@bongos/core 1.24.39 → 1.24.40

package/modules/hall-ui/public/roster.js

@@ -136,6 +136,125 @@
   var sortBy = '';
   var role = '';
 
+  // ---- the government columns (task 1005048, owner decision on idea 1001313) --
+  // Watch kept a second list of the same people; it is this page now. A viewer
+  // the server lets read GET /builders/roster (the builder.roster.read atom) also
+  // sees each builder's active claims, the stale-claim flag and standing, and
+  // gets the rank and offboard controls that list carried. For anyone else that
+  // read is refused and the page draws the public list unchanged: the wall is
+  // the route, never this file.
+  var gov = null; // builder id → their GET /builders/roster row, once it answers
+  var viewerId = null;
+  var claims = '';
+  var RANK_OPTIONS = ['xenos', 'thetes', 'metic', 'archon'];
+  var client = window.BongosClient
+    ? window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false })
+    : null;
+  var toast = function (m) { if (OTB && OTB.toast) OTB.toast(m); };
+  // By value: /me and the roster can disagree on string vs number ids (#348).
+  function isViewer(b) { return viewerId != null && b && b.id != null && String(b.id) === String(viewerId); }
+  function govOf(b) { return gov && b.id != null ? gov[String(b.id)] || null : null; }
+  // Resolves to the government rows, or null for every refusal and failure.
+  // The roster read is asked only of a viewer whose /me map says they hold
+  // builder.roster.read, so a stranger or a builder without the seat costs this
+  // public page no extra round trip. /me itself is the shell's read, shared on
+  // window.__hallReads (the gov-feeds.js precedent); asked here only without it.
+  function readMe() {
+    var shared = window.__hallReads && window.__hallReads['/me'];
+    if (shared) return Promise.resolve(shared);
+    return client.request('GET', '/api/bongos/me').then(function (res) { return res && res.ok ? res.data : null; });
+  }
+  function loadGov() {
+    if (!client) return Promise.resolve(null);
+    return readMe().then(function (me) {
+      var perms = me && me.permissions;
+      if (!perms || perms['builder.roster.read'] !== true) return null;
+      var who = me.builder || me;
+      // No id from /me marks no row as yours, rather than the wrong one.
+      viewerId = who && who.id != null ? who.id : null;
+      return client.request('GET', '/api/bongos/builders/roster').then(function (roster) {
+        if (!roster || !roster.ok || !roster.data || !Array.isArray(roster.data.builders)) return null;
+        return roster.data.builders;
+      });
+    }).catch(function () { return null; });
+  }
+  function applyGov(rows) {
+    gov = {};
+    rows.forEach(function (r) { if (r.id != null) gov[String(r.id)] = r; });
+    // The rank a control just changed reads from the fresh row.
+    all.forEach(function (b) { var g = govOf(b); if (g && g.rank) b.rank = g.rank; });
+  }
+  function claimsHtml(g) {
+    var stale = g.stale_claim ? ' <span class="badge badge--sev-medium">stale</span>' : '';
+    return '<td class="ledger__num' + (g.stale_claim ? ' roster-warn' : '') + '">' + esc(fmtInt(g.active_claim_count || 0)) + stale + '</td>';
+  }
+  function rankControlHtml(b) {
+    var opts = RANK_OPTIONS.slice();
+    if (b.rank && opts.indexOf(b.rank) === -1) opts.unshift(b.rank);
+    return '<select data-roster-rank data-id="' + esc(b.id) + '" data-current="' + esc(b.rank || '') + '" aria-label="Rank">'
+      + opts.map(function (rk) {
+        return '<option value="' + esc(rk) + '"' + (rk === b.rank ? ' selected' : '') + '>' + esc(rankLabel(rk)) + '</option>';
+      }).join('') + '</select>';
+  }
+  // The viewer's own row offers nothing (task 1003720): both routes refuse a
+  // self-change outright, the guard that stops the last top-rank builder locking
+  // everyone out, so a live control there could only answer with a refusal.
+  function actionHtml(b, g) {
+    if (isViewer(b)) return '<span class="roster-self">That’s you</span>';
+    var inactive = String(g.status) === 'inactive';
+    return '<button type="button" class="btn-ghost' + (inactive ? '' : ' btn-ghost--danger') + '" data-roster-status="'
+      + (inactive ? 'active' : 'inactive') + '" data-id="' + esc(b.id) + '">' + (inactive ? 'Reactivate' : 'Offboard') + '</button>';
+  }
+  function govFoot() {
+    var foot = document.getElementById('roster-gov-foot');
+    if (!foot) return;
+    if (!gov) { foot.hidden = true; return; }
+    foot.textContent = 'Because you hold a government seat you also see active claims and standing, and can change a builder’s rank. '
+      + (all.some(isViewer)
+        ? 'Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the last '
+          + rankLabel('archon') + ' locking everyone out — so another ' + rankLabel('archon') + ' does it.'
+        : '');
+    foot.hidden = false;
+  }
+  function patchBuilder(id, what, payload) {
+    return client.request('PATCH', '/api/bongos/builders/' + encodeURIComponent(id) + '/' + what, { body: payload })
+      .then(function (res) {
+        if (res && res.ok) return res.data;
+        var d = (res && res.data) || {};
+        var env = d.error && typeof d.error === 'object' ? d.error : null;
+        throw new Error((env && env.message) || d.message || (typeof d.error === 'string' ? d.error : '') || ('http ' + (res && res.status)));
+      });
+  }
+  function refreshGov() {
+    return loadGov().then(function (rows) { if (rows) applyGov(rows); else gov = null; makeRosterLedger(); rerender(); govFoot(); });
+  }
+  function wireGov() {
+    if (body['wired:gov']) return;
+    body['wired:gov'] = true;
+    // Delegated on the mount, so a page flip cannot strand a row without one.
+    body.addEventListener('change', function (e) {
+      var sel = e.target && e.target.closest ? e.target.closest('[data-roster-rank]') : null;
+      if (!sel) return;
+      var prev = sel.getAttribute('data-current');
+      var rank = sel.value;
+      if (rank === prev) return;
+      sel.disabled = true;
+      patchBuilder(sel.getAttribute('data-id'), 'rank', { rank: rank })
+        .then(function () { toast('Rank set to ' + rankLabel(rank) + '.'); return refreshGov(); })
+        .catch(function (err) { sel.value = prev; sel.disabled = false; toast('Could not change rank: ' + (err.message || err)); });
+    });
+    body.addEventListener('click', function (e) {
+      var btn = e.target && e.target.closest ? e.target.closest('[data-roster-status]') : null;
+      if (!btn) return;
+      var status = btn.getAttribute('data-roster-status');
+      var reason = status === 'inactive' ? (window.prompt('Reason for offboarding (optional):', '') || null) : null;
+      btn.disabled = true;
+      patchBuilder(btn.getAttribute('data-id'), 'status', { status: status, reason: reason })
+        .then(function () { toast(status === 'inactive' ? 'Builder offboarded.' : 'Builder reactivated.'); return refreshGov(); })
+        .catch(function (err) { btn.disabled = false; toast('Could not change standing: ' + (err.message || err)); });
+    });
+  }
+
   // PLACE IS CANONICAL, not the row's position in the current sort.
   // hall-render's leaderboardPlace() already defines a builder's place as
   // credits-descending "independent of whatever column the table is currently
@@ -165,6 +284,12 @@
 
   function matches(b) {
     if (role && shownOf(b).indexOf(role) === -1) return false;
+    if (claims) {
+      var g = govOf(b);
+      if (!g) return false;
+      if (claims === 'stale' && !g.stale_claim) return false;
+      if (claims === 'holding' && !(Number(g.active_claim_count) > 0)) return false;
+    }
     if (!query) return true;
     var hay = ((b.github_login || '') + ' ' + (b.display_name || '')).toLowerCase();
     return hay.indexOf(query) !== -1;
@@ -229,22 +354,31 @@
     var tokens = hasTokens(b)
       ? esc(fmtInt(b.tokens_used))
       : '<span class="lb-none" aria-label="No AI sessions">—</span>';
+    var g = govOf(b);
+    var govCells = g
+      ? claimsHtml(g)
+        + '<td><span class="badge badge--status">' + esc(g.status || '—') + '</span></td>'
+        + '<td>' + actionHtml(b, g) + '</td>'
+      : (gov ? '<td class="ledger__num">—</td><td>—</td><td></td>' : '');
+    var rankCell = g && !isViewer(b) ? rankControlHtml(b) : rankBadgeHtml(b.rank);
     return '<tr>'
       + '<td class="ledger__num ledger__place">' + esc(String(place || '—')) + idHtml(b) + '</td>'
       + '<td>' + whoHtml(b) + foundingHtml(b) + achRowHtml(b.achievements) + '</td>'
       + '<td class="ledger__roles">' + rolesHtml(b) + '</td>'
-      + '<td class="ledger__rank">' + rankBadgeHtml(b.rank) + '</td>'
+      + '<td class="ledger__rank">' + rankCell + '</td>'
       + '<td class="ledger__num">' + esc(fmtInt(creditOf(b))) + '</td>'
       + '<td class="ledger__num">' + esc(fmtInt(b.karma)) + '</td>'
       + '<td class="ledger__num" title="' + esc(b.__eff || '') + '">' + tokens + '</td>'
+      + govCells
       + '</tr>';
   }
 
   function columns() {
-    return ['Place', 'Builder', 'Roles', 'Rank',
+    var cols = ['Place', 'Builder', 'Roles', 'Rank',
       { label: role ? currencyLabel() + ' as ' + CRAFT_WORD[role].toLowerCase() : currencyLabel(), class: 'ledger__num' },
       { label: 'Karma', class: 'ledger__num' },
       { label: 'Tokens', class: 'ledger__num' }];
+    return gov ? cols.concat([{ label: 'Active claims', class: 'ledger__num' }, 'Standing', 'Action']) : cols;
   }
 
   function makeRosterLedger() {
@@ -294,8 +428,21 @@
     body.textContent = msg;
   }
 
-  function mountRoster(rows) {
-    all = stampPlaces(Array.isArray(rows) ? rows : []);
+  function mountRoster(rows, govRows) {
+    all = Array.isArray(rows) ? rows : [];
+    if (govRows) {
+      // The government list is every builder; the public one only those who have
+      // earned. Nobody drops off the one list for having earned nothing yet.
+      var seen = {};
+      all.forEach(function (b) { if (b.id != null) seen[String(b.id)] = true; });
+      govRows.forEach(function (r) {
+        if (r.id == null || seen[String(r.id)]) return;
+        all.push({ id: r.id, github_login: r.github_login, display_name: r.display_name, avatar_url: r.avatar_url,
+          rank: r.rank, total_credits: r.total_credits, karma: r.karma, tokens_used: 0 });
+      });
+    }
+    all = stampPlaces(all);
+    if (govRows) applyGov(govRows);
     if (!all.length) {
       notice('Nobody has earned anything on this project yet. A builder joins the roster the '
         + 'first time they ship a claimed task.');
@@ -307,10 +454,19 @@
         + ' on this project, ranked by ' + currencyLabel().toLowerCase() + ' earned. This '
         + 'project’s own ledger — everyone who builds here is listed.';
     }
+    // Watch's stale-claims tile links here as ?claims=stale.
+    var asked = '';
+    try { asked = new URLSearchParams(window.location.search).get('claims') || ''; } catch (e) { asked = ''; }
+    claims = gov && (asked === 'stale' || asked === 'holding') ? asked : '';
+    var claimsControl = gov ? [{ id: 'roster-claims', label: 'Claims', value: claims, options: [
+      { value: '', label: 'anyone' },
+      { value: 'holding', label: 'holding a claim' },
+      { value: 'stale', label: 'stale claims' },
+    ] }] : [];
     kit.makeFilterBar({
       mount: document.getElementById('roster-filters'),
       search: { id: 'roster-q', label: 'Search', placeholder: 'name or login' },
-      primary: [
+      primary: claimsControl.concat([
         { id: 'roster-sort',
           label: 'Sort',
           options: [
@@ -319,10 +475,11 @@
             { value: 'karma', label: 'most karma' },
             { value: 'tokens', label: 'most tokens' },
           ] },
-      ],
+      ]),
       onChange: function (vals) {
         query = String(vals['roster-q'] || '').trim().toLowerCase();
         sortBy = String(vals['roster-sort'] || '');
+        if (gov) claims = String(vals['roster-claims'] || '');
         pager.page = 1;
         rerender();
       },
@@ -330,21 +487,23 @@
     mountRoleChips();
     makeRosterLedger();
     rerender();
+    if (gov) { wireGov(); govFoot(); }
   }
 
   var foundingLoad = window.OTBFounding ? window.OTBFounding.load() : Promise.resolve([]);
   // The PUBLIC list (task 1004437): the same rows the authed /leaderboard
   // carries plus each builder's roles, and the one the status page reads, so
   // the hall and the public page cannot rank a role differently.
+  var govLoad = loadGov();
   fetch('/api/bongos/public/leaderboard', { headers: { Accept: 'application/json' } })
     .then(function (r) {
       if (!r.ok) throw new Error('http ' + r.status);
       return r.json();
     })
     .then(function (data) {
-      return foundingLoad.then(function (list) {
-        marks = window.OTBFounding ? window.OTBFounding.byId(list) : {};
-        mountRoster(data && data.leaderboard);
+      return Promise.all([foundingLoad, govLoad]).then(function (got) {
+        marks = window.OTBFounding ? window.OTBFounding.byId(got[0]) : {};
+        mountRoster(data && data.leaderboard, got[1]);
       });
     })
     .catch(function () { notice('Couldn’t load the roster right now.'); });

package/modules/hall-ui/public/watch.css

@@ -21,12 +21,6 @@
 /* Row actions inside a ledger cell: ghost pills in a row. */
 .watch-actions { display: flex; gap: 6px; flex-wrap: wrap; align-items: center; }
 
-/* The reader's own roster row (task 1003720). Nobody may change their own rank
-   or standing — the server refuses both outright — so that row states a fact
-   where the others carry a control, and a fact is written in the faint ink, not
-   painted as a disabled pill. The foot line under the table says why. */
-.watch-self { color: var(--ink-faint); }
-
 /* A sealed or failed section says so in place. Three states, three sentences:
    "nothing here" is the kit's empty state, this is "you may not see this" and
    "could not load". */

package/modules/hall-ui/public/watch.html

@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>Watch — {{worldName}}</title>
-  <meta name="description" content="Archon oversight for {{worldName}} — access requests, security, roster, reviews, and repo health.">
+  <meta name="description" content="Archon oversight for {{worldName}} — access requests, security, stale claims, reviews, and repo health.">
   <!-- The hub's origin, for the link from a guild's head in the applications queue to
        its page on the hub (task 1002304). Empty on a vanilla instance: no link. -->
   <meta name="hub-origin" content="{{hubOrigin}}">
@@ -48,7 +48,7 @@
         <div class="stat-row ov-summary" id="watch-attention" hidden>
           <a class="stat-tile" href="#people"><span class="stat-tile__label">Access requests</span><span class="stat-tile__num" id="att-access">—</span><span class="stat-tile__sub">pending, on the People tab</span></a>
           <a class="stat-tile" href="#security"><span class="stat-tile__label">Security reports</span><span class="stat-tile__num" id="att-security">—</span><span class="stat-tile__sub">open, on the Security tab</span></a>
-          <a class="stat-tile" href="#people"><span class="stat-tile__label">Stale claims</span><span class="stat-tile__num" id="att-stale">—</span><span class="stat-tile__sub">builders, on the People tab</span></a>
+          <a class="stat-tile" href="/roster?claims=stale"><span class="stat-tile__label">Stale claims</span><span class="stat-tile__num" id="att-stale">—</span><span class="stat-tile__sub">builders, on the Builders page</span></a>
           <a class="stat-tile" href="#operations"><span class="stat-tile__label">Sessions</span><span class="stat-tile__num" id="att-sessions">—</span><span class="stat-tile__sub">recorded, on the Operations tab</span></a>
         </div>
 
@@ -66,13 +66,6 @@
             <div id="gate-body"><span class="kit-skel"></span></div>
           </section>
 
-          <!-- 2. ROSTER -->
-          <section class="scroll" id="roster-scroll" aria-labelledby="roster-h" hidden>
-            <h2 id="roster-h" class="scroll__h">Roster</h2>
-            <p class="scroll__lede">Every builder in {{worldName}} — rank, {{currency}}, karma, and active claims.</p>
-            <div id="roster-body"><span class="kit-skel"></span></div>
-          </section>
-
           <!-- 3. REVIEWS BY BUILDER -->
           <section class="scroll" id="marks-scroll" aria-labelledby="marks-h" hidden>
             <h2 id="marks-h" class="scroll__h">Reviews by builder</h2>
@@ -175,6 +168,6 @@
 <script src="/builders/hall-kit.js"></script>
 <script src="/builders/task-detail.js?v=2026-07-03-taskdetail"></script>
 <script src="/builders/brand-apply.js?v=2026-06-19-r56"></script>
-<script src="/builders/watch.js?v=2026-09-02-ledgers"></script>
+<script src="/builders/watch.js?v=2026-11-05-roster"></script>
 </body>
 </html>

package/modules/hall-ui/public/watch.js

@@ -3,7 +3,8 @@
 // Metic+ monitoring view (Archon-only until ADR 0157 delegated the operational
 // permissions to the working rank). One self-contained page that stitches together
 // the oversight surfaces: pending access requests, security (red-team reports +
-// override queue + audit log), the builder roster, per-builder + project-wide
+// override queue + audit log), the stale-claim tally (the roster itself is the
+// Builders page since task 1005048), per-builder + project-wide
 // review grades, estimation drift, repo health, and a tally of recorded sessions.
 //
 // Note the page floor and the panel floors are no longer identical: the page and
@@ -165,7 +166,7 @@
   // NOTE: loadMarks is the deliberate outlier — its failure state is a plain
   // "empty" message, not "unavailable", so it keeps its own try/catch.
   // sealedText — name the floor the DENIAL reported, never one written here.
-  // Each `sealedMsg` below is the SUBJECT clause only ("The roster is not visible
+  // Each `sealedMsg` below is the SUBJECT clause only ("The audit log is not visible
   // at your rank."); the rank sentence in front of it is composed from the 403.
   // That is what keeps this page from telling a builder a permission model the
   // server stopped implementing, which is the whole of task 1003449 — and why the
@@ -865,164 +866,19 @@
   }
 
   // =========================================================================
-  // 3. ROSTER — every builder
+  // 3. STALE CLAIMS — a tally only (task 1005048)
   // =========================================================================
 
-  // Live rank options for the per-row <select>. The server validates against
-  // db.RANKS; these are the live, builder-facing tiers (ADR 0034). If a builder
-  // sits at a rank outside this set, we inject it so the select still shows it.
-  const RANK_OPTIONS = ['xenos', 'thetes', 'metic', 'archon'];
-
-  // Who is reading this roster (task 1003720). `load()` already fetches /me to
-  // resolve the page's floor and then threw the id away, so the roster — which
-  // returns EVERY builder, the viewer included — could not tell which row was
-  // the reader's own. See renderRoster for why that mattered.
-  let viewerId = null;
-  const isViewer = (b) => viewerId != null && b && b.id != null && String(b.id) === String(viewerId);
-
-  function renderRoster(data, target) {
-    const builders = Array.isArray(data.builders) ? data.builders : [];
-    setAttention('att-stale', builders.filter((b) => b.stale_claim).length);
-    target.innerHTML = '';
-    if (!builders.length) {
-      target.innerHTML = emptyStateHtml('No builders on the roster.');
-      return;
-    }
-    ledger(target, {
-      columns: [
-        'Builder', 'Rank',
-        { label: (window.OTBBranding?.currencyLabel?.({ caps: true }) ?? 'Credits'), class: 'num' },
-        { label: 'Karma', class: 'num' }, { label: 'Active claims', class: 'num' },
-        'Standing', 'Action',
-      ],
-      pager: makePager('watch-roster', 'otb.watch.rosterPerPage'),
-      rowHtml: (b) => {
-        // THE VIEWER'S OWN ROW OFFERS NOTHING (task 1003720, re-filed from 1002951
-        // — "I cannot press offboard", reported by the owner from Discord).
-        //
-        // The roster returns every builder, so the reader's own row is in it. Both
-        // routes behind that row refuse a self-change OUTRIGHT and always will:
-        // PATCH /builders/:id/rank answers cannot_change_own_rank and
-        // /builders/:id/status answers cannot_change_own_status — the guard that
-        // stops the last Archon demoting or offboarding themselves and locking
-        // everyone out. The row painted a live rank <select> and a live Offboard
-        // pill anyway, so from the owner's seat the page carried a control that
-        // could only ever answer with a raw refusal slug in a toast. That is what
-        // "I cannot press offboard" describes.
-        //
-        // This is not a SOFT gate (the primer's acknowledge control, which opens
-        // once you have read enough and so stays in the tab order as
-        // aria-disabled) — it is an action that can never open for this reader.
-        // So the row renders no control at all and the section's foot line says
-        // why, rather than painting a dead one.
-        const self = isViewer(b);
-        const opts = RANK_OPTIONS.slice();
-        if (b.rank && !opts.includes(b.rank)) opts.unshift(b.rank);
-        const rankCell = self
-          ? `<span class="watch-self">${escapeHtml(rankLabel(b.rank))}</span>`
-          : `<select data-roster-rank data-id="${escapeHtml(b.id)}" data-current="${escapeHtml(b.rank || '')}" aria-label="Rank">` +
-            opts.map((rk) => `<option value="${escapeHtml(rk)}"${rk === b.rank ? ' selected' : ''}>${escapeHtml(rankLabel(rk))}</option>`).join('') +
-            '</select>';
-        const isInactive = String(b.status) === 'inactive';
-        const statusBtn = isInactive
-          ? ghost(`data-roster-status="active" data-id="${escapeHtml(b.id)}"`, 'Reactivate')
-          : ghost(`data-roster-status="inactive" data-id="${escapeHtml(b.id)}"`, 'Offboard', true);
-        const actionCell = self
-          ? '<span class="watch-self">That\'s you</span>'
-          : `<div class="watch-actions">${statusBtn}</div>`;
-        const claims = num(b.active_claim_count);
-        const staleFlag = b.stale_claim ? ' <span class="badge badge--sev-medium">stale</span>' : '';
-        // task 1467: the roster name links to the builder's public profile page.
-        const rosterName = escapeHtml(b.display_name || b.github_login || ('#' + b.id));
-        const rosterNameCell = b.id != null
-          ? `<a class="lb-name" href="/profile?id=${encodeURIComponent(b.id)}">${rosterName}</a>`
-          : rosterName;
-        return (
-          '<tr>' +
-          `<td>${rosterNameCell}` +
-          (b.github_login ? ` <span class="ov-mono">@${escapeHtml(b.github_login)}</span>` : '') +
-          '</td>' +
-          `<td>${rankCell}</td>` +
-          `<td class="num">${fmtInt(b.total_credits)}</td>` +
-          `<td class="num">${fmtInt(b.karma)}</td>` +
-          `<td class="num${b.stale_claim ? ' warn' : ''}">${fmtInt(claims)}${staleFlag}</td>` +
-          `<td><span class="badge badge--status">${escapeHtml(b.status || '—')}</span></td>` +
-          `<td>${actionCell}</td>` +
-          '</tr>'
-        );
-      },
-    }).render(builders);
-
-    // The one asymmetry in the table, stated once under it rather than repeated
-    // on the row. Appended as an ELEMENT, not with `innerHTML +=`: re-parsing the
-    // body would drop the pager's own wiring. The rank is written from
-    // rankLabel(), never a hardcoded "Archon", so the floor cannot drift.
-    if (builders.some(isViewer)) {
-      const note = document.createElement('p');
-      note.className = 'ov-foot';
-      note.textContent = `Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the last ${rankLabel('archon')} locking everyone out — so another ${rankLabel('archon')} does it.`;
-      target.appendChild(note);
-    }
-
-    // Rank change via the <select>. Bespoke: a 'change' listener that rolls the
-    // select back to its previous value on failure, delegated so a page flip
-    // cannot strand a row without one.
-    if (!target['wired:rank']) {
-      target['wired:rank'] = true;
-      target.addEventListener('change', async (e) => {
-        const sel = e.target.closest('[data-roster-rank]');
-        if (!sel || !target.contains(sel)) return;
-        const id = sel.getAttribute('data-id');
-        const rank = sel.value;
-        const prev = sel.getAttribute('data-current');
-        if (rank === prev) return;
-        sel.disabled = true;
-        try {
-          await patchJson(`/builders/${encodeURIComponent(id)}/rank`, { rank });
-          toast(`Rank set to ${rankLabel(rank)}.`);
-          await loadRoster();
-        } catch (err) {
-          if (err && err.kind === '401') return;
-          sel.value = prev; // roll back the select on failure
-          sel.disabled = false;
-          toast(`Could not change rank: ${err.message || err}`);
-        }
-      });
-    }
-
-    // Status change (offboard / reactivate). Bespoke: it gathers an offboarding
-    // reason via window.prompt BEFORE disabling, so not delegate().
-    if (!target['wired:status']) {
-      target['wired:status'] = true;
-      target.addEventListener('click', async (e) => {
-        const btn = e.target.closest('[data-roster-status]');
-        if (!btn || !target.contains(btn)) return;
-        const id = btn.getAttribute('data-id');
-        const status = btn.getAttribute('data-roster-status');
-        let reason = null;
-        if (status === 'inactive') {
-          reason = window.prompt('Reason for offboarding (optional):', '') || null;
-        }
-        btn.disabled = true;
-        try {
-          await patchJson(`/builders/${encodeURIComponent(id)}/status`, { status, reason });
-          toast(status === 'inactive' ? 'Builder offboarded.' : 'Builder reactivated.');
-          await loadRoster();
-        } catch (err) {
-          if (err && err.kind === '401') return;
-          btn.disabled = false;
-          toast(`Could not change standing: ${err.message || err}`);
-        }
-      });
-    }
-  }
-
-  function loadRoster() {
-    return section($('#roster-body'), () => fetchJson('/builders/roster'), renderRoster, {
-      sealedMsg: 'The roster is not visible at your rank.',
-      errMsg: 'Could not load the roster.',
-      name: 'roster',
-    });
+  // The roster that lived here is the Builders page now (owner decision on idea
+  // 1001313: one list of builders). The attention tile keeps its count, read
+  // from the same route, and links to that list filtered to the stale claims.
+  function loadStaleCount() {
+    return fetchJson('/builders/roster')
+      .then((data) => {
+        const builders = Array.isArray(data && data.builders) ? data.builders : [];
+        setAttention('att-stale', builders.filter((b) => b.stale_claim).length);
+      })
+      .catch(() => setAttention('att-stale', null));
   }
 
   // =========================================================================
@@ -1411,7 +1267,7 @@
 
   function revealSections() {
     [
-      'watch-attention', 'watch-tabs', 'gate-scroll', 'watch-scroll', 'roster-scroll',
+      'watch-attention', 'watch-tabs', 'gate-scroll', 'watch-scroll',
       'marks-scroll', 'mason-marks-scroll', 'surveyor-scroll', 'ledger-scroll', 'sessions-scroll',
     ].forEach((id) => {
       const el = document.getElementById(id);
@@ -1441,11 +1297,6 @@
       if (!res.ok) throw new Error(`me → ${res.status}`);
       const payload = res.data;
       builder = (payload && payload.builder) ? payload.builder : payload;
-      // Kept for the roster, which must know which row is the reader's own
-      // (task 1003720). Null when /me answered without one — isViewer then
-      // matches nothing, so the roster degrades to the old every-row-acts shape
-      // rather than marking the wrong row as yours.
-      viewerId = (builder && builder.id != null) ? builder.id : null;
     } catch (err) {
       console.error('[watch] failed to read viewer', err);
       showSealed('Could not check your access. Reload to try again.', 'Could not load');
@@ -1454,7 +1305,7 @@
     }
 
     // ADR 0157: Watch sits at the `page.view.government` floor (metic), and every panel
-    // it reads (roster, security reports, audit log, sessions, box costs) delegated to
+    // it reads (stale claims, security reports, audit log, sessions, box costs) delegated to
     // metic with it. Cosmetic — requireGovernmentPage + the route gates are the wall.
     if (!builder || (builder.rank !== 'metic' && builder.rank !== 'archon')) {
       showSealed(`Available from the ${rankLabel('metic')} rank up. Your current rank does not grant access.`);
@@ -1469,7 +1320,7 @@
     loadEngagementDocs();
     loadOverrides();
     loadAudit();
-    loadRoster();
+    loadStaleCount();
     loadMarks();
     loadMasonMarks();
     loadSurveyor();

package/modules/hall-ui/records/builders-roster.md

@@ -37,3 +37,5 @@ The owner's Studio idea 1001297 (a circuit-trace image as a table divider; mock
 - **The pseudo-elements sit on the row's first `td`, never on the `tr`.** On the `tr` they became two extra table cells and pushed every cell in the row two columns right (seen in the first render). The `tr` only carries `position: relative`, so the `td`'s absolute children size against the whole row.
 - **Two masks, two tokens.** Traces are `--ink-faint` and the orange nodes `--accent`, each shown through an SVG mask, so light and dark follow the world with no hard-coded colour. Left cap, right cap and the stretching hairline are three layers of one mask.
 - **The empty-state row has no trace** (`:not(:has(.ledger__empty))`). Checked at desktop and 375px, light and dark: the table scrolls inside its card on a phone and the divider spans it; the page does not scroll sideways.
+
+**Since task 1005048 it is the one list.** Watch's own roster folded in: a viewer the `GET /builders/roster` route lets in also sees active claims, the stale flag, standing and the rank/offboard controls, and the route's refusal leaves this page exactly the public list described above.

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.39",
+  "version": "1.24.40",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.39",
+      "version": "1.24.40",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.39",
+  "version": "1.24.40",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11197,5 +11197,11 @@
       "id": "1005077",
       "text": "The governor street is now a work-first square: the working areas left the street, the extra header and footer are gone, a pin takes you straight into its building, and inside a building the drawing is a compact floor picker s"
     }
+  ],
+  "1.24.40": [
+    {
+      "id": "1005048",
+      "text": "The Builders page is now the one list of everyone who builds here. If you hold a government seat you also see each builder's active claims, any stale claim, their standing, and the controls to change a rank or offboard someone"
+    }
   ]
 }

package/src/bongos/routes/me.js

@@ -146,7 +146,9 @@ const discordIsLinked = (builderId) =>
 // buttons for a viewer who cannot vote on ideas, without re-deriving it from rank.
 // `blocker.review` (task 1004824): the Blockers page and its overlay offer Resolve and
 // Link only to a builder who holds it; POST /blockers/:id/{resolve,link} stays the wall.
-const NAV_PERMISSION_ATOMS = Object.freeze(['board.vote.cast', 'core.pin.move', 'idea.triage', 'board.item.open', 'idea.vote', 'blocker.review']);
+// `builder.roster.read` (task 1005048): the Builders page asks GET /builders/roster
+// for its government columns only of a viewer who holds it; the route stays the wall.
+const NAV_PERMISSION_ATOMS = Object.freeze(['board.vote.cast', 'core.pin.move', 'idea.triage', 'board.item.open', 'idea.vote', 'blocker.review', 'builder.roster.read']);
 
 // navPermissionsFor(builderId) → { '<atom>': boolean } over NAV_PERMISSION_ATOMS,
 // or null when authority could not be established (government off, port missing,

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.39'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.40'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/rank_tier_single_source.mjs

@@ -93,7 +93,9 @@ const STATIC_LADDER_FILES = [
   'modules/discord/discord-channels.js',
   'modules/memory/search.js',
   'modules/hall-ui/public/profile.js',
-  'modules/hall-ui/public/watch.js',
+  // task 1005048: the rank <select> on each roster row moved from watch.js to the
+  // Builders page with the roster itself; the copy moved with it.
+  'modules/hall-ui/public/roster.js',
   // task 1003094: the Constitution panel and the Board Room's sitting card both
   // expand the `rank:<key>+` membership form ("that rank and above") to render
   // who governs in plain language, so both need the ladder to expand against.