redesign added the `lens` and `details` states. Populated look: the hall-preview harness (scripts/hall-preview/fixtures/modules.json carries eighteen modules, one built by the project).",
   "page": "/builders/modules",
   "surface": "hall-ui",
   "stub": {
@@ -46,6 +46,10 @@
     "search-empty": {
       "auth": true,
       "actions": [
+        [
+          "wait",
+          600
+        ],
         [
           "fill",
           "#mod-search",
@@ -57,6 +61,49 @@
         ]
       ]
     },
+    "lens": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          600
+        ],
+        [
+          "focus",
+          "#mod-state"
+        ],
+        [
+          "press",
+          "ArrowDown"
+        ],
+        [
+          "wait",
+          300
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#mod-state"
+        ]
+      }
+    },
+    "details": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          600
+        ],
+        [
+          "clickIfVisible",
+          "#core-grid .mod-row:first-child .mod-more > summary"
+        ],
+        [
+          "wait",
+          300
+        ]
+      ]
+    },
     "out": {
       "auth": false
     }

package/modules/hall-ui/public/style.css

@@ -3057,18 +3057,18 @@ html.palette-open { overflow: hidden; }
    The state colours are the hall's fixed verification vocabulary, never the
    world's warm accent states (ADR 0196 §2): a status must not re-tint when an
    instance re-brands. */
-/* The five names below are the SAME pill, found by the task 1003307 audit:
-   government, harbor, gate, watch and modules each invented one because the
-   shell had none to take. They are aliased rather than renamed because renaming
-   would mean editing five JS row builders, and a class name is not what was
-   wrong — the duplicated, hand-rolled label voice was. Their own state
-   modifiers stay in their own sheets. */
+/* The names below are the SAME pill, found by the task 1003307 audit:
+   government, harbor, gate and watch each invented one because the shell had
+   none to take (modules had one too; its rows take .fact-pill by name since
+   task 1003472). They are aliased rather than renamed because renaming would
+   mean editing the JS row builders, and a class name is not what was wrong —
+   the duplicated, hand-rolled label voice was. Their own state modifiers stay
+   in their own sheets. */
 .fact-pill,
 .gov-pill,
 .harbor-pill,
 .gate-pill,
-.badge,
-.mod-chip {
+.badge {
   display: inline-flex;
   align-items: center;
   min-height: 24px;

package/modules/hall-ui/public/task-lib.js

@@ -117,9 +117,13 @@
   const msOf = (iso) => { const t = iso ? Date.parse(iso) : NaN; return Number.isNaN(t) ? 0 : t; };
   const taskActivityMs = (t) => Math.max(msOf(t.updated_at), msOf(t.shipped_at));
 
-  // The staleness buckets both boards offer. A CLIENT-side vocabulary, not the
-  // project's configured stale timer (task 1003279 wires that into the sweep);
-  // these are lenses for a person browsing, and the sweep is the enforcement.
+  // The staleness buckets both boards offer. A CLIENT-side vocabulary over TASKS,
+  // deliberately NOT the project's configured stale-claim timer — that one lives in
+  // src/stale-timer.js, counts hours rather than days, is about a CLAIM going silent,
+  // and is what the sweeper enforces and the Archon roster reports (task 1003476).
+  // These are lenses for a person browsing a board; that is the machine's rule. Two
+  // different questions, so two vocabularies — but only one of them may be a number
+  // typed twice, which is the bug 1003476 closed.
   const STALE_CHOICES = [
     { value: '', label: '— any age —' },
     { value: '14', label: 'untouched 14+ days' },

package/modules/lifecycle/db-ship.js

@@ -562,21 +562,29 @@ async function getClaimPublishedSha(taskId) {
 //                  time_to_first_ship_minutes (NULL until they've shipped)
 //   - claims:      active_claim_count, stale_claim
 //
-// "stale_claim" mirrors the stale-claim-release sweeper definition
-// (.claude/scheduled-tasks/stale-claim-release/SKILL.md): a still-open
-// claim where either the last session_pulses row is older than the
-// stale threshold, or there's no pulse row at all AND claimed_at is
-// older than the threshold. Default threshold is 24h to match this
-// task's spec — the sweeper itself uses GDS_STALE_CLAIM_HOURS (default
-// 6h) and is in charge of *acting*. The roster only *surfaces*.
+// "stale_claim" mirrors the stale-claim-release sweeper's definition: a
+// still-open claim where either the last session_pulses row is older than
+// the stale threshold, or there's no pulse row at all AND claimed_at is
+// older than the threshold.
+//
+// THE THRESHOLD IS THE PROJECT'S, NOT THIS ROUTE'S (task 1003476, goal
+// 1000072). It used to default to a hardcoded 24h "to match this task's
+// spec" while the sweeper acted on GDS_STALE_CLAIM_HOURS (6h) — so for
+// eighteen hours after a claim had been auto-released, tagged
+// [auto-released:stale] and handed back to the queue, this roster still
+// showed it healthy. The roster surfaces and the sweeper acts, but they
+// must answer the same question the same way, so both now read
+// src/stale-timer.js. An explicit `staleHours` still overrides, because
+// "what would 48h show me?" is a lens a person points at the roster and
+// not a reconfiguration of the project.
 //
 // Returns: array of builder roster rows, ordered by:
 //   1. inactive builders sink to the bottom (status='inactive' last)
 //   2. still-onboarding (first_ship_at IS NULL) above shipped builders
 //   3. then by created_at DESC inside each group (newest first)
 
-async function getBuildersRoster({ staleHours = 24 } = {}) {
-  const hours = Number(staleHours);
+async function getBuildersRoster({ staleHours } = {}) {
+  const hours = Number(staleHours ?? api.resolveStaleClaimHours().hours);
   if (!Number.isFinite(hours) || hours <= 0) {
     throw new Error('getBuildersRoster: staleHours must be a positive number');
   }
@@ -629,9 +637,12 @@ async function getBuildersRoster({ staleHours = 24 } = {}) {
 // signals, so the Archon can pick the right one to release. Used by
 // the management panel's per-row "release stale claim" action.
 
-async function getActiveClaimsForBuilderWithStale(builderId, { staleHours = 24 } = {}) {
+// The threshold defaults to the PROJECT's stale-claim timer, not to a number of its
+// own (task 1003476) — a claim the roster called stale must still be stale one click
+// later, in the view an Archon opens to release it.
+async function getActiveClaimsForBuilderWithStale(builderId, { staleHours } = {}) {
   const builder = Number(builderId);
-  const hours = Number(staleHours);
+  const hours = Number(staleHours ?? api.resolveStaleClaimHours().hours);
   if (!Number.isFinite(builder)) {
     throw new Error('getActiveClaimsForBuilderWithStale: builderId must be numeric');
   }

package/modules/sessions/pulse.js

@@ -39,7 +39,17 @@
 //      getStaleClaimsForBuilder().
 // -------------------------------------------------------------------------
 
-const { pool } = require('../../src/module-api');
+const api = require('../../src/module-api');
+
+const { pool } = api;
+
+// The project's stale-claim timer, in minutes (task 1003476, goal 1000072). These
+// helpers used to default to a hardcoded 30 minutes, which was neither the sweeper's
+// 6h nor the roster's 24h — a third answer to one question, reachable by any caller
+// that omitted the argument. There is one answer now, and it is the project's.
+// Resolved per call, never at require time: an env change must reach a long-running
+// process on its next sweep, not on its next restart.
+const projectThresholdMin = () => api.staleClaimMinutes(api.resolveStaleClaimHours().hours);
 
 // Record a heartbeat for a claim. Idempotent UPSERT — the PK is
 // claim_id so repeated pulses just bump last_pulse_at.
@@ -77,8 +87,8 @@ async function recordPulse(claimId, builderId) {
 // This function is READ-ONLY by design (see open question #1 above);
 // the write-side marker is deferred to a follow-up task that owns
 // the migration.
-async function sweepStaleClaims({ thresholdMin = 30 } = {}) {
-  const threshold = Number(thresholdMin);
+async function sweepStaleClaims({ thresholdMin } = {}) {
+  const threshold = Number(thresholdMin ?? projectThresholdMin());
   if (!Number.isFinite(threshold) || threshold <= 0) {
     throw new Error('sweepStaleClaims: thresholdMin must be a positive number');
   }
@@ -110,9 +120,9 @@ async function sweepStaleClaims({ thresholdMin = 30 } = {}) {
 // Today, "stale" is computed the same way as sweepStaleClaims() —
 // once a marker column exists (follow-up a), this can pivot to read
 // claims.pulse_lost_at IS NOT NULL instead.
-async function getStaleClaimsForBuilder(builderId, { thresholdMin = 30 } = {}) {
+async function getStaleClaimsForBuilder(builderId, { thresholdMin } = {}) {
   const builder = Number(builderId);
-  const threshold = Number(thresholdMin);
+  const threshold = Number(thresholdMin ?? projectThresholdMin());
   if (!Number.isFinite(builder)) {
     throw new Error('getStaleClaimsForBuilder: builderId must be numeric');
   }

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.469",
+  "version": "1.19.471",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.469",
+      "version": "1.19.471",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.469",
+  "version": "1.19.471",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",