chore(history): squash 67 commit(s) from 2026-09-25

- feat(accounts): persist device links with opaque hashed tokens, list and revoke endpoints
- feat(frontend): app shell, routing and landing page with the chat-command hero
- feat(frontend): Cyrillic-first fonts (Unbounded, Onest, JetBrains Mono); add i18next and motion
- docs: free mod, bilingual site, one-click download, theme editor, public profiles, rich landing in plans
- feat(accounts): internal gRPC AuthenticateDevice guarded by internal key
- feat(frontend): ru/en i18n with typed per-feature dictionaries and language switch
- feat(accounts): GET /me profile endpoint
- feat(gateway): scaffold crate with config validation and health check
- feat(gateway): reverse proxy to accounts and configs services
- feat(gateway): resolve identity once from access JWT or device token via gRPC
- feat(gateway): per-route and global rate limits with Retry-After
- feat(gateway): CORS for the site origin; docs for gateway and internal contract
- feat(configs): scaffold service with schema, config validation and health check
- feat(configs): four config slots per account with list, get and save
- feat(configs): permanent share codes with regenerate and public load-by-code
- feat(accounts): GetPublicProfiles gRPC for showcase author info
- style(accounts,common): apply rustfmt to existing sources
- feat(configs): public showcase with publish, browse, detail and copy-to-slot
- feat(backend): public profile endpoint and showcase author filter
- fix(gateway): silence clippy collapsible-if and needless-ref warnings
- docs(backend): configs-service implemented; Подсистема 1 backend complete
- feat(mod): add Optimize module skeleton with OptimizeState holder
- feat(mod): gate glass blur behind Optimize no_glass knob
- feat(mod): cut MotionBlur and DoF sample counts behind lite_post knob
- feat(mod): trim procedural sky noise behind lite_sky knob
- feat(mod): drop fade gradients and digit rolls behind lean_hud knob
- docs(todo): mark Optimize module phase 9.2 complete
- refactor(mod): drop dead Renderer2D compatibility shims
- refactor(mod): prune unreachable Renderer2D overload towers
- refactor(mod): remove unused Renderer2D overloads and imports
- docs(todo): mark Renderer2D giant-splitting done (2179 to 1597)
- refactor(mod): extract shader id constants from LoVisualRenderPipelines
- docs(todo): record registry wave 2026-09-25 (Renderer2D, pipelines)
- refactor(mod): move Renderer2D instance state into base class
- refactor(mod): extract Renderer2DRounded drawing family
- refactor(mod): extract Renderer2DPath connector and chamfer family
- refactor(mod): extract Renderer2DShapes circle line and texture primitives
- refactor(mod): extract Renderer2DGlass and Renderer2DItem families
- refactor(mod): prune Renderer2D imports after facade split
- docs(todo): record Renderer2D facade inheritance split (1597 to 475)
- docs: easter eggs — .env honeypot, konami troll mode, devtools banner, IDDQD config, breakable 404 block, 418 teapot
- feat(mod): introduce surface style system core (SurfaceStyle, StyleSpec, StyleConfig, SurfaceRenderer)
- refactor(mod): delegate HudRenderUtil liquid glass draws to SurfaceRenderer (dedupe glass constants)
- refactor(mod): route bespoke glass call sites through SurfaceRenderer.plateSpec
- feat(mod): add Auto option to HUD bg effects via shared HudBgStyles resolution
- feat(mod): flat fallback for no-glass optimize mode and persist global HUD config
- feat(mod): default HUD bg effects to Auto so the global surface style drives widgets
- feat(mod): add global cycle-style hotkey with surface style notification
- feat(mod): add surface style swatch strip under the global style picker
- feat(gateway): reject ambiguous paths and answer .env probes with a honeypot
- fix(gateway): charge failed credentials against the rate limit, allow stale ones on /auth
- feat(frontend): ClickGui theme pipeline generated from the mod, live site theming
- feat(frontend): landing v2 hero — voxel/particle backdrop, live ClickGui, theme strip
- docs(todo): drop the FPS A/B measurement from phase 9.3, close phase 9
- feat(gateway): answer /coffee with a 418 teapot
- feat(frontend): land the rest of landing v2 — HUD, module wall, showcase, FAQ, footer
- feat(frontend): one-click download from GitHub releases, changelog page, release CI
- feat(frontend): theme editor with live ClickGui preview, mod-compatible export and share links
- fix(frontend): landing HUD playground now shows real mod widgets (fps, coordinates, module list, keybinds, ping)
- style(frontend): apply ClickGui glass effect to landing HUD playground widgets
- fix(frontend): prevent color field row overflow in theme editor grid
- fix(frontend): never attach stale bearer token to /auth/* requests
- fix(configs): unpublish/publish can no longer bypass moderation
- refactor(accounts): shrink auth/handlers.rs under the 250-line cap
- fix(accounts): tolerate concurrent refresh without killing every session
- fix(gateway): minor hardening from the backend review
- feat(configs): IDDQD easter egg config

backend/configs-service/src/sharing/codes.rs

@@ -0,0 +1,35 @@
+use rand::RngExt;
+
+/// No 0/O, 1/I/L — players type these by hand in chat.
+pub const ALPHABET: &[u8] = b"23456789ABCDEFGHJKMNPQRSTUVWXYZ";
+pub const CODE_LEN: usize = 8;
+
+pub fn new_code() -> String {
+    let mut rng = rand::rng();
+    (0..CODE_LEN)
+        .map(|_| ALPHABET[rng.random_range(0..ALPHABET.len())] as char)
+        .collect()
+}
+
+pub fn normalize(code: &str) -> String {
+    code.trim().to_uppercase()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn codes_use_only_the_unambiguous_alphabet() {
+        for _ in 0..200 {
+            let c = new_code();
+            assert_eq!(c.len(), CODE_LEN);
+            assert!(c.bytes().all(|b| ALPHABET.contains(&b)), "{c}");
+        }
+    }
+
+    #[test]
+    fn normalize_trims_and_uppercases() {
+        assert_eq!(normalize("  ab3k9mzq \n"), "AB3K9MZQ");
+    }
+}

backend/configs-service/src/sharing/handlers.rs

@@ -0,0 +1,52 @@
+use super::codes::normalize;
+use crate::error::{AppError, AppPath};
+use crate::slots::handlers::{SlotsState, validate_slot};
+use crate::slots::repo::{self, SharedConfig};
+use axum::{Json, extract::State};
+use common::internal::GatewayIdentity;
+use serde::Serialize;
+
+#[derive(Serialize)]
+pub struct ShareCodeResponse {
+    pub share_code: String,
+}
+
+/// Easter egg: `IDDQD` (DOOM's god-mode cheat) never touches the DB — real
+/// share codes are drawn from an alphabet without `I` and can never equal it.
+fn god_mode() -> SharedConfig {
+    SharedConfig {
+        name: "God mode".into(),
+        data: serde_json::json!({
+            "modules": { "ChinaHat": { "enabled": true } },
+            "note": "god mode: только шляпа"
+        }),
+        // DOOM's release date.
+        updated_at: "1993-12-10T00:00:00Z".parse().expect("valid RFC3339 literal"),
+    }
+}
+
+pub async fn load_shared(
+    State(state): State<SlotsState>,
+    AppPath(code): AppPath<String>,
+) -> Result<Json<SharedConfig>, AppError> {
+    let code = normalize(&code);
+    if code == "IDDQD" {
+        return Ok(Json(god_mode()));
+    }
+    repo::by_share_code(&state.pool, &code)
+        .await?
+        .map(Json)
+        .ok_or_else(|| AppError::NotFound("unknown share code".into()))
+}
+
+pub async fn regenerate(
+    State(state): State<SlotsState>,
+    id: GatewayIdentity,
+    AppPath(slot): AppPath<i16>,
+) -> Result<Json<ShareCodeResponse>, AppError> {
+    let slot = validate_slot(slot)?;
+    repo::regenerate_code(&state.pool, id.account_id, slot)
+        .await?
+        .map(|share_code| Json(ShareCodeResponse { share_code }))
+        .ok_or_else(|| AppError::NotFound("slot is empty".into()))
+}

backend/configs-service/src/sharing/mod.rs

@@ -0,0 +1,2 @@
+pub mod codes;
+pub mod handlers;