@bongos/core 1.24.39 → 1.24.41

package/modules/hall-ui/public/watch.js

@@ -3,7 +3,8 @@
 // Metic+ monitoring view (Archon-only until ADR 0157 delegated the operational
 // permissions to the working rank). One self-contained page that stitches together
 // the oversight surfaces: pending access requests, security (red-team reports +
-// override queue + audit log), the builder roster, per-builder + project-wide
+// override queue + audit log), the stale-claim tally (the roster itself is the
+// Builders page since task 1005048), per-builder + project-wide
 // review grades, estimation drift, repo health, and a tally of recorded sessions.
 //
 // Note the page floor and the panel floors are no longer identical: the page and
@@ -20,6 +21,9 @@
 // loads independently in its own try/catch so one failing endpoint cannot
 // break the others.
 //
+// TASK 1005049 folded the Sessions page (sessions.js) and the Autobongos runner
+// panel (gate.js) in as two more tabs; /sessions and /gate redirect to them.
+//
 // TASK 1003469 put the page in the chrome world's composition: every list is
 // the kit's .ledger through makeLedger (eight of nine were a page-local table
 // that duplicated it with a hand-rolled th voice), every figure row is the oversight
@@ -165,7 +169,7 @@
   // NOTE: loadMarks is the deliberate outlier — its failure state is a plain
   // "empty" message, not "unavailable", so it keeps its own try/catch.
   // sealedText — name the floor the DENIAL reported, never one written here.
-  // Each `sealedMsg` below is the SUBJECT clause only ("The roster is not visible
+  // Each `sealedMsg` below is the SUBJECT clause only ("The audit log is not visible
   // at your rank."); the rank sentence in front of it is composed from the 403.
   // That is what keeps this page from telling a builder a permission model the
   // server stopped implementing, which is the whole of task 1003449 — and why the
@@ -865,164 +869,19 @@
   }
 
   // =========================================================================
-  // 3. ROSTER — every builder
+  // 3. STALE CLAIMS — a tally only (task 1005048)
   // =========================================================================
 
-  // Live rank options for the per-row <select>. The server validates against
-  // db.RANKS; these are the live, builder-facing tiers (ADR 0034). If a builder
-  // sits at a rank outside this set, we inject it so the select still shows it.
-  const RANK_OPTIONS = ['xenos', 'thetes', 'metic', 'archon'];
-
-  // Who is reading this roster (task 1003720). `load()` already fetches /me to
-  // resolve the page's floor and then threw the id away, so the roster — which
-  // returns EVERY builder, the viewer included — could not tell which row was
-  // the reader's own. See renderRoster for why that mattered.
-  let viewerId = null;
-  const isViewer = (b) => viewerId != null && b && b.id != null && String(b.id) === String(viewerId);
-
-  function renderRoster(data, target) {
-    const builders = Array.isArray(data.builders) ? data.builders : [];
-    setAttention('att-stale', builders.filter((b) => b.stale_claim).length);
-    target.innerHTML = '';
-    if (!builders.length) {
-      target.innerHTML = emptyStateHtml('No builders on the roster.');
-      return;
-    }
-    ledger(target, {
-      columns: [
-        'Builder', 'Rank',
-        { label: (window.OTBBranding?.currencyLabel?.({ caps: true }) ?? 'Credits'), class: 'num' },
-        { label: 'Karma', class: 'num' }, { label: 'Active claims', class: 'num' },
-        'Standing', 'Action',
-      ],
-      pager: makePager('watch-roster', 'otb.watch.rosterPerPage'),
-      rowHtml: (b) => {
-        // THE VIEWER'S OWN ROW OFFERS NOTHING (task 1003720, re-filed from 1002951
-        // — "I cannot press offboard", reported by the owner from Discord).
-        //
-        // The roster returns every builder, so the reader's own row is in it. Both
-        // routes behind that row refuse a self-change OUTRIGHT and always will:
-        // PATCH /builders/:id/rank answers cannot_change_own_rank and
-        // /builders/:id/status answers cannot_change_own_status — the guard that
-        // stops the last Archon demoting or offboarding themselves and locking
-        // everyone out. The row painted a live rank <select> and a live Offboard
-        // pill anyway, so from the owner's seat the page carried a control that
-        // could only ever answer with a raw refusal slug in a toast. That is what
-        // "I cannot press offboard" describes.
-        //
-        // This is not a SOFT gate (the primer's acknowledge control, which opens
-        // once you have read enough and so stays in the tab order as
-        // aria-disabled) — it is an action that can never open for this reader.
-        // So the row renders no control at all and the section's foot line says
-        // why, rather than painting a dead one.
-        const self = isViewer(b);
-        const opts = RANK_OPTIONS.slice();
-        if (b.rank && !opts.includes(b.rank)) opts.unshift(b.rank);
-        const rankCell = self
-          ? `<span class="watch-self">${escapeHtml(rankLabel(b.rank))}</span>`
-          : `<select data-roster-rank data-id="${escapeHtml(b.id)}" data-current="${escapeHtml(b.rank || '')}" aria-label="Rank">` +
-            opts.map((rk) => `<option value="${escapeHtml(rk)}"${rk === b.rank ? ' selected' : ''}>${escapeHtml(rankLabel(rk))}</option>`).join('') +
-            '</select>';
-        const isInactive = String(b.status) === 'inactive';
-        const statusBtn = isInactive
-          ? ghost(`data-roster-status="active" data-id="${escapeHtml(b.id)}"`, 'Reactivate')
-          : ghost(`data-roster-status="inactive" data-id="${escapeHtml(b.id)}"`, 'Offboard', true);
-        const actionCell = self
-          ? '<span class="watch-self">That\'s you</span>'
-          : `<div class="watch-actions">${statusBtn}</div>`;
-        const claims = num(b.active_claim_count);
-        const staleFlag = b.stale_claim ? ' <span class="badge badge--sev-medium">stale</span>' : '';
-        // task 1467: the roster name links to the builder's public profile page.
-        const rosterName = escapeHtml(b.display_name || b.github_login || ('#' + b.id));
-        const rosterNameCell = b.id != null
-          ? `<a class="lb-name" href="/profile?id=${encodeURIComponent(b.id)}">${rosterName}</a>`
-          : rosterName;
-        return (
-          '<tr>' +
-          `<td>${rosterNameCell}` +
-          (b.github_login ? ` <span class="ov-mono">@${escapeHtml(b.github_login)}</span>` : '') +
-          '</td>' +
-          `<td>${rankCell}</td>` +
-          `<td class="num">${fmtInt(b.total_credits)}</td>` +
-          `<td class="num">${fmtInt(b.karma)}</td>` +
-          `<td class="num${b.stale_claim ? ' warn' : ''}">${fmtInt(claims)}${staleFlag}</td>` +
-          `<td><span class="badge badge--status">${escapeHtml(b.status || '—')}</span></td>` +
-          `<td>${actionCell}</td>` +
-          '</tr>'
-        );
-      },
-    }).render(builders);
-
-    // The one asymmetry in the table, stated once under it rather than repeated
-    // on the row. Appended as an ELEMENT, not with `innerHTML +=`: re-parsing the
-    // body would drop the pager's own wiring. The rank is written from
-    // rankLabel(), never a hardcoded "Archon", so the floor cannot drift.
-    if (builders.some(isViewer)) {
-      const note = document.createElement('p');
-      note.className = 'ov-foot';
-      note.textContent = `Your own row carries no controls. Nobody can change their own rank or standing — that guard is what stops the last ${rankLabel('archon')} locking everyone out — so another ${rankLabel('archon')} does it.`;
-      target.appendChild(note);
-    }
-
-    // Rank change via the <select>. Bespoke: a 'change' listener that rolls the
-    // select back to its previous value on failure, delegated so a page flip
-    // cannot strand a row without one.
-    if (!target['wired:rank']) {
-      target['wired:rank'] = true;
-      target.addEventListener('change', async (e) => {
-        const sel = e.target.closest('[data-roster-rank]');
-        if (!sel || !target.contains(sel)) return;
-        const id = sel.getAttribute('data-id');
-        const rank = sel.value;
-        const prev = sel.getAttribute('data-current');
-        if (rank === prev) return;
-        sel.disabled = true;
-        try {
-          await patchJson(`/builders/${encodeURIComponent(id)}/rank`, { rank });
-          toast(`Rank set to ${rankLabel(rank)}.`);
-          await loadRoster();
-        } catch (err) {
-          if (err && err.kind === '401') return;
-          sel.value = prev; // roll back the select on failure
-          sel.disabled = false;
-          toast(`Could not change rank: ${err.message || err}`);
-        }
-      });
-    }
-
-    // Status change (offboard / reactivate). Bespoke: it gathers an offboarding
-    // reason via window.prompt BEFORE disabling, so not delegate().
-    if (!target['wired:status']) {
-      target['wired:status'] = true;
-      target.addEventListener('click', async (e) => {
-        const btn = e.target.closest('[data-roster-status]');
-        if (!btn || !target.contains(btn)) return;
-        const id = btn.getAttribute('data-id');
-        const status = btn.getAttribute('data-roster-status');
-        let reason = null;
-        if (status === 'inactive') {
-          reason = window.prompt('Reason for offboarding (optional):', '') || null;
-        }
-        btn.disabled = true;
-        try {
-          await patchJson(`/builders/${encodeURIComponent(id)}/status`, { status, reason });
-          toast(status === 'inactive' ? 'Builder offboarded.' : 'Builder reactivated.');
-          await loadRoster();
-        } catch (err) {
-          if (err && err.kind === '401') return;
-          btn.disabled = false;
-          toast(`Could not change standing: ${err.message || err}`);
-        }
-      });
-    }
-  }
-
-  function loadRoster() {
-    return section($('#roster-body'), () => fetchJson('/builders/roster'), renderRoster, {
-      sealedMsg: 'The roster is not visible at your rank.',
-      errMsg: 'Could not load the roster.',
-      name: 'roster',
-    });
+  // The roster that lived here is the Builders page now (owner decision on idea
+  // 1001313: one list of builders). The attention tile keeps its count, read
+  // from the same route, and links to that list filtered to the stale claims.
+  function loadStaleCount() {
+    return fetchJson('/builders/roster')
+      .then((data) => {
+        const builders = Array.isArray(data && data.builders) ? data.builders : [];
+        setAttention('att-stale', builders.filter((b) => b.stale_claim).length);
+      })
+      .catch(() => setAttention('att-stale', null));
   }
 
   // =========================================================================
@@ -1411,7 +1270,7 @@
 
   function revealSections() {
     [
-      'watch-attention', 'watch-tabs', 'gate-scroll', 'watch-scroll', 'roster-scroll',
+      'watch-attention', 'watch-tabs', 'gate-scroll', 'watch-scroll',
       'marks-scroll', 'mason-marks-scroll', 'surveyor-scroll', 'ledger-scroll', 'sessions-scroll',
     ].forEach((id) => {
       const el = document.getElementById(id);
@@ -1427,7 +1286,15 @@
           { id: 'people', label: 'People', panel: 'pane-people' },
           { id: 'operations', label: 'Operations', panel: 'pane-operations' },
           { id: 'security', label: 'Security', panel: 'pane-security' },
+          // task 1005049 (owner decision 2026-11-03, idea 1001315): the Sessions and
+          // Autobongos pages are tabs here. Each boots the first time it opens.
+          { id: 'sessions', label: 'Sessions', panel: 'pane-sessions' },
+          { id: 'autobongos', label: 'Autobongos', panel: 'pane-autobongos' },
         ],
+        onChange: (id) => {
+          const boot = window.OTBWatchTabs && window.OTBWatchTabs[id];
+          if (boot) boot();
+        },
       });
     }
   }
@@ -1441,11 +1308,6 @@
       if (!res.ok) throw new Error(`me → ${res.status}`);
       const payload = res.data;
       builder = (payload && payload.builder) ? payload.builder : payload;
-      // Kept for the roster, which must know which row is the reader's own
-      // (task 1003720). Null when /me answered without one — isViewer then
-      // matches nothing, so the roster degrades to the old every-row-acts shape
-      // rather than marking the wrong row as yours.
-      viewerId = (builder && builder.id != null) ? builder.id : null;
     } catch (err) {
       console.error('[watch] failed to read viewer', err);
       showSealed('Could not check your access. Reload to try again.', 'Could not load');
@@ -1454,7 +1316,7 @@
     }
 
     // ADR 0157: Watch sits at the `page.view.government` floor (metic), and every panel
-    // it reads (roster, security reports, audit log, sessions, box costs) delegated to
+    // it reads (stale claims, security reports, audit log, sessions, box costs) delegated to
     // metic with it. Cosmetic — requireGovernmentPage + the route gates are the wall.
     if (!builder || (builder.rank !== 'metic' && builder.rank !== 'archon')) {
       showSealed(`Available from the ${rankLabel('metic')} rank up. Your current rank does not grant access.`);
@@ -1469,7 +1331,7 @@
     loadEngagementDocs();
     loadOverrides();
     loadAudit();
-    loadRoster();
+    loadStaleCount();
     loadMarks();
     loadMasonMarks();
     loadSurveyor();

package/modules/hall-ui/public/watch.states.json

@@ -15,7 +15,9 @@
     "/api/(gds|bongos)/versions",
     "/api/(gds|bongos)/watch",
     "/api/(gds|bongos)/analytics",
-    "/api/(gds|bongos)/tasks"
+    "/api/(gds|bongos)/tasks",
+    "/api/(gds|bongos)/sessions",
+    "/api/(gds|bongos)/autonomy/"
   ],
   "ignoreConsole": [
     "/api/(gds|bongos)/",
@@ -92,6 +94,52 @@
           "#watch-scroll"
         ]
       }
+    },
+    "sessions": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          700
+        ],
+        [
+          "click",
+          "#tab-sessions"
+        ],
+        [
+          "wait",
+          500
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#pane-sessions",
+          "#stats-scroll",
+          "#sess-ledger-scroll"
+        ]
+      }
+    },
+    "autobongos": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          700
+        ],
+        [
+          "click",
+          "#tab-autobongos"
+        ],
+        [
+          "wait",
+          500
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#pane-autobongos"
+        ]
+      }
     }
   },
   "reducedMotion": {

package/modules/hall-ui/public/work.html

@@ -173,8 +173,8 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-oversight"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 1004727: the ONE karma vote control every task/idea list renders -->

package/modules/hall-ui/records/builders-roster.md

@@ -37,3 +37,5 @@ The owner's Studio idea 1001297 (a circuit-trace image as a table divider; mock
 - **The pseudo-elements sit on the row's first `td`, never on the `tr`.** On the `tr` they became two extra table cells and pushed every cell in the row two columns right (seen in the first render). The `tr` only carries `position: relative`, so the `td`'s absolute children size against the whole row.
 - **Two masks, two tokens.** Traces are `--ink-faint` and the orange nodes `--accent`, each shown through an SVG mask, so light and dark follow the world with no hard-coded colour. Left cap, right cap and the stretching hairline are three layers of one mask.
 - **The empty-state row has no trace** (`:not(:has(.ledger__empty))`). Checked at desktop and 375px, light and dark: the table scrolls inside its card on a phone and the divider spans it; the page does not scroll sideways.
+
+**Since task 1005048 it is the one list.** Watch's own roster folded in: a viewer the `GET /builders/roster` route lets in also sees active claims, the stale flag, standing and the rank/offboard controls, and the route's refusal leaves this page exactly the public list described above.

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.39",
+  "version": "1.24.41",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.39",
+      "version": "1.24.41",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.39",
+  "version": "1.24.41",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11197,5 +11197,17 @@
       "id": "1005077",
       "text": "The governor street is now a work-first square: the working areas left the street, the extra header and footer are gone, a pin takes you straight into its building, and inside a building the drawing is a compact floor picker s"
     }
+  ],
+  "1.24.40": [
+    {
+      "id": "1005048",
+      "text": "The Builders page is now the one list of everyone who builds here. If you hold a government seat you also see each builder's active claims, any stale claim, their standing, and the controls to change a rank or offboard someone"
+    }
+  ],
+  "1.24.41": [
+    {
+      "id": "1005049",
+      "text": "Watch is now the one oversight page. Sessions and Autobongos moved off the sidebar and became two tabs on Watch, next to People, Operations and Security. Old links to /sessions and /gate open the right tab. Who can see and pre"
+    }
   ]
 }

package/scripts/bongos/gen-hall-sitemap.js

@@ -62,6 +62,8 @@ const ROUTES = {
   '/ranks': { to: '/primer', why: 'now a Primer chapter, redirects (task 1005046)' },
   '/drachmae': { to: '/primer', why: 'now a Primer chapter, redirects (task 1005046)' },
   '/diagrams': { to: '/primer', why: 'now a Primer chapter, redirects; its images still serve (task 1005046)' },
+  '/sessions': { to: '/watch', why: 'now a Watch tab, redirects (task 1005049)' },
+  '/gate': { to: '/watch', why: 'Autobongos, now a Watch tab, redirects (task 1005049)' },
 };
 // Targets that leave the hall on purpose: sign-in, the hub's /account (platform-server.js;
 // settings.js points the link at the hub), the API, module assets, and any file with an extension.

package/src/bongos/routes/me.js

@@ -146,7 +146,9 @@ const discordIsLinked = (builderId) =>
 // buttons for a viewer who cannot vote on ideas, without re-deriving it from rank.
 // `blocker.review` (task 1004824): the Blockers page and its overlay offer Resolve and
 // Link only to a builder who holds it; POST /blockers/:id/{resolve,link} stays the wall.
-const NAV_PERMISSION_ATOMS = Object.freeze(['board.vote.cast', 'core.pin.move', 'idea.triage', 'board.item.open', 'idea.vote', 'blocker.review']);
+// `builder.roster.read` (task 1005048): the Builders page asks GET /builders/roster
+// for its government columns only of a viewer who holds it; the route stays the wall.
+const NAV_PERMISSION_ATOMS = Object.freeze(['board.vote.cast', 'core.pin.move', 'idea.triage', 'board.item.open', 'idea.vote', 'blocker.review', 'builder.roster.read']);
 
 // navPermissionsFor(builderId) → { '<atom>': boolean } over NAV_PERMISSION_ATOMS,
 // or null when authority could not be established (government off, port missing,

package/src/bongos/serve-internal.js

@@ -927,23 +927,13 @@ function mountInternalSurfaces(app) {
   // The apex hands /builders/* (ADR 0036) and /deploy (task 1004736) to the hall's own host.
   mountApexHallRedirects(app, { skip: (req) => isModuleSurfaceHost(req) || isBuildersHost(req), hostOf: (req) => siteOf(req).host });
 
-  // The /watch monitoring page and the /gate page (task 1179) both sit behind
-  // `page.view.government` — Metic and up since ADR 0157. Same server-side page
-  // gate, same posture: a builder without the permission never receives the shell
-  // (requireGovernmentPage — named requireArchonPage before ADR 0157 — redirects
-  // them to the hall, and an unauthenticated visitor into sign-in). The subdomain
-  // shim above has already rewritten the bare /watch + /gate onto /builders/*.
-  // (Defense in depth: every data endpoint these pages call carries its own
-  // server-side gate.)
+  // The /watch monitoring page sits behind `page.view.government` — Metic and up
+  // since ADR 0157: a builder without the permission never receives the shell
+  // (requireGovernmentPage redirects them to the hall, and an unauthenticated
+  // visitor into sign-in). Its Sessions and Autobongos tabs were the /sessions and
+  // /gate pages until task 1005049, behind this same gate. (Defense in depth: every
+  // data endpoint the page calls carries its own server-side gate.)
   const WATCH_PAGE_RE = /^\/builders\/watch(?:\.html)?\/?$/;
-  const GATE_PAGE_RE = /^\/builders\/gate(?:\.html)?\/?$/;
-  // /sessions (the session-log ledger) belongs to that same Governance group and
-  // its data route (`session.search`) carries the same metic floor since ADR 0157
-  // — but it had NO page gate at all: sessions.js only called showSealed() after
-  // /api/bongos/me, so the shell was served to anyone who asked for the URL. The
-  // data never leaked (the route gate held), but the page was the one item in the
-  // group without a wall. Gated here so the group is uniform (task 1002710).
-  const SESSIONS_PAGE_RE = /^\/builders\/sessions(?:\.html)?\/?$/;
   // /project-settings — the five fundamentals of the project (task 1003280, goal
   // 1000072). Government tier, beside /watch and /sessions: it is a STEERING surface,
   // and ADR 0157 put that floor at metic. Both writes behind it gate independently on
@@ -1049,14 +1039,18 @@ function mountInternalSurfaces(app) {
     return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/market-watch${qs}#settings`);
   });
 
-  // task 1005047: Fleet costs is /money's #hosting section now; 302 and no gate, as above.
-  const RETIRED_FLEET_RE = /^\/builders\/fleet(?:\.html)?\/?$/;
+  // Pages folded into a section of another page; 302 and no gate, as above. Task 1005047:
+  // Fleet costs is /money#hosting. Task 1005049: Sessions and Autobongos are Watch tabs.
+  const RETIRED_TO_SECTION = Object.freeze({ fleet: 'money#hosting', sessions: 'watch#sessions', gate: 'watch#autobongos' });
+  const RETIRED_SECTION_RE = /^\/builders\/(fleet|sessions|gate)(?:\.html)?\/?$/;
   app.use((req, res, next) => {
     if (isModuleSurfaceHost(req)) return next();
     if (req.method !== 'GET' && req.method !== 'HEAD') return next();
-    if (!RETIRED_FLEET_RE.test(path.posix.normalize(req.path))) return next();
+    const m = RETIRED_SECTION_RE.exec(path.posix.normalize(req.path));
+    if (!m) return next();
     const qs = req.url.includes('?') ? req.url.slice(req.url.indexOf('?')) : '';
-    return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/money${qs}#hosting`);
+    const [page, section] = RETIRED_TO_SECTION[m[1]].split('#');
+    return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/${page}${qs}#${section}`);
   });
 
   // task 1005046 (owner decision 2026-11-03, idea 1001311): ONE reading room. Ranks,
@@ -1104,8 +1098,7 @@ function mountInternalSurfaces(app) {
     if (isModuleSurfaceHost(req)) return next();
     if (!req.path.startsWith('/builders')) return next();
     const norm = path.posix.normalize(req.path);
-    if (WATCH_PAGE_RE.test(norm) || GATE_PAGE_RE.test(norm)
-      || SESSIONS_PAGE_RE.test(norm) || PROJECT_SETTINGS_PAGE_RE.test(norm)
+    if (WATCH_PAGE_RE.test(norm) || PROJECT_SETTINGS_PAGE_RE.test(norm)
       || MONEY_PAGE_RE.test(norm)) {
       return gdsAuth.requireGovernmentPage(req, res, next);
     }

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.39'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.41'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/autonomy_builder_scope.mjs

@@ -460,7 +460,8 @@ test('the owner page draws the PROJECT fence and pauses one builder; the setting
   assert.match(gate, /const fence = raw\.project \|\| raw;/, 'the switch panel must not draw the owner’s own narrowed picks as the project list');
   assert.match(gate, /\/autonomy\/runners\/all/);
   assert.match(gate, /\/autonomy\/builders\/\$\{encodeURIComponent\(id\)\}\/pause/);
-  const html = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/gate.html'), 'utf8');
+  // task 1005049: the owner panel is Watch's Autobongos tab.
+  const html = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/watch.html'), 'utf8');
   assert.match(html, /id="fence-builders"/);
 
   const panel = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/settings-autobongos.js'), 'utf8');

package/tests/hall_audit.mjs

@@ -233,7 +233,7 @@ test('the session log pages on the kit — the last hand-roll is gone', () => {
     assert.match(js, new RegExp(`kit\\.${fn}\\(`), `sessions.js must page through the kit's ${fn}`);
   }
   assert.doesNotMatch(js, /const PAGE_SIZE\b/, 'its fixed page size is gone — per-page is the kit\'s now');
-  assert.match(read('sessions.html'), /hall-kit\.js/, 'and the page has to load the kit');
+  assert.match(read('watch.html'), /hall-kit\.js/, 'and Watch, whose Sessions tab it is (task 1005049), has to load the kit');
 });
 
 // ---- 6b. every hall bar series is drawn by the kit (task 1003445) ---------

package/tests/hall_loading.mjs

@@ -83,7 +83,7 @@ test('the page loaders step aside by themselves, and never show without :has()',
   assert.match(STYLE, /\.hall-loading--wait, \.hall-loading--zones \{ display: none; \}/);
   assert.match(STYLE, /@supports selector\(:has\(a\)\) \{\s*\.hall-loading--wait:not\(:has\(~ :not\(\[hidden\], script, template, style\)\)\) \{ display: flex; \}\s*\.hall-loading--zones:not\(:has\(~ :not\(\[hidden\]\) > :not\(\[hidden\], script, template, style\)\)\) \{ display: flex; \}\s*\}/);
   // A page whose sections all start [hidden] carries the --wait loader FIRST in its main.
-  for (const page of ['board-room', 'deploy', 'gate', 'government', 'money', 'project-settings', 'sessions']) {
+  for (const page of ['board-room', 'deploy', 'government', 'money', 'project-settings']) {
     const html = read(`${page}.html`);
     const main = html.slice(html.indexOf('<main id="hall-main">'));
     const first = main.replace(/<main id="hall-main">\s*(<!--[\s\S]*?-->\s*)*/, '');
@@ -95,6 +95,17 @@ test('the page loaders step aside by themselves, and never show without :has()',
   }
   assert.match(read('index.html'), /<section class="view" id="view-home"[^>]*>\s*<!--[^>]*-->\s*<p class="hall-loading hall-loading--page hall-loading--zones" role="status">Loading…<\/p>/, 'Home waits on its zones');
   assert.match(read('watch.html'), /<main id="hall-main">\s*<!--[^>]*-->\s*<p class="hall-loading hall-loading--page hall-loading--zones" role="status">Loading…<\/p>/, 'Watch waits on its panes');
+  // task 1005049: the Sessions and Autobongos tabs (once their own pages) open on the
+  // --wait loader, so a tab whose sections are all still hidden says it is loading.
+  for (const pane of ['pane-sessions', 'pane-autobongos']) {
+    const html = read('watch.html');
+    const inner = html.slice(html.indexOf(`<div id="${pane}"`));
+    const body = inner.slice(inner.indexOf('>') + 1).replace(/^\s*(<!--[\s\S]*?-->\s*)*/, '');
+    assert.match(body, /^<p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…<\/p>/, `${pane} opens on the page loader`);
+    const kids = [...body.slice(body.indexOf('</p>') + 4, body.indexOf('\n        </div>')).matchAll(/^ {10}<(section|div|p|nav)\b([^>]*)>/gm)];
+    assert.ok(kids.length >= 1, `${pane} has sections after the loader`);
+    for (const [, tag, attrs] of kids) assert.match(attrs, /\bhidden\b/, `${pane}: a <${tag}> after the loader starts hidden`);
+  }
   // Settings' layout is never [hidden] while it loads, so its loader is put away by hideLayout().
   assert.match(read('settings.html'), /id="settings-groups"[^>]*>\s*<!--[^>]*-->\s*<p class="hall-loading hall-loading--page" id="settings-loading" role="status">/);
   assert.match(read('settings.js'), /function hideLayout\(hide\) \{[\s\S]*?getElementById\('settings-loading'\)[\s\S]*?loading\.hidden = true;/);
@@ -105,7 +116,7 @@ test('no hall page waits on a bare line of text any more', () => {
   // the class would stay behind on the finished sentence. Each is named with why.
   const IN_PLACE = new Set([
     'atlas.html#caption',             // the map's caption, rewritten by atlas.js
-    'sessions.html#ledger-status',    // the ledger's status line, rewritten by sessions.js
+    'watch.html#ledger-status',       // the Sessions tab's status line, rewritten by sessions.js
     'goals.html#goal-deps-card-lede', // the dependency card's lede, rewritten by goals-page.js
     'goals.html#goal-deps-lede',
     'profile.html#activity-placeholder', // reused for the signed-out notice by profile.js

package/tests/hall_nav.mjs

@@ -335,7 +335,10 @@ test('sidebar groups read by audience, in order', () => {
   // 'market-watch-settings' (task 1004938) LEFT the group in task 1005045: the owner saw
   // "Market Watch" twice and had to guess which was which (owner decision 2026-11-03,
   // idea 1001310). The settings are an owner-only Settings tab on /market-watch now.
-  assert.deepEqual(nav[5].items.map((i) => i.id), ['watch', 'gate', 'sessions', 'project-settings', 'money', 'deploy', 'government']);
+  // 'gate' (Autobongos) and 'sessions' LEFT the group in task 1005049 (owner decision
+  // 2026-11-03, idea 1001315): they are tabs on Watch, and /gate + /sessions redirect there.
+  assert.deepEqual(nav[5].items.map((i) => i.id), ['watch', 'project-settings', 'money', 'deploy', 'government']);
+  assert.ok(!nav.flatMap((g) => g.items).some((i) => i.href === '/gate' || i.href === '/sessions'), 'no item points at a page that became a Watch tab');
   // task 1005045: and no label is left twice anywhere in the sidebar, so the next pair
   // fails here instead of in front of the owner.
   const labels = [...boot().sidebarHtml.matchAll(/<a class="nav-item" [^>]*>[\s\S]*?<span class="nav-item__label">([^<]*)<\/span>/g)].map((m) => m[1]);
@@ -787,7 +790,7 @@ test('no glyph path data reads as an IP address to the release leak scan', () =>
 // block (task 1004713). These drive the real shell and the real gov-positions.js.
 
 const tick = () => new Promise((resolve) => setImmediate(resolve));
-const GOVERNING = ['city', 'board-room', 'watch', 'gate', 'sessions', 'project-settings', 'money', 'deploy', 'government'];
+const GOVERNING = ['city', 'board-room', 'watch', 'project-settings', 'money', 'deploy', 'government'];
 const lead = (building, title) => ({ kind: 'lead', seat: 'lead:' + building, building, title });
 const block = (held) => ({ held, title: held.length ? held[0].title : null, has_position: held.length > 0 });