DM Screen: a GM panel that unfolds out of a falling-apart d20

[keyxmakerx]

Requested by Key Maker · project thread

Fixes #975
Security implication: two new owner/scribe-only routes (GET panel, POST reveal). Reveal can only make an NPC or creature in the same campaign visible; it never hides anything and refuses other entity types and other campaigns. The downtime switch reuses the existing owner-only Armory endpoint.
Consumer-verified: the downtime buttons post open to the existing POST /campaigns/:id/armory/downtime; the panel refreshes on that endpoint's existing armory-moved HX-Trigger.
Mockup: signed Sign-offs card mock-dm-screen (rounds 1–3, round 3 approved "Yes, build it like this"); mockup at https://claude.ai/artifact/HZsaAMnxuW4RvEyR71u9tB

What this changes

Owners and scribes get a tri-fold icon in the campaign header, just before the avatar. Clicking it rolls a d20 to the middle of the screen. The die falls apart into pieces that drop, bounce off the floor and walls, and settle and fade, and the DM Screen unfolds out of it. Clicking anywhere or pressing Escape skips the whole animation, and reduced-motion users get a plain fade. On the panel:

• Left leaf: the game state switch (downtime or adventuring, which only the owner can flip), the pending requests count, and the in-world date, time and weather.
• Middle leaf: the party, showing each hero's meters.
• Right leaf: a searchable conditions lookup and a list of hidden NPCs, each with a Reveal button.
• Top strip: the next game night with its RSVP tally, and whether Foundry is connected.

The party meters and conditions come from the game system package, as Key Maker asked. This PR adds a new optional dm_screen block to the system manifest. In it, a package names up to six meters by field key (current/max, warn threshold) and a reference category for the conditions lookup. Until a package ships the block, the panel says "{System} doesn't fill in hero numbers yet" and leaves the Rules tab out.

Signed off: the folded heroes (with class and conditions, and the open hero always shown whole) were approved on the Sign-offs card mock-dm-fold round 2.

Why

#973 (parent). Key Maker asked for a GM control panel opened from the top right with a distinctive effect. The plugin follows T-B2: internal/plugins/dmscreen depends only on source interfaces, and the adapters over armory, calendar, sessions, entities, campaigns and the Foundry presence hub live in internal/app/dm_screen_adapters.go. Each source is optional; a failing one drops its section with a log line instead of failing the panel.

Load-bearing lines:

• internal/plugins/dmscreen/routes.go: both routes are RequireAuth + RequireCampaignAccess + RequireRole(RoleScribe), and the service re-checks the role.
• internal/app/dm_screen_adapters.go Reveal: checks the campaign and that the type is an NPC/creature, then calls the new idempotent EntityService.SetPrivateInCampaign(..., false). The toggle isn't used, so a double-click can't re-hide.
• internal/systems/manifest_dm_screen.go: validation of the new manifest block.
• internal/plugins/armory/routes.go: new AddonSlug constant so the adapter doesn't repeat the plugin name (plugin-isolation guard).

Honest deviations from the signed mockup, each with its follow-up (on the Sign-offs small-differences card diff-dm-screen):

• No time-step chips (+1 hour / +1 day yet). Advancing the calendar is still blacked out during the calendar rebuild (Calendar V5: requirements and lessons carried over from the v4 calendar #741). DM Screen: time-step buttons (+1 hour, +1 day) #990
• No "who's online on the site" names. Only Foundry presence is shown. DM Screen: show who's online on the site #991
• No notes tab yet. It will be an ordinary GM-only Chronicle note linked to the game night, agreed with the Player notes thread. DM Screen: notes tab #992
• Requests are shown as a count with a link to the Stashes page, not approved inline. DM Screen: approve stash requests inline #993
• No focus trap inside the open panel. Escape closes it and focus returns to the icon.
• The Foundry version of the panel is module fix: add reorg button to sidebar drill panel + fix grid view icon #122, after the sync rebuild.
• The hidden-characters list reads the 50 most recently updated per type, so very large campaigns can miss older hidden NPCs (DM Screen: hidden-characters list can miss older hidden NPCs #995).

Package halves: keyxmakerx/Chronicle-Draw-Steel#70 and keyxmakerx/Chronicle-DnD-5.5e#5 add the dm_screen block; both validated with this branch's ValidateManifest.

Test plan

• go build ./... and go vet ./...: clean.
• go test ./... -short -v (after merging the latest main): 3,179 passed, 92 skipped, 0 failed.
• New tests: internal/plugins/dmscreen (service roles, downtime toggle rights, meters, conditions, failing sources, reveal; panel render), internal/systems (manifest dm_screen validation), internal/app (reveal never hides, never crosses campaigns, refuses non-NPC types; night label), internal/plugins/entities (SetPrivateInCampaign set-not-toggle and campaign guard).
• Route and sanitize snapshots regenerated: +2 routes, +1 service.
• make test-js: 361 passed, 0 failed.
• Guards: plugin-isolation, migration-immutability, page-scripts, widget-mounts, templ-packages, customize-discipline and no-instance-hostname all pass. motion-discipline had nothing to check.
• golangci-lint: not run locally (the installed binary is older than the module's Go version). CI runs it.
• UI: tried in headless Chromium at 1200px and 400px against a local harness. The roll, break-apart and bounce, unfold, click-to-skip, Escape and close-back-to-icon all work, nothing is left behind after closing, and reduced motion gets a fade. Not yet tried on a live server.

Tenet self-check

• T-B1 security: role-gated routes, CSRF on both POSTs, reveal-only and campaign-scoped writes, all text escaped by templ.
• T-B2 plugin isolation: the plugin talks to others only through interfaces wired in internal/app, with no new plugin-name literals.
• T-B3 production UI: opening, skip and closing transitions; a loading state while the panel fetches; a toast if it fails; reduced motion respected; dialog role and labelled buttons.
• T-B4 docs: internal/plugins/dmscreen/.ai.md.

Stop-and-flag

If during review you find this PR violates a tenet that the author missed, flag it explicitly in a review comment citing the tenet by number.

🤖 Generated with Claude Code

https://claude.ai/code/session_011hzkeAmSZQx5cQw5QL3ngM

---

Generated by Claude Code

---

Generated by Claude Code