@maka/maka-cli 5.179.0 → 5.181.0

package/bundle/typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/maka-cli",
-  "version": "5.179.0",
+  "version": "5.181.0",
   "type": "module",
   "summary": "A command line tool for scaffolding Meteor 3.x applications using either React.",
   "description": "A command line tool for scaffolding Meteor 3.x applications using React.",

package/bundle/typescript/src/commands/game/sideQuest/commands/unlock.js

@@ -1,6 +1,7 @@
 import { Door } from '../models/door.js';
 import { Command } from './command.js';
 import { ensureAtExit, lockedRouteHint } from '../utilities/spots.js';
+import { applyDeviceOpened } from '../utilities/devices.js';
 export class UnlockCommand extends Command {
     static verb = 'unlock';
     static description = 'Unlock a door.';
@@ -51,6 +52,34 @@ export class UnlockCommand extends Command {
         if (reach.refusal)
             return reach.refusal;
         const crossNote = reach.line ? `${reach.line}\n` : '';
+        // A DOOR HELD BY A DEVICE IN THIS ROOM (8XDR2BCZoSmpqdkXG). The
+        // Door itself knows no key -- scene-factory seals it through the
+        // device (heldByDevice), and the KEY lives on the device as its
+        // keyItem. This verb only ever read the Door, so on a keyed maglock
+        // it answered "you don't have the key" to the player holding it --
+        // while the device's own wrong-verb line promised exactly this:
+        // "The right key opens it clean: 'unlock' with Corvid's Fob in
+        // hand." Same offer `use` makes, so the same code path and the same
+        // aftermath (applyDeviceOpened), never a second copy of "what opens
+        // this".
+        const holder = room.deviceOpening(direction);
+        if (holder) {
+            if (holder.keyItem && this.actor.inventory.hasItem(holder.keyItem.name)) {
+                const result = holder.offer('', this.actor.inventory);
+                this.logger.write(`UnlockCommand: ${this.actor.name} turned ${holder.keyItem.name} in ${holder.name}: ${result.success}`);
+                this.actor.performAction('unlocked', result.message);
+                if (!result.success)
+                    return crossNote + result.message;
+                const lines = applyDeviceOpened(this.scene, this.actor, room, holder, 'unlock');
+                return crossNote + [result.message, ...lines].join('\n');
+            }
+            const ways = holder.verbs().map(v => `"${v} ${holder.name}"`).join(' or ');
+            const takes = holder.keyItem
+                ? `It takes ${holder.keyItem.name}, which you don't have.`
+                : `No key you could carry fits it.`;
+            this.logger.write(`UnlockCommand: ${this.actor.name} has no key for ${holder.name} on "${target}".`);
+            return crossNote + `${holder.name} holds it. ${takes} Or force it: ${ways}.`;
+        }
         const requiredKeyOrSolution = door.unlockItemOrSolution?.toLowerCase();
         if (requiredKeyOrSolution && this.actor.inventory.hasItem(requiredKeyOrSolution)) {
             const key = this.actor.inventory.getItem(requiredKeyOrSolution);

package/bundle/typescript/src/commands/game/sideQuest/commands/use.js

@@ -147,6 +147,20 @@ export class UseCommand extends Command {
             return resolved.error ?? `You don't have the ${itemName} to use.`;
         }
         const itemToUse = resolved.item;
+        // A KEY, USED ON ITS OWN, GOES INTO THE LOCK IT OPENS
+        // (8XDR2BCZoSmpqdkXG). "use Corvid's Fob" is the most natural thing
+        // to type at a maglock that says it takes the fob, and it used to
+        // fall all the way down this ladder to "You can't use the fob in
+        // this way" -- the Key category has no use() of its own. When
+        // exactly one shut device in the room answers to this item, the
+        // item IS the offer, the same one "use <item> on <device>" makes.
+        const opensHere = devices.filter(d => d.keyItem?.name === itemToUse.name);
+        if (opensHere.length === 1) {
+            return this.useDevice(opensHere[0], itemToUse.name);
+        }
+        if (opensHere.length > 1) {
+            return `${itemToUse.name} opens more than one thing here -- say which: ${opensHere.map(d => d.name).join(', ')}.`;
+        }
         if (itemToUse.category === Category.Medical) {
             return this.applyFirstAid(itemToUse);
         }

package/bundle/typescript/src/commands/game/sideQuest/factories/scene-chunks.js

@@ -267,10 +267,13 @@ take ground. Build it accordingly:
   Matrix presence, whose files open only to a runner whose BODY is in that room). Pick one
   and commit to it -- the offline server is the harder, more interesting shape when the
   fiction wants a vault you must walk into.
-- THE OPPOSITION IS ICE, not muscle. Every NPC besides the client is "matrix"-plane and
-  stationed in the host. No guards patrolling meat corridors, no gunfight in the lobby: a
-  data run that ends in a firefight is a smash-and-grab wearing the wrong name. A site can
-  still be WATCHED (cameras) -- surveillance is pressure without being a gun.
+- THE OPPOSITION IS THE HOST'S OWN ICE, not muscle. Give the vault host a "hostRating" of
+  5-8: the host launches its own intrusion countermeasures (Patrol, Probe, Killer...) at
+  that rating, so DO NOT write an NPC for the ice -- no "matrix"-plane npcs[] at all. The
+  NPCs are the client and the people who work the site. No guards patrolling meat
+  corridors, no gunfight in the lobby: a data run that ends in a firefight is a
+  smash-and-grab wearing the wrong name. A site can still be WATCHED (cameras) --
+  surveillance is pressure without being a gun.
 - Keep it SHORT and tight. One site, one host, one file.
 - It pays LESS than a full run of the same tier -- roughly half. The runner is trading pay
   for a job that never puts a gun in their face, and the fixer prices it that way. Say so
@@ -407,8 +410,9 @@ ${JSON_ONLY}
   // its description reads.
   "npcs": [{
     "name": string, "concept": string, "startLocation": string,
-    "plane"?: "meat"|"matrix"|"astral", // "matrix" = ICE guarding a hasNode room;
-                                        // "astral" = a spirit. Default meat.
+    "plane"?: "meat"|"astral", // "astral" = a spirit. Default meat. NEVER "matrix": a host's
+                                // ice is not a person -- the host launches its own programs
+                                // at its "hostRating", and an NPC written as ice is dropped.
     "hostile"?: boolean // OPPOSITION: this one KNOWS the runner does not belong and will
                         // act on it -- a posted guard, a patrolling enforcer, a gang
                         // holding the room. Default false, and LEAVE IT FALSE unless the
@@ -418,9 +422,6 @@ ${JSON_ONLY}
                         // building, and marking them turns an ordinary scene into a
                         // brawl. If in doubt, leave it out -- a guard who stays calm is
                         // a missed beat, a hostile bartender is a broken scene.
-                        // ICE NEEDS NO FLAG: a "matrix" NPC is intrusion countermeasures
-                        // and is treated as opposition automatically. Write it only to
-                        // say FALSE, for the rare tame construct.
   }],
   "devices": [{
     "name": string, "concept": string, // what it physically IS (a maglock, a keypad, a
@@ -520,9 +521,10 @@ Hard structural rules (validated mechanically -- a violation is rejected):
   skill can still take the shortcut -- pick the lock, hack the panel -- but the found way
   must exist for a runner who has neither.
 - The winCondition item must not be heldBy winCondition.toNpc. If a matrix-plane item is the
-  winCondition item, its room has hasNode true AND a "matrix"-plane NPC stationed there. If
-  the runner can jack in, a Datachip/Document winCondition item MUST be that matrix-plane
-  item -- data for a hacker lives on a host, never on a desk.
+  winCondition item, its room has hasNode true AND a "hostRating" of at least 4 -- the host
+  defends its own files with its own ice; never write an NPC for that. If the runner can
+  jack in, a Datachip/Document winCondition item MUST be that matrix-plane item -- data for
+  a hacker lives on a host, never on a desk.
 - ${isContinuation
         ? 'ZERO "starting"-role items -- the runner arrives with everything they own. 4-6'
         : '3-5 "starting"-role items (basics the runner doesn\'t already own -- see the dossier), 4-6'}
@@ -652,8 +654,8 @@ For EVERY npc in the skeleton, expand its "concept":
                  "hacking"?, "cybercombat"?, "electronic-warfare"?, "hardware"?, "locksmith"?, "computer"?,
                  "negotiation"?, "con"?, "intimidation"?, "etiquette"?, "leadership"?, "performance"?, "disguise"?,
                  "medicine"?, "assensing"?, "counterspelling"?, "conjuring"?, "gunnery"? } }
-  "magic" 3-6 ONLY for a genuinely Awakened concept; "plane":"matrix" ice fights with
-  logic 4-7; give combat blocks to anyone the story expects in a firefight. "skills" is
+  "magic" 3-6 ONLY for a genuinely Awakened concept; give combat blocks to anyone the story
+  expects in a firefight. "skills" is
   optional flavor for defined concepts (a sharpshooter's "firearms": 6).
 
 ${JSON_ONLY}
@@ -886,6 +888,14 @@ const GENERIC_LOCK_WORDS = new Set([
     'lock', 'maglock', 'door', 'gate', 'grate', 'hatch', 'safe', 'vault', 'cage', 'shutter', 'padlock', 'cabinet', 'locker',
     'keycard', 'card', 'passkey', 'access', 'security', 'back', 'front', 'side', 'room', 'office', 'main', 'inner', 'outer',
 ]);
+/**
+ * THE LEAST A VAULT HOST RATES. A host launches its own IC at its rating
+ * (p.247, one per Combat Turn up to the rating), so the rating is the
+ * whole defence of the paydata inside it; below this the run is a free
+ * walk. Four is the floor: a rating-3 default host fields three thin
+ * programs and no Killer.
+ */
+export const VAULT_HOST_RATING = 4;
 export function validateSkeleton(skeleton, player, crew) {
     const fail = (msg) => { throw new Error(`Skeleton invalid: ${msg}`); };
     if (!Array.isArray(skeleton?.rooms) || skeleton.rooms.length === 0)
@@ -1107,11 +1117,18 @@ export function validateSkeleton(skeleton, player, crew) {
     // Worded to route to 'skeleton' (no "items[", no "Win condition item").
     const winItem = skeleton.items.find(i => i.name === skeleton.winCondition.item);
     if (winItem && isDataShaped(winItem.category) && winItem.plane !== 'matrix' && partyCanDeck(player)) {
-        fail(`the winCondition item "${winItem.name}" is a ${winItem.category} on the meat plane, and this runner can jack in -- for a decker or technomancer, data is PAYDATA: give it "plane": "matrix", place it in a hasNode room (not heldBy anyone), and station a "matrix"-plane NPC (ice) there. A chip lying on a desk is no job for a hacker.`);
+        fail(`the winCondition item "${winItem.name}" is a ${winItem.category} on the meat plane, and this runner can jack in -- for a decker or technomancer, data is PAYDATA: give it "plane": "matrix", place it in a hasNode room (not heldBy anyone) with a hostRating of ${VAULT_HOST_RATING} or more. A chip lying on a desk is no job for a hacker.`);
     }
     // The other half of the same rule, for ANY matrix-plane objective: the
-    // schema says its room has hasNode and an ice NPC stationed there, and
+    // schema says its room has hasNode and a rating that fields ice, and
     // until now nothing at the skeleton checked it.
+    //
+    // THE HOST IS ITS OWN GUARD (player ruling 2026-09-13, "mute all
+    // ice"): a vault used to demand a "matrix"-plane NPC -- a person
+    // wearing an ice costume, with dialogue lines and a model behind it,
+    // which is how four programs ended up bargaining over a chip in Vex's
+    // log. Canon has none of that: the host launches its own IC at its
+    // rating (p.247), so what a vault needs is a rating worth the name.
     if (winItem?.plane === 'matrix') {
         if (!winItem.room) {
             fail(`the winCondition item "${winItem.name}" is matrix-plane paydata but has no "room" -- data lives on a host, never in a pocket. Place it in a hasNode room.`);
@@ -1120,9 +1137,17 @@ export function validateSkeleton(skeleton, player, crew) {
         if (!vault?.hasNode) {
             fail(`the winCondition item "${winItem.name}" is matrix-plane paydata in "${winItem.room}", which has no "hasNode": true -- a matrix file can only exist on a host. Mark that room hasNode.`);
         }
-        const ice = skeleton.npcs.some(n => n.plane === 'matrix' && n.startLocation === winItem.room);
-        if (!ice) {
-            fail(`the winCondition item "${winItem.name}" is matrix-plane paydata in hasNode room "${winItem.room}" with no ice guarding it -- station a "matrix"-plane NPC there. An undefended vault is a free win.`);
+        else if ((vault.hostRating ?? 0) < VAULT_HOST_RATING) {
+            fail(`the winCondition item "${winItem.name}" is matrix-plane paydata in hasNode room "${winItem.room}" whose hostRating is ${vault.hostRating ?? 'unset'} -- a vault defends itself with its own ice, so give that room a hostRating of ${VAULT_HOST_RATING} or more. An undefended vault is a free win.`);
+        }
+    }
+    // NO NPC IS ICE. The same ruling from the other side: a model that
+    // still writes a "matrix"-plane person is writing a voice for a
+    // program. normalizeSkeleton drops them with a note; this holds the
+    // line for anything that reaches the validator by another road.
+    for (const npc of skeleton.npcs) {
+        if (npc.plane === 'matrix') {
+            fail(`npc "${npc.name}" is "matrix"-plane -- ice is not a person. Remove it; the host over its room fields its own countermeasures at its hostRating.`);
         }
     }
     // EVERY HOST HAS A PURPOSE AND HOLDS SOMETHING (N4erz3f63MiCZLkDE,
@@ -1153,10 +1178,9 @@ export function validateSkeleton(skeleton, player, crew) {
         if (!holds) {
             fail(`room "${room.name}" is a host (${room.hostPurpose}) with NOTHING inside it -- no "matrix"-plane item placed in that room. A host holds what its business protects: put at least one matrix-plane item there (the ledger, the client list, the camera archive), or drop hasNode.`);
         }
-        const guarded = skeleton.npcs.some(n => n.plane === 'matrix' && n.startLocation === room.name);
-        if (!guarded) {
-            fail(`room "${room.name}" is a host holding matrix-plane files with no ice on it -- station a "matrix"-plane NPC in that room. A host worth entering is a host that defends itself.`);
-        }
+        // "Ice stationed on it" used to be the third requirement. It is
+        // now the host's own rating (see the vault rule above): a host
+        // defends itself, and a person written as its ice is refused.
     }
     // Lock-and-key reachability. CRITICAL: edges are BIDIRECTIONAL -- the
     // engine mirrors every declared exit into a shared two-way Door
@@ -1568,6 +1592,28 @@ export function normalizeSkeleton(skeleton) {
         delete room.nodeAccess;
         notes.push(`dropped the host over "${room.name}" -- it held no matrix-plane file, and a host with nothing in it should not be there.`);
     }
+    // ICE IS NOT A PERSON (player ruling 2026-09-13, "mute all ice"). The
+    // prompt no longer asks for a "matrix"-plane NPC and validateSkeleton
+    // refuses one; a model that writes one anyway is writing a voice for
+    // a program, and the cheap repair is to drop it and let the host's
+    // own rating do the guarding. The vault host gets that rating here
+    // when the model forgot it -- clamp, don't burn a regeneration.
+    const constructs = (skeleton.npcs ?? []).filter(n => n.plane === 'matrix');
+    if (constructs.length > 0) {
+        skeleton.npcs = skeleton.npcs.filter(n => n.plane !== 'matrix');
+        for (const n of constructs) {
+            notes.push(`normalized: dropped npc "${n.name}" -- it was "matrix"-plane ice, and a host fields its own countermeasures at its hostRating rather than a person in a costume.`);
+        }
+    }
+    const winItem = (skeleton.items ?? []).find(i => i.name === skeleton.winCondition?.item);
+    if (winItem?.plane === 'matrix' && winItem.room) {
+        const vault = (skeleton.rooms ?? []).find(r => r.name === winItem.room);
+        if (vault?.hasNode && (vault.hostRating ?? 0) < VAULT_HOST_RATING) {
+            const was = vault.hostRating === undefined ? 'no hostRating' : `hostRating ${vault.hostRating}`;
+            vault.hostRating = VAULT_HOST_RATING;
+            notes.push(`normalized: the vault host over "${vault.name}" had ${was}; raised it to ${VAULT_HOST_RATING} so it fields ice worth the paydata.`);
+        }
+    }
     // NOBODY MINDING THE STORE (playtest 2026-08-25: "the flooded
     // undermarket could use some details -- it's just blank"). It was the
     // district's only commerce room with neither a vendor nor stock: a

package/bundle/typescript/src/commands/game/sideQuest/factories/scene-seed-generator.js

@@ -8,7 +8,7 @@ import { clampDeviceKind } from '../utilities/affordances.js';
 import { GenerationCapture } from '../utilities/generation-capture.js';
 import { fetchCanonContext } from '../utilities/canon-lore.js';
 import { SceneSynthesizer } from './scene-factory.js';
-import { buildSkeletonPrompt, buildRoomsPrompt, buildNpcsPrompt, buildDevicesPrompt, buildItemsPrompt, pickRunType, parseJsonReply, validateSkeleton, normalizeSkeleton, assembleScene, classifyRepair, } from './scene-chunks.js';
+import { buildSkeletonPrompt, buildRoomsPrompt, buildNpcsPrompt, buildDevicesPrompt, buildItemsPrompt, pickRunType, parseJsonReply, validateSkeleton, normalizeSkeleton, assembleScene, classifyRepair, VAULT_HOST_RATING, } from './scene-chunks.js';
 // The fixer name convention and the player dossier live with the prompt
 // builders now (see scene-chunks.ts); re-exported so the existing
 // import sites (call.ts, game.ts) keep working unchanged.
@@ -751,9 +751,11 @@ export class SceneSeedGenerator {
         if (!room?.hasNode) {
             throw new Error(`Matrix-plane win condition item "${wc.item}" is in room "${item.room}", which has no "hasNode": true -- matrix files can only exist on a host. Mark that room hasNode.`);
         }
-        const iceGuard = (candidate.npcs ?? []).some(n => n.plane === 'matrix' && n.player.startLocation === item.room);
-        if (!iceGuard) {
-            throw new Error(`Matrix-plane win condition item "${wc.item}" sits in hasNode room "${item.room}" with NO ice guarding it -- add an npc with "plane": "matrix", "startLocation": "${item.room}", and a combat block (logic 4-7). An undefended data vault makes the run a free win.`);
+        // THE HOST GUARDS ITSELF (2026-09-13): this used to demand an ice
+        // NPC; a host's countermeasures are its own programs at its rating
+        // (p.247), and normalizeSkeleton raises a vault to the floor.
+        if ((room.hostRating ?? 0) < VAULT_HOST_RATING) {
+            throw new Error(`Matrix-plane win condition item "${wc.item}" sits in hasNode room "${item.room}" whose hostRating is ${room.hostRating ?? 'unset'} -- a vault defends itself with its own ice; give that room a hostRating of ${VAULT_HOST_RATING} or more. An undefended data vault makes the run a free win.`);
         }
     }
     /**

package/bundle/typescript/src/commands/game/sideQuest/models/npc.js

@@ -935,6 +935,29 @@ description text.`;
     combatPhaseLocked() {
         return !!this._scene?.encounterFor?.(this);
     }
+    /**
+     * ICE HAS NO VOICE AND NO MIND OF ITS OWN (player ruling 2026-09-13,
+     * from Vex's Borrowed Time log: "Patrol IC: That chip belongs to
+     * Corvid. Put it back on the desk, nice and slow" -- four programs
+     * bargaining over a chip in four voices, and Killer IC "assembling
+     * in the back room" after the persona had already jacked out).
+     *
+     * SR5 p.247: IC is "mercilessly efficient, not very bright" -- it
+     * finds, disables, destroys and repels, and nothing in the books has
+     * it speak. A spawned program (icKind) and a seeded matrix-plane
+     * construct are the same thing to the engine: driven by dice
+     * (utilities/ic.ts), never by the model. No speech, no reflection,
+     * no exposition, and no listening either -- there is nothing for a
+     * stimulus to wake.
+     */
+    isConstruct() {
+        return this.icKind !== undefined || this.plane === 'matrix';
+    }
+    /** Every AI entry point asks this: a construct never runs the model,
+     *  and anyone in a Combat Turn yields to the turn loop. */
+    aiSuspended() {
+        return this.isConstruct() || this.combatPhaseLocked();
+    }
     /**
      * One verb, executed now, no reflection -- the brain's way of acting
      * inside an Action Phase. Returns the command's own result so the
@@ -963,6 +986,10 @@ description text.`;
             this.logger.write(`${this.name} is gone from the world -- dropping queued action "${commandString}".`);
             return;
         }
+        if (this.isConstruct()) {
+            this.logger.write(`${this.name} is ice -- the host's dice act for it; dropping "${commandString}".`);
+            return;
+        }
         if (this.combatPhaseLocked()) {
             this.logger.write(`${this.name} is in a Combat Turn -- the turn loop acts for them; dropping "${commandString}".`);
             return;
@@ -995,6 +1022,10 @@ description text.`;
             // removed shell's AI.
             if (this.deathClaimed)
                 return;
+            // NOR DOES ICE (isConstruct): a program has no conversation to
+            // hold and no history worth keeping.
+            if (this.isConstruct())
+                return;
             // NEITHER DO THE UNCONSCIOUS. A knocked-out actor now STAYS in the
             // scene so they can be brought round (player ruling 2026-08-25) --
             // which means every AI entry point has to check, or the body on the
@@ -1113,6 +1144,10 @@ description text.`;
             // Same cross-plane blindness as hear() above.
             if (!this.canPerceive(actor))
                 return;
+            // Ice watches with the host's dice, not with a model (see
+            // isConstruct): what it notices, utilities/ic.ts rolls for.
+            if (this.isConstruct())
+                return;
             // The unconscious see nothing (see hear()): a KO'd actor stays in
             // the scene now, and must not react to what happens over it.
             if (this.isIncapacitated())
@@ -1428,8 +1463,8 @@ description text.`;
             this.logger.write(`${this.name} is gone from the world -- reflect chain ends.`);
             return;
         }
-        if (this.combatPhaseLocked()) {
-            this.logger.write(`${this.name} is in a Combat Turn -- reflect chain yields to the turn loop.`);
+        if (this.aiSuspended()) {
+            this.logger.write(`${this.name} ${this.isConstruct() ? 'is ice -- no reflect chain' : 'is in a Combat Turn -- reflect chain yields to the turn loop'}.`);
             return;
         }
         // THE GRIND BREAKER. Record what just happened, then refuse to keep
@@ -1609,8 +1644,8 @@ ${worldEventsSummary}
             : [];
     }
     async respondTo(actor, message) {
-        if (this.combatPhaseLocked()) {
-            this.logger.write(`${this.name} is in a Combat Turn -- no AI reaction to "${message.slice(0, 40)}".`);
+        if (this.aiSuspended()) {
+            this.logger.write(`${this.name} ${this.isConstruct() ? 'is ice' : 'is in a Combat Turn'} -- no AI reaction to "${message.slice(0, 40)}".`);
             return;
         }
         this.logger.write('Attempting to respond');

package/bundle/typescript/src/commands/game/sideQuest/utilities/alarmed-staff.js

@@ -59,6 +59,9 @@ export function alarmedStaff(scene, player) {
         .filter((a) => a instanceof NPC)
         .filter(npc => !isEphemeral(npc))
         .filter(npc => npc.allyOf === undefined)
+        // Ice is not staff: a program answers to the host's dice
+        // (utilities/ic.ts), never to an alarm beat (NPC.isConstruct).
+        .filter(npc => !npc.isConstruct())
         .filter(npc => !npc.isIncapacitated());
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/maka-cli",
-  "version": "5.179.0",
+  "version": "5.181.0",
   "type": "module",
   "summary": "A command line tool for scaffolding Meteor 3.x applications using either React.",
   "description": "A command line tool for scaffolding Meteor 3.x applications using React.",