# Solitaire five-game alpha

Solitaire is an offline-first native Linux alpha for Omarchy Quattro. The
current scope is playable Klondike, Spider, FreeCell, bounded-redeal Pyramid, and
Standard plus optional Ace-King-wrap TriPeaks. It is not a Complete/Verified
Microsoft Solitaire Collection replacement. Exactly one applicable capability row is Complete:
the detached Omarchy launcher. All other applicable rows remain Partial.

## Install the exact accepted Arch package

These commands build and install the exact source accepted on real
Omarchy/Wayland. They require Arch Linux, the base development tools, Cargo,
Git, `fontconfig`, `wayland`, and `libxkbcommon`.

```sh
git clone https://github.com/rohan-patnaik/Solitaire.git
cd Solitaire
git switch --detach 4b31024426b73fafe93597e4cd42312eef2b26b0

revision=$(git rev-parse HEAD)
source_root=$(mktemp -d)
mkdir "$source_root/Solitaire"
git archive "$revision" | tar -x -C "$source_root/Solitaire"
printf '%s\n' "$revision" > "$source_root/Solitaire/.solitaire-source-revision"
source_archive="solitaire-source-$revision.tar.gz"
tar -C "$source_root" -czf "packaging/arch/$source_archive" Solitaire
source_sha256=$(sha256sum "packaging/arch/$source_archive" | cut -d' ' -f1)

cd packaging/arch
SOLITAIRE_SOURCE_ARCHIVE="$source_archive" \
SOLITAIRE_SOURCE_SHA256="$source_sha256" \
SOLITAIRE_EXPECTED_REVISION="$revision" \
  makepkg --cleanbuild --clean --noconfirm
sudo pacman -U ./solitaire-omarchy-0.1.0.r0.g4b31024-1-x86_64.pkg.tar.zst
```

The exact-tip [CI run 32645102863](https://github.com/rohan-patnaik/Solitaire/actions/runs/32645102863)
built, checked, installed, and verified that application revision.
The local evidence package was unsigned; signed checksums and release-upgrade
evidence remain open.

## Install and launch the Omarchy plugin

The root plugin is only a launcher. Install the native package first so that
`solitaire` is on `PATH`, then use the supported Omarchy commands:

```sh
omarchy plugin add https://github.com/rohan-patnaik/Solitaire.git --enable --yes
omarchy-shell shell summon io.github.rohan-patnaik.solitaire '{}'
```

The accepted exact-SHA pass observed the summon returning successfully, the
installed native window appearing, Quickshell remaining responsive, and the
same native process surviving `omarchy restart shell`.

At exact published revision `4b31024426b73fafe93597e4cd42312eef2b26b0`,
isolated live acceptance also exercised both launcher failure branches without
altering the installed package. The missing-binary path visibly delivered
`Solitaire is not installed`; an immediate exit-42 path visibly delivered
`Solitaire could not start`. Both exact notification bodies, diagnostics, exit
statuses, absence of a native process/window, and final cleanup were captured
through the real notification service and an isolated Quickshell. See
[`OMARCHY_LAUNCHER_ACCEPTANCE_4B31024.md`](OMARCHY_LAUNCHER_ACCEPTANCE_4B31024.md).

## Demonstrated alpha workflows

Every game now exposes a shared **Restart deal** action. Focused
display-independent controller evidence progresses each game, restarts its exact
seed/deal number and active options, reopens the atomically replaced mode-0600
save, and preserves both next-deal counter bytes and local statistics. Missing
save locations and stale-writer conflicts retain the current game with explicit
cancel/reload/retry recovery. Restart intentionally starts a fresh replay
history and is not itself an undoable move. The installed keyboard/AT-SPI gate
remains open; see [`RESTART_CURRENT_DEAL_ACCEPTANCE.md`](RESTART_CURRENT_DEAL_ACCEPTANCE.md).

Spider's one-, two-, and four-suit selector now synchronizes both value and
index from a reopened save and reports the active mode separately from a dirty
future choice. Focused controller evidence covers every mode, strict malformed
and 4 KiB hostile values, atomic pending-state preservation, mode-0600 game and
counter files, confirmation, and loader-level reopen. The prior installed
`d20ba41` pass exercised all three modes, keyboard mutation, undo/redo,
save/reopen, and AT-SPI semantics, but the corrected reopened selector mapping
still needs exact-package acceptance under the no-focus boundary. See
[`SPIDER_SUIT_SELECTOR_ACCEPTANCE.md`](SPIDER_SUIT_SELECTOR_ACCEPTANCE.md).

Spider's normal one-suit complete-deal fixture also has a display-independent
process lifecycle gate. A fresh Controller loads the 7/8 save, completes the
final move, persists the one-time profile through undo/redo, and exits; a second
fresh Controller reopens byte-identical 8/8 game and profile files with the
correct selector mapping. This does not substitute for the still-open exact-
package keyboard action, native process/window identity, or AT-SPI live-region
gate. See [`SPIDER_COMPLETE_DEAL_ACCEPTANCE.md`](SPIDER_COMPLETE_DEAL_ACCEPTANCE.md).

Pyramid now offers zero, one, or two stock redeals through a
keyboard/accessibility-declared new-deal control. Focused headless coverage
proves strict selection, bounded exhaustion, undo/redo, dirty confirmation,
mode-0600 save/counter persistence, reopen, and atomic rejection of malformed
and 4 KiB hostile fields. Published builds through `b50faa5` reject and
quarantine zero- or one-redeal saves while preserving source bytes and opening a
fresh deal; two-redeal saves remain compatible. Exact-package selection,
used/maximum display, and AT-SPI input remain open under the no-focus boundary.
See [`PYRAMID_REDEAL_LIMIT_ACCEPTANCE.md`](PYRAMID_REDEAL_LIMIT_ACCEPTANCE.md).

Pyramid deal zero now has a checked-in normal 62-action replay with one exposed
top card and one waste card remaining whose ranks total 13. Production replay
reconstruction and the controller's keyboard-routable final selection/pair
prove the complete status, score, 0600 game/profile persistence, exact one-time
played/won observation, undo/redo idempotence, and loader-level reopen. This is
extended by a bounded display-independent process gate that completes the deal
through a fresh Controller, exits, and proves a second fresh Controller reopens
byte-identical won-game and one-time profile files. This is source-process
candidate evidence; exact installed final-action and process/window identity
remain open. See
[`PYRAMID_COMPLETE_DEAL_ACCEPTANCE.md`](PYRAMID_COMPLETE_DEAL_ACCEPTANCE.md).

TriPeaks offers Standard adjacency and an optional Ace-King wrap rule through a
keyboard/accessibility-declared new-deal control. The existing serialized
option survives atomic checked save/reopen and undo/redo; strict malformed and
hostile requests preserve game, save, counters, and pending state. Exact-package
selection and Ace/King input remain open. Although the serialized schema shape
is unchanged, published builds through `a72f3ce` reject and quarantine a
wrap-enabled save while preserving its source bytes and opening a fresh deal;
do not use those builds to open such a save. See
[`TRIPEAKS_WRAPAROUND_ACCEPTANCE.md`](TRIPEAKS_WRAPAROUND_ACCEPTANCE.md).

TriPeaks deal zero has a checked-in normal Standard replay with 48 legal actions and
one exposed tableau card remaining. Production replay reconstruction and the
controller's keyboard-routable final action prove the complete status, score,
0600 game/profile persistence, exact one-time played/won observation,
undo/redo idempotence, and loader-level reopen. A bounded display-independent
process gate additionally completes the deal through a fresh Controller,
exits, and proves a second fresh Controller reopens byte-identical won-game and
one-time profile files. This is source-process candidate evidence; the exact
installed final transition and process/window identity remain open under the
desktop-safe input boundary. See
[`TRIPEAKS_COMPLETE_DEAL_ACCEPTANCE.md`](TRIPEAKS_COMPLETE_DEAL_ACCEPTANCE.md).

FreeCell now accepts an explicit decimal deal number across the full `u64`
range as well as a separate next-deal action. Focused controller coverage
rejects empty, signed, spaced, non-ASCII, overflowing, and oversized input
before state or persistence changes; exact openings survive dirty-state
confirmation and atomic save/reopen without consuming the durable next-deal
sequence. The visible text field declares keyboard acceptance and an accessible
name, but this workflow still needs exact-package Wayland acceptance. Deal
numbers reproduce this repository's deterministic shuffle and do not claim
interoperability with another product's numbering algorithm.
The desktop-safe source-render boundary and remaining installed input gate are
recorded in
[`FREECELL_NUMBERED_DEAL_ACCEPTANCE.md`](FREECELL_NUMBERED_DEAL_ACCEPTANCE.md).

FreeCell deal zero also has a checked-in normal 105-action replay with only the
King of Spades remaining in free cell 2. Production replay reconstruction and
the controller's keyboard-routable final foundation move prove the complete
status, 0600 game/profile persistence, exact one-time played/won observation,
undo/redo idempotence, and loader-level reopen. A bounded display-independent
process gate additionally completes the deal through a fresh Controller, exits,
and proves a second fresh Controller reopens byte-identical won-game and one-
time profile files. This is source-process candidate evidence; exact installed
final-action and process/window acceptance remain open. See
[`FREECELL_COMPLETE_DEAL_ACCEPTANCE.md`](FREECELL_COMPLETE_DEAL_ACCEPTANCE.md).

The native Klondike new-deal surface now offers draw-one or draw-three with
Standard or Vegas scoring, unlimited, one, or three stock redeals, and Untimed
or Timed play. Vegas starts at -52 and awards five points for each foundation
card. The informational timed clock pauses outside active Klondike, during a
pending deal change, and after a win; it checkpoints through the existing
atomic stale-writer-aware save every 15 seconds and before switching or closing.
Focused coverage proves exact choices and reopen, no pre-boundary write,
counter/profile independence, monotonic undo/redo, and missing-save/conflict
recovery. Time does not alter scoring, and a crash can lose seconds since the
last checkpoint. The selector and clock have not passed the exact-package
Wayland gate. See
[`KLONDIKE_TIMED_PLAY_ACCEPTANCE.md`](KLONDIKE_TIMED_PLAY_ACCEPTANCE.md) and
[`KLONDIKE_REDEAL_LIMIT_ACCEPTANCE.md`](KLONDIKE_REDEAL_LIMIT_ACCEPTANCE.md).

Klondike now also offers a keyboard-focusable Right-handed or Left-handed table
layout for the current process. Left-handed mode exactly mirrors stock, waste,
and foundation geometry without changing pile identities, keyboard order, game
state, persistence, scoring, or replay. The tableau remains unchanged. Focused
geometry tests cover exact mirroring, narrow and negative widths, invalid slots,
and non-finite inputs. The setting intentionally resets after process exit;
persisting it is deferred pending an approved settings-storage design. See
[`KLONDIKE_LEFT_HANDED_ACCEPTANCE.md`](KLONDIKE_LEFT_HANDED_ACCEPTANCE.md).

Exposed Klondike waste and top-tableau cards now distinguish pointer
single-click from double-click with one bounded application-scoped 500 ms Rust
`SingleShot` timer.
Single-click retains select/move behavior; double-click requests one direct suit
foundation move through the existing deterministic action and persistence path.
The captured card label, ephemeral deal-instance token, interaction generation,
and exact source must still match when the callback runs, so stale, overtaken,
hostile, covered, reloaded, or changed-card input fails closed. The timer is
stopped on the second pointer-down, has no idle or repeated wakeups, and cannot
overtake intervening stock, toolbar, pointer, keyboard, or accessibility input.
Both rejected and confirmed close requests invalidate pending gestures before
checkpoint or close handling.
The first click's full identity remains retained across timer cancellation, so a
new card rebound into the same waste/tableau item cannot become the second half
of the gesture, and an unarmed direct double callback fails closed.
Keyboard Enter/Space and
accessibility-default activation remain immediate. See
[`KLONDIKE_DOUBLE_CLICK_ACCEPTANCE.md`](KLONDIKE_DOUBLE_CLICK_ACCEPTANCE.md).

Klondike's existing **Finish safe moves** action now clears stale card
selection and has focused controller evidence for its exact move count, bounded
52-card loop, write-free no-op, checked mode-0600 game/profile save, one-time
win accounting, per-card undo/redo, loader reopen, and stale-writer recovery.
The control accepts no variable-sized input and changes no replay or persistence
schema. Exact-package keyboard/default-action, live-region, AT-SPI,
spoken-output, visible multi-move, pointer/touch, and foreground acceptance
remain open, so affected rows stay Partial. See
[`KLONDIKE_SAFE_FINISH_ACCEPTANCE.md`](KLONDIKE_SAFE_FINISH_ACCEPTANCE.md).

Klondike deal zero also has a checked-in normal 155-action draw-one/Standard
replay with only the exposed King of Diamonds remaining in tableau column 1.
Production replay reconstruction and the controller's keyboard-routable final
foundation move prove the complete status, score, 0600 game/profile
persistence, exact one-time played/won observation, undo/redo idempotence, and
loader-level reopen. A bounded display-independent process gate additionally
completes the deal through a fresh Controller, exits, and proves a second fresh
Controller reopens byte-identical won-game and one-time profile files from a
validated temporary root and nonce. This is source-process candidate evidence;
exact installed final-action and process/window acceptance remain open. See
[`KLONDIKE_COMPLETE_DEAL_ACCEPTANCE.md`](KLONDIKE_COMPLETE_DEAL_ACCEPTANCE.md).

At published revision `4b31024426b73fafe93597e4cd42312eef2b26b0`
(tree `54d9c6ee27c9e0839e21579aac8a918549a4dbc1`), the exact plugin's normal,
missing-binary, and immediate-startup-failure paths passed live Omarchy/Wayland
acceptance. Together with the earlier accepted supported summon and shell
restart, this makes only the detached launcher workflow Complete.

At published revision `d20ba4111deb2e948e593fbeec4ca2c45b597bef`
(tree `d01c6f635bfb73e0e47838ac3f0287c6889c1069`), a focused installed-package
pass accepted keyboard stock deal, undo/redo, save/reopen, and AT-SPI identity
and action semantics in Spider one-, two-, and four-suit modes. It also accepted
the dedicated long-status surface visually, by keyboard, and through AT-SPI at
1180x820. The exact package was `solitaire-omarchy 0.1.0.r0.gd20ba41-1`;
`pacman -Qkk` reported nine files and no altered files. Exact observations and
remaining boundaries are recorded in
[`OMARCHY_WAYLAND_ACCEPTANCE_D20BA41.md`](OMARCHY_WAYLAND_ACCEPTANCE_D20BA41.md).

At published revision `f6b0cb7e55d296bdf77714efc48a1775b858c041`
(tree `7d3118ed8a6ab81239ed15ffcfc9e3095d2d1097`), exact-tip CI
[run 32591449130](https://github.com/rohan-patnaik/Solitaire/actions/runs/32591449130)
and real Omarchy/Wayland acceptance demonstrated:

- Installed legal mutation and save/reopen for all five games.
- Real keyboard navigation/activation, visible focus, and AT-SPI names, states,
  actions, and changing live-region names across the exercised surfaces.
- Undo/redo in Klondike, a Spider stock deal, a legal and an illegal FreeCell
  move, and stock draws in Pyramid and TriPeaks.
- Per-game anonymous device-local `deals played` counters without duplicate
  counting after undo/redo or reopen.
- Mode-0600 game/profile saves, malformed-profile quarantine with byte
  preservation, stale-writer conflict reporting, a dirty close guard, and
  explicit reload recovery.
- Plugin installation and summon, shell-restart survival, and clean native
  shutdown without creating normal user data during the launcher-only pass.

The installed package was `solitaire-omarchy 0.1.0.r0.gf6b0cb7-1`; its source
revision marker contained the full SHA, and `pacman -Qkk` found no altered
package files.

## Privacy and offline behavior

- Runtime play requires no account, login, telemetry, advertising service,
  hosted service, or cloud connection.
- Game saves and the anonymous local played/won counters stay under
  `$XDG_DATA_HOME/solitaire`, or `~/.local/share/solitaire` when
  `XDG_DATA_HOME` is unset.
- Named profiles, cloud identity, synchronization, import/export, and
  cross-device semantics are not implemented.
- Network access is needed to clone/download installation inputs. It is not a
  runtime gameplay dependency.

## Known alpha limits

- No five complete wins were played through the installed UI. Normal
  Klondike, FreeCell, TriPeaks, and Pyramid complete-deal transcripts plus the
  normal one-suit Spider transcript now prove all five final controller
  lifecycles, but the installed win transitions,
  remaining rule variants and installed selectors, broader hostile/property tests, drag/touch behavior,
  solver-grade FreeCell hints, Pyramid solvability metadata, and installed
  TriPeaks rule selection remain incomplete or unverified.
- The shared restart-current-deal control is automated source evidence only;
  exact-package keyboard activation, AT-SPI semantics, status, and save/reopen
  remain pending under the no-focus boundary.
- Klondike timed play is automated source evidence only. Exact-package timing
  selection, visible progression, AT-SPI state/value updates, pause behavior,
  and checkpoint/reopen remain pending. Time bonuses and penalties are not
  implemented.
- Klondike handed-layout selection is automated source evidence only.
  Exact-package keyboard input, visual mirroring, AT-SPI value/state updates,
  narrow-window interaction, and foreground preservation remain pending.
- Klondike double-click is automated source evidence only. Exact-package
  pointer timing, stale-card recovery during a pending click, touch double tap,
  visible focus, AT-SPI updates, and foreground preservation remain pending.
- Orca was not installed. AT-SPI was inspected, but spoken screen-reader output
  was not accepted.
- Long malformed-save and conflict messages use a dedicated full-width,
  character-wrapped, vertically scrollable display-only live region. Exact
  package acceptance at `d20ba41` confirmed the complete text was visually and
  programmatically reachable at 1180x820, recovery controls remained in their
  keyboard order, and a subsequent short status returned to view. Full
  keyboard-only traversal and spoken screen-reader acceptance remain pending.
- Achievements are deferred. There is no achievement taxonomy, named profile,
  streak system, import/export, sync, or multi-process merge.
- Cross-file transactions, crash injection, power-loss recovery, gamepad
  acceptance, signed checksums, SBOM, and package reproducibility evidence
  remain open.

The earlier focused launcher/profile acceptance record remains available in
[`OMARCHY_WAYLAND_ACCEPTANCE_1595FB0.md`](OMARCHY_WAYLAND_ACCEPTANCE_1595FB0.md).