@bongos/core 1.24.39 → 1.24.41

package/tests/roster_government_columns.mjs

@@ -0,0 +1,369 @@
+// tests/roster_government_columns.mjs — the Builders page's government columns,
+// EXECUTED (task 1005048; the own-row rule is task 1003720, re-filed from task
+// 1002951).
+//
+// Watch kept its own roster of the same builders the Builders page lists. The
+// owner's call (idea 1001313) was one list, on Builders: a viewer the server
+// lets read GET /builders/roster also sees each builder's active claims, the
+// stale-claim flag and standing, and the rank and offboard controls that list
+// carried. Anyone that read refuses sees the public list and nothing more.
+//
+// The own-row rule moved with the controls. The bug, as the owner reported it
+// from Discord #bugs: "I cannot press offboard". Both routes behind a row
+// refuse a self-change categorically and always will:
+//
+//   PATCH /builders/:id/rank    → 403 cannot_change_own_rank
+//   PATCH /builders/:id/status  → 403 cannot_change_own_status
+//
+// so the viewer's own row renders no control and the foot line says why.
+//
+// These are assertions about what a human sees and clicks, so this runs the
+// real roster.js inside `vm` against the real roster.html, with a makeLedger
+// that actually calls rowHtml.
+//
+// Run:  node tests/roster_government_columns.mjs
+
+import { strict as assert } from 'node:assert';
+import fs from 'node:fs';
+import path from 'node:path';
+import vm from 'node:vm';
+import { fileURLToPath } from 'node:url';
+import { makeRunner, makeEl, parseInto } from './helpers.mjs';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const HALL = path.join(ROOT, 'modules/hall-ui/public');
+const SRC = fs.readFileSync(path.join(HALL, 'roster.js'), 'utf8');
+const PAGE = fs.readFileSync(path.join(HALL, 'roster.html'), 'utf8');
+const WATCH_JS = fs.readFileSync(path.join(HALL, 'watch.js'), 'utf8');
+const WATCH_HTML = fs.readFileSync(path.join(HALL, 'watch.html'), 'utf8');
+
+const { test, summary } = makeRunner();
+
+const escapeHtml = (s) => String(s == null ? '' : s).replace(/[&<>"']/g,
+  (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
+
+const tick = () => new Promise((r) => setTimeout(r, 0));
+async function settle() { for (let i = 0; i < 40; i++) await tick(); }
+
+const ok = (data) => ({ status: 200, ok: true, data });
+const denied = { status: 403, ok: false, data: { error: { code: 'forbidden', details: { floors: { 'builder.roster.read': 'metic' } } } } };
+
+// The branding pack renames every rank (the neutral pack calls archon "Owner"),
+// which is why a hardcoded rank word in page copy is banned. This stub renames
+// them too, so a test for "the foot line does not spell Archon" is real.
+const RANK_LABELS = { xenos: 'Newcomer', thetes: 'Contributor', metic: 'Trusted', archon: 'Owner' };
+const rankLabel = (r) => RANK_LABELS[r] || String(r || '');
+
+// The viewer is builder 1. The public list holds the builders who have earned;
+// the government roster holds every builder, Epsilon (nothing earned) included.
+const VIEWER_ID = '1';
+const PUBLIC = [
+  { id: '90', display_name: 'Alpha', github_login: 'alpha', rank: 'archon', total_credits: 9200, karma: 4, tokens_used: 10 },
+  { id: '1', display_name: 'The Owner', github_login: 'theowner', rank: 'archon', total_credits: 6896, karma: 68, tokens_used: 10 },
+  { id: '92', display_name: 'Gamma', github_login: 'gamma', rank: 'thetes', total_credits: 830, karma: 1, tokens_used: 10 },
+  { id: '93', display_name: 'Delta', github_login: 'delta', rank: 'xenos', total_credits: 40, karma: 0, tokens_used: 10 },
+];
+const ROSTER = [
+  { id: '90', display_name: 'Alpha', github_login: 'alpha', rank: 'archon', total_credits: 9200, karma: 4, active_claim_count: 1, stale_claim: false, status: 'active' },
+  { id: '1', display_name: 'The Owner', github_login: 'theowner', rank: 'archon', total_credits: 6896, karma: 68, active_claim_count: 2, stale_claim: false, status: 'active' },
+  { id: '92', display_name: 'Gamma', github_login: 'gamma', rank: 'thetes', total_credits: 830, karma: 1, active_claim_count: 3, stale_claim: true, status: 'active' },
+  { id: '93', display_name: 'Delta', github_login: 'delta', rank: 'xenos', total_credits: 40, karma: 0, active_claim_count: 0, stale_claim: false, status: 'inactive' },
+  { id: '94', display_name: 'Epsilon', github_login: 'epsilon', rank: 'xenos', total_credits: 0, karma: 0, active_claim_count: 0, stale_claim: false, status: 'active' },
+];
+
+// ===========================================================================
+// Boot the real page against a scripted API and hand back handles.
+// ===========================================================================
+
+async function boot(opts = {}) {
+  const {
+    builders = ROSTER,
+    publicRows = PUBLIC,
+    rosterAnswer = null,
+    me = { id: VIEWER_ID, rank: 'archon', github_login: 'theowner' },
+    permissions = { 'builder.roster.read': true },
+    sharedMe = false,
+    search = '',
+  } = opts;
+
+  const requests = [];
+  const toasts = [];
+  const prompts = [];
+  let filterBar = null;
+
+  const api = {
+    async request(method, p, init) {
+      const body = init && init.body;
+      requests.push({ method, path: p, body });
+      const route = String(p).replace('/api/bongos', '').split('?')[0];
+      if (method === 'GET' && route === '/me') return ok({ builder: me, permissions });
+      if (method === 'GET' && route === '/builders/roster') return rosterAnswer || ok({ builders });
+      if (method === 'PATCH' && route.startsWith('/builders/')) return ok({ builder: { id: route.split('/')[2] } });
+      return { status: 404, ok: false, data: null };
+    },
+  };
+
+  const documentObj = {
+    readyState: 'complete',
+    body: makeEl('body'),
+    documentElement: makeEl('html'),
+    createElement: (tag) => makeEl(tag),
+    getElementById(id) { return this.body.querySelector(`#${id}`); },
+    querySelector(sel) { return this.body.querySelector(sel); },
+    querySelectorAll(sel) { return this.body.querySelectorAll(sel); },
+    addEventListener() {},
+  };
+  parseInto(documentObj.body, PAGE);
+
+  const locationObj = { hostname: 'builders.example.test', pathname: '/roster', search, hash: '', assign() {} };
+
+  const kit = {
+    esc: escapeHtml,
+    makePager: () => ({ page: 1, perPage: 25 }),
+    makeFilterBar: (o) => { filterBar = o; o.mount.innerHTML = '<div class="filters"></div>'; return { el: o.mount, values: () => ({}) }; },
+    // A ledger that REALLY renders: the whole question here is which row got
+    // which cell, and a no-op render answers none of it.
+    makeLedger: ({ mount, columns, rowHtml }) => ({
+      render(rows) {
+        mount.innerHTML =
+          '<table class="ledger"><thead><tr>' +
+          columns.map((c) => `<th>${escapeHtml(typeof c === 'string' ? c : c.label)}</th>`).join('') +
+          '</tr></thead><tbody>' + rows.map((r) => rowHtml(r)).join('') + '</tbody></table>';
+      },
+    }),
+  };
+
+  const windowObj = {
+    OTB: { fmtInt: (n) => String(n == null ? 0 : n), rankLabel, toast: (m) => toasts.push(m) },
+    OTBKit: kit,
+    OTBBranding: { currencyLabel: () => 'Credits' },
+    BongosClient: { createClient: () => api },
+    location: locationObj,
+    prompt: (msg) => { prompts.push(msg); return 'left for a new job'; },
+    addEventListener() {},
+  };
+  // The shell's own /me read, shared on window.__hallReads (shell.js probeMe).
+  if (sharedMe) windowObj.__hallReads = { '/me': Promise.resolve({ builder: me, permissions }) };
+
+  const sandbox = {
+    window: windowObj, document: documentObj, location: locationObj,
+    fetch: async () => ({ ok: true, json: async () => ({ leaderboard: publicRows.map((b) => ({ ...b })) }) }),
+    console: { log() {}, warn() {}, error() {} },
+    setTimeout, clearTimeout, Promise, Date, Math, JSON, Error, isNaN, URLSearchParams,
+    Number, String, Object, Array, Boolean, Set, Map, RegExp,
+    encodeURIComponent, decodeURIComponent, parseInt, parseFloat,
+  };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(SRC, sandbox, { filename: 'roster.js' });
+  await settle();
+
+  const rosterReads = () => requests.filter((r) => /\/builders\/roster/.test(r.path));
+  const meReads = () => requests.filter((r) => /\/me$/.test(r.path));
+  const rosterBody = () => documentObj.getElementById('roster-body');
+  const heads = () => rosterBody().querySelectorAll('th').map((th) => th.textContent);
+  const rows = () => rosterBody().querySelectorAll('tr').filter((tr) => tr.querySelectorAll('td').length);
+  const rowFor = (login) => rows().find((tr) => tr.querySelectorAll('td')[1].textContent.includes('@' + login));
+  const patches = () => requests.filter((r) => r.method === 'PATCH');
+  const foot = () => documentObj.getElementById('roster-gov-foot');
+  const footText = () => (foot().hidden ? '' : foot().textContent);
+
+  return { rosterReads, meReads, requests, toasts, prompts, documentObj, rosterBody, heads, rows, rowFor, patches, foot, footText, settle, filterBar: () => filterBar };
+}
+
+const cells = (tr) => tr.querySelectorAll('td');
+const GOV_HEADS = ['Active claims', 'Standing', 'Action'];
+
+// ===========================================================================
+// 1. One list: a government viewer sees the columns Watch's roster carried.
+// ===========================================================================
+
+await test('a government viewer sees active claims, standing and actions', async () => {
+  const h = await boot();
+  for (const head of GOV_HEADS) assert.ok(h.heads().includes(head), `missing column ${head}: ${h.heads()}`);
+  assert.ok(h.heads().includes('Credits'), 'the credits column went missing');
+  const gamma = cells(h.rowFor('gamma'));
+  assert.match(gamma[7].textContent, /^3/, 'Gamma\'s active claims are not shown');
+  assert.match(gamma[7].textContent, /stale/, 'Gamma\'s stale claim is not flagged');
+  assert.match(cells(h.rowFor('delta'))[8].textContent, /inactive/, 'Delta\'s standing is not shown');
+});
+
+await test('every builder is on the one list, even one who has earned nothing yet', async () => {
+  const h = await boot();
+  assert.equal(h.rows().length, ROSTER.length);
+  assert.ok(h.rowFor('epsilon'), 'a builder on the government roster but not the public list dropped off');
+});
+
+await test('a stale-claims link lands on the list filtered to them', async () => {
+  const h = await boot({ search: '?claims=stale' });
+  assert.deepEqual(h.rows().map((tr) => cells(tr)[1].textContent.match(/@(\w+)/)[1]), ['gamma']);
+  const control = h.filterBar().primary.find((c) => c.id === 'roster-claims');
+  assert.equal(control && control.value, 'stale', 'the claims filter does not show the filter the link asked for');
+});
+
+// ===========================================================================
+// 2. A viewer without the seat sees no new columns.
+// ===========================================================================
+
+await test('a refused roster read draws the public list and nothing more', async () => {
+  const h = await boot({ rosterAnswer: denied });
+  for (const head of GOV_HEADS) assert.ok(!h.heads().includes(head), `a refused viewer sees ${head}`);
+  assert.equal(h.rows().length, PUBLIC.length);
+  assert.equal(h.rosterBody().querySelectorAll('[data-roster-rank]').length, 0);
+  assert.equal(h.rosterBody().querySelectorAll('[data-roster-status]').length, 0);
+  assert.equal(h.footText(), '', 'the government foot line showed to a refused viewer');
+  const claims = h.filterBar().primary.find((c) => c.id === 'roster-claims');
+  assert.ok(!claims, 'a refused viewer is offered a claims filter');
+});
+
+await test('a signed-out viewer sees the public list only', async () => {
+  const h = await boot({ rosterAnswer: { status: 401, ok: false, data: null } });
+  for (const head of GOV_HEADS) assert.ok(!h.heads().includes(head));
+});
+
+await test('a viewer without the permission is never asked for the roster', async () => {
+  // The public page pays no extra round trip for a viewer /me says lacks the seat.
+  const h = await boot({ permissions: { 'builder.roster.read': false } });
+  assert.equal(h.rosterReads().length, 0, 'the roster was requested for a viewer without builder.roster.read');
+  for (const head of GOV_HEADS) assert.ok(!h.heads().includes(head));
+});
+
+await test('a /me with no permission map asks for nothing more', async () => {
+  const h = await boot({ permissions: null });
+  assert.equal(h.rosterReads().length, 0);
+});
+
+await test('the shell\'s shared /me read is adopted, not asked twice', async () => {
+  const h = await boot({ sharedMe: true });
+  assert.equal(h.meReads().length, 0, 'roster.js asked /me although the shell had already');
+  for (const head of GOV_HEADS) assert.ok(h.heads().includes(head));
+});
+
+// ===========================================================================
+// 3. The viewer's own row offers neither control (task 1003720).
+// ===========================================================================
+
+await test('the viewer\'s own row renders no Offboard button', async () => {
+  const h = await boot();
+  const mine = h.rowFor('theowner');
+  assert.ok(mine, 'the roster did not render the viewer\'s own row');
+  assert.equal(mine.querySelectorAll('[data-roster-status]').length, 0,
+    'the viewer\'s own row still carries a status button the server refuses outright');
+});
+
+await test('the viewer\'s own row renders no rank select', async () => {
+  const h = await boot();
+  assert.equal(h.rowFor('theowner').querySelectorAll('[data-roster-rank]').length, 0,
+    'the viewer\'s own row still carries a rank select the server refuses outright');
+});
+
+await test('the own row still SHOWS the rank and says whose row it is', async () => {
+  const h = await boot();
+  const c = cells(h.rowFor('theowner'));
+  assert.equal(c[3].textContent.trim(), 'Owner', 'the own row lost the rank it should still state');
+  assert.match(c[9].textContent, /you/i, 'the own row\'s action cell says nothing about why it is empty');
+});
+
+// ===========================================================================
+// 4. Every OTHER row keeps both controls.
+// ===========================================================================
+
+await test('every other row keeps its Offboard / Reactivate button', async () => {
+  const h = await boot();
+  for (const login of ['alpha', 'gamma', 'delta']) {
+    assert.equal(h.rowFor(login).querySelectorAll('[data-roster-status]').length, 1, `row @${login} lost its status control`);
+  }
+  assert.equal(h.rowFor('delta').querySelector('[data-roster-status]').getAttribute('data-roster-status'), 'active');
+  assert.equal(h.rowFor('alpha').querySelector('[data-roster-status]').getAttribute('data-roster-status'), 'inactive');
+});
+
+await test('every other row keeps its rank select', async () => {
+  const h = await boot();
+  for (const login of ['alpha', 'gamma', 'delta']) {
+    assert.equal(h.rowFor(login).querySelectorAll('[data-roster-rank]').length, 1, `row @${login} lost its rank select`);
+  }
+});
+
+await test('another builder\'s Offboard still reaches the route', async () => {
+  const h = await boot();
+  const btn = h.rowFor('gamma').querySelector('[data-roster-status]');
+  // Delegated on #roster-body; the stub's fire() does not bubble, so dispatch
+  // on the mount and name the button as the target, the way a real click arrives.
+  h.rosterBody().fire('click', { target: btn });
+  await h.settle();
+  const p = h.patches();
+  assert.equal(p.length, 1, `expected one PATCH, got ${p.length}`);
+  assert.match(p[0].path, /\/builders\/92\/status$/);
+  assert.equal(p[0].body.status, 'inactive');
+  assert.equal(p[0].body.reason, 'left for a new job', 'the offboarding reason was dropped');
+  assert.equal(h.prompts.length, 1, 'the reason prompt no longer runs');
+});
+
+await test('a rank change reaches the route', async () => {
+  const h = await boot();
+  const sel = h.rowFor('gamma').querySelector('[data-roster-rank]');
+  sel.value = 'metic';
+  h.rosterBody().fire('change', { target: sel });
+  await h.settle();
+  const p = h.patches();
+  assert.equal(p.length, 1);
+  assert.match(p[0].path, /\/builders\/92\/rank$/);
+  assert.equal(p[0].body.rank, 'metic');
+});
+
+// ===========================================================================
+// 5. The foot line says why, in the pack's own words.
+// ===========================================================================
+
+await test('a foot line under the roster explains the empty row', async () => {
+  const h = await boot();
+  assert.match(h.footText(), /your own row carries no controls/i,
+    'nothing under the roster explains why one row has no controls');
+});
+
+await test('the foot line names the rank from the pack, never a hardcoded "Archon"', async () => {
+  const h = await boot();
+  const foot = h.footText();
+  assert.match(foot, /Owner/, 'the foot line does not name the rank through rankLabel()');
+  assert.ok(!/archon/i.test(foot), `the foot line hardcodes a rank word: ${foot}`);
+});
+
+await test('no own-row sentence when the viewer is not on the roster', async () => {
+  // A Metic reading the roster of a project they are not listed on.
+  const h = await boot({ builders: ROSTER.filter((b) => b.id !== VIEWER_ID), publicRows: PUBLIC.filter((b) => b.id !== VIEWER_ID) });
+  assert.ok(!/your own row/i.test(h.footText()), 'the foot line rendered with no own row on the table');
+});
+
+// ===========================================================================
+// 6. Degrade: an unidentifiable viewer must not mark the WRONG row.
+// ===========================================================================
+
+await test('no id from /me leaves every row armed', async () => {
+  const h = await boot({ me: { rank: 'archon', github_login: 'theowner' } });
+  for (const b of PUBLIC) {
+    assert.equal(h.rowFor(b.github_login).querySelectorAll('[data-roster-status]').length, 1,
+      `row @${b.github_login} was disarmed although the viewer could not be identified`);
+  }
+  assert.ok(!/your own row/i.test(h.footText()));
+});
+
+await test('the match is by value, not by type — a numeric id still matches', async () => {
+  const h = await boot({ me: { id: 1, rank: 'archon', github_login: 'theowner' } });
+  assert.equal(h.rowFor('theowner').querySelectorAll('[data-roster-status]').length, 0,
+    'a numeric /me id did not match the roster\'s string id — the own row is armed again');
+});
+
+// ===========================================================================
+// 7. Watch has no second list; its tally links here.
+// ===========================================================================
+
+await test('Watch carries no roster of its own any more', () => {
+  assert.ok(!/id="roster-body"/.test(WATCH_HTML), 'watch.html still has a roster section');
+  assert.ok(!/data-roster-rank|data-roster-status/.test(WATCH_JS), 'watch.js still draws roster controls');
+});
+
+await test('Watch\'s stale-claims tile links to Builders, filtered', () => {
+  assert.match(WATCH_HTML, /<a class="stat-tile" href="\/roster\?claims=stale">[^]*?id="att-stale"/);
+});
+
+summary('Builders page — the government columns');

package/tests/sessions_kit_pager.mjs

@@ -33,7 +33,8 @@ const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const read = (rel) => fs.readFileSync(path.join(ROOT, rel), 'utf8');
 const KIT_JS = read('modules/hall-ui/public/hall-kit.js');
 const SESSIONS_JS = read('modules/hall-ui/public/sessions.js');
-const SESSIONS_HTML = read('modules/hall-ui/public/sessions.html');
+// task 1005049: the ledger is Watch's Sessions tab, so its markup lives in watch.html.
+const SESSIONS_HTML = read('modules/hall-ui/public/watch.html');
 
 const { test, summary } = makeRunner();
 const tick = () => new Promise((r) => setTimeout(r, 0));
@@ -147,6 +148,9 @@ function harness({ total = 320, failAfter = null, viewerRank = 'metic', perPageP
   vm.runInContext(KIT_JS, sandbox, { filename: 'hall-kit.js' });
   if (dropKit) delete sandbox.window.OTBKit;
   vm.runInContext(SESSIONS_JS, sandbox, { filename: 'sessions.js' });
+  // The tab boots when Watch first opens it (task 1005049); a second open is a no-op.
+  sandbox.window.OTBWatchTabs.sessions();
+  sandbox.window.OTBWatchTabs.sessions();
 
   const searches = () => requests.filter((u) => u.includes('/sessions/search'));
   const q = (n) => {
@@ -161,7 +165,7 @@ function harness({ total = 320, failAfter = null, viewerRank = 'metic', perPageP
 // 1. the page markup no longer carries a pager of its own
 // ---------------------------------------------------------------------------
 
-await test('sessions.html carries a mount, not a hand-rolled pager', () => {
+await test('the Sessions tab carries a mount, not a hand-rolled pager', () => {
   assert.ok(!/id="ledger-pager"/.test(SESSIONS_HTML), 'the bespoke <nav class="pager"> is gone');
   assert.ok(!/id="pager-(prev|next|pos)"/.test(SESSIONS_HTML), 'its bespoke button ids are gone');
   assert.match(SESSIONS_HTML, /id="sessions-pager-mount"/);
@@ -307,14 +311,14 @@ await test('a missing kit degrades to a named failure, not a blank page', async
   await tick(); await tick();
   assert.equal(h.searches().length, 0, 'no corpus request without a pager to place it');
   // in the page body: the head that used to carry it is hidden (task 1004829)
-  assert.match(h.getEl('gate-body').textContent, /could not be loaded/);
+  assert.match(h.getEl('sess-sealed-body').textContent, /could not be loaded/);
 });
 
 await test('the rank gate still runs before any corpus request', async () => {
   const h = harness({ total: 320, viewerRank: 'xenos' });
   await tick(); await tick();
   assert.equal(h.searches().length, 0, 'a xenos must not even ask');
-  assert.equal(h.getEl('gate-scroll').hidden, false, 'they get the sealed notice');
+  assert.equal(h.getEl('sess-sealed').hidden, false, 'they get the sealed notice');
 });
 
 summary();

package/tests/watch_sealed_floor.mjs

@@ -16,7 +16,7 @@
 //
 //   access_request.review   → archon   ("Archons only" was CORRECT here)
 //   override_request.decide → metic    (ADR 0157, was archon)
-//   builder.roster.read     → metic    (ADR 0157, was archon)
+//   builder.roster.read     → metic    (ADR 0157, was archon; its panel is on Builders since task 1005048)
 //   session.search          → metic    (ADR 0157, was archon)
 //   audit_log.read          → metic    (ADR 0157, was archon)
 //
@@ -188,11 +188,12 @@ await test('two panels denied at DIFFERENT floors say different things', async (
   const h = await boot({
     answers: {
       '/access-requests': denied({ 'access_request.review': 'archon' }),
-      '/builders/roster': denied({ 'builder.roster.read': 'metic' }),
+      '/audit-log': denied({ 'audit_log.read': 'metic' }),
     },
   });
+  // The roster panel that used to be the metic half moved to Builders (task 1005048).
   assert.match(h.sealed('gate-body'), /^Archon and up\./);
-  assert.match(h.sealed('roster-body'), /^Metic and up\./);
+  assert.match(h.sealed('audit-body'), /^Metic and up\./);
 });
 
 // ===========================================================================
@@ -228,7 +229,8 @@ await test('no sealed message on this page hardcodes a rank name', async () => {
   // The source half of the claim: a future edit that re-writes "Archons only."
   // into a sealedMsg reds here even if it never renders in a test.
   const strings = [...SRC.matchAll(/sealedMsg:\s*'([^']*)'/g)].map((m) => m[1]);
-  assert.ok(strings.length >= 10, `expected the page's sealed messages, found ${strings.length}`);
+  // Nine since the roster panel moved to Builders (task 1005048).
+  assert.ok(strings.length >= 9, `expected the page's sealed messages, found ${strings.length}`);
   for (const s of strings) {
     assert.doesNotMatch(s, /Archon|Metic|Thetes|Xenos/i,
       `a sealed message names a rank in its own text: "${s}". The rank comes from `

package/modules/hall-ui/public/gate.html

@@ -1,76 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Autobongos — {{worldName}}</title>
-  <meta name="description" content="The Autobongos runner: switch unattended building on or off, choose the goals it may work, and pause any builder's runner.">
-  <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
-  <link rel="preconnect" href="https://fonts.googleapis.com">
-  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/builders/style.css?v=2026-07-02-shell1">
-  <link rel="stylesheet" href="/builders/oversight.css">
-  <link rel="stylesheet" href="/builders/gate.css">
-</head>
-<body data-page="gate" data-page-title="Autobongos">
-
-<div class="app">
-  <aside class="app-sidebar" id="app-sidebar" aria-label="Primary"></aside>
-  <div class="app-scrim" id="app-scrim" hidden></div>
-  <div class="app-body">
-    <header class="app-topbar" id="app-topbar"></header>
-    <div class="app-content">
-      <!-- The page's one h1, for screen readers: no page shows its head (task
-           1004836), so its sub-line went in task 1004829. -->
-      <div class="page-head page-head--board">
-        <h1 class="page-head__h">Autobongos</h1>
-      </div>
-
-      <main id="hall-main">
-        <!-- task 1005043: the page loader, shown until any section below is revealed. -->
-        <p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…</p>
-        <!-- task 1003469: the sealed state is a panel with a heading, not a bare
-             line on the ground. gate.js writes the real floor into the lede from
-             the pack's rank label, so the copy cannot drift from ADR 0157. -->
-        <section class="scroll" id="gate-sealed" aria-labelledby="gate-sealed-h" hidden>
-          <h2 class="scroll__h" id="gate-sealed-h">Restricted</h2>
-          <p class="scroll__lede" id="gate-sealed-body">This page opens at a higher rank.</p>
-        </section>
-
-        <section id="gate-body" hidden>
-          <!-- The Autobongos fence (task 1003908, ADR 0307 §6): what is allowed to
-               reach main unattended. This page held the held-PR list too until task
-               1004859 removed it; the URL stays /gate so bookmarks keep working.
-               Archon-only — a Metic gets the note below instead, and the routes
-               behind the panel are system:true/archon server-side regardless. -->
-          <p class="scroll__lede" id="gate-archon-only" hidden></p>
-          <section class="scroll" id="fence-panel" aria-labelledby="fence-h" hidden>
-            <h2 class="scroll__h" id="fence-h">Autobongos runner</h2>
-            <!-- One panel (task 1004509): a checklist while anything the runner
-                 needs is missing, one status line with the switch once it is all
-                 ticked. Drawn from /autonomy/runners + /autonomy/fence together. -->
-            <div id="fence-body"><span class="kit-skel"></span></div>
-            <!-- Every builder's runner (task 1004501): what each one picked to
-                 work, whether you paused it, and whether it is checking in. -->
-            <div id="fence-builders"></div>
-          </section>
-        </section>
-      </main>
-
-      <footer class="app-foot" id="app-foot"></footer>
-    </div>
-  </div>
-</div>
-
-<div id="toast" class="toast" role="status" aria-live="polite" data-visible="0"></div>
-
-<script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
-<script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
-<!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
-<script src="/builders/palette.js" defer></script>
-<script src="/builders/hall-kit.js"></script>
-<script src="/builders/gate.js?v=2026-10-25-autobongos"></script>
-</body>
-</html>

package/modules/hall-ui/public/gate.states.json

@@ -1,60 +0,0 @@
-{
-  "_": "Autobongos — the owner's runner panel behind requireGovernmentPage, still served at /gate (task 1004859 removed the held-PR list). Measured at three widths in both modes rather than looked at once.",
-  "page": "/builders/gate",
-  "surface": "hall-ui",
-  "stub": {
-    "prefix": "/builders/"
-  },
-  "modeQuery": false,
-  "_feeds": "The kit's own stub carries no feed for this page, so against it the page renders its EMPTY and SKELETON states — which is the point: those are states the floors must hold in. Against the hall-preview harness the same states render populated. Every declared 404 below is a fixture the harness does not carry, named rather than hidden.",
-  "ignoreRequests": [
-    "/api/(gds|bongos)/me$",
-    "/api/(gds|bongos)/me/",
-    "/api/(gds|bongos)/goals",
-    "/api/(gds|bongos)/inbox/",
-    "/api/(gds|bongos)/versions",
-    "/api/(gds|bongos)/builders",
-    "/api/(gds|bongos)/access-requests",
-    "/api/(gds|bongos)/autonomy/"
-  ],
-  "ignoreConsole": [
-    "/api/(gds|bongos)/",
-    "\\b401\\b",
-    "\\b403\\b",
-    "\\b404\\b",
-    "\\b501\\b",
-    "Unauthorized",
-    "Forbidden",
-    "Not Found",
-    "Not Implemented",
-    "load failed"
-  ],
-  "states": {
-    "queue": {
-      "auth": true,
-      "actions": [
-        [
-          "wait",
-          700
-        ]
-      ],
-      "expect": {
-        "visible": [
-          "#gate-body"
-        ]
-      }
-    },
-    "out": {
-      "auth": false
-    }
-  },
-  "reducedMotion": {
-    "auth": true,
-    "actions": [
-      [
-        "wait",
-        600
-      ]
-    ]
-  }
-}