Phase 9: the private pack to hand out

build/...-private.mrpack lists every mod by download link, CurseForge-only ones
included, with the credits and non-affiliation notice inside and no third-party jar.
tools/check_private_pack.py downloads all of it and checks the hashes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/checklists/phase-9.md

@@ -18,8 +18,12 @@
 
 - **Adrian's list of 2026-11-09:** shortcuts, drop pages link to Cobblemon Info, real drop chances, bosses only hurt in battles, half the battle XP, low channels, quicker hazards, no item dots on the map, attacks start battles. Automated: `drop_chances_match_cobblemon`, `starter_only_faints`, `regional_forms_are_obtainable`, `new_players_get_the_quest_book`, `bosses_only_take_battle_damage`, `wild_attack_starts_a_battle`, `wild_attack_hurts_without_a_party`, `mire_poisons_without_waders`.
 
+- **Private pack:** `build/…-private.mrpack`. Automated: `tools/check_private_pack.py` downloads all 44 files and checks them.
+
 ## In game (Prism instance)
 
+- [ ] Import the private pack into Prism as a new instance: it downloads everything and starts.
+
 - [ ] Let your starter faint: it stays, fainted, and a Healing Machine wakes it. Try to release it and sacrifice it: both are refused. Any other Pokémon is still lost.
 - [ ] A new player spawns with the quest book. Its first page walks through the basics; the second lists every HM.
 - [ ] Are the regional forms' zones and rarity right? They're in `docs/zone-species.md`.

docs/design.md

@@ -358,7 +358,7 @@ The JEI pages were the one thing clients took from the jar. Their data moved int
 | Decision | Default used for now |
 | --- | --- |
 | Roadmap's open decisions table (loader, island size, safety net, boss AoE, etc.) | Roadmap defaults, unchanged |
-| **Platform split** (deferred until a public release; not publishing for now) | No platform hosts the full mod list (FTB Quests is CurseForge-only; CobbleHardcoreMon is Modrinth-only). Both mods stay; the exports keep listing what they leave out. Options for release: (a) publish one platform's pack, or both with the gaps listed; (b) ask the authors to cross-post (CobbleHardcoreMon, Matthiesen Core, Regenerating Ore Veins and Ore Generation Configuration are MIT); (c) a quest mod on both platforms; (d) permadeath in the companion mod |
+| **Platform split** (settled for now: no public release, so the private `.mrpack` lists every mod by its own link, which Prism installs; only matters again for a public release) | No platform hosts the full mod list (FTB Quests is CurseForge-only; CobbleHardcoreMon is Modrinth-only). Both mods stay; the exports keep listing what they leave out. Options for release: (a) publish one platform's pack, or both with the gaps listed; (b) ask the authors to cross-post (CobbleHardcoreMon, Matthiesen Core, Regenerating Ore Veins and Ore Generation Configuration are MIT); (c) a quest mod on both platforms; (d) permadeath in the companion mod |
 | **No CI** (Adrian, 2026-10-30): no Actions runners on the Gitea server, which is too weak; a push that started the old `.github/workflows/ci.yml` crashed it. The workflow is removed (still in the git history) | The roadmap's "CI smoke test" runs locally instead: `tools/smoke_test.py`, `tools/selftest.py`, `tools/quick_check.py`. Adrian accepted the Minecraft EULA for the local test server on 2026-10-28 |
 | License for the companion mod and pack content | MIT for the companion mod (placeholder); nothing chosen for the rest |
 | Pack name and mod id | "Cobblemon Survival Pack" / `cobblesurvival` (working titles) |

docs/licenses.md

@@ -1,6 +1,6 @@
 # Licenses and credits
 
-The pack is free. It references every third-party mod through packwiz metadata, so players download each jar from Modrinth or CurseForge, the author's own host. No third-party jar is copied into this repo or into an export; `tools/build.py` fails an export that would do that.
+The pack is free. It references every third-party mod through packwiz metadata, so players download each jar from Modrinth or CurseForge, the author's own host. The private pack that Adrian hands out does the same, by each file's download link. No third-party jar is copied into this repo or into an export; `tools/build.py` fails an export that would do that.
 
 Read each license before adding a mod, and add a row here in the same change.
 

docs/roadmap.md

@@ -196,7 +196,7 @@ Goal: a quest book that points players onward, laid out like a research tree who
 - **Reproducible builds** (Adrian, 2026-11-09). The same commit gives the same bytes: pinned JDK, packwiz, Gradle plugins and Python packages; `tools/check_reproducible.py` proves it.
 - **Balancing on the server** (Adrian, 2026-11-09). Balance changes reach playtesters without a client update: `tools/server_update.py`, a server-held data pack, JEI pages sent by the server.
 - **Multiplayer test** with Adrian's group.
-- **Release.** Final `docs/licenses.md`, credits and non-affiliation disclaimer; publish client and server packs on Modrinth and CurseForge as dependency-based packs.
+- **Release.** No public release (Adrian, 2026-11-09): `build/…-private.mrpack`, every mod by download link, credits and non-affiliation notice inside; Adrian hands it out himself.
 
 **Done when:** a full playthrough from spawn to the last zone is possible without commands, every implemented Pokémon can be obtained without commands, and a server runs a multi-hour session without tick-time spikes from Pokémon entities.