3 Commits

Include renames

Author	SHA1	Message	Date
Keith Solomon	44199ec0a8	chore: address Plan 4 deferred-minors (stale-cookie cleanup pass) ... - Rename $secret to $csrfSecret in public/index.php to make intent clear at every call site; the value is the CSRF/turn-token HMAC key, not just 'the secret'. - Drop the stale 'Configure the router with the eight routes' comment in public/index.php; the router now has sixteen routes. - Drop the duplicate .bf-toast rule in public/assets/styles.css; the second declaration (the new yellow box) is the active one, the first (legacy green pill) is dead code from the editor era. - Add a trailing newline to src/Views/home.php. - Tighten the matchId regex in two tests from {16,} to {16} since bin2hex(random_bytes(8)) always produces exactly 16 hex chars; the spec's {16,} stays in production TurnToken. No behavior changes; addresses the deferred-minors parked during per-task review.	2026-07-26 16:38:05 -05:00
Keith Solomon	4c2586908f	fix: use server-minted matchId in smoke test actions	2026-07-26 03:32:54 -05:00
Keith Solomon	d118920739	test: add end-to-end smoke test for the battle interface	2026-07-26 03:25:57 -05:00