v0.8.2 — every district opens on a Depot, and the docs are pages now

A second-digit bump for a playtest read back against the save file. Nine questions
were asked of one three-Day game; three were bugs, three were the rules working
and undocumented, three were decisions. Every save on the test server was replayed
against this build BEFORE release, which is how the cost of each rule was known
before it was chosen rather than discovered after.

EVERY DISTRICT OPENS ON A DEPOT. A Whistle Post has one A/D track and is not a
Passenger Facility, so the opening of every game was spent unable to work a
passenger and one arrival away from a collision. Two A/D tracks and passengers
from Stage 1 now; "Players start with Whistle Posts, not Depots" is the harder
game, set when the game is created. The deck follows the choice — starting on
Depots the four Depot upgrade cards are left out, because an upgrade must be to
the next tier and a Depot card at a table of Depots is a dead draw. How much
easier it is showed up as a test failure rather than an argument: the cue-coverage
pool needed widening from 24 seeded games to 60 before it held one collision.

NO SAVE WAS STRANDED BY IT, which took care. This is the one house rule that
changes how a game is DEALT rather than how it plays, so replaying a save under
the wrong opening is a different railroad from intent one — silently, with no
error. `withSavedOpening` fills it on the replay paths ONLY. Putting it in the
resolver instead made a fresh Cutthroat game deal Whistle Posts and read as
Custom, which is how the distinction was found.

THREE BUGS, ALL REPORTED FROM ONE GAME AND ALL CONFIRMED ON ITS SAVE.

An Office held TWO TRAINS ON ONE A/D TRACK. The capacity test passed with nothing
standing, the train the Interlocking had been holding at the Limits was moved into
the free slot, and the arriving train was pushed in after it without anyone asking
again whether there was room — so the collision §8.3 calls for never happened. The
held train keeps priority; the newcomer now takes the consequence it would have
met had the held train arrived first.

THE HISTORY FROZE, permanently, and the log cap was not really the cause. Each
seat's "what have I sent you" bookmark was an INDEX into an array the game trims,
so once a seat's bookmark reached the limit the slice returned nothing for the
rest of the game — at a different moment per seat, because each holds its own.
That game's log ended at exactly the cap. Lines carry a sequence number now, which
survives trimming; proven by pushing twice the cap through a simulated seat.

§8.1 ASKED THE WRONG QUESTION TWICE. "Trains may pass" returned `clear` before the
Subdivision was looked at, so a train entering a Double Track was released however
busy the rest of it was — that, not anything about Control Points, is what let
Train 8 out with no ruling. And a train standing at an Office was invisible to the
scan, so one about to re-enter the very Subdivision being entered counted for
nothing. Capacity is the test, not presence: a Depot with a track free is not in
the way; a Whistle Post with its one track taken is.

THINGS THAT HAPPENED SILENTLY NOW SAY SO — a train held against a facing one, a
train released from the Limits (a side effect of somebody else's arrival, so it
simply appeared at the Office), and the train an Interlocking is holding, whose
explanatory tooltip has existed since #99 with NO renderer ever reading the flag.

WHERE A MOVE IS REFUSED, AND WHY. `exploreMoves` decides where the rails go and the
pick-up restrictions are enforced afterwards in `check`, so a square the rails
reached and the card forbade was reachable, un-offered, and absent from the block
list with nothing said. Those squares are blocked with the rule that blocks them
now, and the reasons are got by ASKING `check` rather than re-deriving: a second
implementation of the rules is exactly the failure the block list exists to avoid.
A train may also always recover its own caboose — X13 prints "may drop but not
pick up anything", and a train needs its caboose to be made up, so one that parted
with it could never legally leave again.

RULES DECIDED IN SEPTEMBER AND APPLIED HERE. A Modifier must sit square against its
host, no diagonals. A passenger Modifier may not be played at a Whistle Post. Both
were built, measured, held back for a fortnight so a playtest could finish, and
applied now. A Second Section costs its card: `SECOND_SECTION` was declared in
content.ts and never dealt, so the action was free and the bot ordered 26
accidental ones in a measured round. The card is dealt and spent — gating on a card
the deck never holds would have deleted the mechanic rather than fixed it.

THE DOCUMENTATION IS A SET OF PAGES, not five text files served as text/plain — a
card reference is mostly tables, and as plain text a table is rows of pipes.
Markdown is still the one copy; the build renders it, and publishes the .md beside
each page. No Markdown library: this project has no runtime dependencies and one
would be a poor first. The pages add what Markdown cannot carry without drifting —
a nav across the set, a contents list built from the headings actually rendered,
an anchor on every heading, a 70-character measure, and tables that are tables.
They print as ink on paper.

The references caught up with the rules, checked rather than assumed: two
statements had gone from stale to misleading (the Quickstart told a new player to
"get a Depot down as soon as one appears"), and four rules nobody could look up
are written down — the Office tier table, §8.1 in practice, what the Circus Train
pays for, and that a Realignment can be a card with no legal target.

Adding one card to the deck reshuffles every seeded deal, which broke five
fixtures. Each was a seed meaning "a game like this" — TODO #84, exactly — so
seeds moved and pools widened rather than assertions weakening, and the clearance
fixture pins its terrain the way `enhancements.test.ts` already does. The three
published replays were re-recorded.

Closes TODO #40, #42a, #108, #109 and #110.

1046 fast tests and 35 sim tests pass.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MUizFYCMHRWhbWwXhp7WPR

test/setup.test.ts

@@ -7,7 +7,7 @@ import { describe, it } from 'node:test';
 import assert from 'node:assert/strict';
 
 import type { CarType } from '../src/engine/content.ts';
-import { DEFENCE_ONLY_CARDS, DEFENCE_ONLY_COPIES, MODIFIER_PROFILES, OPENING_OTHER, OPENING_TRACK, SOLITAIRE_DECK_SIZE, TRACK_CARDS, TRACK_IN_DECK } from '../src/engine/content.ts';
+import { DEFENCE_ONLY_CARDS, DEFENCE_ONLY_COPIES, MODIFIER_PROFILES, OPENING_OTHER, OPENING_TRACK, SOLITAIRE_DECK_SIZE, TRACK_CARDS, TRACK_IN_DECK, withSavedOpening } from '../src/engine/content.ts';
 import {
   DECK_SIZE,
   EXTRA_TRAINS,
@@ -27,6 +27,7 @@ import {
   nextOfficeTier,
   officeProfile,
 } from '../src/engine/content.ts';
+import { coordKey } from '../src/engine/state.ts';
 import { createRng } from '../src/engine/rng.ts';
 import { buildDeck, buildRollingStock, createGame } from '../src/engine/setup.ts';
 import type { StartingHand } from '../src/engine/content.ts';
@@ -40,6 +41,10 @@ const solitaireConfig: GameConfig = {
   maxCollisionsPerDay: 0,
   maxCollisionsTotal: 0,
   pvpCardsAllowed: false,
+  // These fixtures were written against a Whistle Post opening — one A/D track and no
+  // Control Point — and several of them test exactly that. Named explicitly since the
+  // default became a Depot.
+  houseRules: { startingOffice: 'whistlePost' },
   optionalRules: {
     reducedVisibility: false,
     employeeRotation: false,
@@ -55,7 +60,8 @@ const gameDealtWith = (startingHand: StartingHand, seed = 1234) =>
   createGame({
     id: 'g1',
     seed,
-    config: { ...solitaireConfig, houseRules: { startingHand } },
+    // Spread, not replaced: `solitaireConfig` names the Whistle Post opening these counts assume.
+    config: { ...solitaireConfig, houseRules: { ...solitaireConfig.houseRules, startingHand } },
     playerNames: ['Jesse'],
   });
 
@@ -73,7 +79,7 @@ describe('card catalogue (component 1)', () => {
     // industry tripling (27 → 9) — because both were measured against a deck holding 96 track
     // cards, and sheet 5 halves that. content.ts carries the measurements that decided it.
     //
-    // We are at 143 rather than the sheet's 155 for ONE reason: the ten Safety, Event, Inspection
+    // We are at 144 rather than the sheet's 155 for ONE reason: the ten Safety, Event, Inspection
     // and Space-use cards sheet 5 adds are not built, and stay out until they are (Jesse,
     // 2026-08-26) — Cargo Theft, Civic Improvement, Civilian angel, Delayed Clearance, Flares 2,
     // Robbery, Service Delays, Shipper complaints, Strike, Union Hall 2. Twelve copies in all.
@@ -85,9 +91,9 @@ describe('card catalogue (component 1)', () => {
     // "TBD"; and the sharp curves, whose only difference from an ordinary curve was a Move cost
     // nothing ever charged — sheet 5 deals those zero too, so the catalogue and the design agree.
     //
-    // DECK_SIZE is the CATALOGUE, 143. The deck actually dealt is smaller: the 20 opponent-directed
+    // DECK_SIZE is the CATALOGUE, 144. The deck actually dealt is smaller: the 20 opponent-directed
     // cards are held back in every mode until they are implemented, so `buildDeck` returns 123.
-    assert.equal(DECK_SIZE, 143);
+    assert.equal(DECK_SIZE, 144);
     assert.equal(buildDeck().length, SOLITAIRE_DECK_SIZE);
   });
 
@@ -104,6 +110,8 @@ describe('card catalogue (component 1)', () => {
       industry: 9,
       modifier: 23,
       train: 22,
+      // Q9 — dealt since 2026-09-23, which is what makes `newTrain.secondSection` cost something.
+      secondSection: 1,
       spaceUse: 11,
       // 6 — the dispatching ladder and Facing Point Locks are dealt 0 copies (see
       // ENHANCEMENT_CARDS), and Interlocking, Water column and ABS Signals came down to the sheet's
@@ -123,12 +131,12 @@ describe('card catalogue (component 1)', () => {
     // Q6 took Space-use and Action cards out of solitaire, where they have no legal target. They are
     // now out of the COMPETITIVE deck too, until they are implemented: `checkPlay` answers both
     // categories NOT_IMPLEMENTED, so dealing them would be a dead draw.
-    // 121, not 123: the 20 opponent-directed cards come out, and so do the TWO that exist only to
+    // 122, not 124: the 20 opponent-directed cards come out, and so do the TWO that exist only to
     // answer them — one Water Column and one Overpass. A defence with nothing to defend against is
     // the same dead draw as the attack would be. `SimpleCard.answers` names the pairing, so they
     // return together. It was seven until Gitea#14 dealt Facing Point Locks zero copies: a card at
     // zero is already out, so it no longer needs holding back.
-    assert.equal(SOLITAIRE_DECK_SIZE, 121);
+    assert.equal(SOLITAIRE_DECK_SIZE, 122);
     assert.equal(DEFENCE_ONLY_COPIES, 2);
     for (const c of DEFENCE_ONLY_CARDS) {
       assert.ok(c.answers, `${c.name} is held back without saying what it answers`);
@@ -164,7 +172,7 @@ describe('card catalogue (component 1)', () => {
   });
 
   it('makes track the largest category in the deck', () => {
-    // 48 of 121. Building a district is paid for in the industry or train you did not draw, which
+    // 48 of 122. Building a district is paid for in the industry or train you did not draw, which
     // is the whole reason it matters that track is a card rather than a private supply.
     //
     // This asked for a THIRD of the deck until Gitea#14, which was only ever a rule of thumb. It
@@ -616,3 +624,72 @@ describe('game setup (component 2)', () => {
     );
   });
 });
+
+/**
+ * WHICH OFFICE EVERY PLAYER OPENS ON.
+ *
+ * Jesse's call, 2026-09-23: a Whistle Post has one A/D track and is not a Passenger Facility, so the
+ * opening of every game was spent unable to work a passenger and one arrival away from a collision.
+ * The default is a Depot now; the Whistle Post opening stays as the harder setting.
+ */
+describe('the starting Office, and the deck that goes with it', () => {
+  const withRules = (houseRules: Record<string, unknown>) =>
+    createGame({
+      id: 'so', seed: 7,
+      config: { ...solitaireConfig, mode: 'competitive', houseRules } as never,
+      playerNames: ['A', 'B'],
+    });
+
+  const officeCards = (g: ReturnType<typeof withRules>, tier: string): number =>
+    [...g.cards.values()].filter((c) => c.kind.kind === 'office' && (c.kind as { tier: string }).tier === tier).length;
+
+  it('deals Depots by default, and leaves the Depot upgrades out of the deck', () => {
+    // A Depot card at a table that already has Depots is a dead draw: `check` refuses it, because an
+    // upgrade must be to the NEXT tier. Station and Terminal are still upgrades and stay in.
+    const g = createGame({
+      id: 'd', seed: 7,
+      config: { ...solitaireConfig, mode: 'competitive', houseRules: {} } as never,
+      playerNames: ['A', 'B'],
+    });
+    assert.deepEqual([...g.officeAreas.values()].map((a) => a.tier), ['depot', 'depot']);
+    assert.equal(officeCards(g, 'depot'), 0, 'Depot upgrades are still in the deck');
+    assert.ok(officeCards(g, 'station') > 0, 'Station upgrades were dropped too');
+    assert.ok(officeCards(g, 'terminal') > 0, 'Terminal upgrades were dropped too');
+  });
+
+  it('deals Whistle Posts when the table asks for the harder game, Depot cards and all', () => {
+    const g = withRules({ startingOffice: 'whistlePost' });
+    assert.deepEqual([...g.officeAreas.values()].map((a) => a.tier), ['whistlePost', 'whistlePost']);
+    assert.ok(officeCards(g, 'depot') > 0, 'the Depot upgrade is missing from a Whistle Post game');
+  });
+
+  it('gives a Depot two A/D tracks and a working passenger facility from Stage 1', () => {
+    // This is the whole of why the default moved: one A/D track is what made an arrival a collision,
+    // and a Whistle Post earns nothing from a passenger however well the district is built.
+    const g = createGame({
+      id: 'p', seed: 7, config: { ...solitaireConfig, houseRules: {} } as never, playerNames: ['A'],
+    });
+    const area = g.officeAreas.get(0 as never)!;
+    assert.equal(officeProfile(area.tier).adTracks, 2, 'a Depot should have two A/D tracks');
+    const f = area.grid.get(coordKey(area.officeCoord))!.facility!;
+    assert.equal(f.allows.outbound, true, 'a Depot should board passengers from the start');
+    assert.equal(f.allows.inbound, true, 'a Depot should detrain passengers from the start');
+    assert.ok(f.porters > 0, 'a Depot should have a Porter');
+  });
+
+  it('replays a save written before the setting as the Whistle Post game it was', () => {
+    /**
+     * The one house rule that changes how a game is DEALT rather than how it plays, so replaying it
+     * under the wrong opening is a different railroad from intent one — silently. `withSavedOpening`
+     * fills it for a save that names other rules and cannot name this one.
+     */
+    const saved: { houseRules: { startingHand: 'sixRandom'; startingOffice?: 'depot' | 'whistlePost' } } =
+      { houseRules: { startingHand: 'sixRandom' } };
+    assert.equal(withSavedOpening(saved).houseRules.startingOffice, 'whistlePost');
+
+    // A config that names it is left exactly as it is, in both directions.
+    assert.equal(withSavedOpening({ houseRules: { startingOffice: 'depot' as const } }).houseRules.startingOffice, 'depot');
+    // And a config with no house rules at all is a fresh game, not an old save.
+    assert.deepEqual(withSavedOpening({}), {});
+  });
+});