blockyard 0.1.0 → 0.1.2

package/docs/SECURITY.md

@@ -23,8 +23,9 @@ someone using the monitor to make the node do something (prevented: writes are o
 console is read-only behind a default-deny allowlist), someone reading your node's state who
 should not (controlled by where it listens, a CIDR gate, and optional accounts), and the
 monitor leaking information about you to third parties (limited to the on-demand market data
-connections listed below, which you can turn off). The monitor does not hold keys and has no
-wallet access.
+connections listed below, which you can turn off). The monitor does not hold keys, and every
+wallet RPC is refused by name (since 2026-09-16; before that, wallet reads such as
+`listdescriptors` passed the allowlist's `list` prefix, see the audit of that date).
 
 ## Access: sign-in by default, open on request
 
@@ -46,6 +47,7 @@ Open access is still available as a posture you choose: with `auth.enabled: fals
 | peer, mempool, block and transaction detail, the explorer | the audit trail |
 | the read-only RPC console (behind the allowlist) | password changes and sessions |
 | the live Server-Sent Events stream | **every node write**, even if actions are enabled |
+| Display settings (they are normalised before use) | the node connection form, except from this machine's loopback address (`auth.openNodeConfigFromNetwork` widens it) |
 
 The `viewer` ceiling cannot be raised by configuration or by any credential while accounts
 are off. The start-up log states which addresses are readable and how to close them, so
@@ -78,19 +80,30 @@ The last enabled admin cannot be demoted, disabled or deleted.
   routes had no cross-site protection at all. An audit proved it with a working exploit against
   the node-connection test. Open mode now refuses any state-changing request whose `Origin` is
   not this server, or whose `Sec-Fetch-Site` says cross-site. A client that sends neither header
-  (curl, a script) is unaffected: it can already reach the port, and this guards against what a
-  *browser* can be made to do on someone's behalf.
+  (curl, a script) is not stopped by that check, which only guards against what a *browser* can be
+  made to do. So the one form where a script could do real harm, the node connection (a saved
+  address decides where the node's cookie goes after a restart, and its test makes the server
+  connect somewhere), answers only a loopback caller while accounts are off (audit 2026-09-16).
+  A save that moves the node to a different host drops the old endpoint's `rpcUser`,
+  `rpcPassword` and `cookieFile`, and a test of a foreign endpoint reports the kind of failure,
+  never what the endpoint answered.
 - **Brute force**: sign-in is locked after 8 failures in 5 minutes per username and per
   address, for 10 minutes, with the same error and the same hashing time for unknown users
   and wrong passwords. A separate throttle limits sign-in attempts per address, because each
   attempt costs a deliberately expensive hash.
 - **Rate limits** apply per client address.
+- **Slow and stalled clients** cannot hold memory or connections: a request, body included, must
+  arrive within 30 seconds; an event stream whose reader stops reading is sent nothing more until
+  it drains, and is dropped when 4 MB is buffered or it stays blocked for a minute; one address
+  (or account) holds at most 16 streams. Free-form audit fields are clamped to 1,024 characters,
+  so a caller cannot rotate real events out of the trail.
 
 ## Talking to the node
 
 - **Read-only allowlist, default deny.** The RPC console and every internal call go through
-  an allowlist: read-shaped methods are allowed; wallet, key-material, spending, peer-control,
-  chain-mutating and very heavy methods are refused by name — including `getnewaddress` and
+  an allowlist: read-shaped methods are allowed; every wallet method (reads included, since some
+  return private keys), spending, peer-control, chain-mutating and very heavy methods are refused
+  by name — including `getnewaddress` and
   `getrawchangeaddress`, which start with "get" but create keys. Unknown methods are refused.
 - **One request at a time.** The node's RPC server is single-threaded, so the monitor runs a
   single serialized request lane with a minimum spacing, batching, priorities and a stale-drop
@@ -202,7 +215,13 @@ and errors; they never contain passwords, session tokens or RPC credentials.
 ## Hardening checklist
 
 - Run as a dedicated, unprivileged account that can read only the node's cookie and its
-  `blocks/` directory (and log), and write only its own `data/` and the index directory.
+  `blocks/` directory (and log), and write only its own `data/` and the index directory. The
+  shipped systemd unit enforces the write half (`ProtectSystem=strict` with `ReadWritePaths=` for
+  `data/`, `config/` and the index) and drops capabilities, system calls and address families the
+  monitor does not use; add your index directory to it.
+- Point `addressIndex` (or `--out`) at a new or empty directory. The build refuses a symlink, the
+  filesystem root, a home or working directory, the node's blocks directory, and any directory
+  holding files an index does not write; it only ever removes its own files.
 - Bind the narrowest set of addresses that serves your users; add a firewall rule if needed.
 - Turn accounts on if anyone who can reach the port should not see your node.
 - Use HTTPS, a reverse proxy, or an SSH tunnel on untrusted networks.

package/docs/TROUBLESHOOTING.md

@@ -168,17 +168,22 @@ so far and an ETA; the address page repeats it. Things it says, and what they me
   2026-09-15 that fails the build at once with `an index worker exited with code N while on
   {"type":"scan","file":...}` and the flag turns to *build failed*; before that fix the build
   hung there for good. Either way: restart BlockYard with fewer workers (`addressIndexWorkers` on
-  the node entry in `config/local.json`). The build starts over; it is not resumable. The flag
+  the node entry in `config/local.json`). The build resumes with the files it had finished. The flag
   also says **no progress for N min** whenever nothing has moved for two minutes, so a stall is
   visible as one rather than as a stale ETA.
 - **Hours, not minutes** — expect **a few hours**: 29 min 45 s is 16 workers on NVMe, and four
   workers (the installer's default) are roughly four times slower; **spinning disks** are slower still whatever the
   number, and there one worker is the fast setting, because parallel readers only seek against
   each other and against the node. Set `addressIndexWorkers` on the node entry in
-  `config/local.json` (the installer writes the number you gave it) and restart: there is no
-  resume, so the build starts over from the first file.
-- **It started over** — stopping BlockYard stops the build, and the next start begins it again
-  from scratch. Leave it running until the notification says it is done.
+  `config/local.json` (the installer writes the number you gave it) and restart: the build resumes with the files already scanned, and only the rest are read with the
+  new number of workers.
+- **It started over** — a stopped build normally resumes: the log says `address index build:
+  resuming the interrupted build in <dir> at block N` with how much was already done. When it
+  says `discarding the interrupted build … and starting over` instead, the reason follows: the
+  node's chain reorganised below the block the build was working to, the node is behind it (a
+  reindex, or another node), the index format changed with an update, or the journal or a bucket
+  file was damaged. Unfinished work that cannot be proven whole is never used, so the build begins
+  again from the first file.
 - **the address index build failed** — the reason is in the events feed and the log; fix it and
   restart (the server builds again), or run `node scripts/index-build.js --out <dir>` by hand.
   A pruned node, unreadable block files and a full disk are the usual causes.

package/docs/USER-GUIDE.md

@@ -20,6 +20,7 @@ are node actions, which are off unless an operator explicitly enables them (see
 - [Tetrust](#tetrust)
 - [Blockout](#blockout)
 - [Blockanoid](#blockanoid)
+- [Scorched Yard](#scorched-yard)
 - [Wolfenstein 3D](#wolfenstein-3d)
 - [DOOM](#doom)
 - [Quake](#quake)
@@ -408,8 +409,8 @@ page reads **not indexed** and says so in a note with the phase, the progress, t
 and the time left; the Overview's "what this panel cannot tell you" box shows the same line, and
 adds `paused while the node's RPC is slow` whenever the build is holding back so the node keeps
 answering. A notification appears in every open tab when the build starts, when it finishes and
-if it fails; on finish the page fills in with no restart. The build does not resume after the
-server is stopped: the next start begins it again.
+if it fails; on finish the page fills in with no restart. A build stopped with the server
+resumes on the next start from the files it had finished, and its progress picks up from there.
 
 **Without an index configured**, the address and its type are still confirmed
 (`validateaddress` needs none), and balance, totals and history read **not indexed**. It does
@@ -717,6 +718,203 @@ rather than the look, flipping them reaches the game you are playing, not just t
 
 ---
 
+## Scorched Yard
+
+Scorched Earth, the 1991 DOS artillery game, on the block engine: a landscape of dirt cubes that
+craters and falls, tanks that aim by angle and power, wind, and a round that ends when one tank is
+left. Under **Diversions**, after Blockanoid. You play against two computer opponents out of the
+box (**Display settings → Scorched Yard → Computer players** fields up to seven, for the original's
+eight seats). Every personality has its own colour, so you can see who you are up against; a second
+or third of one kind is a lighter or darker shade of it.
+
+The rules are the original's (docs/PLAN-SCORCHED-YARD.md is the whole plan): the manual's roster
+of thirty-three weapons and eleven accessories at the manual's prices, packs and blast radii,
+craters, falling dirt, fall damage, death and its blast, the walls, wind, cash for damage and
+kills, a shop between rounds, and a game of rounds. The manual's eight computer
+personalities take the other seats. The fabulous part is on its way.
+
+### Playing
+
+| Keys | |
+|---|---|
+| **←** **→** or **A** **D** | the barrel's angle, a degree at a time (Shift: five) |
+| **↑** **↓** or **W** **S** | power, ten at a time (Shift: one, Ctrl: a hundred) |
+| **[** **]** or **PgUp** **PgDn** | the weapon, through what you own |
+| **space** or **Enter** | fire |
+| the mouse | drag on the field to aim: the direction from your tank is the angle, the distance the power |
+| **A** **D** | drive a cell left or right, a unit of fuel each |
+| **B** | a battery: 30 health back |
+| **S** | raise a shield (the best you own) |
+| **T** **H** | arm a contact trigger or heat guidance for the next shot |
+| **P** or **Esc** | pause |
+| **N** | the next round, from the shop |
+
+### The roster
+
+You start with the bottomless **Baby Missile** and your cash; everything else is bought. What a
+shell does when it lands:
+
+| weapon | what it does |
+|---|---|
+| Baby Missile, Missile, Baby Nuke, Nuke | a blast: a crater and damage that falls off with distance, from a cell and a half across to eleven |
+| Leap Frog | three warheads, one after another, each blast bigger than the last |
+| Funky Bomb | a blast, then six bomblets thrown out that each blast where they land |
+| MIRV, Death's Head | five (or nine, large) warheads splitting at the top of the arc |
+| Tracer, Smoke Tracer | no crater and no damage: it shows you the wind |
+| Baby Roller, Roller, Heavy Roller | lands and rolls downhill until it meets a tank or the bottom of a dip, then blasts |
+| Riot Charge, Riot Blast | a wedge of dirt cut from the turret along the barrel's line, at once; nobody hurt |
+| Riot Bomb, Heavy Riot Bomb | a shell that clears a sphere of dirt and hurts no one |
+| Dirt Clod, Dirt Ball, Ton of Dirt | a shell that bursts into a ball of dirt |
+| Liquid Dirt | oozes downhill and sets where it pools, filling the holes |
+| Dirt Charge | a wedge of dirt thrown from the turret, at once |
+| Earth Disrupter | every hanging piece of dirt on the field settles, at once |
+| Napalm, Hot Napalm | liquid fire that runs downhill along the surface and burns what it reaches |
+| Baby Digger, Digger, Heavy Digger | digs straight down, then blasts |
+| Baby Sandhog, Sandhog, Heavy Sandhog | tunnels on along its heading through the dirt, then blasts |
+| Plasma Blast | energy thrown from your own tank, its reach set by the power; you are spared, no crater |
+| Laser | a straight line from the barrel, at once: dirt along it goes, a tank on it burns |
+
+The accessories: **Shield**, **Force Shield** and **Heavy Shield** absorb 60, 100 and 150 damage;
+a **Mag Deflector** pushes passing shells away and a **Super Mag** harder and from further; a
+**Parachute** opens when you fall; a **Battery** restores health; **Auto Defense** raises a shield
+for you as your turn begins; a **Fuel Tank** lets you drive; a **Contact Trigger** sets the shell
+off within reach of a tank before it buries; **Heat Guidance** bends the shell toward the nearest
+tank as it falls. The items line under the fire button shows what you carry and what is armed.
+Prices, packs and radii are the manual's (SCORCH.DOC); the original started every player with $0
+and 5% interest, which the settings allow.
+
+### The computer players
+
+![Scorched Yard](images/scorched.jpg)
+
+Out of the box you face a **mix**: every new game deals a Shooter, a Tosser, a Chooser, a Spoiler,
+a Cyborg and a Poolshark in a fresh order, so two opponents are a different pair each time, and up
+to six opponents are all different kinds (a seventh starts a new deal). **Display settings → Scorched Yard
+→ Their kind** fields one kind in every seat instead. They are the manual's eight, and they
+behave as it says:
+
+| kind | colour | how it plays |
+|---|---|---|
+| Moron | yellow | picks an angle and a power, and shoots; buys at random |
+| Shooter | blue | takes low, straight shots when it has a line of fire, and shoots like a Moron when it does not; its aim is rough at first and closes in on the same target |
+| Poolshark | cyan | a Shooter, except that under rubber or spring walls it looks for the bank shot too |
+| Tosser | green | lobs high, then corrects its power from each miss, by halves, until it hits |
+| Chooser | purple | tries the straight shot, the lob and the bank, and takes whichever lands closest; a steadier hand than the Shooter's, not a perfect one |
+| Spoiler | red | works the shot out from the wind and gravity and is nearly perfect |
+| Cyborg | pink | a Spoiler with a grudge: it fires at whoever hit it last, else at the weakest, else at the leader |
+| Unknown | grey | one of the others, drawn afresh each round and never announced |
+
+How often each lands its first shot at a target, measured over hundreds of simulated games: the
+Moron and the Tosser about one in twenty, the Shooter and the Poolshark about one in four, the
+Chooser about two in five, and the Spoiler and the Cyborg about four in five. The Shooter, the
+Poolshark, the Chooser, the Spoiler and the Cyborg aim better with each shot at the same target and
+start afresh each round; the Tosser corrects in its own way. You are orange.
+
+All but the Moron use a battery when hurt and raise a shield before firing, and each shops to its
+own taste between rounds: Shooters buy missiles, Tossers MIRVs and Funky Bombs, Cyborgs the
+Death's Head and the heaviest shields.
+
+### Cash and the shop
+
+Every point of damage you land earns $10, a kill $2,000, and the last tank standing $1,000; interest
+(a setting, 5% out of the box) is paid on what you keep between rounds. When a round ends the
+**shop** opens: every weapon and item with its price and pack size, what you own, and a buy button
+while you can afford it. The computer players shop at the same moment, in their own way. What you
+buy stays with you for the rest of the game.
+
+### The controls
+
+**← →** turn the barrel, **↑ ↓** change the power, and a **held key accelerates**: one a step, then
+two, then five, so crossing the whole arc takes about a second and a half and the last degree still
+takes one press. **Shift** is fine (1° and 1), **Ctrl** coarse (100 of power). **, and .** nudge the
+power by one. The **wheel** over the field changes the power, and with **Shift** the angle. **Click
+the angle or the power** on the panel and type the number. **Drag** on the field to aim; **press on
+your own tank** and drag to turn the barrel without touching the power. **R** fires the last shot
+again, exactly.
+
+**Correcting.** Click an enemy tank to mark it (a red ring goes under it; click it again to clear).
+After your next shot the panel says how it did against that tank — *10 over*, *6 short*, *close*,
+*hit* — and **C** sets your power to what that miss says it should have been. It works from your
+own last shot, so the wind and the hills are still yours to read; change the angle and it is only
+an estimate. Display settings → Scorched Yard → *Correction helper* turns it off.
+
+**Weapons.** **W** opens a grid of what you own, biggest blast first, with counts and the key for
+each; click one or press its number. **1–9** pick the weapons you own in the shop's order, **Q**
+picks the last one you fired, **[ ]** still cycle. The **fire button names what it will send**
+(*fire · Missile × 5*), and the last of a weapon sold one at a time — a Nuke, a Death's Head —
+**asks once**: the button turns red and says so, and a second press within three seconds sends it
+(*Confirm the last of a weapon* in Display settings).
+
+**The aim guide** draws a ghost of the shell's path while you aim, under this round's wind and
+gravity: by default just the first fifth of the flight, enough to read the lean of the shot without
+giving the landing away. *Aim guide* in Display settings chooses short, the whole flight, or off.
+**Cheat mode** draws the whole flight with a ring where it lands.
+
+**Items** are buttons: click a pill to use a battery, raise a shield or arm a trigger, or press
+**B**, **S**, **T**, **H**; **A D** drive if you have fuel. **Space** or the fire button sends the
+shot; **P** pauses; **N** starts the next round.
+
+**Restart** on the panel (or **F2**) starts a fresh war from round one, whatever the board is doing:
+a war is five rounds, and a player knocked out early should not have to watch the computer finish.
+
+The wind is **simulated air**, behind the land. A small fluid simulation is pushed by the round's
+wind and treats the land as its solid floor, so the air rises over the hills, speeds across the
+crests and rolls into eddies behind them, and it follows the craters as they are blown. You see it
+as thin flow lines, the wind-map kind: each one the recent path of something weightless carried by
+that air, fading in and out and thinning away at the edges of the field. The sky behind them sways
+very slightly, as if seen through moving air. When the wind changes, the air turns round by its own
+momentum rather than jumping. A row of **chevrons** at the top of the field points the way it
+blows, as many as it is strong, brightest just after a change. A computer player decides its shot
+as its turn begins, and you can watch its barrel swing onto it while it thinks.
+
+**Cheat mode** (a switch on the panel, also under Display settings → Scorched Yard) draws the
+firing solution while you aim: the shell's own path under this round's wind and the game's
+gravity, clipped where it would meet the dirt, with a ring where it lands. It moves as you move
+the barrel or the power, so you can watch the arc bend under the wind. It is the rules' own
+arithmetic, so what it draws is what the shot does.
+
+Over the tank whose turn it is stands the **aim gauge**: a protractor with a tick every fifteen
+degrees, a needle along the current angle whose length is the power, and both numbers at its tip.
+It is dimmed on a computer player's turn, so you can read what it is about to do before it fires.
+
+The HUD shows whose turn it is, the round, the **wind** (an arrow and its strength: it changes
+every turn, and it bends every shot; you can see it too — streaks of moving air run level across
+the sky behind the land, short and slow in a breeze, long and quick in a gale, in three bands of
+depth so the air has thickness; the pennant on every turret streams downwind; and the Earth sky's
+clouds go with it), your angle, power and weapon with its count, and every
+tank's health. **Fire** on the HUD does what space does. A shell that lands carves a circle out of
+the dirt; the blast itself is drawn the way the fireworks are — a white core, a shockwave, sparks
+that curve and trail, and smoke that rises, spreads, drifts downwind and thins; the dirt above the
+crater falls until it rests, and a tank left in the air falls with
+it and is hurt by the fall. A blast hurts every tank in reach, most at its centre. A tank at zero
+health explodes, and its blast can take a neighbour with it.
+
+A round ends when one tank is left (or none); the survivor scores 200, a kill 100, and a tank
+that kills itself loses 50. **Rounds** (a setting, five out of the box) make a game; the highest
+score at the end wins, and your score goes in the high-score table, this browser's.
+
+### The switches on the panel
+
+**Sky** goes round the Galaxy, the Earth and none: the same choice as the **Sky** tab's map. The
+game ships under the Earth, and each round takes its own hour of it, dawn to night, unless **A sky
+per round** is off. **Music** is a march in D minor on oscillators. **Sound** is the shot, the blast, a hit, a
+fall, a death. **Talk** is what the tanks say when they fire, are hit, or die. **Fast** flies
+shells at three times the pace. **Watch** is the attract mode: the computer takes your chair as
+well, so every seat is a computer player and the war runs on by itself — a round rolls into the
+next without waiting at the shop, and when one of them wins the war a fresh one begins. Nothing
+is scored in the high-score table for a war nobody played. Turn it off and the next game seats
+you again; it is also in **Display settings → Scorched Yard → Attract mode**, and it is what to
+leave running on a screen in the corner.
+The rules the original exposed are in **Display settings → Scorched Yard**: the number of
+computer players, the rounds, the **walls** (none loses a shell off the edge, the original's
+default; concrete explodes it there; padded stops it and drops it; rubber bounces it; spring
+bounces it back harder; wraparound brings it in the other side), the **wind** (once a round, which is how it ships: the round's
+direction is drawn when the round starts and held to the end of it, while the strength is drawn
+again for every turn, so the air blows one way and how hard is still something to read before each
+shot; every turn, which is the original's and can turn right around between two shots; every shot;
+or none), **gravity**, the **landscape** the rounds are drawn from (hills, mountains, a valley,
+flat), the **starting cash** and the **interest** rate. They take effect at the next new game.
+
 ## Wolfenstein 3D
 
 The shareware episode of Wolfenstein 3D, **Escape from Wolfenstein**, under **Diversions**, first of
@@ -1159,23 +1357,63 @@ these are the settings that buy it back, roughly most expensive first:
 | **Metallic finish** | *Chrome* mirrors a horizon in every face, and the reflection slides as the blocks move; *satin* is the softer highlight along the lit edge. Needs Metallic sheen on. |
 | **Departures and arrivals** | How blocks leave and rejoin the board on a refresh. |
 | **Depth** | How much height foreshortens, 0 to 0.001. 0 is the flat parallel camera the board shipped with: a cube is the same size however high it flies. Raise it and a cube's top grows a little wider than its base and a flying block swells slightly as it rises. |
-| **Star field** | On by default. The stars twinkle, so the board keeps repainting while they are on; switch it off to save that. What the stars *look* like is the **Sky** tab. |
+| **Sky** | Which sky stands behind the board: the **Galaxy**, the **Earth**, or none. What each sky is made of is the **Sky** tab; this is only the choice, and the Kiosk's left panel follows it. The Galaxy twinkles, so the board keeps repainting while it is up; none saves that. |
 | **Board curve** | How far the board bows toward you. 0 is flat. |
 | **Light** | Where the lamp hangs: *straight above* (the default) lights the whole board evenly, which keeps the front rows as bright as the middle; a corner shades the far slope of the curve and the sides turned away from it. |
 
 ### Sky
 
-One sky, shared by every board that shows stars — so the density you choose applies to Block
-space, Markets and Tetrust alike. Whether a given board shows it stays that board's own switch.
+There are two skies, and every board that has a sky behind it chooses one. The tab opens with the
+map, which is the whole answer to "which settings apply to which panel":
+
+| board | draws |
+|---|---|
+| **Block space** (and the Kiosk's left panel) | Galaxy |
+| **Markets & Price** (and the Kiosk's right panel) | Galaxy |
+| **Tetrust**, **Blockout**, **Blockanoid** | Galaxy |
+| **Scorched Yard** | Earth |
+
+Those are the shipped choices; each row is a select with **Galaxy**, **Earth** and **None**, and
+changing it here is the same setting as the **Sky** row at the top of that board's own tab. The
+games also carry a **sky** button on their panels that goes round the three. Below the map, the
+two skies themselves, each with only its own controls; neither is ever dimmed, because any board
+may be using it.
+
+**The Galaxy** is the star field, BlockYard's own sky: one set of stars shared by every board that
+draws it, so the density you choose applies to Block space, the candles and the games alike.
 
 | setting | what it does |
 |---|---|
+| **Spiral arms** | Lays the stars on slowly turning spiral arms instead of scattering them evenly. One turn takes about a quarter of an hour. |
+| **Arms centre** | Behind the board, or any of the four corners. A corner crowds the bright nucleus there and sweeps the arms across the panel. |
 | **Star density** / **Star brightness** | How many stars (up to 8x the shipped number) and how strongly they burn. |
-| **Spiral galaxy** | Lays the same stars on slowly turning spiral arms instead of scattering them evenly. One turn takes about a quarter of an hour. |
-| **Galaxy centre** | Behind the board, or any of the four corners. A corner crowds the bright nucleus there and sweeps the arms across the panel. |
-| **Nebulae**, **Dust lanes**, **Star clusters**, **Distant galaxies** | The layers of the sky, each its own switch: gas clouds along the arms, dark ribbons on their inner edges, tight knots out in the halo, and small faint galaxies in the deep field behind everything. |
 | **Star colours** | Warm old stars in the nucleus, blue-white young ones in the arms. Off is one colour of starlight. |
 | **Star glints** | The halo and cross glint on the brightest stars. |
+| **Nebulae**, **Dust lanes**, **Star clusters**, **Distant galaxies** | The layers of the sky, each its own switch: gas clouds along the arms, dark ribbons on their inner edges, tight knots out in the halo, and small faint galaxies in the deep field behind everything. |
+
+**The Earth** is a real day drawn from this machine's clock: the sun climbs and sets, the dome
+goes through night, dawn, day and dusk by the sun's height, clouds drift lit from the sun's side,
+the moon rises at tonight's phase, and the stars come out as the sun goes down (the Galaxy's
+density and brightness apply to them; its arms and layers do not, since a spiral over a real night
+is wrong).
+
+- **Clock** — real time, a whole day every 24 minutes (to watch it turn), or a fixed hour to
+  admire; **Fixed hour** is that hour.
+- **Weather** — clear, scattered cloud, overcast, or a storm with rain and lightning; **Cloud
+  cover** overrides the weather's amount, and -1 leaves it to the weather.
+- **Latitude** — with one set, sunrise, sunset and the sun's height follow the real formula for
+  the date (short winter days, the midnight sun); left unset, the day runs six to six.
+- **Sun rays**, **Rainbow** (opposite a low sun, in scattered weather) and **Shooting stars** (now
+  and then, at night) are the touches, each a switch.
+- **Moon** — up every night, highest at midnight and never thinner than a fat crescent (the
+  shipped choice), or on its real track at its real phase, which some nights means no moon at all.
+
+The sun and the moon are drawn in front of the clouds, so neither is lost behind one, and a board
+whose land fills the lower part of the panel sets its horizon where the land is, so they go down
+behind the hills rather than under them.
+
+A board under the Earth plays no idle effects: a supernova over a blue afternoon is wrong, on the
+block board and on the candles alike. Their switches are kept, and the Galaxy gets them back.
 
 ### Space effects and Market effects
 
@@ -1232,7 +1470,7 @@ What the sky is *made of* — density, brightness, nebulae, dust and the rest
 
 ### Blockanoid
 
-The Arkanoid court. **Star field**, **spiral galaxy**, **neon bricks** and **sound effects** are the
+The Arkanoid court. **Sky** (the Galaxy, the Earth, or none), **neon bricks** and **sound effects** are the
 same switches that sit on the game's own panel. Two more are here only, and they change the *rules*:
 
 | setting | what it does |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blockyard",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Live web monitor, 3D block-space viewer, block explorer and markets view for a Bitcoin Core node",
   "license": "Apache-2.0",
   "keywords": [
@@ -21,7 +21,7 @@
   },
   "type": "module",
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=22.2.0"
   },
   "main": "server/main.js",
   "bin": {
@@ -35,6 +35,8 @@
     "config/pool-map.json",
     "systemd/",
     "docs/*.md",
+    "!docs/STATE-*.md",
+    "!docs/PRIVATE-*.md",
     "CHANGELOG.md",
     "SECURITY.md",
     "NOTICE"

package/public/css/app.css

@@ -1818,6 +1818,7 @@ body { font-variant-numeric: tabular-nums; }
 .cfggroup { border: 1px solid var(--line-soft); border-radius: var(--radius); padding: 8px 10px 10px; margin-bottom: 10px; background: var(--bg-2); }
 .cfggroup > h3 { margin: 0 0 4px; font-size: 11px; letter-spacing: .09em; text-transform: uppercase; color: var(--accent); }
 .cfggroup > p { margin: 0 0 8px; color: var(--fg-faint); font-size: 11px; line-height: 1.4; }
+.cfggroup > p.cfgheld { color: var(--warn); }
 /* packed (2026-09-15): rows 5px not 7, hints tighter, and on the effects tabs the switches two across
    with the hint as the row's tooltip */
 .cfgrow { display: grid; grid-template-columns: 1fr auto; gap: 3px 10px; align-items: center; padding: 5px 0; border-top: 1px solid var(--line-soft); }
@@ -1938,6 +1939,92 @@ body { font-variant-numeric: tabular-nums; }
 /* Blockanoid's court is 13 x 26: narrower than Blockout's and taller, which is what gives Vaus a
    court you can dig a channel up the side of. Same furniture, its own shape. */
 .tetcard .treemapwrap.tetwell.banwell { aspect-ratio: 14 / 27; }
+/* SCORCHED YARD's field is 96 x 48, wide and low like the original's 640 x 350 screen: it takes
+   the card's width and its height follows (docs/PLAN-SCORCHED-YARD.md). The page gives the field the
+   first column, as the DOS games do, so the HUD sits beside a field that fills the window's width. */
+#scorched { grid-template-columns: minmax(0, 1fr) 270px; justify-content: stretch; }
+#scorched > .tetcard { min-width: 0; }
+.tetcard .treemapwrap.tetwell.seyard { width: min(100%, calc((100vh - 170px) * 2)); height: auto; aspect-ratio: 2 / 1; }
+/* two canvases stacked: the land under, the actors over, the sky behind both (scorchedyard.js);
+   scaled a little from the bottom centre so the board's own margins leave the frame -- the land
+   meets the bottom edge and runs off both sides, and no sky shows under it (operator, 2026-09-16:
+   "Play field needs to go to the edges") */
+.seyard { overflow: hidden; }
+.seyard canvas { position: absolute; inset: 0; transform: scale(1.085); transform-origin: 50% 100%; }
+/* THE WIND'S OWN PLANE: flat, behind the land, and NOT scaled with the board -- it is not in the
+   scene, it is the air behind it (operator: "drawn behind everything else on a flat plane") */
+.seyard canvas.sywind { width: 100%; height: 100%; transform: none; }
+/* the two numbers a player actually tunes: click one and type it */
+#syStats b.syval { cursor: text; border-bottom: 1px dotted var(--line); }
+#syStats b.syval:hover { color: var(--accent); }
+.syrestart { width: 100%; margin-top: 6px; }
+/* the controls (docs/PLAN-SCORCHED-YARD.md §12): the confirm state, item buttons, the weapon grid, the keys table */
+.syfire.syconfirm { background: var(--bad); border-color: var(--bad); }
+button.sypillbtn { cursor: pointer; font: inherit; }
+button.sypillbtn:hover { border-color: var(--accent); }
+.syweapons { position: absolute; right: 12px; top: 12px; z-index: 4; width: min(360px, 60%); max-height: 70%; overflow: auto; background: rgba(8, 10, 14, .9); border: 1px solid var(--line); border-radius: 6px; padding: 8px; }
+.syweapons.hidden { display: none; }
+.syweaponshead { display: flex; align-items: baseline; gap: 6px; font-size: 11px; letter-spacing: .08em; text-transform: uppercase; color: var(--fg-dim); margin-bottom: 6px; }
+.syweaponshead small { text-transform: none; letter-spacing: 0; }
+.syweaponlist { display: grid; gap: 3px; }
+.syweapon { display: grid; grid-template-columns: 1fr auto auto 1.6em; gap: 8px; align-items: baseline; text-align: left; padding: 4px 6px; background: transparent; border: 1px solid transparent; border-radius: 4px; color: var(--text); font: inherit; font-size: 12px; cursor: pointer; }
+.syweapon:hover { border-color: var(--line); }
+.syweapon.on { border-color: var(--accent); }
+.syweapon i { color: var(--fg-dim); font-style: normal; font-size: 11px; }
+.syweapon kbd { color: var(--accent); font-family: var(--mono); text-align: center; }
+table.sykeys { border-collapse: collapse; width: 100%; }
+table.sykeys th { text-align: left; vertical-align: top; padding: 2px 8px 2px 0; font-weight: 500; color: var(--fg-dim); white-space: nowrap; }
+table.sykeys td { padding: 2px 0; }
+/* the Sky tab's map of boards to skies, and the two headings under it (docs/PLAN-SKIES.md) */
+.skymap { border-collapse: collapse; }
+.skymap th { text-align: left; font-weight: 500; padding: 3px 14px 3px 0; white-space: nowrap; }
+.skymap th small { display: block; color: var(--fg-faint); font-size: 11px; font-weight: 400; }
+.skymap td { padding: 3px 0; }
+.cfghead { margin: 18px 0 6px; padding-top: 10px; border-top: 1px solid var(--line); }
+.cfghead b { display: block; font-size: 13px; letter-spacing: .06em; text-transform: uppercase; color: var(--accent); }
+.cfghead i { display: block; color: var(--fg-dim); font-style: normal; font-size: 12px; margin-top: 2px; }
+.syedit { width: 5.2em; font: inherit; color: var(--text); background: var(--bg); border: 1px solid var(--accent); border-radius: 3px; padding: 0 2px; text-align: right; }
+.syfire { width: 100%; margin: 2px 0 10px; }
+.syfire:disabled { opacity: .45; cursor: default; }
+.sytanks { display: flex; flex-direction: column; gap: 4px; margin-bottom: 10px; font-size: 12px; }
+.sytank { display: grid; grid-template-columns: 10px auto 1fr auto; gap: 3px 7px; align-items: center; padding: 3px 6px; border-radius: var(--radius-sm); border: 1px solid transparent; }
+.sytank.now { border-color: var(--accent); background: color-mix(in srgb, var(--accent) 8%, transparent); }
+.sytank.dead { opacity: .45; }
+.sytank b { font-weight: 600; }
+.sytank meter { width: 100%; height: 9px; }
+.sytank span { font-family: var(--mono); font-variant-numeric: tabular-nums; min-width: 3ch; text-align: right; }
+.sytank small { grid-column: 2 / -1; color: var(--fg-faint); font-size: 10.5px; }
+.sydot { width: 10px; height: 10px; border-radius: 50%; display: inline-block; background: var(--fg-faint); }
+/* what a tank says: a bubble over the field at the tank's place (its position is two custom
+   properties set through the CSSOM, never a style attribute -- the CSP) */
+.sytalk { position: absolute; z-index: 3; left: var(--x, 50%); top: var(--y, 50%); transform: translate(-50%, -100%);
+  padding: 4px 9px; border-radius: 10px; background: rgba(14, 16, 22, .88); border: 1px solid var(--line); color: var(--fg);
+  font-size: 12px; white-space: nowrap; pointer-events: none; }
+.sytalk.hidden { display: none; }
+/* each dot takes its tank's own colour, set through the CSSOM by scorchedyard.js drawTanks (the
+   colour follows the personality, and a class per seat painted the seat's old colour instead) */
+/* the items line: pills, lit when armed */
+.syitems { display: flex; flex-wrap: wrap; gap: 4px; margin-bottom: 10px; font-size: 11px; min-height: 18px; }
+.sypill { padding: 2px 7px; border-radius: 999px; border: 1px solid var(--line); color: var(--fg-dim); }
+.sypill.on { border-color: var(--accent); color: var(--accent); background: color-mix(in srgb, var(--accent) 10%, transparent); }
+/* THE SHOP (M2): in the overlay between rounds, two columns of rows -- name, note, price and pack,
+   what you own, a buy button while you can afford it. Scrolls inside the card on a short window. */
+.syshop { width: min(100%, 980px); max-height: min(66vh, 620px); overflow: auto; text-align: left; background: rgba(8, 10, 14, .92);
+  border: 1px solid var(--line); border-radius: var(--radius); padding: 8px 12px 10px; font-size: 11.5px; }
+.syshop.hidden { display: none; }
+.syshophead { display: flex; align-items: center; gap: 8px; font-size: 12px; letter-spacing: .08em; text-transform: uppercase; color: var(--fg-dim); margin-bottom: 4px; }
+.syshophead b { color: var(--ok); font-family: var(--mono); letter-spacing: 0; text-transform: none; font-size: 13px; }
+.sycols { display: grid; grid-template-columns: 1fr 1fr; gap: 0 18px; }
+.sycols h4 { margin: 6px 0 2px; font-size: 10.5px; letter-spacing: .09em; text-transform: uppercase; color: var(--accent); }
+.syrow { display: grid; grid-template-columns: minmax(0, 1fr) auto auto auto; gap: 1px 8px; align-items: center; padding: 3px 0; border-top: 1px solid var(--line-soft); }
+.syrow b { font-weight: 600; }
+.syrow .syhint { grid-column: 1 / -1; grid-row: 2; color: var(--fg-faint); font-size: 10px; }
+.syrow .syprice { font-family: var(--mono); color: var(--fg-dim); font-variant-numeric: tabular-nums; white-space: nowrap; }
+.syrow .syown { color: var(--ok); font-size: 10.5px; min-width: 5ch; text-align: right; }
+.syrow.poor .syprice { color: var(--fg-faint); }
+.sybuy { font-size: 10.5px; padding: 2px 8px; }
+.sybuy:disabled { opacity: .35; cursor: default; }
+@media (max-width: 900px) { .sycols { grid-template-columns: 1fr; } }
 .tetwell canvas { width: 100%; height: 100%; display: block; background: transparent; border: 0; }   /* the sky shows through */
 /* THE PANEL IS THE SKY (operator: "Have this entire panel filled black and rendering the spiral
    galaxy for this display. Have the text floating over the spiral galaxy, and then the playboard