feat(rust): the live map (phase 14, protocol 11)

PLAN.md §30 as approved, plus D119/D120 from the build.

Server:
- rust_map_images (one row per server: picture as MEDIUMBLOB, geometry,
  monuments, DERIVATION_VERSION) and rust_map_overrides; purge.sql pair.
- mapImages.js: D110. The board poll notices a new boot/wipe/seed/size and
  asks map.info; a new key or hash from the free Rust+ cache (or a render
  kept on disk) is fetched in slices, checked against its SHA-256 and stored
  in one statement. One fetch per server, a backoff on failure, `stale`
  abandons a fetch that straddles a map change. Render now (D109) is
  admin-only and watched to completion.
- mapLive.js: D111. One map.live per server per 5 s whoever asks; positions
  are held in memory only.
- model/map: four layers (world, events public; players, bases staff), a
  fleet default plus per-server override (D114), the players layer capped by
  presence (D113), own dot and online first-party clan mates for a linked
  viewer (D115, D117, D118). A layer the viewer may not see is absent from
  the answer, never sent and hidden.
- Routes: public /servers/:id/map, /map/image (immutable under its hash),
  /map/live; admin /servers/:id/map/fetch and /render; the Map card on the
  visibility PUT. Swagger fragment and frozen manifest regenerated.

Client:
- A Map tab: Leaflet over the picture in CRS.Simple, the game's own grid
  (labels only when a cell is wide enough to hold one), a legend that lists
  hidden layers with who can see them, polled every 10 s while visible.
- D120: Leaflet is a lazy split chunk beside entry.js, not in it. release.yml
  copies every dist/*.js; checkExternals and build.test.js hold both ends.
- The Map card on Admin -> Rust visibility, with Fetch again and Render now.

Capability `map` declared for the Android app (phase 15).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

client/test/build.test.js

@@ -19,7 +19,7 @@ import { fileURLToPath } from 'node:url'
 const HERE = path.dirname(fileURLToPath(import.meta.url))
 const CLIENT = path.resolve(HERE, '..')
 
-const { bareImports, problemsWith } = await import('../scripts/checkExternals.js')
+const { bareImports, problemsWith, relativeImports } = await import('../scripts/checkExternals.js')
 const configModule = await import('../vite.config.js')
 const config = configModule.default
 const { SHARED, SHARED_PACKAGES: guardedPackages } = configModule
@@ -152,3 +152,38 @@ test('an import inside a string is not an import — the check reads code, not t
   // string must not end it early and leave the tail looking like code.
   assert.deepStrictEqual(bareImports('const s="he said \\"import\\" loudly";'), [])
 })
+
+// ── D120: Leaflet's split chunk ───────────────────────────────────────────
+
+test('a split chunk is found by what entry.js imports, and a string is still not an import', () => {
+  assert.deepStrictEqual(relativeImports('const m=await import("./leaflet-Ab12.js")'), ['leaflet-Ab12.js'])
+  assert.deepStrictEqual(relativeImports('import"./other.js";import"react"'), ['other.js'])
+  assert.deepStrictEqual(relativeImports('const s="import(\\"./fake.js\\")"'), [])
+})
+
+test('every chunk entry.js imports is in dist/, and none of them bundles a shared dependency', () => {
+  const dist = path.join(CLIENT, 'dist')
+  const entry = path.join(dist, 'entry.js')
+  if (!fs.existsSync(entry)) return
+  const split = relativeImports(fs.readFileSync(entry, 'utf8'))
+  assert.ok(split.length >= 1, 'the Map tab imports Leaflet from a chunk of its own (D120)')
+  for (const name of split) {
+    assert.ok(fs.existsSync(path.join(dist, name)), `entry.js imports ./${name}, which the build did not emit`)
+    assert.deepStrictEqual(problemsWith(fs.readFileSync(path.join(dist, name), 'utf8')), [], name)
+  }
+})
+
+test('Leaflet is not in the entry chunk — every page of the site loads that one', () => {
+  const entry = path.join(CLIENT, 'dist', 'entry.js')
+  if (!fs.existsSync(entry)) return
+  assert.doesNotMatch(fs.readFileSync(entry, 'utf8'), /Leaflet 1\.9/, 'Leaflet was bundled into entry.js')
+})
+
+test('the release ships every chunk, not entry.js by name', () => {
+  // The other half of D120. A release that copied `entry.js` alone would load on
+  // every page and spin for ever on the Map tab, with every check above green.
+  const release = fs.readFileSync(path.join(CLIENT, '..', '.gitea', 'workflows', 'release.yml'), 'utf8')
+  assert.match(release, /cp client\/dist\/\*\.js "\$OUT\/client\/dist\/"/)
+  assert.doesNotMatch(release, /cp client\/dist\/entry\.js /)
+})
+