chg: usr: add clickable badges for Cap app-wide #13

.env.dist

@@ -22,10 +22,12 @@ APP_PUBLIC_HOSTNAME=localhost
 DATABASE_URL=postgresql://POSTGRES_USER:POSTGRES_PASSWORD@127.0.0.1:15432/POSTGRES_DB?serverVersion=18&charset=utf8
 ###< doctrine/doctrine-bundle ###
 
-###> google/recaptcha ###
-RECAPTCHA_SITE_KEY=changethis
-RECAPTCHA_SECRET_KEY=changethis
-###< google/recaptcha ###
+###> trycap.dev/cap ###
+# CAP_API_ENDPOINT: Full URL including site-key path, e.g. https://cap.example.com/my-site-key/
+# After deploying the Cap service, create a site in the dashboard and paste the endpoint here.
+CAP_API_ENDPOINT=http://localhost:3000/changethis/
+CAP_SECRET_KEY=changethis
+###< trycap.dev/cap ###
 
 ###> minio/minio ###
 MINIO_ROOT_USER=changethis

.env.test

@@ -0,0 +1,3 @@
+# define your env variables for the test env here
+KERNEL_CLASS='App\Kernel'
+APP_SECRET='$ecretf0rt3st'

.gitea/workflows/ci.yml-bak

@@ -0,0 +1,142 @@
+name: CI - Tests
+
+on:
+  push:
+    branches:
+      - master
+      - develop
+  pull_request:
+    branches:
+      - master
+      - develop
+
+jobs:
+  tests:
+    runs-on: splendid-bear
+
+    services:
+      postgres:
+        image: postgres:18-alpine
+        env:
+          POSTGRES_USER: mineseeker_test
+          POSTGRES_PASSWORD: test_password
+          POSTGRES_DB: mineseeker_test
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+          - 5432:5432
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup PHP 8.3
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.3'
+          extensions: pdo_pgsql, gd, intl, zip, sodium
+          coverage: none
+          tools: composer:v2
+
+      - name: Validate composer.json
+        run: composer validate --strict
+
+      - name: Cache Composer dependencies
+        uses: actions/cache@v4
+        with:
+          path: vendor
+          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-composer-
+
+      - name: Install PHP dependencies
+        run: composer install --prefer-dist --no-progress --no-interaction
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Cache node modules
+        uses: actions/cache@v4
+        with:
+          path: node_modules
+          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node-
+
+      - name: Install Node dependencies
+        run: npm ci
+
+      - name: Build assets
+        run: npm run build
+
+      - name: Create .env.test file
+        run: |
+          cat > .env.test << 'ENVEOF'
+          APP_ENV=test
+          APP_SECRET=test-secret-key-for-ci-testing-only
+          DATABASE_URL="postgresql://mineseeker_test:test_password@localhost:5432/mineseeker_test?serverVersion=18&charset=utf8"
+          KERNEL_CLASS='App\Kernel'
+          SYMFONY_DEPRECATIONS_HELPER=999999
+          PANTHER_APP_ENV=panther
+          PANTHER_ERROR_SCREENSHOT_DIR=./var/error-screenshots
+          ENVEOF
+
+      - name: Setup test database
+        run: make test-db-setup
+
+      - name: Run PHPUnit tests
+        run: vendor/bin/phpunit --testdox --colors=always
+
+      - name: Run PHPUnit tests with coverage (optional)
+        if: github.event_name == 'pull_request'
+        run: |
+          XDEBUG_MODE=coverage vendor/bin/phpunit --coverage-text --coverage-clover=coverage.xml
+
+      - name: Upload coverage reports (optional)
+        if: github.event_name == 'pull_request'
+        uses: codecov/codecov-action@v4
+        with:
+          file: ./coverage.xml
+          flags: unittests
+          name: phpunit-coverage
+          fail_ci_if_error: false
+
+  lint:
+    runs-on: splendid-bear
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup PHP 8.3
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.3'
+          tools: composer:v2, phpstan
+
+      - name: Install PHP dependencies
+        run: composer install --prefer-dist --no-progress --no-interaction
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install Node dependencies
+        run: npm ci
+
+      - name: Run ESLint
+        run: npm run lint || true
+
+      - name: Check code style (PHP)
+        run: |
+          if [ -f "vendor/bin/php-cs-fixer" ]; then
+            vendor/bin/php-cs-fixer fix --dry-run --diff
+          else
+            echo "PHP-CS-Fixer not installed, skipping..."
+          fi

.gitea/workflows/deploy.yml-bak

@@ -0,0 +1,126 @@
+name: Deploy to Production
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  test:
+    runs-on: splendid-bear
+
+    services:
+      postgres:
+        image: postgres:18-alpine
+        env:
+          POSTGRES_USER: mineseeker_test
+          POSTGRES_PASSWORD: test_password
+          POSTGRES_DB: mineseeker_test
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+          - 5432:5432
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup PHP 8.3
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.3'
+          extensions: pdo_pgsql, gd, intl, zip, sodium
+          coverage: none
+          tools: composer:v2
+
+      - name: Install PHP dependencies
+        run: composer install --prefer-dist --no-progress --no-interaction
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install Node dependencies
+        run: npm ci
+
+      - name: Build assets
+        run: npm run build
+
+      - name: Create .env.test file
+        run: |
+          cat > .env.test << 'ENVEOF'
+          APP_ENV=test
+          APP_SECRET=test-secret-key-for-ci-testing-only
+          DATABASE_URL="postgresql://mineseeker_test:test_password@localhost:5432/mineseeker_test?serverVersion=18&charset=utf8"
+          KERNEL_CLASS='App\Kernel'
+          SYMFONY_DEPRECATIONS_HELPER=999999
+          ENVEOF
+
+      - name: Setup test database
+        run: make test-db-setup
+
+      - name: Run PHPUnit tests
+        run: vendor/bin/phpunit --testdox --colors=always --stop-on-failure
+
+  deploy:
+    needs: test
+    runs-on: splendid-bear
+    steps:
+      - name: Checkout tag
+        env:
+          GITEA_TOKEN: ${{ gitea.token }}
+        run: |
+          set -e
+          export HOME=/tmp
+          git config --global credential.helper '!f() { echo "username=oauth2"; echo "password=$GITEA_TOKEN"; }; f'
+          git config --global --add safe.directory "${{ vars.PROD_APP_DIR }}"
+          cd "${{ vars.PROD_APP_DIR }}"
+          git remote set-url origin "${{ gitea.server_url }}/${{ gitea.repository }}.git"
+          git fetch --tags --force
+          git checkout "${{ gitea.ref_name }}"
+
+      - name: Write .env
+        env:
+          PROD_ENV_FILE: ${{ secrets.PROD_ENV_FILE }}
+        run: |
+          printf '%s' "$PROD_ENV_FILE" > "${{ vars.PROD_APP_DIR }}/.env"
+
+      - name: Build image
+        run: |
+          cd "${{ vars.PROD_APP_DIR }}"
+          docker compose build
+
+      - name: Run database migrations
+        run: |
+          cd "${{ vars.PROD_APP_DIR }}"
+          docker compose run --rm app php bin/console doctrine:migrations:migrate --no-interaction
+
+      - name: Clear cache
+        run: |
+          cd "${{ vars.PROD_APP_DIR }}"
+          docker compose run --rm app php bin/console cache:clear --env=prod
+
+      - name: Start services
+        run: |
+          cd "${{ vars.PROD_APP_DIR }}"
+          docker compose up -d
+
+      - name: Health check
+        run: |
+          sleep 5
+          curl -f http://localhost:10080/ || exit 1
+
+      - name: Notify deployment success
+        if: success()
+        run: |
+          echo "✅ Deployment successful for tag ${{ gitea.ref_name }}"
+
+      - name: Notify deployment failure
+        if: failure()
+        run: |
+          echo "❌ Deployment failed for tag ${{ gitea.ref_name }}"
+          exit 1

.gitignore

@@ -14,3 +14,8 @@ nohup.out
 /var/
 /vendor/
 ###< symfony/framework-bundle ###
+
+###> phpunit/phpunit ###
+/phpunit.xml
+/.phpunit.cache/
+###< phpunit/phpunit ###

AGENTS.md

@@ -0,0 +1,464 @@
+# AI Agent Guidelines for MineSeeker
+
+This document provides guidelines and context for AI coding agents working on the MineSeeker project.
+
+## Project Overview
+
+**MineSeeker** is a real-time multiplayer 1v1 minesweeper game built with Symfony (PHP) and React. Players compete to claim mines on a shared 16×16 grid, with the first to reach 26 mines winning.
+
+### Tech Stack
+
+- **Backend:** Symfony 7.2 (PHP 8.3)
+- **Frontend:** React 18, Vite 6
+- **Database:** PostgreSQL 17 with materialized views
+- **Storage:** MinIO (S3-compatible)
+- **Real-time:** Mercure (Server-Sent Events)
+- **Styling:** SCSS, MUI (Material-UI), Emotion
+- **Fonts:** @fontsource packages (web), Carlito-Bold.ttf (server-side images)
+
+### Key Features
+
+**Core Gameplay:**
+- **Multiplayer-focused:** 1v1 competitive gameplay where players race to claim more mines than their opponent
+- **Win condition:** First player to claim 26 out of 51 mines wins
+- **Real-time updates:** WebSocket-like gameplay using Mercure (Server-Sent Events)
+- **Game restoration:** Players can resume unfinished games from where they left off
+- **Bonus points system:** Rewards skilled play (blind hits, chain combos, edge mines, endgame mines, safe cell reveals)
+
+**User Features:**
+- **Authentication:** Password + optional TOTP + optional WebAuthn passkeys
+- **Anonymous play:** Guest players can play without creating an account
+- **Profile statistics:** Detailed stats including wins, losses, draws, win rate, average score, total mines hit, and bonus points
+- **Battle history:** View and replay past games move-by-move
+
+**Sharing & Social:**
+- **Battle reports:** Shareable public pages for each completed game (`/battle/{uuid}`)
+- **OG image generation:** Automatic creation of 1200×630 PNG images for social media sharing (using PHP GD)
+- **Open Graph tags:** Battle share pages include rich preview cards with player names, avatars, scores, and bonus points
+
+---
+
+## Architecture Overview
+
+### Backend (Symfony)
+
+```
+src/
+├── Controller/        # HTTP endpoints (game, profile, battle sharing)
+├── Entity/           # Doctrine ORM entities
+├── Repository/       # Database queries (uses QueryBuilder, not raw SQL)
+├── Service/          # Business logic (BattleCardGenerator, WebAuthn, Email)
+├── Dto/              # Data Transfer Objects (immutable, readonly)
+├── Util/             # Game logic (TopicManager for Mercure)
+└── Migrations/       # Database schema changes
+```
+
+**Important patterns:**
+- Use Doctrine ORM QueryBuilder (not raw SQL) in repositories
+- DTOs are `final readonly` classes with constructor property promotion
+- Services use dependency injection via `config/services.yaml`
+- Materialized views for performance (auto-refreshed via triggers)
+
+### Frontend (React)
+
+```
+assets/
+├── js/
+│   ├── mine-seeker/           # Main game bundle (self-contained)
+│   │   ├── MineSeeker.jsx     # Root component, wraps GameProvider + QueryClientProvider
+│   │   ├── components/        # Game-specific components
+│   │   │   ├── GameBoard.jsx          # Main game board grid
+│   │   │   ├── GameTimer.jsx          # Game timer display
+│   │   │   ├── BonusBox.jsx           # Bonus points indicator
+│   │   │   ├── BonusStatsDialog.jsx   # Bonus statistics modal
+│   │   │   ├── CaptchaOverlay.jsx     # Captcha challenge overlay
+│   │   │   ├── ChallengeCountdown.jsx # Challenge timer
+│   │   │   ├── OnlinePlayersDialog.jsx # Online players list
+│   │   │   ├── WaitingOverlayContent.jsx # Waiting for opponent
+│   │   │   ├── grid/           # Grid-related components (cells, mines)
+│   │   │   ├── profile/        # In-game profile components (PlayerColumn)
+│   │   │   ├── timer/          # Timer-related components
+│   │   │   └── user/           # User-related components
+│   │   ├── contexts/          # React Context API
+│   │   │   ├── GameContext.jsx     # Game state context
+│   │   │   └── GameProvider.jsx    # Context provider with state logic
+│   │   ├── hooks/             # Custom React hooks
+│   │   │   ├── useGameDataProvider.js    # React Query data provider
+│   │   │   ├── useGameRefs.jsx           # Refs for DOM elements
+│   │   │   ├── useGameState.jsx          # Game state management
+│   │   │   ├── useServerCommunication.jsx # Mercure SSE connection
+│   │   │   └── useStepTimer.jsx          # Step-by-step timer
+│   │   └── utils/             # Game-specific utilities
+│   │       └── constants.jsx   # Game constants, colors, defaults
+│   ├── components/      # Shared UI components
+│   ├── utils/           # Shared utilities
+│   ├── profile.jsx      # Profile page entry
+│   ├── passkey.jsx      # Passkey management entry
+│   └── contact.jsx      # Contact form entry
+├── css/
+│   └── homepage/        # SCSS partials (imported by style.homepage.scss)
+└── fonts/
+    └── Carlito-Bold.ttf # TTF font for PHP GD image generation
+```
+
+**Important patterns:**
+- Vite aliases: `@mine-components`, `@mine-contexts`, `@mine-hooks`, `@mine-utils`, `@global-components`, `@global-utils`
+- React Query only available inside `mine-seeker` bundle
+- Avoid circular dependencies (e.g., don't import from `@global-components` inside `components/` directory)
+- PropTypes required on all components
+
+---
+
+## Common Tasks
+
+### Adding a New Feature
+
+1. **Backend:**
+   - Create migration for schema changes
+   - Add/update entities and repositories
+   - Create DTOs for data transfer
+   - Add controller endpoints
+   - Update service configuration if needed
+
+2. **Frontend:**
+   - Create components in appropriate bundle
+   - Add PropTypes to all components
+   - Use existing hooks and utilities
+   - Follow styled-components pattern for MUI customization
+
+3. **Documentation:**
+   - Update relevant docs in `docs/` folder
+   - Add examples if introducing new patterns
+
+### Database Changes
+
+- Always create migrations: `bin/console make:migration`
+- Use Doctrine QueryBuilder in repositories (not raw SQL)
+- For PostgreSQL-specific features (materialized views, triggers), use raw SQL in migrations only
+- Materialized views should auto-refresh via triggers
+
+### Styling
+
+- **Web fonts:** Use `@fontsource` packages (WOFF/WOFF2)
+- **Server-side images:** Use TTF fonts in `assets/fonts/` (PHP GD requires TTF)
+- **CSS:** Create SCSS partials in `assets/css/homepage/`, import in main file
+- **Components:** Use Emotion styled-components or CSS classes
+
+### File Headers
+
+All PHP and JS/JSX files should have this header:
+
+```php
+<?php declare(strict_types=1);
+/*
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+```
+
+```javascript
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+```
+
+---
+
+## Coding Standards
+
+### PHP
+
+- **PSR Standards:** Follow PSR-1, PSR-12 coding standards
+- **Type declarations:** Use strict types (`declare(strict_types=1)`)
+- **Property promotion:** Use constructor property promotion for DTOs and services
+- **Readonly:** Use `readonly` for immutable properties
+- **Final:** Mark DTOs as `final`
+- **Doctrine:** Use QueryBuilder with `expr()` methods, not string concatenation
+- **Null safety:** Use null coalescing `??` and null-safe operator `?->`
+- **Formatting:** 4-space indentation, opening braces on same line for methods/classes
+
+**Example DTO:**
+
+```php
+final readonly class ProfileGameDto implements JsonSerializable
+{
+    public function __construct(
+        public ?int    $id,
+        public string  $redName,
+        public string  $blueName,
+        public bool    $bothRegistered,
+    ) {}
+}
+```
+
+### JavaScript/React
+
+- **Components:** Functional components with hooks
+- **PropTypes:** Required on all components
+- **Imports:** Use aliases (`@global-components`, `@mine-hooks`, etc.)
+- **State:** Use `useState`, `useEffect`, `useCallback`, `useMemo` appropriately
+- **Avoid:** Circular dependencies, especially with barrel exports
+
+**Example component:**
+
+```javascript
+import React, { useState } from 'react';
+import { string, number } from 'prop-types';
+
+export const MyComponent = ({ title, count }) => {
+  const [value, setValue] = useState(0);
+  
+  return <div>{title}: {count + value}</div>;
+};
+
+MyComponent.propTypes = {
+  title: string.isRequired,
+  count: number.isRequired,
+};
+```
+
+---
+
+## Important Files & Locations
+
+### Configuration
+
+- `config/services.yaml` - Service definitions and parameters
+- `vite.config.js` - Vite build config, aliases
+- `.env` - Environment variables (not in git)
+- `composer.json` - PHP dependencies
+- `package.json` - Node dependencies
+
+### Key Services
+
+- `BattleCardGenerator` - Generates 1200×630 PNG OG images using PHP GD
+- `TopicManager` - Mercure topic management and game logic
+- `WebAuthnService` - Passkey authentication
+- `Email services` - Various email senders in `src/Service/Email/`
+
+### Important Entities
+
+- `User` - Registered users
+- `PlayedGame` - Game records with moves, grid, scores
+- `RecentBattle` - Read-only entity from materialized view
+- `UserStats` - Read-only entity from materialized view
+
+### Documentation
+
+- `docs/game-mechanics/BONUS_POINTS_SYSTEM.md` - Bonus points reference
+- `docs/FONTS.md` - Font usage and management
+- `AGENTS.md` - This file
+- `CHANGELOG.md` - Project changelog
+
+---
+
+## Common Pitfalls
+
+### ❌ Don't Do
+
+- **Don't use raw SQL in repositories** (use Doctrine QueryBuilder)
+- **Don't create circular imports** (e.g., importing `@global-components` from within `components/`)
+- **Don't use system fonts directly** (bundle TTF in `assets/fonts/`)
+- **Don't skip PropTypes** on React components
+- **Don't use `var`** in JavaScript (use `const` or `let`)
+- **Don't define variables after using them** (hoisting issues with `const`)
+
+### ✅ Do
+
+- **Use Doctrine QueryBuilder** with `expr()` methods
+- **Import components directly** to avoid circular dependencies
+- **Bundle fonts in project** for portability
+- **Add PropTypes** to all components
+- **Use `const` for immutable values**, `let` for mutable
+- **Define variables before using them**
+
+---
+
+## Keeping Components in Sync
+
+### Battle Report Display
+
+The battle report/statistics appear in **two places** that must be kept synchronized:
+
+#### 1. BattleDialog Component (React)
+**File:** `assets/js/components/BattleDialog.jsx`
+- React dialog component shown on profile page
+- Uses Material-UI and styled-components
+- Displays game stats, bonus points, winner information
+
+#### 2. Battle Share Page (Twig)
+**File:** `templates/Game/battle_share.html.twig`
+- Public battle share page (accessible via `/battle/{uuid}`)
+- Server-rendered HTML with SCSS styling
+- Shows same information as BattleDialog
+
+### Synchronization Rules
+
+**When updating BattleDialog.jsx, also update battle_share.html.twig:**
+
+✅ Adding new stats or fields
+✅ Changing display logic (winner calculation, formatting)
+✅ Modifying bonus points display
+✅ Updating labels or text
+
+**Keep in sync:**
+- Game outcome logic (win/loss/draw/abandoned)
+- Bonus points formatting
+- Player name display
+- Score display
+- Stats and metadata shown
+
+**Example:** If you add a new stat to BattleDialog showing "fastest mine claim time", you must also add it to battle_share.html.twig so both displays show the same information.
+
+---
+
+## Testing & Building
+
+### Backend
+
+```bash
+# Run migrations
+bin/console doctrine:migrations:migrate
+
+# Clear cache
+bin/console cache:clear
+
+# Refresh materialized views
+bin/console dbal:run-sql "REFRESH MATERIALIZED VIEW CONCURRENTLY recent_battles"
+```
+
+### Frontend
+
+```bash
+# Development build with watch
+npm run dev
+
+# Production build
+npm run build
+
+# After changing fonts
+rm -rf var/og-cache/*
+```
+
+---
+
+## Git Workflow
+
+### Commit Messages
+
+Follow conventional commits:
+
+- `feat: add bonus points to battle cards`
+- `fix: resolve circular dependency in BattleDialog`
+- `refactor: use Doctrine QueryBuilder in RecentBattleRepository`
+- `docs: add AGENTS.md for AI coding agents`
+- `chore: update dependencies`
+
+### Creating Pull Requests
+
+When creating PRs, include:
+
+1. **Summary** - What was changed and why
+2. **Changes** - List of modified files/components
+3. **Testing** - How to verify the changes
+4. **Screenshots** - For UI changes
+
+---
+
+## Performance Considerations
+
+### Database
+
+- Use materialized views for expensive queries (profile stats, recent battles)
+- Auto-refresh materialized views via triggers on source table changes
+- Index frequently queried columns
+- Use `COALESCE()` for nullable aggregates
+
+### Frontend
+
+- Lazy load large components
+- Use React Query for data fetching and caching
+- Avoid unnecessary re-renders (use `useMemo`, `useCallback`)
+- Bundle code per entry point (profile, passkey, contact, game)
+
+### Images
+
+- Battle card images are cached in `var/og-cache/`
+- Images regenerated when games change (via deterministic UUID)
+- Use appropriate image sizes (1200×630 for OG images)
+
+---
+
+## Security
+
+### Authentication
+
+- Password + TOTP (optional) + WebAuthn passkeys (optional)
+- Backup codes for TOTP recovery
+- Session-based authentication with `IS_AUTHENTICATED_REMEMBERED`
+
+### Data Access
+
+- Controllers check `denyAccessUnlessGranted()`
+- Materialized views filter by `user_id`
+- Guest players use separate `Gamer` entity (no `User` account)
+
+### Input Validation
+
+- Symfony forms for user input
+- File upload validation (size, MIME type)
+- WebAuthn challenge validation
+
+---
+
+## Useful Commands
+
+```bash
+# Symfony
+bin/console debug:container ServiceName        # Inspect service configuration
+bin/console debug:router                       # List all routes
+bin/console make:migration                     # Create new migration
+bin/console doctrine:migrations:list           # List migrations
+
+# Database
+bin/console dbal:run-sql "SELECT * FROM ..."  # Run SQL query
+
+# Assets
+npm run build                                  # Build production assets
+npm run dev                                    # Build with watch mode
+
+# Git
+git log --oneline --graph                      # View commit history
+git diff origin/main...HEAD                    # See changes since main
+```
+
+---
+
+## Need Help?
+
+- **Bonus Points:** See `docs/game-mechanics/BONUS_POINTS_SYSTEM.md`
+- **Fonts:** See `docs/FONTS.md`
+- **Symfony Docs:** https://symfony.com/doc/current/
+- **React Docs:** https://react.dev/
+- **Doctrine ORM:** https://www.doctrine-project.org/projects/doctrine-orm/en/current/
+
+---
+
+## Version History
+
+- **2026-04-21:** Initial AGENTS.md created
+- Document common patterns, pitfalls, and project structure
+- Include coding standards and examples
+
+---
+
+**Happy coding! 🚀**

CHANGELOG.md

@@ -1,6 +1,60 @@
 # Changelog
 
 
+## v2026.2.9-0 (2026-04-23)
+
+### New
+
+* Add tracking code for the app #10. [Lang]
+
+
+## v2026.2.8-3 (2026-04-22)
+
+### Fix
+
+* The error message cannot be seen during avatar changing #10. [Lang]
+
+
+## v2026.2.8-2 (2026-04-21)
+
+### Changes
+
+* Increase the 2 MB avatar maximum file size to 10 MB #10. [Lang]
+
+
+## v2026.2.8-1 (2026-04-21)
+
+### Changes
+
+* Upgrade front-end & back-end deps to the latest available version #10. [Lang]
+
+
+## v2026.2.8-0 (2026-04-21)
+
+### New
+
+* Add CI/CD improvements - add new CI workflow - & improve the deployment w/ tests #10. [Lang]
+
+* Add test cases to back-end w/ real database connection in it #10. [Lang]
+
+### Changes
+
+* The original CI/CD workflow is restored - the work with tests is postponed #10. [Lang]
+
+* Add sound when the game start #10. [Lang]
+
+* Create AGENTS.md file for future maintenance #9. [Lang]
+
+* Remove the wrongly implemented font installation in docker - & replace it with static font on BattleCardGenerator (it solves the shareable image problem on bare-metal too) #8. [Lang]
+
+
+## v2026.2.7-1 (2026-04-21)
+
+### Changes
+
+* Fine-tune the recent battle list #8. [Lang]
+
+
 ## v2026.2.7-0 (2026-04-21)
 
 ### Changes

Dockerfile

@@ -22,13 +22,8 @@ RUN install-php-extensions \
     apcu \
     sodium
 
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    fonts-dejavu-core \
-    fontconfig \
-    && fc-cache -f -v \
-    && rm -rf /var/lib/apt/lists/*
-
 RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
+RUN printf '[PHP]\nupload_max_filesize=10M\npost_max_size=11M\n' > "$PHP_INI_DIR/conf.d/uploads.ini"
 RUN printf '[opcache]\nopcache.enable=1\nopcache.memory_consumption=256\nopcache.max_accelerated_files=20000\nopcache.validate_timestamps=0\n' \
     > "$PHP_INI_DIR/conf.d/opcache.ini"
 

Makefile

@@ -1,4 +1,4 @@
-.PHONY: help start start-build stop build down ps logs prune-everything db-reset mercure-jwt cache-clear og-cache-clear
+.PHONY: help start start-build stop build down ps logs prune-everything db-reset mercure-jwt cache-clear og-cache-clear test-db-setup test-db-reset test
 
 .DEFAULT_GOAL := help
 
@@ -14,6 +14,9 @@ help:
 	@echo "  make ccp                 - Clear the production cache"
 	@echo "  make cache-clear         - Clear all caches (Vite, Symfony, node_modules)"
 	@echo "  make og-cache-clear      - Clear Open Graph cache only"
+	@echo "  make test-db-setup       - One-time setup: Create test database and run migrations"
+	@echo "  make test-db-reset       - Reset test database (drop, create, migrate)"
+	@echo "  make test                - Run PHPUnit tests"
 
 start:
 	docker compose up -d
@@ -80,5 +83,23 @@ og-cache-clear:
 	@echo "✓ OG cache cleared!"
 	@echo "  Battle card images will be regenerated on next access"
 
+test-db-setup:
+	@echo "Setting up test database..."
+	@bin/console dbal:run-sql "SELECT 1 FROM pg_database WHERE datname='mineseeker_test'" 2>/dev/null | grep -q 1 || \
+		(bin/console dbal:run-sql "CREATE DATABASE mineseeker_test" && echo "✓ Database 'mineseeker_test' created")
+	@bin/console doctrine:migrations:migrate --env=test --no-interaction --allow-no-migration 2>&1 | grep -v "WARNING" || true
+	@echo "✓ Test database setup complete!"
+	@echo "  Database: mineseeker_test"
+	@echo "  Run tests with: make test"
 
+test-db-reset:
+	@echo "Resetting test database..."
+	@bin/console dbal:run-sql "DROP DATABASE IF EXISTS mineseeker_test" --quiet
+	@bin/console dbal:run-sql "CREATE DATABASE mineseeker_test" --quiet
+	@bin/console doctrine:migrations:migrate --env=test --no-interaction --quiet
+	@echo "✓ Test database reset complete!"
+	@echo "  Database: mineseeker_test"
+	@echo "  Run tests with: make test"
 
+test:
+	@php -d memory_limit=512M bin/phpunit --testdox --colors=always

README.md

@@ -78,7 +78,8 @@ Edit `.env` and fill in every value. Key ones:
 | `MINIO_ROOT_USER/PASSWORD` | MinIO admin credentials |
 | `MINIO_ENDPOINT` | `http://localhost:9000` (bare-metal) |
 | `MINIO_PUBLIC_URL` | Public URL browsers use to reach MinIO |
-| `RECAPTCHA_SITE_KEY/SECRET_KEY` | Google reCAPTCHA v3 keys for your domain |
+| `CAP_API_ENDPOINT` | Full URL of your Cap instance including the site-key path (e.g. `https://cap.example.com/my-site-key/`) |
+| `CAP_SECRET_KEY` | Secret key from your Cap site dashboard (stored in `PROD_ENV_FILE` Gitea secret on prod) |
 | `MERCURE_JWT_SECRET` | Random secret (generated in step 3) |
 | `MERCURE_JWT_TOKEN` | Signed publisher JWT (generated in step 3) |
 | `MERCURE_SUBSCRIBER_JWT` | Signed subscriber JWT (generated in step 3) |
@@ -222,8 +223,8 @@ MINIO_PUBLIC_URL=https://aws.mineseeker.hu
 MAILER_DSN=smtp://mail:25?verify_peer=0
 MAIL_DOMAIN=mineseeker.hu
 
-RECAPTCHA_SITE_KEY="<your reCAPTCHA v3 site key>"
-RECAPTCHA_SECRET_KEY="<your reCAPTCHA v3 secret key>"
+CAP_API_ENDPOINT="https://cap.example.com/your-site-key/"
+CAP_SECRET_KEY="<secret key from your Cap site dashboard>"
 
 MERCURE_URL=https://mineseeker.hu/.well-known/mercure
 MERCURE_PUBLIC_URL=https://mineseeker.hu/.well-known/mercure
@@ -287,11 +288,15 @@ git push origin v2026.01
 
 ---
 
-## Game Documentation
+## Documentation
 
-For detailed information about game mechanics, bonus systems, and scoring rules, see the [docs](./docs/) directory:
+For detailed information about game mechanics, bonus systems, fonts, testing, and other technical details, see the [docs](./docs/) directory:
 
+- **[AI Agent Guidelines](./AGENTS.md)** — Comprehensive guide for AI coding agents working on this project
 - **[Bonus Points System](./docs/game-mechanics/BONUS_POINTS_SYSTEM.md)** — Complete reference for all bonus point types, calculation rules, and implementation details
+- **[Fonts](./docs/FONTS.md)** — TrueType fonts used for server-side image generation
+- **[Testing Guide](./docs/testing/TESTING.md)** — Complete testing setup with Foundry factories, database isolation, and best practices
+- **[Factory Documentation](./docs/testing/FACTORIES.md)** — Detailed API reference for all test data factories
 
 ---
 
@@ -300,3 +305,76 @@ For detailed information about game mechanics, bonus systems, and scoring rules,
 LGPL-3.0 — see [LICENSE](LICENSE) for details.
 
 &copy; 2026 [SplendidBear](https://www.splendidbear.org)
+
+---
+
+## Testing & CI/CD
+
+MineSeeker has a comprehensive test suite with **71 automated tests** and continuous integration/deployment pipelines.
+
+### Quick Start
+
+```bash
+# Setup test database (first time only)
+make test-db-setup
+
+# Run all tests
+make test
+
+# Run with documentation output
+vendor/bin/phpunit --testdox
+```
+
+### Test Suite
+
+- **71 tests** with **227 assertions**
+- **Controller tests** - HTTP endpoints, authentication, routing
+- **DTO tests** - Data serialization and calculations
+- **Entity tests** - Domain logic and defaults
+- **Service tests** - Business logic and external APIs
+- **Integration tests** - Foundry factories and database isolation
+
+**Test execution time:** ~6-8 seconds
+
+### Continuous Integration
+
+**Automated testing** runs on every push/pull request:
+
+```yaml
+# .gitea/workflows/ci.yml-bak
+✓ PHP 8.3 setup with all extensions
+✓ PostgreSQL 18 service container
+✓ Composer and npm dependency installation
+✓ Asset building with Vite
+✓ Database migrations
+✓ Full test suite execution
+✓ Code linting (ESLint, PHP-CS-Fixer)
+```
+
+### Continuous Deployment
+
+**Automated deployment** on version tags (e.g., `v1.2.3`):
+
+```yaml
+# .gitea/workflows/deploy.yml
+1. Run full test suite (blocks deployment if fails)
+2. Checkout tagged version
+3. Build Docker image
+4. Run database migrations
+5. Restart services
+6. Health check verification
+```
+
+**Deploy to production:**
+```bash
+git tag -a v1.2.3 -m "Release version 1.2.3"
+git push origin v1.2.3
+```
+
+### Documentation
+
+- **[Testing Guide](docs/testing/TESTING.md)** - Comprehensive testing documentation
+- **[Factory Reference](docs/testing/FACTORIES.md)** - Foundry factory API
+- **[CI/CD Guide](docs/CI_CD.md)** - Pipeline configuration and workflows
+
+---

assets/css/homepage/_auth.scss

@@ -75,7 +75,7 @@
     border-radius: 10px;
     padding: 44px 48px 40px;
     width: 100%;
-    max-width: 420px;
+    max-width: 520px;
     backdrop-filter: blur(4px);
     box-shadow: 0 8px 48px rgba(0, 0, 0, 0.5);
 }
@@ -87,6 +87,65 @@
     margin-bottom: 6px;
 }
 
+.auth-title-row {
+    display: flex;
+    align-items: center;
+    justify-content: space-between;
+    gap: 12px;
+    margin-bottom: 6px;
+
+    .auth-title {
+        margin-bottom: 0;
+    }
+}
+
+.auth-cap-badge {
+    display: inline-flex;
+    align-items: center;
+    gap: 6px;
+    padding: 4px 10px;
+    border-radius: 999px;
+    border: 1px solid rgba(149, 207, 245, 0.35);
+    background:
+        linear-gradient(115deg, transparent 0 38%, rgba(255, 255, 255, 0.18) 48%, transparent 58% 100%),
+        rgba(35, 111, 135, 0.2);
+    background-position: 120% 50%, 0 0;
+    background-size: 260% 100%, auto;
+    color: #95cff5;
+    font: 600 11px 'Rajdhani', sans-serif;
+    letter-spacing: 0.8px;
+    text-decoration: none;
+    text-transform: uppercase;
+    transition:
+        background-position 650ms ease,
+        border-color 200ms ease,
+        box-shadow 200ms ease,
+        color 200ms ease,
+        transform 200ms ease;
+    white-space: nowrap;
+
+    &:hover,
+    &:focus-visible {
+        background-position: -60% 50%, 0 0;
+        border-color: rgba(149, 207, 245, 0.65);
+        box-shadow: 0 0 18px rgba(35, 111, 135, 0.28);
+        color: #d5f1ff;
+        transform: translateY(-1px);
+    }
+
+    &:hover,
+    &:focus,
+    &:active,
+    &:visited {
+        text-decoration: none;
+    }
+
+    &:focus-visible {
+        outline: 2px solid rgba(149, 207, 245, 0.75);
+        outline-offset: 2px;
+    }
+}
+
 .auth-sub {
     font: 400 14px 'Rajdhani', sans-serif;
     color: rgba(149, 207, 245, 0.6);

assets/css/homepage/_profile.scss

@@ -28,6 +28,21 @@
   box-shadow: 0 8px 48px rgba(0, 0, 0, 0.4);
 }
 
+#profile-avatar-root {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 8px;
+}
+
+.profile-avatar__error {
+  font-size: 11px;
+  color: #e57373;
+  text-align: center;
+  max-width: 120px;
+  line-height: 1.3;
+}
+
 .profile-avatar {
   position: relative;
   width: 80px;

assets/css/mineseeker/_back-button.scss

@@ -7,12 +7,17 @@
  * file that was distributed with this source code.
  */
 
-.back-from-game {
-    display: inline-block;
+.game-brand-bar {
+    display: flex;
+    align-items: center;
     position: fixed;
     top: 20px;
     left: 20px;
+    z-index: 20;
+}
 
+.back-from-game {
+    display: inline-block;
     -ms-transform: scale(1);
     -webkit-transform: scale(1);
     transform: scale(1);
@@ -30,4 +35,71 @@
     transform: scale(1.2);
     -webkit-transition: all 250ms cubic-bezier(.17, .67, .83, .67);
     transition: all 250ms cubic-bezier(.17, .67, .83, .67);
-}
+}
+
+.game-cap-badge {
+    display: inline-flex;
+    align-items: center;
+    gap: 6px;
+    position: fixed;
+    bottom: 20px;
+    left: 50%;
+    z-index: 20;
+    padding: 5px 10px;
+    border: 1px solid rgba(255, 216, 92, 0.42);
+    -webkit-border-radius: 999px;
+    border-radius: 999px;
+    background:
+        linear-gradient(115deg, transparent 0 38%, rgba(255, 255, 255, 0.22) 48%, transparent 58% 100%),
+        rgba(14, 16, 18, 0.72);
+    background-position: 120% 50%, 0 0;
+    background-size: 260% 100%, auto;
+    -webkit-box-shadow: 0 0 0 1px rgba(0, 0, 0, 0.32), 0 8px 22px rgba(0, 0, 0, 0.28);
+    box-shadow: 0 0 0 1px rgba(0, 0, 0, 0.32), 0 8px 22px rgba(0, 0, 0, 0.28);
+    color: #ffe58a;
+    font: 700 11px 'Rajdhani', sans-serif;
+    letter-spacing: 0.9px;
+    line-height: 1;
+    text-decoration: none;
+    text-transform: uppercase;
+    -ms-transform: translateX(-50%);
+    -webkit-transform: translateX(-50%);
+    transform: translateX(-50%);
+    white-space: nowrap;
+    -webkit-transition:
+        background-position 650ms ease,
+        border-color 200ms ease,
+        box-shadow 200ms ease,
+        color 200ms ease,
+        transform 200ms ease;
+    transition:
+        background-position 650ms ease,
+        border-color 200ms ease,
+        box-shadow 200ms ease,
+        color 200ms ease,
+        transform 200ms ease;
+}
+
+.game-cap-badge:hover,
+.game-cap-badge:focus-visible {
+    background-position: -60% 50%, 0 0;
+    border-color: rgba(255, 229, 138, 0.78);
+    -webkit-box-shadow: 0 0 0 1px rgba(255, 229, 138, 0.18), 0 0 24px rgba(255, 195, 50, 0.28);
+    box-shadow: 0 0 0 1px rgba(255, 229, 138, 0.18), 0 0 24px rgba(255, 195, 50, 0.28);
+    color: #fff4bd;
+    text-decoration: none;
+    -ms-transform: translateX(-50%) translateY(-1px);
+    -webkit-transform: translateX(-50%) translateY(-1px);
+    transform: translateX(-50%) translateY(-1px);
+}
+
+.game-cap-badge:focus,
+.game-cap-badge:active,
+.game-cap-badge:visited {
+    text-decoration: none;
+}
+
+.game-cap-badge:focus-visible {
+    outline: 2px solid rgba(255, 229, 138, 0.75);
+    outline-offset: 2px;
+}

assets/js/cap.js

@@ -0,0 +1,87 @@
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+import 'cap-widget';
+
+const FORMS_SELECTOR = '.auth-form';
+const SUBMIT_SELECTOR = 'button[type="submit"], input[type="submit"]';
+
+const createInvisibleCap = apiEndpoint => {
+  const host = document.createElement('cap-widget');
+  host.style.display = 'none';
+
+  const cap = new window.Cap({ apiEndpoint }, host);
+
+  return { cap, host };
+};
+
+const lockSubmit = (form, locked) => {
+  const submit = form.querySelector(SUBMIT_SELECTOR);
+  if (!submit) return;
+  submit.disabled = locked;
+};
+
+const bindInvisibleCap = (form, apiEndpoint) => {
+  const { cap, host } = createInvisibleCap(apiEndpoint);
+  form.appendChild(host);
+
+  let solving = null;
+
+  const solveToken = async () => {
+    if (!solving) {
+      solving = cap.solve()
+        .finally(() => {
+          solving = null;
+        });
+    }
+
+    const result = await solving;
+    return result?.token ?? cap.token ?? '';
+  };
+
+  lockSubmit(form, true);
+
+  solveToken()
+    .catch(() => '')
+    .finally(() => lockSubmit(form, false));
+
+  form.addEventListener('submit', async e => {
+    if (cap.token) {
+      return;
+    }
+
+    e.preventDefault();
+    lockSubmit(form, true);
+
+    try {
+      const token = await solveToken();
+      if (!token) {
+        lockSubmit(form, false);
+        return;
+      }
+      form.requestSubmit();
+    } catch (_) {
+      lockSubmit(form, false);
+    }
+  });
+};
+
+const initInvisibleCap = () => {
+  const endpointSource = document.querySelector('[data-cap-api-endpoint]')
+    || document.getElementById('mine-wrapper');
+  const apiEndpoint = endpointSource?.dataset.capApiEndpoint;
+
+  if ('function' !== typeof window.Cap || !apiEndpoint) {
+    return;
+  }
+
+  document.querySelectorAll(FORMS_SELECTOR).forEach(form => bindInvisibleCap(form, apiEndpoint));
+};
+
+initInvisibleCap();

assets/js/components/AvatarUpload.jsx

@@ -7,7 +7,7 @@
  * file that was distributed with this source code.
  */
 
-import React, { useMemo, useRef } from 'react';
+import React, { Fragment, useMemo, useRef } from 'react';
 import { string } from 'prop-types';
 import { useProfileDataProvider } from '@mine-hooks/useGameDataProvider';
 
@@ -16,6 +16,8 @@ export const AvatarUpload = ({ uploadUrl, initialThumbUrl, initials }) => {
   const [thumbUrl, setThumbUrl] = React.useState(initialThumbUrl || null);
   const { uploadAvatarMutation: { isPending, error, mutate } } = useProfileDataProvider();
 
+  const errorMessage = useMemo(() => error?.message ?? null, [error]);
+
   const handleChange = e => {
     const file = e.target.files?.[0];
     if (!file) return;
@@ -40,32 +42,32 @@ export const AvatarUpload = ({ uploadUrl, initialThumbUrl, initials }) => {
     });
   };
 
-  const errorMessage = useMemo(() => error?.message ?? null, [error]);
-
   return (
-    <div
-      className={`profile-avatar${isPending ? ' profile-avatar--loading' : ''}`}
-      title="Click to change profile picture"
-      onClick={() => inputRef.current?.click()}
-    >
-      {thumbUrl
-        ? <img src={thumbUrl} alt={initials} className="profile-avatar__img" />
-        : <span className="profile-avatar__initials">{initials}</span>
-      }
-      <div className="profile-avatar__overlay">
-        <i className="fa fa-camera" />
+    <Fragment>
+      <div
+        className={`profile-avatar${isPending ? ' profile-avatar--loading' : ''}`}
+        title="Click to change profile picture"
+        onClick={() => inputRef.current?.click()}
+      >
+        {thumbUrl
+          ? <img src={thumbUrl} alt={initials} className="profile-avatar__img" />
+          : <span className="profile-avatar__initials">{initials}</span>
+        }
+        <div className="profile-avatar__overlay">
+          <i className="fa fa-camera" />
+        </div>
+        <input
+          ref={inputRef}
+          type="file"
+          accept="image/jpeg,image/png,image/gif,image/webp"
+          style={{ display: 'none' }}
+          onChange={handleChange}
+        />
       </div>
-      <input
-        ref={inputRef}
-        type="file"
-        accept="image/jpeg,image/png,image/gif,image/webp"
-        style={{ display: 'none' }}
-        onChange={handleChange}
-      />
       {errorMessage && <div className="profile-avatar__error">{errorMessage}</div>}
-    </div>
+    </Fragment>
   );
-}
+};
 
 AvatarUpload.propTypes = {
   uploadUrl: string.isRequired,

assets/js/components/BattleDialog.jsx

@@ -12,7 +12,9 @@ import { array } from 'prop-types';
 import { formatDuration } from '@global-utils/format';
 import Dialog from '@mui/material/Dialog';
 import { createTheme, styled, ThemeProvider } from '@mui/material/styles';
-import { Avatar, BonusPoints, StatRow } from '@global-components';
+import { Avatar } from './battle-dialog/Avatar';
+import { BonusPoints } from './battle-dialog/BonusPoints';
+import { StatRow } from './battle-dialog/StatRow';
 
 const darkTheme = createTheme({ palette: { mode: 'dark' } });
 
@@ -69,11 +71,11 @@ export const BattleDialog = ({ games }) => {
   const endReason = resign
     ? `${resign.charAt(0).toUpperCase() + resign.slice(1)} resigned`
     : 26 <= maxPoints ? 'Points' : 'Abandoned';
-  const canShare = !canContinue;
   const bothRegistered = game.bothRegistered;
-  const canContinue = bothRegistered && !resign && 26 > maxPoints;
-  const playUrl = `${window.location.origin}/play/${game.uuid}`;
   const shareUrl = `${window.location.origin}/battle/${game.uuid}`;
+  const canContinue = bothRegistered && !resign && 26 > maxPoints;
+  const canShare = !canContinue;
+  const playUrl = `${window.location.origin}/play/${game.uuid}`;
 
   const duration = formatDuration(game.created, game.date);
   const pointDiff = Math.abs((game.redPoints ?? 0) - (game.bluePoints ?? 0));

assets/js/components/ContactForm.jsx

@@ -7,83 +7,6 @@
  * file that was distributed with this source code.
  */
 
-import { useEffect, useRef } from 'react';
-import { string } from 'prop-types';
+const ContactForm = () => null;
 
-/**
- * ContactForm Component
- *
- * Handles reCAPTCHA v3 integration for the contact form.
- * Intercepts form submission, executes reCAPTCHA, and submits the form with the token.
- *
- * @param {string} siteKey - Google reCAPTCHA site key
- * @param {string} recaptchaFieldId - ID of the hidden recaptcha input field
- */
-const ContactForm = ({ siteKey, recaptchaFieldId }) => {
-  const formRef = useRef(null);
-  const isSubmittingRef = useRef(false);
-
-  useEffect(() => {
-    const form = document.querySelector('.auth-form');
-
-    if (!form) {
-      console.warn('ContactForm: No .auth-form found');
-      return;
-    }
-
-    formRef.current = form;
-
-    const handleSubmit = e => {
-      e.preventDefault();
-
-      if (isSubmittingRef.current) {
-        return;
-      }
-
-      isSubmittingRef.current = true;
-
-      if ('undefined' !== typeof grecaptcha) {
-        grecaptcha.ready(() => {
-          grecaptcha
-            .execute(siteKey, { action: 'contact' })
-            .then(token => {
-              const recaptchaField = document.getElementById(recaptchaFieldId);
-
-              if (recaptchaField) {
-                recaptchaField.value = token;
-              } else {
-                console.error(`ContactForm: Recaptcha field with ID "${recaptchaFieldId}" not found`);
-              }
-
-              isSubmittingRef.current = false;
-              form.submit();
-            })
-            .catch(error => {
-              console.error('ContactForm: reCAPTCHA execution failed', error);
-              isSubmittingRef.current = false;
-            });
-        });
-      } else {
-        console.error('ContactForm: grecaptcha is not loaded');
-        isSubmittingRef.current = false;
-      }
-    };
-
-    form.addEventListener('submit', handleSubmit);
-
-    return () => {
-      if (formRef.current) {
-        formRef.current.removeEventListener('submit', handleSubmit);
-      }
-    };
-  }, [siteKey, recaptchaFieldId]);
-
-  return null;
-};
-
-ContactForm.propTypes = {
-  siteKey: string.isRequired,
-  recaptchaFieldId: string.isRequired,
-};
-
-export default ContactForm;
+export default ContactForm;

assets/js/mine-seeker/components/CaptchaOverlay.jsx

@@ -7,17 +7,16 @@
  * file that was distributed with this source code.
  */
 
-import React, { Fragment, useCallback, useEffect, useMemo, useState } from 'react';
+import 'cap-widget';
+import React, { Fragment, useCallback, useEffect, useRef, useState } from 'react';
 import { func, node, string } from 'prop-types';
 
 const CAPTCHA_STORAGE_KEY = 'mineseeker_captcha_verified';
 const CAPTCHA_TOKEN_KEY = 'mineseeker_captcha_token';
-const RECAPTCHA_ACTION = 'mineseeker_play';
 
-const CaptchaOverlay = ({ siteKey, onVerified, children }) => {
+const CaptchaOverlay = ({ apiEndpoint, onVerified, children }) => {
   const [verified, setVerified] = useState(false);
-  const [loading, setLoading] = useState(false);
-  const [error, setError] = useState(false);
+  const capRef = useRef(null);
 
   const handleToken = useCallback(token => {
     const wrapper = document.getElementById('mine-wrapper');
@@ -30,12 +29,6 @@ const CaptchaOverlay = ({ siteKey, onVerified, children }) => {
     onVerified?.();
   }, [onVerified]);
 
-  const buttonClasses = useMemo(() => [
-    'captcha-button',
-    error && 'captcha-button--error',
-    loading && 'captcha-button--loading',
-  ].filter(Boolean).join(' '), [error, loading]);
-
   useEffect(() => {
     const storedToken = sessionStorage.getItem(CAPTCHA_TOKEN_KEY);
     const storedTime = sessionStorage.getItem(CAPTCHA_STORAGE_KEY);
@@ -52,40 +45,42 @@ const CaptchaOverlay = ({ siteKey, onVerified, children }) => {
         return;
       }
     }
+  }, [onVerified]);
 
-    if (window.grecaptcha) {
-      window.grecaptcha.ready(() => {
-        window.grecaptcha
-          .execute(siteKey, { action: RECAPTCHA_ACTION })
-          .then(token => {
-            handleToken(token);
-          })
-          .catch(() => {
-            setError(true);
-          });
-      });
-    }
-  }, [siteKey, onVerified, handleToken]);
+  useEffect(() => {
+    const widget = document.createElement('cap-widget');
+    widget.style.display = 'none';
+    capRef.current = widget;
+    document.body.appendChild(widget);
 
+    const cap = new window.Cap({ apiEndpoint }, widget);
+    let cancelled = false;
 
-  const handleClick = () => {
-    setLoading(true);
-    setError(false);
+    const run = async () => {
+      try {
+        const result = await cap.solve();
+        if (!cancelled && result?.token) {
+          handleToken(result.token);
+        }
+      } catch (_) {
+        if (!cancelled) {
+          setTimeout(() => {
+            if (!cancelled) {
+              run();
+            }
+          }, 1200);
+        }
+      }
+    };
 
-    window.grecaptcha.ready(() => {
-      window.grecaptcha
-        .execute(siteKey, { action: RECAPTCHA_ACTION })
-        .then(token => {
-          handleToken(token);
-          setLoading(false);
-        })
-        .catch(() => {
-          setLoading(false);
-          setError(true);
-          setTimeout(() => setError(false), 2000);
-        });
-    });
-  };
+    run();
+
+    return () => {
+      cancelled = true;
+      widget.remove();
+      capRef.current = null;
+    };
+  }, [apiEndpoint, handleToken]);
 
   if (verified) {
     return <Fragment>{children}</Fragment>;
@@ -99,16 +94,8 @@ const CaptchaOverlay = ({ siteKey, onVerified, children }) => {
         </div>
         <h1 className="captcha-title">Ready to Play?</h1>
         <p className="captcha-description">
-          Click below to verify you&apos;re human and start playing.
+          Verifying your session...
         </p>
-        <button
-          className={buttonClasses}
-          onClick={handleClick}
-          disabled={loading}
-        >
-          <i className={`fa ${loading ? 'fa-spinner fa-spin' : error ? 'fa-exclamation-circle' : 'fa-play'}`} />
-          {loading ? 'Verifying...' : error ? 'Try Again' : 'Start Playing'}
-        </button>
       </div>
     </div>
   );
@@ -117,7 +104,7 @@ const CaptchaOverlay = ({ siteKey, onVerified, children }) => {
 export default CaptchaOverlay;
 
 CaptchaOverlay.propTypes = {
-  siteKey:    string.isRequired,
-  onVerified: func,
-  children:   node,
+  apiEndpoint: string.isRequired,
+  onVerified:  func,
+  children:    node,
 };

assets/js/mine-seeker/components/GameBoard.jsx

@@ -19,7 +19,7 @@ export const GameBoard = ({ gameAssoc, gameInherited, opponentName = '', isEnvDe
   const { onClick, resign } = useServerCommunication(gameAssoc, gameInherited, opponentName, isEnvDev);
   const [captchaVerified, setCaptchaVerified] = useState(false);
 
-  const siteKey = document.getElementById('mine-wrapper')?.dataset.recaptchaSiteKey;
+  const apiEndpoint = document.getElementById('mine-wrapper')?.dataset.capApiEndpoint;
 
   if (!gridReady) {
     return (
@@ -29,9 +29,9 @@ export const GameBoard = ({ gameAssoc, gameInherited, opponentName = '', isEnvDe
     );
   }
 
-  if (!captchaVerified && siteKey) {
+  if (!captchaVerified && apiEndpoint) {
     return (
-      <CaptchaOverlay siteKey={siteKey} onVerified={() => setCaptchaVerified(true)} />
+      <CaptchaOverlay apiEndpoint={apiEndpoint} onVerified={() => setCaptchaVerified(true)} />
     );
   }
 

assets/js/mine-seeker/contexts/GameProvider.jsx

@@ -49,6 +49,7 @@ export const GameProvider = ({ children }) => {
     mine: new Howl({ src: ['/sound/mine.mp3'] }),
     warning: new Howl({ src: ['/sound/warning.mp3'] }),
     won: new Howl({ src: ['/sound/won.mp3'] }),
+    starting: new Howl({ src: ['/sound/starting.mp3'] }),
   });
 
   /** Sync helpers (keep ref + state in lockstep) */
@@ -269,6 +270,8 @@ export const GameProvider = ({ children }) => {
         makeGameEndIfItEnds, resignProcess,
         /** UI action */
         onBombToggle,
+        /** Sounds */
+        sounds,
       }}
     >
       {children}

assets/js/mine-seeker/hooks/useServerCommunication.jsx

@@ -22,7 +22,7 @@ const useServerCommunication = (gameAssoc, gameInherited, opponentName, isEnvDev
     /** Sync helpers */
     syncWebPlayer, syncActivePlayer, syncBombSelected, syncConnLost, syncRed, syncBlue,
     /** Game logic */
-    showOverlay, hideOverlay, applyStep, makeGameEndIfItEnds, resignProcess,
+    showOverlay, hideOverlay, applyStep, makeGameEndIfItEnds, resignProcess, sounds,
     /** Current cells snapshot (for active-check in onClick) */
     cells,
   } = useGame();
@@ -212,6 +212,7 @@ const useServerCommunication = (gameAssoc, gameInherited, opponentName, isEnvDev
      */
     if (!endRef.current && (!isTrueRestoredRef.current || 0 !== opponentLastSeenRef.current)) {
       hideOverlay();
+      sounds.current.starting.play();
     }
   };
 

bin/phpunit

@@ -0,0 +1,4 @@
+#!/usr/bin/env php
+<?php
+
+require dirname(__DIR__).'/vendor/phpunit/phpunit/phpunit';

bun.lock

@@ -11,26 +11,27 @@
         "@fontsource/open-sans": "^5.2.7",
         "@fontsource/rajdhani": "^5.2.7",
         "@fortawesome/fontawesome-free": "^7.2.0",
-        "@mui/material": "^9.0.0",
-        "@mui/x-charts": "^9.0.2",
-        "@tanstack/react-query": "^5.99.2",
+        "@mui/material": "^9.0.1",
+        "@mui/x-charts": "^9.3.0",
+        "@tanstack/react-query": "^5.100.14",
+        "cap-widget": "^0.1.53",
         "howler": "^2.2.4",
         "lodash": "^4.18.1",
         "prop-types": "^15.8.1",
-        "react": "^19.2.5",
-        "react-dom": "^19.2.5",
+        "react": "^19.2.7",
+        "react-dom": "^19.2.7",
       },
       "devDependencies": {
         "@eslint/eslintrc": "^3.3.5",
         "@eslint/js": "10.0.1",
         "@stylistic/eslint-plugin": "5.10.0",
-        "@vitejs/plugin-react": "^6.0.1",
-        "eslint": "10.2.1",
+        "@vitejs/plugin-react": "^6.0.2",
+        "eslint": "^10.4.1",
         "eslint-plugin-react": "^7.37.5",
         "eslint-plugin-react-hooks": "7.1.1",
-        "globals": "17.5.0",
-        "sass": "^1.99.0",
-        "vite": "^8.0.8",
+        "globals": "^17.6.0",
+        "sass": "^1.100.0",
+        "vite": "^8.0.16",
         "vite-plugin-symfony": "^8.2.4",
       },
     },
@@ -38,27 +39,27 @@
   "packages": {
     "@babel/code-frame": ["@babel/code-frame@7.29.0", "http://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz", { "dependencies": { "@babel/helper-validator-identifier": "^7.28.5", "js-tokens": "^4.0.0", "picocolors": "^1.1.1" } }, "sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw=="],
 
-    "@babel/compat-data": ["@babel/compat-data@7.29.0", "", {}, "sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg=="],
+    "@babel/compat-data": ["@babel/compat-data@7.29.0", "http://registry.npmjs.org/@babel/compat-data/-/compat-data-7.29.0.tgz", {}, "sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg=="],
 
-    "@babel/core": ["@babel/core@7.29.0", "", { "dependencies": { "@babel/code-frame": "^7.29.0", "@babel/generator": "^7.29.0", "@babel/helper-compilation-targets": "^7.28.6", "@babel/helper-module-transforms": "^7.28.6", "@babel/helpers": "^7.28.6", "@babel/parser": "^7.29.0", "@babel/template": "^7.28.6", "@babel/traverse": "^7.29.0", "@babel/types": "^7.29.0", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA=="],
+    "@babel/core": ["@babel/core@7.29.0", "http://registry.npmjs.org/@babel/core/-/core-7.29.0.tgz", { "dependencies": { "@babel/code-frame": "^7.29.0", "@babel/generator": "^7.29.0", "@babel/helper-compilation-targets": "^7.28.6", "@babel/helper-module-transforms": "^7.28.6", "@babel/helpers": "^7.28.6", "@babel/parser": "^7.29.0", "@babel/template": "^7.28.6", "@babel/traverse": "^7.29.0", "@babel/types": "^7.29.0", "@jridgewell/remapping": "^2.3.5", "convert-source-map": "^2.0.0", "debug": "^4.1.0", "gensync": "^1.0.0-beta.2", "json5": "^2.2.3", "semver": "^6.3.1" } }, "sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA=="],
 
     "@babel/generator": ["@babel/generator@7.29.1", "http://registry.npmjs.org/@babel/generator/-/generator-7.29.1.tgz", { "dependencies": { "@babel/parser": "^7.29.0", "@babel/types": "^7.29.0", "@jridgewell/gen-mapping": "^0.3.12", "@jridgewell/trace-mapping": "^0.3.28", "jsesc": "^3.0.2" } }, "sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw=="],
 
-    "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.28.6", "", { "dependencies": { "@babel/compat-data": "^7.28.6", "@babel/helper-validator-option": "^7.27.1", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA=="],
+    "@babel/helper-compilation-targets": ["@babel/helper-compilation-targets@7.28.6", "http://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.28.6.tgz", { "dependencies": { "@babel/compat-data": "^7.28.6", "@babel/helper-validator-option": "^7.27.1", "browserslist": "^4.24.0", "lru-cache": "^5.1.1", "semver": "^6.3.1" } }, "sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA=="],
 
     "@babel/helper-globals": ["@babel/helper-globals@7.28.0", "http://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.28.0.tgz", {}, "sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw=="],
 
     "@babel/helper-module-imports": ["@babel/helper-module-imports@7.28.6", "http://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.28.6.tgz", { "dependencies": { "@babel/traverse": "^7.28.6", "@babel/types": "^7.28.6" } }, "sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw=="],
 
-    "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.28.6", "", { "dependencies": { "@babel/helper-module-imports": "^7.28.6", "@babel/helper-validator-identifier": "^7.28.5", "@babel/traverse": "^7.28.6" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA=="],
+    "@babel/helper-module-transforms": ["@babel/helper-module-transforms@7.28.6", "http://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.28.6.tgz", { "dependencies": { "@babel/helper-module-imports": "^7.28.6", "@babel/helper-validator-identifier": "^7.28.5", "@babel/traverse": "^7.28.6" }, "peerDependencies": { "@babel/core": "^7.0.0" } }, "sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA=="],
 
     "@babel/helper-string-parser": ["@babel/helper-string-parser@7.27.1", "http://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz", {}, "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA=="],
 
     "@babel/helper-validator-identifier": ["@babel/helper-validator-identifier@7.28.5", "http://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz", {}, "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q=="],
 
-    "@babel/helper-validator-option": ["@babel/helper-validator-option@7.27.1", "", {}, "sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg=="],
+    "@babel/helper-validator-option": ["@babel/helper-validator-option@7.27.1", "http://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.27.1.tgz", {}, "sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg=="],
 
-    "@babel/helpers": ["@babel/helpers@7.29.2", "", { "dependencies": { "@babel/template": "^7.28.6", "@babel/types": "^7.29.0" } }, "sha512-HoGuUs4sCZNezVEKdVcwqmZN8GoHirLUcLaYVNBK2J0DadGtdcqgr3BCbvH8+XUo4NGjNl3VOtSjEKNzqfFgKw=="],
+    "@babel/helpers": ["@babel/helpers@7.29.2", "http://registry.npmjs.org/@babel/helpers/-/helpers-7.29.2.tgz", { "dependencies": { "@babel/template": "^7.28.6", "@babel/types": "^7.29.0" } }, "sha512-HoGuUs4sCZNezVEKdVcwqmZN8GoHirLUcLaYVNBK2J0DadGtdcqgr3BCbvH8+XUo4NGjNl3VOtSjEKNzqfFgKw=="],
 
     "@babel/parser": ["@babel/parser@7.29.2", "http://registry.npmjs.org/@babel/parser/-/parser-7.29.2.tgz", { "dependencies": { "@babel/types": "^7.29.0" }, "bin": "./bin/babel-parser.js" }, "sha512-4GgRzy/+fsBa72/RZVJmGKPmZu9Byn8o4MoLpmNe1m8ZfYnz5emHLQz3U4gLud6Zwl0RZIcgiLD7Uq7ySFuDLA=="],
 
@@ -70,9 +71,9 @@
 
     "@babel/types": ["@babel/types@7.29.0", "http://registry.npmjs.org/@babel/types/-/types-7.29.0.tgz", { "dependencies": { "@babel/helper-string-parser": "^7.27.1", "@babel/helper-validator-identifier": "^7.28.5" } }, "sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A=="],
 
-    "@emnapi/core": ["@emnapi/core@1.9.2", "http://registry.npmjs.org/@emnapi/core/-/core-1.9.2.tgz", { "dependencies": { "@emnapi/wasi-threads": "1.2.1", "tslib": "^2.4.0" } }, "sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA=="],
+    "@emnapi/core": ["@emnapi/core@1.10.0", "http://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz", { "dependencies": { "@emnapi/wasi-threads": "1.2.1", "tslib": "^2.4.0" } }, "sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw=="],
 
-    "@emnapi/runtime": ["@emnapi/runtime@1.9.2", "http://registry.npmjs.org/@emnapi/runtime/-/runtime-1.9.2.tgz", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw=="],
+    "@emnapi/runtime": ["@emnapi/runtime@1.10.0", "http://registry.npmjs.org/@emnapi/runtime/-/runtime-1.10.0.tgz", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA=="],
 
     "@emnapi/wasi-threads": ["@emnapi/wasi-threads@1.2.1", "http://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w=="],
 
@@ -106,19 +107,19 @@
 
     "@eslint-community/regexpp": ["@eslint-community/regexpp@4.12.2", "http://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.12.2.tgz", {}, "sha512-EriSTlt5OC9/7SXkRSCAhfSxxoSUgBm33OH+IkwbdpgoqsSsUg7y3uh+IICI/Qg4BBWr3U2i39RpmycbxMq4ew=="],
 
-    "@eslint/config-array": ["@eslint/config-array@0.23.5", "", { "dependencies": { "@eslint/object-schema": "^3.0.5", "debug": "^4.3.1", "minimatch": "^10.2.4" } }, "sha512-Y3kKLvC1dvTOT+oGlqNQ1XLqK6D1HU2YXPc52NmAlJZbMMWDzGYXMiPRJ8TYD39muD/OTjlZmNJ4ib7dvSrMBA=="],
+    "@eslint/config-array": ["@eslint/config-array@0.23.5", "http://registry.npmjs.org/@eslint/config-array/-/config-array-0.23.5.tgz", { "dependencies": { "@eslint/object-schema": "^3.0.5", "debug": "^4.3.1", "minimatch": "^10.2.4" } }, "sha512-Y3kKLvC1dvTOT+oGlqNQ1XLqK6D1HU2YXPc52NmAlJZbMMWDzGYXMiPRJ8TYD39muD/OTjlZmNJ4ib7dvSrMBA=="],
 
-    "@eslint/config-helpers": ["@eslint/config-helpers@0.5.5", "", { "dependencies": { "@eslint/core": "^1.2.1" } }, "sha512-eIJYKTCECbP/nsKaaruF6LW967mtbQbsw4JTtSVkUQc9MneSkbrgPJAbKl9nWr0ZeowV8BfsarBmPpBzGelA2w=="],
+    "@eslint/config-helpers": ["@eslint/config-helpers@0.6.0", "", { "dependencies": { "@eslint/core": "^1.2.1" } }, "sha512-ii6Bw9jJ2zi2cWA2Z+9/QZ/+3DX6kwaV5Q986D/CdP3Lap3w/pgQZ373FV7byY/i7L4IRH/G43I5dz1ClsCbpA=="],
 
-    "@eslint/core": ["@eslint/core@1.2.1", "", { "dependencies": { "@types/json-schema": "^7.0.15" } }, "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ=="],
+    "@eslint/core": ["@eslint/core@1.2.1", "http://registry.npmjs.org/@eslint/core/-/core-1.2.1.tgz", { "dependencies": { "@types/json-schema": "^7.0.15" } }, "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ=="],
 
     "@eslint/eslintrc": ["@eslint/eslintrc@3.3.5", "http://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.3.5.tgz", { "dependencies": { "ajv": "^6.14.0", "debug": "^4.3.2", "espree": "^10.0.1", "globals": "^14.0.0", "ignore": "^5.2.0", "import-fresh": "^3.2.1", "js-yaml": "^4.1.1", "minimatch": "^3.1.5", "strip-json-comments": "^3.1.1" } }, "sha512-4IlJx0X0qftVsN5E+/vGujTRIFtwuLbNsVUe7TO6zYPDR1O6nFwvwhIKEKSrl6dZchmYBITazxKoUYOjdtjlRg=="],
 
-    "@eslint/js": ["@eslint/js@10.0.1", "", { "peerDependencies": { "eslint": "^10.0.0" }, "optionalPeers": ["eslint"] }, "sha512-zeR9k5pd4gxjZ0abRoIaxdc7I3nDktoXZk2qOv9gCNWx3mVwEn32VRhyLaRsDiJjTs0xq/T8mfPtyuXu7GWBcA=="],
+    "@eslint/js": ["@eslint/js@10.0.1", "http://registry.npmjs.org/@eslint/js/-/js-10.0.1.tgz", { "peerDependencies": { "eslint": "^10.0.0" }, "optionalPeers": ["eslint"] }, "sha512-zeR9k5pd4gxjZ0abRoIaxdc7I3nDktoXZk2qOv9gCNWx3mVwEn32VRhyLaRsDiJjTs0xq/T8mfPtyuXu7GWBcA=="],
 
-    "@eslint/object-schema": ["@eslint/object-schema@3.0.5", "", {}, "sha512-vqTaUEgxzm+YDSdElad6PiRoX4t8VGDjCtt05zn4nU810UIx/uNEV7/lZJ6KwFThKZOzOxzXy48da+No7HZaMw=="],
+    "@eslint/object-schema": ["@eslint/object-schema@3.0.5", "http://registry.npmjs.org/@eslint/object-schema/-/object-schema-3.0.5.tgz", {}, "sha512-vqTaUEgxzm+YDSdElad6PiRoX4t8VGDjCtt05zn4nU810UIx/uNEV7/lZJ6KwFThKZOzOxzXy48da+No7HZaMw=="],
 
-    "@eslint/plugin-kit": ["@eslint/plugin-kit@0.7.1", "", { "dependencies": { "@eslint/core": "^1.2.1", "levn": "^0.4.1" } }, "sha512-rZAP3aVgB9ds9KOeUSL+zZ21hPmo8dh6fnIFwRQj5EAZl9gzR7wxYbYXYysAM8CTqGmUGyp2S4kUdV17MnGuWQ=="],
+    "@eslint/plugin-kit": ["@eslint/plugin-kit@0.7.2", "", { "dependencies": { "@eslint/core": "^1.2.1", "levn": "^0.4.1" } }, "sha512-+CNAzxglkrpNf/kKywqQfk74QjtceuOE7Qm+AF8miRvPF/wmmK5+OJOgVh3AVTT3RP2mH3+FOaxlE5v72owk0A=="],
 
     "@fontsource/changa-one": ["@fontsource/changa-one@5.2.8", "http://registry.npmjs.org/@fontsource/changa-one/-/changa-one-5.2.8.tgz", {}, "sha512-gagiU8sMWLs9ejh41NmrYlGdgasSYWFegz5/+22WqYdJVS9HZbaUEXj/6jj3ZKgi+dQZT0kYI+Nha2UQGbO/mA=="],
 
@@ -138,7 +139,7 @@
 
     "@jridgewell/gen-mapping": ["@jridgewell/gen-mapping@0.3.13", "http://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz", { "dependencies": { "@jridgewell/sourcemap-codec": "^1.5.0", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA=="],
 
-    "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
+    "@jridgewell/remapping": ["@jridgewell/remapping@2.3.5", "http://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz", { "dependencies": { "@jridgewell/gen-mapping": "^0.3.5", "@jridgewell/trace-mapping": "^0.3.24" } }, "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ=="],
 
     "@jridgewell/resolve-uri": ["@jridgewell/resolve-uri@3.1.2", "http://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz", {}, "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw=="],
 
@@ -146,29 +147,29 @@
 
     "@jridgewell/trace-mapping": ["@jridgewell/trace-mapping@0.3.31", "http://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz", { "dependencies": { "@jridgewell/resolve-uri": "^3.1.0", "@jridgewell/sourcemap-codec": "^1.4.14" } }, "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw=="],
 
-    "@mui/core-downloads-tracker": ["@mui/core-downloads-tracker@9.0.0", "http://registry.npmjs.org/@mui/core-downloads-tracker/-/core-downloads-tracker-9.0.0.tgz", {}, "sha512-uwQNGkhv0lf7ufxw6QXev77BW6pWbW+7uxYjU5+rfp4lBkFtMEgJCsarTM3Tn+i0lGx6+Ol2u88JdGXr0GDskA=="],
+    "@mui/core-downloads-tracker": ["@mui/core-downloads-tracker@9.0.1", "http://registry.npmjs.org/@mui/core-downloads-tracker/-/core-downloads-tracker-9.0.1.tgz", {}, "sha512-GzamIIhZ1bH77dq7eKaeyRgJdkypsxin4jBFq2EMs4lBWRR0LFO1CSVMsoebn/VvjcNrnrOrjy48MkrkQUK2iw=="],
 
-    "@mui/material": ["@mui/material@9.0.0", "http://registry.npmjs.org/@mui/material/-/material-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/core-downloads-tracker": "^9.0.0", "@mui/system": "^9.0.0", "@mui/types": "^9.0.0", "@mui/utils": "^9.0.0", "@popperjs/core": "^2.11.8", "@types/react-transition-group": "^4.4.12", "clsx": "^2.1.1", "csstype": "^3.2.3", "prop-types": "^15.8.1", "react-is": "^19.2.4", "react-transition-group": "^4.4.5" }, "peerDependencies": { "@emotion/react": "^11.5.0", "@emotion/styled": "^11.3.0", "@mui/material-pigment-css": "^9.0.0", "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react-dom": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@emotion/react", "@emotion/styled", "@mui/material-pigment-css", "@types/react"] }, "sha512-+VP/oQCDhDR87NQQgXnNBG8dwy6GNuQLnenS1pZvkbn2dKFSxRSRMybTpH9xUxXP+316mlYDy5CSbYtusnCWtw=="],
+    "@mui/material": ["@mui/material@9.0.1", "http://registry.npmjs.org/@mui/material/-/material-9.0.1.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/core-downloads-tracker": "^9.0.1", "@mui/system": "^9.0.1", "@mui/types": "^9.0.0", "@mui/utils": "^9.0.1", "@popperjs/core": "^2.11.8", "@types/react-transition-group": "^4.4.12", "clsx": "^2.1.1", "csstype": "^3.2.3", "prop-types": "^15.8.1", "react-is": "^19.2.4", "react-transition-group": "^4.4.5" }, "peerDependencies": { "@emotion/react": "^11.5.0", "@emotion/styled": "^11.3.0", "@mui/material-pigment-css": "^9.0.1", "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react-dom": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@emotion/react", "@emotion/styled", "@mui/material-pigment-css", "@types/react"] }, "sha512-voyCpeUxcSWLN7KPZuq0pGCIt726T9K6kiVM3XUcywZDAlZSarLHaUxJVQpospbjjOzN53hwyjo8s6KoWl6utw=="],
 
-    "@mui/private-theming": ["@mui/private-theming@9.0.0", "http://registry.npmjs.org/@mui/private-theming/-/private-theming-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/utils": "^9.0.0", "prop-types": "^15.8.1" }, "peerDependencies": { "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-JtuZoaiCqwD6vjgYu6Xp3T7DZkrxJlgtDz5yESzhI34fEX5hHMh2VJUbuL9UOg8xrfIFMrq6dcYoH/7Zi4G0RA=="],
+    "@mui/private-theming": ["@mui/private-theming@9.0.1", "http://registry.npmjs.org/@mui/private-theming/-/private-theming-9.0.1.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/utils": "^9.0.1", "prop-types": "^15.8.1" }, "peerDependencies": { "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-pSIGq4Yw749KHEwlkYZWVERgHgwJELP6ODtBNUfV8V4oIb5H+h7IQDFXuk/b2oQccODK1enJAtiEzlgLZmq+8g=="],
 
     "@mui/styled-engine": ["@mui/styled-engine@9.0.0", "http://registry.npmjs.org/@mui/styled-engine/-/styled-engine-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@emotion/cache": "^11.14.0", "@emotion/serialize": "^1.3.3", "@emotion/sheet": "^1.4.0", "csstype": "^3.2.3", "prop-types": "^15.8.1" }, "peerDependencies": { "@emotion/react": "^11.4.1", "@emotion/styled": "^11.3.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@emotion/react", "@emotion/styled"] }, "sha512-9RLGdX4Jg0aQPRuvqh/OLzYSPlgd5zyEw5/1HIRfdavSiOd03WtUaGZH9/w1RoTYuRKwpgy0hpIFaMHIqPVIWg=="],
 
-    "@mui/system": ["@mui/system@9.0.0", "http://registry.npmjs.org/@mui/system/-/system-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/private-theming": "^9.0.0", "@mui/styled-engine": "^9.0.0", "@mui/types": "^9.0.0", "@mui/utils": "^9.0.0", "clsx": "^2.1.1", "csstype": "^3.2.3", "prop-types": "^15.8.1" }, "peerDependencies": { "@emotion/react": "^11.5.0", "@emotion/styled": "^11.3.0", "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@emotion/react", "@emotion/styled", "@types/react"] }, "sha512-YnC5Zg6j04IxiLc/boAKs0464jfZlLFVa7mf5E8lF0XOtZVUvG6R6gJK50lgUYdaaLdyLfxF6xR7LaPuEpeT/g=="],
+    "@mui/system": ["@mui/system@9.0.1", "http://registry.npmjs.org/@mui/system/-/system-9.0.1.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/private-theming": "^9.0.1", "@mui/styled-engine": "^9.0.0", "@mui/types": "^9.0.0", "@mui/utils": "^9.0.1", "clsx": "^2.1.1", "csstype": "^3.2.3", "prop-types": "^15.8.1" }, "peerDependencies": { "@emotion/react": "^11.5.0", "@emotion/styled": "^11.3.0", "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@emotion/react", "@emotion/styled", "@types/react"] }, "sha512-WvlioaLxk6ewUIOfh0StxUvOPDS1mCfzaulcudsL1brZNXuh0N9FMk7RpH7ImJKjEz412SEy/V/yvqmtxbqxCQ=="],
 
     "@mui/types": ["@mui/types@9.0.0", "http://registry.npmjs.org/@mui/types/-/types-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2" }, "peerDependencies": { "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-i1cuFCAWN44b3AJWO7mh7tuh1sqbQSeVr/94oG0TX5uXivac8XalgE4/6fQZcmGZigzbQ35IXxj/4jLpRIBYZg=="],
 
-    "@mui/utils": ["@mui/utils@9.0.0", "http://registry.npmjs.org/@mui/utils/-/utils-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/types": "^9.0.0", "@types/prop-types": "^15.7.15", "clsx": "^2.1.1", "prop-types": "^15.8.1", "react-is": "^19.2.4" }, "peerDependencies": { "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-bQcqyg/gjULUqTuyUjSAFr6LQGLvtkNtDbJerAtoUn9kGZ0hg5QJiN1PLHMLbeFpe3te1831uq7GFl2ITokGdg=="],
+    "@mui/utils": ["@mui/utils@9.0.1", "http://registry.npmjs.org/@mui/utils/-/utils-9.0.1.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/types": "^9.0.0", "@types/prop-types": "^15.7.15", "clsx": "^2.1.1", "prop-types": "^15.8.1", "react-is": "^19.2.4" }, "peerDependencies": { "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-f3UO3jNN1pYg5zxqXC81Bvv8hx5ACcYc0387382ZI7M5ono1heIwHYLrKsz85myguWdeVKPRZGmDdynWUBjK2g=="],
 
-    "@mui/x-charts": ["@mui/x-charts@9.0.2", "http://registry.npmjs.org/@mui/x-charts/-/x-charts-9.0.2.tgz", { "dependencies": { "@babel/runtime": "^7.28.6", "@mui/utils": "9.0.0", "@mui/x-charts-vendor": "^9.0.0", "@mui/x-internal-gestures": "^9.0.2", "@mui/x-internals": "^9.0.0", "bezier-easing": "^2.1.0", "clsx": "^2.1.1", "prop-types": "^15.8.1", "reselect": "^5.1.1", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "@emotion/react": "^11.9.0", "@emotion/styled": "^11.8.1", "@mui/material": "^7.3.0 || ^9.0.0", "@mui/system": "^7.3.0 || ^9.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react-dom": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@emotion/react", "@emotion/styled"] }, "sha512-bKgjGD+uJbDN/g7tMjVmlNdm+iM4UkCJoYruQmgpQ0l+cip8Kn4kmn1iD//rZ35an+LdWaUZ4MHvMzV76D6EJw=="],
+    "@mui/x-charts": ["@mui/x-charts@9.3.0", "http://registry.npmjs.org/@mui/x-charts/-/x-charts-9.3.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/utils": "9.0.1", "@mui/x-charts-vendor": "^9.0.0", "@mui/x-internal-gestures": "^9.3.0", "@mui/x-internals": "^9.1.0", "bezier-easing": "^2.1.0", "clsx": "^2.1.1", "prop-types": "^15.8.1", "reselect": "^5.1.1", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "@emotion/react": "^11.9.0", "@emotion/styled": "^11.8.1", "@mui/material": "^7.3.0 || ^9.0.0", "@mui/system": "^7.3.0 || ^9.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react-dom": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@emotion/react", "@emotion/styled"] }, "sha512-KyMdNYJvHBmmF4jaBQZMI6gyi6hhOt66Zx4cIOtN/w1JVvCKuvHUruZwHPONVlMKcKwn0AJTo/QV19EGGItGcQ=="],
 
     "@mui/x-charts-vendor": ["@mui/x-charts-vendor@9.0.0", "http://registry.npmjs.org/@mui/x-charts-vendor/-/x-charts-vendor-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.28.6", "@types/d3-array": "^3.2.2", "@types/d3-color": "^3.1.3", "@types/d3-format": "^3.0.4", "@types/d3-interpolate": "^3.0.4", "@types/d3-path": "^3.1.1", "@types/d3-scale": "^4.0.9", "@types/d3-shape": "^3.1.8", "@types/d3-time": "^3.0.4", "@types/d3-time-format": "^4.0.3", "@types/d3-timer": "^3.0.2", "d3-array": "^3.2.4", "d3-color": "^3.1.0", "d3-format": "^3.1.2", "d3-interpolate": "^3.0.1", "d3-path": "^3.1.0", "d3-scale": "^4.0.2", "d3-shape": "^3.2.0", "d3-time": "^3.1.0", "d3-time-format": "^4.1.0", "d3-timer": "^3.0.1", "flatqueue": "^3.0.0", "internmap": "^2.0.3" } }, "sha512-Do91i+fZiNj/4LN5oaGpJoutolzDBDwdfw6tHrx2LKXDMCRlaImCfreLbdbkk7dFsi9fuIP7hWiMV4vDJKPJTA=="],
 
-    "@mui/x-internal-gestures": ["@mui/x-internal-gestures@9.0.2", "http://registry.npmjs.org/@mui/x-internal-gestures/-/x-internal-gestures-9.0.2.tgz", { "dependencies": { "@babel/runtime": "^7.28.6" } }, "sha512-xCp99a7cSb7iH1bj4G524ooMOFe92H8m/rONCUiKyj7LvV1YUGzTfHgJysQgDCZJqHYaW7YAGLvwMUyEMZVzqQ=="],
+    "@mui/x-internal-gestures": ["@mui/x-internal-gestures@9.3.0", "http://registry.npmjs.org/@mui/x-internal-gestures/-/x-internal-gestures-9.3.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2" } }, "sha512-OXgda1tnUKaDF4+6uxERdlyz8uFkhVrqchRbTiT/vWmUtZ3PcicSwp4rqZyaKcoDMgPwCoEEXVBlwZaiLo8Whw=="],
 
-    "@mui/x-internals": ["@mui/x-internals@9.0.0", "http://registry.npmjs.org/@mui/x-internals/-/x-internals-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.28.6", "@mui/utils": "9.0.0", "reselect": "^5.1.1", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "react": "^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-E/4rdg69JjhyybpPGypCjAKSKLLnSdCFM+O6P/nkUg47+qt3uftxQEhjQO53rcn6ahHl6du/uNZ9BLgeY6kYxQ=="],
+    "@mui/x-internals": ["@mui/x-internals@9.1.0", "http://registry.npmjs.org/@mui/x-internals/-/x-internals-9.1.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/utils": "9.0.0", "reselect": "^5.1.1", "use-sync-external-store": "^1.6.0" }, "peerDependencies": { "react": "^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-fVezTa1lU+Hb3y9UMI8D/iWXADhs0I8PaZqoh2LOUXjGEUJmKqwsRD19ZXInZsH2yu+YS0dqYMPDvzjYTTyo+Q=="],
 
-    "@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@1.1.3", "http://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.3.tgz", { "dependencies": { "@tybys/wasm-util": "^0.10.1" }, "peerDependencies": { "@emnapi/core": "^1.7.1", "@emnapi/runtime": "^1.7.1" } }, "sha512-xK9sGVbJWYb08+mTJt3/YV24WxvxpXcXtP6B172paPZ+Ts69Re9dAr7lKwJoeIx8OoeuimEiRZ7umkiUVClmmQ=="],
+    "@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@1.1.4", "http://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.4.tgz", { "dependencies": { "@tybys/wasm-util": "^0.10.1" }, "peerDependencies": { "@emnapi/core": "^1.7.1", "@emnapi/runtime": "^1.7.1" } }, "sha512-3NQNNgA1YSlJb/kMH1ildASP9HW7/7kYnRI2szWJaofaS1hWmbGI4H+d3+22aGzXXN9IJ+n+GiFVcGipJP18ow=="],
 
     "@nodelib/fs.scandir": ["@nodelib/fs.scandir@2.1.5", "http://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz", { "dependencies": { "@nodelib/fs.stat": "2.0.5", "run-parallel": "^1.1.9" } }, "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g=="],
 
@@ -176,7 +177,7 @@
 
     "@nodelib/fs.walk": ["@nodelib/fs.walk@1.2.8", "http://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz", { "dependencies": { "@nodelib/fs.scandir": "2.1.5", "fastq": "^1.6.0" } }, "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg=="],
 
-    "@oxc-project/types": ["@oxc-project/types@0.124.0", "http://registry.npmjs.org/@oxc-project/types/-/types-0.124.0.tgz", {}, "sha512-VBFWMTBvHxS11Z5Lvlr3IWgrwhMTXV+Md+EQF0Xf60+wAdsGFTBx7X7K/hP4pi8N7dcm1RvcHwDxZ16Qx8keUg=="],
+    "@oxc-project/types": ["@oxc-project/types@0.133.0", "http://registry.npmjs.org/@oxc-project/types/-/types-0.133.0.tgz", {}, "sha512-KzkdCd6Uxqnf6l3HOw1xfatAlUURA0g14cvBYFyJ5SaNOQbOUvBr9PKArcPcrNIeRsBdgcUzOGrhKveVpvOIGA=="],
 
     "@parcel/watcher": ["@parcel/watcher@2.5.6", "http://registry.npmjs.org/@parcel/watcher/-/watcher-2.5.6.tgz", { "dependencies": { "detect-libc": "^2.0.3", "is-glob": "^4.0.3", "node-addon-api": "^7.0.0", "picomatch": "^4.0.3" }, "optionalDependencies": { "@parcel/watcher-android-arm64": "2.5.6", "@parcel/watcher-darwin-arm64": "2.5.6", "@parcel/watcher-darwin-x64": "2.5.6", "@parcel/watcher-freebsd-x64": "2.5.6", "@parcel/watcher-linux-arm-glibc": "2.5.6", "@parcel/watcher-linux-arm-musl": "2.5.6", "@parcel/watcher-linux-arm64-glibc": "2.5.6", "@parcel/watcher-linux-arm64-musl": "2.5.6", "@parcel/watcher-linux-x64-glibc": "2.5.6", "@parcel/watcher-linux-x64-musl": "2.5.6", "@parcel/watcher-win32-arm64": "2.5.6", "@parcel/watcher-win32-ia32": "2.5.6", "@parcel/watcher-win32-x64": "2.5.6" } }, "sha512-tmmZ3lQxAe/k/+rNnXQRawJ4NjxO2hqiOLTHvWchtGZULp4RyFeh6aU4XdOYBFe2KE1oShQTv4AblOs2iOrNnQ=="],
 
@@ -210,43 +211,43 @@
 
     "@popperjs/core": ["@popperjs/core@2.11.8", "http://registry.npmjs.org/@popperjs/core/-/core-2.11.8.tgz", {}, "sha512-P1st0aksCrn9sGZhp8GMYwBnQsbvAWsZAX44oXNNvLHGqAOcoVxmjZiohstwQ7SqKnbR47akdNi+uleWD8+g6A=="],
 
-    "@rolldown/binding-android-arm64": ["@rolldown/binding-android-arm64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.0.0-rc.15.tgz", { "os": "android", "cpu": "arm64" }, "sha512-YYe6aWruPZDtHNpwu7+qAHEMbQ/yRl6atqb/AhznLTnD3UY99Q1jE7ihLSahNWkF4EqRPVC4SiR4O0UkLK02tA=="],
+    "@rolldown/binding-android-arm64": ["@rolldown/binding-android-arm64@1.0.3", "http://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.0.3.tgz", { "os": "android", "cpu": "arm64" }, "sha512-454rs7jHngixp/NMxd5srYD57OnzSlZ/eFTETjORQHLwJG1lRtmNOJcBerZlfu4GjKqeq8aCCIQrMdHyhI51Hw=="],
 
-    "@rolldown/binding-darwin-arm64": ["@rolldown/binding-darwin-arm64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.0.0-rc.15.tgz", { "os": "darwin", "cpu": "arm64" }, "sha512-oArR/ig8wNTPYsXL+Mzhs0oxhxfuHRfG7Ikw7jXsw8mYOtk71W0OkF2VEVh699pdmzjPQsTjlD1JIOoHkLP1Fg=="],
+    "@rolldown/binding-darwin-arm64": ["@rolldown/binding-darwin-arm64@1.0.3", "http://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.0.3.tgz", { "os": "darwin", "cpu": "arm64" }, "sha512-PcAhP+ynjURNyy8SKGl5DQP94aGuB/7JrXJb/t7P+hanXvQVMWzUvRRhBAcg/lNRadBhoUPqSoP4xw5tR/KBEA=="],
 
-    "@rolldown/binding-darwin-x64": ["@rolldown/binding-darwin-x64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.0.0-rc.15.tgz", { "os": "darwin", "cpu": "x64" }, "sha512-YzeVqOqjPYvUbJSWJ4EDL8ahbmsIXQpgL3JVipmN+MX0XnXMeWomLN3Fb+nwCmP/jfyqte5I3XRSm7OfQrbyxw=="],
+    "@rolldown/binding-darwin-x64": ["@rolldown/binding-darwin-x64@1.0.3", "http://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.0.3.tgz", { "os": "darwin", "cpu": "x64" }, "sha512-9YpfeUvSE2RS7wysJ81uOZkXJz7f7Q55H2Gvp3VEw/EsahqDtrphrZ0EwDLK5vvKOzaCrBsjF8JmnMLcUt78Gg=="],
 
-    "@rolldown/binding-freebsd-x64": ["@rolldown/binding-freebsd-x64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.0.0-rc.15.tgz", { "os": "freebsd", "cpu": "x64" }, "sha512-9Erhx956jeQ0nNTyif1+QWAXDRD38ZNjr//bSHrt6wDwB+QkAfl2q6Mn1k6OBPerznjRmbM10lgRb1Pli4xZPw=="],
+    "@rolldown/binding-freebsd-x64": ["@rolldown/binding-freebsd-x64@1.0.3", "http://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.0.3.tgz", { "os": "freebsd", "cpu": "x64" }, "sha512-yB1IlAsSNHncV6SCTL27/MVGR5htvQsoGxIv5KMGXALp+Ll1wYsn+x98M9MW7qa+NdSbvrrY7ANI4wLJ0n1e6g=="],
 
-    "@rolldown/binding-linux-arm-gnueabihf": ["@rolldown/binding-linux-arm-gnueabihf@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "arm" }, "sha512-cVwk0w8QbZJGTnP/AHQBs5yNwmpgGYStL88t4UIaqcvYJWBfS0s3oqVLZPwsPU6M0zlW4GqjP0Zq5MnAGwFeGA=="],
+    "@rolldown/binding-linux-arm-gnueabihf": ["@rolldown/binding-linux-arm-gnueabihf@1.0.3", "http://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.0.3.tgz", { "os": "linux", "cpu": "arm" }, "sha512-Yi30IVAAfLUCy2MseFjbB1jAMDl1VMCAas5StnYp8da9+CKvMd2H2cbEjWcw5NPaPqzvYkVIaF1nNUG+b7u/sw=="],
 
-    "@rolldown/binding-linux-arm64-gnu": ["@rolldown/binding-linux-arm64-gnu@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "arm64" }, "sha512-eBZ/u8iAK9SoHGanqe/jrPnY0JvBN6iXbVOsbO38mbz+ZJsaobExAm1Iu+rxa4S1l2FjG0qEZn4Rc6X8n+9M+w=="],
+    "@rolldown/binding-linux-arm64-gnu": ["@rolldown/binding-linux-arm64-gnu@1.0.3", "http://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.0.3.tgz", { "os": "linux", "cpu": "arm64" }, "sha512-jsO7R8To+AdlYgUmN5sHSCZbfhtMBkO0WUx8iORQnPcMMdgr7qM2DQmMwgabs3GhNztdmoKkMKQFHD6DTMCIQw=="],
 
-    "@rolldown/binding-linux-arm64-musl": ["@rolldown/binding-linux-arm64-musl@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "arm64" }, "sha512-ZvRYMGrAklV9PEkgt4LQM6MjQX2P58HPAuecwYObY2DhS2t35R0I810bKi0wmaYORt6m/2Sm+Z+nFgb0WhXNcQ=="],
+    "@rolldown/binding-linux-arm64-musl": ["@rolldown/binding-linux-arm64-musl@1.0.3", "http://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.0.3.tgz", { "os": "linux", "cpu": "arm64" }, "sha512-VWkUHwWriDciit80wleYwKILoR/KMvxh/IdwS/paX+ZgpuRpCrKLUdadJbc0NpBEiyhpYawsJ73j9aCvOH+f7Q=="],
 
-    "@rolldown/binding-linux-ppc64-gnu": ["@rolldown/binding-linux-ppc64-gnu@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "ppc64" }, "sha512-VDpgGBzgfg5hLg+uBpCLoFG5kVvEyafmfxGUV0UHLcL5irxAK7PKNeC2MwClgk6ZAiNhmo9FLhRYgvMmedLtnQ=="],
+    "@rolldown/binding-linux-ppc64-gnu": ["@rolldown/binding-linux-ppc64-gnu@1.0.3", "http://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.0.3.tgz", { "os": "linux", "cpu": "ppc64" }, "sha512-5f1laC0SlIR0yDbFCd8acUhvJIag6N3zC5P7oUPN6wX0aOma+uKJ0wBDH5aq7I1PVI2ttTlhJwzwRIBnLiSGEg=="],
 
-    "@rolldown/binding-linux-s390x-gnu": ["@rolldown/binding-linux-s390x-gnu@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "s390x" }, "sha512-y1uXY3qQWCzcPgRJATPSOUP4tCemh4uBdY7e3EZbVwCJTY3gLJWnQABgeUetvED+bt1FQ01OeZwvhLS2bpNrAQ=="],
+    "@rolldown/binding-linux-s390x-gnu": ["@rolldown/binding-linux-s390x-gnu@1.0.3", "http://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.0.3.tgz", { "os": "linux", "cpu": "s390x" }, "sha512-Iq4ko0r4XsgbrF/LunNgHtAGLRRVE2kXonAXQ/MV0mC6jQpMOhW1SvtZja2EhC/kd05++bP78dsqBeIQyYJ6Yg=="],
 
-    "@rolldown/binding-linux-x64-gnu": ["@rolldown/binding-linux-x64-gnu@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "x64" }, "sha512-023bTPBod7J3Y/4fzAN6QtpkSABR0rigtrwaP+qSEabUh5zf6ELr9Nc7GujaROuPY3uwdSIXWrvhn1KxOvurWA=="],
+    "@rolldown/binding-linux-x64-gnu": ["@rolldown/binding-linux-x64-gnu@1.0.3", "http://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.0.3.tgz", { "os": "linux", "cpu": "x64" }, "sha512-B8m6tD5+/N5FeNQFbKlLA/2yVq9ycQP1SeedyEYYKWBNR3ZQbkvIUcNnDNM03lO1l5F2roiiFJGgvoLLyZXtSg=="],
 
-    "@rolldown/binding-linux-x64-musl": ["@rolldown/binding-linux-x64-musl@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.0.0-rc.15.tgz", { "os": "linux", "cpu": "x64" }, "sha512-witB2O0/hU4CgfOOKUoeFgQ4GktPi1eEbAhaLAIpgD6+ZnhcPkUtPsoKKHRzmOoWPZue46IThdSgdo4XneOLYw=="],
+    "@rolldown/binding-linux-x64-musl": ["@rolldown/binding-linux-x64-musl@1.0.3", "http://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.0.3.tgz", { "os": "linux", "cpu": "x64" }, "sha512-pSdpdUJHkuCxun9LE7jvgUB9qsRgaiyNNCX7m/AvHTcq67AiT/Yhoxvw5zPfhrM8k/BfP8ce/hMOpthKDpEUow=="],
 
-    "@rolldown/binding-openharmony-arm64": ["@rolldown/binding-openharmony-arm64@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.0.0-rc.15.tgz", { "os": "none", "cpu": "arm64" }, "sha512-UCL68NJ0Ud5zRipXZE9dF5PmirzJE4E4BCIOOssEnM7wLDsxjc6Qb0sGDxTNRTP53I6MZpygyCpY8Aa8sPfKPg=="],
+    "@rolldown/binding-openharmony-arm64": ["@rolldown/binding-openharmony-arm64@1.0.3", "http://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.0.3.tgz", { "os": "none", "cpu": "arm64" }, "sha512-OXXS3RKJgX2uLwM+gYyuH5omcH8fL1LJs96pZGgtetVCahON57+d4SJHzTgZiOjxgGkSnpXpOsWuPDGAKAigEg=="],
 
-    "@rolldown/binding-wasm32-wasi": ["@rolldown/binding-wasm32-wasi@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-wasm32-wasi/-/binding-wasm32-wasi-1.0.0-rc.15.tgz", { "dependencies": { "@emnapi/core": "1.9.2", "@emnapi/runtime": "1.9.2", "@napi-rs/wasm-runtime": "^1.1.3" }, "cpu": "none" }, "sha512-ApLruZq/ig+nhaE7OJm4lDjayUnOHVUa77zGeqnqZ9pn0ovdVbbNPerVibLXDmWeUZXjIYIT8V3xkT58Rm9u5Q=="],
+    "@rolldown/binding-wasm32-wasi": ["@rolldown/binding-wasm32-wasi@1.0.3", "http://registry.npmjs.org/@rolldown/binding-wasm32-wasi/-/binding-wasm32-wasi-1.0.3.tgz", { "dependencies": { "@emnapi/core": "1.10.0", "@emnapi/runtime": "1.10.0", "@napi-rs/wasm-runtime": "^1.1.4" }, "cpu": "none" }, "sha512-JTtb8BWFynicNSoPrehsCzBtOKjZ6jhMiPFEmOiuXg1Fl8dn2KHQob+GuPSGR0dryQa1PQJbzjF3dqO/whhjLg=="],
 
-    "@rolldown/binding-win32-arm64-msvc": ["@rolldown/binding-win32-arm64-msvc@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.0.0-rc.15.tgz", { "os": "win32", "cpu": "arm64" }, "sha512-KmoUoU7HnN+Si5YWJigfTws1jz1bKBYDQKdbLspz0UaqjjFkddHsqorgiW1mxcAj88lYUE6NC/zJNwT+SloqtA=="],
+    "@rolldown/binding-win32-arm64-msvc": ["@rolldown/binding-win32-arm64-msvc@1.0.3", "http://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.0.3.tgz", { "os": "win32", "cpu": "arm64" }, "sha512-gEdFFEN70A/jxb2svrWsN3aDL7OUtmvlOy+6fa2jxG8K0wQ1ZbdeLGnidov6Yu5/733dI5ySfzFlQ/cb0bSz1g=="],
 
-    "@rolldown/binding-win32-x64-msvc": ["@rolldown/binding-win32-x64-msvc@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.0.0-rc.15.tgz", { "os": "win32", "cpu": "x64" }, "sha512-3P2A8L+x75qavWLe/Dll3EYBJLQmtkJN8rfh+U/eR3MqMgL/h98PhYI+JFfXuDPgPeCB7iZAKiqii5vqOvnA0g=="],
+    "@rolldown/binding-win32-x64-msvc": ["@rolldown/binding-win32-x64-msvc@1.0.3", "http://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.0.3.tgz", { "os": "win32", "cpu": "x64" }, "sha512-eXB7CHuaQdqmJcc3koCNtNPmT/bj2gc999kUFgBxG8Ac0NdgXc4rkCHhqrgrhN3zddvvvrgzj1e90SuSfmyIXA=="],
 
-    "@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-rc.7", "http://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.7.tgz", {}, "sha512-qujRfC8sFVInYSPPMLQByRh7zhwkGFS4+tyMQ83srV1qrxL4g8E2tyxVVyxd0+8QeBM1mIk9KbWxkegRr76XzA=="],
+    "@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.1", "http://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz", {}, "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw=="],
 
-    "@stylistic/eslint-plugin": ["@stylistic/eslint-plugin@5.10.0", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.9.1", "@typescript-eslint/types": "^8.56.0", "eslint-visitor-keys": "^4.2.1", "espree": "^10.4.0", "estraverse": "^5.3.0", "picomatch": "^4.0.3" }, "peerDependencies": { "eslint": "^9.0.0 || ^10.0.0" } }, "sha512-nPK52ZHvot8Ju/0A4ucSX1dcPV2/1clx0kLcH5wDmrE4naKso7TUC/voUyU1O9OTKTrR6MYip6LP0ogEMQ9jPQ=="],
+    "@stylistic/eslint-plugin": ["@stylistic/eslint-plugin@5.10.0", "http://registry.npmjs.org/@stylistic/eslint-plugin/-/eslint-plugin-5.10.0.tgz", { "dependencies": { "@eslint-community/eslint-utils": "^4.9.1", "@typescript-eslint/types": "^8.56.0", "eslint-visitor-keys": "^4.2.1", "espree": "^10.4.0", "estraverse": "^5.3.0", "picomatch": "^4.0.3" }, "peerDependencies": { "eslint": "^9.0.0 || ^10.0.0" } }, "sha512-nPK52ZHvot8Ju/0A4ucSX1dcPV2/1clx0kLcH5wDmrE4naKso7TUC/voUyU1O9OTKTrR6MYip6LP0ogEMQ9jPQ=="],
 
-    "@tanstack/query-core": ["@tanstack/query-core@5.99.2", "http://registry.npmjs.org/@tanstack/query-core/-/query-core-5.99.2.tgz", {}, "sha512-1HunU0bXVsR1ZJMZbcOPE6VtaBJxsW809RE9xPe4Gz7MlB0GWwQvuTPhMoEmQ/hIzFKJ/DWAuttIe7BOaWx0tA=="],
+    "@tanstack/query-core": ["@tanstack/query-core@5.100.14", "http://registry.npmjs.org/@tanstack/query-core/-/query-core-5.100.14.tgz", {}, "sha512-5X41dGpxgeaHISCRW2oYwcSycZeULZzAunaudXT9ov1KOTj9xwt0CH6hbwqP1/z74ZWF7rYFnDpyYH07XFcZew=="],
 
-    "@tanstack/react-query": ["@tanstack/react-query@5.99.2", "http://registry.npmjs.org/@tanstack/react-query/-/react-query-5.99.2.tgz", { "dependencies": { "@tanstack/query-core": "5.99.2" }, "peerDependencies": { "react": "^18 || ^19" } }, "sha512-vM91UEe45QUS9ED6OklsVL15i8qKcRqNwpWzPTVWvRPRSEgDudDgHpvyTjcdlwHcrKNa80T+xXYcchT2noPnZA=="],
+    "@tanstack/react-query": ["@tanstack/react-query@5.100.14", "http://registry.npmjs.org/@tanstack/react-query/-/react-query-5.100.14.tgz", { "dependencies": { "@tanstack/query-core": "5.100.14" }, "peerDependencies": { "react": "^18 || ^19" } }, "sha512-oOr6aRdSFEwWhzxEkD/9ZcItM3+LjBSkeVmadWKwUssAHTsqd/7bOjWrX4AbvEkoEhgAxzN0Xk6H/aYzXiYBAw=="],
 
     "@tybys/wasm-util": ["@tybys/wasm-util@0.10.1", "http://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.1.tgz", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg=="],
 
@@ -270,7 +271,7 @@
 
     "@types/d3-timer": ["@types/d3-timer@3.0.2", "http://registry.npmjs.org/@types/d3-timer/-/d3-timer-3.0.2.tgz", {}, "sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw=="],
 
-    "@types/esrecurse": ["@types/esrecurse@4.3.1", "", {}, "sha512-xJBAbDifo5hpffDBuHl0Y8ywswbiAp/Wi7Y/GtAgSlZyIABppyurxVueOPE8LUQOxdlgi6Zqce7uoEpqNTeiUw=="],
+    "@types/esrecurse": ["@types/esrecurse@4.3.1", "http://registry.npmjs.org/@types/esrecurse/-/esrecurse-4.3.1.tgz", {}, "sha512-xJBAbDifo5hpffDBuHl0Y8ywswbiAp/Wi7Y/GtAgSlZyIABppyurxVueOPE8LUQOxdlgi6Zqce7uoEpqNTeiUw=="],
 
     "@types/estree": ["@types/estree@1.0.8", "http://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz", {}, "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w=="],
 
@@ -286,7 +287,7 @@
 
     "@typescript-eslint/types": ["@typescript-eslint/types@8.58.1", "http://registry.npmjs.org/@typescript-eslint/types/-/types-8.58.1.tgz", {}, "sha512-io/dV5Aw5ezwzfPBBWLoT+5QfVtP8O7q4Kftjn5azJ88bYyp/ZMCsyW1lpKK46EXJcaYMZ1JtYj+s/7TdzmQMw=="],
 
-    "@vitejs/plugin-react": ["@vitejs/plugin-react@6.0.1", "http://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.0.1.tgz", { "dependencies": { "@rolldown/pluginutils": "1.0.0-rc.7" }, "peerDependencies": { "@rolldown/plugin-babel": "^0.1.7 || ^0.2.0", "babel-plugin-react-compiler": "^1.0.0", "vite": "^8.0.0" }, "optionalPeers": ["@rolldown/plugin-babel", "babel-plugin-react-compiler"] }, "sha512-l9X/E3cDb+xY3SWzlG1MOGt2usfEHGMNIaegaUGFsLkb3RCn/k8/TOXBcab+OndDI4TBtktT8/9BwwW8Vi9KUQ=="],
+    "@vitejs/plugin-react": ["@vitejs/plugin-react@6.0.2", "http://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.0.2.tgz", { "dependencies": { "@rolldown/pluginutils": "^1.0.0" }, "peerDependencies": { "@rolldown/plugin-babel": "^0.1.7 || ^0.2.0", "babel-plugin-react-compiler": "^1.0.0", "vite": "^8.0.0" }, "optionalPeers": ["@rolldown/plugin-babel", "babel-plugin-react-compiler"] }, "sha512-DlSMqo4WhThw4vB8Mpn0Woe9J+Jfq1geJ61AKW0QEgLzGMNwtIMdxbDUzLxcun8W7NbJO0e2Jg/Nxm3cCSVzzg=="],
 
     "acorn": ["acorn@8.16.0", "http://registry.npmjs.org/acorn/-/acorn-8.16.0.tgz", { "bin": { "acorn": "bin/acorn" } }, "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw=="],
 
@@ -318,7 +319,7 @@
 
     "balanced-match": ["balanced-match@1.0.0", "http://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz", {}, "sha512-9Y0g0Q8rmSt+H33DfKv7FOc3v+iRI+o1lbzt8jGcIosYW37IIW/2XVYq5NPdmaD5NQ59Nk26Kl/vZbwW9Fr8vg=="],
 
-    "baseline-browser-mapping": ["baseline-browser-mapping@2.10.20", "", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-1AaXxEPfXT+GvTBJFuy4yXVHWJBXa4OdbIebGN/wX5DlsIkU0+wzGnd2lOzokSk51d5LUmqjgBLRLlypLUqInQ=="],
+    "baseline-browser-mapping": ["baseline-browser-mapping@2.10.20", "http://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.10.20.tgz", { "bin": { "baseline-browser-mapping": "dist/cli.cjs" } }, "sha512-1AaXxEPfXT+GvTBJFuy4yXVHWJBXa4OdbIebGN/wX5DlsIkU0+wzGnd2lOzokSk51d5LUmqjgBLRLlypLUqInQ=="],
 
     "bezier-easing": ["bezier-easing@2.1.0", "http://registry.npmjs.org/bezier-easing/-/bezier-easing-2.1.0.tgz", {}, "sha512-gbIqZ/eslnUFC1tjEvtz0sgx+xTK20wDnYMIA27VA04R7w6xxXQPZDbibjA9DTWZRA2CXtwHykkVzlCaAJAZig=="],
 
@@ -326,7 +327,7 @@
 
     "braces": ["braces@3.0.3", "http://registry.npmjs.org/braces/-/braces-3.0.3.tgz", { "dependencies": { "fill-range": "^7.1.1" } }, "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA=="],
 
-    "browserslist": ["browserslist@4.28.2", "", { "dependencies": { "baseline-browser-mapping": "^2.10.12", "caniuse-lite": "^1.0.30001782", "electron-to-chromium": "^1.5.328", "node-releases": "^2.0.36", "update-browserslist-db": "^1.2.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg=="],
+    "browserslist": ["browserslist@4.28.2", "http://registry.npmjs.org/browserslist/-/browserslist-4.28.2.tgz", { "dependencies": { "baseline-browser-mapping": "^2.10.12", "caniuse-lite": "^1.0.30001782", "electron-to-chromium": "^1.5.328", "node-releases": "^2.0.36", "update-browserslist-db": "^1.2.3" }, "bin": { "browserslist": "cli.js" } }, "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg=="],
 
     "call-bind": ["call-bind@1.0.9", "http://registry.npmjs.org/call-bind/-/call-bind-1.0.9.tgz", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "get-intrinsic": "^1.3.0", "set-function-length": "^1.2.2" } }, "sha512-a/hy+pNsFUTR+Iz8TCJvXudKVLAnz/DyeSUo10I5yvFDQJBFU2s9uqQpoSrJlroHUKoKqzg+epxyP9lqFdzfBQ=="],
 
@@ -336,15 +337,17 @@
 
     "callsites": ["callsites@3.1.0", "http://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz", {}, "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ=="],
 
-    "caniuse-lite": ["caniuse-lite@1.0.30001788", "", {}, "sha512-6q8HFp+lOQtcf7wBK+uEenxymVWkGKkjFpCvw5W25cmMwEDU45p1xQFBQv8JDlMMry7eNxyBaR+qxgmTUZkIRQ=="],
+    "caniuse-lite": ["caniuse-lite@1.0.30001788", "http://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001788.tgz", {}, "sha512-6q8HFp+lOQtcf7wBK+uEenxymVWkGKkjFpCvw5W25cmMwEDU45p1xQFBQv8JDlMMry7eNxyBaR+qxgmTUZkIRQ=="],
 
-    "chokidar": ["chokidar@4.0.3", "http://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz", { "dependencies": { "readdirp": "^4.0.1" } }, "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA=="],
+    "cap-widget": ["cap-widget@0.1.53", "http://registry.npmjs.org/cap-widget/-/cap-widget-0.1.53.tgz", {}, "sha512-sF8exFiaOwQOuTkxAh8mDtA6VU/x3O9L5ZXNRmmAlEjPtOzbczcO0mleLnPq9R/7qM0KcenYl9roqBNUfdTcXw=="],
+
+    "chokidar": ["chokidar@5.0.0", "http://registry.npmjs.org/chokidar/-/chokidar-5.0.0.tgz", { "dependencies": { "readdirp": "^5.0.0" } }, "sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw=="],
 
     "clsx": ["clsx@2.1.1", "http://registry.npmjs.org/clsx/-/clsx-2.1.1.tgz", {}, "sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA=="],
 
     "concat-map": ["concat-map@0.0.1", "http://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz", {}, "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg=="],
 
-    "convert-source-map": ["convert-source-map@2.0.0", "", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="],
+    "convert-source-map": ["convert-source-map@2.0.0", "http://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz", {}, "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg=="],
 
     "cosmiconfig": ["cosmiconfig@7.1.0", "http://registry.npmjs.org/cosmiconfig/-/cosmiconfig-7.1.0.tgz", { "dependencies": { "@types/parse-json": "^4.0.0", "import-fresh": "^3.2.1", "parse-json": "^5.0.0", "path-type": "^4.0.0", "yaml": "^1.10.0" } }, "sha512-AdmX6xUzdNASswsFtmwSt7Vj8po9IuqXm0UXz7QKPuEUmPB4XyjGfaAr2PSuELMwkRMVH1EpIkX5bTZGRB3eCA=="],
 
@@ -394,7 +397,7 @@
 
     "dunder-proto": ["dunder-proto@1.0.1", "http://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz", { "dependencies": { "call-bind-apply-helpers": "^1.0.1", "es-errors": "^1.3.0", "gopd": "^1.2.0" } }, "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A=="],
 
-    "electron-to-chromium": ["electron-to-chromium@1.5.340", "", {}, "sha512-908qahOGocRMinT2nM3ajCEM99H4iPdv84eagPP3FfZy/1ZGeOy2CZYzjhms81ckOPCXPlW7LkY4XpxD8r1DrA=="],
+    "electron-to-chromium": ["electron-to-chromium@1.5.340", "http://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.340.tgz", {}, "sha512-908qahOGocRMinT2nM3ajCEM99H4iPdv84eagPP3FfZy/1ZGeOy2CZYzjhms81ckOPCXPlW7LkY4XpxD8r1DrA=="],
 
     "error-ex": ["error-ex@1.3.4", "http://registry.npmjs.org/error-ex/-/error-ex-1.3.4.tgz", { "dependencies": { "is-arrayish": "^0.2.1" } }, "sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ=="],
 
@@ -414,17 +417,17 @@
 
     "es-to-primitive": ["es-to-primitive@1.3.0", "http://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.3.0.tgz", { "dependencies": { "is-callable": "^1.2.7", "is-date-object": "^1.0.5", "is-symbol": "^1.0.4" } }, "sha512-w+5mJ3GuFL+NjVtJlvydShqE1eN3h3PbI7/5LAsYJP/2qtuMXjfL2LpHSRqo4b4eSF5K/DH1JXKUAHSB2UW50g=="],
 
-    "escalade": ["escalade@3.2.0", "", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="],
+    "escalade": ["escalade@3.2.0", "http://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz", {}, "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA=="],
 
     "escape-string-regexp": ["escape-string-regexp@4.0.0", "http://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz", {}, "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA=="],
 
-    "eslint": ["eslint@10.2.1", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.2", "@eslint/config-array": "^0.23.5", "@eslint/config-helpers": "^0.5.5", "@eslint/core": "^1.2.1", "@eslint/plugin-kit": "^0.7.1", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", "@humanwhocodes/retry": "^0.4.2", "@types/estree": "^1.0.6", "ajv": "^6.14.0", "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^9.1.2", "eslint-visitor-keys": "^5.0.1", "espree": "^11.2.0", "esquery": "^1.7.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", "file-entry-cache": "^8.0.0", "find-up": "^5.0.0", "glob-parent": "^6.0.2", "ignore": "^5.2.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "json-stable-stringify-without-jsonify": "^1.0.1", "minimatch": "^10.2.4", "natural-compare": "^1.4.0", "optionator": "^0.9.3" }, "peerDependencies": { "jiti": "*" }, "optionalPeers": ["jiti"], "bin": { "eslint": "bin/eslint.js" } }, "sha512-wiyGaKsDgqXvF40P8mDwiUp/KQjE1FdrIEJsM8PZ3XCiniTMXS3OHWWUe5FI5agoCnr8x4xPrTDZuxsBlNHl+Q=="],
+    "eslint": ["eslint@10.4.1", "", { "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.2", "@eslint/config-array": "^0.23.5", "@eslint/config-helpers": "^0.6.0", "@eslint/core": "^1.2.1", "@eslint/plugin-kit": "^0.7.2", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", "@humanwhocodes/retry": "^0.4.2", "@types/estree": "^1.0.6", "ajv": "^6.14.0", "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^9.1.2", "eslint-visitor-keys": "^5.0.1", "espree": "^11.2.0", "esquery": "^1.7.0", "esutils": "^2.0.2", "fast-deep-equal": "^3.1.3", "file-entry-cache": "^8.0.0", "find-up": "^5.0.0", "glob-parent": "^6.0.2", "ignore": "^5.2.0", "imurmurhash": "^0.1.4", "is-glob": "^4.0.0", "json-stable-stringify-without-jsonify": "^1.0.1", "minimatch": "^10.2.4", "natural-compare": "^1.4.0", "optionator": "^0.9.3" }, "peerDependencies": { "jiti": "*" }, "optionalPeers": ["jiti"], "bin": { "eslint": "bin/eslint.js" } }, "sha512-AyIKhnOBuOAdueD7RB3xB+YeAWScb9jHsJBgH2Hcde8InP5JYhqrRR6iTMHyTEwgENK54Cp44e4v8BwNhsuHuw=="],
 
     "eslint-plugin-react": ["eslint-plugin-react@7.37.5", "http://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.37.5.tgz", { "dependencies": { "array-includes": "^3.1.8", "array.prototype.findlast": "^1.2.5", "array.prototype.flatmap": "^1.3.3", "array.prototype.tosorted": "^1.1.4", "doctrine": "^2.1.0", "es-iterator-helpers": "^1.2.1", "estraverse": "^5.3.0", "hasown": "^2.0.2", "jsx-ast-utils": "^2.4.1 || ^3.0.0", "minimatch": "^3.1.2", "object.entries": "^1.1.9", "object.fromentries": "^2.0.8", "object.values": "^1.2.1", "prop-types": "^15.8.1", "resolve": "^2.0.0-next.5", "semver": "^6.3.1", "string.prototype.matchall": "^4.0.12", "string.prototype.repeat": "^1.0.0" }, "peerDependencies": { "eslint": "^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9.7" } }, "sha512-Qteup0SqU15kdocexFNAJMvCJEfa2xUKNV4CC1xsVMrIIqEy3SQ/rqyxCWNzfrd3/ldy6HMlD2e0JDVpDg2qIA=="],
 
-    "eslint-plugin-react-hooks": ["eslint-plugin-react-hooks@7.1.1", "", { "dependencies": { "@babel/core": "^7.24.4", "@babel/parser": "^7.24.4", "hermes-parser": "^0.25.1", "zod": "^3.25.0 || ^4.0.0", "zod-validation-error": "^3.5.0 || ^4.0.0" }, "peerDependencies": { "eslint": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0 || ^9.0.0 || ^10.0.0" } }, "sha512-f2I7Gw6JbvCexzIInuSbZpfdQ44D7iqdWX01FKLvrPgqxoE7oMj8clOfto8U6vYiz4yd5oKu39rRSVOe1zRu0g=="],
+    "eslint-plugin-react-hooks": ["eslint-plugin-react-hooks@7.1.1", "http://registry.npmjs.org/eslint-plugin-react-hooks/-/eslint-plugin-react-hooks-7.1.1.tgz", { "dependencies": { "@babel/core": "^7.24.4", "@babel/parser": "^7.24.4", "hermes-parser": "^0.25.1", "zod": "^3.25.0 || ^4.0.0", "zod-validation-error": "^3.5.0 || ^4.0.0" }, "peerDependencies": { "eslint": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0-0 || ^9.0.0 || ^10.0.0" } }, "sha512-f2I7Gw6JbvCexzIInuSbZpfdQ44D7iqdWX01FKLvrPgqxoE7oMj8clOfto8U6vYiz4yd5oKu39rRSVOe1zRu0g=="],
 
-    "eslint-scope": ["eslint-scope@9.1.2", "", { "dependencies": { "@types/esrecurse": "^4.3.1", "@types/estree": "^1.0.8", "esrecurse": "^4.3.0", "estraverse": "^5.2.0" } }, "sha512-xS90H51cKw0jltxmvmHy2Iai1LIqrfbw57b79w/J7MfvDfkIkFZ+kj6zC3BjtUwh150HsSSdxXZcsuv72miDFQ=="],
+    "eslint-scope": ["eslint-scope@9.1.2", "http://registry.npmjs.org/eslint-scope/-/eslint-scope-9.1.2.tgz", { "dependencies": { "@types/esrecurse": "^4.3.1", "@types/estree": "^1.0.8", "esrecurse": "^4.3.0", "estraverse": "^5.2.0" } }, "sha512-xS90H51cKw0jltxmvmHy2Iai1LIqrfbw57b79w/J7MfvDfkIkFZ+kj6zC3BjtUwh150HsSSdxXZcsuv72miDFQ=="],
 
     "eslint-visitor-keys": ["eslint-visitor-keys@4.2.1", "http://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-4.2.1.tgz", {}, "sha512-Uhdk5sfqcee/9H/rCOJikYz67o0a2Tw2hGRPOG2Y1R2dg7brRe1uG0yaNQDHu+TO/uQPF/5eCapvYSmHUjt7JQ=="],
 
@@ -476,7 +479,7 @@
 
     "generator-function": ["generator-function@2.0.1", "http://registry.npmjs.org/generator-function/-/generator-function-2.0.1.tgz", {}, "sha512-SFdFmIJi+ybC0vjlHN0ZGVGHc3lgE0DxPAT0djjVg+kjOnSqclqmj0KQ7ykTOLP6YxoqOvuAODGdcHJn+43q3g=="],
 
-    "gensync": ["gensync@1.0.0-beta.2", "", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],
+    "gensync": ["gensync@1.0.0-beta.2", "http://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz", {}, "sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg=="],
 
     "get-intrinsic": ["get-intrinsic@1.3.0", "http://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz", { "dependencies": { "call-bind-apply-helpers": "^1.0.2", "es-define-property": "^1.0.1", "es-errors": "^1.3.0", "es-object-atoms": "^1.1.1", "function-bind": "^1.1.2", "get-proto": "^1.0.1", "gopd": "^1.2.0", "has-symbols": "^1.1.0", "hasown": "^2.0.2", "math-intrinsics": "^1.1.0" } }, "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ=="],
 
@@ -486,7 +489,7 @@
 
     "glob-parent": ["glob-parent@6.0.2", "http://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz", { "dependencies": { "is-glob": "^4.0.3" } }, "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A=="],
 
-    "globals": ["globals@17.5.0", "", {}, "sha512-qoV+HK2yFl/366t2/Cb3+xxPUo5BuMynomoDmiaZBIdbs+0pYbjfZU+twLhGKp4uCZ/+NbtpVepH5bGCxRyy2g=="],
+    "globals": ["globals@17.6.0", "", {}, "sha512-sepffkT8stwnIYbsMBpoCHJuJM5l98FUF2AnE07hfvE0m/qp3R586hw4jF4uadbhvg1ooIdzuu7CsfD2jzCaNA=="],
 
     "globalthis": ["globalthis@1.0.4", "http://registry.npmjs.org/globalthis/-/globalthis-1.0.4.tgz", { "dependencies": { "define-properties": "^1.2.1", "gopd": "^1.0.1" } }, "sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ=="],
 
@@ -504,9 +507,9 @@
 
     "hasown": ["hasown@2.0.2", "http://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz", { "dependencies": { "function-bind": "^1.1.2" } }, "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ=="],
 
-    "hermes-estree": ["hermes-estree@0.25.1", "", {}, "sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw=="],
+    "hermes-estree": ["hermes-estree@0.25.1", "http://registry.npmjs.org/hermes-estree/-/hermes-estree-0.25.1.tgz", {}, "sha512-0wUoCcLp+5Ev5pDW2OriHC2MJCbwLwuRx+gAqMTOkGKJJiBCLjtrvy4PWUGn6MIVefecRpzoOZ/UV6iGdOr+Cw=="],
 
-    "hermes-parser": ["hermes-parser@0.25.1", "", { "dependencies": { "hermes-estree": "0.25.1" } }, "sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA=="],
+    "hermes-parser": ["hermes-parser@0.25.1", "http://registry.npmjs.org/hermes-parser/-/hermes-parser-0.25.1.tgz", { "dependencies": { "hermes-estree": "0.25.1" } }, "sha512-6pEjquH3rqaI6cYAXYPcz9MS4rY6R4ngRgrgfDshRptUZIc3lw0MCIJIGDj9++mfySOuPTHB4nrSW99BCvOPIA=="],
 
     "hoist-non-react-statics": ["hoist-non-react-statics@3.3.2", "http://registry.npmjs.org/hoist-non-react-statics/-/hoist-non-react-statics-3.3.2.tgz", { "dependencies": { "react-is": "^16.7.0" } }, "sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw=="],
 
@@ -596,7 +599,7 @@
 
     "json-stable-stringify-without-jsonify": ["json-stable-stringify-without-jsonify@1.0.1", "http://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz", {}, "sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw=="],
 
-    "json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
+    "json5": ["json5@2.2.3", "http://registry.npmjs.org/json5/-/json5-2.2.3.tgz", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],
 
     "jsx-ast-utils": ["jsx-ast-utils@3.3.5", "http://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-3.3.5.tgz", { "dependencies": { "array-includes": "^3.1.6", "array.prototype.flat": "^1.3.1", "object.assign": "^4.1.4", "object.values": "^1.1.6" } }, "sha512-ZZow9HBI5O6EPgSJLUb8n2NKgmVWTwCvHGwFuJlMjvLFqlGG6pjirPhtdsseaLZjSibD8eegzmYpUZwoIlj2cQ=="],
 
@@ -636,7 +639,7 @@
 
     "loose-envify": ["loose-envify@1.4.0", "http://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz", { "dependencies": { "js-tokens": "^3.0.0 || ^4.0.0" }, "bin": "cli.js" }, "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
 
-    "lru-cache": ["lru-cache@5.1.1", "", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
+    "lru-cache": ["lru-cache@5.1.1", "http://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],
 
     "math-intrinsics": ["math-intrinsics@1.1.0", "http://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", {}, "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g=="],
 
@@ -650,7 +653,7 @@
 
     "ms": ["ms@2.1.3", "http://registry.npmjs.org/ms/-/ms-2.1.3.tgz", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
 
-    "nanoid": ["nanoid@3.3.11", "http://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w=="],
+    "nanoid": ["nanoid@3.3.12", "http://registry.npmjs.org/nanoid/-/nanoid-3.3.12.tgz", { "bin": { "nanoid": "bin/nanoid.cjs" } }, "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ=="],
 
     "natural-compare": ["natural-compare@1.4.0", "http://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz", {}, "sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw=="],
 
@@ -658,7 +661,7 @@
 
     "node-exports-info": ["node-exports-info@1.6.0", "http://registry.npmjs.org/node-exports-info/-/node-exports-info-1.6.0.tgz", { "dependencies": { "array.prototype.flatmap": "^1.3.3", "es-errors": "^1.3.0", "object.entries": "^1.1.9", "semver": "^6.3.1" } }, "sha512-pyFS63ptit/P5WqUkt+UUfe+4oevH+bFeIiPPdfb0pFeYEu/1ELnJu5l+5EcTKYL5M7zaAa7S8ddywgXypqKCw=="],
 
-    "node-releases": ["node-releases@2.0.37", "", {}, "sha512-1h5gKZCF+pO/o3Iqt5Jp7wc9rH3eJJ0+nh/CIoiRwjRxde/hAHyLPXYN4V3CqKAbiZPSeJFSWHmJsbkicta0Eg=="],
+    "node-releases": ["node-releases@2.0.37", "http://registry.npmjs.org/node-releases/-/node-releases-2.0.37.tgz", {}, "sha512-1h5gKZCF+pO/o3Iqt5Jp7wc9rH3eJJ0+nh/CIoiRwjRxde/hAHyLPXYN4V3CqKAbiZPSeJFSWHmJsbkicta0Eg=="],
 
     "object-assign": ["object-assign@4.1.1", "http://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz", {}, "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg=="],
 
@@ -700,7 +703,7 @@
 
     "possible-typed-array-names": ["possible-typed-array-names@1.1.0", "http://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz", {}, "sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg=="],
 
-    "postcss": ["postcss@8.5.9", "http://registry.npmjs.org/postcss/-/postcss-8.5.9.tgz", { "dependencies": { "nanoid": "^3.3.11", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-7a70Nsot+EMX9fFU3064K/kdHWZqGVY+BADLyXc8Dfv+mTLLVl6JzJpPaCZ2kQL9gIJvKXSLMHhqdRRjwQeFtw=="],
+    "postcss": ["postcss@8.5.15", "http://registry.npmjs.org/postcss/-/postcss-8.5.15.tgz", { "dependencies": { "nanoid": "^3.3.12", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" } }, "sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A=="],
 
     "prelude-ls": ["prelude-ls@1.2.1", "http://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz", {}, "sha512-vkcDPrRZo1QZLbn5RLGPpg/WmIQ65qoWWhcGKf/b5eplkkarX0m9z8ppCat4mlOqUsWpyNuYgO3VRyrYHSzX5g=="],
 
@@ -710,15 +713,15 @@
 
     "queue-microtask": ["queue-microtask@1.2.3", "http://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz", {}, "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A=="],
 
-    "react": ["react@19.2.5", "http://registry.npmjs.org/react/-/react-19.2.5.tgz", {}, "sha512-llUJLzz1zTUBrskt2pwZgLq59AemifIftw4aB7JxOqf1HY2FDaGDxgwpAPVzHU1kdWabH7FauP4i1oEeer2WCA=="],
+    "react": ["react@19.2.7", "http://registry.npmjs.org/react/-/react-19.2.7.tgz", {}, "sha512-HNe9WslTbXmFK8o8cmwgAeJFSBvt1bPdHCVKtaaV+WlAN36mpT4hcRpwbf3fY56ar2oIXzsBpOAiIRHAdY0OlQ=="],
 
-    "react-dom": ["react-dom@19.2.5", "http://registry.npmjs.org/react-dom/-/react-dom-19.2.5.tgz", { "dependencies": { "scheduler": "^0.27.0" }, "peerDependencies": { "react": "^19.2.5" } }, "sha512-J5bAZz+DXMMwW/wV3xzKke59Af6CHY7G4uYLN1OvBcKEsWOs4pQExj86BBKamxl/Ik5bx9whOrvBlSDfWzgSag=="],
+    "react-dom": ["react-dom@19.2.7", "http://registry.npmjs.org/react-dom/-/react-dom-19.2.7.tgz", { "dependencies": { "scheduler": "^0.27.0" }, "peerDependencies": { "react": "^19.2.7" } }, "sha512-t0BRVXvbiE/o20Hfw669rLbMCDWtYZLvmJigy2f0MxsXF+71pxhR3xOkspmsO8h3ZlNzyibAmtCa3l4lYKk6gQ=="],
 
     "react-is": ["react-is@19.2.5", "http://registry.npmjs.org/react-is/-/react-is-19.2.5.tgz", {}, "sha512-Dn0t8IQhCmeIT3wu+Apm1/YVsJXsGWi6k4sPdnBIdqMVtHtv0IGi6dcpNpNkNac0zB2uUAqNX3MHzN8c+z2rwQ=="],
 
     "react-transition-group": ["react-transition-group@4.4.5", "http://registry.npmjs.org/react-transition-group/-/react-transition-group-4.4.5.tgz", { "dependencies": { "@babel/runtime": "^7.5.5", "dom-helpers": "^5.0.1", "loose-envify": "^1.4.0", "prop-types": "^15.6.2" }, "peerDependencies": { "react": ">=16.6.0", "react-dom": ">=16.6.0" } }, "sha512-pZcd1MCJoiKiBR2NRxeCRg13uCXbydPnmB4EOeRrY7480qNWO8IIgQG6zlDkm6uRMsURXPuKq0GWtiM59a5Q6g=="],
 
-    "readdirp": ["readdirp@4.1.2", "http://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz", {}, "sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg=="],
+    "readdirp": ["readdirp@5.0.0", "http://registry.npmjs.org/readdirp/-/readdirp-5.0.0.tgz", {}, "sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ=="],
 
     "reflect.getprototypeof": ["reflect.getprototypeof@1.0.10", "http://registry.npmjs.org/reflect.getprototypeof/-/reflect.getprototypeof-1.0.10.tgz", { "dependencies": { "call-bind": "^1.0.8", "define-properties": "^1.2.1", "es-abstract": "^1.23.9", "es-errors": "^1.3.0", "es-object-atoms": "^1.0.0", "get-intrinsic": "^1.2.7", "get-proto": "^1.0.1", "which-builtin-type": "^1.2.1" } }, "sha512-00o4I+DVrefhv+nX0ulyi3biSHCPDe+yLv5o/p6d/UVlirijB8E16FtfwSAi4g3tcqrQ4lRAqQSoFEZJehYEcw=="],
 
@@ -732,7 +735,7 @@
 
     "reusify": ["reusify@1.1.0", "http://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz", {}, "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw=="],
 
-    "rolldown": ["rolldown@1.0.0-rc.15", "http://registry.npmjs.org/rolldown/-/rolldown-1.0.0-rc.15.tgz", { "dependencies": { "@oxc-project/types": "=0.124.0", "@rolldown/pluginutils": "1.0.0-rc.15" }, "optionalDependencies": { "@rolldown/binding-android-arm64": "1.0.0-rc.15", "@rolldown/binding-darwin-arm64": "1.0.0-rc.15", "@rolldown/binding-darwin-x64": "1.0.0-rc.15", "@rolldown/binding-freebsd-x64": "1.0.0-rc.15", "@rolldown/binding-linux-arm-gnueabihf": "1.0.0-rc.15", "@rolldown/binding-linux-arm64-gnu": "1.0.0-rc.15", "@rolldown/binding-linux-arm64-musl": "1.0.0-rc.15", "@rolldown/binding-linux-ppc64-gnu": "1.0.0-rc.15", "@rolldown/binding-linux-s390x-gnu": "1.0.0-rc.15", "@rolldown/binding-linux-x64-gnu": "1.0.0-rc.15", "@rolldown/binding-linux-x64-musl": "1.0.0-rc.15", "@rolldown/binding-openharmony-arm64": "1.0.0-rc.15", "@rolldown/binding-wasm32-wasi": "1.0.0-rc.15", "@rolldown/binding-win32-arm64-msvc": "1.0.0-rc.15", "@rolldown/binding-win32-x64-msvc": "1.0.0-rc.15" }, "bin": { "rolldown": "bin/cli.mjs" } }, "sha512-Ff31guA5zT6WjnGp0SXw76X6hzGRk/OQq2hE+1lcDe+lJdHSgnSX6nK3erbONHyCbpSj9a9E+uX/OvytZoWp2g=="],
+    "rolldown": ["rolldown@1.0.3", "http://registry.npmjs.org/rolldown/-/rolldown-1.0.3.tgz", { "dependencies": { "@oxc-project/types": "=0.133.0", "@rolldown/pluginutils": "^1.0.0" }, "optionalDependencies": { "@rolldown/binding-android-arm64": "1.0.3", "@rolldown/binding-darwin-arm64": "1.0.3", "@rolldown/binding-darwin-x64": "1.0.3", "@rolldown/binding-freebsd-x64": "1.0.3", "@rolldown/binding-linux-arm-gnueabihf": "1.0.3", "@rolldown/binding-linux-arm64-gnu": "1.0.3", "@rolldown/binding-linux-arm64-musl": "1.0.3", "@rolldown/binding-linux-ppc64-gnu": "1.0.3", "@rolldown/binding-linux-s390x-gnu": "1.0.3", "@rolldown/binding-linux-x64-gnu": "1.0.3", "@rolldown/binding-linux-x64-musl": "1.0.3", "@rolldown/binding-openharmony-arm64": "1.0.3", "@rolldown/binding-wasm32-wasi": "1.0.3", "@rolldown/binding-win32-arm64-msvc": "1.0.3", "@rolldown/binding-win32-x64-msvc": "1.0.3" }, "bin": { "rolldown": "./bin/cli.mjs" } }, "sha512-i00lAJ2ks1BYr7rjNjKC7BcqAS7nVfiT3QX1SI5aY+AFHblCmaUf9OE9dbdzDvW6dJxbi2ZCZiy9v3CcwOiX3g=="],
 
     "run-parallel": ["run-parallel@1.2.0", "http://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz", { "dependencies": { "queue-microtask": "^1.2.2" } }, "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA=="],
 
@@ -742,7 +745,7 @@
 
     "safe-regex-test": ["safe-regex-test@1.1.0", "http://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.1.0.tgz", { "dependencies": { "call-bound": "^1.0.2", "es-errors": "^1.3.0", "is-regex": "^1.2.1" } }, "sha512-x/+Cz4YrimQxQccJf5mKEbIa1NzeCRNI5Ecl/ekmlYaampdNLPalVyIcCZNNH3MvmqBugV5TMYZXv0ljslUlaw=="],
 
-    "sass": ["sass@1.99.0", "http://registry.npmjs.org/sass/-/sass-1.99.0.tgz", { "dependencies": { "chokidar": "^4.0.0", "immutable": "^5.1.5", "source-map-js": ">=0.6.2 <2.0.0" }, "optionalDependencies": { "@parcel/watcher": "^2.4.1" }, "bin": "sass.js" }, "sha512-kgW13M54DUB7IsIRM5LvJkNlpH+WhMpooUcaWGFARkF1Tc82v9mIWkCbCYf+MBvpIUBSeSOTilpZjEPr2VYE6Q=="],
+    "sass": ["sass@1.100.0", "http://registry.npmjs.org/sass/-/sass-1.100.0.tgz", { "dependencies": { "chokidar": "^5.0.0", "immutable": "^5.1.5", "source-map-js": ">=0.6.2 <2.0.0" }, "optionalDependencies": { "@parcel/watcher": "^2.4.1" }, "bin": { "sass": "sass.js" } }, "sha512-B5j0rYMlinhhOo9tjQebMVVn0TfyXAF+wB3b2ggZUuJ/is/Y+7+JGjirAMxHZ9Z3hIP98NPfamlAkBHa1lAaXQ=="],
 
     "scheduler": ["scheduler@0.27.0", "http://registry.npmjs.org/scheduler/-/scheduler-0.27.0.tgz", {}, "sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q=="],
 
@@ -790,7 +793,7 @@
 
     "supports-preserve-symlinks-flag": ["supports-preserve-symlinks-flag@1.0.0", "http://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz", {}, "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w=="],
 
-    "tinyglobby": ["tinyglobby@0.2.16", "http://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.16.tgz", { "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.4" } }, "sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg=="],
+    "tinyglobby": ["tinyglobby@0.2.17", "http://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz", { "dependencies": { "fdir": "^6.5.0", "picomatch": "^4.0.4" } }, "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g=="],
 
     "to-regex-range": ["to-regex-range@5.0.1", "http://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz", { "dependencies": { "is-number": "^7.0.0" } }, "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ=="],
 
@@ -810,13 +813,13 @@
 
     "unbox-primitive": ["unbox-primitive@1.1.0", "http://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz", { "dependencies": { "call-bound": "^1.0.3", "has-bigints": "^1.0.2", "has-symbols": "^1.1.0", "which-boxed-primitive": "^1.1.1" } }, "sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw=="],
 
-    "update-browserslist-db": ["update-browserslist-db@1.2.3", "", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w=="],
+    "update-browserslist-db": ["update-browserslist-db@1.2.3", "http://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz", { "dependencies": { "escalade": "^3.2.0", "picocolors": "^1.1.1" }, "peerDependencies": { "browserslist": ">= 4.21.0" }, "bin": { "update-browserslist-db": "cli.js" } }, "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w=="],
 
     "uri-js": ["uri-js@4.4.1", "http://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz", { "dependencies": { "punycode": "^2.1.0" } }, "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg=="],
 
     "use-sync-external-store": ["use-sync-external-store@1.6.0", "http://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.6.0.tgz", { "peerDependencies": { "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" } }, "sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w=="],
 
-    "vite": ["vite@8.0.8", "http://registry.npmjs.org/vite/-/vite-8.0.8.tgz", { "dependencies": { "lightningcss": "^1.32.0", "picomatch": "^4.0.4", "postcss": "^8.5.8", "rolldown": "1.0.0-rc.15", "tinyglobby": "^0.2.15" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "@vitejs/devtools": "^0.1.0", "esbuild": "^0.27.0 || ^0.28.0", "jiti": ">=1.21.0", "less": "^4.0.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "@vitejs/devtools", "esbuild", "jiti", "less", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-dbU7/iLVa8KZALJyLOBOQ88nOXtNG8vxKuOT4I2mD+Ya70KPceF4IAmDsmU0h1Qsn5bPrvsY9HJstCRh3hG6Uw=="],
+    "vite": ["vite@8.0.16", "http://registry.npmjs.org/vite/-/vite-8.0.16.tgz", { "dependencies": { "lightningcss": "^1.32.0", "picomatch": "^4.0.4", "postcss": "^8.5.15", "rolldown": "1.0.3", "tinyglobby": "^0.2.17" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "peerDependencies": { "@types/node": "^20.19.0 || >=22.12.0", "@vitejs/devtools": "^0.1.18", "esbuild": "^0.27.0 || ^0.28.0", "jiti": ">=1.21.0", "less": "^4.0.0", "sass": "^1.70.0", "sass-embedded": "^1.70.0", "stylus": ">=0.54.8", "sugarss": "^5.0.0", "terser": "^5.16.0", "tsx": "^4.8.1", "yaml": "^2.4.2" }, "optionalPeers": ["@types/node", "@vitejs/devtools", "esbuild", "jiti", "less", "sass", "sass-embedded", "stylus", "sugarss", "terser", "tsx", "yaml"], "bin": { "vite": "bin/vite.js" } }, "sha512-h9bXPmJichP5fLmVQo3PyaGSDE2n3aPuomeAlVRm0JLmt4rY6zmPKd59HYI4LNW8oTK7tlTsuC7l/m7awx9Jcw=="],
 
     "vite-plugin-symfony": ["vite-plugin-symfony@8.2.4", "http://registry.npmjs.org/vite-plugin-symfony/-/vite-plugin-symfony-8.2.4.tgz", { "dependencies": { "debug": "^4.4.1", "fast-glob": "^3.3.3", "picocolors": "^1.1.1", "sirv": "^3.0.1" }, "peerDependencies": { "vite": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0" } }, "sha512-ph98EMPx8FhA6QIp43ZiK0zjODV9jumB7EHXfZEhRme2lo9oBa9sAXCNCCIvdVk/m9EWkNZpcRBjequjXZiSuA=="],
 
@@ -832,15 +835,15 @@
 
     "word-wrap": ["word-wrap@1.2.5", "http://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz", {}, "sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA=="],
 
-    "yallist": ["yallist@3.1.1", "", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
+    "yallist": ["yallist@3.1.1", "http://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz", {}, "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g=="],
 
     "yaml": ["yaml@1.10.3", "http://registry.npmjs.org/yaml/-/yaml-1.10.3.tgz", {}, "sha512-vIYeF1u3CjlhAFekPPAk2h/Kv4T3mAkMox5OymRiJQB0spDP10LHvt+K7G9Ny6NuuMAb25/6n1qyUjAcGNf/AA=="],
 
     "yocto-queue": ["yocto-queue@0.1.0", "http://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz", {}, "sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q=="],
 
-    "zod": ["zod@4.3.6", "", {}, "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg=="],
+    "zod": ["zod@4.3.6", "http://registry.npmjs.org/zod/-/zod-4.3.6.tgz", {}, "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg=="],
 
-    "zod-validation-error": ["zod-validation-error@4.0.2", "", { "peerDependencies": { "zod": "^3.25.0 || ^4.0.0" } }, "sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ=="],
+    "zod-validation-error": ["zod-validation-error@4.0.2", "http://registry.npmjs.org/zod-validation-error/-/zod-validation-error-4.0.2.tgz", { "peerDependencies": { "zod": "^3.25.0 || ^4.0.0" } }, "sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ=="],
 
     "@emotion/babel-plugin/convert-source-map": ["convert-source-map@1.9.0", "http://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz", {}, "sha512-ASFBup0Mz1uyiIjANan1jzLQami9z1PoYSZCiiYW2FczPbenXc45FZdBZLzOT+r6+iciuEModtmCti+hjaAk0A=="],
 
@@ -850,11 +853,13 @@
 
     "@eslint/eslintrc/globals": ["globals@14.0.0", "http://registry.npmjs.org/globals/-/globals-14.0.0.tgz", {}, "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ=="],
 
+    "@mui/x-internals/@mui/utils": ["@mui/utils@9.0.0", "http://registry.npmjs.org/@mui/utils/-/utils-9.0.0.tgz", { "dependencies": { "@babel/runtime": "^7.29.2", "@mui/types": "^9.0.0", "@types/prop-types": "^15.7.15", "clsx": "^2.1.1", "prop-types": "^15.8.1", "react-is": "^19.2.4" }, "peerDependencies": { "@types/react": "^17.0.0 || ^18.0.0 || ^19.0.0", "react": "^17.0.0 || ^18.0.0 || ^19.0.0" }, "optionalPeers": ["@types/react"] }, "sha512-bQcqyg/gjULUqTuyUjSAFr6LQGLvtkNtDbJerAtoUn9kGZ0hg5QJiN1PLHMLbeFpe3te1831uq7GFl2ITokGdg=="],
+
     "babel-plugin-macros/resolve": ["resolve@1.22.12", "http://registry.npmjs.org/resolve/-/resolve-1.22.12.tgz", { "dependencies": { "es-errors": "^1.3.0", "is-core-module": "^2.16.1", "path-parse": "^1.0.7", "supports-preserve-symlinks-flag": "^1.0.0" }, "bin": { "resolve": "bin/resolve" } }, "sha512-TyeJ1zif53BPfHootBGwPRYT1RUt6oGWsaQr8UyZW/eAm9bKoijtvruSDEmZHm92CwS9nj7/fWttqPCgzep8CA=="],
 
     "eslint/eslint-visitor-keys": ["eslint-visitor-keys@5.0.1", "http://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-5.0.1.tgz", {}, "sha512-tD40eHxA35h0PEIZNeIjkHoDR4YjjJp34biM0mDvplBe//mB+IHCqHDGV7pxF+7MklTvighcCPPZC7ynWyjdTA=="],
 
-    "eslint/espree": ["espree@11.2.0", "", { "dependencies": { "acorn": "^8.16.0", "acorn-jsx": "^5.3.2", "eslint-visitor-keys": "^5.0.1" } }, "sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw=="],
+    "eslint/espree": ["espree@11.2.0", "http://registry.npmjs.org/espree/-/espree-11.2.0.tgz", { "dependencies": { "acorn": "^8.16.0", "acorn-jsx": "^5.3.2", "eslint-visitor-keys": "^5.0.1" } }, "sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw=="],
 
     "eslint/minimatch": ["minimatch@10.2.5", "http://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz", { "dependencies": { "brace-expansion": "^5.0.5" } }, "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg=="],
 
@@ -866,8 +871,6 @@
 
     "prop-types/react-is": ["react-is@16.13.1", "http://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz", {}, "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ=="],
 
-    "rolldown/@rolldown/pluginutils": ["@rolldown/pluginutils@1.0.0-rc.15", "http://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.15.tgz", {}, "sha512-UromN0peaE53IaBRe9W7CjrZgXl90fqGpK+mIZbA3qSTeYqg3pqpROBdIPvOG3F5ereDHNwoHBI2e50n1BDr1g=="],
-
     "@eslint/config-array/minimatch/brace-expansion": ["brace-expansion@5.0.5", "http://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ=="],
 
     "eslint/minimatch/brace-expansion": ["brace-expansion@5.0.5", "http://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz", { "dependencies": { "balanced-match": "^4.0.2" } }, "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ=="],

compose.yaml

@@ -25,8 +25,8 @@ services:
       MERCURE_JWT_TOKEN: ${MERCURE_JWT_TOKEN}
       MERCURE_SUBSCRIBER_JWT: ${MERCURE_SUBSCRIBER_JWT}
       MAILER_DSN: smtp://mail:25?verify_peer=0
-      RECAPTCHA_SITE_KEY: ${RECAPTCHA_SITE_KEY}
-      RECAPTCHA_SECRET_KEY: ${RECAPTCHA_SECRET_KEY}
+      CAP_API_ENDPOINT: ${CAP_API_ENDPOINT}
+      CAP_SECRET_KEY: ${CAP_SECRET_KEY}
       WEBAUTHN_RP_ID: ${WEBAUTHN_RP_ID:-localhost}
       WEBAUTHN_ORIGIN: ${WEBAUTHN_ORIGIN:-https://localhost}
       MINIO_ROOT_USER: ${MINIO_ROOT_USER}
@@ -105,7 +105,7 @@ services:
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
       POSTGRES_DB: ${POSTGRES_DB}
     volumes:
-      - postgres_data:/var/lib/postgresql/data
+      - postgres_data:/var/lib/postgresql
     healthcheck:
       test: [ "CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}" ]
       interval: 5s
@@ -121,5 +121,3 @@ volumes:
   caddy_config:
   postfix_spool:
   minio_data:
-
-

composer.json

@@ -33,9 +33,9 @@
     "symfony/framework-bundle": "7.4.*",
     "symfony/http-client": "7.4.*",
     "symfony/mailer": "7.4.*",
-    "symfony/mercure": "^0.6",
-    "symfony/mercure-bundle": "*",
-    "symfony/monolog-bundle": "^3.8",
+    "symfony/mercure": "^0.7",
+    "symfony/mercure-bundle": "^0.4",
+    "symfony/monolog-bundle": "^4.0",
     "symfony/security-bundle": "7.4.*",
     "symfony/translation": "7.4.*",
     "symfony/twig-bundle": "7.4.*",
@@ -44,11 +44,16 @@
     "web-auth/webauthn-framework": "^5.2"
   },
   "require-dev": {
+    "dama/doctrine-test-bundle": "^8.6",
+    "phpunit/phpunit": "^13.1",
     "roave/security-advisories": "dev-master",
+    "symfony/browser-kit": "7.4.*",
+    "symfony/css-selector": "7.4.*",
     "symfony/dotenv": "7.4.*",
     "symfony/maker-bundle": "^1.5",
     "symfony/stopwatch": "7.4.*",
-    "symfony/web-profiler-bundle": "7.4.*"
+    "symfony/web-profiler-bundle": "7.4.*",
+    "zenstruck/foundry": "^2.9"
   },
   "config": {
     "preferred-install": {

config/bundles.php

@@ -16,4 +16,6 @@ return [
     Scheb\TwoFactorBundle\SchebTwoFactorBundle::class => ['all' => true],
     League\FlysystemBundle\FlysystemBundle::class => ['all' => true],
     Liip\ImagineBundle\LiipImagineBundle::class => ['all' => true],
+    Zenstruck\Foundry\ZenstruckFoundryBundle::class => ['dev' => true, 'test' => true],
+    DAMA\DoctrineTestBundle\DAMADoctrineTestBundle::class => ['test' => true],
 ];

config/packages/test/framework.yaml

@@ -1,4 +1,4 @@
 framework:
   test: true
   session:
-    storage_id: session.storage.mock_file
+    storage_factory_id: session.storage.factory.mock_file

config/packages/twig.yaml

@@ -4,4 +4,4 @@ twig:
   strict_variables: '%kernel.debug%'
   globals:
     version: "%jotunheimr.version%"
-    recaptcha_site_key: "%env(RECAPTCHA_SITE_KEY)%"
+    cap_api_endpoint: "%env(CAP_API_ENDPOINT)%"

config/packages/zenstruck_foundry.yaml

@@ -0,0 +1,16 @@
+when@dev: &dev
+    # See full configuration: https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html#full-default-bundle-configuration
+    zenstruck_foundry:
+        persistence:
+            # Flush only once per call of `PersistentObjectFactory::create()`
+            flush_once: true
+
+    # If you use the `make:factory --test` command, you may need to uncomment the following.
+    # See https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html#generate
+    #services:
+    #    App\Tests\Factory\:
+    #        resource: '%kernel.project_dir%/tests/Factory/'
+    #        autowire: true
+    #        autoconfigure: true
+
+when@test: *dev

config/services.yaml

@@ -28,6 +28,7 @@ services:
   App\Service\BattleCardGenerator:
     arguments:
       $cacheDir: '%kernel.project_dir%/var/og-cache'
+      $fontPath: '%kernel.project_dir%/assets/fonts/Carlito-Bold.ttf'
       $minioMediaStorage: '@mineseeker.media.storage'
 
   Aws\S3\S3Client:

docs/CI_CD.md

@@ -0,0 +1,443 @@
+# CI/CD Integration Guide
+
+This document explains how automated tests are integrated into the MineSeeker deployment pipeline using Gitea Actions.
+
+## Overview
+
+MineSeeker uses **Gitea Actions** (GitHub Actions compatible) for continuous integration and deployment:
+
+- **CI Pipeline** (`.gitea/workflows/ci.yml`) - Runs on every push/PR to main/develop
+- **CD Pipeline** (`.gitea/workflows/deploy.yml`) - Runs on version tags, includes tests before deployment
+
+---
+
+## CI Workflow (Continuous Integration)
+
+**Trigger:** Push or Pull Request to `main` or `develop` branches
+
+**File:** `.gitea/workflows/ci.yml`
+
+### Jobs
+
+#### 1. **Tests Job**
+
+Runs the full PHPUnit test suite with:
+
+- PostgreSQL 18 service container
+- PHP 8.3 with required extensions
+- Composer dependency installation
+- Node.js for asset building
+- Database setup and migrations
+- 71 PHPUnit tests with testdox output
+
+**Steps:**
+1. Checkout code
+2. Setup PHP 8.3 with extensions (pdo_pgsql, gd, intl, zip, sodium)
+3. Validate `composer.json`
+4. Cache and install Composer dependencies
+5. Setup Node.js 20 and install dependencies
+6. Build frontend assets with Vite
+7. Create `.env.test` configuration
+8. Setup test database with migrations
+9. Run PHPUnit tests with `--testdox` output
+10. (Optional) Generate coverage report on PRs
+
+#### 2. **Lint Job**
+
+Code quality checks:
+
+- ESLint for JavaScript/JSX
+- PHP-CS-Fixer (if installed)
+
+---
+
+## CD Workflow (Continuous Deployment)
+
+**Trigger:** Push of version tags (e.g., `v1.0.0`, `v1.2.3`)
+
+**File:** `.gitea/workflows/deploy.yml`
+
+### Jobs
+
+#### 1. **Test Job** (Pre-deployment)
+
+**Critical:** Deployment only proceeds if tests pass.
+
+- Runs same test suite as CI workflow
+- Uses `--stop-on-failure` flag for fast feedback
+- Blocks deployment on any test failure
+
+#### 2. **Deploy Job** (Production Deployment)
+
+**Depends on:** `test` job must complete successfully
+
+**Steps:**
+1. Checkout tagged version
+2. Write production `.env` from secrets
+3. Build Docker image
+4. Run database migrations
+5. Clear production cache
+6. Start/restart services with `docker compose up -d`
+7. Health check (curl to verify app is running)
+8. Notify success/failure
+
+---
+
+## Configuration Requirements
+
+### Gitea Repository Variables
+
+Set these in Gitea repository settings:
+
+```
+PROD_APP_DIR=/path/to/production/app
+```
+
+### Gitea Repository Secrets
+
+```
+PROD_ENV_FILE=<contents of production .env file>
+```
+
+### Test Database Configuration
+
+The CI/CD pipeline uses a PostgreSQL service container with these credentials:
+
+```env
+POSTGRES_USER=mineseeker_test
+POSTGRES_PASSWORD=test_password
+POSTGRES_DB=mineseeker_test
+```
+
+---
+
+## Running Tests Locally
+
+Before pushing, run tests locally to catch issues early:
+
+```bash
+# Setup test database (first time only)
+make test-db-setup
+
+# Run tests
+make test
+
+# Run with testdox output
+vendor/bin/phpunit --testdox
+
+# Run with coverage
+XDEBUG_MODE=coverage vendor/bin/phpunit --coverage-html=var/coverage
+```
+
+---
+
+## Deployment Workflow
+
+### Standard Deployment Process
+
+1. **Develop features** on feature branches
+2. **Open Pull Request** to `develop` or `main`
+   - CI workflow runs automatically
+   - Tests must pass before merge
+3. **Merge PR** after review and passing tests
+4. **Create version tag** when ready to deploy:
+   ```bash
+   git tag -a v1.2.3 -m "Release version 1.2.3"
+   git push origin v1.2.3
+   ```
+5. **Deployment runs automatically:**
+   - Tests run first
+   - If tests pass, Docker image builds
+   - Migrations run
+   - Services restart
+   - Health check verifies deployment
+
+### Rollback Process
+
+If deployment fails or issues are discovered:
+
+```bash
+# Tag and deploy previous stable version
+git push origin v1.2.2
+
+# Or SSH to production and manually rollback
+cd /path/to/production/app
+git checkout v1.2.2
+docker compose build
+docker compose up -d
+```
+
+---
+
+## Test Suite Details
+
+### Test Coverage
+
+The CI/CD pipeline runs **71 tests** across:
+
+- **Controller Tests** (29 tests)
+  - GameController, ProfileController, SecurityController
+  - HTTP status codes, authentication, routing
+  
+- **DTO Tests** (9 tests)
+  - ProfileGameDto, ProfileStatsDto, ProfileChartDataDto
+  - Serialization, null handling, calculations
+  
+- **Entity Tests** (8 tests)
+  - UserStats calculations and defaults
+  
+- **Service Tests** (13 tests)
+  - MercureJwtService, RecaptchaService
+  - Token generation, API verification
+  
+- **Integration Tests** (12 tests)
+  - Factory usage examples
+  - Database isolation
+
+### Test Execution Time
+
+Typical test suite runtime: **6-8 seconds**
+
+---
+
+## Best Practices
+
+### Before Committing
+
+✅ **Always run tests locally:**
+```bash
+make test
+```
+
+✅ **Check code style:**
+```bash
+vendor/bin/php-cs-fixer fix --dry-run
+npm run lint
+```
+
+✅ **Verify assets build:**
+```bash
+npm run build
+```
+
+### When Creating PRs
+
+✅ **Wait for CI checks** to pass before requesting review
+
+✅ **Fix failing tests** immediately - don't merge broken code
+
+✅ **Review test output** in Gitea Actions logs
+
+### When Deploying
+
+✅ **Tag semantic versions:** `v1.2.3` (major.minor.patch)
+
+✅ **Write meaningful tag messages:**
+```bash
+git tag -a v1.2.3 -m "Add bonus points to battle cards, fix avatar upload bug"
+```
+
+✅ **Monitor deployment logs** in Gitea Actions
+
+✅ **Verify health check** passes after deployment
+
+✅ **Test critical features** in production after deployment
+
+---
+
+## Troubleshooting
+
+### Tests Pass Locally but Fail in CI
+
+**Possible causes:**
+
+1. **Database state:** CI uses fresh database, local may have leftover data
+   ```bash
+   make test-db-reset  # Reset local test database
+   ```
+
+2. **Environment differences:** Check `.env.test` matches CI configuration
+
+3. **Cached dependencies:** CI caches may be stale
+   - Clear cache in Gitea Actions settings
+   - Or add `--no-cache` to composer install
+
+### Deployment Fails After Tests Pass
+
+**Common issues:**
+
+1. **Migration conflicts:** Manually run migrations on production
+   ```bash
+   docker compose run --rm app php bin/console doctrine:migrations:migrate
+   ```
+
+2. **Missing environment variables:** Check `PROD_ENV_FILE` secret is up-to-date
+
+3. **Docker build errors:** Check Dockerfile and build context
+
+4. **Health check timeout:** Increase sleep time or check application startup
+
+### Database Migration Issues
+
+If migrations fail during deployment:
+
+```bash
+# SSH to production server
+cd /path/to/production/app
+
+# Check migration status
+docker compose run --rm app php bin/console doctrine:migrations:status
+
+# Manually run migrations
+docker compose run --rm app php bin/console doctrine:migrations:migrate --no-interaction
+
+# If migration is stuck, mark as executed
+docker compose run --rm app php bin/console doctrine:migrations:version YYYYMMDDHHMMSS --add
+```
+
+---
+
+## Monitoring and Notifications
+
+### Viewing CI/CD Logs
+
+1. Go to Gitea repository
+2. Click **Actions** tab
+3. Select workflow run
+4. View detailed logs for each step
+
+### Setting Up Notifications
+
+**Gitea webhook notifications:**
+
+Configure webhooks in repository settings to notify:
+- Slack/Discord when builds fail
+- Email on deployment success/failure
+- Custom endpoints for monitoring systems
+
+**Example webhook payload:**
+```json
+{
+  "event": "workflow_run",
+  "repository": "Mine",
+  "workflow": "deploy.yml",
+  "status": "success",
+  "tag": "v1.2.3"
+}
+```
+
+---
+
+## Advanced Configuration
+
+### Running Tests with Coverage
+
+Enable coverage in CI (requires Xdebug):
+
+```yaml
+- name: Run tests with coverage
+  run: |
+    XDEBUG_MODE=coverage vendor/bin/phpunit \
+      --coverage-clover=coverage.xml \
+      --coverage-html=var/coverage
+```
+
+### Parallel Test Execution
+
+For larger test suites, use ParaTest:
+
+```bash
+composer require --dev brianium/paratest
+```
+
+```yaml
+- name: Run tests in parallel
+  run: vendor/bin/paratest --processes=4
+```
+
+### Database Seeding for E2E Tests
+
+Add step before tests:
+
+```yaml
+- name: Seed test data
+  run: |
+    php bin/console doctrine:fixtures:load --no-interaction --env=test
+```
+
+---
+
+## Security Considerations
+
+### Secrets Management
+
+❗ **Never commit secrets to repository**
+
+✅ **Use Gitea secrets** for sensitive data:
+- `PROD_ENV_FILE` - Production environment variables
+- Database credentials
+- API keys
+
+✅ **Rotate secrets regularly**
+
+✅ **Use environment-specific secrets** (staging, production)
+
+### Database Security
+
+✅ **Test database is isolated** - No production data access
+
+✅ **Credentials are ephemeral** - Service containers use temporary passwords
+
+✅ **No data persistence** - Test database recreated on each run
+
+---
+
+## Performance Optimization
+
+### Caching Strategies
+
+CI/CD workflows cache:
+
+1. **Composer dependencies** - `vendor/` directory
+2. **Node modules** - `node_modules/` directory
+3. **Docker layers** - Image build cache
+
+### Reducing Build Time
+
+✅ **Use `composer install --no-dev`** in production builds
+
+✅ **Multi-stage Docker builds** - Separate assets from PHP
+
+✅ **Parallel jobs** - Tests and linting run concurrently
+
+✅ **Skip unnecessary steps** - Use conditionals (`if:` statements)
+
+---
+
+## Future Enhancements
+
+### Planned Improvements
+
+- [ ] Automated browser tests with Symfony Panther
+- [ ] Visual regression testing for UI changes
+- [ ] Performance benchmarking in CI
+- [ ] Automated security scanning (Symfony Security Checker)
+- [ ] Staging environment deployments before production
+- [ ] Blue-green deployment strategy
+- [ ] Automated rollback on health check failure
+
+---
+
+## References
+
+- **Gitea Actions Documentation:** https://docs.gitea.com/usage/actions/overview
+- **GitHub Actions Reference:** https://docs.github.com/en/actions (compatible syntax)
+- **PHPUnit Documentation:** https://phpunit.de/documentation.html
+- **Symfony Testing:** https://symfony.com/doc/current/testing.html
+- **Docker Compose:** https://docs.docker.com/compose/
+
+---
+
+**Last Updated:** 2026-04-21  
+**MineSeeker Version:** 1.0.0  
+**CI/CD Platform:** Gitea Actions

docs/FONTS.md

@@ -0,0 +1,47 @@
+# Font Files
+
+This directory contains TrueType Font (TTF) files used for server-side image generation with PHP GD.
+
+## Carlito-Bold.ttf
+
+- **Font:** Carlito Bold
+- **Source:** Google Fonts (Carlito Project)
+- **License:** SIL Open Font License 1.1
+- **URL:** https://github.com/googlefonts/carlito
+- **Usage:** Used by `BattleCardGenerator` service for generating battle card OG images
+- **Note:** Carlito is a metric-compatible font family to Calibri
+
+## Why TTF instead of @fontsource?
+
+The `@fontsource` npm packages provide WOFF/WOFF2 files for web usage, but PHP's GD library (`imagettftext()`) requires TrueType Font (TTF) files for server-side text rendering.
+
+## Alternatives
+
+If you want to use a different font:
+
+1. **Install system fonts:**
+   ```bash
+   # Find available TTF fonts
+   find /usr/share/fonts -name "*.ttf" -type f
+   
+   # Copy desired font
+   cp /usr/share/fonts/path/to/Font-Bold.ttf assets/fonts/
+   ```
+
+2. **Download from Google Fonts:**
+   ```bash
+   # Visit https://fonts.google.com
+   # Download the font family
+   # Extract the TTF file from the zip
+   ```
+
+3. **Update service configuration:**
+   Edit `config/services.yaml` and update the `$fontPath` parameter.
+
+## Cache Clearing
+
+After changing fonts, clear the OG image cache:
+
+```bash
+rm -rf var/og-cache/*
+```

docs/README.md

@@ -1,6 +1,6 @@
 # Mine-Seeker Game Documentation
 
-This directory contains comprehensive documentation about the Mine-Seeker game mechanics and implementation.
+This directory contains comprehensive documentation about the Mine-Seeker game mechanics, testing, and deployment.
 
 ## Game Mechanics
 
@@ -18,8 +18,94 @@ Complete reference for the bonus points system including:
 
 ---
 
+## Testing
+
+### [Testing Guide](./testing/TESTING.md)
+Complete testing setup and best practices including:
+- Test environment configuration
+- Database isolation with DAMA Doctrine Test Bundle
+- Test database setup (`mineseeker_test`)
+- Modern PHPUnit attributes (`#[Test]`, `#[TestDox]`)
+- Writing effective tests
+- Running tests (all, specific, with coverage)
+- Best practices (AAA pattern, factories, type hints)
+- CI/CD integration examples
+- Troubleshooting guide
+
+**Recommended for**: All developers, understanding test infrastructure, writing new tests, debugging test failures.
+
+### [Factory Documentation](./testing/FACTORIES.md)
+Detailed API reference for Zenstruck Foundry factories:
+- All available factories (User, Gamer, PlayedGame, Step, Grid, etc.)
+- Factory usage examples
+- Creating related entities
+- Repository access
+- Database isolation explanation
+- Best practices and patterns
+
+**Recommended for**: Writing tests with test data, understanding factory patterns, creating complex test scenarios.
+
+### [Quick Reference](./testing/QUICK_REFERENCE.md)
+Quick command reference for testing:
+- Common test commands
+- Factory usage cheat sheet
+- Troubleshooting tips
+
+**Recommended for**: Quick lookups during development.
+
+---
+
+## CI/CD & Deployment
+
+### [CI/CD Integration Guide](./CI_CD.md)
+Comprehensive guide for continuous integration and deployment:
+- Gitea Actions workflows (CI and CD pipelines)
+- Automated testing on every push/PR
+- Deployment process with pre-deployment testing
+- Configuration requirements (secrets, variables)
+- Rollback procedures
+- Security considerations
+- Performance optimization
+- Monitoring and notifications
+- Troubleshooting deployment issues
+
+**Recommended for**: Understanding deployment pipeline, setting up CI/CD, debugging deployment failures, production operations.
+
+### [CI/CD Quick Reference](./testing/CI_CD_QUICK_REFERENCE.md)
+Quick reference for CI/CD operations:
+- Common commands (testing, deployment, rollback)
+- Workflow diagrams (CI and CD pipelines)
+- Status badges for README
+- Common issues and solutions
+- Environment variables
+- Monitoring links
+
+**Recommended for**: Quick deployments, troubleshooting, day-to-day operations.
+
+---
+
+## Technical Documentation
+
+### [Fonts](./FONTS.md)
+TrueType fonts used for server-side image generation:
+- Font file locations
+- Usage in battle card generation
+- Web vs. server-side font formats
+
+**Recommended for**: Working on OG image generation, understanding font rendering.
+
+---
+
 ## Quick Reference
 
+### Test Suite Overview
+| Metric | Value |
+|--------|-------|
+| Total Tests | 71 |
+| Total Assertions | 227 |
+| Execution Time | ~6-8 seconds |
+| Coverage | Controller, DTO, Entity, Service, Integration |
+
 ### Bonus Points at a Glance
 | Bonus Type | Points | Condition |
 |-----------|--------|-----------|
@@ -30,18 +116,80 @@ Complete reference for the bonus points system including:
 | Chain Combo | Tracked | Consecutive mine clicks (no safe clicks) |
 | Biggest Reveal | Tracked | Largest number of safe cells revealed |
 
-### Key Rules
-- Safe cell bonus only awarded for ≥2 cells minimum
-- Chain counter resets on any safe cell click
-- Endgame threshold: 51 - (redPoints + bluePoints) ≤ 10
-- Bonus stats are per-player and persist in database
+### Available Test Factories
+| Factory | Entity | Purpose |
+|---------|--------|---------|
+| `UserFactory` | `User` | Registered users |
+| `GamerFactory` | `Gamer` | Anonymous/guest players |
+| `PlayedGameFactory` | `PlayedGame` | Game records |
+| `StepFactory` | `Step` | Game moves |
+| `GridFactory` | `Grid` | Game grids (16×16) |
+| `GridRowFactory` | `GridRow` | Grid rows |
+| `WebAuthnCredentialFactory` | `WebAuthnCredential` | Passkey credentials |
+| `ContactMessageFactory` | `ContactMessage` | Contact messages |
+
+### Running Tests
+```bash
+# Setup (first time only)
+make test-db-setup
+
+# Run all tests
+make test
+
+# Run with documentation output
+vendor/bin/phpunit --testdox
+
+# Specific file
+vendor/bin/phpunit tests/Controller/ProfileControllerTest.php
+
+# With coverage (requires Xdebug/PCOV)
+XDEBUG_MODE=coverage vendor/bin/phpunit --coverage-html var/coverage
+```
+
+### CI/CD Commands
+```bash
+# Deploy to production
+git tag -a v1.2.3 -m "Release version 1.2.3"
+git push origin v1.2.3
+
+# View CI/CD runs
+# https://source.splendidbear.org/SplendidBear-Websites/Mine/actions
+
+# Rollback deployment
+git push origin v1.2.2  # Deploy previous version
+```
 
 ---
 
 ## Files Using This Information
+
+### Game Mechanics
 - Backend: `/src/Util/TopicManager.php`
 - Frontend: `/assets/js/mine-seeker/contexts/GameProvider.jsx`
 - UI: `/assets/js/mine-seeker/components/BonusStatsDialog.jsx`
 - Constants: `/assets/js/mine-seeker/utils/constants.jsx`
 
+### Testing
+- Test Base Class: `/tests/WebTestCase.php`
+- Factories: `/tests/Factory/`
+- Example Tests: `/tests/Integration/FactoryExampleTest.php`
+- PHPUnit Config: `/phpunit.dist.xml`
+- Bundle Config: `/config/bundles.php`
 
+### CI/CD
+- CI Workflow: `/.gitea/workflows/ci.yml`
+- CD Workflow: `/.gitea/workflows/deploy.yml`
+- Dockerfile: `/Dockerfile`
+- Docker Compose: `/compose.yaml`
+
+---
+
+## Additional Resources
+
+- **[Main README](../README.md)** - Project overview, installation, deployment
+- **[AI Agent Guidelines](../AGENTS.md)** - Comprehensive guide for AI coding agents
+- **[Zenstruck Foundry](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html)** - Official Foundry documentation
+- **[PHPUnit](https://phpunit.de/)** - PHPUnit documentation
+- **[Symfony Testing](https://symfony.com/doc/current/testing.html)** - Symfony testing guide
+- **[Gitea Actions](https://docs.gitea.com/usage/actions/overview)** - Gitea Actions documentation
+- **[Docker Compose](https://docs.docker.com/compose/)** - Docker Compose reference

docs/testing/FACTORIES.md

@@ -0,0 +1,265 @@
+# Foundry Factories for MineSeeker
+
+Factory classes for creating test data. For general Foundry usage, see [Zenstruck Foundry Docs](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html).
+
+---
+
+## Available Factories
+
+All factories are in `tests/Factory/`:
+
+| Factory | Entity | Use For |
+|---------|--------|---------|
+| `UserFactory` | `User` | Registered users with auth |
+| `GamerFactory` | `Gamer` | Anonymous/guest players |
+| `PlayedGameFactory` | `PlayedGame` | Game records |
+| `StepFactory` | `Step` | Individual game moves |
+| `GridFactory` | `Grid` | 16×16 game grids |
+| `GridRowFactory` | `GridRow` | Grid row data |
+| `WebAuthnCredentialFactory` | `WebAuthnCredential` | Passkey credentials |
+| `ContactMessageFactory` | `ContactMessage` | Contact form messages |
+
+---
+
+## Quick Examples
+
+### UserFactory
+
+```php
+// Basic user
+$user = UserFactory::createOne();
+
+// Unverified user
+$user = UserFactory::createOne(['isVerified' => false]);
+
+// Admin user
+$user = UserFactory::createOne(['roles' => ['ROLE_ADMIN']]);
+
+// Multiple users
+UserFactory::createMany(5);
+```
+
+### GamerFactory
+
+```php
+// Anonymous gamer
+$gamer = GamerFactory::new()->anonymous()->create();
+```
+
+### PlayedGameFactory
+
+```php
+// Game with registered players
+$game = PlayedGameFactory::new()
+    ->withRegisteredPlayers()
+    ->create();
+
+// Game with anonymous players
+$game = PlayedGameFactory::new()
+    ->withAnonymousPlayers()
+    ->create();
+
+// Red wins
+$game = PlayedGameFactory::new()
+    ->withRegisteredPlayers()
+    ->redWins()
+    ->create();
+
+// Blue wins
+$game = PlayedGameFactory::new()
+    ->withRegisteredPlayers()
+    ->blueWins()
+    ->create();
+
+// Resigned game
+$game = PlayedGameFactory::new()
+    ->resigned('red')
+    ->create();
+```
+
+### StepFactory
+
+```php
+// Mine hit
+$step = StepFactory::new()
+    ->forPlayer('red')
+    ->mine()
+    ->create(['playedGame' => $game]);
+
+// Safe cell
+$step = StepFactory::new()
+    ->forPlayer('blue')
+    ->safe()
+    ->create(['playedGame' => $game]);
+
+// With revealed cells
+$step = StepFactory::new()
+    ->withRevealedCells([
+        ['row' => 5, 'col' => 5],
+        ['row' => 5, 'col' => 6],
+    ])
+    ->create(['playedGame' => $game]);
+```
+
+### GridFactory
+
+```php
+// Full 16×16 grid
+$grid = GridFactory::createOne(['playedGame' => $game]);
+
+// Automatically creates 16 rows
+self::assertCount(16, $grid->gridRow);
+```
+
+### WebAuthnCredentialFactory
+
+```php
+// Basic credential
+$credential = WebAuthnCredentialFactory::createOne(['user' => $user]);
+
+// Named credential, recently used
+$credential = WebAuthnCredentialFactory::new()
+    ->withName('YubiKey 5C')
+    ->recentlyUsed()
+    ->create(['user' => $user]);
+```
+
+### ContactMessageFactory
+
+```php
+// Basic message
+$message = ContactMessageFactory::createOne();
+
+// Without consent
+$message = ContactMessageFactory::new()
+    ->withoutConsent()
+    ->create();
+```
+
+---
+
+## Factory API Reference
+
+### Common Methods (All Factories)
+
+```php
+// Create single entity
+Factory::createOne([
+    'property' => 'value',
+]);
+
+// Create multiple
+Factory::createMany(5);
+
+// Create with factory methods
+Factory::new()
+    ->customMethod()
+    ->create(['property' => 'value']);
+
+// Access repository
+Factory::repository()->findAll();
+Factory::repository()->count([]);
+Factory::repository()->findBy(['field' => 'value']);
+```
+
+### PlayedGameFactory Methods
+
+| Method | Description |
+|--------|-------------|
+| `withRegisteredPlayers()` | Creates game with 2 registered users |
+| `withAnonymousPlayers()` | Creates game with 2 anonymous gamers |
+| `withMixedPlayers()` | One registered, one anonymous |
+| `redWins()` | Red has 26 points |
+| `blueWins()` | Blue has 26 points |
+| `resigned(string $player)` | Set resignation ('red' or 'blue') |
+
+### StepFactory Methods
+
+| Method | Description |
+|--------|-------------|
+| `forPlayer(string $player)` | Set player ('red' or 'blue') |
+| `mine()` | Step hits a mine |
+| `safe()` | Step reveals safe cell |
+| `withRevealedCells(array $cells)` | Set revealed cells array |
+
+### GamerFactory Methods
+
+| Method | Description |
+|--------|-------------|
+| `anonymous()` | Set username as "Guest_12345" |
+
+### WebAuthnCredentialFactory Methods
+
+| Method | Description |
+|--------|-------------|
+| `withName(string $name)` | Set credential name |
+| `recentlyUsed()` | Set lastUsedAt to now |
+
+### ContactMessageFactory Methods
+
+| Method | Description |
+|--------|-------------|
+| `withoutConsent()` | Set consent to false |
+| `anonymous()` | Remove IP address |
+
+---
+
+## MineSeeker-Specific Patterns
+
+### Complete Game Setup
+
+```php
+// Create full game with steps and grid
+$game = PlayedGameFactory::new()
+    ->withRegisteredPlayers()
+    ->create();
+
+// Add steps
+StepFactory::createMany(10, [
+    'playedGame' => $game,
+    'player' => 'red',
+]);
+
+// Add grid
+$grid = GridFactory::createOne(['playedGame' => $game]);
+```
+
+### Testing Battle History
+
+```php
+// Create multiple finished games for a user
+$user = UserFactory::createOne();
+
+PlayedGameFactory::new()
+    ->redWins()
+    ->create(['red' => $user]);
+
+PlayedGameFactory::new()
+    ->blueWins()
+    ->create(['blue' => $user]);
+```
+
+---
+
+## Database Isolation
+
+Tests automatically run in isolated transactions:
+
+```php
+public function testDatabaseIsolation(): void
+{
+    UserFactory::createMany(5);
+    self::assertCount(5, UserFactory::repository()->findAll());
+    
+    // Automatically rolled back after test
+}
+```
+
+No manual cleanup needed. Each test starts with a clean database.
+
+---
+
+## External Resources
+
+- **[Zenstruck Foundry Documentation](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html)** - Complete Foundry guide
+- **[DAMA Doctrine Test Bundle](https://github.com/dmaicher/doctrine-test-bundle)** - Transaction isolation details

docs/testing/TESTING.md

@@ -0,0 +1,336 @@
+# Testing Guide for MineSeeker
+
+MineSeeker-specific testing setup and workflows. For general PHPUnit/Symfony testing, see [Symfony Testing Docs](https://symfony.com/doc/current/testing.html).
+
+## Example of the current tests
+
+```shell
+$ bin/phpunit                                                                                                                                                                                                                                                                                                                                                (master->origin/master|✚1…2⚑1)
+PHPUnit 13.1.7 by Sebastian Bergmann and contributors.
+
+Runtime:       PHP 8.5.5
+Configuration: /var/www/splendid/Mine/phpunit.dist.xml
+
+................................................................. 65 / 71 ( 91%)
+......                                                            71 / 71 (100%)
+
+Time: 00:07.319, Memory: 86.50 MB
+
+OK (71 tests, 227 assertions)
+
+Faker seed used: 918823
+```
+
+## Quick Start
+
+```bash
+# One-time setup
+make test-db-setup
+
+# Run tests
+make test
+```
+
+---
+
+## Test Database Configuration
+
+MineSeeker uses a **separate test database** (`mineseeker_test`) with automatic transaction rollback for isolated tests.
+
+### Stack
+
+- **PHPUnit 13** - Testing framework
+- **[Zenstruck Foundry](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html)** - Factory library for test fixtures
+- **[DAMA Doctrine Test Bundle](https://github.com/dmaicher/doctrine-test-bundle)** - Transaction isolation (rollback after each test)
+
+### Configuration
+
+**`phpunit.dist.xml`**:
+```xml
+<env name="DATABASE_URL" value="postgresql://...mineseeker_test..." />
+<env name="DAMA_DISABLE_STATIC_CONNECTION" value="0" />
+```
+
+**`config/bundles.php`**:
+```php
+Zenstruck\Foundry\ZenstruckFoundryBundle::class => ['dev' => true, 'test' => true],
+DAMA\DoctrineTestBundle\DAMADoctrineTestBundle::class => ['test' => true],
+```
+
+---
+
+## Setup
+
+### One-time Setup
+
+```bash
+make test-db-setup
+```
+
+Creates `mineseeker_test` database and runs migrations.
+
+### Reset Test Database
+
+```bash
+make test-db-reset
+```
+
+Drops and recreates test database (useful after schema changes).
+
+---
+
+## Running Tests
+
+```bash
+# All tests
+make test
+
+# Specific file
+vendor/bin/phpunit tests/Controller/ProfileControllerTest.php
+
+# Specific method
+vendor/bin/phpunit --filter testCreateUser
+
+# With test names
+vendor/bin/phpunit --testdox
+```
+
+---
+
+## MineSeeker Factories
+
+See **[FACTORIES.md](./FACTORIES.md)** for complete factory API.
+
+### Available Factories
+
+| Factory | Entity | Location |
+|---------|--------|----------|
+| `UserFactory` | Registered users | `tests/Factory/UserFactory.php` |
+| `GamerFactory` | Anonymous players | `tests/Factory/GamerFactory.php` |
+| `PlayedGameFactory` | Game records | `tests/Factory/PlayedGameFactory.php` |
+| `StepFactory` | Game moves | `tests/Factory/StepFactory.php` |
+| `GridFactory` | 16×16 game grids | `tests/Factory/GridFactory.php` |
+| `GridRowFactory` | Grid rows | `tests/Factory/GridRowFactory.php` |
+| `WebAuthnCredentialFactory` | Passkey credentials | `tests/Factory/WebAuthnCredentialFactory.php` |
+| `ContactMessageFactory` | Contact messages | `tests/Factory/ContactMessageFactory.php` |
+
+### Example
+
+```php
+use App\Tests\Factory\PlayedGameFactory;
+use App\Tests\WebTestCase;
+
+class GameTest extends WebTestCase
+{
+    public function testGameCreation(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->redWins()
+            ->create();
+
+        self::assertEquals(26, $game->redPoints);
+    }
+}
+```
+
+---
+
+## Test Structure
+
+All tests extend `App\Tests\WebTestCase`:
+
+```php
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Controller;
+
+use App\Tests\Factory\UserFactory;
+use App\Tests\WebTestCase;
+
+class MyControllerTest extends WebTestCase
+{
+    public function testExample(): void
+    {
+        $user = UserFactory::createOne();
+        $client = static::createClient();
+
+        $client->request('GET', '/profile');
+
+        self::assertResponseRedirects('/login');
+    }
+}
+```
+
+**Important**: Always extend `App\Tests\WebTestCase`, not `Symfony\Bundle\FrameworkBundle\Test\WebTestCase`.
+
+---
+
+## Directory Structure
+
+```
+tests/
+├── Controller/          # HTTP endpoint tests
+├── Dto/                 # Data Transfer Object tests
+├── Entity/              # Entity logic tests
+├── Service/             # Service layer tests
+├── Integration/         # Integration tests
+├── Factory/             # Foundry factories
+├── WebTestCase.php      # Base test class
+└── bootstrap.php        # PHPUnit bootstrap
+```
+
+---
+
+## MineSeeker-Specific Patterns
+
+### Testing Game Flow
+
+```php
+public function testRedPlayerWinsGame(): void
+{
+    $game = PlayedGameFactory::new()
+        ->withRegisteredPlayers()
+        ->create();
+
+    // Create steps to simulate gameplay
+    for ($i = 0; $i < 26; $i++) {
+        StepFactory::new()
+            ->forPlayer('red')
+            ->mine()
+            ->create(['playedGame' => $game]);
+    }
+
+    self::assertEquals(26, $game->redPoints);
+}
+```
+
+### Testing Battle Sharing
+
+```php
+public function testBattleSharePageReturnsValidGame(): void
+{
+    $game = PlayedGameFactory::new()
+        ->withRegisteredPlayers()
+        ->redWins()
+        ->create();
+
+    $client = static::createClient();
+    $client->request('GET', '/battle/' . $game->uuid);
+
+    self::assertResponseIsSuccessful();
+    self::assertSelectorTextContains('h1', 'Battle Report');
+}
+```
+
+### Testing Authentication
+
+```php
+public function testProfileRequiresAuthentication(): void
+{
+    $client = static::createClient();
+    $client->request('GET', '/profile');
+
+    self::assertResponseRedirects('/login');
+}
+
+public function testAuthenticatedUserCanAccessProfile(): void
+{
+    $user = UserFactory::createOne();
+    $client = static::createClient();
+    $client->loginUser($user->_real());
+
+    $client->request('GET', '/profile');
+
+    self::assertResponseIsSuccessful();
+}
+```
+
+---
+
+## Troubleshooting
+
+### Tests interfering with each other?
+
+Ensure you extend `App\Tests\WebTestCase`, not the base Symfony class.
+
+### Schema out of sync?
+
+```bash
+make test-db-reset
+```
+
+### Memory limit errors?
+
+```bash
+php -d memory_limit=1024M vendor/bin/phpunit
+```
+
+Or increase in `phpunit.dist.xml`:
+```xml
+<ini name="memory_limit" value="1024M"/>
+```
+
+### Test database doesn't exist?
+
+```bash
+make test-db-setup
+```
+
+---
+
+## External Resources
+
+- **[Symfony Testing](https://symfony.com/doc/current/testing.html)** - Symfony testing guide
+- **[Zenstruck Foundry](https://symfony.com/bundles/ZenstruckFoundryBundle/current/index.html)** - Factory documentation
+- **[DAMA Doctrine Test Bundle](https://github.com/dmaicher/doctrine-test-bundle)** - Transaction isolation
+- **[PHPUnit](https://docs.phpunit.de/)** - PHPUnit documentation
+
+---
+
+## Modern PHPUnit Attributes
+
+MineSeeker tests use modern PHP 8 attributes instead of method name prefixes:
+
+```php
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+
+#[TestDox('Security Controller')]
+class SecurityControllerTest extends WebTestCase
+{
+    #[Test]
+    #[TestDox('Login page loads successfully with form fields')]
+    public function loginPageLoadsSuccessfully(): void
+    {
+        // Test implementation
+    }
+}
+```
+
+**Benefits:**
+- ✅ More readable method names (no `test` prefix required)
+- ✅ Self-documenting with `TestDox` descriptions
+- ✅ Better IDE support and refactoring
+- ✅ Cleaner `--testdox` output
+
+**Run with documentation:**
+```bash
+vendor/bin/phpunit --testdox
+```
+
+Output:
+```
+Security Controller
+ ✔ Login page loads successfully with form fields
+ ✔ Login page has links to register and forgot password
+ ✔ Register page loads successfully with form
+```

package.json

@@ -20,26 +20,27 @@
     "@fontsource/open-sans": "^5.2.7",
     "@fontsource/rajdhani": "^5.2.7",
     "@fortawesome/fontawesome-free": "^7.2.0",
-    "@mui/material": "^9.0.0",
-    "@mui/x-charts": "^9.0.2",
-    "@tanstack/react-query": "^5.99.2",
+    "@mui/material": "^9.0.1",
+    "@mui/x-charts": "^9.3.0",
+    "@tanstack/react-query": "^5.100.14",
+    "cap-widget": "^0.1.53",
     "howler": "^2.2.4",
     "lodash": "^4.18.1",
     "prop-types": "^15.8.1",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5"
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.5",
     "@eslint/js": "10.0.1",
     "@stylistic/eslint-plugin": "5.10.0",
-    "@vitejs/plugin-react": "^6.0.1",
-    "eslint": "10.2.1",
+    "@vitejs/plugin-react": "^6.0.2",
+    "eslint": "^10.4.1",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "7.1.1",
-    "globals": "17.5.0",
-    "sass": "^1.99.0",
-    "vite": "^8.0.8",
+    "globals": "^17.6.0",
+    "sass": "^1.100.0",
+    "vite": "^8.0.16",
     "vite-plugin-symfony": "^8.2.4"
   },
   "scripts": {

phpunit.dist.xml

@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!-- https://phpunit.readthedocs.io/en/latest/configuration.html -->
+<phpunit xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:noNamespaceSchemaLocation="vendor/phpunit/phpunit/phpunit.xsd"
+         colors="true"
+         failOnDeprecation="true"
+         failOnNotice="true"
+         failOnWarning="true"
+         bootstrap="tests/bootstrap.php"
+         cacheDirectory=".phpunit.cache"
+>
+    <php>
+        <ini name="display_errors" value="1" />
+        <ini name="error_reporting" value="-1" />
+        <server name="APP_ENV" value="test" force="true" />
+        <server name="SHELL_VERBOSITY" value="-1" />
+        <env name="SYMFONY_DEPRECATIONS_HELPER" value="disabled" />
+        <env name="DATABASE_URL" value="postgresql://system7:bazmeg@127.0.0.1:15432/mineseeker_test?serverVersion=16&amp;charset=utf8" />
+        <env name="DAMA_DISABLE_STATIC_CONNECTION" value="0" />
+    </php>
+
+    <testsuites>
+        <testsuite name="Project Test Suite">
+            <directory>tests</directory>
+        </testsuite>
+    </testsuites>
+
+    <source ignoreSuppressionOfDeprecations="true"
+            ignoreIndirectDeprecations="true"
+            restrictNotices="true"
+            restrictWarnings="true"
+    >
+        <include>
+            <directory>src</directory>
+        </include>
+
+        <deprecationTrigger>
+            <method>Doctrine\Deprecations\Deprecation::trigger</method>
+            <method>Doctrine\Deprecations\Deprecation::delegateTriggerToBackend</method>
+            <function>trigger_deprecation</function>
+        </deprecationTrigger>
+    </source>
+
+    <extensions>
+        <bootstrap class="Zenstruck\Foundry\PHPUnit\FoundryExtension" />
+    </extensions>
+</phpunit>

src/Controller/ApiAuthController.php

@@ -0,0 +1,106 @@
+<?php declare(strict_types=1);
+/*
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Controller;
+
+use App\Entity\User;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Bundle\SecurityBundle\Security;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\HttpKernel\Attribute\AsController;
+use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
+use Symfony\Component\Routing\Attribute\Route;
+
+/**
+ * Class ApiAuthController
+ *
+ * Provides a JSON login endpoint for native desktop clients.
+ * This endpoint is intentionally exempt from the CAPTCHA listener
+ * because desktop clients cannot display or solve the Cap widget.
+ *
+ * After a successful password login, if the user has TOTP enabled the response
+ * returns { requiresTwoFactor: true }. The client must then POST the 6-digit
+ * code to the standard /2fa_check endpoint (which is already exempt from
+ * the CAPTCHA listener via LoginCaptchaListener).
+ *
+ * @package  App\Controller
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 26.
+ */
+#[AsController]
+class ApiAuthController extends AbstractController
+{
+    public function __construct(
+        private readonly EntityManagerInterface      $em,
+        private readonly UserPasswordHasherInterface $passwordHasher,
+        private readonly Security                    $security,
+    ) {
+    }
+
+    /**
+     * POST /api/auth/login
+     *
+     * Request body (JSON): { "username": "...", "password": "..." }
+     *
+     * Responses:
+     *   200 { "success": true, "requiresTwoFactor": false }
+     *   200 { "success": true, "requiresTwoFactor": true }
+     *   400 { "success": false, "error": "..." }
+     *   401 { "success": false, "error": "..." }
+     */
+    #[Route('/api/auth/login', name: 'MineSeekerBundle_api_auth_login', methods: ['POST'])]
+    public function login(Request $request): JsonResponse
+    {
+        $data     = $request->toArray();
+        $username = trim($data['username'] ?? '');
+        $password = $data['password'] ?? '';
+
+        if ($username === '' || $password === '') {
+            return $this->json(
+                ['success' => false, 'error' => 'Username and password are required.'],
+                Response::HTTP_BAD_REQUEST
+            );
+        }
+
+        /** @var User|null $user */
+        $user = $this->em->getRepository(User::class)->findOneBy(['username' => $username]);
+
+        if ($user === null || !$this->passwordHasher->isPasswordValid($user, $password)) {
+            return $this->json(
+                ['success' => false, 'error' => 'Invalid username or password.'],
+                Response::HTTP_UNAUTHORIZED
+            );
+        }
+
+        if (!$user->isVerified) {
+            return $this->json(
+                ['success' => false, 'error' => 'Account not yet activated. Check your email.'],
+                Response::HTTP_UNAUTHORIZED
+            );
+        }
+
+        // Log the user in via the Symfony security system.
+        // If TOTP is enabled, scheb/2fa will place the session into
+        // IS_AUTHENTICATED_2FA_IN_PROGRESS state, and the client must
+        // complete 2FA by POSTing the code to /2fa_check.
+        $this->security->login($user, 'form_login');
+
+        return $this->json([
+            'success'           => true,
+            'requiresTwoFactor' => $user->isTotpAuthenticationEnabled(),
+        ]);
+    }
+}

src/Controller/ProfileController.php

@@ -27,6 +27,7 @@ use Doctrine\ORM\EntityManagerInterface;
 use League\Flysystem\FilesystemException;
 use League\Flysystem\FilesystemOperator;
 use Liip\ImagineBundle\Imagine\Cache\CacheManager;
+use Liip\ImagineBundle\Service\FilterService;
 use Psr\Log\LoggerInterface;
 use RuntimeException;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
@@ -140,6 +141,7 @@ class ProfileController extends AbstractController
         Request                                                             $request,
         EntityManagerInterface                                              $em,
         CacheManager                                                        $cacheManager,
+        FilterService                                                       $filterService,
         #[Autowire(service: 'mineseeker.media.storage')] FilesystemOperator $mediaStorage,
     ): JsonResponse {
         $this->denyAccessUnlessGranted('IS_AUTHENTICATED_REMEMBERED');
@@ -153,8 +155,8 @@ class ProfileController extends AbstractController
             return $this->json(['error' => 'No file uploaded.'], 400);
         }
 
-        if ($file->getSize() > 2 * 1024 * 1024) {
-            return $this->json(['error' => 'File is too large. Maximum 2 MB.'], 400);
+        if ($file->getSize() > 10 * 1024 * 1024) {
+            return $this->json(['error' => 'File is too large. Maximum 10 MB.'], 400);
         }
 
         $allowed = ['image/jpeg', 'image/png', 'image/gif', 'image/webp'];
@@ -182,6 +184,7 @@ class ProfileController extends AbstractController
             $mediaStorage->writeStream($newPath, $stream);
         } catch (FilesystemException $e) {
             $this->logger->error('Unable to write new avatar: ' . $e->getMessage());
+            fclose($stream);
             throw new RuntimeException('Unable to write new avatar: ' . $e->getMessage());
         }
         fclose($stream);
@@ -190,7 +193,7 @@ class ProfileController extends AbstractController
         $em->flush();
 
         return $this->json([
-            'thumbUrl' => $cacheManager->generateUrl($newPath, 'avatar_thumb'),
+            'thumbUrl' => $filterService->getUrlOfFilteredImage($newPath, 'avatar_thumb'),
         ]);
     }
 

src/EventListener/LoginCaptchaListener.php

@@ -19,7 +19,7 @@ use Symfony\Component\Security\Http\Event\CheckPassportEvent;
 /**
  * Class LoginCaptchaListener
  *
- * Validates the Google reCAPTCHA v3 token during form-login authentication.
+ * Validates the Cap CAPTCHA token during form-login authentication.
  * Fires on CheckPassportEvent, which is dispatched after credentials are
  * collected but before the user is authenticated.
  *
@@ -53,12 +53,12 @@ readonly class LoginCaptchaListener
             return;
         }
 
-        $token = $request->request->getString('g-recaptcha-response');
+        $token = $request->request->getString('cap-token');
 
-        if ($this->recaptcha->verify($token, $request->getClientIp())) {
+        if ($this->recaptcha->verify($token)) {
             return;
         }
 
-        throw new CustomUserMessageAuthenticationException('reCAPTCHA verification failed. Please try again.');
+        throw new CustomUserMessageAuthenticationException('CAPTCHA verification failed. Please try again.');
     }
 }

src/Form/RecaptchaType.php

@@ -22,8 +22,8 @@ use Symfony\Component\OptionsResolver\OptionsResolver;
 /**
  * Class RecaptchaType
  *
- * Reads the Google reCAPTCHA v3 token from the raw POST field
- * `g-recaptcha-response` (populated by JS before form submit) and injects
+ * Reads the Cap CAPTCHA token from the raw POST field
+ * `cap-token` (auto-injected by the cap-widget web component) and injects
  * it as this field's value before validation runs.
  *
  * @package  App\Form
@@ -41,9 +41,8 @@ class RecaptchaType extends AbstractType
     {
         $builder->addEventListener(FormEvents::PRE_SUBMIT, function (PreSubmitEvent $event): void {
             $request = $this->requestStack->getCurrentRequest();
-            $token   = $request?->request->getString('g-recaptcha-response') ?? '';
-            // For forms that set the token directly on the field (e.g. registration_form[recaptcha])
-            // rather than via a standalone g-recaptcha-response input, fall back to the submitted value.
+            $token   = $request?->request->getString('cap-token') ?? '';
+            // For forms that set the token directly on the field, fall back to the submitted value.
             if ($token === '') {
                 $token = (string) ($event->getData() ?? '');
             }

src/Service/BattleCardGenerator.php

@@ -34,11 +34,11 @@ final class BattleCardGenerator
 {
     private const int    WIDTH       = 1200;
     private const int    HEIGHT      = 630;
-    private const string FONT        = '/usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf';
     private const int    AVATAR_SIZE = 120;
 
     public function __construct(
         private readonly string             $cacheDir,
+        private readonly string             $fontPath,
         private readonly FilesystemOperator $minioMediaStorage,
         private readonly LoggerInterface    $logger,
     ) {
@@ -159,7 +159,7 @@ final class BattleCardGenerator
         $redBonusPoints = $game->redBonusPoints ?? 0;
         $blueBonusPoints = $game->blueBonusPoints ?? 0;
         $bonusText = number_format((float)$redBonusPoints, 1, '.', '') . '  *  :  *  ' . number_format((float)$blueBonusPoints, 1, '.', '');
-        $this->centeredText($im, $bonusText, 24, self::WIDTH / 2, 425, $gold);
+        $this->centeredText($im, $bonusText, 24, self::WIDTH / 2, 445, $gold);
 
         if ($winner === 'red') {
             $resultText = $redName . ' wins';
@@ -176,11 +176,11 @@ final class BattleCardGenerator
         }
 
         if ($resultText !== '') {
-            $this->centeredText($im, $resultText, 30, self::WIDTH / 2, 475, $resultColor);
+            $this->centeredText($im, $resultText, 30, self::WIDTH / 2, 495, $resultColor);
         }
 
         if ($resign) {
-            $this->centeredText($im, ucfirst($resign) . ' resigned', 18, self::WIDTH / 2, 508, $muted);
+            $this->centeredText($im, ucfirst($resign) . ' resigned', 18, self::WIDTH / 2, 528, $muted);
         }
 
         $this->centeredText($im, 'mineseeker.hu', 16, self::WIDTH / 2, self::HEIGHT - 20, $muted);
@@ -273,23 +273,23 @@ final class BattleCardGenerator
             /** Draw initials */
             $initials = mb_strtoupper(mb_substr($name, 0, 2));
             $fontSize = 48;
-            $bbox = imagettfbbox($fontSize, 0, self::FONT, $initials);
+            $bbox = imagettfbbox($fontSize, 0, $this->fontPath, $initials);
             $textW = $bbox[2] - $bbox[0];
             $textH = $bbox[1] - $bbox[7];
             $textX = $cx - $textW / 2;
             $textY = $cy + $textH / 2;
 
             $white = imagecolorallocate($im, 255, 255, 255);
-            imagettftext($im, $fontSize, 0, (int)$textX, (int)$textY, $white, self::FONT, $initials);
+            imagettftext($im, $fontSize, 0, (int)$textX, (int)$textY, $white, $this->fontPath, $initials);
         }
     }
 
     /** Render text centered on $cx. */
     private function centeredText(GdImage $im, string $text, int $size, int $cx, int $y, int $color): void
     {
-        $bbox = imagettfbbox($size, 0, self::FONT, $text);
+        $bbox = imagettfbbox($size, 0, $this->fontPath, $text);
         $w = $bbox[2] - $bbox[0];
-        imagettftext($im, $size, 0, (int)($cx - $w / 2), $y, $color, self::FONT, $text);
+        imagettftext($im, $size, 0, (int)($cx - $w / 2), $y, $color, $this->fontPath, $text);
     }
 
     /** Render text centered on $cx, shrinking font size to fit $maxWidth. */
@@ -302,7 +302,7 @@ final class BattleCardGenerator
         int     $color,
         int     $maxWidth
     ): void {
-        $bbox = imagettfbbox($size, 0, self::FONT, $text);
+        $bbox = imagettfbbox($size, 0, $this->fontPath, $text);
         $w = $bbox[2] - $bbox[0];
         if ($w > $maxWidth) {
             $size = (int)($size * $maxWidth / $w);

src/Service/RecaptchaService.php

@@ -26,50 +26,38 @@ use Symfony\Contracts\HttpClient\HttpClientInterface;
  */
 readonly final class RecaptchaService
 {
-    private const string SITEVERIFY_URL = 'https://www.google.com/recaptcha/api/siteverify';
-
-    /**
-     * Minimum score to accept a request (0.0 = bot, 1.0 = human).
-     * 0.5 is Google's recommended default threshold.
-     */
-    private const float SCORE_THRESHOLD = 0.5;
-
     public function __construct(
         private HttpClientInterface $httpClient,
         private LoggerInterface $logger,
-        #[Autowire(env: 'RECAPTCHA_SECRET_KEY')]
+        #[Autowire(env: 'CAP_API_ENDPOINT')]
+        private string $apiEndpoint,
+        #[Autowire(env: 'CAP_SECRET_KEY')]
         private string $secretKey,
     ) {}
 
-    public function verify(string $token, string $remoteIp = ''): bool
+    public function verify(string $token): bool
     {
         if ($token === '') {
             return false;
         }
 
         try {
-            $body = ['secret' => $this->secretKey, 'response' => $token];
-
-            if ($remoteIp !== '') {
-                $body['remoteip'] = $remoteIp;
-            }
+            $siteverifyUrl = rtrim($this->apiEndpoint, '/') . '/siteverify';
 
             $data = $this->httpClient
-                ->request('POST', self::SITEVERIFY_URL, ['body' => $body])
+                ->request('POST', $siteverifyUrl, [
+                    'body' => ['secret' => $this->secretKey, 'response' => $token],
+                ])
                 ->toArray();
 
-            $this->logger->info('reCAPTCHA verify response', [
-                'success'       => $data['success'] ?? null,
-                'score'         => $data['score'] ?? null,
-                'hostname'      => $data['hostname'] ?? null,
-                'error-codes'   => $data['error-codes'] ?? [],
-                'token_length'  => strlen($token),
+            $this->logger->info('Cap verify response', [
+                'success'      => $data['success'] ?? null,
+                'token_length' => strlen($token),
             ]);
 
-            return ($data['success'] ?? false) === true
-                && ($data['score'] ?? 0.0) >= self::SCORE_THRESHOLD;
+            return ($data['success'] ?? false) === true;
         } catch (\Throwable $e) {
-            $this->logger->error('reCAPTCHA verification failed: ' . $e->getMessage());
+            $this->logger->error('Cap verification failed: ' . $e->getMessage());
 
             return false;
         }

src/Story/AppStory.php

@@ -0,0 +1,33 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Story;
+
+use Zenstruck\Foundry\Attribute\AsFixture;
+use Zenstruck\Foundry\Story;
+
+/**
+ * Class AppStory
+ *
+ * @package  App\Story
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[AsFixture(name: 'main')]
+final class AppStory extends Story
+{
+    public function build(): void
+    {
+        // SomeFactory::createOne();
+    }
+}

src/Validator/RecaptchaValidator.php

@@ -11,7 +11,6 @@
 namespace App\Validator;
 
 use App\Service\RecaptchaService;
-use Symfony\Component\HttpFoundation\RequestStack;
 use Symfony\Component\Validator\Constraint;
 use Symfony\Component\Validator\ConstraintValidator;
 use Symfony\Component\Validator\Exception\UnexpectedTypeException;
@@ -26,12 +25,12 @@ use Symfony\Component\Validator\Exception\UnexpectedTypeException;
  * @link     www.splendidbear.org
  * @since    2026. 04. 12.
  */
-class RecaptchaValidator extends ConstraintValidator
+final class RecaptchaValidator extends ConstraintValidator
 {
     public function __construct(
         private readonly RecaptchaService $recaptcha,
-        private readonly RequestStack $requestStack,
-    ) {}
+    ) {
+    }
 
     public function validate(mixed $value, Constraint $constraint): void
     {
@@ -39,10 +38,7 @@ class RecaptchaValidator extends ConstraintValidator
             throw new UnexpectedTypeException($constraint, Recaptcha::class);
         }
 
-        $request  = $this->requestStack->getCurrentRequest();
-        $remoteIp = $request !== null ? ((string) $request->getClientIp()) : '';
-
-        if ($this->recaptcha->verify((string) $value, $remoteIp)) {
+        if ($this->recaptcha->verify((string)$value)) {
             return;
         }
 

symfony.lock

@@ -2,6 +2,15 @@
     "cocur/slugify": {
         "version": "v3.1"
     },
+    "dama/doctrine-test-bundle": {
+        "version": "8.6",
+        "recipe": {
+            "repo": "github.com/symfony/recipes-contrib",
+            "branch": "main",
+            "version": "8.3",
+            "ref": "dfc51177476fb39d014ed89944cde53dc3326d23"
+        }
+    },
     "doctrine/collections": {
         "version": "v1.5.0"
     },
@@ -120,6 +129,21 @@
             "ref": "3a6673f248f8fc1dd364dadfef4c5b381d1efab6"
         }
     },
+    "phpunit/phpunit": {
+        "version": "13.1",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "11.1",
+            "ref": "ca0bc067abfb40a8de1b2561b96cbfc2b833c314"
+        },
+        "files": [
+            ".env.test",
+            "phpunit.dist.xml",
+            "tests/bootstrap.php",
+            "bin/phpunit"
+        ]
+    },
     "psr/cache": {
         "version": "1.0.1"
     },
@@ -469,5 +493,18 @@
     },
     "zendframework/zend-eventmanager": {
         "version": "3.2.1"
+    },
+    "zenstruck/foundry": {
+        "version": "2.9",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "2.7",
+            "ref": "9bd824886195ebe64a24438db1b6d17eb833ac56"
+        },
+        "files": [
+            "config/packages/zenstruck_foundry.yaml",
+            "src/Story/AppStory.php"
+        ]
     }
 }

templates/Game/play.html.twig

@@ -3,9 +3,14 @@
 {% block title %} - Play!{% endblock %}
 
 {% block body %}
-    <a class="back-from-game" href="{{ path('MineSeekerBundle_homepage') }}">
-        <img src="{{ asset('/images/mine-logo-txt.png') }}" alt="Mineseeker Logo">
-    </a>
+    <div class="game-brand-bar">
+        <a class="back-from-game" href="{{ path('MineSeekerBundle_homepage') }}">
+            <img src="{{ asset('/images/mine-logo-txt.png') }}" alt="Mineseeker Logo">
+        </a>
+        <a class="game-cap-badge" href="https://trycap.dev" target="_blank" rel="noopener noreferrer">
+            <i class="fas fa-shield-halved"></i> Protected by Cap
+        </a>
+    </div>
     <div class="mine-container">
         <div id="mine-wrapper"
              data-env="{{ env }}"
@@ -14,7 +19,7 @@
              data-is-authenticated="{{ app.user ? '1' : '0' }}"
              data-mercure-hub-url="{{ mercure_hub_url }}"
              data-mercure-subscriber-jwt="{{ mercure_subscriber_jwt }}"
-             data-recaptcha-site-key="{{ recaptcha_site_key }}">
+             data-cap-api-endpoint="{{ cap_api_endpoint }}">
         </div>
     </div>
 {% endblock %}
@@ -39,6 +44,5 @@
 
 {% block javascripts %}
     {{ parent() }}
-    <script src="https://www.google.com/recaptcha/api.js?render={{ recaptcha_site_key }}" async defer></script>
     {{ vite_entry_script_tags('mineseeker', { dependency: 'react' }) }}
 {% endblock %}

templates/Official/contact.html.twig

@@ -37,6 +37,14 @@
       </p>
 
       <div class="auth-card" style="max-width: 600px; margin: 0 auto;">
+        <div class="auth-title-row">
+          <h2 class="auth-title">Contact Form</h2>
+          <a class="auth-cap-badge" href="https://trycap.dev" target="_blank" rel="noopener noreferrer">
+            <i class="fas fa-shield-halved"></i> Protected by Cap
+          </a>
+        </div>
+        <p class="auth-sub">Your message is protected by automated abuse checks.</p>
+        <div data-cap-api-endpoint="{{ cap_api_endpoint }}" style="display: none;" aria-hidden="true"></div>
         {{ form_start(form, {attr: {class: 'auth-form'}}) }}
 
         <div class="auth-field">
@@ -127,10 +135,5 @@
 
 {% block javascripts %}
   {{ parent() }}
-  <script src="https://www.google.com/recaptcha/api.js?render={{ recaptcha_site_key }}" async defer></script>
-  {{ vite_entry_script_tags('contact', { dependency: 'react' }) }}
-  <div id="contact-form-wrapper"
-       data-site-key="{{ recaptcha_site_key }}"
-       data-recaptcha-field-id="{{ form.recaptcha.vars.id }}">
-  </div>
+  {{ vite_entry_script_tags('cap') }}
 {% endblock %}

templates/Security/forgot_password.html.twig

@@ -34,8 +34,14 @@
       </div>
     {% else %}
       <div class="auth-card">
-        <h2 class="auth-title">Forgot Password</h2>
+        <div class="auth-title-row">
+          <h2 class="auth-title">Forgot Password</h2>
+          <a class="auth-cap-badge" href="https://trycap.dev" target="_blank" rel="noopener noreferrer">
+            <i class="fas fa-shield-halved"></i> Protected by Cap
+          </a>
+        </div>
         <p class="auth-sub">Enter your email and we'll send you a reset link</p>
+        <div data-cap-api-endpoint="{{ cap_api_endpoint }}" style="display: none;" aria-hidden="true"></div>
 
         {{ form_start(form, {attr: {class: 'auth-form'}}) }}
 
@@ -75,20 +81,5 @@
 
 {% block javascripts %}
   {{ parent() }}
-  <script src="https://www.google.com/recaptcha/api.js?render={{ recaptcha_site_key }}" async defer></script>
-  <script>
-    (function () {
-      const form = document.querySelector('.auth-form');
-      if (!form) return;
-      form.addEventListener('submit', function (e) {
-        e.preventDefault();
-        grecaptcha.ready(function () {
-          grecaptcha.execute('{{ recaptcha_site_key }}', {action: 'forgot_password'}).then(function (token) {
-            document.getElementById('{{ form.recaptcha.vars.id }}').value = token;
-            form.submit();
-          });
-        });
-      });
-    }());
-  </script>
+  {{ vite_entry_script_tags('cap') }}
 {% endblock %}

templates/Security/login.html.twig

@@ -36,7 +36,12 @@
     {% endfor %}
 
     <div class="auth-card">
-      <h2 class="auth-title">Sign In</h2>
+      <div class="auth-title-row">
+        <h2 class="auth-title">Sign In</h2>
+        <a class="auth-cap-badge" href="https://trycap.dev" target="_blank" rel="noopener noreferrer">
+          <i class="fas fa-shield-halved"></i> Protected by Cap
+        </a>
+      </div>
       <p class="auth-sub">Welcome back, commander</p>
 
       {% if error %}
@@ -46,6 +51,8 @@
         </div>
       {% endif %}
 
+      <div data-cap-api-endpoint="{{ cap_api_endpoint }}" style="display: none;" aria-hidden="true"></div>
+
       <form class="auth-form" method="post" action="{{ path('MineSeekerBundle_login') }}">
         <input type="hidden" name="_csrf_token" value="{{ csrf_token('authenticate') }}"/>
 
@@ -92,8 +99,6 @@
           </p>
         </div>
 
-        <input type="hidden" id="g-recaptcha-response" name="g-recaptcha-response"/>
-
         <button type="submit" class="auth-submit">
           <i class="fas fa-right-to-bracket"></i> Sign In
         </button>
@@ -121,20 +126,6 @@
 {% block javascripts %}
   {{ parent() }}
 
-  <script src="https://www.google.com/recaptcha/api.js?render={{ recaptcha_site_key }}" async defer></script>
-  <script>
-    document.querySelector('.auth-form').addEventListener('submit', function (e) {
-      e.preventDefault();
-      const form = this;
-      grecaptcha.ready(function () {
-        grecaptcha.execute('{{ recaptcha_site_key }}', {action: 'login'}).then(function (token) {
-          document.getElementById('g-recaptcha-response').value = token;
-          form.submit();
-        });
-      });
-    });
-
-  </script>
-
+  {{ vite_entry_script_tags('cap') }}
   {{ vite_entry_script_tags('passkey', { dependency: 'react' }) }}
 {% endblock %}

templates/Security/profile.html.twig

@@ -2,7 +2,9 @@
 
 {% macro stat_val(value, suffix) %}
   {%- set abbr = value >= 1000 -%}
-  <span class="profile-stat__value"{% if abbr %} title="{{ value }}"{% endif %}>{% if abbr %}{{ (value / 1000)|round(1, 'floor') }}k{% else %}{{ value }}{% endif %}{% if suffix %}<small>{{ suffix }}</small>{% endif %}</span>
+  <span
+    class="profile-stat__value"{% if abbr %} title="{{ value }}"{% endif %}>{% if abbr %}{{ (value / 1000)|round(1, 'floor') }}k{% else %}{{ value }}{% endif %}{% if suffix %}
+      <small>{{ suffix }}</small>{% endif %}</span>
 {% endmacro %}
 
 {% block title %} - Profile{% endblock %}
@@ -31,7 +33,7 @@
     <div class="profile-header">
       <div id="profile-avatar-root"
            data-upload-url="{{ path('MineSeekerBundle_profile_avatar') }}"
-           data-thumb-url="{{ app.user.avatarPath ? app.user.avatarPath|imagine_filter('avatar_thumb') : '' }}"
+           data-thumb-url="{{ app.user.avatarPath ? path('liip_imagine_filter', {path: app.user.avatarPath, filter: 'avatar_thumb'}) : '' }}"
            data-initials="{{ app.user.username|slice(0, 2)|upper }}">
       </div>
       <div class="profile-info">
@@ -134,11 +136,13 @@
             {% set result     = game.result %}
 
             {% set is_finished = game.resign is not null
-                or (my_points is not null and opp_points is not null
-                    and (my_points > 25 or opp_points > 25)) %}
+              or (my_points is not null and opp_points is not null
+              and (my_points > 25 or opp_points > 25)) %}
             {% set is_anonymous = game.oppIsGuest %}
 
-             <div class="profile-game profile-game--{{ result }}{% if not is_finished and not is_anonymous %} profile-game--ongoing{% elseif is_anonymous %} profile-game--abandoned{% endif %}{% if loop.index0 >= 5 %} profile-game--hidden{% endif %}" data-game-index="{{ loop.index0 }}">
+            <div
+              class="profile-game profile-game--{{ result }}{% if not is_finished and not is_anonymous %} profile-game--ongoing{% elseif is_anonymous %} profile-game--abandoned{% endif %}{% if loop.index0 >= 5 %} profile-game--hidden{% endif %}"
+              data-game-index="{{ loop.index0 }}">
                <span class="profile-game__badge">
                    {% if is_finished %}
                      {{ result == 'win' ? 'Win' : (result == 'loss' ? 'Loss' : 'Draw') }}

templates/Security/register.html.twig

@@ -42,8 +42,14 @@
       </div>
     {% else %}
       <div class="auth-card">
-        <h2 class="auth-title">Create Account</h2>
+        <div class="auth-title-row">
+          <h2 class="auth-title">Create Account</h2>
+          <a class="auth-cap-badge" href="https://trycap.dev" target="_blank" rel="noopener noreferrer">
+            <i class="fas fa-shield-halved"></i> Protected by Cap
+          </a>
+        </div>
         <p class="auth-sub">Join the battle — no subscription required</p>
+        <div data-cap-api-endpoint="{{ cap_api_endpoint }}" style="display: none;" aria-hidden="true"></div>
 
         {{ form_start(form, {attr: {class: 'auth-form'}}) }}
 
@@ -153,20 +159,5 @@
 
 {% block javascripts %}
   {{ parent() }}
-  <script src="https://www.google.com/recaptcha/api.js?render={{ recaptcha_site_key }}" async defer></script>
-  <script>
-    (function () {
-      const form = document.querySelector('.auth-form');
-      if (!form) return;
-      form.addEventListener('submit', function (e) {
-        e.preventDefault();
-        grecaptcha.ready(function () {
-          grecaptcha.execute('{{ recaptcha_site_key }}', {action: 'register'}).then(function (token) {
-            document.getElementById('{{ form.recaptcha.vars.id }}').value = token;
-            form.submit();
-          });
-        });
-      });
-    }());
-  </script>
+  {{ vite_entry_script_tags('cap') }}
 {% endblock %}

templates/Security/reset_password.html.twig

@@ -16,8 +16,14 @@
 {% block body %}
   <div class="auth-page">
     <div class="auth-card">
-      <h2 class="auth-title">Reset Password</h2>
+      <div class="auth-title-row">
+        <h2 class="auth-title">Reset Password</h2>
+        <a class="auth-cap-badge" href="https://trycap.dev" target="_blank" rel="noopener noreferrer">
+          <i class="fas fa-shield-halved"></i> Protected by Cap
+        </a>
+      </div>
       <p class="auth-sub">Choose a new password for your account</p>
+      <div data-cap-api-endpoint="{{ cap_api_endpoint }}" style="display: none;" aria-hidden="true"></div>
 
       {{ form_start(form, {attr: {class: 'auth-form'}}) }}
 
@@ -65,19 +71,5 @@
 
 {% block javascripts %}
   {{ parent() }}
-  <script src="https://www.google.com/recaptcha/api.js?render={{ recaptcha_site_key }}" async defer></script>
-  <script>
-    (function () {
-      document.querySelector('.auth-form').addEventListener('submit', function (e) {
-        e.preventDefault();
-        const form = this;
-        grecaptcha.ready(function () {
-          grecaptcha.execute('{{ recaptcha_site_key }}', {action: 'reset_password'}).then(function (token) {
-            document.getElementById('{{ form.recaptcha.vars.id }}').value = token;
-            form.submit();
-          });
-        });
-      });
-    }());
-  </script>
+  {{ vite_entry_script_tags('cap') }}
 {% endblock %}

templates/base.html.twig

@@ -28,6 +28,20 @@
   <link rel="icon" href="{{ asset('/images/favicon/favicon.ico') }}" type="image/x-icon">
   {% block metas %}{% endblock %}
   <title>MineSeeker{% block title %}{% endblock %}</title>
+  <script
+    defer src="https://umami.splendidbear.org/script.js"
+    data-website-id="825e02a9-d675-4cbd-9e68-72b98de2e4e9"
+  >
+  </script>
+  <script
+    defer
+    src="https://umami.splendidbear.org/recorder.js"
+    data-website-id="825e02a9-d675-4cbd-9e68-72b98de2e4e9"
+    data-sample-rate="0.15"
+    data-mask-level="moderate"
+    data-max-duration="300000"
+  >
+  </script>
   {% block stylesheets %}{% endblock %}
 </head>
 

tests/Controller/GameControllerTest.php

@@ -0,0 +1,145 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Controller;
+
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use Symfony\Bundle\FrameworkBundle\KernelBrowser;
+use App\Tests\WebTestCase;
+use Symfony\Component\HttpFoundation\Response;
+
+/**
+ * Class GameControllerTest
+ *
+ * @package  App\Tests\Controller
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('Game Controller')]
+class GameControllerTest extends WebTestCase
+{
+    private KernelBrowser $client;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->client = static::createClient();
+    }
+
+    #[Test]
+    #[TestDox('Homepage loads successfully with navigation links')]
+    public function homepageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('h1');
+        self::assertSelectorExists('a[href="/play"]');
+    }
+
+    #[Test]
+    #[TestDox('Play page loads successfully')]
+    public function playPageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/play');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertResponseHasHeader('Content-Type');
+    }
+
+    #[Test]
+    #[TestDox('Play page with game association loads successfully')]
+    public function playPageWithGameAssocLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/play/testgame123');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertResponseHasHeader('Content-Type');
+    }
+
+    #[Test]
+    #[TestDox('Privacy policy page loads successfully')]
+    public function privacyPolicyPageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/privacy-policy');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('h1');
+    }
+
+    #[Test]
+    #[TestDox('Terms of service page loads successfully')]
+    public function termsOfServicePageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/terms-of-service');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('h1');
+    }
+
+    #[Test]
+    #[TestDox('Contact page loads successfully with form')]
+    public function contactPageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/contact');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('form');
+        self::assertSelectorExists('button[type="submit"]');
+    }
+
+    #[Test]
+    #[TestDox('Landing page loads successfully with play link')]
+    public function landingPageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/landing-page');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('h1');
+        self::assertSelectorExists('a[href="/play"]');
+    }
+
+    #[Test]
+    #[TestDox('Rules page loads successfully')]
+    public function rulesPageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/rules');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('h1');
+    }
+
+    #[Test]
+    #[TestDox('Homepage contains navigation links to play, login, and register')]
+    public function homepageContainsNavigationLinks(): void
+    {
+        $crawler = $this->client->request('GET', '/');
+
+        self::assertResponseIsSuccessful();
+        self::assertSelectorExists('a[href="/play"]');
+        self::assertSelectorExists('a[href="/login"]');
+        self::assertSelectorExists('a[href="/register"]');
+    }
+
+    #[Test]
+    #[TestDox('Play page has correct meta tags for SEO and social sharing')]
+    public function playPageHasCorrectMetaTags(): void
+    {
+        $this->client->request('GET', '/play');
+
+        self::assertResponseIsSuccessful();
+        self::assertSelectorExists('meta[name="description"]');
+        self::assertSelectorExists('meta[property="og:title"]');
+    }
+}

tests/Controller/ProfileControllerTest.php

@@ -0,0 +1,146 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Controller;
+
+use App\Tests\Factory\PlayedGameFactory;
+use App\Tests\Factory\UserFactory;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use Symfony\Bundle\FrameworkBundle\KernelBrowser;
+use App\Tests\WebTestCase;
+use Symfony\Component\HttpFoundation\Response;
+
+/**
+ * Class ProfileControllerTest
+ *
+ * @package  App\Tests\Controller
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('Profile Controller')]
+class ProfileControllerTest extends WebTestCase
+{
+    private KernelBrowser $client;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->client = static::createClient();
+    }
+
+    #[Test]
+    #[TestDox('Profile page requires authentication')]
+    public function profilePageRequiresAuthentication(): void
+    {
+        $this->client->request('GET', '/profile');
+
+        self::assertResponseRedirects('/login');
+    }
+
+    #[Test]
+    #[TestDox('Profile security page requires authentication')]
+    public function profileSecurityPageRequiresAuthentication(): void
+    {
+        $this->client->request('GET', '/profile/security');
+
+        self::assertResponseRedirects('/login');
+    }
+
+    #[Test]
+    #[TestDox('Profile avatar upload requires authentication')]
+    public function profileAvatarPageRequiresAuthentication(): void
+    {
+        $this->client->request('POST', '/profile/avatar');
+
+        self::assertResponseRedirects('/login');
+    }
+
+    #[Test]
+    #[TestDox('Battle share page returns 404 for non-existent game')]
+    public function battleSharePageReturns404ForNonExistentGame(): void
+    {
+        $uuid = '00000000-0000-4000-a000-000000000000';
+        $this->client->request('GET', '/battle/' . $uuid);
+
+        self::assertResponseStatusCodeSame(Response::HTTP_NOT_FOUND);
+    }
+
+    #[Test]
+    #[TestDox('Battle share page displays valid game details')]
+    public function battleSharePageShowsValidGame(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->redWins()
+            ->create();
+
+        $crawler = $this->client->request('GET', '/battle/' . $game->uuid);
+
+        self::assertResponseIsSuccessful();
+        self::assertSelectorExists('h1');
+        self::assertGreaterThan(0, $crawler->filter('body')->count());
+    }
+
+    #[Test]
+    #[TestDox('Battle share page has Open Graph meta tags for social sharing')]
+    public function battleSharePageHasOgMetaTags(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->redWins()
+            ->create();
+
+        $this->client->request('GET', '/battle/' . $game->uuid);
+
+        self::assertResponseIsSuccessful();
+        self::assertSelectorExists('meta[property="og:title"]');
+        self::assertSelectorExists('meta[property="og:image"]');
+        self::assertSelectorExists('meta[property="og:description"]');
+        self::assertSelectorExists('meta[property="og:type"]');
+    }
+
+    #[Test]
+    #[TestDox('OG battle image returns 404 for non-existent game')]
+    public function ogBattleImageReturns404ForNonExistentGame(): void
+    {
+        $uuid = '00000000-0000-4000-a000-000000000000';
+        $this->client->request('GET', '/og/battle/' . $uuid . '.png');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_NOT_FOUND);
+    }
+
+    #[Test]
+    #[TestDox('OG battle image generates valid PNG for existing game')]
+    public function ogBattleImageReturnsImageForValidGame(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->redWins()
+            ->create();
+
+        $this->client->request('GET', '/og/battle/' . $game->uuid . '.png');
+
+        self::assertResponseIsSuccessful();
+        self::assertResponseHeaderSame('Content-Type', 'image/png');
+    }
+
+    #[Test]
+    #[TestDox('Battle share page returns 404 for invalid UUID format')]
+    public function battleSharePageWithInvalidUuidFormat(): void
+    {
+        $this->client->request('GET', '/battle/invalid-uuid');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_NOT_FOUND);
+    }
+}

tests/Controller/SecurityControllerTest.php

@@ -0,0 +1,148 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Controller;
+
+use App\Tests\Factory\UserFactory;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use Symfony\Bundle\FrameworkBundle\KernelBrowser;
+use App\Tests\WebTestCase;
+use Symfony\Component\HttpFoundation\Response;
+
+/**
+ * Class SecurityControllerTest
+ *
+ * @package  App\Tests\Controller
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('Security Controller')]
+class SecurityControllerTest extends WebTestCase
+{
+    private KernelBrowser $client;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->client = static::createClient();
+    }
+
+    #[Test]
+    #[TestDox('Login page loads successfully with form fields')]
+    public function loginPageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/login');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('form');
+        self::assertSelectorExists('input[name="_username"]');
+        self::assertSelectorExists('input[name="_password"]');
+        self::assertSelectorExists('button[type="submit"]');
+    }
+
+    #[Test]
+    #[TestDox('Login page has links to register and forgot password')]
+    public function loginPageHasRegisterLink(): void
+    {
+        $crawler = $this->client->request('GET', '/login');
+
+        self::assertResponseIsSuccessful();
+        self::assertSelectorExists('a[href="/register"]');
+        self::assertSelectorExists('a[href="/forgot-password"]');
+    }
+
+    #[Test]
+    #[TestDox('Register page loads successfully with form')]
+    public function registerPageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/register');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('form');
+        self::assertSelectorExists('button[type="submit"]');
+    }
+
+    #[Test]
+    #[TestDox('Register page has link to login')]
+    public function registerPageHasLoginLink(): void
+    {
+        $crawler = $this->client->request('GET', '/register');
+
+        self::assertResponseIsSuccessful();
+        self::assertSelectorExists('a[href="/login"]');
+    }
+
+    #[Test]
+    #[TestDox('Forgot password page loads successfully with form')]
+    public function forgotPasswordPageLoadsSuccessfully(): void
+    {
+        $crawler = $this->client->request('GET', '/forgot-password');
+
+        self::assertResponseStatusCodeSame(Response::HTTP_OK);
+        self::assertSelectorExists('form');
+        self::assertSelectorExists('button[type="submit"]');
+    }
+
+    #[Test]
+    #[TestDox('Account activation with invalid token redirects to login')]
+    public function activateWithInvalidTokenShowsError(): void
+    {
+        $this->client->request('GET', '/activate/invalid-token');
+
+        self::assertResponseRedirects('/login');
+    }
+
+    #[Test]
+    #[TestDox('Password reset with invalid token redirects to forgot password')]
+    public function resetPasswordWithInvalidTokenShowsError(): void
+    {
+        $this->client->request('GET', '/reset-password/invalid-token');
+
+        self::assertResponseRedirects('/forgot-password');
+    }
+
+    #[Test]
+    #[TestDox('Authenticated user is redirected from login page to homepage')]
+    public function authenticatedUserRedirectsFromLogin(): void
+    {
+        $user = UserFactory::createOne();
+        $this->client->loginUser($user->_real());
+
+        $this->client->request('GET', '/login');
+
+        self::assertResponseRedirects('/');
+    }
+
+    #[Test]
+    #[TestDox('Authenticated user is redirected from register page to homepage')]
+    public function authenticatedUserRedirectsFromRegister(): void
+    {
+        $user = UserFactory::createOne();
+        $this->client->loginUser($user->_real());
+
+        $this->client->request('GET', '/register');
+
+        self::assertResponseRedirects('/');
+    }
+
+    #[Test]
+    #[TestDox('Login form has remember me checkbox')]
+    public function loginFormHasRememberMeCheckbox(): void
+    {
+        $crawler = $this->client->request('GET', '/login');
+
+        self::assertResponseIsSuccessful();
+        self::assertSelectorExists('input[name="_remember_me"]');
+    }
+}

tests/Dto/ProfileChartDataDtoTest.php

@@ -0,0 +1,89 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Dto;
+
+use App\Dto\ProfileChartDataDto;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Class ProfileChartDataDtoTest
+ *
+ * @package  App\Tests\Dto
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('Profile Chart Data Dto')]
+class ProfileChartDataDtoTest extends TestCase
+{
+    #[Test]
+    #[TestDox('Json serialize returns all properties')]
+    public function jsonSerializeReturnsAllProperties(): void
+    {
+        $months = ['Jan', 'Feb', 'Mar'];
+        $wins = [5, 8, 10];
+        $losses = [2, 3, 4];
+        $draws = [1, 0, 1];
+        $recentGames = [
+            ['id' => 1, 'result' => 'win'],
+            ['id' => 2, 'result' => 'loss'],
+        ];
+
+        $dto = new ProfileChartDataDto(
+            months: $months,
+            wins: $wins,
+            losses: $losses,
+            draws: $draws,
+            pieWins: 23,
+            pieLosses: 9,
+            pieDraws: 2,
+            recentGames: $recentGames,
+        );
+
+        $json = $dto->jsonSerialize();
+
+        $this->assertSame($months, $json['months']);
+        $this->assertSame($wins, $json['wins']);
+        $this->assertSame($losses, $json['losses']);
+        $this->assertSame($draws, $json['draws']);
+        $this->assertSame(23, $json['pieWins']);
+        $this->assertSame(9, $json['pieLosses']);
+        $this->assertSame(2, $json['pieDraws']);
+        $this->assertSame($recentGames, $json['recentGames']);
+    }
+
+    #[Test]
+    #[TestDox('Constructor with empty arrays')]
+    public function constructorWithEmptyArrays(): void
+    {
+        $dto = new ProfileChartDataDto(
+            months: [],
+            wins: [],
+            losses: [],
+            draws: [],
+            pieWins: 0,
+            pieLosses: 0,
+            pieDraws: 0,
+            recentGames: [],
+        );
+
+        $json = $dto->jsonSerialize();
+
+        $this->assertSame([], $json['months']);
+        $this->assertSame([], $json['wins']);
+        $this->assertSame([], $json['recentGames']);
+        $this->assertSame(0, $json['pieWins']);
+    }
+}

tests/Dto/ProfileGameDtoTest.php

@@ -0,0 +1,126 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Dto;
+
+use App\Dto\ProfileGameDto;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Class ProfileGameDtoTest
+ *
+ * @package  App\Tests\Dto
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('Profile Game Dto')]
+class ProfileGameDtoTest extends TestCase
+{
+    #[Test]
+    #[TestDox('Json serialize returns all properties')]
+    public function jsonSerializeReturnsAllProperties(): void
+    {
+        $dto = new ProfileGameDto(
+            id: 1,
+            uuid: '550e8400-e29b-41d4-a716-446655440000',
+            redName: 'RedPlayer',
+            blueName: 'BluePlayer',
+            redAvatar: '/uploads/avatars/red.png',
+            blueAvatar: '/uploads/avatars/blue.png',
+            redPoints: 10,
+            bluePoints: 8,
+            redExplodedBomb: false,
+            blueExplodedBomb: true,
+            resign: null,
+            created: '2026-04-20 10:00',
+            date: '2026-04-20 10:30',
+            isRed: true,
+            result: 'win',
+            myPoints: 10,
+            oppPoints: 8,
+            redBonusPoints: 5.5,
+            blueBonusPoints: 2.0,
+            redBonusStats: ['blindHits' => 2, 'chainBest' => 3],
+            blueBonusStats: ['blindHits' => 1, 'chainBest' => 2],
+            bothRegistered: true,
+        );
+
+        $json = $dto->jsonSerialize();
+
+        $this->assertSame(1, $json['id']);
+        $this->assertSame('550e8400-e29b-41d4-a716-446655440000', $json['uuid']);
+        $this->assertSame('RedPlayer', $json['redName']);
+        $this->assertSame('BluePlayer', $json['blueName']);
+        $this->assertSame('/uploads/avatars/red.png', $json['redAvatar']);
+        $this->assertSame('/uploads/avatars/blue.png', $json['blueAvatar']);
+        $this->assertSame(10, $json['redPoints']);
+        $this->assertSame(8, $json['bluePoints']);
+        $this->assertFalse($json['redExplodedBomb']);
+        $this->assertTrue($json['blueExplodedBomb']);
+        $this->assertNull($json['resign']);
+        $this->assertSame('2026-04-20 10:00', $json['created']);
+        $this->assertSame('2026-04-20 10:30', $json['date']);
+        $this->assertTrue($json['isRed']);
+        $this->assertSame('win', $json['result']);
+        $this->assertSame(10, $json['myPoints']);
+        $this->assertSame(8, $json['oppPoints']);
+        $this->assertSame(5.5, $json['redBonusPoints']);
+        $this->assertSame(2.0, $json['blueBonusPoints']);
+        $this->assertSame(['blindHits' => 2, 'chainBest' => 3], $json['redBonusStats']);
+        $this->assertSame(['blindHits' => 1, 'chainBest' => 2], $json['blueBonusStats']);
+        $this->assertTrue($json['bothRegistered']);
+    }
+
+    #[Test]
+    #[TestDox('Json serialize with null values')]
+    public function jsonSerializeWithNullValues(): void
+    {
+        $dto = new ProfileGameDto(
+            id: null,
+            uuid: null,
+            redName: 'Guest',
+            blueName: 'Guest',
+            redAvatar: null,
+            blueAvatar: null,
+            redPoints: null,
+            bluePoints: null,
+            redExplodedBomb: null,
+            blueExplodedBomb: null,
+            resign: null,
+            created: null,
+            date: null,
+            isRed: false,
+            result: 'draw',
+            myPoints: null,
+            oppPoints: null,
+            redBonusPoints: 0.0,
+            blueBonusPoints: 0.0,
+            redBonusStats: [],
+            blueBonusStats: [],
+            bothRegistered: false,
+        );
+
+        $json = $dto->jsonSerialize();
+
+        $this->assertNull($json['id']);
+        $this->assertNull($json['uuid']);
+        $this->assertNull($json['redAvatar']);
+        $this->assertNull($json['blueAvatar']);
+        $this->assertNull($json['redPoints']);
+        $this->assertNull($json['bluePoints']);
+        $this->assertSame('draw', $json['result']);
+        $this->assertFalse($json['bothRegistered']);
+    }
+}

tests/Dto/ProfileStatsDtoTest.php

@@ -0,0 +1,134 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Dto;
+
+use App\Dto\ProfileStatsDto;
+use App\Entity\UserStats;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Class ProfileStatsDtoTest
+ *
+ * @package  App\Tests\Dto
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('Profile Stats Dto')]
+class ProfileStatsDtoTest extends TestCase
+{
+    #[Test]
+    #[TestDox('From user stats with valid stats')]
+    public function fromUserStatsWithValidStats(): void
+    {
+        $userStats = new UserStats();
+        $userStats->userId = 1;
+        $userStats->totalGames = 100;
+        $userStats->wins = 60;
+        $userStats->losses = 30;
+        $userStats->draws = 10;
+        $userStats->totalMines = 500;
+        $userStats->totalBonusPoints = '150.5';
+        $userStats->avgBonus = '2.5';
+        $userStats->bestChain = 5;
+        $userStats->blindHits = 20;
+        $userStats->edgeMines = 15;
+        $userStats->gamesWithScores = 90;
+
+        $dto = ProfileStatsDto::fromUserStats($userStats);
+
+        $this->assertSame(100, $dto->total);
+        $this->assertSame(60, $dto->wins);
+        $this->assertSame(30, $dto->losses);
+        $this->assertSame(10, $dto->draws);
+        $this->assertSame(500, $dto->minesHit);
+        $this->assertSame(67, $dto->winRate); // 60/90 * 100 = 67
+        $this->assertSame(6, $dto->avgScore); // 500/90 = 5.56 -> 6
+        $this->assertSame(150.5, $dto->bonusPoints);
+        $this->assertSame(2.5, $dto->avgBonus);
+        $this->assertSame(5, $dto->bestChain);
+        $this->assertSame(20, $dto->blindHits);
+        $this->assertSame(15, $dto->edgeMines);
+    }
+
+    #[Test]
+    #[TestDox('From user stats with null returns empty')]
+    public function fromUserStatsWithNullReturnsEmpty(): void
+    {
+        $dto = ProfileStatsDto::fromUserStats(null);
+
+        $this->assertSame(0, $dto->total);
+        $this->assertSame(0, $dto->wins);
+        $this->assertSame(0, $dto->losses);
+        $this->assertSame(0, $dto->draws);
+        $this->assertSame(0, $dto->minesHit);
+        $this->assertSame(0, $dto->winRate);
+        $this->assertSame(0, $dto->avgScore);
+        $this->assertSame(0.0, $dto->bonusPoints);
+        $this->assertSame(0.0, $dto->avgBonus);
+        $this->assertSame(0, $dto->bestChain);
+        $this->assertSame(0, $dto->blindHits);
+        $this->assertSame(0, $dto->edgeMines);
+    }
+
+    #[Test]
+    #[TestDox('Empty returns default values')]
+    public function emptyReturnsDefaultValues(): void
+    {
+        $dto = ProfileStatsDto::empty();
+
+        $this->assertSame(0, $dto->total);
+        $this->assertSame(0, $dto->wins);
+        $this->assertSame(0, $dto->losses);
+        $this->assertSame(0, $dto->draws);
+        $this->assertSame(0, $dto->minesHit);
+        $this->assertSame(0, $dto->winRate);
+        $this->assertSame(0, $dto->avgScore);
+        $this->assertSame(0.0, $dto->bonusPoints);
+        $this->assertSame(0.0, $dto->avgBonus);
+        $this->assertSame(0, $dto->bestChain);
+        $this->assertSame(0, $dto->blindHits);
+        $this->assertSame(0, $dto->edgeMines);
+    }
+
+    #[Test]
+    #[TestDox('Win rate calculation with no games with scores')]
+    public function winRateCalculationWithNoGamesWithScores(): void
+    {
+        $userStats = new UserStats();
+        $userStats->totalGames = 10;
+        $userStats->wins = 5;
+        $userStats->losses = 5;
+        $userStats->draws = 0;
+        $userStats->gamesWithScores = 0;
+
+        $dto = ProfileStatsDto::fromUserStats($userStats);
+
+        $this->assertSame(0, $dto->winRate);
+    }
+
+    #[Test]
+    #[TestDox('Avg score calculation with no games with scores')]
+    public function avgScoreCalculationWithNoGamesWithScores(): void
+    {
+        $userStats = new UserStats();
+        $userStats->totalMines = 100;
+        $userStats->gamesWithScores = 0;
+
+        $dto = ProfileStatsDto::fromUserStats($userStats);
+
+        $this->assertSame(0, $dto->avgScore);
+    }
+}

tests/Entity/UserStatsTest.php

@@ -0,0 +1,142 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Entity;
+
+use App\Entity\UserStats;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Class UserStatsTest
+ *
+ * @package  App\Tests\Entity
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('User Stats')]
+class UserStatsTest extends TestCase
+{
+    #[Test]
+    #[TestDox('Get win rate calculates correctly')]
+    public function getWinRateCalculatesCorrectly(): void
+    {
+        $stats = new UserStats();
+        $stats->wins = 60;
+        $stats->gamesWithScores = 100;
+
+        $result = $stats->getWinRate();
+
+        $this->assertSame(60, $result);
+    }
+
+    #[Test]
+    #[TestDox('Get win rate with zero games returns zero')]
+    public function getWinRateWithZeroGamesReturnsZero(): void
+    {
+        $stats = new UserStats();
+        $stats->wins = 10;
+        $stats->gamesWithScores = 0;
+
+        $result = $stats->getWinRate();
+
+        $this->assertSame(0, $result);
+    }
+
+    #[Test]
+    #[TestDox('Get win rate rounds correctly')]
+    public function getWinRateRoundsCorrectly(): void
+    {
+        $stats = new UserStats();
+        $stats->wins = 33;
+        $stats->gamesWithScores = 100;
+
+        $result = $stats->getWinRate();
+
+        $this->assertSame(33, $result);
+    }
+
+    #[Test]
+    #[TestDox('Get avg score calculates correctly')]
+    public function getAvgScoreCalculatesCorrectly(): void
+    {
+        $stats = new UserStats();
+        $stats->totalMines = 550;
+        $stats->gamesWithScores = 100;
+
+        $result = $stats->getAvgScore();
+
+        $this->assertSame(6, $result); // 550/100 = 5.5 -> 6
+    }
+
+    #[Test]
+    #[TestDox('Get avg score with zero games returns zero')]
+    public function getAvgScoreWithZeroGamesReturnsZero(): void
+    {
+        $stats = new UserStats();
+        $stats->totalMines = 100;
+        $stats->gamesWithScores = 0;
+
+        $result = $stats->getAvgScore();
+
+        $this->assertSame(0, $result);
+    }
+
+    #[Test]
+    #[TestDox('Get avg score rounds down')]
+    public function getAvgScoreRoundsDown(): void
+    {
+        $stats = new UserStats();
+        $stats->totalMines = 101;
+        $stats->gamesWithScores = 100;
+
+        $result = $stats->getAvgScore();
+
+        $this->assertSame(1, $result); // 101/100 = 1.01 -> 1
+    }
+
+    #[Test]
+    #[TestDox('Get avg score rounds up')]
+    public function getAvgScoreRoundsUp(): void
+    {
+        $stats = new UserStats();
+        $stats->totalMines = 151;
+        $stats->gamesWithScores = 100;
+
+        $result = $stats->getAvgScore();
+
+        $this->assertSame(2, $result); // 151/100 = 1.51 -> 2
+    }
+
+    #[Test]
+    #[TestDox('Default values')]
+    public function defaultValues(): void
+    {
+        $stats = new UserStats();
+
+        $this->assertSame(0, $stats->userId);
+        $this->assertSame(0, $stats->totalGames);
+        $this->assertSame(0, $stats->wins);
+        $this->assertSame(0, $stats->losses);
+        $this->assertSame(0, $stats->draws);
+        $this->assertSame(0, $stats->totalMines);
+        $this->assertSame('0.0', $stats->totalBonusPoints);
+        $this->assertSame('0.0', $stats->avgBonus);
+        $this->assertSame(0, $stats->bestChain);
+        $this->assertSame(0, $stats->blindHits);
+        $this->assertSame(0, $stats->edgeMines);
+        $this->assertSame(0, $stats->gamesWithScores);
+        $this->assertNull($stats->lastGameAt);
+    }
+}

tests/Factory/ContactMessageFactory.php

@@ -0,0 +1,55 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Factory;
+
+use App\Entity\ContactMessage;
+use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
+
+/**
+ * Class ContactMessageFactory
+ *
+ * @package  App\Tests\Factory
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ *
+ * @extends PersistentProxyObjectFactory<ContactMessage>
+ */
+class ContactMessageFactory extends PersistentProxyObjectFactory
+{
+    protected function defaults(): array
+    {
+        return [
+            'name'      => self::faker()->name(),
+            'email'     => self::faker()->safeEmail(),
+            'content'   => self::faker()->paragraph(3),
+            'consent'   => true,
+            'ipAddress' => self::faker()->ipv4(),
+        ];
+    }
+
+    public static function class(): string
+    {
+        return ContactMessage::class;
+    }
+
+    public function withoutConsent(): self
+    {
+        return $this->with(['consent' => false]);
+    }
+
+    public function anonymous(): self
+    {
+        return $this->with(['ipAddress' => null]);
+    }
+}

tests/Factory/GamerFactory.php

@@ -0,0 +1,51 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Factory;
+
+use App\Entity\Gamer;
+use DateTime;
+use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
+
+/**
+ * Class GamerFactory
+ *
+ * @package  App\Tests\Factory
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ *
+ * @extends PersistentProxyObjectFactory<Gamer>
+ */
+class GamerFactory extends PersistentProxyObjectFactory
+{
+    protected function defaults(): array
+    {
+        return [
+            'userName'      => self::faker()->userName(),
+            'ip'            => self::faker()->ipv4(),
+            'country'       => self::faker()->countryCode(),
+            'userAgent'     => self::faker()->userAgent(),
+            'connTimestamp' => new DateTime(),
+        ];
+    }
+
+    public static function class(): string
+    {
+        return Gamer::class;
+    }
+
+    public function anonymous(): self
+    {
+        return $this->with(['userName' => sprintf('Guest_%d', self::faker()->randomNumber(5))]);
+    }
+}

tests/Factory/GridFactory.php

@@ -0,0 +1,53 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Factory;
+
+use App\Entity\Grid;
+use App\Entity\GridRow;
+use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
+
+/**
+ * Class GridFactory
+ *
+ * @package  App\Tests\Factory
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ *
+ * @extends PersistentProxyObjectFactory<Grid>
+ */
+class GridFactory extends PersistentProxyObjectFactory
+{
+    protected function defaults(): array
+    {
+        return [
+            'playedGame' => PlayedGameFactory::new(),
+        ];
+    }
+
+    public static function class(): string
+    {
+        return Grid::class;
+    }
+
+    protected function initialize(): static
+    {
+        return $this->afterInstantiate(function (Grid $grid): void {
+            for ($i = 0; $i < 16; $i++) {
+                /** @var GridRow $factory */
+                $factory = GridRowFactory::new()->create()->_real();
+                $grid->addGridRow($factory);
+            }
+        });
+    }
+}

tests/Factory/GridRowFactory.php

@@ -0,0 +1,52 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Factory;
+
+use App\Entity\GridRow;
+use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
+
+/**
+ * Class GridRowFactory
+ *
+ * @package  App\Tests\Factory
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ *
+ * @extends PersistentProxyObjectFactory<GridRow>
+ */
+class GridRowFactory extends PersistentProxyObjectFactory
+{
+    protected function defaults(): array
+    {
+        $columns = [];
+
+        for ($i = 0; $i < 16; $i++) {
+            $columns[] = self::faker()->numberBetween(0, 8);
+        }
+
+        return [
+            'gridCol' => $columns,
+        ];
+    }
+
+    public static function class(): string
+    {
+        return GridRow::class;
+    }
+
+    public function withColumns(array $columns): self
+    {
+        return $this->with(['gridCol' => $columns]);
+    }
+}

tests/Factory/PlayedGameFactory.php

@@ -0,0 +1,108 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Factory;
+
+use App\Entity\PlayedGame;
+use DateTime;
+use Symfony\Component\Uid\Uuid;
+use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
+
+/**
+ * Class PlayedGameFactory
+ *
+ * @package  App\Tests\Factory
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ *
+ * @extends PersistentProxyObjectFactory<PlayedGame>
+ */
+class PlayedGameFactory extends PersistentProxyObjectFactory
+{
+    protected function defaults(): array
+    {
+        return [
+            'uuid'             => Uuid::v4(),
+            'gameAssoc'        => self::faker()->uuid(),
+            'redPoints'        => self::faker()->numberBetween(0, 51),
+            'bluePoints'       => self::faker()->numberBetween(0, 51),
+            'redExplodedBomb'  => false,
+            'blueExplodedBomb' => false,
+            'resign'           => null,
+            'redBonusPoints'   => self::faker()->randomFloat(2, 0, 100),
+            'blueBonusPoints'  => self::faker()->randomFloat(2, 0, 100),
+            'redBonusStats'    => null,
+            'blueBonusStats'   => null,
+            'created'          => new DateTime(),
+            'updated'          => new DateTime(),
+        ];
+    }
+
+    public static function class(): string
+    {
+        return PlayedGame::class;
+    }
+
+    public function withRegisteredPlayers(): self
+    {
+        return $this->with([
+            'red'  => UserFactory::new(),
+            'blue' => UserFactory::new(),
+        ]);
+    }
+
+    public function withAnonymousPlayers(): self
+    {
+        return $this->with([
+            'redAnon'  => GamerFactory::new(),
+            'blueAnon' => GamerFactory::new(),
+        ]);
+    }
+
+    public function withMixedPlayers(): self
+    {
+        return $this->with([
+            'red'      => UserFactory::new(),
+            'blueAnon' => GamerFactory::new(),
+        ]);
+    }
+
+    public function finished(): self
+    {
+        return $this->with([
+            'redPoints'  => 26,
+            'bluePoints' => 25,
+        ]);
+    }
+
+    public function redWins(): self
+    {
+        return $this->with([
+            'redPoints'  => 26,
+            'bluePoints' => self::faker()->numberBetween(0, 25),
+        ]);
+    }
+
+    public function blueWins(): self
+    {
+        return $this->with([
+            'redPoints'  => self::faker()->numberBetween(0, 25),
+            'bluePoints' => 26,
+        ]);
+    }
+
+    public function resigned(string $player): self
+    {
+        return $this->with(['resign' => $player]);
+    }
+}

tests/Factory/StepFactory.php

@@ -0,0 +1,68 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Factory;
+
+use App\Entity\Step;
+use DateTime;
+use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
+
+/**
+ * Class StepFactory
+ *
+ * @package  App\Tests\Factory
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ *
+ * @extends PersistentProxyObjectFactory<Step>
+ */
+class StepFactory extends PersistentProxyObjectFactory
+{
+    protected function defaults(): array
+    {
+        return [
+            'row'           => self::faker()->numberBetween(0, 15),
+            'col'           => self::faker()->numberBetween(0, 15),
+            'wBomb'         => self::faker()->boolean(),
+            'player'        => self::faker()->randomElement(['red', 'blue']),
+            'revealedCells' => null,
+            'playedGame'    => PlayedGameFactory::new(),
+            'created'       => new DateTime(),
+        ];
+    }
+
+    public static function class(): string
+    {
+        return Step::class;
+    }
+
+    public function mine(): self
+    {
+        return $this->with(['wBomb' => true]);
+    }
+
+    public function safe(): self
+    {
+        return $this->with(['wBomb' => false]);
+    }
+
+    public function forPlayer(string $player): self
+    {
+        return $this->with(['player' => $player]);
+    }
+
+    public function withRevealedCells(array $cells): self
+    {
+        return $this->with(['revealedCells' => $cells]);
+    }
+}

tests/Factory/UserFactory.php

@@ -0,0 +1,60 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Factory;
+
+use App\Entity\User;
+use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
+
+/**
+ * Class UserFactory
+ *
+ * @package  App\Tests\Factory
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ *
+ * @extends PersistentProxyObjectFactory<User>
+ */
+class UserFactory extends PersistentProxyObjectFactory
+{
+    protected function defaults(): array
+    {
+        return [
+            'username' => self::faker()->unique()->userName(),
+            'email' => self::faker()->unique()->safeEmail(),
+            'password' => 'hashedpassword',
+            'isVerified' => true,
+            'roles' => [],
+        ];
+    }
+
+    public static function class(): string
+    {
+        return User::class;
+    }
+
+    public function withPassword(string $hashedPassword): self
+    {
+        return $this->with(['password' => $hashedPassword]);
+    }
+
+    public function unverified(): self
+    {
+        return $this->with(['isVerified' => false]);
+    }
+
+    public function withRoles(array $roles): self
+    {
+        return $this->with(['roles' => $roles]);
+    }
+}

tests/Factory/WebAuthnCredentialFactory.php

@@ -0,0 +1,62 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Factory;
+
+use App\Entity\WebAuthnCredential;
+use DateTime;
+use Zenstruck\Foundry\Persistence\PersistentProxyObjectFactory;
+
+/**
+ * Class WebAuthnCredentialFactory
+ *
+ * @package  App\Tests\Factory
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ *
+ * @extends PersistentProxyObjectFactory<WebAuthnCredential>
+ */
+class WebAuthnCredentialFactory extends PersistentProxyObjectFactory
+{
+    protected function defaults(): array
+    {
+        return [
+            'user'                  => UserFactory::new(),
+            'credentialData'        => json_encode([
+                'type'       => 'public-key',
+                'id'         => base64_encode(self::faker()->uuid()),
+                'transports' => ['usb', 'nfc'],
+            ], JSON_THROW_ON_ERROR),
+            'credentialName'        => self::faker()->words(3, true),
+            'createdAt'             => new DateTime(),
+            'lastUsedAt'            => null,
+            'isBackupEligible'      => self::faker()->boolean(),
+            'isBackupAuthenticated' => self::faker()->boolean(),
+        ];
+    }
+
+    public static function class(): string
+    {
+        return WebAuthnCredential::class;
+    }
+
+    public function withName(string $name): self
+    {
+        return $this->with(['credentialName' => $name]);
+    }
+
+    public function recentlyUsed(): self
+    {
+        return $this->with(['lastUsedAt' => new DateTime()]);
+    }
+}

tests/Integration/FactoryExampleTest.php

@@ -0,0 +1,211 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Integration;
+
+use App\Entity\PlayedGame;
+use App\Entity\User;
+use App\Tests\Factory\ContactMessageFactory;
+use App\Tests\Factory\GamerFactory;
+use App\Tests\Factory\GridFactory;
+use App\Tests\Factory\PlayedGameFactory;
+use App\Tests\Factory\StepFactory;
+use App\Tests\Factory\UserFactory;
+use App\Tests\Factory\WebAuthnCredentialFactory;
+use App\Tests\WebTestCase;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+
+/**
+ * Class FactoryExampleTest
+ *
+ * Example test demonstrating Foundry factory usage
+ *
+ * @package  App\Tests\Integration
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('Factory Examples')]
+class FactoryExampleTest extends WebTestCase
+{
+    #[Test]
+    #[TestDox('Creates a verified user with UserFactory')]
+    public function createUser(): void
+    {
+        $user = UserFactory::createOne();
+
+        self::assertInstanceOf(User::class, $user->_real());
+        self::assertNotNull($user->username);
+        self::assertNotNull($user->email);
+        self::assertTrue($user->isVerified);
+    }
+
+    #[Test]
+    #[TestDox('Creates an unverified user')]
+    public function createUnverifiedUser(): void
+    {
+        $user = UserFactory::createOne(['isVerified' => false]);
+
+        self::assertFalse($user->isVerified);
+    }
+
+    #[Test]
+    #[TestDox('Creates multiple users at once')]
+    public function createMultipleUsers(): void
+    {
+        UserFactory::createMany(5);
+
+        self::assertCount(5, UserFactory::repository()->findAll());
+    }
+
+    #[Test]
+    #[TestDox('Creates an anonymous gamer with guest username')]
+    public function createAnonymousGamer(): void
+    {
+        $gamer = GamerFactory::new()->anonymous()->create();
+
+        self::assertStringStartsWith('Guest_', $gamer->userName);
+        self::assertNotNull($gamer->ip);
+        self::assertNotNull($gamer->connTimestamp);
+    }
+
+    #[Test]
+    #[TestDox('Creates a game with two registered players')]
+    public function createGameWithRegisteredPlayers(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->create();
+
+        self::assertInstanceOf(PlayedGame::class, $game->_real());
+        self::assertNotNull($game->red);
+        self::assertNotNull($game->blue);
+        self::assertNull($game->redAnon);
+        self::assertNull($game->blueAnon);
+    }
+
+    #[Test]
+    #[TestDox('Creates a game with two anonymous players')]
+    public function createGameWithAnonymousPlayers(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withAnonymousPlayers()
+            ->create();
+
+        self::assertNull($game->red);
+        self::assertNull($game->blue);
+        self::assertNotNull($game->redAnon);
+        self::assertNotNull($game->blueAnon);
+    }
+
+    #[Test]
+    #[TestDox('Creates a finished game where red player wins')]
+    public function createFinishedGame(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->redWins()
+            ->create();
+
+        self::assertEquals(26, $game->redPoints);
+        self::assertLessThan(26, $game->bluePoints);
+    }
+
+    #[Test]
+    #[TestDox('Creates a game with multiple steps from both players')]
+    public function createGameWithSteps(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->create();
+
+        StepFactory::new()
+            ->forPlayer('red')
+            ->mine()
+            ->create(['playedGame' => $game]);
+
+        StepFactory::new()
+            ->forPlayer('red')
+            ->mine()
+            ->create(['playedGame' => $game]);
+
+        StepFactory::new()
+            ->forPlayer('red')
+            ->mine()
+            ->create(['playedGame' => $game]);
+
+        StepFactory::new()
+            ->forPlayer('blue')
+            ->safe()
+            ->create(['playedGame' => $game]);
+
+        StepFactory::new()
+            ->forPlayer('blue')
+            ->safe()
+            ->create(['playedGame' => $game]);
+
+        self::assertCount(5, StepFactory::repository()->findAll());
+    }
+
+    #[Test]
+    #[TestDox('Creates a game with a 16x16 grid')]
+    public function createGameWithGrid(): void
+    {
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->create();
+
+        $grid = GridFactory::createOne(['playedGame' => $game]);
+
+        self::assertCount(16, $grid->gridRow);
+    }
+
+    #[Test]
+    #[TestDox('Creates a WebAuthn credential for a user')]
+    public function createWebAuthnCredential(): void
+    {
+        $user = UserFactory::createOne();
+
+        $credential = WebAuthnCredentialFactory::new()
+            ->withName('YubiKey 5C')
+            ->recentlyUsed()
+            ->create(['user' => $user]);
+
+        self::assertEquals($user->_real(), $credential->user);
+        self::assertEquals('YubiKey 5C', $credential->credentialName);
+        self::assertNotNull($credential->lastUsedAt);
+    }
+
+    #[Test]
+    #[TestDox('Creates a contact message with consent')]
+    public function createContactMessage(): void
+    {
+        $message = ContactMessageFactory::createOne();
+
+        self::assertNotNull($message->name);
+        self::assertNotNull($message->email);
+        self::assertNotNull($message->content);
+        self::assertTrue($message->consent);
+        self::assertNotNull($message->createdAt);
+    }
+
+    #[Test]
+    #[TestDox('Tests are isolated - database is reset between tests')]
+    public function databaseIsolation(): void
+    {
+        UserFactory::createMany(3);
+        self::assertCount(3, UserFactory::repository()->findAll());
+
+        /** Database will be reset before next test due to ResetDatabase trait */
+    }
+}

tests/README.md

@@ -0,0 +1,108 @@
+# Tests Directory
+
+This directory contains all test files for the MineSeeker project.
+
+## Quick Start
+
+```bash
+# Run all tests (recommended)
+make test
+
+# Or with PHPUnit directly:
+vendor/bin/phpunit
+
+# Run specific test file
+vendor/bin/phpunit tests/Controller/ProfileControllerTest.php
+
+# Run with filter
+vendor/bin/phpunit --filter testCreateUser
+```
+
+## Documentation
+
+For comprehensive testing documentation, see:
+
+- **[Testing Guide](../docs/testing/TESTING.md)** - Complete testing setup, best practices, troubleshooting
+- **[Factory Documentation](../docs/testing/FACTORIES.md)** - Detailed factory API reference
+
+## Directory Structure
+
+```
+tests/
+├── Controller/          # HTTP endpoint tests
+├── Dto/                 # Data Transfer Object tests
+├── Entity/              # Entity logic tests
+├── Service/             # Service layer tests
+├── Integration/         # Integration tests (example: FactoryExampleTest.php)
+├── Factory/             # Foundry factory classes
+│   ├── UserFactory.php
+│   ├── GamerFactory.php
+│   ├── PlayedGameFactory.php
+│   ├── StepFactory.php
+│   ├── GridFactory.php
+│   ├── GridRowFactory.php
+│   ├── WebAuthnCredentialFactory.php
+│   └── ContactMessageFactory.php
+├── WebTestCase.php      # Base test class (extends this!)
+├── bootstrap.php        # PHPUnit bootstrap
+└── README.md            # This file
+```
+
+## Quick Factory Examples
+
+```php
+use App\Tests\Factory\UserFactory;
+use App\Tests\Factory\PlayedGameFactory;
+use App\Tests\WebTestCase;
+
+class MyTest extends WebTestCase
+{
+    public function testExample(): void
+    {
+        /** Create user */
+        $user = UserFactory::createOne();
+
+        /** Create game with registered players */
+        $game = PlayedGameFactory::new()
+            ->withRegisteredPlayers()
+            ->redWins()
+            ->create();
+
+        /** Create multiple entities */
+        UserFactory::createMany(5);
+
+        /** Access repository */
+        $users = UserFactory::repository()->findAll();
+    }
+}
+```
+
+## Important Notes
+
+- **Always extend `App\Tests\WebTestCase`** - provides database isolation
+- **Use factories** - don't manually create entities with `new Entity()`
+- **Test database** - Tests run on `mineseeker_test`, never production
+- **Automatic rollback** - Each test is wrapped in a transaction
+
+## Test Database Setup (One-time)
+
+```bash
+# Create test database
+bin/console dbal:run-sql "CREATE DATABASE mineseeker_test"
+
+# Run migrations
+bin/console doctrine:migrations:migrate --env=test --no-interaction
+```
+
+## Troubleshooting
+
+### Tests interfering with each other?
+→ Make sure your test extends `App\Tests\WebTestCase`
+
+### Database schema out of sync?
+→ Run `bin/console doctrine:migrations:migrate --env=test`
+
+### Memory limit errors?
+→ Run `php -d memory_limit=512M vendor/bin/phpunit`
+
+For more troubleshooting, see [Testing Guide](../docs/testing/TESTING.md#troubleshooting).

tests/Service/MercureJwtServiceTest.php

@@ -0,0 +1,109 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Service;
+
+use App\Service\MercureJwtService;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * Class MercureJwtServiceTest
+ *
+ * @package  App\Tests\Service
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[TestDox('Mercure Jwt Service')]
+class MercureJwtServiceTest extends TestCase
+{
+    /** JWT HS256 requires at least 32 characters for the secret key  */
+    private const SECRET = 'test-mercure-secret-key-12345678901234567890';
+
+    private MercureJwtService $service;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->service = new MercureJwtService(self::SECRET);
+    }
+
+    #[Test]
+    #[TestDox('Mint subscriber token returns valid jwt')]
+    public function mintSubscriberTokenReturnsValidJwt(): void
+    {
+        $token = $this->service->mintSubscriberToken('game123', 'player1');
+
+        $this->assertIsString($token);
+        $this->assertNotEmpty($token);
+
+        /** Token should have 3 parts (header.payload.signature)  */
+        $parts = explode('.', $token);
+        $this->assertCount(3, $parts);
+    }
+
+    #[Test]
+    #[TestDox('Mint subscriber token with different game assoc')]
+    public function mintSubscriberTokenWithDifferentGameAssoc(): void
+    {
+        $token1 = $this->service->mintSubscriberToken('gameA', 'player1');
+        $token2 = $this->service->mintSubscriberToken('gameB', 'player1');
+
+        /** Different gameAssoc should result in different tokens  */
+        $this->assertNotSame($token1, $token2);
+    }
+
+    #[Test]
+    #[TestDox('Mint subscriber token with different user names')]
+    public function mintSubscriberTokenWithDifferentUserNames(): void
+    {
+        $token1 = $this->service->mintSubscriberToken('game1', 'playerA');
+        $token2 = $this->service->mintSubscriberToken('game1', 'playerB');
+
+        /** Different usernames should result in different tokens  */
+        $this->assertNotSame($token1, $token2);
+    }
+
+    #[Test]
+    #[TestDox('Mint subscriber token contains proper structure')]
+    public function mintSubscriberTokenContainsProperStructure(): void
+    {
+        $token = $this->service->mintSubscriberToken('game123', 'testplayer');
+
+        /** Decode without verification to check structure  */
+        $parts = explode('.', $token);
+
+        /** Decode payload (middle part)  */
+        $payload = json_decode(base64_decode($parts[1] . str_repeat('=', (4 - strlen($parts[1]) % 4))), true);
+
+        $this->assertIsArray($payload);
+        $this->assertArrayHasKey('mercure', $payload);
+        $this->assertArrayHasKey('subscribe', $payload['mercure']);
+        $this->assertArrayHasKey('payload', $payload['mercure']);
+    }
+
+    #[Test]
+    #[TestDox('Mint subscriber token payload contains correct data')]
+    public function mintSubscriberTokenPayloadContainsCorrectData(): void
+    {
+        $token = $this->service->mintSubscriberToken('test-game', 'test-user');
+
+        $parts = explode('.', $token);
+        $payload = json_decode(base64_decode($parts[1] . str_repeat('=', (4 - strlen($parts[1]) % 4))), true);
+
+        $this->assertSame('test-user', $payload['mercure']['payload']['username']);
+        $this->assertSame('test-game', $payload['mercure']['payload']['gameAssoc']);
+        $this->assertContains('*', $payload['mercure']['subscribe']);
+    }
+}

tests/Service/RecaptchaServiceTest.php

@@ -0,0 +1,125 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Service;
+
+use App\Service\RecaptchaService;
+use PHPUnit\Framework\Attributes\AllowMockObjectsWithoutExpectations;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\Attributes\TestDox;
+use PHPUnit\Framework\TestCase;
+use Psr\Log\LoggerInterface;
+use Symfony\Component\HttpClient\MockHttpClient;
+use Symfony\Component\HttpClient\Response\MockResponse;
+use Symfony\Contracts\HttpClient\HttpClientInterface;
+
+/**
+ * Class RecaptchaServiceTest
+ *
+ * @package  App\Tests\Service
+ * @author   Lang <https://www.splendidbear.org>
+ * @category Class
+ * @license  https://www.gnu.org/licenses/lgpl-3.0.en.html GNU Lesser General Public License
+ * @link     www.splendidbear.org
+ * @since    2026. 04. 21.
+ */
+#[AllowMockObjectsWithoutExpectations]
+#[TestDox('Recaptcha Service')]
+class RecaptchaServiceTest extends TestCase
+{
+    private const API_ENDPOINT = 'http://localhost:3000/test-site-key/';
+    private const SECRET_KEY   = 'test-secret-key';
+
+    #[Test]
+    #[TestDox('Verify returns false for empty token')]
+    public function verifyReturnsFalseForEmptyToken(): void
+    {
+        $httpClient = $this->createMock(HttpClientInterface::class);
+        $logger     = $this->createMock(LoggerInterface::class);
+
+        $service = new RecaptchaService($httpClient, $logger, self::API_ENDPOINT, self::SECRET_KEY);
+
+        $result = $service->verify('');
+
+        $this->assertFalse($result);
+    }
+
+    #[Test]
+    #[TestDox('Verify returns false when api returns failure')]
+    public function verifyReturnsFalseWhenApiReturnsFailure(): void
+    {
+        $mockResponse = new MockResponse(json_encode([
+            'success' => false,
+        ], JSON_THROW_ON_ERROR));
+
+        $httpClient = new MockHttpClient($mockResponse);
+        $logger     = $this->createMock(LoggerInterface::class);
+        $logger->expects($this->once())->method('info');
+
+        $service = new RecaptchaService($httpClient, $logger, self::API_ENDPOINT, self::SECRET_KEY);
+
+        $result = $service->verify('invalid-token');
+
+        $this->assertFalse($result);
+    }
+
+    #[Test]
+    #[TestDox('Verify returns true when api returns success')]
+    public function verifyReturnsTrueWhenApiReturnsSuccess(): void
+    {
+        $mockResponse = new MockResponse(json_encode([
+            'success' => true,
+        ], JSON_THROW_ON_ERROR));
+
+        $httpClient = new MockHttpClient($mockResponse);
+        $logger     = $this->createMock(LoggerInterface::class);
+        $logger->expects($this->once())->method('info');
+
+        $service = new RecaptchaService($httpClient, $logger, self::API_ENDPOINT, self::SECRET_KEY);
+
+        $result = $service->verify('valid-token');
+
+        $this->assertTrue($result);
+    }
+
+    #[Test]
+    #[TestDox('Verify returns false when api throws exception')]
+    public function verifyReturnsFalseWhenApiThrowsException(): void
+    {
+        $mockResponse = new MockResponse('', ['http_code' => 500]);
+
+        $httpClient = new MockHttpClient($mockResponse);
+        $logger     = $this->createMock(LoggerInterface::class);
+        $logger->expects($this->once())->method('error');
+
+        $service = new RecaptchaService($httpClient, $logger, self::API_ENDPOINT, self::SECRET_KEY);
+
+        $result = $service->verify('test-token');
+
+        $this->assertFalse($result);
+    }
+
+    #[Test]
+    #[TestDox('Siteverify URL is derived from api endpoint')]
+    public function siteverifyUrlIsDerivedFromApiEndpoint(): void
+    {
+        $mockResponse = new MockResponse(json_encode(['success' => true], JSON_THROW_ON_ERROR));
+
+        $httpClient = new MockHttpClient(function (string $method, string $url) use ($mockResponse): MockResponse {
+            $this->assertSame('http://localhost:3000/test-site-key/siteverify', $url);
+            return $mockResponse;
+        });
+
+        $logger  = $this->createMock(LoggerInterface::class);
+        $service = new RecaptchaService($httpClient, $logger, self::API_ENDPOINT, self::SECRET_KEY);
+
+        $service->verify('test-token');
+    }
+}

tests/WebTestCase.php

@@ -0,0 +1,21 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests;
+
+use Symfony\Bundle\FrameworkBundle\Test\WebTestCase as BaseWebTestCase;
+use Zenstruck\Foundry\Test\Factories;
+use Zenstruck\Foundry\Test\ResetDatabase;
+
+abstract class WebTestCase extends BaseWebTestCase
+{
+    use ResetDatabase;
+    use Factories;
+}

tests/bootstrap.php

@@ -0,0 +1,21 @@
+<?php declare(strict_types=1);
+/**
+ * This file is part of the SplendidBear Websites' projects.
+ *
+ * Copyright (c) 2026 @ www.splendidbear.org
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+use Symfony\Component\Dotenv\Dotenv;
+
+require dirname(__DIR__).'/vendor/autoload.php';
+
+if (method_exists(Dotenv::class, 'bootEnv')) {
+    new Dotenv()->bootEnv(dirname(__DIR__).'/.env');
+}
+
+if ($_SERVER['APP_DEBUG']) {
+    umask(0000);
+}

vite.config.js

@@ -28,6 +28,7 @@ export default defineConfig({
         passkey: './assets/js/passkey.jsx',
         profile: './assets/js/profile.jsx',
         contact: './assets/js/contact.jsx',
+        cap: './assets/js/cap.js',
         mineseekerStyle: './assets/css/style.mineseeker.scss',
         homeStyle: './assets/css/style.layout.scss',
         passkeyStyle: './assets/css/passkey.scss',