new: dev: initialize the GTK client #11

chg: pkg: fix all eslint issues - & add example of the testing env #10
chg: pkg: new version release !skipChangelog
2026-04-28 08:28:51 +02:00 · 2026-04-28 08:10:18 +02:00 · 2026-04-23 21:42:21 +02:00 · 2026-04-23 21:41:47 +02:00 · 2026-04-22 12:15:29 +02:00 · 2026-04-22 12:15:06 +02:00
91 changed files with 9884 additions and 249 deletions
--- a/.env.test
+++ b/.env.test
@@ -0,0 +1,3 @@
 # define your env variables for the test env here
 KERNEL_CLASS='App\Kernel'
 APP_SECRET='$ecretf0rt3st'
--- a/.gitea/workflows/ci.yml-bak
+++ b/.gitea/workflows/ci.yml-bak
@@ -0,0 +1,142 @@
 name: CI - Tests
 on:
  push:
    branches:
      - master
      - develop
  pull_request:
    branches:
      - master
      - develop
 jobs:
  tests:
    runs-on: splendid-bear
    services:
      postgres:
        image: postgres:18-alpine
        env:
          POSTGRES_USER: mineseeker_test
          POSTGRES_PASSWORD: test_password
          POSTGRES_DB: mineseeker_test
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Setup PHP 8.3
        uses: shivammathur/setup-php@v2
        with:
          php-version: '8.3'
          extensions: pdo_pgsql, gd, intl, zip, sodium
          coverage: none
          tools: composer:v2
      - name: Validate composer.json
        run: composer validate --strict
      - name: Cache Composer dependencies
        uses: actions/cache@v4
        with:
          path: vendor
          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
          restore-keys: |
            ${{ runner.os }}-composer-
      - name: Install PHP dependencies
        run: composer install --prefer-dist --no-progress --no-interaction
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Cache node modules
        uses: actions/cache@v4
        with:
          path: node_modules
          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
          restore-keys: |
            ${{ runner.os }}-node-
      - name: Install Node dependencies
        run: npm ci
      - name: Build assets
        run: npm run build
      - name: Create .env.test file
        run: |
          cat > .env.test << 'ENVEOF'
          APP_ENV=test
          APP_SECRET=test-secret-key-for-ci-testing-only
          DATABASE_URL="postgresql://mineseeker_test:test_password@localhost:5432/mineseeker_test?serverVersion=18&charset=utf8"
          KERNEL_CLASS='App\Kernel'
          SYMFONY_DEPRECATIONS_HELPER=999999
          PANTHER_APP_ENV=panther
          PANTHER_ERROR_SCREENSHOT_DIR=./var/error-screenshots
          ENVEOF
      - name: Setup test database
        run: make test-db-setup
      - name: Run PHPUnit tests
        run: vendor/bin/phpunit --testdox --colors=always
      - name: Run PHPUnit tests with coverage (optional)
        if: github.event_name == 'pull_request'
        run: |
          XDEBUG_MODE=coverage vendor/bin/phpunit --coverage-text --coverage-clover=coverage.xml
      - name: Upload coverage reports (optional)
        if: github.event_name == 'pull_request'
        uses: codecov/codecov-action@v4
        with:
          file: ./coverage.xml
          flags: unittests
          name: phpunit-coverage
          fail_ci_if_error: false
  lint:
    runs-on: splendid-bear
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Setup PHP 8.3
        uses: shivammathur/setup-php@v2
        with:
          php-version: '8.3'
          tools: composer:v2, phpstan
      - name: Install PHP dependencies
        run: composer install --prefer-dist --no-progress --no-interaction
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Install Node dependencies
        run: npm ci
      - name: Run ESLint
        run: npm run lint || true
      - name: Check code style (PHP)
        run: |
          if [ -f "vendor/bin/php-cs-fixer" ]; then
            vendor/bin/php-cs-fixer fix --dry-run --diff
          else
            echo "PHP-CS-Fixer not installed, skipping..."
          fi
--- a/.gitea/workflows/deploy.yml-bak
+++ b/.gitea/workflows/deploy.yml-bak
@@ -0,0 +1,126 @@
 name: Deploy to Production
 on:
  push:
    tags:
      - 'v*'
 jobs:
  test:
    runs-on: splendid-bear
    services:
      postgres:
        image: postgres:18-alpine
        env:
          POSTGRES_USER: mineseeker_test
          POSTGRES_PASSWORD: test_password
          POSTGRES_DB: mineseeker_test
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
        ports:
          - 5432:5432
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Setup PHP 8.3
        uses: shivammathur/setup-php@v2
        with:
          php-version: '8.3'
          extensions: pdo_pgsql, gd, intl, zip, sodium
          coverage: none
          tools: composer:v2
      - name: Install PHP dependencies
        run: composer install --prefer-dist --no-progress --no-interaction
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'
      - name: Install Node dependencies
        run: npm ci
      - name: Build assets
        run: npm run build
      - name: Create .env.test file
        run: |
          cat > .env.test << 'ENVEOF'
          APP_ENV=test
          APP_SECRET=test-secret-key-for-ci-testing-only
          DATABASE_URL="postgresql://mineseeker_test:test_password@localhost:5432/mineseeker_test?serverVersion=18&charset=utf8"
          KERNEL_CLASS='App\Kernel'
          SYMFONY_DEPRECATIONS_HELPER=999999
          ENVEOF
      - name: Setup test database
        run: make test-db-setup
      - name: Run PHPUnit tests
        run: vendor/bin/phpunit --testdox --colors=always --stop-on-failure
  deploy:
    needs: test
    runs-on: splendid-bear
    steps:
      - name: Checkout tag
        env:
          GITEA_TOKEN: ${{ gitea.token }}
        run: |
          set -e
          export HOME=/tmp
          git config --global credential.helper '!f() { echo "username=oauth2"; echo "password=$GITEA_TOKEN"; }; f'
          git config --global --add safe.directory "${{ vars.PROD_APP_DIR }}"
          cd "${{ vars.PROD_APP_DIR }}"
          git remote set-url origin "${{ gitea.server_url }}/${{ gitea.repository }}.git"
          git fetch --tags --force
          git checkout "${{ gitea.ref_name }}"
      - name: Write .env
        env:
          PROD_ENV_FILE: ${{ secrets.PROD_ENV_FILE }}
        run: |
          printf '%s' "$PROD_ENV_FILE" > "${{ vars.PROD_APP_DIR }}/.env"
      - name: Build image
        run: |
          cd "${{ vars.PROD_APP_DIR }}"
          docker compose build
      - name: Run database migrations
        run: |
          cd "${{ vars.PROD_APP_DIR }}"
          docker compose run --rm app php bin/console doctrine:migrations:migrate --no-interaction
      - name: Clear cache
        run: |
          cd "${{ vars.PROD_APP_DIR }}"
          docker compose run --rm app php bin/console cache:clear --env=prod
      - name: Start services
        run: |
          cd "${{ vars.PROD_APP_DIR }}"
          docker compose up -d
      - name: Health check
        run: |
          sleep 5
          curl -f http://localhost:10080/ || exit 1
      - name: Notify deployment success
        if: success()
        run: |
          echo "✅ Deployment successful for tag ${{ gitea.ref_name }}"
      - name: Notify deployment failure
        if: failure()
        run: |
          echo "❌ Deployment failed for tag ${{ gitea.ref_name }}"
          exit 1
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,8 @@ nohup.out
 /var/
 /vendor/
 ###< symfony/framework-bundle ###
 ###> phpunit/phpunit ###
 /phpunit.xml
 /.phpunit.cache/
 ###< phpunit/phpunit ###
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -0,0 +1,464 @@
 # AI Agent Guidelines for MineSeeker
 This document provides guidelines and context for AI coding agents working on the MineSeeker project.
 ## Project Overview
 **MineSeeker** is a real-time multiplayer 1v1 minesweeper game built with Symfony (PHP) and React. Players compete to claim mines on a shared 16×16 grid, with the first to reach 26 mines winning.
 ### Tech Stack
 - **Backend:** Symfony 7.2 (PHP 8.3)
 - **Frontend:** React 18, Vite 6
 - **Database:** PostgreSQL 17 with materialized views
 - **Storage:** MinIO (S3-compatible)
 - **Real-time:** Mercure (Server-Sent Events)
 - **Styling:** SCSS, MUI (Material-UI), Emotion
 - **Fonts:** @fontsource packages (web), Carlito-Bold.ttf (server-side images)
 ### Key Features
 **Core Gameplay:**
 - **Multiplayer-focused:** 1v1 competitive gameplay where players race to claim more mines than their opponent
 - **Win condition:** First player to claim 26 out of 51 mines wins
 - **Real-time updates:** WebSocket-like gameplay using Mercure (Server-Sent Events)
 - **Game restoration:** Players can resume unfinished games from where they left off
 - **Bonus points system:** Rewards skilled play (blind hits, chain combos, edge mines, endgame mines, safe cell reveals)
 **User Features:**
 - **Authentication:** Password + optional TOTP + optional WebAuthn passkeys
 - **Anonymous play:** Guest players can play without creating an account
 - **Profile statistics:** Detailed stats including wins, losses, draws, win rate, average score, total mines hit, and bonus points
 - **Battle history:** View and replay past games move-by-move
 **Sharing & Social:**
 - **Battle reports:** Shareable public pages for each completed game (`/battle/{uuid}`)
 - **OG image generation:** Automatic creation of 1200×630 PNG images for social media sharing (using PHP GD)
 - **Open Graph tags:** Battle share pages include rich preview cards with player names, avatars, scores, and bonus points
 ---
 ## Architecture Overview
 ### Backend (Symfony)
 ```
 src/
 ├── Controller/        # HTTP endpoints (game, profile, battle sharing)
 ├── Entity/           # Doctrine ORM entities
 ├── Repository/       # Database queries (uses QueryBuilder, not raw SQL)
 ├── Service/          # Business logic (BattleCardGenerator, WebAuthn, Email)
 ├── Dto/              # Data Transfer Objects (immutable, readonly)
 ├── Util/             # Game logic (TopicManager for Mercure)
 └── Migrations/       # Database schema changes
 ```
 **Important patterns:**
 - Use Doctrine ORM QueryBuilder (not raw SQL) in repositories
 - DTOs are `final readonly` classes with constructor property promotion
 - Services use dependency injection via `config/services.yaml`
 - Materialized views for performance (auto-refreshed via triggers)
 ### Frontend (React)
 ```
 assets/
 ├── js/
 │   ├── mine-seeker/           # Main game bundle (self-contained)
 │   │   ├── MineSeeker.jsx     # Root component, wraps GameProvider + QueryClientProvider
 │   │   ├── components/        # Game-specific components
 │   │   │   ├── GameBoard.jsx          # Main game board grid
 │   │   │   ├── GameTimer.jsx          # Game timer display
 │   │   │   ├── BonusBox.jsx           # Bonus points indicator
 │   │   │   ├── BonusStatsDialog.jsx   # Bonus statistics modal
 │   │   │   ├── CaptchaOverlay.jsx     # Captcha challenge overlay
 │   │   │   ├── ChallengeCountdown.jsx # Challenge timer
 │   │   │   ├── OnlinePlayersDialog.jsx # Online players list
 │   │   │   ├── WaitingOverlayContent.jsx # Waiting for opponent
 │   │   │   ├── grid/           # Grid-related components (cells, mines)
 │   │   │   ├── profile/        # In-game profile components (PlayerColumn)
 │   │   │   ├── timer/          # Timer-related components
 │   │   │   └── user/           # User-related components
 │   │   ├── contexts/          # React Context API
 │   │   │   ├── GameContext.jsx     # Game state context
 │   │   │   └── GameProvider.jsx    # Context provider with state logic
 │   │   ├── hooks/             # Custom React hooks
 │   │   │   ├── useGameDataProvider.js    # React Query data provider
 │   │   │   ├── useGameRefs.jsx           # Refs for DOM elements
 │   │   │   ├── useGameState.jsx          # Game state management
 │   │   │   ├── useServerCommunication.jsx # Mercure SSE connection
 │   │   │   └── useStepTimer.jsx          # Step-by-step timer
 │   │   └── utils/             # Game-specific utilities
 │   │       └── constants.jsx   # Game constants, colors, defaults
 │   ├── components/      # Shared UI components
 │   ├── utils/           # Shared utilities
 │   ├── profile.jsx      # Profile page entry
 │   ├── passkey.jsx      # Passkey management entry
 │   └── contact.jsx      # Contact form entry
 ├── css/
 │   └── homepage/        # SCSS partials (imported by style.homepage.scss)
 └── fonts/
    └── Carlito-Bold.ttf # TTF font for PHP GD image generation
 ```
 **Important patterns:**
 - Vite aliases: `@mine-components`, `@mine-contexts`, `@mine-hooks`, `@mine-utils`, `@global-components`, `@global-utils`
 - React Query only available inside `mine-seeker` bundle
 - Avoid circular dependencies (e.g., don't import from `@global-components` inside `components/` directory)
 - PropTypes required on all components
 ---
 ## Common Tasks
 ### Adding a New Feature
 1. **Backend:**
   - Create migration for schema changes
   - Add/update entities and repositories
   - Create DTOs for data transfer
   - Add controller endpoints
   - Update service configuration if needed
 2. **Frontend:**
   - Create components in appropriate bundle
   - Add PropTypes to all components
   - Use existing hooks and utilities
   - Follow styled-components pattern for MUI customization
 3. **Documentation:**
   - Update relevant docs in `docs/` folder
   - Add examples if introducing new patterns
 ### Database Changes
 - Always create migrations: `bin/console make:migration`
 - Use Doctrine QueryBuilder in repositories (not raw SQL)
 - For PostgreSQL-specific features (materialized views, triggers), use raw SQL in migrations only
 - Materialized views should auto-refresh via triggers
 ### Styling
 - **Web fonts:** Use `@fontsource` packages (WOFF/WOFF2)
 - **Server-side images:** Use TTF fonts in `assets/fonts/` (PHP GD requires TTF)
 - **CSS:** Create SCSS partials in `assets/css/homepage/`, import in main file
 - **Components:** Use Emotion styled-components or CSS classes
 ### File Headers
 All PHP and JS/JSX files should have this header:
 ```php
 <?php declare(strict_types=1);
 /*
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 ```
 ```javascript
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 ```
 ---
 ## Coding Standards
 ### PHP
 - **PSR Standards:** Follow PSR-1, PSR-12 coding standards
 - **Type declarations:** Use strict types (`declare(strict_types=1)`)
 - **Property promotion:** Use constructor property promotion for DTOs and services
 - **Readonly:** Use `readonly` for immutable properties
 - **Final:** Mark DTOs as `final`
 - **Doctrine:** Use QueryBuilder with `expr()` methods, not string concatenation
 - **Null safety:** Use null coalescing `??` and null-safe operator `?->`
 - **Formatting:** 4-space indentation, opening braces on same line for methods/classes
 **Example DTO:**
 ```php
 final readonly class ProfileGameDto implements JsonSerializable
 {
    public function __construct(
        public ?int    $id,
        public string  $redName,
        public string  $blueName,
        public bool    $bothRegistered,
    ) {}
 }
 ```
 ### JavaScript/React
 - **Components:** Functional components with hooks
 - **PropTypes:** Required on all components
 - **Imports:** Use aliases (`@global-components`, `@mine-hooks`, etc.)
 - **State:** Use `useState`, `useEffect`, `useCallback`, `useMemo` appropriately
 - **Avoid:** Circular dependencies, especially with barrel exports
 **Example component:**
 ```javascript
 import React, { useState } from 'react';
 import { string, number } from 'prop-types';
 export const MyComponent = ({ title, count }) => {
  const [value, setValue] = useState(0);
  return <div>{title}: {count + value}</div>;
 };
 MyComponent.propTypes = {
  title: string.isRequired,
  count: number.isRequired,
 };
 ```
 ---
 ## Important Files & Locations
 ### Configuration
 - `config/services.yaml` - Service definitions and parameters
 - `vite.config.js` - Vite build config, aliases
 - `.env` - Environment variables (not in git)
 - `composer.json` - PHP dependencies
 - `package.json` - Node dependencies
 ### Key Services
 - `BattleCardGenerator` - Generates 1200×630 PNG OG images using PHP GD
 - `TopicManager` - Mercure topic management and game logic
 - `WebAuthnService` - Passkey authentication
 - `Email services` - Various email senders in `src/Service/Email/`
 ### Important Entities
 - `User` - Registered users
 - `PlayedGame` - Game records with moves, grid, scores
 - `RecentBattle` - Read-only entity from materialized view
 - `UserStats` - Read-only entity from materialized view
 ### Documentation
 - `docs/game-mechanics/BONUS_POINTS_SYSTEM.md` - Bonus points reference
 - `docs/FONTS.md` - Font usage and management
 - `AGENTS.md` - This file
 - `CHANGELOG.md` - Project changelog
 ---
 ## Common Pitfalls
 ### ❌ Don't Do
 - **Don't use raw SQL in repositories** (use Doctrine QueryBuilder)
 - **Don't create circular imports** (e.g., importing `@global-components` from within `components/`)
 - **Don't use system fonts directly** (bundle TTF in `assets/fonts/`)
 - **Don't skip PropTypes** on React components
 - **Don't use `var`** in JavaScript (use `const` or `let`)
 - **Don't define variables after using them** (hoisting issues with `const`)
 ### ✅ Do
 - **Use Doctrine QueryBuilder** with `expr()` methods
 - **Import components directly** to avoid circular dependencies
 - **Bundle fonts in project** for portability
 - **Add PropTypes** to all components
 - **Use `const` for immutable values**, `let` for mutable
 - **Define variables before using them**
 ---
 ## Keeping Components in Sync
 ### Battle Report Display
 The battle report/statistics appear in **two places** that must be kept synchronized:
 #### 1. BattleDialog Component (React)
 **File:** `assets/js/components/BattleDialog.jsx`
 - React dialog component shown on profile page
 - Uses Material-UI and styled-components
 - Displays game stats, bonus points, winner information
 #### 2. Battle Share Page (Twig)
 **File:** `templates/Game/battle_share.html.twig`
 - Public battle share page (accessible via `/battle/{uuid}`)
 - Server-rendered HTML with SCSS styling
 - Shows same information as BattleDialog
 ### Synchronization Rules
 **When updating BattleDialog.jsx, also update battle_share.html.twig:**
 ✅ Adding new stats or fields
 ✅ Changing display logic (winner calculation, formatting)
 ✅ Modifying bonus points display
 ✅ Updating labels or text
 **Keep in sync:**
 - Game outcome logic (win/loss/draw/abandoned)
 - Bonus points formatting
 - Player name display
 - Score display
 - Stats and metadata shown
 **Example:** If you add a new stat to BattleDialog showing "fastest mine claim time", you must also add it to battle_share.html.twig so both displays show the same information.
 ---
 ## Testing & Building
 ### Backend
 ```bash
 # Run migrations
 bin/console doctrine:migrations:migrate
 # Clear cache
 bin/console cache:clear
 # Refresh materialized views
 bin/console dbal:run-sql "REFRESH MATERIALIZED VIEW CONCURRENTLY recent_battles"
 ```
 ### Frontend
 ```bash
 # Development build with watch
 npm run dev
 # Production build
 npm run build
 # After changing fonts
 rm -rf var/og-cache/*
 ```
 ---
 ## Git Workflow
 ### Commit Messages
 Follow conventional commits:
 - `feat: add bonus points to battle cards`
 - `fix: resolve circular dependency in BattleDialog`
 - `refactor: use Doctrine QueryBuilder in RecentBattleRepository`
 - `docs: add AGENTS.md for AI coding agents`
 - `chore: update dependencies`
 ### Creating Pull Requests
 When creating PRs, include:
 1. **Summary** - What was changed and why
 2. **Changes** - List of modified files/components
 3. **Testing** - How to verify the changes
 4. **Screenshots** - For UI changes
 ---
 ## Performance Considerations
 ### Database
 - Use materialized views for expensive queries (profile stats, recent battles)
 - Auto-refresh materialized views via triggers on source table changes
 - Index frequently queried columns
 - Use `COALESCE()` for nullable aggregates
 ### Frontend
 - Lazy load large components
 - Use React Query for data fetching and caching
 - Avoid unnecessary re-renders (use `useMemo`, `useCallback`)
 - Bundle code per entry point (profile, passkey, contact, game)
 ### Images
 - Battle card images are cached in `var/og-cache/`
 - Images regenerated when games change (via deterministic UUID)
 - Use appropriate image sizes (1200×630 for OG images)
 ---
 ## Security
 ### Authentication
 - Password + TOTP (optional) + WebAuthn passkeys (optional)
 - Backup codes for TOTP recovery
 - Session-based authentication with `IS_AUTHENTICATED_REMEMBERED`
 ### Data Access
 - Controllers check `denyAccessUnlessGranted()`
 - Materialized views filter by `user_id`
 - Guest players use separate `Gamer` entity (no `User` account)
 ### Input Validation
 - Symfony forms for user input
 - File upload validation (size, MIME type)
 - WebAuthn challenge validation
 ---
 ## Useful Commands
 ```bash
 # Symfony
 bin/console debug:container ServiceName        # Inspect service configuration
 bin/console debug:router                       # List all routes
 bin/console make:migration                     # Create new migration
 bin/console doctrine:migrations:list           # List migrations
 # Database
 bin/console dbal:run-sql "SELECT * FROM ..."  # Run SQL query
 # Assets
 npm run build                                  # Build production assets
 npm run dev                                    # Build with watch mode
 # Git
 git log --oneline --graph                      # View commit history
 git diff origin/main...HEAD                    # See changes since main
 ```
 ---
 ## Need Help?
 - **Bonus Points:** See `docs/game-mechanics/BONUS_POINTS_SYSTEM.md`
 - **Fonts:** See `docs/FONTS.md`
 - **Symfony Docs:** https://symfony.com/doc/current/
 - **React Docs:** https://react.dev/
 - **Doctrine ORM:** https://www.doctrine-project.org/projects/doctrine-orm/en/current/
 ---
 ## Version History
 - **2026-04-21:** Initial AGENTS.md created
 - Document common patterns, pitfalls, and project structure
 - Include coding standards and examples
 ---
 **Happy coding! 🚀**
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,93 @@
 # Changelog
 ## v2026.2.9-0 (2026-04-23)
 ### New
 * Add tracking code for the app #10. [Lang]
 ## v2026.2.8-3 (2026-04-22)
 ### Fix
 * The error message cannot be seen during avatar changing #10. [Lang]
 ## v2026.2.8-2 (2026-04-21)
 ### Changes
 * Increase the 2 MB avatar maximum file size to 10 MB #10. [Lang]
 ## v2026.2.8-1 (2026-04-21)
 ### Changes
 * Upgrade front-end & back-end deps to the latest available version #10. [Lang]
 ## v2026.2.8-0 (2026-04-21)
 ### New
 * Add CI/CD improvements - add new CI workflow - & improve the deployment w/ tests #10. [Lang]
 * Add test cases to back-end w/ real database connection in it #10. [Lang]
 ### Changes
 * The original CI/CD workflow is restored - the work with tests is postponed #10. [Lang]
 * Add sound when the game start #10. [Lang]
 * Create AGENTS.md file for future maintenance #9. [Lang]
 * Remove the wrongly implemented font installation in docker - & replace it with static font on BattleCardGenerator (it solves the shareable image problem on bare-metal too) #8. [Lang]
 ## v2026.2.7-1 (2026-04-21)
 ### Changes
 * Fine-tune the recent battle list #8. [Lang]
 ## v2026.2.7-0 (2026-04-21)
 ### Changes
 * Small changes on docs - and improve text on homepage #8. [Lang]
 * Massive refactor on front-end for unification and readiness #8. [Lang]
 * Update all doc blocks on back-end #8. [Lang]
 * Small refactors on back-end #8. [Lang]
 * Add RecentBattle entity that is a Materialized View to speed up the view - and further refactor on ProfileController #8. [Lang]
 * Create the UserStats entity what is a Materialized View to store Profile stats for every user - & massive ProfileController refactor #8. [Lang]
 * Refactor the SecurityController #7. [Lang]
 * Refactor the code - there was unnecessary codes and wrongly formatted or designed code that are related to Repositories #7. [Lang]
 * Upgrade the doctrine related back-end pkgs to the latest available version #7. [Lang]
 * Add filter to the Profile page's recent plays and an infite list too #7. [Lang]
 * Upgrade to the latest doctrine pkg on back-end #7. [Lang]
 ### Fix
 * Do not hide the end-game overlay ever #8. [Lang]
 * The username was not recognized properly #7. [Lang]
 ## v2026.2.6-1 (2026-04-19)
 ### Fix
--- a/7
+++ b/7
@@ -22,13 +22,8 @@ RUN install-php-extensions \
    apcu \
    sodium
 RUN apt-get update && apt-get install -y --no-install-recommends \
    fonts-dejavu-core \
    fontconfig \
    && fc-cache -f -v \
    && rm -rf /var/lib/apt/lists/*
 RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
 RUN printf '[PHP]\nupload_max_filesize=10M\npost_max_size=11M\n' > "$PHP_INI_DIR/conf.d/uploads.ini"
 RUN printf '[opcache]\nopcache.enable=1\nopcache.memory_consumption=256\nopcache.max_accelerated_files=20000\nopcache.validate_timestamps=0\n' \
    > "$PHP_INI_DIR/conf.d/opcache.ini"
--- a/23
+++ b/23
@@ -1,4 +1,4 @@
-.PHONY: help start start-build stop build down ps logs prune-everything db-reset mercure-jwt cache-clear og-cache-clear
+.PHONY: help start start-build stop build down ps logs prune-everything db-reset mercure-jwt cache-clear og-cache-clear test-db-setup test-db-reset test
 .DEFAULT_GOAL := help
@@ -14,6 +14,9 @@ help:
 	@echo "  make ccp                 - Clear the production cache"
 	@echo "  make cache-clear         - Clear all caches (Vite, Symfony, node_modules)"
 	@echo "  make og-cache-clear      - Clear Open Graph cache only"
 	@echo "  make test-db-setup       - One-time setup: Create test database and run migrations"
 	@echo "  make test-db-reset       - Reset test database (drop, create, migrate)"
 	@echo "  make test                - Run PHPUnit tests"
 start:
 	docker compose up -d
@@ -80,5 +83,23 @@ og-cache-clear:
 	@echo "✓ OG cache cleared!"
 	@echo "  Battle card images will be regenerated on next access"
 test-db-setup:
 	@echo "Setting up test database..."
 	@bin/console dbal:run-sql "SELECT 1 FROM pg_database WHERE datname='mineseeker_test'" 2>/dev/null | grep -q 1 || \
 		(bin/console dbal:run-sql "CREATE DATABASE mineseeker_test" && echo "✓ Database 'mineseeker_test' created")
 	@bin/console doctrine:migrations:migrate --env=test --no-interaction --allow-no-migration 2>&1 | grep -v "WARNING" || true
 	@echo "✓ Test database setup complete!"
 	@echo "  Database: mineseeker_test"
 	@echo "  Run tests with: make test"
 test-db-reset:
 	@echo "Resetting test database..."
 	@bin/console dbal:run-sql "DROP DATABASE IF EXISTS mineseeker_test" --quiet
 	@bin/console dbal:run-sql "CREATE DATABASE mineseeker_test" --quiet
 	@bin/console doctrine:migrations:migrate --env=test --no-interaction --quiet
 	@echo "✓ Test database reset complete!"
 	@echo "  Database: mineseeker_test"
 	@echo "  Run tests with: make test"
 test:
 	@php -d memory_limit=512M bin/phpunit --testdox --colors=always
--- a/README.md
+++ b/README.md
@@ -287,11 +287,15 @@ git push origin v2026.01
 ---
-## Game Documentation
+## Documentation
-For detailed information about game mechanics, bonus systems, and scoring rules, see the [docs](./docs/) directory:
+For detailed information about game mechanics, bonus systems, fonts, testing, and other technical details, see the [docs](./docs/) directory:
 - **[AI Agent Guidelines](./AGENTS.md)** — Comprehensive guide for AI coding agents working on this project
 - **[Bonus Points System](./docs/game-mechanics/BONUS_POINTS_SYSTEM.md)** — Complete reference for all bonus point types, calculation rules, and implementation details
 - **[Fonts](./docs/FONTS.md)** — TrueType fonts used for server-side image generation
 - **[Testing Guide](./docs/testing/TESTING.md)** — Complete testing setup with Foundry factories, database isolation, and best practices
 - **[Factory Documentation](./docs/testing/FACTORIES.md)** — Detailed API reference for all test data factories
 ---
@@ -300,3 +304,76 @@ For detailed information about game mechanics, bonus systems, and scoring rules,
 LGPL-3.0 — see [LICENSE](LICENSE) for details.
 &copy; 2026 [SplendidBear](https://www.splendidbear.org)
 ---
 ## Testing & CI/CD
 MineSeeker has a comprehensive test suite with **71 automated tests** and continuous integration/deployment pipelines.
 ### Quick Start
 ```bash
 # Setup test database (first time only)
 make test-db-setup
 # Run all tests
 make test
 # Run with documentation output
 vendor/bin/phpunit --testdox
 ```
 ### Test Suite
 - **71 tests** with **227 assertions**
 - **Controller tests** - HTTP endpoints, authentication, routing
 - **DTO tests** - Data serialization and calculations
 - **Entity tests** - Domain logic and defaults
 - **Service tests** - Business logic and external APIs
 - **Integration tests** - Foundry factories and database isolation
 **Test execution time:** ~6-8 seconds
 ### Continuous Integration
 **Automated testing** runs on every push/pull request:
 ```yaml
 # .gitea/workflows/ci.yml-bak
 ✓ PHP 8.3 setup with all extensions
 ✓ PostgreSQL 18 service container
 ✓ Composer and npm dependency installation
 ✓ Asset building with Vite
 ✓ Database migrations
 ✓ Full test suite execution
 ✓ Code linting (ESLint, PHP-CS-Fixer)
 ```
 ### Continuous Deployment
 **Automated deployment** on version tags (e.g., `v1.2.3`):
 ```yaml
 # .gitea/workflows/deploy.yml
 1. Run full test suite (blocks deployment if fails)
 2. Checkout tagged version
 3. Build Docker image
 4. Run database migrations
 5. Restart services
 6. Health check verification
 ```
 **Deploy to production:**
 ```bash
 git tag -a v1.2.3 -m "Release version 1.2.3"
 git push origin v1.2.3
 ```
 ### Documentation
 - **[Testing Guide](docs/testing/TESTING.md)** - Comprehensive testing documentation
 - **[Factory Reference](docs/testing/FACTORIES.md)** - Foundry factory API
 - **[CI/CD Guide](docs/CI_CD.md)** - Pipeline configuration and workflows
 ---
--- a/assets/css/homepage/_profile.scss
+++ b/assets/css/homepage/_profile.scss
@@ -28,6 +28,21 @@
  box-shadow: 0 8px 48px rgba(0, 0, 0, 0.4);
 }
 #profile-avatar-root {
  display: flex;
  flex-direction: column;
  align-items: center;
  gap: 8px;
 }
 .profile-avatar__error {
  font-size: 11px;
  color: #e57373;
  text-align: center;
  max-width: 120px;
  line-height: 1.3;
 }
 .profile-avatar {
  position: relative;
  width: 80px;
--- a/assets/fonts/Carlito-Bold.ttf
+++ b/assets/fonts/Carlito-Bold.ttf
--- a/assets/js/components/AvatarUpload.jsx
+++ b/assets/js/components/AvatarUpload.jsx
@@ -7,7 +7,7 @@
 * file that was distributed with this source code.
 */
-import React, { useMemo, useRef } from 'react';
+import React, { Fragment, useMemo, useRef } from 'react';
 import { string } from 'prop-types';
 import { useProfileDataProvider } from '@mine-hooks/useGameDataProvider';
@@ -16,6 +16,8 @@ export const AvatarUpload = ({ uploadUrl, initialThumbUrl, initials }) => {
  const [thumbUrl, setThumbUrl] = React.useState(initialThumbUrl || null);
  const { uploadAvatarMutation: { isPending, error, mutate } } = useProfileDataProvider();
  const errorMessage = useMemo(() => error?.message ?? null, [error]);
  const handleChange = e => {
    const file = e.target.files?.[0];
    if (!file) return;
@@ -40,9 +42,8 @@ export const AvatarUpload = ({ uploadUrl, initialThumbUrl, initials }) => {
    });
  };
  const errorMessage = useMemo(() => error?.message ?? null, [error]);
  return (
    <Fragment>
      <div
        className={`profile-avatar${isPending ? ' profile-avatar--loading' : ''}`}
        title="Click to change profile picture"
@@ -62,10 +63,11 @@ export const AvatarUpload = ({ uploadUrl, initialThumbUrl, initials }) => {
          style={{ display: 'none' }}
          onChange={handleChange}
        />
      {errorMessage && <div className="profile-avatar__error">{errorMessage}</div>}
      </div>
      {errorMessage && <div className="profile-avatar__error">{errorMessage}</div>}
    </Fragment>
  );
-}
+};
 AvatarUpload.propTypes = {
  uploadUrl: string.isRequired,
--- a/assets/js/components/BattleDialog.jsx
+++ b/assets/js/components/BattleDialog.jsx
@@ -12,7 +12,9 @@ import { array } from 'prop-types';
 import { formatDuration } from '@global-utils/format';
 import Dialog from '@mui/material/Dialog';
 import { createTheme, styled, ThemeProvider } from '@mui/material/styles';
-import { Avatar, BonusPoints, StatRow } from '@global-components';
+import { Avatar } from './battle-dialog/Avatar';
 import { BonusPoints } from './battle-dialog/BonusPoints';
 import { StatRow } from './battle-dialog/StatRow';
 const darkTheme = createTheme({ palette: { mode: 'dark' } });
@@ -69,8 +71,10 @@ export const BattleDialog = ({ games }) => {
  const endReason = resign
    ? `${resign.charAt(0).toUpperCase() + resign.slice(1)} resigned`
    : 26 <= maxPoints ? 'Points' : 'Abandoned';
  const bothRegistered = game.bothRegistered;
  const shareUrl = `${window.location.origin}/battle/${game.uuid}`;
-  const canContinue = !resign && 26 > maxPoints;
+  const canContinue = bothRegistered && !resign && 26 > maxPoints;
  const canShare = !canContinue;
  const playUrl = `${window.location.origin}/play/${game.uuid}`;
  const duration = formatDuration(game.created, game.date);
@@ -108,7 +112,7 @@ export const BattleDialog = ({ games }) => {
                  <i className="fa fa-play" />
                  Continue
                </a>
-              ) : (
+              ) : canShare ? (
                <button
                  className={`bd-share${copied ? ' bd-share--copied' : ''}`}
                  onClick={handleShare}
@@ -118,7 +122,7 @@ export const BattleDialog = ({ games }) => {
                  <i className={`fa ${copied ? 'fa-check' : 'fa-share-alt'}`} />
                  {copied ? 'Copied!' : 'Share'}
                </button>
-              )}
+              ) : null}
              <button className="bd-close" onClick={() => setOpen(false)} aria-label="Close">
                <i className="fa fa-times" />
              </button>
--- a/assets/js/mine-seeker/contexts/GameProvider.jsx
+++ b/assets/js/mine-seeker/contexts/GameProvider.jsx
@@ -49,6 +49,7 @@ export const GameProvider = ({ children }) => {
    mine: new Howl({ src: ['/sound/mine.mp3'] }),
    warning: new Howl({ src: ['/sound/warning.mp3'] }),
    won: new Howl({ src: ['/sound/won.mp3'] }),
    starting: new Howl({ src: ['/sound/starting.mp3'] }),
  });
  /** Sync helpers (keep ref + state in lockstep) */
@@ -269,6 +270,8 @@ export const GameProvider = ({ children }) => {
        makeGameEndIfItEnds, resignProcess,
        /** UI action */
        onBombToggle,
        /** Sounds */
        sounds,
      }}
    >
      {children}
--- a/assets/js/mine-seeker/hooks/useServerCommunication.jsx
+++ b/assets/js/mine-seeker/hooks/useServerCommunication.jsx
@@ -22,7 +22,7 @@ const useServerCommunication = (gameAssoc, gameInherited, opponentName, isEnvDev
    /** Sync helpers */
    syncWebPlayer, syncActivePlayer, syncBombSelected, syncConnLost, syncRed, syncBlue,
    /** Game logic */
-    showOverlay, hideOverlay, applyStep, makeGameEndIfItEnds, resignProcess,
+    showOverlay, hideOverlay, applyStep, makeGameEndIfItEnds, resignProcess, sounds,
    /** Current cells snapshot (for active-check in onClick) */
    cells,
  } = useGame();
@@ -212,6 +212,7 @@ const useServerCommunication = (gameAssoc, gameInherited, opponentName, isEnvDev
     */
    if (!endRef.current && (!isTrueRestoredRef.current || 0 !== opponentLastSeenRef.current)) {
      hideOverlay();
      sounds.current.starting.play();
    }
  };
--- a/bin/phpunit
+++ b/bin/phpunit
@@ -0,0 +1,4 @@
 #!/usr/bin/env php
 <?php
 require dirname(__DIR__).'/vendor/phpunit/phpunit/phpunit';
--- a/bun.lock
+++ b/bun.lock
@@ -38,27 +38,27 @@
  "packages": {
    "@babel/code-frame": ["@babel/code-frame@7.29.0", "http://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz", { "dependencies": { "@babel/helper-validator-identifier": "^7.28.5", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } }, "sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw=="],
-    "@babel/compat-data": ["@babel/compat-data@7.29.0", "", {}, "sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg=="],
+    "@babel/compat-data": ["@babel/compat-data@7.29.0", "http://registry.npmjs.org/@babel/compat-data/-/compat-data-7.29.0.tgz", {}, "sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg=="],
-    "@babel/core": ["@babel/core@7.29.0", "", { "dependencies": { "@babel/code-frame": "^7.29.0", "@babel/generator": "^7.29.0", "@babel/helper-compilation-targets": "^7.28.6", "@babel/helper-module-transforms": "^7.28.6", "@babel/helpers": "^7.28.6", "@babel/parser": "^7.29.0", "@babel/template": "^7.28.6", "@babel/traverse": "^7.29.0", "@babel/types": "^7.29.0", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA=="],
+    "@babel/core": ["@babel/core@7.29.0", "http://registry.npmjs.org/@babel/core/-/core-7.29.0.tgz", { "dependencies": { "@babel/code-frame": "^7.29.0", "@babel/generator": "^7.29.0", "@babel/helper-compilation-targets": "^7.28.6", "@babel/helper-module-transforms": "^7.28.6", "@babel/helpers": "^7.28.6", "@babel/parser": "^7.29.0", "@babel/template": "^7.28.6", "@babel/traverse": "^7.29.0", "@babel/types": "^7.29.0", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA=="],
    "@babel/generator": ["@babel/generator@7.29.1", "http://registry.npmjs.org/@babel/generator/-/generator-7.29.1.tgz", { "dependencies": { "@babel/parser": "^7.29.0", "@babel/types": "^7.29.0", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" } }, "sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw=="],
-    "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.28.6", "", { "dependencies": { "@babel/compat-data": "^7.28.6", "@babel/helper-validator-option": "^7.27.1", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA=="],
+    "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.28.6", "http://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.28.6.tgz", { "dependencies": { "@babel/compat-data": "^7.28.6", "@babel/helper-validator-option": "^7.27.1", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA=="],
    "@babel/helper-globals": ["@babel/helper-globals@7.28.0", "http://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.28.0.tgz", {}, "sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw=="],
    "@babel/helper-module-imports": ["@babel/helper-module-imports@7.28.6", "http://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.28.6.tgz", { "dependencies": { "@babel/traverse": "^7.28.6", "@babel/types": "^7.28.6" } }, "sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw=="],
-    "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.28.6", "", { "dependencies": { "@babel/helper-module-imports": "^7.28.6", "@babel/helper-validator-identifier": "^7.28.5", "@babel/traverse": "^7.28.6" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA=="],
+    "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.28.6", "http://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.28.6.tgz", { "dependencies": { "@babel/helper-module-imports": "^7.28.6", "@babel/helper-validator-identifier": "^7.28.5", "@babel/traverse": "^7.28.6" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA=="],
    "@babel/helper-string-parser": ["@babel/helper-string-parser@7.27.1", "http://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz", {}, "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA=="],
    "@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.28.5", "http://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz", {}, "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q=="],
-    "@babel/helper-validator-option": ["@babel/helper-validator-option@7.27.1", "", {}, "sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg=="],
+    "@babel/helper-validator-option": ["@babel/helper-validator-option@7.27.1", "http://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.27.1.tgz", {}, "sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg=="],
-    "@babel/helpers": ["@babel/helpers@7.29.2", "", { "dependencies": { "@babel/template": "^7.28.6", "@babel/types": "^7.29.0" } }, "sha512-HoGuUs4sCZNezVEKdVcwqmZN8GoHirLUcLaYVNBK2J0DadGtdcqgr3BCbvH8+XUo4NGjNl3VOtSjEKNzqfFgKw=="],
+    "@babel/helpers": ["@babel/helpers@7.29.2", "http://registry.npmjs.org/@babel/helpers/-/helpers-7.29.2.tgz", { "dependencies": { "@babel/template": "^7.28.6", "@babel/types": "^7.29.0" } }, "sha512-HoGuUs4sCZNezVEKdVcwqmZN8GoHirLUcLaYVNBK2J0DadGtdcqgr3BCbvH8+XUo4NGjNl3VOtSjEKNzqfFgKw=="],
    "@babel/parser": ["@babel/parser@7.29.2", "http://registry.npmjs.org/@babel/parser/-/parser-7.29.2.tgz", { "dependencies": { "@babel/types": "^7.29.0" }, "bin": "./bin/babel-parser.js" }, "sha512-4GgRzy/+fsBa72/RZVJmGKPmZu9Byn8o4MoLpmNe1m8ZfYnz5emHLQz3U4gLud6Zwl0RZIcgiLD7Uq7ySFuDLA=="],
@@ -106,19 +106,19 @@
    "@eslint-community/regexpp": ["@eslint-community/regexpp@4.12.2", "http://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.2.tgz", {}, "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew=="],
-    "@eslint/config-array": ["@eslint/config-array@0.23.5", "", { "dependencies": { "@eslint/object-schema": "^3.0.5", "debug": "^4.3.1", "minimatch": "^10.2.4" } }, "sha512-Y3kKLvC1dvTOT+oGlqNQ1XLqK6D1HU2YXPc52NmAlJZbMMWDzGYXMiPRJ8TYD39muD/OTjlZmNJ4ib7dvSrMBA=="],
+    "@eslint/config-array": ["@eslint/config-array@0.23.5", "http://registry.npmjs.org/@eslint/config-array/-/config-array-0.23.5.tgz", { "dependencies": { "@eslint/object-schema": "^3.0.5", "debug": "^4.3.1", "minimatch": "^10.2.4" } }, "sha512-Y3kKLvC1dvTOT+oGlqNQ1XLqK6D1HU2YXPc52NmAlJZbMMWDzGYXMiPRJ8TYD39muD/OTjlZmNJ4ib7dvSrMBA=="],
-    "@eslint/config-helpers": ["@eslint/config-helpers@0.5.5", "", { "dependencies": { "@eslint/core": "^1.2.1" } }, "sha512-eIJYKTCECbP/nsKaaruF6LW967mtbQbsw4JTtSVkUQc9MneSkbrgPJAbKl9nWr0ZeowV8BfsarBmPpBzGelA2w=="],
+    "@eslint/config-helpers": ["@eslint/config-helpers@0.5.5", "http://registry.npmjs.org/@eslint/config-helpers/-/config-helpers-0.5.5.tgz", { "dependencies": { "@eslint/core": "^1.2.1" } }, "sha512-eIJYKTCECbP/nsKaaruF6LW967mtbQbsw4JTtSVkUQc9MneSkbrgPJAbKl9nWr0ZeowV8BfsarBmPpBzGelA2w=="],
-    "@eslint/core": ["@eslint/core@1.2.1", "", { "dependencies": { "@types/json-schema": "^7.0.15" } }, "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ=="],
+    "@eslint/core": ["@eslint/core@1.2.1", "http://registry.npmjs.org/@eslint/core/-/core-1.2.1.tgz", { "dependencies": { "@types/json-schema": "^7.0.15" } }, "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ=="],
    "@eslint/eslintrc": ["@eslint/eslintrc@3.3.5", "http://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.3.5.tgz", { "dependencies": { "ajv": "^6.14.0", "debug": "^4.3.2", "espree": "^10.0.1", "globals": "^14.0.0", "ignore": "^5.2.0", "import-fresh": "^3.2.1", "js-yaml": "^4.1.1", "minimatch": "^3.1.5", "strip-json-comments": "^3.1.1" } }, "sha512-4IlJx0X0qftVsN5E+/vGujTRIFtwuLbNsVUe7TO6zYPDR1O6nFwvwhIKEKSrl6dZchmYBITazxKoUYOjdtjlRg=="],
-    "@eslint/js": ["@eslint/js@10.0.1", "", { "peerDependencies": { "eslint": "^10.0.0" }, "optionalPeers": ["eslint"] }, "sha512-zeR9k5pd4gxjZ0abRoIaxdc7I3nDktoXZk2qOv9gCNWx3mVwEn32VRhyLaRsDiJjTs0xq/T8mfPtyuXu7GWBcA=="],
+    "@eslint/js": ["@eslint/js@10.0.1", "http://registry.npmjs.org/@eslint/js/-/js-10.0.1.tgz", { "peerDependencies": { "eslint": "^10.0.0" }, "optionalPeers": ["eslint"] }, "sha512-zeR9k5pd4gxjZ0abRoIaxdc7I3nDktoXZk2qOv9gCNWx3mVwEn32VRhyLaRsDiJjTs0xq/T8mfPtyuXu7GWBcA=="],
-    "@eslint/object-schema": ["@eslint/object-schema@3.0.5", "", {}, "sha512-vqTaUEgxzm+YDSdElad6PiRoX4t8VGDjCtt05zn4nU810UIx/uNEV7/lZJ6KwFThKZOzOxzXy48da+No7HZaMw=="],
+    "@eslint/object-schema": ["@eslint/object-schema@3.0.5", "http://registry.npmjs.org/@eslint/object-schema/-/object-schema-3.0.5.tgz", {}, "sha512-vqTaUEgxzm+YDSdElad6PiRoX4t8VGDjCtt05zn4nU810UIx/uNEV7/lZJ6KwFThKZOzOxzXy48da+No7HZaMw=="],
-    "@eslint/plugin-kit": ["@eslint/plugin-kit@0.7.1", "", { "dependencies": { "@eslint/core": "^1.2.1", "levn": "^0.4.1" } }, "sha512-rZAP3aVgB9ds9KOeUSL+zZ21hPmo8dh6fnIFwRQj5EAZl9gzR7wxYbYXYysAM8CTqGmUGyp2S4kUdV17MnGuWQ=="],
+    "@eslint/plugin-kit": ["@eslint/plugin-kit@0.7.1", "http://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.7.1.tgz", { "dependencies": { "@eslint/core": "^1.2.1", "levn": "^0.4.1" } }, "sha512-rZAP3aVgB9ds9KOeUSL+zZ21hPmo8dh6fnIFwRQj5EAZl9gzR7wxYbYXYysAM8CTqGmUGyp2S4kUdV17MnGuWQ=="],
    "@fontsource/changa-one": ["@fontsource/changa-one@5.2.8", "http://registry.npmjs.org/@fontsource/changa-one/-/changa-one-5.2.8.tgz", {}, "sha512-gagiU8sMWLs9ejh41NmrYlGdgasSYWFegz5/+22WqYdJVS9HZbaUEXj/6jj3ZKgi+dQZT0kYI+Nha2UQGbO/mA=="],
@@ -138,7 +138,7 @@
    "@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.13", "http://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA=="],
-    "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
+    "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "http://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
    "@jridgewell/resolve-uri": ["@jridgewell/resolve-uri@3.1.2", "http://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", {}, "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw=="],
@@ -168,7 +168,7 @@
    "@mui/x-internals": ["@mui/x-internals@9.0.0", "http://registry.npmjs.org/@mui/x-internals/-/x-internals-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.28.6", "@mui/utils": "9.0.0", "reselect": "^5.1.1", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "react": "^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-E/4rdg69JjhyybpPGypCjAKSKLLnSdCFM+O6P/nkUg47+qt3uftxQEhjQO53rcn6ahHl6du/uNZ9BLgeY6kYxQ=="],
-    "@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@1.1.3", "http://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.3.tgz", { "dependencies": { "@tybys/wasm-util": "^0.10.1" }, "peerDependencies": { "@emnapi/core": "^1.7.1", "@emnapi/runtime": "^1.7.1" } }, "sha512-xK9sGVbJWYb08+mTJt3/YV24WxvxpXcXtP6B172paPZ+Ts69Re9dAr7lKwJoeIx8OoeuimEiRZ7umkiUVClmmQ=="],
+    "@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@1.1.4", "", { "dependencies": { "@tybys/wasm-util": "^0.10.1" }, "peerDependencies": { "@emnapi/core": "^1.7.1", "@emnapi/runtime": "^1.7.1" } }, "sha512-3NQNNgA1YSlJb/kMH1ildASP9HW7/7kYnRI2szWJaofaS1hWmbGI4H+d3+22aGzXXN9IJ+n+GiFVcGipJP18ow=="],
    "@nodelib/fs.scandir": ["@nodelib/fs.scandir@2.1.5", "http://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz", { "dependencies": { "@nodelib/fs.stat": "2.0.5", "run-parallel": "^1.1.9" } }, "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g=="],
@@ -176,7 +176,7 @@
    "@nodelib/fs.walk": ["@nodelib/fs.walk@1.2.8", "http://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz", { "dependencies": { "@nodelib/fs.scandir": "2.1.5", "fastq": "^1.6.0" } }, "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg=="],
-    "@oxc-project/types": ["@oxc-project/types@0.124.0", "http://registry.npmjs.org/@oxc-project/types/-/types-0.124.0.tgz", {}, "sha512-VBFWMTBvHxS11Z5Lvlr3IWgrwhMTXV+Md+EQF0Xf60+wAdsGFTBx7X7K/hP4pi8N7dcm1RvcHwDxZ16Qx8keUg=="],
+    "@oxc-project/types": ["@oxc-project/types@0.126.0", "", {}, "sha512-oGfVtjAgwQVVpfBrbtk4e1XDyWHRFta6BS3GWVzrF8xYBT2VGQAk39yJS/wFSMrZqoiCU4oghT3Ch0HaHGIHcQ=="],
    "@parcel/watcher": ["@parcel/watcher@2.5.6", "http://registry.npmjs.org/@parcel/watcher/-/watcher-2.5.6.tgz", { "dependencies": { "detect-libc": "^2.0.3", "is-glob": "^4.0.3", "node-addon-api": "^7.0.0", "picomatch": "^4.0.3" }, "optionalDependencies": { "@parcel/watcher-android-arm64": "2.5.6", "@parcel/watcher-darwin-arm64": "2.5.6", "@parcel/watcher-darwin-x64": "2.5.6", "@parcel/watcher-freebsd-x64": "2.5.6", "@parcel/watcher-linux-arm-glibc": "2.5.6", "@parcel/watcher-linux-arm-musl": "2.5.6", "@parcel/watcher-linux-arm64-glibc": "2.5.6", "@parcel/watcher-linux-arm64-musl": "2.5.6", "@parcel/watcher-linux-x64-glibc": "2.5.6", "@parcel/watcher-linux-x64-musl": "2.5.6", "@parcel/watcher-win32-arm64": "2.5.6", "@parcel/watcher-win32-ia32": "2.5.6", "@parcel/watcher-win32-x64": "2.5.6" } }, "sha512-tmmZ3lQxAe/k/+rNnXQRawJ4NjxO2hqiOLTHvWchtGZULp4RyFeh6aU4XdOYBFe2KE1oShQTv4AblOs2iOrNnQ=="],
@@ -210,39 +210,39 @@
    "@popperjs/core": ["@popperjs/core@2.11.8", "http://registry.npmjs.org/@popperjs/core/-/core-2.11.8.tgz", {}, "sha512-P1st0aksCrn9sGZhp8GMYwBnQsbvAWsZAX44oXNNvLHGqAOcoVxmjZiohstwQ7SqKnbR47akdNi+uleWD8+g6A=="],
-    "@rolldown/binding-android-arm64": ["@rolldown/binding-android-arm64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.0.0-rc.15.tgz", { "os": "android", "cpu": "arm64" }, "sha512-YYe6aWruPZDtHNpwu7+qAHEMbQ/yRl6atqb/AhznLTnD3UY99Q1jE7ihLSahNWkF4EqRPVC4SiR4O0UkLK02tA=="],
+    "@rolldown/binding-android-arm64": ["@rolldown/binding-android-arm64@1.0.0-rc.16", "", { "os": "android", "cpu": "arm64" }, "sha512-rhY3k7Bsae9qQfOtph2Pm2jZEA+s8Gmjoz4hhmx70K9iMQ/ddeae+xhRQcM5IuVx5ry1+bGfkvMn7D6MJggVSA=="],
-    "@rolldown/binding-darwin-arm64": ["@rolldown/binding-darwin-arm64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.0.0-rc.15.tgz", { "os": "darwin", "cpu": "arm64" }, "sha512-oArR/ig8wNTPYsXL+Mzhs0oxhxfuHRfG7Ikw7jXsw8mYOtk71W0OkF2VEVh699pdmzjPQsTjlD1JIOoHkLP1Fg=="],
+    "@rolldown/binding-darwin-arm64": ["@rolldown/binding-darwin-arm64@1.0.0-rc.16", "", { "os": "darwin", "cpu": "arm64" }, "sha512-rNz0yK078yrNn3DrdgN+PKiMOW8HfQ92jQiXxwX8yW899ayV00MLVdaCNeVBhG/TbH3ouYVObo8/yrkiectkcQ=="],
-    "@rolldown/binding-darwin-x64": ["@rolldown/binding-darwin-x64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.0.0-rc.15.tgz", { "os": "darwin", "cpu": "x64" }, "sha512-YzeVqOqjPYvUbJSWJ4EDL8ahbmsIXQpgL3JVipmN+MX0XnXMeWomLN3Fb+nwCmP/jfyqte5I3XRSm7OfQrbyxw=="],
+    "@rolldown/binding-darwin-x64": ["@rolldown/binding-darwin-x64@1.0.0-rc.16", "", { "os": "darwin", "cpu": "x64" }, "sha512-r/OmdR00HmD4i79Z//xO06uEPOq5hRXdhw7nzkxQxwSavs3PSHa1ijntdpOiZ2mzOQ3fVVu8C1M19FoNM+dMUQ=="],
-    "@rolldown/binding-freebsd-x64": ["@rolldown/binding-freebsd-x64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.0.0-rc.15.tgz", { "os": "freebsd", "cpu": "x64" }, "sha512-9Erhx956jeQ0nNTyif1+QWAXDRD38ZNjr//bSHrt6wDwB+QkAfl2q6Mn1k6OBPerznjRmbM10lgRb1Pli4xZPw=="],
+    "@rolldown/binding-freebsd-x64": ["@rolldown/binding-freebsd-x64@1.0.0-rc.16", "", { "os": "freebsd", "cpu": "x64" }, "sha512-KcRE5w8h0OnjUatG8pldyD14/CQ5Phs1oxfR+3pKDjboHRo9+MkqQaiIZlZRpsxC15paeXme/I127tUa9TXJ6g=="],
-    "@rolldown/binding-linux-arm-gnueabihf": ["@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "arm" }, "sha512-cVwk0w8QbZJGTnP/AHQBs5yNwmpgGYStL88t4UIaqcvYJWBfS0s3oqVLZPwsPU6M0zlW4GqjP0Zq5MnAGwFeGA=="],
+    "@rolldown/binding-linux-arm-gnueabihf": ["@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.16", "", { "os": "linux", "cpu": "arm" }, "sha512-bT0guA1bpxEJ/ZhTRniQf7rNF8ybvXOuWbNIeLABaV5NGjx4EtOWBTSRGWFU9ZWVkPOZ+HNFP8RMcBokBiZ0Kg=="],
-    "@rolldown/binding-linux-arm64-gnu": ["@rolldown/binding-linux-arm64-gnu@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "arm64" }, "sha512-eBZ/u8iAK9SoHGanqe/jrPnY0JvBN6iXbVOsbO38mbz+ZJsaobExAm1Iu+rxa4S1l2FjG0qEZn4Rc6X8n+9M+w=="],
+    "@rolldown/binding-linux-arm64-gnu": ["@rolldown/binding-linux-arm64-gnu@1.0.0-rc.16", "", { "os": "linux", "cpu": "arm64" }, "sha512-+tHktCHWV8BDQSjemUqm/Jl/TPk3QObCTIjmdDy/nlupcujZghmKK2962LYrqFpWu+ai01AN/REOH3NEpqvYQg=="],
-    "@rolldown/binding-linux-arm64-musl": ["@rolldown/binding-linux-arm64-musl@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "arm64" }, "sha512-ZvRYMGrAklV9PEkgt4LQM6MjQX2P58HPAuecwYObY2DhS2t35R0I810bKi0wmaYORt6m/2Sm+Z+nFgb0WhXNcQ=="],
+    "@rolldown/binding-linux-arm64-musl": ["@rolldown/binding-linux-arm64-musl@1.0.0-rc.16", "", { "os": "linux", "cpu": "arm64" }, "sha512-3fPzdREH806oRLxpTWW1Gt4tQHs0TitZFOECB2xzCFLPKnSOy90gwA7P29cksYilFO6XVRY1kzga0cL2nRjKPg=="],
-    "@rolldown/binding-linux-ppc64-gnu": ["@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "ppc64" }, "sha512-VDpgGBzgfg5hLg+uBpCLoFG5kVvEyafmfxGUV0UHLcL5irxAK7PKNeC2MwClgk6ZAiNhmo9FLhRYgvMmedLtnQ=="],
+    "@rolldown/binding-linux-ppc64-gnu": ["@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.16", "", { "os": "linux", "cpu": "ppc64" }, "sha512-EKwI1tSrLs7YVw+JPJT/G2dJQ1jl9qlTTTEG0V2Ok/RdOenRfBw2PQdLPyjhIu58ocdBfP7vIRN/pvMsPxs/AQ=="],
-    "@rolldown/binding-linux-s390x-gnu": ["@rolldown/binding-linux-s390x-gnu@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "s390x" }, "sha512-y1uXY3qQWCzcPgRJATPSOUP4tCemh4uBdY7e3EZbVwCJTY3gLJWnQABgeUetvED+bt1FQ01OeZwvhLS2bpNrAQ=="],
+    "@rolldown/binding-linux-s390x-gnu": ["@rolldown/binding-linux-s390x-gnu@1.0.0-rc.16", "", { "os": "linux", "cpu": "s390x" }, "sha512-Uknladnb3Sxqu6SEcqBldQyJUpk8NleooZEc0MbRBJ4inEhRYWZX0NJu12vNf2mqAq7gsofAxHrGghiUYjhaLQ=="],
-    "@rolldown/binding-linux-x64-gnu": ["@rolldown/binding-linux-x64-gnu@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "x64" }, "sha512-023bTPBod7J3Y/4fzAN6QtpkSABR0rigtrwaP+qSEabUh5zf6ELr9Nc7GujaROuPY3uwdSIXWrvhn1KxOvurWA=="],
+    "@rolldown/binding-linux-x64-gnu": ["@rolldown/binding-linux-x64-gnu@1.0.0-rc.16", "", { "os": "linux", "cpu": "x64" }, "sha512-FIb8+uG49sZBtLTn+zt1AJ20TqVcqWeSIyoVt0or7uAWesgKaHbiBh6OpA/k9v0LTt+PTrb1Lao133kP4uVxkg=="],
-    "@rolldown/binding-linux-x64-musl": ["@rolldown/binding-linux-x64-musl@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "x64" }, "sha512-witB2O0/hU4CgfOOKUoeFgQ4GktPi1eEbAhaLAIpgD6+ZnhcPkUtPsoKKHRzmOoWPZue46IThdSgdo4XneOLYw=="],
+    "@rolldown/binding-linux-x64-musl": ["@rolldown/binding-linux-x64-musl@1.0.0-rc.16", "", { "os": "linux", "cpu": "x64" }, "sha512-RuERhF9/EgWxZEXYWCOaViUWHIboceK4/ivdtQ3R0T44NjLkIIlGIAVAuCddFxsZ7vnRHtNQUrt2vR2n2slB2w=="],
-    "@rolldown/binding-openharmony-arm64": ["@rolldown/binding-openharmony-arm64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.0.0-rc.15.tgz", { "os": "none", "cpu": "arm64" }, "sha512-UCL68NJ0Ud5zRipXZE9dF5PmirzJE4E4BCIOOssEnM7wLDsxjc6Qb0sGDxTNRTP53I6MZpygyCpY8Aa8sPfKPg=="],
+    "@rolldown/binding-openharmony-arm64": ["@rolldown/binding-openharmony-arm64@1.0.0-rc.16", "", { "os": "none", "cpu": "arm64" }, "sha512-mXcXnvd9GpazCxeUCCnZ2+YF7nut+ZOEbE4GtaiPtyY6AkhZWbK70y1KK3j+RDhjVq5+U8FySkKRb/+w0EeUwA=="],
-    "@rolldown/binding-wasm32-wasi": ["@rolldown/binding-wasm32-wasi@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-wasm32-wasi/-/binding-wasm32-wasi-1.0.0-rc.15.tgz", { "dependencies": { "@emnapi/core": "1.9.2", "@emnapi/runtime": "1.9.2", "@napi-rs/wasm-runtime": "^1.1.3" }, "cpu": "none" }, "sha512-ApLruZq/ig+nhaE7OJm4lDjayUnOHVUa77zGeqnqZ9pn0ovdVbbNPerVibLXDmWeUZXjIYIT8V3xkT58Rm9u5Q=="],
+    "@rolldown/binding-wasm32-wasi": ["@rolldown/binding-wasm32-wasi@1.0.0-rc.16", "", { "dependencies": { "@emnapi/core": "1.9.2", "@emnapi/runtime": "1.9.2", "@napi-rs/wasm-runtime": "^1.1.4" }, "cpu": "none" }, "sha512-3Q2KQxnC8IJOLqXmUMoYwyIPZU9hzRbnHaoV3Euz+VVnjZKcY8ktnNP8T9R4/GGQtb27C/UYKABxesKWb8lsvQ=="],
-    "@rolldown/binding-win32-arm64-msvc": ["@rolldown/binding-win32-arm64-msvc@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.0.0-rc.15.tgz", { "os": "win32", "cpu": "arm64" }, "sha512-KmoUoU7HnN+Si5YWJigfTws1jz1bKBYDQKdbLspz0UaqjjFkddHsqorgiW1mxcAj88lYUE6NC/zJNwT+SloqtA=="],
+    "@rolldown/binding-win32-arm64-msvc": ["@rolldown/binding-win32-arm64-msvc@1.0.0-rc.16", "", { "os": "win32", "cpu": "arm64" }, "sha512-tj7XRemQcOcFwv7qhpUxMTBbI5mWMlE4c1Omhg5+h8GuLXzyj8HviYgR+bB2DMDgRqUE+jiDleqSCRjx4aYk/Q=="],
-    "@rolldown/binding-win32-x64-msvc": ["@rolldown/binding-win32-x64-msvc@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.0.0-rc.15.tgz", { "os": "win32", "cpu": "x64" }, "sha512-3P2A8L+x75qavWLe/Dll3EYBJLQmtkJN8rfh+U/eR3MqMgL/h98PhYI+JFfXuDPgPeCB7iZAKiqii5vqOvnA0g=="],
+    "@rolldown/binding-win32-x64-msvc": ["@rolldown/binding-win32-x64-msvc@1.0.0-rc.16", "", { "os": "win32", "cpu": "x64" }, "sha512-PH5DRZT+F4f2PTXRXR8uJxnBq2po/xFtddyabTJVJs/ZYVHqXPEgNIr35IHTEa6bpa0Q8Awg+ymkTaGnKITw4g=="],
    "@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-rc.7", "http://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.7.tgz", {}, "sha512-qujRfC8sFVInYSPPMLQByRh7zhwkGFS4+tyMQ83srV1qrxL4g8E2tyxVVyxd0+8QeBM1mIk9KbWxkegRr76XzA=="],
-    "@stylistic/eslint-plugin": ["@stylistic/eslint-plugin@5.10.0", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.9.1", "@typescript-eslint/types": "^8.56.0", "eslint-visitor-keys": "^4.2.1", "espree": "^10.4.0", "estraverse": "^5.3.0", "picomatch": "^4.0.3" }, "peerDependencies": { "eslint": "^9.0.0 || ^10.0.0" } }, "sha512-nPK52ZHvot8Ju/0A4ucSX1dcPV2/1clx0kLcH5wDmrE4naKso7TUC/voUyU1O9OTKTrR6MYip6LP0ogEMQ9jPQ=="],
+    "@stylistic/eslint-plugin": ["@stylistic/eslint-plugin@5.10.0", "http://registry.npmjs.org/@stylistic/eslint-plugin/-/eslint-plugin-5.10.0.tgz", { "dependencies": { "@eslint-community/eslint-utils": "^4.9.1", "@typescript-eslint/types": "^8.56.0", "eslint-visitor-keys": "^4.2.1", "espree": "^10.4.0", "estraverse": "^5.3.0", "picomatch": "^4.0.3" }, "peerDependencies": { "eslint": "^9.0.0 || ^10.0.0" } }, "sha512-nPK52ZHvot8Ju/0A4ucSX1dcPV2/1clx0kLcH5wDmrE4naKso7TUC/voUyU1O9OTKTrR6MYip6LP0ogEMQ9jPQ=="],
    "@tanstack/query-core": ["@tanstack/query-core@5.99.2", "http://registry.npmjs.org/@tanstack/query-core/-/query-core-5.99.2.tgz", {}, "sha512-1HunU0bXVsR1ZJMZbcOPE6VtaBJxsW809RE9xPe4Gz7MlB0GWwQvuTPhMoEmQ/hIzFKJ/DWAuttIe7BOaWx0tA=="],
@@ -270,7 +270,7 @@
    "@types/d3-timer": ["@types/d3-timer@3.0.2", "http://registry.npmjs.org/@types/d3-timer/-/d3-timer-3.0.2.tgz", {}, "sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw=="],
-    "@types/esrecurse": ["@types/esrecurse@4.3.1", "", {}, "sha512-xJBAbDifo5hpffDBuHl0Y8ywswbiAp/Wi7Y/GtAgSlZyIABppyurxVueOPE8LUQOxdlgi6Zqce7uoEpqNTeiUw=="],
+    "@types/esrecurse": ["@types/esrecurse@4.3.1", "http://registry.npmjs.org/@types/esrecurse/-/esrecurse-4.3.1.tgz", {}, "sha512-xJBAbDifo5hpffDBuHl0Y8ywswbiAp/Wi7Y/GtAgSlZyIABppyurxVueOPE8LUQOxdlgi6Zqce7uoEpqNTeiUw=="],
    "@types/estree": ["@types/estree@1.0.8", "http://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz", {}, "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w=="],
@@ -318,7 +318,7 @@
    "balanced-match": ["balanced-match@1.0.0", "http://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz", {}, "sha512-9Y0g0Q8rmSt+H33DfKv7FOc3v+iRI+o1lbzt8jGcIosYW37IIW/2XVYq5NPdmaD5NQ59Nk26Kl/vZbwW9Fr8vg=="],
-    "baseline-browser-mapping": ["baseline-browser-mapping@2.10.20", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-1AaXxEPfXT+GvTBJFuy4yXVHWJBXa4OdbIebGN/wX5DlsIkU0+wzGnd2lOzokSk51d5LUmqjgBLRLlypLUqInQ=="],
+    "baseline-browser-mapping": ["baseline-browser-mapping@2.10.20", "http://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.10.20.tgz", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-1AaXxEPfXT+GvTBJFuy4yXVHWJBXa4OdbIebGN/wX5DlsIkU0+wzGnd2lOzokSk51d5LUmqjgBLRLlypLUqInQ=="],
    "bezier-easing": ["bezier-easing@2.1.0", "http://registry.npmjs.org/bezier-easing/-/bezier-easing-2.1.0.tgz", {}, "sha512-gbIqZ/eslnUFC1tjEvtz0sgx+xTK20wDnYMIA27VA04R7w6xxXQPZDbibjA9DTWZRA2CXtwHykkVzlCaAJAZig=="],
@@ -326,7 +326,7 @@
    "braces": ["braces@3.0.3", "http://registry.npmjs.org/braces/-/braces-3.0.3.tgz", { "dependencies": { "fill-range": "^7.1.1" } }, "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA=="],
-    "browserslist": ["browserslist@4.28.2", "", { "dependencies": { "baseline-browser-mapping": "^2.10.12", "caniuse-lite": "^1.0.30001782", "electron-to-chromium": "^1.5.328", "node-releases": "^2.0.36", "update-browserslist-db": "^1.2.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg=="],
+    "browserslist": ["browserslist@4.28.2", "http://registry.npmjs.org/browserslist/-/browserslist-4.28.2.tgz", { "dependencies": { "baseline-browser-mapping": "^2.10.12", "caniuse-lite": "^1.0.30001782", "electron-to-chromium": "^1.5.328", "node-releases": "^2.0.36", "update-browserslist-db": "^1.2.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg=="],
    "call-bind": ["call-bind@1.0.9", "http://registry.npmjs.org/call-bind/-/call-bind-1.0.9.tgz", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "get-intrinsic": "^1.3.0", "set-function-length": "^1.2.2" } }, "sha512-a/hy+pNsFUTR+Iz8TCJvXudKVLAnz/DyeSUo10I5yvFDQJBFU2s9uqQpoSrJlroHUKoKqzg+epxyP9lqFdzfBQ=="],
@@ -336,7 +336,7 @@
    "callsites": ["callsites@3.1.0", "http://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz", {}, "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ=="],
-    "caniuse-lite": ["caniuse-lite@1.0.30001788", "", {}, "sha512-6q8HFp+lOQtcf7wBK+uEenxymVWkGKkjFpCvw5W25cmMwEDU45p1xQFBQv8JDlMMry7eNxyBaR+qxgmTUZkIRQ=="],
+    "caniuse-lite": ["caniuse-lite@1.0.30001788", "http://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001788.tgz", {}, "sha512-6q8HFp+lOQtcf7wBK+uEenxymVWkGKkjFpCvw5W25cmMwEDU45p1xQFBQv8JDlMMry7eNxyBaR+qxgmTUZkIRQ=="],
    "chokidar": ["chokidar@4.0.3", "http://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz", { "dependencies": { "readdirp": "^4.0.1" } }, "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA=="],
@@ -344,7 +344,7 @@
    "concat-map": ["concat-map@0.0.1", "http://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", {}, "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg=="],
-    "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="],
+    "convert-source-map": ["convert-source-map@2.0.0", "http://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="],
    "cosmiconfig": ["cosmiconfig@7.1.0", "http://registry.npmjs.org/cosmiconfig/-/cosmiconfig-7.1.0.tgz", { "dependencies": { "@types/parse-json": "^4.0.0", "import-fresh": "^3.2.1", "parse-json": "^5.0.0", "path-type": "^4.0.0", "yaml": "^1.10.0" } }, "sha512-AdmX6xUzdNASswsFtmwSt7Vj8po9IuqXm0UXz7QKPuEUmPB4XyjGfaAr2PSuELMwkRMVH1EpIkX5bTZGRB3eCA=="],
@@ -394,7 +394,7 @@
    "dunder-proto": ["dunder-proto@1.0.1", "http://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", { "dependencies": { "call-bind-apply-helpers": "^1.0.1", "es-errors": "^1.3.0", "gopd": "^1.2.0" } }, "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A=="],
-    "electron-to-chromium": ["electron-to-chromium@1.5.340", "", {}, "sha512-908qahOGocRMinT2nM3ajCEM99H4iPdv84eagPP3FfZy/1ZGeOy2CZYzjhms81ckOPCXPlW7LkY4XpxD8r1DrA=="],
+    "electron-to-chromium": ["electron-to-chromium@1.5.340", "http://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.340.tgz", {}, "sha512-908qahOGocRMinT2nM3ajCEM99H4iPdv84eagPP3FfZy/1ZGeOy2CZYzjhms81ckOPCXPlW7LkY4XpxD8r1DrA=="],
    "error-ex": ["error-ex@1.3.4", "http://registry.npmjs.org/error-ex/-/error-ex-1.3.4.tgz", { "dependencies": { "is-arrayish": "^0.2.1" } }, "sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ=="],
@@ -414,17 +414,17 @@
    "es-to-primitive": ["es-to-primitive@1.3.0", "http://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.3.0.tgz", { "dependencies": { "is-callable": "^1.2.7", "is-date-object": "^1.0.5", "is-symbol": "^1.0.4" } }, "sha512-w+5mJ3GuFL+NjVtJlvydShqE1eN3h3PbI7/5LAsYJP/2qtuMXjfL2LpHSRqo4b4eSF5K/DH1JXKUAHSB2UW50g=="],
-    "escalade": ["escalade@3.2.0", "", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="],
+    "escalade": ["escalade@3.2.0", "http://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="],
    "escape-string-regexp": ["escape-string-regexp@4.0.0", "http://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz", {}, "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA=="],
-    "eslint": ["eslint@10.2.1", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.2", "@eslint/config-array": "^0.23.5", "@eslint/config-helpers": "^0.5.5", "@eslint/core": "^1.2.1", "@eslint/plugin-kit": "^0.7.1", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", "@humanwhocodes/retry": "^0.4.2", "@types/estree": "^1.0.6", "ajv": "^6.14.0", "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^9.1.2", "eslint-visitor-keys": "^5.0.1", "espree": "^11.2.0", "esquery": "^1.7.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", "file-entry-cache": "^8.0.0", "find-up": "^5.0.0", "glob-parent": "^6.0.2", "ignore": "^5.2.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "json-stable-stringify-without-jsonify": "^1.0.1", "minimatch": "^10.2.4", "natural-compare": "^1.4.0", "optionator": "^0.9.3" }, "peerDependencies": { "jiti": "*" }, "optionalPeers": ["jiti"], "bin": { "eslint": "bin/eslint.js" } }, "sha512-wiyGaKsDgqXvF40P8mDwiUp/KQjE1FdrIEJsM8PZ3XCiniTMXS3OHWWUe5FI5agoCnr8x4xPrTDZuxsBlNHl+Q=="],
+    "eslint": ["eslint@10.2.1", "http://registry.npmjs.org/eslint/-/eslint-10.2.1.tgz", { "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.2", "@eslint/config-array": "^0.23.5", "@eslint/config-helpers": "^0.5.5", "@eslint/core": "^1.2.1", "@eslint/plugin-kit": "^0.7.1", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", "@humanwhocodes/retry": "^0.4.2", "@types/estree": "^1.0.6", "ajv": "^6.14.0", "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^9.1.2", "eslint-visitor-keys": "^5.0.1", "espree": "^11.2.0", "esquery": "^1.7.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", "file-entry-cache": "^8.0.0", "find-up": "^5.0.0", "glob-parent": "^6.0.2", "ignore": "^5.2.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "json-stable-stringify-without-jsonify": "^1.0.1", "minimatch": "^10.2.4", "natural-compare": "^1.4.0", "optionator": "^0.9.3" }, "peerDependencies": { "jiti": "*" }, "optionalPeers": ["jiti"], "bin": { "eslint": "bin/eslint.js" } }, "sha512-wiyGaKsDgqXvF40P8mDwiUp/KQjE1FdrIEJsM8PZ3XCiniTMXS3OHWWUe5FI5agoCnr8x4xPrTDZuxsBlNHl+Q=="],
    "eslint-plugin-react": ["eslint-plugin-react@7.37.5", "http://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.37.5.tgz", { "dependencies": { "array-includes": "^3.1.8", "array.prototype.findlast": "^1.2.5", "array.prototype.flatmap": "^1.3.3", "array.prototype.tosorted": "^1.1.4", "doctrine": "^2.1.0", "es-iterator-helpers": "^1.2.1", "estraverse": "^5.3.0", "hasown": "^2.0.2", "jsx-ast-utils": "^2.4.1 || ^3.0.0", "minimatch": "^3.1.2", "object.entries": "^1.1.9", "object.fromentries": "^2.0.8", "object.values": "^1.2.1", "prop-types": "^15.8.1", "resolve": "^2.0.0-next.5", "semver": "^6.3.1", "string.prototype.matchall": "^4.0.12", "string.prototype.repeat": "^1.0.0" }, "peerDependencies": { "eslint": "^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9.7" } }, "sha512-Qteup0SqU15kdocexFNAJMvCJEfa2xUKNV4CC1xsVMrIIqEy3SQ/rqyxCWNzfrd3/ldy6HMlD2e0JDVpDg2qIA=="],
-    "eslint-plugin-react-hooks": ["eslint-plugin-react-hooks@7.1.1", "", { "dependencies": { "@babel/core": "^7.24.4", "@babel/parser": "^7.24.4", "hermes-parser": "^0.25.1", "zod": "^3.25.0 || ^4.0.0", "zod-validation-error": "^3.5.0 || ^4.0.0" }, "peerDependencies": { "eslint": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0 || ^9.0.0 || ^10.0.0" } }, "sha512-f2I7Gw6JbvCexzIInuSbZpfdQ44D7iqdWX01FKLvrPgqxoE7oMj8clOfto8U6vYiz4yd5oKu39rRSVOe1zRu0g=="],
+    "eslint-plugin-react-hooks": ["eslint-plugin-react-hooks@7.1.1", "http://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-7.1.1.tgz", { "dependencies": { "@babel/core": "^7.24.4", "@babel/parser": "^7.24.4", "hermes-parser": "^0.25.1", "zod": "^3.25.0 || ^4.0.0", "zod-validation-error": "^3.5.0 || ^4.0.0" }, "peerDependencies": { "eslint": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0 || ^9.0.0 || ^10.0.0" } }, "sha512-f2I7Gw6JbvCexzIInuSbZpfdQ44D7iqdWX01FKLvrPgqxoE7oMj8clOfto8U6vYiz4yd5oKu39rRSVOe1zRu0g=="],
-    "eslint-scope": ["eslint-scope@9.1.2", "", { "dependencies": { "@types/esrecurse": "^4.3.1", "@types/estree": "^1.0.8", "esrecurse": "^4.3.0", "estraverse": "^5.2.0" } }, "sha512-xS90H51cKw0jltxmvmHy2Iai1LIqrfbw57b79w/J7MfvDfkIkFZ+kj6zC3BjtUwh150HsSSdxXZcsuv72miDFQ=="],
+    "eslint-scope": ["eslint-scope@9.1.2", "http://registry.npmjs.org/eslint-scope/-/eslint-scope-9.1.2.tgz", { "dependencies": { "@types/esrecurse": "^4.3.1", "@types/estree": "^1.0.8", "esrecurse": "^4.3.0", "estraverse": "^5.2.0" } }, "sha512-xS90H51cKw0jltxmvmHy2Iai1LIqrfbw57b79w/J7MfvDfkIkFZ+kj6zC3BjtUwh150HsSSdxXZcsuv72miDFQ=="],
    "eslint-visitor-keys": ["eslint-visitor-keys@4.2.1", "http://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.1.tgz", {}, "sha512-Uhdk5sfqcee/9H/rCOJikYz67o0a2Tw2hGRPOG2Y1R2dg7brRe1uG0yaNQDHu+TO/uQPF/5eCapvYSmHUjt7JQ=="],
@@ -476,7 +476,7 @@
    "generator-function": ["generator-function@2.0.1", "http://registry.npmjs.org/generator-function/-/generator-function-2.0.1.tgz", {}, "sha512-SFdFmIJi+ybC0vjlHN0ZGVGHc3lgE0DxPAT0djjVg+kjOnSqclqmj0KQ7ykTOLP6YxoqOvuAODGdcHJn+43q3g=="],
-    "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],
+    "gensync": ["gensync@1.0.0-beta.2", "http://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],
    "get-intrinsic": ["get-intrinsic@1.3.0", "http://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.1.1", "function-bind": "^1.1.2", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-symbols": "^1.1.0", "hasown": "^2.0.2", "math-intrinsics": "^1.1.0" } }, "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ=="],
@@ -486,7 +486,7 @@
    "glob-parent": ["glob-parent@6.0.2", "http://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz", { "dependencies": { "is-glob": "^4.0.3" } }, "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A=="],
-    "globals": ["globals@17.5.0", "", {}, "sha512-qoV+HK2yFl/366t2/Cb3+xxPUo5BuMynomoDmiaZBIdbs+0pYbjfZU+twLhGKp4uCZ/+NbtpVepH5bGCxRyy2g=="],
+    "globals": ["globals@17.5.0", "http://registry.npmjs.org/globals/-/globals-17.5.0.tgz", {}, "sha512-qoV+HK2yFl/366t2/Cb3+xxPUo5BuMynomoDmiaZBIdbs+0pYbjfZU+twLhGKp4uCZ/+NbtpVepH5bGCxRyy2g=="],
    "globalthis": ["globalthis@1.0.4", "http://registry.npmjs.org/globalthis/-/globalthis-1.0.4.tgz", { "dependencies": { "define-properties": "^1.2.1", "gopd": "^1.0.1" } }, "sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ=="],
@@ -504,9 +504,9 @@
    "hasown": ["hasown@2.0.2", "http://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ=="],
-    "hermes-estree": ["hermes-estree@0.25.1", "", {}, "sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw=="],
+    "hermes-estree": ["hermes-estree@0.25.1", "http://registry.npmjs.org/hermes-estree/-/hermes-estree-0.25.1.tgz", {}, "sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw=="],
-    "hermes-parser": ["hermes-parser@0.25.1", "", { "dependencies": { "hermes-estree": "0.25.1" } }, "sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA=="],
+    "hermes-parser": ["hermes-parser@0.25.1", "http://registry.npmjs.org/hermes-parser/-/hermes-parser-0.25.1.tgz", { "dependencies": { "hermes-estree": "0.25.1" } }, "sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA=="],
    "hoist-non-react-statics": ["hoist-non-react-statics@3.3.2", "http://registry.npmjs.org/hoist-non-react-statics/-/hoist-non-react-statics-3.3.2.tgz", { "dependencies": { "react-is": "^16.7.0" } }, "sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw=="],
@@ -596,7 +596,7 @@
    "json-stable-stringify-without-jsonify": ["json-stable-stringify-without-jsonify@1.0.1", "http://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz", {}, "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw=="],
-    "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
+    "json5": ["json5@2.2.3", "http://registry.npmjs.org/json5/-/json5-2.2.3.tgz", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
    "jsx-ast-utils": ["jsx-ast-utils@3.3.5", "http://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz", { "dependencies": { "array-includes": "^3.1.6", "array.prototype.flat": "^1.3.1", "object.assign": "^4.1.4", "object.values": "^1.1.6" } }, "sha512-ZZow9HBI5O6EPgSJLUb8n2NKgmVWTwCvHGwFuJlMjvLFqlGG6pjirPhtdsseaLZjSibD8eegzmYpUZwoIlj2cQ=="],
@@ -636,7 +636,7 @@
    "loose-envify": ["loose-envify@1.4.0", "http://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz", { "dependencies": { "js-tokens": "^3.0.0 || ^4.0.0" }, "bin": "cli.js" }, "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
-    "lru-cache": ["lru-cache@5.1.1", "", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
+    "lru-cache": ["lru-cache@5.1.1", "http://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
    "math-intrinsics": ["math-intrinsics@1.1.0", "http://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", {}, "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g=="],
@@ -658,7 +658,7 @@
    "node-exports-info": ["node-exports-info@1.6.0", "http://registry.npmjs.org/node-exports-info/-/node-exports-info-1.6.0.tgz", { "dependencies": { "array.prototype.flatmap": "^1.3.3", "es-errors": "^1.3.0", "object.entries": "^1.1.9", "semver": "^6.3.1" } }, "sha512-pyFS63ptit/P5WqUkt+UUfe+4oevH+bFeIiPPdfb0pFeYEu/1ELnJu5l+5EcTKYL5M7zaAa7S8ddywgXypqKCw=="],
-    "node-releases": ["node-releases@2.0.37", "", {}, "sha512-1h5gKZCF+pO/o3Iqt5Jp7wc9rH3eJJ0+nh/CIoiRwjRxde/hAHyLPXYN4V3CqKAbiZPSeJFSWHmJsbkicta0Eg=="],
+    "node-releases": ["node-releases@2.0.37", "http://registry.npmjs.org/node-releases/-/node-releases-2.0.37.tgz", {}, "sha512-1h5gKZCF+pO/o3Iqt5Jp7wc9rH3eJJ0+nh/CIoiRwjRxde/hAHyLPXYN4V3CqKAbiZPSeJFSWHmJsbkicta0Eg=="],
    "object-assign": ["object-assign@4.1.1", "http://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", {}, "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg=="],
@@ -700,7 +700,7 @@
    "possible-typed-array-names": ["possible-typed-array-names@1.1.0", "http://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz", {}, "sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg=="],
-    "postcss": ["postcss@8.5.9", "http://registry.npmjs.org/postcss/-/postcss-8.5.9.tgz", { "dependencies": { "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-7a70Nsot+EMX9fFU3064K/kdHWZqGVY+BADLyXc8Dfv+mTLLVl6JzJpPaCZ2kQL9gIJvKXSLMHhqdRRjwQeFtw=="],
+    "postcss": ["postcss@8.5.10", "", { "dependencies": { "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ=="],
    "prelude-ls": ["prelude-ls@1.2.1", "http://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz", {}, "sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g=="],
@@ -732,7 +732,7 @@
    "reusify": ["reusify@1.1.0", "http://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz", {}, "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw=="],
-    "rolldown": ["rolldown@1.0.0-rc.15", "http://registry.npmjs.org/rolldown/-/rolldown-1.0.0-rc.15.tgz", { "dependencies": { "@oxc-project/types": "=0.124.0", "@rolldown/pluginutils": "1.0.0-rc.15" }, "optionalDependencies": { "@rolldown/binding-android-arm64": "1.0.0-rc.15", "@rolldown/binding-darwin-arm64": "1.0.0-rc.15", "@rolldown/binding-darwin-x64": "1.0.0-rc.15", "@rolldown/binding-freebsd-x64": "1.0.0-rc.15", "@rolldown/binding-linux-arm-gnueabihf": "1.0.0-rc.15", "@rolldown/binding-linux-arm64-gnu": "1.0.0-rc.15", "@rolldown/binding-linux-arm64-musl": "1.0.0-rc.15", "@rolldown/binding-linux-ppc64-gnu": "1.0.0-rc.15", "@rolldown/binding-linux-s390x-gnu": "1.0.0-rc.15", "@rolldown/binding-linux-x64-gnu": "1.0.0-rc.15", "@rolldown/binding-linux-x64-musl": "1.0.0-rc.15", "@rolldown/binding-openharmony-arm64": "1.0.0-rc.15", "@rolldown/binding-wasm32-wasi": "1.0.0-rc.15", "@rolldown/binding-win32-arm64-msvc": "1.0.0-rc.15", "@rolldown/binding-win32-x64-msvc": "1.0.0-rc.15" }, "bin": { "rolldown": "bin/cli.mjs" } }, "sha512-Ff31guA5zT6WjnGp0SXw76X6hzGRk/OQq2hE+1lcDe+lJdHSgnSX6nK3erbONHyCbpSj9a9E+uX/OvytZoWp2g=="],
+    "rolldown": ["rolldown@1.0.0-rc.16", "", { "dependencies": { "@oxc-project/types": "=0.126.0", "@rolldown/pluginutils": "1.0.0-rc.16" }, "optionalDependencies": { "@rolldown/binding-android-arm64": "1.0.0-rc.16", "@rolldown/binding-darwin-arm64": "1.0.0-rc.16", "@rolldown/binding-darwin-x64": "1.0.0-rc.16", "@rolldown/binding-freebsd-x64": "1.0.0-rc.16", "@rolldown/binding-linux-arm-gnueabihf": "1.0.0-rc.16", "@rolldown/binding-linux-arm64-gnu": "1.0.0-rc.16", "@rolldown/binding-linux-arm64-musl": "1.0.0-rc.16", "@rolldown/binding-linux-ppc64-gnu": "1.0.0-rc.16", "@rolldown/binding-linux-s390x-gnu": "1.0.0-rc.16", "@rolldown/binding-linux-x64-gnu": "1.0.0-rc.16", "@rolldown/binding-linux-x64-musl": "1.0.0-rc.16", "@rolldown/binding-openharmony-arm64": "1.0.0-rc.16", "@rolldown/binding-wasm32-wasi": "1.0.0-rc.16", "@rolldown/binding-win32-arm64-msvc": "1.0.0-rc.16", "@rolldown/binding-win32-x64-msvc": "1.0.0-rc.16" }, "bin": { "rolldown": "bin/cli.mjs" } }, "sha512-rzi5WqKzEZw3SooTt7cgm4eqIoujPIyGcJNGFL7iPEuajQw7vxMHUkXylu4/vhCkJGXsgRmxqMKXUpT6FEgl0g=="],
    "run-parallel": ["run-parallel@1.2.0", "http://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz", { "dependencies": { "queue-microtask": "^1.2.2" } }, "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA=="],
@@ -810,13 +810,13 @@
    "unbox-primitive": ["unbox-primitive@1.1.0", "http://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz", { "dependencies": { "call-bound": "^1.0.3", "has-bigints": "^1.0.2", "has-symbols": "^1.1.0", "which-boxed-primitive": "^1.1.1" } }, "sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw=="],
-    "update-browserslist-db": ["update-browserslist-db@1.2.3", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w=="],
+    "update-browserslist-db": ["update-browserslist-db@1.2.3", "http://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w=="],
    "uri-js": ["uri-js@4.4.1", "http://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", { "dependencies": { "punycode": "^2.1.0" } }, "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg=="],
    "use-sync-external-store": ["use-sync-external-store@1.6.0", "http://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.6.0.tgz", { "peerDependencies": { "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w=="],
-    "vite": ["vite@8.0.8", "http://registry.npmjs.org/vite/-/vite-8.0.8.tgz", { "dependencies": { "lightningcss": "^1.32.0", "picomatch": "^4.0.4", "postcss": "^8.5.8", "rolldown": "1.0.0-rc.15", "tinyglobby": "^0.2.15" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "@vitejs/devtools": "^0.1.0", "esbuild": "^0.27.0 || ^0.28.0", "jiti": ">=1.21.0", "less": "^4.0.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "@vitejs/devtools", "esbuild", "jiti", "less", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-dbU7/iLVa8KZALJyLOBOQ88nOXtNG8vxKuOT4I2mD+Ya70KPceF4IAmDsmU0h1Qsn5bPrvsY9HJstCRh3hG6Uw=="],
+    "vite": ["vite@8.0.9", "", { "dependencies": { "lightningcss": "^1.32.0", "picomatch": "^4.0.4", "postcss": "^8.5.10", "rolldown": "1.0.0-rc.16", "tinyglobby": "^0.2.16" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "@vitejs/devtools": "^0.1.0", "esbuild": "^0.27.0 || ^0.28.0", "jiti": ">=1.21.0", "less": "^4.0.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "@vitejs/devtools", "esbuild", "jiti", "less", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-t7g7GVRpMXjNpa67HaVWI/8BWtdVIQPCL2WoozXXA7LBGEFK4AkkKkHx2hAQf5x1GZSlcmEDPkVLSGahxnEEZw=="],
    "vite-plugin-symfony": ["vite-plugin-symfony@8.2.4", "http://registry.npmjs.org/vite-plugin-symfony/-/vite-plugin-symfony-8.2.4.tgz", { "dependencies": { "debug": "^4.4.1", "fast-glob": "^3.3.3", "picocolors": "^1.1.1", "sirv": "^3.0.1" }, "peerDependencies": { "vite": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" } }, "sha512-ph98EMPx8FhA6QIp43ZiK0zjODV9jumB7EHXfZEhRme2lo9oBa9sAXCNCCIvdVk/m9EWkNZpcRBjequjXZiSuA=="],
@@ -832,15 +832,15 @@
    "word-wrap": ["word-wrap@1.2.5", "http://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz", {}, "sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA=="],
-    "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
+    "yallist": ["yallist@3.1.1", "http://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
    "yaml": ["yaml@1.10.3", "http://registry.npmjs.org/yaml/-/yaml-1.10.3.tgz", {}, "sha512-vIYeF1u3CjlhAFekPPAk2h/Kv4T3mAkMox5OymRiJQB0spDP10LHvt+K7G9Ny6NuuMAb25/6n1qyUjAcGNf/AA=="],
    "yocto-queue": ["yocto-queue@0.1.0", "http://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz", {}, "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q=="],
-    "zod": ["zod@4.3.6", "", {}, "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg=="],
+    "zod": ["zod@4.3.6", "http://registry.npmjs.org/zod/-/zod-4.3.6.tgz", {}, "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg=="],
-    "zod-validation-error": ["zod-validation-error@4.0.2", "", { "peerDependencies": { "zod": "^3.25.0 || ^4.0.0" } }, "sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ=="],
+    "zod-validation-error": ["zod-validation-error@4.0.2", "http://registry.npmjs.org/zod-validation-error/-/zod-validation-error-4.0.2.tgz", { "peerDependencies": { "zod": "^3.25.0 || ^4.0.0" } }, "sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ=="],
    "@emotion/babel-plugin/convert-source-map": ["convert-source-map@1.9.0", "http://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz", {}, "sha512-ASFBup0Mz1uyiIjANan1jzLQami9z1PoYSZCiiYW2FczPbenXc45FZdBZLzOT+r6+iciuEModtmCti+hjaAk0A=="],
@@ -854,7 +854,7 @@
    "eslint/eslint-visitor-keys": ["eslint-visitor-keys@5.0.1", "http://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-5.0.1.tgz", {}, "sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA=="],
-    "eslint/espree": ["espree@11.2.0", "", { "dependencies": { "acorn": "^8.16.0", "acorn-jsx": "^5.3.2", "eslint-visitor-keys": "^5.0.1" } }, "sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw=="],
+    "eslint/espree": ["espree@11.2.0", "http://registry.npmjs.org/espree/-/espree-11.2.0.tgz", { "dependencies": { "acorn": "^8.16.0", "acorn-jsx": "^5.3.2", "eslint-visitor-keys": "^5.0.1" } }, "sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw=="],
    "eslint/minimatch": ["minimatch@10.2.5", "http://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz", { "dependencies": { "brace-expansion": "^5.0.5" } }, "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg=="],
@@ -866,7 +866,7 @@
    "prop-types/react-is": ["react-is@16.13.1", "http://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz", {}, "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ=="],
-    "rolldown/@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.15.tgz", {}, "sha512-UromN0peaE53IaBRe9W7CjrZgXl90fqGpK+mIZbA3qSTeYqg3pqpROBdIPvOG3F5ereDHNwoHBI2e50n1BDr1g=="],
+    "rolldown/@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-rc.16", "", {}, "sha512-45+YtqxLYKDWQouLKCrpIZhke+nXxhsw+qAHVzHDVwttyBlHNBVs2K25rDXrZzhpTp9w1FlAlvweV1H++fdZoA=="],
    "@eslint/config-array/minimatch/brace-expansion": ["brace-expansion@5.0.5", "http://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ=="],
--- a/composer.json
+++ b/composer.json
@@ -33,9 +33,9 @@
    "symfony/framework-bundle": "7.4.*",
    "symfony/http-client": "7.4.*",
    "symfony/mailer": "7.4.*",
-    "symfony/mercure": "^0.6",
+    "symfony/mercure": "^0.7",
-    "symfony/mercure-bundle": "*",
+    "symfony/mercure-bundle": "^0.4",
-    "symfony/monolog-bundle": "^3.8",
+    "symfony/monolog-bundle": "^4.0",
    "symfony/security-bundle": "7.4.*",
    "symfony/translation": "7.4.*",
    "symfony/twig-bundle": "7.4.*",
@@ -44,11 +44,16 @@
    "web-auth/webauthn-framework": "^5.2"
  },
  "require-dev": {
    "dama/doctrine-test-bundle": "^8.6",
    "phpunit/phpunit": "^13.1",
    "roave/security-advisories": "dev-master",
    "symfony/browser-kit": "7.4.*",
    "symfony/css-selector": "7.4.*",
    "symfony/dotenv": "7.4.*",
    "symfony/maker-bundle": "^1.5",
    "symfony/stopwatch": "7.4.*",
-    "symfony/web-profiler-bundle": "7.4.*"
+    "symfony/web-profiler-bundle": "7.4.*",
    "zenstruck/foundry": "^2.9"
  },
  "config": {
    "preferred-install": {
--- a/composer.lock
+++ b/composer.lock
--- a/config/bundles.php
+++ b/config/bundles.php
@@ -16,4 +16,6 @@ return [
    Scheb\TwoFactorBundle\SchebTwoFactorBundle::class => ['all' => true],
    League\FlysystemBundle\FlysystemBundle::class => ['all' => true],
    Liip\ImagineBundle\LiipImagineBundle::class => ['all' => true],
    Zenstruck\Foundry\ZenstruckFoundryBundle::class => ['dev' => true, 'test' => true],
    DAMA\DoctrineTestBundle\DAMADoctrineTestBundle::class => ['test' => true],
 ];
--- a/config/packages/test/framework.yaml
+++ b/config/packages/test/framework.yaml
@@ -1,4 +1,4 @@
 framework:
  test: true
  session:
-    storage_id: session.storage.mock_file
+    storage_factory_id: session.storage.factory.mock_file
--- a/config/packages/zenstruck_foundry.yaml
+++ b/config/packages/zenstruck_foundry.yaml
@@ -0,0 +1,16 @@
 when@dev: &dev
    # See full configuration: https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html#full-default-bundle-configuration
    zenstruck_foundry:
        persistence:
            # Flush only once per call of `PersistentObjectFactory::create()`
            flush_once: true
    # If you use the `make:factory --test` command, you may need to uncomment the following.
    # See https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html#generate
    #services:
    #    App\Tests\Factory\:
    #        resource: '%kernel.project_dir%/tests/Factory/'
    #        autowire: true
    #        autoconfigure: true
 when@test: *dev
--- a/config/services.yaml
+++ b/config/services.yaml
@@ -28,6 +28,7 @@ services:
  App\Service\BattleCardGenerator:
    arguments:
      $cacheDir: '%kernel.project_dir%/var/og-cache'
      $fontPath: '%kernel.project_dir%/assets/fonts/Carlito-Bold.ttf'
      $minioMediaStorage: '@mineseeker.media.storage'
  Aws\S3\S3Client:
--- a/docs/CI_CD.md
+++ b/docs/CI_CD.md
@@ -0,0 +1,443 @@
 # CI/CD Integration Guide
 This document explains how automated tests are integrated into the MineSeeker deployment pipeline using Gitea Actions.
 ## Overview
 MineSeeker uses **Gitea Actions** (GitHub Actions compatible) for continuous integration and deployment:
 - **CI Pipeline** (`.gitea/workflows/ci.yml`) - Runs on every push/PR to main/develop
 - **CD Pipeline** (`.gitea/workflows/deploy.yml`) - Runs on version tags, includes tests before deployment
 ---
 ## CI Workflow (Continuous Integration)
 **Trigger:** Push or Pull Request to `main` or `develop` branches
 **File:** `.gitea/workflows/ci.yml`
 ### Jobs
 #### 1. **Tests Job**
 Runs the full PHPUnit test suite with:
 - PostgreSQL 18 service container
 - PHP 8.3 with required extensions
 - Composer dependency installation
 - Node.js for asset building
 - Database setup and migrations
 - 71 PHPUnit tests with testdox output
 **Steps:**
 1. Checkout code
 2. Setup PHP 8.3 with extensions (pdo_pgsql, gd, intl, zip, sodium)
 3. Validate `composer.json`
 4. Cache and install Composer dependencies
 5. Setup Node.js 20 and install dependencies
 6. Build frontend assets with Vite
 7. Create `.env.test` configuration
 8. Setup test database with migrations
 9. Run PHPUnit tests with `--testdox` output
 10. (Optional) Generate coverage report on PRs
 #### 2. **Lint Job**
 Code quality checks:
 - ESLint for JavaScript/JSX
 - PHP-CS-Fixer (if installed)
 ---
 ## CD Workflow (Continuous Deployment)
 **Trigger:** Push of version tags (e.g., `v1.0.0`, `v1.2.3`)
 **File:** `.gitea/workflows/deploy.yml`
 ### Jobs
 #### 1. **Test Job** (Pre-deployment)
 **Critical:** Deployment only proceeds if tests pass.
 - Runs same test suite as CI workflow
 - Uses `--stop-on-failure` flag for fast feedback
 - Blocks deployment on any test failure
 #### 2. **Deploy Job** (Production Deployment)
 **Depends on:** `test` job must complete successfully
 **Steps:**
 1. Checkout tagged version
 2. Write production `.env` from secrets
 3. Build Docker image
 4. Run database migrations
 5. Clear production cache
 6. Start/restart services with `docker compose up -d`
 7. Health check (curl to verify app is running)
 8. Notify success/failure
 ---
 ## Configuration Requirements
 ### Gitea Repository Variables
 Set these in Gitea repository settings:
 ```
 PROD_APP_DIR=/path/to/production/app
 ```
 ### Gitea Repository Secrets
 ```
 PROD_ENV_FILE=<contents of production .env file>
 ```
 ### Test Database Configuration
 The CI/CD pipeline uses a PostgreSQL service container with these credentials:
 ```env
 POSTGRES_USER=mineseeker_test
 POSTGRES_PASSWORD=test_password
 POSTGRES_DB=mineseeker_test
 ```
 ---
 ## Running Tests Locally
 Before pushing, run tests locally to catch issues early:
 ```bash
 # Setup test database (first time only)
 make test-db-setup
 # Run tests
 make test
 # Run with testdox output
 vendor/bin/phpunit --testdox
 # Run with coverage
 XDEBUG_MODE=coverage vendor/bin/phpunit --coverage-html=var/coverage
 ```
 ---
 ## Deployment Workflow
 ### Standard Deployment Process
 1. **Develop features** on feature branches
 2. **Open Pull Request** to `develop` or `main`
   - CI workflow runs automatically
   - Tests must pass before merge
 3. **Merge PR** after review and passing tests
 4. **Create version tag** when ready to deploy:
   ```bash
   git tag -a v1.2.3 -m "Release version 1.2.3"
   git push origin v1.2.3
   ```
 5. **Deployment runs automatically:**
   - Tests run first
   - If tests pass, Docker image builds
   - Migrations run
   - Services restart
   - Health check verifies deployment
 ### Rollback Process
 If deployment fails or issues are discovered:
 ```bash
 # Tag and deploy previous stable version
 git push origin v1.2.2
 # Or SSH to production and manually rollback
 cd /path/to/production/app
 git checkout v1.2.2
 docker compose build
 docker compose up -d
 ```
 ---
 ## Test Suite Details
 ### Test Coverage
 The CI/CD pipeline runs **71 tests** across:
 - **Controller Tests** (29 tests)
  - GameController, ProfileController, SecurityController
  - HTTP status codes, authentication, routing
 - **DTO Tests** (9 tests)
  - ProfileGameDto, ProfileStatsDto, ProfileChartDataDto
  - Serialization, null handling, calculations
 - **Entity Tests** (8 tests)
  - UserStats calculations and defaults
 - **Service Tests** (13 tests)
  - MercureJwtService, RecaptchaService
  - Token generation, API verification
 - **Integration Tests** (12 tests)
  - Factory usage examples
  - Database isolation
 ### Test Execution Time
 Typical test suite runtime: **6-8 seconds**
 ---
 ## Best Practices
 ### Before Committing
 ✅ **Always run tests locally:**
 ```bash
 make test
 ```
 ✅ **Check code style:**
 ```bash
 vendor/bin/php-cs-fixer fix --dry-run
 npm run lint
 ```
 ✅ **Verify assets build:**
 ```bash
 npm run build
 ```
 ### When Creating PRs
 ✅ **Wait for CI checks** to pass before requesting review
 ✅ **Fix failing tests** immediately - don't merge broken code
 ✅ **Review test output** in Gitea Actions logs
 ### When Deploying
 ✅ **Tag semantic versions:** `v1.2.3` (major.minor.patch)
 ✅ **Write meaningful tag messages:**
 ```bash
 git tag -a v1.2.3 -m "Add bonus points to battle cards, fix avatar upload bug"
 ```
 ✅ **Monitor deployment logs** in Gitea Actions
 ✅ **Verify health check** passes after deployment
 ✅ **Test critical features** in production after deployment
 ---
 ## Troubleshooting
 ### Tests Pass Locally but Fail in CI
 **Possible causes:**
 1. **Database state:** CI uses fresh database, local may have leftover data
   ```bash
   make test-db-reset  # Reset local test database
   ```
 2. **Environment differences:** Check `.env.test` matches CI configuration
 3. **Cached dependencies:** CI caches may be stale
   - Clear cache in Gitea Actions settings
   - Or add `--no-cache` to composer install
 ### Deployment Fails After Tests Pass
 **Common issues:**
 1. **Migration conflicts:** Manually run migrations on production
   ```bash
   docker compose run --rm app php bin/console doctrine:migrations:migrate
   ```
 2. **Missing environment variables:** Check `PROD_ENV_FILE` secret is up-to-date
 3. **Docker build errors:** Check Dockerfile and build context
 4. **Health check timeout:** Increase sleep time or check application startup
 ### Database Migration Issues
 If migrations fail during deployment:
 ```bash
 # SSH to production server
 cd /path/to/production/app
 # Check migration status
 docker compose run --rm app php bin/console doctrine:migrations:status
 # Manually run migrations
 docker compose run --rm app php bin/console doctrine:migrations:migrate --no-interaction
 # If migration is stuck, mark as executed
 docker compose run --rm app php bin/console doctrine:migrations:version YYYYMMDDHHMMSS --add
 ```
 ---
 ## Monitoring and Notifications
 ### Viewing CI/CD Logs
 1. Go to Gitea repository
 2. Click **Actions** tab
 3. Select workflow run
 4. View detailed logs for each step
 ### Setting Up Notifications
 **Gitea webhook notifications:**
 Configure webhooks in repository settings to notify:
 - Slack/Discord when builds fail
 - Email on deployment success/failure
 - Custom endpoints for monitoring systems
 **Example webhook payload:**
 ```json
 {
  "event": "workflow_run",
  "repository": "Mine",
  "workflow": "deploy.yml",
  "status": "success",
  "tag": "v1.2.3"
 }
 ```
 ---
 ## Advanced Configuration
 ### Running Tests with Coverage
 Enable coverage in CI (requires Xdebug):
 ```yaml
 - name: Run tests with coverage
  run: |
    XDEBUG_MODE=coverage vendor/bin/phpunit \
      --coverage-clover=coverage.xml \
      --coverage-html=var/coverage
 ```
 ### Parallel Test Execution
 For larger test suites, use ParaTest:
 ```bash
 composer require --dev brianium/paratest
 ```
 ```yaml
 - name: Run tests in parallel
  run: vendor/bin/paratest --processes=4
 ```
 ### Database Seeding for E2E Tests
 Add step before tests:
 ```yaml
 - name: Seed test data
  run: |
    php bin/console doctrine:fixtures:load --no-interaction --env=test
 ```
 ---
 ## Security Considerations
 ### Secrets Management
 ❗ **Never commit secrets to repository**
 ✅ **Use Gitea secrets** for sensitive data:
 - `PROD_ENV_FILE` - Production environment variables
 - Database credentials
 - API keys
 ✅ **Rotate secrets regularly**
 ✅ **Use environment-specific secrets** (staging, production)
 ### Database Security
 ✅ **Test database is isolated** - No production data access
 ✅ **Credentials are ephemeral** - Service containers use temporary passwords
 ✅ **No data persistence** - Test database recreated on each run
 ---
 ## Performance Optimization
 ### Caching Strategies
 CI/CD workflows cache:
 1. **Composer dependencies** - `vendor/` directory
 2. **Node modules** - `node_modules/` directory
 3. **Docker layers** - Image build cache
 ### Reducing Build Time
 ✅ **Use `composer install --no-dev`** in production builds
 ✅ **Multi-stage Docker builds** - Separate assets from PHP
 ✅ **Parallel jobs** - Tests and linting run concurrently
 ✅ **Skip unnecessary steps** - Use conditionals (`if:` statements)
 ---
 ## Future Enhancements
 ### Planned Improvements
 - [ ] Automated browser tests with Symfony Panther
 - [ ] Visual regression testing for UI changes
 - [ ] Performance benchmarking in CI
 - [ ] Automated security scanning (Symfony Security Checker)
 - [ ] Staging environment deployments before production
 - [ ] Blue-green deployment strategy
 - [ ] Automated rollback on health check failure
 ---
 ## References
 - **Gitea Actions Documentation:** https://docs.gitea.com/usage/actions/overview
 - **GitHub Actions Reference:** https://docs.github.com/en/actions (compatible syntax)
 - **PHPUnit Documentation:** https://phpunit.de/documentation.html
 - **Symfony Testing:** https://symfony.com/doc/current/testing.html
 - **Docker Compose:** https://docs.docker.com/compose/
 ---
 **Last Updated:** 2026-04-21  
 **MineSeeker Version:** 1.0.0  
 **CI/CD Platform:** Gitea Actions
--- a/docs/FONTS.md
+++ b/docs/FONTS.md
@@ -0,0 +1,47 @@
 # Font Files
 This directory contains TrueType Font (TTF) files used for server-side image generation with PHP GD.
 ## Carlito-Bold.ttf
 - **Font:** Carlito Bold
 - **Source:** Google Fonts (Carlito Project)
 - **License:** SIL Open Font License 1.1
 - **URL:** https://github.com/googlefonts/carlito
 - **Usage:** Used by `BattleCardGenerator` service for generating battle card OG images
 - **Note:** Carlito is a metric-compatible font family to Calibri
 ## Why TTF instead of @fontsource?
 The `@fontsource` npm packages provide WOFF/WOFF2 files for web usage, but PHP's GD library (`imagettftext()`) requires TrueType Font (TTF) files for server-side text rendering.
 ## Alternatives
 If you want to use a different font:
 1. **Install system fonts:**
   ```bash
   # Find available TTF fonts
   find /usr/share/fonts -name "*.ttf" -type f
   # Copy desired font
   cp /usr/share/fonts/path/to/Font-Bold.ttf assets/fonts/
   ```
 2. **Download from Google Fonts:**
   ```bash
   # Visit https://fonts.google.com
   # Download the font family
   # Extract the TTF file from the zip
   ```
 3. **Update service configuration:**
   Edit `config/services.yaml` and update the `$fontPath` parameter.
 ## Cache Clearing
 After changing fonts, clear the OG image cache:
 ```bash
 rm -rf var/og-cache/*
 ```
--- a/docs/README.md
+++ b/docs/README.md
@@ -1,6 +1,6 @@
 # Mine-Seeker Game Documentation
-This directory contains comprehensive documentation about the Mine-Seeker game mechanics and implementation.
+This directory contains comprehensive documentation about the Mine-Seeker game mechanics, testing, and deployment.
 ## Game Mechanics
@@ -18,8 +18,94 @@ Complete reference for the bonus points system including:
 ---
 ## Testing
 ### [Testing Guide](./testing/TESTING.md)
 Complete testing setup and best practices including:
 - Test environment configuration
 - Database isolation with DAMA Doctrine Test Bundle
 - Test database setup (`mineseeker_test`)
 - Modern PHPUnit attributes (`#[Test]`, `#[TestDox]`)
 - Writing effective tests
 - Running tests (all, specific, with coverage)
 - Best practices (AAA pattern, factories, type hints)
 - CI/CD integration examples
 - Troubleshooting guide
 **Recommended for**: All developers, understanding test infrastructure, writing new tests, debugging test failures.
 ### [Factory Documentation](./testing/FACTORIES.md)
 Detailed API reference for Zenstruck Foundry factories:
 - All available factories (User, Gamer, PlayedGame, Step, Grid, etc.)
 - Factory usage examples
 - Creating related entities
 - Repository access
 - Database isolation explanation
 - Best practices and patterns
 **Recommended for**: Writing tests with test data, understanding factory patterns, creating complex test scenarios.
 ### [Quick Reference](./testing/QUICK_REFERENCE.md)
 Quick command reference for testing:
 - Common test commands
 - Factory usage cheat sheet
 - Troubleshooting tips
 **Recommended for**: Quick lookups during development.
 ---
 ## CI/CD & Deployment
 ### [CI/CD Integration Guide](./CI_CD.md)
 Comprehensive guide for continuous integration and deployment:
 - Gitea Actions workflows (CI and CD pipelines)
 - Automated testing on every push/PR
 - Deployment process with pre-deployment testing
 - Configuration requirements (secrets, variables)
 - Rollback procedures
 - Security considerations
 - Performance optimization
 - Monitoring and notifications
 - Troubleshooting deployment issues
 **Recommended for**: Understanding deployment pipeline, setting up CI/CD, debugging deployment failures, production operations.
 ### [CI/CD Quick Reference](./testing/CI_CD_QUICK_REFERENCE.md)
 Quick reference for CI/CD operations:
 - Common commands (testing, deployment, rollback)
 - Workflow diagrams (CI and CD pipelines)
 - Status badges for README
 - Common issues and solutions
 - Environment variables
 - Monitoring links
 **Recommended for**: Quick deployments, troubleshooting, day-to-day operations.
 ---
 ## Technical Documentation
 ### [Fonts](./FONTS.md)
 TrueType fonts used for server-side image generation:
 - Font file locations
 - Usage in battle card generation
 - Web vs. server-side font formats
 **Recommended for**: Working on OG image generation, understanding font rendering.
 ---
 ## Quick Reference
 ### Test Suite Overview
 | Metric | Value |
 |--------|-------|
 | Total Tests | 71 |
 | Total Assertions | 227 |
 | Execution Time | ~6-8 seconds |
 | Coverage | Controller, DTO, Entity, Service, Integration |
 ### Bonus Points at a Glance
 | Bonus Type | Points | Condition |
 |-----------|--------|-----------|
@@ -30,18 +116,80 @@ Complete reference for the bonus points system including:
 | Chain Combo | Tracked | Consecutive mine clicks (no safe clicks) |
 | Biggest Reveal | Tracked | Largest number of safe cells revealed |
-### Key Rules
+### Available Test Factories
- Safe cell bonus only awarded for ≥2 cells minimum
+| Factory | Entity | Purpose |
- Chain counter resets on any safe cell click
+|---------|--------|---------|
- Endgame threshold: 51 - (redPoints + bluePoints) ≤ 10
+| `UserFactory` | `User` | Registered users |
- Bonus stats are per-player and persist in database
+| `GamerFactory` | `Gamer` | Anonymous/guest players |
 | `PlayedGameFactory` | `PlayedGame` | Game records |
 | `StepFactory` | `Step` | Game moves |
 | `GridFactory` | `Grid` | Game grids (16×16) |
 | `GridRowFactory` | `GridRow` | Grid rows |
 | `WebAuthnCredentialFactory` | `WebAuthnCredential` | Passkey credentials |
 | `ContactMessageFactory` | `ContactMessage` | Contact messages |
 ### Running Tests
 ```bash
 # Setup (first time only)
 make test-db-setup
 # Run all tests
 make test
 # Run with documentation output
 vendor/bin/phpunit --testdox
 # Specific file
 vendor/bin/phpunit tests/Controller/ProfileControllerTest.php
 # With coverage (requires Xdebug/PCOV)
 XDEBUG_MODE=coverage vendor/bin/phpunit --coverage-html var/coverage
 ```
 ### CI/CD Commands
 ```bash
 # Deploy to production
 git tag -a v1.2.3 -m "Release version 1.2.3"
 git push origin v1.2.3
 # View CI/CD runs
 # https://source.splendidbear.org/SplendidBear-Websites/Mine/actions
 # Rollback deployment
 git push origin v1.2.2  # Deploy previous version
 ```
 ---
 ## Files Using This Information
 ### Game Mechanics
 - Backend: `/src/Util/TopicManager.php`
 - Frontend: `/assets/js/mine-seeker/contexts/GameProvider.jsx`
 - UI: `/assets/js/mine-seeker/components/BonusStatsDialog.jsx`
 - Constants: `/assets/js/mine-seeker/utils/constants.jsx`
 ### Testing
 - Test Base Class: `/tests/WebTestCase.php`
 - Factories: `/tests/Factory/`
 - Example Tests: `/tests/Integration/FactoryExampleTest.php`
 - PHPUnit Config: `/phpunit.dist.xml`
 - Bundle Config: `/config/bundles.php`
 ### CI/CD
 - CI Workflow: `/.gitea/workflows/ci.yml`
 - CD Workflow: `/.gitea/workflows/deploy.yml`
 - Dockerfile: `/Dockerfile`
 - Docker Compose: `/compose.yaml`
 ---
 ## Additional Resources
 - **[Main README](../README.md)** - Project overview, installation, deployment
 - **[AI Agent Guidelines](../AGENTS.md)** - Comprehensive guide for AI coding agents
 - **[Zenstruck Foundry](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html)** - Official Foundry documentation
 - **[PHPUnit](https://phpunit.de/)** - PHPUnit documentation
 - **[Symfony Testing](https://symfony.com/doc/current/testing.html)** - Symfony testing guide
 - **[Gitea Actions](https://docs.gitea.com/usage/actions/overview)** - Gitea Actions documentation
 - **[Docker Compose](https://docs.docker.com/compose/)** - Docker Compose reference
--- a/docs/testing/FACTORIES.md
+++ b/docs/testing/FACTORIES.md
@@ -0,0 +1,265 @@
 # Foundry Factories for MineSeeker
 Factory classes for creating test data. For general Foundry usage, see [Zenstruck Foundry Docs](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html).
 ---
 ## Available Factories
 All factories are in `tests/Factory/`:
 | Factory | Entity | Use For |
 |---------|--------|---------|
 | `UserFactory` | `User` | Registered users with auth |
 | `GamerFactory` | `Gamer` | Anonymous/guest players |
 | `PlayedGameFactory` | `PlayedGame` | Game records |
 | `StepFactory` | `Step` | Individual game moves |
 | `GridFactory` | `Grid` | 16×16 game grids |
 | `GridRowFactory` | `GridRow` | Grid row data |
 | `WebAuthnCredentialFactory` | `WebAuthnCredential` | Passkey credentials |
 | `ContactMessageFactory` | `ContactMessage` | Contact form messages |
 ---
 ## Quick Examples
 ### UserFactory
 ```php
 // Basic user
 $user = UserFactory::createOne();
 // Unverified user
 $user = UserFactory::createOne(['isVerified' => false]);
 // Admin user
 $user = UserFactory::createOne(['roles' => ['ROLE_ADMIN']]);
 // Multiple users
 UserFactory::createMany(5);
 ```
 ### GamerFactory
 ```php
 // Anonymous gamer
 $gamer = GamerFactory::new()->anonymous()->create();
 ```
 ### PlayedGameFactory
 ```php
 // Game with registered players
 $game = PlayedGameFactory::new()
    ->withRegisteredPlayers()
    ->create();
 // Game with anonymous players
 $game = PlayedGameFactory::new()
    ->withAnonymousPlayers()
    ->create();
 // Red wins
 $game = PlayedGameFactory::new()
    ->withRegisteredPlayers()
    ->redWins()
    ->create();
 // Blue wins
 $game = PlayedGameFactory::new()
    ->withRegisteredPlayers()
    ->blueWins()
    ->create();
 // Resigned game
 $game = PlayedGameFactory::new()
    ->resigned('red')
    ->create();
 ```
 ### StepFactory
 ```php
 // Mine hit
 $step = StepFactory::new()
    ->forPlayer('red')
    ->mine()
    ->create(['playedGame' => $game]);
 // Safe cell
 $step = StepFactory::new()
    ->forPlayer('blue')
    ->safe()
    ->create(['playedGame' => $game]);
 // With revealed cells
 $step = StepFactory::new()
    ->withRevealedCells([
        ['row' => 5, 'col' => 5],
        ['row' => 5, 'col' => 6],
    ])
    ->create(['playedGame' => $game]);
 ```
 ### GridFactory
 ```php
 // Full 16×16 grid
 $grid = GridFactory::createOne(['playedGame' => $game]);
 // Automatically creates 16 rows
 self::assertCount(16, $grid->gridRow);
 ```
 ### WebAuthnCredentialFactory
 ```php
 // Basic credential
 $credential = WebAuthnCredentialFactory::createOne(['user' => $user]);
 // Named credential, recently used
 $credential = WebAuthnCredentialFactory::new()
    ->withName('YubiKey 5C')
    ->recentlyUsed()
    ->create(['user' => $user]);
 ```
 ### ContactMessageFactory
 ```php
 // Basic message
 $message = ContactMessageFactory::createOne();
 // Without consent
 $message = ContactMessageFactory::new()
    ->withoutConsent()
    ->create();
 ```
 ---
 ## Factory API Reference
 ### Common Methods (All Factories)
 ```php
 // Create single entity
 Factory::createOne([
    'property' => 'value',
 ]);
 // Create multiple
 Factory::createMany(5);
 // Create with factory methods
 Factory::new()
    ->customMethod()
    ->create(['property' => 'value']);
 // Access repository
 Factory::repository()->findAll();
 Factory::repository()->count([]);
 Factory::repository()->findBy(['field' => 'value']);
 ```
 ### PlayedGameFactory Methods
 | Method | Description |
 |--------|-------------|
 | `withRegisteredPlayers()` | Creates game with 2 registered users |
 | `withAnonymousPlayers()` | Creates game with 2 anonymous gamers |
 | `withMixedPlayers()` | One registered, one anonymous |
 | `redWins()` | Red has 26 points |
 | `blueWins()` | Blue has 26 points |
 | `resigned(string $player)` | Set resignation ('red' or 'blue') |
 ### StepFactory Methods
 | Method | Description |
 |--------|-------------|
 | `forPlayer(string $player)` | Set player ('red' or 'blue') |
 | `mine()` | Step hits a mine |
 | `safe()` | Step reveals safe cell |
 | `withRevealedCells(array $cells)` | Set revealed cells array |
 ### GamerFactory Methods
 | Method | Description |
 |--------|-------------|
 | `anonymous()` | Set username as "Guest_12345" |
 ### WebAuthnCredentialFactory Methods
 | Method | Description |
 |--------|-------------|
 | `withName(string $name)` | Set credential name |
 | `recentlyUsed()` | Set lastUsedAt to now |
 ### ContactMessageFactory Methods
 | Method | Description |
 |--------|-------------|
 | `withoutConsent()` | Set consent to false |
 | `anonymous()` | Remove IP address |
 ---
 ## MineSeeker-Specific Patterns
 ### Complete Game Setup
 ```php
 // Create full game with steps and grid
 $game = PlayedGameFactory::new()
    ->withRegisteredPlayers()
    ->create();
 // Add steps
 StepFactory::createMany(10, [
    'playedGame' => $game,
    'player' => 'red',
 ]);
 // Add grid
 $grid = GridFactory::createOne(['playedGame' => $game]);
 ```
 ### Testing Battle History
 ```php
 // Create multiple finished games for a user
 $user = UserFactory::createOne();
 PlayedGameFactory::new()
    ->redWins()
    ->create(['red' => $user]);
 PlayedGameFactory::new()
    ->blueWins()
    ->create(['blue' => $user]);
 ```
 ---
 ## Database Isolation
 Tests automatically run in isolated transactions:
 ```php
 public function testDatabaseIsolation(): void
 {
    UserFactory::createMany(5);
    self::assertCount(5, UserFactory::repository()->findAll());
    // Automatically rolled back after test
 }
 ```
 No manual cleanup needed. Each test starts with a clean database.
 ---
 ## External Resources
 - **[Zenstruck Foundry Documentation](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html)** - Complete Foundry guide
 - **[DAMA Doctrine Test Bundle](https://github.com/dmaicher/doctrine-test-bundle)** - Transaction isolation details
--- a/docs/testing/TESTING.md
+++ b/docs/testing/TESTING.md
@@ -0,0 +1,336 @@
 # Testing Guide for MineSeeker
 MineSeeker-specific testing setup and workflows. For general PHPUnit/Symfony testing, see [Symfony Testing Docs](https://symfony.com/doc/current/testing.html).
 ## Example of the current tests
 ```shell
 $ bin/phpunit                                                                                                                                                                                                                                                                                                                                                (master->origin/master|✚1…2⚑1)
 PHPUnit 13.1.7 by Sebastian Bergmann and contributors.
 Runtime:       PHP 8.5.5
 Configuration: /var/www/splendid/Mine/phpunit.dist.xml
 ................................................................. 65 / 71 ( 91%)
 ......                                                            71 / 71 (100%)
 Time: 00:07.319, Memory: 86.50 MB
 OK (71 tests, 227 assertions)
 Faker seed used: 918823
 ```
 ## Quick Start
 ```bash
 # One-time setup
 make test-db-setup
 # Run tests
 make test
 ```
 ---
 ## Test Database Configuration
 MineSeeker uses a **separate test database** (`mineseeker_test`) with automatic transaction rollback for isolated tests.
 ### Stack
 - **PHPUnit 13** - Testing framework
 - **[Zenstruck Foundry](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html)** - Factory library for test fixtures
 - **[DAMA Doctrine Test Bundle](https://github.com/dmaicher/doctrine-test-bundle)** - Transaction isolation (rollback after each test)
 ### Configuration
 **`phpunit.dist.xml`**:
 ```xml
 <env name="DATABASE_URL" value="postgresql://...mineseeker_test..." />
 <env name="DAMA_DISABLE_STATIC_CONNECTION" value="0" />
 ```
 **`config/bundles.php`**:
 ```php
 Zenstruck\Foundry\ZenstruckFoundryBundle::class => ['dev' => true, 'test' => true],
 DAMA\DoctrineTestBundle\DAMADoctrineTestBundle::class => ['test' => true],
 ```
 ---
 ## Setup
 ### One-time Setup
 ```bash
 make test-db-setup
 ```
 Creates `mineseeker_test` database and runs migrations.
 ### Reset Test Database
 ```bash
 make test-db-reset
 ```
 Drops and recreates test database (useful after schema changes).
 ---
 ## Running Tests
 ```bash
 # All tests
 make test
 # Specific file
 vendor/bin/phpunit tests/Controller/ProfileControllerTest.php
 # Specific method
 vendor/bin/phpunit --filter testCreateUser
 # With test names
 vendor/bin/phpunit --testdox
 ```
 ---
 ## MineSeeker Factories
 See **[FACTORIES.md](./FACTORIES.md)** for complete factory API.
 ### Available Factories
 | Factory | Entity | Location |
 |---------|--------|----------|
 | `UserFactory` | Registered users | `tests/Factory/UserFactory.php` |
 | `GamerFactory` | Anonymous players | `tests/Factory/GamerFactory.php` |
 | `PlayedGameFactory` | Game records | `tests/Factory/PlayedGameFactory.php` |
 | `StepFactory` | Game moves | `tests/Factory/StepFactory.php` |
 | `GridFactory` | 16×16 game grids | `tests/Factory/GridFactory.php` |
 | `GridRowFactory` | Grid rows | `tests/Factory/GridRowFactory.php` |
 | `WebAuthnCredentialFactory` | Passkey credentials | `tests/Factory/WebAuthnCredentialFactory.php` |
 | `ContactMessageFactory` | Contact messages | `tests/Factory/ContactMessageFactory.php` |
 ### Example
 ```php
 use App\Tests\Factory\PlayedGameFactory;
 use App\Tests\WebTestCase;
 class GameTest extends WebTestCase
 {
    public function testGameCreation(): void
    {
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->redWins()
            ->create();
        self::assertEquals(26, $game->redPoints);
    }
 }
 ```
 ---
 ## Test Structure
 All tests extend `App\Tests\WebTestCase`:
 ```php
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Controller;
 use App\Tests\Factory\UserFactory;
 use App\Tests\WebTestCase;
 class MyControllerTest extends WebTestCase
 {
    public function testExample(): void
    {
        $user = UserFactory::createOne();
        $client = static::createClient();
        $client->request('GET', '/profile');
        self::assertResponseRedirects('/login');
    }
 }
 ```
 **Important**: Always extend `App\Tests\WebTestCase`, not `Symfony\Bundle\FrameworkBundle\Test\WebTestCase`.
 ---
 ## Directory Structure
 ```
 tests/
 ├── Controller/          # HTTP endpoint tests
 ├── Dto/                 # Data Transfer Object tests
 ├── Entity/              # Entity logic tests
 ├── Service/             # Service layer tests
 ├── Integration/         # Integration tests
 ├── Factory/             # Foundry factories
 ├── WebTestCase.php      # Base test class
 └── bootstrap.php        # PHPUnit bootstrap
 ```
 ---
 ## MineSeeker-Specific Patterns
 ### Testing Game Flow
 ```php
 public function testRedPlayerWinsGame(): void
 {
    $game = PlayedGameFactory::new()
        ->withRegisteredPlayers()
        ->create();
    // Create steps to simulate gameplay
    for ($i = 0; $i < 26; $i++) {
        StepFactory::new()
            ->forPlayer('red')
            ->mine()
            ->create(['playedGame' => $game]);
    }
    self::assertEquals(26, $game->redPoints);
 }
 ```
 ### Testing Battle Sharing
 ```php
 public function testBattleSharePageReturnsValidGame(): void
 {
    $game = PlayedGameFactory::new()
        ->withRegisteredPlayers()
        ->redWins()
        ->create();
    $client = static::createClient();
    $client->request('GET', '/battle/' . $game->uuid);
    self::assertResponseIsSuccessful();
    self::assertSelectorTextContains('h1', 'Battle Report');
 }
 ```
 ### Testing Authentication
 ```php
 public function testProfileRequiresAuthentication(): void
 {
    $client = static::createClient();
    $client->request('GET', '/profile');
    self::assertResponseRedirects('/login');
 }
 public function testAuthenticatedUserCanAccessProfile(): void
 {
    $user = UserFactory::createOne();
    $client = static::createClient();
    $client->loginUser($user->_real());
    $client->request('GET', '/profile');
    self::assertResponseIsSuccessful();
 }
 ```
 ---
 ## Troubleshooting
 ### Tests interfering with each other?
 Ensure you extend `App\Tests\WebTestCase`, not the base Symfony class.
 ### Schema out of sync?
 ```bash
 make test-db-reset
 ```
 ### Memory limit errors?
 ```bash
 php -d memory_limit=1024M vendor/bin/phpunit
 ```
 Or increase in `phpunit.dist.xml`:
 ```xml
 <ini name="memory_limit" value="1024M"/>
 ```
 ### Test database doesn't exist?
 ```bash
 make test-db-setup
 ```
 ---
 ## External Resources
 - **[Symfony Testing](https://symfony.com/doc/current/testing.html)** - Symfony testing guide
 - **[Zenstruck Foundry](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html)** - Factory documentation
 - **[DAMA Doctrine Test Bundle](https://github.com/dmaicher/doctrine-test-bundle)** - Transaction isolation
 - **[PHPUnit](https://docs.phpunit.de/)** - PHPUnit documentation
 ---
 ## Modern PHPUnit Attributes
 MineSeeker tests use modern PHP 8 attributes instead of method name prefixes:
 ```php
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 #[TestDox('Security Controller')]
 class SecurityControllerTest extends WebTestCase
 {
    #[Test]
    #[TestDox('Login page loads successfully with form fields')]
    public function loginPageLoadsSuccessfully(): void
    {
        // Test implementation
    }
 }
 ```
 **Benefits:**
 - ✅ More readable method names (no `test` prefix required)
 - ✅ Self-documenting with `TestDox` descriptions
 - ✅ Better IDE support and refactoring
 - ✅ Cleaner `--testdox` output
 **Run with documentation:**
 ```bash
 vendor/bin/phpunit --testdox
 ```
 Output:
 ```
 Security Controller
 ✔ Login page loads successfully with form fields
 ✔ Login page has links to register and forgot password
 ✔ Register page loads successfully with form
 ```
--- a/gtk-client/.env.example
+++ b/gtk-client/.env.example
@@ -0,0 +1,8 @@
 # MineSeeker GTK4 Desktop Client — configuration
 # Copy this file to .env and fill in your values.
 # Base URL of the MineSeeker server (no trailing slash)
 MINESEEKER_BASE_URL=https://mineseeker.example.com
 # Public Mercure hub URL (SSE endpoint)
 MINESEEKER_MERCURE_URL=https://mineseeker.example.com/.well-known/mercure
--- a/gtk-client/.gitignore
+++ b/gtk-client/.gitignore
@@ -0,0 +1,11 @@
 .env
 __pycache__/
 *.pyc
 *.pyo
 *.pyd
 .Python
 *.egg-info/
 dist/
 build/
 .venv/
 venv/
--- a/gtk-client/main.py
+++ b/gtk-client/main.py
@@ -0,0 +1,47 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 import sys
 import logging
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 gi.require_version("Gst", "1.0")
 from gi.repository import Gtk, Adw, Gst, GLib
 # Validate config early (raises EnvironmentError if .env is missing)
 from mineseeker import config  # noqa: F401
 logging.basicConfig(
    level=logging.INFO,
    format="%(asctime)s [%(levelname)s] %(name)s: %(message)s",
 )
 class MineSeekerApp(Adw.Application):
    def __init__(self) -> None:
        super().__init__(application_id="org.splendidbear.mineseeker")
        self.connect("activate", self._on_activate)
    def _on_activate(self, app: Adw.Application) -> None:
        # Import here so GTK/Adw is already initialised before building widgets
        from mineseeker.ui.app_window import AppWindow
        window = AppWindow(application=app)
        window.present()
 def main() -> int:
    Gst.init(None)
    app = MineSeekerApp()
    return app.run(sys.argv)
 if __name__ == "__main__":
    sys.exit(main())
--- a/gtk-client/mineseeker/init.py
+++ b/gtk-client/mineseeker/init.py
--- a/gtk-client/mineseeker/api/init.py
+++ b/gtk-client/mineseeker/api/init.py
--- a/gtk-client/mineseeker/api/auth.py
+++ b/gtk-client/mineseeker/api/auth.py
@@ -0,0 +1,93 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 from mineseeker.api import client
 class AuthError(Exception):
    """Raised on authentication failure."""
 class TotpRequired(Exception):
    """Raised when the server requires a TOTP code after password login."""
 def login(username: str, password: str) -> None:
    """
    Authenticate with username + password via the dedicated JSON endpoint
    POST /api/auth/login, which bypasses the reCAPTCHA gate.
    Raises:
        TotpRequired  – server confirmed credentials but TOTP is required next.
        AuthError     – credentials wrong, account inactive, or server error.
    """
    session = client.get_session()
    resp = session.post(
        client.url("/api/auth/login"),
        json={"username": username, "password": password},
        # The endpoint sets a session cookie; follow any redirects
        allow_redirects=True,
    )
    # Non-2xx means a hard server error (500 etc.) — let it propagate
    if resp.status_code >= 500:
        resp.raise_for_status()
    data = resp.json()
    if not data.get("success"):
        raise AuthError(data.get("error", "Login failed."))
    if data.get("requiresTwoFactor"):
        raise TotpRequired()
 def submit_totp(code: str) -> None:
    """
    Submit the 6-digit TOTP code after login() raises TotpRequired.
    The scheb/2fa bundle processes POST /2fa_check directly as a firewall
    listener — no CSRF token required, no JSON body. The code goes as a
    form-encoded field named _auth_code, same as the browser form.
    The LoginCaptchaListener already skips /2fa_check paths.
    Raises:
        AuthError – if the code is wrong or the session is no longer in
                    IS_AUTHENTICATED_2FA_IN_PROGRESS state.
    """
    session = client.get_session()
    resp = session.post(
        client.url("/2fa_check"),
        data={"_auth_code": code},
        headers={"Content-Type": "application/x-www-form-urlencoded"},
        allow_redirects=True,
    )
    resp.raise_for_status()
    # If we land back on /2fa the code was wrong
    if "/2fa" in resp.url:
        raise AuthError("Invalid authentication code.")
 def login_as_guest() -> None:
    """
    Start an anonymous session.
    A GET to the homepage is enough for Symfony to create a session and
    assign the anon_<session_id> identity used by ResolveUserNamesService.
    """
    session = client.get_session()
    resp = session.get(client.url("/"), headers={"Accept": "text/html"})
    resp.raise_for_status()
 def logout() -> None:
    """Discard the local session (client-side only)."""
    client.reset_session()
--- a/gtk-client/mineseeker/api/client.py
+++ b/gtk-client/mineseeker/api/client.py
@@ -0,0 +1,52 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import requests
 from mineseeker import config
 # Module-level singleton session shared by all API modules.
 # Holds cookies (Symfony session cookie after login) across all requests.
 _session: requests.Session | None = None
 def get_session() -> requests.Session:
    global _session
    if _session is None:
        _session = requests.Session()
        _session.headers.update({
            "Accept": "application/json",
            "Content-Type": "application/json",
        })
    return _session
 def reset_session() -> None:
    """Discard the current session (logout / new guest session)."""
    global _session
    _session = None
 def url(path: str) -> str:
    """Build an absolute URL from a server-relative path."""
    return f"{config.BASE_URL}/{path.lstrip('/')}"
 def get(path: str, **kwargs) -> requests.Response:
    resp = get_session().get(url(path), **kwargs)
    resp.raise_for_status()
    return resp
 def post(path: str, json: dict | None = None, **kwargs) -> requests.Response:
    resp = get_session().post(url(path), json=json, **kwargs)
    resp.raise_for_status()
    return resp
--- a/gtk-client/mineseeker/api/game.py
+++ b/gtk-client/mineseeker/api/game.py
@@ -0,0 +1,117 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import base64
 import json
 from mineseeker.api import client
 def fetch_token() -> dict:
    """
    GET /api/game/token
    Returns { "mercureJwt": str, "gameAssoc": str }
    """
    resp = client.get("/api/game/token")
    return resp.json()
 def connect(game_assoc: str) -> dict:
    """
    GET /api/game/connect/{gameAssoc}
    Returns the decoded connect-information dict.
    """
    resp = client.get(f"/api/game/connect/{game_assoc}")
    raw = resp.text.strip()
    decoded = base64.b64decode(raw).decode("utf-8")
    return json.loads(decoded)
 def start(game_assoc: str) -> bool:
    """POST /api/game/start — initialise the grid for a new game."""
    resp = client.post("/api/game/start", json={"gameAssoc": game_assoc})
    return bool(resp.json().get("success", False))
 def join(game_assoc: str) -> bool:
    """POST /api/game/join/{gameAssoc} — announce this player's presence."""
    resp = client.post(f"/api/game/join/{game_assoc}", json={})
    return bool(resp.json().get("success", False))
 def step(
    game_assoc: str,
    coords: list[int],
    player: str,
    bomb: bool,
    resign: str | None,
    step_elapsed: float,
 ) -> dict:
    """
    POST /api/game/step/{gameAssoc}
    Returns the full step result dict published by TopicManager::publish().
    """
    resp = client.post(
        f"/api/game/step/{game_assoc}",
        json={
            "coords":      coords,
            "player":      player,
            "bomb":        bomb,
            "resign":      resign,
            "stepElapsed": step_elapsed,
        },
    )
    return resp.json()
 def leave(game_assoc: str) -> None:
    """POST /api/game/leave/{gameAssoc} — fire-and-forget on window close."""
    try:
        client.post(f"/api/game/leave/{game_assoc}", json={})
    except Exception:
        pass  # best-effort
 def heartbeat(game_assoc: str, color: str) -> None:
    """POST /api/game/heartbeat/{gameAssoc} — keep-alive ping."""
    try:
        client.post(f"/api/game/heartbeat/{game_assoc}", json={"color": color})
    except Exception:
        pass  # best-effort
 def waiting() -> list[dict]:
    """GET /api/game/waiting — list of waiting players in the lobby."""
    resp = client.get("/api/game/waiting")
    return resp.json()
 def challenge(target_game_assoc: str, challenger_game_assoc: str) -> None:
    """POST /api/game/challenge/{targetGameAssoc}"""
    client.post(
        f"/api/game/challenge/{target_game_assoc}",
        json={"challengerGameAssoc": challenger_game_assoc},
    )
 def challenge_respond(
    challenger_game_assoc: str,
    accepted: bool,
    target_game_assoc: str,
 ) -> None:
    """POST /api/game/challenge/respond/{challengerGameAssoc}"""
    client.post(
        f"/api/game/challenge/respond/{challenger_game_assoc}",
        json={
            "accepted":        accepted,
            "targetGameAssoc": target_game_assoc,
        },
    )
--- a/gtk-client/mineseeker/api/sse.py
+++ b/gtk-client/mineseeker/api/sse.py
@@ -0,0 +1,163 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import json
 import logging
 import threading
 import time
 from collections.abc import Callable
 from typing import Any
 import requests
 from gi.repository import GLib
 from mineseeker import config
 from mineseeker.api import client
 from mineseeker.constants import SSE_RECONNECT_INITIAL, SSE_RECONNECT_MAX
 log = logging.getLogger(__name__)
 class SseListener:
    """
    Opens a Mercure SSE connection in a daemon thread and dispatches
    parsed JSON messages back to the GTK main thread via GLib.idle_add().
    Message routing mirrors useServerCommunication.jsx handleMercureMessage():
        payload.type == "challenge"          → on_challenge(payload)
        payload.type == "challenge-response" → on_challenge_response(payload)
        payload.type == "heartbeat"          → on_heartbeat(payload)
        "data" key present                   → on_topic(payload)
        "msg" key present                    → on_unsubscribe(payload)
        (none of the above)                  → on_subscribe(payload)
    """
    def __init__(
        self,
        game_assoc: str,
        mercure_jwt: str,
        *,
        on_subscribe: Callable[[dict], Any] | None = None,
        on_unsubscribe: Callable[[dict], Any] | None = None,
        on_topic: Callable[[dict], Any] | None = None,
        on_challenge: Callable[[dict], Any] | None = None,
        on_challenge_response: Callable[[dict], Any] | None = None,
        on_heartbeat: Callable[[dict], Any] | None = None,
    ) -> None:
        self._game_assoc = game_assoc
        self._mercure_jwt = mercure_jwt
        self._handlers = {
            "subscribe":          on_subscribe,
            "unsubscribe":        on_unsubscribe,
            "topic":              on_topic,
            "challenge":          on_challenge,
            "challenge-response": on_challenge_response,
            "heartbeat":          on_heartbeat,
        }
        self._stop_event = threading.Event()
        self._thread: threading.Thread | None = None
    # ------------------------------------------------------------------
    # Public control
    # ------------------------------------------------------------------
    def start(self) -> None:
        """Start the background SSE listener thread."""
        self._stop_event.clear()
        self._thread = threading.Thread(
            target=self._run, daemon=True, name="sse-listener"
        )
        self._thread.start()
    def stop(self) -> None:
        """Signal the background thread to stop."""
        self._stop_event.set()
    # ------------------------------------------------------------------
    # Background thread
    # ------------------------------------------------------------------
    def _build_url(self) -> str:
        topic = f"mineseeker/channel/{self._game_assoc}"
        return f"{config.MERCURE_URL}?topic={topic}"
    def _run(self) -> None:
        backoff = SSE_RECONNECT_INITIAL
        while not self._stop_event.is_set():
            try:
                self._stream()
                backoff = SSE_RECONNECT_INITIAL  # reset on clean disconnect
            except Exception as exc:
                if self._stop_event.is_set():
                    break
                log.warning("SSE connection lost (%s), reconnecting in %.1fs", exc, backoff)
                time.sleep(backoff)
                backoff = min(backoff * 2, SSE_RECONNECT_MAX)
    def _stream(self) -> None:
        """Open the SSE stream and process events until stopped or error."""
        url = self._build_url()
        headers = {
            "Authorization": f"Bearer {self._mercure_jwt}",
            "Accept":        "text/event-stream",
            "Cache-Control": "no-cache",
        }
        # Use the requests session from client.py so cookies are included
        resp = client.get_session().get(
            url, headers=headers, stream=True, timeout=(10, None)
        )
        resp.raise_for_status()
        # Parse the raw SSE stream manually (sseclient-py would also work
        # but avoids an extra dependency on GLib-aware loops)
        data_lines: list[str] = []
        for raw_line in resp.iter_lines(decode_unicode=True):
            if self._stop_event.is_set():
                break
            if raw_line.startswith("data:"):
                data_lines.append(raw_line[5:].lstrip(" "))
            elif raw_line == "" and data_lines:
                # Empty line signals end of event — dispatch it
                payload_str = "\n".join(data_lines)
                data_lines = []
                try:
                    payload = json.loads(payload_str)
                    GLib.idle_add(self._dispatch, payload)
                except json.JSONDecodeError:
                    log.debug("Non-JSON SSE data ignored: %s", payload_str)
    def _dispatch(self, payload: dict) -> bool:
        """Called on the GTK main thread via GLib.idle_add."""
        msg_type = payload.get("type")
        if msg_type == "challenge":
            self._call("challenge", payload)
        elif msg_type == "challenge-response":
            self._call("challenge-response", payload)
        elif msg_type == "heartbeat":
            self._call("heartbeat", payload)
        elif "data" in payload:
            self._call("topic", payload)
        elif "msg" in payload:
            self._call("unsubscribe", payload)
        else:
            self._call("subscribe", payload)
        return GLib.SOURCE_REMOVE  # run once only
    def _call(self, key: str, payload: dict) -> None:
        handler = self._handlers.get(key)
        if handler is not None:
            try:
                handler(payload)
            except Exception:
                log.exception("Error in SSE handler '%s'", key)
--- a/gtk-client/mineseeker/assets.py
+++ b/gtk-client/mineseeker/assets.py
@@ -0,0 +1,108 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import io
 import logging
 import gi
 gi.require_version("GdkPixbuf", "2.0")
 gi.require_version("Gst", "1.0")
 from gi.repository import GdkPixbuf, Gst
 from mineseeker import config
 from mineseeker.api import client
 from mineseeker.constants import IMAGE_NAMES, SOUND_NAMES
 log = logging.getLogger(__name__)
 # ---------------------------------------------------------------------------
 # Image cache  { filename: GdkPixbuf.Pixbuf }
 # ---------------------------------------------------------------------------
 _images: dict[str, GdkPixbuf.Pixbuf] = {}
 def load_images(cell_size: int = 40) -> None:
    """
    Fetch all game images from the server and cache them as GdkPixbuf.Pixbuf.
    Call once at startup (blocking; run in a thread if you want a splash screen).
    """
    for name in IMAGE_NAMES:
        url = f"{config.BASE_URL}/images/{name}"
        try:
            resp = client.get_session().get(url, timeout=10)
            resp.raise_for_status()
            loader = GdkPixbuf.PixbufLoader()
            loader.write(resp.content)
            loader.close()
            pixbuf = loader.get_pixbuf()
            # Scale to the cell size used by the grid widget
            pixbuf = pixbuf.scale_simple(cell_size, cell_size, GdkPixbuf.InterpType.BILINEAR)
            _images[name] = pixbuf
        except Exception as exc:
            log.warning("Could not load image %s: %s", name, exc)
 def get_image(name: str) -> GdkPixbuf.Pixbuf | None:
    """Return a cached Pixbuf by filename, or None if not loaded."""
    return _images.get(name)
 def get_image_or_fallback(name: str, fallback: str) -> GdkPixbuf.Pixbuf | None:
    return _images.get(name) or _images.get(fallback)
 # ---------------------------------------------------------------------------
 # Sound  — via GStreamer playbin
 # ---------------------------------------------------------------------------
 _sounds: dict[str, str] = {}  # { key: URI }
 def load_sounds() -> None:
    """
    Build the URI map for the six game sound effects.
    GStreamer will stream them on-demand from the server.
    """
    Gst.init(None)
    for filename in SOUND_NAMES:
        key = filename.split(".")[0]  # "click", "bomb", etc.
        _sounds[key] = f"{config.BASE_URL}/sound/{filename}"
 def play_sound(key: str) -> None:
    """
    Play a sound by key ("click", "mine", "warning", "bomb", "won", "starting").
    Each call spawns a fresh GStreamer playbin — fire-and-forget.
    """
    uri = _sounds.get(key)
    if not uri:
        return
    try:
        player = Gst.ElementFactory.make("playbin", None)
        if player is None:
            return
        player.set_property("uri", uri)
        player.set_state(Gst.State.PLAYING)
        # Connect to bus to clean up after playback
        bus = player.get_bus()
        bus.add_signal_watch()
        def _on_message(bus, msg, player=player):
            if msg.type in (Gst.MessageType.EOS, Gst.MessageType.ERROR):
                player.set_state(Gst.State.NULL)
                bus.remove_signal_watch()
            return True
        bus.connect("message", _on_message)
    except Exception as exc:
        log.debug("Sound play failed (%s): %s", key, exc)
--- a/gtk-client/mineseeker/config.py
+++ b/gtk-client/mineseeker/config.py
@@ -0,0 +1,30 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 import os
 from pathlib import Path
 from dotenv import load_dotenv
 # Load .env from the gtk-client/ directory (parent of this package)
 _env_path = Path(__file__).parent.parent / ".env"
 load_dotenv(dotenv_path=_env_path)
 BASE_URL: str = os.environ.get("MINESEEKER_BASE_URL", "").rstrip("/")
 MERCURE_URL: str = os.environ.get("MINESEEKER_MERCURE_URL", "").rstrip("/")
 if not BASE_URL:
    raise EnvironmentError(
        "MINESEEKER_BASE_URL is not set. "
        "Copy gtk-client/.env.example to gtk-client/.env and fill in the values."
    )
 if not MERCURE_URL:
    # Fall back to <BASE_URL>/.well-known/mercure if not explicitly set
    MERCURE_URL = f"{BASE_URL}/.well-known/mercure"
--- a/gtk-client/mineseeker/constants.py
+++ b/gtk-client/mineseeker/constants.py
@@ -0,0 +1,90 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 # Grid dimensions
 GRID_ROWS: int = 16
 GRID_COLS: int = 16
 GRID_SIZE: int = GRID_ROWS * GRID_COLS  # 256
 # Game rules
 TOTAL_MINES: int = 51
 WIN_THRESHOLD: int = 26   # first player to reach this wins
 # Cell pixel size in the grid widget (each cell rendered as a square)
 CELL_SIZE: int = 40
 # Player colours (match backend "red" / "blue" strings)
 PLAYER_RED: str = "red"
 PLAYER_BLUE: str = "blue"
 # Bomb reveal diamond half-width (matches PHP getBombRadius / JS bombRadius)
 BOMB_RADIUS: int = 2
 # Heartbeat interval in milliseconds (mirrors JS 1500 ms)
 HEARTBEAT_INTERVAL_MS: int = 1500
 # SSE reconnect back-off (seconds)
 SSE_RECONNECT_INITIAL: float = 1.0
 SSE_RECONNECT_MAX: float = 30.0
 # Bonus stat display labels (mirrors JS BONUS_LABELS)
 BONUS_LABELS: dict[str, str] = {
    "blindHits":     "Blind Hits",
    "chainBest":     "Best Chain",
    "chainCurrent":  "Current Chain",
    "lastMineHits":  "Endgame Mines",
    "edgeMines":     "Edge Mines",
    "biggestReveal": "Biggest Reveal",
 }
 # Image URL path fragments served from BASE_URL/images/
 IMAGE_NAMES: list[str] = [
    "bg-target-outbg.png",
    "bg-bomb-outbg.png",
    "bg-bomb-disabled-outbg.png",
    "bg-bomb-exploded-outbg.png",
    "bg-bomb-empty-outbg.png",
    "bg-left-mine-outbg.png",
    "bg-cursor-red-outbg.png",
    "bg-cursor-blue-outbg.png",
    "bg-figure-red-outbg.png",
    "bg-figure-blue-outbg.png",
    "bg-flag-red-outbg.png",
    "bg-flag-blue-outbg.png",
    "bg-last-red-outbg.png",
    "bg-last-blue-outbg.png",
    "bg-wave-1-outbg.png",
    "bg-wave-2-outbg.png",
    "bg-corner-outbg.png",
    "bg-bomb-top-left-outbg.png",
    "bg-bomb-top-center-outbg.png",
    "bg-bomb-top-right-outbg.png",
    "bg-bomb-middle-left-outbg.png",
    "bg-bomb-middle-center-outbg.png",
    "bg-bomb-middle-right-outbg.png",
    "bg-bomb-bottom-left-outbg.png",
    "bg-bomb-bottom-center-outbg.png",
    "bg-bomb-bottom-right-outbg.png",
 ]
 # Sound file names served from BASE_URL/sound/
 SOUND_NAMES: list[str] = [
    "click.mp3",
    "bomb.mp3",
    "mine.mp3",
    "warning.mp3",
    "won.mp3",
    "starting.mp3",
 ]
 # Bomb position image name helper
 # horizontal: "top" | "middle" | "bottom"
 # vertical:   "left" | "center" | "right"
 def bomb_pos_image(horizontal: str, vertical: str) -> str:
    return f"bg-bomb-{horizontal}-{vertical}-outbg.png"
--- a/gtk-client/mineseeker/state/init.py
+++ b/gtk-client/mineseeker/state/init.py
--- a/gtk-client/mineseeker/state/game_state.py
+++ b/gtk-client/mineseeker/state/game_state.py
@@ -0,0 +1,267 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import random
 from dataclasses import dataclass, field
 from typing import Any
 from mineseeker.constants import GRID_ROWS, GRID_COLS, WIN_THRESHOLD
 # ---------------------------------------------------------------------------
 # Cell representation
 # ---------------------------------------------------------------------------
@dataclass
 class Cell:
    """Mirrors a single entry in the JS cells array."""
    row: int
    col: int
    # "hidden" | "safe" | "mine"
    state: str = "hidden"
    # Numeric adjacent-mine count (0-8) or "m" for mine, None when unknown
    value: Any = None
    # "red", "blue", or None — which player claimed this mine
    owner: str | None = None
    # Whether this was the last cell clicked (for highlight)
    is_last: bool = False
    # Wave background variant (1 or 2) for unrevealed cells
    wave: int = 1
    # Bomb position overlay strings ("top"/"middle"/"bottom", "left"/"center"/"right") or None
    bomb_h: str | None = None
    bomb_v: str | None = None
 def _init_cells() -> list[list[Cell]]:
    """Create the initial 16×16 grid of hidden cells (random wave image)."""
    return [
        [Cell(row=r, col=c, wave=random.choice([1, 1, 2]))
         for c in range(GRID_COLS)]
        for r in range(GRID_ROWS)
    ]
 # ---------------------------------------------------------------------------
 # Bonus stats
 # ---------------------------------------------------------------------------
@dataclass
 class BonusStats:
    blind_hits: int = 0
    chain_best: int = 0
    chain_current: int = 0
    last_mine_hits: int = 0
    edge_mines: int = 0
    biggest_reveal: int = 0
    @classmethod
    def from_dict(cls, d: dict) -> "BonusStats":
        return cls(
            blind_hits=d.get("blindHits", 0),
            chain_best=d.get("chainBest", 0),
            chain_current=d.get("chainCurrent", 0),
            last_mine_hits=d.get("lastMineHits", 0),
            edge_mines=d.get("edgeMines", 0),
            biggest_reveal=d.get("biggestReveal", 0),
        )
 # ---------------------------------------------------------------------------
 # Player snapshot
 # ---------------------------------------------------------------------------
@dataclass
 class PlayerState:
    name: str = ""
    anon_name: str = ""
    avatar_url: str | None = None
    mines: int = 0
    bonus_points: float = 0.0
    bonus_stats: BonusStats = field(default_factory=BonusStats)
    have_bomb: bool = True
    bomb_used: bool = False
    @property
    def display_name(self) -> str:
        return self.name or self.anon_name or "Guest"
    @property
    def bomb_enabled(self) -> bool:
        """Mirrors JS: bomb only enabled when player is NOT ahead."""
        return self.have_bomb and not self.bomb_used
 # ---------------------------------------------------------------------------
 # Game state
 # ---------------------------------------------------------------------------
@dataclass
 class GameState:
    cells: list[list[Cell]] = field(default_factory=_init_cells)
    red: PlayerState = field(default_factory=PlayerState)
    blue: PlayerState = field(default_factory=PlayerState)
    # Whose turn it is ("red" or "blue") — blue always starts
    turn: str = "blue"
    # Has the game ended?
    finished: bool = False
    # Winner ("red", "blue", "draw", or None)
    winner: str | None = None
    # Resignation ("red" or "blue" resigned, or None)
    resigned: str | None = None
    # Shareable UUID assigned by the server after the first step
    uuid: str | None = None
    # The last step coordinates per player { "red": (r,c) | None, ... }
    last_step: dict[str, tuple[int, int] | None] = field(
        default_factory=lambda: {"red": None, "blue": None}
    )
    # ---------------------------------------------------------------------------
    # Apply a step result from the server
    # ---------------------------------------------------------------------------
    def apply_step(self, data: dict) -> None:
        """
        Update state from a step payload (TopicManager::publish() result).
        Mirrors JS applyStep() in useServerCommunication.jsx.
        """
        if data.get("resign"):
            self.resigned = data["resign"]
            self.finished = True
            self.winner = "blue" if data["resign"] == "red" else "red"
            if data.get("uuid"):
                self.uuid = data["uuid"]
            return
        player: str = data.get("player", "")
        coords = data.get("coords")
        if coords:
            self.last_step[player] = (coords[0], coords[1])
            # Clear previous last-step highlights for this player
            for row in self.cells:
                for cell in row:
                    if cell.is_last and cell.owner == player:
                        cell.is_last = False
            self.cells[coords[0]][coords[1]].is_last = True
        # Reveal cells
        for rc in data.get("revealedCells", []):
            r, c, v = rc["row"], rc["col"], rc["value"]
            cell = self.cells[r][c]
            if v == "m":
                cell.state = "mine"
                cell.value = "m"
                cell.owner = player
            else:
                cell.state = "safe"
                cell.value = v
        # Reveal leftover mines at game end
        for rc in data.get("leftMines", []):
            r, c = rc["row"], rc["col"]
            cell = self.cells[r][c]
            cell.state = "mine"
            cell.value = "m"
        # Scores
        self.red.mines = data.get("redPoints", self.red.mines)
        self.blue.mines = data.get("bluePoints", self.blue.mines)
        self.red.bonus_points = data.get("redBonusPoints", self.red.bonus_points)
        self.blue.bonus_points = data.get("blueBonusPoints", self.blue.bonus_points)
        if "redBonusStats" in data:
            self.red.bonus_stats = BonusStats.from_dict(data["redBonusStats"])
        if "blueBonusStats" in data:
            self.blue.bonus_stats = BonusStats.from_dict(data["blueBonusStats"])
        if data.get("bomb"):
            if player == "red":
                self.red.bomb_used = True
            else:
                self.blue.bomb_used = True
        if data.get("uuid") and not self.finished:
            self.uuid = data["uuid"]
        # Win check
        if self.red.mines >= WIN_THRESHOLD:
            self.finished = True
            self.winner = "red"
        elif self.blue.mines >= WIN_THRESHOLD:
            self.finished = True
            self.winner = "blue"
        # Advance turn (switches after every move)
        if not self.finished:
            self.turn = "blue" if player == "red" else "red"
    # ---------------------------------------------------------------------------
    # Restore from server connect information
    # ---------------------------------------------------------------------------
    def apply_connect(self, data: dict) -> None:
        """
        Restore an existing game from the /api/game/connect payload.
        Mirrors JS wInit() in useServerCommunication.jsx.
        """
        if not data.get("users"):
            return  # fresh game, nothing to restore
        users = data["users"]
        self.red.name = users.get("red", "")
        self.red.anon_name = users.get("redAnon", "")
        self.blue.name = users.get("blue", "")
        self.blue.anon_name = users.get("blueAnon", "")
        self.red.mines = data.get("redPoints", 0)
        self.blue.mines = data.get("bluePoints", 0)
        self.red.bonus_points = data.get("redBonusPoints", 0.0)
        self.blue.bonus_points = data.get("blueBonusPoints", 0.0)
        if data.get("redBonusStats"):
            self.red.bonus_stats = BonusStats.from_dict(data["redBonusStats"])
        if data.get("blueBonusStats"):
            self.blue.bonus_stats = BonusStats.from_dict(data["blueBonusStats"])
        # Restore revealed cells (enriched with player colour)
        for rc in data.get("revealedCells") or []:
            r, c, v = rc["row"], rc["col"], rc["value"]
            p = rc.get("player")
            cell = self.cells[r][c]
            if v == "m":
                cell.state = "mine"
                cell.value = "m"
                cell.owner = p
            else:
                cell.state = "safe"
                cell.value = v
        # Restore last-step highlights
        last = data.get("lastStep", {})
        for color in ("red", "blue"):
            ls = last.get(color)
            if ls:
                r, c = ls["row"], ls["col"]
                self.last_step[color] = (r, c)
                self.cells[r][c].is_last = True
        # Determine whose turn it is from mostRecentStep
        mrs = data.get("mostRecentStep")
        if mrs:
            self.turn = "blue" if mrs["player"] == "red" else "red"
        self.finished = bool(data.get("gameFinished", False))
--- a/gtk-client/mineseeker/state/session.py
+++ b/gtk-client/mineseeker/state/session.py
@@ -0,0 +1,45 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 from dataclasses import dataclass, field
@dataclass
 class Session:
    """Holds the current player's identity and game association."""
    # Username (real user) or "anon_<session_id>" for guests
    username: str = ""
    # Whether this is an authenticated (non-guest) user
    is_authenticated: bool = False
    # Current game association UUID
    game_assoc: str = ""
    # "red" or "blue" — assigned when both players are subscribed
    color: str = ""
    # Mercure subscriber JWT for the current game
    mercure_jwt: str = ""
 # Module-level singleton; reset on logout
 _session: Session = Session()
 def get() -> Session:
    return _session
 def reset() -> None:
    global _session
    _session = Session()
--- a/gtk-client/mineseeker/ui/init.py
+++ b/gtk-client/mineseeker/ui/init.py
--- a/gtk-client/mineseeker/ui/app_window.py
+++ b/gtk-client/mineseeker/ui/app_window.py
@@ -0,0 +1,109 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 from gi.repository import Gtk, Adw
 from mineseeker.ui.login_page import LoginPage
 from mineseeker.ui.totp_page import TotpPage
 from mineseeker.ui.lobby_page import LobbyPage
 from mineseeker.ui.game_page import GamePage
 class AppWindow(Adw.ApplicationWindow):
    """
    Main application window containing a Gtk.Stack that navigates between:
      - "login"  : LoginPage
      - "totp"   : TotpPage
      - "lobby"  : LobbyPage
      - "game"   : GamePage (replaced on each new game)
    """
    def __init__(self, application: Adw.Application) -> None:
        super().__init__(application=application)
        self.set_title("MineSeeker")
        self.set_default_size(980, 680)
        # Stack — child names serve as page IDs
        self._stack = Gtk.Stack()
        self._stack.set_transition_type(Gtk.StackTransitionType.CROSSFADE)
        self._stack.set_transition_duration(200)
        # Build pages
        self._login_page = LoginPage(on_success=self._on_login_success, on_guest=self._on_guest)
        self._totp_page = TotpPage(on_success=self._on_totp_success, on_back=self._show_login)
        self._lobby_page = LobbyPage(on_game_start=self._on_game_start)
        self._game_page: GamePage | None = None
        self._stack.add_named(self._login_page, "login")
        self._stack.add_named(self._totp_page, "totp")
        self._stack.add_named(self._lobby_page, "lobby")
        # Wrap in a NavigationView-style container using Adw.ToolbarView
        toolbar_view = Adw.ToolbarView()
        header = Adw.HeaderBar()
        toolbar_view.add_top_bar(header)
        toolbar_view.set_content(self._stack)
        self.set_content(toolbar_view)
        # Start on the login page
        self._stack.set_visible_child_name("login")
    # ------------------------------------------------------------------
    # Navigation helpers
    # ------------------------------------------------------------------
    def _show_login(self) -> None:
        self._stack.set_visible_child_name("login")
    def _show_totp(self) -> None:
        self._stack.set_visible_child_name("totp")
    def _show_lobby(self) -> None:
        self._lobby_page.refresh()
        self._stack.set_visible_child_name("lobby")
    # ------------------------------------------------------------------
    # Callbacks from child pages
    # ------------------------------------------------------------------
    def _on_login_success(self, needs_totp: bool) -> None:
        if needs_totp:
            self._show_totp()
        else:
            self._show_lobby()
    def _on_guest(self) -> None:
        self._show_lobby()
    def _on_totp_success(self) -> None:
        self._show_lobby()
    def _on_game_start(self, game_assoc: str, mercure_jwt: str, color: str) -> None:
        """Replace or create the GamePage and switch to it."""
        # Remove previous game page if present
        if self._game_page is not None:
            self._stack.remove(self._game_page)
        self._game_page = GamePage(
            game_assoc=game_assoc,
            mercure_jwt=mercure_jwt,
            color=color,
            on_leave=self._on_game_leave,
        )
        self._stack.add_named(self._game_page, "game")
        self._stack.set_visible_child_name("game")
    def _on_game_leave(self) -> None:
        self._show_lobby()
--- a/gtk-client/mineseeker/ui/bonus_dialog.py
+++ b/gtk-client/mineseeker/ui/bonus_dialog.py
@@ -0,0 +1,96 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 from gi.repository import Gtk, Adw
 from mineseeker.state.game_state import BonusStats
 from mineseeker.constants import BONUS_LABELS
 class BonusDialog(Adw.Dialog):
    """Modal dialog displaying bonus stats for both players."""
    def __init__(
        self,
        parent: Gtk.Widget,
        red_name: str,
        blue_name: str,
        red_points: float,
        blue_points: float,
        red_stats: BonusStats,
        blue_stats: BonusStats,
    ) -> None:
        super().__init__()
        self.set_title("Bonus Statistics")
        self.set_content_width(480)
        box = Gtk.Box(orientation=Gtk.Orientation.VERTICAL, spacing=0)
        header = Adw.HeaderBar()
        box.append(header)
        content = Gtk.Box(orientation=Gtk.Orientation.VERTICAL, spacing=16)
        content.set_margin_top(16)
        content.set_margin_bottom(16)
        content.set_margin_start(16)
        content.set_margin_end(16)
        # Totals row
        totals = Gtk.Box(orientation=Gtk.Orientation.HORIZONTAL, spacing=0)
        totals.add_css_class("card")
        red_total = Gtk.Label(label=f"{red_name}: {red_points:.1f} pts")
        red_total.add_css_class("red-player")
        red_total.set_hexpand(True)
        red_total.set_xalign(0)
        red_total.set_margin_start(12)
        red_total.set_margin_top(8)
        red_total.set_margin_bottom(8)
        totals.append(red_total)
        blue_total = Gtk.Label(label=f"{blue_name}: {blue_points:.1f} pts")
        blue_total.add_css_class("blue-player")
        blue_total.set_hexpand(True)
        blue_total.set_xalign(1)
        blue_total.set_margin_end(12)
        totals.append(blue_total)
        content.append(totals)
        # Per-stat rows
        group = Adw.PreferencesGroup(title="Breakdown")
        stat_fields = [
            ("blind_hits",    red_stats.blind_hits,    blue_stats.blind_hits),
            ("chain_best",    red_stats.chain_best,    blue_stats.chain_best),
            ("last_mine_hits",red_stats.last_mine_hits,blue_stats.last_mine_hits),
            ("edge_mines",    red_stats.edge_mines,    blue_stats.edge_mines),
            ("biggest_reveal",red_stats.biggest_reveal,blue_stats.biggest_reveal),
        ]
        key_map = {
            "blind_hits":     "blindHits",
            "chain_best":     "chainBest",
            "last_mine_hits": "lastMineHits",
            "edge_mines":     "edgeMines",
            "biggest_reveal": "biggestReveal",
        }
        for field_name, rv, bv in stat_fields:
            label = BONUS_LABELS.get(key_map[field_name], field_name)
            row = Adw.ActionRow(title=label)
            row.set_subtitle(f"Red: {rv}   Blue: {bv}")
            group.add(row)
        content.append(group)
        box.append(content)
        self.set_child(box)
        self.present(parent)
--- a/gtk-client/mineseeker/ui/game_page.py
+++ b/gtk-client/mineseeker/ui/game_page.py
@@ -0,0 +1,477 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import threading
 import time
 from collections.abc import Callable
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 from gi.repository import Gtk, Adw, GLib
 from mineseeker.api import game as game_api
 from mineseeker.api.sse import SseListener
 from mineseeker import assets
 from mineseeker.constants import HEARTBEAT_INTERVAL_MS, WIN_THRESHOLD, PLAYER_RED, PLAYER_BLUE
 from mineseeker.state.game_state import GameState
 from mineseeker.state import session as session_mod
 from mineseeker.ui.grid_widget import GridWidget
 from mineseeker.ui.player_panel import PlayerPanel
 from mineseeker.ui.bonus_dialog import BonusDialog
 from mineseeker.ui.result_overlay import ResultOverlay
 class GamePage(Gtk.Overlay):
    """
    Full game screen.
    Layout:
      [RedPanel] [GridWidget] [BluePanel]
    An Overlay places the ResultOverlay on top when the game ends.
    """
    def __init__(
        self,
        game_assoc: str,
        mercure_jwt: str,
        color: str,
        on_leave: Callable[[], None],
    ) -> None:
        super().__init__()
        self._game_assoc = game_assoc
        self._mercure_jwt = mercure_jwt
        self._color = color          # "red" | "blue" | "" (determined by subscribe)
        self._on_leave = on_leave
        self._state = GameState()
        self._bomb_mode = False
        self._step_start: float = time.monotonic()
        self._heartbeat_source: int | None = None
        # --- Layout ---
        main_box = Gtk.Box(orientation=Gtk.Orientation.HORIZONTAL, spacing=0)
        main_box.set_hexpand(True)
        main_box.set_vexpand(True)
        # Red player panel (left)
        self._red_panel = PlayerPanel(
            color=PLAYER_RED,
            is_local=(color == PLAYER_RED),
            on_bomb_toggle=self._on_bomb_toggle,
            on_resign=self._on_resign,
        )
        main_box.append(self._red_panel)
        # Centre column: status bar + grid
        centre = Gtk.Box(orientation=Gtk.Orientation.VERTICAL, spacing=0)
        centre.set_hexpand(True)
        centre.set_vexpand(True)
        # Status / turn label
        self._status_label = Gtk.Label(label="Connecting…")
        self._status_label.add_css_class("dim-label")
        self._status_label.set_margin_top(8)
        self._status_label.set_margin_bottom(8)
        centre.append(self._status_label)
        # Grid in a scrolled window so it never clips on small screens
        scrolled = Gtk.ScrolledWindow()
        scrolled.set_policy(Gtk.PolicyType.AUTOMATIC, Gtk.PolicyType.AUTOMATIC)
        scrolled.set_hexpand(True)
        scrolled.set_vexpand(True)
        self._grid = GridWidget(on_cell_click=self._on_cell_click)
        scrolled.set_child(self._grid)
        centre.append(scrolled)
        # Bonus button row
        bonus_box = Gtk.Box(orientation=Gtk.Orientation.HORIZONTAL, spacing=8)
        bonus_box.set_halign(Gtk.Align.CENTER)
        bonus_box.set_margin_top(6)
        bonus_box.set_margin_bottom(6)
        bonus_btn = Gtk.Button(label="Bonus Stats")
        bonus_btn.add_css_class("flat")
        bonus_btn.connect("clicked", self._show_bonus_dialog)
        bonus_box.append(bonus_btn)
        leave_btn = Gtk.Button(label="Leave")
        leave_btn.add_css_class("flat")
        leave_btn.connect("clicked", self._on_leave_clicked)
        bonus_box.append(leave_btn)
        centre.append(bonus_box)
        main_box.append(centre)
        # Blue player panel (right)
        self._blue_panel = PlayerPanel(
            color=PLAYER_BLUE,
            is_local=(color == PLAYER_BLUE),
            on_bomb_toggle=self._on_bomb_toggle,
            on_resign=self._on_resign,
        )
        main_box.append(self._blue_panel)
        # Result overlay
        self._result_overlay = ResultOverlay(
            on_play_again=self._on_play_again,
            on_lobby=self._on_lobby,
        )
        self.set_child(main_box)
        self.add_overlay(self._result_overlay)
        # Start async init
        threading.Thread(target=self._init_game, daemon=True).start()
    # ------------------------------------------------------------------
    # Game initialisation
    # ------------------------------------------------------------------
    def _init_game(self) -> None:
        """Connect, start SSE, join the channel, start/restore the game."""
        try:
            # 1. Fetch existing game state
            connect_data = game_api.connect(self._game_assoc)
            GLib.idle_add(self._apply_connect_data, connect_data)
            # 2. Start the SSE listener
            self._sse = SseListener(
                game_assoc=self._game_assoc,
                mercure_jwt=self._mercure_jwt,
                on_subscribe=self._on_subscribe,
                on_unsubscribe=self._on_unsubscribe,
                on_topic=self._on_topic,
                on_challenge=self._on_challenge,
                on_challenge_response=self._on_challenge_response,
                on_heartbeat=self._on_heartbeat,
            )
            self._sse.start()
            # 3. Join (announces presence via Mercure)
            game_api.join(self._game_assoc)
            # 4. If no existing game, create the grid
            if not connect_data.get("users"):
                game_api.start(self._game_assoc)
            # 5. Start heartbeat
            GLib.idle_add(self._start_heartbeat)
        except Exception as e:
            GLib.idle_add(self._set_status, f"Error: {e}")
    def _apply_connect_data(self, data: dict) -> bool:
        self._state.apply_connect(data)
        self._refresh_panels()
        self._grid.set_state(self._state)
        return GLib.SOURCE_REMOVE
    # ------------------------------------------------------------------
    # SSE handlers (called on GTK main thread via GLib.idle_add)
    # ------------------------------------------------------------------
    def _on_subscribe(self, payload: dict) -> None:
        """Two players connected → start game."""
        users = payload.get("users", {})
        user_cnt = payload.get("userCnt", 0)
        # Determine our colour if not yet assigned
        if not self._color:
            sess = session_mod.get()
            my_name = sess.username
            if my_name == users.get("blue") or my_name == users.get("blueAnon"):
                self._color = PLAYER_BLUE
            else:
                self._color = PLAYER_RED
            sess.color = self._color
        # Update player names from subscribe payload
        self._state.red.name = users.get("red", "")
        self._state.red.anon_name = users.get("redAnon", "")
        self._state.blue.name = users.get("blue", "")
        self._state.blue.anon_name = users.get("blueAnon", "")
        if user_cnt == 2:
            self._set_status("Game started!")
            assets.play_sound("starting")
        else:
            self._set_status("Waiting for opponent…")
        self._refresh_panels()
    def _on_unsubscribe(self, payload: dict) -> None:
        self._set_status("Opponent left the game.")
    def _on_topic(self, payload: dict) -> None:
        """A step was made — apply it and refresh."""
        data = payload.get("data", {})
        if not data:
            return
        player = data.get("player", "")
        is_mine = data.get("revealedCells") and any(
            rc.get("value") == "m" for rc in data["revealedCells"]
        )
        # Play sounds
        if data.get("resign"):
            assets.play_sound("won")
        elif is_mine:
            my_state = self._state.red if player == PLAYER_RED else self._state.blue
            if my_state.mines > 20:
                assets.play_sound("warning")
            else:
                assets.play_sound("mine")
        else:
            assets.play_sound("click")
        self._state.apply_step(data)
        self._grid.refresh()
        self._refresh_panels()
        if self._state.finished:
            self._show_result()
        # uuid from server
        if data.get("uuid"):
            session_mod.get().game_assoc = data["uuid"]
    def _on_challenge(self, payload: dict) -> None:
        """Incoming challenge — show accept/decline dialog."""
        challenger_name = payload.get("challengerName", "Someone")
        challenger_assoc = payload.get("challengerGameAssoc", "")
        GLib.idle_add(self._show_challenge_dialog, challenger_name, challenger_assoc)
    def _on_challenge_response(self, payload: dict) -> None:
        if payload.get("accepted"):
            # Switch to the new game assoc
            new_assoc = payload.get("targetGameAssoc", "")
            if new_assoc:
                GLib.idle_add(self._redirect_to_game, new_assoc)
    def _on_heartbeat(self, payload: dict) -> None:
        # Heartbeat from opponent received — game is live
        pass
    # ------------------------------------------------------------------
    # Cell click / resign
    # ------------------------------------------------------------------
    def _on_cell_click(self, row: int, col: int, bomb_mode: bool) -> None:
        if self._state.finished:
            return
        if self._state.turn != self._color:
            return  # not our turn
        elapsed = time.monotonic() - self._step_start
        self._step_start = time.monotonic()
        threading.Thread(
            target=self._send_step,
            args=(row, col, bomb_mode, elapsed),
            daemon=True,
        ).start()
    def _send_step(self, row: int, col: int, bomb: bool, elapsed: float) -> None:
        try:
            result = game_api.step(
                game_assoc=self._game_assoc,
                coords=[row, col],
                player=self._color,
                bomb=bomb,
                resign=None,
                step_elapsed=elapsed,
            )
            GLib.idle_add(self._apply_step_result, result)
        except Exception as e:
            GLib.idle_add(self._set_status, f"Step error: {e}")
    def _apply_step_result(self, data: dict) -> bool:
        self._state.apply_step(data)
        self._grid.refresh()
        self._refresh_panels()
        if self._bomb_mode:
            self._bomb_mode = False
            self._grid.set_bomb_mode(False)
            local_panel = self._red_panel if self._color == PLAYER_RED else self._blue_panel
            local_panel.reset_bomb_toggle()
        if self._state.finished:
            self._show_result()
        return GLib.SOURCE_REMOVE
    def _on_resign(self) -> None:
        threading.Thread(target=self._send_resign, daemon=True).start()
    def _send_resign(self) -> None:
        try:
            result = game_api.step(
                game_assoc=self._game_assoc,
                coords=[0, 0],
                player=self._color,
                bomb=False,
                resign=self._color,
                step_elapsed=0,
            )
            GLib.idle_add(self._apply_step_result, result)
        except Exception:
            pass
    # ------------------------------------------------------------------
    # Bomb toggle
    # ------------------------------------------------------------------
    def _on_bomb_toggle(self, active: bool) -> None:
        self._bomb_mode = active
        self._grid.set_bomb_mode(active)
    # ------------------------------------------------------------------
    # Heartbeat
    # ------------------------------------------------------------------
    def _start_heartbeat(self) -> bool:
        interval_s = HEARTBEAT_INTERVAL_MS / 1000.0
        self._heartbeat_source = GLib.timeout_add(
            HEARTBEAT_INTERVAL_MS,
            self._send_heartbeat,
        )
        return GLib.SOURCE_REMOVE
    def _send_heartbeat(self) -> bool:
        if self._color:
            threading.Thread(
                target=game_api.heartbeat,
                args=(self._game_assoc, self._color),
                daemon=True,
            ).start()
        return GLib.SOURCE_CONTINUE  # repeat
    # ------------------------------------------------------------------
    # Result / game over
    # ------------------------------------------------------------------
    def _show_result(self) -> None:
        assets.play_sound("won")
        self._result_overlay.show_result(
            winner=self._state.winner,
            resigned=self._state.resigned,
            local_color=self._color,
            red_mines=self._state.red.mines,
            blue_mines=self._state.blue.mines,
            red_name=self._state.red.display_name,
            blue_name=self._state.blue.display_name,
        )
        self._stop_heartbeat()
    def _stop_heartbeat(self) -> None:
        if self._heartbeat_source is not None:
            GLib.source_remove(self._heartbeat_source)
            self._heartbeat_source = None
    # ------------------------------------------------------------------
    # Navigation callbacks
    # ------------------------------------------------------------------
    def _on_play_again(self) -> None:
        self._leave_game()
        self._on_leave()
    def _on_lobby(self) -> None:
        self._leave_game()
        self._on_leave()
    def _on_leave_clicked(self, *_) -> None:
        self._leave_game()
        self._on_leave()
    def _leave_game(self) -> None:
        self._stop_heartbeat()
        if hasattr(self, "_sse"):
            self._sse.stop()
        threading.Thread(
            target=game_api.leave, args=(self._game_assoc,), daemon=True
        ).start()
    def _redirect_to_game(self, new_assoc: str) -> bool:
        # Challenge accepted — leave current and open new game page
        self._leave_game()
        self._on_leave()
        return GLib.SOURCE_REMOVE
    # ------------------------------------------------------------------
    # Challenge dialog
    # ------------------------------------------------------------------
    def _show_challenge_dialog(self, challenger_name: str, challenger_assoc: str) -> bool:
        dialog = Adw.AlertDialog(
            heading=f"Challenge from {challenger_name}",
            body="Do you accept the challenge?",
        )
        dialog.add_response("decline", "Decline")
        dialog.add_response("accept", "Accept")
        dialog.set_response_appearance("accept", Adw.ResponseAppearance.SUGGESTED)
        dialog.connect(
            "response",
            lambda d, resp: self._on_challenge_response_dialog(resp, challenger_assoc),
        )
        dialog.present(self)
        return GLib.SOURCE_REMOVE
    def _on_challenge_response_dialog(self, response: str, challenger_assoc: str) -> None:
        accepted = response == "accept"
        threading.Thread(
            target=game_api.challenge_respond,
            args=(challenger_assoc, accepted, self._game_assoc),
            daemon=True,
        ).start()
    # ------------------------------------------------------------------
    # Bonus dialog
    # ------------------------------------------------------------------
    def _show_bonus_dialog(self, *_) -> None:
        BonusDialog(
            parent=self,
            red_name=self._state.red.display_name,
            blue_name=self._state.blue.display_name,
            red_points=self._state.red.bonus_points,
            blue_points=self._state.blue.bonus_points,
            red_stats=self._state.red.bonus_stats,
            blue_stats=self._state.blue.bonus_stats,
        )
    # ------------------------------------------------------------------
    # Helpers
    # ------------------------------------------------------------------
    def _refresh_panels(self) -> None:
        is_red_turn = self._state.turn == PLAYER_RED
        self._red_panel.update(self._state.red, is_red_turn)
        self._blue_panel.update(self._state.blue, not is_red_turn)
        self._grid.set_state(self._state)
        self._update_status_label()
    def _update_status_label(self) -> None:
        if self._state.finished:
            self._status_label.set_label("Game over")
        elif not self._color:
            self._status_label.set_label("Connecting…")
        elif self._state.turn == self._color:
            self._status_label.set_label("Your turn")
        else:
            opponent = self._state.blue if self._color == PLAYER_RED else self._state.red
            self._status_label.set_label(f"{opponent.display_name}'s turn")
    def _set_status(self, message: str) -> bool:
        self._status_label.set_label(message)
        return GLib.SOURCE_REMOVE
--- a/gtk-client/mineseeker/ui/grid_widget.py
+++ b/gtk-client/mineseeker/ui/grid_widget.py
@@ -0,0 +1,239 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 from collections.abc import Callable
 from typing import Any
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Gdk", "4.0")
 from gi.repository import Gtk, Gdk, GdkPixbuf
 from mineseeker import assets
 from mineseeker.constants import (
    GRID_ROWS, GRID_COLS, CELL_SIZE, PLAYER_RED, PLAYER_BLUE, bomb_pos_image
 )
 from mineseeker.state.game_state import GameState, Cell
 # ---------------------------------------------------------------------------
 # Bomb diamond radius (mirrors JS bombRadius() / PHP getBombRadius())
 # ---------------------------------------------------------------------------
 def _bomb_cells(row: int, col: int) -> list[tuple[int, int]]:
    """Return all cells within the 5×5 diamond centred at (row, col)."""
    result = []
    for dr in range(-2, 3):
        for dc in range(-2, 3):
            if abs(dr) + abs(dc) <= 2:
                r, c = row + dr, col + dc
                if 0 <= r < GRID_ROWS and 0 <= c < GRID_COLS:
                    result.append((r, c))
    return result
 def _bomb_pos(dr: int, dc: int) -> tuple[str, str]:
    """Map (delta_row, delta_col) to (horizontal, vertical) overlay names."""
    h = "top" if dr < 0 else ("bottom" if dr > 0 else "middle")
    v = "left" if dc < 0 else ("right" if dc > 0 else "center")
    return h, v
 # ---------------------------------------------------------------------------
 # GridWidget
 # ---------------------------------------------------------------------------
 class GridWidget(Gtk.DrawingArea):
    """
    16×16 minesweeper grid rendered with Cairo + GdkPixbuf tile images.
    Signals emitted (via callbacks, not GObject signals for simplicity):
      on_cell_click(row, col, bomb_mode) — user clicked a cell
    """
    def __init__(self, on_cell_click: Callable[[int, int, bool], None]) -> None:
        super().__init__()
        self._on_cell_click = on_cell_click
        self._state: GameState | None = None
        self._bomb_mode: bool = False
        self._hover: tuple[int, int] | None = None  # (row, col) under cursor
        width = CELL_SIZE * GRID_COLS
        height = CELL_SIZE * GRID_ROWS
        self.set_content_width(width)
        self.set_content_height(height)
        self.set_draw_func(self._draw)
        # Click gesture
        click = Gtk.GestureClick()
        click.connect("pressed", self._on_pressed)
        self.add_controller(click)
        # Motion controller for bomb hover preview
        motion = Gtk.EventControllerMotion()
        motion.connect("motion", self._on_motion)
        motion.connect("leave", self._on_leave)
        self.add_controller(motion)
    # ------------------------------------------------------------------
    # Public API
    # ------------------------------------------------------------------
    def set_state(self, state: GameState) -> None:
        self._state = state
        self.queue_draw()
    def set_bomb_mode(self, active: bool) -> None:
        self._bomb_mode = active
        self.queue_draw()
    def refresh(self) -> None:
        self.queue_draw()
    # ------------------------------------------------------------------
    # Drawing
    # ------------------------------------------------------------------
    def _draw(self, area, cr, width, height) -> None:
        if self._state is None:
            return
        for r in range(GRID_ROWS):
            for c in range(GRID_COLS):
                cell = self._state.cells[r][c]
                x = c * CELL_SIZE
                y = r * CELL_SIZE
                self._draw_cell(cr, x, y, cell, r, c)
        # Bomb hover diamond overlay
        if self._bomb_mode and self._hover:
            hr, hc = self._hover
            for (br, bc) in _bomb_cells(hr, hc):
                dr, dc = br - hr, bc - hc
                h_pos, v_pos = _bomb_pos(dr, dc)
                img_name = bomb_pos_image(h_pos, v_pos)
                pixbuf = assets.get_image(img_name)
                if pixbuf:
                    self._paint_pixbuf(cr, bc * CELL_SIZE, br * CELL_SIZE, pixbuf)
    def _draw_cell(self, cr, x: int, y: int, cell: Cell, row: int, col: int) -> None:
        cs = CELL_SIZE
        if cell.state == "hidden":
            # Wave background
            wave_name = f"bg-wave-{cell.wave}-outbg.png"
            pixbuf = assets.get_image(wave_name) or assets.get_image("bg-wave-1-outbg.png")
            if pixbuf:
                self._paint_pixbuf(cr, x, y, pixbuf)
            else:
                # Fallback: solid dark tile
                cr.set_source_rgb(0.15, 0.15, 0.25)
                cr.rectangle(x, y, cs, cs)
                cr.fill()
        elif cell.state == "safe":
            # Light tile with number
            cr.set_source_rgb(0.85, 0.85, 0.85)
            cr.rectangle(x, y, cs, cs)
            cr.fill()
            # Draw thin border
            cr.set_source_rgb(0.6, 0.6, 0.6)
            cr.set_line_width(0.5)
            cr.rectangle(x + 0.5, y + 0.5, cs - 1, cs - 1)
            cr.stroke()
            if cell.value and cell.value != 0:
                self._draw_number(cr, x, y, cs, int(cell.value))
        elif cell.state == "mine":
            # Mine flag — show the appropriate player flag
            color = cell.owner or "red"
            flag_name = f"bg-flag-{color}-outbg.png"
            pixbuf = assets.get_image(flag_name)
            if pixbuf:
                self._paint_pixbuf(cr, x, y, pixbuf)
            else:
                # Fallback colour
                if color == "red":
                    cr.set_source_rgb(0.8, 0.1, 0.1)
                else:
                    cr.set_source_rgb(0.1, 0.3, 0.9)
                cr.rectangle(x, y, cs, cs)
                cr.fill()
        # Last-step highlight overlay
        if cell.is_last:
            color = cell.owner or (self._state.turn if self._state else "red")
            last_name = f"bg-last-{color}-outbg.png"
            pixbuf = assets.get_image(last_name)
            if pixbuf:
                self._paint_pixbuf(cr, x, y, pixbuf)
        # Target overlay on hover (non-bomb)
        if not self._bomb_mode and self._hover == (row, col):
            pixbuf = assets.get_image("bg-target-outbg.png")
            if pixbuf:
                self._paint_pixbuf(cr, x, y, pixbuf)
    @staticmethod
    def _paint_pixbuf(cr, x: int, y: int, pixbuf: GdkPixbuf.Pixbuf) -> None:
        Gdk.cairo_set_source_pixbuf(cr, pixbuf, x, y)
        cr.paint()
    # Number colours matching standard minesweeper conventions
    _NUM_COLOURS = {
        1: (0.0, 0.0, 1.0),
        2: (0.0, 0.5, 0.0),
        3: (1.0, 0.0, 0.0),
        4: (0.0, 0.0, 0.5),
        5: (0.5, 0.0, 0.0),
        6: (0.0, 0.5, 0.5),
        7: (0.0, 0.0, 0.0),
        8: (0.5, 0.5, 0.5),
    }
    def _draw_number(self, cr, x: int, y: int, cs: int, value: int) -> None:
        r, g, b = self._NUM_COLOURS.get(value, (0, 0, 0))
        cr.set_source_rgb(r, g, b)
        cr.select_font_face("Sans", 0, 1)  # normal, bold
        cr.set_font_size(cs * 0.55)
        text = str(value)
        ext = cr.text_extents(text)
        tx = x + (cs - ext.width) / 2 - ext.x_bearing
        ty = y + (cs + ext.height) / 2 - ext.y_bearing - ext.height
        cr.move_to(tx, ty)
        cr.show_text(text)
    # ------------------------------------------------------------------
    # Input handlers
    # ------------------------------------------------------------------
    def _cell_at(self, px: float, py: float) -> tuple[int, int] | None:
        col = int(px // CELL_SIZE)
        row = int(py // CELL_SIZE)
        if 0 <= row < GRID_ROWS and 0 <= col < GRID_COLS:
            return row, col
        return None
    def _on_pressed(self, gesture, n_press, x, y) -> None:
        pos = self._cell_at(x, y)
        if pos and self._state and not self._state.finished:
            self._on_cell_click(pos[0], pos[1], self._bomb_mode)
    def _on_motion(self, controller, x, y) -> None:
        pos = self._cell_at(x, y)
        if pos != self._hover:
            self._hover = pos
            self.queue_draw()
    def _on_leave(self, controller) -> None:
        if self._hover is not None:
            self._hover = None
            self.queue_draw()
--- a/gtk-client/mineseeker/ui/lobby_page.py
+++ b/gtk-client/mineseeker/ui/lobby_page.py
@@ -0,0 +1,185 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import threading
 from collections.abc import Callable
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 from gi.repository import Gtk, Adw, GLib
 from mineseeker.api import game as game_api
 from mineseeker import assets
 from mineseeker.state import session as session_mod
 class LobbyPage(Gtk.Box):
    """
    Lobby screen — shows waiting players and a "New Game" button.
    Flow:
      - "New Game" → fetch token → start game → on_game_start()
      - Click a waiting player → challenge them → on_game_start() when accepted
    """
    def __init__(self, on_game_start: Callable[[str, str, str], None]) -> None:
        super().__init__(orientation=Gtk.Orientation.VERTICAL, spacing=0)
        self._on_game_start = on_game_start
        self._waiting: list[dict] = []
        # Header bar action area
        header_box = Gtk.Box(orientation=Gtk.Orientation.HORIZONTAL, spacing=8)
        header_box.set_margin_top(12)
        header_box.set_margin_bottom(12)
        header_box.set_margin_start(16)
        header_box.set_margin_end(16)
        title = Gtk.Label(label="Lobby")
        title.add_css_class("title-2")
        title.set_hexpand(True)
        title.set_xalign(0)
        header_box.append(title)
        self._refresh_btn = Gtk.Button(label="Refresh")
        self._refresh_btn.connect("clicked", lambda *_: self.refresh())
        header_box.append(self._refresh_btn)
        new_game_btn = Gtk.Button(label="New Game")
        new_game_btn.add_css_class("suggested-action")
        new_game_btn.connect("clicked", self._on_new_game)
        header_box.append(new_game_btn)
        self.append(header_box)
        self.append(Gtk.Separator(orientation=Gtk.Orientation.HORIZONTAL))
        # Waiting players list
        scrolled = Gtk.ScrolledWindow()
        scrolled.set_vexpand(True)
        scrolled.set_policy(Gtk.PolicyType.NEVER, Gtk.PolicyType.AUTOMATIC)
        self._list_box = Gtk.ListBox()
        self._list_box.set_selection_mode(Gtk.SelectionMode.NONE)
        self._list_box.add_css_class("boxed-list")
        self._list_box.set_margin_top(12)
        self._list_box.set_margin_bottom(12)
        self._list_box.set_margin_start(16)
        self._list_box.set_margin_end(16)
        scrolled.set_child(self._list_box)
        self.append(scrolled)
        self._status_label = Gtk.Label(label="No players waiting.")
        self._status_label.add_css_class("dim-label")
        self._status_label.set_margin_top(24)
        self._status_label.set_visible(True)
        self.append(self._status_label)
    def refresh(self) -> None:
        """Fetch waiting players list from the server."""
        self._refresh_btn.set_sensitive(False)
        threading.Thread(target=self._do_refresh, daemon=True).start()
    def _do_refresh(self) -> None:
        try:
            waiting = game_api.waiting()
            GLib.idle_add(self._update_list, waiting)
        except Exception:
            GLib.idle_add(self._refresh_btn.set_sensitive, True)
    def _update_list(self, waiting: list[dict]) -> bool:
        self._waiting = waiting
        # Clear existing rows
        while True:
            row = self._list_box.get_first_child()
            if row is None:
                break
            self._list_box.remove(row)
        my_assoc = session_mod.get().game_assoc
        for player in waiting:
            if player["gameAssoc"] == my_assoc:
                continue  # don't show ourselves
            row = self._make_player_row(player)
            self._list_box.append(row)
        has_players = bool([p for p in waiting if p.get("gameAssoc") != my_assoc])
        self._status_label.set_visible(not has_players)
        self._refresh_btn.set_sensitive(True)
        return GLib.SOURCE_REMOVE
    def _make_player_row(self, player: dict) -> Adw.ActionRow:
        row = Adw.ActionRow()
        row.set_title(player.get("name", "Guest"))
        row.set_subtitle(f"Waiting since {player.get('since', '')[:19].replace('T', ' ')}")
        challenge_btn = Gtk.Button(label="Challenge")
        challenge_btn.add_css_class("flat")
        challenge_btn.set_valign(Gtk.Align.CENTER)
        challenge_btn.connect(
            "clicked",
            lambda _btn, p=player: self._on_challenge(p),
        )
        row.add_suffix(challenge_btn)
        return row
    def _on_new_game(self, *_) -> None:
        threading.Thread(target=self._do_new_game, daemon=True).start()
    def _do_new_game(self) -> None:
        try:
            token_data = game_api.fetch_token()
            game_assoc = token_data["gameAssoc"]
            mercure_jwt = token_data["mercureJwt"]
            sess = session_mod.get()
            sess.game_assoc = game_assoc
            sess.mercure_jwt = mercure_jwt
            sess.color = "red"  # first player always red
            # Load images while we wait for an opponent
            assets.load_images()
            GLib.idle_add(self._on_game_start, game_assoc, mercure_jwt, "red")
        except Exception as e:
            GLib.idle_add(self._show_error_toast, str(e))
    def _on_challenge(self, player: dict) -> None:
        threading.Thread(
            target=self._do_challenge, args=(player,), daemon=True
        ).start()
    def _do_challenge(self, player: dict) -> None:
        try:
            token_data = game_api.fetch_token()
            game_assoc = token_data["gameAssoc"]
            mercure_jwt = token_data["mercureJwt"]
            sess = session_mod.get()
            sess.game_assoc = game_assoc
            sess.mercure_jwt = mercure_jwt
            game_api.challenge(
                target_game_assoc=player["gameAssoc"],
                challenger_game_assoc=game_assoc,
            )
            assets.load_images()
            # GamePage will determine color from subscribe payload
            GLib.idle_add(self._on_game_start, game_assoc, mercure_jwt, "")
        except Exception as e:
            GLib.idle_add(self._show_error_toast, str(e))
    def _show_error_toast(self, message: str) -> bool:
        # Find the nearest Adw.ToastOverlay ancestor if available, otherwise print
        print(f"[LobbyPage] Error: {message}")
        return GLib.SOURCE_REMOVE
--- a/gtk-client/mineseeker/ui/login_page.py
+++ b/gtk-client/mineseeker/ui/login_page.py
@@ -0,0 +1,146 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import threading
 from collections.abc import Callable
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 from gi.repository import Gtk, Adw, GLib
 from mineseeker.api.auth import login, login_as_guest, TotpRequired, AuthError
 from mineseeker import assets
 class LoginPage(Gtk.Box):
    """Username + password login form with a 'Play as Guest' option."""
    def __init__(
        self,
        on_success: Callable[[bool], None],
        on_guest: Callable[[], None],
    ) -> None:
        super().__init__(orientation=Gtk.Orientation.VERTICAL, spacing=0)
        self._on_success = on_success
        self._on_guest = on_guest
        self.set_valign(Gtk.Align.CENTER)
        self.set_halign(Gtk.Align.CENTER)
        clamp = Adw.Clamp()
        clamp.set_maximum_size(360)
        inner = Gtk.Box(orientation=Gtk.Orientation.VERTICAL, spacing=16)
        inner.set_margin_top(32)
        inner.set_margin_bottom(32)
        inner.set_margin_start(16)
        inner.set_margin_end(16)
        # Title
        title = Gtk.Label(label="MineSeeker")
        title.add_css_class("title-1")
        inner.append(title)
        subtitle = Gtk.Label(label="Sign in to play")
        subtitle.add_css_class("dim-label")
        inner.append(subtitle)
        # Credentials group
        group = Adw.PreferencesGroup()
        self._username_row = Adw.EntryRow(title="Username")
        group.add(self._username_row)
        self._password_row = Adw.PasswordEntryRow(title="Password")
        self._password_row.connect("entry-activated", self._on_login_clicked)
        group.add(self._password_row)
        inner.append(group)
        # Error label
        self._error_label = Gtk.Label(label="")
        self._error_label.add_css_class("error")
        self._error_label.set_visible(False)
        inner.append(self._error_label)
        # Login button
        self._login_btn = Gtk.Button(label="Sign In")
        self._login_btn.add_css_class("suggested-action")
        self._login_btn.add_css_class("pill")
        self._login_btn.connect("clicked", self._on_login_clicked)
        inner.append(self._login_btn)
        # Separator
        sep = Gtk.Separator(orientation=Gtk.Orientation.HORIZONTAL)
        inner.append(sep)
        # Guest button
        guest_btn = Gtk.Button(label="Play as Guest")
        guest_btn.add_css_class("pill")
        guest_btn.connect("clicked", self._on_guest_clicked)
        inner.append(guest_btn)
        clamp.set_child(inner)
        self.append(clamp)
    def _set_busy(self, busy: bool) -> None:
        self._login_btn.set_sensitive(not busy)
        self._username_row.set_sensitive(not busy)
        self._password_row.set_sensitive(not busy)
        if busy:
            self._error_label.set_visible(False)
    def _show_error(self, message: str) -> None:
        self._error_label.set_label(message)
        self._error_label.set_visible(True)
    def _on_login_clicked(self, *_) -> None:
        username = self._username_row.get_text().strip()
        password = self._password_row.get_text()
        if not username or not password:
            self._show_error("Please enter username and password.")
            return
        self._set_busy(True)
        threading.Thread(
            target=self._do_login, args=(username, password), daemon=True
        ).start()
    def _do_login(self, username: str, password: str) -> None:
        try:
            login(username, password)
            # Load assets after successful authentication
            assets.load_sounds()
            GLib.idle_add(self._on_success, False)
        except TotpRequired:
            assets.load_sounds()
            GLib.idle_add(self._on_success, True)
        except AuthError as e:
            GLib.idle_add(self._handle_auth_error, str(e))
        except Exception as e:
            GLib.idle_add(self._handle_auth_error, f"Connection error: {e}")
    def _handle_auth_error(self, message: str) -> bool:
        self._set_busy(False)
        self._show_error(message)
        return GLib.SOURCE_REMOVE
    def _on_guest_clicked(self, *_) -> None:
        self._set_busy(True)
        threading.Thread(target=self._do_guest, daemon=True).start()
    def _do_guest(self) -> None:
        try:
            login_as_guest()
            assets.load_sounds()
            GLib.idle_add(self._on_guest)
        except Exception as e:
            GLib.idle_add(self._handle_auth_error, f"Could not start guest session: {e}")
--- a/gtk-client/mineseeker/ui/player_panel.py
+++ b/gtk-client/mineseeker/ui/player_panel.py
@@ -0,0 +1,116 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 from collections.abc import Callable
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 from gi.repository import Gtk, Adw
 from mineseeker.state.game_state import PlayerState
 from mineseeker.constants import WIN_THRESHOLD
 class PlayerPanel(Gtk.Box):
    """
    Vertical sidebar panel showing one player's info:
      - Name + colour indicator
      - Mine count (e.g. "12 / 26")
      - Bonus points
      - Bomb toggle button
      - Resign button (only for the local player)
    """
    def __init__(
        self,
        color: str,
        is_local: bool,
        on_bomb_toggle: Callable[[bool], None],
        on_resign: Callable[[], None],
    ) -> None:
        super().__init__(orientation=Gtk.Orientation.VERTICAL, spacing=8)
        self._color = color
        self._is_local = is_local
        self._on_bomb_toggle = on_bomb_toggle
        self._on_resign = on_resign
        self._bomb_active = False
        self.set_margin_top(12)
        self.set_margin_bottom(12)
        self.set_margin_start(12)
        self.set_margin_end(12)
        self.set_valign(Gtk.Align.START)
        # Colour dot + name
        name_box = Gtk.Box(orientation=Gtk.Orientation.HORIZONTAL, spacing=6)
        dot = Gtk.Label(label="●")
        dot.add_css_class("red-player" if color == "red" else "blue-player")
        name_box.append(dot)
        self._name_label = Gtk.Label(label="Waiting…")
        self._name_label.add_css_class("title-4")
        self._name_label.set_ellipsize(3)  # PANGO_ELLIPSIZE_END
        name_box.append(self._name_label)
        self.append(name_box)
        # Mine count
        self._mine_label = Gtk.Label(label=f"0 / {WIN_THRESHOLD}")
        self._mine_label.add_css_class("title-2")
        self.append(self._mine_label)
        # Bonus points
        self._bonus_label = Gtk.Label(label="Bonus: 0")
        self._bonus_label.add_css_class("dim-label")
        self.append(self._bonus_label)
        # Bomb button — only meaningful for local player
        if is_local:
            self._bomb_btn = Gtk.ToggleButton(label="Bomb")
            self._bomb_btn.set_sensitive(False)
            self._bomb_btn.connect("toggled", self._on_bomb_toggled)
            self.append(self._bomb_btn)
            sep = Gtk.Separator(orientation=Gtk.Orientation.HORIZONTAL)
            self.append(sep)
            resign_btn = Gtk.Button(label="Resign")
            resign_btn.add_css_class("destructive-action")
            resign_btn.connect("clicked", lambda *_: self._on_resign())
            self.append(resign_btn)
    # ------------------------------------------------------------------
    # Update from state
    # ------------------------------------------------------------------
    def update(self, player: PlayerState, is_turn: bool) -> None:
        self._name_label.set_label(player.display_name)
        self._mine_label.set_label(f"{player.mines} / {WIN_THRESHOLD}")
        self._bonus_label.set_label(f"Bonus: {player.bonus_points:.1f}")
        if self._is_local and hasattr(self, "_bomb_btn"):
            can_use = player.bomb_enabled and not player.bomb_used and is_turn
            self._bomb_btn.set_sensitive(can_use)
            if player.bomb_used:
                self._bomb_btn.set_label("Bomb Used")
    def set_bomb_enabled(self, enabled: bool) -> None:
        if self._is_local and hasattr(self, "_bomb_btn"):
            self._bomb_btn.set_sensitive(enabled)
    def reset_bomb_toggle(self) -> None:
        """Deactivate the bomb toggle (after a bomb move is sent)."""
        if self._is_local and hasattr(self, "_bomb_btn"):
            self._bomb_btn.set_active(False)
    def _on_bomb_toggled(self, btn: Gtk.ToggleButton) -> None:
        self._bomb_active = btn.get_active()
        self._on_bomb_toggle(self._bomb_active)
--- a/gtk-client/mineseeker/ui/result_overlay.py
+++ b/gtk-client/mineseeker/ui/result_overlay.py
@@ -0,0 +1,102 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 from collections.abc import Callable
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 from gi.repository import Gtk, Adw
 class ResultOverlay(Gtk.Box):
    """
    Translucent overlay shown at game end.
    Displays the winner, final scores, and action buttons.
    """
    def __init__(
        self,
        on_play_again: Callable[[], None],
        on_lobby: Callable[[], None],
    ) -> None:
        super().__init__(orientation=Gtk.Orientation.VERTICAL, spacing=16)
        self._on_play_again = on_play_again
        self._on_lobby = on_lobby
        self.set_visible(False)
        self.set_valign(Gtk.Align.CENTER)
        self.set_halign(Gtk.Align.CENTER)
        self.set_margin_top(16)
        self.set_margin_bottom(16)
        self.set_margin_start(16)
        self.set_margin_end(16)
        self.add_css_class("card")
        self._title_label = Gtk.Label(label="")
        self._title_label.add_css_class("title-1")
        self.append(self._title_label)
        self._subtitle_label = Gtk.Label(label="")
        self._subtitle_label.add_css_class("title-3")
        self.append(self._subtitle_label)
        self._score_label = Gtk.Label(label="")
        self._score_label.add_css_class("dim-label")
        self.append(self._score_label)
        btn_box = Gtk.Box(orientation=Gtk.Orientation.HORIZONTAL, spacing=8)
        btn_box.set_halign(Gtk.Align.CENTER)
        play_again_btn = Gtk.Button(label="Play Again")
        play_again_btn.add_css_class("suggested-action")
        play_again_btn.add_css_class("pill")
        play_again_btn.connect("clicked", lambda *_: self._on_play_again())
        btn_box.append(play_again_btn)
        lobby_btn = Gtk.Button(label="Back to Lobby")
        lobby_btn.add_css_class("pill")
        lobby_btn.connect("clicked", lambda *_: self._on_lobby())
        btn_box.append(lobby_btn)
        self.append(btn_box)
    def show_result(
        self,
        winner: str | None,
        resigned: str | None,
        local_color: str,
        red_mines: int,
        blue_mines: int,
        red_name: str,
        blue_name: str,
    ) -> None:
        if resigned:
            loser_name = red_name if resigned == "red" else blue_name
            self._title_label.set_label("Resignation")
            self._subtitle_label.set_label(f"{loser_name} resigned.")
        elif winner == "draw" or winner is None:
            self._title_label.set_label("Draw!")
            self._subtitle_label.set_label("Equal mines — it's a draw.")
        elif winner == local_color:
            self._title_label.set_label("You Win!")
            self._subtitle_label.set_label("Congratulations!")
        else:
            self._title_label.set_label("You Lose")
            self._subtitle_label.set_label("Better luck next time.")
        self._score_label.set_label(
            f"{red_name}: {red_mines} mines   ·   {blue_name}: {blue_mines} mines"
        )
        self.set_visible(True)
    def hide_result(self) -> None:
        self.set_visible(False)
--- a/gtk-client/mineseeker/ui/totp_page.py
+++ b/gtk-client/mineseeker/ui/totp_page.py
@@ -0,0 +1,112 @@
 """
 This file is part of the SplendidBear Websites' projects.
 Copyright (c) 2026 @ www.splendidbear.org
 For the full copyright and license information, please view the LICENSE
 file that was distributed with this source code.
 """
 from __future__ import annotations
 import threading
 from collections.abc import Callable
 import gi
 gi.require_version("Gtk", "4.0")
 gi.require_version("Adw", "1")
 from gi.repository import Gtk, Adw, GLib
 from mineseeker.api.auth import submit_totp, AuthError
 class TotpPage(Gtk.Box):
    """6-digit TOTP code entry shown after a successful password login."""
    def __init__(
        self,
        on_success: Callable[[], None],
        on_back: Callable[[], None],
    ) -> None:
        super().__init__(orientation=Gtk.Orientation.VERTICAL, spacing=0)
        self._on_success = on_success
        self._on_back = on_back
        self.set_valign(Gtk.Align.CENTER)
        self.set_halign(Gtk.Align.CENTER)
        clamp = Adw.Clamp()
        clamp.set_maximum_size(360)
        inner = Gtk.Box(orientation=Gtk.Orientation.VERTICAL, spacing=16)
        inner.set_margin_top(32)
        inner.set_margin_bottom(32)
        inner.set_margin_start(16)
        inner.set_margin_end(16)
        title = Gtk.Label(label="Two-Factor Authentication")
        title.add_css_class("title-2")
        inner.append(title)
        subtitle = Gtk.Label(label="Enter the 6-digit code from your authenticator app.")
        subtitle.set_wrap(True)
        subtitle.add_css_class("dim-label")
        inner.append(subtitle)
        group = Adw.PreferencesGroup()
        self._code_row = Adw.EntryRow(title="Authentication Code")
        self._code_row.set_input_purpose(Gtk.InputPurpose.DIGITS)
        self._code_row.connect("entry-activated", self._on_verify_clicked)
        group.add(self._code_row)
        inner.append(group)
        self._error_label = Gtk.Label(label="")
        self._error_label.add_css_class("error")
        self._error_label.set_visible(False)
        inner.append(self._error_label)
        self._verify_btn = Gtk.Button(label="Verify")
        self._verify_btn.add_css_class("suggested-action")
        self._verify_btn.add_css_class("pill")
        self._verify_btn.connect("clicked", self._on_verify_clicked)
        inner.append(self._verify_btn)
        back_btn = Gtk.Button(label="Back to Login")
        back_btn.add_css_class("pill")
        back_btn.connect("clicked", lambda *_: self._on_back())
        inner.append(back_btn)
        clamp.set_child(inner)
        self.append(clamp)
    def _set_busy(self, busy: bool) -> None:
        self._verify_btn.set_sensitive(not busy)
        self._code_row.set_sensitive(not busy)
        if busy:
            self._error_label.set_visible(False)
    def _show_error(self, message: str) -> None:
        self._error_label.set_label(message)
        self._error_label.set_visible(True)
    def _on_verify_clicked(self, *_) -> None:
        code = self._code_row.get_text().strip()
        if len(code) != 6 or not code.isdigit():
            self._show_error("Code must be exactly 6 digits.")
            return
        self._set_busy(True)
        threading.Thread(target=self._do_verify, args=(code,), daemon=True).start()
    def _do_verify(self, code: str) -> None:
        try:
            submit_totp(code)
            GLib.idle_add(self._on_success)
        except AuthError as e:
            GLib.idle_add(self._handle_error, str(e))
        except Exception as e:
            GLib.idle_add(self._handle_error, f"Connection error: {e}")
    def _handle_error(self, message: str) -> bool:
        self._set_busy(False)
        self._show_error(message)
        return GLib.SOURCE_REMOVE
--- a/gtk-client/requirements.txt
+++ b/gtk-client/requirements.txt
@@ -0,0 +1,17 @@
 # PyGObject is NOT installable from PyPI into a plain venv.
 # It must come from your system package manager, e.g.:
 #   Debian/Ubuntu: sudo apt install python3-gi python3-gi-cairo gir1.2-gtk-4.0 gir1.2-adw-1
 #   Fedora:        sudo dnf install python3-gobject gtk4 libadwaita
 #   Arch:          sudo pacman -S python-gobject gtk4 libadwaita
 #
 # Create the venv with --system-site-packages so the system gi module is visible:
 #   python3 -m venv --system-site-packages .venv
 #
 # Then install only the pure-Python deps below:
 requests>=2.31.0
 sseclient-py>=1.8.0
 python-dotenv>=1.0.0
 # GStreamer for sound is also a system package:
 #   Debian/Ubuntu: sudo apt install gstreamer1.0-plugins-good gstreamer1.0-libav python3-gst-1.0
 #   Fedora:        sudo dnf install gstreamer1-plugins-good python3-gstreamer1
--- a/gtk-client/run.sh
+++ b/gtk-client/run.sh
@@ -0,0 +1,31 @@
 #!/usr/bin/env bash
 # Convenience launcher for the MineSeeker GTK4 desktop client.
 # Creates the venv on first run, then launches main.py.
 set -euo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 VENV="$SCRIPT_DIR/.venv"
 PYTHON="$VENV/bin/python"
 # ── Create venv if missing ──────────────────────────────────────────────────
 if [ ! -f "$PYTHON" ]; then
    echo "[run.sh] Creating venv with --system-site-packages…"
    python3 -m venv --system-site-packages "$VENV"
 fi
 # ── Install / update pure-Python deps ──────────────────────────────────────
 echo "[run.sh] Installing dependencies…"
 "$VENV/bin/pip" install --quiet requests sseclient-py python-dotenv
 # ── Check .env ──────────────────────────────────────────────────────────────
 if [ ! -f "$SCRIPT_DIR/.env" ]; then
    echo ""
    echo "ERROR: $SCRIPT_DIR/.env not found."
    echo "Copy .env.example to .env and set MINESEEKER_BASE_URL."
    exit 1
 fi
 # ── Launch ──────────────────────────────────────────────────────────────────
 echo "[run.sh] Starting MineSeeker…"
 exec "$PYTHON" "$SCRIPT_DIR/main.py" "$@"
--- a/package.json
+++ b/package.json
@@ -39,7 +39,7 @@
    "eslint-plugin-react-hooks": "7.1.1",
    "globals": "17.5.0",
    "sass": "^1.99.0",
-    "vite": "^8.0.8",
+    "vite": "^8.0.9",
    "vite-plugin-symfony": "^8.2.4"
  },
  "scripts": {
--- a/phpunit.dist.xml
+++ b/phpunit.dist.xml
@@ -0,0 +1,48 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!-- https://phpunit.readthedocs.io/en/latest/configuration.html -->
 <phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:noNamespaceSchemaLocation="vendor/phpunit/phpunit/phpunit.xsd"
         colors="true"
         failOnDeprecation="true"
         failOnNotice="true"
         failOnWarning="true"
         bootstrap="tests/bootstrap.php"
         cacheDirectory=".phpunit.cache"
 >
    <php>
        <ini name="display_errors" value="1" />
        <ini name="error_reporting" value="-1" />
        <server name="APP_ENV" value="test" force="true" />
        <server name="SHELL_VERBOSITY" value="-1" />
        <env name="SYMFONY_DEPRECATIONS_HELPER" value="disabled" />
        <env name="DATABASE_URL" value="postgresql://system7:bazmeg@127.0.0.1:15432/mineseeker_test?serverVersion=16&amp;charset=utf8" />
        <env name="DAMA_DISABLE_STATIC_CONNECTION" value="0" />
    </php>
    <testsuites>
        <testsuite name="Project Test Suite">
            <directory>tests</directory>
        </testsuite>
    </testsuites>
    <source ignoreSuppressionOfDeprecations="true"
            ignoreIndirectDeprecations="true"
            restrictNotices="true"
            restrictWarnings="true"
    >
        <include>
            <directory>src</directory>
        </include>
        <deprecationTrigger>
            <method>Doctrine\Deprecations\Deprecation::trigger</method>
            <method>Doctrine\Deprecations\Deprecation::delegateTriggerToBackend</method>
            <function>trigger_deprecation</function>
        </deprecationTrigger>
    </source>
    <extensions>
        <bootstrap class="Zenstruck\Foundry\PHPUnit\FoundryExtension" />
    </extensions>
 </phpunit>
--- a/public/sound/starting.mp3
+++ b/public/sound/starting.mp3
--- a/src/Controller/ApiAuthController.php
+++ b/src/Controller/ApiAuthController.php
@@ -0,0 +1,106 @@
 <?php declare(strict_types=1);
 /*
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Controller;
 use App\Entity\User;
 use Doctrine\ORM\EntityManagerInterface;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
 use Symfony\Bundle\SecurityBundle\Security;
 use Symfony\Component\HttpFoundation\JsonResponse;
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\HttpKernel\Attribute\AsController;
 use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
 use Symfony\Component\Routing\Attribute\Route;
 /**
 * Class ApiAuthController
 *
 * Provides a JSON login endpoint for native desktop clients.
 * This endpoint is intentionally exempt from the reCAPTCHA listener
 * because desktop clients cannot execute reCAPTCHA v3.
 *
 * After a successful password login, if the user has TOTP enabled the response
 * returns { requiresTwoFactor: true }. The client must then POST the 6-digit
 * code to the standard /2fa_check endpoint (which is already exempt from
 * the reCAPTCHA listener via LoginCaptchaListener).
 *
 * @package  App\Controller
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 26.
 */
 #[AsController]
 class ApiAuthController extends AbstractController
 {
    public function __construct(
        private readonly EntityManagerInterface      $em,
        private readonly UserPasswordHasherInterface $passwordHasher,
        private readonly Security                    $security,
    ) {
    }
    /**
     * POST /api/auth/login
     *
     * Request body (JSON): { "username": "...", "password": "..." }
     *
     * Responses:
     *   200 { "success": true, "requiresTwoFactor": false }
     *   200 { "success": true, "requiresTwoFactor": true }
     *   400 { "success": false, "error": "..." }
     *   401 { "success": false, "error": "..." }
     */
    #[Route('/api/auth/login', name: 'MineSeekerBundle_api_auth_login', methods: ['POST'])]
    public function login(Request $request): JsonResponse
    {
        $data     = $request->toArray();
        $username = trim($data['username'] ?? '');
        $password = $data['password'] ?? '';
        if ($username === '' || $password === '') {
            return $this->json(
                ['success' => false, 'error' => 'Username and password are required.'],
                Response::HTTP_BAD_REQUEST
            );
        }
        /** @var User|null $user */
        $user = $this->em->getRepository(User::class)->findOneBy(['username' => $username]);
        if ($user === null || !$this->passwordHasher->isPasswordValid($user, $password)) {
            return $this->json(
                ['success' => false, 'error' => 'Invalid username or password.'],
                Response::HTTP_UNAUTHORIZED
            );
        }
        if (!$user->isVerified) {
            return $this->json(
                ['success' => false, 'error' => 'Account not yet activated. Check your email.'],
                Response::HTTP_UNAUTHORIZED
            );
        }
        // Log the user in via the Symfony security system.
        // If TOTP is enabled, scheb/2fa will place the session into
        // IS_AUTHENTICATED_2FA_IN_PROGRESS state, and the client must
        // complete 2FA by POSTing the code to /2fa_check.
        $this->security->login($user, 'form_login');
        return $this->json([
            'success'           => true,
            'requiresTwoFactor' => $user->isTotpAuthenticationEnabled(),
        ]);
    }
 }
--- a/src/Controller/MercureController.php
+++ b/src/Controller/MercureController.php
@@ -12,6 +12,7 @@ namespace App\Controller;
 use App\Entity\PlayedGame;
 use App\Repository\PlayedGameRepository;
 use App\Service\MercureJwtService;
 use App\Service\ResolveUserNamesService;
 use App\Util\RpcManager;
 use App\Util\TopicManager;
@@ -23,6 +24,7 @@ use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\HttpKernel\Attribute\AsController;
 use Symfony\Component\Routing\Attribute\Route;
 use Symfony\Component\Uid\Uuid;
 /**
 * Class MercureController
@@ -45,9 +47,28 @@ class MercureController extends AbstractController
        private readonly TopicManager            $topicManager,
        private readonly RpcManager              $rpcManager,
        private readonly ResolveUserNamesService $userNamesService,
        private readonly MercureJwtService       $mercureJwtService,
    ) {
    }
    /**
     * Returns a fresh Mercure subscriber JWT and a new gameAssoc UUID.
     * Intended for native desktop clients that cannot parse the JWT from HTML.
     *
     * Response: { "mercureJwt": "<jwt>", "gameAssoc": "<uuid>" }
     */
    #[Route('/api/game/token', name: 'MineSeekerBundle_api_game_token', methods: ['GET'])]
    public function token(): JsonResponse
    {
        $gameAssoc = Uuid::v4()->toRfc4122();
        $userName  = $this->userNamesService->resolveUserName();
        return $this->json([
            'mercureJwt' => $this->mercureJwtService->mintSubscriberToken($gameAssoc, $userName),
            'gameAssoc'  => $gameAssoc,
        ]);
    }
    #[Route('/api/game/start', name: 'MineSeekerBundle_api_game_start', methods: ['POST'])]
    public function start(Request $request): JsonResponse
    {
--- a/src/Controller/ProfileController.php
+++ b/src/Controller/ProfileController.php
@@ -27,6 +27,7 @@ use Doctrine\ORM\EntityManagerInterface;
 use League\Flysystem\FilesystemException;
 use League\Flysystem\FilesystemOperator;
 use Liip\ImagineBundle\Imagine\Cache\CacheManager;
 use Liip\ImagineBundle\Service\FilterService;
 use Psr\Log\LoggerInterface;
 use RuntimeException;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
@@ -140,6 +141,7 @@ class ProfileController extends AbstractController
        Request                                                             $request,
        EntityManagerInterface                                              $em,
        CacheManager                                                        $cacheManager,
        FilterService                                                       $filterService,
        #[Autowire(service: 'mineseeker.media.storage')] FilesystemOperator $mediaStorage,
    ): JsonResponse {
        $this->denyAccessUnlessGranted('IS_AUTHENTICATED_REMEMBERED');
@@ -153,8 +155,8 @@ class ProfileController extends AbstractController
            return $this->json(['error' => 'No file uploaded.'], 400);
        }
-        if ($file->getSize() > 2 * 1024 * 1024) {
+        if ($file->getSize() > 10 * 1024 * 1024) {
-            return $this->json(['error' => 'File is too large. Maximum 2 MB.'], 400);
+            return $this->json(['error' => 'File is too large. Maximum 10 MB.'], 400);
        }
        $allowed = ['image/jpeg', 'image/png', 'image/gif', 'image/webp'];
@@ -182,6 +184,7 @@ class ProfileController extends AbstractController
            $mediaStorage->writeStream($newPath, $stream);
        } catch (FilesystemException $e) {
            $this->logger->error('Unable to write new avatar: ' . $e->getMessage());
            fclose($stream);
            throw new RuntimeException('Unable to write new avatar: ' . $e->getMessage());
        }
        fclose($stream);
@@ -190,7 +193,7 @@ class ProfileController extends AbstractController
        $em->flush();
        return $this->json([
-            'thumbUrl' => $cacheManager->generateUrl($newPath, 'avatar_thumb'),
+            'thumbUrl' => $filterService->getUrlOfFilteredImage($newPath, 'avatar_thumb'),
        ]);
    }
--- a/src/Dto/ProfileGameDto.php
+++ b/src/Dto/ProfileGameDto.php
@@ -46,6 +46,7 @@ final readonly class ProfileGameDto implements JsonSerializable
        public float   $blueBonusPoints,
        public array   $redBonusStats,
        public array   $blueBonusStats,
        public bool    $bothRegistered,
    ) {
    }
--- a/src/Dto/ProfileGameDtoFactory.php
+++ b/src/Dto/ProfileGameDtoFactory.php
@@ -62,6 +62,7 @@ final readonly class ProfileGameDtoFactory
            blueBonusPoints: $game->blueBonusPoints ?? 0.0,
            redBonusStats: $game->redBonusStats ?? [],
            blueBonusStats: $game->blueBonusStats ?? [], 
            bothRegistered: $game->red !== null && $game->blue !== null,
        );
    }
@@ -128,6 +129,7 @@ final readonly class ProfileGameDtoFactory
            blueBonusPoints:  $battle->blueBonusPoints,
            redBonusStats:    $battle->redBonusStats,
            blueBonusStats:   $battle->blueBonusStats,
            bothRegistered:   !$battle->oppIsGuest,
        );
    }
--- a/src/Repository/RecentBattleRepository.php
+++ b/src/Repository/RecentBattleRepository.php
@@ -40,9 +40,19 @@ class RecentBattleRepository extends ServiceEntityRepository
    public function findRecentForUser(int $userId, int $limit = 30): array
    {
-        return $this->createQueryBuilder('rb')
+        $qb = $this->createQueryBuilder('rb');
-            ->where('rb.userId = :uid')
+
        return $qb
            ->where($qb->expr()->eq('rb.userId', ':uid'))
            ->andWhere(
                $qb->expr()->orX(
                    $qb->expr()->eq('rb.oppIsGuest', ':false'),
                    $qb->expr()->isNotNull('rb.redPoints'),
                    $qb->expr()->isNotNull('rb.bluePoints')
                ),
            )
            ->setParameter('uid', $userId)
            ->setParameter('false', false)
            ->orderBy('rb.updated', 'DESC')
            ->setMaxResults($limit)
            ->getQuery()
--- a/src/Service/BattleCardGenerator.php
+++ b/src/Service/BattleCardGenerator.php
@@ -34,11 +34,11 @@ final class BattleCardGenerator
 {
    private const int    WIDTH       = 1200;
    private const int    HEIGHT      = 630;
    private const string FONT        = '/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf';
    private const int    AVATAR_SIZE = 120;
    public function __construct(
        private readonly string             $cacheDir,
        private readonly string             $fontPath,
        private readonly FilesystemOperator $minioMediaStorage,
        private readonly LoggerInterface    $logger,
    ) {
@@ -159,7 +159,7 @@ final class BattleCardGenerator
        $redBonusPoints = $game->redBonusPoints ?? 0;
        $blueBonusPoints = $game->blueBonusPoints ?? 0;
        $bonusText = number_format((float)$redBonusPoints, 1, '.', '') . '  *  :  *  ' . number_format((float)$blueBonusPoints, 1, '.', '');
-        $this->centeredText($im, $bonusText, 24, self::WIDTH / 2, 425, $gold);
+        $this->centeredText($im, $bonusText, 24, self::WIDTH / 2, 445, $gold);
        if ($winner === 'red') {
            $resultText = $redName . ' wins';
@@ -176,11 +176,11 @@ final class BattleCardGenerator
        }
        if ($resultText !== '') {
-            $this->centeredText($im, $resultText, 30, self::WIDTH / 2, 475, $resultColor);
+            $this->centeredText($im, $resultText, 30, self::WIDTH / 2, 495, $resultColor);
        }
        if ($resign) {
-            $this->centeredText($im, ucfirst($resign) . ' resigned', 18, self::WIDTH / 2, 508, $muted);
+            $this->centeredText($im, ucfirst($resign) . ' resigned', 18, self::WIDTH / 2, 528, $muted);
        }
        $this->centeredText($im, 'mineseeker.hu', 16, self::WIDTH / 2, self::HEIGHT - 20, $muted);
@@ -273,23 +273,23 @@ final class BattleCardGenerator
            /** Draw initials */
            $initials = mb_strtoupper(mb_substr($name, 0, 2));
            $fontSize = 48;
-            $bbox = imagettfbbox($fontSize, 0, self::FONT, $initials);
+            $bbox = imagettfbbox($fontSize, 0, $this->fontPath, $initials);
            $textW = $bbox[2] - $bbox[0];
            $textH = $bbox[1] - $bbox[7];
            $textX = $cx - $textW / 2;
            $textY = $cy + $textH / 2;
            $white = imagecolorallocate($im, 255, 255, 255);
-            imagettftext($im, $fontSize, 0, (int)$textX, (int)$textY, $white, self::FONT, $initials);
+            imagettftext($im, $fontSize, 0, (int)$textX, (int)$textY, $white, $this->fontPath, $initials);
        }
    }
    /** Render text centered on $cx. */
    private function centeredText(GdImage $im, string $text, int $size, int $cx, int $y, int $color): void
    {
-        $bbox = imagettfbbox($size, 0, self::FONT, $text);
+        $bbox = imagettfbbox($size, 0, $this->fontPath, $text);
        $w = $bbox[2] - $bbox[0];
-        imagettftext($im, $size, 0, (int)($cx - $w / 2), $y, $color, self::FONT, $text);
+        imagettftext($im, $size, 0, (int)($cx - $w / 2), $y, $color, $this->fontPath, $text);
    }
    /** Render text centered on $cx, shrinking font size to fit $maxWidth. */
@@ -302,7 +302,7 @@ final class BattleCardGenerator
        int     $color,
        int     $maxWidth
    ): void {
-        $bbox = imagettfbbox($size, 0, self::FONT, $text);
+        $bbox = imagettfbbox($size, 0, $this->fontPath, $text);
        $w = $bbox[2] - $bbox[0];
        if ($w > $maxWidth) {
            $size = (int)($size * $maxWidth / $w);
--- a/src/Story/AppStory.php
+++ b/src/Story/AppStory.php
@@ -0,0 +1,33 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Story;
 use Zenstruck\Foundry\Attribute\AsFixture;
 use Zenstruck\Foundry\Story;
 /**
 * Class AppStory
 *
 * @package  App\Story
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[AsFixture(name: 'main')]
 final class AppStory extends Story
 {
    public function build(): void
    {
        // SomeFactory::createOne();
    }
 }
--- a/src/Validator/RecaptchaValidator.php
+++ b/src/Validator/RecaptchaValidator.php
@@ -26,12 +26,13 @@ use Symfony\Component\Validator\Exception\UnexpectedTypeException;
 * @link     www.splendidbear.org
 * @since    2026. 04. 12.
 */
-class RecaptchaValidator extends ConstraintValidator
+final class RecaptchaValidator extends ConstraintValidator
 {
    public function __construct(
        private readonly RecaptchaService $recaptcha,
        private readonly RequestStack     $requestStack,
-    ) {}
+    ) {
    }
    public function validate(mixed $value, Constraint $constraint): void
    {
@@ -40,9 +41,9 @@ class RecaptchaValidator extends ConstraintValidator
        }
        $request = $this->requestStack->getCurrentRequest();
-        $remoteIp = $request !== null ? ((string) $request->getClientIp()) : '';
+        $remoteIp = $request !== null ? ((string)$request->getClientIp()) : '';
-        if ($this->recaptcha->verify((string) $value, $remoteIp)) {
+        if ($this->recaptcha->verify((string)$value, $remoteIp)) {
            return;
        }
--- a/symfony.lock
+++ b/symfony.lock
@@ -2,6 +2,15 @@
    "cocur/slugify": {
        "version": "v3.1"
    },
    "dama/doctrine-test-bundle": {
        "version": "8.6",
        "recipe": {
            "repo": "github.com/symfony/recipes-contrib",
            "branch": "main",
            "version": "8.3",
            "ref": "dfc51177476fb39d014ed89944cde53dc3326d23"
        }
    },
    "doctrine/collections": {
        "version": "v1.5.0"
    },
@@ -120,6 +129,21 @@
            "ref": "3a6673f248f8fc1dd364dadfef4c5b381d1efab6"
        }
    },
    "phpunit/phpunit": {
        "version": "13.1",
        "recipe": {
            "repo": "github.com/symfony/recipes",
            "branch": "main",
            "version": "11.1",
            "ref": "ca0bc067abfb40a8de1b2561b96cbfc2b833c314"
        },
        "files": [
            ".env.test",
            "phpunit.dist.xml",
            "tests/bootstrap.php",
            "bin/phpunit"
        ]
    },
    "psr/cache": {
        "version": "1.0.1"
    },
@@ -469,5 +493,18 @@
    },
    "zendframework/zend-eventmanager": {
        "version": "3.2.1"
    },
    "zenstruck/foundry": {
        "version": "2.9",
        "recipe": {
            "repo": "github.com/symfony/recipes",
            "branch": "main",
            "version": "2.7",
            "ref": "9bd824886195ebe64a24438db1b6d17eb833ac56"
        },
        "files": [
            "config/packages/zenstruck_foundry.yaml",
            "src/Story/AppStory.php"
        ]
    }
 }
--- a/templates/Security/profile.html.twig
+++ b/templates/Security/profile.html.twig
@@ -2,7 +2,9 @@
 {% macro stat_val(value, suffix) %}
  {%- set abbr = value >= 1000 -%}
-  <span class="profile-stat__value"{% if abbr %} title="{{ value }}"{% endif %}>{% if abbr %}{{ (value / 1000)|round(1, 'floor') }}k{% else %}{{ value }}{% endif %}{% if suffix %}<small>{{ suffix }}</small>{% endif %}</span>
+  <span
    class="profile-stat__value"{% if abbr %} title="{{ value }}"{% endif %}>{% if abbr %}{{ (value / 1000)|round(1, 'floor') }}k{% else %}{{ value }}{% endif %}{% if suffix %}
      <small>{{ suffix }}</small>{% endif %}</span>
 {% endmacro %}
 {% block title %} - Profile{% endblock %}
@@ -31,7 +33,7 @@
    <div class="profile-header">
      <div id="profile-avatar-root"
           data-upload-url="{{ path('MineSeekerBundle_profile_avatar') }}"
-           data-thumb-url="{{ app.user.avatarPath ? app.user.avatarPath|imagine_filter('avatar_thumb') : '' }}"
+           data-thumb-url="{{ app.user.avatarPath ? path('liip_imagine_filter', {path: app.user.avatarPath, filter: 'avatar_thumb'}) : '' }}"
           data-initials="{{ app.user.username|slice(0, 2)|upper }}">
      </div>
      <div class="profile-info">
@@ -138,7 +140,9 @@
              and (my_points > 25 or opp_points > 25)) %}
            {% set is_anonymous = game.oppIsGuest %}
-             <div class="profile-game profile-game--{{ result }}{% if not is_finished and not is_anonymous %} profile-game--ongoing{% elseif is_anonymous %} profile-game--abandoned{% endif %}{% if loop.index0 >= 5 %} profile-game--hidden{% endif %}" data-game-index="{{ loop.index0 }}">
+            <div
              class="profile-game profile-game--{{ result }}{% if not is_finished and not is_anonymous %} profile-game--ongoing{% elseif is_anonymous %} profile-game--abandoned{% endif %}{% if loop.index0 >= 5 %} profile-game--hidden{% endif %}"
              data-game-index="{{ loop.index0 }}">
               <span class="profile-game__badge">
                   {% if is_finished %}
                     {{ result == 'win' ? 'Win' : (result == 'loss' ? 'Loss' : 'Draw') }}
--- a/templates/base.html.twig
+++ b/templates/base.html.twig
@@ -28,6 +28,20 @@
  <link rel="icon" href="{{ asset('/images/favicon/favicon.ico') }}" type="image/x-icon">
  {% block metas %}{% endblock %}
  <title>MineSeeker{% block title %}{% endblock %}</title>
  <script
    defer src="https://umami.splendidbear.org/script.js"
    data-website-id="825e02a9-d675-4cbd-9e68-72b98de2e4e9"
  >
  </script>
  <script
    defer
    src="https://umami.splendidbear.org/recorder.js"
    data-website-id="825e02a9-d675-4cbd-9e68-72b98de2e4e9"
    data-sample-rate="0.15"
    data-mask-level="moderate"
    data-max-duration="300000"
  >
  </script>
  {% block stylesheets %}{% endblock %}
 </head>
--- a/tests/Controller/GameControllerTest.php
+++ b/tests/Controller/GameControllerTest.php
@@ -0,0 +1,145 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Controller;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use Symfony\Bundle\FrameworkBundle\KernelBrowser;
 use App\Tests\WebTestCase;
 use Symfony\Component\HttpFoundation\Response;
 /**
 * Class GameControllerTest
 *
 * @package  App\Tests\Controller
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('Game Controller')]
 class GameControllerTest extends WebTestCase
 {
    private KernelBrowser $client;
    protected function setUp(): void
    {
        parent::setUp();
        $this->client = static::createClient();
    }
    #[Test]
    #[TestDox('Homepage loads successfully with navigation links')]
    public function homepageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('h1');
        self::assertSelectorExists('a[href="/play"]');
    }
    #[Test]
    #[TestDox('Play page loads successfully')]
    public function playPageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/play');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertResponseHasHeader('Content-Type');
    }
    #[Test]
    #[TestDox('Play page with game association loads successfully')]
    public function playPageWithGameAssocLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/play/testgame123');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertResponseHasHeader('Content-Type');
    }
    #[Test]
    #[TestDox('Privacy policy page loads successfully')]
    public function privacyPolicyPageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/privacy-policy');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('h1');
    }
    #[Test]
    #[TestDox('Terms of service page loads successfully')]
    public function termsOfServicePageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/terms-of-service');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('h1');
    }
    #[Test]
    #[TestDox('Contact page loads successfully with form')]
    public function contactPageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/contact');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('form');
        self::assertSelectorExists('button[type="submit"]');
    }
    #[Test]
    #[TestDox('Landing page loads successfully with play link')]
    public function landingPageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/landing-page');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('h1');
        self::assertSelectorExists('a[href="/play"]');
    }
    #[Test]
    #[TestDox('Rules page loads successfully')]
    public function rulesPageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/rules');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('h1');
    }
    #[Test]
    #[TestDox('Homepage contains navigation links to play, login, and register')]
    public function homepageContainsNavigationLinks(): void
    {
        $crawler = $this->client->request('GET', '/');
        self::assertResponseIsSuccessful();
        self::assertSelectorExists('a[href="/play"]');
        self::assertSelectorExists('a[href="/login"]');
        self::assertSelectorExists('a[href="/register"]');
    }
    #[Test]
    #[TestDox('Play page has correct meta tags for SEO and social sharing')]
    public function playPageHasCorrectMetaTags(): void
    {
        $this->client->request('GET', '/play');
        self::assertResponseIsSuccessful();
        self::assertSelectorExists('meta[name="description"]');
        self::assertSelectorExists('meta[property="og:title"]');
    }
 }
--- a/tests/Controller/ProfileControllerTest.php
+++ b/tests/Controller/ProfileControllerTest.php
@@ -0,0 +1,146 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Controller;
 use App\Tests\Factory\PlayedGameFactory;
 use App\Tests\Factory\UserFactory;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use Symfony\Bundle\FrameworkBundle\KernelBrowser;
 use App\Tests\WebTestCase;
 use Symfony\Component\HttpFoundation\Response;
 /**
 * Class ProfileControllerTest
 *
 * @package  App\Tests\Controller
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('Profile Controller')]
 class ProfileControllerTest extends WebTestCase
 {
    private KernelBrowser $client;
    protected function setUp(): void
    {
        parent::setUp();
        $this->client = static::createClient();
    }
    #[Test]
    #[TestDox('Profile page requires authentication')]
    public function profilePageRequiresAuthentication(): void
    {
        $this->client->request('GET', '/profile');
        self::assertResponseRedirects('/login');
    }
    #[Test]
    #[TestDox('Profile security page requires authentication')]
    public function profileSecurityPageRequiresAuthentication(): void
    {
        $this->client->request('GET', '/profile/security');
        self::assertResponseRedirects('/login');
    }
    #[Test]
    #[TestDox('Profile avatar upload requires authentication')]
    public function profileAvatarPageRequiresAuthentication(): void
    {
        $this->client->request('POST', '/profile/avatar');
        self::assertResponseRedirects('/login');
    }
    #[Test]
    #[TestDox('Battle share page returns 404 for non-existent game')]
    public function battleSharePageReturns404ForNonExistentGame(): void
    {
        $uuid = '00000000-0000-4000-a000-000000000000';
        $this->client->request('GET', '/battle/' . $uuid);
        self::assertResponseStatusCodeSame(Response::HTTP_NOT_FOUND);
    }
    #[Test]
    #[TestDox('Battle share page displays valid game details')]
    public function battleSharePageShowsValidGame(): void
    {
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->redWins()
            ->create();
        $crawler = $this->client->request('GET', '/battle/' . $game->uuid);
        self::assertResponseIsSuccessful();
        self::assertSelectorExists('h1');
        self::assertGreaterThan(0, $crawler->filter('body')->count());
    }
    #[Test]
    #[TestDox('Battle share page has Open Graph meta tags for social sharing')]
    public function battleSharePageHasOgMetaTags(): void
    {
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->redWins()
            ->create();
        $this->client->request('GET', '/battle/' . $game->uuid);
        self::assertResponseIsSuccessful();
        self::assertSelectorExists('meta[property="og:title"]');
        self::assertSelectorExists('meta[property="og:image"]');
        self::assertSelectorExists('meta[property="og:description"]');
        self::assertSelectorExists('meta[property="og:type"]');
    }
    #[Test]
    #[TestDox('OG battle image returns 404 for non-existent game')]
    public function ogBattleImageReturns404ForNonExistentGame(): void
    {
        $uuid = '00000000-0000-4000-a000-000000000000';
        $this->client->request('GET', '/og/battle/' . $uuid . '.png');
        self::assertResponseStatusCodeSame(Response::HTTP_NOT_FOUND);
    }
    #[Test]
    #[TestDox('OG battle image generates valid PNG for existing game')]
    public function ogBattleImageReturnsImageForValidGame(): void
    {
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->redWins()
            ->create();
        $this->client->request('GET', '/og/battle/' . $game->uuid . '.png');
        self::assertResponseIsSuccessful();
        self::assertResponseHeaderSame('Content-Type', 'image/png');
    }
    #[Test]
    #[TestDox('Battle share page returns 404 for invalid UUID format')]
    public function battleSharePageWithInvalidUuidFormat(): void
    {
        $this->client->request('GET', '/battle/invalid-uuid');
        self::assertResponseStatusCodeSame(Response::HTTP_NOT_FOUND);
    }
 }
--- a/tests/Controller/SecurityControllerTest.php
+++ b/tests/Controller/SecurityControllerTest.php
@@ -0,0 +1,148 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Controller;
 use App\Tests\Factory\UserFactory;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use Symfony\Bundle\FrameworkBundle\KernelBrowser;
 use App\Tests\WebTestCase;
 use Symfony\Component\HttpFoundation\Response;
 /**
 * Class SecurityControllerTest
 *
 * @package  App\Tests\Controller
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('Security Controller')]
 class SecurityControllerTest extends WebTestCase
 {
    private KernelBrowser $client;
    protected function setUp(): void
    {
        parent::setUp();
        $this->client = static::createClient();
    }
    #[Test]
    #[TestDox('Login page loads successfully with form fields')]
    public function loginPageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/login');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('form');
        self::assertSelectorExists('input[name="_username"]');
        self::assertSelectorExists('input[name="_password"]');
        self::assertSelectorExists('button[type="submit"]');
    }
    #[Test]
    #[TestDox('Login page has links to register and forgot password')]
    public function loginPageHasRegisterLink(): void
    {
        $crawler = $this->client->request('GET', '/login');
        self::assertResponseIsSuccessful();
        self::assertSelectorExists('a[href="/register"]');
        self::assertSelectorExists('a[href="/forgot-password"]');
    }
    #[Test]
    #[TestDox('Register page loads successfully with form')]
    public function registerPageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/register');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('form');
        self::assertSelectorExists('button[type="submit"]');
    }
    #[Test]
    #[TestDox('Register page has link to login')]
    public function registerPageHasLoginLink(): void
    {
        $crawler = $this->client->request('GET', '/register');
        self::assertResponseIsSuccessful();
        self::assertSelectorExists('a[href="/login"]');
    }
    #[Test]
    #[TestDox('Forgot password page loads successfully with form')]
    public function forgotPasswordPageLoadsSuccessfully(): void
    {
        $crawler = $this->client->request('GET', '/forgot-password');
        self::assertResponseStatusCodeSame(Response::HTTP_OK);
        self::assertSelectorExists('form');
        self::assertSelectorExists('button[type="submit"]');
    }
    #[Test]
    #[TestDox('Account activation with invalid token redirects to login')]
    public function activateWithInvalidTokenShowsError(): void
    {
        $this->client->request('GET', '/activate/invalid-token');
        self::assertResponseRedirects('/login');
    }
    #[Test]
    #[TestDox('Password reset with invalid token redirects to forgot password')]
    public function resetPasswordWithInvalidTokenShowsError(): void
    {
        $this->client->request('GET', '/reset-password/invalid-token');
        self::assertResponseRedirects('/forgot-password');
    }
    #[Test]
    #[TestDox('Authenticated user is redirected from login page to homepage')]
    public function authenticatedUserRedirectsFromLogin(): void
    {
        $user = UserFactory::createOne();
        $this->client->loginUser($user->_real());
        $this->client->request('GET', '/login');
        self::assertResponseRedirects('/');
    }
    #[Test]
    #[TestDox('Authenticated user is redirected from register page to homepage')]
    public function authenticatedUserRedirectsFromRegister(): void
    {
        $user = UserFactory::createOne();
        $this->client->loginUser($user->_real());
        $this->client->request('GET', '/register');
        self::assertResponseRedirects('/');
    }
    #[Test]
    #[TestDox('Login form has remember me checkbox')]
    public function loginFormHasRememberMeCheckbox(): void
    {
        $crawler = $this->client->request('GET', '/login');
        self::assertResponseIsSuccessful();
        self::assertSelectorExists('input[name="_remember_me"]');
    }
 }
--- a/tests/Dto/ProfileChartDataDtoTest.php
+++ b/tests/Dto/ProfileChartDataDtoTest.php
@@ -0,0 +1,89 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Dto;
 use App\Dto\ProfileChartDataDto;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use PHPUnit\Framework\TestCase;
 /**
 * Class ProfileChartDataDtoTest
 *
 * @package  App\Tests\Dto
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('Profile Chart Data Dto')]
 class ProfileChartDataDtoTest extends TestCase
 {
    #[Test]
    #[TestDox('Json serialize returns all properties')]
    public function jsonSerializeReturnsAllProperties(): void
    {
        $months = ['Jan', 'Feb', 'Mar'];
        $wins = [5, 8, 10];
        $losses = [2, 3, 4];
        $draws = [1, 0, 1];
        $recentGames = [
            ['id' => 1, 'result' => 'win'],
            ['id' => 2, 'result' => 'loss'],
        ];
        $dto = new ProfileChartDataDto(
            months: $months,
            wins: $wins,
            losses: $losses,
            draws: $draws,
            pieWins: 23,
            pieLosses: 9,
            pieDraws: 2,
            recentGames: $recentGames,
        );
        $json = $dto->jsonSerialize();
        $this->assertSame($months, $json['months']);
        $this->assertSame($wins, $json['wins']);
        $this->assertSame($losses, $json['losses']);
        $this->assertSame($draws, $json['draws']);
        $this->assertSame(23, $json['pieWins']);
        $this->assertSame(9, $json['pieLosses']);
        $this->assertSame(2, $json['pieDraws']);
        $this->assertSame($recentGames, $json['recentGames']);
    }
    #[Test]
    #[TestDox('Constructor with empty arrays')]
    public function constructorWithEmptyArrays(): void
    {
        $dto = new ProfileChartDataDto(
            months: [],
            wins: [],
            losses: [],
            draws: [],
            pieWins: 0,
            pieLosses: 0,
            pieDraws: 0,
            recentGames: [],
        );
        $json = $dto->jsonSerialize();
        $this->assertSame([], $json['months']);
        $this->assertSame([], $json['wins']);
        $this->assertSame([], $json['recentGames']);
        $this->assertSame(0, $json['pieWins']);
    }
 }
--- a/tests/Dto/ProfileGameDtoTest.php
+++ b/tests/Dto/ProfileGameDtoTest.php
@@ -0,0 +1,126 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Dto;
 use App\Dto\ProfileGameDto;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use PHPUnit\Framework\TestCase;
 /**
 * Class ProfileGameDtoTest
 *
 * @package  App\Tests\Dto
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('Profile Game Dto')]
 class ProfileGameDtoTest extends TestCase
 {
    #[Test]
    #[TestDox('Json serialize returns all properties')]
    public function jsonSerializeReturnsAllProperties(): void
    {
        $dto = new ProfileGameDto(
            id: 1,
            uuid: '550e8400-e29b-41d4-a716-446655440000',
            redName: 'RedPlayer',
            blueName: 'BluePlayer',
            redAvatar: '/uploads/avatars/red.png',
            blueAvatar: '/uploads/avatars/blue.png',
            redPoints: 10,
            bluePoints: 8,
            redExplodedBomb: false,
            blueExplodedBomb: true,
            resign: null,
            created: '2026-04-20 10:00',
            date: '2026-04-20 10:30',
            isRed: true,
            result: 'win',
            myPoints: 10,
            oppPoints: 8,
            redBonusPoints: 5.5,
            blueBonusPoints: 2.0,
            redBonusStats: ['blindHits' => 2, 'chainBest' => 3],
            blueBonusStats: ['blindHits' => 1, 'chainBest' => 2],
            bothRegistered: true,
        );
        $json = $dto->jsonSerialize();
        $this->assertSame(1, $json['id']);
        $this->assertSame('550e8400-e29b-41d4-a716-446655440000', $json['uuid']);
        $this->assertSame('RedPlayer', $json['redName']);
        $this->assertSame('BluePlayer', $json['blueName']);
        $this->assertSame('/uploads/avatars/red.png', $json['redAvatar']);
        $this->assertSame('/uploads/avatars/blue.png', $json['blueAvatar']);
        $this->assertSame(10, $json['redPoints']);
        $this->assertSame(8, $json['bluePoints']);
        $this->assertFalse($json['redExplodedBomb']);
        $this->assertTrue($json['blueExplodedBomb']);
        $this->assertNull($json['resign']);
        $this->assertSame('2026-04-20 10:00', $json['created']);
        $this->assertSame('2026-04-20 10:30', $json['date']);
        $this->assertTrue($json['isRed']);
        $this->assertSame('win', $json['result']);
        $this->assertSame(10, $json['myPoints']);
        $this->assertSame(8, $json['oppPoints']);
        $this->assertSame(5.5, $json['redBonusPoints']);
        $this->assertSame(2.0, $json['blueBonusPoints']);
        $this->assertSame(['blindHits' => 2, 'chainBest' => 3], $json['redBonusStats']);
        $this->assertSame(['blindHits' => 1, 'chainBest' => 2], $json['blueBonusStats']);
        $this->assertTrue($json['bothRegistered']);
    }
    #[Test]
    #[TestDox('Json serialize with null values')]
    public function jsonSerializeWithNullValues(): void
    {
        $dto = new ProfileGameDto(
            id: null,
            uuid: null,
            redName: 'Guest',
            blueName: 'Guest',
            redAvatar: null,
            blueAvatar: null,
            redPoints: null,
            bluePoints: null,
            redExplodedBomb: null,
            blueExplodedBomb: null,
            resign: null,
            created: null,
            date: null,
            isRed: false,
            result: 'draw',
            myPoints: null,
            oppPoints: null,
            redBonusPoints: 0.0,
            blueBonusPoints: 0.0,
            redBonusStats: [],
            blueBonusStats: [],
            bothRegistered: false,
        );
        $json = $dto->jsonSerialize();
        $this->assertNull($json['id']);
        $this->assertNull($json['uuid']);
        $this->assertNull($json['redAvatar']);
        $this->assertNull($json['blueAvatar']);
        $this->assertNull($json['redPoints']);
        $this->assertNull($json['bluePoints']);
        $this->assertSame('draw', $json['result']);
        $this->assertFalse($json['bothRegistered']);
    }
 }
--- a/tests/Dto/ProfileStatsDtoTest.php
+++ b/tests/Dto/ProfileStatsDtoTest.php
@@ -0,0 +1,134 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Dto;
 use App\Dto\ProfileStatsDto;
 use App\Entity\UserStats;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use PHPUnit\Framework\TestCase;
 /**
 * Class ProfileStatsDtoTest
 *
 * @package  App\Tests\Dto
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('Profile Stats Dto')]
 class ProfileStatsDtoTest extends TestCase
 {
    #[Test]
    #[TestDox('From user stats with valid stats')]
    public function fromUserStatsWithValidStats(): void
    {
        $userStats = new UserStats();
        $userStats->userId = 1;
        $userStats->totalGames = 100;
        $userStats->wins = 60;
        $userStats->losses = 30;
        $userStats->draws = 10;
        $userStats->totalMines = 500;
        $userStats->totalBonusPoints = '150.5';
        $userStats->avgBonus = '2.5';
        $userStats->bestChain = 5;
        $userStats->blindHits = 20;
        $userStats->edgeMines = 15;
        $userStats->gamesWithScores = 90;
        $dto = ProfileStatsDto::fromUserStats($userStats);
        $this->assertSame(100, $dto->total);
        $this->assertSame(60, $dto->wins);
        $this->assertSame(30, $dto->losses);
        $this->assertSame(10, $dto->draws);
        $this->assertSame(500, $dto->minesHit);
        $this->assertSame(67, $dto->winRate); // 60/90 * 100 = 67
        $this->assertSame(6, $dto->avgScore); // 500/90 = 5.56 -> 6
        $this->assertSame(150.5, $dto->bonusPoints);
        $this->assertSame(2.5, $dto->avgBonus);
        $this->assertSame(5, $dto->bestChain);
        $this->assertSame(20, $dto->blindHits);
        $this->assertSame(15, $dto->edgeMines);
    }
    #[Test]
    #[TestDox('From user stats with null returns empty')]
    public function fromUserStatsWithNullReturnsEmpty(): void
    {
        $dto = ProfileStatsDto::fromUserStats(null);
        $this->assertSame(0, $dto->total);
        $this->assertSame(0, $dto->wins);
        $this->assertSame(0, $dto->losses);
        $this->assertSame(0, $dto->draws);
        $this->assertSame(0, $dto->minesHit);
        $this->assertSame(0, $dto->winRate);
        $this->assertSame(0, $dto->avgScore);
        $this->assertSame(0.0, $dto->bonusPoints);
        $this->assertSame(0.0, $dto->avgBonus);
        $this->assertSame(0, $dto->bestChain);
        $this->assertSame(0, $dto->blindHits);
        $this->assertSame(0, $dto->edgeMines);
    }
    #[Test]
    #[TestDox('Empty returns default values')]
    public function emptyReturnsDefaultValues(): void
    {
        $dto = ProfileStatsDto::empty();
        $this->assertSame(0, $dto->total);
        $this->assertSame(0, $dto->wins);
        $this->assertSame(0, $dto->losses);
        $this->assertSame(0, $dto->draws);
        $this->assertSame(0, $dto->minesHit);
        $this->assertSame(0, $dto->winRate);
        $this->assertSame(0, $dto->avgScore);
        $this->assertSame(0.0, $dto->bonusPoints);
        $this->assertSame(0.0, $dto->avgBonus);
        $this->assertSame(0, $dto->bestChain);
        $this->assertSame(0, $dto->blindHits);
        $this->assertSame(0, $dto->edgeMines);
    }
    #[Test]
    #[TestDox('Win rate calculation with no games with scores')]
    public function winRateCalculationWithNoGamesWithScores(): void
    {
        $userStats = new UserStats();
        $userStats->totalGames = 10;
        $userStats->wins = 5;
        $userStats->losses = 5;
        $userStats->draws = 0;
        $userStats->gamesWithScores = 0;
        $dto = ProfileStatsDto::fromUserStats($userStats);
        $this->assertSame(0, $dto->winRate);
    }
    #[Test]
    #[TestDox('Avg score calculation with no games with scores')]
    public function avgScoreCalculationWithNoGamesWithScores(): void
    {
        $userStats = new UserStats();
        $userStats->totalMines = 100;
        $userStats->gamesWithScores = 0;
        $dto = ProfileStatsDto::fromUserStats($userStats);
        $this->assertSame(0, $dto->avgScore);
    }
 }
--- a/tests/Entity/UserStatsTest.php
+++ b/tests/Entity/UserStatsTest.php
@@ -0,0 +1,142 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Entity;
 use App\Entity\UserStats;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use PHPUnit\Framework\TestCase;
 /**
 * Class UserStatsTest
 *
 * @package  App\Tests\Entity
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('User Stats')]
 class UserStatsTest extends TestCase
 {
    #[Test]
    #[TestDox('Get win rate calculates correctly')]
    public function getWinRateCalculatesCorrectly(): void
    {
        $stats = new UserStats();
        $stats->wins = 60;
        $stats->gamesWithScores = 100;
        $result = $stats->getWinRate();
        $this->assertSame(60, $result);
    }
    #[Test]
    #[TestDox('Get win rate with zero games returns zero')]
    public function getWinRateWithZeroGamesReturnsZero(): void
    {
        $stats = new UserStats();
        $stats->wins = 10;
        $stats->gamesWithScores = 0;
        $result = $stats->getWinRate();
        $this->assertSame(0, $result);
    }
    #[Test]
    #[TestDox('Get win rate rounds correctly')]
    public function getWinRateRoundsCorrectly(): void
    {
        $stats = new UserStats();
        $stats->wins = 33;
        $stats->gamesWithScores = 100;
        $result = $stats->getWinRate();
        $this->assertSame(33, $result);
    }
    #[Test]
    #[TestDox('Get avg score calculates correctly')]
    public function getAvgScoreCalculatesCorrectly(): void
    {
        $stats = new UserStats();
        $stats->totalMines = 550;
        $stats->gamesWithScores = 100;
        $result = $stats->getAvgScore();
        $this->assertSame(6, $result); // 550/100 = 5.5 -> 6
    }
    #[Test]
    #[TestDox('Get avg score with zero games returns zero')]
    public function getAvgScoreWithZeroGamesReturnsZero(): void
    {
        $stats = new UserStats();
        $stats->totalMines = 100;
        $stats->gamesWithScores = 0;
        $result = $stats->getAvgScore();
        $this->assertSame(0, $result);
    }
    #[Test]
    #[TestDox('Get avg score rounds down')]
    public function getAvgScoreRoundsDown(): void
    {
        $stats = new UserStats();
        $stats->totalMines = 101;
        $stats->gamesWithScores = 100;
        $result = $stats->getAvgScore();
        $this->assertSame(1, $result); // 101/100 = 1.01 -> 1
    }
    #[Test]
    #[TestDox('Get avg score rounds up')]
    public function getAvgScoreRoundsUp(): void
    {
        $stats = new UserStats();
        $stats->totalMines = 151;
        $stats->gamesWithScores = 100;
        $result = $stats->getAvgScore();
        $this->assertSame(2, $result); // 151/100 = 1.51 -> 2
    }
    #[Test]
    #[TestDox('Default values')]
    public function defaultValues(): void
    {
        $stats = new UserStats();
        $this->assertSame(0, $stats->userId);
        $this->assertSame(0, $stats->totalGames);
        $this->assertSame(0, $stats->wins);
        $this->assertSame(0, $stats->losses);
        $this->assertSame(0, $stats->draws);
        $this->assertSame(0, $stats->totalMines);
        $this->assertSame('0.0', $stats->totalBonusPoints);
        $this->assertSame('0.0', $stats->avgBonus);
        $this->assertSame(0, $stats->bestChain);
        $this->assertSame(0, $stats->blindHits);
        $this->assertSame(0, $stats->edgeMines);
        $this->assertSame(0, $stats->gamesWithScores);
        $this->assertNull($stats->lastGameAt);
    }
 }
--- a/tests/Factory/ContactMessageFactory.php
+++ b/tests/Factory/ContactMessageFactory.php
@@ -0,0 +1,55 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Factory;
 use App\Entity\ContactMessage;
 use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
 /**
 * Class ContactMessageFactory
 *
 * @package  App\Tests\Factory
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 *
 * @extends PersistentProxyObjectFactory<ContactMessage>
 */
 class ContactMessageFactory extends PersistentProxyObjectFactory
 {
    protected function defaults(): array
    {
        return [
            'name'      => self::faker()->name(),
            'email'     => self::faker()->safeEmail(),
            'content'   => self::faker()->paragraph(3),
            'consent'   => true,
            'ipAddress' => self::faker()->ipv4(),
        ];
    }
    public static function class(): string
    {
        return ContactMessage::class;
    }
    public function withoutConsent(): self
    {
        return $this->with(['consent' => false]);
    }
    public function anonymous(): self
    {
        return $this->with(['ipAddress' => null]);
    }
 }
--- a/tests/Factory/GamerFactory.php
+++ b/tests/Factory/GamerFactory.php
@@ -0,0 +1,51 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Factory;
 use App\Entity\Gamer;
 use DateTime;
 use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
 /**
 * Class GamerFactory
 *
 * @package  App\Tests\Factory
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 *
 * @extends PersistentProxyObjectFactory<Gamer>
 */
 class GamerFactory extends PersistentProxyObjectFactory
 {
    protected function defaults(): array
    {
        return [
            'userName'      => self::faker()->userName(),
            'ip'            => self::faker()->ipv4(),
            'country'       => self::faker()->countryCode(),
            'userAgent'     => self::faker()->userAgent(),
            'connTimestamp' => new DateTime(),
        ];
    }
    public static function class(): string
    {
        return Gamer::class;
    }
    public function anonymous(): self
    {
        return $this->with(['userName' => sprintf('Guest_%d', self::faker()->randomNumber(5))]);
    }
 }
--- a/tests/Factory/GridFactory.php
+++ b/tests/Factory/GridFactory.php
@@ -0,0 +1,53 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Factory;
 use App\Entity\Grid;
 use App\Entity\GridRow;
 use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
 /**
 * Class GridFactory
 *
 * @package  App\Tests\Factory
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 *
 * @extends PersistentProxyObjectFactory<Grid>
 */
 class GridFactory extends PersistentProxyObjectFactory
 {
    protected function defaults(): array
    {
        return [
            'playedGame' => PlayedGameFactory::new(),
        ];
    }
    public static function class(): string
    {
        return Grid::class;
    }
    protected function initialize(): static
    {
        return $this->afterInstantiate(function (Grid $grid): void {
            for ($i = 0; $i < 16; $i++) {
                /** @var GridRow $factory */
                $factory = GridRowFactory::new()->create()->_real();
                $grid->addGridRow($factory);
            }
        });
    }
 }
--- a/tests/Factory/GridRowFactory.php
+++ b/tests/Factory/GridRowFactory.php
@@ -0,0 +1,52 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Factory;
 use App\Entity\GridRow;
 use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
 /**
 * Class GridRowFactory
 *
 * @package  App\Tests\Factory
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 *
 * @extends PersistentProxyObjectFactory<GridRow>
 */
 class GridRowFactory extends PersistentProxyObjectFactory
 {
    protected function defaults(): array
    {
        $columns = [];
        for ($i = 0; $i < 16; $i++) {
            $columns[] = self::faker()->numberBetween(0, 8);
        }
        return [
            'gridCol' => $columns,
        ];
    }
    public static function class(): string
    {
        return GridRow::class;
    }
    public function withColumns(array $columns): self
    {
        return $this->with(['gridCol' => $columns]);
    }
 }
--- a/tests/Factory/PlayedGameFactory.php
+++ b/tests/Factory/PlayedGameFactory.php
@@ -0,0 +1,108 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Factory;
 use App\Entity\PlayedGame;
 use DateTime;
 use Symfony\Component\Uid\Uuid;
 use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
 /**
 * Class PlayedGameFactory
 *
 * @package  App\Tests\Factory
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 *
 * @extends PersistentProxyObjectFactory<PlayedGame>
 */
 class PlayedGameFactory extends PersistentProxyObjectFactory
 {
    protected function defaults(): array
    {
        return [
            'uuid'             => Uuid::v4(),
            'gameAssoc'        => self::faker()->uuid(),
            'redPoints'        => self::faker()->numberBetween(0, 51),
            'bluePoints'       => self::faker()->numberBetween(0, 51),
            'redExplodedBomb'  => false,
            'blueExplodedBomb' => false,
            'resign'           => null,
            'redBonusPoints'   => self::faker()->randomFloat(2, 0, 100),
            'blueBonusPoints'  => self::faker()->randomFloat(2, 0, 100),
            'redBonusStats'    => null,
            'blueBonusStats'   => null,
            'created'          => new DateTime(),
            'updated'          => new DateTime(),
        ];
    }
    public static function class(): string
    {
        return PlayedGame::class;
    }
    public function withRegisteredPlayers(): self
    {
        return $this->with([
            'red'  => UserFactory::new(),
            'blue' => UserFactory::new(),
        ]);
    }
    public function withAnonymousPlayers(): self
    {
        return $this->with([
            'redAnon'  => GamerFactory::new(),
            'blueAnon' => GamerFactory::new(),
        ]);
    }
    public function withMixedPlayers(): self
    {
        return $this->with([
            'red'      => UserFactory::new(),
            'blueAnon' => GamerFactory::new(),
        ]);
    }
    public function finished(): self
    {
        return $this->with([
            'redPoints'  => 26,
            'bluePoints' => 25,
        ]);
    }
    public function redWins(): self
    {
        return $this->with([
            'redPoints'  => 26,
            'bluePoints' => self::faker()->numberBetween(0, 25),
        ]);
    }
    public function blueWins(): self
    {
        return $this->with([
            'redPoints'  => self::faker()->numberBetween(0, 25),
            'bluePoints' => 26,
        ]);
    }
    public function resigned(string $player): self
    {
        return $this->with(['resign' => $player]);
    }
 }
--- a/tests/Factory/StepFactory.php
+++ b/tests/Factory/StepFactory.php
@@ -0,0 +1,68 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Factory;
 use App\Entity\Step;
 use DateTime;
 use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
 /**
 * Class StepFactory
 *
 * @package  App\Tests\Factory
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 *
 * @extends PersistentProxyObjectFactory<Step>
 */
 class StepFactory extends PersistentProxyObjectFactory
 {
    protected function defaults(): array
    {
        return [
            'row'           => self::faker()->numberBetween(0, 15),
            'col'           => self::faker()->numberBetween(0, 15),
            'wBomb'         => self::faker()->boolean(),
            'player'        => self::faker()->randomElement(['red', 'blue']),
            'revealedCells' => null,
            'playedGame'    => PlayedGameFactory::new(),
            'created'       => new DateTime(),
        ];
    }
    public static function class(): string
    {
        return Step::class;
    }
    public function mine(): self
    {
        return $this->with(['wBomb' => true]);
    }
    public function safe(): self
    {
        return $this->with(['wBomb' => false]);
    }
    public function forPlayer(string $player): self
    {
        return $this->with(['player' => $player]);
    }
    public function withRevealedCells(array $cells): self
    {
        return $this->with(['revealedCells' => $cells]);
    }
 }
--- a/tests/Factory/UserFactory.php
+++ b/tests/Factory/UserFactory.php
@@ -0,0 +1,60 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Factory;
 use App\Entity\User;
 use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
 /**
 * Class UserFactory
 *
 * @package  App\Tests\Factory
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 *
 * @extends PersistentProxyObjectFactory<User>
 */
 class UserFactory extends PersistentProxyObjectFactory
 {
    protected function defaults(): array
    {
        return [
            'username' => self::faker()->unique()->userName(),
            'email' => self::faker()->unique()->safeEmail(),
            'password' => 'hashedpassword',
            'isVerified' => true,
            'roles' => [],
        ];
    }
    public static function class(): string
    {
        return User::class;
    }
    public function withPassword(string $hashedPassword): self
    {
        return $this->with(['password' => $hashedPassword]);
    }
    public function unverified(): self
    {
        return $this->with(['isVerified' => false]);
    }
    public function withRoles(array $roles): self
    {
        return $this->with(['roles' => $roles]);
    }
 }
--- a/tests/Factory/WebAuthnCredentialFactory.php
+++ b/tests/Factory/WebAuthnCredentialFactory.php
@@ -0,0 +1,62 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Factory;
 use App\Entity\WebAuthnCredential;
 use DateTime;
 use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
 /**
 * Class WebAuthnCredentialFactory
 *
 * @package  App\Tests\Factory
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 *
 * @extends PersistentProxyObjectFactory<WebAuthnCredential>
 */
 class WebAuthnCredentialFactory extends PersistentProxyObjectFactory
 {
    protected function defaults(): array
    {
        return [
            'user'                  => UserFactory::new(),
            'credentialData'        => json_encode([
                'type'       => 'public-key',
                'id'         => base64_encode(self::faker()->uuid()),
                'transports' => ['usb', 'nfc'],
            ], JSON_THROW_ON_ERROR),
            'credentialName'        => self::faker()->words(3, true),
            'createdAt'             => new DateTime(),
            'lastUsedAt'            => null,
            'isBackupEligible'      => self::faker()->boolean(),
            'isBackupAuthenticated' => self::faker()->boolean(),
        ];
    }
    public static function class(): string
    {
        return WebAuthnCredential::class;
    }
    public function withName(string $name): self
    {
        return $this->with(['credentialName' => $name]);
    }
    public function recentlyUsed(): self
    {
        return $this->with(['lastUsedAt' => new DateTime()]);
    }
 }
--- a/tests/Integration/FactoryExampleTest.php
+++ b/tests/Integration/FactoryExampleTest.php
@@ -0,0 +1,211 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Integration;
 use App\Entity\PlayedGame;
 use App\Entity\User;
 use App\Tests\Factory\ContactMessageFactory;
 use App\Tests\Factory\GamerFactory;
 use App\Tests\Factory\GridFactory;
 use App\Tests\Factory\PlayedGameFactory;
 use App\Tests\Factory\StepFactory;
 use App\Tests\Factory\UserFactory;
 use App\Tests\Factory\WebAuthnCredentialFactory;
 use App\Tests\WebTestCase;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 /**
 * Class FactoryExampleTest
 *
 * Example test demonstrating Foundry factory usage
 *
 * @package  App\Tests\Integration
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('Factory Examples')]
 class FactoryExampleTest extends WebTestCase
 {
    #[Test]
    #[TestDox('Creates a verified user with UserFactory')]
    public function createUser(): void
    {
        $user = UserFactory::createOne();
        self::assertInstanceOf(User::class, $user->_real());
        self::assertNotNull($user->username);
        self::assertNotNull($user->email);
        self::assertTrue($user->isVerified);
    }
    #[Test]
    #[TestDox('Creates an unverified user')]
    public function createUnverifiedUser(): void
    {
        $user = UserFactory::createOne(['isVerified' => false]);
        self::assertFalse($user->isVerified);
    }
    #[Test]
    #[TestDox('Creates multiple users at once')]
    public function createMultipleUsers(): void
    {
        UserFactory::createMany(5);
        self::assertCount(5, UserFactory::repository()->findAll());
    }
    #[Test]
    #[TestDox('Creates an anonymous gamer with guest username')]
    public function createAnonymousGamer(): void
    {
        $gamer = GamerFactory::new()->anonymous()->create();
        self::assertStringStartsWith('Guest_', $gamer->userName);
        self::assertNotNull($gamer->ip);
        self::assertNotNull($gamer->connTimestamp);
    }
    #[Test]
    #[TestDox('Creates a game with two registered players')]
    public function createGameWithRegisteredPlayers(): void
    {
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->create();
        self::assertInstanceOf(PlayedGame::class, $game->_real());
        self::assertNotNull($game->red);
        self::assertNotNull($game->blue);
        self::assertNull($game->redAnon);
        self::assertNull($game->blueAnon);
    }
    #[Test]
    #[TestDox('Creates a game with two anonymous players')]
    public function createGameWithAnonymousPlayers(): void
    {
        $game = PlayedGameFactory::new()
            ->withAnonymousPlayers()
            ->create();
        self::assertNull($game->red);
        self::assertNull($game->blue);
        self::assertNotNull($game->redAnon);
        self::assertNotNull($game->blueAnon);
    }
    #[Test]
    #[TestDox('Creates a finished game where red player wins')]
    public function createFinishedGame(): void
    {
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->redWins()
            ->create();
        self::assertEquals(26, $game->redPoints);
        self::assertLessThan(26, $game->bluePoints);
    }
    #[Test]
    #[TestDox('Creates a game with multiple steps from both players')]
    public function createGameWithSteps(): void
    {
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->create();
        StepFactory::new()
            ->forPlayer('red')
            ->mine()
            ->create(['playedGame' => $game]);
        StepFactory::new()
            ->forPlayer('red')
            ->mine()
            ->create(['playedGame' => $game]);
        StepFactory::new()
            ->forPlayer('red')
            ->mine()
            ->create(['playedGame' => $game]);
        StepFactory::new()
            ->forPlayer('blue')
            ->safe()
            ->create(['playedGame' => $game]);
        StepFactory::new()
            ->forPlayer('blue')
            ->safe()
            ->create(['playedGame' => $game]);
        self::assertCount(5, StepFactory::repository()->findAll());
    }
    #[Test]
    #[TestDox('Creates a game with a 16x16 grid')]
    public function createGameWithGrid(): void
    {
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->create();
        $grid = GridFactory::createOne(['playedGame' => $game]);
        self::assertCount(16, $grid->gridRow);
    }
    #[Test]
    #[TestDox('Creates a WebAuthn credential for a user')]
    public function createWebAuthnCredential(): void
    {
        $user = UserFactory::createOne();
        $credential = WebAuthnCredentialFactory::new()
            ->withName('YubiKey 5C')
            ->recentlyUsed()
            ->create(['user' => $user]);
        self::assertEquals($user->_real(), $credential->user);
        self::assertEquals('YubiKey 5C', $credential->credentialName);
        self::assertNotNull($credential->lastUsedAt);
    }
    #[Test]
    #[TestDox('Creates a contact message with consent')]
    public function createContactMessage(): void
    {
        $message = ContactMessageFactory::createOne();
        self::assertNotNull($message->name);
        self::assertNotNull($message->email);
        self::assertNotNull($message->content);
        self::assertTrue($message->consent);
        self::assertNotNull($message->createdAt);
    }
    #[Test]
    #[TestDox('Tests are isolated - database is reset between tests')]
    public function databaseIsolation(): void
    {
        UserFactory::createMany(3);
        self::assertCount(3, UserFactory::repository()->findAll());
        /** Database will be reset before next test due to ResetDatabase trait */
    }
 }
--- a/tests/README.md
+++ b/tests/README.md
@@ -0,0 +1,108 @@
 # Tests Directory
 This directory contains all test files for the MineSeeker project.
 ## Quick Start
 ```bash
 # Run all tests (recommended)
 make test
 # Or with PHPUnit directly:
 vendor/bin/phpunit
 # Run specific test file
 vendor/bin/phpunit tests/Controller/ProfileControllerTest.php
 # Run with filter
 vendor/bin/phpunit --filter testCreateUser
 ```
 ## Documentation
 For comprehensive testing documentation, see:
 - **[Testing Guide](../docs/testing/TESTING.md)** - Complete testing setup, best practices, troubleshooting
 - **[Factory Documentation](../docs/testing/FACTORIES.md)** - Detailed factory API reference
 ## Directory Structure
 ```
 tests/
 ├── Controller/          # HTTP endpoint tests
 ├── Dto/                 # Data Transfer Object tests
 ├── Entity/              # Entity logic tests
 ├── Service/             # Service layer tests
 ├── Integration/         # Integration tests (example: FactoryExampleTest.php)
 ├── Factory/             # Foundry factory classes
 │   ├── UserFactory.php
 │   ├── GamerFactory.php
 │   ├── PlayedGameFactory.php
 │   ├── StepFactory.php
 │   ├── GridFactory.php
 │   ├── GridRowFactory.php
 │   ├── WebAuthnCredentialFactory.php
 │   └── ContactMessageFactory.php
 ├── WebTestCase.php      # Base test class (extends this!)
 ├── bootstrap.php        # PHPUnit bootstrap
 └── README.md            # This file
 ```
 ## Quick Factory Examples
 ```php
 use App\Tests\Factory\UserFactory;
 use App\Tests\Factory\PlayedGameFactory;
 use App\Tests\WebTestCase;
 class MyTest extends WebTestCase
 {
    public function testExample(): void
    {
        /** Create user */
        $user = UserFactory::createOne();
        /** Create game with registered players */
        $game = PlayedGameFactory::new()
            ->withRegisteredPlayers()
            ->redWins()
            ->create();
        /** Create multiple entities */
        UserFactory::createMany(5);
        /** Access repository */
        $users = UserFactory::repository()->findAll();
    }
 }
 ```
 ## Important Notes
 - **Always extend `App\Tests\WebTestCase`** - provides database isolation
 - **Use factories** - don't manually create entities with `new Entity()`
 - **Test database** - Tests run on `mineseeker_test`, never production
 - **Automatic rollback** - Each test is wrapped in a transaction
 ## Test Database Setup (One-time)
 ```bash
 # Create test database
 bin/console dbal:run-sql "CREATE DATABASE mineseeker_test"
 # Run migrations
 bin/console doctrine:migrations:migrate --env=test --no-interaction
 ```
 ## Troubleshooting
 ### Tests interfering with each other?
 → Make sure your test extends `App\Tests\WebTestCase`
 ### Database schema out of sync?
 → Run `bin/console doctrine:migrations:migrate --env=test`
 ### Memory limit errors?
 → Run `php -d memory_limit=512M vendor/bin/phpunit`
 For more troubleshooting, see [Testing Guide](../docs/testing/TESTING.md#troubleshooting).
--- a/tests/Service/MercureJwtServiceTest.php
+++ b/tests/Service/MercureJwtServiceTest.php
@@ -0,0 +1,109 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Service;
 use App\Service\MercureJwtService;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use PHPUnit\Framework\TestCase;
 /**
 * Class MercureJwtServiceTest
 *
 * @package  App\Tests\Service
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[TestDox('Mercure Jwt Service')]
 class MercureJwtServiceTest extends TestCase
 {
    /** JWT HS256 requires at least 32 characters for the secret key  */
    private const SECRET = 'test-mercure-secret-key-12345678901234567890';
    private MercureJwtService $service;
    protected function setUp(): void
    {
        parent::setUp();
        $this->service = new MercureJwtService(self::SECRET);
    }
    #[Test]
    #[TestDox('Mint subscriber token returns valid jwt')]
    public function mintSubscriberTokenReturnsValidJwt(): void
    {
        $token = $this->service->mintSubscriberToken('game123', 'player1');
        $this->assertIsString($token);
        $this->assertNotEmpty($token);
        /** Token should have 3 parts (header.payload.signature)  */
        $parts = explode('.', $token);
        $this->assertCount(3, $parts);
    }
    #[Test]
    #[TestDox('Mint subscriber token with different game assoc')]
    public function mintSubscriberTokenWithDifferentGameAssoc(): void
    {
        $token1 = $this->service->mintSubscriberToken('gameA', 'player1');
        $token2 = $this->service->mintSubscriberToken('gameB', 'player1');
        /** Different gameAssoc should result in different tokens  */
        $this->assertNotSame($token1, $token2);
    }
    #[Test]
    #[TestDox('Mint subscriber token with different user names')]
    public function mintSubscriberTokenWithDifferentUserNames(): void
    {
        $token1 = $this->service->mintSubscriberToken('game1', 'playerA');
        $token2 = $this->service->mintSubscriberToken('game1', 'playerB');
        /** Different usernames should result in different tokens  */
        $this->assertNotSame($token1, $token2);
    }
    #[Test]
    #[TestDox('Mint subscriber token contains proper structure')]
    public function mintSubscriberTokenContainsProperStructure(): void
    {
        $token = $this->service->mintSubscriberToken('game123', 'testplayer');
        /** Decode without verification to check structure  */
        $parts = explode('.', $token);
        /** Decode payload (middle part)  */
        $payload = json_decode(base64_decode($parts[1] . str_repeat('=', (4 - strlen($parts[1]) % 4))), true);
        $this->assertIsArray($payload);
        $this->assertArrayHasKey('mercure', $payload);
        $this->assertArrayHasKey('subscribe', $payload['mercure']);
        $this->assertArrayHasKey('payload', $payload['mercure']);
    }
    #[Test]
    #[TestDox('Mint subscriber token payload contains correct data')]
    public function mintSubscriberTokenPayloadContainsCorrectData(): void
    {
        $token = $this->service->mintSubscriberToken('test-game', 'test-user');
        $parts = explode('.', $token);
        $payload = json_decode(base64_decode($parts[1] . str_repeat('=', (4 - strlen($parts[1]) % 4))), true);
        $this->assertSame('test-user', $payload['mercure']['payload']['username']);
        $this->assertSame('test-game', $payload['mercure']['payload']['gameAssoc']);
        $this->assertContains('*', $payload['mercure']['subscribe']);
    }
 }
--- a/tests/Service/RecaptchaServiceTest.php
+++ b/tests/Service/RecaptchaServiceTest.php
@@ -0,0 +1,188 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests\Service;
 use App\Service\RecaptchaService;
 use PHPUnit\Framework\Attributes\AllowMockObjectsWithoutExpectations;
 use PHPUnit\Framework\Attributes\Test;
 use PHPUnit\Framework\Attributes\TestDox;
 use PHPUnit\Framework\TestCase;
 use Psr\Log\LoggerInterface;
 use Symfony\Component\HttpClient\MockHttpClient;
 use Symfony\Component\HttpClient\Response\MockResponse;
 use Symfony\Contracts\HttpClient\HttpClientInterface;
 /**
 * Class RecaptchaServiceTest
 *
 * @package  App\Tests\Service
 * @author   Lang <https://www.splendidbear.org>
 * @category Class
 * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
 * @link     www.splendidbear.org
 * @since    2026. 04. 21.
 */
 #[AllowMockObjectsWithoutExpectations]
 #[TestDox('Recaptcha Service')]
 class RecaptchaServiceTest extends TestCase
 {
    private const SECRET_KEY = 'test-secret-key';
    #[Test]
    #[TestDox('Verify returns false for empty token')]
    public function verifyReturnsFalseForEmptyToken(): void
    {
        $httpClient = $this->createMock(HttpClientInterface::class);
        $logger = $this->createMock(LoggerInterface::class);
        $service = new RecaptchaService($httpClient, $logger, self::SECRET_KEY);
        $result = $service->verify('');
        $this->assertFalse($result);
    }
    #[Test]
    #[TestDox('Verify returns false when api returns failure')]
    public function verifyReturnsFalseWhenApiReturnsFailure(): void
    {
        $mockResponse = new MockResponse(json_encode([
            'success'     => false,
            'error-codes' => ['invalid-input-secret'],
        ], JSON_THROW_ON_ERROR));
        $httpClient = new MockHttpClient($mockResponse);
        $logger = $this->createMock(LoggerInterface::class);
        $logger->expects($this->once())->method('info');
        $service = new RecaptchaService($httpClient, $logger, self::SECRET_KEY);
        $result = $service->verify('invalid-token');
        $this->assertFalse($result);
    }
    #[Test]
    #[TestDox('Verify returns true when api returns success and high score')]
    public function verifyReturnsTrueWhenApiReturnsSuccessAndHighScore(): void
    {
        $mockResponse = new MockResponse(json_encode([
            'success'  => true,
            'score'    => 0.8,
            'hostname' => 'test.com',
        ], JSON_THROW_ON_ERROR));
        $httpClient = new MockHttpClient($mockResponse);
        $logger = $this->createMock(LoggerInterface::class);
        $logger->expects($this->once())->method('info');
        $service = new RecaptchaService($httpClient, $logger, self::SECRET_KEY);
        $result = $service->verify('valid-token');
        $this->assertTrue($result);
    }
    #[Test]
    #[TestDox('Verify returns false when score below threshold')]
    public function verifyReturnsFalseWhenScoreBelowThreshold(): void
    {
        $mockResponse = new MockResponse(json_encode([
            'success'  => true,
            'score'    => 0.3,
            'hostname' => 'test.com',
        ], JSON_THROW_ON_ERROR));
        $httpClient = new MockHttpClient($mockResponse);
        $logger = $this->createMock(LoggerInterface::class);
        $logger->expects($this->once())->method('info');
        $service = new RecaptchaService($httpClient, $logger, self::SECRET_KEY);
        $result = $service->verify('low-score-token');
        $this->assertFalse($result);
    }
    #[Test]
    #[TestDox('Verify returns false when api throws exception')]
    public function verifyReturnsFalseWhenApiThrowsException(): void
    {
        $mockResponse = new MockResponse('', ['http_code' => 500]);
        $httpClient = new MockHttpClient($mockResponse);
        $logger = $this->createMock(LoggerInterface::class);
        $logger->expects($this->once())->method('error');
        $service = new RecaptchaService($httpClient, $logger, self::SECRET_KEY);
        $result = $service->verify('test-token');
        $this->assertFalse($result);
    }
    #[Test]
    #[TestDox('Verify includes remote ip when provided')]
    public function verifyIncludesRemoteIpWhenProvided(): void
    {
        $mockResponse = new MockResponse(json_encode([
            'success' => true,
            'score'   => 0.9,
        ], JSON_THROW_ON_ERROR));
        $httpClient = new MockHttpClient($mockResponse);
        $logger = $this->createMock(LoggerInterface::class);
        $logger->expects($this->once())->method('info');
        $service = new RecaptchaService($httpClient, $logger, self::SECRET_KEY);
        $result = $service->verify('test-token', '192.168.1.1');
        $this->assertTrue($result);
    }
    #[Test]
    #[TestDox('Verify with score at threshold')]
    public function verifyWithScoreAtThreshold(): void
    {
        $mockResponse = new MockResponse(json_encode([
            'success' => true,
            'score'   => 0.5,
        ], JSON_THROW_ON_ERROR));
        $httpClient = new MockHttpClient($mockResponse);
        $logger = $this->createMock(LoggerInterface::class);
        $service = new RecaptchaService($httpClient, $logger, self::SECRET_KEY);
        $result = $service->verify('threshold-token');
        $this->assertTrue($result);
    }
    #[Test]
    #[TestDox('Verify with no score fails')]
    public function verifyWithNoScoreFails(): void
    {
        $mockResponse = new MockResponse(json_encode([
            'success' => true,
        ], JSON_THROW_ON_ERROR));
        $httpClient = new MockHttpClient($mockResponse);
        $logger = $this->createMock(LoggerInterface::class);
        $service = new RecaptchaService($httpClient, $logger, self::SECRET_KEY);
        $result = $service->verify('no-score-token');
        $this->assertFalse($result);
    }
 }
--- a/tests/WebTestCase.php
+++ b/tests/WebTestCase.php
@@ -0,0 +1,21 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 namespace App\Tests;
 use Symfony\Bundle\FrameworkBundle\Test\WebTestCase as BaseWebTestCase;
 use Zenstruck\Foundry\Test\Factories;
 use Zenstruck\Foundry\Test\ResetDatabase;
 abstract class WebTestCase extends BaseWebTestCase
 {
    use ResetDatabase;
    use Factories;
 }
--- a/tests/bootstrap.php
+++ b/tests/bootstrap.php
@@ -0,0 +1,21 @@
 <?php declare(strict_types=1);
 /**
 * This file is part of the SplendidBear Websites' projects.
 *
 * Copyright (c) 2026 @ www.splendidbear.org
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */
 use Symfony\Component\Dotenv\Dotenv;
 require dirname(__DIR__).'/vendor/autoload.php';
 if (method_exists(Dotenv::class, 'bootEnv')) {
    new Dotenv()->bootEnv(dirname(__DIR__).'/.env');
 }
 if ($_SERVER['APP_DEBUG']) {
    umask(0000);
 }
Author	SHA1	Message	Date
Lang	6484133199	new: dev: initialize the GTK client #11	2026-04-28 08:28:51 +02:00
Lang	199bb7e525	chg: pkg: fix all eslint issues - & add example of the testing env #10	2026-04-28 08:10:18 +02:00
Lang	5daaf71ae7	chg: pkg: new version release !skipChangelog	2026-04-23 21:42:21 +02:00
Lang	0aeec47996	new: pkg: add tracking code for the app #10 All checks were successful Deploy to Production / deploy (push) Successful in 30s	2026-04-23 21:41:47 +02:00
Lang	3d67b8f2d9	chg: pkg: new version release !skipChangelog	2026-04-22 12:15:29 +02:00
Lang	dd9a190fd9	fix: usr: the error message cannot be seen during avatar changing #10 All checks were successful Deploy to Production / deploy (push) Successful in 3m7s	2026-04-22 12:15:06 +02:00
Lang	f5e5019ea8	chg: pkg: new version release !skipChangelog	2026-04-21 22:47:04 +02:00
Lang	3f51eb5db6	chg: usr: increase the 2 MB avatar maximum file size to 10 MB #10 All checks were successful Deploy to Production / deploy (push) Successful in 29s	2026-04-21 22:46:44 +02:00
Lang	55ef7c9301	chg: pkg: new version release !skipChangelog	2026-04-21 21:05:54 +02:00
Lang	ddfa395c6b	chg: pkg: upgrade front-end & back-end deps to the latest available version #10 All checks were successful Deploy to Production / deploy (push) Successful in 31s	2026-04-21 20:13:00 +02:00
Lang	8694627817	chg: pkg: new version release !skipChangelog	2026-04-21 18:21:17 +02:00
Lang	f796819af4	chg: pkg: new version release !skipChangelog	2026-04-21 18:12:32 +02:00
Lang	b209ad4220	chg: pkg: the original CI/CD workflow is restored - the work with tests is postponed #10 Some checks failed Deploy to Production / test (push) Failing after 6s Deploy to Production / deploy (push) Successful in 33s	2026-04-21 18:11:54 +02:00
Lang	df1eefdfe0	chg: pkg: new version release !skipChangelog Some checks failed CI - Tests / tests (push) Failing after 2m43s Details CI - Tests / lint (push) Failing after 8s Details	2026-04-21 18:00:05 +02:00
Lang	7aaaf120b2	chg: usr: add sound when the game start #10	2026-04-21 17:59:18 +02:00
Lang	e48d651eb5	new: pkg: add CI/CD improvements - add new CI workflow - & improve the deployment w/ tests #10	2026-04-21 17:58:05 +02:00
Lang	d704be5bff	new: pkg: add test cases to back-end w/ real database connection in it #10	2026-04-21 17:56:04 +02:00
Lang	6bf908b43e	chg: dev: create AGENTS.md file for future maintenance #9	2026-04-21 14:30:38 +02:00
Lang	085e010907	chg: dev: remove the wrongly implemented font installation in docker - & replace it with static font on BattleCardGenerator (it solves the shareable image problem on bare-metal too) #8	2026-04-21 14:18:59 +02:00
Lang	8935216525	chg: pkg: new version release !skipChangelog	2026-04-21 13:58:08 +02:00
Lang	1d8efa4e61	chg: usr: fine-tune the recent battle list #8 All checks were successful Deploy to Production / deploy (push) Successful in 27s Details	2026-04-21 13:57:44 +02:00
Lang	69fce52bed	chg: pkg: new version release !skipChangelog	2026-04-21 11:47:58 +02:00