feat(rust): RaidableBases — feed, raids map layer, Warlord, Spawn a raid base, profiles (PLAN_REDESIGNS §11.4)

PLAN_REDESIGNS §11.4 (D202-D208, D386-D391), protocol 14. Spec: docs
rust-link/PROTOCOL.md §20.12.

- raid.started, raid.completed, raid.purchased and raid.locked public,
  raid.ended staff's; raidableBases.js reads each row per viewer (raiders'
  and a buyer's names only for the presence audience, D376/D390; Steam ids,
  position and a run's key only for staff). Feed lines in the World filter.
- The step rust.raidbase.spawn, "Spawn a raid base" (ledgered, budget
  rust.raids): difficulty, profile and base from option sources listing each
  server's own names (D386), a spot as a world call's location with a height
  adjustment or an exact height, and PvP/NPCs/lock as on/off/blank. A base
  the raids helper made is a world resource, so eventWorld's revert and
  reconcile serve it and world.expired marks it expired; one it did not make
  records nothing and the run log says it despawns on its own timer. Refused
  at verify for a server that said it cannot; a dry run with a spot returns
  the spot check as detail.warnings (MODULE_API 1.16.0, D391). rb-not-ready
  retries in ten minutes.
- Warlord: raids_completed, title category raidscompleted, the leaderboard's
  Raid bases column (sort=raidsCompleted).
- The map's raids layer (D114), public by default with its own audience; the
  run's key is dropped before any viewer gets it.
- Server settings' line for RaidableBases; its profiles in Mod configuration
  under a virtual path (D205).
- Swagger fragment, bundle and README.

Tests: server 684/684 (raidableBases.test.js new, every name in it invented);
client 99/99, build and externals.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

server/model/events/events.db.js

@@ -155,6 +155,8 @@ const TITLE_SUMS = {
   treasuresWon: 'treasures_won',
   // Protocol 14 (D375): Warden.
   guardedWon: 'guarded_won',
+  // Protocol 14 (§11.4, D202): Warlord.
+  raidsCompleted: 'raids_completed',
 }
 
 /** The two *best* fields and their columns: the longest single kill, never a sum. */
@@ -358,6 +360,8 @@ async function leaderboard({ serverId, wipeId = null, sort = 'kills', limit = 25
     treasuresWon: 'treasures_won',
     // Protocol 14 (D375): guarded crates cleared, Warden's column.
     guardedWon: 'guarded_won',
+    // Protocol 14 (§11.4, D202): RaidableBases bases completed, Warlord's column.
+    raidsCompleted: 'raids_completed',
   }[sort] || 'kills'
 
   const params = [serverId]
@@ -386,6 +390,7 @@ async function leaderboard({ serverId, wipeId = null, sort = 'kills', limit = 25
             SUM(s.drops_looted) AS dropsLooted,
             SUM(s.treasures_won) AS treasuresWon,
             SUM(s.guarded_won) AS guardedWon,
+            SUM(s.raids_completed) AS raidsCompleted,
             MAX(s.balance) AS balance,
             MAX(s.last_seen) AS lastSeen
        FROM ${STATS} s

server/model/events/events.model.js

@@ -17,6 +17,7 @@ const worldEvents = require('../../worldEvents')
 const dynamicPvp = require('../../dynamicPvp')
 const dangerousTreasures = require('../../dangerousTreasures')
 const guardedCrate = require('../../guardedCrate')
+const raidableBases = require('../../raidableBases')
 const db = require('./events.db')
 const mapDb = require('../map/map.db')
 const serversDb = require('../servers/servers.db')
@@ -72,7 +73,7 @@ async function recent({ serverId, admin = false, staff = false, presence = false
   })
 
   const shaped = rows.map(shape)
-  if (!shaped.some((r) => r.kind === 'world.event' || dynamicPvp.KINDS.includes(r.kind) || dangerousTreasures.isKind(r.kind) || guardedCrate.isKind(r.kind))) return shaped
+  if (!shaped.some((r) => r.kind === 'world.event' || dynamicPvp.KINDS.includes(r.kind) || dangerousTreasures.isKind(r.kind) || guardedCrate.isKind(r.kind) || raidableBases.isKind(r.kind))) return shaped
 
   // Protocol 14 (§14.3.1): each world event is read for THIS viewer — its type
   // allowed, its names to the presence audience, its Steam ids to staff, its
@@ -88,6 +89,7 @@ async function recent({ serverId, admin = false, staff = false, presence = false
       if (dynamicPvp.KINDS.includes(row.kind)) return pvpRow(row, view)
       if (dangerousTreasures.isKind(row.kind)) return dtRow(row, view)
       if (guardedCrate.isKind(row.kind)) return gcRow(row, view)
+      if (raidableBases.isKind(row.kind)) return raidRow(row, view)
       return row
     })
     .filter(Boolean)
@@ -124,6 +126,11 @@ function gcRow(row, view) {
   return { ...row, steamId: view.staff ? row.steamId : null, frame: guardedCrate.shapeFor(row.frame, view) }
 }
 
+/** One RaidableBases row for a viewer (§11.4). The row's own Steam id, a buyer's, is staff's. */
+function raidRow(row, view) {
+  return { ...row, steamId: view.staff ? row.steamId : null, frame: raidableBases.shapeFor(row.frame, view) }
+}
+
 /** One world-event row for a viewer, or null when they may not see it. The row's own Steam id is staff's too. */
 function worldRow(row, view) {
   const frame = worldEvents.shapeFor(row.frame, view)
@@ -193,6 +200,8 @@ async function leaderboard({ serverId, wipeId = null, sort = 'kills', limit, pre
     treasuresWon: Number(r.treasuresWon) || 0,
     // Protocol 14 (D375): Warden's count.
     guardedWon: Number(r.guardedWon) || 0,
+    // Protocol 14 (§11.4, D202): Warlord's count.
+    raidsCompleted: Number(r.raidsCompleted) || 0,
     // Withheld below the presence audience. A tally refreshes it every minute a
     // player is on, so a `lastSeen` of forty seconds ago is the Online tab by
     // another name. The ORDER still uses it as a tie-break — that says who was