Changelog

Adds a mandatory read-only RuneMetrics visibility scan to the final setup-guide step.

• Adds a mandatory read-only RuneMetrics visibility scan to the final setup-guide step.
• Verifies Alt1 screen access, the full panel and column heading, Total XP as the first visible row, a readable XP value in the first numeric column, and precise unrounded values.
• Requires both the player's confirmation checkbox and a successful recent live scan before Confirm setup and start becomes available.
• Automatically runs the first check on the final step, explains every failed requirement, supports manual retries, and expires successful checks after 30 seconds so stale visibility cannot start tracking.
• Keeps verification isolated from XP events, Chronicle Coin awards, tracker baselines, browser evidence storage, and database writes.

Rebuilds first-time RuneMetrics setup as a four-step guided wizard with supplied reference screenshots for every required configuration.

• Rebuilds first-time RuneMetrics setup as a four-step guided wizard with supplied reference screenshots for every required configuration.
• Covers Total XP as the top row, XP as the first column, precise values and XP change settings, and a fully visible unobstructed panel.
• Requires players to reach the fourth step and confirm the finished layout before tracking can start.
• Makes the Admin and Lead Testing-page replay use the complete new-player flow: setup is marked incomplete locally, tracking pauses, and normal startup resumes only after completion.
• Keeps the setup workflow client-side and makes no database changes.

Adds a role-gated Testing page that appears only for profiles assigned the Admin or Lead role.

• Adds a role-gated Testing page that appears only for profiles assigned the Admin or Lead role.
• Lets authorized testers replay the real first-time setup guide in a non-blocking preview mode.
• Adds safe previews for success, warning, and error notifications, Chronicle Coin gain and loss indicators, and button loading states.
• Keeps every Testing control client-side and disconnected from database-writing APIs, XP queues, tracking state, saved preferences, collections, packs, and player balances.
• Includes role enforcement on both navigation visibility and direct Testing-page navigation.

Captures the visible RuneMetrics panel, including its column heading, immediately before a player completes a Safe reset or Full reset.

• Captures the visible RuneMetrics panel, including its column heading, immediately before a player completes a Safe reset or Full reset.
• Attaches the screenshot to the matching retained tracking repair audit without placing it in the browser's persistent evidence store.
• Displays the private image proof inside the permission-scoped Tracking repairs admin page with its captured Total XP and upload time.
• Reuses the hardened audit PNG validation, normalization, size limits, private storage, integrity hashes, and no-cache delivery controls.
• Removes uploaded repair screenshots with their expired 30-day audit records and never creates a server image when capture or upload fails.

Sends the selected Safe reset or Full reset type to the administration panel after a completed tracking repair.

• Sends the selected Safe reset or Full reset type to the administration panel after a completed tracking repair.
• Records the player-selected reset reason and its stable reason code.
• Captures the app's complete retained diagnostic event log, including the final reset-request event, before clearing RuneMetrics state.
• Adds a permission-scoped Tracking repairs page with player, queue, previous baseline, client version, retention, and full event-log details.
• Keeps reset audit records and their previous baseline snapshots under the existing 30-day retention policy.
• Validates and bounds every submitted log entry before storing it, and escapes all event-log content in the administrator viewer.

Players can safely clear their own profile-backed RuneMetrics state, quarantine or discard pending proofs, and establish a fresh no-award baseline without administrator intervention.

• Added an authenticated Settings repair control that can delete only the current profile’s runemetrics_player_state row.
• Added safe quarantine and explicit destructive-discard choices for locally queued XP proofs.
• Retained the previous server baseline ledger in a 30-day reset history with a 15-minute player cooldown.
• Made empty server state explicit so a placeholder zero can never become a trusted Total XP baseline.
• Required three matching Total XP readings with Total XP pinned first before the replacement baseline is saved.
• Guaranteed that the replacement reading awards zero XP and zero Chronicle Coins while leaving currency, tracked XP, cards, packs, achievements, and account data untouched.

Establishes the first exact top-row Total XP reading after every app refresh or update as the new no-award baseline.

• Establishes the first exact top-row Total XP reading after every app refresh or update as the new no-award baseline.
• Excludes XP accumulated while the app was closed or refreshing from Chronicle Coin awards.
• Keeps awards paused until the connected player profile accepts the refreshed baseline.
• Never lowers a trusted server baseline; lower refresh readings continue through the existing three-increase rollback recovery.
• Flushes saved XP uploads before advancing the refresh baseline so already-confirmed awards are preserved.

Help and Settings are restored, Chronicle Coin changes display inline, and multi-pack openings now reveal every selected pack together without a nested card window.

• Repaired the Help and Settings layouts so they use the full available app width.
• Chronicle Coin earnings now appear inline beside the updated balance, then fade away.
• Pack purchases show the exact Chronicle Coin amount spent inline using a distinct loss color.
• Open 5 and Open 10 now submit every selected pack together as one atomic server transaction.
• All 25 or 50 cards are staged on one reveal board and can be revealed individually or all at once.
• Removed the nested scrolling card window from batch openings so cards flow naturally across the full opening page.

A reset RuneMetrics Total XP row can recover automatically after three confirmed increasing XP drops without awarding the probation XP.

• Observes three distinct, strictly increasing Total XP values after rollback.
• Confirms each probation increase across three reads and at least 1.5 seconds.
• Awards no XP or Chronicle Coins from the probation sequence.
• Requires the server to validate and save the replacement baseline before awards resume.
• Awards normally from the next confirmed increase after recovery.

Displays the connected player’s uploaded website avatar beside “Signed in as.”

• Displays the connected player’s uploaded website avatar beside “Signed in as.”
• Constrains avatar URLs to the application’s managed profile-upload directory.
• Retains the profile glyph when no avatar exists or the image cannot be loaded.

RuneMetrics XP Security Protocol v8 and the Total XP top-row gate are now integrated with reveal-safe achievements and adaptive pack opening.

• Bound queued XP events to their originating profile and removed queue-time baseline lowering.
• Required exact Total XP baseline equality and strict whole-number OCR evidence.
• Applied the rolling XP rate limit to every event and withheld large-event Chronicle Coins until approval.
• Required Total XP All Stats at visible row index zero and disabled skill-fallback awards.
• Added persistent player warnings whenever the RuneMetrics layout is not award-safe.
• Preserved adaptive multi-row pack openings and reveal-safe achievement timing.

Deferred pack-opening achievement notifications until their triggering card has been revealed.

• Deferred pack-opening achievement notifications until their triggering card has been revealed.
• Foil and rarity milestones now wait for a visible matching card instead of disclosing the pull while cards remain face-down.
• New-card, total-card, unique-card, and set milestones are attached to safe reveal points.
• Pack-opening, pack-variety, catch-up, and unknown future achievement types wait until the fifth card is revealed.
• Added out-of-order reveal protection so clicking card five first cannot release achievements assigned to hidden cards one through four.
• Added an approximately 880 ms post-flip delay so the card face lands before its achievement popup appears.
• Remaining notifications are released after the opening closes when a player exits without revealing every card.
• Added achievement criteria metadata to API award payloads for client-side reveal routing.
• No database migration is required.

Requires newly created registered and anonymous profiles to review the RuneMetrics setup guide before XP tracking can start.

• Requires newly created registered and anonymous profiles to review the RuneMetrics setup guide before XP tracking can start.
• Keeps tracking paused until the player confirms Total XP is first, XP is the first column, full numbers are visible, and the panel is unobstructed.
• Remembers an unfinished setup on the current installation so closing and reopening the app cannot accidentally start tracking early.
• Lets anonymous players save their recovery key before the required setup guide appears.
• Adds a Repair tracking state suggestion and direct action to the out-of-sync safety alert.
• Existing and recovered profiles continue normally without being forced through the new-user guide.

Rebuilt the pack-opening card fan as an adaptive multi-row layout.

• Rebuilt the pack-opening card fan as an adaptive multi-row layout.
• Wide windows retain the five-card cinematic row.
• Medium windows use a centered 3 + 2 arrangement.
• Narrow, tall Alt1 windows may use a centered 2 + 2 + 1 arrangement so cards remain readable.
• Short windows automatically favor fewer rows when vertical space is limited.
• Card width, row count, gaps, summary, and reveal controls continue recalculating whenever the Alt1 window changes size.
• Clicking or keyboard-activating any unopened card still reveals that card directly.
• No database migration is required.

Removed nested scrolling from the Pack Shop and Pack Vault.

• Removed nested scrolling from the Pack Shop and Pack Vault.
• Restored one natural Alt1 page scroll so cards cannot be trapped behind a second scrollbar.
• Removed fixed commerce-page heights that created large empty regions in tall desktop windows.
• Added compact horizontal Shop cards for narrow windows with full pack artwork, pricing, Buy, and More controls visible together.
• Added compact horizontal Pack Vault rows on narrow windows with artwork, quantity, description, and Open 1/5/10 controls visible together.
• Reduced the mobile Pack Vault hero and removed nonessential guidance in tight windows.
• Preserved automatic column and artwork resizing across desktop, tablet, and compact Alt1 window sizes.
• No database migration is required.

Added adaptive viewport fitting to the Pack Shop and Pack Vault.

• Added adaptive viewport fitting to the Pack Shop and Pack Vault.
• Kept page heroes and controls visible while product grids scroll internally.
• Added automatic column, artwork, tile-height, spacing, and compact-mode calculations.
• Reduced the supported Alt1 minimum height to 480 pixels.
• Rebuilt account settings as a sidebar workspace with separate identity, username, profile CSS, security, and session panels.
• Expanded the profile CSS library to 38 full-profile themes with search, categories, random selection, larger cards, and a taller live preview.
• Split profile saves so CSS editing cannot accidentally overwrite avatar, bio, visibility, or username styling.
• No new database migration is required.

Rebuilt the pack-opening dialog as a viewport-fitted stage that keeps all five cards and reveal controls visible inside the Alt1 window.

• Rebuilt the pack-opening dialog as a viewport-fitted stage that keeps all five cards and reveal controls visible inside the Alt1 window.
• Added direct card clicking and keyboard activation to reveal any unopened card.
• Added a scoped MySpace-style public profile CSS studio with safe local selectors, a no-network preview sandbox, and twelve starter themes.
• Added server-side blocking for URLs, imports, scripts, custom keyframes, content injection, layout escape, and selectors outside the profile shell.

Added a prominent Discord community link to the public homepage hero, dedicated community banner, and website footer.

• Added a prominent Discord community link to the public homepage hero, dedicated community banner, and website footer.
• Added Discord access inside the Alt1 app through the desktop rail, responsive top bar, and Settings page.
• All community links use the official Lucky Friend redirect at `https://luckyfriendrs.com/discord`.
• Expanded the safe username-style studio from four starters to 72 categorized presets covering Gielinor themes, rarities, sparkles, auras, gradients, elements, typography, and motion.
• Added preset search, category filtering, randomized selection, animated hover previews, and a compact scrollable library so the account page remains manageable.
• Updated the Alt1 app to v3.5.3 and the public website/control center to v3.5.7.
• No database migration is required.

Expanded the profile username-style sandbox with strictly validated gradients, multiple text shadows, local font choices, text stroke, decoration controls, and approved animation presets.

• Expanded the profile username-style sandbox with strictly validated gradients, multiple text shadows, local font choices, text stroke, decoration controls, and approved animation presets.
• Added sparkle, shimmer, pulse, rainbow, float, aura, and twinkle keyframes without allowing selectors, external assets, URLs, scripts, variables, arbitrary keyframes, or layout CSS.
• Added safe starter recipes and a profile preview. The Alt1 application remains v3.5.2.

Fixed the Control Center force-refresh action failing with `SQLSTATE[HY093]: Invalid parameter number`.

• Fixed the Control Center force-refresh action failing with `SQLSTATE[HY093]: Invalid parameter number`.
• Assigned a unique PDO parameter to each `updated_by` value in the three-row app-settings upsert.
• Kept the Alt1 application at v3.5.2; this server-side repair does not require another client update.
• No database migration is required beyond the existing v3.5.4 force-refresh migration.

Added a Control Center button that issues a one-time force-refresh signal to every active RS3 TCG Alt1 client.

• Added a Control Center button that issues a one-time force-refresh signal to every active RS3 TCG Alt1 client.
• Added a lightweight no-cache client-state endpoint and a 20-second refresh-signal poll.
• Preserves tracking state and queued XP events before reloading.
• Stores the refresh token before navigation so each signal reloads a client only once and cannot create an update loop.
• Added an optional administrator message displayed in the app refresh overlay.
• Added no-cache revalidation for Alt1 JavaScript and CSS so same-version emergency refreshes retrieve changed assets.
• Updated the Alt1 application from v3.5.1 to v3.5.2 while the public website/control center advances to v3.5.4.
• Added migration `migration_v3.5.4_force_app_refresh.sql`.

Administration changes now refresh through a reliable JSON-to-GET handoff instead of depending on a redirected POST response.

• Replaced AJAX POST redirects with an explicit JSON refresh address.
• Changed normal administration redirects to HTTP 303.
• Added readable server error extraction when a workspace response is invalid.
• Added a one-click reload control for unrecoverable administration responses.

Large confirmed RuneMetrics gains now award immediately while preserving a complete administrator review trail.

• Added an administrator-adjustable threshold for large XP drop auditing.
• Captured parsed pre-drop and post-drop OCR values plus raw OCR text when available.
• Added a pending audit queue with approve and deny decisions.
• Archived completed decisions separately from the active queue.
• Made denial revoke available credits and recover any spent shortfall from future earnings as audit debt.
• Added tracker 1.11.0 and RuneMetrics safety protocol runemetrics-counter-v7.

Total XP confirmation now survives short RuneMetrics row disappearances and transient read failures instead of becoming stranded at two of three readings.

• Preserved Total XP confirmations for up to eight seconds while the row is temporarily hidden.
• Continued a two-of-three confirmation when the Total XP row returns instead of restarting it.
• Held saved-skill fallback while a recoverable Total XP confirmation is active to prevent duplicate awards.
• Tolerated small OCR regressions by keeping the highest valid Total XP sample.
• Expired abandoned confirmations cleanly and resumed normal saved-skill tracking.
• Added tracker 1.10.0 and RuneMetrics safety protocol runemetrics-counter-v6.

Lower RuneMetrics Total XP readings no longer permanently pause awards. Confirmed low resets are saved to the player profile, while trusted skill baselines continue tracking during Total XP quarantine.

• Quarantined lower Total XP readings instead of globally suspending RuneMetrics awards.
• Kept established per-skill baselines active while Total XP is below its saved baseline.
• Confirmed Total XP resets below 100,000 XP across three readings and at least 1.5 seconds.
• Saved confirmed Total XP resets to runemetrics_player_state.last_total_xp without awarding the reset reading.
• Resumed Total XP awards from the replacement baseline after reset confirmation.
• Prevented stale profile hydration from overwriting a locally confirmed reset while synchronization is queued.

RuneMetrics baselines now restore from each player profile, warn when a first reading cannot be awarded, and safely re-baseline skill rows that reset below six digits.

• Stored every RuneMetrics skill baseline and its established/reset metadata on the connected player profile.
• Restored the server baseline ledger before startup XP capture so reinstalls and device changes retain safe tracking state.
• Displayed an in-app warning when a skill is first seen because XP already included in that first reading cannot be reconstructed or awarded.
• Confirmed lower skill readings below 100,000 XP, including zero, across multiple frames before replacing the saved baseline without an award.
• Allowed future gains to resume from the newly established baseline even when the reset value is below 100,000 XP.
• Kept missing and scrolled-away rows unavailable rather than treating them as zero.

RuneMetrics rows may disappear and return without becoming zero, while every newly seen skill establishes a no-award baseline before it can earn Chronicle Coins.

• Persisted a separate XP baseline for every recognized RuneMetrics skill icon and scoped the ledger to the connected RS3 TCG profile.
• Treat missing or scrolled-away rows as unavailable instead of zero and never reduce a saved baseline from a lower OCR reading.
• Made Total XP the preferred source while allowing a multi-frame saved-skill fallback when Total XP remains hidden.
• Made the first visible value for every previously unsaved skill baseline-only so the XP drop that caused the row to appear cannot be awarded.
• Advanced the saved Total XP baseline by accepted skill-fallback deltas to prevent double awards when Total XP returns.
• Collected all available XP-icon baselines through Alt1 Game State during startup and synchronized the server-side skill ledger.
• Added server validation for baseline-backed skill proofs, rollback protection, duplicate protection, and observed-skill ledger updates.

Allows administrators to control the per-event XP cap and captures a safe Total XP baseline from Alt1 Game State during startup when available.

• Added an administrator switch for enabling or disabling the per-event RuneMetrics XP cap.
• Added a live administrator field for changing the cap value.
• Raised the default cap to 1,000,000 XP so legitimate 661,500 XP item-siphon gains are accepted.
• Applied the same runtime cap policy in the Alt1 client and server proof validator.
• Captured the Total XP baseline from the Alt1 Game State Total/Stats counter during startup when available.
• Startup baseline capture never creates an XP award and is exposed in diagnostics.

Stops repeated Alt1 update reloads and hardens RuneMetrics awards against false correction payouts.

• Aligned the manifest, client JavaScript, server bootstrap, and asset cache versions at 3.4.4.
• Limited automatic update reloads to one attempt per version so stale caches cannot create an endless loop.
• Required exact RuneMetrics Total XP and removed individual-skill fallback awards.
• Confirmed every increase across at least three frames before queueing it.
• Kept the last trusted baseline when lower or malformed readings appear.
• Quarantined queued events from retired tracker versions.
• Added per-event, per-minute, and monotonic server-baseline validation.

Administration now updates without full page reloads, support reports have a complete command center, and 151 automatic achievements track player progression.

• Convert every administration save and section change to live AJAX updates.
• Repair the administration grid gaps below notices, metrics, headings, empty states, and review queues.
• Add report priority, assignment, triage states, tags, replies, duplicate linking, diagnostics tools, resolution data, filters, and bulk actions.
• Seed 151 automatic achievements across packs, cards, foils, rarities, XP, Chronicle Coins, pack sets, completion, and account age.
• Evaluate achievements after purchases, openings, XP syncs, and app bootstrap, with a catch-up tool for existing players.

A cleaner responsive app shell, richer public identities, and a more capable pack and card administration workflow.

• Hide the compact top bar when the desktop rail is available and show the wallet and account controls in the rail.
• Display player avatars on player listings and leaderboards, with safe profile-scoped username text styling.
• Keep the redesigned website footer at the bottom of short pages and improve card ownership metadata.
• Use canonical card rendering in the pack builder and provide searchable row-based pack and card directories.
• Open the standalone card creator in a responsive modal and attach cards to packs only when desired.
• Make custom roles reliably creatable and immediately assignable from player moderation.
• Allow the Cloudflare Insights beacon through the site Content Security Policy without permitting arbitrary scripts.

Profile controls, a rebuilt administration studio, explicit pack card pools, and an in-app changelog.

• Personalize your public profile and secure your account.
• Build packs from a searchable card catalogue with full previews.
• Create cards inside the pack studio using Wiki, library, or uploaded art.
• Manage player roles directly from player moderation.
• Read release notes on the website and inside the Alt1 app.

Moved the Chronicle Coin balance above the Pack Shop navigation button.

• Moved the Chronicle Coin balance above the Pack Shop navigation button.
• Replaced the former bottom wallet position with the connected player’s username.
• Reuses the website’s sanitized custom username CSS and matching animation keyframes.
• Falls back to a plain display name when no custom username style is configured.

Removed the large empty left half inside desktop Pack Vault tiles.

• Removed the large empty left half inside desktop Pack Vault tiles.
• Reset the inherited flex alignment that was docking grid content to the right.
• Pack artwork, titles, descriptions, and opening controls now use the full tile width and remain centered.
• Preserved the compact horizontal Pack Vault layout in genuinely narrow Alt1 windows.

Allowed a confirmed Total XP baseline of zero to serve as the pre-drop value for a later positive RuneMetrics award.

• Allowed a confirmed Total XP baseline of zero to serve as the pre-drop value for a later positive RuneMetrics award.
• Unblocked FIFO queues whose first legitimate event was `0 -> positive` after a RuneMetrics row reset.
• Kept the Alt1 application at v3.5.1 and tracker v1.11.0; no client update is required.

Added 40 researched RuneScape holiday cards to the Wise Old Man set: 20 Common and 20 Uncommon.

• Added 40 researched RuneScape holiday cards to the Wise Old Man set: 20 Common and 20 Uncommon.
• Changed the pack to four Common-through-Legendary holiday/collector slots and a fifth slot with a 30% Mythic+ chance (27% Mythic, 3% Godly).
• Reduced the Wise Old Man foil chance from 5% to 1% per card.
• Updated shop, pack-opening, collection-set, database migration, and catalogue copy for the new distribution.

Flushes saved XP proofs before synchronizing the current startup Total XP baseline.

• Flushes saved XP proofs before synchronizing the current startup Total XP baseline.
• Prevents startup capture from overtaking a valid offline queue and causing a permanent 409 retry loop.
• Archives proofs already superseded by an advanced server baseline in local storage instead of retrying them forever or silently deleting them.
• Keeps strict server-side Total XP baseline equality unchanged.

Added Starry Night, Black Hole, Christmas, and Skulls as app-wide foil treatments.

• Added Starry Night, Black Hole, Christmas, and Skulls as app-wide foil treatments.
• Added matching animated Settings previews and a local Chromium-compatible SVG skull pattern.
• Kept the seamless website `foilSweep` layer shared above every treatment.

Fixed Chromium's `background` shorthand resetting foil layers back to tiled rendering by placing `background-repeat: no-repeat` after every treatment background.

• Fixed Chromium's `background` shorthand resetting foil layers back to tiled rendering by placing `background-repeat: no-repeat` after every treatment background.

Prevented large achievement collections from stretching player profiles into excessively tall pages.

• Prevented large achievement collections from stretching player profiles into excessively tall pages.
• Made every administration error report minimized by default with click-to-expand headers and clear Expand/Collapse controls.
• Preserved expanded report state while live administration forms update through AJAX.

Removed foil-layer background tiling that caused the sharp vertical cutoff visible during Cosmic movement.

• Removed foil-layer background tiling that caused the sharp vertical cutoff visible during Cosmic movement.
• Made the website `foilSweep` fade to transparent at both endpoints so its position reset is invisible and the four-second loop is clean.
• Applied the no-repeat and seamless-loop behavior to the website, Alt1 cards, and Settings preview.

Audited the foil and reveal renderer against Alt1's Chromium 108 browser base.

• Audited the foil and reveal renderer against Alt1's Chromium 108 browser base.
• Removed the registered custom-property dependency from Cosmic Swirl and replaced it with background-position animation.
• Added a percentage-ratio card fallback and replaced `String.replaceAll` with Chromium 83-compatible text escaping for stale Alt1 installations.

Replaced the custom Alt1 shine geometry with the website's exact `foilSweep` treatment: full-card inset, 120-degree cyan/pink/gold gradient, 250% background sizing, 16% opacity, and a four-second position sweep.

• Replaced the custom Alt1 shine geometry with the website's exact `foilSweep` treatment: full-card inset, 120-degree cyan/pink/gold gradient, 250% background sizing, 16% opacity, and a four-second position sweep.
• Made Cosmic, Rainbow, Gold, and the Settings preview share that identical website shine layer.

Widened the 110-degree moving shine with soft shoulders and increased vertical overscan so the visible sweep remains continuous through the card footer.

• Widened the 110-degree moving shine with soft shoulders and increased vertical overscan so the visible sweep remains continuous through the card footer.

Changed the moving foil shine to animate across a stationary full-height plane so the sweep reaches continuously from above the card to below it.

• Changed the moving foil shine to animate across a stationary full-height plane so the sweep reaches continuously from above the card to below it.
• Updated the Settings foil preview to use the same full-height shine geometry.

Reduced foil choices to Cosmic Swirl, Rainbow Foil, and Gold Foil, with obsolete saved styles migrating to Cosmic Swirl.

• Reduced foil choices to Cosmic Swirl, Rainbow Foil, and Gold Foil, with obsolete saved styles migrating to Cosmic Swirl.
• Rebuilt all three treatments around the supplied 110-degree moving shine, removed the competing legacy card sweep, and added a warm variation for Gold Foil.
• Removed passive rarity glow from face-down pack cards and added hover-only rarity sparkles.

Added a dedicated close control to Diagnostics.

• Added a dedicated close control to Diagnostics.
• Rebuilt Help as a clearer setup, troubleshooting, recovery, and FAQ center.
• Made Settings container-aware so controls reflow cleanly beside the desktop navigation rail and at narrow sizes.

Added a creator footer to the public website and Alt1 app.

• Added a creator footer to the public website and Alt1 app.
• Added Buy Me a Coffee links for players who want to support Lucky Friend's creative work.

Fixed the Cosmic foil plane exposing a hard diagonal edge while rotating.

• Fixed the Cosmic foil plane exposing a hard diagonal edge while rotating.
• Kept every foil layer exactly aligned to the full rounded card face and animated the Cosmic gradient itself instead of rotating a rectangular overlay.

Added optional server-backed anonymous players with unique `Anonymous #****` display tags.

• Added optional server-backed anonymous players with unique `Anonymous #****` display tags.
• Added saved recovery keys so an anonymous collection can be restored after browser or Alt1 site data is cleared.
• Added anonymous recovery on the website and in Alt1, plus recovery-key rotation and downloadable key backups.
• Added an in-place upgrade from an anonymous profile to a normal account without losing cards, packs, XP, or Chronicle Coins.

Expanded all animated foil layers beyond the card bounds so rotation and translation cannot expose cropped corners or edges.

• Expanded all animated foil layers beyond the card bounds so rotation and translation cannot expose cropped corners or edges.
• Added low-opacity full-card color washes to Holo Shards, Gold, Cosmic, and Crackle treatments.
• Strengthened Cosmic coverage to keep the entire card visibly holographic throughout its animation cycle.

Added a dedicated app-wide Settings page accessible from the header and desktop navigation rail.

• Added a dedicated app-wide Settings page accessible from the header and desktop navigation rail.
• Moved the foil effect preference out of the Cards toolbar and made its collection, preview, and pack-reveal scope explicit.
• Moved pack sounds into Settings and added persistent controls for reduced motion, Shop overview visibility, and the RuneMetrics setup reminder.
• Added manual update checking, the installed version display, live foil previews, and a restore-defaults action.

Hid the duplicate header brand block whenever the desktop navigation rail is visible.

• Hid the duplicate header brand block whenever the desktop navigation rail is visible.
• Removed the 100-row pack-vault cap and limited the vault response to sealed packs, so large inventories display their complete totals and pack varieties.

Replaced the website favicon and Alt1 application branding with `tcg-icon.png`.

• Replaced the website favicon and Alt1 application branding with `tcg-icon.png`.
• Added prominent account-creation guidance warning players never to reuse their RuneScape password.
• Added rainbow diagonal, holographic shard, gold, cosmic, and crackle card foil treatments.
• Added a persistent in-app Foil effect preference that updates collection cards, previews, and pack reveals immediately.

Added secure pack-wrapper uploads for full, top, and bottom PNG artwork.

• Added secure pack-wrapper uploads for full, top, and bottom PNG artwork.
• Added card creation for RuneScape Wiki image links and fully specified custom cards with optional image uploads.
• Added permission-scoped content review with approve and additional-information-request decisions.
• Kept submitted cards inactive and submitted packs disabled until approval.

Reduced the card-reveal wipe to a narrow, softer diagonal glint contained within the card border.

• Reduced the card-reveal wipe to a narrow, softer diagonal glint contained within the card border.

Changed the wrapper top from an upward lift into a lateral foil peel along the split seam.

• Changed the wrapper top from an upward lift into a lateral foil peel along the split seam.
• Removed the black opening slit that obscured the wrapper and extracted cards.
• Delayed pack consumption until the player presses Rip Open, so closing a sealed wrapper preserves the pack.
• Added a staggered card-placement animation from the extracted pack stack into the face-down reveal layout.

Rebuilt pack opening around the pack-specific transparent top and bottom wrapper artwork.

• Rebuilt pack opening around the pack-specific transparent top and bottom wrapper artwork.
• Preserved the source images at identical full-wrapper dimensions so the sealed state aligns pixel-for-pixel before the top peels away.
• Added dimension validation and an automatic full-wrapper fallback if a split asset is missing or mismatched.

Replaced the mobile bottom-navigation glyphs and desktop rail glyphs with consistent semantic SVG icons.

• Replaced the mobile bottom-navigation glyphs and desktop rail glyphs with consistent semantic SVG icons.
• Kept players on the Shop after buying packs and surfaced the updated sealed-pack count on both Packs navigation controls.
• Added a per-player Shop overview visibility preference with Hide overview and Show overview controls.

Kept an open shop quantity menu stable across heartbeat-driven profile refreshes.

• Kept an open shop quantity menu stable across heartbeat-driven profile refreshes.
• Preserved custom purchase amounts and input focus when the shop refreshes.
• Renamed the ambiguous More control to Additional options and removed its decorative symbol.

Rebuilt the Alt1 header as a clear command bar with consistent SVG icons and descriptive action labels.

• Rebuilt the Alt1 header as a clear command bar with consistent SVG icons and descriptive action labels.
• Grouped app tools separately from the Chronicle Coin balance and improved focus, hover, muted-sound, and session-state feedback.
• Added responsive icon-only controls and a stacked compact layout for narrow Alt1 windows.

Scoped sessions so one website login and one exclusive Alt1 tracker can coexist.

• Scoped sessions so one website login and one exclusive Alt1 tracker can coexist.
• Added automatic app update checks, minimum-version enforcement, safe XP pause, and cache-busted refresh.
• Added guided Shop, Pack Vault, Collection, and Debug command surfaces.
• Added sanitized in-app error reporting and an administrator support queue.
• Added a hidden, permission-based website control center with audited pack, shop, player, economy, role, event, achievement, abnormality, and report administration.
• Made pack rarity weights, guaranteed slots, foil chances, pricing, availability, lifecycle, and seasonal windows database-driven.
• Added public profile role badges and achievement badges.
• Smoothed card reveals with an uninterrupted midpoint rotation.

Added portable password accounts shared by the website and Alt1.

• Added portable password accounts shared by the website and Alt1.
• Enforced one active session per player to prevent simultaneous XP-credit clients.
• Added authenticated session heartbeat checks and an Out of Sync safety popup.
• Rebuilt pack opening with a layered foil wrapper, seam tear, inner glow, and visible card extraction.
• Upgraded card reveals with a physical flip, landing motion, overshoot, and light sweep.
• Added the website account dashboard, login, registration, and logout flows.

Replaced guessed boss image filenames with a server-side RuneScape Wiki page-image resolver and local disk cache.

• Replaced guessed boss image filenames with a server-side RuneScape Wiki page-image resolver and local disk cache.
• Added a canonical-title alias for Amascut and updated the catalogue to Amascut, the Devourer.
• Removed the three-request boss image fallback chain that generated repeated 404 errors.
• Fixed collection searches failing with HTTP 500 under native PDO prepared statements by using unique SQL placeholders.
• Added a safe local Boss Archive placeholder when the Wiki has no usable lead image or is temporarily unavailable.

Replaced singleton reveal audio playback with independent one-shot audio voices.

• Replaced singleton reveal audio playback with independent one-shot audio voices.
• Rapid card reveals can now overlap without cutting off earlier card or rarity cues.
• Kept looping wrapper ambience on one controllable audio instance.
• Rebuilt card flipping around a dedicated inner rotor.
• Added permanent opaque front and back card surfaces during every animation frame.
• Added Alt1 Chromium compatibility properties for 3D backface rendering.

Removed the floating XP bubble detector and its calibration workflow.

• Removed the floating XP bubble detector and its calibration workflow.
• Imported the working `XP-Tracker-main` RuneMetrics reader supplied by the user.
• Added automatic RuneMetrics panel discovery through skill-icon recognition.
• Added exact Total XP tracking with a persistent local baseline.
• Added visible individual-skill fallback when a Total XP row is not pinned.
• Rejects rounded K/M counter values and counter resets.
• Added deterministic event IDs for reload-safe idempotency.
• Reworked Debug around panel position, visible rows, exact values, baseline, and confirmed increases.
• Added the server-approved `alt1_runemetrics_counter_v1` protocol.
• Disabled both legacy bubble protocols at the server.
• Added server verification of before/after RuneMetrics values and row deltas.
• Restored the working tracker permissions: pixel, overlay, and gamestate.

Retired the unsafe v1.4.0 `alt1_blank_bubble_popup` award protocol.

• Retired the unsafe v1.4.0 `alt1_blank_bubble_popup` award protocol.
• Added the server-approved `alt1_blank_bubble_popup_v2` protocol.
• Replaced broad motion OCR with a narrow bubble-centred lane.
• Restricted motion candidates to orange and gold XP-text pixels.
• Disabled broad fallback-grid OCR.
• Required OCR text to contain both a leading `+` and trailing `XP`.
• Stopped removing internal whitespace from OCR digits.
• Increased confirmation requirements to three frames, two upward frames, and six pixels of travel.
• Added client and server event caps plus a rolling one-minute circuit breaker.
• Invalidated v1.4.0 calibrations and quarantined its pending local queue.
• Added an emergency `ocr_awards_enabled` server switch.
• Added a targeted Lucky Friend SQL repair for the reported false-XP incident.
• Replaced the bubble asset with the exact 51 by 51 PNG supplied by the user.
• Changed the third tracker statistic from the legacy total-XP baseline to pending upload XP.

Replaced nonexistent Alt1 XP listener/interface calls with real screen-pixel capture and OCR.

• Replaced nonexistent Alt1 XP listener/interface calls with real screen-pixel capture and OCR.
• Made the blank yellow XP bubble the fixed visual anchor for detection.
• Added live bubble fingerprint calibration instead of requiring an XP number to be visible during setup.
• Added `assets/xp-bubbles/blank-xp-bubble.png` as the calibration reference asset.
• Automatically derives the rising-XP OCR lane directly beneath the selected bubble.
• Added masked yellow-pixel bubble matching with score, drift recovery, missing-anchor pausing, and debug telemetry.
• Added motion-row detection so OCR is only attempted where new bright text appears.
• Requires two matching OCR frames and measurable upward travel before an XP event is credited.
• Separates identical consecutive XP drops using spawn position, movement, time gaps, and credited-track rules.
• Added bubble, lane, motion, OCR, and confirmation overlays plus a live debug crop.
• Added chunked 4K calibration capture within Alt1 transfer limits.
• Uses Alt1 `bindRegion`, `bindGetRegion`, and `bindReadString`; Game State is no longer required.
• Added `alt1_blank_bubble_popup` as the server-approved XP source.
• Preserved the persistent event queue, unique IDs, atomic currency calculation, and XAMPP/PHP backend.

Added a full in-app Alt1 diagnostics menu.

• Added a full in-app Alt1 diagnostics menu.
• Added raw XP counter and floating XP callback inspection.
• Added listener registration return values, errors, callback counts, and timestamps.
• Added RuneMetrics `xpcounter` interface discovery and direct-read polling fallback.
• Stopped treating a `false` native listener return as definitive proof that OCR failed.
• Added listener retries, interface cache reset, direct counter probe, and API health tests.
• Added persistent queue, baseline, session, browser, and Alt1 environment reporting.
• Added copyable diagnostic reports and an in-app event log.
• Expanded Total XP callback parsing for arrays, nested counters, and overall/total aliases.

Removed RuneScape website and hiscore XP lookups.

• Removed RuneScape website and hiscore XP lookups.
• Rebuilt XP tracking around Alt1 Game State OCR listeners.
• Added precise RuneMetrics Total XP counter mode with a persistent local baseline.
• Added floating XP rise fallback mode.
• Locks each tracking session to one OCR source to prevent double counting.
• Added a persistent local XP event queue for reloads and network interruptions.
• Added server-side event ID deduplication through `xp_ocr_events`.
• Added automatic and manual SQL migration paths.
• Added clearer JSON errors when OCR event storage is unavailable.
• Added `Cache-Control: no-transform` to HTML to prevent Cloudflare automatic beacon injection.
• Restored a strict self-only Content Security Policy.

Replaced the default card back with `assets/cards/default-back.png` for all face-down cards.

• Replaced the default card back with `assets/cards/default-back.png` for all face-down cards.
• Added the Origin Pack and Wise Old Man Pack along with new server-side pack filtering.
• Added a new SQL migration at `sql/migration_v1.6.0.sql` for pack types and card catalogue additions.
• Polished the public UI with a warmer RuneScape TCG-inspired presentation.

Fixed pack-opening cards so they begin face-down and reveal correctly.

• Fixed pack-opening cards so they begin face-down and reveal correctly.
• Added live card art image loading using RuneScape Wiki inventory-image paths with a symbol fallback if an image is unavailable.

Added reveal and card sounds inspired by the OSRS TCG plugin resources.

• Added reveal and card sounds inspired by the OSRS TCG plugin resources.
• Added a card preview modal and album-style collection summary.
• Polished the pack-opening flow while keeping the RS3-specific card backs and pack identity.

Rebuilt the public interface with a desktop sidebar, responsive mobile navigation, warmer RuneScape-inspired materials, and redesigned shop, tracker, vault, collection, and opening screens.

• Rebuilt the public interface with a desktop sidebar, responsive mobile navigation, warmer RuneScape-inspired materials, and redesigned shop, tracker, vault, collection, and opening screens.
• Pack openings are manual: all five cards begin face-down, then can be revealed one at a time or together.
• Added foil card variants with separate collection counts and stronger reveal effects.
• Added collection search, set, ownership, duplicate, rarity, foil, and sorting controls.
• Added set-completion and duplicate statistics to the Chronicle album.
• Existing XP tracking and server-side pack rolls remain unchanged.

Removed the dedicated Tracker page from player navigation and made Pack Shop the default landing page.

• Removed the dedicated Tracker page from player navigation and made Pack Shop the default landing page.
• XP tracking now resumes automatically in the background when Alt1 Screen Pixels permission is available.
• Simplified player navigation to Shop, Packs, and Cards; diagnostics remain accessible through the top-bar shortcut.
• Switched card art to exact RuneScape Wiki Detailed item image file redirects, with explicit exceptions for renamed TCG cards.
• Fixed the card-preview close button and added backdrop-click and Escape-key closing.

Added 7,895 catalogue-backed RuneScape item cards.

• Added 7,895 catalogue-backed RuneScape item cards.
• Expanded Origin to 7,422 new core cards.
• Expanded Wise Old Man to 473 new Mythic/Godly chase cards.
• Added database-backed exact image URLs and Wiki titles.
• Added Mythic and Godly rarity tiers.
• Added server-side collection pagination, search, set filters, ownership filters, foil filters, and sorting.

Card descriptions now use a deliberate compact summary on the card face while the preview modal retains the complete text.

• Card descriptions now use a deliberate compact summary on the card face while the preview modal retains the complete text.
• Quantity badges moved into the header and are hidden during pack openings.
• Internal card codes were removed from player-facing cards and previews.
• Foil treatment now covers the complete card surface and the foil label is aligned as a compact pill.
• Item art uses centered adaptive fit rules for tall, wide, compact, and ordinary images.
• Reclassified 5,900 imported cards into more useful groups such as Weapon, Armour, Skilling Equipment, Potion, Food, Ammunition, Divination, Archaeology, and Invention Component.

Added atomic bulk pack purchases for 1, 3, 5, 10, 25, or the maximum affordable quantity.

• Added atomic bulk pack purchases for 1, 3, 5, 10, 25, or the maximum affordable quantity.
• Shop buttons disable automatically when the connected profile cannot afford the selected quantity.
• Buy Max is calculated and validated on the server while the player row is locked, preventing stale-balance overspending.

Added the Boss Pack and supplied `assets/cards/boss/boss-pack.png` wrapper.

• Added the Boss Pack and supplied `assets/cards/boss/boss-pack.png` wrapper.
• Added 227 Boss set cards with RuneScape Wiki artwork fallbacks.
• Added Boss collection filtering and set-completion totals.
• Added a guaranteed Epic-or-better fifth card and 3% foil chance.

Reworked shop purchasing into one visible Buy Pack button with hover/focus/touch-accessible bulk options for 3, 5, 10, 25, and Max.

• Reworked shop purchasing into one visible Buy Pack button with hover/focus/touch-accessible bulk options for 3, 5, 10, 25, and Max.
• Removed the shop section heading and introductory panel.
• Moved the background XP status card and fan-project notice to Diagnostics.
• Removed Recently Opened from the Pack Vault and simplified the vault heading.

Replaced the split Buy Pack / quantity control with one compact Buy pack button.

• Replaced the split Buy Pack / quantity control with one compact Buy pack button.
• Clicking Buy pack now opens a quantity menu containing 1, 3, 5, 10, 25, and Max.
• Removed hover-triggered purchasing menus to avoid accidental opening and make the interaction explicit.

Added Quest Pack support with new shop, opening, and collection integration.

• Added Quest Pack support with new shop, opening, and collection integration.
• Added Locations Pack support with new shop, opening, and collection integration.
• Added curated quest and location card catalogues plus CSV exports and a migration.
• Added collection filters and album summary support for the new pack sets.

Corrected the required Quest Pack total to 364 active cards.

• Corrected the required Quest Pack total to 364 active cards.
• Corrected the required Locations Pack total to 1,207 active cards.
• Added `SYNC-QUESTS-LOCATIONS.bat`, which fetches official RuneScape Wiki category members and verifies exact totals before committing database changes.
• Existing owned cards are preserved when their Wiki titles match; obsolete starter entries are deactivated rather than deleted.
• Live catalogue CSV exports and summary data are regenerated by the sync utility.

Moved the complete Alt1 application into `/rs3tcg/alt1/`.

• Moved the complete Alt1 application into `/rs3tcg/alt1/`.
• Updated the Alt1 manifest, install URL, base URL, Wiki image identity, and cache versions.
• Added a direct public-profile shortcut inside the Alt1 header.
• Existing root-installed Alt1 clients are redirected to the relocated application.
• The application continues to use its existing database and collection records.

Public website cards now use the exact Alt1 trading-card HTML structure and a stylesheet shared by both surfaces.

• Public website cards now use the exact Alt1 trading-card HTML structure and a stylesheet shared by both surfaces.
• Card rarity frames, artwork fitting, descriptions, statistics, quantities, foil labels, and card dimensions now match between the website and Alt1 app.
• Rebuilt foil and high-rarity shimmer animations as repeated background tiles whose final frame matches their first frame for seamless looping.

Made the Alt1 application use the exact same shared card-face stylesheet and markup as the public website.

• Made the Alt1 application use the exact same shared card-face stylesheet and markup as the public website.
• Removed legacy Alt1 card-face CSS that could override the website renderer.
• Kept only Alt1-specific card placement and reveal-stage sizing rules.
• Replaced the foil repeating-radial texture with ring-free diagonal spectrum sheets.
• Made both foil layers loop by an exact background tile distance for a seamless animation.

Removed the stale Windows-only `sourceMappingURL` directive embedded in the upstream XP counter bundle.

• Removed the stale Windows-only `sourceMappingURL` directive embedded in the upstream XP counter bundle.
• Prevents Alt1 Chromium DevTools from requesting the nonexistent `/apps/alt1/xpmeter/xpcounter.bundle.js.map` file.
• XP tracking code is unchanged; this update only removes the optional debugging-map request and refreshes runtime cache versions.

Added a Help page and Help button in the Alt1 app.

• Added a Help page and Help button in the Alt1 app.
• Added a RuneMetrics setup tutorial with an example image for first-time users.
• Documented that the current stable live build requires the XP column to be first in RuneMetrics.

The RuneMetrics quick-help card can now be dismissed.

• The RuneMetrics quick-help card can now be dismissed.
• Dismissal persists in local storage across app launches.
• The Help page includes a button to restore the Shop reminder.

Added backward-compatible approval for RuneMetrics detector versions 1.5.0 and 1.5.1.

• Added backward-compatible approval for RuneMetrics detector versions 1.5.0 and 1.5.1.
• Fixes device-specific HTTP 426 queue deadlocks caused by older 1.5.1 events remaining in browser storage after reverting to the stable 1.5.0 tracker.
• No OCR reader or XP-column behavior changed.

Restored the primary **Buy pack** action as an immediate one-pack purchase.

• Restored the primary **Buy pack** action as an immediate one-pack purchase.
• Added a separate **More** button that opens 3, 5, 10, 25, Max, and custom purchase options.
• Added a validated manual quantity field capped by current affordability and the existing server transaction limit.