@maka/maka-cli 5.237.0 → 5.239.0

package/bundle/typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/maka-cli",
-  "version": "5.237.0",
+  "version": "5.239.0",
   "type": "module",
   "summary": "A command line tool for scaffolding Meteor 3.x applications using either React.",
   "description": "A command line tool for scaffolding Meteor 3.x applications using React.",

package/bundle/typescript/src/commands/game/sideQuest/commands/enter-host.js

@@ -1,6 +1,6 @@
 import { Command } from './command.js';
 import { movePersonaWith } from '../utilities/matrix-roster.js';
-import { resolveHostInReach, hostsInReach, gridVicinity, hostOver } from '../utilities/grid-reach.js';
+import { resolveHostInReach, hostsInReach, gridVicinity, hostOver, hostDoorOpenFor } from '../utilities/grid-reach.js';
 import { hint } from '../utilities/hints.js';
 import { hostLabel } from '../utilities/grid-names.js';
 import { billAction } from '../utilities/action-cost.js';
@@ -61,11 +61,21 @@ export class EnterHostCommand extends Command {
         // actions to get a mark has bought the door, and charging them a
         // test here would be inventing a rule the book explicitly denies
         // ("There is no test involved").
-        const marks = target.hostMarksBy.get(actor.name) ?? 0;
-        if (marks < 1 && !target.hostCracked && !target.hostSanctioned) {
+        //
+        // AND IT IS THE ONLY GATE (DxfeZTBrP6Bu7MLF4). It used to read `||
+        // hostCracked`, which is the SITE's state and never expires -- see
+        // grid-reach.ts hostDoorOpenFor for why that was a door nobody could
+        // ever close again. A persona whose keys are gone gets its own line:
+        // the wreckage it can see from out here is real, and saying "doesn't
+        // know you" about a node it personally tore open would read as the
+        // engine forgetting the last ten minutes.
+        if (!hostDoorOpenFor(target, actor)) {
+            const wrecked = target.hostCracked;
             return [
-                `{light-blue-fg}${hostLabel(target, { capital: true })} doesn't know you. Its architecture has no door shaped like your icon.{/light-blue-fg}`,
-                hint(`A host opens to anyone holding a MARK on it (p.239) -- "mark ${target.name}" softens it, or "hack" takes one by force.`),
+                wrecked
+                    ? `{light-blue-fg}${hostLabel(target, { capital: true })} is still hanging open where you broke it -- and it does not know YOU. Your keys are out of the lattice; the architecture has nothing shaped like your icon to open for.{/light-blue-fg}`
+                    : `{light-blue-fg}${hostLabel(target, { capital: true })} doesn't know you. Its architecture has no door shaped like your icon.{/light-blue-fg}`,
+                hint(`A host opens to anyone holding a MARK on it, and marks die with the session you placed them in (p.239, p.236) -- "hack ${target.name}" keys it quietly, "force ${target.name}" takes one loud.`),
             ].join('\n');
         }
         // A Complex Action (p.239) -- billed only inside a Combat Turn.

package/bundle/typescript/src/commands/game/sideQuest/commands/hack.js

@@ -179,6 +179,22 @@ export class HackCommand extends BypassCommand {
                 const roster = names.length > 0
                     ? ` In reach: ${names.slice(0, 8).join(', ')}${names.length > 8 ? `, and ${names.length - 8} more` : ''} -- "${this.verbName} <name>" reaches one from here (Tab completes it).`
                     : '';
+                // AND IF THEY NAMED SOMETHING THAT IS SIMPLY DARK, SAY SO
+                // (reporter's ruling 2026-09-17: slaved security gear comes up
+                // with its radio off). A player who types "hack keypad" has read
+                // the keypad off the room's own prose with their eyes; the grid
+                // genuinely has nothing by that name, and "no host, no PAN, no
+                // camera" is a true sentence that answers the wrong question and
+                // teaches nothing. This is the one moment the difference between
+                // HIDDEN and DARK is worth spelling out, and it is also the only
+                // place a decker on a fully hardwired site would otherwise never
+                // meet the verb that still works.
+                const dark = named
+                    ? (this.actor.bodyRoom ?? this.actor.currentLocation).devices.find(d => d.rating > 0 && !d.broadcastsAro() && d.name.toLowerCase().includes(named.toLowerCase()))
+                    : undefined;
+                if (dark) {
+                    return `${dark.name} has NO RADIO -- it is wired into this place, not broadcasting, and the grid cannot see it at all (p.421). Nothing you do out here will reach it.${hint(` (p.421 takes away WIRELESS hacking, not the port: "jack out", walk to it, and "tap ${dark.name}" -- a cable beats its master's ratings and a mark on a slave is a mark on the host.)`)}`;
+                }
                 return named
                     ? `Nothing on the grid answers to "${named}" -- no host by that name, no PAN, no camera.${roster}`
                     : `Thin grid out here -- no host node hangs over ${gridVicinity(this.actor).name}.${roster}`;

package/bundle/typescript/src/commands/game/sideQuest/commands/look.js

@@ -1,5 +1,5 @@
 import { whereIsThat } from '../utilities/matrix-roster.js';
-import { resolveHostInReach, roomsInReach, noiseNote, gridVicinity } from '../utilities/grid-reach.js';
+import { resolveHostInReach, roomsInReach, noiseNote, gridVicinity, hostDoorOpenFor } from '../utilities/grid-reach.js';
 import { perceptionTest } from '../utilities/perception.js';
 import { matchesHostName, matchesCameraName, hostLabel } from '../utilities/grid-names.js';
 import { Door } from '../models/door.js';
@@ -392,7 +392,7 @@ export class LookCommand extends Command {
                 return `That file is on the ${room.offlineServer} -- a box with no Matrix presence. Nothing out here reaches it; your body has to be in ${room.name} (p.233).`;
             }
             if (reach === 'enter') {
-                return `That file is INSIDE the host -- from out on the grid you have its shell and nothing through it (p.246). ${(room.hostMarksBy.get(this.actor.name) ?? 0) > 0 || room.hostCracked ? `"enter" to go in.` : `A mark opens the door: "hack ${hostLabel(room)}" (quiet) or "force ${hostLabel(room)}" (loud), then "enter".`}`;
+                return `That file is INSIDE the host -- from out on the grid you have its shell and nothing through it (p.246). ${hostDoorOpenFor(room, this.actor) ? `"enter" to go in.` : `A mark opens the door: "hack ${hostLabel(room)}" (quiet) or "force ${hostLabel(room)}" (loud), then "enter".`}`;
             }
             // The host's seal covers the HOST's archive. A file on an offline
             // server is not in there -- cracking the building's host does

package/bundle/typescript/src/commands/game/sideQuest/commands/take.js

@@ -1,6 +1,6 @@
 import { Command } from './command.js';
 import { whereIsThat } from '../utilities/matrix-roster.js';
-import { gridVicinity } from '../utilities/grid-reach.js';
+import { gridVicinity, hostDoorOpenFor } from '../utilities/grid-reach.js';
 import { fileReach } from '../utilities/planes.js';
 import { canReach, ensureAtSpot, sealedRouteTo } from '../utilities/spots.js';
 import { hint } from '../utilities/hints.js';
@@ -143,7 +143,7 @@ export class TakeCommand extends Command {
                 return `Those files are on the ${room.offlineServer} -- off the network entirely. No persona reaches that box; your BODY has to be in ${room.name} (p.233).`;
             }
             if (reach === 'enter') {
-                return `Those files are INSIDE the host, and you're out on the grid looking at its shell (p.246). ${room.hostMarksBy.has(this.actor.name) || room.hostCracked ? `"enter" first.` : `Get a mark on it and "enter" -- or "hack" your way in.`}`;
+                return `Those files are INSIDE the host, and you're out on the grid looking at its shell (p.246). ${hostDoorOpenFor(room, this.actor) ? `"enter" first.` : `Get a mark on it and "enter" -- or "hack" your way in.`}`;
             }
             // Same split as look.ts: the host's seal does not reach a box that
             // is not on the network. The air gap IS the server's security.
@@ -291,7 +291,7 @@ export class TakeCommand extends Command {
                 if (far.reach === 'offline')
                     return `${far.item.name} is on the ${far.room.offlineServer} in ${far.room.name} -- an offline server, off the network entirely. No persona reaches that box; your BODY has to be in ${far.room.name} (p.233).`;
                 if (far.reach === 'host')
-                    return `${far.item.name} is INSIDE ${far.room.name}'s host, and you're out on the grid looking at its shell (p.246). ${far.room.hostMarksBy.has(this.actor.name) || far.room.hostCracked ? `"enter ${far.room.name}" first.` : `Get a mark on it and "enter" -- or "hack" your way in.`}`;
+                    return `${far.item.name} is INSIDE ${far.room.name}'s host, and you're out on the grid looking at its shell (p.246). ${hostDoorOpenFor(far.room, this.actor) ? `"enter ${far.room.name}" first.` : `Get a mark on it and "enter" -- or "hack" your way in.`}`;
                 if (far.reach === 'open')
                     return `${far.item.name} is loose on the grid -- a dim icon. ${hint(`"download ${far.item.name}" writes it to a chip from here.`)}`;
             }
@@ -337,7 +337,7 @@ export class TakeCommand extends Command {
                 return `The ${item.name} sits on the ${room.offlineServer} -- a box with no Matrix presence at all. No persona reaches it from anywhere: get your BODY into ${room.name} and cable in (p.233).`;
             }
             if (reach === 'enter') {
-                return `The ${item.name} is INSIDE the host -- you're on the outside grid, reading its shell (p.246). ${(room.hostMarksBy.get(this.actor.name) ?? 0) > 0 || room.hostCracked ? `"enter" first.` : `Get a mark on it and "enter" -- or "hack" your way in.`}`;
+                return `The ${item.name} is INSIDE the host -- you're on the outside grid, reading its shell (p.246). ${hostDoorOpenFor(room, this.actor) ? `"enter" first.` : `Get a mark on it and "enter" -- or "hack" your way in.`}`;
             }
             // A LOOSE END IS ERASED, NOT CARRIED (win-condition-seed.ts 'erase',
             // 2026-09-14): pulling the footage down to a chip leaves the desk's

package/bundle/typescript/src/commands/game/sideQuest/commands/tap.js

@@ -106,7 +106,11 @@ export class TapCommand extends Command {
             return this.nothingNamed(room, named);
         }
         if (!isWatched(room)) {
-            return `No cameras in here to cable into.${hint(` (Your overlay tags them "◎ Camera cluster" when there are.)`)}`;
+            // NOT "your overlay tags them", which stopped being true when
+            // slaved lenses went dark (reporter's ruling 2026-09-17): a
+            // hardwired cluster has no icon for the overlay to tag. The
+            // housings are a thing the room's prose names and your eyes find.
+            return `No cameras in here to cable into.${hint(` (Look for the housings -- a hardwired cluster shows no icon at all, and still takes a cable.)`)}`;
         }
         // The refusals TEACH (item 9 was a player asking whether the rules
         // allowed this at all) -- each one names what a direct connection
@@ -393,6 +397,16 @@ export class TapCommand extends Command {
         }
         const now = Math.min(MAX_MARKS, held + 1);
         device.marksBy.set(actor.name, now);
+        // YOU CANNOT HOLD A MARK ON AN ICON YOU CANNOT PICK OUT. Every other
+        // route to a mark goes through seeing the thing first -- from the
+        // grid you have to target an icon, and targeting a silent one means
+        // beating it in an opposed Matrix Perception. The cable is the one
+        // route that does not, because it is your hand on the housing rather
+        // than a search. Without this the new verb left a state nothing else
+        // in the game can reach: a device you own and cannot see, invisible
+        // on the grid you just keyed it from. Banked OUTSIDE (p.246), since
+        // what you learned you learned off the object itself.
+        device.markSpotted(actor.name);
         const lines = [
             `{light-blue-fg}The filament finds the connector and ${device.name} stops being furniture -- it's a device, and it's talking to you.{/light-blue-fg}`,
             `  {light-blue-fg}It never gets to hide behind the network: a cable doesn't ask permission, so it has to defend itself on DR ${device.rating} alone (p.233).{/light-blue-fg}`,

package/bundle/typescript/src/commands/game/sideQuest/engine-version.js

@@ -1566,5 +1566,80 @@
 //   hostInteriorIcons listed personas, files and ice and never the WAN,
 //   so a device found in there first appeared when you left. It is
 //   listed inside now, where p.233 puts it.
-export const ENGINE_VERSION = '1.86.0';
+// 1.87.0 (2026-09-17): SLAVED SECURITY GEAR IS DARK, NOT HIDING
+//   (eJANPpm7qCaCAJBJw, reporter's ruling: "If a device isn't running
+//   wireless, it cannot be seen. I assume that security devices, such as
+//   maglocks, cameras, sensors, etc., do not run wireless ... Let's give
+//   devices a 'wireless' setting. Default security devices to have this
+//   attribute of 'off'.")
+//   TWO DIFFERENT ABSENCES, and the whole change is keeping them apart.
+//   RUNNING SILENT (p.235-236) is an icon hiding: a sweep can beat it,
+//   and a lost sweep still reports that something is there. DARK (p.421,
+//   "can no longer be wirelessly hacked") is no icon at all: nothing to
+//   contest, and no hint anything was ever there. Security furniture was
+//   the first; it is the second now.
+//   NOT A BLANKET, per the reporter's own correction: "not ALL cameras
+//   need to be slaved to a host -- a mom and pop store can have a
+//   wireless camera." The MASTER decides. A lock, panel or camera
+//   cluster in a room with a host over it is wired into that site's
+//   network and comes up dark; one with no host over it keeps its radio,
+//   because the radio is the only way it reaches anyone. Seeds override
+//   per device (IDeviceSeedJson.wireless) and per site
+//   (Room.camerasWireless).
+//   AND IT IS NOT A WALL -- the reporter's second correction, which was
+//   also right: "physical contact CAN get access to the host through its
+//   slaved device. Physical is NOT wireless." p.421 takes away WIRELESS
+//   hacking and a filament is not wireless, so 1.86.0's `tap <device>`
+//   still cables a dark maglock, still beats its own DR instead of its
+//   master's (p.233), and the mark it buys is still a mark on the host.
+//   From inside that host you are directly connected to the whole WAN,
+//   radios or not. A dark site is not un-deckable; it is a site you have
+//   to put a body into ONCE.
+//   THE LEAK 1.86.0 PAPERED OVER IS NOW GONE AT THE ROOT. That version
+//   answered "when I leave the host, all slaved devices are
+//   automatically visible" with a second spotted-record per vantage. The
+//   real answer is that there is no sweep inside a host to win: p.233
+//   makes a persona in a WAN "directly connected to all devices in the
+//   WAN", and a direct connection is a LINK, not a search -- the same
+//   reason `tap` reaches a device nobody has ever spotted. The same
+//   relationship cannot mean "you hold a link to it" for the cable and
+//   "now go find it" for the host. So slaved devices are simply present
+//   from inside, nothing is rolled in there, and nothing can be carried
+//   back out. Device.spottedInsideBy and Room.camerasSpottedInsideBy are
+//   retired.
+//   WHERE A DARK DEVICE IS TAUGHT: naming one from the grid used to get
+//   "no host by that name, no PAN, no camera" -- a true sentence
+//   answering the wrong question, since the player read the keypad off
+//   the room with their eyes. It now says the icon does not exist and
+//   names the cable. The AR overlay deliberately says NOTHING: that
+//   surface annotates broadcasts, which is its stated contract, and the
+//   first cut of this violated it.
+// 1.88.0 (2026-09-17): THE DOOR INTO A HOST IS A MARK AND NOTHING ELSE
+//   (DxfeZTBrP6Bu7MLF4, Maka: "I shouldn't be able to re-enter the host
+//   if I have no marks on it"). `enter` accepted Room.hostCracked as a
+//   substitute for the key. That flag is ROOM-GLOBAL and permanent for
+//   the save -- once anybody took a node to three marks its door never
+//   shut again, for anybody. The reporter's own transcript walks it:
+//   three marks forced into the Approach host, cracked, JACK OUT (canon
+//   deletes every mark they placed, p.242), jack back in reading MARKS
+//   0 held -- and straight back inside with the Patrol locking on.
+//   Canon is one sentence (p.239, RAG-checked 2026-09-17): "a host
+//   allows anyone to enter if they've got a mark", marks "only last a
+//   single Matrix session" (p.236), three of them buy nothing that
+//   outlives them, and a host's owner cannot be changed (p.237). This
+//   is 1.56.0's ruling (spcebZTKN24GYRHXW, a cracked host is not a host
+//   you hold marks on) finally applied to the one verb the flag was
+//   actually a door for. The crack's WORLD consequences are untouched:
+//   the vault still hangs open, the archive still reads unsealed, the
+//   maglocks it released stay released -- those are facts about the
+//   site, and the key is a fact about you.
+//   ONE GATE, ONE ANSWER: grid-reach.ts hostDoorOpenFor is now the only
+//   place that decides, and every surface that says "enter" asks it --
+//   the verb, look/take's file refusals, and the grid icon, which used
+//   to print `("enter" walks in)` under a crack and would otherwise have
+//   become an invitation the verb refuses.
+//   THE HAVEN IS THE ONE EXEMPTION and is labelled as an engine ruling,
+//   not canon: a sanctioned host (Room.hostSanctioned, JackPoint) is a
+//   members' place, and membership is the mark.
+export const ENGINE_VERSION = '1.88.0';
 //# sourceMappingURL=engine-version.js.map

package/bundle/typescript/src/commands/game/sideQuest/factories/scene-factory.js

@@ -11,7 +11,7 @@ export const OBJECTIVE_MAX_WEIGHT_KG = 15;
 import { Category } from '../types/shared/item-enum.js';
 import { Logger } from '../utilities/logger.js';
 import { migrateLegacySeed } from './seed-migration.js';
-import { Device } from '../models/device.js';
+import { Device, WIRELESS_OFF_BY_DEFAULT } from '../models/device.js';
 import { fuzzyPickName } from '../utilities/fuzzy-match.js';
 import { adoptSeededIce } from '../utilities/ic-actors.js';
 import { NPC_EQUIP_CATEGORIES, outfitNpcBySlug } from '../npc-kits.js';
@@ -439,6 +439,20 @@ Key Locations: ${json.rooms.map(r => r.name).join(', ')}
                     structure: d.structure,
                     armor: d.armor,
                     footprint: d.footprint,
+                    // THE RADIO, AND WHAT DECIDES IT (reporter's ruling
+                    // 2026-09-17, eJANPpm7qCaCAJBJw). A security device wired into
+                    // a site's network is DARK -- no icon on the grid at all, not
+                    // a hidden one. A standalone one keeps its radio: "not ALL
+                    // cameras need to be slaved to a host -- a mom and pop store
+                    // can have a wireless camera", and the same is true of the
+                    // maglock on a corner shop's back door.
+                    //
+                    // SLAVED means a host stands over its own room, which is the
+                    // same master tap.ts cables through to and the same WAN
+                    // hack.ts reaches from inside. One definition, three readers.
+                    // The seed still overrides either way.
+                    wireless: d.wireless ?? !(roomJson.hasNode === true && WIRELESS_OFF_BY_DEFAULT.has(kind)),
+                    silent: d.silent,
                 });
                 room.devices.push(device);
                 // A seed may declare a device ALREADY OPEN. Applied before the

package/bundle/typescript/src/commands/game/sideQuest/models/device.js

@@ -25,6 +25,33 @@ export const DEFAULT_DEVICE_RATING = {
  * has no wireless mode to hide in.
  */
 export const SILENT_BY_DEFAULT = new Set(['lock', 'panel']);
+/**
+ * WHICH KINDS ARE BORN WITH THE RADIO OFF (reporter's ruling 2026-09-17,
+ * eJANPpm7qCaCAJBJw: "If a device isn't running wireless, it cannot be
+ * seen. I assume that security devices, such as maglocks, cameras,
+ * sensors, etc., do not run wireless ... Let's give devices a 'wireless'
+ * setting. Default security devices to have this attribute of 'off'").
+ *
+ * The setting already existed and every seed left it on. This makes the
+ * security furniture dark by default instead, which is a stronger claim
+ * than running silent and a different one: silent is an icon HIDING
+ * (p.235-236, beatable by Matrix Perception), dark is no icon at all
+ * (p.421, "can no longer be wirelessly hacked" -- there is nothing to
+ * roll against).
+ *
+ * IT IS NOT A WALL, and that is the whole reason the ruling is
+ * affordable. p.421 says WIRELESSLY. A cable is not wireless: `tap
+ * <device>` still cables into a dark maglock in the flesh, still beats
+ * its own DR rather than its master's (p.233), and the mark it buys is
+ * still a mark on the host (p.233, Data Trails p.87-88). From inside
+ * that host you are then directly connected to the whole WAN, radios or
+ * not. So a dark site is not un-deckable -- it is a site you have to
+ * put a body into once, after which everything works.
+ *
+ * `silent` stays set on these kinds too, for the seed that turns a
+ * radio back ON: a device broadcasting again should still be hiding.
+ */
+export const WIRELESS_OFF_BY_DEFAULT = new Set(['lock', 'panel']);
 /**
  * THE BOOK'S BARRIER TIERS (p.197 Barrier Ratings, RAG-checked 2026-09-03):
  * Structure / Armor. Fragile is standard glass; Reinforced is a security
@@ -165,53 +192,50 @@ export class Device {
      */
     spottedBy = new Set();
     /**
-     * SPOTTED FROM INSIDE THE HOST IT IS SLAVED TO -- a separate record,
-     * and the bug that earned it (eJANPpm7qCaCAJBJw, Maka: "Even if I
-     * never see the device ... when I leave the host, all slaved devices
-     * are automatically visible").
+     * IS THIS ICON THERE FOR THIS VIEWER, from where they are standing?
+     *
+     * `inside` means the viewer's persona is inside the host this device
+     * is slaved to, and it is the whole of the difference (Maka, 2026-09-17:
+     * "physical contact CAN get access to the host through its slaved
+     * device. Physical is NOT wireless").
      *
-     * There was ONE set, so a sweep won in either place unlocked both --
-     * and the two places are not the same test. Inside the host you are
-     * directly connected and the slave "cannot use its master's ratings"
-     * (p.233), so it hides behind its bare rating: ONE die for a p.356
-     * camera. Out on the grid it borrows the host's Rating and Sleaze --
-     * nine dice on the reporter's HR 3 bazaar. A one-die win was being
-     * spent to satisfy a nine-die gate, so entering a host and glancing
-     * around lit up every slaved icon on the street outside it.
+     * INSIDE THE WAN THERE IS NOTHING TO FIND. p.233: "if you are in a
+     * host that has a WAN, you are considered directly connected to all
+     * devices in the WAN." A direct connection is a LINK, not a search --
+     * which is exactly why `tap` reaches a device nobody has ever spotted.
+     * The same relationship cannot mean "you hold a link to it" for the
+     * cable and "now go find it" for the host. So from in here a slaved
+     * device is simply present, radio or no radio: the WAN link is the
+     * WIRE, and the airwaves have nothing to do with it.
      *
-     * p.246 is the rule underneath: "the virtual space inside a host is
-     * separate from the outside grid." What you learned in there, you
-     * learned in there.
+     * OUTSIDE IT IS THE AIRWAVES OR NOTHING. No wireless, no icon (p.421:
+     * a wireless-off device "can no longer be wirelessly hacked"). With a
+     * radio it still has to be picked out of the noise if it is running
+     * silent (p.235-236).
      *
-     * IT ONLY RUNS ONE WAY. An OUTSIDE spot beats the harder test, so it
-     * counts inside too (see hasIconFor); an inside spot does not come
-     * back out with you.
+     * THIS IS ALSO WHAT KILLS THE LEAK the reporter found -- "when I leave
+     * the host, all slaved devices are automatically visible" -- and kills
+     * it by construction rather than by bookkeeping. 1.86.0 fixed it with
+     * a second `spottedInsideBy` record so a cheap sweep inside could not
+     * satisfy the dear gate outside. There is no sweep inside any more, so
+     * there is nothing to bank and no second record to keep honest.
      */
-    spottedInsideBy = new Set();
-    /** Is this icon on the grid for this viewer? Wireless and rated (the
-     *  old broadcastsAro question), and either loud or already spotted
-     *  FROM WHERE THEY ARE STANDING -- `inside` means inside the host this
-     *  device is slaved to, where p.233 makes them directly connected. */
     hasIconFor(viewerName, inside = false) {
+        if (inside)
+            return this.rating > 0;
         if (!this.broadcastsAro())
             return false;
-        if (!this.silent)
-            return true;
-        if (this.spottedBy.has(viewerName))
-            return true;
-        return inside && this.spottedInsideBy.has(viewerName);
+        return !this.silent || this.spottedBy.has(viewerName);
     }
-    /** Hidden from this viewer, and therefore worth rolling against. */
+    /** Hidden from this viewer, and therefore worth rolling against. Never
+     *  from inside its own host: see hasIconFor. */
     isHiddenFrom(viewerName, inside = false) {
-        return this.broadcastsAro() && this.silent && !this.hasIconFor(viewerName, inside);
+        return !inside && this.broadcastsAro() && this.silent && !this.spottedBy.has(viewerName);
     }
-    /** Record a sweep this viewer won, on the side of the wall they won it
-     *  (p.246). */
-    markSpotted(viewerName, inside) {
-        if (inside)
-            this.spottedInsideBy.add(viewerName);
-        else
-            this.spottedBy.add(viewerName);
+    /** Record a sweep this viewer won -- or a cable they put into it, which
+     *  teaches the same fact the harder way. */
+    markSpotted(viewerName) {
+        this.spottedBy.add(viewerName);
     }
     /**
      * WHAT IT IS MADE OF (p.197-198): Structure is the condition monitor

package/bundle/typescript/src/commands/game/sideQuest/models/room.js

@@ -82,23 +82,20 @@ export class Room extends AbstractRoom {
      */
     camerasSpottedBy = new Set();
     /**
-     * AND THE SAME SPLIT Device.spottedInsideBy carries, for the same
-     * reason and the same bug. A sweep won INSIDE the host the lenses are
-     * slaved to beats their bare rating -- one die, for a p.356 camera --
-     * while the grid outside asks for the host's Rating + Sleaze. Sharing
-     * one set let the cheap win open the dear door, so stepping into a
-     * host and looking around lit the cameras up on the street when you
-     * came back out. p.246: the two spaces are separate.
-     *
-     * Outward-only, like the device's: an outside spot counts everywhere,
-     * an inside one stays inside.
+     * DOES THIS CLUSTER RUN A RADIO AT ALL (reporter's ruling 2026-09-17,
+     * eJANPpm7qCaCAJBJw)? Unset takes the derived answer in
+     * surveillance.ts camerasBroadcast: slaved to a host means DARK,
+     * standalone means broadcasting -- "not ALL cameras need to be slaved
+     * to a host, a mom and pop store can have a wireless camera". Set it
+     * to force either way per site.
      */
-    camerasSpottedInsideBy = new Set();
-    /** Has this viewer pinned the cluster's icon from where they stand? */
+    camerasWireless;
+    /** Has this viewer pinned the cluster's icon? Inside the host these
+     *  lenses are slaved to, there is nothing to pin: p.233 makes a
+     *  persona in the WAN directly connected to everything on it, which is
+     *  a LINK and not a search. Mirrors Device.hasIconFor. */
     camerasSpottedFor(viewerName, inside = false) {
-        if (this.camerasSpottedBy.has(viewerName))
-            return true;
-        return inside && this.camerasSpottedInsideBy.has(viewerName);
+        return inside || this.camerasSpottedBy.has(viewerName);
     }
     /**
      * WHAT THE LENSES RATE (eJANPpm7qCaCAJBJw, third rejection: "the

package/bundle/typescript/src/commands/game/sideQuest/utilities/ar.js

@@ -1,5 +1,5 @@
 import { isLinked, CALL_COLOR } from './comm-style.js';
-import { isWatched, camerasLive, canSnoopFeeds } from './surveillance.js';
+import { isWatched, camerasLive, canSnoopFeeds, camerasBroadcast } from './surveillance.js';
 import { Category } from '../types/shared/item-enum.js';
 import { hint } from './hints.js';
 import { cameraDrTag, drTagFor } from './grid-view.js';
@@ -143,7 +143,12 @@ export function aroTags(scene, actor, room) {
     // the host, so it shows only to whoever owns the feeds.
     // Same gate as the grid: this overlay draws ICONS, and a camera icon
     // is the first thing p.217 lists as deliberately hidden until spotted.
-    if (isWatched(room) && room.camerasSpottedBy.has(actor.name)) {
+    // A DARK CLUSTER IS CORRECTLY ABSENT, for the same reason a dark
+    // device is (reporter's ruling 2026-09-17): lenses wired into a site's
+    // host broadcast nothing, and this overlay annotates broadcasts. The
+    // housings are still there to be seen and still take a cable -- that
+    // is the meat layer's business, not this one's.
+    if (isWatched(room) && camerasBroadcast(scene.getRooms(), room) && room.camerasSpottedBy.has(actor.name)) {
         const rooms = scene.getRooms();
         // The verb rides the tag: standing in the room IS the requirement
         // for a direct connection (commands/tap.ts), so this is the one
@@ -174,6 +179,17 @@ export function aroTags(scene, actor, room) {
         // (p.217, p.235-236). The OBJECT is untouched: the maglock is still
         // screwed to the door, still described by a meat-world `look`, and
         // still picked, breached, shot and keyed exactly as before.
+        // A DARK DEVICE IS CORRECTLY ABSENT FROM THIS LIST (reporter's
+        // ruling 2026-09-17: slaved security gear comes up with its radio
+        // off). This overlay annotates BROADCASTS -- see the contract at the
+        // top of the file -- and a device with no radio has nothing to
+        // annotate, exactly like a silent PAN or an offline server.
+        //
+        // The first cut of that ruling printed a "NO RADIO" line here on the
+        // grounds that a body has eyes. It does, but this is not the eyes:
+        // the object is named by the room's own prose and worked by the meat
+        // verbs, and commands/bypass-command.ts is where a body is told what
+        // its hands and its cable can reach. Two surfaces, one contract each.
         if (!device.hasIconFor(actor.name))
             continue;
         // THE CABLE IS THE OTHER VERB (eJANPpm7qCaCAJBJw). The overlay

package/bundle/typescript/src/commands/game/sideQuest/utilities/grid-reach.js

@@ -41,6 +41,42 @@ export function hostsInReach(rooms, actor) {
 export function hostOver(room) {
     return room?.hasNode ? room : undefined;
 }
+/**
+ * IS THE DOOR OPEN TO THIS PERSONA -- the one answer, so that the verb
+ * that crosses and every hint that says "enter" cannot disagree
+ * (DxfeZTBrP6Bu7MLF4, Maka: "I shouldn't be able to re-enter the host if
+ * I have no marks on it").
+ *
+ * p.239 is one sentence long: "Marks required 1 ... a host allows anyone
+ * to enter if they've got a mark." RAG-checked 2026-09-17, which also
+ * settles the other half: marks "only last a single Matrix session and
+ * are deleted when you reboot" (p.236), reaching three of them buys
+ * nothing that outlives them, and a host's owner cannot be changed
+ * (p.237) -- so there is no state in canon that stands in for the key.
+ *
+ * WHAT USED TO STAND IN FOR IT. `enter` accepted Room.hostCracked, which
+ * is ROOM-GLOBAL and permanent for the save: once anybody took the node
+ * to three marks, that door never closed again -- not for the decker who
+ * jacked out (canon wipes their marks, p.242) and not for a team-mate
+ * who had never touched it. That is the same confusion 1.56.0 named for
+ * `hack`/`mark` (spcebZTKN24GYRHXW: a cracked host is not a host you
+ * hold marks on) with the one verb the flag was actually a door for left
+ * out. The crack's WORLD consequences are untouched -- a vault hanging
+ * open stays open, its archive stays listed -- because those are facts
+ * about the site and this is a fact about your keys.
+ *
+ * THE HAVEN IS THE ONE EXEMPTION, and it is an engine ruling, not canon:
+ * a sanctioned host (utilities/jackpoint.ts, Room.hostSanctioned) is a
+ * members' place you belong to, and membership is the mark. Labelled
+ * here rather than hidden in a boolean.
+ */
+export function hostDoorOpenFor(room, actor) {
+    if (!room.hasNode)
+        return false;
+    if (room.hostSanctioned)
+        return true;
+    return (room.hostMarksBy.get(actor.name) ?? 0) >= 1;
+}
 /**
  * A host by any name the game shows for it (grid-names.ts), from
  * anywhere on the grid. Bare "host" (or nothing) means the one over the

package/bundle/typescript/src/commands/game/sideQuest/utilities/grid-view.js

@@ -1,10 +1,10 @@
 import { sameHostSide } from '../models/player.js';
 import { personasInside } from './matrix-roster.js';
-import { hostsInReach, hostLine, roomsInReach, gridVicinity } from './grid-reach.js';
+import { hostsInReach, hostLine, roomsInReach, gridVicinity, hostDoorOpenFor } from './grid-reach.js';
 import { NPC } from '../models/npc.js';
 import { hostLabel, hostPurposeFor } from './grid-names.js';
 import { isLinked } from './comm-style.js';
-import { isWatched, camerasLive, canSnoopFeeds, cameraMasterHost } from './surveillance.js';
+import { isWatched, camerasLive, canSnoopFeeds, cameraMasterHost, camerasBroadcast } from './surveillance.js';
 /**
  * The grid's icon inventory for one room -- everything a persona can
  * ACT on, each with its verb (player rulings 2026-08-23/24: "it's hard
@@ -142,7 +142,17 @@ export function gridIcons(scene, actor, room) {
             icons.push(`● ${hostLabel(room, { capital: true })} -- three spheres turning over rooms that were never sold to anyone. You're on the list; nothing here is hunting.`);
         }
         else if (room.hostCracked) {
-            icons.push(`● ${hostLabel(room, { capital: true })}${hr}${purpose} -- cracked open, security in shreds. Whatever it guarded is unsealed, inside. ("enter" walks in)`);
+            // THE WRECKAGE IS THE SITE'S; THE DOOR IS STILL YOURS TO HOLD
+            // (DxfeZTBrP6Bu7MLF4). This line offered `"enter" walks in` on the
+            // room-global crack alone, so a persona whose marks a jack-out had
+            // just wiped (p.242) read an invitation the verb then refused --
+            // or, before the verb was fixed, accepted, which is the report.
+            // Both halves stay true now: the vault hangs open, and the key is
+            // per-persona and dies with the session (p.236).
+            const way = hostDoorOpenFor(room, actor)
+                ? `("enter" walks in on your mark)`
+                : `("hack ${hostLabel(room)}" or "force ${hostLabel(room)}" for a mark -- yours are gone, and a host still asks for one, p.239)`;
+            icons.push(`● ${hostLabel(room, { capital: true })}${hr}${purpose} -- cracked open, security in shreds. Whatever it guarded is unsealed, inside. ${way}`);
         }
         else {
             const myMarks = room.hostMarksBy.get(actor.name) ?? 0;
@@ -337,7 +347,7 @@ export function gridIcons(scene, actor, room) {
     // still described in the meat, and a body still "tap"s one in the
     // flesh -- it is the ICON that takes a Matrix Perception to pick out
     // of the noise (utilities/silent-icons.ts).
-    if (isWatched(room) && room.camerasSpottedBy.has(actor.name)) {
+    if (isWatched(room) && camerasBroadcast(scene.getRooms(), room) && room.camerasSpottedBy.has(actor.name)) {
         const rooms = scene.getRooms();
         if (!camerasLive(rooms, room)) {
             icons.push(`◎ Camera cluster ${cameraDr(room, actor.name)}-- looped on empty hallways. Security sees NOTHING here.${canSnoopFeeds(rooms, room, actor) ? ` ("snoop" rides the feeds you own)` : ''}`);

package/bundle/typescript/src/commands/game/sideQuest/utilities/silent-icons.js

@@ -1,8 +1,8 @@
 import { rollPool, formatRoll } from './dice.js';
 import { deviceHidePool, wanHidePool } from './matrix-intrusion.js';
-import { isWatched, cameraMasterHost } from './surveillance.js';
+import { isWatched, cameraMasterHost, camerasBroadcast } from './surveillance.js';
 import { gridActionModifier, gridNote } from './grids.js';
-function hiddenDevice(device, master, inside) {
+function hiddenDevice(device, master) {
     // p.235-236: the hider rolls LOGIC + SLEAZE. Not Firewall -- that
     // resists an intrusion (p.238/p.240) and has nothing to do with being
     // seen. This used to call deviceDefensePool, the INTRUSION pool, so
@@ -13,11 +13,7 @@ function hiddenDevice(device, master, inside) {
     return {
         name: device.name,
         hide: { pool: hide.pool, label: hide.label },
-        // WHERE THE WIN IS BANKED (p.246). A sweep inside the host beat the
-        // slave's bare rating; the grid outside asks for the master's
-        // Rating + Sleaze. Writing both from one roll is what made
-        // "enter, glance, exit" reveal a street's worth of silent icons.
-        reveal: (viewer) => { device.markSpotted(viewer, inside); },
+        reveal: (viewer) => { device.markSpotted(viewer); },
     };
 }
 function hiddenPersona(actor) {
@@ -38,14 +34,23 @@ function hiddenPersona(actor) {
  * body does.
  */
 export function hiddenIconsIn(scene, room, viewer) {
-    // A device in a room with a host is slaved to it (p.233), and from
-    // the grid it borrows the master's ratings. Inside the host you are
-    // directly connected and it stands alone -- deviceHidePool.
+    // A device in a room with a host is slaved to it (p.233) and borrows
+    // the master's ratings to stay hidden.
+    //
+    // NOTHING IS HIDDEN FROM INSIDE THE HOST. p.233: a persona in a WAN is
+    // "considered directly connected to all devices in the WAN", and a
+    // direct connection is a LINK, not a search -- the same reason `tap`
+    // reaches a device nobody has ever spotted. isHiddenFrom answers false
+    // for every slave in here, so this list comes back empty of devices
+    // and the sweep in there is only ever about PEOPLE.
+    //
+    // That is also what retired the `spottedInsideBy` record 1.86.0 added:
+    // a sweep that cannot happen has no result to keep on the right side
+    // of the wall.
     const inside = !!viewer.hostInside;
-    const deviceMaster = inside ? undefined : room.host;
     const out = room.devices
         .filter(d => d.isHiddenFrom(viewer.name, inside))
-        .map(d => hiddenDevice(d, deviceMaster, inside));
+        .map(d => hiddenDevice(d, room.host));
     // THE CAMERAS, which p.217 names FIRST. They are not a Device -- the
     // cluster is derived from the room (surveillance.ts isWatched) -- so
     // the rating rides the ROOM (Room.cameraRating), seeded per site.
@@ -63,7 +68,13 @@ export function hiddenIconsIn(scene, room, viewer) {
     // could not have reconciled them because two of the three were never
     // printed. One seeded number feeds all three now, so what the player
     // reads is what it rolls (reporter's ruling: per-site, not global).
-    if (isWatched(room) && !room.camerasSpottedFor(viewer.name, inside)) {
+    // A DARK CLUSTER IS NOT HIDING, IT IS ABSENT (reporter's ruling
+    // 2026-09-17). Lenses wired into a site's host broadcast nothing at
+    // all, so there is no icon to contest and not even a "something is
+    // running silent here" -- p.421 leaves a wireless-off device with
+    // nothing to find. camerasBroadcast is the one predicate; the grid
+    // view reads the same one.
+    if (isWatched(room) && camerasBroadcast(scene?.getRooms() ?? {}, room) && !room.camerasSpottedFor(viewer.name, inside)) {
         // THE THIRD CUT, and the reporter found it by doing the arithmetic
         // out loud: "Device Rating + Firewall on the Camera is 2d6? so, the
         // firewall of the host is a 1?" No -- Firewall was never the right
@@ -83,7 +94,7 @@ export function hiddenIconsIn(scene, room, viewer) {
             hide: { pool: hide.pool, label: hide.label },
             // Banked on the side of the wall it was won (p.246), like the
             // devices above.
-            reveal: (v) => { (inside ? room.camerasSpottedInsideBy : room.camerasSpottedBy).add(v); },
+            reveal: (v) => { room.camerasSpottedBy.add(v); },
         });
     }
     for (const a of scene?.allActors ?? []) {

package/bundle/typescript/src/commands/game/sideQuest/utilities/surveillance.js

@@ -46,6 +46,38 @@ export function cameraMasterHost(rooms, room) {
     // site network -- whichever host you own, you own these feeds.
     return Object.values(rooms).find(r => r.hasNode);
 }
+/**
+ * DO THESE LENSES BROADCAST AT ALL (reporter's ruling 2026-09-17,
+ * eJANPpm7qCaCAJBJw)?
+ *
+ * The ruling was "default security devices to have this attribute of
+ * 'off'", and then the correction that keeps it from being a blanket:
+ * "not ALL cameras need to be slaved to a host -- a mom and pop store
+ * can have a wireless camera."
+ *
+ * So the master decides, and it is the same test cameraMasterHost
+ * already answers. A cluster wired into a site's network is part of the
+ * security plant and comes up DARK -- no icon on the grid, nothing to
+ * sweep for, not even a "something is running silent here". A cluster
+ * with no host anywhere is the corner shop's lens on a cheap radio, and
+ * it keeps broadcasting, because the radio is the only way it reaches
+ * the owner's commlink at all.
+ *
+ * `Room.camerasWireless` overrides in either direction, for the corp
+ * floor that wants a visible decoy or the shop with a hardwired DVR.
+ *
+ * NONE OF THIS TOUCHES THE LENS. It is still bolted to the wall, still
+ * seen by eyes, still shot, still looped once you own the host, and
+ * still cabled into by `tap` in the flesh -- p.421 takes away WIRELESS
+ * hacking and a filament is not wireless.
+ */
+export function camerasBroadcast(rooms, room) {
+    if (!isWatched(room))
+        return false;
+    if (room.camerasWireless !== undefined)
+        return room.camerasWireless;
+    return !cameraMasterHost(rooms, room);
+}
 /**
  * CAN THIS ACTOR MAKE A DIRECT CONNECTION to the cameras in the room
  * they are standing in (canon p.232 "Direct Connections")? A direct

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maka/maka-cli",
-  "version": "5.237.0",
+  "version": "5.239.0",
   "type": "module",
   "summary": "A command line tool for scaffolding Meteor 3.x applications using either React.",
   "description": "A command line tool for scaffolding Meteor 3.x applications using React.",