Offer Semuta after clean completed Ornithopter flight

docs/CURRENT_STATUS.md

@@ -8,21 +8,22 @@ Expansion starts and full rules/publication acceptance remain gated.**
 
 The explicit [Semuta development preview](SEMUTA_SOURCE_UPDATE_20260907.md#30-september-2026--bounded-clean-discard-runtime)
 pauses a clean public ordinary-card discard, used Box after paid search,
-early-ended Ornithopter, public used Distrans after private transfer,
-final definite Truthtrance or movement-order Juice of Sapho after
-its queue reorder. Every seat sees the same neutral offer independently
-of hidden Semuta possession. The private gift stays with its recipient,
-Truthtrance history stays fixed, and Sapho's first/last queue resumes
-once after claim or decline. A holder with a free hand slot can recover
-the fresh other-player discard and dispose Semuta. All-seat decline,
-minimal legal AI, exact JSON/SQLite continuation and competing-room
-CAS are connected. Phone width showed the owned Commit and rival
-Continue event without a private card face. Auction/battle Sapho,
-promise-bound and queued Truthtrance, completed-flight arrival,
-competing transactions, multi-card and most other producers,
-full-hand ordering, normal Richese starts and deployed acceptance
-remain unfinished. Neutral passes and the free-slot guard are
-product safety choices, not publisher rulings.
+either clean Ornithopter retirement, public used Distrans after private
+transfer, final definite Truthtrance or movement-order Juice of Sapho.
+Every seat sees the same neutral offer independently of hidden Semuta
+possession. An early-ended flight advances the queue; a completed
+flight with no BG/Ecaz/Moritani entry reaction resumes its one
+committed arrival after claim or decline. Private gifts, Truthtrance
+history and Sapho's first/last queue remain intact. A holder with a
+free hand slot can recover the fresh other-player discard and dispose
+Semuta. Minimal legal AI, exact JSON/SQLite continuation and
+competing-room CAS are connected. Phone width showed owned Commit
+and rival Continue without a private card face. BG/Ecaz/Moritani
+arrival compositions, auction/battle Sapho, queued or promise-bound
+Truthtrance, competing transactions, multi-card and most other
+producers, full-hand ordering, normal Richese starts and deployed
+acceptance remain unfinished. Neutral passes and the free-slot guard
+are product safety choices, not publisher rulings.
 
 One [natural Advanced Moritani assassination](MORITANI_ASSASSINATE_LEADERS.md#29-september-2026--natural-revealed-card-game)
 now proceeds from genuine battle loss to a dead-target Traitor reveal,

docs/IMPLEMENTATION_STATUS.md

@@ -1,5 +1,35 @@
 # Dune implementation status
 
+## 30 September 2026 — Semuta after a clean completed Ornithopter flight
+
+The explicit Richese Semuta preview now pauses a completed range-three
+or second-group Ornithopter as its one public used card leaves escrow.
+The pilot's exact forces have already arrived and its move counter
+has advanced; the neutral all-seat event precedes the saved arrival
+log and territory-entry suffix. A legal holder can claim only that
+retired card and discard Semuta. All-seat decline leaves the card
+on the pile. Either choice resumes the one arrival without placing
+another force or consuming another move.
+
+The bounded roster excludes Bene Gesserit intrusion and Ecaz/Moritani
+entry reactions, alongside other competing parent transactions.
+Genuine setup covers a final flight, exact card/force census, JSON
+restoration, owner-only legal AI claim, all-seat decline and stale
+action rejection. An isolated migrated SQLite room restores the
+paused arrival without automatic advancement, commits an authenticated
+claim and preserves seat rows. The excluded arrival compositions,
+multi-card batches, full-hand sequencing, normal Richese starts and
+deployed acceptance remain open.
+
+Independent rule/continuation and privacy/recovery reviews found no
+scoped defect. A throwaway production-engine run completed genuine AI
+setup, a final flight, neutral offer and bot claim; one moved force
+remained at its destination, one move was consumed and the active
+pilot retained control after arrival. Phone-width rules rendered the
+clean arrival boundary as Partial. `npm run check` passed typecheck,
+lint and 5,808/5,808 offline cases; `npm run build` and all 55 Vite
+development HTTP cases passed. No deployed revision was exercised.
+
 ## 30 September 2026 — Semuta after clean movement-order Sapho
 
 The explicit Richese Semuta preview now pauses after Juice of Sapho

docs/RICHESE_COMPONENTS.md

@@ -12,7 +12,7 @@ Audited 6 September 2026. The ten physical identities and their readable face in
 
 - Player controls show both original plans, exact undialed counts or honest possible totals, the mode choice and a complete internal guide. No victim/death confirmation is added. The card stays physically reserved until standard cleanup; stale events, duplicate requests and corrupted source custody fail before resources change. All four AI profiles use public force possibilities, legal low-dial plans and revealed leader/bounty information. They preserve leader value when Artillery suppresses bounty and leave traitor/explosion precedence intact.
 
-- Semuta Drug now has an explicit bounded development preview for clean public ordinary-card, paid Box, early-ended Ornithopter, completed private Distrans, final definite Truthtrance and movement-order Sapho discards; private gifts, unresolved promises and auction/battle Sapho are not fresh targets. Other producers, full-hand ordering and normal Richese starts remain unfinished. Mirror Weapon and Juice of Sapho have separate bounded paths, not complete combined-mode certification. Other unfinished faction/module systems, mobile acceptance, difficulty-strength calibration and complete Advanced/expansion games still prevent goal completion. No start gate was removed.
+- Semuta Drug now has an explicit bounded development preview for clean public ordinary-card, paid Box, either clean Ornithopter retirement, completed private Distrans, final definite Truthtrance and movement-order Sapho discards; private gifts, unresolved promises, BG/Ecaz/Moritani arrival reactions and auction/battle Sapho are not fresh targets. Other producers, full-hand ordering and normal Richese starts remain unfinished. Mirror Weapon and Juice of Sapho have separate bounded paths, not complete combined-mode certification. Other unfinished faction/module systems, mobile acceptance, difficulty-strength calibration and complete Advanced/expansion games still prevent goal completion. No start gate was removed.
 
 The complete integrated validation checkpoint is recorded in [IMPLEMENTATION_STATUS.md](IMPLEMENTATION_STATUS.md).
 
@@ -113,9 +113,10 @@ explicitly opted-in Richese development profile. Neutral all-seat
 responses, physical one-card recovery, a provisional free-slot guard,
 minimal legal AI and saved continuation now work after clean public
 ordinary-card discards, the used Box after a paid search, early-ended
-Ornithopter, clean private Distrans, final definite Truthtrance and
-movement-order Sapho after its first/last queue is committed. Queued
-questions, promise-bound answers, auction/battle Sapho and other
-semantic discard families remain unconnected; full-hand ordering,
-ten-card inventory, cache custody and public expansion start gate
-are unchanged.
+Ornithopter or completed flight with no BG/Ecaz/Moritani entry reaction,
+clean private Distrans, final definite Truthtrance and movement-order
+Sapho after its first/last queue is committed. Queued questions,
+promise-bound answers, reactive completed arrivals, auction/battle
+Sapho and other semantic discard families remain unconnected; full-hand
+ordering, ten-card inventory, cache custody and public expansion start
+gate are unchanged.

docs/SEMUTA_DISCARD_CONTINUATIONS.md

@@ -28,6 +28,13 @@ the queue, prior active seat and protected-last receipt bind saved
 continuation. Once Around and Battle Sapho remain outside this
 Semuta preview.
 
+Completed Ornithopter movement now offers the same retired public card
+before its already committed arrival suffix only in a roster without
+Bene Gesserit intrusion, Ecaz Ambassador or Moritani Terror response
+sources. The final forces and move counter are held in the existing
+bound flight frame; claim or decline retires that frame and logs the
+arrival once. Mixed entry reactions remain unsupported for Semuta.
+
 ## Main findings
 
 A post-`applyAction` pile diff cannot implement immediate Semuta. Ix Ambassador and Ixian ally replacement discard then draw directly. Ordinary Karama cancellation/purchase can reach replacement, Harkonnen bonus or a new auction pool indirectly. A stopped frame must resume at a named stage, never rerun its original public action.

docs/SEMUTA_SOURCE_UPDATE_20260907.md

@@ -63,19 +63,19 @@ Do not ask again about normal targets, forced-discard owner bookkeeping, simulta
 
 The explicit `semuta` development profile starts a fresh Richese roster
 without opening ordinary expansion starts. It interrupts **one public
-ordinary-card discard, the used Box after a paid Nullentropy search, an
-Ornithopter retired by ending movement early, the used Distrans after
-a clean private transfer, a final definite Truthtrance after its answer
-is bound, or movement-order Juice of Sapho after its queue is committed**,
-provided the parent transaction is clean. Every seat sees a neutral
-fresh-discard opportunity regardless of hidden Semuta possession. The
-flight's committed movement and escrow remain intact; a claim or
-all-seat decline advances its saved queue once. Distrans's transferred
-card stays privately with its recipient and cannot be claimed; only
-the played public Distrans enters the fresh batch. Truthtrance's
-public answer and history are already committed before the offer.
-Sapho's first/last queue and protected Guild-last choice stay committed;
-only the turn-activation suffix waits for the reaction.
+ordinary-card discard, the used Box after a paid Nullentropy search,
+either retirement of a played Ornithopter in a clean flight, the used
+Distrans after a private transfer, a final definite Truthtrance after
+its answer is bound, or movement-order Juice of Sapho after its queue
+is committed**, provided the parent transaction is clean. Every seat
+sees a neutral fresh-discard opportunity regardless of hidden Semuta
+possession. An early-ended Ornithopter advances its saved movement
+queue; a completed flight has already committed its forces and
+resumes its one arrival afterward only in a roster without BG
+intrusion, Ecaz Ambassador or Moritani Terror entry reactions.
+Distrans's transferred card stays private with its recipient and is
+not a fresh target. Truthtrance's public answer/history and Sapho's
+first/last queue and protected Guild-last choice are already committed.
 
 Each seat can Continue; only the canonical holder with a free hand
 slot and a card discarded by another player can commit. The sole
@@ -91,13 +91,13 @@ This neutral all-seat acknowledgement is a conservative **application
 policy**, not a newly discovered publisher timing rule. The explicit
 free-slot requirement is a provisional safety guard, not the printed
 resolution of full-hand take-before-discard. Auction, CHOAM market,
-pending gifts, competing responses, completed Ornithopter flights with
-arrival follow-up, queued or promise-bound Truthtrance, auction/battle
-Sapho and other typed discard producers retain their existing
-automatic continuation; Semuta cannot claim those events yet. The
-completed Box's selected search card stays private and its paid shuffle
-is not repeated when another seat takes the used Box. No source ruling
-is inferred from this omission. The
+pending gifts, competing responses, completed Ornithopter arrivals
+with BG intrusion, Ecaz Ambassador or Moritani Terror, queued or
+promise-bound Truthtrance, auction/battle Sapho and other typed
+discard producers retain their automatic continuation; Semuta cannot
+claim those events yet. The completed Box's selected search card
+stays private and its paid shuffle is not repeated when another seat
+takes the used Box. No source ruling is inferred from this omission. The
 separate [reaction privacy audit](SEMUTA_PRIVACY_REVIEW.md) explains why
 auto-closing only when nobody secretly holds the card would leak
 possession. The main game and public expansion gates remain closed.