chore(history): squash 67 commit(s) from 2026-09-25

- feat(accounts): persist device links with opaque hashed tokens, list and revoke endpoints
- feat(frontend): app shell, routing and landing page with the chat-command hero
- feat(frontend): Cyrillic-first fonts (Unbounded, Onest, JetBrains Mono); add i18next and motion
- docs: free mod, bilingual site, one-click download, theme editor, public profiles, rich landing in plans
- feat(accounts): internal gRPC AuthenticateDevice guarded by internal key
- feat(frontend): ru/en i18n with typed per-feature dictionaries and language switch
- feat(accounts): GET /me profile endpoint
- feat(gateway): scaffold crate with config validation and health check
- feat(gateway): reverse proxy to accounts and configs services
- feat(gateway): resolve identity once from access JWT or device token via gRPC
- feat(gateway): per-route and global rate limits with Retry-After
- feat(gateway): CORS for the site origin; docs for gateway and internal contract
- feat(configs): scaffold service with schema, config validation and health check
- feat(configs): four config slots per account with list, get and save
- feat(configs): permanent share codes with regenerate and public load-by-code
- feat(accounts): GetPublicProfiles gRPC for showcase author info
- style(accounts,common): apply rustfmt to existing sources
- feat(configs): public showcase with publish, browse, detail and copy-to-slot
- feat(backend): public profile endpoint and showcase author filter
- fix(gateway): silence clippy collapsible-if and needless-ref warnings
- docs(backend): configs-service implemented; Подсистема 1 backend complete
- feat(mod): add Optimize module skeleton with OptimizeState holder
- feat(mod): gate glass blur behind Optimize no_glass knob
- feat(mod): cut MotionBlur and DoF sample counts behind lite_post knob
- feat(mod): trim procedural sky noise behind lite_sky knob
- feat(mod): drop fade gradients and digit rolls behind lean_hud knob
- docs(todo): mark Optimize module phase 9.2 complete
- refactor(mod): drop dead Renderer2D compatibility shims
- refactor(mod): prune unreachable Renderer2D overload towers
- refactor(mod): remove unused Renderer2D overloads and imports
- docs(todo): mark Renderer2D giant-splitting done (2179 to 1597)
- refactor(mod): extract shader id constants from LoVisualRenderPipelines
- docs(todo): record registry wave 2026-09-25 (Renderer2D, pipelines)
- refactor(mod): move Renderer2D instance state into base class
- refactor(mod): extract Renderer2DRounded drawing family
- refactor(mod): extract Renderer2DPath connector and chamfer family
- refactor(mod): extract Renderer2DShapes circle line and texture primitives
- refactor(mod): extract Renderer2DGlass and Renderer2DItem families
- refactor(mod): prune Renderer2D imports after facade split
- docs(todo): record Renderer2D facade inheritance split (1597 to 475)
- docs: easter eggs — .env honeypot, konami troll mode, devtools banner, IDDQD config, breakable 404 block, 418 teapot
- feat(mod): introduce surface style system core (SurfaceStyle, StyleSpec, StyleConfig, SurfaceRenderer)
- refactor(mod): delegate HudRenderUtil liquid glass draws to SurfaceRenderer (dedupe glass constants)
- refactor(mod): route bespoke glass call sites through SurfaceRenderer.plateSpec
- feat(mod): add Auto option to HUD bg effects via shared HudBgStyles resolution
- feat(mod): flat fallback for no-glass optimize mode and persist global HUD config
- feat(mod): default HUD bg effects to Auto so the global surface style drives widgets
- feat(mod): add global cycle-style hotkey with surface style notification
- feat(mod): add surface style swatch strip under the global style picker
- feat(gateway): reject ambiguous paths and answer .env probes with a honeypot
- fix(gateway): charge failed credentials against the rate limit, allow stale ones on /auth
- feat(frontend): ClickGui theme pipeline generated from the mod, live site theming
- feat(frontend): landing v2 hero — voxel/particle backdrop, live ClickGui, theme strip
- docs(todo): drop the FPS A/B measurement from phase 9.3, close phase 9
- feat(gateway): answer /coffee with a 418 teapot
- feat(frontend): land the rest of landing v2 — HUD, module wall, showcase, FAQ, footer
- feat(frontend): one-click download from GitHub releases, changelog page, release CI
- feat(frontend): theme editor with live ClickGui preview, mod-compatible export and share links
- fix(frontend): landing HUD playground now shows real mod widgets (fps, coordinates, module list, keybinds, ping)
- style(frontend): apply ClickGui glass effect to landing HUD playground widgets
- fix(frontend): prevent color field row overflow in theme editor grid
- fix(frontend): never attach stale bearer token to /auth/* requests
- fix(configs): unpublish/publish can no longer bypass moderation
- refactor(accounts): shrink auth/handlers.rs under the 250-line cap
- fix(accounts): tolerate concurrent refresh without killing every session
- fix(gateway): minor hardening from the backend review
- feat(configs): IDDQD easter egg config

frontend/src/features/themes/editor/tests/codec.test.ts

@@ -0,0 +1,85 @@
+import { describe, expect, test } from 'vitest'
+import { PRESETS } from '../../presets.generated'
+import { fromProfileJson, fromShareHash, toProfileJson, toShareHash } from '../codec'
+
+// The mod's ThemesProfileCodec.toProfileValues writes exactly these keys, in this order.
+const PROFILE_KEYS = [
+  'name',
+  'windowBg',
+  'windowHeader',
+  'windowStroke',
+  'surface',
+  'surfaceHover',
+  'cardEnabled',
+  'cardDisabled',
+  'textPrimary',
+  'textMuted',
+  'accent',
+  'accentSoft',
+  'strokeSoft',
+  'windowGradientEnabled',
+  'windowGradientStart',
+  'windowGradientEnd',
+  'windowGradientAngle',
+  'headerGradientEnabled',
+  'headerGradientStart',
+  'headerGradientEnd',
+  'headerGradientAngle',
+  'surfaceGradientEnabled',
+  'surfaceGradientStart',
+  'surfaceGradientEnd',
+  'surfaceGradientAngle',
+  'cardGradientEnabled',
+  'cardGradientStart',
+  'cardGradientEnd',
+  'cardGradientAngle',
+  'strokeGradientEnabled',
+  'strokeGradientStart',
+  'strokeGradientEnd',
+  'strokeGradientAngle',
+]
+
+const editable = (e: (typeof PRESETS)[number]) => ({
+  name: e.name,
+  theme: e.theme,
+  windowGradient: e.windowGradient,
+  headerGradient: e.headerGradient,
+  surfaceGradient: e.surfaceGradient,
+  cardGradient: e.cardGradient,
+  strokeGradient: e.strokeGradient,
+})
+
+describe('theme profile codec', () => {
+  test('JSON keys match the mod profile exactly', () => {
+    expect(Object.keys(JSON.parse(toProfileJson(PRESETS[0])))).toEqual(PROFILE_KEYS)
+  })
+
+  test('round-trips every preset through the profile JSON', () => {
+    for (const preset of PRESETS) {
+      const result = fromProfileJson(toProfileJson(preset))
+      expect('error' in result).toBe(false)
+      if (!('error' in result)) expect(editable(result)).toEqual(editable(preset))
+    }
+  })
+
+  test('share hash round-trips', () => {
+    for (const preset of PRESETS) {
+      const result = fromShareHash(toShareHash(preset))
+      if ('error' in result) throw new Error('unexpected hash error')
+      expect(editable(result)).toEqual(editable(preset))
+    }
+  })
+
+  test('rejects malformed JSON and non-objects', () => {
+    expect(fromProfileJson('{ nope')).toEqual({ error: 'invalidJson' })
+    expect(fromProfileJson('[1,2,3]')).toEqual({ error: 'invalidShape' })
+    expect(fromShareHash('%%%not-base64%%%')).toEqual({ error: 'invalidHash' })
+  })
+
+  test('is tolerant: missing keys fall back to Classic', () => {
+    const result = fromProfileJson(JSON.stringify({ name: 'Sparse' }))
+    if ('error' in result) throw new Error('unexpected error')
+    expect(result.name).toBe('Sparse')
+    expect(result.theme).toEqual(PRESETS[0].theme)
+  })
+})

frontend/src/features/themes/editor/tests/editor.test.tsx

@@ -0,0 +1,18 @@
+import { fireEvent, render, screen } from '@testing-library/react'
+import { expect, test } from 'vitest'
+import { PRESETS } from '../../presets.generated'
+import { ThemeEditor } from '../ThemeEditor'
+
+test('editor shows the initial preset name and one toggle per gradient slot', () => {
+  render(<ThemeEditor initial={PRESETS[0]} />)
+  const name = screen.getByDisplayValue('Classic')
+  expect(name).toBeInTheDocument()
+  expect(screen.getAllByRole('checkbox', { name: /Градиент/ })).toHaveLength(5)
+})
+
+test('picking a preset chip loads it into the editor', () => {
+  const next = PRESETS[1]
+  render(<ThemeEditor initial={PRESETS[0]} />)
+  fireEvent.click(screen.getByRole('button', { name: next.name }))
+  expect(screen.getByDisplayValue(next.name)).toBeInTheDocument()
+})