admin/Dune

0 Fork 0

Files

T

Quintine b21b2bc378 Add one-use consent for a named player to start seat AI

Let a human owner authorize another human in the started room to start a fixed difficulty once within 24 hours. The owner retains the seat, cookie, private hand, recovery setup and takeback control. Consent is explicit even while online; neither host status nor inactivity authorizes a takeover. Activation enters the existing paced private-view AI path without strategic changes.

Add additive migration 0006, both exact session fences, owner/delegate-only metadata in the authenticated room snapshot, atomic CAS activation and consumption, expiry and terminal retry receipts. Replacement hides older consent; own AI changes invalidate unused consent. Recovery or handover of either bound seat invalidates the grant. Future-version guards prevent stale computed state from overwriting a racing action. Exact browser retry records retain the original operation/version across refresh and cannot rearm old consent. Shared HTTP continuation preserves coalescing across ordinary and control routes.

Independent review found no material remaining issue. Revoke messaging accurately handles activation winning the race. Browser QA exercised grant/revoke, preserved consent after refresh, reciprocal fixed-profile activation, consumed receipts, keyboard takeback and private ownership. The panel now remains expanded after success and action buttons are at least 44px. Responsive screenshot acceptance remains open because the browser viewport override targeted a failed secondary-origin tab; desktop controls and no-overflow width were verified. The QA room is stopped at a genuine human setup decision with both seats taken back.

Types, lint, all 4906 offline tests, production build and all 45 HTTP tests pass on the stable source fingerprint. Seven new offline cases cover client consent/retry validation and real SQLite privacy, restart, one-use races, future versions, takeback, expiry and both-seat recovery/handover; two new HTTP cases cover authentication, injection, fixed-profile continuation and takeback. The first broad run exposed 68 legacy VM fixtures missing the new production dependency; their mappings were updated and the real shared continuation remains exercised. The historical 0005 migration test verifies backfill before applying 0006 for current code.

All 1174 original rooms, 2456 seats and every prior recovery/entry/handover/migration row remain unchanged. SQLite integrity and foreign keys pass; migration and QA added 88 rooms and 188 seats. No reset, server restart, usage check or automation was performed.

The current Sites integration has no supported durable Cron/DO provisioning path. Document this platform blocker rather than adding an inert scheduled export; unattended resumption and broader network-failure acceptance remain unfinished. Full rules, component, AI strength and publication gates remain closed.

Verified source tree: 2d86fc611e9ef4f5a10db10f96687a31db1ec238908ecf1e9333c50fac9ccaa8

2026-09-20 16:30:37 +10:00

11 KiB

Raw Blame History

Current development status

Updated 20 September 2026. The full twelve-faction goal is unfinished. Basic is playable; public Advanced and unfinished expansion/module starts remain gated. Prototypes do not open completion or publication gates.

Current checkpoint and work

Latest delivered checkpoint: e13ad45, movement and Traitor practice. Types, lint, 4,899 offline tests and production build passed. Seven lessons and five exercises connect shared rules and migrated browser-local saves. All 1,174 baseline rooms and 2,456 seats stayed unchanged; no restart was needed. The preceding 54c8030 connects Sandmaster worm rides. The 8f7a62c policy checkpoint removed the usage cutoff and deferred AI refinement until feature completion, with three adjacent 75% win-rate targets. Earlier evidence remains in the implementation history.

Current work: one-use AI permission connects optional named-player activation at the owner's chosen difficulty, retained ownership, both session fences and saved exact retries. Final independent review, verification and delivery belong to the source-bound private report and Git message. Broader disconnected-seat acceptance remains unfinished.

A bounded remaining-effect audit found that the reviewed faction/Nexus candidates still cross recorded pending rulings. Continue independent features rather than inventing answers. The platform audit found no supported Sites scheduler or Durable Object provisioning contract. Durable unattended bot resumption remains blocked on that capability; current request/reconnect continuation does not establish it. Continue independent player-facing features and integration while preserving pending rules questions.

The connected Harass & Withdraw prototype supports either battle-card slot, private category inspections, exact undialed normal/elite returns, opponent-Traitor cancellation, mandatory disposal, controls and all four AI profiles. New battles also have revealed physical allocation for ordinary/elite mixtures and multi-sector returns. Richese card combinations and additional optional modules stay gated. Withdrawal before explosion and card-specific discard precedence are explicitly labeled inferences. The Stone Burner timing question is pending; no user answer is assumed. Reinforcements remains unfinished. This does not open variant, mode or publication gates.

The preceding early Sapho aggressor connects the printed battle-priority effect during the existing shared pre-plan opportunity. Physical attacker/defender/chooser stay stable; Habbanya takes precedence in either slot. Shared priority feeds Stone admission, ordinary/Stone resolution, public controls and all four AI profiles. Battle-bound history survives private saved continuation. Later intervention remains unfinished; no new ruling is assumed. Final checks, samples, browser evidence and delivery belong to the source-bound private report and Git message.

The Mirror admission review found that every genuine Richese setup contains the unresolved copied weapons. Ordinary-only activation cannot safely depend on hidden custody or alter the printed deck. Mirror remains gated pending the existing disposal ruling and copied-choice work. Continue with independent missing faction/card functions, then integrated play and refinement.

The Smuggler follow-up review supports a saved reveal-time receipt with settlement only on leader survival, but located no official ruling on modified leader strength. The user has been asked about Kwisatz/trainer/Stunner composition; no answer is assumed. See the source follow-up.

Rules checklist, topic implementation-checklist and each feature's entries: track implementation, controls, AI, documentation and verification, plus Missing, Prototyped, Integrated, Verified and Polished stages.
Rule decision index: settled contracts, source precedence and pending material interpretations. Consult it before reopening research.
Development guide and verification tools: architecture, focused checks, source-bound reports, reusable faction samples, private backup and saved-seat restoration.
Implementation history: newest first. Historical evidence and outage records stay there and in feature documents; read bounded relevant sections and verify old absence claims against current code/tests.
Efficiency pilot: the first three milestones are pushed; measurement limits remain explicit. Reuse tools and checks, without promising an unmeasured savings percentage.

Connected development capabilities

These links define bounded working behavior, not complete module certification.

Area	Current connected work and evidence
Base/Advanced setup	Genuine setup, Advanced study, Fremen cancellation, Atreides full-plan audit. Earlier Basic-then-flip fixtures do not establish current setup coverage.
Expansion factions	Ixians/Tleilaxu and all seven faction selections: genuine setup, Ecaz six-force placement, separate optional card variants, private controls and saved per-lot Ixian/Richese decline. Actual special-lot exchange remains pending.
Leader Skills	Common lifecycle, known skilled capture, Mentat question preview, Bureaucrat payments, five battle disciplines, Planetologist, Suk Graduate, Rihani and other battle effects, Smuggler shipment, No-Field and battle collection, Sandmaster routes and worm rides, Banker spending, Diplomat defense. Remaining bands and combinations are explicit in those contracts.
Discoveries	Prototype: genuine setup, Great Maker, seven cards/eight tokens, inspection and stash rewards, nested sites, signed later free entry, carried Ornithopter, sole Cistern, bounded Jacurutu income, Testing Station and Shrine. Orgiz and contested/mixed cases remain pending.
Nexus/Homeworlds	Decision index links each integrated faction family, native/borrowed effects, physical custody, private choices, payments and transport. CHOAM Collection trade and Emperor extra revival are connected; CHOAM inspection and Emperor purchase remain pending. A source audit or helper alone is not a completed effect.
Truthtrance	Spice facts, card counts, hand inventory, recorded knowledge, and Basic/no-Guild Advanced reserve-shipment promises use authoritative private state. Earlier readiness audits do not supersede these follow-ups.
Other cards	Sapho runtime includes first among remaining unstarted movement turns after Advanced Guild has finished. Recruits connects clean Revival play; Harass & Withdraw connects the bounded battle return in the same independent three-card preview. Richese card contracts and the checklist identify other connected effects and explicit gaps.
Multiplayer	Saved rooms/seats, recovery, uncertain-request retry, own-seat AI, named-player AI permission and voluntary seat handover have connected controls and recovery evidence.

Remaining readiness

Area	Remaining gate
Basic core	Ordinary Guild repricing/transport settlement, broader truthful commitments, unresolved special timing and integrated rules/human/AI acceptance.
Six-faction Advanced	Base gaps, provisional special-Karama outcomes, remaining timing audits and authentic multiplayer/browser acceptance. Setup matrices and complete samples do not open public starts.
Twelve factions and all optional modules	Every missing effect, remaining skill bands, Ecaz card variant, Kull Wahad, unfinished Richese cards, Terror effects, occupation entitlement, Nexus interactions, contested Discoveries and complete games across valid combinations. Detailed boundaries remain in the checklist/decision index.
AI	Maintain minimal legal participation and critical correctness fixes while game features are unfinished. Full implementation, strategy refinement and calibration wait until all non-AI features are complete; then target approximately 75% higher-tier wins for Medium/Easy, Hard/Medium and Brutal/Hard. See the AI development plan. These targets remain unverified.
Multiplayer	Broader disconnected/abandoned-seat recovery, unattended continuation and network-failure acceptance, while preserving authoritative versioning, custody, privacy and saves.
Components and experience	Full component inventory/text verification, all readable inspectors, original artwork, animation/sound/accessibility/mobile polish, complete internal guidance and end-to-end human play.

AI calibration, multiplayer audit, component inventory and visual playtest record their measured scope. README retains publication gates.

Working sequence and preservation

Prototype every remaining function in dependency order, using existing controls, legal AI and the saved-state model. Continue independent functions while material rulings are pending. Then run integrated games, repair failures, deepen combination and recovery coverage, and complete all non-AI features. Only then fully implement and refine AI strategy and calibrate the adjacent difficulty pairs. Keep focused checks for crashes, deadlocks, legality, custody and privacy; complete required broad checkpoint checks. Use selective subagents and independent review for complex rules/privacy/persistence. Commit and push verified checkpoints under “Push all from now on”, verify push success. The user removed the usage cutoff and routine account-usage checks; efficient work, Git delivery and selective subagents remain required.

The user-authorized 13 September reset happened once; preserve all games created since it. Keep .wrangler/state, credentials and private backup artifacts out of Git. Reuse a healthy server; restart only for a relevant change or observed problem, with a fresh backup, safe human-play boundary and verified restoration. No hourly restart or recurring maintenance automation is installed; do not recreate one.

11 KiB Raw Blame History