feat: classify gear and weapon mods

tools/game-data-capture/tests/integration/test_capture_labeling.py

@@ -122,6 +122,44 @@ def test_private_capture_labeling_flow_preserves_rejection_before_retention_dele
     assert corpus.deleted is True
 
 
+def test_mod_labels_round_trip_through_the_reviewed_label_route() -> None:
+    token = new_bootstrap_token()
+    client = TestClient(
+        create_app(
+            config=WebConfig(ServerConfig()),
+            capture_control=CaptureControl(),
+            corpus=Corpus(),
+            bootstrap_token=token,
+        ),
+        base_url="http://127.0.0.1:8765",
+    )
+    origin = "http://127.0.0.1:8765"
+    csrf = str(
+        client.post("/api/bootstrap", headers={"Origin": origin}, json={"token": token}).json()[
+            "csrf_token"
+        ]
+    )
+
+    for family, record_type in (("weapon_mod", "weapon_mod"), ("gear_mod", "gear_mod")):
+        label = {
+            "family": family,
+            "view": "detail",
+            "gear_slot": None,
+            "record_types": [record_type],
+            "confidence": 1.0,
+            "abstention_reason": None,
+        }
+        response = client.post(
+            f"/api/captures/{_ID}/label",
+            headers={"Origin": origin, "X-CSRF-Token": csrf},
+            json=label,
+        )
+
+        assert response.status_code == 200
+        csrf = str(response.json()["csrf_token"])
+        assert client.get(f"/api/captures/{_ID}").json()["capture"]["classification"] == label
+
+
 def test_review_ui_uses_local_external_assets_and_keeps_guardrails_in_static_source() -> None:
     web_root = Path(__file__).parents[2] / "src" / "game_data_capture" / "web"
     template = (web_root / "templates" / "index.html").read_text(encoding="utf-8")
@@ -146,12 +184,15 @@ def test_review_ui_uses_local_external_assets_and_keeps_guardrails_in_static_sou
     assert 'credentials: "same-origin"' in script
     assert "localStorage" not in script
     assert "sessionStorage" not in script
+    assert "document.cookie" not in script
     for expected in (
         "weapon",
         "gear",
         "skill_chip",
         "os_protocol",
         "specialization",
+        "weapon_mod",
+        "gear_mod",
         "unknown",
         "Mask",
         "Gloves",
@@ -193,3 +234,4 @@ def test_review_page_and_local_static_assets_serve_with_security_headers() -> No
     assert "csrfPattern" in script.text
     assert "setCheckedMembers" in script.text
     assert "announce: false" in script.text
+    assert 'id="hide-reviewed"' in page.text