zagan-bet - Everything about zagan-bet casino is here.

	Commit message (Collapse)	Author	Age	Files	Lines
*	remove the damn .gitHEAD master	salmonik	69 min.	1	-1/+1
\|
*	web: disallow crawlers and quiet the game port	salmonik	81 min.	1	-0/+1
\| \| \| \|	Adds robots.txt with Disallow: / plus noindex/X-Robots-Tag on the site and app. The v5 server treats an HTTP request as a malformed frame, closes silently before HELLO, and suppresses the common TLS scanner noise. Deploy now verifies robots.txt.
*	web: match the desktop layout and remove play-money copy	salmonik	85 min.	1	-27/+15
\| \| \| \| \| \|	The browser now uses the desktop's full-width game split: no extra game header or card frame, a full-height sidebar with a pinned action block, and the same lobby grid, topbar account/balance blocks, and bottom-left notices. Slots uses the desktop symbol colours and gold win border; roulette gets the flat felt, column bets under the dozens, the wheel, circular chips, and a LAST line; blackjack gets a centred dealer/player table and divider; crash gets the chart panel, phase label and empty ready state. Also drops every play-money/real-money disclaimer from the page copy.
*	web: link the GPL source from the play page; normalise gateway config	salmonik	10 hours	1	-0/+3
\| \| \| \|	The browser footer links the public repository. ZAGAN_WEB_ORIGIN is lowercased for origin matching, and the pinned fingerprint accepts the colon-separated form operators often copy.
*	web: show the account number and stop reel spin on an error	salmonik	10 hours	1	-0/+1
\| \| \| \|	Also documents the __Host- cookie prefix used on HTTPS.
*	v5.0.0: protocol v5 and the browser frontend	salmonik	10 hours	1	-0/+112
	Protocol v5 replaces newline lines with bounded [u32 len][text] frames and REQ/RES/EVT envelopes. Requests carry correlation ids and the server replays the last 256 replies per connection, so a gateway retry cannot double-debit and a late reply cannot clobber a newer request. HELLO/PONG carry server time; crash rounds announce started_at and push coalesced 10 Hz ticks. Crash now commits sha256(seed) before a round and reveals the seed when it ends, so clients recompute the crash point. Adds the webd/ gateway: one blocking thread, one ClientCore and one pinned upstream TLS connection per session, an HttpOnly session cookie, takeover, and a 60-second grace window. The browser sends Command JSON and renders View JSON; it never speaks the game protocol or stores credentials. Adds the vanilla TypeScript browser app at /play/ (login, lobby, all four games, history, notices, crash verification), the nginx /play and /ws routes, and the headless DOM smoke test. webd and the app stay out of the TUI/GUI/server build graph. The client/server version moves to 5.0.0 in lockstep; v4 peers are refused at HELLO.