Files
Dune/docs/LEADER_SKILLS_RUNTIME.md
T
Quintine 9f1f783be4 Prototype private Mentat questions behind explicit preview opt-in
Connect the optional named-weapon question before skill posture and faction powers. Every accepted question waits for the same target-owned private card-show action, preserving held/absent privacy; matching cards are compulsory, otherwise the owner selects a fallback. Keep cards in hand and retain historical observations only for the questioner and target, without binding later plans. Support actual controls, inspectors, all four AI profiles and saved JSON/SQLite continuation.

Normal activation remains disabled pending the user's uniform-response UX exception. The private flag is neither projected nor writable through actions. Legacy battles remain unchanged. Empty hands skip with an explicit unavailable receipt and no invented answer. Source and unresolved boundaries are documented, with a compact current-status dashboard preserving all goal, Git, subagent, usage and saved-game requirements.

Independent review passed privacy, custody, sequencing and preview gating. Twenty-two focused tests cover canonical card roles, exact-match/fallback symmetry, target-only controls, captured lower-only behavior, stale/duplicate requests and concurrent SQLite writes. Typecheck, lint, 4605 offline tests, production build and 43 HTTP tests passed with stable source. The first broad run retained one outdated Mentat card-copy assertion; update it to verify private disclosure, custody, optional question and subsequent concealment. Gameplay source was unchanged by that test-only correction.

Two genuine-setup sample games deliberately deal Mentat via a controlled initial skill shuffle. Basic: 100 actions, 3 JSON restores, turn-one Harkonnen win. Advanced: 507 actions, 14 restores, turn-five Harkonnen win. Each has one private observation, subsequent Atreides Prescience and no rejected candidate. These bounded force/skill custody samples do not establish general card-custody coverage, calibration or full module acceptance.

After the reported outage all 665 opening rooms and original seat/recovery/receipt records were preserved (699 after integration). A fresh 666-room backup preceded checks; database integrity and foreign keys pass. The existing localhost server was reused; its live lock prevented a duplicate start. Existing Ecaz and Ixian browser seats restored their same hands and pending choices. A separate conserved staged Mentat preview restored its private history and posture, then legally concealed its leader before subsequent faction powers. Human/browser paths are distinguished from genuine-setup simulations. No database reset, recurring automation, public activation or publication.

Verified source tree: 297ae06e0764d7cad525a802fe383a84971c3e9c5d6362c8cd0b79c5c3977caf
Final source tree: 177c98415098ea42174a860d8b1fac4f7c7dd6c3e67c93b18330d1d0fc4edf0e
The only post-verification edit removed one surplus newline at the end of the new developer document; its exact before/after content and fingerprints are retained privately. Staged diff checking caught this whitespace issue before commit. No application or test code changed.
2026-09-13 23:55:45 +10:00

166 lines
9.8 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Leader Skills first functional prototype
13 September 2026. This is **Prototyped**, with **Partial** rules coverage.
Normal mode starts and publication remain gated. The [source contract](LEADER_SKILLS_RULES.md)
contains all fourteen physical cards; the [capture interpretation](LEADER_SKILLS_CAPTURE.md)
records the fresh publisher/designer search requested by the user.
## Connected boundary
Genuine Basic or Advanced setup supports two through six base factions. Starting
Treachery Cards, including Harkonnen's extra card, precede simultaneous private
two-card skill offers. Every faction selects one physical skill and an eligible
own leader, returns the other card to the shuffled deck, and publicly assigns
the selected card before traitor choices. No reduced or duplicate skill deck is
substituted. The [No-Field follow-up](SMUGGLER_NO_FIELD.md) adds genuine CHOAM &
Richese setup for its bounded combination; remaining expansion/skill acceptance
and other optional modules remain separate work.
Human controls show each permitted card's normal and battle text, select its
leader, choose battle posture, and handle an optional own-leader revival draw.
An undrawn revival offer shows no preview; drawing obliges a selection. All four
AI profiles follow the same private offers and legal actions, prioritizing the
five battle disciplines during skill selection and hiding the assigned leader for battle. This
simple policy is not calibrated skill strategy.
Warmaster, Master of Assassins, Swordmaster of Ginaz, Killer Medic and
Prana-Bindu Adept apply +1 to another selected leader from a face-up native
trainer, or +3 to the surviving assigned leader. They use the physical card's
actual weapon or defense role, including a legally supplied Portable Snooper.
They do not grant +4 or change printed strength, leader bounty or Zoal's source
value. Existing traitor, explosion and Stone Burner precedence is preserved.
Cheap Hero receives the normal +1 through ordinary leader substitution; this
is a general-rule inference, without a separately located explicit skill FAQ.
A face-up assigned disc cannot enter a plan. Concealing it while selecting
another leader gives no skill bonus. Later Voice or card use can remove the
last alternative: the mandatory remaining skilled disc then moves behind the
shield automatically, without replaying battle powers. A surviving assignment
returns face up after battle. Death returns its physical card exactly once.
An own Ghola revival during unfinished battle preparation retains that stage
through the new private draw and public posture choice.
Harkonnen capture keeps the card attached to its original leader and publicly
shows the current captor. Only the captive's lower battle effect can apply;
neither faction receives its normal effect while captured. A surviving used
captive returns with the same card. Execution returns the card to the deck;
that unique formerly public card makes this skilled leader's identity inferable.
Other captures retain the existing privacy behavior. This narrow publicity
interpretation follows the physical component procedure, not an express
publisher instruction to announce a name.
## Missing and guarded work
[Battle-effects follow-up](LEADER_BATTLE_EFFECTS.md) connects both Rihani bands
and the lower Mentat, Bureaucrat and Sandmaster effects. A separate
[Mentat question preview](MENTAT_QUESTION.md) connects private naming/disclosure,
posture and saved history under an explicit private opt-in. The uniform mandatory
response step awaits the user's UX decision; ordinary activation remains disabled.
Bureaucrat payment redirection and Spice Banker income remain missing. [Banker battle spending](SPICE_BANKER_RUNTIME.md)
now connects its lower band with separate sealed funds and survivor strength. [Smuggler shipping](SMUGGLER_SHIPMENT.md)
connects its optional normal reserve bonus and the [owned No-Field companion](SMUGGLER_NO_FIELD.md).
[Diplomat defense](DIPLOMAT_DEFENSE.md) connects its normal band for a physical
Worthless card copying a canonical base Shield or Snooper; the lower retreat
and modified-defense inheritance remain guarded. Smuggler battle collection
also remains missing.
Planetologist and Suk Graduate have the connected
prototypes described below.
Captured-card replacement entitlement remains unresolved. The prototype rejects
own-leader revival while its original skill is captured, before beginning a
paid revival or consuming the Ghola/special-Karama action. This is an explicit
unsupported boundary, not a ruling that the physical game forbids that revival.
Foreign gholas, expansion rosters and combined optional modules remain gated.
Before enabling them, add response-driven automatic revival continuation
coverage; the current before/after revival observer does not certify deferred
Tleilaxu response chains. The other source-contract timing questions also remain
open. Planetologist now has bounded movement and battle controls as described below.
Remaining normal-band payments, ordinary Mentat activation, Smuggler battle collection,
Diplomat retreat and the other guarded skill combinations still need connected
effects.
## Planetologist follow-up
[Planetologist](PLANETOLOGIST_RULES.md) connects the explicit capped range bonus,
two-origin movement to one destination, Fremen cancellation/replacement and a
surviving skilled leader's +2 green-Special substitution with mandatory discard.
The movement panel and weapon selector expose those choices; all four AI profiles
can use the same physical action paths. Pending movement receipts survive JSON
continuation and revalidate source custody before a response is spent.
Six base factions remain the supported roster. Mixed BG origins are supported
where ordinary rules determine the destination stance. Enemy-only mixed arrival
still needs a combined flip response. Expansion faction/card/module combinations
and full integrated acceptance remain unfinished. The remaining bands and skill families are
listed above; this is partial prototype coverage.
## Suk Graduate follow-up
[Suk Graduate](SUK_GRADUATE_RULES.md) connects the mandatory one-counter
normal rescue and the surviving selected leader’s optional rescue of up to three
physical casualties. Normal and elite identity, original sector, paid support,
private hands and captured-leader return survive the saved continuation. Human
controls and all four AI profiles use the same server-projected legal choices.
Advanced Atreides awaits the loss-count ruling; expansion factions and combined
optional modules remain guarded.
## Local prototype entry and evidence
Create a new base-faction local lobby, select its seats and mark them ready.
Keep its browser cookie. Use the existing backup and atomic version-check tool:
```sh
node --import tsx tools/start-prototype.ts --profile leader-skills \
--db PATH_TO_LOCAL_D1_SQLITE --room EIGHT_CHARACTER_CODE \
--version CURRENT_LOBBY_VERSION --out /private/new-prototype-checkpoint
```
Only that fresh named lobby is initialized; every other room and all seats stay
intact. Refresh to continue through ordinary authenticated actions. No HTTP
endpoint dispatches the initializer; do not restart or reset the database.
Focused tests cover physical inventory, setup ordering, private views, all five
bonuses, Voice legality, capture and return, death, revival and JSON restoration.
SQLite tests use production room actions across restarted stores and concurrent
selection: one choice commits, the selected card has one owner, the rejected
card returns once, and private offers remain owner-only. The local prototype
writer is separately checked for stale/redeal rejection and preserved seats.
Two seeded four-player simulations (20260913 Basic; 20260914 Advanced) completed
through genuine setup in 265 and 211 accepted actions with no rejected bot
candidates. They used Easy, Medium, Hard and Brutal, checked physical skills and
forces, and restored JSON views at fourteen sampled boundaries in total.
These were first-batch runs before the later capture and Voice review fixes;
their private report fingerprints the exact files exercised. They do not prove
all fourteen effects, Harkonnen capture or every interaction was played.
A later Advanced run including Harkonnen (seed 20260915) completed in 360
accepted actions, four turns and ten sampled JSON restores, with no rejected
bot candidates. It exercised the current controller/Voice integration. Exact
captured-card outcomes are proved by the focused capture scenarios, rather
than inferred from this sample game's completion.
Browser room `REF6YHN7` was created normally with a human Atreides and Medium
Harkonnen, then initialized through the backed-up local tool. The human inspected
both effect bands, assigned Master of Assassins to Thufir Hawat, selected a
private traitor and reached Storm. Refresh retained that assignment, the AI's
Swordmaster on Feyd-Rautha, the same Snooper hand and the pending Storm dial.
Visual inspection caught two squeezed columns in the table sidebar; single-column
cards restore readable text. This was a focused desktop setup/recovery journey,
not a complete human game or mobile acceptance.
The second reported power outage stopped the development server. All 292 rooms
were present with a clean SQLite integrity/foreign-key check; the 291 opening
rooms matched their hashes. A new online backup preceded the necessary server
start. The same browser seat then restored both skills, Snooper, private Thufir
traitor, ten spice and its pending Storm decision. No database reset or old
game restoration was performed.
Checkpoint-wide check/build/HTTP results and the final source fingerprint are
recorded in the commit and private verification report. Full module and combined
game acceptance remain unfinished.
The [Sandmaster ground-movement follow-up](SANDMASTER_MOVEMENT.md) adds explicit
routes, optional collection, human/AI controls and saved cancellation. Special
relocation and combined modules remain unfinished.