@maka/maka-cli 5.237.0 → 5.238.0

package/bundle/typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/maka-cli",
-  "version": "5.237.0",
+  "version": "5.238.0",
   "type": "module",
   "summary": "A command line tool for scaffolding Meteor 3.x applications using either React.",
   "description": "A command line tool for scaffolding Meteor 3.x applications using React.",

package/bundle/typescript/src/commands/game/sideQuest/commands/hack.js

@@ -179,6 +179,22 @@ export class HackCommand extends BypassCommand {
                 const roster = names.length > 0
                     ? ` In reach: ${names.slice(0, 8).join(', ')}${names.length > 8 ? `, and ${names.length - 8} more` : ''} -- "${this.verbName} <name>" reaches one from here (Tab completes it).`
                     : '';
+                // AND IF THEY NAMED SOMETHING THAT IS SIMPLY DARK, SAY SO
+                // (reporter's ruling 2026-09-17: slaved security gear comes up
+                // with its radio off). A player who types "hack keypad" has read
+                // the keypad off the room's own prose with their eyes; the grid
+                // genuinely has nothing by that name, and "no host, no PAN, no
+                // camera" is a true sentence that answers the wrong question and
+                // teaches nothing. This is the one moment the difference between
+                // HIDDEN and DARK is worth spelling out, and it is also the only
+                // place a decker on a fully hardwired site would otherwise never
+                // meet the verb that still works.
+                const dark = named
+                    ? (this.actor.bodyRoom ?? this.actor.currentLocation).devices.find(d => d.rating > 0 && !d.broadcastsAro() && d.name.toLowerCase().includes(named.toLowerCase()))
+                    : undefined;
+                if (dark) {
+                    return `${dark.name} has NO RADIO -- it is wired into this place, not broadcasting, and the grid cannot see it at all (p.421). Nothing you do out here will reach it.${hint(` (p.421 takes away WIRELESS hacking, not the port: "jack out", walk to it, and "tap ${dark.name}" -- a cable beats its master's ratings and a mark on a slave is a mark on the host.)`)}`;
+                }
                 return named
                     ? `Nothing on the grid answers to "${named}" -- no host by that name, no PAN, no camera.${roster}`
                     : `Thin grid out here -- no host node hangs over ${gridVicinity(this.actor).name}.${roster}`;

package/bundle/typescript/src/commands/game/sideQuest/commands/tap.js

@@ -106,7 +106,11 @@ export class TapCommand extends Command {
             return this.nothingNamed(room, named);
         }
         if (!isWatched(room)) {
-            return `No cameras in here to cable into.${hint(` (Your overlay tags them "◎ Camera cluster" when there are.)`)}`;
+            // NOT "your overlay tags them", which stopped being true when
+            // slaved lenses went dark (reporter's ruling 2026-09-17): a
+            // hardwired cluster has no icon for the overlay to tag. The
+            // housings are a thing the room's prose names and your eyes find.
+            return `No cameras in here to cable into.${hint(` (Look for the housings -- a hardwired cluster shows no icon at all, and still takes a cable.)`)}`;
         }
         // The refusals TEACH (item 9 was a player asking whether the rules
         // allowed this at all) -- each one names what a direct connection
@@ -393,6 +397,16 @@ export class TapCommand extends Command {
         }
         const now = Math.min(MAX_MARKS, held + 1);
         device.marksBy.set(actor.name, now);
+        // YOU CANNOT HOLD A MARK ON AN ICON YOU CANNOT PICK OUT. Every other
+        // route to a mark goes through seeing the thing first -- from the
+        // grid you have to target an icon, and targeting a silent one means
+        // beating it in an opposed Matrix Perception. The cable is the one
+        // route that does not, because it is your hand on the housing rather
+        // than a search. Without this the new verb left a state nothing else
+        // in the game can reach: a device you own and cannot see, invisible
+        // on the grid you just keyed it from. Banked OUTSIDE (p.246), since
+        // what you learned you learned off the object itself.
+        device.markSpotted(actor.name);
         const lines = [
             `{light-blue-fg}The filament finds the connector and ${device.name} stops being furniture -- it's a device, and it's talking to you.{/light-blue-fg}`,
             `  {light-blue-fg}It never gets to hide behind the network: a cable doesn't ask permission, so it has to defend itself on DR ${device.rating} alone (p.233).{/light-blue-fg}`,

package/bundle/typescript/src/commands/game/sideQuest/engine-version.js

@@ -1566,5 +1566,53 @@
 //   hostInteriorIcons listed personas, files and ice and never the WAN,
 //   so a device found in there first appeared when you left. It is
 //   listed inside now, where p.233 puts it.
-export const ENGINE_VERSION = '1.86.0';
+// 1.87.0 (2026-09-17): SLAVED SECURITY GEAR IS DARK, NOT HIDING
+//   (eJANPpm7qCaCAJBJw, reporter's ruling: "If a device isn't running
+//   wireless, it cannot be seen. I assume that security devices, such as
+//   maglocks, cameras, sensors, etc., do not run wireless ... Let's give
+//   devices a 'wireless' setting. Default security devices to have this
+//   attribute of 'off'.")
+//   TWO DIFFERENT ABSENCES, and the whole change is keeping them apart.
+//   RUNNING SILENT (p.235-236) is an icon hiding: a sweep can beat it,
+//   and a lost sweep still reports that something is there. DARK (p.421,
+//   "can no longer be wirelessly hacked") is no icon at all: nothing to
+//   contest, and no hint anything was ever there. Security furniture was
+//   the first; it is the second now.
+//   NOT A BLANKET, per the reporter's own correction: "not ALL cameras
+//   need to be slaved to a host -- a mom and pop store can have a
+//   wireless camera." The MASTER decides. A lock, panel or camera
+//   cluster in a room with a host over it is wired into that site's
+//   network and comes up dark; one with no host over it keeps its radio,
+//   because the radio is the only way it reaches anyone. Seeds override
+//   per device (IDeviceSeedJson.wireless) and per site
+//   (Room.camerasWireless).
+//   AND IT IS NOT A WALL -- the reporter's second correction, which was
+//   also right: "physical contact CAN get access to the host through its
+//   slaved device. Physical is NOT wireless." p.421 takes away WIRELESS
+//   hacking and a filament is not wireless, so 1.86.0's `tap <device>`
+//   still cables a dark maglock, still beats its own DR instead of its
+//   master's (p.233), and the mark it buys is still a mark on the host.
+//   From inside that host you are directly connected to the whole WAN,
+//   radios or not. A dark site is not un-deckable; it is a site you have
+//   to put a body into ONCE.
+//   THE LEAK 1.86.0 PAPERED OVER IS NOW GONE AT THE ROOT. That version
+//   answered "when I leave the host, all slaved devices are
+//   automatically visible" with a second spotted-record per vantage. The
+//   real answer is that there is no sweep inside a host to win: p.233
+//   makes a persona in a WAN "directly connected to all devices in the
+//   WAN", and a direct connection is a LINK, not a search -- the same
+//   reason `tap` reaches a device nobody has ever spotted. The same
+//   relationship cannot mean "you hold a link to it" for the cable and
+//   "now go find it" for the host. So slaved devices are simply present
+//   from inside, nothing is rolled in there, and nothing can be carried
+//   back out. Device.spottedInsideBy and Room.camerasSpottedInsideBy are
+//   retired.
+//   WHERE A DARK DEVICE IS TAUGHT: naming one from the grid used to get
+//   "no host by that name, no PAN, no camera" -- a true sentence
+//   answering the wrong question, since the player read the keypad off
+//   the room with their eyes. It now says the icon does not exist and
+//   names the cable. The AR overlay deliberately says NOTHING: that
+//   surface annotates broadcasts, which is its stated contract, and the
+//   first cut of this violated it.
+export const ENGINE_VERSION = '1.87.0';
 //# sourceMappingURL=engine-version.js.map

package/bundle/typescript/src/commands/game/sideQuest/factories/scene-factory.js

@@ -11,7 +11,7 @@ export const OBJECTIVE_MAX_WEIGHT_KG = 15;
 import { Category } from '../types/shared/item-enum.js';
 import { Logger } from '../utilities/logger.js';
 import { migrateLegacySeed } from './seed-migration.js';
-import { Device } from '../models/device.js';
+import { Device, WIRELESS_OFF_BY_DEFAULT } from '../models/device.js';
 import { fuzzyPickName } from '../utilities/fuzzy-match.js';
 import { adoptSeededIce } from '../utilities/ic-actors.js';
 import { NPC_EQUIP_CATEGORIES, outfitNpcBySlug } from '../npc-kits.js';
@@ -439,6 +439,20 @@ Key Locations: ${json.rooms.map(r => r.name).join(', ')}
                     structure: d.structure,
                     armor: d.armor,
                     footprint: d.footprint,
+                    // THE RADIO, AND WHAT DECIDES IT (reporter's ruling
+                    // 2026-09-17, eJANPpm7qCaCAJBJw). A security device wired into
+                    // a site's network is DARK -- no icon on the grid at all, not
+                    // a hidden one. A standalone one keeps its radio: "not ALL
+                    // cameras need to be slaved to a host -- a mom and pop store
+                    // can have a wireless camera", and the same is true of the
+                    // maglock on a corner shop's back door.
+                    //
+                    // SLAVED means a host stands over its own room, which is the
+                    // same master tap.ts cables through to and the same WAN
+                    // hack.ts reaches from inside. One definition, three readers.
+                    // The seed still overrides either way.
+                    wireless: d.wireless ?? !(roomJson.hasNode === true && WIRELESS_OFF_BY_DEFAULT.has(kind)),
+                    silent: d.silent,
                 });
                 room.devices.push(device);
                 // A seed may declare a device ALREADY OPEN. Applied before the

package/bundle/typescript/src/commands/game/sideQuest/models/device.js

@@ -25,6 +25,33 @@ export const DEFAULT_DEVICE_RATING = {
  * has no wireless mode to hide in.
  */
 export const SILENT_BY_DEFAULT = new Set(['lock', 'panel']);
+/**
+ * WHICH KINDS ARE BORN WITH THE RADIO OFF (reporter's ruling 2026-09-17,
+ * eJANPpm7qCaCAJBJw: "If a device isn't running wireless, it cannot be
+ * seen. I assume that security devices, such as maglocks, cameras,
+ * sensors, etc., do not run wireless ... Let's give devices a 'wireless'
+ * setting. Default security devices to have this attribute of 'off'").
+ *
+ * The setting already existed and every seed left it on. This makes the
+ * security furniture dark by default instead, which is a stronger claim
+ * than running silent and a different one: silent is an icon HIDING
+ * (p.235-236, beatable by Matrix Perception), dark is no icon at all
+ * (p.421, "can no longer be wirelessly hacked" -- there is nothing to
+ * roll against).
+ *
+ * IT IS NOT A WALL, and that is the whole reason the ruling is
+ * affordable. p.421 says WIRELESSLY. A cable is not wireless: `tap
+ * <device>` still cables into a dark maglock in the flesh, still beats
+ * its own DR rather than its master's (p.233), and the mark it buys is
+ * still a mark on the host (p.233, Data Trails p.87-88). From inside
+ * that host you are then directly connected to the whole WAN, radios or
+ * not. So a dark site is not un-deckable -- it is a site you have to
+ * put a body into once, after which everything works.
+ *
+ * `silent` stays set on these kinds too, for the seed that turns a
+ * radio back ON: a device broadcasting again should still be hiding.
+ */
+export const WIRELESS_OFF_BY_DEFAULT = new Set(['lock', 'panel']);
 /**
  * THE BOOK'S BARRIER TIERS (p.197 Barrier Ratings, RAG-checked 2026-09-03):
  * Structure / Armor. Fragile is standard glass; Reinforced is a security
@@ -165,53 +192,50 @@ export class Device {
      */
     spottedBy = new Set();
     /**
-     * SPOTTED FROM INSIDE THE HOST IT IS SLAVED TO -- a separate record,
-     * and the bug that earned it (eJANPpm7qCaCAJBJw, Maka: "Even if I
-     * never see the device ... when I leave the host, all slaved devices
-     * are automatically visible").
+     * IS THIS ICON THERE FOR THIS VIEWER, from where they are standing?
+     *
+     * `inside` means the viewer's persona is inside the host this device
+     * is slaved to, and it is the whole of the difference (Maka, 2026-09-17:
+     * "physical contact CAN get access to the host through its slaved
+     * device. Physical is NOT wireless").
      *
-     * There was ONE set, so a sweep won in either place unlocked both --
-     * and the two places are not the same test. Inside the host you are
-     * directly connected and the slave "cannot use its master's ratings"
-     * (p.233), so it hides behind its bare rating: ONE die for a p.356
-     * camera. Out on the grid it borrows the host's Rating and Sleaze --
-     * nine dice on the reporter's HR 3 bazaar. A one-die win was being
-     * spent to satisfy a nine-die gate, so entering a host and glancing
-     * around lit up every slaved icon on the street outside it.
+     * INSIDE THE WAN THERE IS NOTHING TO FIND. p.233: "if you are in a
+     * host that has a WAN, you are considered directly connected to all
+     * devices in the WAN." A direct connection is a LINK, not a search --
+     * which is exactly why `tap` reaches a device nobody has ever spotted.
+     * The same relationship cannot mean "you hold a link to it" for the
+     * cable and "now go find it" for the host. So from in here a slaved
+     * device is simply present, radio or no radio: the WAN link is the
+     * WIRE, and the airwaves have nothing to do with it.
      *
-     * p.246 is the rule underneath: "the virtual space inside a host is
-     * separate from the outside grid." What you learned in there, you
-     * learned in there.
+     * OUTSIDE IT IS THE AIRWAVES OR NOTHING. No wireless, no icon (p.421:
+     * a wireless-off device "can no longer be wirelessly hacked"). With a
+     * radio it still has to be picked out of the noise if it is running
+     * silent (p.235-236).
      *
-     * IT ONLY RUNS ONE WAY. An OUTSIDE spot beats the harder test, so it
-     * counts inside too (see hasIconFor); an inside spot does not come
-     * back out with you.
+     * THIS IS ALSO WHAT KILLS THE LEAK the reporter found -- "when I leave
+     * the host, all slaved devices are automatically visible" -- and kills
+     * it by construction rather than by bookkeeping. 1.86.0 fixed it with
+     * a second `spottedInsideBy` record so a cheap sweep inside could not
+     * satisfy the dear gate outside. There is no sweep inside any more, so
+     * there is nothing to bank and no second record to keep honest.
      */
-    spottedInsideBy = new Set();
-    /** Is this icon on the grid for this viewer? Wireless and rated (the
-     *  old broadcastsAro question), and either loud or already spotted
-     *  FROM WHERE THEY ARE STANDING -- `inside` means inside the host this
-     *  device is slaved to, where p.233 makes them directly connected. */
     hasIconFor(viewerName, inside = false) {
+        if (inside)
+            return this.rating > 0;
         if (!this.broadcastsAro())
             return false;
-        if (!this.silent)
-            return true;
-        if (this.spottedBy.has(viewerName))
-            return true;
-        return inside && this.spottedInsideBy.has(viewerName);
+        return !this.silent || this.spottedBy.has(viewerName);
     }
-    /** Hidden from this viewer, and therefore worth rolling against. */
+    /** Hidden from this viewer, and therefore worth rolling against. Never
+     *  from inside its own host: see hasIconFor. */
     isHiddenFrom(viewerName, inside = false) {
-        return this.broadcastsAro() && this.silent && !this.hasIconFor(viewerName, inside);
+        return !inside && this.broadcastsAro() && this.silent && !this.spottedBy.has(viewerName);
     }
-    /** Record a sweep this viewer won, on the side of the wall they won it
-     *  (p.246). */
-    markSpotted(viewerName, inside) {
-        if (inside)
-            this.spottedInsideBy.add(viewerName);
-        else
-            this.spottedBy.add(viewerName);
+    /** Record a sweep this viewer won -- or a cable they put into it, which
+     *  teaches the same fact the harder way. */
+    markSpotted(viewerName) {
+        this.spottedBy.add(viewerName);
     }
     /**
      * WHAT IT IS MADE OF (p.197-198): Structure is the condition monitor

package/bundle/typescript/src/commands/game/sideQuest/models/room.js

@@ -82,23 +82,20 @@ export class Room extends AbstractRoom {
      */
     camerasSpottedBy = new Set();
     /**
-     * AND THE SAME SPLIT Device.spottedInsideBy carries, for the same
-     * reason and the same bug. A sweep won INSIDE the host the lenses are
-     * slaved to beats their bare rating -- one die, for a p.356 camera --
-     * while the grid outside asks for the host's Rating + Sleaze. Sharing
-     * one set let the cheap win open the dear door, so stepping into a
-     * host and looking around lit the cameras up on the street when you
-     * came back out. p.246: the two spaces are separate.
-     *
-     * Outward-only, like the device's: an outside spot counts everywhere,
-     * an inside one stays inside.
+     * DOES THIS CLUSTER RUN A RADIO AT ALL (reporter's ruling 2026-09-17,
+     * eJANPpm7qCaCAJBJw)? Unset takes the derived answer in
+     * surveillance.ts camerasBroadcast: slaved to a host means DARK,
+     * standalone means broadcasting -- "not ALL cameras need to be slaved
+     * to a host, a mom and pop store can have a wireless camera". Set it
+     * to force either way per site.
      */
-    camerasSpottedInsideBy = new Set();
-    /** Has this viewer pinned the cluster's icon from where they stand? */
+    camerasWireless;
+    /** Has this viewer pinned the cluster's icon? Inside the host these
+     *  lenses are slaved to, there is nothing to pin: p.233 makes a
+     *  persona in the WAN directly connected to everything on it, which is
+     *  a LINK and not a search. Mirrors Device.hasIconFor. */
     camerasSpottedFor(viewerName, inside = false) {
-        if (this.camerasSpottedBy.has(viewerName))
-            return true;
-        return inside && this.camerasSpottedInsideBy.has(viewerName);
+        return inside || this.camerasSpottedBy.has(viewerName);
     }
     /**
      * WHAT THE LENSES RATE (eJANPpm7qCaCAJBJw, third rejection: "the

package/bundle/typescript/src/commands/game/sideQuest/utilities/ar.js

@@ -1,5 +1,5 @@
 import { isLinked, CALL_COLOR } from './comm-style.js';
-import { isWatched, camerasLive, canSnoopFeeds } from './surveillance.js';
+import { isWatched, camerasLive, canSnoopFeeds, camerasBroadcast } from './surveillance.js';
 import { Category } from '../types/shared/item-enum.js';
 import { hint } from './hints.js';
 import { cameraDrTag, drTagFor } from './grid-view.js';
@@ -143,7 +143,12 @@ export function aroTags(scene, actor, room) {
     // the host, so it shows only to whoever owns the feeds.
     // Same gate as the grid: this overlay draws ICONS, and a camera icon
     // is the first thing p.217 lists as deliberately hidden until spotted.
-    if (isWatched(room) && room.camerasSpottedBy.has(actor.name)) {
+    // A DARK CLUSTER IS CORRECTLY ABSENT, for the same reason a dark
+    // device is (reporter's ruling 2026-09-17): lenses wired into a site's
+    // host broadcast nothing, and this overlay annotates broadcasts. The
+    // housings are still there to be seen and still take a cable -- that
+    // is the meat layer's business, not this one's.
+    if (isWatched(room) && camerasBroadcast(scene.getRooms(), room) && room.camerasSpottedBy.has(actor.name)) {
         const rooms = scene.getRooms();
         // The verb rides the tag: standing in the room IS the requirement
         // for a direct connection (commands/tap.ts), so this is the one
@@ -174,6 +179,17 @@ export function aroTags(scene, actor, room) {
         // (p.217, p.235-236). The OBJECT is untouched: the maglock is still
         // screwed to the door, still described by a meat-world `look`, and
         // still picked, breached, shot and keyed exactly as before.
+        // A DARK DEVICE IS CORRECTLY ABSENT FROM THIS LIST (reporter's
+        // ruling 2026-09-17: slaved security gear comes up with its radio
+        // off). This overlay annotates BROADCASTS -- see the contract at the
+        // top of the file -- and a device with no radio has nothing to
+        // annotate, exactly like a silent PAN or an offline server.
+        //
+        // The first cut of that ruling printed a "NO RADIO" line here on the
+        // grounds that a body has eyes. It does, but this is not the eyes:
+        // the object is named by the room's own prose and worked by the meat
+        // verbs, and commands/bypass-command.ts is where a body is told what
+        // its hands and its cable can reach. Two surfaces, one contract each.
         if (!device.hasIconFor(actor.name))
             continue;
         // THE CABLE IS THE OTHER VERB (eJANPpm7qCaCAJBJw). The overlay

package/bundle/typescript/src/commands/game/sideQuest/utilities/grid-view.js

@@ -4,7 +4,7 @@ import { hostsInReach, hostLine, roomsInReach, gridVicinity } from './grid-reach
 import { NPC } from '../models/npc.js';
 import { hostLabel, hostPurposeFor } from './grid-names.js';
 import { isLinked } from './comm-style.js';
-import { isWatched, camerasLive, canSnoopFeeds, cameraMasterHost } from './surveillance.js';
+import { isWatched, camerasLive, canSnoopFeeds, cameraMasterHost, camerasBroadcast } from './surveillance.js';
 /**
  * The grid's icon inventory for one room -- everything a persona can
  * ACT on, each with its verb (player rulings 2026-08-23/24: "it's hard
@@ -337,7 +337,7 @@ export function gridIcons(scene, actor, room) {
     // still described in the meat, and a body still "tap"s one in the
     // flesh -- it is the ICON that takes a Matrix Perception to pick out
     // of the noise (utilities/silent-icons.ts).
-    if (isWatched(room) && room.camerasSpottedBy.has(actor.name)) {
+    if (isWatched(room) && camerasBroadcast(scene.getRooms(), room) && room.camerasSpottedBy.has(actor.name)) {
         const rooms = scene.getRooms();
         if (!camerasLive(rooms, room)) {
             icons.push(`◎ Camera cluster ${cameraDr(room, actor.name)}-- looped on empty hallways. Security sees NOTHING here.${canSnoopFeeds(rooms, room, actor) ? ` ("snoop" rides the feeds you own)` : ''}`);

package/bundle/typescript/src/commands/game/sideQuest/utilities/silent-icons.js

@@ -1,8 +1,8 @@
 import { rollPool, formatRoll } from './dice.js';
 import { deviceHidePool, wanHidePool } from './matrix-intrusion.js';
-import { isWatched, cameraMasterHost } from './surveillance.js';
+import { isWatched, cameraMasterHost, camerasBroadcast } from './surveillance.js';
 import { gridActionModifier, gridNote } from './grids.js';
-function hiddenDevice(device, master, inside) {
+function hiddenDevice(device, master) {
     // p.235-236: the hider rolls LOGIC + SLEAZE. Not Firewall -- that
     // resists an intrusion (p.238/p.240) and has nothing to do with being
     // seen. This used to call deviceDefensePool, the INTRUSION pool, so
@@ -13,11 +13,7 @@ function hiddenDevice(device, master, inside) {
     return {
         name: device.name,
         hide: { pool: hide.pool, label: hide.label },
-        // WHERE THE WIN IS BANKED (p.246). A sweep inside the host beat the
-        // slave's bare rating; the grid outside asks for the master's
-        // Rating + Sleaze. Writing both from one roll is what made
-        // "enter, glance, exit" reveal a street's worth of silent icons.
-        reveal: (viewer) => { device.markSpotted(viewer, inside); },
+        reveal: (viewer) => { device.markSpotted(viewer); },
     };
 }
 function hiddenPersona(actor) {
@@ -38,14 +34,23 @@ function hiddenPersona(actor) {
  * body does.
  */
 export function hiddenIconsIn(scene, room, viewer) {
-    // A device in a room with a host is slaved to it (p.233), and from
-    // the grid it borrows the master's ratings. Inside the host you are
-    // directly connected and it stands alone -- deviceHidePool.
+    // A device in a room with a host is slaved to it (p.233) and borrows
+    // the master's ratings to stay hidden.
+    //
+    // NOTHING IS HIDDEN FROM INSIDE THE HOST. p.233: a persona in a WAN is
+    // "considered directly connected to all devices in the WAN", and a
+    // direct connection is a LINK, not a search -- the same reason `tap`
+    // reaches a device nobody has ever spotted. isHiddenFrom answers false
+    // for every slave in here, so this list comes back empty of devices
+    // and the sweep in there is only ever about PEOPLE.
+    //
+    // That is also what retired the `spottedInsideBy` record 1.86.0 added:
+    // a sweep that cannot happen has no result to keep on the right side
+    // of the wall.
     const inside = !!viewer.hostInside;
-    const deviceMaster = inside ? undefined : room.host;
     const out = room.devices
         .filter(d => d.isHiddenFrom(viewer.name, inside))
-        .map(d => hiddenDevice(d, deviceMaster, inside));
+        .map(d => hiddenDevice(d, room.host));
     // THE CAMERAS, which p.217 names FIRST. They are not a Device -- the
     // cluster is derived from the room (surveillance.ts isWatched) -- so
     // the rating rides the ROOM (Room.cameraRating), seeded per site.
@@ -63,7 +68,13 @@ export function hiddenIconsIn(scene, room, viewer) {
     // could not have reconciled them because two of the three were never
     // printed. One seeded number feeds all three now, so what the player
     // reads is what it rolls (reporter's ruling: per-site, not global).
-    if (isWatched(room) && !room.camerasSpottedFor(viewer.name, inside)) {
+    // A DARK CLUSTER IS NOT HIDING, IT IS ABSENT (reporter's ruling
+    // 2026-09-17). Lenses wired into a site's host broadcast nothing at
+    // all, so there is no icon to contest and not even a "something is
+    // running silent here" -- p.421 leaves a wireless-off device with
+    // nothing to find. camerasBroadcast is the one predicate; the grid
+    // view reads the same one.
+    if (isWatched(room) && camerasBroadcast(scene?.getRooms() ?? {}, room) && !room.camerasSpottedFor(viewer.name, inside)) {
         // THE THIRD CUT, and the reporter found it by doing the arithmetic
         // out loud: "Device Rating + Firewall on the Camera is 2d6? so, the
         // firewall of the host is a 1?" No -- Firewall was never the right
@@ -83,7 +94,7 @@ export function hiddenIconsIn(scene, room, viewer) {
             hide: { pool: hide.pool, label: hide.label },
             // Banked on the side of the wall it was won (p.246), like the
             // devices above.
-            reveal: (v) => { (inside ? room.camerasSpottedInsideBy : room.camerasSpottedBy).add(v); },
+            reveal: (v) => { room.camerasSpottedBy.add(v); },
         });
     }
     for (const a of scene?.allActors ?? []) {

package/bundle/typescript/src/commands/game/sideQuest/utilities/surveillance.js

@@ -46,6 +46,38 @@ export function cameraMasterHost(rooms, room) {
     // site network -- whichever host you own, you own these feeds.
     return Object.values(rooms).find(r => r.hasNode);
 }
+/**
+ * DO THESE LENSES BROADCAST AT ALL (reporter's ruling 2026-09-17,
+ * eJANPpm7qCaCAJBJw)?
+ *
+ * The ruling was "default security devices to have this attribute of
+ * 'off'", and then the correction that keeps it from being a blanket:
+ * "not ALL cameras need to be slaved to a host -- a mom and pop store
+ * can have a wireless camera."
+ *
+ * So the master decides, and it is the same test cameraMasterHost
+ * already answers. A cluster wired into a site's network is part of the
+ * security plant and comes up DARK -- no icon on the grid, nothing to
+ * sweep for, not even a "something is running silent here". A cluster
+ * with no host anywhere is the corner shop's lens on a cheap radio, and
+ * it keeps broadcasting, because the radio is the only way it reaches
+ * the owner's commlink at all.
+ *
+ * `Room.camerasWireless` overrides in either direction, for the corp
+ * floor that wants a visible decoy or the shop with a hardwired DVR.
+ *
+ * NONE OF THIS TOUCHES THE LENS. It is still bolted to the wall, still
+ * seen by eyes, still shot, still looped once you own the host, and
+ * still cabled into by `tap` in the flesh -- p.421 takes away WIRELESS
+ * hacking and a filament is not wireless.
+ */
+export function camerasBroadcast(rooms, room) {
+    if (!isWatched(room))
+        return false;
+    if (room.camerasWireless !== undefined)
+        return room.camerasWireless;
+    return !cameraMasterHost(rooms, room);
+}
 /**
  * CAN THIS ACTOR MAKE A DIRECT CONNECTION to the cameras in the room
  * they are standing in (canon p.232 "Direct Connections")? A direct

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/maka-cli",
-  "version": "5.237.0",
+  "version": "5.238.0",
   "type": "module",
   "summary": "A command line tool for scaffolding Meteor 3.x applications using either React.",
   "description": "A command line tool for scaffolding Meteor 3.x applications using React.",