@bongos/core 1.24.40 → 1.24.42

package/modules/hall-ui/public/watch.html

@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>Watch — {{worldName}}</title>
-  <meta name="description" content="Archon oversight for {{worldName}} — access requests, security, stale claims, reviews, and repo health.">
+  <meta name="description" content="Archon oversight for {{worldName}} — access requests, security, stale claims, reviews, repo health, sessions and the Autobongos runner.">
   <!-- The hub's origin, for the link from a guild's head in the applications queue to
        its page on the hub (task 1002304). Empty on a vanilla instance: no link. -->
   <meta name="hub-origin" content="{{hubOrigin}}">
@@ -18,6 +18,9 @@
        shared .stat-row/.stat-tile + hall-kit rules. -->
   <link rel="stylesheet" href="/builders/oversight.css">
   <link rel="stylesheet" href="/builders/watch.css">
+  <!-- task 1005049: the Sessions and Autobongos tabs bring their pages' own sheets. -->
+  <link rel="stylesheet" href="/builders/sessions.css">
+  <link rel="stylesheet" href="/builders/gate.css">
 </head>
 <body data-page="watch" data-page-title="Watch">
 
@@ -49,7 +52,7 @@
           <a class="stat-tile" href="#people"><span class="stat-tile__label">Access requests</span><span class="stat-tile__num" id="att-access">—</span><span class="stat-tile__sub">pending, on the People tab</span></a>
           <a class="stat-tile" href="#security"><span class="stat-tile__label">Security reports</span><span class="stat-tile__num" id="att-security">—</span><span class="stat-tile__sub">open, on the Security tab</span></a>
           <a class="stat-tile" href="/roster?claims=stale"><span class="stat-tile__label">Stale claims</span><span class="stat-tile__num" id="att-stale">—</span><span class="stat-tile__sub">builders, on the Builders page</span></a>
-          <a class="stat-tile" href="#operations"><span class="stat-tile__label">Sessions</span><span class="stat-tile__num" id="att-sessions">—</span><span class="stat-tile__sub">recorded, on the Operations tab</span></a>
+          <a class="stat-tile" href="#sessions"><span class="stat-tile__label">Sessions</span><span class="stat-tile__num" id="att-sessions">—</span><span class="stat-tile__sub">recorded, on the Sessions tab</span></a>
         </div>
 
         <!-- task 2173: the nine surfaces sit behind three OTBKit tabs, hash-synced
@@ -89,10 +92,10 @@
                always fetched and used to throw away (task 1003469). -->
           <section class="scroll" id="sessions-scroll" aria-labelledby="sessions-h" hidden>
             <h2 id="sessions-h" class="scroll__h">Sessions</h2>
-            <p class="scroll__lede">A tally of recorded work sessions, and the latest five. The full record lives on the Sessions page.</p>
+            <p class="scroll__lede">A tally of recorded work sessions, and the latest five. The full record is on the Sessions tab.</p>
             <div id="sessions-stats" class="ov-figs"><span class="kit-skel"></span></div>
             <div id="sessions-recent"></div>
-            <p class="ov-foot"><a href="/sessions">View all sessions</a></p>
+            <p class="ov-foot"><a href="#sessions">View all sessions</a></p>
           </section>
 
           <!-- 7. REPO HEALTH -->
@@ -147,6 +150,113 @@
             <div id="surveyor-body"></div>
           </section>
         </div>
+        <!-- ============ tab: Sessions (task 1005049: was the /sessions page) ============ -->
+        <div id="pane-sessions" role="tabpanel" aria-labelledby="tab-sessions" hidden>
+          <!-- Every section below starts hidden, so the tab says it is loading until one shows. -->
+          <p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…</p>
+          <!-- Access notice — shown by sessions.js when the viewer is below the
+               floor. The heading and the line are written from the pack's rank
+               label (ADR 0157: metic and up), so the static text never renders. -->
+          <section class="scroll" id="sess-sealed" aria-labelledby="sess-sealed-h" hidden>
+            <h2 id="sess-sealed-h" class="scroll__h">Higher ranks only</h2>
+            <p class="scroll__lede" id="sess-sealed-body">The session log opens from a higher rank.</p>
+          </section>
+
+          <!-- Totals — the shell's glass strip at the top of the page (the way
+               Watch and Gate carry theirs), not a strip inside a panel. -->
+          <section class="ov-summary" id="stats-scroll" aria-labelledby="stats-h" hidden>
+            <h2 id="stats-h" class="sr-only">Totals</h2>
+            <div class="stat-row" id="stats-body"></div>
+          </section>
+
+          <!-- Every recorded session — the corpus table. No wrapper: the shell's
+               card strip scrolls a wide ledger on a phone, and the old wrapper
+               turned the sticky header into a scrollport overlay on desktop. -->
+          <section class="scroll" id="sess-ledger-scroll" aria-labelledby="sess-ledger-h" hidden>
+            <h2 id="sess-ledger-h" class="scroll__h">Recorded sessions</h2>
+            <!-- The count, and a failed load, sit here: the page head that used to carry
+                 them is hidden (task 1004829). -->
+            <p class="scroll__lede" id="ledger-status" role="status" aria-live="polite">Loading sessions…</p>
+            <!-- task 1003975: the ledger's first filter. It LOOKS like the pager's
+                 per-page control on purpose (one control grammar per page) but wears
+                 its own class — the hall_audit guard reads `class="pager…"` as a
+                 hand-rolled pager, and it is right to: borrowing that family is how a
+                 second pager implementation starts. Its options are filled from the
+                 server's vocabulary in sessions.js, never hardcoded here, where they
+                 would drift from what the route accepts. -->
+            <div class="ledger-filters">
+              <label class="ledger-filter">
+                <span>Kind</span>
+                <select id="session-type-filter" aria-label="Filter sessions by kind"></select>
+              </label>
+            </div>
+            <table class="ledger" id="sessions-table">
+              <thead>
+                <tr>
+                  <th>Session</th><th>Builder</th>
+                  <th title="What the session did, derived from its own transcript: whether it wrote files, used tools, and how many prompts a person actually sent.">Kind</th>
+                  <th>Tasks</th>
+                  <th class="ledger__num">Earned</th><th class="ledger__num">Turns</th><th class="ledger__num">Tokens</th><th class="ledger__num">Tool errors</th>
+                  <th class="ledger__num">Duration</th>
+                  <th class="ledger__num" title="How the session read to this builder, scored against their own interaction profile. Advisory — it gates nothing.">Plain speech</th>
+                  <th>Recorded</th>
+                </tr>
+              </thead>
+              <tbody id="sessions-body"></tbody>
+            </table>
+            <!-- The kit stamps the pager bar here (sessions.js, OTBKit.pagerBarHtml).
+                 makeLedger is deliberately NOT used: it stamps table + pager into one
+                 mount, and this page keeps them separate so the bar sits below the
+                 ledger rather than inside whatever scrollport the table is in. -->
+            <div id="sessions-pager-mount"></div>
+            <p class="ledger__note" id="ledger-foot"></p>
+          </section>
+
+          <!-- task 1002830: the narrative. Opened from a row's Read door; the SAME page
+               and the same gate as the ledger above (ADR 0051 — no second page). The
+               server decides who may read a transcript and records an administrator's
+               cross-builder read BEFORE serving it; this panel only displays. -->
+          <section class="scroll" id="transcript-scroll" aria-labelledby="transcript-h" hidden>
+            <h2 id="transcript-h" class="scroll__h">Transcript</h2>
+            <p class="scroll__lede" id="transcript-sub"></p>
+            <p><button type="button" class="btn" id="transcript-close">Close transcript</button></p>
+            <div id="transcript-body" class="transcript"></div>
+            <p><button type="button" class="btn" id="transcript-more" hidden>Load more turns</button></p>
+          </section>
+      
+        </div>
+
+        <!-- ============ tab: Autobongos (task 1005049: was the /gate page) ============ -->
+        <div id="pane-autobongos" role="tabpanel" aria-labelledby="tab-autobongos" hidden>
+          <p class="hall-loading hall-loading--page hall-loading--wait" role="status">Loading…</p>
+          <!-- task 1003469: the sealed state is a panel with a heading, not a bare
+               line on the ground. gate.js writes the real floor into the lede from
+               the pack's rank label, so the copy cannot drift from ADR 0157. -->
+          <section class="scroll" id="gate-sealed" aria-labelledby="gate-sealed-h" hidden>
+            <h2 class="scroll__h" id="gate-sealed-h">Restricted</h2>
+            <p class="scroll__lede" id="gate-sealed-body">This page opens at a higher rank.</p>
+          </section>
+
+          <section id="runner-body" hidden>
+            <!-- The Autobongos fence (task 1003908, ADR 0307 §6): what is allowed to
+                 reach main unattended. This page held the held-PR list too until task
+                 1004859 removed it; the URL stays /gate so bookmarks keep working.
+                 Archon-only — a Metic gets the note below instead, and the routes
+                 behind the panel are system:true/archon server-side regardless. -->
+            <p class="scroll__lede" id="gate-archon-only" hidden></p>
+            <section class="scroll" id="fence-panel" aria-labelledby="fence-h" hidden>
+              <h2 class="scroll__h" id="fence-h">Autobongos runner</h2>
+              <!-- One panel (task 1004509): a checklist while anything the runner
+                   needs is missing, one status line with the switch once it is all
+                   ticked. Drawn from /autonomy/runners + /autonomy/fence together. -->
+              <div id="fence-body"><span class="kit-skel"></span></div>
+              <!-- Every builder's runner (task 1004501): what each one picked to
+                   work, whether you paused it, and whether it is checking in. -->
+              <div id="fence-builders"></div>
+            </section>
+          </section>
+      
+        </div>
       </main>
 
       <footer class="app-foot" id="app-foot"></footer>
@@ -160,14 +270,17 @@
      chrome exists before the page script runs. -->
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-setup-gate"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- shared component kit (window.OTBKit) — tabs, ledger, pager (task 2166). -->
 <script src="/builders/hall-kit.js"></script>
 <script src="/builders/task-detail.js?v=2026-07-03-taskdetail"></script>
 <script src="/builders/brand-apply.js?v=2026-06-19-r56"></script>
-<script src="/builders/watch.js?v=2026-11-05-roster"></script>
+<!-- task 1005049: the two tabs' scripts, booted by watch.js when their tab first opens. -->
+<script src="/builders/sessions.js?v=2026-11-05-tab"></script>
+<script src="/builders/gate.js?v=2026-11-05-tab"></script>
+<script src="/builders/watch.js?v=2026-11-05-tabs"></script>
 </body>
 </html>

package/modules/hall-ui/public/watch.js

@@ -21,6 +21,9 @@
 // loads independently in its own try/catch so one failing endpoint cannot
 // break the others.
 //
+// TASK 1005049 folded the Sessions page (sessions.js) and the Autobongos runner
+// panel (gate.js) in as two more tabs; /sessions and /gate redirect to them.
+//
 // TASK 1003469 put the page in the chrome world's composition: every list is
 // the kit's .ledger through makeLedger (eight of nine were a page-local table
 // that duplicated it with a hand-rolled th voice), every figure row is the oversight
@@ -1283,7 +1286,15 @@
           { id: 'people', label: 'People', panel: 'pane-people' },
           { id: 'operations', label: 'Operations', panel: 'pane-operations' },
           { id: 'security', label: 'Security', panel: 'pane-security' },
+          // task 1005049 (owner decision 2026-11-03, idea 1001315): the Sessions and
+          // Autobongos pages are tabs here. Each boots the first time it opens.
+          { id: 'sessions', label: 'Sessions', panel: 'pane-sessions' },
+          { id: 'autobongos', label: 'Autobongos', panel: 'pane-autobongos' },
         ],
+        onChange: (id) => {
+          const boot = window.OTBWatchTabs && window.OTBWatchTabs[id];
+          if (boot) boot();
+        },
       });
     }
   }

package/modules/hall-ui/public/watch.states.json

@@ -15,7 +15,9 @@
     "/api/(gds|bongos)/versions",
     "/api/(gds|bongos)/watch",
     "/api/(gds|bongos)/analytics",
-    "/api/(gds|bongos)/tasks"
+    "/api/(gds|bongos)/tasks",
+    "/api/(gds|bongos)/sessions",
+    "/api/(gds|bongos)/autonomy/"
   ],
   "ignoreConsole": [
     "/api/(gds|bongos)/",
@@ -92,6 +94,52 @@
           "#watch-scroll"
         ]
       }
+    },
+    "sessions": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          700
+        ],
+        [
+          "click",
+          "#tab-sessions"
+        ],
+        [
+          "wait",
+          500
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#pane-sessions",
+          "#stats-scroll",
+          "#sess-ledger-scroll"
+        ]
+      }
+    },
+    "autobongos": {
+      "auth": true,
+      "actions": [
+        [
+          "wait",
+          700
+        ],
+        [
+          "click",
+          "#tab-autobongos"
+        ],
+        [
+          "wait",
+          500
+        ]
+      ],
+      "expect": {
+        "visible": [
+          "#pane-autobongos"
+        ]
+      }
     }
   },
   "reducedMotion": {

package/modules/hall-ui/public/work.html

@@ -173,8 +173,8 @@
      time so the chrome exists before the deferred page scripts execute. -->
 <script src="/builders/dom-utils.js?v=2026-10-25-escape"></script>
 <script src="/builders/shell-trail.js?v=2026-10-08-city-tab"></script>
-<script src="/builders/craft-mode.js?v=2026-11-05-sections"></script>
-<script src="/builders/shell.js?v=2026-11-05-sections"></script>
+<script src="/builders/craft-mode.js?v=2026-11-05-oversight"></script>
+<script src="/builders/shell.js?v=2026-11-05-setup-gate"></script>
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <!-- task 1004727: the ONE karma vote control every task/idea list renders -->

package/modules/hall-ui/records/setup-gate.md

@@ -0,0 +1,43 @@
+# The setup flow — one screen a new builder finishes once, and no setup banner on Home (task 1005076)
+
+The owner, 2026-11-05: Home's Welcome banner (the clone / `npx bongos setup` / download Claude steps) and the
+Getting started checklist below it stayed until a builder had shipped THREE tasks, so builders who were fully
+set up kept seeing a setup banner across the top of the hall. The decision: a new builder is held on a setup
+flow when they get in and goes through each step; once set up they are in for good, with no banner and no
+reminders.
+
+**What people see.** While `/me`'s `onboarding.setup.complete` is false, every hall page shows only
+`setup-gate.js`'s screen: "N of 4 done", the four steps in order, the current one open with what to do, a Sign
+out link. Each step ticks itself; the screen re-reads `/me` every 8 seconds and reloads into the hall the moment
+setup is complete.
+
+1. **Sign in** — always done by the time the screen can draw.
+2. **Get the project and Claude on your machine, and link it** — a CLI session exists (`npx bongos setup`).
+3. **Choose your role** — chosen on the screen itself, saved through `PATCH /me/disciplines`.
+4. **Run /builder-start in Claude** — the `first_start` stage, which `GET /tasks/claimable` now marks only for
+   a CLI session (the hall's own pages read that feed from the browser and used to tick it for everyone).
+
+**Who is never held.** Anyone graduated, anyone who has claimed a task, and any rank above xenos — every existing
+builder goes straight in. An older server that sends no `setup` holds nobody. The rule is
+`modules/onboarding/onboarding-state.js` `setupForApi`; the hall never re-derives it.
+
+**How it is wired.** `shell.js` `holdForSetup` loads `setup-gate.js` on demand (`loadHallScript`, the
+core-move-notice way), so a set-up builder never downloads it, and while it holds, neither the daily welcome
+(`welcome-boot.js`) nor the craft picker is asked. Both `applyAccess` callers pass `setup` (`shell.js`'s own
+`/me` probe and Home's `hall-render.js`). Its styles are `.setup-gate*` in `style.css`, on the hall tokens in
+both modes; the overlay sits one above `--z-modal`.
+
+**Removed.** The `welcome-scroll` and `onboarding-scroll` Home widgets, the "Show the setup guide again" link,
+and everything that drew them: `renderWelcomeCore` / `renderOnboarding` and their helpers in `hall-render.js`;
+`renderWelcome`, `reopenWelcomeFromNav`, `pickDiscipline`, the instance-repo loader and the checklist's /me poll
+in `builders.js`; the `.welcome*` / `.onboarding-item*` styles. The clone block (this project's own repository
+from `GET /instance`, never a hardcoded one) now lives on the setup screen's machine step, with Node and
+`npm install` named before `npx bongos setup`, as the welcome panel had them. The role step says "role", the
+word ADR 0174 fixed for that axis, through `OTB.roleAxisLabel` / `OTB.roleLabel`.
+
+**Loaded once.** `applyAccess` can run several times before the script lands; `holdForSetup` asks for it once
+(`setupGateLoading`), or two screens would stack.
+
+**Tests.** `tests/setup_flow.mjs` (the claimable guard run for a CLI and a web session, the screen drawn and
+driven, the shell loading it with nothing over it, Home with no banner), `tests/onboarding_state.mjs` (the
+rule), `tests/welcome_boot.mjs` (the shell's ask order). Each was mutation-checked against its half of the change.

package/modules/lifecycle/routes/tasks.js

@@ -237,8 +237,8 @@ module.exports = function buildTasksRouter() {
     // and forget — the response should never wait on or fail because of the
     // onboarding write. safeMarkStage swallows errors and handles the
     // graduation broadcast. Through the `onboarding` kernel port (BV1.R81 / ADR
-    // 0093 §1); ?. degrades to a no-op when the module is off.
-    seams.resolveOptional('onboarding')?.safeMarkStage(pool, req.builder.id, 'first_start', req.builder);
+    // 0093 §1); ?. degrades to a no-op when the module is off. CLI only (task 1005076: the hall reads this feed too).
+    if (req.gdsSession && req.gdsSession.source === 'cli') seams.resolveOptional('onboarding')?.safeMarkStage(pool, req.builder.id, 'first_start', req.builder);
     // `claimable_total` keeps the limit honest: the length of the sliced array, never a
     // second count query (ADR 0197).
     res.json({ claimable, claimable_total: feed.length, active_claims: active });

package/modules/onboarding/onboarding-state.js

@@ -79,23 +79,6 @@ const STAGES = [
 const GRADUATED = 'graduated';
 const ALL_STAGES = [...STAGES, GRADUATED];
 
-// The pre-auth, INFORMATIONAL step that sits AHEAD of auth_complete (task 470).
-// The state machine's first ENGINE stage is auth_complete, but the genuine
-// first action a newcomer takes is "obtain the repo" — clone it locally. That
-// step is manual/external
-// (there is no server event for it) and intentionally NOT a member of STAGES, so
-// it never gates graduation, never advances current_stage, and never appears in
-// shapeForApi's tracked checklist. It exists purely so the system's own model of
-// "the path into the city" begins where the path really begins. The hall renders
-// it as a static lead-in line on the displayed checklist; the auth_complete hint
-// above also surfaces the same clone instruction.
-const PRE_AUTH_STEP = {
-  id: 'obtain_repo',
-  label: 'Obtain the repo',
-  hint: 'Clone the project to thy machine and run npm install in it. The build commands live inside the repo, so this comes first.',
-  informational: true,
-};
-
 // How many shipped tasks the terminal 'ship_three' stage requires. Kept in
 // lockstep with db.THETES_GRADUATION_THRESHOLD (#692 / ADR 0034) so the
 // checklist's graduation coincides with the xenos→thetes promotion. Used only
@@ -124,7 +107,7 @@ const STAGE_LABELS = {
 // machine you'll build from — the /builder-* commands live INSIDE the repo, so
 // nothing (not even sign-in via the CLI) can happen before it exists. The
 // onboarding model never named that step, so the hint now points at it ahead of
-// the sign-in itself. See PRE_AUTH_STEP below for the standalone representation.
+// the sign-in itself. The setup flow's cli_setup step (task 1005076) carries it too.
 const STAGE_HINTS = {
   auth_complete:    'First obtain the repo — clone it — then sign in with npx bongos setup in that folder.',
   pick_disciplines: 'Pick the work that calls thee — engineer, artist, ideator, or any mix.',
@@ -189,6 +172,42 @@ const DISPLAY_HINTS = {
   ship_three:       'Carry three tasks through with /builder-ship — the third makes thee a Thetes.',
 };
 
+// ---- the setup flow (task 1005076) -------------------------------------------
+//
+// What a newcomer must finish before the hall opens to them (owner, 2026-11-05):
+// the hall holds them on one setup screen until every step below is cleared, and
+// after that they are in for good — no banner, no reminders. Each step ticks
+// itself from a signal the server already records:
+//
+//   signed_in        — they are reading /me, so always cleared.
+//   cli_setup        — a source='cli' session exists (ran `npx bongos setup`).
+//   pick_disciplines — the engine stage choosing a role marks (PATCH /me/disciplines).
+//   first_start      — the engine stage, which GET /tasks/claimable marks only for a
+//                      CLI session: proof /builder-start ran from Claude.
+//
+// Setup is also complete for anyone already past it: graduated, claimed a task
+// (first_claim cleared), or holding any rank above xenos. Existing builders go
+// straight in and are never held.
+const SETUP_STEPS = [
+  { id: 'signed_in',        label: 'Sign in', hint: 'Done — you are signed in.' },
+  { id: 'cli_setup',        label: 'Get the project and Claude on your machine, and link it', hint: 'Three things on your own computer. This ticks itself once your machine is linked.' },
+  { id: 'pick_disciplines', label: 'Choose your role', hint: 'Pick the work you want to do — engineer, artist, ideator, or any mix.' },
+  { id: 'first_start',      label: 'Run /builder-start in Claude', hint: 'Open the project in Claude and type /builder-start. This ticks itself the first time it runs, which proves everything works.' },
+];
+
+function setupForApi(state, { cliAuthed = false, rank = null } = {}) {
+  const completed = new Set((state && state.completed_stages) || []);
+  const current = (state && state.current_stage) || STAGES[0];
+  const cleared = (stage) => current === GRADUATED || completed.has(stage)
+    || (STAGES.indexOf(current) > STAGES.indexOf(stage) && STAGES.indexOf(stage) >= 0);
+  const steps = SETUP_STEPS.map((s) => ({
+    ...s,
+    cleared: s.id === 'signed_in' ? true : s.id === 'cli_setup' ? !!cliAuthed : cleared(s.id),
+  }));
+  const pastIt = current === GRADUATED || cleared('first_claim') || (!!rank && rank !== 'xenos');
+  return { complete: pastIt || steps.every((s) => s.cleared), steps };
+}
+
 // Pick the first uncompleted stage from STAGES (canonical order), or
 // GRADUATED if all six are done. Mirrors the migration 045 backfill CASE so
 // app-layer behaviour matches DB-layer reconstruction.
@@ -441,7 +460,9 @@ function stageDetail(stageId, shipCount) {
 //                      'join_discord' step (the OAuth flow sets the link).
 // opts.cliAuthed     — whether the builder has ever authenticated the GDS CLI
 //                      (db.hasCliSession). Clears the 'cli_setup' step.
-function shapeForApi(state, { shipCount = null, discordLinked = false, cliAuthed = false } = {}) {
+// opts.rank          — the builder's rank; any rank above xenos counts as set up
+//                      (the `setup` block, task 1005076).
+function shapeForApi(state, { shipCount = null, discordLinked = false, cliAuthed = false, rank = null } = {}) {
   const completed   = new Set((state && state.completed_stages) || []);
   const currentReal = (state && state.current_stage) || STAGES[0];
   const graduated   = currentReal === GRADUATED;
@@ -487,6 +508,7 @@ function shapeForApi(state, { shipCount = null, discordLinked = false, cliAuthed
     progress: { cleared: clearedCount, total: DISPLAY_STEPS.length },
     stages: display,
     graduated,
+    setup: setupForApi(state, { cliAuthed, rank }),
   };
 }
 
@@ -494,7 +516,6 @@ module.exports = {
   STAGES,
   GRADUATED,
   ALL_STAGES,
-  PRE_AUTH_STEP,
   STAGE_HINTS,
   DISPLAY_LABELS,
   isKnownStage,

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.40",
+  "version": "1.24.42",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.40",
+      "version": "1.24.42",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.40",
+  "version": "1.24.42",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -11203,5 +11203,17 @@
       "id": "1005048",
       "text": "The Builders page is now the one list of everyone who builds here. If you hold a government seat you also see each builder's active claims, any stale claim, their standing, and the controls to change a rank or offboard someone"
     }
+  ],
+  "1.24.41": [
+    {
+      "id": "1005049",
+      "text": "Watch is now the one oversight page. Sessions and Autobongos moved off the sidebar and became two tabs on Watch, next to People, Operations and Security. Old links to /sessions and /gate open the right tab. Who can see and pre"
+    }
+  ],
+  "1.24.42": [
+    {
+      "id": "1005076",
+      "text": "New builders now get one clear setup screen they finish once, and everyone already set up no longer sees a setup banner across the top of Home."
+    }
   ]
 }

package/scripts/bongos/gen-hall-sitemap.js

@@ -62,6 +62,8 @@ const ROUTES = {
   '/ranks': { to: '/primer', why: 'now a Primer chapter, redirects (task 1005046)' },
   '/drachmae': { to: '/primer', why: 'now a Primer chapter, redirects (task 1005046)' },
   '/diagrams': { to: '/primer', why: 'now a Primer chapter, redirects; its images still serve (task 1005046)' },
+  '/sessions': { to: '/watch', why: 'now a Watch tab, redirects (task 1005049)' },
+  '/gate': { to: '/watch', why: 'Autobongos, now a Watch tab, redirects (task 1005049)' },
 };
 // Targets that leave the hall on purpose: sign-in, the hub's /account (platform-server.js;
 // settings.js points the link at the hub), the API, module assets, and any file with an extension.

package/src/bongos/routes/me.js

@@ -535,7 +535,7 @@ module.exports = function buildMeRouter() {
       // returns a stage-1 "nothing cleared" view so the client renders the
       // checklist either way. Through the `onboarding` port (BV1.R81); null when
       // the module is off.
-      onboarding: onboarding ? onboarding.shapeForApi(onboardingRow, { shipCount, discordLinked: !!discordLink, cliAuthed: !!cliAuthed }) : null,
+      onboarding: onboarding ? onboarding.shapeForApi(onboardingRow, { shipCount, discordLinked: !!discordLink, cliAuthed: !!cliAuthed, rank: req.builder.rank }) : null,
       // F7 (ADR 0033): Discord link state for the hall's Connect/Unlink UI.
       // `configured` tells the client whether the server even has Discord OAuth
       // creds — when false the hall renders nothing (the start route 503s).
@@ -714,7 +714,7 @@ module.exports = function buildMeRouter() {
         discordIsLinked(req.builder.id),
         db.hasCliSession(req.builder.id),
       ]);
-      const onboarding = onboardingPort ? onboardingPort.shapeForApi(state, { shipCount, discordLinked: !!discordLink, cliAuthed: !!cliAuthed }) : null;
+      const onboarding = onboardingPort ? onboardingPort.shapeForApi(state, { shipCount, discordLinked: !!discordLink, cliAuthed: !!cliAuthed, rank: req.builder.rank }) : null;
       res.json({ builder, onboarding });
     } catch (err) {
       if (err.code === 'invalid_discipline' || err.code === 'invalid_main_discipline') {

package/src/bongos/serve-internal.js

@@ -927,23 +927,13 @@ function mountInternalSurfaces(app) {
   // The apex hands /builders/* (ADR 0036) and /deploy (task 1004736) to the hall's own host.
   mountApexHallRedirects(app, { skip: (req) => isModuleSurfaceHost(req) || isBuildersHost(req), hostOf: (req) => siteOf(req).host });
 
-  // The /watch monitoring page and the /gate page (task 1179) both sit behind
-  // `page.view.government` — Metic and up since ADR 0157. Same server-side page
-  // gate, same posture: a builder without the permission never receives the shell
-  // (requireGovernmentPage — named requireArchonPage before ADR 0157 — redirects
-  // them to the hall, and an unauthenticated visitor into sign-in). The subdomain
-  // shim above has already rewritten the bare /watch + /gate onto /builders/*.
-  // (Defense in depth: every data endpoint these pages call carries its own
-  // server-side gate.)
+  // The /watch monitoring page sits behind `page.view.government` — Metic and up
+  // since ADR 0157: a builder without the permission never receives the shell
+  // (requireGovernmentPage redirects them to the hall, and an unauthenticated
+  // visitor into sign-in). Its Sessions and Autobongos tabs were the /sessions and
+  // /gate pages until task 1005049, behind this same gate. (Defense in depth: every
+  // data endpoint the page calls carries its own server-side gate.)
   const WATCH_PAGE_RE = /^\/builders\/watch(?:\.html)?\/?$/;
-  const GATE_PAGE_RE = /^\/builders\/gate(?:\.html)?\/?$/;
-  // /sessions (the session-log ledger) belongs to that same Governance group and
-  // its data route (`session.search`) carries the same metic floor since ADR 0157
-  // — but it had NO page gate at all: sessions.js only called showSealed() after
-  // /api/bongos/me, so the shell was served to anyone who asked for the URL. The
-  // data never leaked (the route gate held), but the page was the one item in the
-  // group without a wall. Gated here so the group is uniform (task 1002710).
-  const SESSIONS_PAGE_RE = /^\/builders\/sessions(?:\.html)?\/?$/;
   // /project-settings — the five fundamentals of the project (task 1003280, goal
   // 1000072). Government tier, beside /watch and /sessions: it is a STEERING surface,
   // and ADR 0157 put that floor at metic. Both writes behind it gate independently on
@@ -1049,14 +1039,18 @@ function mountInternalSurfaces(app) {
     return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/market-watch${qs}#settings`);
   });
 
-  // task 1005047: Fleet costs is /money's #hosting section now; 302 and no gate, as above.
-  const RETIRED_FLEET_RE = /^\/builders\/fleet(?:\.html)?\/?$/;
+  // Pages folded into a section of another page; 302 and no gate, as above. Task 1005047:
+  // Fleet costs is /money#hosting. Task 1005049: Sessions and Autobongos are Watch tabs.
+  const RETIRED_TO_SECTION = Object.freeze({ fleet: 'money#hosting', sessions: 'watch#sessions', gate: 'watch#autobongos' });
+  const RETIRED_SECTION_RE = /^\/builders\/(fleet|sessions|gate)(?:\.html)?\/?$/;
   app.use((req, res, next) => {
     if (isModuleSurfaceHost(req)) return next();
     if (req.method !== 'GET' && req.method !== 'HEAD') return next();
-    if (!RETIRED_FLEET_RE.test(path.posix.normalize(req.path))) return next();
+    const m = RETIRED_SECTION_RE.exec(path.posix.normalize(req.path));
+    if (!m) return next();
     const qs = req.url.includes('?') ? req.url.slice(req.url.indexOf('?')) : '';
-    return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/money${qs}#hosting`);
+    const [page, section] = RETIRED_TO_SECTION[m[1]].split('#');
+    return res.redirect(302, `${isBuildersHost(req) ? '' : '/builders'}/${page}${qs}#${section}`);
   });
 
   // task 1005046 (owner decision 2026-11-03, idea 1001311): ONE reading room. Ranks,
@@ -1104,8 +1098,7 @@ function mountInternalSurfaces(app) {
     if (isModuleSurfaceHost(req)) return next();
     if (!req.path.startsWith('/builders')) return next();
     const norm = path.posix.normalize(req.path);
-    if (WATCH_PAGE_RE.test(norm) || GATE_PAGE_RE.test(norm)
-      || SESSIONS_PAGE_RE.test(norm) || PROJECT_SETTINGS_PAGE_RE.test(norm)
+    if (WATCH_PAGE_RE.test(norm) || PROJECT_SETTINGS_PAGE_RE.test(norm)
       || MONEY_PAGE_RE.test(norm)) {
       return gdsAuth.requireGovernmentPage(req, res, next);
     }

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.40'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.42'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/autonomy_builder_scope.mjs

@@ -460,7 +460,8 @@ test('the owner page draws the PROJECT fence and pauses one builder; the setting
   assert.match(gate, /const fence = raw\.project \|\| raw;/, 'the switch panel must not draw the owner’s own narrowed picks as the project list');
   assert.match(gate, /\/autonomy\/runners\/all/);
   assert.match(gate, /\/autonomy\/builders\/\$\{encodeURIComponent\(id\)\}\/pause/);
-  const html = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/gate.html'), 'utf8');
+  // task 1005049: the owner panel is Watch's Autobongos tab.
+  const html = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/watch.html'), 'utf8');
   assert.match(html, /id="fence-builders"/);
 
   const panel = fs.readFileSync(path.join(ROOT, 'modules/hall-ui/public/settings-autobongos.js'), 'utf8');

package/tests/hall_audit.mjs

@@ -233,7 +233,7 @@ test('the session log pages on the kit — the last hand-roll is gone', () => {
     assert.match(js, new RegExp(`kit\\.${fn}\\(`), `sessions.js must page through the kit's ${fn}`);
   }
   assert.doesNotMatch(js, /const PAGE_SIZE\b/, 'its fixed page size is gone — per-page is the kit\'s now');
-  assert.match(read('sessions.html'), /hall-kit\.js/, 'and the page has to load the kit');
+  assert.match(read('watch.html'), /hall-kit\.js/, 'and Watch, whose Sessions tab it is (task 1005049), has to load the kit');
 });
 
 // ---- 6b. every hall bar series is drawn by the kit (task 1003445) ---------

package/tests/hall_board_world.mjs

@@ -350,7 +350,7 @@ function bootHallRender({ me, progress = null, leaderboard = [], ctxExtra = {} }
     curLabel: (caps) => (caps ? 'Credits' : 'credits'), emptyRow: () => '', fmtDate: (d) => String(d).slice(0, 10),
     mins: (m) => `${m}m`, normalizeRank: (r) => String(r || '').toLowerCase(), pct: (n) => `${n}%`, postJSON: async () => ({}),
     rankLabel: (r) => r, rankWeight: () => 0, signClasses: () => '', toast() {}, usd: (n) => `$${n}`,
-    instanceRepo: null, newcomerGated: false,
+    newcomerGated: false,
     get lastMeState() { return me; }, get lastCostState() { return me.cost || null; }, get lastKarmaState() { return me.karma || null; },
     get lastNeedsState() { return me.needs || null; }, get lastRebaseState() { return me.needs_rebase_tasks || null; },
     get lastProgressState() { return progress; },