0.7.0:3 — bundle Station Master v0.7.0

The submodule pin is the version; nothing else about the package changed. Four game types in the
lobby, the whole rule set readable before taking a seat, leaving and rejoining a game, and sound in
a multiplayer game for the first time — all upstream, all through the same server this package has
always run.

- startos/versions/current.ts — 0.7.0:3, with release notes in all five languages.
- instructions.md — how a game is set up now, and what Leave / Forget mean for a seat.
- README.md — the bundled version, and a limitation spelled out: a player's identity lives in their
  browser, so a lost token cannot be recovered from this package.
- UPDATING.md — how to pack a test build from work that is not pushed yet, which is how v0.7.0 was
  played before release, and why the downstream digit moves for each one.

The downstream digit is :3 rather than :0 because three test packs were installed on the box while
v0.7.0 was being played; publishing :0 now would be a downgrade it would refuse.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016JczK5i33ZNSf2PtzZqdhS

README.md

@@ -13,6 +13,13 @@ Station Master is a railroad operations board game with an authoritative multipl
 solitaire needs no server and is not what this package is for. This package runs that server —
 the browser client, the lobby, and the intent/SSE API — as a single StartOS service.
 
+**Bundled version: 0.7.0.** The lobby sets a game up from one of four game types (Solitaire, Co-op,
+Competitive, Cutthroat) plus Custom, offers the whole rule set for reading before a seat is taken,
+and lets a player leave a lobby or a running game and come back to it. Sound, the timetable flash,
+announcements and the just-drawn card badge reach a multiplayer client for the first time. None of
+that changes anything this package does: the submodule pin is the version, and the service is the
+same server it always was.
+
 ---
 
 ## Table of Contents
@@ -178,7 +185,14 @@ server resumes every saved game on boot the same way it does after an ordinary r
    visibility into who a player is once they've joined.
 3. **No accounts, and one game at a time per person is expected but not enforced** — a deliberate
    upstream design decision (`docs/architecture/multiplayer.md` §11 D13), not a StartOS-specific
-   limitation.
+   limitation. Since 0.7.0 a browser can hold seats in several games at once and picks between them
+   in the lobby, which is a client convenience rather than a change to that decision.
+4. **A player's identity lives in their browser.** The session token issued at join is the only
+   proof of who a player is; it is kept in that browser's `localStorage` and nowhere else. A player
+   may leave a running game and rejoin it (the lobby lists every game the browser is in), but a
+   token lost with the browser — cleared site data, a different device — cannot be recovered from
+   this package, and the seat stays in the game waiting. Upstream `TODO.md` tracks an
+   administrator-issued rejoin link; it does not exist yet.
 
 ---