@bongos/core 1.24.39 → 1.24.41

package/modules/hall-ui/public/roster.js

@@ -136,6 +136,125 @@
   var sortBy = '';
   var role = '';
 
+  // ---- the government columns (task 1005048, owner decision on idea 1001313) --
+  // Watch kept a second list of the same people; it is this page now. A viewer
+  // the server lets read GET /builders/roster (the builder.roster.read atom) also
+  // sees each builder's active claims, the stale-claim flag and standing, and
+  // gets the rank and offboard controls that list carried. For anyone else that
+  // read is refused and the page draws the public list unchanged: the wall is
+  // the route, never this file.
+  var gov = null; // builder id → their GET /builders/roster row, once it answers
+  var viewerId = null;
+  var claims = '';
+  var RANK_OPTIONS = ['xenos', 'thetes', 'metic', 'archon'];
+  var client = window.BongosClient
+    ? window.BongosClient.createClient({ baseUrl: '', credentials: 'same-origin', throwOnError: false })
+    : null;
+  var toast = function (m) { if (OTB && OTB.toast) OTB.toast(m); };
+  // By value: /me and the roster can disagree on string vs number ids (#348).
+  function isViewer(b) { return viewerId != null && b && b.id != null && String(b.id) === String(viewerId); }
+  function govOf(b) { return gov && b.id != null ? gov[String(b.id)] || null : null; }
+  // Resolves to the government rows, or null for every refusal and failure.
+  // The roster read is asked only of a viewer whose /me map says they hold
+  // builder.roster.read, so a stranger or a builder without the seat costs this
+  // public page no extra round trip. /me itself is the shell's read, shared on
+  // window.__hallReads (the gov-feeds.js precedent); asked here only without it.
+  function readMe() {
+    var shared = window.__hallReads && window.__hallReads['/me'];
+    if (shared) return Promise.resolve(shared);
+    return client.request('GET', '/api/bongos/me').then(function (res) { return res && res.ok ? res.data : null; });
+  }
+  function loadGov() {
+    if (!client) return Promise.resolve(null);
+    return readMe().then(function (me) {
+      var perms = me && me.permissions;
+      if (!perms || perms['builder.roster.read'] !== true) return null;
+      var who = me.builder || me;
+      // No id from /me marks no row as yours, rather than the wrong one.
+      viewerId = who && who.id != null ? who.id : null;
+      return client.request('GET', '/api/bongos/builders/roster').then(function (roster) {
+        if (!roster || !roster.ok || !roster.data || !Array.isArray(roster.data.builders)) return null;
+        return roster.data.builders;
+      });
+    }).catch(function () { return null; });
+  }
+  function applyGov(rows) {
+    gov = {};
+    rows.forEach(function (r) { if (r.id != null) gov[String(r.id)] = r; });
+    // The rank a control just changed reads from the fresh row.
+    all.forEach(function (b) { var g = govOf(b); if (g && g.rank) b.rank = g.rank; });
+  }
+  function claimsHtml(g) {
+    var stale = g.stale_claim ? ' <span class="badge badge--sev-medium">stale</span>' : '';
+    return '<td class="ledger__num' + (g.stale_claim ? ' roster-warn' : '') + '">' + esc(fmtInt(g.active_claim_count || 0)) + stale + '</td>';
+  }
+  function rankControlHtml(b) {
+    var opts = RANK_OPTIONS.slice();
+    if (b.rank && opts.indexOf(b.rank) === -1) opts.unshift(b.rank);
+    return '<select data-roster-rank data-id="' + esc(b.id) + '" data-current="' + esc(b.rank || '') + '" aria-label="Rank">'
+      + opts.map(function (rk) {
+        return '<option value="' + esc(rk) + '"' + (rk === b.rank ? ' selected' : '') + '>' + esc(rankLabel(rk)) + '</option>';
+      }).join('') + '</select>';
+  }
+  // The viewer's own row offers nothing (task 1003720): both routes refuse a
+  // self-change outright, the guard that stops the last top-rank builder locking
+  // everyone out, so a live control there could only answer with a refusal.
+  function actionHtml(b, g) {
+    if (isViewer(b)) return '<span class="roster-self">That’s you</span>';
+    var inactive = String(g.status) === 'inactive';
+    return '<button type="button" class="btn-ghost' + (inactive ? '' : ' btn-ghost--danger') + '" data-roster-status="'
+      + (inactive ? 'active' : 'inactive') + '" data-id="' + esc(b.id) + '">' + (inactive ? 'Reactivate' : 'Offboard') + '</button>';
+  }
+  function govFoot() {
+    var foot = document.getElementById('roster-gov-foot');
+    if (!foot) return;
+    if (!gov) { foot.hidden = true; return; }
+    foot.textContent = 'Because you hold a government seat you also see active claims and standing, and can change a builder’s rank. '
+      + (all.some(isViewer)
+        ? 'Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the last '
+          + rankLabel('archon') + ' locking everyone out — so another ' + rankLabel('archon') + ' does it.'
+        : '');
+    foot.hidden = false;
+  }
+  function patchBuilder(id, what, payload) {
+    return client.request('PATCH', '/api/bongos/builders/' + encodeURIComponent(id) + '/' + what, { body: payload })
+      .then(function (res) {
+        if (res && res.ok) return res.data;
+        var d = (res && res.data) || {};
+        var env = d.error && typeof d.error === 'object' ? d.error : null;
+        throw new Error((env && env.message) || d.message || (typeof d.error === 'string' ? d.error : '') || ('http ' + (res && res.status)));
+      });
+  }
+  function refreshGov() {
+    return loadGov().then(function (rows) { if (rows) applyGov(rows); else gov = null; makeRosterLedger(); rerender(); govFoot(); });
+  }
+  function wireGov() {
+    if (body['wired:gov']) return;
+    body['wired:gov'] = true;
+    // Delegated on the mount, so a page flip cannot strand a row without one.
+    body.addEventListener('change', function (e) {
+      var sel = e.target && e.target.closest ? e.target.closest('[data-roster-rank]') : null;
+      if (!sel) return;
+      var prev = sel.getAttribute('data-current');
+      var rank = sel.value;
+      if (rank === prev) return;
+      sel.disabled = true;
+      patchBuilder(sel.getAttribute('data-id'), 'rank', { rank: rank })
+        .then(function () { toast('Rank set to ' + rankLabel(rank) + '.'); return refreshGov(); })
+        .catch(function (err) { sel.value = prev; sel.disabled = false; toast('Could not change rank: ' + (err.message || err)); });
+    });
+    body.addEventListener('click', function (e) {
+      var btn = e.target && e.target.closest ? e.target.closest('[data-roster-status]') : null;
+      if (!btn) return;
+      var status = btn.getAttribute('data-roster-status');
+      var reason = status === 'inactive' ? (window.prompt('Reason for offboarding (optional):', '') || null) : null;
+      btn.disabled = true;
+      patchBuilder(btn.getAttribute('data-id'), 'status', { status: status, reason: reason })
+        .then(function () { toast(status === 'inactive' ? 'Builder offboarded.' : 'Builder reactivated.'); return refreshGov(); })
+        .catch(function (err) { btn.disabled = false; toast('Could not change standing: ' + (err.message || err)); });
+    });
+  }
+
   // PLACE IS CANONICAL, not the row's position in the current sort.
   // hall-render's leaderboardPlace() already defines a builder's place as
   // credits-descending "independent of whatever column the table is currently
@@ -165,6 +284,12 @@
 
   function matches(b) {
     if (role && shownOf(b).indexOf(role) === -1) return false;
+    if (claims) {
+      var g = govOf(b);
+      if (!g) return false;
+      if (claims === 'stale' && !g.stale_claim) return false;
+      if (claims === 'holding' && !(Number(g.active_claim_count) > 0)) return false;
+    }
     if (!query) return true;
     var hay = ((b.github_login || '') + ' ' + (b.display_name || '')).toLowerCase();
     return hay.indexOf(query) !== -1;
@@ -229,22 +354,31 @@
     var tokens = hasTokens(b)
       ? esc(fmtInt(b.tokens_used))
       : '<span class="lb-none" aria-label="No AI sessions">—</span>';
+    var g = govOf(b);
+    var govCells = g
+      ? claimsHtml(g)
+        + '<td><span class="badge badge--status">' + esc(g.status || '—') + '</span></td>'
+        + '<td>' + actionHtml(b, g) + '</td>'
+      : (gov ? '<td class="ledger__num">—</td><td>—</td><td></td>' : '');
+    var rankCell = g && !isViewer(b) ? rankControlHtml(b) : rankBadgeHtml(b.rank);
     return '<tr>'
       + '<td class="ledger__num ledger__place">' + esc(String(place || '—')) + idHtml(b) + '</td>'
       + '<td>' + whoHtml(b) + foundingHtml(b) + achRowHtml(b.achievements) + '</td>'
       + '<td class="ledger__roles">' + rolesHtml(b) + '</td>'
-      + '<td class="ledger__rank">' + rankBadgeHtml(b.rank) + '</td>'
+      + '<td class="ledger__rank">' + rankCell + '</td>'
       + '<td class="ledger__num">' + esc(fmtInt(creditOf(b))) + '</td>'
       + '<td class="ledger__num">' + esc(fmtInt(b.karma)) + '</td>'
       + '<td class="ledger__num" title="' + esc(b.__eff || '') + '">' + tokens + '</td>'
+      + govCells
       + '</tr>';
   }
 
   function columns() {
-    return ['Place', 'Builder', 'Roles', 'Rank',
+    var cols = ['Place', 'Builder', 'Roles', 'Rank',
       { label: role ? currencyLabel() + ' as ' + CRAFT_WORD[role].toLowerCase() : currencyLabel(), class: 'ledger__num' },
       { label: 'Karma', class: 'ledger__num' },
       { label: 'Tokens', class: 'ledger__num' }];
+    return gov ? cols.concat([{ label: 'Active claims', class: 'ledger__num' }, 'Standing', 'Action']) : cols;
   }
 
   function makeRosterLedger() {
@@ -294,8 +428,21 @@
     body.textContent = msg;
   }
 
-  function mountRoster(rows) {
-    all = stampPlaces(Array.isArray(rows) ? rows : []);
+  function mountRoster(rows, govRows) {
+    all = Array.isArray(rows) ? rows : [];
+    if (govRows) {
+      // The government list is every builder; the public one only those who have
+      // earned. Nobody drops off the one list for having earned nothing yet.
+      var seen = {};
+      all.forEach(function (b) { if (b.id != null) seen[String(b.id)] = true; });
+      govRows.forEach(function (r) {
+        if (r.id == null || seen[String(r.id)]) return;
+        all.push({ id: r.id, github_login: r.github_login, display_name: r.display_name, avatar_url: r.avatar_url,
+          rank: r.rank, total_credits: r.total_credits, karma: r.karma, tokens_used: 0 });
+      });
+    }
+    all = stampPlaces(all);
+    if (govRows) applyGov(govRows);
     if (!all.length) {
       notice('Nobody has earned anything on this project yet. A builder joins the roster the '
         + 'first time they ship a claimed task.');
@@ -307,10 +454,19 @@
         + ' on this project, ranked by ' + currencyLabel().toLowerCase() + ' earned. This '
         + 'project’s own ledger — everyone who builds here is listed.';
     }
+    // Watch's stale-claims tile links here as ?claims=stale.
+    var asked = '';
+    try { asked = new URLSearchParams(window.location.search).get('claims') || ''; } catch (e) { asked = ''; }
+    claims = gov && (asked === 'stale' || asked === 'holding') ? asked : '';
+    var claimsControl = gov ? [{ id: 'roster-claims', label: 'Claims', value: claims, options: [
+      { value: '', label: 'anyone' },
+      { value: 'holding', label: 'holding a claim' },
+      { value: 'stale', label: 'stale claims' },
+    ] }] : [];
     kit.makeFilterBar({
       mount: document.getElementById('roster-filters'),
       search: { id: 'roster-q', label: 'Search', placeholder: 'name or login' },
-      primary: [
+      primary: claimsControl.concat([
         { id: 'roster-sort',
           label: 'Sort',
           options: [
@@ -319,10 +475,11 @@
             { value: 'karma', label: 'most karma' },
             { value: 'tokens', label: 'most tokens' },
           ] },
-      ],
+      ]),
       onChange: function (vals) {
         query = String(vals['roster-q'] || '').trim().toLowerCase();
         sortBy = String(vals['roster-sort'] || '');
+        if (gov) claims = String(vals['roster-claims'] || '');
         pager.page = 1;
         rerender();
       },
@@ -330,21 +487,23 @@
     mountRoleChips();
     makeRosterLedger();
     rerender();
+    if (gov) { wireGov(); govFoot(); }
   }
 
   var foundingLoad = window.OTBFounding ? window.OTBFounding.load() : Promise.resolve([]);
   // The PUBLIC list (task 1004437): the same rows the authed /leaderboard
   // carries plus each builder's roles, and the one the status page reads, so
   // the hall and the public page cannot rank a role differently.
+  var govLoad = loadGov();
   fetch('/api/bongos/public/leaderboard', { headers: { Accept: 'application/json' } })
     .then(function (r) {
       if (!r.ok) throw new Error('http ' + r.status);
       return r.json();
     })
     .then(function (data) {
-      return foundingLoad.then(function (list) {
-        marks = window.OTBFounding ? window.OTBFounding.byId(list) : {};
-        mountRoster(data && data.leaderboard);
+      return Promise.all([foundingLoad, govLoad]).then(function (got) {
+        marks = window.OTBFounding ? window.OTBFounding.byId(got[0]) : {};
+        mountRoster(data && data.leaderboard, got[1]);
       });
     })
     .catch(function () { notice('Couldn’t load the roster right now.'); });

package/modules/hall-ui/public/sessions.js

@@ -1,4 +1,5 @@
-// public-builders/sessions.js — the Session Ledger (/builders/sessions).
+// public-builders/sessions.js — the Session Ledger: Watch's Sessions tab
+// (/watch#sessions; the /sessions page it was folded in task 1005049).
 //
 // Metic+ monitoring view of the BFG session corpus (ADR 0027 / cluster 6D;
 // the floor moved archon→metic in ADR 0157). Read-only. Fetches /api/bongos/me
@@ -285,12 +286,12 @@
   // A failed access check says so in the same panel, under its own heading.
   function showSealed(message, heading) {
     const floor = rankLabel('metic');
-    const gate = $('#gate-scroll');
-    $('#gate-h').textContent = heading || `${floor} and up`;
-    if (message) $('#gate-body').textContent = message;
+    const gate = $('#sess-sealed');
+    $('#sess-sealed-h').textContent = heading || `${floor} and up`;
+    if (message) $('#sess-sealed-body').textContent = message;
     gate.hidden = false;
     $('#stats-scroll').hidden = true;
-    $('#sessions-scroll').hidden = true;
+    $('#sess-ledger-scroll').hidden = true;
   }
 
   // ---- paging --------------------------------------------------------------
@@ -312,7 +313,7 @@
   // the columns. Keeping it a separate sibling below the ledger is what holds it still.
   // (This page used to carry a .ledger-table-wrap scrollport; task 1003470 removed it
   // because the wrapper broke the shell's sticky th. The separate mount outlived it.)
-  // Table markup stays in sessions.html; the PAGER is the kit's.
+  // Table markup stays in watch.html's Sessions tab; the PAGER is the kit's.
 
   // Guarded the way every other kit consumer guards it (profile.js): the kit is a
   // separate <script>, so a cache miss or a load-order slip must degrade to a named
@@ -428,9 +429,9 @@
     const totals = data.totals || { total: data.total || sessions.length };
     state.total = num(totals.total);
     state.shown = sessions.length;
-    $('#gate-scroll').hidden = true;
+    $('#sess-sealed').hidden = true;
     $('#stats-scroll').hidden = false;
-    $('#sessions-scroll').hidden = false;
+    $('#sess-ledger-scroll').hidden = false;
     renderStats(totals);
     renderTable(sessions);
     syncTypeOptions(data.session_types);
@@ -528,7 +529,12 @@
     // 1. Who is viewing? (rank gate — the server enforces too.)
     let builder;
     try {
-      const res = await api.request('GET', `${API}/me`);
+      // The shell's /me read, shared on window.__hallReads, so opening the tab costs
+      // no second round trip; asked here only without it (task 1005049).
+      const shared = window.__hallReads && window.__hallReads['/me'];
+      const res = shared
+        ? await shared.then((d) => (d ? { status: 200, ok: true, data: d } : { status: 0, ok: false }))
+        : await api.request('GET', `${API}/me`);
       if (res.status === 401) {
         window.location.assign(`${API}/auth/web/start`);
         return;
@@ -569,5 +575,10 @@
     await fetchPage();
   }
 
-  load();
+  // task 1005049: the ledger is Watch's Sessions tab, so it loads when that tab
+  // first opens (watch.js calls this), not on every Watch visit: each load is an
+  // audited read on the server. Once only.
+  let booted = false;
+  window.OTBWatchTabs = window.OTBWatchTabs || {};
+  window.OTBWatchTabs.sessions = () => { if (booted) return; booted = true; load(); };
 })();

package/modules/hall-ui/public/settings.html

@@ -393,8 +393,8 @@
      chrome exists before the page scripts run. -->
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-oversight"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared component kit (window.OTBKit) — section rail (task 2166). -->

package/modules/hall-ui/public/shell.js

@@ -356,8 +356,7 @@
       // Metic+ oversight could not honestly hold it. Everything below IS a rank
       // surface, so this group's gate and audience are unchanged.
       { id: 'watch', label: 'Watch', icon: 'watch', href: '/watch', gate: 'government', position: true },
-      { id: 'gate', label: 'Autobongos', icon: 'gate', href: '/gate', gate: 'government', position: true }, // task 1004859: the runner panel; URL kept for bookmarks
-      { id: 'sessions', label: 'Sessions', icon: 'sessions', href: '/sessions', gate: 'government', position: true },
+      // task 1005049: Sessions and Autobongos (/gate) are tabs on Watch; both URLs redirect there.
       // The project's own fundamentals (task 1003280, goal 1000072). Mirrors the
       // server's requireGovernmentPage floor; cosmetic only, as every item here is.
       { id: 'project-settings', label: 'Project settings', icon: 'settings', href: '/project-settings', gate: 'government', position: true },

package/modules/hall-ui/public/street.html

@@ -230,8 +230,8 @@
 
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-oversight"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/gov-living.js?v=2026-10-09-positions1"></script>
 <script src="/builders/gov-feeds.js?v=2026-10-09-living3"></script>

package/modules/hall-ui/public/studio.html

@@ -224,8 +224,8 @@
 
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-oversight"></script>
 <script src="/builders/palette.js" defer></script>
 <!-- The kit, for its ONE renderer: the full-size ship-time visual figure
      (task 1003829), which the older reviews still show. -->

package/modules/hall-ui/public/task.html

@@ -58,8 +58,8 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-oversight"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task-detail.js still owns the #/idea/N and #/blocker/N deep-link overlay

package/modules/hall-ui/public/thinking.html

@@ -140,8 +140,8 @@
 
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-oversight"></script>
 <script src="/builders/palette.js" defer></script>
 
 <script src="/builders/idea-objects.js?v=2026-09-27-split"></script>

package/modules/hall-ui/public/tweak-editor.html

@@ -144,8 +144,8 @@
 
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-oversight"></script>
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/brand-holes.js?v=2026-09-29-aqfix"></script>
 <script src="/builders/tweak-editor-lib.js?v=2026-09-29-tw27"></script>

package/modules/hall-ui/public/watch.css

@@ -21,12 +21,6 @@
 /* Row actions inside a ledger cell: ghost pills in a row. */
 .watch-actions { display: flex; gap: 6px; flex-wrap: wrap; align-items: center; }
 
-/* The reader's own roster row (task 1003720). Nobody may change their own rank
-   or standing — the server refuses both outright — so that row states a fact
-   where the others carry a control, and a fact is written in the faint ink, not
-   painted as a disabled pill. The foot line under the table says why. */
-.watch-self { color: var(--ink-faint); }
-
 /* A sealed or failed section says so in place. Three states, three sentences:
    "nothing here" is the kit's empty state, this is "you may not see this" and
    "could not load". */

package/modules/hall-ui/public/watch.html

@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>Watch — {{worldName}}</title>
-  <meta name="description" content="Archon oversight for {{worldName}} — access requests, security, roster, reviews, and repo health.">
+  <meta name="description" content="Archon oversight for {{worldName}} — access requests, security, stale claims, reviews, repo health, sessions and the Autobongos runner.">
   <!-- The hub's origin, for the link from a guild's head in the applications queue to
        its page on the hub (task 1002304). Empty on a vanilla instance: no link. -->
   <meta name="hub-origin" content="{{hubOrigin}}">
@@ -18,6 +18,9 @@
        shared .stat-row/.stat-tile + hall-kit rules. -->
   <link rel="stylesheet" href="/builders/oversight.css">
   <link rel="stylesheet" href="/builders/watch.css">
+  <!-- task 1005049: the Sessions and Autobongos tabs bring their pages' own sheets. -->
+  <link rel="stylesheet" href="/builders/sessions.css">
+  <link rel="stylesheet" href="/builders/gate.css">
 </head>
 <body data-page="watch" data-page-title="Watch">
 
@@ -48,8 +51,8 @@
         <div class="stat-row ov-summary" id="watch-attention" hidden>
           <a class="stat-tile" href="#people"><span class="stat-tile__label">Access requests</span><span class="stat-tile__num" id="att-access">—</span><span class="stat-tile__sub">pending, on the People tab</span></a>
           <a class="stat-tile" href="#security"><span class="stat-tile__label">Security reports</span><span class="stat-tile__num" id="att-security">—</span><span class="stat-tile__sub">open, on the Security tab</span></a>
-          <a class="stat-tile" href="#people"><span class="stat-tile__label">Stale claims</span><span class="stat-tile__num" id="att-stale">—</span><span class="stat-tile__sub">builders, on the People tab</span></a>
-          <a class="stat-tile" href="#operations"><span class="stat-tile__label">Sessions</span><span class="stat-tile__num" id="att-sessions">—</span><span class="stat-tile__sub">recorded, on the Operations tab</span></a>
+          <a class="stat-tile" href="/roster?claims=stale"><span class="stat-tile__label">Stale claims</span><span class="stat-tile__num" id="att-stale">—</span><span class="stat-tile__sub">builders, on the Builders page</span></a>
+          <a class="stat-tile" href="#sessions"><span class="stat-tile__label">Sessions</span><span class="stat-tile__num" id="att-sessions">—</span><span class="stat-tile__sub">recorded, on the Sessions tab</span></a>
         </div>
 
         <!-- task 2173: the nine surfaces sit behind three OTBKit tabs, hash-synced
@@ -66,13 +69,6 @@
             <div id="gate-body"><span class="kit-skel"></span></div>
           </section>
 
-          <!-- 2. ROSTER -->
-          <section class="scroll" id="roster-scroll" aria-labelledby="roster-h" hidden>
-            <h2 id="roster-h" class="scroll__h">Roster</h2>
-            <p class="scroll__lede">Every builder in {{worldName}} — rank, {{currency}}, karma, and active claims.</p>
-            <div id="roster-body"><span class="kit-skel"></span></div>
-          </section>
-
           <!-- 3. REVIEWS BY BUILDER -->
           <section class="scroll" id="marks-scroll" aria-labelledby="marks-h" hidden>
             <h2 id="marks-h" class="scroll__h">Reviews by builder</h2>
@@ -96,10 +92,10 @@
                always fetched and used to throw away (task 1003469). -->
           <section class="scroll" id="sessions-scroll" aria-labelledby="sessions-h" hidden>
             <h2 id="sessions-h" class="scroll__h">Sessions</h2>
-            <p class="scroll__lede">A tally of recorded work sessions, and the latest five. The full record lives on the Sessions page.</p>
+            <p class="scroll__lede">A tally of recorded work sessions, and the latest five. The full record is on the Sessions tab.</p>
             <div id="sessions-stats" class="ov-figs"><span class="kit-skel"></span></div>
             <div id="sessions-recent"></div>
-            <p class="ov-foot"><a href="/sessions">View all sessions</a></p>
+            <p class="ov-foot"><a href="#sessions">View all sessions</a></p>
           </section>
 
           <!-- 7. REPO HEALTH -->
@@ -154,6 +150,113 @@
             <div id="surveyor-body"></div>
           </section>
         </div>
+        <!-- ============ tab: Sessions (task 1005049: was the /sessions page) ============ -->
+        <div id="pane-sessions" role="tabpanel" aria-labelledby="tab-sessions" hidden>
+          <!-- Every section below starts hidden, so the tab says it is loading until one shows. -->
+          <p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…</p>
+          <!-- Access notice — shown by sessions.js when the viewer is below the
+               floor. The heading and the line are written from the pack's rank
+               label (ADR 0157: metic and up), so the static text never renders. -->
+          <section class="scroll" id="sess-sealed" aria-labelledby="sess-sealed-h" hidden>
+            <h2 id="sess-sealed-h" class="scroll__h">Higher ranks only</h2>
+            <p class="scroll__lede" id="sess-sealed-body">The session log opens from a higher rank.</p>
+          </section>
+
+          <!-- Totals — the shell's glass strip at the top of the page (the way
+               Watch and Gate carry theirs), not a strip inside a panel. -->
+          <section class="ov-summary" id="stats-scroll" aria-labelledby="stats-h" hidden>
+            <h2 id="stats-h" class="sr-only">Totals</h2>
+            <div class="stat-row" id="stats-body"></div>
+          </section>
+
+          <!-- Every recorded session — the corpus table. No wrapper: the shell's
+               card strip scrolls a wide ledger on a phone, and the old wrapper
+               turned the sticky header into a scrollport overlay on desktop. -->
+          <section class="scroll" id="sess-ledger-scroll" aria-labelledby="sess-ledger-h" hidden>
+            <h2 id="sess-ledger-h" class="scroll__h">Recorded sessions</h2>
+            <!-- The count, and a failed load, sit here: the page head that used to carry
+                 them is hidden (task 1004829). -->
+            <p class="scroll__lede" id="ledger-status" role="status" aria-live="polite">Loading sessions…</p>
+            <!-- task 1003975: the ledger's first filter. It LOOKS like the pager's
+                 per-page control on purpose (one control grammar per page) but wears
+                 its own class — the hall_audit guard reads `class="pager…"` as a
+                 hand-rolled pager, and it is right to: borrowing that family is how a
+                 second pager implementation starts. Its options are filled from the
+                 server's vocabulary in sessions.js, never hardcoded here, where they
+                 would drift from what the route accepts. -->
+            <div class="ledger-filters">
+              <label class="ledger-filter">
+                <span>Kind</span>
+                <select id="session-type-filter" aria-label="Filter sessions by kind"></select>
+              </label>
+            </div>
+            <table class="ledger" id="sessions-table">
+              <thead>
+                <tr>
+                  <th>Session</th><th>Builder</th>
+                  <th title="What the session did, derived from its own transcript: whether it wrote files, used tools, and how many prompts a person actually sent.">Kind</th>
+                  <th>Tasks</th>
+                  <th class="ledger__num">Earned</th><th class="ledger__num">Turns</th><th class="ledger__num">Tokens</th><th class="ledger__num">Tool errors</th>
+                  <th class="ledger__num">Duration</th>
+                  <th class="ledger__num" title="How the session read to this builder, scored against their own interaction profile. Advisory — it gates nothing.">Plain speech</th>
+                  <th>Recorded</th>
+                </tr>
+              </thead>
+              <tbody id="sessions-body"></tbody>
+            </table>
+            <!-- The kit stamps the pager bar here (sessions.js, OTBKit.pagerBarHtml).
+                 makeLedger is deliberately NOT used: it stamps table + pager into one
+                 mount, and this page keeps them separate so the bar sits below the
+                 ledger rather than inside whatever scrollport the table is in. -->
+            <div id="sessions-pager-mount"></div>
+            <p class="ledger__note" id="ledger-foot"></p>
+          </section>
+
+          <!-- task 1002830: the narrative. Opened from a row's Read door; the SAME page
+               and the same gate as the ledger above (ADR 0051 — no second page). The
+               server decides who may read a transcript and records an administrator's
+               cross-builder read BEFORE serving it; this panel only displays. -->
+          <section class="scroll" id="transcript-scroll" aria-labelledby="transcript-h" hidden>
+            <h2 id="transcript-h" class="scroll__h">Transcript</h2>
+            <p class="scroll__lede" id="transcript-sub"></p>
+            <p><button type="button" class="btn" id="transcript-close">Close transcript</button></p>
+            <div id="transcript-body" class="transcript"></div>
+            <p><button type="button" class="btn" id="transcript-more" hidden>Load more turns</button></p>
+          </section>
+      
+        </div>
+
+        <!-- ============ tab: Autobongos (task 1005049: was the /gate page) ============ -->
+        <div id="pane-autobongos" role="tabpanel" aria-labelledby="tab-autobongos" hidden>
+          <p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…</p>
+          <!-- task 1003469: the sealed state is a panel with a heading, not a bare
+               line on the ground. gate.js writes the real floor into the lede from
+               the pack's rank label, so the copy cannot drift from ADR 0157. -->
+          <section class="scroll" id="gate-sealed" aria-labelledby="gate-sealed-h" hidden>
+            <h2 class="scroll__h" id="gate-sealed-h">Restricted</h2>
+            <p class="scroll__lede" id="gate-sealed-body">This page opens at a higher rank.</p>
+          </section>
+
+          <section id="runner-body" hidden>
+            <!-- The Autobongos fence (task 1003908, ADR 0307 §6): what is allowed to
+                 reach main unattended. This page held the held-PR list too until task
+                 1004859 removed it; the URL stays /gate so bookmarks keep working.
+                 Archon-only — a Metic gets the note below instead, and the routes
+                 behind the panel are system:true/archon server-side regardless. -->
+            <p class="scroll__lede" id="gate-archon-only" hidden></p>
+            <section class="scroll" id="fence-panel" aria-labelledby="fence-h" hidden>
+              <h2 class="scroll__h" id="fence-h">Autobongos runner</h2>
+              <!-- One panel (task 1004509): a checklist while anything the runner
+                   needs is missing, one status line with the switch once it is all
+                   ticked. Drawn from /autonomy/runners + /autonomy/fence together. -->
+              <div id="fence-body"><span class="kit-skel"></span></div>
+              <!-- Every builder's runner (task 1004501): what each one picked to
+                   work, whether you paused it, and whether it is checking in. -->
+              <div id="fence-builders"></div>
+            </section>
+          </section>
+      
+        </div>
       </main>
 
       <footer class="app-foot" id="app-foot"></footer>
@@ -167,14 +270,17 @@
      chrome exists before the page script runs. -->
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-oversight"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared component kit (window.OTBKit) — tabs, ledger, pager (task 2166). -->
 <script src="/builders/hall-kit.js"></script>
 <script src="/builders/task-detail.js?v=2026-07-03-taskdetail"></script>
 <script src="/builders/brand-apply.js?v=2026-06-19-r56"></script>
-<script src="/builders/watch.js?v=2026-09-02-ledgers"></script>
+<!-- task 1005049: the two tabs' scripts, booted by watch.js when their tab first opens. -->
+<script src="/builders/sessions.js?v=2026-11-05-tab"></script>
+<script src="/builders/gate.js?v=2026-11-05-tab"></script>
+<script src="/builders/watch.js?v=2026-11-05-tabs"></script>
 </body>
 </html>