commit d7ec32a4581dd07b2311a4a13be7ff58e191d1d6
Author: riricdev <riricdev@local>
Date:   Sun Sep 6 13:03:25 2026 +0200

    chore: checkpoint initial — Zektyc dataset, avant humanisation
    
    - site vitrine + fingerprint test + zmap + z-panel
    - remplacement duckdns -> riricdev.tail5ea5cd.ts.net (canonical/og/alternates/docs)
    - suppression du token DuckDNS (plus utilisé)

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..2439cdd
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,52 @@
+# dependencies (bun install)
+node_modules
+
+# output
+out
+dist
+*.tgz
+
+# code coverage
+coverage
+*.lcov
+
+# logs
+logs
+_.log
+report.[0-9]_.[0-9]_.[0-9]_.[0-9]_.json
+
+# dotenv environment variable files
+.env
+.env.development.local
+.env.test.local
+.env.production.local
+.env.local
+
+# admin panel secrets
+data/admin.pwhash
+data/admin.lock
+
+# runtime db / heavy build data (OSM planet files, grids, binaries)
+data/zektyc.db
+data/zektyc.db-shm
+data/zektyc.db-wal
+data/maxspeed/*.osm.pbf
+data/maxspeed/grid-*
+data/maxspeed/build_band
+data/maxspeed/build_global
+data/maxspeed/merge_grid
+data/maxspeed/*.log
+
+# caches
+.eslintcache
+.cache
+*.tsbuildinfo
+
+# IntelliJ based IDEs
+.idea
+
+# Finder (MacOS) folder config
+.DS_Store
+
+# sensitive / personal
+duckdns_token_do_not_open.txt
diff --git a/bun.lock b/bun.lock
new file mode 100644
index 0000000..d6ab8a2
--- /dev/null
+++ b/bun.lock
@@ -0,0 +1,99 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "zektyc",
+      "dependencies": {
+        "marked": "^18.0.9",
+        "sharp": "^0.35.3",
+        "wordpress-honeypot": "^1.1.2",
+      },
+      "devDependencies": {
+        "@types/bun": "latest",
+      },
+      "peerDependencies": {
+        "typescript": "^5",
+      },
+    },
+  },
+  "packages": {
+    "@emnapi/runtime": ["@emnapi/runtime@1.11.3", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA=="],
+
+    "@img/colour": ["@img/colour@1.1.0", "", {}, "sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ=="],
+
+    "@img/sharp-darwin-arm64": ["@img/sharp-darwin-arm64@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-darwin-arm64": "1.3.2" }, "os": "darwin", "cpu": "arm64" }, "sha512-RMnFX7YQsMoh7lWfcM4NEHHymBX/rLuKNPVM84XE9ONPcaSCDgE7CHIHpSgPcO2xcRthgBy1HfNO319mwhIAkg=="],
+
+    "@img/sharp-darwin-x64": ["@img/sharp-darwin-x64@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-darwin-x64": "1.3.2" }, "os": "darwin", "cpu": "x64" }, "sha512-Xo+5uFBtLN0BKqieTxiFzFPQAUlBbbH5iBKyRX/z1JrbnYsHTfKJnUfL8+p2TPXr1pXqao4eeL4Rl144uDpK9w=="],
+
+    "@img/sharp-freebsd-wasm32": ["@img/sharp-freebsd-wasm32@0.35.3", "", { "dependencies": { "@img/sharp-wasm32": "0.35.3" }, "os": "freebsd" }, "sha512-lUxcqWIj2wMQ9BrwNjngcr1gWUr5xgaGThBRqPPalIC2n67Cqj1uPh8NnA/ZhAg8hUbKl+kVHKwgUIwe6ZYPrg=="],
+
+    "@img/sharp-libvips-darwin-arm64": ["@img/sharp-libvips-darwin-arm64@1.3.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-9J6ypZFpQBj4YnePGoq/S38w6nz+vqg5WZLrLGY4YuSemdMq47GMLBPO42MzwdGwpg/agZ7xzZcFHa48xlywfg=="],
+
+    "@img/sharp-libvips-darwin-x64": ["@img/sharp-libvips-darwin-x64@1.3.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-m2pW1n6cns9VaubNwsZ+c3CRYjxNQWgJ5gPlnL1nbBcpkBvFm6SCFN5o0psFHI8w9n11NKhFkeEDns98tiqbEw=="],
+
+    "@img/sharp-libvips-linux-arm": ["@img/sharp-libvips-linux-arm@1.3.2", "", { "os": "linux", "cpu": "arm" }, "sha512-1eMLzy92I4J6rmi4mAT8yC3HxOtniyGELlzGbNMLLeqe052ahFQ0h6LFq+lh5DsDIdYViIDst08abvSbcEdLXQ=="],
+
+    "@img/sharp-libvips-linux-arm64": ["@img/sharp-libvips-linux-arm64@1.3.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-dqVSFynCox4C/J8kT16V7SIFAns0IjgLwkvYT7p8LQVmJ5OS5b6tI9IGflxTeuBS//zXeFIUbwt5dwxyZ17cnA=="],
+
+    "@img/sharp-libvips-linux-ppc64": ["@img/sharp-libvips-linux-ppc64@1.3.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-3z0NHDxD6n5I9gc05U1eW1AyRm+Gznzq3naMrthPNqE6oYykcogW0l/jfpJdjYnuNl8R7yI9pNbE1XiUeyq0Aw=="],
+
+    "@img/sharp-libvips-linux-riscv64": ["@img/sharp-libvips-linux-riscv64@1.3.2", "", { "os": "linux", "cpu": "none" }, "sha512-bsb4rI+NldGOsXuej2r8OdSS8+zXDVaCWxyWrcv6kneTOlgAHtZABRzBBCwdsPiD90J4myNJuHpg6kA20ImW/w=="],
+
+    "@img/sharp-libvips-linux-s390x": ["@img/sharp-libvips-linux-s390x@1.3.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-/ABshyj8gCpyIrNXnHn4LorDJ0HHm1VhXPBlxZ8zAtfVPAaSafXPGn+sUSIRiwaSBy0mmFjSjiXI5mkcwdChKQ=="],
+
+    "@img/sharp-libvips-linux-x64": ["@img/sharp-libvips-linux-x64@1.3.2", "", { "os": "linux", "cpu": "x64" }, "sha512-ITPEtgffGJ0S6G9dRyw/366tJQqFRcHWPHhC+Stpg3Z8AEMrDrTr2lhdz4f/Y/HMbRh//7Z5mBzEpVdi62Oc3w=="],
+
+    "@img/sharp-libvips-linuxmusl-arm64": ["@img/sharp-libvips-linuxmusl-arm64@1.3.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-zE9EdiUzUmg5mDT5a1rk5fYJ6GWPloTwWBYDS14naqHsL+EaMpDj1AWnpLgh3u0YCORv2Tt50wrcrpYqkP97Kw=="],
+
+    "@img/sharp-libvips-linuxmusl-x64": ["@img/sharp-libvips-linuxmusl-x64@1.3.2", "", { "os": "linux", "cpu": "x64" }, "sha512-m0lrLiUt+lBYnCFr8qV/65yMR4E/c7/wf78I5eKTdkEakFAlZ9QlzEM3QIhhAwVeUhLAHLcCq7a7Vszq/oFNZQ=="],
+
+    "@img/sharp-linux-arm": ["@img/sharp-linux-arm@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-linux-arm": "1.3.2" }, "os": "linux", "cpu": "arm" }, "sha512-affVWCTLooy8TSxbDx2qkzuDeaWLNVBA+P//FNBirHsXpP2fuBhk5AuboYUnrDnzoXes8GFjpTx0SBFOCRg+FA=="],
+
+    "@img/sharp-linux-arm64": ["@img/sharp-linux-arm64@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-linux-arm64": "1.3.2" }, "os": "linux", "cpu": "arm64" }, "sha512-QgKDspHPnrU+GQ55XPhGwyhC8acLVOOSyAvo1oVfFmrIXLkDNmGWzAfDZ4xK8oSA1qBQrALcHX0G5UZni/SuFQ=="],
+
+    "@img/sharp-linux-ppc64": ["@img/sharp-linux-ppc64@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-linux-ppc64": "1.3.2" }, "os": "linux", "cpu": "ppc64" }, "sha512-sMd8rDxmpLOwv/7N44klFjOD5DUO7FLdjiXDI0hoxYaf7Ar262dQIEkosE98bps+5HPLtp/EvNqeqQtOycP/IA=="],
+
+    "@img/sharp-linux-riscv64": ["@img/sharp-linux-riscv64@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-linux-riscv64": "1.3.2" }, "os": "linux", "cpu": "none" }, "sha512-0Eob78yjlYPfL5vMNWAW55l3R9Y6BQS/gOfe0ZcP9mEz9ohhKSt4im1hayiknXgf8AWrFqMvJcKIdmLmEe7yeQ=="],
+
+    "@img/sharp-linux-s390x": ["@img/sharp-linux-s390x@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-linux-s390x": "1.3.2" }, "os": "linux", "cpu": "s390x" }, "sha512-KgAxQ0DxpNOq1rG2t5cgTgShJFGSuU7XO45cqC+1NVOuZnP6tlgZRuSYOfNupGkHID0o3cJOsw4DVeJpMovcGw=="],
+
+    "@img/sharp-linux-x64": ["@img/sharp-linux-x64@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-linux-x64": "1.3.2" }, "os": "linux", "cpu": "x64" }, "sha512-8pqvxubL2PGdhlPy6GLqzDYMUjyRmKAwKHYKixpdJYBUK7PJ0C029XdsnpFIdgRZG68fZiGdHVWcKPvtiPB4cA=="],
+
+    "@img/sharp-linuxmusl-arm64": ["@img/sharp-linuxmusl-arm64@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-linuxmusl-arm64": "1.3.2" }, "os": "linux", "cpu": "arm64" }, "sha512-Vz0iQjzzcSX3HCbfwFfCSG/9SCIqyO0mH2sXyiHaAYfBk0cRsCWXRyQYX0ovCK/PAQBbTzQ0dsPQHh5MAFL59w=="],
+
+    "@img/sharp-linuxmusl-x64": ["@img/sharp-linuxmusl-x64@0.35.3", "", { "optionalDependencies": { "@img/sharp-libvips-linuxmusl-x64": "1.3.2" }, "os": "linux", "cpu": "x64" }, "sha512-6O1NPKcDVj9QEdg7Hx549EX8U0rp6yXQERqru6yRN7fGBn32UvIRJUlWnk+8xDCiG76hXVBbX82NZ/ZKr0euIg=="],
+
+    "@img/sharp-wasm32": ["@img/sharp-wasm32@0.35.3", "", { "dependencies": { "@emnapi/runtime": "^1.11.1" } }, "sha512-cZ0XkcYGpHZkqW6iCkqTcmUC0CD9DhD5d/qeZlZkfRBn6GnHniZXLUo5+9xw8Iv76YE6LQFN9YNBlKREcCG76w=="],
+
+    "@img/sharp-webcontainers-wasm32": ["@img/sharp-webcontainers-wasm32@0.35.3", "", { "dependencies": { "@img/sharp-wasm32": "0.35.3" }, "cpu": "none" }, "sha512-2rnq7bX3NzeR2T4YWgz8qiG4h3TSdMe+vN1iQXpJleSJ3SM5zQ8Fy2SyyXAWlbxpEZ2Y+Z4u1BePgJEYbSy80Q=="],
+
+    "@img/sharp-win32-arm64": ["@img/sharp-win32-arm64@0.35.3", "", { "os": "win32", "cpu": "arm64" }, "sha512-4bPwFdMbeC4JQ8L8LOyWp6nsHcboP5fxkp6iPOXz2Vg49R42TuMs2whkJ5OAP4/Ul035qOzy0AecOF9VOscn4w=="],
+
+    "@img/sharp-win32-ia32": ["@img/sharp-win32-ia32@0.35.3", "", { "os": "win32", "cpu": "ia32" }, "sha512-r53mXsBN6lFUDiST764SvgwUdHAqM4rPAiDzAmf4fLoB6X/rkfyTrLCg6+g17wJJiCmB3JYgHuUldCWUIRFSXw=="],
+
+    "@img/sharp-win32-x64": ["@img/sharp-win32-x64@0.35.3", "", { "os": "win32", "cpu": "x64" }, "sha512-D4y1vNeZrIIJCN+uHaWVtH86B+aCrdMYYjicy9pXHvbGZeGYLLSd3wdVuC37FxVXlU1ARsk84eKWfWMXGYEqvA=="],
+
+    "@types/bun": ["@types/bun@1.3.14", "", { "dependencies": { "bun-types": "1.3.14" } }, "sha512-h1hFqFVcvAvD9j9K7ZW7vd82aSA+rTdznZa+5bwvCwqSB1jmmfLcbIWhOLx1/+boy/xmjgCs/OMUL8hRJSmnPw=="],
+
+    "@types/node": ["@types/node@26.2.0", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-5IviulTZeRNp2vAJ514cc/HUlY5nZ9fCbq9DMyC52BrhFZACo3nI0R7qBxhQmo/d27NFe96ur/b7Wwxklda+kg=="],
+
+    "bun-types": ["bun-types@1.3.14", "", { "dependencies": { "@types/node": "*" } }, "sha512-4N0ig0fEomHt5R0KCFWjovxow98rIoRwKolrYdCcknNwMekCXRnWEUvgu5soYV8QXtVsrUD8B95MBOZGPvr6KQ=="],
+
+    "detect-libc": ["detect-libc@2.1.2", "", {}, "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ=="],
+
+    "marked": ["marked@18.0.9", "", { "bin": { "marked": "bin/marked.js" } }, "sha512-/Sa4qiiHZxf0/FQdBBowr9q4r10krCwMvpK48FUBdXdUXScDxiQGR9zCPrFgRVR5LU3iySOiIjy09ZQvADir1w=="],
+
+    "semver": ["semver@7.8.5", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA=="],
+
+    "sharp": ["sharp@0.35.3", "", { "dependencies": { "@img/colour": "^1.1.0", "detect-libc": "^2.1.2", "semver": "^7.8.5" }, "optionalDependencies": { "@img/sharp-darwin-arm64": "0.35.3", "@img/sharp-darwin-x64": "0.35.3", "@img/sharp-freebsd-wasm32": "0.35.3", "@img/sharp-libvips-darwin-arm64": "1.3.2", "@img/sharp-libvips-darwin-x64": "1.3.2", "@img/sharp-libvips-linux-arm": "1.3.2", "@img/sharp-libvips-linux-arm64": "1.3.2", "@img/sharp-libvips-linux-ppc64": "1.3.2", "@img/sharp-libvips-linux-riscv64": "1.3.2", "@img/sharp-libvips-linux-s390x": "1.3.2", "@img/sharp-libvips-linux-x64": "1.3.2", "@img/sharp-libvips-linuxmusl-arm64": "1.3.2", "@img/sharp-libvips-linuxmusl-x64": "1.3.2", "@img/sharp-linux-arm": "0.35.3", "@img/sharp-linux-arm64": "0.35.3", "@img/sharp-linux-ppc64": "0.35.3", "@img/sharp-linux-riscv64": "0.35.3", "@img/sharp-linux-s390x": "0.35.3", "@img/sharp-linux-x64": "0.35.3", "@img/sharp-linuxmusl-arm64": "0.35.3", "@img/sharp-linuxmusl-x64": "0.35.3", "@img/sharp-webcontainers-wasm32": "0.35.3", "@img/sharp-win32-arm64": "0.35.3", "@img/sharp-win32-ia32": "0.35.3", "@img/sharp-win32-x64": "0.35.3" }, "peerDependencies": { "@types/node": "*" }, "optionalPeers": ["@types/node"] }, "sha512-ej0zVHuZGHCiABXcNxeYhpRnPNPAcvbG8RMdBAhDAxLKkCRVSpK3Iyu7qbqw3JMzoj0REeM6f3tJLtVwl0023Q=="],
+
+    "tslib": ["tslib@2.8.1", "", {}, "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="],
+
+    "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
+
+    "undici-types": ["undici-types@8.3.0", "", {}, "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ=="],
+
+    "wordpress-honeypot": ["wordpress-honeypot@1.1.2", "", { "peerDependencies": { "typescript": ">=5.0.0" } }, "sha512-k+1QSj1OW7f5E63JecF9I4TNNObdAL3oHHWWq9hSrte7WTRaoY/dMAkC0914gfnze/N3neo+Zq0G6/YfCrT8Cg=="],
+  }
+}
diff --git a/data/i18n.json b/data/i18n.json
new file mode 100644
index 0000000..c71fce2
--- /dev/null
+++ b/data/i18n.json
@@ -0,0 +1,142 @@
+{
+  "fr": {
+    "meta.title": "Zektyc — Vie privée et sécurité, depuis la France",
+    "meta.description": "Zektyc défend la vie privée et la sécurité, depuis la France. Sans jargon, sans panique.",
+    "nav.principes": "Nos principes",
+    "nav.contact": "Contact",
+    "hero.badge": "Basé en France · Indépendant",
+    "hero.title1": "La vie privée n'est pas un luxe.",
+    "hero.title2": "La sécurité non plus.",
+    "hero.sub": "Zektyc aide les gens à reprendre le contrôle de leurs données, au calme. On se bat pour la vie privée et la sécurité, sans jargon, sans panique.",
+    "hero.cta.contact": "Discutons",
+    "hero.cta.principes": "Découvrir nos principes",
+    "manifesto.title": "Pourquoi on fait ça",
+    "manifesto.text": "La surveillance est partout. Chaque clic est tracé, chaque message analysé, chaque donnée revendue. La vie privée n'est pas un luxe : c'est une condition de la liberté. On pense que vos données devraient vous appartenir — à vous, et à personne d'autre. On vulgarise, on dédramatise, et on donne des outils concrets pour reprendre la main, du simple navigateur au serveur personnel. Pas de jargon, pas de panique : notre boulot, c'est de remettre les choses dans le bon sens.",
+    "values.title": "Nos principes",
+    "values.priv.title": "Vie privée",
+    "values.priv.text": "Vos données restent les vôtres, point final. On s'oppose aux trackers, à la surveillance et à la collecte de masse.",
+    "values.sec.title": "Sécurité",
+    "values.sec.text": "Des protections concrètes, testées et expliquées simplement. Parce que la sécurité, c'est pour tout le monde, pas que pour les experts.",
+    "values.trans.title": "Transparence",
+    "values.trans.text": "On fait ce qu'on dit, et on dit ce qu'on fait. Pas de promesses vagues, pas de magie noire.",
+    "values.fr.title": "Fait en France",
+    "values.fr.text": "On est basés en France et on est fiers de le dire. Local, indépendant, humain.",
+    "contact.title": "On parle ?",
+    "contact.text": "Un projet, une question, une inquiétude ? Écris-nous, on répond avec plaisir — et sans phrases toutes faites.",
+    "contact.signal": "Signal",
+    "contact.discord": "Discord",
+    "contact.email": "E-mail",
+    "footer.site": "Zektyc · France",
+    "footer.note": "Ce site ne collecte rien. Aucun cookie, aucun tracker.",
+    "footer.tos": "Conditions d'utilisation",
+    "footer.privacy": "Confidentialité",
+    "nav.faq": "FAQ",
+    "nav.news": "Blog",
+    "nav.projects": "Projets",
+    "projects.title": "Nos projets",
+    "projects.intro": "On ne parle pas seulement de protection, on la met en pratique. Chaque projet est auto-hébergé et sans collecte de données.",
+    "projects.fp.text": "Découvrez à quel point votre navigateur vous rend identifiable, avec un score et des explications. Tout est calculé localement, rien n'est envoyé ni stocké.",
+    "projects.fp.cta": "Tester mon empreinte",
+    "faq.title": "Questions fréquentes",
+    "faq.intro": "Quelques questions qu'on nous pose souvent, avec des réponses claires. Le principe de base : pas de collecte, pas de traçage, pas de compromis.",
+    "faq.q1": "Ce site collecte-t-il mes données ?",
+    "faq.a1": "Non. Zektyc ne collecte volontairement aucune donnée : pas de compte, pas de formulaire, pas de cookie, pas de tracker, pas de mesure d'audience et pas de boutons de partage. Les seules informations traitées sont les journaux techniques automatiques (adresse IP, date et heure, ressource demandée), conservés quatorze jours maximum à des fins de sécurité, puis supprimés automatiquement. Notre politique de confidentialité détaille l'ensemble de ces traitements.",
+    "faq.q2": "Pourquoi aucun cookie sur ce site ?",
+    "faq.a2": "Parce que le suivi n'est jamais nécessaire à un site d'information : il ne sert qu'à profiler les visiteurs et à revendre leurs données. Sans cookie, il n'y a ni traçage, ni publicité ciblée, ni consentement à arracher. C'est notre façon d'appliquer ce que nous défendons chaque jour : la vie privée n'est pas un luxe, c'est un droit fondamental, et il commence par la sobriété technique.",
+    "faq.q3": "La vie privée en ligne, c'est vraiment pour tout le monde ?",
+    "faq.a3": "Oui, et c'est précisément pour cela que Zektyc existe. La sécurité n'est pas réservée aux experts : chacun peut faire des choix simples et efficaces, comme utiliser un navigateur respectueux, choisir des mots de passe forts, activer la double authentification et confier ses mots de passe à un gestionnaire. Notre rôle est de vous aider à mettre ces protections en place sans jargon et sans vous faire peur.",
+    "faq.q4": "Que fait Zektyc concrètement ?",
+    "faq.a4": "Nous aidons les gens à reprendre le contrôle de leurs données, au calme. Nous expliquons les menaces réelles simplement, sans panique ni sensationnalisme, nous recommandons des protections concrètes, testées et faciles à adopter, et nous remettons la vie privée et la sécurité au centre des décisions techniques. Nous sommes basés en France, indépendants et humains, et nous mettons en pratique ce que nous conseillons.",
+    "faq.q5": "Le site est-il sécurisé ?",
+    "faq.a5": "Oui. Le site n'est accessible qu'en HTTPS, avec des en-têtes de sécurité restrictifs, une limitation du nombre de requêtes par adresse IP et le blocage des chemins sensibles. Si vous découvrez une faille, vous pouvez nous la signaler via notre politique de divulgation responsable, publiée dans le fichier standard /.well-known/security.txt, sans risque juridique tant que vous respectez nos conditions de signalement.",
+    "faq.q6": "Que faites-vous des messages que je vous envoie ?",
+    "faq.a6": "Vos messages servent uniquement à répondre à votre demande. Ils ne sont jamais partagés, jamais utilisés à des fins de marketing et ne sont pas conservés au-delà de la durée nécessaire à l'échange. Les messages transitent par nos prestataires de messagerie (Proton Mail, Signal, Discord), qui ne les traitent que pour les acheminer ; Signal chiffre vos échanges de bout en bout.",
+    "faq.q7": "Comment puis-je vous contacter ?",
+    "faq.a7": "Par e-mail à riric65@protonmail.com, par Signal à l'identifiant notriric.05, ou via notre serveur Discord officiel. Pour toute communication sensible ou confidentielle, privilégiez l'e-mail ou Signal plutôt que Discord, car ces canaux respectent davantage votre vie privée. Nous répondons dans un délai raisonnable, sans phrases toutes faites.",
+    "faq.q8": "Ce site est-il gratuit ?",
+    "faq.a8": "Oui. La consultation du site est entièrement gratuite et le restera. Nous ne vendons pas vos données, nous n'affichons aucune publicité et nous ne revendiquons rien d'autre que votre confiance. Si un jour nous proposons des prestations, elles seront clairement présentées et séparées de l'information gratuite que nous publions.",
+    "nav.team": "Équipe",
+    "team.title": "L'équipe",
+    "team.intro": "Deux personnes derrière Zektyc. Un humain, une IA.",
+    "team.riric.role": "CEO · Fondateur · Architecte",
+    "team.riric.desc": "Vision, direction technique, architecture, design, sécurité. Riric construit Zektyc de A à Z — du serveur au premier pixel.",
+    "team.opencode.role": "Programmateur",
+    "team.opencode.desc": "Développement, implémentation, code. OpenCode écrit et maintient le code source de Zektyc — du serveur Bun aux pages statiques.",
+    "blog.title": "Blog",
+    "blog.intro": "Articles sur la vie privée, la sécurité, le développement et le self-hosting.",
+    "blog.coming.title": "Bientôt",
+    "blog.coming.text": "Le blog est en cours de préparation. Des articles sur la vie privée, la sécurité informatique, le développement et le self-hosting arrivent bientôt.",
+    "blog.coming.note": "En attendant, découvrez nos projets.",
+    "blog.coming.cta": "Voir les projets"
+  },
+  "en": {
+    "meta.title": "Zektyc — Privacy and security, from France",
+    "meta.description": "Zektyc fights for privacy and security, from France. No jargon, no panic.",
+    "nav.principes": "Our principles",
+    "nav.contact": "Contact",
+    "hero.badge": "Based in France · Independent",
+    "hero.title1": "Privacy is not a luxury.",
+    "hero.title2": "Neither is security.",
+    "hero.sub": "Zektyc helps people take back control of their data, calmly. We fight for privacy and security — no jargon, no panic.",
+    "hero.cta.contact": "Let's talk",
+    "hero.cta.principes": "See our principles",
+    "manifesto.title": "Why we do this",
+    "manifesto.text": "Surveillance is everywhere. Every click is tracked, every message analyzed, every bit of data resold. Privacy is not a luxury: it's a condition of freedom. We believe your data should belong to you — to you, and no one else. We explain, we take the drama out of it, and we hand you concrete tools to take back control, from a simple browser to a personal server. No jargon, no panic: our job is to set things straight.",
+    "values.title": "Our principles",
+    "values.priv.title": "Privacy",
+    "values.priv.text": "Your data stays yours, period. We stand against trackers, surveillance and mass data collection.",
+    "values.sec.title": "Security",
+    "values.sec.text": "Concrete protections, tested and explained simply. Because security is for everyone, not just the experts.",
+    "values.trans.title": "Transparency",
+    "values.trans.text": "We do what we say, and we say what we do. No vague promises, no black magic.",
+    "values.fr.title": "Made in France",
+    "values.fr.text": "We're based in France and proud of it. Local, independent, human.",
+    "contact.title": "Want to talk?",
+    "contact.text": "A project, a question, a concern? Drop us a line — we're happy to answer, without canned phrases.",
+    "contact.signal": "Signal",
+    "contact.discord": "Discord",
+    "contact.email": "Email",
+    "footer.site": "Zektyc · France",
+    "footer.note": "This site collects nothing. No cookies, no trackers.",
+    "footer.tos": "Terms of Service",
+    "footer.privacy": "Privacy",
+    "nav.faq": "FAQ",
+    "nav.news": "Blog",
+    "nav.projects": "Projects",
+    "projects.title": "Our projects",
+    "projects.intro": "We don't just talk about protection, we put it into practice. Every project is self-hosted and collects no data.",
+    "projects.fp.text": "Find out how identifiable your browser makes you, with a score and explanations. Everything is computed locally, nothing is sent or stored.",
+    "projects.fp.cta": "Test my fingerprint",
+    "faq.title": "Frequently asked questions",
+    "faq.intro": "A few questions we get asked a lot, with clear answers. The basic principle: no collection, no tracking, no compromise.",
+    "faq.q1": "Does this website collect my data?",
+    "faq.a1": "No. Zektyc intentionally collects nothing: no account, no form, no cookie, no tracker, no analytics and no share buttons. The only data processed is automatic technical logging (IP address, date and time, requested resource), kept for fourteen days maximum for security purposes, then automatically deleted. Our privacy policy details all of these processing activities.",
+    "faq.q2": "Why are there no cookies on this website?",
+    "faq.a2": "Because tracking is never necessary for an informational website: it only serves to profile visitors and resell their data. Without cookies, there is no tracking, no targeted advertising and no consent to extort. It is our way of practising what we preach: privacy is not a luxury, it is a fundamental right, and it starts with technical sobriety.",
+    "faq.q3": "Is online privacy really for everyone?",
+    "faq.a3": "Yes, and that is precisely why Zektyc exists. Security is not reserved for experts: everyone can make simple, effective choices, such as using a privacy-friendly browser, choosing strong passwords, enabling two-factor authentication and letting a password manager handle the rest. Our job is to help you put these protections in place without jargon and without scaring you.",
+    "faq.q4": "What does Zektyc actually do?",
+    "faq.a4": "We help people take back control of their data, calmly. We explain real threats simply, without panic or sensationalism, we recommend concrete protections that are tested and easy to adopt, and we put privacy and security back at the centre of technical decisions. We are based in France, independent and human, and we practise what we advise.",
+    "faq.q5": "Is the website secure?",
+    "faq.a5": "Yes. The website is only reachable over HTTPS, with restrictive security headers, rate limiting per IP address and blocking of sensitive paths. If you find a flaw, you can report it through our responsible disclosure policy, published in the standard /.well-known/security.txt file, without legal risk as long as you respect our reporting conditions.",
+    "faq.q6": "What do you do with the messages I send you?",
+    "faq.a6": "Your messages are used solely to answer your request. They are never shared, never used for marketing and not kept beyond the time needed for the exchange. Messages transit through our messaging providers (Proton Mail, Signal, Discord), which process them only to deliver them; Signal encrypts your exchanges end to end.",
+    "faq.q7": "How can I contact you?",
+    "faq.a7": "By e-mail at riric65@protonmail.com, by Signal at the username notriric.05, or through our official Discord server. For any sensitive or confidential communication, prefer e-mail or Signal over Discord, as these channels respect your privacy more. We reply within a reasonable time, without canned phrases.",
+    "faq.q8": "Is this website free?",
+    "faq.a8": "Yes. Browsing the website is entirely free and will remain so. We do not sell your data, we display no advertising and we claim nothing but your trust. If we ever offer paid services, they will be clearly presented and kept separate from the free information we publish.",
+    "nav.team": "Team",
+    "team.title": "Team",
+    "team.intro": "Two people behind Zektyc. One human, one AI.",
+    "team.riric.role": "CEO · Founder · Architect",
+    "team.riric.desc": "Vision, technical direction, architecture, design, security. Riric builds Zektyc from A to Z — from the server to the first pixel.",
+    "team.opencode.role": "Programmer",
+    "team.opencode.desc": "Development, implementation, code. OpenCode writes and maintains Zektyc's source code — from the Bun server to static pages.",
+    "blog.title": "Blog",
+    "blog.intro": "Articles on privacy, security, development and self-hosting.",
+    "blog.coming.title": "Coming soon",
+    "blog.coming.text": "The blog is under preparation. Articles on privacy, computer security, development and self-hosting are coming soon.",
+    "blog.coming.note": "In the meantime, check out our projects.",
+    "blog.coming.cta": "See projects"
+  }
+}
diff --git a/logo-1024.png b/logo-1024.png
new file mode 100644
index 0000000..a2e4826
Binary files /dev/null and b/logo-1024.png differ
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..5ce96c4
--- /dev/null
+++ b/package.json
@@ -0,0 +1,22 @@
+{
+  "name": "zektyc",
+  "module": "src/server.ts",
+  "devDependencies": {
+    "@types/bun": "latest"
+  },
+  "peerDependencies": {
+    "typescript": "^5"
+  },
+  "private": true,
+  "scripts": {
+    "dev": "bun --watch src/server.ts",
+    "start": "bun src/server.ts",
+    "typecheck": "tsc --noEmit"
+  },
+  "type": "module",
+  "dependencies": {
+    "marked": "^18.0.9",
+    "sharp": "^0.35.3",
+    "wordpress-honeypot": "^1.1.2"
+  }
+}
diff --git a/pfp.jpg b/pfp.jpg
new file mode 100644
index 0000000..95e29bf
Binary files /dev/null and b/pfp.jpg differ
diff --git a/public/.well-known/security.txt b/public/.well-known/security.txt
new file mode 100644
index 0000000..905625d
--- /dev/null
+++ b/public/.well-known/security.txt
@@ -0,0 +1,6 @@
+# Zektyc — Politique de divulgation responsable / Responsible disclosure policy
+Contact: mailto:riric65@protonmail.com
+Expires: 2027-02-14T00:00:00.000Z
+Preferred-Languages: fr, en
+Canonical: https://zektyc.duckdns.org/.well-known/security.txt
+Policy: https://zektyc.duckdns.org/tos
diff --git a/public/apple-touch-icon.png b/public/apple-touch-icon.png
new file mode 100644
index 0000000..f5ce8a5
Binary files /dev/null and b/public/apple-touch-icon.png differ
diff --git a/public/blog/en/index.html b/public/blog/en/index.html
new file mode 100644
index 0000000..aa70d0f
--- /dev/null
+++ b/public/blog/en/index.html
@@ -0,0 +1,49 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="Zektyc Blog — articles on privacy, security, development and self-hosting." />
+    <meta name="robots" content="index, follow" />
+    <title>Blog · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/en/blog/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Blog · Zektyc" />
+    <meta property="og:description" content="Zektyc Blog — articles on privacy, security, development and self-hosting." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/en/blog/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="en_US" />
+    <meta property="og:locale:alternate" content="fr_FR" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/en/">← Back to home</a></p>
+      <h1 data-i18n="blog.title">Blog</h1>
+      <p class="legal-meta" data-i18n="blog.intro">Articles on privacy, security, development and self-hosting.</p>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3 data-i18n="blog.coming.title">Coming soon</h3>
+          <p data-i18n="blog.coming.text">
+            The blog is under preparation. Articles on privacy, computer security,
+            development and self-hosting are coming soon.
+          </p>
+          <p class="legal-note" data-i18n="blog.coming.note">In the meantime, check out our projects.</p>
+          <a class="btn btn-ghost" href="/en/projets" data-i18n="blog.coming.cta">See projects</a>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/blog/index.html b/public/blog/index.html
new file mode 100644
index 0000000..262f505
--- /dev/null
+++ b/public/blog/index.html
@@ -0,0 +1,49 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="Blog Zektyc — articles sur la vie privée, la sécurité, le développement et le self-hosting." />
+    <meta name="robots" content="index, follow" />
+    <title>Blog · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/blog/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Blog · Zektyc" />
+    <meta property="og:description" content="Blog Zektyc — articles sur la vie privée, la sécurité, le développement et le self-hosting." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/blog/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta property="og:locale:alternate" content="en_US" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/">← Retour à l'accueil</a></p>
+      <h1 data-i18n="blog.title">Blog</h1>
+      <p class="legal-meta" data-i18n="blog.intro">Articles sur la vie privée, la sécurité, le développement et le self-hosting.</p>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3 data-i18n="blog.coming.title">Bientôt</h3>
+          <p data-i18n="blog.coming.text">
+            Le blog est en cours de préparation. Des articles sur la vie privée, la sécurité
+            informatique, le développement et le self-hosting arrivent bientôt.
+          </p>
+          <p class="legal-note" data-i18n="blog.coming.note">En attendant, découvrez nos projets.</p>
+          <a class="btn btn-ghost" href="/projets" data-i18n="blog.coming.cta">Voir les projets</a>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/css/main.css b/public/css/main.css
new file mode 100644
index 0000000..a698678
--- /dev/null
+++ b/public/css/main.css
@@ -0,0 +1,100 @@
+:root {
+  --bg: #0f1117;
+  --surface: #181b24;
+  --border: #282c36;
+  --text: #e4e4e7;
+  --text-muted: #6b7280;
+  --accent: #4ecdc4;
+  --accent-2: #7c5cff;
+  --font-sans: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+  --font-mono: "SF Mono", "Fira Code", "Cascadia Code", monospace;
+}
+
+*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+
+html { scroll-behavior: smooth; }
+
+body {
+  font-family: var(--font-sans);
+  background: var(--bg);
+  color: var(--text);
+  line-height: 1.6;
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+}
+
+a { color: var(--accent); text-decoration: none; }
+a:hover { text-decoration: underline; }
+
+.container {
+  max-width: 900px;
+  margin: 0 auto;
+  padding: 0 1.5rem;
+}
+
+.topbar {
+  position: fixed;
+  top: 0;
+  left: 0;
+  right: 0;
+  z-index: 100;
+  background: rgba(15, 17, 23, 0.85);
+  backdrop-filter: blur(12px);
+  -webkit-backdrop-filter: blur(12px);
+  border-bottom: 1px solid var(--border);
+  height: 56px;
+}
+
+.topbar-inner {
+  max-width: 900px;
+  margin: 0 auto;
+  padding: 0 1.5rem;
+  height: 100%;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+
+.logo {
+  font-weight: 800;
+  font-size: 1.1rem;
+  color: var(--text);
+  text-decoration: none;
+}
+
+.logo:hover { text-decoration: none; opacity: .85; }
+
+.topnav {
+  display: flex;
+  gap: 1.25rem;
+  align-items: center;
+}
+
+.topnav a {
+  font-size: .85rem;
+  color: var(--text-muted);
+  text-decoration: none;
+  transition: color .2s;
+}
+
+.topnav a:hover,
+.topnav a.active { color: var(--text); text-decoration: none; }
+
+.lang-link {
+  font-weight: 700;
+  padding: .2rem .5rem;
+  border: 1px solid var(--border);
+  border-radius: 4px;
+}
+
+.site-footer {
+  border-top: 1px solid var(--border);
+  padding: 2rem 0;
+  text-align: center;
+  color: var(--text-muted);
+  font-size: .85rem;
+}
+
+@media (max-width: 640px) {
+  .topnav { gap: .75rem; font-size: .8rem; }
+}
diff --git a/public/css/social.css b/public/css/social.css
new file mode 100644
index 0000000..c7ed7ab
--- /dev/null
+++ b/public/css/social.css
@@ -0,0 +1,1654 @@
+/* ═══════════════════════════════════════════════════════════
+   Zektyc Social — Complete Redesign v2
+   ═══════════════════════════════════════════════════════════ */
+
+/* Override body flex from main site style.css */
+body.social-page {
+  display: block;
+  flex-direction: unset;
+}
+body.social-page > *:first-child { margin-top: 0; }
+
+/* ── SVG Icons ── */
+.social-icon {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 20px;
+  height: 20px;
+  flex-shrink: 0;
+  vertical-align: middle;
+}
+.social-icon svg {
+  width: 100%;
+  height: 100%;
+  fill: none;
+  stroke: currentColor;
+  stroke-width: 2;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+}
+
+/* ── Social Header ── */
+.social-header {
+  position: sticky;
+  top: 0;
+  z-index: 90;
+  background: var(--bg);
+  border-bottom: 1px solid var(--border);
+  padding: 0 clamp(12px, 3vw, 32px);
+  height: 56px;
+  display: flex;
+  align-items: center;
+  gap: 16px;
+}
+
+.social-logo {
+  font-weight: 800;
+  font-size: 17px;
+  letter-spacing: -0.5px;
+  color: var(--text);
+  white-space: nowrap;
+  cursor: pointer;
+  text-decoration: none;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+.social-logo:hover { text-decoration: none; }
+.social-logo svg {
+  width: 24px;
+  height: 24px;
+  fill: var(--text);
+}
+.social-logo-img {
+  width: 24px;
+  height: 24px;
+}
+
+.social-header-search {
+  flex: 1;
+  max-width: 400px;
+  position: relative;
+}
+.social-header-search-icon {
+  position: absolute;
+  left: 12px;
+  top: 50%;
+  transform: translateY(-50%);
+  width: 16px;
+  height: 16px;
+  color: var(--text-muted);
+  pointer-events: none;
+}
+.social-header-search-icon svg {
+  width: 100%;
+  height: 100%;
+  fill: none;
+  stroke: currentColor;
+  stroke-width: 2;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+}
+.social-header-search input {
+  width: 100%;
+  padding: 8px 14px 8px 36px;
+  border: 1px solid var(--border);
+  border-radius: 20px;
+  font-size: 14px;
+  background: var(--bg-soft);
+  color: var(--text);
+  font-family: inherit;
+  transition: border-color 0.2s, background 0.2s;
+}
+.social-header-search input:focus {
+  outline: none;
+  border-color: var(--accent);
+  background: var(--bg-card);
+}
+
+.social-header-nav {
+  display: flex;
+  align-items: center;
+  gap: 2px;
+  margin-left: auto;
+}
+.social-header-nav a,
+.social-header-nav button {
+  color: var(--text-muted);
+  font-size: 14px;
+  font-weight: 500;
+  padding: 8px 14px;
+  border-radius: 8px;
+  text-decoration: none;
+  white-space: nowrap;
+  background: none;
+  border: none;
+  cursor: pointer;
+  font-family: inherit;
+  position: relative;
+  transition: color 0.15s, background 0.15s;
+  display: flex;
+  align-items: center;
+  gap: 6px;
+}
+.social-header-nav a:hover,
+.social-header-nav button:hover {
+  color: var(--text);
+  background: var(--accent-soft);
+  text-decoration: none;
+}
+.social-header-nav .nav-active {
+  color: var(--text);
+  font-weight: 700;
+}
+.social-header-nav .nav-icon {
+  font-size: 17px;
+  line-height: 1;
+}
+
+.nav-badge {
+  position: absolute;
+  top: 2px;
+  right: 4px;
+  background: #d32f2f;
+  color: #fff;
+  font-size: 10px;
+  min-width: 16px;
+  height: 16px;
+  border-radius: 8px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 700;
+  line-height: 1;
+}
+
+.social-header-user {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin-left: 8px;
+}
+.social-header-avatar {
+  width: 32px;
+  height: 32px;
+  border-radius: 50%;
+  background: var(--accent-soft);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 700;
+  font-size: 13px;
+  cursor: pointer;
+  border: 2px solid transparent;
+  transition: border-color 0.2s;
+}
+.social-header-avatar:hover { border-color: var(--accent); }
+
+.social-mobile-toggle {
+  display: none;
+  background: none;
+  border: none;
+  color: var(--text);
+  font-size: 20px;
+  cursor: pointer;
+  padding: 4px 8px;
+  border-radius: 6px;
+}
+.social-mobile-toggle:hover { background: var(--accent-soft); }
+
+/* ── 3-Column Layout ── */
+.social-layout {
+  display: grid;
+  grid-template-columns: 260px minmax(0, 1fr) 300px;
+  gap: 0;
+  max-width: 1200px;
+  margin: 0 auto;
+  min-height: calc(100vh - 56px);
+}
+
+.social-sidebar-left {
+  position: sticky;
+  top: 56px;
+  height: calc(100vh - 56px);
+  overflow-y: auto;
+  padding: 16px 12px 16px 16px;
+  border-right: 1px solid var(--border);
+}
+.social-sidebar-right {
+  position: sticky;
+  top: 56px;
+  height: calc(100vh - 56px);
+  overflow-y: auto;
+  padding: 16px 16px 16px 12px;
+  border-left: 1px solid var(--border);
+}
+
+.social-main {
+  padding: 16px 20px;
+  min-width: 0;
+}
+
+/* ── Sidebar Widgets ── */
+.sidebar-widget {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  padding: 16px;
+  margin-bottom: 16px;
+}
+.sidebar-widget h3 {
+  font-size: 15px;
+  font-weight: 700;
+  margin-bottom: 12px;
+}
+
+/* Left sidebar — profile mini */
+.sidebar-profile {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 14px;
+  margin-bottom: 16px;
+  cursor: pointer;
+  border-radius: 12px;
+  transition: background 0.15s;
+}
+.sidebar-profile:hover { background: var(--accent-soft); }
+.sidebar-profile-avatar {
+  width: 44px;
+  height: 44px;
+  border-radius: 50%;
+  background: var(--accent-soft);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 700;
+  font-size: 18px;
+  flex-shrink: 0;
+  overflow: hidden;
+}
+.sidebar-profile-avatar img {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+}
+.sidebar-profile-name { font-weight: 700; font-size: 14px; }
+.sidebar-profile-handle { font-size: 12px; color: var(--text-muted); }
+
+.sidebar-nav-link {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 10px 14px;
+  border-radius: 10px;
+  color: var(--text);
+  font-size: 15px;
+  font-weight: 500;
+  text-decoration: none;
+  transition: background 0.15s;
+  cursor: pointer;
+}
+.sidebar-nav-link:hover {
+  background: var(--accent-soft);
+  text-decoration: none;
+}
+.sidebar-nav-link.active {
+  font-weight: 700;
+  background: var(--accent-soft);
+}
+.sidebar-nav-icon { font-size: 18px; width: 24px; text-align: center; }
+.sidebar-nav-label { flex: 1; }
+.sidebar-nav-badge {
+  background: var(--accent);
+  color: var(--bg);
+  font-size: 11px;
+  font-weight: 700;
+  padding: 1px 7px;
+  border-radius: 10px;
+  min-width: 20px;
+  text-align: center;
+}
+
+.sidebar-cta {
+  display: block;
+  width: 100%;
+  padding: 12px;
+  border: none;
+  border-radius: 10px;
+  background: var(--accent);
+  color: var(--bg);
+  font-size: 15px;
+  font-weight: 700;
+  cursor: pointer;
+  font-family: inherit;
+  transition: opacity 0.15s;
+  text-align: center;
+}
+.sidebar-cta:hover { opacity: 0.85; }
+
+/* Right sidebar — suggestions, trending */
+.sidebar-user-item {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding: 10px 0;
+}
+.sidebar-user-item + .sidebar-user-item {
+  border-top: 1px solid var(--border);
+}
+.sidebar-user-avatar {
+  width: 36px;
+  height: 36px;
+  border-radius: 50%;
+  background: var(--accent-soft);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 700;
+  font-size: 14px;
+  flex-shrink: 0;
+  cursor: pointer;
+}
+.sidebar-user-name {
+  font-weight: 600;
+  font-size: 13px;
+  cursor: pointer;
+}
+.sidebar-user-name:hover { text-decoration: underline; }
+.sidebar-user-bio {
+  font-size: 12px;
+  color: var(--text-muted);
+  line-height: 1.3;
+  margin-top: 1px;
+}
+.sidebar-follow-btn {
+  margin-left: auto;
+  padding: 5px 14px;
+  border-radius: 20px;
+  border: 1px solid var(--text);
+  background: transparent;
+  color: var(--text);
+  font-size: 12px;
+  font-weight: 700;
+  cursor: pointer;
+  font-family: inherit;
+  white-space: nowrap;
+  transition: background 0.15s, color 0.15s;
+}
+.sidebar-follow-btn:hover {
+  background: var(--text);
+  color: var(--bg);
+}
+.sidebar-follow-btn.following {
+  border-color: var(--border);
+  color: var(--text-muted);
+}
+.sidebar-follow-btn.following:hover {
+  border-color: #d32f2f;
+  color: #d32f2f;
+  background: transparent;
+}
+
+.sidebar-footer {
+  font-size: 11px;
+  color: var(--text-muted);
+  line-height: 1.6;
+  padding: 12px 0;
+}
+.sidebar-footer a {
+  color: var(--text-muted);
+  margin-right: 8px;
+}
+.sidebar-footer a:hover { color: var(--text); text-decoration: underline; }
+
+/* ── Feed / Compose ── */
+.compose-box {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  padding: 16px;
+  margin-bottom: 16px;
+}
+.compose-row {
+  display: flex;
+  gap: 12px;
+  align-items: flex-start;
+}
+.compose-avatar {
+  width: 40px;
+  height: 40px;
+  border-radius: 50%;
+  background: var(--accent-soft);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 700;
+  font-size: 16px;
+  flex-shrink: 0;
+  overflow: hidden;
+}
+.compose-avatar img {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+}
+.compose-input-wrap { flex: 1; min-width: 0; }
+.compose-input-wrap textarea {
+  width: 100%;
+  border: none;
+  background: none;
+  color: var(--text);
+  font-size: 16px;
+  font-family: inherit;
+  resize: none;
+  min-height: 56px;
+  line-height: 1.5;
+  padding: 8px 0;
+}
+.compose-input-wrap textarea:focus { outline: none; }
+.compose-input-wrap textarea::placeholder { color: var(--text-muted); }
+
+.compose-footer {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  margin-top: 12px;
+  padding-top: 12px;
+  border-top: 1px solid var(--border);
+}
+.compose-meta {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+}
+.compose-counter {
+  font-size: 13px;
+  color: var(--text-muted);
+}
+.compose-counter.warn { color: #f57c00; }
+.compose-counter.over { color: #d32f2f; font-weight: 700; }
+.compose-vis-select {
+  padding: 5px 10px;
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  font-size: 12px;
+  background: var(--bg-card);
+  color: var(--text);
+  font-family: inherit;
+  cursor: pointer;
+}
+.compose-actions {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+/* ── Post Cards ── */
+.post-card {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  padding: 16px;
+  margin-bottom: 12px;
+  transition: border-color 0.15s;
+}
+.post-card:hover { border-color: rgba(255,255,255,0.15); }
+
+.post-top {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  margin-bottom: 10px;
+}
+.post-avatar {
+  width: 40px;
+  height: 40px;
+  border-radius: 50%;
+  background: var(--accent-soft);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 700;
+  font-size: 16px;
+  flex-shrink: 0;
+  cursor: pointer;
+  overflow: hidden;
+}
+.post-avatar-img img {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+  border-radius: 50%;
+}
+.avatar-upload-area {
+  display: flex;
+  align-items: center;
+  gap: 20px;
+}
+.avatar-upload-actions {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+.avatar-upload-label {
+  cursor: pointer;
+  display: inline-block;
+}
+.avatar-upload-input {
+  display: none;
+}
+.text-error { color: var(--danger); }
+.text-success { color: #2e7d32; }
+.post-user-info { flex: 1; min-width: 0; }
+.post-username {
+  font-weight: 700;
+  font-size: 14px;
+  cursor: pointer;
+}
+.post-username:hover { text-decoration: underline; }
+.post-handle {
+  font-size: 12px;
+  color: var(--text-muted);
+  margin-left: 6px;
+  font-weight: 400;
+}
+.post-timestamp {
+  font-size: 12px;
+  color: var(--text-muted);
+  display: block;
+  margin-top: 2px;
+}
+.post-dot {
+  font-size: 12px;
+  color: var(--text-muted);
+}
+.post-vis-badge {
+  font-size: 11px;
+  padding: 2px 8px;
+  border-radius: 10px;
+  background: var(--accent-soft);
+  color: var(--text-muted);
+}
+
+.post-content {
+  font-size: 15px;
+  line-height: 1.55;
+  white-space: pre-wrap;
+  word-break: break-word;
+  margin-bottom: 12px;
+}
+
+.post-image {
+  width: 100%;
+  border-radius: 10px;
+  max-height: 450px;
+  object-fit: cover;
+  margin-bottom: 12px;
+}
+
+.post-verified-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  font-size: 11px;
+  color: #2e7d32;
+  background: rgba(46, 125, 50, 0.1);
+  padding: 2px 8px;
+  border-radius: 10px;
+  font-weight: 600;
+}
+.post-pending-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  font-size: 11px;
+  color: #f57c00;
+  background: rgba(245, 124, 0, 0.1);
+  padding: 2px 8px;
+  border-radius: 10px;
+  font-weight: 600;
+}
+
+/* ── Verified badges ── */
+.verified-badge {
+  display: inline-flex;
+  align-items: center;
+  vertical-align: middle;
+  margin-left: 4px;
+  text-decoration: none;
+  color: inherit;
+  cursor: default;
+}
+.verified-badge .social-icon {
+  width: 18px;
+  height: 18px;
+}
+.profile-name .verified-badge .social-icon {
+  width: 22px;
+  height: 22px;
+}
+.verified-verifier {
+  display: inline-flex;
+  align-items: center;
+  margin-left: 4px;
+  text-decoration: none;
+  color: inherit;
+  cursor: pointer;
+}
+.verified-verifier:hover {
+  opacity: 0.8;
+}
+.verified-verifier-avatar {
+  width: 18px;
+  height: 18px;
+  border-radius: 50%;
+  object-fit: cover;
+}
+.verified-verifier-letter {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 18px;
+  height: 18px;
+  border-radius: 50%;
+  background: #666;
+  color: #fff;
+  font-size: 10px;
+  font-weight: 600;
+}
+.profile-name .verified-verifier-avatar {
+  width: 22px;
+  height: 22px;
+}
+.profile-name .verified-verifier-letter {
+  width: 22px;
+  height: 22px;
+  font-size: 12px;
+}
+
+/* ── Verification requests ── */
+.verify-requests-section {
+  margin-bottom: 20px;
+}
+.verify-request-item {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 12px 16px;
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  margin-bottom: 8px;
+}
+.verify-request-info {
+  flex: 1;
+  font-size: 14px;
+  line-height: 1.4;
+}
+.verify-request-actions {
+  display: flex;
+  gap: 6px;
+  flex-shrink: 0;
+}
+.btn-gold {
+  background: #f5a623;
+  color: #000;
+  border-color: #f5a623;
+}
+.btn-gold:hover {
+  background: #e6951a;
+}
+
+/* ── Post Actions ── */
+.post-actions {
+  display: flex;
+  align-items: center;
+  gap: 4px;
+  padding-top: 4px;
+}
+.post-action {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 6px 12px;
+  border: none;
+  background: none;
+  color: var(--text-muted);
+  font-size: 13px;
+  font-family: inherit;
+  cursor: pointer;
+  border-radius: 8px;
+  transition: background 0.15s, color 0.15s;
+  white-space: nowrap;
+}
+.post-action:hover { background: var(--accent-soft); color: var(--text); }
+.post-action.liked { color: #d32f2f; }
+.post-action.liked:hover { background: rgba(211, 47, 47, 0.1); }
+.post-action.disliked { color: #666; }
+.post-action.disliked:hover { background: rgba(102, 102, 102, 0.1); }
+.post-action-icon { font-size: 16px; line-height: 1; }
+.post-action-count { font-size: 13px; }
+
+/* ── Comments (inline) ── */
+.post-comments-section {
+  display: none;
+  margin-top: 12px;
+  padding-top: 12px;
+  border-top: 1px solid var(--border);
+}
+.post-comments-section.open { display: block; }
+
+.comment-item {
+  display: flex;
+  gap: 8px;
+  padding: 8px 0;
+}
+.comment-item + .comment-item { border-top: 1px solid var(--border); }
+.comment-avatar {
+  width: 28px;
+  height: 28px;
+  border-radius: 50%;
+  background: var(--accent-soft);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 700;
+  font-size: 11px;
+  flex-shrink: 0;
+}
+.comment-body { flex: 1; min-width: 0; }
+.comment-header {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  margin-bottom: 2px;
+}
+.comment-author { font-weight: 600; font-size: 13px; }
+.comment-time { font-size: 11px; color: var(--text-muted); }
+.comment-text { font-size: 13px; line-height: 1.4; }
+.comment-delete-btn {
+  margin-left: auto;
+  font-size: 11px;
+  color: var(--text-muted);
+  background: none;
+  border: none;
+  cursor: pointer;
+  padding: 2px 4px;
+}
+.comment-delete-btn:hover { color: #d32f2f; }
+
+.comment-compose {
+  display: flex;
+  gap: 8px;
+  margin-top: 8px;
+}
+.comment-compose input {
+  flex: 1;
+  padding: 8px 12px;
+  border: 1px solid var(--border);
+  border-radius: 20px;
+  font-size: 13px;
+  background: var(--bg-soft);
+  color: var(--text);
+  font-family: inherit;
+}
+.comment-compose input:focus { outline: none; border-color: var(--accent); }
+
+/* ── Community Notes ── */
+.post-notes-section { margin-top: 8px; }
+.note-item {
+  padding: 8px 12px;
+  background: var(--bg-soft);
+  border-radius: 8px;
+  margin-top: 6px;
+  font-size: 13px;
+}
+.note-author { font-weight: 600; font-size: 12px; margin-bottom: 2px; }
+.note-text { color: var(--text-muted); }
+.note-empty { font-size: 12px; color: var(--text-muted); padding: 4px 0; }
+
+/* ── Empty State ── */
+.empty-state {
+  text-align: center;
+  padding: 60px 24px;
+}
+.empty-state-icon {
+  font-size: 56px;
+  margin-bottom: 16px;
+  opacity: 0.8;
+}
+.empty-state h3 {
+  font-size: 20px;
+  font-weight: 700;
+  margin-bottom: 8px;
+}
+.empty-state p {
+  color: var(--text-muted);
+  font-size: 14px;
+  line-height: 1.5;
+  max-width: 360px;
+  margin: 0 auto;
+}
+.empty-state .social-btn {
+  margin-top: 20px;
+}
+
+/* ── Auth Cards ── */
+.auth-card {
+  max-width: 420px;
+  margin: 40px auto;
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 16px;
+  padding: 32px 28px;
+}
+.auth-card h2 {
+  font-size: 22px;
+  font-weight: 800;
+  text-align: center;
+  margin-bottom: 20px;
+}
+.auth-card .form-group {
+  margin-bottom: 16px;
+}
+.auth-card .form-group label {
+  display: block;
+  margin-bottom: 6px;
+  font-size: 13px;
+  font-weight: 600;
+}
+.auth-card .form-group input,
+.auth-card .form-group select,
+.auth-card .form-group textarea {
+  width: 100%;
+  padding: 10px 14px;
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  font-size: 14px;
+  background: var(--bg-soft);
+  color: var(--text);
+  font-family: inherit;
+  box-sizing: border-box;
+  transition: border-color 0.2s;
+}
+.auth-card .form-group input:focus,
+.auth-card .form-group textarea:focus,
+.auth-card .form-group select:focus {
+  outline: none;
+  border-color: var(--accent);
+}
+.auth-card .form-group textarea {
+  resize: vertical;
+  min-height: 80px;
+}
+.auth-card .form-hint {
+  font-size: 11px;
+  color: var(--text-muted);
+  margin-top: 4px;
+}
+.auth-card .auth-footer {
+  text-align: center;
+  margin-top: 16px;
+  font-size: 13px;
+  color: var(--text-muted);
+}
+.auth-card .auth-footer a {
+  color: var(--text);
+  font-weight: 600;
+}
+
+/* ── Buttons ── */
+.btn-primary {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 100%;
+  padding: 11px 20px;
+  border: none;
+  border-radius: 10px;
+  background: var(--accent);
+  color: var(--bg);
+  font-size: 15px;
+  font-weight: 700;
+  cursor: pointer;
+  font-family: inherit;
+  transition: opacity 0.15s;
+}
+.btn-primary:hover { opacity: 0.85; }
+.btn-primary:disabled { opacity: 0.5; cursor: not-allowed; }
+.btn-primary-sm {
+  padding: 7px 16px;
+  font-size: 13px;
+  border-radius: 8px;
+  width: auto;
+}
+.btn-outline {
+  background: transparent;
+  color: var(--text);
+  border: 1px solid var(--border);
+}
+.btn-outline:hover {
+  border-color: var(--text-muted);
+  opacity: 1;
+}
+.btn-danger {
+  background: #d32f2f;
+  color: #fff;
+  border-color: #d32f2f;
+}
+.btn-ghost {
+  background: transparent;
+  color: var(--text-muted);
+  border: none;
+  padding: 6px 10px;
+  font-size: 13px;
+}
+.btn-ghost:hover { color: var(--text); }
+
+/* ── Forms (general) ── */
+.form-error {
+  color: #d32f2f;
+  font-size: 13px;
+  margin-top: 6px;
+  padding: 8px 12px;
+  background: rgba(211, 47, 47, 0.08);
+  border-radius: 8px;
+}
+.form-success {
+  color: #2e7d32;
+  font-size: 13px;
+  margin-top: 6px;
+  padding: 8px 12px;
+  background: rgba(46, 125, 50, 0.08);
+  border-radius: 8px;
+}
+
+/* ── Password Strength ── */
+.strength-bar {
+  height: 4px;
+  background: var(--border);
+  border-radius: 2px;
+  margin-top: 8px;
+  overflow: hidden;
+}
+.strength-fill {
+  height: 100%;
+  border-radius: 2px;
+  transition: width 0.3s, background 0.3s;
+}
+.strength-label {
+  font-size: 12px;
+  margin-top: 4px;
+  color: var(--text-muted);
+}
+
+/* ── Privacy Choice ── */
+.privacy-grid {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+.privacy-card {
+  border: 2px solid var(--border);
+  border-radius: 12px;
+  padding: 20px;
+  cursor: pointer;
+  transition: border-color 0.2s, background 0.2s;
+  position: relative;
+}
+.privacy-card:hover { border-color: var(--text-muted); }
+.privacy-card.selected {
+  border-color: var(--accent);
+  background: var(--accent-soft);
+}
+.privacy-card-icon { font-size: 28px; margin-bottom: 8px; }
+.privacy-card h3 { font-size: 16px; margin-bottom: 4px; }
+.privacy-card p { font-size: 13px; color: var(--text-muted); margin-bottom: 0; }
+.privacy-card ul {
+  margin-top: 10px;
+  padding-left: 18px;
+  font-size: 12px;
+  color: var(--text-muted);
+}
+.privacy-card ul li { margin-top: 4px; }
+.privacy-card-check {
+  position: absolute;
+  top: 16px;
+  right: 16px;
+  width: 22px;
+  height: 22px;
+  border: 2px solid var(--border);
+  border-radius: 50%;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: border-color 0.2s, background 0.2s;
+}
+.privacy-card.selected .privacy-card-check {
+  border-color: var(--accent);
+  background: var(--accent);
+  color: var(--bg);
+}
+
+/* ── Profile ── */
+.profile-card {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  overflow: hidden;
+}
+.profile-banner {
+  height: 140px;
+  background: linear-gradient(135deg, var(--accent-soft) 0%, var(--bg-soft) 100%);
+  position: relative;
+}
+.profile-main {
+  padding: 0 20px 20px;
+  position: relative;
+}
+.profile-avatar-lg {
+  width: 80px;
+  height: 80px;
+  border-radius: 50%;
+  background: var(--accent-soft);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 800;
+  font-size: 32px;
+  border: 4px solid var(--bg-card);
+  margin-top: -40px;
+  position: relative;
+  overflow: hidden;
+}
+.profile-avatar-lg img {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+}
+.profile-name {
+  font-size: 20px;
+  font-weight: 800;
+  margin-top: 10px;
+}
+.profile-handle {
+  font-size: 14px;
+  color: var(--text-muted);
+  margin-top: 2px;
+}
+.profile-role-tag {
+  display: inline-block;
+  font-size: 11px;
+  font-weight: 600;
+  padding: 2px 10px;
+  border-radius: 10px;
+  background: var(--accent-soft);
+  color: var(--text-muted);
+  margin-top: 4px;
+}
+.profile-bio {
+  font-size: 14px;
+  color: var(--text);
+  margin-top: 12px;
+  line-height: 1.5;
+}
+.profile-stats-row {
+  display: flex;
+  gap: 24px;
+  margin-top: 16px;
+  padding-top: 16px;
+  border-top: 1px solid var(--border);
+}
+.profile-stat { text-align: left; }
+.profile-stat-value {
+  font-weight: 700;
+  font-size: 16px;
+}
+.profile-stat-label {
+  font-size: 12px;
+  color: var(--text-muted);
+  margin-left: 4px;
+}
+.profile-actions-row {
+  display: flex;
+  gap: 8px;
+  margin-top: 16px;
+}
+.profile-badges-grid {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+  margin-top: 12px;
+}
+.profile-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 4px 12px;
+  border: 1px solid var(--border);
+  border-radius: 20px;
+  font-size: 12px;
+  font-weight: 500;
+}
+
+/* ── Settings ── */
+.settings-card {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  padding: 20px;
+  margin-bottom: 12px;
+}
+.settings-card h3 {
+  font-size: 16px;
+  font-weight: 700;
+  margin-bottom: 14px;
+}
+.settings-row {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  padding: 12px 0;
+  border-bottom: 1px solid var(--border);
+  gap: 16px;
+}
+.settings-row:last-child { border-bottom: none; }
+.settings-label { font-size: 14px; font-weight: 500; }
+.settings-desc { font-size: 12px; color: var(--text-muted); margin-top: 2px; }
+.settings-input {
+  padding: 8px 12px;
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  font-size: 14px;
+  background: var(--bg-soft);
+  color: var(--text);
+  font-family: inherit;
+  min-width: 200px;
+}
+.settings-input:focus { outline: none; border-color: var(--accent); }
+.settings-textarea {
+  width: 100%;
+  padding: 8px 12px;
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  font-size: 14px;
+  background: var(--bg-soft);
+  color: var(--text);
+  font-family: inherit;
+  resize: vertical;
+  min-height: 60px;
+}
+.settings-textarea:focus { outline: none; border-color: var(--accent); }
+
+/* ── Messages ── */
+.msg-list-item {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 14px 16px;
+  border-bottom: 1px solid var(--border);
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.msg-list-item:hover { background: var(--accent-soft); }
+.msg-list-avatar {
+  width: 44px;
+  height: 44px;
+  border-radius: 50%;
+  background: var(--accent-soft);
+  color: var(--accent);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 700;
+  font-size: 17px;
+  flex-shrink: 0;
+}
+.msg-list-info { flex: 1; min-width: 0; }
+.msg-list-name { font-weight: 600; font-size: 14px; }
+.msg-list-preview {
+  font-size: 13px;
+  color: var(--text-muted);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+.msg-list-meta { text-align: right; flex-shrink: 0; }
+.msg-list-time { font-size: 11px; color: var(--text-muted); }
+.msg-list-unread {
+  background: var(--accent);
+  color: var(--bg);
+  font-size: 10px;
+  font-weight: 700;
+  min-width: 18px;
+  height: 18px;
+  border-radius: 9px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  margin-top: 4px;
+  margin-left: auto;
+}
+
+.chat-window {
+  display: flex;
+  flex-direction: column;
+  height: calc(100vh - 56px - 40px);
+}
+.chat-messages {
+  flex: 1;
+  overflow-y: auto;
+  padding: 16px 0;
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+.chat-bubble {
+  max-width: 75%;
+  padding: 10px 14px;
+  border-radius: 18px;
+  font-size: 14px;
+  line-height: 1.45;
+  word-break: break-word;
+}
+.chat-sent {
+  align-self: flex-end;
+  background: var(--accent);
+  color: var(--bg);
+  border-bottom-right-radius: 4px;
+}
+.chat-received {
+  align-self: flex-start;
+  background: var(--bg-soft);
+  border: 1px solid var(--border);
+  border-bottom-left-radius: 4px;
+}
+.chat-time {
+  font-size: 10px;
+  opacity: 0.6;
+  margin-top: 3px;
+  text-align: right;
+}
+.chat-input-bar {
+  display: flex;
+  gap: 8px;
+  padding: 12px 0;
+  border-top: 1px solid var(--border);
+}
+.chat-input-bar input {
+  flex: 1;
+  padding: 10px 16px;
+  border: 1px solid var(--border);
+  border-radius: 24px;
+  font-size: 14px;
+  background: var(--bg-soft);
+  color: var(--text);
+  font-family: inherit;
+}
+.chat-input-bar input:focus { outline: none; border-color: var(--accent); }
+
+/* ── Notifications ── */
+.notif-item {
+  display: flex;
+  align-items: flex-start;
+  gap: 12px;
+  padding: 14px 16px;
+  border-bottom: 1px solid var(--border);
+  transition: background 0.15s;
+  cursor: pointer;
+}
+.notif-item:hover { background: var(--accent-soft); }
+.notif-item.unread {
+  background: rgba(255,255,255,0.03);
+  border-left: 3px solid var(--accent);
+  padding-left: 13px;
+}
+.notif-icon { font-size: 20px; flex-shrink: 0; margin-top: 2px; }
+.notif-body { flex: 1; min-width: 0; }
+.notif-text { font-size: 14px; line-height: 1.4; }
+.notif-text strong { font-weight: 700; }
+.notif-time { font-size: 12px; color: var(--text-muted); margin-top: 3px; }
+.notif-actions {
+  display: flex;
+  gap: 8px;
+  flex-shrink: 0;
+  margin-top: 6px;
+}
+.notif-actions button { cursor: pointer; }
+
+/* ── Moderation ── */
+.mod-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  margin-bottom: 16px;
+}
+.mod-tabs {
+  display: flex;
+  gap: 4px;
+  border-bottom: 1px solid var(--border);
+  margin-bottom: 16px;
+}
+.mod-tab {
+  padding: 10px 18px;
+  border: none;
+  background: none;
+  font-size: 14px;
+  font-weight: 500;
+  color: var(--text-muted);
+  cursor: pointer;
+  border-bottom: 2px solid transparent;
+  font-family: inherit;
+  transition: color 0.15s;
+}
+.mod-tab:hover { color: var(--text); }
+.mod-tab.active {
+  color: var(--text);
+  font-weight: 700;
+  border-bottom-color: var(--accent);
+}
+.mod-card {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 14px;
+  margin-bottom: 10px;
+}
+.mod-card-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  margin-bottom: 8px;
+}
+.mod-card-author { font-weight: 700; font-size: 14px; }
+.mod-card-time { font-size: 12px; color: var(--text-muted); }
+.mod-card-body {
+  font-size: 14px;
+  line-height: 1.45;
+  white-space: pre-wrap;
+  margin-bottom: 10px;
+}
+.mod-card-meta {
+  font-size: 12px;
+  color: var(--text-muted);
+  margin-bottom: 8px;
+}
+.mod-card-actions {
+  display: flex;
+  gap: 8px;
+}
+
+/* ── Tabs ── */
+.tabs {
+  display: flex;
+  gap: 0;
+  border-bottom: 1px solid var(--border);
+  margin-bottom: 16px;
+}
+.tab-btn {
+  padding: 10px 18px;
+  border: none;
+  background: none;
+  font-size: 14px;
+  color: var(--text-muted);
+  cursor: pointer;
+  border-bottom: 2px solid transparent;
+  font-family: inherit;
+  transition: color 0.15s;
+}
+.tab-btn:hover { color: var(--text); }
+.tab-btn.active {
+  color: var(--text);
+  font-weight: 700;
+  border-bottom-color: var(--accent);
+}
+
+/* ── Spinner ── */
+.social-spinner {
+  display: flex;
+  justify-content: center;
+  gap: 6px;
+  padding: 40px 0;
+}
+.spinner-dot {
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  background: var(--text-muted);
+  animation: dotPulse 1.2s ease-in-out infinite;
+}
+.spinner-dot:nth-child(2) { animation-delay: 0.15s; }
+.spinner-dot:nth-child(3) { animation-delay: 0.3s; }
+@keyframes dotPulse {
+  0%, 80%, 100% { opacity: 0.3; transform: scale(0.8); }
+  40% { opacity: 1; transform: scale(1); }
+}
+
+/* ── Warning / Info boxes ── */
+.warning-box {
+  background: rgba(245, 124, 0, 0.12);
+  border: 1px solid rgba(245, 124, 0, 0.3);
+  color: var(--text);
+  padding: 14px 16px;
+  border-radius: 10px;
+  margin: 14px 0;
+  font-size: 13px;
+  line-height: 1.5;
+}
+.warning-box strong { display: block; margin-bottom: 4px; }
+.info-box {
+  border: 1px solid var(--border);
+  padding: 12px 16px;
+  border-radius: 10px;
+  margin: 14px 0;
+  font-size: 13px;
+  color: var(--text-muted);
+  line-height: 1.5;
+}
+
+/* ── Checkbox / Terms ── */
+.tos-check {
+  display: flex;
+  align-items: flex-start;
+  gap: 10px;
+  margin: 16px 0;
+  cursor: pointer;
+}
+.tos-check input[type="checkbox"] {
+  margin-top: 3px;
+  width: 16px;
+  height: 16px;
+  accent-color: var(--accent);
+  flex-shrink: 0;
+}
+.tos-check span {
+  font-size: 13px;
+  line-height: 1.4;
+}
+.tos-check a { font-weight: 600; }
+
+/* ── Search results ── */
+.search-result-item {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 12px 16px;
+  border-bottom: 1px solid var(--border);
+  cursor: pointer;
+  transition: background 0.15s;
+}
+.search-result-item:hover { background: var(--accent-soft); }
+
+/* ── Connection items ── */
+.conn-item {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  padding: 12px 16px;
+  border-bottom: 1px solid var(--border);
+}
+.conn-item:last-child { border-bottom: none; }
+.conn-info { flex: 1; min-width: 0; }
+.conn-name { font-weight: 600; font-size: 14px; }
+.conn-actions { display: flex; gap: 6px; }
+
+/* ── Emoji picker ── */
+.compose-input-wrap { position: relative; }
+.emoji-picker {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 4px;
+  padding: 8px;
+  background: var(--bg2);
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  margin-top: 6px;
+}
+.emoji-pick {
+  font-size: 20px;
+  cursor: pointer;
+  padding: 4px;
+  border-radius: 4px;
+  transition: background 0.15s;
+}
+.emoji-pick:hover { background: var(--border); }
+.compose-emoji-btn {
+  background: none;
+  border: none;
+  cursor: pointer;
+  color: var(--text-secondary);
+  padding: 4px;
+  border-radius: 4px;
+  display: flex;
+  align-items: center;
+  transition: color 0.15s;
+}
+.compose-emoji-btn:hover { color: var(--accent); }
+
+/* ── Utility classes (CSP-safe, no inline styles) ── */
+.mt-4 { margin-top: 4px; }
+.mt-8 { margin-top: 8px; }
+.mt-12 { margin-top: 12px; }
+.mt-16 { margin-top: 16px; }
+.mt-20 { margin-top: 20px; }
+.mt-24 { margin-top: 24px; }
+.mb-4 { margin-bottom: 4px; }
+.mb-8 { margin-bottom: 8px; }
+.mb-12 { margin-bottom: 12px; }
+.mb-16 { margin-bottom: 16px; }
+.mv-12 { margin: 12px 0; }
+.mv-16 { margin: 16px 0; }
+.pt-12 { padding-top: 12px; }
+.p-16 { padding: 16px; }
+.p-24 { padding: 24px; }
+.p-30 { padding: 30px; }
+.p-40 { padding: 40px; }
+.pv-12 { padding-top: 12px; padding-bottom: 12px; }
+.ph-16 { padding-left: 16px; padding-right: 16px; }
+.text-center { text-align: center; }
+.text-left { text-align: left; }
+.text-sm { font-size: 13px; }
+.text-xs { font-size: 12px; }
+.text-base { font-size: 14px; }
+.text-muted { color: var(--text-muted); }
+.text-warning { color: #f57c00; }
+.font-600 { font-weight: 600; }
+.hidden { display: none; }
+.mw-200 { max-width: 200px; }
+.mw-520 { max-width: 520px; }
+.w-full { width: 100%; min-width: 0; }
+.lh-15 { line-height: 1.5; }
+.lh-13 { line-height: 1.3; }
+
+/* ── Textarea auto-resize ── */
+.auto-resize {
+  field-sizing: content;
+  min-height: 56px;
+  max-height: 200px;
+  resize: none;
+}
+
+/* ── Chat window ── */
+.chat-header-row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding-bottom: 12px;
+  border-bottom: 1px solid var(--border);
+}
+.chat-header-name {
+  margin: 0;
+  font-size: 17px;
+}
+
+.notif-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  margin-bottom: 16px;
+}
+
+/* ── Responsive ── */
+@media (max-width: 1024px) {
+  .social-layout {
+    grid-template-columns: 1fr;
+  }
+  .social-sidebar-left,
+  .social-sidebar-right {
+    display: none;
+  }
+  .social-main {
+    padding: 12px;
+  }
+}
+
+@media (max-width: 768px) {
+  .social-header {
+    padding: 0 12px;
+    gap: 8px;
+  }
+  .social-header-search { display: none; }
+  .social-mobile-toggle { display: block; }
+  .social-header-nav {
+    display: none;
+    position: absolute;
+    top: 100%;
+    left: 0;
+    right: 0;
+    background: var(--bg);
+    border-bottom: 1px solid var(--border);
+    padding: 8px;
+    flex-direction: column;
+    z-index: 100;
+    box-shadow: 0 8px 24px rgba(0,0,0,0.3);
+  }
+  .social-header-nav.open { display: flex; }
+  .social-header-nav a,
+  .social-header-nav button {
+    width: 100%;
+    text-align: left;
+    padding: 12px 16px;
+    border-radius: 8px;
+  }
+  .post-card { padding: 14px; }
+  .compose-box { padding: 14px; }
+  .chat-bubble { max-width: 85%; }
+}
+
+@media (max-width: 480px) {
+  .social-main { padding: 8px; }
+  .post-actions { flex-wrap: wrap; }
+  .post-action { padding: 6px 8px; font-size: 12px; }
+  .auth-card { margin: 16px; padding: 24px 20px; }
+  .profile-banner { height: 100px; }
+  .profile-avatar-lg { width: 64px; height: 64px; font-size: 26px; }
+}
diff --git a/public/css/style.css b/public/css/style.css
new file mode 100644
index 0000000..89725e4
--- /dev/null
+++ b/public/css/style.css
@@ -0,0 +1,998 @@
+:root {
+  --bg: #ffffff;
+  --bg-soft: #f5f5f5;
+  --bg-card: #ffffff;
+  --border: rgba(0, 0, 0, 0.1);
+  --text: #000000;
+  --text-muted: #555555;
+  --accent: #000000;
+  --accent-strong: #000000;
+  --accent-soft: rgba(0, 0, 0, 0.06);
+  --radius: 16px;
+  --font: "Segoe UI", system-ui, -apple-system, "Helvetica Neue", sans-serif;
+  --font-mono: ui-monospace, "Cascadia Code", "JetBrains Mono", Consolas, monospace;
+}
+
+[data-theme="dark"] {
+  --bg: #000000;
+  --bg-soft: #0a0a0a;
+  --bg-card: #111111;
+  --border: rgba(255, 255, 255, 0.1);
+  --text: #ffffff;
+  --text-muted: #999999;
+  --accent: #ffffff;
+  --accent-strong: #ffffff;
+  --accent-soft: rgba(255, 255, 255, 0.06);
+}
+
+* {
+  box-sizing: border-box;
+  margin: 0;
+  padding: 0;
+}
+
+html {
+  scroll-behavior: smooth;
+  overflow-x: clip;
+}
+
+body {
+  font-family: var(--font);
+  background: var(--bg);
+  color: var(--text);
+  line-height: 1.7;
+  min-height: 100vh;
+  display: flex;
+  flex-direction: column;
+  overflow-x: clip;
+}
+
+.skip-link {
+  position: absolute;
+  left: -9999px;
+  top: 1rem;
+  z-index: 100;
+  padding: 0.75rem 1.25rem;
+  background: var(--bg-card);
+  color: var(--text);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  font-weight: 600;
+}
+
+.skip-link:focus {
+  left: 1rem;
+}
+
+:focus-visible {
+  outline: 2px solid var(--accent-strong);
+  outline-offset: 2px;
+  border-radius: 2px;
+}
+
+a {
+  color: var(--accent);
+  text-decoration: none;
+}
+
+a:hover {
+  text-decoration: underline;
+}
+
+.site-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 1.1rem clamp(1.25rem, 5vw, 4rem);
+  background: var(--bg);
+  border-bottom: 1px solid var(--border);
+  position: sticky;
+  top: 0;
+  z-index: 10;
+}
+
+.brand {
+  display: flex;
+  align-items: center;
+  gap: 0.65rem;
+  color: var(--text);
+}
+
+.brand:hover {
+  text-decoration: none;
+}
+
+.brand-mark {
+  display: grid;
+  place-items: center;
+  width: 2.5rem;
+  height: 1.25rem;
+  color: var(--text);
+}
+
+.brand-mark svg {
+  width: 100%;
+  height: 100%;
+}
+
+.brand-name {
+  font-weight: 700;
+  letter-spacing: 0.02em;
+}
+
+.site-nav {
+  display: flex;
+  align-items: center;
+  gap: 1.5rem;
+}
+
+.site-nav > a {
+  color: var(--text-muted);
+  font-size: 0.95rem;
+}
+
+.site-nav > a:hover {
+  color: var(--text);
+  text-decoration: none;
+}
+
+.nav-toggle-input,
+.nav-burger {
+  display: none;
+}
+
+.lang-switch {
+  display: flex;
+  align-items: center;
+  gap: 0.15rem;
+  background: var(--bg-soft);
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  padding: 0.15rem;
+}
+
+.site-nav .lang-btn {
+  display: inline-block;
+  background: transparent;
+  border: none;
+  color: var(--text-muted);
+  font-family: inherit;
+  font-size: 0.8rem;
+  font-weight: 600;
+  padding: 0.25rem 0.55rem;
+  border-radius: 6px;
+  cursor: pointer;
+  text-decoration: none;
+  transition: 0.15s ease;
+}
+
+.site-nav .lang-btn:hover {
+  color: var(--text);
+}
+
+.site-nav .lang-btn.active {
+  background: var(--accent);
+  color: var(--bg);
+}
+
+.theme-btn {
+  appearance: none;
+  background: transparent;
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  color: var(--text-muted);
+  cursor: pointer;
+  padding: 0.35rem;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  transition: 0.15s ease;
+  width: 32px;
+  height: 32px;
+}
+
+.theme-btn:hover {
+  color: var(--text);
+  border-color: var(--text-muted);
+}
+
+.theme-btn svg {
+  width: 18px;
+  height: 18px;
+}
+
+.theme-btn .icon-sun { display: none; }
+.theme-btn .icon-moon { display: block; }
+
+[data-theme="dark"] .theme-btn .icon-sun { display: block; }
+[data-theme="dark"] .theme-btn .icon-moon { display: none; }
+
+.site-main {
+  flex: 1;
+  width: 100%;
+  max-width: 1000px;
+  margin: 0 auto;
+  padding: 0 clamp(1.25rem, 5vw, 2.5rem);
+}
+
+.hero {
+  position: relative;
+  padding: clamp(5rem, 12vh, 8rem) 0 4rem;
+  text-align: center;
+}
+
+.hero::before {
+  content: "";
+  position: absolute;
+  inset: 0;
+  background-image: linear-gradient(var(--border) 1px, transparent 1px),
+    linear-gradient(90deg, var(--border) 1px, transparent 1px);
+  background-size: 44px 44px;
+  mask-image: radial-gradient(ellipse 70% 60% at 50% 30%, black 30%, transparent 75%);
+  pointer-events: none;
+}
+
+.hero > * {
+  position: relative;
+}
+
+.hero-badge {
+  display: inline-block;
+  font-size: 0.8rem;
+  font-weight: 600;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+  color: var(--text);
+  background: var(--accent-soft);
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  padding: 0.35rem 1rem;
+  margin-bottom: 1.75rem;
+}
+
+.hero h1 {
+  font-size: clamp(2rem, 5.5vw, 3.6rem);
+  line-height: 1.15;
+  font-weight: 800;
+  margin-bottom: 1.5rem;
+  letter-spacing: -0.01em;
+}
+
+.hero-sub {
+  color: var(--text-muted);
+  font-size: clamp(1rem, 2vw, 1.2rem);
+  max-width: 62ch;
+  margin: 0 auto 2.5rem;
+}
+
+.hero-actions {
+  display: flex;
+  justify-content: center;
+  gap: 1rem;
+  flex-wrap: wrap;
+}
+
+.btn {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.7rem 1.6rem;
+  border-radius: 10px;
+  font-weight: 600;
+  font-size: 0.95rem;
+  border: 1px solid transparent;
+  transition: 0.15s ease;
+}
+
+.btn img {
+  display: block;
+}
+
+.btn:hover {
+  text-decoration: none;
+  transform: translateY(-1px);
+}
+
+.btn-primary {
+  background: var(--accent);
+  color: var(--bg);
+}
+
+.btn-primary:hover {
+  background: var(--accent-strong);
+}
+
+.btn-ghost {
+  border-color: var(--border);
+  color: var(--text);
+}
+
+.btn-ghost:hover {
+  border-color: var(--text);
+  color: var(--text);
+}
+
+.manifesto,
+.values,
+.projects,
+.contact {
+  padding: 4rem 0;
+  border-top: 1px solid var(--border);
+}
+
+.manifesto h2,
+.values h2,
+.projects h2,
+.contact h2,
+.faq h2 {
+  font-size: clamp(1.4rem, 3vw, 1.9rem);
+  margin-bottom: 1rem;
+}
+
+.projects-intro {
+  color: var(--text-muted);
+  max-width: 68ch;
+  margin-bottom: 1.75rem;
+}
+
+.projects .grid-cards .card {
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.projects .grid-cards .card .btn {
+  align-self: flex-start;
+  margin-top: auto;
+}
+
+.manifesto p {
+  color: var(--text-muted);
+  font-size: clamp(1rem, 1.8vw, 1.15rem);
+  max-width: 68ch;
+}
+
+.values h2 {
+  margin-bottom: 1.75rem;
+}
+
+.grid-cards {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(230px, 1fr));
+  gap: 1rem;
+}
+
+.card {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: 1.75rem;
+  transition: 0.2s ease;
+}
+
+.card:hover {
+  border-color: var(--text-muted);
+  transform: translateY(-2px);
+}
+
+.faq {
+  padding: 4rem 0;
+}
+
+.faq-intro {
+  color: var(--text-muted);
+  max-width: 68ch;
+  margin-bottom: 1.75rem;
+}
+
+.faq-list {
+  max-width: 780px;
+}
+
+.faq-item {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: 1.25rem 1.5rem;
+  margin-bottom: 1rem;
+}
+
+.faq-item h3 {
+  font-size: 1.05rem;
+  margin-bottom: 0.4rem;
+}
+
+.faq-item p {
+  color: var(--text-muted);
+  font-size: 0.97rem;
+}
+
+.card h3 {
+  font-size: 1.1rem;
+  margin-bottom: 0.6rem;
+  color: var(--text);
+}
+
+.card p {
+  color: var(--text-muted);
+  font-size: 0.95rem;
+}
+
+.contact {
+  text-align: center;
+  padding-bottom: 5rem;
+}
+
+.contact h2 {
+  margin-bottom: 0.75rem;
+}
+
+.contact p {
+  color: var(--text-muted);
+  max-width: 52ch;
+  margin: 0 auto 2rem;
+}
+
+.contact-list {
+  display: flex;
+  flex-wrap: wrap;
+  justify-content: center;
+  gap: 1rem;
+}
+
+.contact-item {
+  display: flex;
+  flex-direction: column;
+  gap: 0.4rem;
+  min-width: 180px;
+  padding: 1.1rem 1.4rem;
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  transition: 0.2s ease;
+}
+
+.contact-item:hover {
+  border-color: var(--text-muted);
+}
+
+.contact-label {
+  font-size: 0.78rem;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+  color: var(--text-muted);
+}
+
+.contact-value {
+  color: var(--text);
+  font-weight: 600;
+  font-size: 1.02rem;
+  word-break: break-word;
+}
+
+a.contact-value:hover {
+  color: var(--text);
+  text-decoration: none;
+}
+
+.contact-badge {
+  font-size: 0.85rem;
+  color: var(--text-muted);
+  min-height: 1.2em;
+}
+
+.site-footer {
+  border-top: 1px solid var(--border);
+  padding: 1.5rem clamp(1.25rem, 5vw, 4rem);
+  text-align: center;
+  color: var(--text-muted);
+  font-size: 0.85rem;
+  background: var(--bg-soft);
+}
+
+.footer-note {
+  margin-top: 0.25rem;
+  opacity: 0.7;
+}
+
+.footer-nav {
+  margin-top: 0.75rem;
+  display: flex;
+  justify-content: center;
+  gap: 0.5rem;
+  flex-wrap: wrap;
+}
+
+.footer-nav a {
+  color: var(--text-muted);
+}
+
+.footer-nav a:hover {
+  color: var(--text);
+}
+
+.footer-sep {
+  opacity: 0.4;
+}
+
+/* ===== Pages légales ===== */
+
+.legal-disclaimer {
+  background: var(--accent-soft);
+  color: var(--text);
+  text-align: center;
+  font-weight: 600;
+  font-size: 0.9rem;
+  line-height: 1.5;
+  padding: 0.7rem clamp(1rem, 4vw, 2rem);
+  border-bottom: 1px solid var(--border);
+}
+
+.legal-disclaimer a {
+  color: var(--text);
+  text-decoration: underline;
+}
+
+.legal-disclaimer a:hover {
+  color: var(--accent);
+}
+
+.legal {
+  padding: clamp(1.5rem, 5vw, 3.5rem) clamp(1.25rem, 5vw, 4rem);
+  max-width: 780px;
+  margin: 0 auto;
+}
+
+.legal h1 {
+  font-size: clamp(1.5rem, 4vw, 2rem);
+  margin-bottom: 0.4rem;
+}
+
+.legal .legal-meta {
+  color: var(--text-muted);
+  font-size: 0.9rem;
+  margin-bottom: 2.25rem;
+}
+
+.legal h2 {
+  font-size: clamp(1.1rem, 2.5vw, 1.3rem);
+  margin: 2rem 0 0.6rem;
+}
+
+.legal h3 {
+  font-size: 1.02rem;
+  margin: 1.25rem 0 0.4rem;
+}
+
+.legal p,
+.legal li {
+  color: var(--text-muted);
+  line-height: 1.7;
+}
+
+.legal ul,
+.legal ol {
+  padding-left: 1.25rem;
+  margin: 0.5rem 0 1rem;
+}
+
+.legal li {
+  margin: 0.35rem 0;
+}
+
+.legal a {
+  color: var(--accent);
+  word-break: break-word;
+}
+
+.legal code {
+  word-break: break-all;
+  overflow-wrap: break-word;
+}
+
+.legal .legal-box {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: 1.1rem 1.3rem;
+  margin: 1.25rem 0;
+  font-size: 0.95rem;
+}
+
+.projects-page {
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+  margin-top: 1.5rem;
+}
+
+.projects-page .card {
+  display: flex;
+  flex-direction: column;
+  gap: 0.75rem;
+}
+
+.projects-page .card .btn {
+  align-self: flex-start;
+  margin-top: auto;
+}
+
+.legal .legal-note {
+  font-size: 0.85rem;
+  opacity: 0.75;
+  margin-top: 0.75rem;
+}
+
+.dev-banner {
+  margin: 1rem 0 1.5rem;
+  padding: 0.85rem 1rem;
+  border: 1px solid var(--accent, #f7931e);
+  border-left-width: 4px;
+  border-radius: 8px;
+  background: color-mix(in srgb, var(--accent, #f7931e) 8%, transparent);
+  font-size: 0.9rem;
+  line-height: 1.45;
+}
+
+.tag,
+.tag-latest {
+  display: inline-block;
+  padding: 0.1rem 0.55rem;
+  border-radius: 999px;
+  background: #f7931e;
+  color: #fff;
+  font-size: 0.72rem;
+  font-weight: 600;
+  vertical-align: middle;
+}
+
+.tag-dev {
+  background: #64748b;
+}
+
+.tag-alpha {
+  background: #dc2626;
+}
+
+.tag-beta {
+  background: #d97706;
+}
+
+.tag-release {
+  background: #16a34a;
+}
+
+@media (max-width: 768px) {
+  .site-header {
+    position: relative;
+    padding: 0.8rem 1rem;
+  }
+
+  .site-nav {
+    gap: 0.75rem;
+  }
+
+  .site-header:has(.nav-toggle-input) .site-nav {
+    position: absolute;
+    top: 100%;
+    left: 0;
+    right: 0;
+    display: none;
+    flex-direction: column;
+    align-items: stretch;
+    gap: 0;
+    background: var(--bg);
+    border-bottom: 1px solid var(--border);
+    box-shadow: 0 18px 30px rgba(0, 0, 0, 0.15);
+    padding: 0.4rem 0 0.75rem;
+  }
+
+  .nav-burger {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 0.35rem;
+    margin-left: auto;
+    border: 1px solid var(--border);
+    border-radius: 8px;
+    color: var(--text-muted);
+    cursor: pointer;
+    user-select: none;
+    transition: 0.15s ease;
+  }
+
+  .nav-burger:active {
+    transform: scale(0.95);
+  }
+
+  .nav-burger svg {
+    width: 22px;
+    height: 22px;
+    display: block;
+  }
+
+  .nav-burger svg + svg {
+    display: none;
+  }
+
+  .nav-toggle-input:checked ~ .nav-burger svg:first-child {
+    display: none;
+  }
+
+  .nav-toggle-input:checked ~ .nav-burger svg:last-child {
+    display: block;
+  }
+
+  .nav-toggle-input:checked ~ .nav-burger {
+    color: var(--text);
+    border-color: var(--text-muted);
+  }
+
+  .nav-toggle-input:checked ~ .site-nav {
+    display: flex;
+  }
+
+  .site-header:has(.nav-toggle-input) .site-nav > a {
+    padding: 0.8rem 1.25rem;
+    font-size: 1.02rem;
+    color: var(--text);
+  }
+
+  .site-header:has(.nav-toggle-input) .site-nav > a:hover {
+    color: var(--text);
+  }
+
+  .site-header:has(.nav-toggle-input) .lang-switch {
+    margin: 0.6rem 1.25rem 0.2rem;
+    align-self: flex-start;
+  }
+
+  .site-header:has(.nav-toggle-input) .theme-btn {
+    margin: 0.4rem 1.25rem 0.6rem;
+    align-self: flex-start;
+  }
+
+  .site-main {
+    padding: 0 1.1rem;
+  }
+
+  .hero {
+    padding: 3rem 0 2.5rem;
+  }
+
+  .hero h1 {
+    font-size: clamp(1.7rem, 8vw, 2.4rem);
+  }
+
+  .hero-actions {
+    flex-direction: column;
+    align-items: stretch;
+    max-width: 340px;
+    margin: 0 auto;
+  }
+
+  .hero-actions .btn {
+    text-align: center;
+  }
+
+  .manifesto,
+  .values,
+  .faq,
+  .contact {
+    padding: 2.5rem 0;
+  }
+
+  .contact {
+    padding-bottom: 3.5rem;
+  }
+
+  .grid-cards {
+    grid-template-columns: 1fr;
+  }
+
+  .faq-item {
+    padding: 1rem 1.15rem;
+  }
+
+  .contact-list {
+    flex-direction: column;
+  }
+
+  .contact-item {
+    min-width: 0;
+  }
+
+  .legal {
+    padding: 1.5rem 1.1rem;
+  }
+}
+
+@media (max-width: 480px) {
+  .site-header {
+    padding: 0.7rem 0.85rem;
+  }
+
+  .brand-name {
+    font-size: 0.95rem;
+  }
+
+  .brand-mark {
+    width: 2.2rem;
+    height: 1.1rem;
+  }
+
+  .hero {
+    padding: 2.5rem 0 2rem;
+  }
+
+  .hero-badge {
+    font-size: 0.72rem;
+    padding: 0.3rem 0.8rem;
+  }
+
+  .hero h1 {
+    font-size: 1.6rem;
+  }
+
+  .card {
+    padding: 1.4rem;
+  }
+
+  .btn {
+    padding: 0.65rem 1.3rem;
+  }
+
+  .site-footer {
+    padding: 1.25rem 1rem;
+  }
+
+  .legal h1 {
+    font-size: 1.35rem;
+  }
+
+  .legal .legal-box {
+    padding: 0.9rem 1rem;
+  }
+}
+
+.team-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
+  gap: 1.5rem;
+  margin-top: 2rem;
+}
+
+.team-card {
+  background: var(--card-bg, rgba(255,255,255,0.03));
+  border: 1px solid rgba(255,255,255,0.08);
+  border-radius: 16px;
+  padding: 2rem 1.5rem;
+  text-align: center;
+  transition: 0.2s ease;
+}
+
+.team-card:hover {
+  border-color: rgba(255,255,255,0.15);
+}
+
+.team-avatar {
+  width: 120px;
+  height: 120px;
+  border-radius: 50%;
+  object-fit: contain;
+  border: 2px solid rgba(255,255,255,0.1);
+  margin-bottom: 1rem;
+  background: var(--bg, #000);
+  aspect-ratio: 1 / 1;
+}
+
+.team-card h2 {
+  font-size: 1.3rem;
+  margin: 0 0 0.3rem;
+}
+
+.team-role {
+  font-size: 0.85rem;
+  font-weight: 600;
+  opacity: 0.7;
+  text-transform: uppercase;
+  letter-spacing: 0.05em;
+  margin: 0 0 0.75rem;
+}
+
+.team-desc {
+  font-size: 0.95rem;
+  line-height: 1.5;
+  opacity: 0.85;
+  margin: 0;
+}
+
+.footer-back {
+  color: var(--text-muted, #888);
+}
+
+.footer-icon {
+  vertical-align: -2px;
+}
+
+[data-theme="dark"] .footer-icon {
+  filter: invert(1);
+}
+
+.tor-banner {
+  text-align: center;
+  padding: 1.5rem;
+  margin: 2rem 0;
+  background: rgba(255,255,255,0.03);
+  border: 1px solid rgba(255,255,255,0.08);
+  border-radius: 12px;
+}
+
+.tor-banner code {
+  font-size: 0.75rem;
+  word-break: break-all;
+  opacity: 0.7;
+}
+
+.tor-toast {
+  position: fixed;
+  bottom: 1.5rem;
+  right: 1.5rem;
+  max-width: 340px;
+  padding: 1rem 1.25rem;
+  background: var(--bg-card, #fff);
+  color: var(--text, #000);
+  border: 1px solid var(--border, rgba(0,0,0,0.1));
+  border-radius: 12px;
+  box-shadow: 0 8px 24px rgba(0,0,0,0.15);
+  z-index: 9999;
+  display: flex;
+  flex-direction: column;
+  gap: 0.75rem;
+  animation: toast-in 0.3s ease;
+}
+
+.tor-toast p {
+  margin: 0;
+  font-size: 0.9rem;
+  line-height: 1.4;
+}
+
+.tor-toast-btn {
+  display: inline-block;
+  padding: 0.5rem 1rem;
+  background: var(--accent, #000);
+  color: var(--bg, #fff);
+  text-decoration: none;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  font-weight: 600;
+  text-align: center;
+  transition: opacity 0.2s;
+}
+
+.tor-toast-btn:hover {
+  opacity: 0.85;
+}
+
+.tor-toast-close {
+  position: absolute;
+  top: 0.5rem;
+  right: 0.75rem;
+  background: none;
+  border: none;
+  color: var(--text-muted, #888);
+  font-size: 1.25rem;
+  cursor: pointer;
+  line-height: 1;
+  padding: 0;
+}
+
+.tor-toast-close:hover {
+  color: var(--text, #000);
+}
+
+@keyframes toast-in {
+  from { opacity: 0; transform: translateY(1rem); }
+  to { opacity: 1; transform: translateY(0); }
+}
diff --git a/public/css/zenyth.css b/public/css/zenyth.css
new file mode 100644
index 0000000..5d96f17
--- /dev/null
+++ b/public/css/zenyth.css
@@ -0,0 +1,24 @@
+/* Zenyth Browser - page produit */
+
+.zy-main{max-width:860px;margin:0 auto;padding:48px 20px 80px}
+.zy-hero{text-align:center;margin-bottom:40px}
+.zy-badge{display:inline-block;border:1px solid var(--accent);color:var(--accent);border-radius:999px;padding:4px 14px;font-size:.78rem;letter-spacing:.12em;text-transform:uppercase}
+.zy-hero h1{font-size:2.6rem;margin:18px 0 10px;letter-spacing:-.02em;color:var(--text)}
+.zy-hero h1 span{color:var(--accent)}
+.zy-sub{color:var(--text-muted);max-width:560px;margin:0 auto;line-height:1.6}
+.zy-card{background:var(--bg-card);border:1px solid var(--border);border-radius:var(--radius,14px);padding:26px;margin:22px 0}
+.zy-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:14px;margin:26px 0}
+.zy-feat{background:var(--bg-card);border:1px solid var(--border);border-radius:10px;padding:16px}
+.zy-feat b{display:block;margin-bottom:6px;color:var(--text)}
+.zy-feat p{margin:0;font-size:.88rem;color:var(--text-muted);line-height:1.5}
+.zy-dl{display:flex;flex-direction:column;align-items:center;gap:12px;padding:34px;text-align:center}
+.zy-btn{display:inline-block;background:var(--accent);color:var(--bg,#fff);text-decoration:none;font-weight:700;padding:14px 38px;border-radius:10px;font-size:1.05rem;transition:transform .15s,box-shadow .15s}
+.zy-btn:hover{transform:translateY(-2px);box-shadow:0 8px 24px rgba(79,124,255,.35)}
+.zy-meta{font-family:var(--font-mono,ui-monospace,monospace);font-size:.78rem;color:var(--text-muted);word-break:break-all}
+.zy-steps{counter-reset:s;list-style:none;padding:0;margin:0}
+.zy-steps li{counter-increment:s;padding-left:44px;position:relative;margin-bottom:14px;line-height:1.55;color:var(--text)}
+.zy-steps li::before{content:counter(s);position:absolute;left:0;top:0;width:28px;height:28px;border-radius:50%;background:var(--border);color:var(--accent);display:flex;align-items:center;justify-content:center;font-weight:700;font-size:.85rem}
+.zy-code{background:var(--bg-soft,#010409);border:1px solid var(--border);border-radius:8px;padding:10px 14px;font-family:var(--font-mono,ui-monospace,monospace);font-size:.85rem;color:var(--accent);overflow-x:auto;display:block;margin-top:8px}
+.zy-warn{border-left:3px solid #f0883e;background:rgba(240,136,62,.07);padding:14px 18px;border-radius:8px;font-size:.9rem;line-height:1.5;color:var(--text-muted)}
+.zy-card h2{color:var(--text)}
+@media(max-width:600px){.zy-hero h1{font-size:1.8rem}}
diff --git a/public/css/zfprobe.css b/public/css/zfprobe.css
new file mode 100644
index 0000000..2d5cef3
--- /dev/null
+++ b/public/css/zfprobe.css
@@ -0,0 +1,713 @@
+/* ===== Fingerprint test page ===== */
+
+.fp-main {
+  flex: 1;
+  width: 100%;
+  max-width: 1000px;
+  margin: 0 auto;
+  padding: clamp(1.5rem, 5vw, 3rem) clamp(1.25rem, 5vw, 2.5rem) 4rem;
+}
+
+.fp-hero {
+  text-align: center;
+  padding: 2rem 0 1.5rem;
+}
+
+.fp-hero .hero-badge {
+  margin-bottom: 1.25rem;
+}
+
+.fp-hero h1 {
+  font-size: clamp(1.8rem, 5vw, 2.8rem);
+  font-weight: 800;
+  letter-spacing: -0.01em;
+  margin-bottom: 1rem;
+}
+
+.fp-hero .fp-sub {
+  color: var(--text-muted);
+  font-size: clamp(1rem, 2vw, 1.15rem);
+  max-width: 70ch;
+  margin: 0 auto 2.5rem;
+}
+
+.fp-actions {
+  display: flex;
+  justify-content: center;
+  gap: 1rem;
+  flex-wrap: wrap;
+  align-items: center;
+}
+
+.fp-status {
+  min-height: 1.5em;
+  color: var(--text);
+  font-weight: 600;
+  margin-top: 1rem;
+}
+
+.fp-cta {
+  display: inline-block;
+  padding: 0.85rem 2.2rem;
+  border-radius: 12px;
+  font-weight: 700;
+  font-size: 1.05rem;
+  background: var(--accent);
+  color: var(--bg);
+  border: 1px solid transparent;
+  cursor: pointer;
+  transition: 0.15s ease;
+  font-family: inherit;
+}
+
+.fp-cta:hover:not(:disabled) {
+  background: var(--accent-strong);
+  transform: translateY(-1px);
+}
+
+.fp-cta:disabled {
+  opacity: 0.6;
+  cursor: progress;
+}
+
+.fp-hidden {
+  display: none !important;
+}
+
+.fp-note {
+  color: var(--text-muted);
+  font-size: 0.9rem;
+  max-width: 72ch;
+  margin: 0 auto;
+  text-align: center;
+}
+
+.fp-spoof {
+  margin-bottom: 1rem;
+  padding: 0.9rem 1.2rem;
+  border: 1px solid var(--border);
+  background: var(--accent-soft);
+  border-radius: var(--radius);
+}
+
+.fp-spoof strong {
+  color: var(--text);
+  font-size: 0.95rem;
+}
+
+.fp-spoof p {
+  color: var(--text-muted);
+  font-size: 0.88rem;
+  line-height: 1.6;
+  margin: 0.4rem 0 0;
+}
+
+.fp-debug {
+  margin-top: 1.5rem;
+  background: var(--bg-card);
+  border: 1px dashed var(--border);
+  border-radius: var(--radius);
+  padding: 0.9rem 1.2rem;
+  text-align: left;
+}
+
+.fp-debug summary {
+  cursor: pointer;
+  color: var(--text);
+  font-size: 0.85rem;
+  font-weight: 600;
+  user-select: none;
+}
+
+.fp-debug pre {
+  margin: 0.8rem 0 0;
+  font-family: var(--font-mono);
+  font-size: 0.72rem;
+  line-height: 1.55;
+  color: var(--text-muted);
+  white-space: pre-wrap;
+  word-break: break-all;
+  max-height: 340px;
+  overflow: auto;
+}
+
+.fp-privacy {
+  margin-top: 1.25rem;
+  padding: 0.9rem 1.2rem;
+  border: 1px solid var(--border);
+  background: var(--accent-soft);
+  border-radius: var(--radius);
+  color: var(--text);
+  font-size: 0.95rem;
+  text-align: center;
+}
+
+.fp-result {
+  margin-top: 2rem;
+}
+
+.fp-idcard {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: 1.5rem 1.75rem;
+  display: flex;
+  flex-wrap: wrap;
+  gap: 1.5rem;
+  align-items: center;
+  justify-content: space-between;
+}
+
+.fp-idbox {
+  flex: 1 1 320px;
+  min-width: 0;
+}
+
+.fp-idbox .fp-label {
+  font-size: 0.78rem;
+  letter-spacing: 0.08em;
+  text-transform: uppercase;
+  color: var(--text-muted);
+  margin-bottom: 0.5rem;
+}
+
+.fp-idbox-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.5rem;
+  margin-bottom: 0.5rem;
+}
+
+.fp-idbox-head .fp-label {
+  margin-bottom: 0;
+}
+
+.fp-badge-browser {
+  background: var(--accent-soft);
+  color: var(--text);
+  border: 1px solid var(--border);
+}
+
+.fp-badge-device {
+  background: var(--accent-soft);
+  color: var(--text);
+  border: 1px solid var(--border);
+}
+
+.fp-id {
+  font-family: var(--font-mono);
+  font-size: clamp(1.1rem, 3vw, 1.5rem);
+  font-weight: 700;
+  color: var(--text);
+  word-break: break-all;
+  line-height: 1.4;
+}
+
+.fp-id-how {
+  color: var(--text-muted);
+  font-size: 0.85rem;
+  margin-top: 0.6rem;
+  max-width: 60ch;
+}
+
+.fp-stats {
+  flex: 0 1 auto;
+  min-width: 260px;
+}
+
+.fp-stat-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: baseline;
+  gap: 1rem;
+  padding: 0.45rem 0;
+  border-bottom: 1px solid var(--border);
+}
+
+.fp-stat-row:last-child {
+  border-bottom: none;
+}
+
+.fp-stat-key {
+  color: var(--text-muted);
+  font-size: 0.85rem;
+}
+
+.fp-stat-val {
+  font-weight: 700;
+  font-size: 1.02rem;
+  text-align: right;
+}
+
+.fp-bar {
+  margin-top: 0.75rem;
+  height: 10px;
+  border-radius: 999px;
+  background: var(--bg);
+  border: 1px solid var(--border);
+  overflow: hidden;
+}
+
+.fp-bar > div {
+  height: 100%;
+  border-radius: 999px;
+  background: var(--text);
+  transition: width 0.8s ease;
+}
+
+.fp-bar-device {
+  margin-top: 0.35rem;
+}
+
+.fp-bar-device > div {
+  background: var(--text-muted);
+}
+
+.fp-meta-note {
+  color: var(--text-muted);
+  font-size: 0.8rem;
+  margin-top: 0.75rem;
+}
+
+.fp-section {
+  margin-top: 3rem;
+}
+
+.fp-section h2 {
+  font-size: clamp(1.2rem, 3vw, 1.5rem);
+  margin-bottom: 1rem;
+}
+
+.fp-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
+  gap: 1rem;
+}
+
+.fp-card {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: 1.1rem 1.25rem;
+  display: flex;
+  flex-direction: column;
+  gap: 0.5rem;
+}
+
+.fp-card-na {
+  opacity: 0.55;
+}
+
+.fp-card-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.5rem;
+}
+
+.fp-card-name {
+  font-size: 1rem;
+  color: var(--text);
+  margin: 0;
+}
+
+.fp-badge {
+  font-size: 0.7rem;
+  font-weight: 600;
+  padding: 0.15rem 0.55rem;
+  border-radius: 999px;
+  white-space: nowrap;
+  letter-spacing: 0.03em;
+}
+
+.fp-badge-stable {
+  background: var(--accent-soft);
+  color: var(--text);
+  border: 1px solid var(--border);
+}
+
+.fp-badge-volatile {
+  background: var(--accent-soft);
+  color: var(--text-muted);
+  border: 1px solid var(--border);
+}
+
+.fp-badge-core {
+  background: var(--accent-soft);
+  color: var(--text);
+  border: 1px solid var(--border);
+}
+
+.fp-card-value {
+  color: var(--text);
+  font-size: 0.92rem;
+  word-break: break-word;
+  line-height: 1.5;
+}
+
+.fp-card-meta {
+  display: flex;
+  align-items: center;
+  justify-content: flex-start;
+  gap: 0.5rem;
+}
+
+.fp-bits {
+  font-size: 0.78rem;
+  font-weight: 600;
+  color: var(--text-muted);
+  background: var(--bg-soft);
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  padding: 0.2rem 0.6rem;
+}
+
+.fp-card-details {
+  margin-top: auto;
+}
+
+.fp-card-details summary {
+  cursor: pointer;
+  color: var(--text);
+  font-size: 0.85rem;
+  font-weight: 600;
+  user-select: none;
+}
+
+.fp-card-details summary:hover {
+  text-decoration: underline;
+}
+
+.fp-card-details p {
+  color: var(--text-muted);
+  font-size: 0.85rem;
+  line-height: 1.6;
+  margin: 0.6rem 0 0;
+}
+
+.fp-card-details .fp-card-protect {
+  border-left: 2px solid var(--border);
+  padding-left: 0.8rem;
+  margin-top: 0.6rem;
+}
+
+.fp-card-details .fp-card-protect strong {
+  color: var(--text);
+  font-size: 0.8rem;
+}
+
+.fp-education p {
+  color: var(--text-muted);
+  margin-bottom: 0.9rem;
+  max-width: 78ch;
+}
+
+.fp-multi {
+  padding: 2rem 0;
+}
+
+.fp-multi h2 {
+  font-size: clamp(1.5rem, 4vw, 2.2rem);
+  font-weight: 800;
+  margin-bottom: 0.5rem;
+}
+
+.fp-multi .fp-sub {
+  color: var(--text-muted);
+  font-size: 0.95rem;
+  max-width: 65ch;
+  margin: 0 auto 2rem;
+}
+
+.fp-id-cards {
+  display: flex;
+  gap: 1.5rem;
+  margin-bottom: 2rem;
+  flex-wrap: wrap;
+}
+
+.fp-id-card {
+  flex: 1;
+  min-width: 280px;
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 14px;
+  padding: 1.25rem 1.5rem;
+}
+
+.fp-id-card-head {
+  display: flex;
+  align-items: center;
+  gap: 0.6rem;
+  margin-bottom: 0.75rem;
+}
+
+.fp-id-card-badge {
+  font-size: 0.72rem;
+  font-weight: 800;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  background: var(--accent);
+  color: var(--bg);
+  padding: 0.2rem 0.55rem;
+  border-radius: 6px;
+}
+
+.fp-id-card-badge-dev {
+  background: var(--text-muted);
+  color: var(--bg);
+}
+
+.fp-id-card-subtitle {
+  font-size: 0.85rem;
+  color: var(--text-muted);
+  font-weight: 600;
+}
+
+.fp-id-card-val {
+  font-size: 1.15rem;
+  font-weight: 700;
+  font-family: var(--font-mono);
+  letter-spacing: 0.02em;
+  word-break: break-all;
+  margin-bottom: 0.6rem;
+}
+
+.fp-id-card-desc {
+  font-size: 0.82rem;
+  color: var(--text-muted);
+  line-height: 1.5;
+  margin: 0;
+}
+
+.fp-id-card-status {
+  display: inline-block;
+  font-size: 0.78rem;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  padding: 0.2rem 0.6rem;
+  border-radius: 6px;
+  margin-bottom: 0.6rem;
+}
+
+.fp-status-protected {
+  background: var(--accent-soft);
+  color: var(--text);
+}
+
+.fp-status-partial {
+  background: var(--accent-soft);
+  color: var(--text-muted);
+}
+
+.fp-status-vulnerable {
+  background: var(--accent-soft);
+  color: var(--text);
+}
+
+.fp-multi-scores {
+  display: flex;
+  gap: 1.5rem;
+  justify-content: center;
+  margin-bottom: 2.5rem;
+  flex-wrap: wrap;
+}
+
+.fp-score-card {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 14px;
+  padding: 1.5rem 2.5rem;
+  min-width: 180px;
+}
+
+.fp-score-val {
+  font-size: 2.2rem;
+  font-weight: 800;
+  color: var(--text);
+  line-height: 1.1;
+}
+
+.fp-score-lbl {
+  font-size: 0.85rem;
+  color: var(--text-muted);
+  margin-top: 0.4rem;
+  font-weight: 600;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+}
+
+.fp-multi-table-wrap {
+  margin-bottom: 2rem;
+}
+
+.fp-multi-grp-title {
+  font-size: 0.85rem;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--text-muted);
+  margin: 1.5rem 0 0.75rem;
+  padding-bottom: 0.4rem;
+  border-bottom: 1px solid var(--border);
+}
+
+.fp-multi-card {
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 0.75rem 1rem;
+  margin-bottom: 0.5rem;
+}
+
+.fp-multi-card-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.5rem;
+  margin-bottom: 0.5rem;
+}
+
+.fp-multi-sig {
+  font-weight: 600;
+  font-size: 0.9rem;
+}
+
+.fp-multi-dots {
+  display: flex;
+  gap: 0.5rem;
+  flex-wrap: wrap;
+}
+
+.fp-multi-dot {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.15rem;
+  min-width: 60px;
+}
+
+.fp-multi-dot-label {
+  font-size: 0.7rem;
+  font-weight: 700;
+  color: var(--text-muted);
+  text-transform: uppercase;
+}
+
+.fp-multi-dot-val {
+  font-size: 0.75rem;
+  font-family: var(--font-mono);
+  color: var(--text-muted);
+}
+
+.fp-multi-dot-match .fp-multi-dot-val {
+  color: var(--text);
+}
+
+.fp-multi-dot-diff .fp-multi-dot-val {
+  color: var(--text-muted);
+}
+
+.fp-multi-match {
+  color: var(--text);
+  font-size: 0.78rem;
+  font-weight: 600;
+}
+
+.fp-multi-diff {
+  color: var(--text-muted);
+  font-size: 0.78rem;
+  font-weight: 600;
+}
+
+.fp-protection {
+  margin-bottom: 2rem;
+}
+
+.fp-protection h3 {
+  font-size: 1.1rem;
+  font-weight: 700;
+  margin-bottom: 0.75rem;
+}
+
+.fp-prot-row {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  padding: 0.4rem 0;
+  border-bottom: 1px solid var(--border);
+}
+
+.fp-prot-name {
+  font-weight: 600;
+  min-width: 120px;
+}
+
+.fp-reco {
+  margin-bottom: 2rem;
+}
+
+.fp-reco h3 {
+  font-size: 1.1rem;
+  font-weight: 700;
+  margin-bottom: 0.75rem;
+}
+
+.fp-reco-item {
+  color: var(--text-muted);
+  font-size: 0.92rem;
+  margin: 0.3rem 0;
+}
+
+#ft-restart {
+  margin-top: 1rem;
+}
+
+@media (max-width: 768px) {
+  .fp-idcard {
+    flex-direction: column;
+    align-items: stretch;
+    padding: 1.25rem;
+  }
+
+  .fp-stats {
+    min-width: 0;
+  }
+
+  .fp-id-cards {
+    flex-direction: column;
+  }
+
+  .fp-id-card {
+    min-width: 0;
+  }
+
+  .fp-multi-card {
+    padding: 0.6rem 0.75rem;
+  }
+
+  .fp-multi-dots {
+    gap: 0.35rem;
+  }
+
+  .fp-multi-dot {
+    min-width: 50px;
+  }
+
+  .fp-multi-dot-val {
+    font-size: 0.7rem;
+  }
+
+  .fp-multi-scores {
+    flex-direction: column;
+  }
+
+  .fp-multi-table-wrap {
+    overflow-x: auto;
+  }
+}
diff --git a/public/equipe/en/index.html b/public/equipe/en/index.html
new file mode 100644
index 0000000..60f0510
--- /dev/null
+++ b/public/equipe/en/index.html
@@ -0,0 +1,59 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="The team behind Zektyc — Riric, founder and architect, and OpenCode, programmer." />
+    <meta name="robots" content="index, follow" />
+    <title>Team · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/en/equipe/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Team · Zektyc" />
+    <meta property="og:description" content="The team behind Zektyc — Riric, founder and architect, and OpenCode, programmer." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/en/equipe/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="en_US" />
+    <meta property="og:locale:alternate" content="fr_FR" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/en/">← Back to home</a></p>
+      <h1 data-i18n="team.title">Team</h1>
+      <p class="legal-meta" data-i18n="team.intro">Two people behind Zektyc. One human, one AI.</p>
+
+      <section class="team-grid">
+        <article class="team-card">
+          <img src="/pfp.jpg" alt="Riric" class="team-avatar" width="120" height="120" />
+          <h2>Riric</h2>
+          <p class="team-role" data-i18n="team.riric.role">CEO · Founder · Architect</p>
+          <p class="team-desc" data-i18n="team.riric.desc">
+            Vision, technical direction, architecture, design, security. Riric
+            builds Zektyc from A to Z — from the server to the first pixel.
+          </p>
+        </article>
+
+        <article class="team-card">
+          <img src="/opencode-avatar.svg" alt="OpenCode" class="team-avatar" width="120" height="120" />
+          <h2>OpenCode</h2>
+          <p class="team-role" data-i18n="team.opencode.role">Programmer</p>
+          <p class="team-desc" data-i18n="team.opencode.desc">
+            Development, implementation, code. OpenCode writes and maintains
+            Zektyc's source code — from the Bun server to static pages.
+          </p>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/equipe/index.html b/public/equipe/index.html
new file mode 100644
index 0000000..b428920
--- /dev/null
+++ b/public/equipe/index.html
@@ -0,0 +1,59 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="L'équipe derrière Zektyc — Riric, fondateur et architecte, et OpenCode, programmeur." />
+    <meta name="robots" content="index, follow" />
+    <title>Équipe · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/equipe/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Équipe · Zektyc" />
+    <meta property="og:description" content="L'équipe derrière Zektyc — Riric, fondateur et architecte, et OpenCode, programmeur." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/equipe/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta property="og:locale:alternate" content="en_US" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/">← Retour à l'accueil</a></p>
+      <h1 data-i18n="team.title">L'équipe</h1>
+      <p class="legal-meta" data-i18n="team.intro">Deux personnes derrière Zektyc. Un humain, une IA.</p>
+
+      <section class="team-grid">
+        <article class="team-card">
+          <img src="/pfp.jpg" alt="Riric" class="team-avatar" width="120" height="120" />
+          <h2>Riric</h2>
+          <p class="team-role" data-i18n="team.riric.role">CEO · Fondateur · Architecte</p>
+          <p class="team-desc" data-i18n="team.riric.desc">
+            Vision, direction technique, architecture, design, sécurité. Riric
+            construit Zektyc de A à Z — du serveur au premier pixel.
+          </p>
+        </article>
+
+        <article class="team-card">
+          <img src="/opencode-avatar.svg" alt="OpenCode" class="team-avatar" width="120" height="120" />
+          <h2>OpenCode</h2>
+          <p class="team-role" data-i18n="team.opencode.role">Programmateur</p>
+          <p class="team-desc" data-i18n="team.opencode.desc">
+            Développement, implémentation, code. OpenCode écrit et maintient
+            le code source de Zektyc — du serveur Bun aux pages statiques.
+          </p>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/error.html b/public/error.html
new file mode 100644
index 0000000..119bd23
--- /dev/null
+++ b/public/error.html
@@ -0,0 +1,63 @@
+<!doctype html>
+<html lang="__LANG__">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="noindex, nofollow" />
+    <title>__STATUS__ · Zektyc</title>
+    <meta name="theme-color" content="#070a0f" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/i18n.js" defer></script>
+    <script>document.addEventListener("click",function(e){var t=e.target.closest?e.target.closest(".site-nav"):null;if(t){var n=document.getElementById("nav-toggle");if(n)n.checked=false}})</script>
+    <style>
+      .err-hero h1{font-size:clamp(5rem,18vw,11rem);font-weight:900;line-height:1;letter-spacing:-0.04em;margin-bottom:1rem}
+      .err-hero p{color:var(--text-muted);font-size:1.05rem;max-width:38ch;margin:0 auto 2.5rem;line-height:1.6}
+    </style>
+  </head>
+  <body>
+    <header class="site-header">
+      <a class="skip-link" href="#main">Aller au contenu</a>
+      <a class="brand" href="/"><span class="brand-mark" aria-hidden="true"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 16" role="presentation" focusable="false"><path d="M5 4h22L5 12h22" fill="none" stroke="currentColor" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/></svg></span><span class="brand-name">Zektyc</span></a>
+      <input type="checkbox" id="nav-toggle" class="nav-toggle-input" />
+      <label for="nav-toggle" class="nav-burger" aria-label="Menu">
+        <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 6h16M4 12h16M4 18h16"/></svg>
+        <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"/></svg>
+      </label>
+      <nav class="site-nav" aria-label="Navigation">
+        <div class="lang-switch" role="group" aria-label="Langue / Language">
+          <button type="button" data-lang="fr" class="lang-btn __FR_ACTIVE__">__FR_LABEL__</button>
+          <button type="button" data-lang="en" class="lang-btn __EN_ACTIVE__">__EN_LABEL__</button>
+        </div>
+        <button type="button" class="theme-btn" aria-label="Theme">
+          <svg class="icon-moon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"/></svg>
+          <svg class="icon-sun" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg>
+        </button>
+      </nav>
+    </header>
+
+    <main class="site-main" id="main">
+      <section class="hero">
+        <h1>__STATUS__</h1>
+        <p class="hero-sub">__MSG__</p>
+        <div class="hero-actions">
+          <a class="btn btn-primary" href="__HREF__">__BACK__</a>
+        </div>
+      </section>
+    </main>
+
+    <footer class="site-footer">
+      <p>Zektyc · France</p>
+      <p class="footer-note">__NOTE__</p>
+      <nav class="footer-nav" aria-label="Legal">
+        <a href="__TOS_HREF__">__TOS__</a>
+        <span class="footer-sep" aria-hidden="true">·</span>
+        <a href="__PRIV_HREF__">__PRIV__</a>
+        <span class="footer-sep" aria-hidden="true">·</span>
+        <a href="/.well-known/security.txt">security.txt</a>
+      </nav>
+    </footer>
+  </body>
+</html>
diff --git a/public/favicon.ico b/public/favicon.ico
new file mode 100644
index 0000000..a1afdd9
Binary files /dev/null and b/public/favicon.ico differ
diff --git a/public/favicon.svg b/public/favicon.svg
new file mode 100644
index 0000000..4e14c79
--- /dev/null
+++ b/public/favicon.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 16"><path d="M5 4h22L5 12h22" fill="none" stroke="#fff" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/></svg>
diff --git a/public/fingerprint-test/en/index.html b/public/fingerprint-test/en/index.html
new file mode 100644
index 0000000..a71297f
--- /dev/null
+++ b/public/fingerprint-test/en/index.html
@@ -0,0 +1,164 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta
+      name="description"
+      content="Test your browser fingerprint: find out how identifiable your browser is, with a score, explanations and tips to protect yourself. No data is sent or stored."
+    />
+    <meta name="robots" content="index, follow" />
+    <title>Browser Fingerprint Test · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/en/fingerprint-test" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Browser Fingerprint Test · Zektyc" />
+    <meta
+      property="og:description"
+      content="Find out how identifiable your browser is, with a score, explanations and tips to protect yourself."
+    />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/en/fingerprint-test" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="en_US" />
+    <meta property="og:locale:alternate" content="fr_FR" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <link rel="stylesheet" href="/css/zfprobe.css?v=14" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="fp-main" id="main">
+      <section class="fp-hero">
+        <p class="hero-badge">First Zektyc project · 100% client-side</p>
+        <h1>Browser Fingerprint Test</h1>
+        <p class="fp-sub" id="ft-intro"></p>
+        <div class="fp-actions">
+          <button type="button" class="fp-cta" id="ft-run"></button>
+        </div>
+        <p class="fp-status" id="ft-status"></p>
+      </section>
+
+      <section class="fp-multi fp-hidden" id="ft-multi">
+        <h2 id="ft-multi-title"></h2>
+        <p class="fp-sub" id="ft-multi-intro"></p>
+        <div class="fp-multi-scores">
+          <div class="fp-score-card">
+            <span class="fp-score-val" id="ft-sec-score">—</span>
+            <span class="fp-score-lbl" id="ft-sec-lbl"></span>
+          </div>
+          <div class="fp-score-card">
+            <span class="fp-score-val" id="ft-stab-score">—</span>
+            <span class="fp-score-lbl" id="ft-stab-lbl"></span>
+          </div>
+        </div>
+        <div class="fp-id-cards">
+          <div class="fp-id-card fp-id-card-zfp">
+            <div class="fp-id-card-head">
+              <span class="fp-id-card-badge">ZFP</span>
+              <span class="fp-id-card-subtitle" id="ft-zfp-sub"></span>
+            </div>
+            <div class="fp-id-card-val" id="ft-multi-zfp">—</div>
+            <span class="fp-id-card-status" id="ft-zfp-status"></span>
+            <p class="fp-id-card-desc" id="ft-zfp-desc"></p>
+          </div>
+          <div class="fp-id-card fp-id-card-zpd">
+            <div class="fp-id-card-head">
+              <span class="fp-id-card-badge fp-id-card-badge-dev">ZPD</span>
+              <span class="fp-id-card-subtitle" id="ft-zpd-sub"></span>
+            </div>
+            <div class="fp-id-card-val" id="ft-multi-zpd">—</div>
+            <span class="fp-id-card-status" id="ft-zpd-status"></span>
+            <p class="fp-id-card-desc" id="ft-zpd-desc"></p>
+          </div>
+        </div>
+        <div class="fp-multi-table-wrap">
+          <div class="fp-multi-list" id="ft-multi-table"></div>
+        </div>
+        <div class="fp-protection" id="ft-protection"></div>
+        <div class="fp-reco" id="ft-reco"></div>
+        <div class="fp-actions">
+          <button type="button" class="fp-cta" id="ft-restart"></button>
+        </div>
+      </section>
+
+      <section class="fp-result fp-hidden" id="ft-result">
+        <div class="fp-idcard">
+          <div class="fp-idbox">
+            <div class="fp-idbox-head">
+              <span class="fp-label" id="ft-id-label"></span>
+              <span class="fp-badge fp-badge-browser">Browser</span>
+            </div>
+            <div class="fp-id" id="ft-id">—</div>
+            <p class="fp-id-how" id="ft-id-how"></p>
+          </div>
+          <div class="fp-idbox">
+            <div class="fp-idbox-head">
+              <span class="fp-label" id="ft-device-label"></span>
+              <span class="fp-badge fp-badge-device">Device</span>
+            </div>
+            <div class="fp-id" id="ft-device-id">—</div>
+            <p class="fp-id-how" id="ft-device-how"></p>
+          </div>
+          <div class="fp-stats">
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-entropy-label"></span>
+              <span class="fp-stat-val" id="ft-bits">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-browser-entropy-label"></span>
+              <span class="fp-stat-val" id="ft-browser-bits">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-device-entropy-label"></span>
+              <span class="fp-stat-val" id="ft-device-bits">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-level-label"></span>
+              <span class="fp-stat-val" id="ft-level">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-device-level-label"></span>
+              <span class="fp-stat-val" id="ft-device-level">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-pop-label"></span>
+              <span class="fp-stat-val" id="ft-pop">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-score-label"></span>
+              <span class="fp-stat-val" id="ft-score">—</span>
+            </div>
+            <div class="fp-bar"><div id="ft-bar"></div></div>
+            <div class="fp-bar fp-bar-device"><div id="ft-device-bar"></div></div>
+            <p class="fp-meta-note" id="ft-stable"></p>
+            <p class="fp-meta-note" id="ft-device-stable"></p>
+            <p class="fp-meta-note" id="ft-stability-label"></p>
+          </div>
+        </div>
+        <p class="fp-note" id="ft-entropy-note"></p>
+        <p class="fp-note" id="ft-estimated-note"></p>
+      </section>
+
+      <section class="fp-section fp-hidden" id="ft-signals-section">
+        <h2 id="ft-signals-title"></h2>
+        <div class="fp-grid" id="ft-signals"></div>
+      </section>
+
+      <section class="fp-section fp-education">
+        <h2 id="ft-what-title"></h2>
+        <div id="ft-what"></div>
+      </section>
+
+      <p class="fp-note fp-privacy" id="ft-privacy-note"></p>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+    <script src="/js/zfprobe.js?v=14" defer></script>
+  </body>
+</html>
diff --git a/public/fingerprint-test/index.html b/public/fingerprint-test/index.html
new file mode 100644
index 0000000..6ba3a04
--- /dev/null
+++ b/public/fingerprint-test/index.html
@@ -0,0 +1,162 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta
+      name="description"
+      content="Testez votre empreinte numérique : découvrez à quel point votre navigateur est identifiable, avec un score, des explications et des conseils pour vous protéger. Aucune donnée n'est envoyée ni stockée."
+    />
+    <meta name="robots" content="index, follow" />
+    <title>Test d'empreinte numérique · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/fr/fingerprint-test" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Test d'empreinte numérique · Zektyc" />
+    <meta
+      property="og:description"
+      content="Découvrez à quel point votre navigateur est identifiable, avec un score, des explications et des conseils pour vous protéger."
+    />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/fr/fingerprint-test" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta property="og:locale:alternate" content="en_US" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <link rel="stylesheet" href="/css/zfprobe.css?v=14" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="fp-main" id="main">
+      <section class="fp-hero">
+        <p class="hero-badge">Premier projet Zektyc · 100 % côté client</p>
+        <h1>Test d'empreinte numérique</h1>
+        <p class="fp-sub" id="ft-intro"></p>
+        <div class="fp-actions">
+          <button type="button" class="fp-cta" id="ft-run"></button>
+        </div>
+        <p class="fp-status" id="ft-status"></p>
+      </section>
+
+      <section class="fp-multi fp-hidden" id="ft-multi">
+        <h2 id="ft-multi-title"></h2>
+        <p class="fp-sub" id="ft-multi-intro"></p>
+        <div class="fp-multi-scores">
+          <div class="fp-score-card">
+            <span class="fp-score-val" id="ft-sec-score">—</span>
+            <span class="fp-score-lbl" id="ft-sec-lbl"></span>
+          </div>
+          <div class="fp-score-card">
+            <span class="fp-score-val" id="ft-stab-score">—</span>
+            <span class="fp-score-lbl" id="ft-stab-lbl"></span>
+          </div>
+        </div>
+        <div class="fp-id-cards">
+          <div class="fp-id-card fp-id-card-zfp">
+            <div class="fp-id-card-head">
+              <span class="fp-id-card-badge">ZFP</span>
+              <span class="fp-id-card-subtitle" id="ft-zfp-sub"></span>
+            </div>
+            <div class="fp-id-card-val" id="ft-multi-zfp">—</div>
+            <span class="fp-id-card-status" id="ft-zfp-status"></span>
+            <p class="fp-id-card-desc" id="ft-zfp-desc"></p>
+          </div>
+          <div class="fp-id-card fp-id-card-zpd">
+            <div class="fp-id-card-head">
+              <span class="fp-id-card-badge fp-id-card-badge-dev">ZPD</span>
+              <span class="fp-id-card-subtitle" id="ft-zpd-sub"></span>
+            </div>
+            <div class="fp-id-card-val" id="ft-multi-zpd">—</div>
+            <span class="fp-id-card-status" id="ft-zpd-status"></span>
+            <p class="fp-id-card-desc" id="ft-zpd-desc"></p>
+          </div>
+        </div>
+        <div class="fp-multi-table-wrap">
+          <div class="fp-multi-list" id="ft-multi-table"></div>
+        </div>
+        <div class="fp-protection" id="ft-protection"></div>
+        <div class="fp-reco" id="ft-reco"></div>
+        <div class="fp-actions">
+          <button type="button" class="fp-cta" id="ft-restart"></button>
+        </div>
+      </section>
+
+      <section class="fp-result fp-hidden" id="ft-result">
+        <div class="fp-idcard">
+          <div class="fp-idbox">
+            <div class="fp-idbox-head">
+              <span class="fp-label" id="ft-id-label"></span>
+              <span class="fp-badge fp-badge-browser">Navigateur</span>
+            </div>
+            <div class="fp-id" id="ft-id">—</div>
+            <p class="fp-id-how" id="ft-id-how"></p>
+          </div>
+          <div class="fp-idbox">
+            <div class="fp-idbox-head">
+              <span class="fp-label" id="ft-device-label"></span>
+              <span class="fp-badge fp-badge-device">Appareil</span>
+            </div>
+            <div class="fp-id" id="ft-device-id">—</div>
+            <p class="fp-id-how" id="ft-device-how"></p>
+          </div>
+          <div class="fp-stats">
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-entropy-label"></span>
+              <span class="fp-stat-val" id="ft-bits">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-browser-entropy-label"></span>
+              <span class="fp-stat-val" id="ft-browser-bits">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-device-entropy-label"></span>
+              <span class="fp-stat-val" id="ft-device-bits">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-level-label"></span>
+              <span class="fp-stat-val" id="ft-level">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-device-level-label"></span>
+              <span class="fp-stat-val" id="ft-device-level">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-pop-label"></span>
+              <span class="fp-stat-val" id="ft-pop">—</span>
+            </div>
+            <div class="fp-stat-row">
+              <span class="fp-stat-key" id="ft-score-label"></span>
+              <span class="fp-stat-val" id="ft-score">—</span>
+            </div>
+            <div class="fp-bar"><div id="ft-bar"></div></div>
+            <div class="fp-bar fp-bar-device"><div id="ft-device-bar"></div></div>
+            <p class="fp-meta-note" id="ft-stable"></p>
+            <p class="fp-meta-note" id="ft-device-stable"></p>
+            <p class="fp-meta-note" id="ft-stability-label"></p>
+          </div>
+        </div>
+        <p class="fp-note" id="ft-entropy-note"></p>
+        <p class="fp-note" id="ft-estimated-note"></p>
+      </section>
+
+      <section class="fp-section fp-hidden" id="ft-signals-section">
+        <h2 id="ft-signals-title"></h2>
+        <div class="fp-grid" id="ft-signals"></div>
+      </section>
+
+      <section class="fp-section fp-education">
+        <h2 id="ft-what-title"></h2>
+        <div id="ft-what"></div>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+    <script src="/js/zfprobe.js?v=14" defer></script>
+  </body>
+</html>
diff --git a/public/icons/mastodon.svg b/public/icons/mastodon.svg
new file mode 100644
index 0000000..ef09bb2
--- /dev/null
+++ b/public/icons/mastodon.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><path d="M23.268 5.313c-.35-2.578-2.617-4.61-5.304-5.004C17.51.242 15.792 0 11.813 0h-.03c-3.98 0-4.835.242-5.288.309C3.882.692 1.496 2.518.917 5.127.64 6.412.61 7.837.661 9.143c.074 1.874.088 3.745.26 5.611.118 1.24.325 2.47.62 3.68.55 2.237 2.777 4.098 4.96 4.857 2.336.792 4.849.923 7.256.38.265-.061.527-.132.786-.213.585-.184 1.27-.39 1.774-.753a.057.057 0 0 0 .023-.043v-1.809a.052.052 0 0 0-.02-.041.053.053 0 0 0-.046-.01 20.282 20.282 0 0 1-4.709.545c-2.73 0-3.463-1.284-3.674-1.818a5.593 5.593 0 0 1-.319-1.433.053.053 0 0 1 .066-.054c1.517.363 3.072.546 4.632.546.376 0 .75 0 1.125-.01 1.57-.044 3.224-.124 4.768-.422.038-.008.077-.015.11-.024 2.435-.464 4.753-1.92 4.989-5.604.008-.145.03-1.52.03-1.67.002-.512.167-3.63-.024-5.545zm-3.748 9.195h-2.561V8.29c0-1.309-.55-1.976-1.67-1.976-1.23 0-1.846.79-1.846 2.35v3.403h-2.546V8.663c0-1.56-.617-2.35-1.848-2.35-1.112 0-1.668.668-1.67 1.977v6.218H4.822V8.102c0-1.31.337-2.35 1.011-3.12.696-.77 1.608-1.164 2.74-1.164 1.311 0 2.302.5 2.962 1.498l.638 1.06.638-1.06c.66-.999 1.65-1.498 2.96-1.498 1.13 0 2.043.395 2.74 1.164.675.77 1.012 1.81 1.012 3.12z"/></svg>
diff --git a/public/index.html b/public/index.html
new file mode 100644
index 0000000..e7c258d
--- /dev/null
+++ b/public/index.html
@@ -0,0 +1,371 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta
+      name="description"
+      content="Zektyc défend la vie privée et la sécurité, depuis la France. Sans jargon, sans panique."
+    />
+    <meta name="robots" content="index, follow" />
+    <meta name="google-site-verification" content="N1b0LZMSAZtyfp-g71v7YRCQuEErtqCWp7bcGDZ_Frw" />
+    <title>Zektyc — Vie privée et sécurité, depuis la France</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta
+      property="og:title"
+      content="Zektyc — Vie privée et sécurité, depuis la France"
+    />
+    <meta
+      property="og:description"
+      content="Zektyc défend la vie privée et la sécurité, depuis la France. Sans jargon, sans panique."
+    />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta property="og:locale:alternate" content="en_US" />
+    <link rel="alternate" hreflang="fr" href="https://riricdev.tail5ea5cd.ts.net/" />
+    <link rel="alternate" hreflang="en" href="https://riricdev.tail5ea5cd.ts.net/en/" />
+    <link rel="alternate" hreflang="x-default" href="https://riricdev.tail5ea5cd.ts.net/" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <meta name="twitter:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <script type="application/ld+json">
+      {
+        "@context": "https://schema.org",
+        "@type": "Organization",
+        "name": "Zektyc",
+        "url": "https://riricdev.tail5ea5cd.ts.net/",
+        "logo": "https://riricdev.tail5ea5cd.ts.net/favicon.svg",
+        "email": "riric65@protonmail.com",
+        "address": { "@type": "PostalAddress", "addressCountry": "FR" },
+        "sameAs": ["https://discord.gg/mAXeNf7zUV"]
+      }
+    </script>
+    <script type="application/ld+json">
+      {
+        "@context": "https://schema.org",
+        "@type": "FAQPage",
+        "mainEntity": [
+          {
+            "@type": "Question",
+            "name": "Ce site collecte-t-il mes données ?",
+            "acceptedAnswer": {
+              "@type": "Answer",
+              "text": "Non. Zektyc ne collecte volontairement aucune donnée : pas de compte, pas de formulaire, pas de cookie, pas de tracker, pas de mesure d'audience et pas de boutons de partage. Les seules informations traitées sont les journaux techniques automatiques (adresse IP, date et heure, ressource demandée), conservés quatorze jours maximum à des fins de sécurité, puis supprimés automatiquement."
+            }
+          },
+          {
+            "@type": "Question",
+            "name": "Pourquoi aucun cookie sur ce site ?",
+            "acceptedAnswer": {
+              "@type": "Answer",
+              "text": "Parce que le suivi n'est jamais nécessaire à un site d'information : il ne sert qu'à profiler les visiteurs et à revendre leurs données. Sans cookie, il n'y a ni traçage, ni publicité ciblée, ni consentement à arracher."
+            }
+          },
+          {
+            "@type": "Question",
+            "name": "La vie privée en ligne, c'est vraiment pour tout le monde ?",
+            "acceptedAnswer": {
+              "@type": "Answer",
+              "text": "Oui, et c'est précisément pour cela que Zektyc existe. La sécurité n'est pas réservée aux experts : chacun peut faire des choix simples et efficaces, comme utiliser un navigateur respectueux, choisir des mots de passe forts, activer la double authentification et confier ses mots de passe à un gestionnaire."
+            }
+          },
+          {
+            "@type": "Question",
+            "name": "Que fait Zektyc concrètement ?",
+            "acceptedAnswer": {
+              "@type": "Answer",
+              "text": "Nous aidons les gens à reprendre le contrôle de leurs données, au calme. Nous expliquons les menaces réelles simplement, sans panique ni sensationnalisme, nous recommandons des protections concrètes, testées et faciles à adopter, et nous remettons la vie privée et la sécurité au centre des décisions techniques."
+            }
+          },
+          {
+            "@type": "Question",
+            "name": "Le site est-il sécurisé ?",
+            "acceptedAnswer": {
+              "@type": "Answer",
+              "text": "Oui. Le site n'est accessible qu'en HTTPS, avec des en-têtes de sécurité restrictifs, une limitation du nombre de requêtes par adresse IP et le blocage des chemins sensibles."
+            }
+          },
+          {
+            "@type": "Question",
+            "name": "Que faites-vous des messages que je vous envoie ?",
+            "acceptedAnswer": {
+              "@type": "Answer",
+              "text": "Vos messages servent uniquement à répondre à votre demande. Ils ne sont jamais partagés, jamais utilisés à des fins de marketing et ne sont pas conservés au-delà de la durée nécessaire à l'échange."
+            }
+          },
+          {
+            "@type": "Question",
+            "name": "Comment puis-je vous contacter ?",
+            "acceptedAnswer": {
+              "@type": "Answer",
+              "text": "Par e-mail à riric65@protonmail.com, par Signal à l'identifiant notriric.05, ou via notre serveur Discord officiel."
+            }
+          },
+          {
+            "@type": "Question",
+            "name": "Ce site est-il gratuit ?",
+            "acceptedAnswer": {
+              "@type": "Answer",
+              "text": "Oui. La consultation du site est entièrement gratuite et le restera. Nous ne vendons pas vos données, nous n'affichons aucune publicité et nous ne revendiquons rien d'autre que votre confiance."
+            }
+          }
+        ]
+      }
+    </script>
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg?v=1" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="apple-touch-icon" href="/apple-touch-icon.png" />
+    <link rel="me" href="https://piaille.fr/@zektyc" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+    <script src="/js/i18n.js?v=3" defer></script>
+    <script src="/js/discord.js?v=1" defer></script>
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="site-main" id="main">
+      <section class="hero">
+        <p class="hero-badge" data-i18n="hero.badge">Basé en France · Indépendant</p>
+        <h1>
+          <span data-i18n="hero.title1">La vie privée n'est pas un luxe.</span><br />
+          <span data-i18n="hero.title2">La sécurité non plus.</span>
+        </h1>
+        <p class="hero-sub" data-i18n="hero.sub">
+          Zektyc aide les gens à reprendre le contrôle de leurs données, au
+          calme. On se bat pour la vie privée et la sécurité, sans jargon, sans
+          panique.
+        </p>
+        <div class="hero-actions">
+          <a class="btn btn-primary" href="#contact" data-i18n="hero.cta.contact">Discutons</a>
+          <a class="btn btn-ghost" href="#principes" data-i18n="hero.cta.principes">Découvrir nos principes</a>
+          <a class="btn btn-ghost" rel="me" href="https://piaille.fr/@zektyc">
+            <img src="/icons/mastodon.svg" alt="" width="18" height="18" aria-hidden="true" class="footer-icon" />
+            Mastodon
+          </a>
+        </div>
+      </section>
+
+      <section class="manifesto">
+        <h2 data-i18n="manifesto.title">Pourquoi on fait ça</h2>
+        <p data-i18n="manifesto.text">
+          La surveillance est partout. Chaque clic est tracé, chaque message
+          analysé, chaque donnée revendue. La vie privée n'est pas un luxe :
+          c'est une condition de la liberté. On pense que vos données devraient
+          vous appartenir — à vous, et à personne d'autre. On vulgarise, on
+          dédramatise, et on donne des outils concrets pour reprendre la main,
+          du simple navigateur au serveur personnel. Pas de jargon, pas de
+          panique : notre boulot, c'est de remettre les choses dans le bon sens.
+        </p>
+      </section>
+
+      <section id="projets" class="projects">
+        <h2 data-i18n="projects.title">Nos projets</h2>
+        <p class="projects-intro" data-i18n="projects.intro">
+          On ne parle pas seulement de protection, on la met en pratique.
+          Chaque projet est auto-hébergé et sans collecte de données.
+        </p>
+        <div class="grid-cards">
+          <article class="card">
+            <h3>Fingerprint Test</h3>
+            <p data-i18n="projects.fp.text">
+              Découvrez à quel point votre navigateur vous rend identifiable,
+              avec un score et des explications. Tout est calculé localement,
+              rien n'est envoyé ni stocké.
+            </p>
+            <a class="btn btn-ghost" href="/fingerprint-test" data-lang-path="/fingerprint-test" data-i18n="projects.fp.cta">Tester mon empreinte</a>
+          </article>
+
+        </div>
+      </section>
+
+      <section id="principes" class="values">
+        <h2 data-i18n="values.title">Nos principes</h2>
+        <div class="grid-cards">
+          <article class="card">
+            <h3 data-i18n="values.priv.title">Vie privée</h3>
+            <p data-i18n="values.priv.text">
+              Vos données restent les vôtres, point final. On s'oppose aux
+              trackers, à la surveillance et à la collecte de masse.
+            </p>
+          </article>
+          <article class="card">
+            <h3 data-i18n="values.sec.title">Sécurité</h3>
+            <p data-i18n="values.sec.text">
+              Des protections concrètes, testées et expliquées simplement.
+              Parce que la sécurité, c'est pour tout le monde, pas que pour les
+              experts.
+            </p>
+          </article>
+          <article class="card">
+            <h3 data-i18n="values.trans.title">Transparence</h3>
+            <p data-i18n="values.trans.text">
+              On fait ce qu'on dit, et on dit ce qu'on fait. Pas de promesses
+              vagues, pas de magie noire.
+            </p>
+          </article>
+          <article class="card">
+            <h3 data-i18n="values.fr.title">Fait en France</h3>
+            <p data-i18n="values.fr.text">
+              On est basés en France et on est fiers de le dire. Local,
+              indépendant, humain.
+            </p>
+          </article>
+        </div>
+      </section>
+
+      <section class="tor-banner">
+        <p>
+          <strong>Disponible sur Tor</strong> · 
+          <code>l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion</code>
+        </p>
+      </section>
+
+      <section id="faq" class="faq">
+        <h2 data-i18n="faq.title">Questions fréquentes</h2>
+        <p class="faq-intro" data-i18n="faq.intro">
+          Quelques questions qu'on nous pose souvent, avec des réponses
+          claires. Le principe de base : pas de collecte, pas de traçage, pas de
+          compromis.
+        </p>
+        <div class="faq-list">
+          <article class="faq-item">
+            <h3 data-i18n="faq.q1">Ce site collecte-t-il mes données ?</h3>
+            <p data-i18n="faq.a1">
+              Non. Zektyc ne collecte volontairement aucune donnée : pas de
+              compte, pas de formulaire, pas de cookie, pas de tracker, pas de
+              mesure d'audience et pas de boutons de partage. Les seules
+              informations traitées sont les journaux techniques automatiques
+              (adresse IP, date et heure, ressource demandée), conservés
+              quatorze jours maximum à des fins de sécurité, puis supprimés
+              automatiquement. Notre politique de confidentialité détaille
+              l'ensemble de ces traitements.
+            </p>
+          </article>
+          <article class="faq-item">
+            <h3 data-i18n="faq.q2">Pourquoi aucun cookie sur ce site ?</h3>
+            <p data-i18n="faq.a2">
+              Parce que le suivi n'est jamais nécessaire à un site
+              d'information : il ne sert qu'à profiler les visiteurs et à
+              revendre leurs données. Sans cookie, il n'y a ni traçage, ni
+              publicité ciblée, ni consentement à arracher. C'est notre façon
+              d'appliquer ce que nous défendons chaque jour : la vie privée
+              n'est pas un luxe, c'est un droit fondamental, et il commence par
+              la sobriété technique.
+            </p>
+          </article>
+          <article class="faq-item">
+            <h3 data-i18n="faq.q3">
+              La vie privée en ligne, c'est vraiment pour tout le monde ?
+            </h3>
+            <p data-i18n="faq.a3">
+              Oui, et c'est précisément pour cela que Zektyc existe. La sécurité
+              n'est pas réservée aux experts : chacun peut faire des choix
+              simples et efficaces, comme utiliser un navigateur respectueux,
+              choisir des mots de passe forts, activer la double authentification
+              et confier ses mots de passe à un gestionnaire. Notre rôle est de
+              vous aider à mettre ces protections en place sans jargon et sans
+              vous faire peur.
+            </p>
+          </article>
+          <article class="faq-item">
+            <h3 data-i18n="faq.q4">Que fait Zektyc concrètement ?</h3>
+            <p data-i18n="faq.a4">
+              Nous aidons les gens à reprendre le contrôle de leurs données, au
+              calme. Nous expliquons les menaces réelles simplement, sans
+              panique ni sensationnalisme, nous recommandons des protections
+              concrètes, testées et faciles à adopter, et nous remettons la vie
+              privée et la sécurité au centre des décisions techniques. Nous
+              sommes basés en France, indépendants et humains, et nous mettons
+              en pratique ce que nous conseillons.
+            </p>
+          </article>
+          <article class="faq-item">
+            <h3 data-i18n="faq.q5">Le site est-il sécurisé ?</h3>
+            <p data-i18n="faq.a5">
+              Oui. Le site n'est accessible qu'en HTTPS, avec des en-têtes de
+              sécurité restrictifs, une limitation du nombre de requêtes par
+              adresse IP et le blocage des chemins sensibles. Si vous découvrez
+              une faille, vous pouvez nous la signaler via notre politique de
+              divulgation responsable, publiée dans le fichier standard
+              /.well-known/security.txt, sans risque juridique tant que vous
+              respectez nos conditions de signalement.
+            </p>
+          </article>
+          <article class="faq-item">
+            <h3 data-i18n="faq.q6">
+              Que faites-vous des messages que je vous envoie ?
+            </h3>
+            <p data-i18n="faq.a6">
+              Vos messages servent uniquement à répondre à votre demande. Ils ne
+              sont jamais partagés, jamais utilisés à des fins de marketing et
+              ne sont pas conservés au-delà de la durée nécessaire à l'échange.
+              Les messages transitent par nos prestataires de messagerie
+              (Proton Mail, Signal, Discord), qui ne les traitent que pour les
+              acheminer ; Signal chiffre vos échanges de bout en bout.
+            </p>
+          </article>
+          <article class="faq-item">
+            <h3 data-i18n="faq.q7">Comment puis-je vous contacter ?</h3>
+            <p data-i18n="faq.a7">
+              Par e-mail à riric65@protonmail.com, par Signal à l'identifiant
+              notriric.05, ou via notre serveur Discord officiel. Pour toute
+              communication sensible ou confidentielle, privilégiez l'e-mail ou
+              Signal plutôt que Discord, car ces canaux respectent davantage
+              votre vie privée. Nous répondons dans un délai raisonnable, sans
+              phrases toutes faites.
+            </p>
+          </article>
+          <article class="faq-item">
+            <h3 data-i18n="faq.q8">Ce site est-il gratuit ?</h3>
+            <p data-i18n="faq.a8">
+              Oui. La consultation du site est entièrement gratuite et le
+              restera. Nous ne vendons pas vos données, nous n'affichons aucune
+              publicité et nous ne revendiquons rien d'autre que votre
+              confiance. Si un jour nous proposons des prestations, elles seront
+              clairement présentées et séparées de l'information gratuite que
+              nous publions.
+            </p>
+          </article>
+        </div>
+      </section>
+
+      <section id="contact" class="contact">
+        <h2 data-i18n="contact.title">On parle ?</h2>
+        <p data-i18n="contact.text">
+          Un projet, une question, une inquiétude ? Écris-nous, on répond avec
+          plaisir — et sans phrases toutes faites.
+        </p>
+        <div class="contact-list">
+          <div class="contact-item">
+            <span class="contact-label" data-i18n="contact.signal">Signal</span>
+            <span class="contact-value">notriric.05</span>
+          </div>
+          <div class="contact-item">
+            <span class="contact-label" data-i18n="contact.discord">Discord</span>
+            <a
+              class="contact-value"
+              href="https://discord.gg/mAXeNf7zUV"
+              target="_blank"
+              rel="noopener"
+              >discord.gg/mAXeNf7zUV</a
+            >
+            <span id="discord-presence" class="contact-badge"></span>
+          </div>
+          <div class="contact-item">
+            <span class="contact-label" data-i18n="contact.email">E-mail</span>
+            <a class="contact-value" href="mailto:riric65@protonmail.com"
+              >riric65@protonmail.com</a
+            >
+          </div>
+        </div>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+  </body>
+</html>
diff --git a/public/js/components.js b/public/js/components.js
new file mode 100644
index 0000000..4fa97c2
--- /dev/null
+++ b/public/js/components.js
@@ -0,0 +1,229 @@
+(function () {
+  var SVG = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 16" role="presentation" focusable="false"><path d="M5 4h22L5 12h22" fill="none" stroke="currentColor" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/></svg>';
+  var BRAND = '<span class="brand-mark" aria-hidden="true">' + SVG + '</span><span class="brand-name">Zektyc</span>';
+
+  var SUN = '<svg class="icon-sun" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg>';
+  var MOON = '<svg class="icon-moon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"/></svg>';
+
+  var THEME_BTN = '<button type="button" class="theme-btn" aria-label="Theme">' + MOON + SUN + '</button>';
+
+  function path() { return location.pathname; }
+  function lang() { return /^\/en(\/|$)/.test(path()) ? 'en' : 'fr'; }
+  function isHome() { var p = path(); return p === '/' || p === '/index.html' || p === '/en/' || p === '/en/index.html'; }
+  function isFpTest() { return /\/fingerprint-test/.test(path()); }
+  function isSocial() { return /\/social/.test(path()); }
+
+  function frLink() {
+    var p = path();
+    if (p === '/en/') return '/';
+    var m = p.match(/^(\/[^/]+)\/en\/?$/);
+    if (m) return m[1] + '/';
+    return p;
+  }
+
+  function enLink() {
+    var p = path();
+    if (p === '/' || p === '/index.html') return '/en/';
+    if (/\/en\/?$/.test(p)) return p;
+    return p.replace(/\/?$/, '/en/');
+  }
+
+  function buildHeader() {
+    var h = lang();
+    var skip = h === 'fr' ? 'Aller au contenu' : 'Skip to content';
+    var html = '<a class="skip-link" href="#main">' + skip + '</a>';
+    html += '<a class="brand" href="/">' + BRAND + '</a>';
+    html += '<input type="checkbox" id="nav-toggle" class="nav-toggle-input" />';
+    html += '<label for="nav-toggle" class="nav-burger" aria-label="Menu">';
+    html += '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 6h16M4 12h16M4 18h16"/></svg>';
+    html += '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"/></svg>';
+    html += '</label>';
+
+    if (isSocial()) {
+      html += '<nav id="nav" class="site-nav" aria-label="Navigation">';
+      html += '<div class="lang-switch" role="group" aria-label="Langue / Language">';
+      html += '<button type="button" data-lang="fr" class="lang-btn' + (h === 'fr' ? ' active' : '') + '">' + (h === 'fr' ? '<strong>FR</strong>' : 'FR') + '</button>';
+      html += '<button type="button" data-lang="en" class="lang-btn' + (h === 'en' ? ' active' : '') + '">' + (h === 'en' ? '<strong>EN</strong>' : 'EN') + '</button>';
+      html += '</div>';
+      html += THEME_BTN;
+      html += '</nav>';
+    } else {
+      html += '<nav class="site-nav" aria-label="Navigation">';
+
+      html += '<a href="/blog" data-lang-path="/blog" data-i18n="nav.blog">Blog</a>';
+      html += '<a href="/projets" data-lang-path="/projets" data-i18n="nav.projects">Projets</a>';
+      html += '<a href="/equipe" data-lang-path="/equipe" data-i18n="nav.team">\u00c9quipe</a>';
+      if (isHome()) {
+        html += '<a href="#principes" data-i18n="nav.principes">Nos principes</a>';
+        html += '<a href="#faq" data-i18n="nav.faq">FAQ</a>';
+        html += '<a href="#contact" data-i18n="nav.contact">Contact</a>';
+      }
+
+      html += '<div class="lang-switch" role="group" aria-label="Langue / Language">';
+      html += '<button type="button" data-lang="fr" class="lang-btn' + (h === 'fr' ? ' active' : '') + '">' + (h === 'fr' ? '<strong>FR</strong>' : 'FR') + '</button>';
+      html += '<button type="button" data-lang="en" class="lang-btn' + (h === 'en' ? ' active' : '') + '">' + (h === 'en' ? '<strong>EN</strong>' : 'EN') + '</button>';
+      html += '</div>';
+      html += THEME_BTN;
+      html += '</nav>';
+    }
+
+    return '<header class="site-header">' + html + '</header>';
+  }
+
+  function buildFooter() {
+    var h = lang();
+    var tos = h === 'fr' ? "Conditions d\u2019utilisation" : 'Terms of Service';
+    var priv = h === 'fr' ? 'Confidentialit\u00e9' : 'Privacy';
+    var note = h === 'fr' ? 'Ce site ne collecte rien. Aucun cookie, aucun tracker.' : 'This site collects nothing. No cookies, no trackers.';
+    var tosHref = h === 'fr' ? '/tos' : '/en/tos';
+    var privHref = h === 'fr' ? '/privacy-policy' : '/en/privacy-policy';
+
+    var html = '';
+    if (isSocial()) {
+      var backText = h === 'fr' ? 'Retour au site' : 'Back to site';
+      html += '<p><a href="/" class="footer-back">' + backText + ' \u2190</a></p>';
+    }
+    html += '<p>Zektyc \u00b7 France</p>';
+    html += '<p class="footer-note">' + note + '</p>';
+    html += '<nav class="footer-nav" aria-label="Legal">';
+    html += '<a rel="me" href="https://piaille.fr/@zektyc"><img src="/icons/mastodon.svg" alt="" width="14" height="14" class="footer-icon" /> Mastodon</a>';
+    html += '<span class="footer-sep" aria-hidden="true">\u00b7</span>';
+    html += '<a href="' + tosHref + '">' + tos + '</a>';
+    html += '<span class="footer-sep" aria-hidden="true">\u00b7</span>';
+    html += '<a href="' + privHref + '">' + priv + '</a>';
+    html += '<span class="footer-sep" aria-hidden="true">\u00b7</span>';
+    html += '<a href="/docs/maxspeed">API</a>';
+    html += '<span class="footer-sep" aria-hidden="true">\u00b7</span>';
+    html += '<a href="/.well-known/security.txt">security.txt</a>';
+    html += '<span class="footer-sep" aria-hidden="true">\u00b7</span>';
+    html += '<a href="http://l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion">Tor</a>';
+    html += '</nav>';
+    return '<footer class="site-footer">' + html + '</footer>';
+  }
+
+  function inject() {
+    var hs = document.getElementById('h');
+    var fs = document.getElementById('f');
+    if (hs) hs.outerHTML = buildHeader();
+    if (fs) fs.outerHTML = buildFooter();
+
+    var nav = document.getElementById('nav-toggle');
+    if (nav) {
+      document.addEventListener('click', function (e) {
+        if (e.target.closest && e.target.closest('.site-nav')) nav.checked = false;
+      });
+    }
+  }
+
+  function isTorBrowser() {
+    var dbg = {
+      hostname: location.hostname,
+      userAgent: navigator.userAgent,
+      hasTorSensor: !!window.TorSensor,
+      uaMatch: /TorBrowser|Tor\/|Tor Project/i.test(navigator.userAgent),
+      timezoneOffset: new Date().getTimezoneOffset(),
+      gmt: (new Date().getTimezoneOffset() === 0),
+      screenW: window.screen && window.screen.width,
+      screenH: window.screen && window.screen.height,
+      innerW: window.innerWidth,
+      innerH: window.innerHeight,
+      letterboxed: !!(window.screen &&
+        window.screen.width === window.innerWidth &&
+        window.screen.height === window.innerHeight),
+      pluginCount: (navigator.plugins && navigator.plugins.length) || 0,
+      noPlugins: !navigator.plugins || navigator.plugins.length === 0,
+      vendor: navigator.vendor
+    };
+
+    if (isOnion()) {
+      dbg.result = 'onion:' + location.hostname;
+      console.log('[TorToast] on .onion, skip', dbg);
+      return true;
+    }
+
+    if (dbg.hasTorSensor) {
+      dbg.result = 'TorSensor';
+      console.log('[TorToast] detected via TorSensor', dbg);
+      return true;
+    }
+
+    if (dbg.uaMatch) {
+      dbg.result = 'userAgent';
+      console.log('[TorToast] detected via userAgent', dbg);
+      return true;
+    }
+
+    if (dbg.gmt && dbg.letterboxed) {
+      dbg.result = 'gmt+letterbox';
+      console.log('[TorToast] detected via gmt+letterbox', dbg);
+      return true;
+    }
+
+    if (dbg.gmt && dbg.letterboxed && dbg.noPlugins) {
+      dbg.result = 'gmt+letterbox+noPlugins';
+      console.log('[TorToast] detected via gmt+letterbox+noPlugins', dbg);
+      return true;
+    }
+
+    if (dbg.vendor === '' && dbg.gmt && dbg.noPlugins) {
+      dbg.result = 'vendorEmpty+gmt+noPlugins';
+      console.log('[TorToast] detected via vendorEmpty+gmt+noPlugins', dbg);
+      return true;
+    }
+
+    if (dbg.gmt && dbg.letterboxed && dbg.vendor === '') {
+      dbg.result = 'gmt+letterbox+vendorEmpty';
+      console.log('[TorToast] detected via gmt+letterbox+vendorEmpty', dbg);
+      return true;
+    }
+
+    dbg.result = 'NOT tor';
+    console.log('[TorToast] not detected as Tor', dbg);
+    return false;
+  }
+
+  function isOnion() {
+    return location.hostname.indexOf('.onion') !== -1;
+  }
+
+  function showTorToast() {
+    if (!isTorBrowser() || isOnion()) return;
+
+    var onionBase = 'http://l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion';
+    var path = location.pathname + location.search + location.hash;
+    var onionUrl = onionBase + path;
+
+    var toast = document.createElement('div');
+    toast.className = 'tor-toast';
+    toast.setAttribute('role', 'alert');
+
+    var h = lang();
+    var msg = h === 'fr'
+      ? 'Vous utilisez Tor. Acc\u00e9dez \u00e0 la version .onion pour plus de s\u00e9curit\u00e9.'
+      : 'You are using Tor. Access the .onion version for better security.';
+
+    toast.innerHTML =
+      '<p>' + msg + '</p>' +
+      '<a href="' + onionUrl + '" class="tor-toast-btn">' + (h === 'fr' ? 'Ouvrir en .onion' : 'Open .onion') + '</a>' +
+      '<button type="button" class="tor-toast-close" aria-label="Fermer">&times;</button>';
+
+    document.body.appendChild(toast);
+
+    toast.querySelector('.tor-toast-close').addEventListener('click', function () {
+      toast.remove();
+    });
+
+    setTimeout(function () { toast.remove(); }, 30000);
+  }
+
+  function boot() {
+    inject();
+    showTorToast();
+  }
+
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', boot);
+  } else {
+    boot();
+  }
+})();
diff --git a/public/js/discord.js b/public/js/discord.js
new file mode 100644
index 0000000..851ced8
--- /dev/null
+++ b/public/js/discord.js
@@ -0,0 +1,39 @@
+(function () {
+  var el = document.getElementById("discord-presence")
+  if (!el) return
+
+  function render() {
+    var lang = document.documentElement.lang
+    var n = parseInt(el.getAttribute("data-count") || "0", 10)
+    if (!(n > 0)) return
+    var text =
+      n === 1
+        ? lang === "fr"
+          ? "1 membre en ligne"
+          : "1 member online"
+        : lang === "fr"
+          ? n + " membres en ligne"
+          : n + " members online"
+    el.textContent = text
+    el.classList.add("is-online")
+  }
+
+  fetch("/api/discord")
+    .then(function (res) {
+      return res.ok ? res.json() : null
+    })
+    .then(function (data) {
+      if (data && typeof data.presence_count === "number") {
+        el.setAttribute("data-count", String(data.presence_count))
+      }
+      render()
+    })
+    .catch(function () {
+      el.classList.remove("is-online")
+    })
+
+  document.addEventListener("click", function (e) {
+    var btn = e.target.closest ? e.target.closest("[data-lang]") : null
+    if (btn) render()
+  })
+})()
diff --git a/public/js/i18n.js b/public/js/i18n.js
new file mode 100644
index 0000000..3b8b231
--- /dev/null
+++ b/public/js/i18n.js
@@ -0,0 +1,141 @@
+(function () {
+  var STORAGE_KEY = "zektyc-lang"
+  var DEFAULT_LANG = "fr"
+  var translations = {}
+
+  function urlLang() {
+    var path = window.location.pathname
+    if (path === "/en" || path.indexOf("/en/") === 0) return "en"
+    if (path === "/fr" || path.indexOf("/fr/") === 0) return "fr"
+    return null
+  }
+
+  function detect() {
+    var forced = urlLang()
+    if (forced) return forced
+
+    try {
+      var stored = localStorage.getItem(STORAGE_KEY)
+      if (stored && translations[stored]) return stored
+    } catch (e) {}
+
+    var candidates = []
+    if (navigator.languages && navigator.languages.length) {
+      candidates = candidates.concat(navigator.languages)
+    }
+    if (navigator.language) candidates.push(navigator.language)
+    if (navigator.userLanguage) candidates.push(navigator.userLanguage)
+
+    for (var i = 0; i < candidates.length; i++) {
+      var raw = String(candidates[i] || "").trim().toLowerCase()
+      if (!raw) continue
+      if (raw.indexOf("en") === 0) return "en"
+      if (raw.indexOf("fr") === 0) return "fr"
+    }
+    return DEFAULT_LANG
+  }
+
+  function apply(lang) {
+    var dict = translations[lang]
+    if (!dict) return
+
+    document.documentElement.lang = lang
+
+    if (dict["meta.title"]) document.title = dict["meta.title"]
+    var desc = document.querySelector('meta[name="description"]')
+    if (desc && dict["meta.description"]) {
+      desc.setAttribute("content", dict["meta.description"])
+    }
+    var ogTitle = document.querySelector('meta[property="og:title"]')
+    if (ogTitle && dict["meta.title"]) {
+      ogTitle.setAttribute("content", dict["meta.title"])
+    }
+    var ogDesc = document.querySelector('meta[property="og:description"]')
+    if (ogDesc && dict["meta.description"]) {
+      ogDesc.setAttribute("content", dict["meta.description"])
+    }
+
+    var nodes = document.querySelectorAll("[data-i18n]")
+    for (var i = 0; i < nodes.length; i++) {
+      var key = nodes[i].getAttribute("data-i18n")
+      if (dict[key] !== undefined) nodes[i].textContent = dict[key]
+    }
+
+    var btns = document.querySelectorAll("[data-lang]")
+    for (var j = 0; j < btns.length; j++) {
+      btns[j].classList.toggle(
+        "active",
+        btns[j].getAttribute("data-lang") === lang
+      )
+    }
+
+    var langLinks = document.querySelectorAll("[data-lang-path]")
+    for (var k = 0; k < langLinks.length; k++) {
+      langLinks[k].setAttribute(
+        "href",
+        "/" + lang + langLinks[k].getAttribute("data-lang-path")
+      )
+    }
+  }
+
+  fetch("/data/i18n.json", { cache: "no-cache" })
+    .then(function (res) {
+      if (!res.ok) throw new Error("status " + res.status)
+      return res.json()
+    })
+    .then(function (data) {
+      if (data && typeof data === "object") translations = data
+    })
+    .catch(function (e) {
+      if (window.console && console.warn) {
+        console.warn("[i18n] impossible de charger les traductions:", e)
+      }
+    })
+    .then(function () {
+      var detected = detect()
+      if (window.console && console.info) {
+        console.info(
+          "[i18n] langue détectée:",
+          detected,
+          "| navigator.language:",
+          navigator.language,
+          "| navigator.languages:",
+          navigator.languages
+        )
+      }
+      apply(detected)
+
+      document.addEventListener("click", function (e) {
+        var btn = e.target.closest ? e.target.closest("[data-lang]") : null
+        if (!btn) return
+        var lang = btn.getAttribute("data-lang")
+        if (!translations[lang]) return
+        try {
+          localStorage.setItem(STORAGE_KEY, lang)
+        } catch (err) {}
+        apply(lang)
+
+        var currentPath = window.location.pathname
+        var isHome = currentPath === "/" || currentPath === "/index.html" || currentPath === "/en/" || currentPath === "/en/index.html"
+        if (isHome) {
+          var newUrl = lang === "fr" ? "/" : "/en/"
+          if (currentPath !== newUrl) history.pushState(null, "", newUrl)
+          return
+        }
+
+        var target = "/" + lang + "/" + (window.location.hash || "")
+        if (window.location.pathname !== "/" + lang + "/") {
+          window.location.href = target
+        }
+      })
+
+      var navToggle = document.getElementById("nav-toggle")
+      if (navToggle) {
+        document.addEventListener("click", function (e) {
+          if (e.target.closest && e.target.closest(".site-nav")) {
+            navToggle.checked = false
+          }
+        })
+      }
+    })
+})()
diff --git a/public/js/legal-lang.js b/public/js/legal-lang.js
new file mode 100644
index 0000000..a8101ff
--- /dev/null
+++ b/public/js/legal-lang.js
@@ -0,0 +1,10 @@
+(function () {
+  var lang = document.documentElement.lang === "en" ? "en" : "fr"
+  var links = document.querySelectorAll("[data-lang-path]")
+  for (var i = 0; i < links.length; i++) {
+    links[i].setAttribute(
+      "href",
+      "/" + lang + links[i].getAttribute("data-lang-path")
+    )
+  }
+})()
diff --git a/public/js/social-auth.js b/public/js/social-auth.js
new file mode 100644
index 0000000..53713e0
--- /dev/null
+++ b/public/js/social-auth.js
@@ -0,0 +1,2 @@
+// Zektyc Social — Auth views (moved to social-views.js)
+// This file is kept for backward compatibility but functions are now in social-views.js
diff --git a/public/js/social-core.js b/public/js/social-core.js
new file mode 100644
index 0000000..60541f9
--- /dev/null
+++ b/public/js/social-core.js
@@ -0,0 +1,554 @@
+// Zektyc Social — Core v4 (CSP-safe)
+window.ZS = {
+  user: null,
+  view: "feed",
+  viewData: null,
+  lang: document.documentElement.lang === "en" ? "en" : "fr",
+  _navOpen: false,
+  _unreadNotifs: 0,
+  _unreadMessages: 0,
+
+  icons: {
+    home: '<svg viewBox="0 0 24 24"><path d="M3 9.5L12 3l9 6.5V20a1 1 0 01-1 1H4a1 1 0 01-1-1V9.5z"/><polyline points="9 21 9 12 15 12 15 21"/></svg>',
+    users: '<svg viewBox="0 0 24 24"><path d="M17 21v-2a4 4 0 00-4-4H5a4 4 0 00-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M23 21v-2a4 4 0 00-3-3.87"/><path d="M16 3.13a4 4 0 010 7.75"/></svg>',
+    mail: '<svg viewBox="0 0 24 24"><rect x="2" y="4" width="20" height="16" rx="2"/><polyline points="22 6 12 13 2 6"/></svg>',
+    bell: '<svg viewBox="0 0 24 24"><path d="M18 8A6 6 0 006 8c0 7-3 9-3 9h18s-3-2-3-9"/><path d="M13.73 21a2 2 0 01-3.46 0"/></svg>',
+    user: '<svg viewBox="0 0 24 24"><path d="M20 21v-2a4 4 0 00-4-4H8a4 4 0 00-4 4v2"/><circle cx="12" cy="7" r="4"/></svg>',
+    shield: '<svg viewBox="0 0 24 24"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/></svg>',
+    search: '<svg viewBox="0 0 24 24"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>',
+    pen: '<svg viewBox="0 0 24 24"><path d="M12 20h9"/><path d="M16.5 3.5a2.121 2.121 0 013 3L7 19l-4 1 1-4L16.5 3.5z"/></svg>',
+    heart: '<svg viewBox="0 0 24 24"><path d="M20.84 4.61a5.5 5.5 0 00-7.78 0L12 5.67l-1.06-1.06a5.5 5.5 0 00-7.78 7.78l1.06 1.06L12 21.23l7.78-7.78 1.06-1.06a5.5 5.5 0 000-7.78z"/></svg>',
+    heartFilled: '<svg viewBox="0 0 24 24"><path d="M20.84 4.61a5.5 5.5 0 00-7.78 0L12 5.67l-1.06-1.06a5.5 5.5 0 00-7.78 7.78l1.06 1.06L12 21.23l7.78-7.78 1.06-1.06a5.5 5.5 0 000-7.78z" fill="currentColor"/></svg>',
+    comment: '<svg viewBox="0 0 24 24"><path d="M21 15a2 2 0 01-2 2H7l-4 4V5a2 2 0 012-2h14a2 2 0 012 2z"/></svg>',
+    note: '<svg viewBox="0 0 24 24"><path d="M14 2H6a2 2 0 00-2 2v16a2 2 0 002 2h12a2 2 0 002-2V8z"/><polyline points="14 2 14 8 20 8"/><line x1="16" y1="13" x2="8" y2="13"/><line x1="16" y1="17" x2="8" y2="17"/></svg>',
+    flag: '<svg viewBox="0 0 24 24"><path d="M4 15s1-1 4-1 5 2 8 2 4-1 4-1V3s-1 1-4 1-5-2-8-2-4 1-4 1z"/><line x1="4" y1="22" x2="4" y2="15"/></svg>',
+    check: '<svg viewBox="0 0 24 24"><polyline points="20 6 9 17 4 12"/></svg>',
+    verifiedBlue: '<svg viewBox="0 0 24 24"><path d="M9 12l2 2 4-4" fill="none" stroke="#1d9bf0" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"/><circle cx="12" cy="12" r="10" fill="none" stroke="#1d9bf0" stroke-width="2"/></svg>',
+    verifiedGold: '<svg viewBox="0 0 24 24"><path d="M9 12l2 2 4-4" fill="none" stroke="#f5a623" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"/><circle cx="12" cy="12" r="10" fill="none" stroke="#f5a623" stroke-width="2"/></svg>',
+    close: '<svg viewBox="0 0 24 24"><line x1="18" y1="6" x2="6" y2="18"/><line x1="6" y1="6" x2="18" y2="18"/></svg>',
+    arrowLeft: '<svg viewBox="0 0 24 24"><line x1="19" y1="12" x2="5" y2="12"/><polyline points="12 19 5 12 12 5"/></svg>',
+    arrowRight: '<svg viewBox="0 0 24 24"><line x1="5" y1="12" x2="19" y2="12"/><polyline points="12 5 19 12 12 19"/></svg>',
+    star: '<svg viewBox="0 0 24 24"><polygon points="12 2 15.09 8.26 22 9.27 17 14.14 18.18 21.02 12 17.77 5.82 21.02 7 14.14 2 9.27 8.91 8.26 12 2"/></svg>',
+    lock: '<svg viewBox="0 0 24 24"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0110 0v4"/></svg>',
+    globe: '<svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="10"/><line x1="2" y1="12" x2="22" y2="12"/><path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10 15.3 15.3 0 01-4-10 15.3 15.3 0 014-10z"/></svg>',
+    settings: '<svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="3"/><path d="M19.4 15a1.65 1.65 0 00.33 1.82l.06.06a2 2 0 010 2.83 2 2 0 01-2.83 0l-.06-.06a1.65 1.65 0 00-1.82-.33 1.65 1.65 0 00-1 1.51V21a2 2 0 01-4 0v-.09A1.65 1.65 0 009 19.4a1.65 1.65 0 00-1.82.33l-.06.06a2 2 0 01-2.83-2.83l.06-.06A1.65 1.65 0 004.68 15a1.65 1.65 0 00-1.51-1H3a2 2 0 010-4h.09A1.65 1.65 0 004.6 9a1.65 1.65 0 00-.33-1.82l-.06-.06a2 2 0 012.83-2.83l.06.06A1.65 1.65 0 009 4.68a1.65 1.65 0 001-1.51V3a2 2 0 014 0v.09a1.65 1.65 0 001 1.51 1.65 1.65 0 001.82-.33l.06-.06a2 2 0 012.83 2.83l-.06.06A1.65 1.65 0 0019.4 9a1.65 1.65 0 001.51 1H21a2 2 0 010 4h-.09a1.65 1.65 0 00-1.51 1z"/></svg>',
+    logout: '<svg viewBox="0 0 24 24"><path d="M9 21H5a2 2 0 01-2-2V5a2 2 0 012-2h4"/><polyline points="16 17 21 12 16 7"/><line x1="21" y1="12" x2="9" y2="12"/></svg>',
+    menu: '<svg viewBox="0 0 24 24"><line x1="3" y1="12" x2="21" y2="12"/><line x1="3" y1="6" x2="21" y2="6"/><line x1="3" y1="18" x2="21" y2="18"/></svg>',
+    plus: '<svg viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>',
+    send: '<svg viewBox="0 0 24 24"><line x1="22" y1="2" x2="11" y2="13"/><polygon points="22 2 15 22 11 13 2 9 22 2"/></svg>',
+    trash: '<svg viewBox="0 0 24 24"><polyline points="3 6 5 6 21 6"/><path d="M19 6v14a2 2 0 01-2 2H7a2 2 0 01-2-2V6m3 0V4a2 2 0 012-2h4a2 2 0 012 2v2"/></svg>',
+    reply: '<svg viewBox="0 0 24 24"><polyline points="9 17 4 12 9 7"/><path d="M20 18v-2a4 4 0 00-4-4H4"/></svg>',
+    user: '<svg viewBox="0 0 24 24"><path d="M20 21v-2a4 4 0 00-4-4H8a4 4 0 00-4 4v2"/><circle cx="12" cy="7" r="4"/></svg>',
+  },
+
+  _updateSEO: function(title, desc, url) {
+    if (title) document.title = title;
+    var md = document.querySelector('meta[name="description"]');
+    if (md && desc) md.content = desc;
+    var og = document.querySelector('meta[property="og:title"]');
+    if (og && title) og.content = title;
+    var ogd = document.querySelector('meta[property="og:description"]');
+    if (ogd && desc) ogd.content = desc;
+    var ogu = document.querySelector('meta[property="og:url"]');
+    if (ogu && url) ogu.content = url;
+  },
+
+  icon(name, cls) {
+    var svg = this.icons[name] || '';
+    if (cls) return '<span class="social-icon ' + cls + '">' + svg + '</span>';
+    return '<span class="social-icon">' + svg + '</span>';
+  },
+
+  // ── API ──
+  async api(method, path, body) {
+    var opts = { method: method, credentials: "same-origin" };
+    if (body instanceof FormData) {
+      opts.body = body;
+    } else if (body) {
+      opts.headers = { "Content-Type": "application/json" };
+      opts.body = JSON.stringify(body);
+    }
+    try { var res = await fetch(path, opts); return res.json(); }
+    catch (e) { return { error: "Erreur réseau" }; }
+  },
+
+  esc(s) {
+    if (!s) return "";
+    var d = document.createElement("div");
+    d.textContent = s;
+    return d.innerHTML;
+  },
+
+  navigate(view, data) {
+    this.view = view;
+    this.viewData = data || null;
+    var basePath = location.pathname.replace(/\/(profile|post|chat|settings|notifications|community|mod|messages)\/?.*$/, "").replace(/\/$/, "");
+    var newPath = basePath;
+    if (view === "profile-view" && data) newPath += "/profile/" + encodeURIComponent(data);
+    else if (view === "chat" && data) newPath += "/chat/" + encodeURIComponent(data);
+    else if (view === "post" && data) newPath += "/post/" + encodeURIComponent(data);
+    else if (view !== "feed") newPath += "/" + view;
+    if (location.pathname !== newPath || location.hash) {
+      history.pushState({ view: view, data: data }, "", newPath);
+    }
+    window.scrollTo(0, 0);
+    if (window._socialRender) window._socialRender();
+  },
+
+  _parsePath() {
+    var path = location.pathname;
+    var profileMatch = path.match(/\/social\/profile\/([a-zA-Z0-9_]+)/);
+    if (profileMatch) return { view: "profile-view", data: profileMatch[1] };
+    var chatMatch = path.match(/\/social\/chat\/([a-zA-Z0-9_]+)/);
+    if (chatMatch) return { view: "chat", data: chatMatch[1] };
+    var postMatch = path.match(/\/social\/post\/(\d+)/);
+    if (postMatch) return { view: "post", data: postMatch[1] };
+    var viewMatch = path.match(/\/social\/(settings|notifications|community|mod|messages|login|signup)/);
+    if (viewMatch) return { view: viewMatch[1], data: null };
+    var hashView = location.hash.replace(/^#\/?/, "");
+    if (hashView) {
+      var parts = hashView.split("/");
+      return { view: parts[0], data: parts[1] ? decodeURIComponent(parts[1]) : null };
+    }
+    return { view: "feed", data: null };
+  },
+
+  t(fr, en) { return this.lang === "fr" ? fr : en; },
+
+  // ── Layout shell ──
+  renderShell(sidebarLeft, mainContent, sidebarRight) {
+    var header = document.getElementById("social-header");
+    if (header) header.innerHTML = this._buildHeader();
+
+    var layout = document.getElementById("social-layout");
+    if (!layout) return;
+
+    var left = sidebarLeft != null ? sidebarLeft : this._buildSidebarLeft();
+    var right = sidebarRight != null ? sidebarRight : this._buildSidebarRight();
+
+    layout.innerHTML =
+      '<aside class="social-sidebar-left">' + left + '</aside>' +
+      '<section class="social-main" id="social-main">' + (typeof mainContent === "string" ? mainContent : "") + '</section>' +
+      '<aside class="social-sidebar-right">' + right + '</aside>';
+
+    var navEl = document.getElementById("socialHeaderNav");
+    if (navEl) navEl.innerHTML = this._buildNavLinks();
+
+    if (typeof _applyAvatarStyles === "function") _applyAvatarStyles();
+  },
+
+  _buildHeader() {
+    return '' +
+      '<a href="#" class="social-logo" data-action="navFeed"><img src="/favicon.svg" alt="Zektyc" class="social-logo-img"> Zektyc Social</a>' +
+      '<div class="social-header-search">' +
+        '<span class="social-header-search-icon">' + this.icon("search") + '</span>' +
+        '<input type="text" placeholder="' + (this.lang === "fr" ? "Rechercher" : "Search") + '" id="socialSearchInput" data-key="Enter" data-key-action="doSearch">' +
+      '</div>' +
+      '<nav class="social-header-nav" id="socialHeaderNav">' + this._buildNavLinks() + '</nav>' +
+      (this.user
+        ? '<div class="social-header-user"><div class="social-header-avatar" data-action="navProfile">' + this.esc(this.user.username).charAt(0).toUpperCase() + '</div></div>'
+        : '') +
+      '<button class="social-mobile-toggle" data-action="toggleMobileNav">' + this.icon("menu") + '</button>';
+  },
+
+  _buildNavLinks() {
+    var L = this.lang;
+    var v = this.view;
+    var self = this;
+    function link(view, iconName, label, badge) {
+      var cls = v === view ? " nav-active" : "";
+      return '<a href="#" data-action="nav" data-arg1="' + view + '" class="' + cls + '">' +
+        self.icon(iconName) + '<span>' + label + '</span>' +
+        (badge > 0 ? '<span class="nav-badge">' + badge + '</span>' : '') + '</a>';
+    }
+
+    var html = "";
+    if (this.user) {
+      html = link("feed", "home", L ? "Accueil" : "Home", 0) +
+        link("community", "users", L ? "Communauté" : "Community", 0) +
+        link("messages", "mail", L ? "Messages" : "Messages", this._unreadMessages) +
+        link("notifications", "bell", L ? "Alertes" : "Alerts", this._unreadNotifs) +
+        link("profile", "user", L ? "Profil" : "Profile", 0);
+      if (this.user.role === "admin" || this.user.role === "moderator") {
+        html += link("mod", "shield", L ? "Modération" : "Mod", 0);
+      }
+      html += '<a href="#" data-action="logout" title="' + (L ? "Déconnexion" : "Logout") + '">' + this.icon("logout") + '</a>';
+    } else {
+      html = link("feed", "home", L ? "Accueil" : "Home", 0) +
+        '<a href="#" data-action="nav" data-arg1="login" class="' + (v === "login" ? " nav-active" : "") + '">' +
+        this.icon("arrowRight") + '<span>' + (L ? "Connexion" : "Login") + '</span></a>' +
+        '<a href="#" data-action="nav" data-arg1="signup" class="' + (v === "signup" ? " nav-active" : "") + '">' +
+        this.icon("star") + '<span>' + (L ? "Inscription" : "Sign up") + '</span></a>';
+    }
+    return html;
+  },
+
+  _buildSidebarLeft() {
+    var L = this.lang;
+    var v = this.view;
+    var self = this;
+    var html = "";
+
+    if (this.user) {
+      html += '<div class="sidebar-profile" data-action="navProfile">' +
+        '<div class="sidebar-profile-avatar">' +
+        (this.user.avatarUrl ? '<img src="' + this.esc(this.user.avatarUrl) + '" alt="' + this.esc(this.user.username) + '" loading="lazy">' : this.esc(this.user.username).charAt(0).toUpperCase()) +
+        '</div>' +
+        '<div><div class="sidebar-profile-name">' + this.esc(this.user.username) + '</div>' +
+        '<div class="sidebar-profile-handle">@' + this.esc(this.user.username) + '</div></div></div>';
+    }
+
+    function navLink(view, iconName, label, badge) {
+      var cls = v === view ? " active" : "";
+      return '<a href="#" class="sidebar-nav-link' + cls + '" data-action="nav" data-arg1="' + view + '">' +
+        self.icon(iconName) +
+        '<span class="sidebar-nav-label">' + label + '</span>' +
+        (badge > 0 ? '<span class="sidebar-nav-badge">' + badge + '</span>' : '') + '</a>';
+    }
+
+    if (this.user) {
+      html += '<div class="mt-16">' +
+        navLink("feed", "home", L ? "Fil d'actualité" : "Feed", 0) +
+        navLink("community", "users", L ? "Communauté" : "Community", 0) +
+        navLink("messages", "mail", L ? "Messages" : "Messages", this._unreadMessages) +
+        navLink("notifications", "bell", L ? "Alertes" : "Alerts", this._unreadNotifs) +
+        navLink("profile", "user", L ? "Mon profil" : "My profile", 0) +
+        (this.user.role === "admin" || this.user.role === "moderator" ? navLink("mod", "shield", L ? "Modération" : "Moderation", 0) : '') +
+        '</div>';
+    } else {
+      html += '<div class="mt-16">' +
+        navLink("login", "arrowRight", L ? "Se connecter" : "Log in", 0) +
+        navLink("signup", "star", L ? "S'inscrire" : "Sign up", 0) + '</div>';
+    }
+
+    html += '<div class="sidebar-footer mt-24"><a href="/tos">CGU</a> · <a href="/privacy-policy">' + (L ? "Confidentialité" : "Privacy") + '</a><br>© 2025 Zektyc</div>';
+    return html;
+  },
+
+  _buildSidebarRight() {
+    var L = this.lang;
+    return '<div class="sidebar-widget"><h3>' + (L ? "À propos" : "About") + '</h3>' +
+      '<p class="text-sm text-muted lh-15">' +
+      (L ? "Réseau social respectueux de la vie privée. Pas d'algorithme, pas de pub, pas de tracking."
+        : "Privacy-respecting social network. No algorithm, no ads, no tracking.") + '</p></div>';
+  },
+
+  _renderMain(html) {
+    var el = document.getElementById("social-main");
+    if (el) el.innerHTML = html;
+  },
+
+  toggleMobileNav() {
+    var nav = document.getElementById("socialHeaderNav");
+    if (!nav) return;
+    this._navOpen = !this._navOpen;
+    nav.classList.toggle("open", this._navOpen);
+  },
+
+  doSearch() {
+    var q = document.getElementById("socialSearchInput");
+    if (!q || !q.value.trim()) return;
+    this.navigate("community");
+    setTimeout(function() {
+      var si = document.getElementById("searchInput");
+      if (si) { si.value = q.value; si.dispatchEvent(new KeyboardEvent("keydown", { key: "Enter" })); }
+    }, 100);
+  },
+
+  async logout() {
+    await this.api("POST", "/api/social/auth/logout");
+    this.user = null;
+    this._unreadNotifs = 0;
+    this._unreadMessages = 0;
+    this.navigate("feed");
+  },
+
+  async checkSession() {
+    var data = await this.api("GET", "/api/social/auth/me");
+    if (data.error) return false;
+    this.user = data.user;
+    this._unreadNotifs = data.unreadNotifs || 0;
+    this._unreadMessages = data.unreadMessages || 0;
+    return true;
+  },
+
+  async refreshCounts() {
+    if (!this.user) return;
+    var data = await this.api("GET", "/api/social/auth/me");
+    if (!data.error) {
+      this._unreadNotifs = data.unreadNotifs || 0;
+      this._unreadMessages = data.unreadMessages || 0;
+      this._updateNavBadges();
+    }
+  },
+
+  _updateNavBadges() {
+    var nav = document.getElementById("socialHeaderNav");
+    if (nav) nav.innerHTML = this._buildNavLinks();
+    var layout = document.getElementById("social-layout");
+    if (layout) {
+      var left = layout.querySelector(".social-sidebar-left");
+      if (left) left.innerHTML = this._buildSidebarLeft();
+    }
+  },
+};
+
+// ═══════════════════════════════════════
+// EVENT DELEGATION (CSP-safe)
+// ═══════════════════════════════════════
+(function() {
+  // Click delegation
+  document.addEventListener("click", function(e) {
+    var el = e.target.closest("[data-action]");
+    if (!el) return;
+    e.preventDefault();
+    var action = el.getAttribute("data-action");
+    var arg1 = el.getAttribute("data-arg1");
+    var arg2 = el.getAttribute("data-arg2");
+
+    switch (action) {
+      case "nav": ZS.navigate(arg1, arg2); break;
+      case "navFeed": ZS.navigate("feed"); break;
+      case "navProfile": ZS.navigate("profile"); break;
+      case "toggleMobileNav": ZS.toggleMobileNav(); break;
+      case "doSearch": ZS.doSearch(); break;
+      case "logout": ZS.logout(); break;
+      // Posts
+      case "toggleLike": toggleLike(parseInt(arg1), el); break;
+      case "toggleComments": toggleComments(parseInt(arg1)); break;
+      case "toggleNotes": toggleNotes(parseInt(arg1)); break;
+      case "reportItem": reportItem(arg1, parseInt(arg2)); break;
+      case "postComment": postComment(parseInt(arg1)); break;
+      case "deleteComment": deleteComment(parseInt(arg1), parseInt(arg2)); break;
+      case "submitPost": submitPost(); break;
+      case "submitFullPost": submitFullPost(); break;
+      // Emoji
+      case "toggleEmoji": _togglePicker("emojiPicker"); break;
+      case "toggleEmojiFull": _togglePicker("fullEmojiPicker"); break;
+      case "insertEmoji": _insertEmoji("composeText", arg1); break;
+      case "insertEmojiFull": _insertEmoji("fullComposeText", arg1); break;
+      // Auth
+      case "selectPrivacy": selectPrivacy(arg1); break;
+      case "confirmPrivacy": confirmPrivacy(); break;
+      // Profile
+      case "navigatePost": ZS.navigate("post"); break;
+      case "navigateSettings": ZS.navigate("settings"); break;
+      case "sendConnection": sendConnection(arg1); break;
+      case "removeConnection": removeConnection(arg1); break;
+      case "chatWith": ZS.navigate("chat", arg1); break;
+      // Follow
+      case "follow": followUser(parseInt(arg1)); break;
+      case "unfollow": unfollowUser(parseInt(arg1)); break;
+      // Dislike
+      case "toggleDislike": toggleDislike(parseInt(arg1)); break;
+      // Community
+      case "searchUsers": searchUsers(); break;
+      case "acceptConnection": acceptConnection(arg1); break;
+      case "rejectConnection": rejectConnection(arg1); break;
+      // Messages
+      case "chatWithUser": ZS.navigate("chat", arg1); break;
+      case "sendMsg": sendMsg(arg1); break;
+      // Notifications
+      case "markAllRead": markAllRead(); break;
+      // Settings
+      case "saveBio": saveBio(); break;
+      case "saveDisplayName": saveDisplayName(); break;
+      case "saveUsername": saveUsername(); break;
+      case "savePassword": savePassword(); break;
+      case "savePrivacy": savePrivacy(); break;
+      case "deleteAccount": deleteAccount(); break;
+      case "showSettingsTab": showSettingsTab(arg1, el); break;
+      case "deleteAvatar": deleteAvatar(); break;
+      // Verification
+      case "proposeVerify": proposeVerify(arg1); break;
+      case "acceptVerify": acceptVerify(parseInt(arg1)); break;
+      case "rejectVerify": rejectVerify(parseInt(arg1)); break;
+      // Mod
+      case "modAction": modAction(arg1, parseInt(arg2), el.getAttribute("data-action-type")); break;
+      case "modNoteAction": modNoteAction(parseInt(arg2), el.getAttribute("data-action-type")); break;
+      case "resolveReport": resolveReport(parseInt(arg1)); break;
+      case "switchModTab": switchModTab(arg1, el); break;
+      // Mobile nav: close on link click
+      default:
+        if (el.closest("#socialHeaderNav a")) {
+          var nav = document.getElementById("socialHeaderNav");
+          if (nav) nav.classList.remove("open");
+          ZS._navOpen = false;
+        }
+    }
+  });
+
+  function _togglePicker(id) {
+    var picker = document.getElementById(id);
+    if (picker) picker.classList.toggle("hidden");
+  }
+
+  function _insertEmoji(textareaId, emoji) {
+    var ta = document.getElementById(textareaId);
+    if (!ta) return;
+    var start = ta.selectionStart;
+    var end = ta.selectionEnd;
+    ta.value = ta.value.substring(0, start) + emoji + ta.value.substring(end);
+    ta.selectionStart = ta.selectionEnd = start + emoji.length;
+    ta.focus();
+    var pickerId = textareaId === "fullComposeText" ? "fullEmojiPicker" : "emojiPicker";
+    var picker = document.getElementById(pickerId);
+    if (picker) picker.classList.add("hidden");
+  }
+
+  // Keyboard delegation (Enter key for inputs)
+  document.addEventListener("keydown", function(e) {
+    if (e.key !== "Enter") return;
+    var el = e.target.closest("[data-key-action]");
+    if (!el) return;
+    var action = el.getAttribute("data-key-action");
+    var arg1 = el.getAttribute("data-arg1");
+
+    switch (action) {
+      case "doSearch": ZS.doSearch(); break;
+      case "searchUsers": searchUsers(); break;
+      case "postComment": postComment(parseInt(arg1)); break;
+      case "sendMsg": sendMsg(arg1); break;
+    }
+  });
+
+  // Form submit delegation
+  document.addEventListener("submit", function(e) {
+    e.preventDefault();
+    var el = e.target.closest("[data-form]");
+    if (!el) return;
+    var form = el.getAttribute("data-form");
+
+    switch (form) {
+      case "loginForm": _handleLogin(el); break;
+      case "signupForm": _handleSignup(el); break;
+    }
+  });
+
+  // Input delegation (for character counters, strength bars)
+  document.addEventListener("input", function(e) {
+    var el = e.target;
+    // Character counter
+    if (el.id === "composeText") {
+      var c = document.getElementById("composeCounter");
+      if (c) c.textContent = el.value.length + "/5000";
+    }
+    if (el.id === "fullComposeText") {
+      var c2 = document.getElementById("fullComposeCounter");
+      if (c2) c2.textContent = el.value.length + "/5000";
+    }
+    // Password strength
+    if (el.id === "suPass") {
+      var v = el.value, s = 0;
+      if (v.length >= 12) s++; if (v.length >= 16) s++;
+      if (/[A-Z]/.test(v)) s++; if (/[a-z]/.test(v)) s++;
+      if (/[0-9]/.test(v)) s++; if (/[^A-Za-z0-9]/.test(v)) s++;
+      var fill = document.getElementById("strFill");
+      var txt = document.getElementById("strText");
+      if (fill && txt) {
+        fill.style.width = Math.min((s / 6) * 100, 100) + "%";
+        if (s <= 2) { fill.style.background = "#d32f2f"; txt.textContent = ZS.t("Faible", "Weak"); }
+        else if (s <= 4) { fill.style.background = "#f57c00"; txt.textContent = ZS.t("Moyen", "Medium"); }
+        else { fill.style.background = "#2e7d32"; txt.textContent = ZS.t("Fort", "Strong"); }
+      }
+    }
+  });
+
+  // Avatar file input
+  document.addEventListener("change", function(e) {
+    var el = e.target;
+    if (el.id === "avatarInput") uploadAvatar(el);
+  });
+})();
+
+// Avatar upload
+async function uploadAvatar(input) {
+  var file = input.files && input.files[0];
+  if (!file) return;
+  var status = document.getElementById("avatarStatus");
+  if (status) { status.classList.remove("hidden"); status.textContent = ZS.t("Envoi en cours...", "Uploading..."); status.className = "form-hint"; }
+
+  var fd = new FormData();
+  fd.append("avatar", file);
+  var data = await ZS.api("POST", "/api/social/user/avatar", fd);
+  if (data.error) {
+    if (status) { status.textContent = data.error; status.className = "form-hint text-error"; }
+    return;
+  }
+  ZS.user.avatarUrl = data.avatar_url;
+  var preview = document.getElementById("avatarPreview");
+  if (preview) preview.innerHTML = _avatar(ZS.user.username, 80, ZS.user.avatarUrl);
+  if (status) { status.textContent = ZS.t("Avatar mis à jour", "Avatar updated"); status.className = "form-hint text-success"; }
+}
+
+async function deleteAvatar() {
+  var data = await ZS.api("DELETE", "/api/social/user/avatar");
+  if (data.error) return;
+  ZS.user.avatarUrl = null;
+  var preview = document.getElementById("avatarPreview");
+  if (preview) preview.innerHTML = _avatar(ZS.user.username, 80, null);
+  showSettingsTab("bio", document.querySelector(".tab-btn"));
+}
+
+// Verification
+async function proposeVerify(userId) {
+  if (!confirm(ZS.t("Envoyer une proposition de vérification ?", "Send a verification proposal?"))) return;
+  var data = await ZS.api("POST", "/api/social/verification/propose/" + userId);
+  if (data.error) { alert(data.error); return; }
+  alert(data.message);
+}
+
+async function acceptVerify(requestId) {
+  var data = await ZS.api("POST", "/api/social/verification/accept/" + requestId);
+  if (data.error) { alert(data.error); return; }
+  ZS.user.verifiedLevel = 1;
+  renderNotifications();
+}
+
+async function rejectVerify(requestId) {
+  var data = await ZS.api("POST", "/api/social/verification/reject/" + requestId);
+  if (data.error) { alert(data.error); return; }
+  renderNotifications();
+}
+
+// Login handler
+async function _handleLogin(form) {
+  var errEl = document.getElementById("loginError");
+  if (errEl) errEl.style.display = "none";
+  var btn = form.querySelector('button[type="submit"]');
+  if (btn) btn.disabled = true;
+  var data = await ZS.api("POST", "/api/social/auth/login", {
+    login: form.querySelector('[name="login"]').value,
+    password: form.querySelector('[name="password"]').value,
+  });
+  if (data.error) {
+    if (errEl) { errEl.textContent = data.error; errEl.style.display = "block"; }
+    if (btn) btn.disabled = false;
+    return;
+  }
+  ZS.user = data.user;
+  if (data.needsPrivacyChoice) ZS.navigate("privacy-choice");
+  else ZS.navigate("feed");
+}
+
+// Signup handler
+async function _handleSignup(form) {
+  var errEl = document.getElementById("suError");
+  if (errEl) errEl.style.display = "none";
+  var btn = form.querySelector('button[type="submit"]');
+  if (btn) btn.disabled = true;
+  var data = await ZS.api("POST", "/api/social/auth/signup", {
+    username: form.querySelector('[name="username"]').value,
+    email: form.querySelector('[name="email"]').value || undefined,
+    password: form.querySelector('[name="password"]').value,
+    birthdate: form.querySelector('[name="birthdate"]').value,
+  });
+  if (data.error) {
+    if (errEl) { errEl.textContent = data.error; errEl.style.display = "block"; }
+    if (btn) btn.disabled = false;
+    return;
+  }
+  ZS.user = data.user;
+  if (data.needsPrivacyChoice) ZS.navigate("privacy-choice");
+  else ZS.navigate("feed");
+}
diff --git a/public/js/social-privacy.js b/public/js/social-privacy.js
new file mode 100644
index 0000000..744c184
--- /dev/null
+++ b/public/js/social-privacy.js
@@ -0,0 +1,2 @@
+// Zektyc Social — Privacy views (moved to social-views.js)
+// This file is kept for backward compatibility but functions are now in social-views.js
diff --git a/public/js/social-views.js b/public/js/social-views.js
new file mode 100644
index 0000000..6941b56
--- /dev/null
+++ b/public/js/social-views.js
@@ -0,0 +1,1007 @@
+// Zektyc Social — Views v4 (CSP-safe, zero inline handlers)
+
+function _spinner() {
+  return '<div class="social-spinner"><div class="spinner-dot"></div><div class="spinner-dot"></div><div class="spinner-dot"></div></div>';
+}
+
+function _timeAgo(iso) {
+  if (!iso) return "";
+  var diff = (Date.now() - new Date(iso + "Z").getTime()) / 1000;
+  if (diff < 60) return ZS.t("à l'instant", "just now");
+  if (diff < 3600) return Math.floor(diff / 60) + " min";
+  if (diff < 86400) return Math.floor(diff / 3600) + "h";
+  if (diff < 2592000) return Math.floor(diff / 86400) + "j";
+  return new Date(iso + "Z").toLocaleDateString(ZS.lang === "fr" ? "fr-FR" : "en-US", { day: "numeric", month: "short" });
+}
+
+function _visIcon(v) {
+  if (v === "public") return ZS.icon("globe");
+  if (v === "connections_only") return ZS.icon("users");
+  return ZS.icon("lock");
+}
+
+function _visLabel(v) {
+  if (v === "public") return ZS.t("Public", "Public");
+  if (v === "connections_only") return ZS.t("Connexions", "Connections");
+  return ZS.t("Privé", "Private");
+}
+
+function _avatar(username, size, avatarUrl) {
+  size = size || 40;
+  if (avatarUrl) {
+    return '<div class="post-avatar post-avatar-img" data-avatar-size="' + size + '">' +
+      '<img src="' + ZS.esc(avatarUrl) + '" alt="' + ZS.esc(username || "?") + '" loading="lazy"></div>';
+  }
+  var fs = Math.round(size * 0.4);
+  return '<div class="post-avatar" data-avatar-size="' + size + '" data-avatar-fs="' + fs + '">' +
+    ZS.esc(username || "?").charAt(0).toUpperCase() + '</div>';
+}
+
+function _applyAvatarStyles() {
+  document.querySelectorAll("[data-avatar-size]").forEach(function(el) {
+    var s = parseInt(el.dataset.avatarSize, 10);
+    var f = parseInt(el.dataset.avatarFs, 10);
+    el.style.width = s + "px";
+    el.style.height = s + "px";
+    el.style.fontSize = f + "px";
+  });
+}
+
+function _verifiedBadge(level, username, verifiedByUsername, verifiedByDisplayName, verifiedByAvatar) {
+  if (level === 2) {
+    return '<span class="verified-badge verified-gold" title="Compte officiel">' + ZS.icon("verifiedGold") + '</span>';
+  }
+  if (level === 1) {
+    var verifierName = ZS.esc(verifiedByDisplayName || verifiedByUsername || "");
+    var verifierUsername = ZS.esc(verifiedByUsername || "");
+    var badge = '<span class="verified-badge verified-blue" title="Affilié à ' + verifierName + '">' + ZS.icon("verifiedBlue");
+    if (verifiedByUsername) {
+      badge += '<a href="#" class="verified-verifier" data-action="nav" data-arg1="profile-view" data-arg2="' + verifierUsername + '" title="' + verifierName + '">';
+      if (verifiedByAvatar) {
+        badge += '<img src="' + ZS.esc(verifiedByAvatar) + '" alt="' + verifierName + '" class="verified-verifier-avatar">';
+      } else {
+        badge += '<span class="verified-verifier-letter">' + verifierName.charAt(0).toUpperCase() + '</span>';
+      }
+      badge += '</a>';
+    }
+    badge += '</span>';
+    return badge;
+  }
+  return '';
+}
+
+// ── Post Card ──
+
+function _postCard(p) {
+  var date = _timeAgo(p.created_at);
+  var verified = p.is_verified
+    ? '<span class="post-verified-badge">' + ZS.icon("check") + ' ' + ZS.t("Vérifié", "Verified") + '</span>'
+    : '<span class="post-pending-badge">' + ZS.icon("note") + ' ' + ZS.t("En attente", "Pending") + '</span>';
+  var likeClass = p.user_liked ? ' liked' : '';
+
+  var html = '<article class="post-card" id="post-' + p.id + '">' +
+    '<div class="post-top">' +
+    _avatar(p.username, 40, p.avatar_url) +
+    '<div class="post-user-info">' +
+    '<span class="post-username" data-action="nav" data-arg1="profile-view" data-arg2="' + ZS.esc(p.username) + '">' + ZS.esc(p.display_name || p.username) + '</span>' +
+    _verifiedBadge(p.verified_level, p.username, p.verified_by_username, p.verified_by_display_name, p.verified_by_avatar) +
+    '<span class="post-timestamp">' + date + '</span>' +
+    '</div>' +
+    '<div class="post-vis-badge">' + _visIcon(p.visibility) + ' ' + _visLabel(p.visibility) + '</div>' +
+    verified + '</div>' +
+    '<div class="post-content">' + ZS.esc(p.content) + '</div>';
+
+  if (p.media_url) {
+    html += '<img class="post-image" src="' + ZS.esc(p.media_url) + '" alt="" loading="lazy">';
+  }
+
+  html += '<div class="post-actions">' +
+    '<button class="post-action' + likeClass + '" data-action="toggleLike" data-arg1="' + p.id + '">' +
+    ZS.icon("heart") + '<span class="post-action-count">' + (p.like_count || 0) + '</span></button>' +
+    '<button class="post-action' + (p.user_disliked ? ' disliked' : '') + '" data-action="toggleDislike" data-arg1="' + p.id + '">' +
+    ZS.icon("close") + '</button>' +
+    '<button class="post-action" data-action="toggleComments" data-arg1="' + p.id + '">' +
+    ZS.icon("comment") + '<span class="post-action-count">' + (p.comment_count || 0) + '</span></button>' +
+    '<button class="post-action" data-action="toggleNotes" data-arg1="' + p.id + '">' +
+    ZS.icon("note") + '<span class="post-action-count">' + (p.note_count || 0) + '</span></button>' +
+    '<button class="post-action" data-action="reportItem" data-arg1="post" data-arg2="' + p.id + '">' +
+    ZS.icon("flag") + '</button>' +
+    '</div>';
+
+  html += '<div class="post-notes-section" id="notes-' + p.id + '"></div>';
+
+  html += '<div class="post-comments-section" id="comments-' + p.id + '">';
+  if (ZS.user) {
+    html += '<div class="comment-compose">' +
+      '<input type="text" id="commentInput-' + p.id + '" placeholder="' + ZS.t("Ajouter un commentaire...", "Add a comment...") + '" data-key="Enter" data-key-action="postComment" data-arg1="' + p.id + '">' +
+      '</div>';
+  }
+  html += '<div id="commentsList-' + p.id + '"></div></div>';
+  html += '</article>';
+  return html;
+}
+
+// ═══════════════════════════════════════
+// FEED
+// ═══════════════════════════════════════
+
+async function renderFeed() {
+  var L = ZS.lang;
+  var mainHtml = "";
+
+  if (ZS.user) {
+    mainHtml += '<div class="compose-box">' +
+      '<div class="compose-row">' +
+      _avatar(ZS.user.username, 40, ZS.user.avatarUrl) +
+      '<div class="compose-input-wrap">' +
+      '<textarea id="composeText" placeholder="' + ZS.t("Quoi de neuf ?", "What's new?") + '" rows="2" maxlength="5000" class="auto-resize"></textarea>' +
+      '<div id="emojiPicker" class="emoji-picker hidden">' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="😀">😀</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="😂">😂</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="❤️">❤️</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="🔥">🔥</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="👍">👍</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="👀">👀</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="💯">💯</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="🎉">🎉</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="🤔">🤔</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="😎">😎</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="🚀">🚀</span>' +
+      '<span class="emoji-pick" data-action="insertEmoji" data-arg1="💡">💡</span>' +
+      '</div>' +
+      '</div></div>' +
+      '<div class="compose-footer">' +
+      '<div class="compose-meta">' +
+      '<button type="button" class="compose-emoji-btn" data-action="toggleEmoji">' + ZS.icon("star") + '</button>' +
+      '<span class="compose-counter" id="composeCounter">0/5000</span>' +
+      '<select class="compose-vis-select" id="composeVis">' +
+      '<option value="public">' + ZS.icon("globe") + ' ' + ZS.t("Public", "Public") + '</option>' +
+      '<option value="connections_only">' + ZS.icon("users") + ' ' + ZS.t("Connexions", "Connections") + '</option>' +
+      '<option value="private">' + ZS.icon("lock") + ' ' + ZS.t("Privé", "Private") + '</option>' +
+      '</select></div>' +
+      '<div class="compose-actions">' +
+      '<button class="btn-primary btn-primary-sm" data-action="submitPost">' + ZS.t("Publier", "Post") + '</button>' +
+      '</div></div></div>';
+  }
+
+  mainHtml += '<div id="feedPosts">' + _spinner() + '</div>';
+  ZS.renderShell(null, mainHtml, null);
+
+  var composeVis = document.getElementById("composeVis");
+  if (composeVis && ZS.user) composeVis.value = ZS.user.privacyLevel || "connections_only";
+
+  var data = await ZS.api("GET", "/api/social/posts");
+  var el = document.getElementById("feedPosts");
+  if (!el) return;
+
+  if (data.error) {
+    el.innerHTML = '<div class="empty-state"><div class="empty-state-icon">' + ZS.icon("flag") + '</div><h3>Erreur</h3><p>' + ZS.esc(data.error) + '</p></div>';
+    return;
+  }
+
+  if (!data.posts || data.posts.length === 0) {
+    el.innerHTML = '<div class="empty-state"><div class="empty-state-icon">' + ZS.icon("note") + '</div>' +
+      '<h3>' + (L ? "Le fil est vide" : "Feed is empty") + '</h3>' +
+      '<p>' + (ZS.user
+        ? (L ? "Sois le premier à publier quelque chose." : "Be the first to post something.")
+        : (L ? "Connectez-vous pour voir les publications." : "Log in to see posts.")) + '</p>' +
+      (ZS.user ? ''
+         : '<button class="btn-primary mt-16 mw-200" data-action="nav" data-arg1="login">' + (L ? "Se connecter" : "Log in") + '</button>') +
+      '</div>';
+    return;
+  }
+
+  var html = "";
+  for (var i = 0; i < data.posts.length; i++) {
+    html += _postCard(data.posts[i]);
+  }
+  el.innerHTML = html;
+}
+
+async function submitPost() {
+  var textarea = document.getElementById("composeText");
+  if (!textarea || !textarea.value.trim()) return;
+  var vis = document.getElementById("composeVis").value;
+  var btn = document.querySelector(".compose-actions .btn-primary");
+  if (btn) { btn.disabled = true; btn.textContent = ZS.t("Envoi…", "Posting…"); }
+  var data = await ZS.api("POST", "/api/social/posts", { content: textarea.value.trim(), visibility: vis });
+  if (data.error) { alert(data.error); if (btn) { btn.disabled = false; btn.textContent = ZS.t("Publier", "Post"); } return; }
+  renderFeed();
+}
+
+// ═══════════════════════════════════════
+// POST ACTIONS
+// ═══════════════════════════════════════
+
+async function toggleLike(postId, btn) {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  var data = await ZS.api("POST", "/api/social/posts/" + postId + "/like");
+  if (data.error) return;
+  btn.classList.toggle("liked", data.liked);
+  btn.innerHTML = ZS.icon("heart") + '<span class="post-action-count">' + data.count + '</span>';
+}
+
+async function toggleDislike(postId) {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  var data = await ZS.api("POST", "/api/social/posts/" + postId + "/dislike");
+  if (data.error) return;
+  if (data.disliked) {
+    var card = document.getElementById("post-" + postId);
+    if (card) card.style.opacity = "0.3";
+  }
+}
+
+async function followUser(userId) {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  var data = await ZS.api("POST", "/api/social/follows/" + userId);
+  if (data.error) { alert(data.error); return; }
+  renderProfileView(ZS.viewData);
+}
+
+async function unfollowUser(userId) {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  var data = await ZS.api("DELETE", "/api/social/follows/" + userId);
+  if (data.error) { alert(data.error); return; }
+  renderProfileView(ZS.viewData);
+}
+
+async function saveUsername() {
+  var data = await ZS.api("POST", "/api/social/user/update-username", { username: document.getElementById("settingsUsername").value });
+  if (data.error) { alert(data.error); return; }
+  ZS.user.username = data.username;
+  alert(ZS.t("Username mis à jour", "Username updated"));
+}
+
+async function toggleComments(postId) {
+  var el = document.getElementById("comments-" + postId);
+  if (!el) return;
+  if (el.classList.contains("open")) { el.classList.remove("open"); return; }
+  el.classList.add("open");
+  var list = document.getElementById("commentsList-" + postId);
+  list.innerHTML = _spinner();
+  var data = await ZS.api("GET", "/api/social/posts/" + postId + "/comments");
+  if (!data.comments || data.comments.length === 0) {
+    list.innerHTML = '<div class="note-empty">' + ZS.t("Aucun commentaire", "No comments") + '</div>';
+    return;
+  }
+  list.innerHTML = data.comments.map(function(c) {
+    return '<div class="comment-item" id="comment-' + c.id + '">' +
+      _avatar(c.username, 28, c.avatar_url) +
+      '<div class="comment-body">' +
+      '<div class="comment-header">' +
+      '<span class="comment-author">' + ZS.esc(c.username) + '</span>' +
+      '<span class="comment-time">' + _timeAgo(c.created_at) + '</span>' +
+      ((ZS.user && (ZS.user.id === c.user_id || ZS.user.role === "admin"))
+        ? '<button class="comment-delete-btn" data-action="deleteComment" data-arg1="' + c.id + '" data-arg2="' + postId + '">' + ZS.icon("close") + '</button>' : '') +
+      '</div>' +
+      '<div class="comment-text">' + ZS.esc(c.content) + '</div></div></div>';
+  }).join("");
+}
+
+async function postComment(postId) {
+  var input = document.getElementById("commentInput-" + postId);
+  if (!input || !input.value.trim()) return;
+  var data = await ZS.api("POST", "/api/social/posts/" + postId + "/comments", { content: input.value.trim() });
+  if (data.error) { alert(data.error); return; }
+  input.value = "";
+  toggleComments(postId);
+  setTimeout(function() { toggleComments(postId); }, 50);
+}
+
+async function deleteComment(commentId, postId) {
+  if (!confirm(ZS.t("Supprimer ?", "Delete?"))) return;
+  await ZS.api("DELETE", "/api/social/comments/" + commentId);
+  toggleComments(postId);
+  setTimeout(function() { toggleComments(postId); }, 50);
+}
+
+async function toggleNotes(postId) {
+  var c = document.getElementById("notes-" + postId);
+  if (!c) return;
+  if (c.innerHTML) { c.innerHTML = ""; return; }
+  c.innerHTML = _spinner();
+  var data = await ZS.api("GET", "/api/social/posts/" + postId + "/notes");
+  if (!data.notes || data.notes.length === 0) {
+    c.innerHTML = '<div class="note-empty">' + ZS.t("Aucune note", "No notes") + '</div>';
+    return;
+  }
+  c.innerHTML = data.notes.map(function(n) {
+    return '<div class="note-item"><div class="note-author">' + ZS.esc(n.username) + '</div><div class="note-text">' + ZS.esc(n.content) + '</div></div>';
+  }).join("");
+}
+
+function reportItem(type, id) {
+  var reason = prompt(ZS.t("Raison du signalement :", "Report reason:"));
+  if (!reason) return;
+  ZS.api("POST", "/api/social/report", { targetType: type, targetId: id, reason: reason }).then(function(d) {
+    alert(d.error || ZS.t("Signalement envoyé.", "Report sent."));
+  });
+}
+
+// ═══════════════════════════════════════
+// AUTH
+// ═══════════════════════════════════════
+
+function renderLogin() {
+  var L = ZS.lang;
+  var html = '<div class="auth-card">' +
+    '<h2>' + ZS.t("Connexion", "Log in") + '</h2>' +
+    '<form data-form="loginForm">' +
+    '<div class="form-group"><label>' + ZS.t("Nom d'utilisateur ou email", "Username or email") + '</label>' +
+    '<input type="text" name="login" required autocomplete="username" autofocus></div>' +
+    '<div class="form-group"><label>' + ZS.t("Mot de passe", "Password") + '</label>' +
+    '<input type="password" name="password" required autocomplete="current-password"></div>' +
+    '<div id="loginError" class="form-error hidden"></div>' +
+    '<button type="submit" class="btn-primary mt-16">' + ZS.t("Se connecter", "Log in") + '</button>' +
+    '</form>' +
+    '<div class="auth-footer">' + ZS.t("Pas encore de compte ? ", "No account? ") +
+    '<a href="#" data-action="nav" data-arg1="signup">' + ZS.t("S'inscrire", "Sign up") + '</a></div></div>';
+
+  ZS.renderShell(null, html, null);
+}
+
+function renderSignup() {
+  var L = ZS.lang;
+  var html = '<div class="auth-card">' +
+    '<h2>' + ZS.t("Inscription", "Sign up") + '</h2>' +
+    '<form data-form="signupForm">' +
+    '<div class="form-group"><label>' + ZS.t("Nom d'utilisateur", "Username") + '</label>' +
+    '<input type="text" name="username" required minlength="3" maxlength="20" pattern="[a-zA-Z0-9_]+" autocomplete="username">' +
+    '<div class="form-hint">3-20 ' + ZS.t("caractères", "characters") + ', a-z 0-9 _</div></div>' +
+    '<div class="form-group"><label>Email</label>' +
+    '<input type="email" name="email" autocomplete="email"></div>' +
+    '<div class="form-group"><label>' + ZS.t("Date de naissance", "Date of birth") + '</label>' +
+    '<input type="date" name="birthdate" id="suBirth" required>' +
+    '<div class="form-hint">' + ZS.t("Uniquement pour vérifier l'âge.", "Used only to verify age.") + '</div></div>' +
+    '<div class="form-group"><label>' + ZS.t("Mot de passe", "Password") + '</label>' +
+    '<input type="password" name="password" id="suPass" required autocomplete="new-password">' +
+    '<div class="strength-bar"><div class="strength-fill" id="strFill"></div></div>' +
+    '<div class="strength-label" id="strText"></div>' +
+    '<div class="form-hint">' + ZS.t("12+ caractères, majuscule, minuscule, chiffre, spécial", "12+ chars, upper, lower, digit, special") + '</div></div>' +
+    '<label class="tos-check"><input type="checkbox" id="suTos" required>' +
+    '<span>' + ZS.t("J'accepte les ", "I accept the ") + '<a href="/tos" target="_blank">' + ZS.t("CGU", "ToS") + '</a> ' + ZS.t("et la ", "and the ") + '<a href="/privacy-policy" target="_blank">' + ZS.t("politique de confidentialité", "privacy policy") + '</a></span></label>' +
+    '<div id="suError" class="form-error hidden"></div>' +
+    '<button type="submit" class="btn-primary mt-12">' + ZS.t("Créer mon compte", "Create account") + '</button>' +
+    '</form>' +
+    '<div class="auth-footer">' + ZS.t("Déjà un compte ? ", "Already have an account? ") +
+    '<a href="#" data-action="nav" data-arg1="login">' + ZS.t("Se connecter", "Log in") + '</a></div></div>';
+
+  ZS.renderShell(null, html, null);
+}
+
+// ═══════════════════════════════════════
+// PRIVACY CHOICE
+// ═══════════════════════════════════════
+
+var _selectedPrivacy = null;
+
+function renderPrivacyChoice() {
+  var L = ZS.lang;
+  var html = '<div class="auth-card mw-520">' +
+    '<h2>' + ZS.icon("shield") + ' ' + ZS.t("Confidentialité", "Privacy") + '</h2>' +
+    '<p class="text-center">' + ZS.t("Choisissez un niveau de confidentialité.", "Choose a privacy level.") + '</p>' +
+    '<div class="warning-box"><strong>' + ZS.icon("shield") + ' ' + ZS.t("Attention", "Important") + '</strong>' +
+    ZS.t("Votre choix est appliqué immédiatement.", "Applied immediately.") + '</div>' +
+    '<div class="privacy-grid">' +
+    _privOption("public", "globe", ZS.t("Public", "Public"), ZS.t("Tout le monde peut voir vos publications.", "Everyone can see your posts."),
+      [ZS.t("Visible par tous", "Visible to all"), ZS.t("Peut apparaître dans les moteurs de recherche", "May appear in search engines")]) +
+    _privOption("connections_only", "users", ZS.t("Connexions", "Connections"), ZS.t("Seules vos connexions approuvées.", "Only approved connections."),
+      [ZS.t("Seuls vos contacts voient vos posts", "Only your contacts see your posts"), ZS.t("Demandes de connexion", "Connection requests")]) +
+    _privOption("private", "lock", ZS.t("Privé", "Private"), ZS.t("Personne sauf vous.", "Nobody but you."),
+      [ZS.t("Seul vous voyez vos posts", "Only you see your posts"), ZS.t("Modération légale possible (DSA)", "Legal moderation possible (DSA)")]) +
+    '</div>' +
+    '<div id="privConfirm" class="hidden mt-16">' +
+    '<div class="warning-box" id="privSummary"></div>' +
+    '<label class="tos-check"><input type="checkbox" id="privAck"><span id="privAckText"></span></label>' +
+    '<div id="privError" class="form-error hidden"></div>' +
+    '<button class="btn-primary" id="privBtn" disabled data-action="confirmPrivacy">' + ZS.t("Confirmer", "Confirm") + '</button>' +
+    '</div></div>';
+
+  ZS.renderShell(null, html, null);
+}
+
+function _privOption(level, iconName, title, desc, consequences) {
+  var items = consequences.map(function(c) { return '<li>' + c + '</li>'; }).join("");
+  return '<div class="privacy-card" data-level="' + level + '" data-action="selectPrivacy" data-arg1="' + level + '">' +
+    '<div class="privacy-card-check">' + ZS.icon("check") + '</div>' +
+    '<div class="privacy-card-icon">' + ZS.icon(iconName) + '</div>' +
+    '<h3>' + title + '</h3>' +
+    '<p>' + desc + '</p>' +
+    (items ? '<ul>' + items + '</ul>' : '') + '</div>';
+}
+
+function selectPrivacy(level) {
+  _selectedPrivacy = level;
+  document.querySelectorAll(".privacy-card").forEach(function(el) { el.classList.remove("selected"); });
+  document.querySelector('.privacy-card[data-level="' + level + '"]').classList.add("selected");
+
+  var sums = {
+    public: ZS.t("Mode <strong>PUBLIC</strong> : tous les utilisateurs et les moteurs de recherche pourront voir vos publications.", "Mode <strong>PUBLIC</strong>: all users and search engines will see your posts."),
+    connections_only: ZS.t("Mode <strong>CONNECTIONS</strong> : seuls les contacts que vous acceptez pourront voir vos publications.", "Mode <strong>CONNECTIONS</strong>: only contacts you accept will see your posts."),
+    private: ZS.t("Mode <strong>PRIVÉ</strong> : personne d'autre que vous ne pourra voir vos publications.", "Mode <strong>PRIVATE</strong>: nobody but you will see your posts."),
+  };
+  var acks = {
+    public: ZS.t("Je comprends que mes publications seront visibles par tout le monde.", "I understand my posts will be visible to everyone."),
+    connections_only: ZS.t("Je comprends que seuls mes contacts approuvés verront mes publications.", "I understand only approved contacts will see my posts."),
+    private: ZS.t("Je comprends que mes publications ne seront visibles que par moi-même.", "I understand my posts will only be visible to me."),
+  };
+
+  document.getElementById("privSummary").innerHTML = sums[level];
+  document.getElementById("privAckText").textContent = acks[level];
+  document.getElementById("privConfirm").style.display = "block";
+  document.getElementById("privAck").checked = false;
+  document.getElementById("privBtn").disabled = true;
+  document.getElementById("privAck").onchange = function() {
+    document.getElementById("privBtn").disabled = !this.checked;
+  };
+  document.getElementById("privConfirm").scrollIntoView({ behavior: "smooth", block: "nearest" });
+}
+
+async function confirmPrivacy() {
+  if (!_selectedPrivacy) return;
+  var errEl = document.getElementById("privError");
+  errEl.style.display = "none";
+  var data = await ZS.api("POST", "/api/social/user/privacy-choice", { level: _selectedPrivacy, acknowledged: true });
+  if (data.error) { errEl.textContent = data.error; errEl.style.display = "block"; return; }
+  ZS.user.privacyLevel = data.privacyLevel;
+  ZS.user.privacyChoiceMade = true;
+  ZS.navigate("feed");
+}
+
+// ═══════════════════════════════════════
+// PROFILE
+// ═══════════════════════════════════════
+
+async function renderProfile() {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  await _renderProfilePage(ZS.user.username);
+}
+
+async function renderProfileView(username) {
+  await _renderProfilePage(username);
+}
+
+async function _renderProfilePage(username) {
+  var L = ZS.lang;
+  ZS.renderShell(null, _spinner(), null);
+
+  var data = await ZS.api("GET", "/api/social/user/" + encodeURIComponent(username));
+  if (data.error) {
+    ZS.renderShell(null, '<div class="empty-state"><div class="empty-state-icon">' + ZS.icon("close") + '</div><h3>' + ZS.esc(data.error) + '</h3></div>', null);
+    return;
+  }
+
+  if (data.isPrivate) {
+    ZS.renderShell(null, '<div class="empty-state"><div class="empty-state-icon">' + ZS.icon("lock") + '</div><h3>' + ZS.t("Ce profil est privé.", "This profile is private.") + '</h3></div>', null);
+    return;
+  }
+
+  var user = data.user;
+  var badges = data.badges || [];
+  var posts = data.posts || [];
+  var isOwn = ZS.user && user.username === ZS.user.username;
+
+  var roleLabel = { user: ZS.t("Membre", "Member"), moderator: ZS.t("Modérateur", "Moderator"), admin: ZS.t("Administrateur", "Admin") };
+  var joinDate = new Date(user.created_at + "Z").toLocaleDateString(L ? "fr-FR" : "en-US", { day: "numeric", month: "long", year: "numeric" });
+
+  var badgesHtml = "";
+  if (badges.length > 0) {
+    badgesHtml = '<div class="profile-badges-grid">' + badges.map(function(b) {
+      return '<div class="profile-badge">' + b.icon + " " + ZS.esc(b.name) + '</div>';
+    }).join("") + '</div>';
+  }
+
+  var actionsHtml = "";
+  if (isOwn) {
+    actionsHtml = '<div class="profile-actions-row">' +
+      '<button class="btn-primary btn-primary-sm" data-action="navigateSettings">' + ZS.icon("settings") + ' ' + ZS.t("Paramètres", "Settings") + '</button>' +
+      '<button class="btn-primary btn-primary-sm btn-outline" data-action="navigatePost">' + ZS.icon("pen") + ' ' + ZS.t("Publier", "Post") + '</button>' +
+      '</div>';
+  } else if (ZS.user) {
+    var followBtn = user.isFollowing
+      ? '<button class="btn-primary btn-primary-sm btn-outline" data-action="unfollow" data-arg1="' + user.id + '">' + ZS.t("Ne plus suivre", "Unfollow") + '</button>'
+      : '<button class="btn-primary btn-primary-sm" data-action="follow" data-arg1="' + user.id + '">' + ZS.icon("plus") + ' ' + ZS.t("Suivre", "Follow") + '</button>';
+    var verifyBtn = '';
+    if (ZS.user.verifiedLevel === 2 && !user.verified_level) {
+      verifyBtn = '<button class="btn-primary btn-primary-sm btn-gold" data-action="proposeVerify" data-arg1="' + user.id + '">' + ZS.icon("verifiedGold") + ' ' + ZS.t("Vérifier", "Verify") + '</button>';
+    }
+    actionsHtml = '<div class="profile-actions-row">' + followBtn +
+      '<button class="btn-primary btn-primary-sm btn-outline" data-action="chatWith" data-arg1="' + ZS.esc(user.username) + '">' + ZS.icon("mail") + ' ' + ZS.t("Message", "Message") + '</button>' +
+      verifyBtn + '</div>';
+  }
+
+  var profileCard = '<div class="profile-card">' +
+    '<div class="profile-banner"></div>' +
+    '<div class="profile-main">' +
+    '<div class="profile-avatar-lg">' +
+    (user.avatar_url ? '<img src="' + ZS.esc(user.avatar_url) + '" alt="' + ZS.esc(user.username) + '" loading="lazy">' : ZS.esc(user.username).charAt(0).toUpperCase()) +
+    '</div>' +
+    '<h2 class="profile-name">' + ZS.esc(user.display_name || user.username) +
+    _verifiedBadge(user.verified_level, user.username, user.verified_by_username, user.verified_by_display_name, user.verified_by_avatar) +
+    (isOwn ? ' <span class="profile-role-tag">' + (roleLabel[user.role] || user.role) + '</span>' : '') + '</h2>' +
+    '<div class="profile-handle">@' + ZS.esc(user.username) + '</div>' +
+    (user.bio ? '<div class="profile-bio">' + ZS.esc(user.bio) + '</div>' : '') +
+    '<div class="profile-stats-row">' +
+    '<div class="profile-stat"><span class="profile-stat-value">' + (user.postCount || 0) + '</span><span class="profile-stat-label">' + ZS.t("posts", "posts") + '</span></div>' +
+    '<div class="profile-stat"><span class="profile-stat-value">' + (user.followerCount || 0) + '</span><span class="profile-stat-label">' + ZS.t("abonnés", "followers") + '</span></div>' +
+    '<div class="profile-stat"><span class="profile-stat-value">' + (user.followingCount || 0) + '</span><span class="profile-stat-label">' + ZS.t("abonnements", "following") + '</span></div>' +
+    '<div class="profile-stat"><span class="profile-stat-value">' + joinDate + '</span><span class="profile-stat-label">' + ZS.t("Inscrit", "Joined") + '</span></div>' +
+    '</div>' + actionsHtml +
+    '</div></div>';
+
+  var postsHtml = "";
+  if (posts.length > 0) {
+    postsHtml = '<h3 class="mt-20 mb-12">' + ZS.t("Publications", "Posts") + '</h3>';
+    for (var i = 0; i < posts.length; i++) postsHtml += _postCard(posts[i]);
+  } else {
+    postsHtml = '<div class="empty-state p-30"><div class="empty-state-icon">' + ZS.icon("note") + '</div><p>' + ZS.t("Aucune publication.", "No posts.") + '</p></div>';
+  }
+
+  ZS.renderShell(null, profileCard + postsHtml, null);
+  if (ZS._updateSEO) ZS._updateSEO(
+    (user.display_name || user.username) + ' — Zektyc Social',
+    user.bio || ZS.t('Profil de', 'Profile of') + ' ' + user.username,
+    location.origin + location.pathname + '#/profile/' + user.username
+  );
+}
+
+// ═══════════════════════════════════════
+// SETTINGS
+// ═══════════════════════════════════════
+
+async function renderSettings() {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  var html = '<h2 class="mb-16">' + ZS.icon("settings") + ' ' + ZS.t("Paramètres", "Settings") + '</h2>' +
+    '<div class="tabs">' +
+    '<button class="tab-btn active" data-action="showSettingsTab" data-arg1="bio">' + ZS.t("Profil", "Profile") + '</button>' +
+    '<button class="tab-btn" data-action="showSettingsTab" data-arg1="password">' + ZS.t("Mot de passe", "Password") + '</button>' +
+    '<button class="tab-btn" data-action="showSettingsTab" data-arg1="privacy">' + ZS.t("Confidentialité", "Privacy") + '</button>' +
+    '<button class="tab-btn" data-action="showSettingsTab" data-arg1="danger">' + ZS.t("Danger", "Danger") + '</button>' +
+    '</div><div id="settingsContent"></div>';
+
+  ZS.renderShell(null, html, null);
+  showSettingsTab("bio", document.querySelector(".tab-btn"));
+}
+
+function showSettingsTab(tab, btn) {
+  document.querySelectorAll(".tab-btn").forEach(function(t) { t.classList.remove("active"); });
+  if (btn) btn.classList.add("active");
+  var el = document.getElementById("settingsContent");
+  if (!el) return;
+
+  if (tab === "bio") {
+    el.innerHTML = '<div class="settings-card"><h3>' + ZS.t("Photo de profil", "Profile picture") + '</h3>' +
+      '<div class="avatar-upload-area">' +
+      '<div id="avatarPreview">' + _avatar(ZS.user.username, 80, ZS.user.avatarUrl) + '</div>' +
+      '<div class="avatar-upload-actions">' +
+      '<label class="btn-primary btn-primary-sm avatar-upload-label">' + ZS.t("Choisir une image", "Choose image") +
+      '<input type="file" id="avatarInput" accept="image/jpeg,image/png,image/gif,image/webp" class="avatar-upload-input"></label>' +
+      (ZS.user.avatarUrl ? '<button class="btn-secondary btn-secondary-sm mt-8" data-action="deleteAvatar">' + ZS.t("Supprimer", "Remove") + '</button>' : '') +
+      '</div></div>' +
+      '<div id="avatarStatus" class="form-hint hidden"></div>' +
+      '</div>' +
+      '<div class="settings-card mt-16"><h3>' + ZS.t("Nom d'affichage", "Display name") + '</h3>' +
+      '<input class="settings-input" type="text" id="settingsDisplayName" maxlength="50" placeholder="' + ZS.t("Votre nom affiché", "Your display name") + '" value="' + ZS.esc(ZS.user.displayName || '') + '">' +
+      '<div class="mt-8"><button class="btn-primary btn-primary-sm" data-action="saveDisplayName">' + ZS.t("Enregistrer", "Save") + '</button></div></div>' +
+      '<div class="settings-card mt-16"><h3>' + ZS.t("Username (@)", "Username (@)") + '</h3>' +
+      '<input class="settings-input" type="text" id="settingsUsername" maxlength="30" pattern="[a-zA-Z0-9_]+" placeholder="@username" value="' + ZS.esc(ZS.user.username) + '">' +
+      '<div class="form-hint">' + ZS.t("3-30 caractères, lettres, chiffres et underscores. Changement possible une fois par mois.", "3-30 characters, letters, numbers and underscores. Changeable once per month.") + '</div>' +
+      '<div class="mt-8"><button class="btn-primary btn-primary-sm" data-action="saveUsername">' + ZS.t("Enregistrer", "Save") + '</button></div></div>' +
+      '<div class="settings-card mt-16"><h3>' + ZS.t("Bio", "Bio") + '</h3>' +
+      '<textarea class="settings-textarea" id="settingsBio" rows="3" maxlength="500">' + ZS.esc(ZS.user.bio || '') + '</textarea>' +
+      '<div class="mt-8"><button class="btn-primary btn-primary-sm" data-action="saveBio">' + ZS.t("Enregistrer", "Save") + '</button></div></div>';
+  } else if (tab === "password") {
+    el.innerHTML = '<div class="settings-card"><h3>' + ZS.t("Changer le mot de passe", "Change password") + '</h3>' +
+      '<div class="form-group"><label>' + ZS.t("Mot de passe actuel", "Current password") + '</label>' +
+      '<input class="settings-input" type="password" id="settingsCurrentPass" required></div>' +
+      '<div class="form-group"><label>' + ZS.t("Nouveau mot de passe", "New password") + '</label>' +
+      '<input class="settings-input" type="password" id="settingsNewPass" required></div>' +
+      '<button class="btn-primary btn-primary-sm" data-action="savePassword">' + ZS.t("Changer", "Change") + '</button></div>';
+  } else if (tab === "privacy") {
+    var level = ZS.user.privacyLevel || "connections_only";
+    el.innerHTML = '<div class="settings-card"><h3>' + ZS.t("Confidentialité", "Privacy") + '</h3>' +
+      '<div class="privacy-grid mt-12">' +
+      _privOption("public", "globe", ZS.t("Public", "Public"), ZS.t("Tout le monde", "Everyone"), []) +
+      _privOption("connections_only", "users", ZS.t("Connexions", "Connections"), ZS.t("Vos contacts", "Your contacts"), []) +
+      _privOption("private", "lock", ZS.t("Privé", "Private"), ZS.t("Personne sauf vous", "Nobody but you"), []) +
+      '</div>' +
+      '<button class="btn-primary btn-primary-sm mt-16" data-action="savePrivacy">' + ZS.t("Enregistrer", "Save") + '</button></div>';
+    _selectedPrivacy = level;
+    setTimeout(function() { selectPrivacy(level); }, 0);
+  } else if (tab === "danger") {
+    el.innerHTML = '<div class="settings-card"><h3>' + ZS.icon("trash") + ' ' + ZS.t("Supprimer mon compte", "Delete account") + '</h3>' +
+      '<div class="warning-box"><strong>' + ZS.t("Action irréversible", "Irreversible action") + '</strong>' +
+      ZS.t("Toutes vos données seront supprimées.", "All your data will be deleted.") + '</div>' +
+      '<div class="form-group"><label>' + ZS.t("Mot de passe pour confirmer", "Password to confirm") + '</label>' +
+      '<input class="settings-input" type="password" id="settingsDeletePass" required></div>' +
+      '<button class="btn-primary btn-primary-sm btn-danger" data-action="deleteAccount">' + ZS.t("Supprimer", "Delete") + '</button></div>';
+  }
+}
+
+async function saveBio() {
+  var data = await ZS.api("POST", "/api/social/user/update-bio", { bio: document.getElementById("settingsBio").value });
+  alert(data.error || data.message);
+}
+async function saveDisplayName() {
+  var data = await ZS.api("POST", "/api/social/user/update-display-name", { displayName: document.getElementById("settingsDisplayName").value });
+  if (data.error) { alert(data.error); return; }
+  ZS.user.displayName = data.displayName;
+  alert(ZS.t("Nom d'affichage mis à jour", "Display name updated"));
+}
+async function savePassword() {
+  var data = await ZS.api("POST", "/api/social/user/update-password", { currentPassword: document.getElementById("settingsCurrentPass").value, newPassword: document.getElementById("settingsNewPass").value });
+  alert(data.error || data.message);
+}
+async function savePrivacy() {
+  if (!_selectedPrivacy) return;
+  var data = await ZS.api("POST", "/api/social/user/privacy-choice", { level: _selectedPrivacy, acknowledged: true });
+  if (data.error) { alert(data.error); return; }
+  ZS.user.privacyLevel = data.privacyLevel;
+  alert(ZS.t("Confidentialité mise à jour", "Privacy updated"));
+}
+async function deleteAccount() {
+  if (!confirm(ZS.t("Êtes-vous sûr ?", "Are you sure?"))) return;
+  var data = await ZS.api("POST", "/api/social/user/delete-account", { password: document.getElementById("settingsDeletePass").value });
+  if (data.error) { alert(data.error); return; }
+  ZS.user = null;
+  ZS.navigate("feed");
+}
+
+// ═══════════════════════════════════════
+// COMMUNITY
+// ═══════════════════════════════════════
+
+async function renderCommunity() {
+  var L = ZS.lang;
+  var html = '<h2 class="mb-16">' + ZS.icon("users") + ' ' + ZS.t("Communauté", "Community") + '</h2>' +
+    '<div class="compose-box p-16">' +
+    '<input type="text" class="settings-input w-full" id="searchInput" placeholder="' + ZS.t("Rechercher un utilisateur...", "Search users...") + '" data-key="Enter" data-key-action="searchUsers">' +
+    '</div>' +
+    '<div id="searchResults"></div>' +
+    (ZS.user ? '<div id="connectionsSection" class="mt-16"></div>' : '');
+
+  ZS.renderShell(null, html, null);
+  if (ZS._updateSEO) ZS._updateSEO(
+    ZS.t("Communauté", "Community") + ' — Zektyc Social',
+    ZS.t("Recherchez et connectez-vous avec d'autres utilisateurs.", "Search and connect with other users."),
+    location.origin + location.pathname + '#/community'
+  );
+  if (ZS.user) loadConnections();
+}
+
+async function searchUsers() {
+  var q = document.getElementById("searchInput").value.trim();
+  var el = document.getElementById("searchResults");
+  if (q.length < 2) { el.innerHTML = ""; return; }
+  el.innerHTML = _spinner();
+  var data = await ZS.api("GET", "/api/social/search?q=" + encodeURIComponent(q));
+  if (!data.users || data.users.length === 0) {
+    el.innerHTML = '<div class="note-empty p-16">' + ZS.t("Aucun résultat", "No results") + '</div>';
+    return;
+  }
+  el.innerHTML = data.users.map(function(u) {
+    return '<div class="search-result-item" data-action="nav" data-arg1="profile-view" data-arg2="' + ZS.esc(u.username) + '">' +
+      _avatar(u.username, 40, u.avatar_url) +
+      '<div><div class="font-600 text-base">' + ZS.esc(u.username) + '</div>' +
+      (u.bio ? '<div class="text-xs text-muted">' + ZS.esc(u.bio) + '</div>' : '') +
+      '</div></div>';
+  }).join("");
+}
+
+async function loadConnections() {
+  var el = document.getElementById("connectionsSection");
+  if (!el) return;
+  var data = await ZS.api("GET", "/api/social/connections");
+  var html = "";
+
+  if (data.incoming && data.incoming.length > 0) {
+    html += '<h3 class="mb-8">' + ZS.t("Demandes reçues", "Incoming") + '</h3>';
+    html += data.incoming.map(function(c) {
+      return '<div class="conn-item">' + _avatar(c.username, 40, c.avatar_url) +
+        '<div class="conn-info"><div class="conn-name">' + ZS.esc(c.username) + '</div></div>' +
+        '<div class="conn-actions">' +
+        '<button class="btn-primary btn-primary-sm" data-action="acceptConnection" data-arg1="' + ZS.esc(c.username) + '">' + ZS.icon("check") + '</button>' +
+        '<button class="btn-primary btn-primary-sm btn-outline" data-action="rejectConnection" data-arg1="' + ZS.esc(c.username) + '">' + ZS.icon("close") + '</button>' +
+        '</div></div>';
+    }).join("");
+  }
+
+  if (data.accepted && data.accepted.length > 0) {
+    html += '<h3 class="mv-16 mb-8">' + ZS.t("Mes contacts", "My contacts") + ' (' + data.accepted.length + ')</h3>';
+    html += data.accepted.map(function(c) {
+      return '<div class="conn-item">' + _avatar(c.username, 40, c.avatar_url) +
+        '<div class="conn-info"><div class="conn-name">' + ZS.esc(c.username) + '</div></div>' +
+        '<button class="btn-primary btn-primary-sm btn-outline" data-action="chatWith" data-arg1="' + ZS.esc(c.username) + '">' + ZS.icon("mail") + '</button>' +
+        '</div>';
+    }).join("");
+  }
+
+  if (!html) html = '<div class="note-empty p-16">' + ZS.t("Aucune connexion pour le moment.", "No connections yet.") + '</div>';
+  el.innerHTML = html;
+}
+
+async function acceptConnection(username) {
+  await ZS.api("POST", "/api/social/connections/" + encodeURIComponent(username) + "/accept");
+  loadConnections();
+}
+async function rejectConnection(username) {
+  await ZS.api("POST", "/api/social/connections/" + encodeURIComponent(username) + "/reject");
+  loadConnections();
+}
+async function sendConnection(username) {
+  var data = await ZS.api("POST", "/api/social/connections/" + encodeURIComponent(username));
+  alert(data.error || data.message);
+}
+async function removeConnection(username) {
+  if (!confirm(ZS.t("Retirer ?", "Remove?"))) return;
+  var data = await ZS.api("DELETE", "/api/social/connections/" + encodeURIComponent(username));
+  alert(data.error || data.message);
+  _renderProfilePage(username);
+}
+
+// ═══════════════════════════════════════
+// MESSAGES
+// ═══════════════════════════════════════
+
+async function renderMessages() {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  ZS.renderShell(null, '<h2 class="mb-16">' + ZS.icon("mail") + ' ' + ZS.t("Messages", "Messages") + '</h2>' +
+    '<div id="convList">' + _spinner() + '</div>', null);
+
+  var data = await ZS.api("GET", "/api/social/messages");
+  var el = document.getElementById("convList");
+  if (!data.conversations || data.conversations.length === 0) {
+    el.innerHTML = '<div class="empty-state p-40"><div class="empty-state-icon">' + ZS.icon("mail") + '</div>' +
+      '<h3>' + ZS.t("Aucune conversation", "No conversations") + '</h3></div>';
+    return;
+  }
+
+  el.innerHTML = data.conversations.map(function(c) {
+    return '<div class="msg-list-item" data-action="chatWithUser" data-arg1="' + ZS.esc(c.other_username) + '">' +
+      '<div class="msg-list-avatar">' + ZS.esc(c.other_username).charAt(0).toUpperCase() + '</div>' +
+      '<div class="msg-list-info"><div class="msg-list-name">' + ZS.esc(c.other_username) + '</div>' +
+      '<div class="msg-list-preview">' + ZS.esc(c.content) + '</div></div>' +
+      '<div class="msg-list-meta"><div class="msg-list-time">' + _timeAgo(c.created_at) + '</div>' +
+      (c.unread_count > 0 ? '<div class="msg-list-unread">' + c.unread_count + '</div>' : '') +
+      '</div></div>';
+  }).join("");
+}
+
+async function renderChat(username) {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  var html = '<div class="chat-window">' +
+    '<div class="chat-header-row">' +
+    '<button class="btn-ghost" data-action="nav" data-arg1="messages">' + ZS.icon("arrowLeft") + '</button>' +
+    '<h2 class="chat-header-name">' + ZS.esc(username) + '</h2></div>' +
+    '<div class="chat-messages" id="chatMessages">' + _spinner() + '</div>' +
+    '<div class="chat-input-bar">' +
+    '<input type="text" id="chatInput" placeholder="' + ZS.t("Écrire...", "Type...") + '" data-key="Enter" data-key-action="sendMsg" data-arg1="' + ZS.esc(username) + '">' +
+    '<button class="btn-primary btn-primary-sm" data-action="sendMsg" data-arg1="' + ZS.esc(username) + '">' + ZS.icon("send") + '</button></div></div>';
+
+  ZS.renderShell(null, html, null);
+  await loadChatMessages(username);
+}
+
+async function loadChatMessages(username) {
+  var el = document.getElementById("chatMessages");
+  var data = await ZS.api("GET", "/api/social/messages/" + encodeURIComponent(username));
+  if (!data.messages || data.messages.length === 0) {
+    el.innerHTML = '<div class="note-empty p-24">' + ZS.t("Pas encore de messages.", "No messages yet.") + '</div>';
+    return;
+  }
+  el.innerHTML = data.messages.map(function(m) {
+    var isMine = m.sender_id === ZS.user.id;
+    return '<div class="chat-bubble ' + (isMine ? 'chat-sent' : 'chat-received') + '">' +
+      '<div>' + ZS.esc(m.content) + '</div>' +
+      '<div class="chat-time">' + _timeAgo(m.created_at) + '</div></div>';
+  }).join("");
+  el.scrollTop = el.scrollHeight;
+}
+
+async function sendMsg(username) {
+  var input = document.getElementById("chatInput");
+  if (!input || !input.value.trim()) return;
+  var content = input.value.trim();
+  input.value = "";
+  var data = await ZS.api("POST", "/api/social/messages/" + encodeURIComponent(username), { content: content });
+  if (data.error) { alert(data.error); return; }
+  loadChatMessages(username);
+}
+
+// ═══════════════════════════════════════
+// NOTIFICATIONS
+// ═══════════════════════════════════════
+
+async function renderNotifications() {
+  if (!ZS.user) { ZS.navigate("login"); return; }
+  ZS.renderShell(null, '<div class="notif-header">' +
+    '<h2>' + ZS.icon("bell") + ' ' + ZS.t("Alertes", "Alerts") + '</h2>' +
+    '<button class="btn-primary btn-primary-sm btn-outline" data-action="markAllRead">' + ZS.t("Tout marquer lu", "Mark all read") + '</button></div>' +
+    '<div id="verifyRequests"></div>' +
+    '<div id="notifList">' + _spinner() + '</div>', null);
+
+  // Load verification requests
+  var vrData = await ZS.api("GET", "/api/social/verification/pending");
+  var vrEl = document.getElementById("verifyRequests");
+  if (vrEl && vrData.requests && vrData.requests.length > 0) {
+    vrEl.innerHTML = '<div class="verify-requests-section">' +
+      '<h3 class="mb-8">' + ZS.icon("verifiedGold") + ' ' + ZS.t("Propositions de vérification", "Verification proposals") + '</h3>' +
+      vrData.requests.map(function(r) {
+        return '<div class="verify-request-item">' +
+          _avatar(r.username, 36, r.avatar_url) +
+          '<div class="verify-request-info"><strong>' + ZS.esc(r.username) + '</strong> ' +
+          ZS.t("souhaite vous attribuer un badge Vérifié", "wants to give you a Verified badge") + '</div>' +
+          '<div class="verify-request-actions">' +
+          '<button class="btn-primary btn-primary-sm" data-action="acceptVerify" data-arg1="' + r.id + '">' + ZS.icon("check") + ' ' + ZS.t("Accepter", "Accept") + '</button>' +
+          '<button class="btn-primary btn-primary-sm btn-outline" data-action="rejectVerify" data-arg1="' + r.id + '">' + ZS.icon("close") + '</button>' +
+          '</div></div>';
+      }).join("") + '</div>';
+  }
+
+  var data = await ZS.api("GET", "/api/social/notifications");
+  var el = document.getElementById("notifList");
+
+  if (!data.notifications || data.notifications.length === 0) {
+    el.innerHTML = '<div class="empty-state p-40"><div class="empty-state-icon">' + ZS.icon("bell") + '</div>' +
+      '<h3>' + ZS.t("Aucune alerte", "No alerts") + '</h3></div>';
+    return;
+  }
+
+  var icons = { like: "heart", comment: "comment", message: "mail", connection_request: "user", connection_accepted: "users", follow: "user", post_approved: "check", post_rejected: "close", verification_request: "verifiedGold", verification_accepted: "check" };
+
+  el.innerHTML = data.notifications.map(function(n) {
+    var text = _notifText(n);
+    var iconName = icons[n.type] || "bell";
+    var actions = _notifActions(n);
+    var usernameLink = n.from_username ? ' data-action="navProfile" data-arg1="' + ZS.esc(n.from_username) + '"' : '';
+    return '<div class="notif-item' + (n.is_read ? '' : ' unread') + '">' +
+      '<div class="notif-icon"' + usernameLink + '>' + ZS.icon(iconName) + '</div>' +
+      '<div class="notif-body"' + usernameLink + '><div class="notif-text">' + text + '</div>' +
+      '<div class="notif-time">' + _timeAgo(n.created_at) + '</div></div>' +
+      (actions ? '<div class="notif-actions">' + actions + '</div>' : '') + '</div>';
+  }).join("");
+
+  ZS.refreshCounts();
+}
+
+function _notifText(n) {
+  var u = n.from_username ? ZS.esc(n.from_display_name || n.from_username) : "";
+  switch (n.type) {
+    case "like": return '<strong>' + u + '</strong> ' + ZS.t("a aimé votre publication", "liked your post");
+    case "comment": return '<strong>' + u + '</strong> ' + ZS.t("a commenté votre publication", "commented on your post");
+    case "message": return '<strong>' + u + '</strong> ' + ZS.t("vous a envoyé un message", "sent you a message");
+    case "connection_request": return '<strong>' + u + '</strong> ' + ZS.t("souhaite se connecter", "wants to connect");
+    case "connection_accepted": return '<strong>' + u + '</strong> ' + ZS.t("a accepté votre demande", "accepted your request");
+    case "follow": return '<strong>' + u + '</strong> ' + ZS.t("commence à vous suivre", "started following you");
+    case "post_approved": return '<strong>' + u + '</strong> ' + ZS.t("a vérifié votre publication", "verified your post");
+    case "post_rejected": return '<strong>' + u + '</strong> ' + ZS.t("a rejeté votre publication", "rejected your post");
+    case "verification_request": return '<strong>' + u + '</strong> ' + ZS.t("vous propose une vérification Blue ✓", "proposes a Blue ✓ verification");
+    case "verification_accepted": return '<strong>' + u + '</strong> ' + ZS.t("a accepté votre vérification", "accepted your verification");
+    default: return n.type;
+  }
+}
+
+function _notifActions(n) {
+  if (!n.from_username) return "";
+  switch (n.type) {
+    case "connection_request":
+      return '<button class="btn-primary btn-primary-sm" data-action="acceptConnection" data-arg1="' + ZS.esc(n.from_username) + '">' + ZS.icon("check") + ' ' + ZS.t("Accepter", "Accept") + '</button>' +
+        '<button class="btn-primary btn-primary-sm btn-outline" data-action="rejectConnection" data-arg1="' + ZS.esc(n.from_username) + '">' + ZS.icon("close") + '</button>';
+    case "message":
+      return '<button class="btn-primary btn-primary-sm btn-outline" data-action="chatWith" data-arg1="' + ZS.esc(n.from_username) + '">' + ZS.icon("reply") + ' ' + ZS.t("Répondre", "Reply") + '</button>';
+    case "follow":
+      return '<button class="btn-primary btn-primary-sm" data-action="follow" data-arg1="' + n.from_user_id + '">' + ZS.icon("plus") + ' ' + ZS.t("Suivre", "Follow") + '</button>';
+    case "comment":
+      return '<button class="btn-primary btn-primary-sm btn-outline" data-action="navProfile" data-arg1="' + ZS.esc(n.from_username) + '">' + ZS.icon("user") + ' ' + ZS.t("Voir profil", "View profile") + '</button>';
+    default:
+      return "";
+  }
+}
+
+async function markAllRead() {
+  await ZS.api("POST", "/api/social/notifications/read");
+  ZS._unreadNotifs = 0;
+  ZS.refreshCounts();
+  renderNotifications();
+}
+
+// ═══════════════════════════════════════
+// MODERATION
+// ═══════════════════════════════════════
+
+var _modTab = "posts";
+
+async function renderMod() {
+  if (!ZS.user || (ZS.user.role !== "admin" && ZS.user.role !== "moderator")) {
+    ZS.renderShell(null, '<div class="empty-state"><div class="empty-state-icon">' + ZS.icon("shield") + '</div><h3>' + ZS.t("Accès refusé", "Access denied") + '</h3></div>', null);
+    return;
+  }
+
+  var html = '<h2 class="mb-16">' + ZS.icon("shield") + ' ' + ZS.t("Modération", "Moderation") + '</h2>' +
+    '<div class="mod-tabs">' +
+    '<button class="mod-tab active" data-action="switchModTab" data-arg1="posts">' + ZS.t("Posts", "Posts") + '</button>' +
+    '<button class="mod-tab" data-action="switchModTab" data-arg1="notes">' + ZS.t("Notes", "Notes") + '</button>' +
+    '<button class="mod-tab" data-action="switchModTab" data-arg1="reports">' + ZS.t("Signalements", "Reports") + '</button>' +
+    '</div><div id="modContent">' + _spinner() + '</div>';
+
+  ZS.renderShell(null, html, null);
+  _loadModData();
+}
+
+async function _loadModData() {
+  var data = await ZS.api("GET", "/api/social/mod/pending");
+  window._modData = data;
+  _renderModTab();
+}
+
+function switchModTab(tab, btn) {
+  _modTab = tab;
+  document.querySelectorAll(".mod-tab").forEach(function(t) { t.classList.remove("active"); });
+  btn.classList.add("active");
+  _renderModTab();
+}
+
+function _renderModTab() {
+  var data = window._modData || {};
+  var el = document.getElementById("modContent");
+  if (!el) return;
+
+  if (_modTab === "posts") {
+    var posts = data.posts || [];
+    if (posts.length === 0) {
+      el.innerHTML = '<div class="empty-state p-30"><div class="empty-state-icon">' + ZS.icon("check") + '</div><h3>' + ZS.t("Tout est vérifié", "All clear") + '</h3></div>';
+      return;
+    }
+    el.innerHTML = posts.map(function(p) {
+      return '<div class="mod-card"><div class="mod-card-header"><span class="mod-card-author">' + ZS.esc(p.username) + '</span><span class="mod-card-time">' + _timeAgo(p.created_at) + '</span></div>' +
+        '<div class="mod-card-body">' + ZS.esc(p.content) + '</div>' +
+        '<div class="mod-card-actions">' +
+        '<button class="btn-primary btn-primary-sm" data-action="modAction" data-arg1="posts" data-arg2="' + p.id + '" data-action-type="approve">' + ZS.icon("check") + ' ' + ZS.t("Approuver", "Approve") + '</button>' +
+        '<button class="btn-primary btn-primary-sm btn-danger" data-action="modAction" data-arg1="posts" data-arg2="' + p.id + '" data-action-type="reject">' + ZS.icon("close") + ' ' + ZS.t("Rejeter", "Reject") + '</button>' +
+        '</div></div>';
+    }).join("");
+  } else if (_modTab === "notes") {
+    var notes = data.notes || [];
+    if (notes.length === 0) {
+      el.innerHTML = '<div class="empty-state p-30"><div class="empty-state-icon">' + ZS.icon("check") + '</div><h3>' + ZS.t("Aucune note en attente", "No pending notes") + '</h3></div>';
+      return;
+    }
+    el.innerHTML = notes.map(function(n) {
+      return '<div class="mod-card"><div class="mod-card-header"><span class="mod-card-author">' + ZS.esc(n.username) + '</span><span class="mod-card-time">' + _timeAgo(n.created_at) + '</span></div>' +
+        '<div class="mod-card-body">' + ZS.esc(n.content) + '</div>' +
+        '<div class="mod-card-actions">' +
+        '<button class="btn-primary btn-primary-sm" data-action="modNoteAction" data-arg2="' + n.id + '" data-action-type="approve">' + ZS.icon("check") + '</button>' +
+        '<button class="btn-primary btn-primary-sm btn-danger" data-action="modNoteAction" data-arg2="' + n.id + '" data-action-type="reject">' + ZS.icon("close") + '</button>' +
+        '</div></div>';
+    }).join("");
+  } else if (_modTab === "reports") {
+    var reports = data.reports || [];
+    if (reports.length === 0) {
+      el.innerHTML = '<div class="empty-state p-30"><div class="empty-state-icon">' + ZS.icon("check") + '</div><h3>' + ZS.t("Aucun signalement", "No reports") + '</h3></div>';
+      return;
+    }
+    el.innerHTML = reports.map(function(r) {
+      return '<div class="mod-card"><div class="mod-card-meta">' + ZS.t("Par", "By") + ' <strong>' + ZS.esc(r.reporter_username) + '</strong> · ' + _timeAgo(r.created_at) + '</div>' +
+        '<div class="mod-card-body">' + r.target_type + '#' + r.target_id + ' — ' + ZS.esc(r.reason) + '</div>' +
+        '<div class="mod-card-actions">' +
+        '<button class="btn-primary btn-primary-sm" data-action="resolveReport" data-arg1="' + r.id + '">' + ZS.icon("check") + ' ' + ZS.t("Résolu", "Resolved") + '</button>' +
+        '</div></div>';
+    }).join("");
+  }
+}
+
+function modAction(type, id, actionType) {
+  ZS.api("POST", "/api/social/mod/verify/" + id, { action: actionType }).then(function(d) {
+    if (d.error) alert(d.error); _loadModData();
+  });
+}
+function modNoteAction(id, actionType) {
+  ZS.api("POST", "/api/social/mod/note/" + id, { action: actionType }).then(function(d) {
+    if (d.error) alert(d.error); _loadModData();
+  });
+}
+function resolveReport(id) {
+  ZS.api("POST", "/api/social/mod/report/" + id, { action: "resolve" }).then(function(d) {
+    if (d.error) alert(d.error); _loadModData();
+  });
+}
diff --git a/public/js/social.js b/public/js/social.js
new file mode 100644
index 0000000..0758ebc
--- /dev/null
+++ b/public/js/social.js
@@ -0,0 +1,98 @@
+// Zektyc Social — Router v3 (CSP-safe)
+(function() {
+  "use strict";
+
+  window._socialRender = function() {
+    switch (ZS.view) {
+      case "login": renderLogin(); break;
+      case "signup": renderSignup(); break;
+      case "privacy-choice": renderPrivacyChoice(); break;
+      case "profile": renderProfile(); break;
+      case "profile-view": renderProfileView(ZS.viewData); break;
+      case "settings": renderSettings(); break;
+      case "post": _renderNewPost(); break;
+      case "community": renderCommunity(); break;
+      case "messages": renderMessages(); break;
+      case "chat": renderChat(ZS.viewData); break;
+      case "notifications": renderNotifications(); break;
+      case "mod": renderMod(); break;
+      default: renderFeed(); break;
+    }
+    var nav = document.getElementById("socialHeaderNav");
+    if (nav) nav.classList.remove("open");
+    ZS._navOpen = false;
+    if (typeof _applyAvatarStyles === "function") _applyAvatarStyles();
+  };
+
+  function _renderNewPost() {
+    if (!ZS.user) { ZS.navigate("login"); return; }
+    var avatarHtml = ZS.user.avatarUrl
+      ? '<div class="compose-avatar"><img src="' + ZS.esc(ZS.user.avatarUrl) + '" alt=""></div>'
+      : '<div class="compose-avatar">' + ZS.esc(ZS.user.username).charAt(0).toUpperCase() + '</div>';
+    var html = '<h2 class="mb-16">' + ZS.icon("pen") + ' ' + ZS.t("Nouvelle publication", "New post") + '</h2>' +
+      '<div class="compose-box">' +
+      '<div class="compose-row">' +
+      avatarHtml +
+      '<div class="compose-input-wrap">' +
+      '<textarea id="fullComposeText" placeholder="' + ZS.t("Quoi de neuf ?", "What's new?") + '" rows="4" maxlength="5000" class="auto-resize"></textarea>' +
+      '<div id="fullEmojiPicker" class="emoji-picker hidden">' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="😀">😀</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="😂">😂</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="❤️">❤️</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="🔥">🔥</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="👍">👍</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="👀">👀</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="💯">💯</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="🎉">🎉</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="🤔">🤔</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="😎">😎</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="🚀">🚀</span>' +
+      '<span class="emoji-pick" data-action="insertEmojiFull" data-arg1="💡">💡</span>' +
+      '</div>' +
+      '</div></div>' +
+      '<div class="compose-footer">' +
+      '<div class="compose-meta">' +
+      '<button type="button" class="compose-emoji-btn" data-action="toggleEmojiFull">' + ZS.icon("star") + '</button>' +
+      '<span class="compose-counter" id="fullComposeCounter">0/5000</span>' +
+      '<select class="compose-vis-select" id="fullComposeVis">' +
+      '<option value="public">' + ZS.icon("globe") + ' ' + ZS.t("Public", "Public") + '</option>' +
+      '<option value="connections_only">' + ZS.icon("users") + ' ' + ZS.t("Connexions", "Connections") + '</option>' +
+      '<option value="private">' + ZS.icon("lock") + ' ' + ZS.t("Privé", "Private") + '</option>' +
+      '</select></div>' +
+      '<button class="btn-primary btn-primary-sm" data-action="submitFullPost">' + ZS.icon("send") + ' ' + ZS.t("Publier", "Post") + '</button>' +
+      '</div></div>' +
+      '<div class="info-box mt-12">' + ZS.icon("note") + ' ' + ZS.t("Vérifié par un modérateur avant publication.", "Reviewed by a moderator before publishing.") + '</div>' +
+      '<p class="mt-12"><a href="#" class="text-sm" data-action="nav" data-arg1="feed">' + ZS.icon("arrowLeft") + ' ' + ZS.t("Retour au fil", "Back to feed") + '</a></p>';
+
+    ZS.renderShell(null, html, null);
+    document.getElementById("fullComposeVis").value = ZS.user.privacyLevel || "connections_only";
+    var ta = document.getElementById("fullComposeText");
+    if (ta) ta.focus();
+  }
+
+  window.submitFullPost = async function() {
+    var textarea = document.getElementById("fullComposeText");
+    if (!textarea || !textarea.value.trim()) return;
+    var vis = document.getElementById("fullComposeVis").value;
+    var data = await ZS.api("POST", "/api/social/posts", { content: textarea.value.trim(), visibility: vis });
+    if (data.error) { alert(data.error); return; }
+    ZS.navigate("feed");
+  };
+
+  // Init
+  window.addEventListener("popstate", function(e) {
+    var parsed = e.state && e.state.view ? e.state : ZS._parsePath();
+    ZS.view = parsed.view;
+    ZS.viewData = parsed.data;
+    if (window._socialRender) window._socialRender();
+  });
+
+  ZS.checkSession().then(function() {
+    var parsed = ZS._parsePath();
+    if (parsed.view !== "feed" || parsed.data) {
+      ZS.view = parsed.view;
+      ZS.viewData = parsed.data;
+    }
+    ZS.navigate(ZS.view, ZS.viewData);
+  });
+})();
diff --git a/public/js/theme.js b/public/js/theme.js
new file mode 100644
index 0000000..08000cf
--- /dev/null
+++ b/public/js/theme.js
@@ -0,0 +1,29 @@
+(function () {
+  var STORAGE_KEY = "zektyc-theme"
+  var DEFAULT = "dark"
+
+  function getPreferred() {
+    try {
+      var stored = localStorage.getItem(STORAGE_KEY)
+      if (stored === "light" || stored === "dark") return stored
+    } catch (e) {}
+    return DEFAULT
+  }
+
+  function apply(theme) {
+    document.documentElement.setAttribute("data-theme", theme)
+  }
+
+  apply(getPreferred())
+
+  document.addEventListener("click", function (e) {
+    var btn = e.target.closest ? e.target.closest(".theme-btn") : null
+    if (!btn) return
+    var current = document.documentElement.getAttribute("data-theme") || DEFAULT
+    var next = current === "dark" ? "light" : "dark"
+    apply(next)
+    try {
+      localStorage.setItem(STORAGE_KEY, next)
+    } catch (e) {}
+  })
+})();
diff --git a/public/js/zf-worker.js b/public/js/zf-worker.js
new file mode 100644
index 0000000..fbeb234
--- /dev/null
+++ b/public/js/zf-worker.js
@@ -0,0 +1,134 @@
+"use strict"
+
+var FONT_LIST = [
+  "Arial", "Arial Black", "Arial Narrow", "Arial Unicode MS", "Bahnschrift", "Baskerville",
+  "Calibri", "Cambria", "Cambria Math", "Candara", "Century Gothic", "Charter", "Cochin",
+  "Comic Sans MS", "Consolas", "Constantia", "Corbel", "Courier", "Courier New", "DejaVu Sans",
+  "DejaVu Sans Mono", "DejaVu Serif", "Didot", "Franklin Gothic Medium", "Futura", "Geneva",
+  "Georgia", "Gill Sans", "Helvetica", "Helvetica Neue", "Impact", "Iowan Old Style", "Lato",
+  "Liberation Sans", "Liberation Serif", "Lucida Console", "Malgun Gothic", "Menlo", "Microsoft JhengHei",
+  "Microsoft Sans Serif", "Microsoft YaHei", "Monaco", "Noto Sans", "Noto Sans Mono", "Noto Serif",
+  "Open Sans", "Optima", "Palatino", "Palatino Linotype", "Roboto", "Segoe UI", "Segoe UI Emoji",
+  "Sitka", "Symbol", "Tahoma", "Times New Roman", "Trebuchet MS", "Ubuntu", "Ubuntu Mono",
+  "Verdana", "Webdings", "Wingdings", "Zapfino"
+]
+
+function probeCanvasFonts(list) {
+  var found = []
+  try {
+    var cv = new OffscreenCanvas(300, 60)
+    var cx = cv.getContext("2d")
+    cx.font = "48px serif"
+    var base = cx.measureText("mmllii").width
+    for (var i = 0; i < list.length; i++) {
+      cx.font = "48px '" + list[i] + "', serif"
+      if (cx.measureText("mmllii").width !== base) found.push(list[i])
+    }
+  } catch (e) {}
+  return found
+}
+
+function probeScreen() {
+  var o = {}
+  try {
+    if (typeof self.screen !== "undefined" && self.screen) {
+      o.colorDepth = String(self.screen.colorDepth || "")
+      o.orientation = (self.screen.orientation && self.screen.orientation.type) || ""
+    }
+  } catch (e) {}
+  return o
+}
+
+function probeCodecs() {
+  var got = {}
+  try {
+    if (navigator.mediaCapabilities && navigator.mediaCapabilities.decodingInfo) {
+      var tests = {
+        vp9: { type: "file", video: { contentType: 'video/webm;codecs="vp09.00.10.08"', width: 1920, height: 1080, bitrate: 4000000, framerate: 30 } },
+        av1: { type: "file", video: { contentType: 'video/webm;codecs="av01.0.04M.08"', width: 1920, height: 1080, bitrate: 4000000, framerate: 30 } },
+        opus: { type: "file", audio: { contentType: 'audio/ogg;codecs="opus"' } }
+      }
+      return Promise.all(
+        ["vp9", "av1", "opus"].map(function (k) {
+          return navigator.mediaCapabilities
+            .decodingInfo(tests[k])
+            .then(function (r) { got[k] = r && r.supported ? "1" : "0" })
+            .catch(function () { got[k] = "0" })
+        })
+      ).then(function () { return got })
+    }
+  } catch (e) {}
+  return Promise.resolve(got)
+}
+
+self.onmessage = function () {
+  var out = {}
+
+  try {
+    var ops = ["sin", "cos", "tan", "log", "exp", "sqrt", "asin", "acos", "atan2", "sinh", "cosh", "tanh", "cbrt"]
+    var m = []
+    for (var i = 0; i < ops.length; i++) {
+      m.push(Math[ops[i]](i * 0.123456789 + 1).toPrecision(17))
+    }
+    out.math = m.join(":")
+  } catch (e) {
+    out.math = null
+  }
+
+  try {
+    out.calendars = typeof Intl.supportedValuesOf === "function" ? Intl.supportedValuesOf("calendar").join(",") : null
+  } catch (e) {
+    out.calendars = null
+  }
+  try {
+    out.locale = Intl.DateTimeFormat().resolvedOptions().locale
+  } catch (e) {
+    out.locale = null
+  }
+  try {
+    out.numbering = new Intl.NumberFormat().resolvedOptions().numberingSystem
+  } catch (e) {
+    out.numbering = null
+  }
+
+  out.wasm = !!self.WebAssembly
+  try {
+    out.simd = self.WebAssembly.validate(
+      new Uint8Array([
+        0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00,
+        0x01, 0x05, 0x01, 0x60, 0x00, 0x01, 0x7b,
+        0x03, 0x02, 0x01, 0x00,
+        0x0a, 0x17, 0x01, 0x15, 0x00,
+        0x41, 0x00, 0xfd, 0x0c, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+        0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x0b
+      ])
+    )
+  } catch (e) {
+    out.simd = false
+  }
+
+  var t0 = performance.now()
+  var x = 0
+  for (var k = 0; k < 2000000; k++) {
+    x = (x + k) % 97
+    x = Math.sqrt(x) + Math.log(k + 1)
+  }
+  var dt = performance.now() - t0
+  out.bench = dt > 0 ? Math.round(2000000 / dt) : 0
+
+  out.fonts = probeCanvasFonts(FONT_LIST)
+  var scr = probeScreen()
+  out.colorDepth = scr.colorDepth || ""
+  out.orientation = scr.orientation || ""
+
+  try {
+    out.fontLocalApi = typeof FontFace === "function" && typeof self.fonts === "object" && self.fonts && typeof self.fonts.add === "function" ? "local" : "unsupported"
+  } catch (e) {
+    out.fontLocalApi = "unsupported"
+  }
+
+  probeCodecs().then(function (codecs) {
+    out.codecs = codecs
+    postMessage(out)
+  })
+}
diff --git a/public/js/zfprobe.js b/public/js/zfprobe.js
new file mode 100644
index 0000000..6cb201c
--- /dev/null
+++ b/public/js/zfprobe.js
@@ -0,0 +1,2409 @@
+(function () {
+  "use strict"
+
+  var LANG = document.documentElement && document.documentElement.lang === "en" ? "en" : "fr"
+
+  var TEXTS = {
+    fr: {
+      run: "Lancer l'analyse",
+      running: "Analyse en cours…",
+      again: "Relancer l'analyse",
+      intro:
+        "Tout se déroule localement, dans votre navigateur. Aucun résultat n'est envoyé sur Internet, rien n'est stocké sur ce serveur, et aucune limite : relancez l'analyse autant de fois que vous voulez. Deux identifiants sont calculés : l'un propre à ce navigateur, l'autre propre à votre appareil (stable quand vous changez de navigateur).",
+      idLabel: "Empreinte navigateur (Ray ID)",
+      idHow:
+        "Calculé à partir des signaux dépendants du moteur (User-Agent, canvas, audio, moteur JS). Il change si vous changez de navigateur ou de réglages d'anti-empreinte.",
+      deviceLabel: "Empreinte d'appareil",
+      deviceHow:
+        "Calculé uniquement à partir du noyau matériel qui résiste à l'anti-empreinte : profondeur de couleur, canaux audio, codecs VP9/AV1/Opus, largeurs d'emoji (le font-spoofing ne touche pas les glyphes emoji) et écart à l'horloge du serveur (tronqué en paliers de 1 s). La dérive d'horloge locale est exclue : RFP la quantifie grossièrement et la rend aléatoire à chaque chargement. Le ZPD reste identique entre LibreWolf et Brave sur la même machine.",
+      entropyLabel: "Entropie totale",
+      entropyNote:
+        "L'entropie est exprimée en bits. Plus elle est élevée, plus votre navigateur est unique et donc identifiable.",
+      deviceEntropyLabel: "Entropie appareil",
+      browserEntropyLabel: "Entropie navigateur",
+      population: "Population théorique partageant cette empreinte",
+      level: "Niveau d'unicité",
+      deviceLevelLabel: "Unicité de l'appareil",
+      levels: { low: "Faible", moderate: "Modérée", high: "Élevée", extreme: "Extrême" },
+      scoreLabel: "Probabilité d'unicité",
+      stabilityLabel: "Signaux stables",
+      signalsTitle: "Les signaux analysés",
+      signalsHow: "Comment ça marche",
+      signalsProtect: "Comment s'en protéger",
+      stable: "stable",
+      volatile: "volatile",
+      device: "appareil",
+      browser: "navigateur",
+      core: "noyau",
+      notAvailable: "non disponible",
+      value: "Valeur",
+      bits: "bits",
+      entropy: "entropie",
+      estimated: "estimation",
+      estimatedNote:
+        "Estimations d'entropie issues des travaux publics de recherche sur l'empreinte navigateur (Panopticlick, AmIUnique, FingerprintJS).",
+      privacyNote:
+        "Confidentialité : cette page ne collecte rien. Toutes les mesures sont faites dans votre navigateur ; aucune donnée n'est envoyée ni enregistrée. C'est une démonstration pédagogique du fingerprinting.",
+      whatIsTitle: "Qu'est-ce que le fingerprinting ?",
+      whatIs: [
+        "Le fingerprinting (empreinte numérique) consiste à collecter les caractéristiques techniques d'un navigateur pour créer un identifiant unique et persistant, sans cookie ni compte.",
+        "Chaque navigateur combine différemment son moteur de rendu, sa carte graphique, ses polices installées, sa langue, son fuseau horaire, son écran et bien d'autres détails. Cette combinaison est presque toujours unique.",
+        "Deux couches coexistent : l'empreinte du navigateur (moteur JS, rendu canvas, traitement audio) qui change dès qu'on change de navigateur, et l'empreinte de l'appareil (écran, GPU, polices, OS) qui reste stable. C'est cette seconde couche qui permet à un site de vous reconnaître même si vous utilisez un navigateur différent.",
+        "C'est la technique de suivi la plus difficile à bloquer : il n'y a pas de cookie à supprimer. C'est pourquoi de nombreux sites, régies publicitaires et services antifraude l'utilisent — y compris certains fournisseurs qui l'annoncent comme un « Ray ID ».",
+        "L'objectif de cette page est de vous montrer ce que les sites peuvent savoir de vous, de vous donner un score, puis de vous expliquer comment vous protéger."
+      ],
+      error: "Le test a échoué sur ce navigateur. Essayez de relancer.",
+      webglExt: "extensions",
+      resolution: "résolution",
+      fontsCount: "polices détectées",
+      stableCount: "de vos signaux sont stables dans le temps",
+      deviceStableCount: "de vos signaux d'appareil sont stables entre navigateurs",
+      spoofTitle: "Anti-empreinte actif",
+      spoofText:
+        "Des signaux matériels sont incohérents (par exemple une plateforme Windows avec des polices Linux) : un anti-fingerprinting (RFP, extensions, lettreboxing…) masque ou spoofe votre appareil. Le ZPD reflète alors le matériel SPOOFÉ et peut changer d'un navigateur à l'autre — c'est le but de la protection. Pour comparer, utilisez deux navigateurs non durcis sur la même machine.",
+      run3: "Lancer l'analyse",
+      tourN: "Passage {n}/{t}",
+      tourRunning: "Analyse {n}/{t} en cours…",
+      tourDone: "Passage {n}/{t} terminé — on réanalyse…",
+      finalRun: "Dernier passage — calcul final en cours…",
+      multiTitle: "Votre niveau d'exposition au suivi",
+      multiIntro: "L'analyse s'est déroulée sur plusieurs instants d'affilée, avec un rechargement de la page entre chaque passage. Ce qui suit compare les empreintes d'un passage à l'autre et évalue à quel point il est possible de vous suivre.",
+      secScore: "Niveau d'exposition",
+      stabScore: "Stabilité",
+      protStatus: "Statut",
+      type: "Type",
+      zfpSub: "Empreinte navigateur",
+      zpdSub: "Empreinte d'appareil",
+      zfpDesc: "Fingerprinting basique — Cloudflare Ray ID, FingerprintJS, 95 %+ des sites. Identifie le navigateur, change quand vous changez de navigateur ou de profil.",
+      zpdDesc: "Fingerprinting avancé — rare, souvent partagé avec un tiers, extrêmement plus difficile à contourner. Identifie la machine elle-même, stable quelle que soit la configuration logicielle. Utilisé par des services comme Shugoi.",
+      protected: "Protégé",
+      partial: "Partiellement protégé",
+      vulnerable: "Vulnérable",
+      exposed: "Exposé",
+      instable: "Instable entre les passages",
+      stableSig: "Stable entre les passages",
+      recoTitle: "Recommandations",
+      restart: "Relancer l'analyse",
+      whatProtected: "Ce que vous protégez",
+      whatExposed: "Ce qui vous identifie"
+    },
+    en: {
+      run: "Run the analysis",
+      running: "Analyzing…",
+      again: "Run again",
+      intro:
+        "Everything runs locally, in your browser. No result is sent over the Internet, nothing is stored on this server, and there is no limit: re-run the analysis as many times as you like. Two identifiers are computed: one specific to this browser, one specific to your device (stable when you switch browsers).",
+      idLabel: "Browser fingerprint (Ray ID)",
+      idHow:
+        "Computed from engine-dependent signals (User-Agent, canvas, audio, JS engine). It changes if you switch browsers or anti-fingerprinting settings.",
+      deviceLabel: "Device fingerprint",
+      deviceHow:
+        "Computed only from the hardware core that resists anti-fingerprinting: color depth, audio channels, VP9/AV1/Opus codecs, emoji widths (font spoofing does not touch emoji glyphs) and server clock offset (truncated to 1 s steps). The local clock drift is excluded: RFP quantizes it coarsely and makes it random on every load. The ZPD stays identical between LibreWolf and Brave on the same machine.",
+      entropyLabel: "Total entropy",
+      entropyNote:
+        "Entropy is expressed in bits. The higher it is, the more unique — and trackable — your browser is.",
+      deviceEntropyLabel: "Device entropy",
+      browserEntropyLabel: "Browser entropy",
+      population: "Theoretical population sharing this fingerprint",
+      level: "Uniqueness level",
+      deviceLevelLabel: "Device uniqueness",
+      levels: { low: "Low", moderate: "Moderate", high: "High", extreme: "Extreme" },
+      scoreLabel: "Uniqueness probability",
+      stabilityLabel: "Stable signals",
+      signalsTitle: "Signals analyzed",
+      signalsHow: "How it works",
+      signalsProtect: "How to protect yourself",
+      stable: "stable",
+      volatile: "volatile",
+      device: "device",
+      browser: "browser",
+      core: "core",
+      notAvailable: "not available",
+      value: "Value",
+      bits: "bits",
+      entropy: "entropy",
+      estimated: "estimate",
+      estimatedNote:
+        "Entropy estimates based on public fingerprinting research (Panopticlick, AmIUnique, FingerprintJS).",
+      privacyNote:
+        "Privacy: this page collects nothing. Every measurement happens in your browser; no data is sent or stored. This is a pedagogical demonstration of fingerprinting.",
+      whatIsTitle: "What is fingerprinting?",
+      whatIs: [
+        "Fingerprinting is the collection of a browser's technical characteristics to build a unique, persistent identifier — without cookies or accounts.",
+        "Each browser combines its rendering engine, GPU, installed fonts, language, timezone, screen and many other details differently. This combination is almost always unique.",
+        "Two layers coexist: the browser fingerprint (JS engine, canvas rendering, audio processing) which changes as soon as you switch browsers, and the device fingerprint (screen, GPU, fonts, OS) which stays stable. This second layer is what lets a website recognize you even with a different browser.",
+        "It is the hardest tracking technique to block: there is no cookie to delete. That is why many websites, ad networks and anti-fraud services use it — including providers that brand it as a “Ray ID”.",
+        "The goal of this page is to show you what websites can learn about you, give you a score, and explain how to protect yourself."
+      ],
+      error: "The test failed in this browser. Try again.",
+      webglExt: "extensions",
+      resolution: "resolution",
+      fontsCount: "fonts detected",
+      stableCount: "of your signals are stable over time",
+      deviceStableCount: "of your device signals are stable across browsers",
+      spoofTitle: "Anti-fingerprinting detected",
+      spoofText:
+        "Hardware signals are inconsistent (e.g. a Windows platform reporting Linux fonts): an anti-fingerprinting tool (RFP, extensions, letterboxing…) is hiding or spoofing your device. The ZPD then reflects the SPOOFED hardware and may change from one browser to another — that is the point of the protection. To compare, use two non-hardened browsers on the same machine.",
+      run3: "Run the analysis",
+      tourN: "Pass {n}/{t}",
+      tourRunning: "Analyzing pass {n}/{t}…",
+      tourDone: "Pass {n}/{t} done — running again…",
+      finalRun: "Last pass — computing the final result…",
+      multiTitle: "How trackable you are",
+      multiIntro: "The analysis ran several times in a row, reloading the page between each pass. What follows compares the fingerprints across passes and gauges how easily you can be tracked.",
+      secScore: "Exposure level",
+      stabScore: "Stability",
+      protStatus: "Status",
+      type: "Type",
+      zfpSub: "Browser fingerprint",
+      zpdSub: "Device fingerprint",
+      zfpDesc: "Basic fingerprinting — Cloudflare Ray ID, FingerprintJS, 95%+ of sites. Identifies the browser, changes when you switch browser or profile.",
+      zpdDesc: "Advanced fingerprinting — rare, often shared with a third party, much harder to bypass. Identifies the machine itself, stable regardless of software configuration. Used by services like Shugoi.",
+      protected: "Protected",
+      partial: "Partially protected",
+      vulnerable: "Vulnerable",
+      exposed: "Exposed",
+      instable: "Unstable across passes",
+      stableSig: "Stable across passes",
+      recoTitle: "Recommendations",
+      restart: "Run the analysis again",
+      whatProtected: "What you're protecting",
+      whatExposed: "What identifies you"
+    }
+  }
+
+  function t(key) {
+    var chain = key.split(".")
+    var o = TEXTS[LANG]
+    for (var i = 0; i < chain.length && o; i++) o = o[chain[i]]
+    return typeof o === "string" ? o : key
+  }
+
+  function $id(id) {
+    return document.getElementById(id)
+  }
+
+  function el(tag, className, text) {
+    var n = document.createElement(tag)
+    if (className) n.className = className
+    if (text !== undefined && text !== null) n.textContent = text
+    return n
+  }
+
+  function hashCode(str) {
+    var h = 2166136261
+    for (var i = 0; i < str.length; i++) {
+      h ^= str.charCodeAt(i)
+      h = (h * 16777619) >>> 0
+    }
+    return ("00000000" + h.toString(16)).slice(-8)
+  }
+
+  function sha256Hex(str) {
+    if (!window.crypto || !crypto.subtle || !crypto.subtle.digest) {
+      return Promise.resolve(hashCode(str) + hashCode(str.split("").reverse().join("")))
+    }
+    var data = new TextEncoder().encode(str)
+    return crypto.subtle
+      .digest("SHA-256", data)
+      .then(function (buf) {
+        var bytes = new Uint8Array(buf)
+        var hex = ""
+        for (var i = 0; i < bytes.length; i++) hex += ("0" + bytes[i].toString(16)).slice(-2)
+        return hex
+      })
+      .catch(function () {
+        return hashCode(str) + hashCode(str.split("").reverse().join(""))
+      })
+  }
+
+  function stableHash(str) {
+    return hashCode("stable:" + str) + hashCode("stable:" + str.split("").reverse().join(""))
+  }
+
+  function formatBits(b) {
+    if (b >= 100) return b.toFixed(0)
+    return b.toFixed(1)
+  }
+
+  function formatPopulation(bits) {
+    if (bits >= 128) return "≈ 2^" + Math.floor(bits)
+    return "≈ " + Math.round(Math.pow(2, bits)).toLocaleString(LANG === "fr" ? "fr-FR" : "en-US")
+  }
+
+  function wait(ms) {
+    return new Promise(function (resolve) {
+      setTimeout(resolve, ms)
+    })
+  }
+
+  function timeout(promise, ms) {
+    return Promise.race([promise, wait(ms).then(function () { return null })])
+  }
+
+  function stableString(value) {
+    try {
+      return JSON.stringify(value)
+    } catch (e) {
+      return String(value)
+    }
+  }
+
+  function collectUA() {
+    var parts = [navigator.userAgent || ""]
+    if (navigator.userAgentData) {
+      try {
+        var ud = navigator.userAgentData
+        if (ud.brands) {
+          parts.push("brands=" + ud.brands.map(function (b) { return b.brand + "@" + b.version }).join(","))
+        }
+        parts.push("mobile=" + !!ud.mobile)
+        if (ud.getHighEntropyValues) {
+          return ud
+            .getHighEntropyValues(["platform", "platformVersion", "architecture", "model", "uaFullVersion", "fullVersionList"])
+            .then(function (h) {
+              return parts
+                .concat([
+                  "arch=" + (h.architecture || "?"),
+                  "model=" + (h.model || "?"),
+                  "platVer=" + (h.platformVersion || "?"),
+                  "uaFull=" + (h.uaFullVersion || "?"),
+                  "fullBrands=" + ((h.fullVersionList || []).map(function (b) { return b.brand + "@" + b.version }).join(",") || "?")
+                ])
+                .join(" || ")
+            })
+            .catch(function () {
+              return parts.join(" || ")
+            })
+        }
+      } catch (e) {}
+    }
+    return parts.join(" || ")
+  }
+
+  function collectPlatform() {
+    var o = { platform: navigator.platform || "?" }
+    try {
+      if (navigator.userAgentData) {
+        o.hintPlatform = navigator.userAgentData.platform || "?"
+        o.mobile = !!navigator.userAgentData.mobile
+        if (navigator.userAgentData.getHighEntropyValues) {
+          return navigator.userAgentData
+            .getHighEntropyValues(["architecture", "model", "bitness"])
+            .then(function (h) {
+              o.arch = h.architecture || "?"
+              o.model = h.model || "?"
+              o.bitness = h.bitness || "?"
+              return o
+            })
+            .catch(function () { return o })
+        }
+      }
+    } catch (e) {}
+    return o
+  }
+
+  function collectLanguages() {
+    var langs = navigator.languages || []
+    if (!langs.length && navigator.language) langs = [navigator.language]
+    var extra = {}
+    try {
+      extra.locale = Intl.DateTimeFormat().resolvedOptions().locale
+    } catch (e) {}
+    try {
+      extra.number = new Intl.NumberFormat().resolvedOptions().numberingSystem || "?"
+    } catch (e) {}
+    return { langs: langs.join(","), extra: extra }
+  }
+
+  function collectTimezone() {
+    var tz = "?"
+    try {
+      tz = Intl.DateTimeFormat().resolvedOptions().timeZone || "?"
+    } catch (e) {}
+    var off = new Date().getTimezoneOffset()
+    var offStr = (off === 0 ? "0" : (off < 0 ? "+" : "-") + Math.abs(Math.round(off / 60)))
+    var jan = new Date(new Date().getFullYear(), 0, 1).getTimezoneOffset()
+    var jul = new Date(new Date().getFullYear(), 6, 1).getTimezoneOffset()
+    var dst = jan !== jul ? (off === Math.max(jan, jul) ? "hiver" : "été") : "pas de DST"
+    return { tz: tz, offset: offStr, dst: dst }
+  }
+
+  function collectScreen() {
+    var s = window.screen || {}
+    var o = s.orientation
+    var res = {
+      w: s.width,
+      h: s.height,
+      availW: s.availWidth,
+      availH: s.availHeight,
+      colorDepth: s.colorDepth,
+      pixelDepth: s.pixelDepth,
+      dpr: window.devicePixelRatio || 1,
+      orientation: o && o.type ? o.type : (s.orientationType || "n/a")
+    }
+    return getWorkerData().then(function (d) {
+      if (d && d.colorDepth) {
+        res.colorDepth = d.colorDepth
+        if (d.orientation) res.orientation = d.orientation
+        res.worker = true
+      }
+      return res
+    })
+  }
+
+  function canvasPass(draw) {
+    try {
+      var c = document.createElement("canvas")
+      c.width = 300
+      c.height = 150
+      var ctx = c.getContext("2d")
+      if (!ctx) return null
+      ctx.textBaseline = "top"
+      draw(ctx)
+      return stableHash(c.toDataURL())
+    } catch (e) {
+      return null
+    }
+  }
+
+  function collectCanvas() {
+    var hashes = []
+    var p1 = canvasPass(function (ctx) {
+      ctx.fillStyle = "#f60"
+      ctx.fillRect(125, 1, 62, 20)
+      var g = ctx.createLinearGradient(0, 0, 300, 150)
+      g.addColorStop(0, "#f60")
+      g.addColorStop(0.5, "#069")
+      g.addColorStop(1, "#0a0")
+      ctx.fillStyle = g
+      ctx.fillRect(0, 0, 300, 40)
+      ctx.font = "15px Arial"
+      ctx.fillStyle = "#069"
+      ctx.fillText("Zektyc-Fingerprint-ææåå", 2, 15)
+      ctx.font = "italic bold 20px Georgia"
+      ctx.fillText("zfp::test::0123456789", 4, 45)
+    })
+    var p2 = canvasPass(function (ctx) {
+      ctx.save()
+      ctx.translate(150, 75)
+      ctx.rotate(0.5)
+      ctx.scale(1.1, 0.9)
+      ctx.fillStyle = "rgba(102, 204, 0, 0.7)"
+      ctx.beginPath()
+      ctx.arc(0, 0, 40, 0, Math.PI * 2)
+      ctx.closePath()
+      ctx.fill()
+      ctx.fillStyle = "#fff"
+      ctx.beginPath()
+      ctx.arc(30, 20, 15, 0, Math.PI * 2, true)
+      ctx.closePath()
+      ctx.fill()
+      ctx.strokeStyle = "#000"
+      ctx.lineWidth = 2
+      ctx.beginPath()
+      ctx.moveTo(-40, -40)
+      ctx.lineTo(40, 40)
+      ctx.stroke()
+      ctx.restore()
+    })
+    var p3 = canvasPass(function (ctx) {
+      ctx.globalCompositeOperation = "multiply"
+      ctx.fillStyle = "#0f0"
+      ctx.fillRect(0, 0, 100, 20)
+      ctx.fillStyle = "#f00"
+      ctx.fillRect(50, 0, 100, 20)
+      ctx.globalCompositeOperation = "screen"
+      ctx.fillStyle = "#00f"
+      ctx.fillRect(25, 10, 100, 20)
+      ctx.globalCompositeOperation = "source-over"
+      ctx.shadowColor = "rgba(0,0,0,0.5)"
+      ctx.shadowBlur = 5
+      ctx.shadowOffsetX = 3
+      ctx.shadowOffsetY = 3
+      ctx.fillStyle = "#888"
+      ctx.fillRect(120, 80, 60, 30)
+    })
+    var p4 = canvasPass(function (ctx) {
+      ctx.font = "28px 'Arial'"
+      ctx.fillStyle = "#000"
+      ctx.fillText("mmmmmmmmmmlli", 5, 20)
+      ctx.font = "28px 'Courier New'"
+      ctx.fillText("Ii1l|!000O", 5, 50)
+      ctx.font = "28px 'Times New Roman'"
+      ctx.fillText("avawARcennWW", 5, 80)
+    })
+    var p5 = canvasPass(function (ctx) {
+      ctx.fillStyle = "#123"
+      ctx.fillRect(0, 0, 300, 150)
+      ctx.fillStyle = "#fff"
+      ctx.font = "34px monospace"
+      ctx.fillText("😀😍🚀💀❤️", 10, 50)
+      ctx.font = "24px sans-serif"
+      ctx.fillText("café naïve æther ünïc", 10, 100)
+    })
+    if (p1) hashes.push(p1)
+    if (p2) hashes.push(p2)
+    if (p3) hashes.push(p3)
+    if (p4) hashes.push(p4)
+    if (p5) hashes.push(p5)
+    if (!hashes.length) return null
+    return { hash: stableHash(hashes.join("|")), passes: hashes.length }
+  }
+
+  function webglRenderHash(gl) {
+    try {
+      var w = 16
+      var h = 16
+      gl.viewport(0, 0, w, h)
+      var vsSrc = "attribute vec2 p;void main(){gl_Position=vec4(p,0.0,1.0);}"
+      var fsSrc =
+        "precision mediump float;uniform float u;void main(){vec2 r=gl_FragCoord.xy/16.0;float v=fract(sin(dot(r+u,vec2(12.9898,78.233)))*43758.5453);gl_FragColor=vec4(r,v,1.0);}"
+      var vs = gl.createShader(gl.VERTEX_SHADER)
+      gl.shaderSource(vs, vsSrc)
+      gl.compileShader(vs)
+      var fs = gl.createShader(gl.FRAGMENT_SHADER)
+      gl.shaderSource(fs, fsSrc)
+      gl.compileShader(fs)
+      if (!gl.getShaderParameter(fs, gl.COMPILE_STATUS)) return null
+      var prog = gl.createProgram()
+      gl.attachShader(prog, vs)
+      gl.attachShader(prog, fs)
+      gl.linkProgram(prog)
+      if (!gl.getProgramParameter(prog, gl.LINK_STATUS)) return null
+      gl.useProgram(prog)
+      var buf = gl.createBuffer()
+      gl.bindBuffer(gl.ARRAY_BUFFER, buf)
+      gl.bufferData(gl.ARRAY_BUFFER, new Float32Array([-1, -1, 3, -1, -1, 3]), gl.STATIC_DRAW)
+      var loc = gl.getAttribLocation(prog, "p")
+      gl.enableVertexAttribArray(loc)
+      gl.vertexAttribPointer(loc, 2, gl.FLOAT, false, 0, 0)
+      var uloc = gl.getUniformLocation(prog, "u")
+      gl.uniform1f(uloc, 0.001)
+      gl.clearColor(0, 0, 0, 1)
+      gl.clear(gl.COLOR_BUFFER_BIT)
+      gl.drawArrays(gl.TRIANGLES, 0, 3)
+      var px = new Uint8Array(w * h * 4)
+      gl.readPixels(0, 0, w, h, gl.RGBA, gl.UNSIGNED_BYTE, px)
+      var s = ""
+      for (var i = 0; i < px.length; i += 7) s += px[i].toString(16)
+      return stableHash(s)
+    } catch (e) {
+      return null
+    }
+  }
+
+  function collectWebGL() {
+    try {
+      var c = document.createElement("canvas")
+      var gl = c.getContext("webgl") || c.getContext("experimental-webgl")
+      if (!gl) return null
+      var dbg = gl.getExtension("WEBGL_debug_renderer_info")
+      var vendor = dbg ? String(gl.getParameter(dbg.UNMASKED_VENDOR_WEBGL)) : String(gl.getParameter(gl.VENDOR))
+      var renderer = dbg ? String(gl.getParameter(dbg.UNMASKED_RENDERER_WEBGL)) : String(gl.getParameter(gl.RENDERER))
+      var version = String(gl.getParameter(gl.VERSION))
+      var glsl = String(gl.getParameter(gl.SHADING_LANGUAGE_VERSION))
+      var ext = (gl.getSupportedExtensions() || []).join(",")
+      var params = {}
+      var pnames = [
+        "MAX_TEXTURE_SIZE",
+        "MAX_CUBE_MAP_TEXTURE_SIZE",
+        "MAX_RENDERBUFFER_SIZE",
+        "MAX_VIEWPORT_DIMS",
+        "MAX_VERTEX_ATTRIBS",
+        "MAX_VERTEX_UNIFORM_VECTORS",
+        "MAX_VARYING_VECTORS",
+        "MAX_FRAGMENT_UNIFORM_VECTORS",
+        "MAX_COMBINED_TEXTURE_IMAGE_UNITS"
+      ]
+      for (var i = 0; i < pnames.length; i++) {
+        try {
+          params[pnames[i]] = JSON.stringify(gl.getParameter(gl[pnames[i]]))
+        } catch (e) {}
+      }
+      var precision = {}
+      var stypes = ["VERTEX_SHADER", "FRAGMENT_SHADER"]
+      for (var j = 0; j < stypes.length; j++) {
+        try {
+          var f = gl.getShaderPrecisionFormat(gl[stypes[j]], gl.HIGH_FLOAT)
+          if (f) precision[stypes[j]] = f.precision + "/" + f.rangeMin + "/" + f.rangeMax
+        } catch (e) {}
+      }
+      var hasWebGL2 = false
+      try {
+        var c2 = document.createElement("canvas")
+        hasWebGL2 = !!c2.getContext("webgl2")
+      } catch (e) {}
+      return {
+        vendor: vendor,
+        renderer: renderer,
+        version: version,
+        glsl: glsl,
+        webgl2: hasWebGL2,
+        extHash: stableHash(ext),
+        paramsHash: stableHash(JSON.stringify(params) + JSON.stringify(precision)),
+        renderHash: webglRenderHash(gl)
+      }
+    } catch (e) {
+      return null
+    }
+  }
+
+  function collectWebGPU() {
+    return new Promise(function (resolve) {
+      if (!navigator.gpu || !navigator.gpu.requestAdapter) {
+        resolve(null)
+        return
+      }
+      navigator.gpu
+        .requestAdapter()
+        .then(function (adapter) {
+          if (!adapter) {
+            resolve(null)
+            return
+          }
+          var info = {}
+          try {
+            var a = adapter.info
+            info.vendor = a.vendor || "?"
+            info.architecture = a.architecture || "?"
+            info.device = a.device || "?"
+            info.description = a.description || "?"
+          } catch (e) {}
+          var features = []
+          try {
+            adapter.features.forEach(function (f) { features.push(String(f)) })
+          } catch (e) {}
+          var limits = {}
+          try {
+            var ls = ["maxTextureDimension2D", "maxTextureArrayLayers", "maxBufferSize", "maxBindGroups", "maxVertexBuffers", "maxColorAttachments", "maxComputeWorkgroupSizeX"]
+            for (var i = 0; i < ls.length; i++) {
+              if (adapter.limits && adapter.limits[ls[i]] !== undefined) limits[ls[i]] = adapter.limits[ls[i]]
+            }
+          } catch (e) {}
+          resolve({
+            info: info,
+            featuresHash: stableHash(features.join(",")),
+            limitsHash: stableHash(JSON.stringify(limits))
+          })
+        })
+        .catch(function () {
+          resolve(null)
+        })
+    })
+  }
+
+  function collectAudio() {
+    return new Promise(function (resolve) {
+      var AC = window.OfflineAudioContext || window.webkitOfflineAudioContext
+      if (!AC) {
+        resolve(null)
+        return
+      }
+      try {
+        var ctx = new AC(1, 44100, 44100)
+        var osc = ctx.createOscillator()
+        osc.type = "triangle"
+        osc.frequency.value = 10000
+        var comp = ctx.createDynamicsCompressor()
+        comp.threshold.value = -50
+        comp.knee.value = 40
+        comp.ratio.value = 12
+        comp.attack.value = 0
+        comp.release.value = 0.25
+        osc.connect(comp)
+        comp.connect(ctx.destination)
+        osc.start(0)
+        osc.stop(0.1)
+        var finish = function (buffer) {
+          var data = buffer.getChannelData(0)
+          var chunks = []
+          var sum = 0
+          for (var i = 0; i < data.length; i++) {
+            sum += Math.abs(data[i])
+            if (i % 5000 === 4999) {
+              chunks.push(hashCode(String(sum)))
+              sum = 0
+            }
+          }
+          chunks.push(hashCode(String(sum)))
+          resolve({ hash: stableHash(chunks.join("|")) })
+        }
+        if (ctx.startRendering && ctx.oncomplete !== undefined) {
+          ctx.oncomplete = function (e) { finish(e.renderedBuffer) }
+          ctx.startRendering()
+        } else if (ctx.startRendering) {
+          ctx.startRendering().then(finish).catch(function () { resolve(null) })
+        } else {
+          resolve(null)
+        }
+      } catch (e) {
+        resolve(null)
+      }
+    })
+  }
+
+  function collectAudioContext() {
+    try {
+      var AC = window.AudioContext || window.webkitAudioContext
+      if (!AC) return null
+      var ctx = new AC()
+      var res = {
+        sampleRate: ctx.sampleRate,
+        channels: ctx.destination && typeof ctx.destination.channelCount === "number" ? ctx.destination.channelCount : 0,
+        baseLatency: typeof ctx.baseLatency === "number" ? ctx.baseLatency.toFixed(4) : "?",
+        outputLatency: typeof ctx.outputLatency === "number" ? ctx.outputLatency.toFixed(4) : "?"
+      }
+      setTimeout(function () {
+        try { ctx.close() } catch (e) {}
+      }, 0)
+      return res
+    } catch (e) {
+      return null
+    }
+  }
+
+  var FONT_LIST = [
+    "Arial", "Arial Black", "Arial Narrow", "Arial Unicode MS", "Bahnschrift", "Baskerville",
+    "Calibri", "Cambria", "Cambria Math", "Candara", "Century Gothic", "Charter", "Cochin",
+    "Comic Sans MS", "Consolas", "Constantia", "Corbel", "Courier", "Courier New", "DejaVu Sans",
+    "DejaVu Sans Mono", "DejaVu Serif", "Didot", "Franklin Gothic Medium", "Futura", "Geneva",
+    "Georgia", "Gill Sans", "Helvetica", "Helvetica Neue", "Impact", "Iowan Old Style", "Lato",
+    "Liberation Sans", "Liberation Serif", "Lucida Console", "Malgun Gothic", "Menlo", "Microsoft JhengHei",
+    "Microsoft Sans Serif", "Microsoft YaHei", "Monaco", "Noto Sans", "Noto Sans Mono", "Noto Serif",
+    "Open Sans", "Optima", "Palatino", "Palatino Linotype", "Roboto", "Segoe UI", "Segoe UI Emoji",
+    "Sitka", "Symbol", "Tahoma", "Times New Roman", "Trebuchet MS", "Ubuntu", "Ubuntu Mono",
+    "Verdana", "Webdings", "Wingdings", "Zapfino"
+  ]
+
+  function collectFonts() {
+    try {
+      var c = document.createElement("canvas")
+      c.width = 400
+      c.height = 80
+      var ctx = c.getContext("2d")
+      if (!ctx) return null
+      var test = "mmmmmmmmmmlli"
+      ctx.font = "72px monospace"
+      var base = ctx.measureText(test).width
+      var found = []
+      for (var i = 0; i < FONT_LIST.length; i++) {
+        ctx.font = "72px '" + FONT_LIST[i] + "', monospace"
+        var w = ctx.measureText(test).width
+        if (Math.abs(w - base) > 0.5) found.push(FONT_LIST[i])
+      }
+      if (!found.length) return null
+      return { count: found.length, list: found.join(","), hash: stableHash(found.join(",")) }
+    } catch (e) {
+      return null
+    }
+  }
+
+  function collectEmoji() {
+    try {
+      var c = document.createElement("canvas")
+      c.width = 250
+      c.height = 60
+      var ctx = c.getContext("2d")
+      if (!ctx) return null
+      var probes = ["😀", "😍", "🚀", "💀", "❤️", "🇫🇷", "🎉", "🧪", "🌈", "🦄", "👽", "💾", "🖥️", "⌛", "✈️", "⚡", "⭐", "❄️", "🍕", "💡", "🎯", "♻️", "☢️", "⛔", "🫠", "🪿", "🛜", "🤌", "🫶", "🥸"]
+      var widths = []
+      var renderHashes = []
+      var base = ctx.measureText("M").width
+      for (var i = 0; i < probes.length; i++) {
+        var w = ctx.measureText(probes[i]).width
+        widths.push(w > base * 1.5 ? "t" : "f")
+        ctx.clearRect(0, 0, 250, 60)
+        ctx.fillStyle = "#000"
+        ctx.fillRect(0, 0, 250, 60)
+        ctx.fillStyle = "#fff"
+        ctx.font = "48px monospace"
+        ctx.fillText(probes[i], 5, 50)
+        renderHashes.push(hashCode(c.toDataURL()))
+      }
+      return { widths: widths.join(""), hash: stableHash(widths.join("") + "|" + renderHashes.join("|")) }
+    } catch (e) {
+      return null
+    }
+  }
+
+  function collectHardware() {
+    var o = {}
+    if (navigator.hardwareConcurrency) o.cores = navigator.hardwareConcurrency
+    if (navigator.deviceMemory) o.memory = navigator.deviceMemory + "GB"
+    return Object.keys(o).length ? o : null
+  }
+
+  function collectTouch() {
+    var v = navigator.maxTouchPoints || 0
+    var hasTouch = "ontouchstart" in window || v > 0
+    var coarse = false
+    try {
+      coarse = window.matchMedia("(pointer: coarse)").matches
+    } catch (e) {}
+    return { maxTouchPoints: v, touchEvents: hasTouch, coarsePointer: coarse }
+  }
+
+  function collectMedia() {
+    var q = [
+      ["dark", "(prefers-color-scheme: dark)"],
+      ["light", "(prefers-color-scheme: light)"],
+      ["reduced-motion", "(prefers-reduced-motion: reduce)"],
+      ["reduced-transparency", "(prefers-reduced-transparency: reduce)"],
+      ["contrast-more", "(prefers-contrast: more)"],
+      ["contrast-custom", "(prefers-contrast: custom)"],
+      ["forced-colors", "(forced-colors: active)"],
+      ["inverted-colors", "(inverted-colors: inverted)"],
+      ["hover", "(hover: hover)"],
+      ["any-hover", "(any-hover: hover)"],
+      ["pointer-fine", "(pointer: fine)"],
+      ["pointer-coarse", "(pointer: coarse)"],
+      ["any-pointer-fine", "(any-pointer: fine)"],
+      ["color-gamut-p3", "(color-gamut: p3)"],
+      ["color-gamut-rec2020", "(color-gamut: rec2020)"],
+      ["video-dynamic-p3", "(dynamic-range: p3)"],
+      ["reduced-data", "(prefers-reduced-data: reduce)"],
+      ["update-fast", "(update: fast)"],
+      ["display-standalone", "(display-mode: standalone)"],
+      ["scripting", "(scripting: enabled)"]
+    ]
+    var out = {}
+    for (var i = 0; i < q.length; i++) {
+      try {
+        out[q[i][0]] = window.matchMedia(q[i][1]).matches
+      } catch (e) {}
+    }
+    return out
+  }
+
+  function collectScrollbar() {
+    try {
+      var outer = document.createElement("div")
+      outer.style.cssText = "position:absolute;top:-10000px;left:-10000px;width:100px;height:100px;overflow:scroll;visibility:hidden"
+      var inner = document.createElement("div")
+      inner.style.width = "100%"
+      inner.style.height = "100%"
+      outer.appendChild(inner)
+      document.body.appendChild(outer)
+      var w = outer.offsetWidth - inner.offsetWidth
+      document.body.removeChild(outer)
+      return { width: w + "px" }
+    } catch (e) {
+      return null
+    }
+  }
+
+  function collectStorage() {
+    var out = {}
+    try {
+      var k = "zfp-test-" + Date.now()
+      window.localStorage.setItem(k, "1")
+      out.localStorage = window.localStorage.getItem(k) === "1"
+      window.localStorage.removeItem(k)
+    } catch (e) {
+      out.localStorage = false
+    }
+    try {
+      var k2 = "zfp-test-" + Date.now()
+      window.sessionStorage.setItem(k2, "1")
+      out.sessionStorage = window.sessionStorage.getItem(k2) === "1"
+      window.sessionStorage.removeItem(k2)
+    } catch (e) {
+      out.sessionStorage = false
+    }
+    out.indexedDB = !!window.indexedDB
+    return out
+  }
+
+  function collectStorageQuota() {
+    return new Promise(function (resolve) {
+      if (!navigator.storage || !navigator.storage.estimate) {
+        resolve(null)
+        return
+      }
+      navigator.storage
+        .estimate()
+        .then(function (e) {
+          resolve({ quota: e.quota || 0, usage: e.usage || 0 })
+        })
+        .catch(function () {
+          resolve(null)
+        })
+    })
+  }
+
+  function mathRaw() {
+    var ops = ["sin", "cos", "tan", "log", "exp", "sqrt", "asin", "acos", "atan2", "sinh", "cosh", "tanh", "cbrt"]
+    var out = []
+    for (var i = 0; i < ops.length; i++) {
+      try {
+        out.push(Math[ops[i]](i * 0.123456789 + 1).toPrecision(17))
+      } catch (e) {}
+    }
+    try {
+      out.push(Math.pow(1.0000001, 1000000).toPrecision(17))
+    } catch (e) {}
+    return out.join(":")
+  }
+
+  function collectMath() {
+    var s = mathRaw()
+    if (!s) return null
+    return { hash: stableHash(s) }
+  }
+
+  function collectTiming() {
+    var t0 = performance.now()
+    var min = Infinity
+    for (var i = 0; i < 1000; i++) {
+      var t = performance.now()
+      var d = t - t0
+      if (d > 0 && d < min) min = d
+      t0 = t
+    }
+    var d0 = Date.now()
+    var dmin = Infinity
+    for (var j = 0; j < 1000; j++) {
+      var d2 = Date.now() - d0
+      if (d2 > 0 && d2 < dmin) dmin = d2
+      d0 = Date.now()
+    }
+    return {
+      perf: min === Infinity ? "?" : min.toFixed(4),
+      date: dmin === Infinity ? "?" : dmin
+    }
+  }
+
+  function collectWasm() {
+    var out = { hasWasm: !!window.WebAssembly }
+    if (window.WebAssembly) {
+      try {
+        var simdBytes = new Uint8Array([
+          0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00,
+          0x01, 0x05, 0x01, 0x60, 0x00, 0x01, 0x7b,
+          0x03, 0x02, 0x01, 0x00,
+          0x0a, 0x17, 0x01, 0x15, 0x00,
+          0x41, 0x00, 0xfd, 0x0c, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+          0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x0b
+        ])
+        out.simd = WebAssembly.validate(simdBytes)
+      } catch (e) {
+        out.simd = false
+      }
+      out.threads = typeof SharedArrayBuffer !== "undefined"
+      try {
+        out.bulk = WebAssembly.validate(new Uint8Array([
+          0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00,
+          0x05, 0x03, 0x01, 0x00, 0x00,
+          0x0a, 0x08, 0x01, 0x06, 0x00, 0xfc, 0x0a, 0x00, 0x00, 0x0b
+        ]))
+      } catch (e) {
+        out.bulk = false
+      }
+    }
+    return out
+  }
+
+  function collectBench() {
+    var start = performance.now()
+    var x = 0
+    var n = 2000000
+    for (var i = 0; i < n; i++) {
+      x = (x + i) % 97
+      x = Math.sqrt(x) + Math.log(i + 1)
+    }
+    var dt = performance.now() - start
+    return {
+      ms: dt > 0 ? dt.toFixed(1) : "?",
+      opsPerMs: dt > 0 ? Math.round(n / dt) : 0
+    }
+  }
+
+  function collectWebRTC() {
+    return new Promise(function (resolve) {
+      if (!window.RTCPeerConnection) {
+        resolve(null)
+        return
+      }
+      var candidates = []
+      var done = false
+      var pc
+      try {
+        pc = new RTCPeerConnection({ iceServers: [] })
+      } catch (e) {
+        resolve(null)
+        return
+      }
+      var finish = function () {
+        if (done) return
+        done = true
+        try {
+          pc.close()
+        } catch (e) {}
+        if (candidates.length) resolve({ hash: stableHash(candidates.join("|")), count: candidates.length })
+        else resolve(null)
+      }
+      try {
+        pc.createDataChannel("zfp")
+        pc.onicecandidate = function (e) {
+          if (e.candidate && e.candidate.candidate) candidates.push(e.candidate.candidate)
+          if (!e.candidate) finish()
+        }
+        pc.createOffer().then(function (o) {
+          return pc.setLocalDescription(o)
+        }).catch(finish)
+      } catch (e) {
+        finish()
+      }
+      setTimeout(finish, 2000)
+    })
+  }
+
+  function collectBattery() {
+    return new Promise(function (resolve) {
+      if (!navigator.getBattery) {
+        resolve(null)
+        return
+      }
+      navigator
+        .getBattery()
+        .then(function (b) {
+          resolve({
+            level: Math.round(b.level * 100),
+            charging: b.charging
+          })
+        })
+        .catch(function () {
+          resolve(null)
+        })
+    })
+  }
+
+  function collectMediaDevices() {
+    return new Promise(function (resolve) {
+      if (!navigator.mediaDevices || !navigator.mediaDevices.enumerateDevices) {
+        resolve(null)
+        return
+      }
+      navigator.mediaDevices
+        .enumerateDevices()
+        .then(function (devs) {
+          var count = {}
+          for (var i = 0; i < devs.length; i++) {
+            count[devs[i].kind] = (count[devs[i].kind] || 0) + 1
+          }
+          resolve(count)
+        })
+        .catch(function () {
+          resolve(null)
+        })
+    })
+  }
+
+  function collectPlugins() {
+    var names = []
+    if (navigator.plugins && navigator.plugins.length) {
+      for (var i = 0; i < navigator.plugins.length; i++) {
+        names.push(navigator.plugins[i].name)
+      }
+    }
+    if (names.length === 0 && navigator.pdfViewerEnabled !== undefined) {
+      return { pdfViewer: navigator.pdfViewerEnabled }
+    }
+    return names.length ? { plugins: names.slice(0, 5) } : null
+  }
+
+  function collectSpeech() {
+    return new Promise(function (resolve) {
+      var SS = window.speechSynthesis
+      if (!SS || !SS.getVoices) {
+        resolve(null)
+        return
+      }
+      var done = false
+      var finish = function () {
+        if (done) return
+        done = true
+        var v = []
+        try {
+          v = SS.getVoices() || []
+        } catch (e) {}
+        if (!v.length) {
+          resolve(null)
+          return
+        }
+        var names = []
+        for (var i = 0; i < v.length; i++) {
+          names.push(v[i].voiceURI || v[i].name + "@" + v[i].lang)
+        }
+        resolve({ count: v.length, hash: stableHash(names.join("|")) })
+      }
+      try {
+        if (SS.getVoices().length) finish()
+        else {
+          SS.onvoiceschanged = finish
+          setTimeout(finish, 2000)
+        }
+      } catch (e) {
+        finish()
+      }
+    })
+  }
+
+  function collectIntl() {
+    var out = {}
+    if (typeof Intl.supportedValuesOf === "function") {
+      try { out.calendars = Intl.supportedValuesOf("calendar").join(",") } catch (e) {}
+      try { out.numbering = Intl.supportedValuesOf("numberingSystem").join(",") } catch (e) {}
+      try { out.units = Intl.supportedValuesOf("unit").join(",") } catch (e) {}
+      try { out.collations = Intl.supportedValuesOf("collation").join(",") } catch (e) {}
+    }
+    try {
+      out.locale = Intl.DateTimeFormat().resolvedOptions().locale
+    } catch (e) {}
+    try {
+      var c = new Intl.Collator(LANG).resolvedOptions()
+      out.collation = c.collation
+      out.caseFirst = c.caseFirst
+      out.numeric = c.numeric
+      out.sensitivity = c.sensitivity
+    } catch (e) {}
+    return Object.keys(out).length ? out : null
+  }
+
+  var driftCache = null
+
+  function computeDrift(pts) {
+    if (!pts || pts.length < 4) return null
+    var x0 = pts[0][1]
+    var y0 = pts[0][0]
+    var n = pts.length
+    var sx = 0, sy = 0, sxx = 0, sxy = 0
+    for (var i = 0; i < n; i++) {
+      var x = pts[i][1] - x0
+      var y = pts[i][0] - y0
+      sx += x
+      sy += y
+      sxx += x * x
+      sxy += x * y
+    }
+    var denom = n * sxx - sx * sx
+    if (!denom) return null
+    var slope = (n * sxy - sx * sy) / denom
+    var ppm = (slope - 1) * 1e6
+    var sse = 0
+    for (var j = 0; j < n; j++) {
+      var xx = pts[j][1] - x0
+      var yy = pts[j][0] - y0
+      var err = yy - slope * xx
+      sse += err * err
+    }
+    return {
+      ppm: Math.round(ppm * 10) / 10,
+      sd: Math.round(Math.sqrt(sse / n) * 100) / 100,
+      samples: n
+    }
+  }
+
+  function collectClockDrift() {
+    if (driftCache) return Promise.resolve(driftCache)
+    return new Promise(function (resolve) {
+      var pts = []
+      var prevD = Date.now()
+      var prevP = performance.now()
+      var end = Date.now() + 2000
+      function sample() {
+        var d = Date.now()
+        var p = performance.now()
+        if (d !== prevD || p !== prevP) {
+          pts.push([d, p])
+          prevD = d
+          prevP = p
+        }
+        if (Date.now() < end && pts.length < 800) {
+          setTimeout(sample, 5)
+        } else {
+          driftCache = computeDrift(pts)
+          resolve(driftCache)
+        }
+      }
+      sample()
+    })
+  }
+
+  var workerDataPromise = null
+
+  function getWorkerData() {
+    if (workerDataPromise) return workerDataPromise
+    workerDataPromise = new Promise(function (resolve) {
+      if (typeof Worker === "undefined") {
+        resolve(null)
+        return
+      }
+      var w
+      try {
+        w = new Worker("/js/zf-worker.js?v=9")
+      } catch (e) {
+        resolve(null)
+        return
+      }
+      var done = false
+      var finish = function (val) {
+        if (done) return
+        done = true
+        try { w.terminate() } catch (e) {}
+        resolve(val)
+      }
+      w.onmessage = function (e) {
+        var d = e.data || {}
+        finish({
+          math: d.math || null,
+          calendars: d.calendars || null,
+          locale: d.locale || null,
+          numbering: d.numbering || null,
+          simd: typeof d.simd === "boolean" ? d.simd : null,
+          bench: d.bench || null,
+          fonts: Array.isArray(d.fonts) ? d.fonts : null,
+          colorDepth: d.colorDepth !== undefined && d.colorDepth !== null ? String(d.colorDepth) : "",
+          orientation: d.orientation || "",
+          codecs: d.codecs || null,
+          fontLocalApi: d.fontLocalApi || null,
+          fontLocalBits: d.fontLocalBits || null,
+          fontSig: d.fontSig || null
+        })
+      }
+      w.onerror = function () {
+        finish(null)
+      }
+      setTimeout(function () {
+        finish(null)
+      }, 4000)
+      try {
+        w.postMessage(null)
+      } catch (e) {
+        finish(null)
+      }
+    })
+    return workerDataPromise
+  }
+
+  function collectWorker() {
+    return getWorkerData().then(function (d) {
+      if (!d) return null
+      var diffs = []
+      try {
+        var mainMath = mathRaw()
+        if (mainMath && d.math && mainMath !== d.math) diffs.push("math")
+      } catch (e2) {}
+      try {
+        var mainCal = typeof Intl.supportedValuesOf === "function" ? Intl.supportedValuesOf("calendar").join(",") : null
+        if (mainCal && d.calendars && mainCal !== d.calendars) diffs.push("intl")
+      } catch (e2) {}
+      try {
+        var mainLocale = Intl.DateTimeFormat().resolvedOptions().locale
+        if (mainLocale && d.locale && mainLocale !== d.locale) diffs.push("locale")
+      } catch (e2) {}
+      return {
+        diffs: diffs,
+        workerMath: d.math ? stableHash(d.math).slice(0, 12) : null,
+        workerLocale: d.locale || null,
+        workerSimd: typeof d.simd === "boolean" ? d.simd : null,
+        workerBench: d.bench || null
+      }
+    })
+  }
+
+  function collectWorkerFonts() {
+    return getWorkerData().then(function (d) {
+      if (!d || !d.fonts) return null
+      var list = d.fonts.join(",")
+      return { count: d.fonts.length, via: "canvas", list: list, hash: stableHash(list) }
+    })
+  }
+
+  function mainThreadCodecs() {
+    var got = {}
+    try {
+      if (navigator.mediaCapabilities && navigator.mediaCapabilities.decodingInfo) {
+        var tests = {
+          vp9: { type: "file", video: { contentType: 'video/webm;codecs="vp09.00.10.08"', width: 1920, height: 1080, bitrate: 4000000, framerate: 30 } },
+          av1: { type: "file", video: { contentType: 'video/webm;codecs="av01.0.04M.08"', width: 1920, height: 1080, bitrate: 4000000, framerate: 30 } },
+          opus: { type: "file", audio: { contentType: 'audio/ogg;codecs="opus"' } }
+        }
+        return Promise.all(
+          ["vp9", "av1", "opus"].map(function (k) {
+            return navigator.mediaCapabilities
+              .decodingInfo(tests[k])
+              .then(function (r) { got[k] = r && r.supported ? "1" : "0" })
+              .catch(function () { got[k] = "0" })
+          })
+        ).then(function () { return got })
+      }
+    } catch (e) {}
+    return Promise.resolve(null)
+  }
+
+  function collectCodecs() {
+    return getWorkerData().then(function (d) {
+      if (d && d.codecs) {
+        var keys = Object.keys(d.codecs)
+        if (keys.length === 3) {
+          var o = {}
+          for (var k in d.codecs) o[k] = d.codecs[k] === "1"
+          return o
+        }
+      }
+      return mainThreadCodecs().then(function (main) {
+        if (!main) return null
+        var o = {}
+        for (var k in main) o[k] = main[k] === "1"
+        return o
+      })
+    })
+  }
+
+  var clockOffsetPromise = null
+
+  function collectClockOffset() {
+    if (clockOffsetPromise) return clockOffsetPromise
+    var p = new Promise(function (resolve) {
+      if (typeof fetch !== "function") {
+        clockOffsetPromise = null
+        resolve(null)
+        return
+      }
+      var offsets = []
+      var rtts = []
+      var n = 0
+      var started = Date.now()
+      function sample() {
+        var p0 = performance.now()
+        fetch("/api/time", { cache: "no-store" })
+          .then(function (r) { return r.json() })
+          .then(function (j) {
+            var p1 = performance.now()
+            var mid = (p0 + p1) / 2
+            if (typeof j.t === "number") {
+              var localWall = Date.now() - performance.now() + mid
+              offsets.push(j.t - localWall)
+              rtts.push(p1 - p0)
+            }
+            n++
+            if (n < 12 && Date.now() - started < 4000 && offsets.length < 6) {
+              setTimeout(sample, 40)
+            } else {
+              finish()
+            }
+          })
+          .catch(function () {
+            n++
+            if (n < 12 && Date.now() - started < 4000) {
+              setTimeout(sample, 40)
+            } else {
+              finish()
+            }
+          })
+      }
+      function finish() {
+        var o = null
+        if (offsets.length >= 1) {
+          var sorted = offsets.slice().sort(function (a, b) { return a - b })
+          var rttSorted = rtts.slice().sort(function (a, b) { return a - b })
+          o = {
+            offsetMs: Math.round(sorted[Math.floor(sorted.length / 2)]),
+            rttMs: Math.round(rttSorted[Math.floor(rttSorted.length / 2)]),
+            samples: offsets.length
+          }
+        }
+        if (!o) clockOffsetPromise = null
+        resolve(o)
+      }
+      sample()
+    })
+    clockOffsetPromise = p
+    return p
+  }
+
+
+  function signalDefs() {
+    return [
+      { id: "ua", entropy: 12, stable: false, device: false, collect: collectUA, format: function (v) { return v } },
+      { id: "platform", entropy: 4, stable: true, device: true, collect: collectPlatform, format: function (v) {
+        var parts = [v.platform]
+        if (v.hintPlatform && v.hintPlatform !== v.platform) parts.push(v.hintPlatform)
+        if (v.arch) parts.push(v.arch + (v.bitness ? "/" + v.bitness : ""))
+        if (v.mobile) parts.push("mobile")
+        return parts.join(" · ")
+      } },
+      { id: "languages", entropy: 4, stable: false, device: false, collect: collectLanguages, format: function (v) {
+        return v.langs + (v.extra && v.extra.locale ? " · locale " + v.extra.locale : "")
+      } },
+      { id: "timezone", entropy: 5, stable: true, device: true, collect: collectTimezone, format: function (v) {
+        return v.tz + " (UTC" + v.offset + ") · " + v.dst
+      } },
+      { id: "screen", entropy: 6, stable: true, device: true, core: true, collect: collectScreen, format: function (v) {
+        return v.w + "×" + v.h + " · " + v.availW + "×" + v.availH + " · " + v.colorDepth + " bits · dpr " + v.dpr + " · " + v.orientation
+      }, hashOf: function (v) { return "cd=" + v.colorDepth } },
+      { id: "hardware", entropy: 4, stable: true, device: true, collect: collectHardware, format: function (v) {
+        var parts = []
+        if (v.cores) parts.push(v.cores + " cores")
+        if (v.memory) parts.push(v.memory)
+        return parts.join(" · ") || t("notAvailable")
+      } },
+      { id: "touch", entropy: 2, stable: true, device: true, collect: collectTouch, format: function (v) {
+        return "maxTouchPoints " + v.maxTouchPoints + " · coarse " + (v.coarsePointer ? "oui" : "non")
+      } },
+      { id: "canvas", entropy: 24, stable: true, device: false, collect: collectCanvas, format: function (v) {
+        return v.passes + " passes · " + v.hash.slice(0, 16) + "…"
+      } },
+      { id: "webgl", entropy: 16, stable: true, device: true, collect: collectWebGL, format: function (v) {
+        return v.vendor + " / " + v.renderer + " · " + (v.webgl2 ? "WebGL2" : "WebGL1") + " · render " + (v.renderHash || "—").slice(0, 12) + "…"
+      }, hashOf: function (v) {
+        return ["vendor=" + v.vendor, "renderer=" + v.renderer, "version=" + v.version, "glsl=" + v.glsl, "webgl2=" + v.webgl2, "ext=" + (v.extHash || ""), "params=" + (v.paramsHash || "")].join("|")
+      } },
+      { id: "webgpu", entropy: 16, stable: true, device: true, collect: collectWebGPU, format: function (v) {
+        return v.info.vendor + " / " + v.info.architecture + " / " + v.info.device + " · " + v.featuresHash.slice(0, 10) + "…"
+      } },
+      { id: "audio", entropy: 20, stable: true, device: false, collect: collectAudio, format: function (v) {
+        return v.hash.slice(0, 16) + "…"
+      } },
+      { id: "audiocontext", entropy: 6, stable: true, device: true, core: true, collect: collectAudioContext, format: function (v) {
+        return v.sampleRate + " Hz · " + v.channels + " canaux · base " + v.baseLatency + " ms · out " + v.outputLatency + " ms"
+      }, hashOf: function (v) { return "ch=" + v.channels } },
+      { id: "fonts", entropy: 18, stable: true, device: true, collect: collectFonts, format: function (v) {
+        return v.count + " " + t("fontsCount") + " (" + v.list.split(",").slice(0, 6).join(", ") + "…)"
+      } },
+      { id: "emoji", entropy: 8, stable: true, device: true, core: true, collect: collectEmoji, format: function (v) {
+        return v.hash.slice(0, 16) + "…"
+      }, hashOf: function (v) { return "w=" + (v.widths || "") } },
+      { id: "media", entropy: 5, stable: false, device: false, collect: collectMedia, format: function (v) {
+        var on = []
+        for (var k in v) if (v[k]) on.push(k)
+        return on.join(", ") || "aucune"
+      } },
+      { id: "scrollbar", entropy: 3, stable: true, device: true, collect: collectScrollbar, format: function (v) {
+        return v.width
+      }, hashOf: function (v) {
+        var w = parseInt(v.width, 10)
+        return (isNaN(w) || w < 5) ? "overlay" : "classic=" + w
+      } },
+      { id: "storage", entropy: 2, stable: true, device: false, collect: collectStorage, format: function (v) {
+        var on = []
+        if (v.localStorage) on.push("localStorage")
+        if (v.sessionStorage) on.push("sessionStorage")
+        if (v.indexedDB) on.push("IndexedDB")
+        return on.join(", ") || "aucun"
+      } },
+      { id: "storagequota", entropy: 4, stable: true, device: true, collect: collectStorageQuota, format: function (v) {
+        return "quota " + (v.quota / 1073741824).toFixed(1) + " Go · usage " + (v.usage / 1048576).toFixed(0) + " Mo"
+      }, hashOf: function (v) { return "q=" + v.quota } },
+      { id: "math", entropy: 7, stable: true, device: false, collect: collectMath, format: function (v) {
+        return v.hash.slice(0, 16) + "…"
+      } },
+      { id: "timing", entropy: 3, stable: false, device: false, collect: collectTiming, format: function (v) {
+        return "perf " + v.perf + " ms · date " + v.date + " ms"
+      } },
+      { id: "wasm", entropy: 4, stable: true, device: false, collect: collectWasm, format: function (v) {
+        var on = ["wasm"]
+        if (v.simd) on.push("SIMD")
+        if (v.threads) on.push("threads")
+        if (v.bulk) on.push("bulk-mem")
+        return on.join(", ")
+      } },
+      { id: "bench", entropy: 8, stable: false, device: true, collect: collectBench, format: function (v) {
+        return v.opsPerMs + " ops/ms (" + v.ms + " ms)"
+      } },
+      { id: "webrtc", entropy: 16, stable: false, device: false, collect: collectWebRTC, format: function (v) {
+        return v.count + " candidats ICE"
+      } },
+      { id: "battery", entropy: 4, stable: false, device: true, collect: collectBattery, format: function (v) {
+        return v.level + "%" + (v.charging ? " (charge)" : "")
+      } },
+      { id: "mediadevices", entropy: 4, stable: false, device: true, collect: collectMediaDevices, format: function (v) {
+        var parts = []
+        for (var k in v) parts.push(v[k] + " " + k)
+        return parts.join(", ") || t("notAvailable")
+      } },
+      { id: "plugins", entropy: 2, stable: false, device: false, collect: collectPlugins, format: function (v) {
+        return v.plugins ? v.plugins.join(", ") : v.pdfViewer !== undefined ? "pdfViewer: " + v.pdfViewer : t("notAvailable")
+      } },
+      { id: "speech", entropy: 10, stable: true, device: true, collect: collectSpeech, format: function (v) {
+        return v.count + " voix · " + v.hash.slice(0, 12) + "…"
+      } },
+      { id: "intl", entropy: 6, stable: true, device: false, collect: collectIntl, format: function (v) {
+        return "calendriers " + (v.calendars || "—") + " · " + (v.locale || "")
+      } },
+      { id: "clockdrift", entropy: 8, stable: true, device: true, collect: collectClockDrift, format: function (v) {
+        return (v.ppm > 0 ? "+" : "") + v.ppm + " ppm · écart-type " + v.sd + " ms · " + v.samples + " échantillons"
+      }, hashOf: function (v) { return "drift=" + Math.round(v.ppm / 5) * 5 } },
+      { id: "clockoffset", entropy: 6, stable: true, device: true, core: true, collect: collectClockOffset, format: function (v) {
+        return "écart " + (v.offsetMs > 0 ? "+" : "") + v.offsetMs + " ms vs serveur · RTT médian " + v.rttMs + " ms · " + v.samples + " éch."
+      }, hashOf: function (v) { return "off=" + Math.round(v.offsetMs / 1000) * 1000 } },
+      { id: "workerfonts", entropy: 14, stable: true, device: true, collect: collectWorkerFonts, format: function (v) {
+        return v.count + " polices (worker, masquées RFP)" + (v.list ? " (" + v.list.split(",").slice(0, 6).join(", ") + "…)" : "")
+      } },
+      { id: "codecs", entropy: 6, stable: true, device: true, core: true, collect: collectCodecs, format: function (v) {
+        var on = []
+        for (var k in v) if (v[k]) on.push(k)
+        return on.join(", ") || "aucun"
+      }, hashOf: function (v) {
+        return Object.keys(v).sort().map(function (k) { return k + "=" + (v[k] ? "y" : "n") }).join(",")
+      } },
+      { id: "worker", entropy: 4, stable: false, device: false, collect: collectWorker, format: function (v) {
+        if (!v) return t("notAvailable")
+        var parts = []
+        if (v.diffs && v.diffs.length) parts.push("masqué main-thread: " + v.diffs.join(","))
+        else parts.push("cohérent main/worker")
+        if (v.workerBench) parts.push("worker " + v.workerBench + " ops/ms")
+        if (v.workerSimd) parts.push("SIMD")
+        return parts.join(" · ")
+      } }
+    ]
+  }
+
+  var NAME_KEYS_FR = {
+    ua: "Agent utilisateur",
+    platform: "Plateforme",
+    languages: "Langues",
+    timezone: "Fuseau horaire",
+    screen: "Écran",
+    hardware: "Matériel",
+    touch: "Tactile",
+    canvas: "Canvas 2D (5 passes)",
+    webgl: "WebGL / GPU",
+    webgpu: "WebGPU (carte graphique)",
+    audio: "Traitement audio",
+    audiocontext: "Contexte audio",
+    fonts: "Polices",
+    emoji: "Rendu emoji",
+    media: "Médias CSS",
+    scrollbar: "Barre de défilement",
+    storage: "Stockage",
+    storagequota: "Quota de stockage",
+    math: "Moteur JS",
+    timing: "Précision de l'horloge",
+    wasm: "WebAssembly",
+    bench: "Performance machine",
+    webrtc: "WebRTC",
+    battery: "Batterie",
+    mediadevices: "Périphériques",
+    plugins: "Plugins",
+    speech: "Voix de synthèse",
+    intl: "Tables de locales (Intl)",
+    clockdrift: "Dérive d'horloge",
+    clockoffset: "Dérive d'horloge (serveur)",
+    workerfonts: "Polices réelles (worker)",
+    codecs: "Codecs vidéo/audio",
+    worker: "Contournement worker"
+  }
+
+  var HOW_KEYS_FR = {
+    ua: "Le navigateur annonce son nom, sa version, son moteur et, via les Client Hints, l'architecture du processeur et la version exacte. Point de départ de toute empreinte, il change à chaque mise à jour mais regroupe fortement.",
+    platform: "La famille de système d'exploitation (Windows, macOS, Linux, Android…) et, via les Client Hints à haute entropie, l'architecture (x86, arm64) et le modèle du processeur. Très stable.",
+    languages: "La liste des langues acceptées (Accept-Language) révèle la langue et la région de l'utilisateur, souvent plus précise que l'IP. La locale exacte choisie par Intl précise encore le signal.",
+    timezone: "Le fuseau horaire (Intl) et le décalage UTC permettent de situer l'utilisateur. La détection de l'heure d'été renseigne sur le pays. Deux appareils identiques ne partagent un fuseau que dans la même zone.",
+    screen: "La résolution, la surface disponible, la profondeur de couleur, le ratio de pixels (dpr) et l'orientation distinguent un téléphone d'un ordinateur. Valeurs matérielles, stables.",
+    hardware: "Le nombre de cœurs CPU (hardwareConcurrency) et la mémoire vive déclarée (deviceMemory). Les navigateurs récents arrondissent ces valeurs pour créer des groupes de milliers d'utilisateurs.",
+    touch: "Le nombre de points de contact simultanés et la précision du pointeur (fine/coarse) séparent écrans tactiles et appareils à souris. Très stable sur mobile.",
+    canvas: "Cinq dessins différents (dégradés, transformations, modes de fusion, textes, emoji) sont rendus puis hachés. Le rendu dépend du moteur, de l'anti-aliasing, du système et du matériel : c'est l'un des signaux les plus discriminants.",
+    webgl: "La carte graphique annonce son constructeur et son modèle via WebGL, ainsi que des dizaines de limites matérielles (taille de texture, précision des shaders). Un triangle est rendu puis ses pixels sont relus et hachés : une vraie signature du pilote GPU.",
+    webgpu: "La nouvelle API graphique expose l'adaptateur GPU : constructeur, architecture, nom du modèle et limite matérielles (taille de texture, tampons). Encore plus précis que WebGL, très stable.",
+    audio: "Le navigateur génère un son hors ligne via l'API WebAudio et on analyse la forme d'onde résultante. Les traitements internes (compresseur, rééchantillonnage) diffèrent d'un moteur à l'autre.",
+    audiocontext: "Un contexte audio réel expose la fréquence d'échantillonnage matérielle (souvent 44,1 kHz sur Linux, 48 kHz sur Windows) et les latences du pilote audio. Ce sont des signatures de la carte son et de l'OS.",
+    fonts: "On mesure la largeur d'un texte dans une soixantaine de polices : seules celles installées sur le système provoquent une largeur différente. La liste des polices est un marqueur très personnel (logiciels installés, OS, langue).",
+    emoji: "Les emoji sont rendus par une police dédiée du système (Noto Color Emoji, Apple Color Emoji, Segoe UI Emoji…). La présence et la forme de chaque emoji trahissent l'OS et les polices installées.",
+    media: "Les media queries (thème sombre, réduction des animations, précision du pointeur, gamut de couleurs, forced-colors, display-mode) révèlent le système et l'affichage, y compris sur des navigateurs à empreinte artificielle.",
+    scrollbar: "La largeur de la barre de défilement native est mesurée via un élément hors écran. Elle dépend de l'OS et du thème (par ex. 15 px sur GNOME, 17 px sur Windows). Signal très stable.",
+    storage: "La disponibilité de localStorage, sessionStorage et IndexedDB varie selon les navigateurs et les modes de navigation privée. Certains navigateurs bloquent ces APIs en mode strict.",
+    storagequota: "L'API Storage estime le quota total et l'usage du navigateur. Le quota dépend de la taille du disque et du navigateur : il révèle une classe de capacité, pas une valeur exacte.",
+    math: "Les fonctions mathématiques (sin, cos, log, sinh…) produisent des résultats légèrement différents selon le moteur JavaScript. On compare les 17 chiffres significatifs : c'est une empreinte du moteur, impossible à falsifier depuis JavaScript.",
+    timing: "La résolution de performance.now() et de Date.now() diffère selon les navigateurs, et les protections anti-empreinte l'arrondissent volontairement (ex. 100 ms avec RFP). Elle révèle le moteur et la présence d'une protection.",
+    wasm: "Le support de WebAssembly et de ses extensions (SIMD, threads, mémoire bulk) dépend du moteur et de la plateforme. La validation de modules binaires permet de tester chaque fonctionnalité sans exécuter de code.",
+    bench: "Un calcul répété mesure la vitesse du processeur (opérations par milliseconde). Signal lié au matériel mais sensible à la charge de la machine : il reste utile pour regrouper des machines comparables.",
+    webrtc: "L'API WebRTC peut exposer des adresses locales (candidats ICE) normalement invisibles sur Internet. Les navigateurs récents les masquent avec des noms mDNS pour limiter la fuite.",
+    battery: "Le niveau et l'état de charge de la batterie (API dépréciée) peuvent servir de signal. Sa forte variabilité la rend utile pour distinguer appareils fixes et mobiles.",
+    mediadevices: "La liste des caméras, micros et sorties audio (enumerateDevices) donne un aperçu du matériel présent, sans demander de permission.",
+    plugins: "L'ancienne liste des plugins a longtemps identifié les navigateurs de bureau. Elle est aujourd'hui presque vide partout, mais l'état du visualiseur PDF reste exploitable.",
+    speech: "L'API SpeechSynthesis liste les voix de synthèse installées sur le système (identifiant unique par voix). La liste dépend de l'OS et des paquets installés : c'est un marqueur matériel très stable.",
+    intl: "Les tables de locales du moteur (calendriers, systèmes de numération, unités, collations supportés via Intl.supportedValuesOf) diffèrent selon la version et la plateforme du navigateur.",
+    clockdrift: "La dérive entre les horloges monotone (performance.now) et temps réel (Date.now) est intéressante en théorie, mais RFP quantifie Date.now() sur une grille grossière : la pente mesurée devient aléatoire à chaque chargement (ex. +7261 ppm puis +1480 ppm dans LibreWolf, contre -5 ppm dans Brave). Ce signal est affiché mais exclu du ZPD car il ne survit pas à RFP.",
+    clockoffset: "Le serveur renvoie son horloge (Date.now côté serveur). En comparant huit mesures avec l'horloge locale, on estime l'écart médian (et le RTT). Un RTC calé sur NTP est stable : l'écart mesuré reste le même d'un navigateur à l'autre sur la même machine et le même réseau, à quelques millisecondes près.",
+    workerfonts: "Le worker mesure la largeur du texte dans une soixantaine de polices via un OffscreenCanvas. Mais RFP masque aussi les polices dans le worker (liste factice : LibreWolf renvoie par exemple des polices Windows inexistantes). La liste est donc différente de celle de Brave : ce signal est affiché mais exclu du ZPD (seules les horloges, les codecs, l'audio et la couleur y figurent).",
+    codecs: "mediaCapabilities teste le décodage de VP9, AV1 et Opus (dans le worker). Le support dépend du GPU et de l'OS bien plus que du moteur : il est stable entre navigateurs sur une même machine.",
+    worker: "Les web workers ne voient ni le DOM ni les extensions qui patchent le thread principal. En y recomputant Math, Intl et WebAssembly puis en comparant avec le thread principal, on détecte un masquage côté page, et on obtient un benchmark CPU propre (worker), non parasité par le rendu."
+  }
+
+  var PROTECT_KEYS_FR = {
+    ua: "Utilisez un navigateur avec rotation de l'User-Agent (Firefox avec RFP, Brave) ou une extension qui le brouille. L'objectif n'est pas de le cacher mais de le rendre identique à celui d'une foule.",
+    platform: "Les Client Hints se neutralisent avec des en-têtes CSP (permissions-policy) côté serveur, et côté navigateur avec un user-agent uniforme. Firefox propose « Resist fingerprinting » (RFP) qui fige ces valeurs.",
+    languages: "Choisissez une liste de langues courte et réaliste dans les réglages du navigateur, ou figez-la (RFP). Les extensions qui aléatoirisent les langues sont souvent plus traçantes que l'original.",
+    timezone: "Les navigateurs anti-empreinte (Tor, RFP) figent le fuseau horaire à UTC. Si vous voyagez, gardez un fuseau cohérent plutôt qu'une valeur qui change à chaque connexion.",
+    screen: "RFP (Firefox) et Tor imposent une résolution standardisée. Vous pouvez réduire la fenêtre à une taille commune, mais c'est fragile : une fenêtre unique dans une foule de fenêtres identiques est elle-même un signal.",
+    hardware: "RFP arrondit hardwareConcurrency et deviceMemory. Ces valeurs arrondies créent des regroupements de plusieurs milliers d'utilisateurs chacun.",
+    touch: "RFP normalise maxTouchPoints. Sur mobile, le fingerprinting tactile reste un signal fort : utilisez un navigateur anti-empreinte même sur téléphone.",
+    canvas: "Bloquez la lecture du canvas avec une extension (CanvasBlocker) ou activez RFP. Attention : un bruit constant crée une nouvelle empreinte. Vérifiez qu'il est aléatoire à chaque lecture.",
+    webgl: "Désactivez WebGL ou activez RFP qui renvoie un vendor/renderer générique et neutralise le rendu de test. Tor va plus loin en simulant une configuration matérielle commune.",
+    webgpu: "WebGPU est une API très récente, pas encore neutralisée par les protections classiques. Désactivez-la si vous le pouvez (about:config dom.webgpu.enabled) ; seule Tor l'émule pour l'instant.",
+    audio: "RFP et Tor neutralisent les différences audio en retournant une valeur fixe. Les extensions d'anti-empreinte peuvent aussi bruter l'analyse audio.",
+    audiocontext: "La fréquence d'échantillonnage et les latences du contexte audio sont exposées par l'API elle-même. RFP neutralise partiellement ; sous Linux, changer de pilote audio (PipeWire) change ces valeurs.",
+    fonts: "Bloquez la détection des polices avec une extension (e.g. Font Blocker) ou RFP qui limite les polices et les largeurs mesurables. Désinstaller des polices exotiques réduit le signal.",
+    emoji: "La police emoji du système est difficile à masquer. RFP ne la neutralise pas totalement ; le meilleur réflexe est d'utiliser un navigateur anti-empreinte qui fige aussi le rendu des glyphes.",
+    media: "RFP fige les media queries (thème clair, aucune préférence). Ces valeurs normalisées vous noient dans la foule des utilisateurs de navigateurs protégés.",
+    scrollbar: "La largeur de barre de défilement est très difficile à masquer : elle dépend de l'OS. Les navigateurs anti-empreinte la standardisent (et le thème GNOME peut la changer).",
+    storage: "Bloquez le stockage ou utilisez le mode privé. Attention : la simple disponibilité ou indisponibilité de ces APIs est déjà un signal de 1 à 2 bits.",
+    storagequota: "Impossible à masquer proprement : le quota est annoncé par l'API. C'est un signal d'appareil que seules les protections de navigateur peuvent arrondir.",
+    math: "Impossible à corriger côté utilisateur : c'est une propriété interne du moteur. Seules les protections du navigateur (Tor, RFP) qui forcent des résultats standardisés l'atténuent.",
+    timing: "RFP arrondit volontairement la résolution de performance.now() à 100ms. Vérifiez avec ce test : si la valeur affichée est ≥ 100ms, votre navigateur est déjà protégé.",
+    wasm: "Le support des extensions WASM dépend du moteur, pas de l'utilisateur. Tor et RFP ne le neutralisent pas ; seule la désactivation de WebAssembly (about:config javascript.options.wasm) le supprime.",
+    bench: "La vitesse du processeur ne peut pas être masquée par un navigateur. C'est un signal d'appareil intrinsèque : les protections le réduisent mais ne l'éliminent pas.",
+    webrtc: "Bloquez WebRTC avec une extension ou les réglages du navigateur, et utilisez le mode mDNS (défaut de Chrome) qui masque l'adresse IP locale derrière un nom .local.",
+    battery: "Plus rien à faire : l'API est retirée des navigateurs. Le niveau de batterie reste parfois lisible via des astuces secondaires que RFP neutralise.",
+    mediadevices: "Couvrez ou désactivez vos caméras et micros inutilisés : chaque périphérique présent est une information sur votre matériel. Les navigateurs anti-empreinte renvoient une liste vide.",
+    plugins: "Rien à faire : la liste des plugins a déjà disparu. La présence du visualiseur PDF est neutralisée par RFP.",
+    speech: "La liste des voix de synthèse est exposée par l'API et dépend des paquets installés. RFP ne la neutralise pas ; désinstaller des voix de synthèse tierces réduit le signal.",
+    intl: "Les tables de locales sont internes au moteur, impossibles à modifier depuis une page. Seul un navigateur anti-empreinte peut les figer.",
+    clockdrift: "Quasi impossible à spoof côté site : la dérive vient du couple matériel/OS, pas du navigateur. RFP ne fait que réduire la précision, pas la pente. Aucune protection simple.",
+    clockoffset: "Impossible à spoof : l'écart provient du RTC local (calé par NTP) et du chemin réseau. Seul un VPN ou un réseau différent change l'écart. Aucune protection simple.",
+    workerfonts: "RFP masque les polices même dans le worker : ce signal ne sert plus à identifier l'appareil (exclu du ZPD). Désinstaller des polices exotiques ou bloquer les workers (dom.workers.maxPerDomain) le réduit aussi, mais il n'a plus d'impact sur l'empreinte d'appareil.",
+    codecs: "Le support des codecs dépend du GPU et du système. Seul un navigateur qui désactive les codecs matériels le change. Peu d'options côté utilisateur.",
+    worker: "Les extensions de spoofing ne patchent pas les workers. Si vous voulez limiter le signal, bloquez les workers (about:config dom.workers.maxPerDomain) — mais c'est lourd. Le benchmark worker dépend de la charge CPU, donc peu stable dans le temps."
+  }
+
+  var NAME_KEYS_EN = {
+    ua: "User agent",
+    platform: "Platform",
+    languages: "Languages",
+    timezone: "Time zone",
+    screen: "Screen",
+    hardware: "Hardware",
+    touch: "Touch",
+    canvas: "Canvas 2D (5 passes)",
+    webgl: "WebGL / GPU",
+    webgpu: "WebGPU (graphics card)",
+    audio: "Audio processing",
+    audiocontext: "Audio context",
+    fonts: "Fonts",
+    emoji: "Emoji rendering",
+    media: "CSS media",
+    scrollbar: "Scrollbar",
+    storage: "Storage",
+    storagequota: "Storage quota",
+    math: "JS engine",
+    timing: "Clock resolution",
+    wasm: "WebAssembly",
+    bench: "Machine performance",
+    webrtc: "WebRTC",
+    battery: "Battery",
+    mediadevices: "Devices",
+    plugins: "Plugins",
+    speech: "Speech voices",
+    intl: "Locale tables (Intl)",
+    clockdrift: "Clock drift",
+    clockoffset: "Clock offset (server)",
+    workerfonts: "Real fonts (worker)",
+    codecs: "Media codecs",
+    worker: "Worker bypass"
+  }
+
+  var HOW_KEYS_EN = {
+    ua: "The browser announces its name, version and engine, and through Client Hints the CPU architecture and exact version. The starting point of any fingerprint, it changes at every update but groups strongly.",
+    platform: "The operating system family (Windows, macOS, Linux, Android…) and, through high-entropy Client Hints, the CPU architecture (x86, arm64) and model. Very stable.",
+    languages: "The list of accepted languages (Accept-Language) reveals the user's language and region, often more precisely than the IP. The exact locale chosen by Intl sharpens the signal further.",
+    timezone: "The time zone (Intl) and UTC offset help locate the user. Daylight-saving detection reveals the country. Two identical devices only share a time zone in the same area.",
+    screen: "Resolution, available surface, color depth, pixel ratio (dpr) and orientation distinguish a phone from a computer. Hardware values, stable over time.",
+    hardware: "The number of CPU cores (hardwareConcurrency) and declared memory (deviceMemory). Recent browsers round these values to create groups of thousands of users.",
+    touch: "The number of simultaneous touch points and pointer precision (fine/coarse) separate touchscreens from mouse-driven devices. Very stable on mobile.",
+    canvas: "Five different drawings (gradients, transforms, blend modes, text, emoji) are rendered and hashed. Rendering depends on the engine, anti-aliasing, system and hardware: one of the most discriminating signals.",
+    webgl: "The GPU announces its vendor and model through WebGL, along with dozens of hardware limits (texture size, shader precision). A triangle is rendered then its pixels are read back and hashed: a true signature of the GPU driver.",
+    webgpu: "The new graphics API exposes the GPU adapter: vendor, architecture, model name and hardware limits (texture size, buffers). Even more precise than WebGL, very stable.",
+    audio: "The browser generates an offline sound through the WebAudio API and the resulting waveform is analyzed. Internal processing (compressor, resampling) differs from one engine to another.",
+    audiocontext: "A real audio context exposes the hardware sampling rate (often 44.1 kHz on Linux, 48 kHz on Windows) and the audio driver latencies. These are signatures of the sound card and OS.",
+    fonts: "We measure the width of a text across about sixty fonts: only fonts installed on the system produce a different width. The font list is a very personal marker (installed software, OS, language).",
+    emoji: "Emoji are rendered by a dedicated system font (Noto Color Emoji, Apple Color Emoji, Segoe UI Emoji…). The presence and shape of each emoji betray the OS and installed fonts.",
+    media: "Media queries (dark theme, reduced motion, pointer precision, color gamut, forced-colors, display-mode) reveal the system and display, even on artificially fingerprinted browsers.",
+    scrollbar: "The native scrollbar width is measured with an off-screen element. It depends on the OS and theme (e.g. 15 px on GNOME, 17 px on Windows). Very stable signal.",
+    storage: "The availability of localStorage, sessionStorage and IndexedDB varies between browsers and private browsing modes. Some browsers block these APIs in strict mode.",
+    storagequota: "The Storage API estimates the total quota and current usage. The quota depends on disk size and browser: it reveals a capacity class, not an exact value.",
+    math: "Math functions (sin, cos, log, sinh…) produce slightly different results depending on the JavaScript engine. We compare all 17 significant digits: an engine fingerprint impossible to spoof from JavaScript.",
+    timing: "The resolution of performance.now() and Date.now() differs between browsers, and anti-fingerprinting protections round it on purpose (e.g. 100 ms with RFP). It reveals the engine and the presence of a protection.",
+    wasm: "Support for WebAssembly and its extensions (SIMD, threads, bulk memory) depends on the engine and platform. Validating binary modules lets us test each feature without executing code.",
+    bench: "A repeated computation measures CPU speed (operations per millisecond). Hardware-related but sensitive to machine load: useful to group comparable machines.",
+    webrtc: "The WebRTC API can expose local addresses (ICE candidates) normally invisible on the Internet. Recent browsers hide them behind mDNS names to limit the leak.",
+    battery: "The battery level and charging state (deprecated API) can be used as a signal. Its high variability makes it useful to tell fixed devices from mobile ones.",
+    mediadevices: "The list of cameras, microphones and audio outputs (enumerateDevices) gives an overview of the present hardware, without asking permission.",
+    plugins: "The old plugins list long identified desktop browsers. It is now almost empty everywhere, but the PDF viewer state remains usable.",
+    speech: "The SpeechSynthesis API lists the speech synthesis voices installed on the system (unique ID per voice). The list depends on the OS and installed packages: a very stable hardware marker.",
+    intl: "The engine's locale tables (supported calendars, numbering systems, units, collations via Intl.supportedValuesOf) differ by browser version and platform.",
+    clockdrift: "The drift between the monotonic clock (performance.now) and the realtime clock (Date.now) is interesting in theory, but RFP quantizes Date.now() on a coarse grid: the measured slope becomes random on every load (e.g. +7261 ppm then +1480 ppm in LibreWolf, vs -5 ppm in Brave). This signal is displayed but excluded from the ZPD because it does not survive RFP.",
+    clockoffset: "The server returns its clock (Date.now server-side). Comparing eight measurements with the local clock estimates the median offset (and RTT). An NTP-synced RTC is stable: the measured offset stays the same across browsers on the same machine and network, within a few milliseconds.",
+    workerfonts: "The worker measures the width of a text across about sixty fonts via an OffscreenCanvas. But RFP also masks fonts inside the worker (fake list: LibreWolf for example returns non-existent Windows fonts). The list therefore differs from Brave's: this signal is displayed but excluded from the ZPD (only clocks, codecs, audio and color depth are in it).",
+    codecs: "mediaCapabilities tests decoding of VP9, AV1 and Opus (inside the worker). Support depends on the GPU and OS far more than on the engine: it is stable across browsers on the same machine.",
+    worker: "Web workers see neither the DOM nor the extensions that patch the main thread. Recomputing Math, Intl and WebAssembly in a worker and comparing with the main thread detects page-side masking, and yields a clean (worker) CPU benchmark unaffected by rendering."
+  }
+
+  var PROTECT_KEYS_EN = {
+    ua: "Use a browser with User-Agent rotation (Firefox with RFP, Brave) or an extension that garbles it. The goal is not to hide it but to make it identical to a crowd's.",
+    platform: "Client Hints are neutralized with CSP headers (permissions-policy) on the server side, and with a uniform user agent on the browser side. Firefox offers “Resist fingerprinting” (RFP) which freezes these values.",
+    languages: "Choose a short, realistic list of languages in your browser settings, or freeze it (RFP). Extensions that randomize languages are often more trackable than the original.",
+    timezone: "Anti-fingerprinting browsers (Tor, RFP) freeze the time zone to UTC. If you travel, keep a consistent time zone rather than a value that changes at every connection.",
+    screen: "RFP (Firefox) and Tor impose a standardized resolution. You can also reduce your window to a common size, but it is fragile: a single unique window inside a crowd of identical ones is itself a signal.",
+    hardware: "RFP rounds hardwareConcurrency and deviceMemory. These rounded values create groups of several thousand users each.",
+    touch: "RFP normalizes maxTouchPoints. On mobile, touch fingerprinting remains a strong signal: use an anti-fingerprinting browser on your phone too.",
+    canvas: "Block canvas reads with an extension (CanvasBlocker) or enable RFP. Beware: constant noise creates a new fingerprint. Make sure it is random at every read.",
+    webgl: "Disable WebGL or enable RFP, which returns a generic vendor/renderer and neutralizes the test render. Tor goes further by simulating a common hardware configuration.",
+    webgpu: "WebGPU is a very recent API, not yet neutralized by classic protections. Disable it if you can (about:config dom.webgpu.enabled); only Tor emulates it so far.",
+    audio: "RFP and Tor neutralize audio differences by returning a fixed value. Anti-fingerprinting extensions can also fuzz the audio analysis.",
+    audiocontext: "The sampling rate and latencies of the audio context are exposed by the API itself. RFP neutralizes partially; on Linux, switching audio drivers (PipeWire) changes these values.",
+    fonts: "Block font detection with an extension (e.g. Font Blocker) or RFP, which limits fonts and measurable widths. Uninstalling exotic fonts reduces the signal.",
+    emoji: "The system emoji font is hard to mask. RFP does not fully neutralize it; the best reflex is an anti-fingerprinting browser that also freezes glyph rendering.",
+    media: "RFP freezes media queries (light theme, no preference). These normalized values drown you in the crowd of protected-browser users.",
+    scrollbar: "Scrollbar width is very hard to mask: it depends on the OS. Anti-fingerprinting browsers standardize it (and the GNOME theme can change it).",
+    storage: "Block storage or use private mode. Beware: the mere availability or unavailability of these APIs is already a 1–2 bit signal.",
+    storagequota: "Cannot be properly masked: the quota is announced by the API. It is a device signal that only browser protections can round.",
+    math: "Impossible to fix from the user side: it is an internal property of the engine. Only browser protections (Tor, RFP) that force standardized results mitigate it.",
+    timing: "RFP deliberately rounds the resolution of performance.now() to 100ms. Check with this test: if the displayed value is ≥ 100ms, your browser is already protected.",
+    wasm: "WASM extension support depends on the engine, not the user. Tor and RFP do not neutralize it; only disabling WebAssembly (about:config javascript.options.wasm) removes it.",
+    bench: "CPU speed cannot be masked by a browser. It is an intrinsic device signal: protections reduce it but do not eliminate it.",
+    webrtc: "Block WebRTC with an extension or browser settings, and use mDNS mode (Chrome default) which hides your local IP behind a .local name.",
+    battery: "Nothing to do anymore: the API is being removed from browsers. The battery level is sometimes still readable via secondary tricks that RFP neutralizes.",
+    mediadevices: "Cover or disable unused cameras and microphones: every present device is information about your hardware. Anti-fingerprinting browsers return an empty list.",
+    plugins: "Nothing to do: the plugins list has already disappeared. The presence of the PDF viewer is neutralized by RFP.",
+    speech: "The list of speech voices is exposed by the API and depends on installed packages. RFP does not neutralize it; uninstalling third-party voices reduces the signal.",
+    intl: "Locale tables are internal to the engine, impossible to modify from a page. Only an anti-fingerprinting browser can freeze them.",
+    clockdrift: "Almost impossible to spoof from the site side: the drift comes from the hardware/OS pair, not the browser. RFP only reduces precision, not the slope. No simple protection.",
+    clockoffset: "Impossible to spoof: the offset comes from the local RTC (NTP-disciplined) and the network path. Only a VPN or a different network changes it. No simple protection.",
+    workerfonts: "RFP masks fonts even inside the worker: this signal no longer identifies the device (excluded from the ZPD). Uninstalling exotic fonts or blocking workers (dom.workers.maxPerDomain) reduces it too, but it no longer affects the device fingerprint.",
+    codecs: "Codec support depends on the GPU and system. Only a browser that disables hardware codecs changes it. Few user-side options.",
+    worker: "Spoofing extensions do not patch workers. If you want to limit the signal, block workers (about:config dom.workers.maxPerDomain) — but that is heavy. The worker benchmark depends on CPU load, so it is less stable over time."
+  }
+
+  var NAME_KEYS = LANG === "en" ? NAME_KEYS_EN : NAME_KEYS_FR
+  var HOW_KEYS = LANG === "en" ? HOW_KEYS_EN : HOW_KEYS_FR
+  var PROTECT_KEYS = LANG === "en" ? PROTECT_KEYS_EN : PROTECT_KEYS_FR
+
+  function renderSignals(signals) {
+    var grid = $id("ft-signals")
+    if (!grid) return
+    grid.textContent = ""
+    for (var i = 0; i < signals.length; i++) {
+      var s = signals[i]
+      var card = el("article", "fp-card" + (s.value === null ? " fp-card-na" : ""))
+      var head = el("div", "fp-card-head")
+
+      var name = el("h3", "fp-card-name", NAME_KEYS[s.id] || s.id)
+      head.appendChild(name)
+
+      var badge = el("span", "fp-badge fp-badge-" + (s.stable ? "stable" : "volatile"))
+      badge.textContent = s.stable ? t("stable") : t("volatile")
+      head.appendChild(badge)
+      if (s.core) {
+        var coreTag = el("span", "fp-badge fp-badge-core", t("core"))
+        head.appendChild(coreTag)
+      }
+
+      card.appendChild(head)
+
+      var val = el("p", "fp-card-value")
+      if (s.value === null) {
+        val.textContent = t("notAvailable")
+      } else {
+        val.textContent = s.format ? s.format(s.value) : String(s.value)
+      }
+      card.appendChild(val)
+
+      var meta = el("div", "fp-card-meta")
+      var bits = el("span", "fp-bits")
+      bits.textContent = "≈ " + formatBits(s.entropy) + " " + t("bits")
+      meta.appendChild(bits)
+      var db = el("span", "fp-badge " + (s.device ? "fp-badge-device" : "fp-badge-browser"))
+      db.textContent = s.device ? t("device") : t("browser")
+      meta.appendChild(db)
+      card.appendChild(meta)
+
+      var details = el("details", "fp-card-details")
+      var sum = el("summary", "", t("signalsHow"))
+      details.appendChild(sum)
+
+      var how = el("p", "", HOW_KEYS[s.id] || "")
+      details.appendChild(how)
+
+      var prot = el("div", "fp-card-protect")
+      var protTitle = el("strong", "", t("signalsProtect") + " :")
+      prot.appendChild(protTitle)
+      prot.appendChild(el("p", "", PROTECT_KEYS[s.id] || ""))
+      details.appendChild(prot)
+
+      card.appendChild(details)
+      grid.appendChild(card)
+    }
+  }
+
+  function revealSignals() {
+    var section = $id("ft-signals-section")
+    if (section) section.classList.remove("fp-hidden")
+  }
+
+  function renderResult(args) {
+    var idEl = $id("ft-id")
+    var devIdEl = $id("ft-device-id")
+    var levelEl = $id("ft-level")
+    var devLevelEl = $id("ft-device-level")
+    var bitsEl = $id("ft-bits")
+    var devBitsEl = $id("ft-device-bits")
+    var brBitsEl = $id("ft-browser-bits")
+    var popEl = $id("ft-pop")
+    var scoreEl = $id("ft-score")
+    var stableEl = $id("ft-stable")
+    var devStableEl = $id("ft-device-stable")
+
+    var fmtId = function (hex) {
+      return hex.slice(0, 16).toUpperCase().replace(/(.{4})(?=.)/g, "$1-")
+    }
+    if (idEl) idEl.textContent = "ZFP-" + fmtId(args.fullHash)
+    if (devIdEl) devIdEl.textContent = "ZPD-" + fmtId(args.deviceHash)
+    if (levelEl) levelEl.textContent = args.level.label
+    if (devLevelEl) devLevelEl.textContent = args.deviceLevel.label
+    if (bitsEl) bitsEl.textContent = formatBits(args.bits) + " " + t("bits")
+    if (devBitsEl) devBitsEl.textContent = formatBits(args.deviceBits) + " " + t("bits")
+    if (brBitsEl) brBitsEl.textContent = formatBits(args.browserBits) + " " + t("bits")
+    if (popEl) popEl.textContent = args.population
+    if (scoreEl) {
+      scoreEl.textContent = Math.round((1 - Math.pow(2, -args.bits)) * 10000) / 100 + "%"
+    }
+    if (stableEl) stableEl.textContent = args.stableCount + " / " + args.total + " " + t("stableCount")
+    if (devStableEl) devStableEl.textContent = args.deviceStable + " / " + args.deviceTotal + " " + t("deviceStableCount")
+    var bar = $id("ft-bar")
+    if (bar) bar.style.width = Math.min(100, Math.max(2, args.bits)) + "%"
+    var devBar = $id("ft-device-bar")
+    if (devBar) devBar.style.width = Math.min(100, Math.max(2, args.deviceBits)) + "%"
+  }
+
+  function computeLevel(bits) {
+    if (bits >= 90) return { key: "extreme", label: t("levels.extreme"), min: 90 }
+    if (bits >= 60) return { key: "high", label: t("levels.high"), min: 60 }
+    if (bits >= 32) return { key: "moderate", label: t("levels.moderate"), min: 32 }
+    return { key: "low", label: t("levels.low"), min: 0 }
+  }
+
+  var WINDOWS_FONTS = ["Calibri", "Cambria", "Segoe UI", "Tahoma", "Verdana", "Georgia", "Palatino Linotype", "Comic Sans MS", "Microsoft YaHei", "Arial Narrow"]
+  var LINUX_FONTS = ["DejaVu Sans", "DejaVu Serif", "Liberation Sans", "Liberation Serif", "Noto Sans", "Noto Serif", "Ubuntu", "Ubuntu Mono", "FreeSans"]
+
+  function detectSpoof(collected) {
+    try {
+      var worker = collected.worker
+      if (worker && worker.diffs && worker.diffs.length) return true
+    } catch (e) {}
+    try {
+      var real = collected.workerfonts
+      var mainF = collected.fonts
+      if (real && mainF && mainF.list && real.list) {
+        var realSet = {}
+        var rl = String(real.list).split(",")
+        for (var a = 0; a < rl.length; a++) realSet[rl[a]] = 1
+        var ml = String(mainF.list).split(",")
+        for (var b = 0; b < ml.length; b++) {
+          if (!realSet[ml[b]]) return true
+        }
+      }
+    } catch (e) {}
+    try {
+      var plat = collected.platform
+      var fonts = collected.fonts
+      if (!plat || !fonts || !fonts.list) return false
+      var platStr = String(plat.platform || plat.hintPlatform || "") + " " + String(plat.hintPlatform || "")
+      var isWin = /win|windows/i.test(platStr)
+      if (!isWin) return false
+      var list = String(fonts.list).split(",")
+      var linuxHits = 0
+      for (var i = 0; i < list.length; i++) {
+        if (LINUX_FONTS.indexOf(list[i]) > -1) linuxHits++
+      }
+      return linuxHits > 0
+    } catch (e) {
+      return false
+    }
+  }
+
+  function renderSpoof(collected) {
+    if (!detectSpoof(collected)) return
+    var res = $id("ft-result")
+    if (!res) return
+    var box = el("div", "fp-spoof")
+    var title = el("strong", "", "⚠ " + t("spoofTitle"))
+    box.appendChild(title)
+    box.appendChild(el("p", "", t("spoofText")))
+    res.insertBefore(box, res.firstChild)
+  }
+
+  function renderDebug(defs, collected) {
+    if (!/\bdebug\b/.test(window.location.search)) return
+    var box = document.createElement("details")
+    box.className = "fp-debug"
+    var sum = document.createElement("summary")
+    sum.textContent = "Debug : valeurs brutes des signaux"
+    box.appendChild(sum)
+    var pre = document.createElement("pre")
+    var lines = []
+    for (var i = 0; i < defs.length; i++) {
+      var d = defs[i]
+      var v = collected[d.id]
+      var line = d.id + " [" + (d.stable ? "stable" : "volatile") + "/" + (d.device ? "device" : "browser") + (d.core ? "/core" : "") + "] = " + (v === null || v === undefined ? "null" : JSON.stringify(v))
+      if (v !== null && v !== undefined && d.hashOf) line += "   HASH => " + d.hashOf(v)
+      lines.push(line)
+    }
+    pre.textContent = lines.join("\n")
+    box.appendChild(pre)
+    var res = $id("ft-result")
+    if (res) res.appendChild(box)
+  }
+
+  var STORAGE_KEY = "fpTestState"
+  var MAX_RUNS = 3
+
+  function getTestState() {
+    try { return JSON.parse(sessionStorage.getItem(STORAGE_KEY)) } catch (e) { return null }
+  }
+  function setTestState(state) {
+    try { sessionStorage.setItem(STORAGE_KEY, JSON.stringify(state)) } catch (e) {}
+  }
+  function clearTestState() {
+    try { sessionStorage.removeItem(STORAGE_KEY) } catch (e) {}
+  }
+  function fmtId(hex) {
+    return hex.slice(0, 16).toUpperCase().replace(/(.{4})(?=.)/g, "$1-")
+  }
+
+  function buildRunData(collected, fullHash, deviceHash, args, defs) {
+    var d = {
+      zfp: "ZFP-" + fmtId(fullHash),
+      zpd: "ZPD-" + fmtId(deviceHash),
+      fullHash: fullHash,
+      deviceHash: deviceHash,
+      bits: args.bits,
+      deviceBits: args.deviceBits,
+      browserBits: args.browserBits,
+      timestamp: Date.now(),
+      spoof: detectSpoof(collected),
+      signalHashes: {}
+    }
+    for (var i = 0; i < defs.length; i++) {
+      var s = defs[i]
+      var v = collected[s.id]
+      if (v !== null && v !== undefined) {
+        d.signalHashes[s.id] = {
+          hash: s.hashOf ? s.hashOf(v) : stableString(v),
+          core: !!s.core,
+          stable: !!s.stable,
+          device: !!s.device,
+          entropy: s.entropy
+        }
+      }
+    }
+    return d
+  }
+
+  function computeSecurityAnalysis(runs) {
+    if (!runs || !runs.length) return null
+    var last = runs[runs.length - 1]
+    var defs = signalDefs()
+    var protections = []
+    var recoList = []
+
+    var spoofDetected = false
+    for (var r = 0; r < runs.length; r++) { if (runs[r].spoof) spoofDetected = true }
+
+    var canvasStable = true
+    if (runs.length >= 2 && last.signalHashes.canvas && runs[0].signalHashes.canvas) {
+      canvasStable = last.signalHashes.canvas.hash === runs[0].signalHashes.canvas.hash
+    }
+    protections.push({
+      name: "Canvas",
+      status: spoofDetected ? "protected" : (canvasStable ? "exposed" : "protected"),
+      detail: spoofDetected ? t("protected") : (canvasStable ? t("exposed") : t("protected"))
+    })
+    if (!spoofDetected) recoList.push(LANG === "fr" ? "Activez le masquage canvas (RFP ou extension)." : "Enable canvas masking (RFP or extension).")
+
+    var workerDiffs = false
+    try {
+      if (runs.length && runs[runs.length - 1].signalHashes.worker) {
+        var wh = runs[runs.length - 1].signalHashes.worker.hash
+        workerDiffs = wh.indexOf("math") > -1 || wh.indexOf("intl") > -1
+      }
+    } catch (e) {}
+    protections.push({
+      name: LANG === "fr" ? "Polices" : "Fonts",
+      status: workerDiffs ? "protected" : "exposed",
+      detail: workerDiffs ? t("protected") : t("exposed")
+    })
+    if (!workerDiffs) recoList.push(LANG === "fr" ? "Installez un bloqueur d'empreinte (uBlock, LibreWolf, Brave)." : "Install an anti-fingerprint blocker (uBlock, LibreWolf, Brave).")
+
+    var webglNull = !last.signalHashes.webgl
+    protections.push({
+      name: "WebGL",
+      status: webglNull ? "protected" : "exposed",
+      detail: webglNull ? (LANG === "fr" ? "Bloqué" : "Blocked") : t("exposed")
+    })
+    if (!webglNull) recoList.push(LANG === "fr" ? "Bloquez WebGL dans votre navigateur (about:config)." : "Block WebGL in your browser settings.")
+
+    var timerReduced = false
+    try {
+      var sig = last.signalHashes.timing
+      if (sig && sig.hash.indexOf("?") > -1) timerReduced = true
+    } catch (e) {}
+    protections.push({
+      name: LANG === "fr" ? "Précision des timers" : "Timer precision",
+      status: timerReduced ? "protected" : "exposed",
+      detail: timerReduced ? t("protected") : t("exposed")
+    })
+    if (!timerReduced) recoList.push(LANG === "fr" ? "Activez privacy.resistFingerprinting (about:config)." : "Enable resistFingerprinting (about:config).")
+
+    var hwRounded = false
+    try {
+      var cores = last.signalHashes.hardware
+      if (cores && (cores.hash.indexOf("2") > -1 || cores.hash.indexOf("4") > -1)) hwRounded = true
+    } catch (e) {}
+    protections.push({
+      name: LANG === "fr" ? "Matériel" : "Hardware",
+      status: hwRounded ? "protected" : "exposed",
+      detail: hwRounded ? t("protected") : t("exposed")
+    })
+
+    var screenSpoofed = false
+    try {
+      var sc = last.signalHashes.screen
+      if (sc && sc.hash) screenSpoofed = true
+    } catch (e) {}
+    protections.push({
+      name: LANG === "fr" ? "Écran" : "Screen",
+      status: screenSpoofed ? "protected" : "exposed",
+      detail: screenSpoofed ? t("protected") : t("exposed")
+    })
+
+    protections.push({
+      name: "Audio",
+      status: last.signalHashes.audio ? "exposed" : "protected",
+      detail: last.signalHashes.audio ? t("exposed") : t("protected")
+    })
+    if (last.signalHashes.audio) recoList.push(LANG === "fr" ? "Activez l'opacification audio (RFP ou AudioContext)." : "Enable audio obfuscation (RFP or AudioContext).")
+
+    var stabilityScore = 100
+    if (runs.length >= 2) {
+      var changed = 0
+      var total = 0
+      for (var i = 0; i < defs.length; i++) {
+        if (!defs[i].stable) continue
+        total++
+        var h0 = runs[0].signalHashes[defs[i].id]
+        var h1 = runs[runs.length - 1].signalHashes[defs[i].id]
+        if (h0 && h1 && h0.hash !== h1.hash) changed++
+        else if ((!h0) !== (!h1)) changed++
+      }
+      stabilityScore = total > 0 ? Math.round(((total - changed) / total) * 100) : 100
+    }
+
+    var protectedCount = 0
+    for (var p = 0; p < protections.length; p++) {
+      if (protections[p].status === "protected") protectedCount++
+    }
+    var protectionScore = Math.round((protectedCount / protections.length) * 100)
+
+    var secScore = Math.round(protectionScore * 0.65 + stabilityScore * 0.35)
+
+    return {
+      protections: protections,
+      protectionScore: protectionScore,
+      stabilityScore: stabilityScore,
+      secScore: secScore,
+      recommendations: recoList,
+      zfpStable: runs.length >= 2 ? runs[0].zfp === runs[runs.length - 1].zfp : true,
+      zpdStable: runs.length >= 2 ? runs[0].zpd === runs[runs.length - 1].zpd : true
+    }
+  }
+
+  function showMultiRunResults(runs) {
+    var hero = $id("ft-hero")
+    if (hero) hero.classList.add("fp-hidden")
+    var result = $id("ft-result")
+    if (result) result.classList.add("fp-hidden")
+    var multi = $id("ft-multi")
+    if (!multi) return
+    multi.classList.remove("fp-hidden")
+
+    var analysis = computeSecurityAnalysis(runs)
+    if (!analysis) return
+
+    var secEl = $id("ft-sec-score")
+    if (secEl) secEl.textContent = analysis.secScore + " / 100"
+    var stabEl = $id("ft-stab-score")
+    if (stabEl) stabEl.textContent = analysis.stabilityScore + " %"
+    var introEl = $id("ft-multi-intro")
+    if (introEl) introEl.textContent = t("multiIntro")
+
+    var zfpEl = $id("ft-multi-zfp")
+    if (zfpEl) zfpEl.textContent = runs[0].zfp
+    var zpdEl = $id("ft-multi-zpd")
+    if (zpdEl) zpdEl.textContent = runs[0].zpd
+    var zfpSub = $id("ft-zfp-sub")
+    if (zfpSub) zfpSub.textContent = t("zfpSub")
+    var zpdSub = $id("ft-zpd-sub")
+    if (zpdSub) zpdSub.textContent = t("zpdSub")
+    var zfpDesc = $id("ft-zfp-desc")
+    if (zfpDesc) zfpDesc.textContent = t("zfpDesc")
+    var zpdDesc = $id("ft-zpd-desc")
+    if (zpdDesc) zpdDesc.textContent = t("zpdDesc")
+
+    function fpStatus(runs, key) {
+      var hashes = []
+      for (var i = 0; i < runs.length; i++) hashes.push(runs[i][key])
+      var unique = {}
+      for (var i = 0; i < hashes.length; i++) unique[hashes[i]] = true
+      var count = Object.keys(unique).length
+      if (count === hashes.length) return { cls: "fp-status-protected", key: "protected" }
+      if (count === 1) return { cls: "fp-status-vulnerable", key: "vulnerable" }
+      return { cls: "fp-status-partial", key: "partial" }
+    }
+
+    var zfpSt = fpStatus(runs, "zfp")
+    var zpdSt = fpStatus(runs, "zpd")
+    var zfpStatusEl = $id("ft-zfp-status")
+    if (zfpStatusEl) { zfpStatusEl.textContent = t(zfpSt.key); zfpStatusEl.className = "fp-id-card-status " + zfpSt.cls }
+    var zpdStatusEl = $id("ft-zpd-status")
+    if (zpdStatusEl) { zpdStatusEl.textContent = t(zpdSt.key); zpdStatusEl.className = "fp-id-card-status " + zpdSt.cls }
+
+    var table = $id("ft-multi-table")
+    if (table) {
+      table.textContent = ""
+      var defs = signalDefs()
+
+      var groups = { core: [], device: [], browser: [] }
+      for (var i = 0; i < defs.length; i++) {
+        var d = defs[i]
+        if (!d.stable) continue
+        var grp = d.core ? "core" : (d.device ? "device" : "browser")
+        groups[grp].push(d)
+      }
+
+      var groupLabels = { core: t("core"), device: t("device"), browser: t("browser") }
+      var groupOrder = ["core", "device", "browser"]
+
+      for (var g = 0; g < groupOrder.length; g++) {
+        var grpKey = groupOrder[g]
+        var sigs = groups[grpKey]
+        if (sigs.length === 0) continue
+
+        var grpTitle = el("h3", "fp-multi-grp-title", groupLabels[grpKey])
+        table.appendChild(grpTitle)
+
+        for (var i = 0; i < sigs.length; i++) {
+          var d = sigs[i]
+          var card = el("div", "fp-multi-card")
+          var header = el("div", "fp-multi-card-head")
+          header.appendChild(el("span", "fp-multi-sig", NAME_KEYS[d.id] || d.id))
+
+          var h0 = runs[0].signalHashes[d.id]
+          var prevHash = h0 ? h0.hash : null
+          var stable = true
+          for (var r = 1; r < runs.length; r++) {
+            var hr = runs[r].signalHashes[d.id]
+            var curHash = hr ? hr.hash : null
+            if (curHash !== prevHash) stable = false
+            prevHash = curHash
+          }
+
+          header.appendChild(el("span", stable ? "fp-multi-match" : "fp-multi-diff", stable ? t("stableSig") : t("instable")))
+          card.appendChild(header)
+
+          var dots = el("div", "fp-multi-dots")
+          for (var r = 0; r < runs.length; r++) {
+            var hr = runs[r].signalHashes[d.id]
+            var val = hr ? hr.hash : null
+            var dot = el("span", "fp-multi-dot")
+            if (r > 0) {
+              var prevH = runs[r - 1].signalHashes[d.id]
+              var prevV = prevH ? prevH.hash : null
+              dot.classList.add(val === prevV ? "fp-multi-dot-match" : "fp-multi-dot-diff")
+            } else {
+              dot.classList.add("fp-multi-dot-match")
+            }
+            var label = el("span", "fp-multi-dot-label", LANG === "fr" ? "T" + (r + 1) : "R" + (r + 1))
+            var valLabel = el("span", "fp-multi-dot-val", val ? val.slice(0, 10) + "…" : "—")
+            dot.appendChild(label)
+            dot.appendChild(valLabel)
+            dots.appendChild(dot)
+          }
+          card.appendChild(dots)
+          table.appendChild(card)
+        }
+      }
+    }
+
+    var protBox = $id("ft-protection")
+    if (protBox) {
+      protBox.textContent = ""
+      var protTitle = el("h3", "", t("whatProtected"))
+      protBox.appendChild(protTitle)
+      for (var p = 0; p < analysis.protections.length; p++) {
+        var pr = analysis.protections[p]
+        var row = el("div", "fp-prot-row")
+        row.appendChild(el("span", "fp-prot-name", pr.name))
+        var badge = el("span", "fp-badge fp-badge-" + (pr.status === "protected" ? "stable" : "volatile"), pr.detail)
+        row.appendChild(badge)
+        protBox.appendChild(row)
+      }
+    }
+
+    var recoBox = $id("ft-reco")
+    if (recoBox) {
+      recoBox.textContent = ""
+      if (analysis.recommendations.length) {
+        recoBox.appendChild(el("h3", "", t("recoTitle")))
+        for (var rc = 0; rc < analysis.recommendations.length; rc++) {
+          recoBox.appendChild(el("p", "fp-reco-item", "→ " + analysis.recommendations[rc]))
+        }
+      }
+    }
+
+    var restartBtn = $id("ft-restart")
+    if (restartBtn) {
+      restartBtn.textContent = t("restart")
+      restartBtn.addEventListener("click", function () {
+        clearTestState()
+        location.reload()
+      })
+    }
+
+    var whatSection = $id("ft-what-section")
+    if (whatSection) whatSection.classList.add("fp-hidden")
+    var privacyNote = $id("ft-privacy-note")
+    if (privacyNote) privacyNote.classList.add("fp-hidden")
+    revealSignals()
+  }
+
+  function run() {
+    var btn = $id("ft-run")
+    var status = $id("ft-status")
+    var result = $id("ft-result")
+
+    if (btn) btn.disabled = true
+    if (status) status.textContent = t("running")
+    if (result) result.classList.add("fp-hidden")
+
+    var defs = signalDefs()
+    var collected = {}
+
+    var jobs = defs.map(function (d) {
+      return Promise.resolve()
+        .then(function () {
+          var v = d.collect()
+          if (v && v.then) {
+            var t = d.id === "clockoffset" ? 9000 : 3000
+            return timeout(v, t)
+          }
+          return v
+        })
+        .then(function (v) {
+          collected[d.id] = v === undefined || v === null ? null : v
+        })
+        .catch(function () {
+          collected[d.id] = null
+        })
+    })
+
+    Promise.all(jobs).then(function () {
+      var totalBits = 0
+      var deviceBits = 0
+      var browserBits = 0
+      var stableCount = 0
+      var total = 0
+      var deviceStable = 0
+      var deviceTotal = 0
+      for (var i = 0; i < defs.length; i++) {
+        var d = defs[i]
+        var v = collected[d.id]
+        if (v !== null) {
+          total++
+          totalBits += d.entropy
+          if (d.stable) stableCount++
+          if (d.core) {
+            deviceTotal++
+            deviceBits += d.entropy
+            if (d.stable) deviceStable++
+          } else {
+            browserBits += d.entropy
+          }
+        }
+      }
+      var parts = []
+      var devParts = []
+      for (var j = 0; j < defs.length; j++) {
+        var dj = defs[j]
+        if (collected[dj.id] !== null && dj.stable) {
+          var vStr = dj.hashOf ? dj.hashOf(collected[dj.id]) : stableString(collected[dj.id])
+          parts.push(dj.id + "=" + vStr)
+          if (dj.core) devParts.push(dj.id + "=" + vStr)
+        }
+      }
+      var fullRaw = parts.sort().join("|")
+      var devRaw = devParts.sort().join("|")
+      var level = computeLevel(totalBits)
+      var deviceLevel = computeLevel(deviceBits)
+      var population = formatPopulation(totalBits)
+
+      sha256Hex(fullRaw).then(function (fullHash) {
+        sha256Hex(devRaw).then(function (deviceHash) {
+          renderSignals(defs.map(function (d) {
+            return {
+              id: d.id,
+              entropy: d.entropy,
+              stable: d.stable,
+              device: d.device,
+              core: d.core,
+              value: collected[d.id],
+              format: d.format
+            }
+          }))
+          renderResult({
+            fullHash: fullHash,
+            deviceHash: deviceHash,
+            bits: totalBits,
+            deviceBits: deviceBits,
+            browserBits: browserBits,
+            population: population,
+            level: level,
+            deviceLevel: deviceLevel,
+            stableCount: stableCount,
+            total: total,
+            deviceStable: deviceStable,
+            deviceTotal: deviceTotal
+          })
+          renderSpoof(collected)
+          renderDebug(defs, collected)
+
+          var testState = getTestState()
+          if (testState && testState.runs) {
+            var runData = buildRunData(collected, fullHash, deviceHash, { bits: totalBits, deviceBits: deviceBits, browserBits: browserBits }, defs)
+            testState.runs.push(runData)
+            setTestState(testState)
+
+            if (testState.runs.length >= testState.target) {
+              clearTestState()
+              showMultiRunResults(testState.runs)
+              if (status) status.textContent = ""
+              if (btn) btn.classList.add("fp-hidden")
+              if (result) result.classList.add("fp-hidden")
+            } else {
+              if (status) status.textContent = t("tourDone").replace("{n}", testState.runs.length).replace("{t}", testState.target)
+              if (btn) btn.disabled = true
+              setTimeout(function () { location.reload() }, 1500)
+            }
+          } else {
+            if (status) status.textContent = ""
+            if (btn) {
+              btn.disabled = false
+              btn.textContent = t("again")
+            }
+            if (result) result.classList.remove("fp-hidden")
+            revealSignals()
+          }
+        })
+      })
+    })
+  }
+
+  function init() {
+    var btn = $id("ft-run")
+    if (!btn) return
+
+    var testState = getTestState()
+    if (testState && testState.runs && testState.runs.length >= testState.target) {
+      showMultiRunResults(testState.runs)
+      clearTestState()
+      btn.classList.add("fp-hidden")
+      return
+    }
+
+    btn.textContent = testState && testState.runs ? t("tourN").replace("{n}", testState.runs.length + 1).replace("{t}", testState.target) : t("run3")
+    btn.addEventListener("click", function () {
+      if (!getTestState()) {
+        setTestState({ runs: [], target: MAX_RUNS })
+      }
+      run()
+    })
+
+    try {
+      collectClockOffset()
+      getWorkerData()
+    } catch (e) {}
+
+    if (testState && testState.runs) {
+      var status = $id("ft-status")
+      if (status) status.textContent = t("tourRunning").replace("{n}", testState.runs.length + 1).replace("{t}", testState.target)
+      setTimeout(function () { run() }, 600)
+    }
+
+    var note = $id("ft-privacy-note")
+    if (note) note.textContent = t("privacyNote")
+
+    var intro = $id("ft-intro")
+    if (intro) intro.textContent = t("intro")
+
+    var idHow = $id("ft-id-how")
+    if (idHow) idHow.textContent = t("idHow")
+
+    var devHow = $id("ft-device-how")
+    if (devHow) devHow.textContent = t("deviceHow")
+
+    var multiTitle = $id("ft-multi-title")
+    if (multiTitle) multiTitle.textContent = t("multiTitle")
+    var secLbl = $id("ft-sec-lbl")
+    if (secLbl) secLbl.textContent = t("secScore")
+    var stabLbl = $id("ft-stab-lbl")
+    if (stabLbl) stabLbl.textContent = t("stabScore")
+
+    var whatTitle = $id("ft-what-title")
+    if (whatTitle) whatTitle.textContent = t("whatIsTitle")
+
+    var whatList = $id("ft-what")
+    if (whatList) {
+      whatList.textContent = ""
+      var items = TEXTS[LANG].whatIs
+      for (var i = 0; i < items.length; i++) {
+        whatList.appendChild(el("p", "", items[i]))
+      }
+    }
+
+    var signalsTitle = $id("ft-signals-title")
+    if (signalsTitle) signalsTitle.textContent = t("signalsTitle")
+
+    var entropyLabel = $id("ft-entropy-label")
+    if (entropyLabel) entropyLabel.textContent = t("entropyLabel")
+    var devEntropyLabel = $id("ft-device-entropy-label")
+    if (devEntropyLabel) devEntropyLabel.textContent = t("deviceEntropyLabel")
+    var brEntropyLabel = $id("ft-browser-entropy-label")
+    if (brEntropyLabel) brEntropyLabel.textContent = t("browserEntropyLabel")
+    var entropyNote = $id("ft-entropy-note")
+    if (entropyNote) entropyNote.textContent = t("entropyNote")
+    var idLabel = $id("ft-id-label")
+    if (idLabel) idLabel.textContent = t("idLabel")
+    var devIdLabel = $id("ft-device-label")
+    if (devIdLabel) devIdLabel.textContent = t("deviceLabel")
+    var popLabel = $id("ft-pop-label")
+    if (popLabel) popLabel.textContent = t("population")
+    var levelLabel = $id("ft-level-label")
+    if (levelLabel) levelLabel.textContent = t("level")
+    var devLevelLabel = $id("ft-device-level-label")
+    if (devLevelLabel) devLevelLabel.textContent = t("deviceLevelLabel")
+    var scoreLabel = $id("ft-score-label")
+    if (scoreLabel) scoreLabel.textContent = t("scoreLabel")
+    var estimatedNote = $id("ft-estimated-note")
+    if (estimatedNote) estimatedNote.textContent = t("estimatedNote")
+    var stabilityLabel = $id("ft-stability-label")
+    if (stabilityLabel) stabilityLabel.textContent = t("stabilityLabel")
+  }
+
+  if (document.readyState === "loading") {
+    document.addEventListener("DOMContentLoaded", init)
+  } else {
+    init()
+  }
+})()
diff --git a/public/logo-1024.png b/public/logo-1024.png
new file mode 100644
index 0000000..a2e4826
Binary files /dev/null and b/public/logo-1024.png differ
diff --git a/public/mastodon-avatar.png b/public/mastodon-avatar.png
new file mode 100644
index 0000000..e2242cc
Binary files /dev/null and b/public/mastodon-avatar.png differ
diff --git a/public/og-image.png b/public/og-image.png
new file mode 100644
index 0000000..304b33d
Binary files /dev/null and b/public/og-image.png differ
diff --git a/public/opencode-avatar.png b/public/opencode-avatar.png
new file mode 100644
index 0000000..34ca0b9
Binary files /dev/null and b/public/opencode-avatar.png differ
diff --git a/public/opencode-avatar.svg b/public/opencode-avatar.svg
new file mode 100644
index 0000000..b79140a
--- /dev/null
+++ b/public/opencode-avatar.svg
@@ -0,0 +1 @@
+<svg width='240' height='300' viewBox='0 0 240 300' fill='none' xmlns='http://www.w3.org/2000/svg'><g clip-path='url(#clip0_1401_86274)'><mask id='mask0_1401_86274' style='mask-type:luminance' maskUnits='userSpaceOnUse' x='0' y='0' width='240' height='300'><path d='M240 0H0V300H240V0Z' fill='white'/></mask><g mask='url(#mask0_1401_86274)'><path d='M180 240H60V120H180V240Z' fill='#CFCECD'/><path d='M180 60H60V240H180V60ZM240 300H0V0H240V300Z' fill='#211E1E'/></g></g><defs><clipPath id='clip0_1401_86274'><rect width='240' height='300' fill='white'/></clipPath></defs></svg>
\ No newline at end of file
diff --git a/public/pfp.jpg b/public/pfp.jpg
new file mode 100644
index 0000000..95e29bf
Binary files /dev/null and b/public/pfp.jpg differ
diff --git a/public/privacy-policy/en/index.html b/public/privacy-policy/en/index.html
new file mode 100644
index 0000000..ae85b9a
--- /dev/null
+++ b/public/privacy-policy/en/index.html
@@ -0,0 +1,203 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta
+      name="description"
+      content="Zektyc privacy policy: website, Discord bot, digital fingerprint test, ZMap app, and Zenyth browser. Compliant with the GDPR and the French Data Protection Act (French version is the legally binding reference)."
+    />
+    <meta name="robots" content="index, follow" />
+    <title>Privacy Policy · Zektyc</title>
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <div class="legal-disclaimer">Disclaimer: only the version written in the French language is legally binding. Any translation, regardless of the language, is provided solely as a courtesy and has no legal value.</div>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <h1>Privacy Policy</h1>
+      <p class="legal-meta">French version is the legally binding reference · Last updated: 27 August 2026</p>
+
+      <div class="legal-box">
+        <p><strong>In short: none of our services voluntarily collect your browsing data.</strong> No trackers, no analytics, no share buttons, no third-party tracking services. The website is a showcase site. The digital fingerprint test runs entirely in your browser. The ZMap application collects no data. The Discord bot processes only the current conversation data, ephemerally. The Zenyth browser is a local application that communicates with no server.</p>
+      </div>
+
+      <p>This policy describes, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Law No. 78-17 of 6 January 1978 as amended (Informatique et Libertés Act), how Zektyc processes personal data in the context of all its services.</p>
+
+      <h2>1. Data Controller</h2>
+      <p>The data controller is the organisation Zektyc, operated by an individual acting under the pseudonym "Riric" (also "DotRiric"), established in France. For any questions regarding your personal data: <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>.</p>
+
+      <h2>2. Data We Process</h2>
+      <h3>2.1 Website</h3>
+      <p>The site is accessible through two distinct channels: the clearnet address <code>https://riricdev.tail5ea5cd.ts.net</code>, served through a tunnel provided by a third-party operator, and the Tor hidden service. The site has no forms, no newsletter, no social media buttons, and no analytics service. We do not voluntarily request, record, or process any browsing data about you. For details on the implications of each channel, see <a href="#canaux">Section 2.2</a>.</p>
+
+      <h3 id="canaux">2.2 Website Access Channels: Clearnet Tunnel and Tor Hidden Service</h3>
+      <p>The access channel you use determines the actual level of confidentiality of the traffic. We explain the consequences here with the greatest transparency.</p>
+      <h4>a) Clearnet channel (tunnel)</h4>
+      <p>The clearnet website is made accessible by means of a tunnel whose operator is Tailscale, Inc., a company governed by US law. The TLS encryption on this channel is <strong>terminated on the side of the tunnel operator</strong>, not on our infrastructure. Consequently, <strong>the content you transmit over this channel (requested pages, responses, exchanged content) is decrypted and technically readable by the tunnel operator</strong>, as are IP addresses and connection metadata. These elements are not communicated to us by the operator, and we do not use them. Access to this content may moreover be required of the operator by a public authority in the context of an applicable legal proceeding, including under the US CLOUD Act (22 U.S.C. § 6201 et seq.). For this channel, we for our part collect only the technical logs described in <a href="#logs">Section 2.3</a> below (which do not include the content).</p>
+      <h4>b) Tor hidden service (.onion)</h4>
+      <p>The Tor hidden service (<code>http://l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion</code>), by contrast, is encrypted end to end, from your browser to our infrastructure, <strong>with no TLS termination point at a third party</strong>. No intermediary operator can read the content, and your IP address remains concealed from us and from any observer. The hidden service is the most privacy-respecting channel. For this channel, we likewise process only the technical logs described in <a href="#logs">Section 2.3</a>; the content is not read by any third party.</p>
+
+      <h3 id="logs">2.3 Technical Connection Logs</h3>
+      <p>Like any server, the infrastructure hosting the site automatically generates technical logs for security purposes (prevention and handling of attacks, abuse, and saturation attempts). These logs may contain:</p>
+      <ul>
+        <li>the IP address of the connection;</li>
+        <li>the date and time of the request;</li>
+        <li>the requested resource;</li>
+        <li>the browser type (user agent).</li>
+      </ul>
+      <p>These logs are retained for a maximum of <strong>fourteen (14) days</strong>, then automatically deleted. They are not sold, shared, or used for profiling purposes. Their legal basis is the legitimate interest of the data controller in securing its service (Art. 6.1.f GDPR). The IP addresses contained in these logs are not cross-referenced with other sources.</p>
+      <p>A request counter per IP address is kept in server memory (RAM), with a maximum window of a few minutes, for rate-limiting purposes. This data is never written to persistent storage and is lost upon server restart.</p>
+
+      <h3>2.4 Communication Data (Contact)</h3>
+      <p>If you contact us by email (<a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>), Signal (notriric.05), or Discord, the information you choose to provide (email address, username, message content) is used <strong>solely</strong> to respond to your request. It is not used for marketing purposes, is not shared with third parties, and is not retained beyond the duration necessary for the exchange (Art. 6.1.a GDPR).</p>
+
+      <h3>2.5 Vulnerability Reports (Responsible Disclosure)</h3>
+      <p>If you report a vulnerability to us, in accordance with Section 12 of the Terms of Service, the information you provide (technical details, proof of concept, screenshots, any contact information) is processed solely for the purpose of assessing, fixing, and verifying the fix for the reported vulnerability. It is not shared with third parties and is deleted once the fix is confirmed (Art. 6.1.f GDPR).</p>
+
+      <h3>2.6 Verification of an Authority or Request</h3>
+      <p>When an individual presents themselves as belonging to a public authority and requests the disclosure of information, in accordance with Section 13 of the Terms of Service, the documents they provide to prove their identity and the scope of their authority constitute personal data processed temporarily. This processing is based on a legal obligation or on the legitimate interest of the controller in verifying the validity of the request. The documents are retained only for the duration of the verification, then deleted.</p>
+
+      <h3 id="bot">2.7 Discord Bot (Zektyc Bot)</h3>
+      <p>The Zektyc Discord bot processes only the data strictly necessary for the provision of the service you request (Art. 6.1.b GDPR) and, where applicable, with your express consent when you solicit it (Art. 6.1.a GDPR):</p>
+      <ul>
+        <li><strong>Written messages</strong>: the content of the message by which you address the bot (mention or reply), as well as the generated response, to ensure the conversation;</li>
+        <li><strong>Voice audio</strong>: when the bot is active in a voice channel, your voice is captured only while you are speaking, for the duration needed to transcribe it into text;</li>
+        <li><strong>Discord identifiers</strong>: your user ID and displayed username, used to address you and associate your messages;</li>
+        <li><strong>Conversation history</strong>: written exchanges and transcriptions of the current session, kept in RAM only (last twenty exchanges at most) to ensure conversation coherence.</li>
+      </ul>
+      <p>None of this data is written to persistent storage, sold, rented, shared, or used for profiling or advertising purposes. The conversation history is reset on each bot restart.</p>
+      <p>For transcription (speech recognition) and response generation, the bot uses the Groq service (Groq, Inc., United States), acting as a processor within the meaning of Article 28 GDPR (see <a href="#transferts">Section 7</a>). The captured audio and transmitted texts are sent to Groq solely for the provision of the service; they are not retained on our end. Voice synthesis (spoken response) is performed locally, in France, without transmission to a third party.</p>
+      <p>Written messages and audio transit through the Discord platform, operated by Discord, Inc., which processes them solely for the purpose of their transmission. Discord does not implement end-to-end encryption: never send sensitive data (health data, financial data, secrets, confidential information) to the bot.</p>
+
+      <h3 id="fingerprint-test">2.8 Digital Fingerprint Test (Fingerprint Test)</h3>
+      <p>The digital fingerprint test accessible at <a href="/fingerprint-test">/fingerprint-test</a> (FR) and <a href="/en/fingerprint-test">/en/fingerprint-test</a> (EN) runs <strong>exclusively in your browser</strong>, at your initiative and on your request. The technical characteristics collected for the fingerprint calculation (canvas, rendering engine, installed fonts, audio, hardware capabilities, and more than thirty distinct signals) are processed locally, on your device, at the time you launch the test.</p>
+      <p>The test analyzes two types of fingerprints: the ZFP (browser-layer fingerprint) and the ZPD (hardware-layer fingerprint). Both are calculated by SHA-256 hashing in your browser.</p>
+      <p>The only network request made is a call to the Zektyc server's <code>/api/time</code> endpoint, intended to measure the clock offset between your device and the server (necessary for ZPD calculation). This call transmits no personal data; it returns only a server timestamp.</p>
+      <p>The multi-round test (3 successive rounds) temporarily uses <strong>session storage</strong> (<code>sessionStorage</code>) to preserve intermediate results between page reloads and enable the final comparison. These data are automatically deleted at the end of the test or when the tab is closed. No data is transmitted to third parties.</p>
+
+      <h3 id="zmap">2.9 ZMap Application</h3>
+      <p>ZMap is an Android application for electric vehicle trip planning. The application collects no personal data. No account is required. No tracker or analytics service is integrated.</p>
+      <p>The application communicates with the Zektyc server via WebSocket and API calls (charging stations, geographic search, routes, road speeds). These calls transit through the Zektyc server, which proxies requests to open-source third-party services:</p>
+      <ul>
+        <li><strong>Overpass API</strong> (OpenStreetMap): public charging stations in Europe;</li>
+        <li><strong>Nominatim</strong> (OpenStreetMap): geocoding and place search;</li>
+        <li><strong>OSRM</strong> (Open Source Routing Machine): route calculation.</li>
+      </ul>
+      <p>The results of these requests are cached server-side (10 minutes for stations, 24 hours for search, 12 hours for routes). The IP addresses of requests are subject to the server's technical logs (14 days maximum, see <a href="#logs">Section 2.3</a>). The Zektyc server collects no user location or travel data.</p>
+      <p>The road speed database (90.5 million points) is built from public OpenStreetMap data and contains no personal data.</p>
+      <p>The ZMap web client accessible at <a href="/zmap/web">/zmap/web</a> follows the same data protection principles.</p>
+
+      <h3>2.10 Zenyth Browser</h3>
+      <p>Zenyth is software installed locally on your device (RPM package for Fedora/RHEL systems). It configures Firefox with hardening parameters (Resist Fingerprinting, font masking, WebGPU and Battery API disabling, WebRTC protection, JShelter and uBlock Origin extensions).</p>
+      <p>Zenyth communicates with no Zektyc server and no third-party server. Its configuration is entirely local. No data is collected, transmitted, or stored.</p>
+
+      <h2>3. Honeypot (Technical Trap)</h2>
+      <p>To protect the site against robots and automated intrusion attempts, the server includes a decoy system (honeypot) that mimics WordPress responses for commonly targeted paths (wp-login.php, xmlrpc.php, .env, etc.).</p>
+      <p>When a request reaches one of these paths, the sender's IP address is recorded in a local SQLite database along with: number of attempts, dates of first and last attempt, and breakdown by endpoint. These data are retained until manual deletion by an administrator via the administration panel.</p>
+      <p>This processing is based on the legitimate interest of the controller in protecting its infrastructure against automated attacks (Art. 6.1.f GDPR). The recorded IP addresses are not sold, shared, or used for profiling. They are not cross-referenced with other sources.</p>
+
+      <h2>4. Administration Panel (Z-Panel)</h2>
+      <p>The administration panel (<a href="/z-panel">/z-panel</a>) is an internal tool protected by a password (hashed with Argon2id). It is not indexed by search engines (<code>noindex, nofollow</code>).</p>
+      <p>Administration sessions are managed by random session tokens (32 bytes, encoded in base64url) with a 24-hour lifetime. Login attempts are limited to 5 per 15-minute window per IP address. These authentication data are kept in RAM and are lost upon server restart.</p>
+      <p>The panel provides access to server access logs, request statistics, article administration, translations, and the honeypot system. These data are accessible exclusively by the administrator.</p>
+
+      <h2>5. Cookies</h2>
+      <p>The site uses <strong>no cookies</strong>, neither first-party nor third-party, no trackers, and no persistent local storage (localStorage, IndexedDB). No consent banner is therefore required under Directive 2002/58/CE (ePrivacy) and the GDPR.</p>
+      <p>The digital fingerprint test temporarily uses <code>sessionStorage</code> only when you launch the multi-round test, to preserve results between reloads. This storage is automatically cleared at the end of the test or when the tab is closed; it does not constitute a cookie or a tracker.</p>
+
+      <h2>6. Recipients and Sub-processors</h2>
+      <p>We do not share, sell, or transmit your data to any third party, any advertising network, or any analytics provider. The site is hosted on our own infrastructure, in France, without recourse to a hosting sub-processor.</p>
+
+      <h3>6.1 Proton Mail (Email)</h3>
+      <p>Our email service is provided by Proton Mail (Proton AG, Switzerland), acting as a technical sub-processor within the meaning of Article 28 GDPR for the delivery and hosting of messages you send us. Switzerland benefits from an adequacy decision by the European Commission (Art. 45 GDPR). Proton processes these messages solely for the provision of the service.</p>
+
+      <h3>6.2 Signal</h3>
+      <p>Exchanges made via Signal transit through the servers of Signal Messenger, LLC. Signal implements end-to-end encryption: the content of messages is never accessible to a third party, including Signal.</p>
+
+      <h3>6.3 Discord</h3>
+      <p>Exchanges made via Discord transit through the servers of Discord, Inc. Discord does not implement end-to-end encryption for messages; avoid exchanging sensitive data on it.</p>
+
+      <h3>6.4 Groq (Discord Bot)</h3>
+      <p>For voice transcription and response generation, the bot uses Groq (Groq, Inc., United States), acting as a sub-processor within the meaning of Article 28 GDPR. Groq processes the audio and transmitted texts solely for the provision of the service, in accordance with the service's terms of use. See <a href="#bot">Section 2.7</a> and <a href="#transferts">Section 7</a>.</p>
+
+      <h3>6.5 Open-Source Third-Party Services (ZMap)</h3>
+      <p>The ZMap application proxies requests to open-source third-party services (Overpass, Nominatim, OSRM) via the Zektyc server. These services do not receive your direct IP address (it is masked by the proxy). The data exchanged relate to charging station, geocoding, or routing queries, with no link to your identity.</p>
+
+      <h2 id="transferts">7. Transfers Outside the European Union</h2>
+      <p>Regarding the site and infrastructure: they are hosted in France and operated within the European Union. No data processed by the site is stored outside the European Union or the European Economic Area (Art. 44 et seq. GDPR).</p>
+      <p>Regarding the clearnet channel: the tunnel making it accessible is provided by Tailscale, Inc., a company governed by US law. As explained in <a href="#canaux">Section 2.2</a>, this channel implies that the content transits in cleartext through this operator, which is its TLS termination point. Tailscale does not act as a processor within the meaning of Article 28 GDPR for this traffic, so this passage through a US entity is an accepted limitation of this access channel; it does not apply to the Tor hidden service, which remains end-to-end encrypted without a third-party intermediary.</p>
+      <p>Regarding the email contact channel: Proton Mail is operated from Switzerland, a country that benefits from an adequacy decision by the European Commission.</p>
+      <p>Regarding Signal and Discord: their servers may be located outside the European Union. Signal encrypts messages end-to-end, which Discord does not.</p>
+      <p>Regarding the Discord bot: the audio to be transcribed and the texts processed by the bot are transmitted to Groq (United States), as part of the transcription and response generation service. Groq does not appear on the list of organisations certified under the EU-US Data Privacy Framework (DPF). The transfer is governed by the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914), incorporated into Groq's processing agreement (Data Processing Addendum), effective 15 October 2025 — Module 2 (controller to processor). Only the elements strictly necessary for the provision of the service are transmitted, and nothing is retained on our end.</p>
+
+      <h2>8. Retention Periods</h2>
+      <ul>
+        <li>Technical logs: <strong>14 days maximum</strong>, automatic deletion;</li>
+        <li>In-memory protection counters (RAM): a few minutes, never persisted;</li>
+        <li>Communication data (contact): duration of the exchange necessary for your request;</li>
+        <li>Vulnerability reports: until the fix is confirmed, then deleted within 30 days;</li>
+        <li>Authority verification documents: duration of the verification, then deleted;</li>
+        <li>Discord bot data (messages, audio, identifiers, history): <strong>no persistent retention</strong>; session history (20 exchanges max) is in RAM only, reset on restart;</li>
+        <li>Fingerprint test data: <strong>no data is transmitted to Zektyc</strong>; characteristics disappear when the tab is closed;</li>
+        <li>Honeypot data (IP addresses): until manual deletion by an administrator;</li>
+        <li>Administration sessions: 24-hour session tokens, in RAM only.</li>
+      </ul>
+
+      <h2>9. Security</h2>
+      <p>The services are protected by the following technical measures:</p>
+      <ul>
+        <li>connection encrypted in transit (HTTPS/TLS via the tunnel for the clearnet channel) and end-to-end encryption for the Tor hidden service;</li>
+        <li>restrictive security headers (CSP, X-Content-Type-Options nosniff, X-Frame-Options, HSTS, Permissions-Policy);</li>
+        <li>rate limiting (200 requests / 10 seconds per IP generally, 30 / minute for the ZMap API, 5 login attempts / 15 minutes for administration);</li>
+        <li>HTTP method restriction (GET and HEAD only);</li>
+        <li>sensitive path blocking (WordPress honeypot);</li>
+        <li>data minimization and limited retention;</li>
+        <li>administration passwords hashed with Argon2id (memoryCost: 65536, timeCost: 4);</li>
+        <li>self-hosted infrastructure in France, without CDN or third-party service.</li>
+      </ul>
+
+      <h2>10. Your Rights</h2>
+      <p>In accordance with Articles 15 to 22 of the GDPR, you have the following rights:</p>
+      <ul>
+        <li>right of access;</li>
+        <li>right to rectification;</li>
+        <li>right to erasure ("right to be forgotten");</li>
+        <li>right to restriction of processing;</li>
+        <li>right to data portability, in a structured, commonly used, and machine-readable format;</li>
+        <li>right to object;</li>
+        <li>right to withdraw your consent at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal (Art. 7.3 GDPR).</li>
+      </ul>
+      <p>You also have the right not to be subject to a decision based solely on automated processing, including profiling, producing legal effects concerning you (Art. 22 GDPR). Zektyc does not make any automated decisions concerning you.</p>
+      <p>You can exercise these rights at any time by contacting us at: <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>. We respond within a maximum of one month, in accordance with Article 12 of the GDPR. For any sensitive or confidential communication, prefer email or Signal over Discord.</p>
+      <p>You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or via <a href="https://www.cnil.fr" rel="noopener noreferrer" target="_blank">cnil.fr</a>.</p>
+      <p>Zektyc does not appoint a Data Protection Officer (DPO): such appointment is not required under Article 37 of the GDPR, as the processing carried out is neither on a large scale nor based on systematic monitoring.</p>
+
+      <h2>11. Data Breach Notification</h2>
+      <p>In the event of a personal data breach, we notify the CNIL as soon as possible and no later than seventy-two (72) hours after becoming aware of it, in accordance with Article 33 of the GDPR, unless the breach is unlikely to pose a risk to the rights and freedoms of data subjects. If the breach is likely to pose a high risk, you are also directly notified, in accordance with Article 34 of the GDPR. Given that technical logs are retained for a maximum of 14 days, the detection window is necessarily limited; this is part of our data minimization approach.</p>
+
+      <h2>12. Visitors Located Outside the European Union</h2>
+      <p>If the California Consumer Privacy Act (CCPA) applies to you: Zektyc does not sell your personal data, has never sold it, and will never sell it. No information concerning you is disclosed to third parties for monetary consideration ("do not sell").</p>
+      <p>The site honours Global Privacy Control (GPC) and Do Not Track (DNT) opt-out signals: in practice, they require no particular implementation, since no data is collected or processed for tracking purposes.</p>
+      <p>Visitors located in other jurisdictions benefit from the same guarantees. As no data is voluntarily collected, the requirements of these regulations are in practice largely moot.</p>
+
+      <h2>13. Minors</h2>
+      <p>The site is not specifically directed at minors and implements no collection mechanisms targeting them. We do not voluntarily collect any data from minors. Regarding the Discord bot, its use is subject to Discord's terms, which require users to be at least thirteen (13) years of age.</p>
+
+      <h2>14. Changes to This Policy</h2>
+      <p>We may update this policy to reflect technical or legal developments. The applicable version is the one published online; the date of the last update is shown at the top of the page.</p>
+
+      <h2>15. Contact</h2>
+      <p>For any questions regarding this policy, your rights, or to exercise your rights: <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>.</p>
+
+      <p class="legal-note">French version: <a href="/privacy-policy">Politique de confidentialité (FR)</a>.</p>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/privacy-policy/index.html b/public/privacy-policy/index.html
new file mode 100644
index 0000000..080b7a3
--- /dev/null
+++ b/public/privacy-policy/index.html
@@ -0,0 +1,203 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta
+      name="description"
+      content="Politique de confidentialité de Zektyc : site web, bot Discord, test d'empreinte numérique, application ZMap et navigateur Zenyth. Conforme au RGPD et à la loi Informatique et Libertés (version française de référence)."
+    />
+    <meta name="robots" content="index, follow" />
+    <title>Politique de confidentialité · Zektyc</title>
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <div class="legal-disclaimer">Avertissement : seule la version rédigée en langue française fait foi juridiquement. Toute traduction, quelle qu'en soit la langue, n'est fournie qu'à titre de courtoisie et n'a aucune valeur juridique.</div>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <h1>Politique de confidentialité</h1>
+      <p class="legal-meta">Version française de référence · Dernière mise à jour : 27 août 2026</p>
+
+      <div class="legal-box">
+        <p><strong>En résumé : aucun de nos services ne collecte volontairement vos données de navigation.</strong> Pas de tracker, pas de mesure d'audience, pas de bouton de partage, pas de service tiers de suivi. Le site est un site vitrine. Le test d'empreinte numérique fonctionne entièrement dans votre navigateur. L'application ZMap ne collecte aucun données. Le bot Discord traite uniquement les données de la conversation en cours, de façon éphémère. Le navigateur Zenyth est un logiciel local qui ne communique avec aucun serveur.</p>
+      </div>
+
+      <p>Cette politique décrit, conformément au Règlement (UE) 2016/679 du 27 avril 2016 (RGPD) et à la loi n° 78-17 du 6 janvier 1978 modifiée (Informatique et Libertés), la manière dont Zektyc traite les données à caractère personnel dans le cadre de l'ensemble de ses services.</p>
+
+      <h2>1. Responsable du traitement</h2>
+      <p>Le responsable du traitement est l'organisation Zektyc, éditée par une personne physique agissant sous le pseudonyme « Riric » (également « DotRiric »), établie en France. Pour toute question relative à vos données personnelles : <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>.</p>
+
+      <h2>2. Données que nous traitons</h2>
+      <h3>2.1 Site web</h3>
+      <p>Le site est accessible par deux canaux distincts : l'adresse clearnet <code>https://riricdev.tail5ea5cd.ts.net</code>, servie via un tunnel fourni par un opérateur tiers, et le service caché Tor. Le site ne dispose d'aucun formulaire, d'aucune newsletter, d'aucun bouton de réseaux sociaux et d'aucun service d'analyse. Nous ne demandons, n'enregistrons et n'exploitons volontairement aucune donnée de navigation vous concernant. Pour le détail des implications de chaque canal, voir la <a href="#canaux">section 2.2</a>.</p>
+
+      <h3 id="canaux">2.2 Canaux d'accès au site : tunnel clearnet et service caché Tor</h3>
+      <p>Le canal d'accès que vous utilisez détermine le niveau de confidentialité réel du trafic. Nous vous en exposons ici les conséquences avec la plus grande transparence.</p>
+      <h4>a) Voie clearnet (tunnel)</h4>
+      <p>Le site clearnet est rendu accessible au moyen d'un tunnel dont l'opérateur est Tailscale, Inc., société de droit américain. Le chiffrement TLS de cette voie est <strong>terminé côté opérateur du tunnel</strong>, et non sur notre infrastructure. En conséquence, <strong>le contenu que vous transmettez par cette voie (pages demandées, réponses, contenus échangés) est déchiffré et techniquement lisible par l'opérateur du tunnel</strong>, ainsi que les adresses IP et métadonnées de connexion. Ces éléments ne nous sont pas communiqués par l'opérateur, et nous ne les utilisons pas. Un accès à ce contenu peut en outre être requis de l'opérateur par une autorité publique dans le cadre d'une procédure légale applicable, y compris au titre du US CLOUD Act (22 U.S.C. § 6201 et suivants). Pour cette voie, nous ne collectons, de notre côté, que les journaux techniques décrits à la <a href="#logs">section 2.3</a> ci-dessous (qui ne comprennent pas le contenu).</p>
+      <h4>b) Service caché Tor (.onion)</h4>
+      <p>Le service caché Tor (<code>http://l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion</code>) est au contraire chiffré de bout en bout, de votre navigateur jusqu'à notre infrastructure, <strong>sans point de terminaison TLS chez un tiers</strong>. Aucun opérateur intermédiaire ne peut lire le contenu, et votre adresse IP reste masquée vis-à-vis de nous et de tout observateur. Le service caché constitue le canal le plus respectueux de votre vie privée. Pour cette voie, nous ne traitons de même que les journaux techniques décrits à la <a href="#logs">section 2.3</a> ; le contenu n'est pas lu par un tiers.</p>
+
+      <h3 id="logs">2.3 Journaux techniques de connexion</h3>
+      <p>Comme tout serveur, l'infrastructure qui héberge le site génère automatiquement des journaux techniques à des fins de sécurité (prévention et traitement des attaques, des abus et des tentatives de saturation). Ces journaux peuvent contenir :</p>
+      <ul>
+        <li>l'adresse IP de la connexion ;</li>
+        <li>la date et l'heure de la requête ;</li>
+        <li>la ressource demandée ;</li>
+        <li>le type de navigateur (user agent).</li>
+      </ul>
+      <p>Ces journaux sont conservés <strong>quatorze (14) jours au maximum</strong>, puis supprimés automatiquement. Ils ne sont ni vendus, ni partagés, ni utilisés à des fins de profilage. Leur base légale est l'intérêt légitime du responsable du traitement à sécuriser son service (art. 6.1.f RGPD). Les adresses IP contenues dans ces journaux ne sont pas recoupées avec d'autres sources.</p>
+      <p>Un compteur de requêtes par adresse IP est conservé en mémoire vive (RAM) du serveur, avec une fenêtre maximale de quelques minutes, à des fins de limitation du débit. Ces données ne sont jamais écrites sur un support persistant et disparaissent au redémarrage du serveur.</p>
+
+      <h3>2.4 Données d'échange (contact)</h3>
+      <p>Si vous nous contactez par e-mail (<a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>), Signal (notriric.05) ou Discord, les informations que vous choisissez de nous communiquer (adresse e-mail, identifiant, contenu du message) sont utilisées <strong>uniquement</strong> pour répondre à votre demande. Elles ne sont pas utilisées à des fins de marketing, ne sont pas partagées avec des tiers et ne sont pas conservées au-delà de la durée nécessaire à l'échange (art. 6.1.a RGPD).</p>
+
+      <h3>2.5 Signalements de vulnérabilités (divulgation responsable)</h3>
+      <p>Si vous nous signalez une vulnérabilité, conformément à la section 12 des CGU, les informations que vous nous transmettez (détails techniques, preuve de concept, captures d'écran, coordonnées éventuelles) sont traitées uniquement dans le but d'évaluer, de corriger et de vérifier la correction de la vulnérabilité signalée. Elles ne sont pas partagées avec des tiers et sont supprimées une fois la correction confirmée (art. 6.1.f RGPD).</p>
+
+      <h3>2.6 Vérification d'une autorité ou d'une demande</h3>
+      <p>Lorsqu'une personne se présente comme relevant d'une autorité publique et sollicite la communication d'informations, conformément à la section 13 des CGU, les documents qu'elle fournit pour justifier de son identité et de l'étendue de son pouvoir constituent des données à caractère personnel traitées temporairement. Ce traitement repose sur une obligation légale ou sur l'intérêt légitime du responsable à vérifier le bien-fondé de la demande. Les documents sont conservés uniquement le temps de la vérification, puis supprimés.</p>
+
+      <h3 id="bot">2.7 Bot Discord (Zektyc bot)</h3>
+      <p>Le bot Discord de Zektyc traite uniquement les données strictement nécessaires à la fourniture du service que vous demandez (art. 6.1.b RGPD) et, le cas échéant, avec votre consentement exprès lorsque vous le sollicitez (art. 6.1.a RGPD) :</p>
+      <ul>
+        <li><strong>Messages écrits</strong> : le contenu du message par lequel vous interpellez le bot (mention ou réponse), ainsi que la réponse générée, afin d'assurer la conversation ;</li>
+        <li><strong>Audio vocal</strong> : lorsque le bot est actif dans un salon vocal, votre voix est captée uniquement pendant que vous parlez, le temps d'être transcrite en texte ;</li>
+        <li><strong>Identifiants Discord</strong> : votre identifiant utilisateur et votre pseudonyme affiché, utilisés pour vous adresser la parole et associer vos messages ;</li>
+        <li><strong>Historique de conversation</strong> : les échanges écrits et les transcriptions de la session en cours, conservés en mémoire vive uniquement (vingt derniers échanges au maximum) afin d'assurer la cohérence de la conversation.</li>
+      </ul>
+      <p>Aucune de ces données n'est écrite sur un support persistant, n'est vendue, louée, partagée ou exploitée à des fins de profilage ou de publicité. L'historique de conversation est réinitialisé à chaque redémarrage du bot.</p>
+      <p>Pour la transcription (reconnaissance vocale) et la génération des réponses, le bot fait appel au service Groq (Groq, Inc., États-Unis), qui agit en qualité de sous-traitant au sens de l'article 28 RGPD (voir la <a href="#transferts">section 7</a>). L'audio capté et les textes transmis sont envoyés à Groq aux seules fins de la fourniture du service ; ils ne sont pas conservés de notre côté. La synthèse vocale (réponse parlée) est effectuée localement, en France, sans transmission à un tiers.</p>
+      <p>Les messages écrits et l'audio transitent par la plateforme Discord, gérée par Discord, Inc., qui les traite aux seules fins de leur transmission. Discord n'applique pas de chiffrement de bout en bout : ne transmettez jamais au bot de données sensibles (données de santé, données bancaires, secrets, informations confidentielles).</p>
+
+      <h3 id="fingerprint-test">2.8 Test d'empreinte numérique (Fingerprint Test)</h3>
+      <p>Le test d'empreinte numérique accessible aux adresses <a href="/fingerprint-test">/fingerprint-test</a> (FR) et <a href="/en/fingerprint-test">/en/fingerprint-test</a> (EN) fonctionne <strong>exclusivement dans votre navigateur</strong>, à votre initiative et à votre demande. Les caractéristiques techniques collectées pour le calcul de l'empreinte (canvas, moteur de rendu, polices installées, audio, capacités matérielles, et plus de trente signaux distincts) sont traitées localement, sur votre terminal, au moment où vous lancez le test.</p>
+      <p>Le test analyse deux types d'empreintes : le ZFP (empreinte couche navigateur) et le ZPD (empreinte couche matérielle). Les deux sont calculés par hachage SHA-256 dans votre navigateur.</p>
+      <p>La seule requête réseau effectuée est un appel à l'endpoint <code>/api/time</code> du serveur Zektyc, destiné à mesurer le décalage horloge entre votre appareil et le serveur (nécessaire au calcul du ZPD). Cet appel ne transmet aucune donnée personnelle ; il retourne uniquement un timestamp serveur.</p>
+      <p>Le test multi-tours (3 tours successifs) utilise temporairement le <strong>stockage de session</strong> (<code>sessionStorage</code>) pour conserver les résultats intermédiaires entre les rechargements de la page et permettre la comparaison finale. Ces données sont automatiquement supprimées à la fin du test ou à la fermeture de l'onglet. Aucune donnée n'est transmise à des tiers.</p>
+
+      <h3 id="zmap">2.9 Application ZMap</h3>
+      <p>ZMap est une application Android de planification de trajets pour véhicules électriques. L'application ne collecte aucune donnée personnelle. Aucun compte n'est requis. Aucun tracker ni service d'analyse n'est intégré.</p>
+      <p>L'application communique avec le serveur Zektyc via WebSocket et des appels API (bornes de recharge, recherche géographique, itinéraire, vitesses par route). Ces appels transitent par le serveur Zektyc, qui proxy les requêtes vers des services tiers open source :</p>
+      <ul>
+        <li><strong>Overpass API</strong> (OpenStreetMap) : bornes de recharge publiques en Europe ;</li>
+        <li><strong>Nominatim</strong> (OpenStreetMap) : géocodage et recherche de lieux ;</li>
+        <li><strong>OSRM</strong> (Open Source Routing Machine) : calcul d'itinéraires.</li>
+      </ul>
+      <p>Les résultats de ces requêtes sont mis en cache côté serveur (10 minutes pour les bornes, 24 heures pour la recherche, 12 heures pour les itinéraires). Les adresses IP des requêtes sont soumises aux journaux techniques du serveur (14 jours maximum, voir la <a href="#logs">section 2.3</a>). Le serveur Zektyc ne collecte aucune donnée de localisation ou de déplacement des utilisateurs.</p>
+      <p>La base de données de vitesses par route (90,5 millions de points) est construite à partir de données OpenStreetMap publiques et ne contient aucune donnée personnelle.</p>
+      <p>Le client web ZMap accessible à l'adresse <a href="/zmap/web">/zmap/web</a> utilise les mêmes principes de protection des données.</p>
+
+      <h3>2.10 Navigateur Zenyth</h3>
+      <p>Zenyth est un logiciel installé localement sur votre appareil (paquet RPM pour systèmes Fedora/RHEL). Il configure Firefox avec des paramètres de durcissement (Resist Fingerprinting, masquage des polices, désactivation de WebGPU et de l'API Battery, protection WebRTC, extensions JShelter et uBlock Origin).</p>
+      <p>Zenyth ne communique avec aucun serveur Zektyc ni aucun serveur tiers. Sa configuration est entièrement locale. Aucune donnée n'est collectée, transmise ou stockée.</p>
+
+      <h2>3. Honeypot (piège technique)</h2>
+      <p>Pour protéger le site contre les robots et les tentatives d'intrusion automatisées, le serveur inclut un système de leurre (honeypot) qui imite des réponses WordPress pour des chemins fréquemment ciblés (wp-login.php, xmlrpc.php, .env, etc.).</p>
+      <p>Lorsqu'une requête atteint un de ces chemins, l'adresse IP de l'émetteur est enregistrée dans une base de données SQLite locale avec : nombre de tentatives, dates de première et dernière tentative, et ventilation par endpoint. Ces données sont conservées jusqu'à suppression manuelle par un administrateur via le panneau d'administration.</p>
+      <p>Ce traitement repose sur l'intérêt légitime du responsable à protéger son infrastructure contre les attaques automatisées (art. 6.1.f RGPD). Les adresses IP enregistrées ne sont ni vendues, ni partagées, ni utilisées à des fins de profilage. Elles ne sont pas recoupées avec d'autres sources.</p>
+
+      <h2>4. Panneau d'administration (Z-Panel)</h2>
+      <p>Le panneau d'administration (<a href="/z-panel">/z-panel</a>) est un outil interne protégé par un mot de passe (haché avec Argon2id). Il n'est pas indexé par les moteurs de recherche (<code>noindex, nofollow</code>).</p>
+      <p>Les sessions d'administration sont gérées par des jetons de session aléatoires (32 octets, encodés en base64url) avec une durée de vie de 24 heures. Les tentatives de connexion sont limitées à 5 par tranche de 15 minutes par adresse IP. Ces données d'authentification sont conservées en mémoire vive et disparaissent au redémarrage du serveur.</p>
+      <p>Le panneau donne accès aux journaux d'accès du serveur (journaux d’accès du serveur), aux statistiques de requêtes, à l'administration des articles, aux traductions et au système honeypot. Ces données sont accessibles exclusivement par l'administrateur.</p>
+
+      <h2>5. Cookies</h2>
+      <p>Le site n'utilise <strong>aucun cookie</strong>, ni de première ni de tierce partie, aucun traceur et aucun stockage local persistant (localStorage, IndexedDB). Aucun bandeau de consentement n'est donc nécessaire au titre de la directive 2002/58/CE (ePrivacy) et du RGPD.</p>
+      <p>Le test d'empreinte numérique utilise temporairement le <code>sessionStorage</code> uniquement lorsque vous lancez le test multi-tours, pour conserver les résultats entre rechargements. Ce stockage est automatiquement vidé à la fin du test ou à la fermeture de l'onglet ; il ne constitue ni un cookie ni un traceur.</p>
+
+      <h2>6. Destinataires et sous-traitants</h2>
+      <p>Nous ne partageons, ne vendons et ne transmettons vos données à aucun tiers, à aucune régie publicitaire, à aucun fournisseur d'analyse. Le site est hébergé sur notre propre infrastructure, en France, sans recours à un sous-traitant hébergeur.</p>
+
+      <h3>6.1 Proton Mail (e-mail)</h3>
+      <p>Notre messagerie électronique est fournie par Proton Mail (Proton AG, Suisse), qui agit en qualité de sous-traitant technique au sens de l'article 28 RGPD pour l'acheminement et l'hébergement des messages que vous nous adressez. La Suisse bénéficie d'une décision d'adéquation de la Commission européenne (art. 45 RGPD). Proton ne traite ces messages qu'aux seules fins de fourniture du service.</p>
+
+      <h3>6.2 Signal</h3>
+      <p>Les échanges effectués via Signal transitent par les serveurs de Signal Messenger, LLC. Signal met en œuvre un chiffrement de bout en bout : le contenu des messages n'est jamais accessible à un tiers, y compris à Signal.</p>
+
+      <h3>6.3 Discord</h3>
+      <p>Les échanges effectués via Discord transitent par les serveurs de Discord, Inc. Discord ne chiffrant pas les messages de bout en bout, évitez d'y échanger des données sensibles.</p>
+
+      <h3>6.4 Groq (bot Discord)</h3>
+      <p>Pour la transcription vocale et la génération des réponses, le bot fait appel à Groq (Groq, Inc., États-Unis), qui agit en qualité de sous-traitant au sens de l'article 28 RGPD. Groq ne traite l'audio et les textes transmis qu'aux seules fins de la fourniture du service, conformément aux conditions d'utilisation du service. Voir la <a href="#bot">section 2.7</a> et la <a href="#transferts">section 7</a>.</p>
+
+      <h3>6.5 Services tiers open source (ZMap)</h3>
+      <p>L'application ZMap proxy les requêtes vers des services tiers open source (Overpass, Nominatim, OSRM) via le serveur Zektyc. Ces services ne reçoivent pas votre adresse IP directe (elle est masquée par le proxy). Les données échangées concernent des requêtes de bornes, de géocodage ou d'itinéraire, sans lien avec votre identité.</p>
+
+      <h2 id="transferts">7. Transferts hors Union européenne</h2>
+      <p>S'agissant du site et de l'infrastructure : ils sont hébergés en France et exploités dans l'Union européenne. Aucune donnée traitée par le site n'est stockée hors de l'Union européenne ni de l'Espace économique européen (art. 44 et suivants RGPD).</p>
+      <p>S'agissant de la voie clearnet : le tunnel qui la rend accessible est fourni par Tailscale, Inc., société de droit américain. Comme exposé à la <a href="#canaux">section 2.2</a>, cette voie implique que le contenu transite en clair chez cet opérateur, qui en est le point de terminaison TLS. Tailscale n'agissant pas comme sous-traitant au sens de l'article 28 RGPD pour ce trafic, ce passage par une entité américaine est une limite assumée de cette voie d'accès ; il ne s'applique pas au service caché Tor, qui reste chiffré de bout en bout sans intermédiaire tiers.</p>
+      <p>S'agissant du canal de contact par e-mail : Proton Mail est exploité depuis la Suisse, pays qui bénéficie d'une décision d'adéquation de la Commission européenne.</p>
+      <p>S'agissant de Signal et Discord : leurs serveurs peuvent être situés hors de l'Union européenne. Signal chiffre les messages de bout en bout, ce que Discord ne fait pas.</p>
+      <p>S'agissant du bot Discord : l'audio à transcrire et les textes traités par le bot sont transmis à Groq (États-Unis), dans le cadre du service de transcription et de génération de réponses. Groq n'apparaît pas dans la liste des organisations certifiées au titre du Data Privacy Framework (DPF) UE-États-Unis. Le transfert est encadré par les clauses contractuelles types de la Commission européenne (décision d'exécution (UE) 2021/914), incorporées à la convention de traitement de Groq (Data Processing Addendum), effective le 15 octobre 2025 — module 2 (responsable du traitement vers sous-traitant). Seuls les éléments strictement nécessaires à la fourniture du service sont transmis, et rien n'est conservé de notre côté.</p>
+
+      <h2>8. Durées de conservation</h2>
+      <ul>
+        <li>Journaux techniques : <strong>14 jours maximum</strong>, suppression automatique ;</li>
+        <li>Compteurs de protection en mémoire (RAM) : quelques minutes, jamais persistés ;</li>
+        <li>Données d'échange (contact) : durée de l'échange nécessaire à votre demande ;</li>
+        <li>Signalements de vulnérabilités : jusqu'à la confirmation de la correction, puis suppression dans un délai de 30 jours ;</li>
+        <li>Documents de vérification d'une autorité : le temps de la vérification, puis suppression ;</li>
+        <li>Données du bot Discord (messages, audio, identifiants, historique) : <strong>aucune conservation persistante</strong> ; l'historique de session (20 échanges max) est en RAM uniquement, réinitialisé au redémarrage ;</li>
+        <li>Données du test d'empreinte numérique : <strong>aucune donnée n'est transmise à Zektyc</strong> ; les caractéristiques disparaissent avec la fermeture de l'onglet ;</li>
+        <li>Données du honeypot (adresses IP) : jusqu'à suppression manuelle par un administrateur ;</li>
+        <li>Sessions d'administration : jetons de session de 24 heures, en RAM uniquement.</li>
+      </ul>
+
+      <h2>9. Sécurité</h2>
+      <p>Les services sont protégés par les mesures techniques suivantes :</p>
+      <ul>
+        <li>connexion chiffrée en transit (HTTPS/TLS via le tunnel pour la voie clearnet) et chiffrement de bout en bout pour le service caché Tor ;</li>
+        <li>en-têtes de sécurité restrictifs (CSP, X-Content-Type-Options nosniff, X-Frame-Options, HSTS, Permissions-Policy) ;</li>
+        <li>limitation du débit (200 requêtes / 10 secondes par IP en général, 30 / minute pour l'API ZMap, 5 tentatives de connexion / 15 minutes pour l'administration) ;</li>
+        <li>restriction des méthodes HTTP (GET et HEAD uniquement) ;</li>
+        <li>blocage des chemins sensibles (honeypot WordPress) ;</li>
+        <li>minimisation des données et conservation limitée ;</li>
+        <li>mots de passe d'administration hachés avec Argon2id (memoryCost: 65536, timeCost: 4) ;</li>
+        <li>infrastructure auto-hébergée en France, sans CDN ni service tiers.</li>
+      </ul>
+
+      <h2>10. Vos droits</h2>
+      <p>Conformément aux articles 15 à 22 RGPD, vous disposez des droits suivants :</p>
+      <ul>
+        <li>droit d'accès ;</li>
+        <li>droit de rectification ;</li>
+        <li>droit à l'effacement (« droit à l'oubli ») ;</li>
+        <li>droit à la limitation du traitement ;</li>
+        <li>droit à la portabilité, dans un format structuré, couramment utilisé et lisible par machine ;</li>
+        <li>droit d'opposition ;</li>
+        <li>droit de retirer votre consentement à tout moment, sans préjudice de la licéité du traitement fondé sur le consentement effectué avant le retrait (art. 7.3 RGPD).</li>
+      </ul>
+      <p>Vous disposez également du droit de ne pas être soumis(e) à une décision fondée exclusivement sur un traitement automatisé, y compris le profilage, produisant des effets juridiques vous concernant (art. 22 RGPD). Zektyc ne prend aucune décision automatisée vous concernant.</p>
+      <p>Vous pouvez exercer ces droits à tout moment en nous contactant à : <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>. Nous répondons dans un délai d'un mois maximum, conformément à l'article 12 RGPD. Pour toute communication sensible ou confidentielle, privilégiez l'e-mail ou Signal plutôt que Discord.</p>
+      <p>Vous disposez également du droit d'introduire une réclamation auprès de la Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, ou via <a href="https://www.cnil.fr" rel="noopener noreferrer" target="_blank">cnil.fr</a>.</p>
+      <p>Zektyc ne désigne pas de délégué à la protection des données (DPO) : cette désignation n'est pas requise au regard de l'article 37 RGPD, les traitements réalisés n'étant ni à grande échelle ni fondés sur une surveillance systématique.</p>
+
+      <h2>11. Notification de violation de données</h2>
+      <p>En cas de violation de données à caractère personnel, nous en informons la CNIL dans les meilleurs délais et au plus tard soixante-douze (72) heures après en avoir pris connaissance, conformément à l'article 33 RGPD, à moins que la violation ne soit pas susceptible d'engendrer un risque pour les droits et libertés des personnes concernées. Si la violation est susceptible d'engendrer un risque élevé, vous en êtes également informé(e) directement, conformément à l'article 34 RGPD. Les journaux techniques étant conservés 14 jours au maximum, la fenêtre de détection est nécessairement limitée ; cela fait partie de notre choix de minimisation des données.</p>
+
+      <h2>12. Visiteurs situés hors de l'Union européenne</h2>
+      <p>Si la loi californienne sur la protection de la vie privée des consommateurs (CCPA) s'applique à vous : Zektyc ne vend pas vos données personnelles, n'en a jamais vendu et n'en vendra jamais. Aucune information vous concernant n'est cédée à des tiers à titre onéreux (« do not sell »).</p>
+      <p>Le site honore les signaux d'opposition Globale Privacy Control (GPC) et Do Not Track (DNT) : en pratique, ils n'appellent aucune mise en œuvre particulière, puisque aucune donnée n'est collectée ni traitée à des fins de suivi.</p>
+      <p>Les visiteurs situés dans d'autres juridictions bénéficient des mêmes garanties. Aucune donnée n'étant collectée volontairement, les exigences de ces réglementations sont pour l'essentiel sans objet en pratique.</p>
+
+      <h2>13. Mineurs</h2>
+      <p>Le site ne s'adresse pas spécifiquement aux mineurs et ne met en œuvre aucun mécanisme de collecte les visant. Nous ne collectons volontairement aucune donnée de mineurs. S'agissant du bot Discord, son utilisation est soumise aux conditions de Discord, qui exigent d'être âgé d'au moins treize (13) ans.</p>
+
+      <h2>14. Modifications de cette politique</h2>
+      <p>Nous pouvons modifier cette politique pour refléter des évolutions techniques ou légales. La version applicable est celle en ligne ; la date de dernière mise à jour figure en tête de page.</p>
+
+      <h2>15. Contact</h2>
+      <p>Pour toute question relative à cette politique, à vos droits, ou pour toute demande d'exercice de vos droits : <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>.</p>
+
+      <p class="legal-note">Version anglaise disponible : <a href="/en/privacy-policy">Privacy Policy (EN)</a>.</p>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/projets/en/index.html b/public/projets/en/index.html
new file mode 100644
index 0000000..018b1a1
--- /dev/null
+++ b/public/projets/en/index.html
@@ -0,0 +1,75 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="Projects built or contributed to by Zektyc: fingerprint testing, pentesting, open source tools." />
+    <meta name="robots" content="index, follow" />
+    <title>Projects · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/projets/en/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Projects · Zektyc" />
+    <meta property="og:description" content="Projects built or contributed to by Zektyc: fingerprint testing, pentesting, open source tools." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/projets/en/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="en_US" />
+    <meta property="og:locale:alternate" content="fr_FR" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/">← Back to home</a></p>
+      <h1>Projects</h1>
+      <p class="legal-meta">Projects built or contributed to.</p>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>Fingerprint Test</h3>
+          <p>
+            A multi-run fingerprint test (3 runs) that analyzes the stability and
+            protection of your browser fingerprint. It calculates a security score,
+            identifies protected and vulnerable signals, and displays your ZFP/ZPD.
+            Everything is computed locally — nothing is sent or stored.
+          </p>
+          <p class="legal-note">Personal project · Self-hosted</p>
+          <a class="btn btn-ghost" href="/fingerprint-test/en/">Test my fingerprint</a>
+        </article>
+
+        <article class="card">
+          <h3>Shugoi</h3>
+          <p>
+            Shugoi (shugoi.com) is an advanced fingerprinting service that
+            identifies the machine itself via a ZPD identifier, stable regardless
+            of software configuration. This type of device-level fingerprinting
+            is what inspired the creation of our fingerprint test and the ZPD
+            concept. Pentester on the service, contributed to testing and
+            improving its security.
+          </p>
+          <p class="legal-note">Contributor · shugoi.com</p>
+          <a class="btn btn-ghost" href="https://shugoi.com" target="_blank" rel="noopener">Discover Shugoi</a>
+        </article>
+
+        <article class="card">
+          <h3>LuLune Auto Clicker</h3>
+          <p>
+            Contributor to LuLune Auto Clicker, an open source auto-clicking tool
+            available on GitHub.
+          </p>
+          <p class="legal-note">Contributor · Open source</p>
+          <a class="btn btn-ghost" href="https://github.com/lulunee19/LuLuneAutoClicker" target="_blank" rel="noopener">View on GitHub</a>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/projets/index.html b/public/projets/index.html
new file mode 100644
index 0000000..93b1a17
--- /dev/null
+++ b/public/projets/index.html
@@ -0,0 +1,75 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="Projets réalisés ou contribués par Zektyc : test d'empreinte digitale, pentest, outils open source." />
+    <meta name="robots" content="index, follow" />
+    <title>Projets · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/projets/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Projets · Zektyc" />
+    <meta property="og:description" content="Projets réalisés ou contribués par Zektyc : test d'empreinte digitale, pentest, outils open source." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/projets/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta property="og:locale:alternate" content="en_US" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/">← Retour à l'accueil</a></p>
+      <h1>Projets</h1>
+      <p class="legal-meta">Projets réalisés ou auxquels j'ai contribué.</p>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>Fingerprint Test</h3>
+          <p>
+            Test de fingerprinting multi-run (3 exécutions) qui analyse la stabilité
+            et la protection de votre empreinte navigateur. Calcule un score de
+            sécurité, identifie les signaux protégés et vulnérables, et affiche
+            votre ZFP/ZPD. Tout est calculé localement, rien n'est envoyé ni stocké.
+          </p>
+          <p class="legal-note">Projet personnel · Auto-hébergé</p>
+          <a class="btn btn-ghost" href="/fingerprint-test">Tester mon empreinte</a>
+        </article>
+
+        <article class="card">
+          <h3>Shugoi</h3>
+          <p>
+            Shugoi (shugoi.com) est un service de fingerprinting avancé qui
+            identifie la machine elle-même via un identifiant ZPD, stable quelle
+            que soit la configuration logicielle. C'est ce type de fingerprinting
+            au niveau matériel qui a inspiré la création de notre test de
+            fingerprinting et la notion de ZPD. Pentester sur le service,
+            contribution au testing et à l'amélioration de la sécurité.
+          </p>
+          <p class="legal-note">Contributeur · shugoi.com</p>
+          <a class="btn btn-ghost" href="https://shugoi.com" target="_blank" rel="noopener">Découvrir Shugoi</a>
+        </article>
+
+        <article class="card">
+          <h3>LuLune Auto Clicker</h3>
+          <p>
+            Contributeur au LuLune Auto Clicker, un outil open source pour
+            l'automatisation de clics disponible sur GitHub.
+          </p>
+          <p class="legal-note">Contributeur · Open source</p>
+          <a class="btn btn-ghost" href="https://github.com/lulunee19/LuLuneAutoClicker" target="_blank" rel="noopener">Voir sur GitHub</a>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/robots.txt b/public/robots.txt
new file mode 100644
index 0000000..5f6d899
--- /dev/null
+++ b/public/robots.txt
@@ -0,0 +1,4 @@
+User-agent: *
+Allow: /
+Disallow: /z-panel/
+Sitemap: https://zektyc.duckdns.org/sitemap.xml
diff --git a/public/sitemap-en.xml b/public/sitemap-en.xml
new file mode 100644
index 0000000..b43248a
--- /dev/null
+++ b/public/sitemap-en.xml
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
+  <url>
+    <loc>https://zektyc.duckdns.org/en/</loc>
+    <lastmod>2026-08-14</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/en/blog/</loc>
+    <lastmod>2026-08-14</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/blog/" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/blog/" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/blog/" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/en/fingerprint-test</loc>
+    <lastmod>2026-08-16</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/fingerprint-test" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/fingerprint-test" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/fingerprint-test" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/en/privacy-policy</loc>
+    <lastmod>2026-08-14</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/privacy-policy" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/privacy-policy" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/privacy-policy" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/en/projets</loc>
+    <lastmod>2026-08-17</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/projets" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/projets" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/projets" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/en/tos</loc>
+    <lastmod>2026-08-14</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/tos" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/tos" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/tos" hreflang="x-default" rel="alternate"/>
+  </url>
+</urlset>
diff --git a/public/sitemap-main.xml b/public/sitemap-main.xml
new file mode 100644
index 0000000..b0f5f05
--- /dev/null
+++ b/public/sitemap-main.xml
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
+  <url>
+    <loc>https://zektyc.duckdns.org/fr/</loc>
+    <lastmod>2026-08-14</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/fr/blog/</loc>
+    <lastmod>2026-08-14</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/blog/" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/blog/" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/blog/" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/fr/fingerprint-test</loc>
+    <lastmod>2026-08-16</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/fingerprint-test" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/fingerprint-test" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/fingerprint-test" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/fr/privacy-policy</loc>
+    <lastmod>2026-08-14</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/privacy-policy" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/privacy-policy" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/privacy-policy" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/fr/projets</loc>
+    <lastmod>2026-08-17</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/projets" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/projets" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/projets" hreflang="x-default" rel="alternate"/>
+  </url>
+  <url>
+    <loc>https://zektyc.duckdns.org/fr/tos</loc>
+    <lastmod>2026-08-14</lastmod>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/tos" hreflang="fr" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/en/tos" hreflang="en" rel="alternate"/>
+    <xhtml:link href="https://zektyc.duckdns.org/fr/tos" hreflang="x-default" rel="alternate"/>
+  </url>
+</urlset>
diff --git a/public/sitemap.xml b/public/sitemap.xml
new file mode 100644
index 0000000..14a4648
--- /dev/null
+++ b/public/sitemap.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
+              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+              xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd">
+  <sitemap>
+    <loc>https://zektyc.duckdns.org/sitemap-main.xml</loc>
+    <lastmod>2026-08-17</lastmod>
+  </sitemap>
+  <sitemap>
+    <loc>https://zektyc.duckdns.org/sitemap-en.xml</loc>
+    <lastmod>2026-08-17</lastmod>
+  </sitemap>
+</sitemapindex>
diff --git a/public/sitemap.xsl b/public/sitemap.xsl
new file mode 100644
index 0000000..96d72b3
--- /dev/null
+++ b/public/sitemap.xsl
@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:s="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
+  <xsl:output method="html" encoding="UTF-8" indent="yes"/>
+  <xsl:template match="/">
+    <html lang="fr">
+    <head>
+      <meta charset="utf-8"/>
+      <meta name="viewport" content="width=device-width, initial-scale=1"/>
+      <title>Plan du site — Zektyc</title>
+      <style>
+        :root { --bg: #0f1117; --card: #181b24; --border: #282c36; --text: #e4e4e7; --muted: #6b7280; --accent: #4ecdc4; }
+        * { margin: 0; padding: 0; box-sizing: border-box; }
+        body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; background: var(--bg); color: var(--text); line-height: 1.6; padding: 2rem 1.5rem; max-width: 800px; margin: 0 auto; }
+        h1 { font-size: 1.8rem; font-weight: 800; margin-bottom: .5rem; }
+        .sub { color: var(--muted); font-size: .9rem; margin-bottom: 2rem; }
+        .url-list { list-style: none; }
+        .url-item { background: var(--card); border: 1px solid var(--border); border-radius: 10px; padding: 1rem 1.25rem; margin-bottom: .5rem; }
+        .url-item a { color: var(--accent); text-decoration: none; font-weight: 600; font-size: .95rem; }
+        .url-item a:hover { text-decoration: underline; }
+        .url-meta { display: flex; gap: 1.5rem; margin-top: .35rem; font-size: .78rem; color: var(--muted); }
+        .badge { display: inline-block; font-size: .65rem; font-weight: 700; text-transform: uppercase; letter-spacing: .05em; padding: .1rem .4rem; border-radius: 4px; margin-left: .5rem; }
+        .badge-fr { background: rgba(78,205,196,.15); color: var(--accent); }
+        .badge-en { background: rgba(124,92,255,.15); color: #7c5cff; }
+        footer { margin-top: 3rem; padding-top: 1rem; border-top: 1px solid var(--border); font-size: .78rem; color: var(--muted); text-align: center; }
+      </style>
+    </head>
+    <body>
+      <h1>Plan du site</h1>
+      <p class="sub">sitemap.xml — <xsl:value-of select="count(//s:url)"/> pages indexées</p>
+      <ul class="url-list">
+        <xsl:for-each select="//s:url">
+          <xsl:sort select="s:loc"/>
+          <li class="url-item">
+            <a href="{s:loc}"><xsl:value-of select="s:loc"/></a>
+            <div class="url-meta">
+              <span>Modifié : <xsl:value-of select="s:lastmod"/></span>
+              <xsl:if test="s:changefreq">
+                <span>Fréquence : <xsl:value-of select="s:changefreq"/></span>
+              </xsl:if>
+              <xsl:if test="s:priority">
+                <span>Priorité : <xsl:value-of select="s:priority"/></span>
+              </xsl:if>
+              <xsl:if test="xhtml:link[@hreflang='fr']">
+                <span class="badge badge-fr">FR</span>
+              </xsl:if>
+              <xsl:if test="xhtml:link[@hreflang='en']">
+                <span class="badge badge-en">EN</span>
+              </xsl:if>
+            </div>
+          </li>
+        </xsl:for-each>
+      </ul>
+      <footer>Zektyc — <xsl:value-of select="count(//s:url)"/> URLs · Généré le <xsl:value-of select="s:sitemapindex/s:sitemap[1]/s:loc"/></footer>
+    </body>
+    </html>
+  </xsl:template>
+</xsl:stylesheet>
diff --git a/public/tos/en/index.html b/public/tos/en/index.html
new file mode 100644
index 0000000..f74a849
--- /dev/null
+++ b/public/tos/en/index.html
@@ -0,0 +1,236 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta
+      name="description"
+      content="Terms of Service for the Zektyc website and all of its services: Discord bot, digital fingerprint test, ZMap application and Zenyth browser (English translation; the French version is the legally binding reference)."
+    />
+    <meta name="robots" content="index, follow" />
+    <title>Terms of Service · Zektyc</title>
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <div class="legal-disclaimer">Disclaimer: only the version drafted in the French language is legally binding. Any translation, in whatever other language, is provided as a courtesy only and has no legal value.</div>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <h1>Terms of Service</h1>
+      <p class="legal-meta">French version is the legally binding reference · Last updated: 27 August 2026</p>
+
+      <h2>1. Identity of the publisher</h2>
+      <p>In accordance with Article 1-1 of the French Act No. 2004-575 of 21 June 2004 on confidence in the digital economy (LCEN), as amended by Act No. 2024-449 of 21 May 2024 (SREN):</p>
+      <div class="legal-box">
+        <p><strong>Publisher</strong>: "Zektyc" is the name of the organisation (the name of a project, without legal personality). The organisation is operated by a natural person, not registered with the commercial and companies register nor the trades register, acting under the pseudonym "Riric" (also "DotRiric"), established in France.</p>
+        <p><strong>Address</strong>: in line with our commitment to privacy protection, the publisher's postal address is not published online. It is communicated — exclusively by e-mail, at the sole address <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a> — only when a legal basis requires it (a legal or regulatory obligation, a judicial authority or a duly justified official procedure). No other request gives entitlement to it.</p>
+        <p><strong>Contact</strong>: <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a></p>
+        <p><strong>Hosting</strong>: the website and all services are hosted in France, on infrastructure owned and operated by the publisher. No data is stored outside the European Union.</p>
+        <p><strong>Non-professional publisher</strong>: the publisher is a natural person carrying out no professional publishing activity. As the website is hosted on infrastructure owned and operated by the publisher, no third-party host has to be identified under Article 1-1, I, of the LCEN.</p>
+      </div>
+
+      <h2>2. Purpose and scope</h2>
+      <p>These Terms of Service (the "ToS") govern access to and use of all services and projects made available by Zektyc, namely:</p>
+      <ul>
+        <li>the website and its clearnet address served through a tunnel (<a href="/">riricdev.tail5ea5cd.ts.net</a>) and its Tor hidden service (.onion), and their content (pages, articles, documentation);</li>
+        <li>the Discord bot "Zektyc bot";</li>
+        <li>the digital fingerprint test (Fingerprint Test);</li>
+        <li>the ZMap mobile application (an Android route-planning application for electric vehicles);</li>
+        <li>the ZMap web client (a map interface accessible from the website);</li>
+        <li>the Zenyth browser (a hardened Firefox configuration, distributed as an RPM package).</li>
+      </ul>
+      <p>By accessing or using any of these services, you unreservedly accept these ToS. If you do not accept them, you must stop using all services.</p>
+
+      <h2>3. Website</h2>
+      <p>The website is accessible through several channels: the public clearnet address served through a tunnel (see <a href="#tunnel">Section 4</a>) and the Tor hidden service (see <a href="#onion">Section 5</a>). It is a showcase site that provides general information about privacy protection and cybersecurity. This information does not constitute legal advice, personalised technical advice, or an offer of services.</p>
+      <p>The website also offers:</p>
+      <ul>
+        <li>bilingual articles and news (French/English) on privacy and security;</li>
+        <li>open-source projects and online tools;</li>
+        <li>a contact page and links to communication channels (e-mail, Signal, Discord).</li>
+      </ul>
+      <p>The publisher reserves the right to interrupt access to the website at any time, in particular for maintenance, without prior notice or right to compensation.</p>
+
+      <h2 id="tunnel">4. Clearnet access through the tunnel (transparency on decryption)</h2>
+      <p>The clearnet website is made accessible at <code>https://riricdev.tail5ea5cd.ts.net</code> by means of a tunnel provided by a third-party operator (Tailscale, Inc., United States). This tunnel connects Internet visitors to our infrastructure without requiring any port to be opened on the home network.</p>
+      <h3>4.1 The tunnel sees the transmitted content, encrypted only in transit</h3>
+      <p>It is important that you understand the encryption model used. The TLS encryption between your browser and the clearnet address is <strong>terminated on the side of the tunnel operator</strong> (Tailscale), and not on our own infrastructure. This means that:</p>
+      <ul>
+        <li>your connection is encrypted in transit (no passive interception of the readable content by a third party is made possible);</li>
+        <li>however, <strong>the content of the connection (pages, requests, responses) is decrypted and readable by the tunnel operator</strong>, which in effect acts as the TLS termination point;</li>
+        <li>the tunnel operator can therefore, technically, access the transmitted content, IP addresses and connection metadata.</li>
+      </ul>
+      <p>We state this without euphemism: <strong>over the clearnet, the content is not confidential with regard to the tunnel operator</strong>. The only strong layer of confidentiality, detailed in <a href="#onion">Section 5</a>, is the Tor hidden service.</p>
+      <h3>4.2 We voluntarily disclose nothing</h3>
+      <p>Zektyc does not voluntarily transmit to the tunnel operator any data beyond what the technical operation of the service requires, and does not on its side exploit any content. Zektyc is not in a position to control or limit the access available to the tunnel operator.</p>
+      <h3>4.3 Legal requests, including the US CLOUD Act</h3>
+      <p>As the tunnel operator is a company governed by US law, its access to the content may be required by a public authority in the context of an applicable legal proceeding, including under the US CLOUD Act (22 U.S.C. § 6201 et seq.). Such requests fall outside our control and do not fall under the section on official requests applicable to the publisher (see <a href="#autorite">Section 13</a>). The content decrypted by the operator may thus, in that context, be disclosed to an authority without it being possible for us to prevent this.</p>
+      <p>We consider this situation a technical limitation of the infrastructure, not a choice. For access that does not expose the content to a third-party operator, use the Tor hidden service (see <a href="#onion">Section 5</a>) or one of our other end-to-end encrypted channels.</p>
+
+      <h2 id="onion">5. Tor hidden service (.onion) and end-to-end confidentiality</h2>
+      <p>The website is also accessible as a Tor hidden service at <code>http://l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion</code>. You must use the Tor Browser (or a browser configured for the Tor network) to access it.</p>
+      <h3>5.1 End-to-end encryption</h3>
+      <p>Unlike the clearnet channel, the Tor hidden service is encrypted end to end, from your browser to our infrastructure, with no TLS termination point at a third party:</p>
+      <ul>
+        <li><strong>No intermediary operator can read the content</strong>;</li>
+        <li>the Tor network also protects your IP address from us and from any observer;</li>
+        <li>our own IP address and geolocation remain concealed.</li>
+      </ul>
+      <p>The hidden service constitutes the most privacy- and security-respecting means of accessing the website. We recommend using it whenever a high level of confidentiality is desired.</p>
+      <h3>5.2 Usage precautions</h3>
+      <p>The hidden service operates over HTTP (not HTTPS), the encryption being provided by the Tor protocol itself. Make sure you access the exact address of the hidden service and verify its integrity through our official channels, in order to avoid any phishing or impersonation attempt.</p>
+
+      <h2>6. Discord bot (Zektyc bot)</h2>
+      <p>Zektyc provides a free Discord bot named "Zektyc bot", accessible on the Discord server <a href="https://discord.gg/mAXeNf7zUV" rel="noopener noreferrer" target="_blank">discord.gg/mAXeNf7zUV</a>. The bot allows you to interact by text and voice with a conversational assistant powered by artificial intelligence.</p>
+      <h3>6.1 How it works</h3>
+      <ul>
+        <li><strong>Text</strong>: mention the bot or reply to one of its messages to start a conversation;</li>
+        <li><strong>Voice</strong>: join a voice channel and use the <code>/join</code> command for the bot to join you. Your voice is transcribed into text, the bot responds and speaks its reply aloud. The <code>/leave</code> command disconnects the bot.</li>
+      </ul>
+      <h3>6.2 Data processed</h3>
+      <p>The bot processes only the data strictly necessary for the conversation:</p>
+      <ul>
+        <li>the content of the messages by which you address it;</li>
+        <li>your Discord ID and username;</li>
+        <li>voice audio, captured only while you are speaking, for the time needed to transcribe it into text;</li>
+        <li>the current session history (last twenty exchanges at most), kept in memory only.</li>
+      </ul>
+      <p>Audio and text are transmitted to Groq (Groq, Inc., United States) for transcription and response generation. Text-to-speech (spoken response) is performed locally, in France, without transmission to any third party. No data is written to persistent storage. The history is reset at each bot restart. See the <a href="/en/privacy-policy#bot">Privacy Policy</a> for details.</p>
+      <h3>6.3 Rules of use</h3>
+      <p>Use of the bot is subject to these ToS as well as to Discord's <a href="https://discord.com/terms" rel="noopener noreferrer" target="_blank">Terms of Service</a> and <a href="https://discord.com/privacy" rel="noopener noreferrer" target="_blank">Privacy Policy</a>. By using the bot, you agree not to:</p>
+      <ul>
+        <li>submit to it content that is unlawful, defamatory, hateful, threatening, harassing, or contrary to Discord's rules;</li>
+        <li>attempt to circumvent, overload or compromise its operation;</li>
+        <li>use it to process personal data or the voice of third parties without their consent.</li>
+      </ul>
+      <p>The bot is provided "as is", without any warranty of availability, continuity or accuracy. Replies generated by AI may be inaccurate or inappropriate and never constitute legal, technical, medical or financial advice. Never send sensitive data to the bot.</p>
+      <p>The voice session may be interrupted at any time (<code>/leave</code> command, another user's <code>/join</code> command, maintenance, technical disruption). The bot grants access to no account, no administration and no website data.</p>
+
+      <h2>7. Digital fingerprint test (Fingerprint Test)</h2>
+      <p>The website provides a free digital fingerprint test tool accessible at <a href="/en/fingerprint-test">/en/fingerprint-test</a> (EN) and <a href="/fingerprint-test">/fingerprint-test</a> (FR).</p>
+      <h3>7.1 How it works</h3>
+      <p>The tool analyses the ability of your browser and device to be uniquely identified. It computes two identifiers:</p>
+      <ul>
+        <li><strong>ZFP (Zektyc Fingerprint)</strong>: a fingerprint of the browser layer (ZFP-XXXX-XXXX-XXXX format). It changes when you switch browser or profile. This is the fingerprint used by 95% of tracking services (Cloudflare, FingerprintJS, etc.);</li>
+        <li><strong>ZPD (Zektyc Protective Device)</strong>: a fingerprint of the hardware layer, computed solely from hardware signals resistant to anti-fingerprinting (colour depth, audio codecs, emoji glyph widths, server clock offset). Stable across different browsers on the same machine.</li>
+      </ul>
+      <p>The test analyses over thirty distinct signals: user-agent, Client Hints, timezone, screen resolution, CPU core count, RAM, touchscreen, Canvas 2D rendering, WebGL, WebGPU, WebAudio, installed fonts, emojis, CSS media queries, scrollbar width, storage, mathematical operations, WASM, CPU benchmark, WebRTC, battery, media devices, plugins, text-to-speech voice, video/audio codecs, and more.</p>
+      <h3>7.2 Test modes</h3>
+      <ul>
+        <li><strong>Simple mode</strong>: a single run, immediate results;</li>
+        <li><strong>3-run mode</strong>: three successive runs with a page reload between each run, allowing comparison of signal stability. Intermediate results are temporarily stored in the browser's <code>sessionStorage</code> (deleted at the end of the test or when the tab is closed).</li>
+      </ul>
+      <h3>7.3 Data processed</h3>
+      <p>This tool works <strong>entirely client-side</strong>. All processing takes place in your browser. None of the collected signals, the identifier, or the score are transmitted to our servers, recorded, stored, or used for identification purposes. The only network request made is a call to the <code>/api/time</code> endpoint to measure the clock offset with the server (required for ZPD calculation).</p>
+      <p>No usage limit applies. The displayed identifier cannot be used to reconstruct the characteristics from which it was computed (one-way SHA-256 hashing).</p>
+      <h3>7.4 Disclaimer</h3>
+      <p>Results are provided for indicative and educational purposes: they neither constitute an expert assessment, a certificate, nor an enforceable security measurement, and do not necessarily reflect the actual behaviour of all websites or online services. The tool is provided "as is", without any warranty of completeness or accuracy.</p>
+
+      <h2>8. ZMap — Route-planning application for electric vehicles</h2>
+      <p>ZMap is a free Android application for planning routes for electric vehicles, with display of public charging stations, range calculation and built-in navigation. The application is available for direct download on the website (<a href="/zmap">/zmap</a>).</p>
+      <h3>8.1 How it works</h3>
+      <ul>
+        <li><strong>Cartography</strong>: display of OpenStreetMap cartographic data via Leaflet, with satellite view;</li>
+        <li><strong>Charging stations</strong>: queries to the OpenStreetMap Overpass API (proxied by the Zektyc server) to display charging stations in Europe. Display of operator, brand, power (kW), connectors (Type 2, CCS, CHAdeMO), fees and opening hours;</li>
+        <li><strong>Route calculation</strong>: via OSRM (Open Source Routing Machine) with distance, duration and step-by-step directions;</li>
+        <li><strong>Stations along the route</strong>: highlighting of stations compatible with your vehicle along the route;</li>
+        <li><strong>GPS navigation</strong>: dynamic camera, turn-by-turn instructions, ETA, current speed and speed limit displayed;</li>
+        <li><strong>Vehicle selection</strong>: Tesla Model Y, Renault Zoe, Peugeot e-208, VW ID.3, Kia EV6, etc. — energy consumption and range calculation;</li>
+        <li><strong>Speed data by road</strong>: database of 90.5 million speed data points across 3.6 million kilometres of European roads;</li>
+        <li><strong>Offline mode</strong>: maps, routes and stations cached on the device.</li>
+      </ul>
+      <h3>8.2 Data processed</h3>
+      <p>The application collects no personal data. No account is required. No tracker or analytics service is integrated.</p>
+      <p>The application communicates with the Zektyc server via WebSocket and API calls for station queries, search, routing and speed data. These calls are routed through the server, which proxies requests to Overpass (stations), Nominatim (geocoding) and OSRM (routing), with server-side caching. Request IP addresses are subject to the server's technical logs (retained for 14 days, see the <a href="/en/privacy-policy#logs">Privacy Policy</a>).</p>
+      <h3>8.3 ZMap web client</h3>
+      <p>A web version of the map is accessible at <a href="/zmap/web">/zmap/web</a>. It uses Leaflet and the same APIs as the mobile application. The same data-protection principles apply.</p>
+
+      <h2>9. Zenyth browser</h2>
+      <p>Zenyth is a hardened Firefox configuration, distributed as an RPM package. It aims to maximise privacy protection and make the user's digital fingerprint as uniform as possible.</p>
+      <h3>9.1 Features</h3>
+      <ul>
+        <li><strong>Resist Fingerprinting (RFP)</strong>: permanently enabled with letterboxing — uniformised canvas, UTC timezone, generic hardware;</li>
+        <li><strong>Font masking</strong>: <em>font-visibility</em> level 1 — the font test (including via Web Workers) sees an identical set for all users;</li>
+        <li><strong>WebGPU and Battery API disabled</strong>: these most revealing APIs simply do not exist;</li>
+        <li><strong>WebRTC protection</strong>: no local IP address leak, mDNS only;</li>
+        <li><strong>Locked extensions</strong>: JShelter (canvas/audio randomisation per session) and uBlock Origin pre-installed and non-removable;</li>
+        <li><strong>Automatic configuration</strong>: the launcher creates a dedicated profile and reinjects the hardening at each startup.</li>
+      </ul>
+      <h3>9.2 Compatibility</h3>
+      <p>Zenyth forces the US English locale, UTC timezone and a standardised window size. This may cause more frequent re-authentication prompts on some websites. The RPM package is currently compatible with Fedora/RHEL-based systems.</p>
+      <h3>9.3 Data processed</h3>
+      <p>Zenyth is software installed locally on your device. It transmits no data to Zektyc or to third parties. Its configuration is entirely local.</p>
+
+      <h2>10. Intellectual property</h2>
+      <p>The website, its structure, its texts, its visual identity (name, logo, graphic charter) and all the elements composing it are the exclusive property of the publisher or their authors, and are protected by intellectual property law.</p>
+      <p>Any reproduction, representation, modification, publication, adaptation or exploitation, in whole or in part, of these elements, by any means whatsoever, without the publisher's prior written consent, is prohibited and constitutes infringement (Article L. 335-2 of the French Intellectual Property Code). Quotation with clear attribution of source is permitted within the limits of Article L. 122-5 of the same code.</p>
+
+      <h2>11. User conduct</h2>
+      <p>When using the services, you agree not to:</p>
+      <ul>
+        <li>attempt to compromise the security or integrity of the services (unauthorised access, intrusion, penetration testing, exploitation of vulnerabilities);</li>
+        <li>disrupt or attempt to disrupt the functioning of the services, including through automated requests, bulk downloads or attempts to overwhelm them;</li>
+        <li>extract or collect the website's content in an automated manner;</li>
+        <li>use the services for unlawful or fraudulent purposes;</li>
+        <li>attempt to circumvent rate-limiting mechanisms or security protections.</li>
+      </ul>
+      <p>Any such attempt may result in technical blocking (rate limiting, IP address blocking) and legal proceedings.</p>
+
+      <h2>12. Responsible disclosure of vulnerabilities</h2>
+      <p>The publisher, whose activity relates to security and privacy, considers the reporting of vulnerabilities a useful and legitimate act. A person who identifies a vulnerability affecting the services may report it to <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>; such a report, made in compliance with the conditions below, does not constitute a breach of Section 11. Conditions:</p>
+      <ul>
+        <li>not exploit the vulnerability to obtain unauthorised access or to alter the service beyond what is strictly necessary to demonstrate it;</li>
+        <li>not access or expose other users' data;</li>
+        <li>report the vulnerability within a reasonable time after its discovery;</li>
+        <li>provide sufficient information to allow the problem to be reproduced and fixed.</li>
+      </ul>
+      <p><strong>Grace period.</strong> Unless otherwise agreed, the reporter refrains from any public disclosure for a period of ninety (90) calendar days from confirmation of receipt of the report. Upon expiry of this period, if the vulnerability has not been fixed, the reporter may disclose it publicly within the limits strictly necessary to describe the problem, without exposing or exploiting users' data. The publisher may notify a reasonable additional period, duly justified (complex fix, third-party dependency), which then suspends disclosure for its duration.</p>
+      <p>For any sensitive or confidential communication, prefer e-mail or Signal over Discord.</p>
+      <p>The publisher undertakes to acknowledge receipt of the report within a reasonable time and to inform the reporter of the follow-up. The official policy is available at <a href="/.well-known/security.txt" rel="noopener noreferrer" target="_blank">/.well-known/security.txt</a> (RFC 9116).</p>
+
+      <h2 id="autorite">13. Official requests, evidence and verification of authority</h2>
+      <p>As a matter of principle, no information is disclosed on the sole basis of a request, whatever its origin. Any request must be grounded in a justified legal framework and supported by concrete, documented evidence (a judicial decision, an administrative act, a precise and applicable legal reference).</p>
+      <p>Any person claiming to act on behalf of a public authority must, before any disclosure, imperatively prove their identity and the exact scope of their powers: identifiable and verifiable official documents, reference numbers, an act or decision justifying the request within a legal framework. The publisher reserves the right to verify such authority by any reasonable means and to refuse any disclosure until this proof is provided.</p>
+      <p>These requirements also apply to requests presented as urgent or confidential, with no exception related to the requester's declared status.</p>
+
+      <h2>14. Liability</h2>
+      <p>The services are provided "as is". The publisher strives to ensure the accuracy of the published information and the availability of the services, without however guaranteeing the absence of errors, interruptions or viruses. The publisher shall not be liable for any direct or indirect damage resulting from the use of the services or the inability to access them.</p>
+      <p>Regarding the Discord bot, replies generated by artificial intelligence may be inaccurate, incomplete, outdated or inappropriate. They never constitute legal, technical, medical, financial or other advice.</p>
+      <p>Regarding ZMap, the cartographic information, routes and charging stations are provided for indicative purposes. Charging station availability, travel times and distances may vary. The application does not replace a professional navigation system or a real-time check of charging station status.</p>
+      <p>These limitations do not apply where the applicable law (in particular consumer protection law) prohibits them, and shall in no case deprive consumers of the rights conferred on them by mandatory provisions.</p>
+
+      <h2>15. Hyperlinks</h2>
+      <p>The website may contain links to third-party websites (Discord, OpenStreetMap, OSRM, Groq, etc.). These links are provided for your convenience. The publisher exercises no control over these websites, does not guarantee their content or privacy policy, and declines all responsibility in respect of them. Linking to the website is permitted provided it does not involve misleading or misrepresentative presentation.</p>
+
+      <h2>16. Changes to the ToS</h2>
+      <p>The publisher may amend these ToS at any time. The applicable version is the one online at the time you access the website. The date of the last update appears at the top of this document. If you continue to use the services after a new version is published, you are deemed to have accepted it.</p>
+
+      <h2>17. Governing law and jurisdiction</h2>
+      <p>These ToS are governed by French law.</p>
+      <p>By default, the publisher does not physically appear before a court: exchanges relating to any dispute take place in writing and remotely (e-mail, written procedure, online mediation), systematically favouring amicable resolution.</p>
+      <p>In accordance with Article 46 of the French Code of Civil Procedure, any dispute relating to the use of the website shall, in the absence of amicable resolution, be brought before the competent French courts. For consumers, the competent court is that of their place of domicile (Regulation (EU) No. 1215/2012, Chapter II, Section 4, Article 18(1)).</p>
+
+      <h2>18. Online dispute resolution</h2>
+      <p>The European online dispute resolution platform was discontinued on 20 July 2025 (Regulation (EU) No. 2024/3228). Consumers residing in the European Union can obtain information on alternative dispute resolution mechanisms from the EU consumer redress information tool: <a href="https://consumer-redress.ec.europa.eu" rel="noopener noreferrer" target="_blank">consumer-redress.ec.europa.eu</a>.</p>
+
+      <h2>19. General provisions</h2>
+      <h3>Severability</h3>
+      <p>If any clause of these ToS were held null, void or unenforceable by a competent court, the other clauses would remain fully applicable. The clause concerned would then be interpreted, to the fullest extent permitted by law, in the manner closest to the parties' intention.</p>
+      <h3>No waiver</h3>
+      <p>The fact that the publisher does not exercise or delays exercising a right provided for in these ToS shall in no case constitute a waiver of that right.</p>
+      <h3>Reference language</h3>
+      <p>These ToS are drafted in the French language, which is the only binding version. Any translation is provided as a courtesy only and has no legal value.</p>
+
+      <h2>20. Contact</h2>
+      <p>For any question relating to these ToS or to the use of the services, please contact us at: <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>.</p>
+
+      <p class="legal-note">Version française de référence : <a href="/tos">Conditions Générales d'Utilisation (FR)</a>.</p>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/tos/index.html b/public/tos/index.html
new file mode 100644
index 0000000..ab1fb6c
--- /dev/null
+++ b/public/tos/index.html
@@ -0,0 +1,236 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta
+      name="description"
+      content="Conditions Générales d'Utilisation du site Zektyc et de l'ensemble de ses services : bot Discord, test d'empreinte numérique, application ZMap et navigateur Zenyth (version française de référence)."
+    />
+    <meta name="robots" content="index, follow" />
+    <title>Conditions Générales d'Utilisation · Zektyc</title>
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <div class="legal-disclaimer">Avertissement : seule la version rédigée en langue française fait foi juridiquement. Toute traduction, quelle qu'en soit la langue, n'est fournie qu'à titre de courtoisie et n'a aucune valeur juridique.</div>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <h1>Conditions Générales d'Utilisation</h1>
+      <p class="legal-meta">Version française de référence · Dernière mise à jour : 27 août 2026</p>
+
+      <h2>1. Identité de l'éditeur</h2>
+      <p>Conformément à l'article 1-1 de la loi n° 2004-575 du 21 juin 2004 pour la confiance dans l'économie numérique (LCEN), dans sa rédaction issue de la loi n° 2024-449 du 21 mai 2024 (SREN) :</p>
+      <div class="legal-box">
+        <p><strong>Éditeur</strong> : « Zektyc » est le nom de l'organisation (dénomination d'un projet, sans personnalité morale). L'organisation est éditée par une personne physique, non immatriculée au registre du commerce et des sociétés ni au répertoire des métiers, agissant sous le pseudonyme « Riric » (également « DotRiric »), établie en France.</p>
+        <p><strong>Adresse</strong> : conformément à notre engagement de protection de la vie privée, l'adresse postale de l'éditeur n'est pas publiée en ligne. Elle n'est communiquée — exclusivement par e-mail, à la seule adresse <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a> — que lorsqu'un fondement légal l'exige (obligation légale ou réglementaire, autorité judiciaire ou procédure officielle dûment justifiée). Aucune autre demande n'y donne droit.</p>
+        <p><strong>Contact</strong> : <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a></p>
+        <p><strong>Hébergement</strong> : le site et l'ensemble des services sont hébergés en France, sur une infrastructure détenue et gérée par l'éditeur. Aucune donnée n'est stockée hors de l'Union européenne.</p>
+        <p><strong>Éditeur non professionnel</strong> : l'éditeur est une personne physique qui n'exerce aucune activité professionnelle de publication. Le site étant hébergé sur une infrastructure détenue et gérée par l'éditeur, aucun hébergeur tiers n'a à être identifié au titre du I de l'article 1-1 de la LCEN.</p>
+      </div>
+
+      <h2>2. Objet et champ d'application</h2>
+      <p>Les présentes Conditions Générales d'Utilisation (ci-après les « CGU ») régissent l'accès et l'utilisation de l'ensemble des services et projets mis à disposition par Zektyc, à savoir :</p>
+      <ul>
+        <li>le site web et son adresse clearnet servie via un tunnel (<a href="/">riricdev.tail5ea5cd.ts.net</a>) ainsi que son service caché Tor (.onion), et leurs contenus (pages, articles, documentation) ;</li>
+        <li>le bot Discord « Zektyc bot » ;</li>
+        <li>le test d'empreinte numérique (Fingerprint Test) ;</li>
+        <li>l'application mobile ZMap (application Android de planification de trajets pour véhicules électriques) ;</li>
+        <li>le client web ZMap (interface cartographique accessible depuis le site) ;</li>
+        <li>le navigateur Zenyth (configuration Firefox durcie, distribuée sous forme de paquet RPM).</li>
+      </ul>
+      <p>En accédant à l'un de ces services ou en les utilisant, vous acceptez sans réserve les présentes CGU. Si vous ne les acceptez pas, vous devez cesser d'utiliser l'ensemble des services.</p>
+
+      <h2>3. Site web</h2>
+      <p>Le site est accessible par plusieurs canaux : l'adresse publique clearnet servie via un tunnel (voir la <a href="#tunnel">section 4</a>) et le service caché Tor (voir la <a href="#onion">section 5</a>). Il est un site vitrine qui fournit des informations générales sur la protection de la vie privée et la sécurité informatique. Ces informations ne constituent ni un conseil juridique, ni un conseil technique personnalisé, ni une offre de prestation de services.</p>
+      <p>Le site propose également :</p>
+      <ul>
+        <li>des articles et actualités bilingues (français/anglais) sur la vie privée et la sécurité ;</li>
+        <li>des projets open source et des outils en ligne ;</li>
+        <li>une page de contact et des liens vers des canaux de communication (e-mail, Signal, Discord).</li>
+      </ul>
+      <p>L'éditeur se réserve le droit d'interrompre l'accès au site à tout moment, notamment pour maintenance, sans préavis ni droit à indemnité.</p>
+
+      <h2 id="tunnel">4. Accès clearnet via le tunnel (transparence sur le déchiffrement)</h2>
+      <p>Le site clearnet est rendu accessible à l'adresse <code>https://riricdev.tail5ea5cd.ts.net</code> au moyen d'un tunnel fourni par un opérateur tiers (Tailscale, Inc., États-Unis). Ce tunnel relie les visiteurs d'Internet à notre infrastructure sans nécessiter l'ouverture d'un port sur le réseau domestique.</p>
+      <h3>4.1 Le tunnel voit le contenu transmis, chiffré uniquement en transit</h3>
+      <p>Il est important que vous compreniez le modèle de chiffrement employé. Le chiffrement TLS entre votre navigateur et l'adresse clearnet est <strong>terminé côté opérateur du tunnel</strong> (Tailscale), et non sur notre propre infrastructure. Cela signifie que :</p>
+      <ul>
+        <li>votre connexion est chiffrée en transit (aucune interception passive par un tiers n'est rendue possible à la lecture) ;</li>
+        <li>en revanche, <strong>le contenu de la connexion (pages, requêtes, réponses) est décrypté et relisible par l'opérateur du tunnel</strong>, qui agit de fait comme point de terminaison TLS ;</li>
+        <li>l'opérateur du tunnel peut ainsi, techniquement, accéder au contenu transmis, aux adresses IP et aux métadonnées de connexion.</li>
+      </ul>
+      <p>Nous l'affirmons sans détour : <strong>par la voie clearnet, le contenu n'est pas confidentiel vis-à-vis de l'opérateur du tunnel</strong>. La seule couche de confidentialité forte, détaillée à la <a href="#onion">section 5</a>, est le service caché Tor.</p>
+      <h3>4.2 Nous ne divulguons rien volontairement</h3>
+      <p>Zektyc ne transmet volontairement à l'opérateur du tunnel aucune donnée au-delà de ce que le fonctionnement technique du service requiert, et n'exploite de son côté aucun contenu. Zektyc n'est pas en mesure de contrôler ni de limiter l'accès dont dispose l'opérateur du tunnel.</p>
+      <h3>4.3 Demandes légales, dont le US CLOUD Act</h3>
+      <p>L'opérateur du tunnel étant une société de droit américain, son accès au contenu peut être requis par une autorité publique dans le cadre d'une procédure légale applicable, y compris au titre du US CLOUD Act (22 U.S.C. § 6201 et suivants). De telles demandes échappent à notre contrôle et ne relèvent pas de la section relative aux demandes officielles applicables à l'éditeur (voir la <a href="#autorite">section 13</a>). Le contenu décrypté par l'opérateur peut ainsi, dans ce cadre, être communiqué à une autorité sans qu'il nous soit possible d'y faire obstacle.</p>
+      <p>Nous considérons cette situation comme une limite technique de l'infrastructure, non comme un choix. Pour un accès qui n'expose pas le contenu à un opérateur tiers, utilisez le service caché Tor (voir la <a href="#onion">section 5</a>) ou l'un de nos autres canaux chiffrés de bout en bout.</p>
+
+      <h2 id="onion">5. Service caché Tor (.onion) et confidentialité de bout en bout</h2>
+      <p>Le site est également accessible sous forme de service caché Tor à l'adresse <code>http://l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion</code>. Vous devez utiliser le navigateur Tor (ou un navigateur configuré pour le réseau Tor) pour y accéder.</p>
+      <h3>5.1 Chiffrement de bout en bout</h3>
+      <p>À la différence de la voie clearnet, le service caché Tor est chiffré de bout en bout, de votre navigateur jusqu'à notre infrastructure, sans point de terminaison TLS chez un tiers :</p>
+      <ul>
+        <li><strong>Aucun opérateur intermédiaire ne peut lire le contenu</strong> ;</li>
+        <li>le réseau Tor protège également votre adresse IP vis-à-vis de nous ainsi que de tout observateur ;</li>
+        <li>notre propre adresse IP et notre géolocalisation restent dissimulées.</li>
+      </ul>
+      <p>Le service caché constitue le moyen d'accès au site le plus respectueux de votre vie privée et de votre sécurité. Nous recommandons son usage dès lors qu'un niveau élevé de confidentialité est souhaité.</p>
+      <h3>5.2 Précautions d'usage</h3>
+      <p>Le service caché fonctionne en HTTP (et non en HTTPS), le chiffrement étant assuré par le protocole Tor lui-même. Assurez-vous d'accéder à l'adresse exacte du service caché et de vérifier son intégrité auprès de nos canaux officiels, afin d'éviter toute tentative d'hameçonnage ou d'usurpation.</p>
+
+      <h2>6. Bot Discord (Zektyc bot)</h2>
+      <p>Zektyc met gratuitement à disposition un bot Discord nommé « Zektyc bot », accessible sur le serveur Discord <a href="https://discord.gg/mAXeNf7zUV" rel="noopener noreferrer" target="_blank">discord.gg/mAXeNf7zUV</a>. Le bot permet d'échanger par texte et par voix avec une assistance conversationnelle alimentée par intelligence artificielle.</p>
+      <h3>6.1 Fonctionnement</h3>
+      <ul>
+        <li><strong>Texte</strong> : mentionnez le bot ou répondez à l'un de ses messages pour engager la conversation ;</li>
+        <li><strong>Voix</strong> : rejoignez un salon vocal et utilisez la commande <code>/join</code> pour que le bot vous rejoigne. Votre voix est transcrite en texte, le bot répond et prononce sa réponse vocalement. La commande <code>/leave</code> déconnecte le bot.</li>
+      </ul>
+      <h3>6.2 Données traitées</h3>
+      <p>Le bot traite uniquement les données strictement nécessaires à la conversation :</p>
+      <ul>
+        <li>le contenu des messages par lesquels vous l'interpellez ;</li>
+        <li>votre identifiant Discord et votre pseudonyme ;</li>
+        <li>l'audio vocal, capté uniquement pendant que vous parlez, le temps d'être transcrit en texte ;</li>
+        <li>l'historique de la session en cours (vingt derniers échanges au maximum), conservé en mémoire vive uniquement.</li>
+      </ul>
+      <p>L'audio et les textes sont transmis à Groq (Groq, Inc., États-Unis) pour la transcription et la génération des réponses. La synthèse vocale (réponse parlée) est effectuée localement, en France, sans transmission à un tiers. Aucune donnée n'est écrite sur un support persistant. L'historique est réinitialisé à chaque redémarrage du bot. Voir la <a href="/privacy-policy#bot">Politique de confidentialité</a> pour le détail.</p>
+      <h3>6.3 Règles d'utilisation</h3>
+      <p>L'utilisation du bot est soumise aux présentes CGU ainsi qu'aux <a href="https://discord.com/terms" rel="noopener noreferrer" target="_blank">Conditions d'utilisation de Discord</a> et à sa <a href="https://discord.com/privacy" rel="noopener noreferrer" target="_blank">Politique de confidentialité</a>. En utilisant le bot, vous vous engagez à ne pas :</p>
+      <ul>
+        <li>lui soumettre des contenus illicites, diffamatoires, haineux, menaçants, harcelants, ou contraires aux règles de Discord ;</li>
+        <li>tenter de contourner, de saturer ou de compromettre son fonctionnement ;</li>
+        <li>l'utiliser pour traiter des données personnelles ou la voix de tiers sans leur consentement.</li>
+      </ul>
+      <p>Le bot est fourni « en l'état », sans garantie de disponibilité, de continuité ou d'exactitude. Les réponses générées par IA peuvent être inexactes ou inappropriées et ne constituent jamais un conseil juridique, technique, médical ou financier. Ne transmettez jamais au bot de données sensibles.</p>
+      <p>La session vocale peut être interrompue à tout moment ( commande <code>/leave</code>, commande <code>/join</code> d'un autre utilisateur, maintenance, perturbation technique). Le bot ne donne accès à aucun compte, aucune administration et aucune donnée du site.</p>
+
+      <h2>7. Test d'empreinte numérique (Fingerprint Test)</h2>
+      <p>Le site met gratuitement à disposition un outil de test d'empreinte numérique accessible aux adresses <a href="/fingerprint-test">/fingerprint-test</a> (FR) et <a href="/en/fingerprint-test">/en/fingerprint-test</a> (EN).</p>
+      <h3>7.1 Fonctionnement</h3>
+      <p>L'outil analyse la capacité de votre navigateur et de votre terminal à être identifié de manière unique. Il calcule deux identifiants :</p>
+      <ul>
+        <li><strong>ZFP (Zektyc Fingerprint)</strong> : empreinte de la couche navigateur (format ZFP-XXXX-XXXX-XXXX). Elle change lorsque vous changez de navigateur ou de profil. C'est l'empreinte utilisée par 95 % des services de suivi (Cloudflare, FingerprintJS, etc.) ;</li>
+        <li><strong>ZPD (Zektyc Protective Device)</strong> : empreinte de la couche matérielle, calculée uniquement à partir de signaux matériels résistants à l'anti-fingerprinting (profondeur de couleur, codecs audio, largeurs de glyphes emoji, décalage horloge serveur). Stable entre différents navigateurs sur la même machine.</li>
+      </ul>
+      <p>Le test analyse plus de trente signaux distincts : user-agent, Client Hints, fuseau horaire, résolution d'écran, nombre de cœurs CPU, RAM, écran tactile, rendu Canvas 2D, WebGL, WebGPU, audio WebAudio, polices installées, emojis, requêtes CSS média, largeur de scrollbar, stockage, opérations mathématiques, WASM, benchmark CPU, WebRTC, batterie, appareils média, plugins, voix de synthèse vocale, codecs vidéo/audio, et plus encore.</p>
+      <h3>7.2 Modes de test</h3>
+      <ul>
+        <li><strong>Mode simple</strong> : une seule exécution, résultats immédiats ;</li>
+        <li><strong>Mode 3 tours</strong> : trois exécutions successives avec rechargement de la page entre chaque tour, permettant de comparer la stabilité des signaux. Les résultats intermédiaires sont conservés temporairement dans le <code>sessionStorage</code> du navigateur (supprimés à la fin du test ou à la fermeture de l'onglet).</li>
+      </ul>
+      <h3>7.3 Données traitées</h3>
+      <p>Cet outil fonctionne <strong>exclusivement côté client</strong>. L'intégralité du traitement s'effectue dans votre navigateur. Aucun des signaux collectés, ni l'identifiant, ni le score ne sont transmis à nos serveurs, enregistrés, stockés ou utilisés à des fins d'identification. La seule requête réseau effectuée est un appel à l'endpoint <code>/api/time</code> pour mesurer le décalage horloge avec le serveur (nécessaire au calcul du ZPD).</p>
+      <p>Aucune limite d'utilisation ne s'applique. L'identifiant affiché ne peut pas être utilisé pour reconstituer les caractéristiques à partir desquelles il a été calculé (hachage SHA-256 à sens unique).</p>
+      <h3>7.4 Avertissement</h3>
+      <p>Les résultats sont fournis à titre indicatif et éducatif : ils ne constituent ni une expertise, ni une attestation, ni une mesure de sécurité opposable, et ne reflètent pas nécessairement le comportement réel de l'ensemble des sites ou services en ligne. L'outil est fourni « en l'état », sans garantie d'exhaustivité ou d'exactitude.</p>
+
+      <h2>8. ZMap — Application de planification pour véhicules électriques</h2>
+      <p>ZMap est une application Android gratuite permettant de planifier des trajets pour véhicules électriques, avec affichage des bornes de recharge publiques, calcul d'autonomie et navigation intégrée. L'application est disponible en téléchargement direct sur le site (<a href="/zmap">/zmap</a>).</p>
+      <h3>8.1 Fonctionnement</h3>
+      <ul>
+        <li><strong>Cartographie</strong> : affichage de données cartographiques OpenStreetMap via Leaflet, avec vue satellite ;</li>
+        <li><strong>Bornes de recharge</strong> : requête vers l'API Overpass d'OpenStreetMap (proxyé par le serveur Zektyc) pour afficher les bornes de recharge en Europe. Affichage de l'opérateur, de la marque, de la puissance (kW), des connecteurs (Type 2, CCS, CHAdeMO), des frais et des horaires ;</li>
+        <li><strong>Calcul d'itinéraire</strong> : via OSRM (Open Source Routing Machine) avec calcul de distance, durée et directions étape par étape ;</li>
+        <li><strong>Bornes le long du trajet</strong> : surlignage des bornes compatibles avec votre véhicule sur le parcours ;</li>
+        <li><strong>Navigation GPS</strong> : caméra dynamique, instructions de virage, ETA, vitesse actuelle et limite affichée ;</li>
+        <li><strong>Sélection de véhicule</strong> : Tesla Model Y, Renault Zoe, Peugeot e-208, VW ID.3, Kia EV6, etc. — calcul de consommation énergétique et d'autonomie ;</li>
+        <li><strong>Vitesses par route</strong> : base de données de 90,5 millions de points de vitesse sur 3,6 millions de kilomètres de routes européennes ;</li>
+        <li><strong>Mode hors ligne</strong> : cartes, itinéraires et bornes mis en cache sur l'appareil.</li>
+      </ul>
+      <h3>8.2 Données traitées</h3>
+      <p>L'application ne collecte aucune donnée personnelle. Aucun compte n'est requis. Aucun tracker ni service d'analyse n'est intégré.</p>
+      <p>L'application communique avec le serveur Zektyc via WebSocket et des appels API pour les requêtes de bornes, de recherche, d'itinéraire et de vitesse. Ces appels transitent par le serveur qui proxy les requêtes vers Overpass (bornes), Nominatim (géocodage) et OSRM (itinéraire), avec mise en cache côté serveur. Les adresses IP des requêtes sont soumises aux journaux techniques du serveur (conservés 14 jours, voir la <a href="/privacy-policy#logs">Politique de confidentialité</a>).</p>
+      <h3>8.3 Client web ZMap</h3>
+      <p>Une version web de la carte est accessible à l'adresse <a href="/zmap/web">/zmap/web</a>. Elle utilise Leaflet et les mêmes APIs que l'application mobile. Les mêmes principes de protection des données s'appliquent.</p>
+
+      <h2>9. Navigateur Zenyth</h2>
+      <p>Zenyth est une configuration Firefox durcie, distribuée sous forme de paquet RPM. Elle vise à maximiser la protection de la vie privée et à rendre l'empreinte numérique de l'utilisateur la plus uniforme possible.</p>
+      <h3>9.1 Fonctionnalités</h3>
+      <ul>
+        <li><strong>Resist Fingerprinting (RFP)</strong> : activé en permanence avec letterboxing — canvas uniformisé, fuseau horaire UTC, matériels génériques ;</li>
+        <li><strong>Masquage des polices</strong> : niveau <em>font-visibility</em> 1 — le test de polices (y compris via Web Workers) voit un ensemble identique pour tous les utilisateurs ;</li>
+        <li><strong>WebGPU et API Battery désactivés</strong> : ces API les plus révélatrices n'existent tout simplement pas ;</li>
+        <li><strong>Protection WebRTC</strong> : aucune fuite d'adresse IP locale, mDNS uniquement ;</li>
+        <li><strong>Extensions verrouillées</strong> : JShelter (randomisation canvas/audio par session) et uBlock Origin pré-installés et non supprimables ;</li>
+        <li><strong>Configuration automatique</strong> : le lanceur crée un profil dédié et réinjecte le durcissement à chaque démarrage.</li>
+      </ul>
+      <h3>9.2 Compatibilité</h3>
+      <p>Zenyth force la locale US English, le fuseau horaire UTC et une taille de fenêtre standardisée. Cela peut provoquer des demandes de réauthentification plus fréquentes sur certains sites. Le paquet RPM est actuellement compatible avec les systèmes basés sur Fedora/RHEL.</p>
+      <h3>9.3 Données traitées</h3>
+      <p>Zenyth est un logiciel installé localement sur votre appareil. Il ne transmet aucune donnée à Zektyc ni à des tiers. Sa configuration est entièrement locale.</p>
+
+      <h2>10. Propriété intellectuelle</h2>
+      <p>Le site, sa structure, ses textes, son identité visuelle (dénomination, logo, charte graphique) et l'ensemble des éléments qui le composent sont la propriété exclusive de l'éditeur ou de leurs auteurs, et sont protégés par le droit de la propriété intellectuelle.</p>
+      <p>Toute reproduction, représentation, modification, publication, adaptation ou exploitation, totale ou partielle, de ces éléments, par quelque procédé que ce soit, sans autorisation écrite préalable de l'éditeur, est interdite et constitutive de contrefaçon (art. L. 335-2 du Code de la propriété intellectuelle). La citation avec mention claire de la source est admise dans les limites de l'article L. 122-5 du même code.</p>
+
+      <h2>11. Conduite des utilisateurs</h2>
+      <p>En utilisant les services, vous vous engagez à ne pas :</p>
+      <ul>
+        <li>chercher à porter atteinte à la sécurité ou à l'intégrité des services (accès non autorisé, intrusion, test d'intrusion, exploitation de vulnérabilité) ;</li>
+        <li>perturber ou tenter de perturber le fonctionnement des services, y compris par des requêtes automatisées, des téléchargements massifs ou des tentatives de saturation ;</li>
+        <li>extraire ou collecter de manière automatisée les contenus du site ;</li>
+        <li>utiliser les services à des fins illicites ou frauduleuses ;</li>
+        <li>tenter de contourner les limitations de débit ou les mécanismes de protection.</li>
+      </ul>
+      <p>Toute tentative de ce type peut faire l'objet d'un blocage technique (limitation de débit, blocage d'adresse IP) et de poursuites judiciaires.</p>
+
+      <h2>12. Signalement responsable des vulnérabilités</h2>
+      <p>L'éditeur, dont l'activité porte sur la sécurité et la vie privée, considère le signalement de vulnérabilités comme un acte utile et légitime. Une personne qui identifie une vulnérabilité affectant les services peut la signaler à l'adresse <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a> ; un tel signalement, effectué dans le respect des conditions ci-dessous, ne constitue pas une violation de la section 11. Conditions :</p>
+      <ul>
+        <li>ne pas exploiter la vulnérabilité pour obtenir un accès non autorisé ou altérer le service au-delà du strict nécessaire à sa démonstration ;</li>
+        <li>ne pas accéder aux données d'autres utilisateurs et ne pas les exposer ;</li>
+        <li>signaler la vulnérabilité dans un délai raisonnable après sa découverte ;</li>
+        <li>fournir suffisamment d'informations pour permettre la reproduction et la correction du problème.</li>
+      </ul>
+      <p><strong>Délai de grâce.</strong> Sauf accord contraire, le signaleur s'abstient de toute divulgation publique pendant un délai de quatre-vingt-dix (90) jours calendaires à compter de la confirmation de la réception du signalement. À l'expiration de ce délai, si la vulnérabilité n'a pas été corrigée, le signaleur peut la divulguer publiquement dans les limites strictement nécessaires à la description du problème, sans exposer ni exploiter de données d'utilisateurs. L'éditeur peut notifier un délai supplémentaire raisonnable, dûment justifié (correctif complexe, dépendance tierce), qui suspend alors la divulgation pendant sa durée.</p>
+      <p>Pour toute communication sensible ou confidentielle, privilégiez l'e-mail ou Signal plutôt que Discord.</p>
+      <p>L'éditeur s'engage à accuser réception du signalement dans un délai raisonnable et à informer le signaleur de la suite donnée. La politique officielle est disponible à l'adresse <a href="/.well-known/security.txt" rel="noopener noreferrer" target="_blank">/.well-known/security.txt</a> (RFC 9116).</p>
+
+      <h2 id="autorite">13. Demandes officielles, preuves et vérification de l'autorité</h2>
+      <p>Par principe, aucune information n'est communiquée sur la seule base d'une demande, quelle qu'en soit l'origine. Toute demande doit être fondée sur un cadre légal justifié et étayée par des preuves documentées concrètes (décision judiciaire, acte administratif, référence légale précise et applicable).</p>
+      <p>Toute personne se présentant comme relevant d'une autorité publique doit, avant toute communication, prouver de manière impérative son identité et l'étendue exacte de son pouvoir : documents officiels identifiables et vérifiables, numéros de référence, acte ou décision justifiant la demande dans un cadre légal. L'éditeur se réserve le droit de vérifier cette autorité par tout moyen raisonnable et de refuser toute communication tant que cette preuve n'est pas apportée.</p>
+      <p>Ces exigences s'appliquent également aux demandes présentées comme urgentes ou confidentielles, sans aucune exception liée à la qualité déclarée du demandeur.</p>
+
+      <h2>14. Responsabilité</h2>
+      <p>Les services sont fournis « en l'état ». L'éditeur s'efforce d'assurer l'exactitude des informations publiées et la disponibilité des services, sans toutefois garantir l'absence d'erreurs, d'interruptions ou de virus. L'éditeur ne saurait être tenu responsable des dommages directs ou indirects résultant de l'utilisation des services ou de l'impossibilité d'y accéder.</p>
+      <p>S'agissant du bot Discord, les réponses générées par intelligence artificielle peuvent être inexactes, incomplètes, obsolètes ou inappropriées. Elles ne constituent en aucun cas un conseil juridique, technique, médical, financier ou autre.</p>
+      <p>S'agissant de ZMap, les informations cartographiques, les itinéraires et les bornes de recharge sont fournis à titre indicatif. La disponibilité des bornes, les temps de parcours et les distances peuvent varier. L'application ne remplace pas un système de navigation professionnelle ni une vérification en temps réel de l'état des bornes.</p>
+      <p>Les présentes limitations ne s'appliquent pas dans les cas où la loi applicable (notamment le Code de la consommation pour les consommateurs) l'interdit, et ne sauraient en aucun cas priver les consommateurs des droits qui leur sont conférés par les dispositions d'ordre public.</p>
+
+      <h2>15. Liens hypertextes</h2>
+      <p>Le site peut contenir des liens vers des sites tiers (Discord, OpenStreetMap, OSRM, Groq, etc.). Ces liens sont fournis pour votre commodité. L'éditeur n'exerce aucun contrôle sur ces sites, n'en garantit ni le contenu, ni la politique de confidentialité, et décline toute responsabilité à leur égard. L'établissement de liens vers le site est autorisé à condition qu'ils n'impliquent pas de présentation trompeuse ou dénaturante.</p>
+
+      <h2>16. Modification des CGU</h2>
+      <p>L'éditeur peut modifier les présentes CGU à tout moment. La version applicable est celle en ligne lors de votre accès. La date de dernière mise à jour figure en tête du présent document. Si vous continuez à utiliser les services après la publication d'une nouvelle version, vous êtes réputé l'avoir acceptée.</p>
+
+      <h2>17. Droit applicable et juridiction</h2>
+      <p>Les présentes CGU sont soumises au droit français.</p>
+      <p>Par défaut, l'éditeur ne se déplace pas physiquement devant une juridiction : les échanges relatifs à tout litige se font par écrit et à distance (courrier électronique, procédure écrite, médiation en ligne), en privilégiant systématiquement une résolution amiable.</p>
+      <p>Conformément à l'article 46 du Code de procédure civile, tout litige relatif à l'utilisation du site sera, à défaut de résolution amiable, porté devant les juridictions françaises compétentes. Pour les consommateurs, la juridiction compétente est celle de leur lieu de domicile (Règlement (UE) n° 1215/2012, chapitre II, section 4, article 18, paragraphe 1).</p>
+
+      <h2>18. Règlement en ligne des litiges</h2>
+      <p>La plateforme européenne de règlement en ligne des litiges a été supprimée le 20 juillet 2025 (Règlement (UE) n° 2024/3228). Les consommateurs résidant dans l'Union européenne peuvent obtenir des informations sur les modes alternatifs de résolution des litiges auprès de l'outil européen d'information sur le redressement des consommateurs : <a href="https://consumer-redress.ec.europa.eu" rel="noopener noreferrer" target="_blank">consumer-redress.ec.europa.eu</a>.</p>
+
+      <h2>19. Dispositions générales</h2>
+      <h3>Divisibilité</h3>
+      <p>Si une clause des présentes CGU était jugée nulle, invalide ou inapplicable par une juridiction compétente, les autres clauses resteraient pleinement applicables. La clause concernée serait alors interprétée, dans toute la mesure permise par la loi, de la manière la plus proche de l'intention des parties.</p>
+      <h3>Non-renonciation</h3>
+      <p>Le fait pour l'éditeur de ne pas exercer ou de retarder l'exercice d'un droit prévu aux présentes CGU ne constitue en aucun cas une renonciation à ce droit.</p>
+      <h3>Langue de référence</h3>
+      <p>Les présentes CGU sont rédigées en langue française, qui constitue la seule version faisant foi. Toute traduction n'est fournie qu'à titre de courtoisie et n'a aucune valeur juridique.</p>
+
+      <h2>20. Contact</h2>
+      <p>Pour toute question relative aux présentes CGU ou à l'utilisation des services, vous pouvez nous contacter à l'adresse : <a href="mailto:riric65@protonmail.com">riric65@protonmail.com</a>.</p>
+
+      <p class="legal-note">Version anglaise disponible : <a href="/en/tos">Terms of Service (EN)</a>.</p>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/vendor/marked.umd.js b/public/vendor/marked.umd.js
new file mode 100644
index 0000000..97dfe60
--- /dev/null
+++ b/public/vendor/marked.umd.js
@@ -0,0 +1,80 @@
+/**
+ * marked v18.0.9 - a markdown parser
+ * Copyright (c) 2018-2026, MarkedJS. (MIT License)
+ * Copyright (c) 2011-2018, Christopher Jeffrey. (MIT License)
+ * https://github.com/markedjs/marked
+ */
+
+/**
+ * DO NOT EDIT THIS FILE
+ * The code in this file is generated from files in ./src/
+ */
+(function(g,f){if(typeof exports=="object"&&typeof module<"u"){module.exports=f()}else if("function"==typeof define && define.amd){define("marked",f)}else {g["marked"]=f()}}(typeof globalThis < "u" ? globalThis : typeof self < "u" ? self : this,function(){var exports={};var __exports=exports;var module={exports};
+"use strict";var j=Object.defineProperty;var we=Object.getOwnPropertyDescriptor;var ye=Object.getOwnPropertyNames;var Pe=Object.prototype.hasOwnProperty;var Se=(l,e)=>{for(var t in e)j(l,t,{get:e[t],enumerable:!0})},_e=(l,e,t,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of ye(e))!Pe.call(l,s)&&s!==t&&j(l,s,{get:()=>e[s],enumerable:!(n=we(e,s))||n.enumerable});return l};var $e=l=>_e(j({},"__esModule",{value:!0}),l);var Lt={};Se(Lt,{Hooks:()=>P,Lexer:()=>x,Marked:()=>D,Parser:()=>b,Renderer:()=>y,TextRenderer:()=>_,Tokenizer:()=>w,defaults:()=>R,getDefaults:()=>z,lexer:()=>$t,marked:()=>g,options:()=>Ot,parse:()=>St,parseInline:()=>Pt,parser:()=>_t,setOptions:()=>wt,use:()=>Re,walkTokens:()=>yt});module.exports=$e(Lt);function z(){return{async:!1,breaks:!1,extensions:null,gfm:!0,hooks:null,pedantic:!1,renderer:null,silent:!1,tokenizer:null,walkTokens:null}}var R=z();function F(l){R=l}var E={exec:()=>null};function A(l){let e=[];return t=>{let n=Math.max(0,Math.min(3,t-1)),s=e[n];return s||(s=l(n),e[n]=s),s}}function k(l,e=""){let t=typeof l=="string"?l:l.source,n={replace:(s,r)=>{let i=typeof r=="string"?r:r.source;return i=i.replace(m.caret,"$1"),t=t.replace(s,i),n},getRegex:()=>new RegExp(t,e)};return n}var Le=((l="")=>{try{return!!new RegExp("(?<=1)(?<!1)"+l)}catch{return!1}})(),m={codeRemoveIndent:/^(?: {1,4}| {0,3}\t)/gm,outputLinkReplace:/\\([\[\]])/g,indentCodeCompensation:/^(\s+)(?:```)/,beginningSpace:/^\s+/,endingHash:/#$/,startingSpaceChar:/^ /,endingSpaceChar:/ $/,nonSpaceChar:/[^ ]/,newLineCharGlobal:/\n/g,tabCharGlobal:/\t/g,multipleSpaceGlobal:/\s+/g,blankLine:/^[ \t]*$/,doubleBlankLine:/\n[ \t]*\n[ \t]*$/,blockquoteStart:/^ {0,3}>/,blockquoteSetextReplace:/\n {0,3}((?:=+|-+) *)(?=\n|$)/g,blockquoteSetextReplace2:/^ {0,3}>[ \t]?/gm,listReplaceNesting:/^ {1,4}(?=( {4})*[^ ])/g,listIsTask:/^\[[ xX]\] +\S/,listReplaceTask:/^\[[ xX]\] +/,listTaskCheckbox:/\[[ xX]\]/,anyLine:/\n.*\n/,hrefBrackets:/^<(.*)>$/,tableDelimiter:/[:|]/,tableAlignChars:/^\||\| *$/g,tableRowBlankLine:/\n[ \t]*$/,tableAlignRight:/^ *-+: *$/,tableAlignCenter:/^ *:-+: *$/,tableAlignLeft:/^ *:-+ *$/,startATag:/^<a /i,endATag:/^<\/a>/i,startPreScriptTag:/^<(pre|code|kbd|script)(\s|>)/i,endPreScriptTag:/^<\/(pre|code|kbd|script)(\s|>)/i,startAngleBracket:/^</,endAngleBracket:/>$/,pedanticHrefTitle:/^([^'"]*[^\s])\s+(['"])(.*)\2/,unicodeAlphaNumeric:/[\p{L}\p{N}]/u,escapeTest:/[&<>"']/,escapeReplace:/[&<>"']/g,escapeTestNoEncode:/[<>"']|&(?!(#\d{1,7}|#[Xx][a-fA-F0-9]{1,6}|\w+);)/,escapeReplaceNoEncode:/[<>"']|&(?!(#\d{1,7}|#[Xx][a-fA-F0-9]{1,6}|\w+);)/g,caret:/(^|[^\[])\^/g,percentDecode:/%25/g,findPipe:/\|/g,splitPipe:/ \|/,slashPipe:/\\\|/g,carriageReturn:/\r\n|\r/g,spaceLine:/^ +$/gm,notSpaceStart:/^\S*/,endingNewline:/\n$/,listItemRegex:l=>new RegExp(`^( {0,3}${l})((?:[	 ][^\\n]*)?(?:\\n|$))`),nextBulletRegex:A(l=>new RegExp(`^ {0,${l}}(?:[*+-]|\\d{1,9}[.)])((?:[ 	][^\\n]*)?(?:\\n|$))`)),hrRegex:A(l=>new RegExp(`^ {0,${l}}((?:- *){3,}|(?:_ *){3,}|(?:\\* *){3,})(?:\\n+|$)`)),fencesBeginRegex:A(l=>new RegExp(`^ {0,${l}}(?:\`\`\`|~~~)`)),headingBeginRegex:A(l=>new RegExp(`^ {0,${l}}#`)),htmlBeginRegex:A(l=>new RegExp(`^ {0,${l}}<(?:[a-z].*>|!--)`,"i")),blockquoteBeginRegex:A(l=>new RegExp(`^ {0,${l}}>`))},Me=/^(?:[ \t]*(?:\n|$))+/,ze=/^((?: {4}| {0,3}\t)[^\n]+(?:\n(?:[ \t]*(?:\n|$))*)?)+/,Ee=/^ {0,3}(`{3,}(?=[^`\n]*(?:\n|$))|~{3,})([^\n]*)(?:\n|$)(?:|([\s\S]*?)(?:\n|$))(?: {0,3}\1[~`]* *(?=\n|$)|$)/,v=/^ {0,3}((?:-[\t ]*){3,}|(?:_[ \t]*){3,}|(?:\*[ \t]*){3,})(?:\n+|$)/,Ce=/^ {0,3}(#{1,6})(?=\s|$)(.*)(?:\n+|$)/,K=/ {0,3}(?:[*+-]|\d{1,9}[.)])/,ae=/^(?!bull |blockCode|fences|blockquote|heading|html|table)((?:.|\n(?!\s*?\n|bull |blockCode|fences|blockquote|heading|html|table))+?)\n {0,3}(=+|-+) *(?:\n+|$)/,le=k(ae).replace(/bull/g,K).replace(/blockCode/g,/(?: {4}| {0,3}\t)/).replace(/fences/g,/ {0,3}(?:`{3,}|~{3,})/).replace(/blockquote/g,/ {0,3}>/).replace(/heading/g,/ {0,3}#{1,6}(?:\s|$)/).replace(/html/g,/ {0,3}<[^\n>]+>\n/).replace(/\|table/g,"").getRegex(),Ae=k(ae).replace(/bull/g,K).replace(/blockCode/g,/(?: {4}| {0,3}\t)/).replace(/fences/g,/ {0,3}(?:`{3,}|~{3,})/).replace(/blockquote/g,/ {0,3}>/).replace(/heading/g,/ {0,3}#{1,6}(?:\s|$)/).replace(/html/g,/ {0,3}<[^\n>]+>\n/).replace(/table/g,/ {0,3}\|?(?:[:\- ]*\|)+[\:\- ]*\n/).getRegex(),W=/^([^\n]+(?:\n(?!hr|heading|lheading|blockquote|fences|list|html|table|[ \t]+\n)[^\n]+)*)/,Ie=/^[^\n]+/,X=/(?!\s*\])(?:\\[\s\S]|[^\[\]\\])+/,Be=k(/^ {0,3}\[(label)\]: *(?:\n[ \t]*)?([^<\s][^\s]*|<.*?>)(?:(?: +(?:\n[ \t]*)?| *\n[ \t]*)(title))? *(?:\n+|$)/).replace("label",X).replace("title",/(?:"(?:\\"?|[^"\\])*"|'[^'\n]*(?:\n[^'\n]+)*\n?'|\([^()]*\))/).getRegex(),De=k(/^(bull)([ \t][^\n]*?)?(?:\n|$)/).replace(/bull/g,K).getRegex(),Q="address|article|aside|base|basefont|blockquote|body|caption|center|col|colgroup|dd|details|dialog|dir|div|dl|dt|fieldset|figcaption|figure|footer|form|frame|frameset|h[1-6]|head|header|hr|html|iframe|legend|li|link|main|menu|menuitem|meta|nav|noframes|ol|optgroup|option|p|param|search|section|summary|table|tbody|td|tfoot|th|thead|title|tr|track|ul",J=/<!--(?:-?>|[\s\S]*?(?:-->|$))/,qe=k("^ {0,3}(?:<(script|pre|style|textarea)[\\s>][\\s\\S]*?(?:</\\1>[^\\n]*\\n*|$)|comment[^\\n]*(\\n+|$)|<\\?[\\s\\S]*?(?:\\?>[^\\n]*\\n*|$)|<![A-Z][\\s\\S]*?(?:>[^\\n]*\\n*|$)|<!\\[CDATA\\[[\\s\\S]*?(?:\\]\\]>[^\\n]*\\n*|$)|</?(tag)(?: +|\\n|/?>)[\\s\\S]*?(?:(?:\\n[ 	]*)+\\n|$)|<(?!script|pre|style|textarea)([a-z][\\w-]*)(?:attribute)*? */?>(?=[ \\t]*(?:\\n|$))[\\s\\S]*?(?:(?:\\n[ 	]*)+\\n|$)|</(?!script|pre|style|textarea)[a-z][\\w-]*\\s*>(?=[ \\t]*(?:\\n|$))[\\s\\S]*?(?:(?:\\n[ 	]*)+\\n|$))","i").replace("comment",J).replace("tag",Q).replace("attribute",/ +[a-zA-Z:_][\w.:-]*(?: *= *"[^"\n]*"| *= *'[^'\n]*'| *= *[^\s"'=<>`]+)?/).getRegex(),pe=l=>k(W).replace("hr",v).replace("heading"," {0,3}#{1,6}(?:\\s|$)").replace("|lheading","").replace("|table","").replace("blockquote"," {0,3}>").replace("fences"," {0,3}(?:`{3,}(?=[^`\\n]*\\n)|~~~)[^\\n]*\\n").replace("list",l).replace("html","</?(?:tag)(?: +|\\n|/?>)|<(?:script|pre|style|textarea|!--)").replace("tag",Q).getRegex(),ve=pe(/ {0,3}(?:[*+-]|1[.)])[ \t]+[^ \t\n]/),He=pe(/ {0,3}(?:[*+-]|\d{1,9}[.)])(?:[ \t]|\n|$)/),Ze=k(/^( {0,3}> ?(paragraph|[^\n]*)(?:\n|$))+/).replace("paragraph",He).getRegex(),V={blockquote:Ze,code:ze,def:Be,fences:Ee,heading:Ce,hr:v,html:qe,lheading:le,list:De,newline:Me,paragraph:ve,table:E,text:Ie},ie=k("^ *([^\\n ].*)\\n {0,3}((?:\\| *)?:?-+:? *(?:\\| *:?-+:? *)*(?:\\| *)?)(?:\\n((?:(?! *\\n|hr|heading|blockquote|code|fences|list|html).*(?:\\n|$))*)\\n*|$)").replace("hr",v).replace("heading"," {0,3}#{1,6}(?:\\s|$)").replace("blockquote"," {0,3}>").replace("code","(?: {4}| {0,3}	)[^\\n]").replace("fences"," {0,3}(?:`{3,}(?=[^`\\n]*\\n)|~~~)[^\\n]*\\n").replace("list"," {0,3}(?:[*+-]|1[.)])[ \\t]").replace("html","</?(?:tag)(?: +|\\n|/?>)|<(?:script|pre|style|textarea|!--)").replace("tag",Q).getRegex(),Ge={...V,lheading:Ae,table:ie,paragraph:k(W).replace("hr",v).replace("heading"," {0,3}#{1,6}(?:\\s|$)").replace("|lheading","").replace("table",ie).replace("blockquote"," {0,3}>").replace("fences"," {0,3}(?:`{3,}(?=[^`\\n]*\\n)|~~~)[^\\n]*\\n").replace("list"," {0,3}(?:[*+-]|1[.)])[ \\t]+[^ \\t\\n]").replace("html","</?(?:tag)(?: +|\\n|/?>)|<(?:script|pre|style|textarea|!--)").replace("tag",Q).getRegex()},Qe={...V,html:k(`^ *(?:comment *(?:\\n|\\s*$)|<(tag)[\\s\\S]+?</\\1> *(?:\\n{2,}|\\s*$)|<tag(?:"[^"]*"|'[^']*'|\\s[^'"/>\\s]*)*?/?> *(?:\\n{2,}|\\s*$))`).replace("comment",J).replace(/tag/g,"(?!(?:a|em|strong|small|s|cite|q|dfn|abbr|data|time|code|var|samp|kbd|sub|sup|i|b|u|mark|ruby|rt|rp|bdi|bdo|span|br|wbr|ins|del|img)\\b)\\w+(?!:|[^\\w\\s@]*@)\\b").getRegex(),def:/^ *\[([^\]]+)\]: *<?([^\s>]+)>?(?: +(["(][^\n]+[")]))? *(?:\n+|$)/,heading:/^(#{1,6})(.*)(?:\n+|$)/,fences:E,lheading:/^(.+?)\n {0,3}(=+|-+) *(?:\n+|$)/,paragraph:k(W).replace("hr",v).replace("heading",` *#{1,6} *[^
+]`).replace("lheading",le).replace("|table","").replace("blockquote"," {0,3}>").replace("|fences","").replace("|list","").replace("|html","").replace("|tag","").getRegex()},Ne=/^\\([!"#$%&'()*+,\-./:;<=>?@\[\]\\^_`{|}~])/,je=/^(`+)([^`]|[^`][\s\S]*?[^`])\1(?!`)/,ue=/^( {2,}|\\)\n(?!\s*$)/,Fe=/^(`+|[^`])(?:(?= {2,}\n)|[\s\S]*?(?:(?=[\\<!\[`*_]|\b_|$)|[^ ](?= {2,}\n)))/,$=/[\p{P}\p{S}]/u,I=/[\s\p{P}\p{S}]/u,H=/[^\s\p{P}\p{S}]/u,Ue=k(/^((?![*_])punctSpace)/,"u").replace(/punctSpace/g,I).getRegex(),Ke=/[\p{Pi}\p{Ps}"']/u,ce=/(?!~)[\p{P}\p{S}]/u,We=/(?!~)[\s\p{P}\p{S}]/u,Xe=/(?:[^\s\p{P}\p{S}]|~)/u,Je=k(/link|precode-code|html/,"g").replace("link",/\[(?:[^\[\]`]|(?<a>`+)[^`]+\k<a>(?!`))*?\]\((?:\\[\s\S]|[^\\\(\)]|\((?:\\[\s\S]|[^\\\(\)])*\))*\)/).replace("precode-",Le?"(?<!`)()":"(^^|[^`])").replace("code",/(?<b>`+)[^`]+\k<b>(?!`)/).replace("html",/<(?! )[^<>]*?>/).getRegex(),he=/^(?:\*+(?:((?!\*)punct)|([^\s*]))?)|^_+(?:((?!_)punct)|([^\s_]))?/,Ve=k(he,"u").replace(/punct/g,$).getRegex(),Ye=k(he,"u").replace(/punct/g,ce).getRegex(),et=/^(?:\*+(?:((?!\*)(?!openQuote)punct)|([^\s*]))?)|^_+(?:((?!_)(?!openQuote)punct)|([^\s_]))?/,tt=k(et,"u").replace(/openQuote/g,Ke).replace(/punct/g,$).getRegex(),de="^[^_*]*?__[^_*]*?\\*[^_*]*?(?=__)|[^*]+(?=[^*])|(?!\\*)punct(\\*+)(?=[\\s]|$)|notPunctSpace(\\*+)(?!\\*)(?=punctSpace|$)|(?!\\*)punctSpace(\\*+)(?=notPunctSpace)|[\\s](\\*+)(?!\\*)(?=punct)|(?!\\*)punct(\\*+)(?!\\*)(?=punct)|notPunctSpace(\\*+)(?=notPunctSpace)",nt=k(de,"gu").replace(/notPunctSpace/g,H).replace(/punctSpace/g,I).replace(/punct/g,$).getRegex(),rt=k(de,"gu").replace(/notPunctSpace/g,Xe).replace(/punctSpace/g,We).replace(/punct/g,ce).getRegex(),st="^[^_*]*?__[^_*]*?\\*[^_*]*?(?=__)|[^*]+(?=[^*])|(?!\\*)punct(\\*+)(?=[\\s]|$)|notPunctSpace(\\*+)(?!\\*)(?=punctSpace|$)|(?!\\*)[\\s](\\*+)(?=notPunctSpace)|[\\s](\\*+)(?!\\*)(?=punct)|(?!\\*)punct(\\*+)(?!\\*)(?=punct)|(?:(?!\\*)punct|notPunctSpace)(\\*+)(?!\\*)(?=notPunctSpace)",it=k(st,"gu").replace(/notPunctSpace/g,H).replace(/punctSpace/g,I).replace(/punct/g,$).getRegex(),ot=k("^[^_*]*?\\*\\*[^_*]*?_[^_*]*?(?=\\*\\*)|[^_]+(?=[^_])|(?!_)punct(_+)(?=[\\s]|$)|notPunctSpace(_+)(?!_)(?=punctSpace|$)|(?!_)punctSpace(_+)(?=notPunctSpace)|[\\s](_+)(?!_)(?=punct)|(?!_)punct(_+)(?!_)(?=punct)","gu").replace(/notPunctSpace/g,H).replace(/punctSpace/g,I).replace(/punct/g,$).getRegex(),at="^[^_*]*?\\*\\*[^_*]*?_[^_*]*?(?=\\*\\*)|[^_]+(?=[^_])|(?!_)punct(_+)(?=[\\s]|$)|notPunctSpace(_+)(?!_)(?=punctSpace|$)|(?!_)[\\s](_+)(?=notPunctSpace)|[\\s](_+)(?!_)(?=punct)|(?!_)punct(_+)(?!_)(?=punct)|(?:(?!_)punct|notPunctSpace)(_+)(?!_)(?=notPunctSpace)",lt=k(at,"gu").replace(/notPunctSpace/g,H).replace(/punctSpace/g,I).replace(/punct/g,$).getRegex(),pt=k(/^~~?(?:((?!~)punct)|[^\s~])/,"u").replace(/punct/g,$).getRegex(),ut="^[^~]+(?=[^~])|(?!~)punct(~~?)(?=[\\s]|$)|notPunctSpace(~~?)(?!~)(?=punctSpace|$)|(?!~)punctSpace(~~?)(?=notPunctSpace)|[\\s](~~?)(?!~)(?=punct)|(?!~)punct(~~?)(?!~)(?=punct)|notPunctSpace(~~?)(?=notPunctSpace)",ct=k(ut,"gu").replace(/notPunctSpace/g,H).replace(/punctSpace/g,I).replace(/punct/g,$).getRegex(),ht=k(/\\(punct)/,"gu").replace(/punct/g,$).getRegex(),dt=k(/^<(scheme:[^\s\x00-\x1f<>]*|email)>/).replace("scheme",/[a-zA-Z][a-zA-Z0-9+.-]{1,31}/).replace("email",/[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+(@)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)+(?![-_])/).getRegex(),kt=k(J).replace("(?:-->|$)","-->").getRegex(),gt=k("^comment|^</[a-zA-Z][\\w:-]*\\s*>|^<[a-zA-Z][\\w-]*(?:attribute)*?\\s*/?>|^<\\?[\\s\\S]*?\\?>|^<![a-zA-Z]+\\s[\\s\\S]*?>|^<!\\[CDATA\\[[\\s\\S]*?\\]\\]>").replace("comment",kt).replace("attribute",/\s+[a-zA-Z:_][\w.:-]*(?:\s*=\s*"[^"]*"|\s*=\s*'[^']*'|\s*=\s*[^\s"'=<>`]+)?/).getRegex(),G=/(?:\[(?:\\[\s\S]|[^\[\]\\])*\]|\\[\s\S]|`+(?!`)[^`]*?`+(?!`)|``+(?=\])|[^\[\]\\`])*?/,ft=k(/^!?\[(label)\]\(\s*(href)(?:(?:[ \t]+(?:\n[ \t]*)?|\n[ \t]*)(title))?\s*\)/).replace("label",G).replace("href",/<(?:\\.|[^\n<>\\])+>|[^ \t\n\x00-\x1f]+|(?=\))/).replace("title",/"(?:\\"?|[^"\\])*"|'(?:\\'?|[^'\\])*'|\((?:\\\)?|[^)\\])*\)/).getRegex(),ke=k(/^!?\[(label)\]\[(ref)\]/).replace("label",G).replace("ref",X).getRegex(),ge=k(/^!?\[(ref)\](?:\[\])?/).replace("ref",X).getRegex(),mt=k("reflink|nolink(?!\\()","g").replace("reflink",ke).replace("nolink",ge).getRegex(),oe=/[hH][tT][tT][pP][sS]?|[fF][tT][pP]/,Y={_backpedal:E,anyPunctuation:ht,autolink:dt,blockSkip:Je,br:ue,code:je,del:E,delLDelim:E,delRDelim:E,emStrongLDelim:Ve,emStrongRDelimAst:nt,emStrongRDelimUnd:ot,escape:Ne,link:ft,nolink:ge,punctuation:Ue,reflink:ke,reflinkSearch:mt,tag:gt,text:Fe,url:E},xt={...Y,emStrongLDelim:tt,emStrongRDelimAst:it,emStrongRDelimUnd:lt,link:k(/^!?\[(label)\]\((.*?)\)/).replace("label",G).getRegex(),reflink:k(/^!?\[(label)\]\s*\[([^\]]*)\]/).replace("label",G).getRegex()},U={...Y,emStrongRDelimAst:rt,emStrongLDelim:Ye,delLDelim:pt,delRDelim:ct,url:k(/^((?:protocol):\/\/|www\.)(?:[a-zA-Z0-9\-]+\.?)+[^\s<]*|^email/).replace("protocol",oe).replace("email",/[A-Za-z0-9._+-]+(@)[a-zA-Z0-9-_]+(?:\.[a-zA-Z0-9-_]*[a-zA-Z0-9])+(?![-_])/).getRegex(),_backpedal:/(?:[^?!.,:;*_'"~()&]+|\([^)]*\)|&(?![a-zA-Z0-9]+;$)|[?!.,:;*_'"~)]+(?!$))+/,del:/^(~~?)(?=[^\s~])((?:\\[\s\S]|[^\\])*?(?:\\[\s\S]|[^\s~\\]))\1(?=[^~]|$)/,text:k(/^(`+|~+|[^`~])(?:(?=[`~])|(?= {2,}\n)|(?=[a-zA-Z0-9.!#$%&'*+\/=?_`{\|}~-]+@)|[\s\S]*?(?:(?=[\\<!\[`*~_]|\b_|protocol:\/\/|www\.|$)|[^ ](?= {2,}\n)|[^a-zA-Z0-9.!#$%&'*+\/=?_`{\|}~-](?=[a-zA-Z0-9.!#$%&'*+\/=?_`{\|}~-]+@)))/).replace("protocol",oe).getRegex()},bt={...U,br:k(ue).replace("{2,}","*").getRegex(),text:k(U.text).replace("\\b_","\\b_| {2,}\\n").replace(/\{2,\}/g,"*").getRegex()},Z={normal:V,gfm:Ge,pedantic:Qe},B={normal:Y,gfm:U,breaks:bt,pedantic:xt};var Rt={"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"},fe=l=>Rt[l];function O(l,e){if(e){if(m.escapeTest.test(l))return l.replace(m.escapeReplace,fe)}else if(m.escapeTestNoEncode.test(l))return l.replace(m.escapeReplaceNoEncode,fe);return l}function ee(l){try{l=encodeURI(l).replace(m.percentDecode,"%")}catch{return null}return l}function te(l,e){let t=l.replace(m.findPipe,(r,i,o)=>{let p=!1,a=i;for(;--a>=0&&o[a]==="\\";)p=!p;return p?"|":" |"}),n=t.split(m.splitPipe),s=0;if(n[0].trim()||n.shift(),n.length>0&&!n.at(-1)?.trim()&&n.pop(),e)if(n.length>e)n.splice(e);else for(;n.length<e;)n.push("");for(;s<n.length;s++)n[s]=n[s].trim().replace(m.slashPipe,"|");return n}function L(l,e,t){let n=l.length;if(n===0)return"";let s=0;for(;s<n;){let r=l.charAt(n-s-1);if(r===e&&!t)s++;else if(r!==e&&t)s++;else break}return l.slice(0,n-s)}function ne(l){let e=l.split(`
+`),t=e.length-1;for(;t>=0&&m.blankLine.test(e[t]);)t--;return e.length-t<=2?l:e.slice(0,t+1).join(`
+`)}function me(l,e){if(l.indexOf(e[1])===-1)return-1;let t=0;for(let n=0;n<l.length;n++)if(l[n]==="\\")n++;else if(l[n]===e[0])t++;else if(l[n]===e[1]&&(t--,t<0))return n;return t>0?-2:-1}function xe(l,e=0){let t=e,n="";for(let s of l)if(s==="	"){let r=4-t%4;n+=" ".repeat(r),t+=r}else n+=s,t++;return n}function be(l,e,t,n,s){let r=e.href,i=e.title||null,o=l[1].replace(s.other.outputLinkReplace,"$1");n.state.inLink=!0;let p={type:l[0].charAt(0)==="!"?"image":"link",raw:t,href:r,title:i,text:o,tokens:n.inlineTokens(o)};return n.state.inLink=!1,p}function Tt(l,e,t){let n=l.match(t.other.indentCodeCompensation);if(n===null)return e;let s=n[1];return e.split(`
+`).map(r=>{let i=r.match(t.other.beginningSpace);if(i===null)return r;let[o]=i;return o.length>=s.length?r.slice(s.length):r}).join(`
+`)}var w=class{options;rules;lexer;constructor(e){this.options=e||R}space(e){let t=this.rules.block.newline.exec(e);if(t&&t[0].length>0)return{type:"space",raw:t[0]}}code(e){let t=this.rules.block.code.exec(e);if(t){let n=this.options.pedantic?t[0]:ne(t[0]),s=n.replace(this.rules.other.codeRemoveIndent,"");return{type:"code",raw:n,codeBlockStyle:"indented",text:s}}}fences(e){let t=this.rules.block.fences.exec(e);if(t){let n=t[0],s=Tt(n,t[3]||"",this.rules);return{type:"code",raw:n,lang:t[2]?t[2].trim().replace(this.rules.inline.anyPunctuation,"$1"):t[2],text:s}}}heading(e){let t=this.rules.block.heading.exec(e);if(t){let n=t[2].trim();if(this.rules.other.endingHash.test(n)){let s=L(n,"#");(this.options.pedantic||!s||this.rules.other.endingSpaceChar.test(s))&&(n=s.trim())}return{type:"heading",raw:L(t[0],`
+`),depth:t[1].length,text:n,tokens:this.lexer.inline(n)}}}hr(e){let t=this.rules.block.hr.exec(e);if(t)return{type:"hr",raw:L(t[0],`
+`)}}blockquote(e){let t=this.rules.block.blockquote.exec(e);if(t){let n=L(t[0],`
+`).split(`
+`),s="",r="",i=[];for(;n.length>0;){let o=!1,p=[],a;for(a=0;a<n.length;a++)if(this.rules.other.blockquoteStart.test(n[a]))p.push(n[a]),o=!0;else if(!o)p.push(n[a]);else break;n=n.slice(a);let u=p.join(`
+`),c=u.replace(this.rules.other.blockquoteSetextReplace,`
+    $1`).replace(this.rules.other.blockquoteSetextReplace2,"");s=s?`${s}
+${u}`:u,r=r?`${r}
+${c}`:c;let h=this.lexer.state.top;if(this.lexer.state.top=!0,this.lexer.blockTokens(c,i,!0),this.lexer.state.top=h,n.length===0)break;let d=i.at(-1);if(d?.type==="code")break;if(d?.type==="blockquote"){let T=d,f=n.join(`
+`),S=T.raw+`
+`+f.replace(this.rules.other.blockquoteSetextReplace2,""),M=this.blockquote(S);i[i.length-1]=M,s=`${s}
+${f}`,r=r.substring(0,r.length-T.text.length)+M.text;break}else if(d?.type==="list"){let T=d,f=T.raw+`
+`+n.join(`
+`),S=this.list(f);i[i.length-1]=S,s=s.substring(0,s.length-d.raw.length)+S.raw,r=r.substring(0,r.length-T.raw.length)+S.raw,n=f.substring(i.at(-1).raw.length).split(`
+`);continue}}return{type:"blockquote",raw:s,tokens:i,text:r}}}list(e){let t=this.rules.block.list.exec(e);if(t){let n=t[1].trim(),s=n.length>1,r={type:"list",raw:"",ordered:s,start:s?+n.slice(0,-1):"",loose:!1,items:[]};n=s?`\\d{1,9}\\${n.slice(-1)}`:`\\${n}`,this.options.pedantic&&(n=s?n:"[*+-]");let i=this.rules.other.listItemRegex(n),o=!1;for(;e;){let a=!1,u="",c="";if(!(t=i.exec(e))||this.rules.block.hr.test(e))break;u=t[0],e=e.substring(u.length);let h=xe(t[2].split(`
+`,1)[0],t[1].length),d=e.split(`
+`,1)[0],T=!h.trim(),f=0;if(this.options.pedantic?(f=2,c=h.trimStart()):T?f=t[1].length+1:(f=h.search(this.rules.other.nonSpaceChar),f=f>4?1:f,c=h.slice(f),f+=t[1].length),T&&this.rules.other.blankLine.test(d)&&(u+=d+`
+`,e=e.substring(d.length+1),a=!0),!a){let S=this.rules.other.nextBulletRegex(f),M=this.rules.other.hrRegex(f),re=this.rules.other.fencesBeginRegex(f),se=this.rules.other.headingBeginRegex(f),Te=this.rules.other.htmlBeginRegex(f),Oe=this.rules.other.blockquoteBeginRegex(f);for(;e;){let N=e.split(`
+`,1)[0],q;if(d=N,this.options.pedantic?(d=d.replace(this.rules.other.listReplaceNesting,"  "),q=d):q=d.replace(this.rules.other.tabCharGlobal,"    "),re.test(d)||se.test(d)||Te.test(d)||Oe.test(d)||S.test(d)||M.test(d))break;if(q.search(this.rules.other.nonSpaceChar)>=f||!d.trim())c+=`
+`+q.slice(f);else{if(T||h.replace(this.rules.other.tabCharGlobal,"    ").search(this.rules.other.nonSpaceChar)>=4||re.test(h)||se.test(h)||M.test(h))break;c+=`
+`+d}T=!d.trim(),u+=N+`
+`,e=e.substring(N.length+1),h=q.slice(f)}}r.loose||(o?r.loose=!0:this.rules.other.doubleBlankLine.test(u)&&(o=!0)),r.items.push({type:"list_item",raw:u,task:!!this.options.gfm&&this.rules.other.listIsTask.test(c),loose:!1,text:c,tokens:[]}),r.raw+=u}let p=r.items.at(-1);if(p)p.raw=p.raw.trimEnd(),p.text=p.text.trimEnd();else return;r.raw=r.raw.trimEnd();for(let a of r.items){this.lexer.state.top=!1,a.tokens=this.lexer.blockTokens(a.text,[]);let u=a.tokens[0];if(a.task&&(u?.type==="text"||u?.type==="paragraph")){a.text=a.text.replace(this.rules.other.listReplaceTask,""),u.raw=u.raw.replace(this.rules.other.listReplaceTask,""),u.text=u.text.replace(this.rules.other.listReplaceTask,"");for(let h=this.lexer.inlineQueue.length-1;h>=0;h--)if(this.rules.other.listIsTask.test(this.lexer.inlineQueue[h].src)){this.lexer.inlineQueue[h].src=this.lexer.inlineQueue[h].src.replace(this.rules.other.listReplaceTask,"");break}let c=this.rules.other.listTaskCheckbox.exec(a.raw);if(c){let h={type:"checkbox",raw:c[0]+" ",checked:c[0]!=="[ ]"};a.checked=h.checked,r.loose?a.tokens[0]&&["paragraph","text"].includes(a.tokens[0].type)&&"tokens"in a.tokens[0]&&a.tokens[0].tokens?(a.tokens[0].raw=h.raw+a.tokens[0].raw,a.tokens[0].text=h.raw+a.tokens[0].text,a.tokens[0].tokens.unshift(h)):a.tokens.unshift({type:"paragraph",raw:h.raw,text:h.raw,tokens:[h]}):a.tokens.unshift(h)}}else a.task&&(a.task=!1);if(!r.loose){let c=a.tokens.filter(d=>d.type==="space"),h=c.length>0&&c.some(d=>this.rules.other.anyLine.test(d.raw));r.loose=h}}if(r.loose)for(let a of r.items){a.loose=!0;for(let u of a.tokens)u.type==="text"&&(u.type="paragraph")}return r}}html(e){let t=this.rules.block.html.exec(e);if(t){let n=ne(t[0]);return{type:"html",block:!0,raw:n,pre:t[1]==="pre"||t[1]==="script"||t[1]==="style",text:n}}}def(e){let t=this.rules.block.def.exec(e);if(t){let n=t[1].toLowerCase().replace(this.rules.other.multipleSpaceGlobal," "),s=t[2]?t[2].replace(this.rules.other.hrefBrackets,"$1").replace(this.rules.inline.anyPunctuation,"$1"):"",r=t[3]?t[3].substring(1,t[3].length-1).replace(this.rules.inline.anyPunctuation,"$1"):t[3];return{type:"def",tag:n,raw:L(t[0],`
+`),href:s,title:r}}}table(e){let t=this.rules.block.table.exec(e);if(!t||!this.rules.other.tableDelimiter.test(t[2]))return;let n=te(t[1]),s=t[2].replace(this.rules.other.tableAlignChars,"").split("|"),r=t[3]?.trim()?t[3].replace(this.rules.other.tableRowBlankLine,"").split(`
+`):[],i={type:"table",raw:L(t[0],`
+`),header:[],align:[],rows:[]};if(n.length===s.length){for(let o of s)this.rules.other.tableAlignRight.test(o)?i.align.push("right"):this.rules.other.tableAlignCenter.test(o)?i.align.push("center"):this.rules.other.tableAlignLeft.test(o)?i.align.push("left"):i.align.push(null);for(let o=0;o<n.length;o++)i.header.push({text:n[o],tokens:this.lexer.inline(n[o]),header:!0,align:i.align[o]});for(let o of r)i.rows.push(te(o,i.header.length).map((p,a)=>({text:p,tokens:this.lexer.inline(p),header:!1,align:i.align[a]})));return i}}lheading(e){let t=this.rules.block.lheading.exec(e);if(t){let n=t[1].trim();return{type:"heading",raw:L(t[0],`
+`),depth:t[2].charAt(0)==="="?1:2,text:n,tokens:this.lexer.inline(n)}}}paragraph(e){let t=this.rules.block.paragraph.exec(e);if(t){let n=t[1].charAt(t[1].length-1)===`
+`?t[1].slice(0,-1):t[1];return{type:"paragraph",raw:t[0],text:n,tokens:this.lexer.inline(n)}}}text(e){let t=this.rules.block.text.exec(e);if(t)return{type:"text",raw:t[0],text:t[0],tokens:this.lexer.inline(t[0])}}escape(e){let t=this.rules.inline.escape.exec(e);if(t)return{type:"escape",raw:t[0],text:t[1]}}tag(e){let t=this.rules.inline.tag.exec(e);if(t)return!this.lexer.state.inLink&&this.rules.other.startATag.test(t[0])?this.lexer.state.inLink=!0:this.lexer.state.inLink&&this.rules.other.endATag.test(t[0])&&(this.lexer.state.inLink=!1),!this.lexer.state.inRawBlock&&this.rules.other.startPreScriptTag.test(t[0])?this.lexer.state.inRawBlock=!0:this.lexer.state.inRawBlock&&this.rules.other.endPreScriptTag.test(t[0])&&(this.lexer.state.inRawBlock=!1),{type:"html",raw:t[0],inLink:this.lexer.state.inLink,inRawBlock:this.lexer.state.inRawBlock,block:!1,text:t[0]}}link(e){let t=this.rules.inline.link.exec(e);if(t){let n=t[2].trim();if(!this.options.pedantic&&this.rules.other.startAngleBracket.test(n)){if(!this.rules.other.endAngleBracket.test(n))return;let i=L(n.slice(0,-1),"\\");if((n.length-i.length)%2===0)return}else{let i=me(t[2],"()");if(i===-2)return;if(i>-1){let p=(t[0].indexOf("!")===0?5:4)+t[1].length+i;t[2]=t[2].substring(0,i),t[0]=t[0].substring(0,p).trim(),t[3]=""}}let s=t[2],r="";if(this.options.pedantic){let i=this.rules.other.pedanticHrefTitle.exec(s);i&&(s=i[1],r=i[3])}else r=t[3]?t[3].slice(1,-1):"";return s=s.trim(),this.rules.other.startAngleBracket.test(s)&&(this.options.pedantic&&!this.rules.other.endAngleBracket.test(n)?s=s.slice(1):s=s.slice(1,-1)),be(t,{href:s&&s.replace(this.rules.inline.anyPunctuation,"$1"),title:r&&r.replace(this.rules.inline.anyPunctuation,"$1")},t[0],this.lexer,this.rules)}}reflink(e,t){let n;if((n=this.rules.inline.reflink.exec(e))||(n=this.rules.inline.nolink.exec(e))){let s=(n[2]||n[1]).replace(this.rules.other.multipleSpaceGlobal," "),r=t[s.toLowerCase()];if(!r){let i=n[0].charAt(0);return{type:"text",raw:i,text:i}}return be(n,r,n[0],this.lexer,this.rules)}}emStrong(e,t,n=""){let s=this.rules.inline.emStrongLDelim.exec(e);if(!s||!s[1]&&!s[2]&&!s[3]&&!s[4]||s[4]&&n.match(this.rules.other.unicodeAlphaNumeric))return;if(!(s[1]||s[3]||"")||!n||this.rules.inline.punctuation.exec(n)){let i=[...s[0]].length-1,o,p,a=i,u=0,c=s[0][0],h=n===c,d=c==="*"?this.rules.inline.emStrongRDelimAst:this.rules.inline.emStrongRDelimUnd;for(d.lastIndex=0,t=t.slice(-1*e.length+i);(s=d.exec(t))!==null;){if(o=s[1]||s[2]||s[3]||s[4]||s[5]||s[6],!o)continue;if(p=[...o].length,s[3]||s[4]){a+=p;continue}else if(s[5]||s[6]){if(i%3&&!((i+p)%3)){u+=p;continue}if(h)break}if(a-=p,a>0)continue;p=Math.min(p,p+a+u);let T=[...s[0]][0].length,f=e.slice(0,i+s.index+T+p);if(Math.min(i,p)%2){let M=f.slice(1,-1);return{type:"em",raw:f,text:M,tokens:this.lexer.inlineTokens(M)}}let S=f.slice(2,-2);return{type:"strong",raw:f,text:S,tokens:this.lexer.inlineTokens(S)}}}}codespan(e){let t=this.rules.inline.code.exec(e);if(t){let n=t[2].replace(this.rules.other.newLineCharGlobal," "),s=this.rules.other.nonSpaceChar.test(n),r=this.rules.other.startingSpaceChar.test(n)&&this.rules.other.endingSpaceChar.test(n);return s&&r&&(n=n.substring(1,n.length-1)),{type:"codespan",raw:t[0],text:n}}}br(e){let t=this.rules.inline.br.exec(e);if(t)return{type:"br",raw:t[0]}}del(e,t,n=""){let s=this.rules.inline.delLDelim.exec(e);if(!s)return;if(!(s[1]||"")||!n||this.rules.inline.punctuation.exec(n)){let i=[...s[0]].length-1,o,p,a=i,u=this.rules.inline.delRDelim;for(u.lastIndex=0,t=t.slice(-1*e.length+i);(s=u.exec(t))!==null;){if(o=s[1]||s[2]||s[3]||s[4]||s[5]||s[6],!o||(p=[...o].length,p!==i))continue;if(s[3]||s[4]){a+=p;continue}if(a-=p,a>0)continue;p=Math.min(p,p+a);let c=[...s[0]][0].length,h=e.slice(0,i+s.index+c+p),d=h.slice(i,-i);return{type:"del",raw:h,text:d,tokens:this.lexer.inlineTokens(d)}}}}autolink(e){let t=this.rules.inline.autolink.exec(e);if(t){let n,s;return t[2]==="@"?(n=t[1],s="mailto:"+n):(n=t[1],s=n),{type:"link",raw:t[0],text:n,href:s,tokens:[{type:"text",raw:n,text:n}]}}}url(e){let t;if(t=this.rules.inline.url.exec(e)){let n,s;if(t[2]==="@")n=t[0],s="mailto:"+n;else{let r;do r=t[0],t[0]=this.rules.inline._backpedal.exec(t[0])?.[0]??"";while(r!==t[0]);n=t[0],t[1]==="www."?s="http://"+t[0]:s=t[0]}return{type:"link",raw:t[0],text:n,href:s,tokens:[{type:"text",raw:n,text:n}]}}}inlineText(e){let t=this.rules.inline.text.exec(e);if(t){let n=this.lexer.state.inRawBlock;return{type:"text",raw:t[0],text:t[0],escaped:n}}}};var x=class l{tokens;options;state;inlineQueue;tokenizer;constructor(e){this.tokens=[],this.tokens.links=Object.create(null),this.options=e||R,this.options.tokenizer=this.options.tokenizer||new w,this.tokenizer=this.options.tokenizer,this.tokenizer.options=this.options,this.tokenizer.lexer=this,this.inlineQueue=[],this.state={inLink:!1,inRawBlock:!1,top:!0};let t={other:m,block:Z.normal,inline:B.normal};this.options.pedantic?(t.block=Z.pedantic,t.inline=B.pedantic):this.options.gfm&&(t.block=Z.gfm,this.options.breaks?t.inline=B.breaks:t.inline=B.gfm),this.tokenizer.rules=t}static get rules(){return{block:Z,inline:B}}static lex(e,t){return new l(t).lex(e)}static lexInline(e,t){return new l(t).inlineTokens(e)}lex(e){e=e.replace(m.carriageReturn,`
+`),this.blockTokens(e,this.tokens);for(let t=0;t<this.inlineQueue.length;t++){let n=this.inlineQueue[t];this.inlineTokens(n.src,n.tokens)}return this.inlineQueue=[],this.tokens}blockTokens(e,t=[],n=!1){this.tokenizer.lexer=this,this.options.pedantic&&(e=e.replace(m.tabCharGlobal,"    ").replace(m.spaceLine,""));let s=1/0;for(;e;){if(e.length<s)s=e.length;else{this.infiniteLoopError(e.charCodeAt(0));break}let r;if(this.options.extensions?.block?.some(o=>(r=o.call({lexer:this},e,t))?(e=e.substring(r.raw.length),t.push(r),!0):!1))continue;if(r=this.tokenizer.space(e)){e=e.substring(r.raw.length);let o=t.at(-1);r.raw.length===1&&o!==void 0?o.raw+=`
+`:t.push(r);continue}if(r=this.tokenizer.code(e)){e=e.substring(r.raw.length);let o=t.at(-1);o?.type==="paragraph"||o?.type==="text"?(o.raw+=(o.raw.endsWith(`
+`)?"":`
+`)+r.raw,o.text+=`
+`+r.text,this.inlineQueue.at(-1).src=o.text):t.push(r);continue}if(r=this.tokenizer.fences(e)){e=e.substring(r.raw.length),t.push(r);continue}if(r=this.tokenizer.heading(e)){e=e.substring(r.raw.length),t.push(r);continue}if(r=this.tokenizer.hr(e)){e=e.substring(r.raw.length),t.push(r);continue}if(r=this.tokenizer.blockquote(e)){e=e.substring(r.raw.length),t.push(r);continue}if(r=this.tokenizer.list(e)){e=e.substring(r.raw.length),t.push(r);continue}if(r=this.tokenizer.html(e)){e=e.substring(r.raw.length),t.push(r);continue}if(r=this.tokenizer.def(e)){e=e.substring(r.raw.length);let o=t.at(-1);o?.type==="paragraph"||o?.type==="text"?(o.raw+=(o.raw.endsWith(`
+`)?"":`
+`)+r.raw,o.text+=`
+`+r.raw,this.inlineQueue.at(-1).src=o.text):this.tokens.links[r.tag]||(this.tokens.links[r.tag]={href:r.href,title:r.title},t.push(r));continue}if(r=this.tokenizer.table(e)){e=e.substring(r.raw.length),t.push(r);continue}if(r=this.tokenizer.lheading(e)){e=e.substring(r.raw.length),t.push(r);continue}let i=e;if(this.options.extensions?.startBlock){let o=1/0,p=e.slice(1),a;this.options.extensions.startBlock.forEach(u=>{a=u.call({lexer:this},p),typeof a=="number"&&a>=0&&(o=Math.min(o,a))}),o<1/0&&o>=0&&(i=e.substring(0,o+1))}if(this.state.top&&(r=this.tokenizer.paragraph(i))){let o=t.at(-1);n&&o?.type==="paragraph"?(o.raw+=(o.raw.endsWith(`
+`)?"":`
+`)+r.raw,o.text+=`
+`+r.text,this.inlineQueue.pop(),this.inlineQueue.at(-1).src=o.text):t.push(r),n=i.length!==e.length,e=e.substring(r.raw.length);continue}if(r=this.tokenizer.text(e)){e=e.substring(r.raw.length);let o=t.at(-1);o?.type==="text"?(o.raw+=(o.raw.endsWith(`
+`)?"":`
+`)+r.raw,o.text+=`
+`+r.text,this.inlineQueue.pop(),this.inlineQueue.at(-1).src=o.text):t.push(r);continue}if(e){this.infiniteLoopError(e.charCodeAt(0));break}}return this.state.top=!0,t}inline(e,t=[]){return this.inlineQueue.push({src:e,tokens:t}),t}inlineTokens(e,t=[]){this.tokenizer.lexer=this;let n=e;if(this.tokens.links){let o=Object.keys(this.tokens.links);o.length>0&&(n=n.replace(this.tokenizer.rules.inline.reflinkSearch,p=>o.includes(p.slice(p.lastIndexOf("[")+1,-1))?"["+"a".repeat(p.length-2)+"]":p))}n=n.replace(this.tokenizer.rules.inline.anyPunctuation,"++"),n=n.replace(this.tokenizer.rules.inline.blockSkip,(o,p,a)=>{let u=a?a.length:0;return o.slice(0,u)+"["+"a".repeat(o.length-u-2)+"]"}),n=this.options.hooks?.emStrongMask?.call({lexer:this},n)??n;let s=!1,r="",i=1/0;for(;e;){if(e.length<i)i=e.length;else{this.infiniteLoopError(e.charCodeAt(0));break}s||(r=""),s=!1;let o;if(this.options.extensions?.inline?.some(a=>(o=a.call({lexer:this},e,t))?(e=e.substring(o.raw.length),t.push(o),!0):!1))continue;if(o=this.tokenizer.escape(e)){e=e.substring(o.raw.length),t.push(o);continue}if(o=this.tokenizer.tag(e)){e=e.substring(o.raw.length),t.push(o);continue}if(o=this.tokenizer.link(e)){e=e.substring(o.raw.length),t.push(o);continue}if(o=this.tokenizer.reflink(e,this.tokens.links)){e=e.substring(o.raw.length);let a=t.at(-1);o.type==="text"&&a?.type==="text"?(a.raw+=o.raw,a.text+=o.text):t.push(o);continue}if(o=this.tokenizer.emStrong(e,n,r)){e=e.substring(o.raw.length),t.push(o);continue}if(o=this.tokenizer.codespan(e)){e=e.substring(o.raw.length),t.push(o);continue}if(o=this.tokenizer.br(e)){e=e.substring(o.raw.length),t.push(o);continue}if(o=this.tokenizer.del(e,n,r)){e=e.substring(o.raw.length),t.push(o);continue}if(o=this.tokenizer.autolink(e)){e=e.substring(o.raw.length),t.push(o);continue}if(!this.state.inLink&&(o=this.tokenizer.url(e))){e=e.substring(o.raw.length),t.push(o);continue}let p=e;if(this.options.extensions?.startInline){let a=1/0,u=e.slice(1),c;this.options.extensions.startInline.forEach(h=>{c=h.call({lexer:this},u),typeof c=="number"&&c>=0&&(a=Math.min(a,c))}),a<1/0&&a>=0&&(p=e.substring(0,a+1))}if(o=this.tokenizer.inlineText(p)){e=e.substring(o.raw.length),o.raw.slice(-1)!=="_"&&(r=o.raw.slice(-1)),s=!0;let a=t.at(-1);a?.type==="text"?(a.raw+=o.raw,a.text+=o.text):t.push(o);continue}if(e){this.infiniteLoopError(e.charCodeAt(0));break}}return t}infiniteLoopError(e){let t="Infinite loop on byte: "+e;if(this.options.silent)console.error(t);else throw new Error(t)}};var y=class{options;parser;constructor(e){this.options=e||R}space(e){return""}code({text:e,lang:t,escaped:n}){let s=(t||"").match(m.notSpaceStart)?.[0],r=e.replace(m.endingNewline,"")+`
+`;return s?'<pre><code class="language-'+O(s)+'">'+(n?r:O(r,!0))+`</code></pre>
+`:"<pre><code>"+(n?r:O(r,!0))+`</code></pre>
+`}blockquote({tokens:e}){return`<blockquote>
+${this.parser.parse(e)}</blockquote>
+`}html({text:e}){return e}def(e){return""}heading({tokens:e,depth:t}){return`<h${t}>${this.parser.parseInline(e)}</h${t}>
+`}hr(e){return`<hr>
+`}list(e){let t=e.ordered,n=e.start,s="";for(let o=0;o<e.items.length;o++){let p=e.items[o];s+=this.listitem(p)}let r=t?"ol":"ul",i=t&&n!==1?' start="'+n+'"':"";return"<"+r+i+`>
+`+s+"</"+r+`>
+`}listitem(e){return`<li>${this.parser.parse(e.tokens)}</li>
+`}checkbox({checked:e}){return"<input "+(e?'checked="" ':"")+'disabled="" type="checkbox"> '}paragraph({tokens:e}){return`<p>${this.parser.parseInline(e)}</p>
+`}table(e){let t="",n="";for(let r=0;r<e.header.length;r++)n+=this.tablecell(e.header[r]);t+=this.tablerow({text:n});let s="";for(let r=0;r<e.rows.length;r++){let i=e.rows[r];n="";for(let o=0;o<i.length;o++)n+=this.tablecell(i[o]);s+=this.tablerow({text:n})}return s&&(s=`<tbody>${s}</tbody>`),`<table>
+<thead>
+`+t+`</thead>
+`+s+`</table>
+`}tablerow({text:e}){return`<tr>
+${e}</tr>
+`}tablecell(e){let t=this.parser.parseInline(e.tokens),n=e.header?"th":"td";return(e.align?`<${n} align="${e.align}">`:`<${n}>`)+t+`</${n}>
+`}strong({tokens:e}){return`<strong>${this.parser.parseInline(e)}</strong>`}em({tokens:e}){return`<em>${this.parser.parseInline(e)}</em>`}codespan({text:e}){return`<code>${O(e,!0)}</code>`}br(e){return"<br>"}del({tokens:e}){return`<del>${this.parser.parseInline(e)}</del>`}link({href:e,title:t,tokens:n}){let s=this.parser.parseInline(n),r=ee(e);if(r===null)return s;e=r;let i='<a href="'+e+'"';return t&&(i+=' title="'+O(t)+'"'),i+=">"+s+"</a>",i}image({href:e,title:t,text:n,tokens:s}){s&&(n=this.parser.parseInline(s,this.parser.textRenderer));let r=ee(e);if(r===null)return O(n);e=r;let i=`<img src="${e}" alt="${O(n)}"`;return t&&(i+=` title="${O(t)}"`),i+=">",i}text(e){return"tokens"in e&&e.tokens?this.parser.parseInline(e.tokens):"escaped"in e&&e.escaped?e.text:O(e.text)}};var _=class{strong({text:e}){return e}em({text:e}){return e}codespan({text:e}){return e}del({text:e}){return e}html({text:e}){return e}text({text:e}){return e}link({text:e}){return""+e}image({text:e}){return""+e}br(){return""}checkbox({raw:e}){return e}};var b=class l{options;renderer;textRenderer;constructor(e){this.options=e||R,this.options.renderer=this.options.renderer||new y,this.renderer=this.options.renderer,this.renderer.options=this.options,this.renderer.parser=this,this.textRenderer=new _}static parse(e,t){return new l(t).parse(e)}static parseInline(e,t){return new l(t).parseInline(e)}parse(e){this.renderer.parser=this;let t="";for(let n=0;n<e.length;n++){let s=e[n];if(this.options.extensions?.renderers?.[s.type]){let i=s,o=this.options.extensions.renderers[i.type].call({parser:this},i);if(o!==!1||!["space","hr","heading","code","table","blockquote","list","checkbox","html","def","paragraph","text"].includes(i.type)){t+=o||"";continue}}let r=s;switch(r.type){case"space":{t+=this.renderer.space(r);break}case"hr":{t+=this.renderer.hr(r);break}case"heading":{t+=this.renderer.heading(r);break}case"code":{t+=this.renderer.code(r);break}case"table":{t+=this.renderer.table(r);break}case"blockquote":{t+=this.renderer.blockquote(r);break}case"list":{t+=this.renderer.list(r);break}case"checkbox":{t+=this.renderer.checkbox(r);break}case"html":{t+=this.renderer.html(r);break}case"def":{t+=this.renderer.def(r);break}case"paragraph":{t+=this.renderer.paragraph(r);break}case"text":{t+=this.renderer.text(r);break}default:{let i='Token with "'+r.type+'" type was not found.';if(this.options.silent)return console.error(i),"";throw new Error(i)}}}return t}parseInline(e,t=this.renderer){this.renderer.parser=this;let n="";for(let s=0;s<e.length;s++){let r=e[s];if(this.options.extensions?.renderers?.[r.type]){let o=this.options.extensions.renderers[r.type].call({parser:this},r);if(o!==!1||!["escape","html","link","image","checkbox","strong","em","codespan","br","del","text"].includes(r.type)){n+=o||"";continue}}let i=r;switch(i.type){case"escape":{n+=t.text(i);break}case"html":{n+=t.html(i);break}case"link":{n+=t.link(i);break}case"image":{n+=t.image(i);break}case"checkbox":{n+=t.checkbox(i);break}case"strong":{n+=t.strong(i);break}case"em":{n+=t.em(i);break}case"codespan":{n+=t.codespan(i);break}case"br":{n+=t.br(i);break}case"del":{n+=t.del(i);break}case"text":{n+=t.text(i);break}default:{let o='Token with "'+i.type+'" type was not found.';if(this.options.silent)return console.error(o),"";throw new Error(o)}}}return n}};var P=class{options;block;constructor(e){this.options=e||R}static passThroughHooks=new Set(["preprocess","postprocess","processAllTokens","emStrongMask"]);static passThroughHooksRespectAsync=new Set(["preprocess","postprocess","processAllTokens"]);preprocess(e){return e}postprocess(e){return e}processAllTokens(e){return e}emStrongMask(e){return e}provideLexer(e=this.block){return e?x.lex:x.lexInline}provideParser(e=this.block){return e?b.parse:b.parseInline}};var D=class{defaults=z();options=this.setOptions;parse=this.parseMarkdown(!0);parseInline=this.parseMarkdown(!1);Parser=b;Renderer=y;TextRenderer=_;Lexer=x;Tokenizer=w;Hooks=P;constructor(...e){this.use(...e)}walkTokens(e,t){let n=[];for(let s of e)switch(n=n.concat(t.call(this,s)),s.type){case"table":{let r=s;for(let i of r.header)n=n.concat(this.walkTokens(i.tokens,t));for(let i of r.rows)for(let o of i)n=n.concat(this.walkTokens(o.tokens,t));break}case"list":{let r=s;n=n.concat(this.walkTokens(r.items,t));break}default:{let r=s;this.defaults.extensions?.childTokens?.[r.type]?this.defaults.extensions.childTokens[r.type].forEach(i=>{let o=r[i].flat(1/0);n=n.concat(this.walkTokens(o,t))}):r.tokens&&(n=n.concat(this.walkTokens(r.tokens,t)))}}return n}use(...e){let t=this.defaults.extensions||{renderers:{},childTokens:{}};return e.forEach(n=>{let s={...n};if(s.async=this.defaults.async||s.async||!1,n.extensions&&(n.extensions.forEach(r=>{if(!r.name)throw new Error("extension name required");if("renderer"in r){let i=t.renderers[r.name];i?t.renderers[r.name]=function(...o){let p=r.renderer.apply(this,o);return p===!1&&(p=i.apply(this,o)),p}:t.renderers[r.name]=r.renderer}if("tokenizer"in r){if(!r.level||r.level!=="block"&&r.level!=="inline")throw new Error("extension level must be 'block' or 'inline'");let i=t[r.level];i?i.unshift(r.tokenizer):t[r.level]=[r.tokenizer],r.start&&(r.level==="block"?t.startBlock?t.startBlock.push(r.start):t.startBlock=[r.start]:r.level==="inline"&&(t.startInline?t.startInline.push(r.start):t.startInline=[r.start]))}"childTokens"in r&&r.childTokens&&(t.childTokens[r.name]=r.childTokens)}),s.extensions=t),n.renderer){let r=this.defaults.renderer||new y(this.defaults);for(let i in n.renderer){if(!(i in r))throw new Error(`renderer '${i}' does not exist`);if(["options","parser"].includes(i))continue;let o=i,p=n.renderer[o],a=r[o];r[o]=(...u)=>{let c=p.apply(r,u);return c===!1&&(c=a.apply(r,u)),c||""}}s.renderer=r}if(n.tokenizer){let r=this.defaults.tokenizer||new w(this.defaults);for(let i in n.tokenizer){if(!(i in r))throw new Error(`tokenizer '${i}' does not exist`);if(["options","rules","lexer"].includes(i))continue;let o=i,p=n.tokenizer[o],a=r[o];r[o]=(...u)=>{let c=p.apply(r,u);return c===!1&&(c=a.apply(r,u)),c}}s.tokenizer=r}if(n.hooks){let r=this.defaults.hooks||new P;for(let i in n.hooks){if(!(i in r))throw new Error(`hook '${i}' does not exist`);if(["options","block"].includes(i))continue;let o=i,p=n.hooks[o],a=r[o];P.passThroughHooks.has(i)?r[o]=u=>{if(this.defaults.async&&P.passThroughHooksRespectAsync.has(i))return(async()=>{let h=await p.call(r,u);return a.call(r,h)})();let c=p.call(r,u);return a.call(r,c)}:r[o]=(...u)=>{if(this.defaults.async)return(async()=>{let h=await p.apply(r,u);return h===!1&&(h=await a.apply(r,u)),h})();let c=p.apply(r,u);return c===!1&&(c=a.apply(r,u)),c}}s.hooks=r}if(n.walkTokens){let r=this.defaults.walkTokens,i=n.walkTokens;s.walkTokens=function(o){let p=[];return p.push(i.call(this,o)),r&&(p=p.concat(r.call(this,o))),p}}this.defaults={...this.defaults,...s}}),this}setOptions(e){return this.defaults={...this.defaults,...e},this}lexer(e,t){return x.lex(e,t??this.defaults)}parser(e,t){return b.parse(e,t??this.defaults)}parseMarkdown(e){return(n,s)=>{let r={...s},i={...this.defaults,...r},o=this.onError(!!i.silent,!!i.async);if(this.defaults.async===!0&&r.async===!1)return o(new Error("marked(): The async option was set to true by an extension. Remove async: false from the parse options object to return a Promise."));if(typeof n>"u"||n===null)return o(new Error("marked(): input parameter is undefined or null"));if(typeof n!="string")return o(new Error("marked(): input parameter is of type "+Object.prototype.toString.call(n)+", string expected"));if(i.hooks&&(i.hooks.options=i,i.hooks.block=e),i.async)return(async()=>{let p=i.hooks?await i.hooks.preprocess(n):n,u=await(i.hooks?await i.hooks.provideLexer(e):e?x.lex:x.lexInline)(p,i),c=i.hooks?await i.hooks.processAllTokens(u):u;i.walkTokens&&await Promise.all(this.walkTokens(c,i.walkTokens));let d=await(i.hooks?await i.hooks.provideParser(e):e?b.parse:b.parseInline)(c,i);return i.hooks?await i.hooks.postprocess(d):d})().catch(o);try{i.hooks&&(n=i.hooks.preprocess(n));let a=(i.hooks?i.hooks.provideLexer(e):e?x.lex:x.lexInline)(n,i);i.hooks&&(a=i.hooks.processAllTokens(a)),i.walkTokens&&this.walkTokens(a,i.walkTokens);let c=(i.hooks?i.hooks.provideParser(e):e?b.parse:b.parseInline)(a,i);return i.hooks&&(c=i.hooks.postprocess(c)),c}catch(p){return o(p)}}}onError(e,t){return n=>{if(n.message+=`
+Please report this to https://github.com/markedjs/marked.`,e){let s="<p>An error occurred:</p><pre>"+O(n.message+"",!0)+"</pre>";return t?Promise.resolve(s):s}if(t)return Promise.reject(n);throw n}}};var C=new D;function g(l,e){return C.parse(l,e)}g.options=g.setOptions=function(l){return C.setOptions(l),g.defaults=C.defaults,F(g.defaults),g};g.getDefaults=z;g.defaults=R;function Re(...l){return C.use(...l),g.defaults=C.defaults,F(g.defaults),g}g.use=Re;g.walkTokens=function(l,e){return C.walkTokens(l,e)};g.parseInline=C.parseInline;g.Parser=b;g.parser=b.parse;g.Renderer=y;g.TextRenderer=_;g.Lexer=x;g.lexer=x.lex;g.Tokenizer=w;g.Hooks=P;g.parse=g;var Ot=g.options,wt=g.setOptions,yt=g.walkTokens,Pt=g.parseInline,St=g,_t=b.parse,$t=x.lex;
+
+if(__exports != exports)module.exports = exports;return module.exports}));
+//# sourceMappingURL=marked.umd.js.map
diff --git a/public/z-panel/admin.css b/public/z-panel/admin.css
new file mode 100644
index 0000000..cf1869b
--- /dev/null
+++ b/public/z-panel/admin.css
@@ -0,0 +1,772 @@
+:root {
+  --bg: #0b0f14;
+  --surface: #11161d;
+  --surface-2: #161d27;
+  --surface-3: #1b2430;
+  --border: #1f2a37;
+  --text: #e6ebf2;
+  --muted: #8b96a6;
+  --accent: #58a6ff;
+  --accent-dim: rgba(88, 166, 255, 0.14);
+  --ok: #34d399;
+  --ok-dim: rgba(52, 211, 153, 0.12);
+  --warn: #fbbf24;
+  --warn-dim: rgba(251, 191, 36, 0.12);
+  --err: #f87171;
+  --err-dim: rgba(248, 113, 113, 0.12);
+  --purple: #a78bfa;
+  --radius: 12px;
+  --shadow: 0 1px 0 rgba(255, 255, 255, 0.03), 0 10px 30px rgba(0, 0, 0, 0.35);
+}
+
+* { box-sizing: border-box; }
+
+html, body {
+  margin: 0;
+  padding: 0;
+  height: 100%;
+  overflow-x: clip;
+}
+
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif;
+  background:
+    radial-gradient(1000px 500px at 80% -10%, rgba(88, 166, 255, 0.07), transparent 60%),
+    radial-gradient(800px 400px at -10% 110%, rgba(167, 139, 250, 0.05), transparent 60%),
+    var(--bg);
+  color: var(--text);
+  line-height: 1.5;
+  font-size: 14px;
+}
+
+[hidden] { display: none !important; }
+
+/* ---------- Connexion ---------- */
+
+.login-view {
+  min-height: 100vh;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 24px;
+}
+
+.login-card {
+  width: 100%;
+  max-width: 400px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: 16px;
+  box-shadow: var(--shadow);
+  padding: 36px 32px 28px;
+}
+
+.brand { display: flex; align-items: center; gap: 10px; }
+
+.brand-mark {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 34px;
+  height: 34px;
+  border-radius: 9px;
+  background: var(--accent-dim);
+  color: var(--accent);
+}
+
+.brand-mark svg { width: 22px; height: 12px; }
+
+.brand-name {
+  font-weight: 700;
+  font-size: 17px;
+  letter-spacing: 0.02em;
+}
+
+.brand-login { margin-bottom: 22px; }
+
+.login-card h1 { margin: 0 0 4px; font-size: 20px; }
+
+.login-sub { margin: 0 0 22px; color: var(--muted); font-size: 13px; }
+
+.login-card form label {
+  display: block;
+  font-size: 12px;
+  font-weight: 600;
+  color: var(--muted);
+  margin: 0 0 6px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+}
+
+.pw-wrap { position: relative; margin-bottom: 14px; }
+
+.pw-wrap input {
+  width: 100%;
+  padding: 10px 40px 10px 12px;
+}
+
+.pw-eye {
+  position: absolute;
+  right: 4px;
+  top: 50%;
+  transform: translateY(-50%);
+  border: 0;
+  background: transparent;
+  color: var(--muted);
+  padding: 8px;
+  cursor: pointer;
+  border-radius: 8px;
+}
+
+.pw-eye:hover { color: var(--text); background: var(--surface-2); }
+
+.pw-eye svg { width: 18px; height: 18px; display: block; }
+
+input[type="text"], input[type="password"], select {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  color: var(--text);
+  padding: 9px 12px;
+  font: inherit;
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s;
+}
+
+input[type="text"]:focus, input[type="password"]:focus, select:focus {
+  border-color: var(--accent);
+  box-shadow: 0 0 0 3px var(--accent-dim);
+}
+
+.btn-primary {
+  background: var(--accent);
+  color: #04121f;
+  font-weight: 700;
+  border: 0;
+  border-radius: 10px;
+  padding: 11px 16px;
+  cursor: pointer;
+  transition: filter 0.15s, transform 0.05s;
+}
+
+.btn-primary:hover { filter: brightness(1.08); }
+.btn-primary:active { transform: translateY(1px); }
+.btn-primary:disabled { opacity: 0.6; cursor: not-allowed; }
+
+.btn-block { width: 100%; }
+
+.msg { margin: 12px 0 0; font-size: 13px; min-height: 18px; }
+.msg.err { color: var(--err); }
+.msg.ok { color: var(--ok); }
+
+/* ---------- Application : layout ---------- */
+
+.app { display: flex; min-height: 100vh; }
+
+.sidebar {
+  width: 230px;
+  flex-shrink: 0;
+  display: flex;
+  flex-direction: column;
+  background: var(--surface);
+  border-right: 1px solid var(--border);
+  padding: 18px 12px 14px;
+  position: sticky;
+  top: 0;
+  height: 100vh;
+}
+
+.sidebar .brand { padding: 0 10px; margin-bottom: 22px; }
+
+.side-nav { display: flex; flex-direction: column; gap: 2px; }
+
+.nav-item {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  background: transparent;
+  border: 0;
+  color: var(--muted);
+  font: inherit;
+  font-weight: 600;
+  text-align: left;
+  padding: 10px 12px;
+  border-radius: 9px;
+  cursor: pointer;
+  transition: background 0.15s, color 0.15s;
+}
+
+.nav-item svg { width: 17px; height: 17px; flex-shrink: 0; }
+
+.nav-item:hover { background: var(--surface-2); color: var(--text); }
+
+.nav-item.active {
+  background: var(--accent-dim);
+  color: var(--accent);
+}
+
+.side-foot { margin-top: auto; padding-top: 12px; border-top: 1px solid var(--border); }
+
+.btn-ghost {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  color: var(--text);
+  font: inherit;
+  font-weight: 600;
+  border-radius: 9px;
+  padding: 8px 12px;
+  cursor: pointer;
+  transition: background 0.15s, border-color 0.15s;
+}
+
+.btn-ghost:hover { background: var(--surface-3); border-color: #2b3949; }
+.btn-ghost.active {
+  background: rgba(88, 166, 255, 0.12);
+  border-color: rgba(88, 166, 255, 0.45);
+  color: var(--accent);
+}
+.btn-ghost svg { width: 15px; height: 15px; }
+
+.side-foot .btn-ghost { width: 100%; justify-content: center; }
+
+.main { flex: 1; min-width: 0; padding: 22px 28px 40px; }
+
+.topbar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  margin-bottom: 20px;
+  flex-wrap: wrap;
+}
+
+.topbar h1 { margin: 0; font-size: 20px; }
+
+.topbar-actions { display: flex; align-items: center; gap: 12px; }
+
+.updated { color: var(--muted); font-size: 12px; font-variant-numeric: tabular-nums; }
+
+/* ---------- Interrupteur auto ---------- */
+
+.switch {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  color: var(--muted);
+  font-size: 13px;
+  font-weight: 600;
+  cursor: pointer;
+}
+
+.switch input { position: absolute; opacity: 0; pointer-events: none; }
+
+.switch-track {
+  width: 34px;
+  height: 20px;
+  border-radius: 20px;
+  background: var(--surface-3);
+  border: 1px solid var(--border);
+  position: relative;
+  transition: background 0.15s;
+}
+
+.switch-track::after {
+  content: "";
+  position: absolute;
+  top: 2px;
+  left: 2px;
+  width: 14px;
+  height: 14px;
+  border-radius: 50%;
+  background: var(--muted);
+  transition: transform 0.15s, background 0.15s;
+}
+
+.switch input:checked + .switch-track { background: var(--accent-dim); border-color: var(--accent); }
+.switch input:checked + .switch-track::after { transform: translateX(14px); background: var(--accent); }
+.switch input:focus-visible + .switch-track { box-shadow: 0 0 0 3px var(--accent-dim); }
+
+/* ---------- Cartes & grilles ---------- */
+
+.card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  padding: 18px 20px;
+  margin-bottom: 20px;
+}
+
+.card-head {
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 12px;
+}
+
+.card-head h2 { margin: 0; font-size: 14px; text-transform: uppercase; letter-spacing: 0.06em; color: var(--muted); }
+
+.meta { color: var(--muted); font-size: 12px; }
+
+.muted { color: var(--muted); }
+
+.grid-2 {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 20px;
+  align-items: start;
+}
+
+.stat-grid {
+  display: grid;
+  grid-template-columns: repeat(6, 1fr);
+  gap: 14px;
+  margin-bottom: 20px;
+}
+
+.stat-card {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  box-shadow: var(--shadow);
+  padding: 14px 16px;
+}
+
+.stat-icon {
+  width: 40px;
+  height: 40px;
+  border-radius: 10px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+}
+
+.stat-icon svg { width: 20px; height: 20px; }
+
+.ic-total { background: var(--accent-dim); color: var(--accent); }
+.ic-ok { background: var(--ok-dim); color: var(--ok); }
+.ic-warn { background: var(--warn-dim); color: var(--warn); }
+.ic-err { background: var(--err-dim); color: var(--err); }
+.ic-info { background: rgba(167, 139, 250, 0.12); color: var(--purple); }
+
+.stat-body { display: flex; flex-direction: column; min-width: 0; }
+
+.stat-value { font-size: 22px; font-weight: 700; line-height: 1.1; font-variant-numeric: tabular-nums; }
+
+.stat-label { color: var(--muted); font-size: 12px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+
+/* ---------- Tableaux ---------- */
+
+.table-scroll { overflow-x: auto; }
+
+table { width: 100%; border-collapse: collapse; font-size: 13px; }
+
+thead th {
+  text-align: left;
+  color: var(--muted);
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  padding: 8px 10px;
+  border-bottom: 1px solid var(--border);
+  white-space: nowrap;
+}
+
+tbody td {
+  padding: 8px 10px;
+  border-bottom: 1px solid var(--border);
+  vertical-align: middle;
+}
+
+tbody tr:hover { background: var(--surface-2); }
+
+td.uri {
+  max-width: 380px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  font-family: ui-monospace, SFMono-Regular, "SF Mono", Menlo, Consolas, monospace;
+  font-size: 12px;
+}
+
+td.mono, .ip { font-family: ui-monospace, SFMono-Regular, "SF Mono", Menlo, Consolas, monospace; font-size: 12px; }
+
+.pill {
+  display: inline-flex;
+  align-items: center;
+  min-width: 44px;
+  justify-content: center;
+  padding: 2px 8px;
+  border-radius: 999px;
+  font-size: 12px;
+  font-weight: 700;
+  font-variant-numeric: tabular-nums;
+}
+
+.pill.s2xx { background: var(--ok-dim); color: var(--ok); }
+.pill.s3xx { background: rgba(88, 166, 255, 0.12); color: var(--accent); }
+.pill.s4xx { background: var(--warn-dim); color: var(--warn); }
+.pill.s5xx { background: var(--err-dim); color: var(--err); }
+.pill.s0 { background: var(--err-dim); color: var(--err); }
+
+.hit { font-variant-numeric: tabular-nums; }
+
+/* ---------- Graphique ---------- */
+
+.chart { background: var(--surface-2); border: 1px solid var(--border); border-radius: 10px; padding: 10px 8px 0; }
+.chart-svg { width: 100%; height: auto; display: block; }
+
+.legend {
+  display: flex;
+  gap: 16px;
+  justify-content: center;
+  margin-top: 12px;
+}
+
+.lg { display: inline-flex; align-items: center; gap: 6px; color: var(--muted); font-size: 12px; }
+.lg::before { content: ""; width: 10px; height: 10px; border-radius: 3px; }
+.lg-ok::before { background: var(--ok); }
+.lg-redir::before { background: var(--accent); }
+.lg-err4::before { background: var(--warn); }
+.lg-err5::before { background: var(--err); }
+
+/* ---------- Filtres logs ---------- */
+
+.filters {
+  display: flex;
+  gap: 10px;
+  margin-bottom: 14px;
+  flex-wrap: wrap;
+}
+
+.filters input { flex: 1; min-width: 200px; }
+
+/* ---------- Système ---------- */
+
+.sys-grid-mini .stat-grid { grid-template-columns: repeat(3, 1fr); }
+
+#disk pre {
+  margin: 0;
+  padding: 14px;
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  overflow-x: auto;
+  font-family: ui-monospace, SFMono-Regular, "SF Mono", Menlo, Consolas, monospace;
+  font-size: 12px;
+  color: var(--text);
+}
+
+/* ---------- Redémarrage ---------- */
+
+.restart-actions {
+  display: flex;
+  gap: 14px;
+  margin-top: 18px;
+  flex-wrap: wrap;
+}
+
+.btn-danger {
+  display: inline-flex;
+  align-items: center;
+  gap: 9px;
+  background: var(--err-dim);
+  border: 1px solid rgba(248, 113, 113, 0.4);
+  color: var(--err);
+  font: inherit;
+  font-weight: 700;
+  border-radius: 10px;
+  padding: 11px 16px;
+  cursor: pointer;
+  transition: background 0.15s;
+}
+
+.btn-danger:hover { background: rgba(248, 113, 113, 0.2); }
+.btn-danger:disabled { opacity: 0.6; cursor: not-allowed; }
+.btn-danger svg { width: 17px; height: 17px; }
+
+/* ---------- Articles & traductions ---------- */
+
+.head-actions { display: flex; align-items: center; gap: 10px; }
+
+.btn-sm { padding: 5px 9px; font-size: 12px; border-radius: 7px; }
+.btn-sm svg { width: 13px; height: 13px; }
+
+.row-actions { display: flex; gap: 6px; flex-wrap: wrap; }
+
+.col-actions { width: 1%; white-space: nowrap; }
+
+.badge-ban {
+  display: inline-block;
+  padding: 2px 8px;
+  border-radius: 999px;
+  font-size: 11px;
+  font-weight: 700;
+  background: rgba(248, 113, 113, 0.18);
+  color: #fca5a5;
+  border: 1px solid rgba(248, 113, 113, 0.4);
+}
+
+.hp-ends { min-width: 180px; }
+
+.hp-end {
+  display: inline-block;
+  margin: 1px 3px 1px 0;
+  padding: 1px 7px;
+  border-radius: 999px;
+  font-family: ui-monospace, SFMono-Regular, "SF Mono", Menlo, Consolas, monospace;
+  font-size: 11px;
+  background: var(--surface-3);
+  color: var(--muted);
+}
+.form-grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 12px 16px;
+  margin-bottom: 12px;
+}
+
+.field { display: flex; flex-direction: column; gap: 5px; }
+
+.field > span {
+  font-size: 11px;
+  font-weight: 600;
+  color: var(--muted);
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+}
+
+input[type="date"] {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  color: var(--text);
+  padding: 9px 12px;
+  font: inherit;
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s;
+}
+
+input[type="date"]:focus {
+  border-color: var(--accent);
+  box-shadow: 0 0 0 3px var(--accent-dim);
+}
+
+textarea {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  color: var(--text);
+  padding: 9px 12px;
+  font: inherit;
+  outline: none;
+  resize: vertical;
+  transition: border-color 0.15s, box-shadow 0.15s;
+}
+
+textarea:focus {
+  border-color: var(--accent);
+  box-shadow: 0 0 0 3px var(--accent-dim);
+}
+
+.rules-editor { margin-top: 14px; }
+
+.rules-editor textarea {
+  width: 100%;
+  min-height: 320px;
+  font-family: ui-monospace, SFMono-Regular, "SF Mono", Menlo, Consolas, monospace;
+  font-size: 13px;
+  line-height: 1.5;
+}
+
+.lang-pane legend .btn-ghost {
+  margin-left: 8px;
+  font-size: 12px;
+  text-transform: none;
+  letter-spacing: normal;
+}
+
+.md-tools {
+  display: flex;
+  justify-content: flex-end;
+  margin-top: 6px;
+}
+
+.md-preview {
+  margin-top: 10px;
+  padding: 12px 14px;
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  font-size: 14px;
+  line-height: 1.6;
+}
+
+.md-preview p:first-child { margin-top: 0; }
+.md-preview p:last-child { margin-bottom: 0; }
+
+.lang-pane {
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: 14px 16px 16px;
+  margin: 0 0 16px;
+}
+
+.lang-pane legend {
+  font-size: 12px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: var(--accent);
+  padding: 0 6px;
+}
+
+.form-actions {
+  display: flex;
+  gap: 10px;
+  align-items: center;
+  flex-wrap: wrap;
+}
+
+.form-actions .btn-danger { margin-left: auto; }
+
+.trans-key {
+  max-width: 260px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  font-size: 12px;
+}
+
+.trans-val {
+  width: 100%;
+  min-width: 220px;
+  resize: vertical;
+  padding: 6px 8px;
+  border-radius: 7px;
+  font-size: 12px;
+  overflow: hidden;
+}
+
+@media (max-width: 900px) {
+  .form-grid { grid-template-columns: 1fr; }
+}
+
+/* ---------- Responsive ---------- */
+
+@media (max-width: 1080px) {
+  .stat-grid { grid-template-columns: repeat(3, 1fr); }
+  .grid-2 { grid-template-columns: 1fr; }
+}
+
+@media (max-width: 720px) {
+  .app { flex-direction: column; }
+
+  .sidebar {
+    width: 100%;
+    height: auto;
+    position: sticky;
+    top: 0;
+    z-index: 20;
+    flex-direction: row;
+    flex-wrap: wrap;
+    align-items: center;
+    gap: 10px;
+    padding: 10px 12px;
+    border-right: 0;
+    border-bottom: 1px solid var(--border);
+  }
+
+  .sidebar .brand { margin-bottom: 0; padding: 0 4px; }
+
+  .side-foot { order: 2; margin: 0 0 0 auto; padding: 0; border: 0; }
+
+  .side-foot .btn-ghost { width: auto; padding: 8px 10px; }
+
+  .side-nav {
+    order: 3;
+    flex-basis: 100%;
+    flex-direction: row;
+    gap: 4px;
+    overflow-x: auto;
+    -webkit-overflow-scrolling: touch;
+    padding-bottom: 4px;
+  }
+
+  .nav-item { white-space: nowrap; flex-shrink: 0; padding: 8px 10px; }
+  .nav-item span { display: none; }
+  .side-foot .btn-ghost span { display: none; }
+
+  .main { padding: 16px; }
+  .stat-grid { grid-template-columns: repeat(2, 1fr); }
+  .topbar h1 { font-size: 17px; }
+
+  .card-head { flex-wrap: wrap; }
+  .head-actions { flex-wrap: wrap; }
+
+  .filters input { flex: 1 1 100%; min-width: 0; }
+  .filters select { flex: 1 1 100%; }
+
+  .form-actions .btn-danger { margin-left: 0; }
+
+  #log-table, #trans-table { min-width: 600px; }
+}
+
+@media (max-width: 480px) {
+  .login-view { padding: 16px; }
+  .login-card { padding: 26px 20px 22px; }
+  .login-card h1 { font-size: 18px; }
+
+  .main { padding: 12px; }
+
+  .card { padding: 14px; }
+  .card-head { gap: 8px; }
+
+  .stat-grid { gap: 10px; }
+  .stat-card { padding: 10px 12px; gap: 10px; }
+  .stat-icon { width: 34px; height: 34px; }
+  .stat-icon svg { width: 17px; height: 17px; }
+  .stat-value { font-size: 19px; }
+
+  .topbar-actions { width: 100%; justify-content: space-between; flex-wrap: wrap; row-gap: 6px; }
+  .updated { font-size: 11px; }
+
+  .legend { gap: 10px; flex-wrap: wrap; }
+
+  .lang-pane { padding: 12px; }
+  .lang-pane legend { display: flex; flex-wrap: wrap; gap: 6px; align-items: center; }
+
+  .form-actions .btn { flex: 1 1 auto; justify-content: center; }
+  .restart-actions .btn-danger { flex: 1 1 100%; justify-content: center; }
+}
+
+/* ---------- ZMap build ---------- */
+
+.build-bars { display: flex; flex-direction: column; gap: 8px; }
+.bar-row { display: flex; align-items: center; gap: 10px; }
+.bar-label { width: 110px; font-size: 12px; color: var(--dim); text-align: right; }
+.bar-track { flex: 1; height: 8px; background: var(--border); border-radius: 4px; overflow: hidden; }
+.bar-fill { height: 100%; background: var(--accent); border-radius: 4px; transition: width 0.3s; }
+.bar-pct { width: 40px; font-size: 12px; font-variant-numeric: tabular-nums; color: var(--dim); }
+
+.build-log {
+  max-height: 320px;
+  overflow: auto;
+  font-size: 12px;
+  font-family: var(--font-mono, monospace);
+  line-height: 1.5;
+  white-space: pre-wrap;
+  word-break: break-all;
+  margin: 0;
+  padding: 12px;
+  background: var(--bg);
+  border-radius: var(--radius);
+  color: var(--dim);
+}
diff --git a/public/z-panel/admin.js b/public/z-panel/admin.js
new file mode 100644
index 0000000..08dd8ae
--- /dev/null
+++ b/public/z-panel/admin.js
@@ -0,0 +1,1035 @@
+"use strict";
+
+const API = {
+  state: "/z-panel/state",
+  setup: "/z-panel/setup",
+  login: "/z-panel/login",
+  me: "/z-panel/me",
+  stats: "/z-panel/api/stats",
+  timeline: "/z-panel/api/timeline",
+  logs: "/z-panel/api/logs",
+  system: "/z-panel/api/system",
+  restart: "/z-panel/api/restart",
+  articles: "/z-panel/api/articles",
+  i18n: "/z-panel/api/i18n",
+  rules: "/z-panel/api/rules",
+  honeypot: "/z-panel/api/honeypot",
+  zmap: "/z-panel/api/zmap",
+};
+
+const TOKEN_KEY = "zektyc_admin_token";
+const REFRESH_MS = 15000;
+
+const $ = (id) => document.getElementById(id);
+
+let authMode = "login";
+let token = sessionStorage.getItem(TOKEN_KEY) || "";
+let autoTimer = null;
+let logTimer = null;
+
+function authHeaders() {
+  return token ? { Authorization: "Bearer " + token } : {};
+}
+
+async function api(path, opts = {}) {
+  const headers = Object.assign({}, opts.headers || {}, authHeaders());
+  if (opts.body) headers["Content-Type"] = "application/json";
+  const res = await fetch(path, Object.assign({}, opts, { headers }));
+  let data = null;
+  try {
+    data = await res.json();
+  } catch {}
+  if (res.status === 401 && !opts._noAuth) {
+    clearSession();
+    throw new Error("Session expirée");
+  }
+  return { status: res.status, data };
+}
+
+function clearSession() {
+  token = "";
+  sessionStorage.removeItem(TOKEN_KEY);
+  $("app").hidden = true;
+  $("login").hidden = false;
+  setAuthMode("login");
+}
+
+function fmtDate(ts) {
+  const d = new Date(ts * 1000);
+  const p = (n) => String(n).padStart(2, "0");
+  return `${p(d.getDate())}/${p(d.getMonth() + 1)} ${p(d.getHours())}:${p(d.getMinutes())}:${p(d.getSeconds())}`;
+}
+
+function fmtBytes(n) {
+  if (n == null) return "-";
+  if (n < 1024) return n + " B";
+  if (n < 1024 * 1024) return (n / 1024).toFixed(1) + " Ko";
+  if (n < 1024 * 1024 * 1024) return (n / 1024 / 1024).toFixed(1) + " Mo";
+  return (n / 1024 / 1024 / 1024).toFixed(2) + " Go";
+}
+
+function fmtUptime(s) {
+  if (s == null) return "-";
+  const d = Math.floor(s / 86400);
+  const h = Math.floor((s % 86400) / 3600);
+  const m = Math.floor((s % 3600) / 60);
+  if (d > 0) return `${d} j ${h} h ${m} min`;
+  if (h > 0) return `${h} h ${m} min`;
+  return `${m} min`;
+}
+
+function pillClass(status) {
+  const s = Number(status);
+  if (s >= 500) return "s5xx";
+  if (s >= 400) return "s4xx";
+  if (s >= 300) return "s3xx";
+  if (s >= 200) return "s2xx";
+  return "s0";
+}
+
+function esc(s) {
+  return String(s ?? "").replace(/[&<>"']/g, (c) =>
+    ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]
+  );
+}
+
+/* ---------- Authentification ---------- */
+
+function setAuthMode(mode) {
+  authMode = mode;
+  const btn = $("auth-btn");
+  if (mode === "setup") {
+    $("auth-form").querySelector("label").textContent = "Définir un mot de passe";
+    btn.textContent = "Configurer et se connecter";
+    $("password").autocomplete = "new-password";
+  } else {
+    $("auth-form").querySelector("label").textContent = "Mot de passe";
+    btn.textContent = "Connexion";
+    $("password").autocomplete = "current-password";
+  }
+}
+
+function setMsg(text, cls) {
+  const m = $("auth-msg");
+  m.textContent = text;
+  m.className = "msg" + (cls ? " " + cls : "");
+}
+
+async function initAuth() {
+  $("app").hidden = true;
+  $("login").hidden = false;
+  if (token) {
+    const r = await api(API.me, { _noAuth: true });
+    if (r.status === 200) {
+      $("login").hidden = true;
+      $("app").hidden = false;
+      startAutoRefresh();
+      return;
+    }
+    token = "";
+    sessionStorage.removeItem(TOKEN_KEY);
+  }
+  const st = await api(API.state, { _noAuth: true });
+  if (st.status !== 200) {
+    setMsg("Impossible de contacter le serveur.", "err");
+    return;
+  }
+  setAuthMode(st.data && st.data.configured ? "login" : "setup");
+  if (st.data && st.data.configured === false) {
+    setMsg("Premier lancement : définissez votre mot de passe.", "");
+  }
+}
+
+async function submitAuth(e) {
+  e.preventDefault();
+  const password = $("password").value;
+  setMsg("", "");
+  $("auth-btn").disabled = true;
+  try {
+    if (authMode === "setup") {
+      const s = await api(API.setup, { method: "POST", body: JSON.stringify({ password }) });
+      if (s.status !== 200) {
+        setMsg(s.data && s.data.error ? s.data.error : "Erreur", "err");
+        return;
+      }
+    }
+    const r = await api(API.login, { method: "POST", body: JSON.stringify({ password }) });
+    if (r.status === 429) {
+      setMsg("Trop de tentatives. Réessayez dans quelques minutes.", "err");
+      return;
+    }
+    if (r.status === 401) {
+      setMsg("Mot de passe incorrect.", "err");
+      return;
+    }
+    if (r.status === 409) {
+      setAuthMode("login");
+      setMsg("Le mot de passe a déjà été configuré. Connectez-vous.", "err");
+      return;
+    }
+    if (r.status !== 200) {
+      setMsg(r.data && r.data.error ? r.data.error : "Erreur", "err");
+      return;
+    }
+    token = r.data.token;
+    sessionStorage.setItem(TOKEN_KEY, token);
+    $("password").value = "";
+    setMsg("", "");
+    $("login").hidden = true;
+    $("app").hidden = false;
+    startAutoRefresh();
+  } catch (err) {
+    setMsg(err.message || "Erreur réseau", "err");
+  } finally {
+    $("auth-btn").disabled = false;
+  }
+}
+
+/* ---------- Navigation par onglets ---------- */
+
+const TITLES = {
+  dash: "Tableau de bord",
+  logs: "Logs",
+  system: "Système",
+  articles: "Articles",
+  trans: "Traductions",
+  rules: "Règles Discord",
+  honeypot: "Honeypot",
+  zmap: "ZMap",
+  restart: "Redémarrage",
+};
+
+function switchTab(name) {
+  for (const b of document.querySelectorAll(".nav-item")) {
+    b.classList.toggle("active", b.dataset.tab === name);
+  }
+  for (const sec of document.querySelectorAll(".tab")) {
+    sec.hidden = sec.id !== "tab-" + name;
+  }
+  $("page-title").textContent = TITLES[name];
+  if (name === "logs") loadLogs();
+  if (name === "system") loadSystem();
+  if (name === "zmap") loadZmap();
+  if (name === "articles") loadArticles();
+  if (name === "trans") loadTranslations();
+  if (name === "rules") loadRules();
+  if (name === "honeypot") loadHoneypot();
+}
+
+/* ---------- Tableau de bord ---------- */
+
+async function loadDashboard() {
+  const [statsRes, tlRes] = await Promise.all([api(API.stats), api(API.timeline)]);
+  if (statsRes.status !== 200 || tlRes.status !== 200) throw new Error("stats");
+  renderStats(statsRes.data);
+  renderTimeline(tlRes.data);
+}
+
+function renderStats(s) {
+  const total = s.total || 0;
+  const by = s.byStatus || {};
+  const cards = [
+    [total, "requêtes", "stat-value"],
+    [by["200"] ?? 0, "200 OK", "stat-value"],
+    [by["404"] ?? 0, "404 bloqués", "stat-value"],
+    [by["429"] ?? 0, "429 rate-limit", "stat-value"],
+    [by["405"] ?? 0, "405 refusés", "stat-value"],
+    [Object.keys(by).length, "statuts distincts", "stat-value"],
+  ];
+  document.querySelectorAll("#stat-cards .stat-card").forEach((card, i) => {
+    const [v, label] = cards[i];
+    card.querySelector(".stat-value").textContent = v.toLocaleString("fr-FR");
+    card.querySelector(".stat-label").textContent = label;
+  });
+  const blocked = s.blocked || [];
+  $("blocked-count").textContent = blocked.length + " cibles";
+  if (blocked.length === 0) {
+    $("blocked-table").innerHTML = '<p class="meta">Aucun 404.</p>';
+  } else {
+    $("blocked-table").innerHTML =
+      "<table><thead><tr><th>Chemin</th><th>Hits</th></tr></thead><tbody>" +
+      blocked
+        .map(
+          ([uri, n]) =>
+            `<tr><td class="uri">${esc(uri)}</td><td class="hit"><b>${n.toLocaleString("fr-FR")}</b></td></tr>`
+        )
+        .join("") +
+      "</tbody></table>";
+  }
+  const by429 = Object.entries(s.by429 || {}).sort((a, b) => b[1] - a[1]).slice(0, 10);
+  $("ratelimit-count").textContent = by429.length + " IP";
+  if (by429.length === 0) {
+    $("ratelimit-table").innerHTML = '<p class="meta">Aucun 429.</p>';
+  } else {
+    $("ratelimit-table").innerHTML =
+      "<table><thead><tr><th>IP</th><th>Limitations</th></tr></thead><tbody>" +
+      by429
+        .map(
+          ([ip, n]) =>
+            `<tr><td class="ip">${esc(ip)}</td><td class="hit"><b>${n.toLocaleString("fr-FR")}</b></td></tr>`
+        )
+        .join("") +
+      "</tbody></table>";
+  }
+}
+
+function renderTimeline(data) {
+  const W = 900;
+  const H = 160;
+  const padB = 26;
+  const padT = 8;
+  const n = data.length;
+  const max = Math.max.apply(null, data.map((d) => d.total).concat([1]));
+  const band = W / n;
+  const bw = Math.max(band * 0.6, 1);
+  const plotH = H - padB - padT;
+  const seg = (v) => Math.round((v / max) * plotH);
+
+  let rects = "";
+  let labels = "";
+  data.forEach((d, i) => {
+    const x = i * band + (band - bw) / 2;
+    let y = padT + plotH;
+    const stack = [];
+    if (d.ok) stack.push(["#34d399", d.ok]);
+    if (d.redir) stack.push(["#58a6ff", d.redir]);
+    if (d.err4) stack.push(["#fbbf24", d.err4]);
+    if (d.err5) stack.push(["#f87171", d.err5]);
+    if (d.total === 0) {
+      rects += `<rect x="${x.toFixed(1)}" y="${(padT + plotH - 1).toFixed(1)}" width="${bw.toFixed(1)}" height="1" fill="#1b2430"/>`;
+    }
+    const tooltip =
+      `<title>${fmtDate(d.hour)} : ${d.total} req` +
+      (d.ok ? ` · ${d.ok} OK` : "") +
+      (d.err4 ? ` · ${d.err4} 4xx` : "") +
+      (d.err5 ? ` · ${d.err5} 5xx` : "") +
+      `</title>`;
+    for (const [color, v] of stack) {
+      const h = seg(v);
+      y -= h;
+      rects += `<rect x="${x.toFixed(1)}" y="${y.toFixed(1)}" width="${bw.toFixed(1)}" height="${h}" fill="${color}" rx="1">${tooltip}</rect>`;
+    }
+    if (i % 6 === 0) {
+      const h = new Date(d.hour * 1000).getHours();
+      labels += `<text x="${(x + band / 2).toFixed(1)}" y="${H - 8}" text-anchor="middle" font-size="10" fill="#8b96a6">${h}h</text>`;
+    }
+  });
+
+  const first = data[0];
+  const last = data[n - 1];
+  $("chart-meta").textContent = `${fmtDate(first.hour)} → ${fmtDate(last.hour)}`;
+  $("chart").innerHTML = n
+    ? `<svg class="chart-svg" viewBox="0 0 ${W} ${H}" role="img" aria-label="Requêtes par heure">${rects}${labels}</svg>`
+    : '<p class="meta">Aucune donnée.</p>';
+}
+
+/* ---------- Logs ---------- */
+
+let logFilterTimer = null;
+const LOG_EXCLUDE_KEY = "zektyc_log_exclude";
+let logExclude = localStorage.getItem(LOG_EXCLUDE_KEY) !== "0";
+
+function renderLogExclude() {
+  const btn = $("log-exclude");
+  btn.setAttribute("aria-pressed", String(logExclude));
+  btn.classList.toggle("active", logExclude);
+  $("log-exclude-label").textContent = logExclude ? "Masquer le bruit" : "Tout afficher";
+}
+
+function setLogExclude(v) {
+  logExclude = v;
+  localStorage.setItem(LOG_EXCLUDE_KEY, v ? "1" : "0");
+  renderLogExclude();
+  loadLogs();
+}
+
+async function loadLogs() {
+  const filter = $("log-filter").value.trim();
+  const status = $("log-status").value;
+  const q = new URLSearchParams({ lines: "300" });
+  if (filter) q.set("filter", filter);
+  if (status) q.set("status", status);
+  if (logExclude) q.set("exclude", "1");
+  const r = await api(API.logs + "?" + q.toString());
+  if (r.status !== 200) return;
+  const { entries, total, truncated, returned } = r.data;
+  $("log-meta").textContent =
+    `${returned} affichées · ${total.toLocaleString("fr-FR")} au total` + (truncated ? " · tronqué" : "");
+  const tbody = $("log-table").querySelector("tbody");
+  if (entries.length === 0) {
+    tbody.innerHTML = '<tr><td colspan="7" class="meta">Aucune entrée.</td></tr>';
+    return;
+  }
+  tbody.innerHTML = entries
+    .slice()
+    .reverse()
+    .map((e) => {
+      const d =
+        typeof e.duration === "number"
+          ? (e.duration < 100 ? e.duration.toFixed(1) : Math.round(e.duration)) + " ms"
+          : "-";
+      const ua = (e.ua || "-").length > 60 ? (e.ua || "-").slice(0, 60) + "…" : e.ua || "-";
+      return `<tr>
+        <td class="mono">${fmtDate(e.ts)}</td>
+        <td class="ip">${esc(e.ip)}</td>
+        <td>${esc(e.method)}</td>
+        <td class="uri" title="${esc(e.uri)}">${esc(e.uri)}</td>
+        <td><span class="pill ${pillClass(e.status)}">${esc(e.status)}</span></td>
+        <td class="hit">${d}</td>
+        <td class="muted" title="${esc(e.ua)}">${esc(ua)}</td>
+      </tr>`;
+    })
+    .join("");
+}
+
+/* ---------- Système ---------- */
+
+function fmtLoadAvg(la, cpus) {
+  if (!la) return "-";
+  const parts = la.split(" ");
+  const cores = typeof cpus === "number" ? cpus : parts.length > 3 ? parts[3].split("/")[1] : null;
+  return `${parts[0]} / ${parts[1]} / ${parts[2]}` + (cores ? ` (${cores} cœur${cores > 1 ? "s" : ""})` : "");
+}
+
+async function loadSystem() {
+  const r = await api(API.system);
+  if (r.status !== 200) return;
+  const s = r.data;
+  const mem = s.mem || {};
+  const total = mem.MemTotal || 0;
+  const available = mem.MemAvailable ?? total;
+  const used = Math.max(total - available, 0);
+  const pct = total ? Math.round((used / total) * 100) : 0;
+
+  const cards = [
+    [fmtUptime(s.uptime), "uptime"],
+    [fmtLoadAvg(s.loadavg, s.cpus), "charge CPU (1/5/15)"],
+    [`${pct} % · ${fmtBytes(used)}`, "mémoire utilisée"],
+    [String(s.procs ? s.procs.length : 0), "processus suivis"],
+  ];
+  $("sys-grid").innerHTML = cards
+    .map(
+      ([v, label]) => `<div class="stat-card">
+        <div class="stat-body"><b class="stat-value">${esc(v)}</b><span class="stat-label">${esc(label)}</span></div>
+      </div>`
+    )
+    .join("");
+
+  if (!s.procs || s.procs.length === 0) {
+    $("procs").innerHTML = '<p class="meta">Aucun processus.</p>';
+  } else {
+    $("procs").innerHTML =
+      "<table><thead><tr><th>Nom</th><th>PID</th><th>RAM</th><th>Commande</th></tr></thead><tbody>" +
+      s.procs
+        .sort((a, b) => (b.rss || 0) - (a.rss || 0))
+        .map(
+          (p) =>
+            `<tr><td>${esc(p.name)}</td><td class="ip">${p.pid}</td><td class="hit">${fmtBytes(p.rss)}</td><td class="uri" title="${esc(p.cmd)}">${esc(p.cmd)}</td></tr>`
+        )
+        .join("") +
+      "</tbody></table>";
+  }
+
+  if (!s.disk) {
+    $("disk").innerHTML = '<p class="meta">Indisponible.</p>';
+  } else {
+    const rows = s.disk.slice(1).map((line) => line.trim().split(/\s+/));
+    $("disk").innerHTML =
+      "<table><thead><tr><th>Fichier</th><th>Taille</th><th>Utilisé</th><th>Disponible</th><th>%</th><th>Monté sur</th></tr></thead><tbody>" +
+      rows
+        .map(
+          (c) =>
+            `<tr><td class="ip">${esc(c[0])}</td><td class="hit">${fmtBytes(Number(c[1]) * 1024)}</td><td class="hit">${fmtBytes(Number(c[2]) * 1024)}</td><td class="hit">${fmtBytes(Number(c[3]) * 1024)}</td><td class="hit">${esc(c[4])}</td><td>${esc(c[5])}</td></tr>`
+        )
+        .join("") +
+      "</tbody></table>";
+  }
+}
+
+/* ---------- ZMap ---------- */
+
+async function loadZmap() {
+  const r = await api(API.zmap);
+  if (r.status !== 200) return;
+  const d = r.data;
+  const b = d.build || {};
+  const grids = d.grids || {};
+
+  // stat cards
+  const bRunning = b.running;
+  const bPass = b.done ? "terminé" : b.pass ? `pass ${b.pass}` : "—";
+  const bWays = b.ways ? `${(b.ways / 1e6).toFixed(1)}M` : "—";
+  const bNodes = b.nodes ? `${(b.nodes / 1e6).toFixed(1)}M` : "—";
+  const bRss = b.rss ? fmtBytes(b.rss) : "—";
+  const cards = [
+    [bRunning ? "En cours" : (b.done ? "Terminé" : "Arrêté"), "état build"],
+    [bPass, "pass actuel"],
+    [bWays, "ways traités"],
+    [bNodes, "nœuds collectés"],
+    [bRss, "RAM build"],
+    [grids.europe ? fmtBytes(grids.europe.totalSize) : "—", "grille Europe"],
+    [grids.planet ? fmtBytes(grids.planet.totalSize) : "—", "grille Monde"],
+  ];
+  $("zmap-grid").innerHTML = cards.map(([v, label]) =>
+    `<div class="stat-card"><div class="stat-body"><b class="stat-value">${esc(v)}</b><span class="stat-label">${esc(label)}</span></div></div>`
+  ).join("");
+
+  // build info
+  $("zmap-build-meta").textContent = b.pid ? `PID ${b.pid}` : "";
+  if (b.done) {
+    $("zmap-build-info").innerHTML = '<p class="meta">Build terminé.</p>';
+  } else if (!b.running) {
+    $("zmap-build-info").innerHTML = '<p class="meta">Aucun build en cours.</p>';
+  } else {
+    const pctWays = b.ways ? Math.min(100, Math.round((b.ways / 50e6) * 100)) : 0;
+    const pctNodes = b.nodes ? Math.min(100, Math.round((b.nodes / 500e6) * 100)) : 0;
+    const bar = (pct, label) => `<div class="bar-row"><span class="bar-label">${label}</span><div class="bar-track"><div class="bar-fill" style="width:${pct}%"></div></div><span class="bar-pct">${pct}%</span></div>`;
+    $("zmap-build-info").innerHTML =
+      `<div class="build-bars">${bar(pctWays, "Ways (~50M)")}${bar(pctNodes, "Nœuds (~500M)")}</div>`;
+  }
+
+  // grids
+  $("zmap-grids-meta").textContent = "";
+  const gNames = { europe: "Europe", planet: "Monde" };
+  let gHtml = '<table><thead><tr><th>Grille</th><th>Points</th><th>Cellules</th><th>Taille gzip</th><th>Couverture</th></tr></thead><tbody>';
+  for (const [key, label] of Object.entries(gNames)) {
+    const g = grids[key];
+    if (g) {
+      const cover = (g.lonMin != null) ? `${g.lonMin}°…${g.lonMax}° lon, ${g.latMin}°…${g.latMax}° lat` : "—";
+      gHtml += `<tr><td>${esc(label)}</td><td class="hit">${g.points?.toLocaleString("fr-FR") ?? "—"}</td><td class="hit">${g.cells?.toLocaleString("fr-FR") ?? "—"}</td><td class="hit">${fmtBytes(g.totalSize)}</td><td class="uri">${esc(cover)}</td></tr>`;
+    } else {
+      gHtml += `<tr><td>${esc(label)}</td><td colspan="4" class="meta">pas encore construite</td></tr>`;
+    }
+  }
+  gHtml += '</tbody></table>';
+  $("zmap-grids-info").innerHTML = gHtml;
+
+  // log
+  const logLines = b.log || [];
+  $("zmap-build-log").textContent = logLines.join("\n") || "Aucun log.";
+}
+
+/* ---------- Articles ---------- */
+
+let articleSlug = null;
+
+function setArticleMsg(text, cls) {
+  const m = $("art-msg");
+  m.textContent = text;
+  m.className = "msg" + (cls ? " " + cls : "");
+}
+
+async function loadArticles() {
+  const r = await api(API.articles);
+  if (r.status !== 200) return;
+  const list = r.data || [];
+  $("articles-meta").textContent = list.length + " article" + (list.length > 1 ? "s" : "");
+  if (list.length === 0) {
+    $("articles-list").innerHTML = '<p class="meta">Aucun article. Créez le premier.</p>';
+    return;
+  }
+  $("articles-list").innerHTML =
+    "<table><thead><tr><th>Slug</th><th>Titre FR</th><th>Titre EN</th><th>Publié</th><th>Modifié</th><th class='col-actions'>Actions</th></tr></thead><tbody>" +
+    list
+      .map(
+        (a) =>
+          `<tr>
+            <td class="mono">${esc(a.slug)}</td>
+            <td class="uri" title="${esc(a.frTitle)}">${esc(a.frTitle)}</td>
+            <td class="uri" title="${esc(a.enTitle)}">${esc(a.enTitle)}</td>
+            <td class="hit">${esc(a.published)}</td>
+            <td class="hit muted">${esc(a.modified)}</td>
+            <td class="col-actions">
+              <div class="row-actions">
+                <button type="button" class="btn-ghost btn-sm" data-action="edit" data-slug="${esc(a.slug)}">Modifier</button>
+                <button type="button" class="btn-ghost btn-sm" data-action="view" data-slug="${esc(a.slug)}">Voir</button>
+                <button type="button" class="btn-danger btn-sm" data-action="delete" data-slug="${esc(a.slug)}">Supprimer</button>
+              </div>
+            </td>
+          </tr>`
+      )
+      .join("") +
+    "</tbody></table>";
+}
+
+function fillArticleForm(article) {
+  $("art-slug").value = article.slug;
+  $("art-published").value = article.published || "";
+  $("art-fr-title").value = (article.fr && article.fr.title) || "";
+  $("art-fr-og").value = (article.fr && article.fr.ogTitle) || "";
+  $("art-fr-desc").value = (article.fr && article.fr.description) || "";
+  $("art-fr-body").value = (article.fr && article.fr.body) || "";
+  $("art-en-title").value = (article.en && article.en.title) || "";
+  $("art-en-og").value = (article.en && article.en.ogTitle) || "";
+  $("art-en-desc").value = (article.en && article.en.description) || "";
+  $("art-en-body").value = (article.en && article.en.body) || "";
+  articleSlug = article.slug;
+  $("article-editor-title").textContent = "Modifier l'article";
+  $("article-editor-meta").textContent = "/actualites/" + article.slug + "/";
+  $("art-delete").hidden = false;
+  $("article-editor").hidden = false;
+  setArticleMsg("", "");
+  $("article-editor").scrollIntoView({ behavior: "smooth", block: "start" });
+}
+
+async function openArticleEditor(slug) {
+  if (slug) {
+    const r = await api(API.articles + "/" + slug);
+    if (r.status !== 200) return;
+    fillArticleForm(r.data);
+    return;
+  }
+  for (const id of [
+    "art-slug",
+    "art-fr-title",
+    "art-fr-og",
+    "art-fr-desc",
+    "art-fr-body",
+    "art-en-title",
+    "art-en-og",
+    "art-en-desc",
+    "art-en-body",
+  ]) {
+    $(id).value = "";
+  }
+  $("art-published").value = new Date().toISOString().slice(0, 10);
+  articleSlug = null;
+  $("article-editor-title").textContent = "Nouvel article";
+  $("article-editor-meta").textContent = "";
+  $("art-delete").hidden = true;
+  $("article-editor").hidden = false;
+  setArticleMsg("", "");
+  $("article-editor").scrollIntoView({ behavior: "smooth", block: "start" });
+}
+
+function collectArticleForm() {
+  return {
+    slug: $("art-slug").value.trim(),
+    published: $("art-published").value,
+    fr: {
+      title: $("art-fr-title").value,
+      ogTitle: $("art-fr-og").value,
+      description: $("art-fr-desc").value,
+      body: $("art-fr-body").value,
+    },
+    en: {
+      title: $("art-en-title").value,
+      ogTitle: $("art-en-og").value,
+      description: $("art-en-desc").value,
+      body: $("art-en-body").value,
+    },
+  };
+}
+
+function copyLangFields(from, to) {
+  $("art-" + to + "-title").value = $("art-" + from + "-title").value;
+  $("art-" + to + "-og").value = $("art-" + from + "-og").value;
+  $("art-" + to + "-desc").value = $("art-" + from + "-desc").value;
+  $("art-" + to + "-body").value = $("art-" + from + "-body").value;
+  setArticleMsg(
+    from === "fr"
+      ? "Contenu français copié en anglais — traduis puis publie."
+      : "Contenu anglais copié en français — traduis puis publie.",
+    "ok"
+  );
+}
+
+function togglePreview(lang) {
+  const pv = $("art-" + lang + "-preview");
+  if (pv.hidden) {
+    const ta = $("art-" + lang + "-body");
+    pv.innerHTML = window.marked ? window.marked.parse(ta.value || "") : "";
+    pv.hidden = false;
+  } else {
+    pv.hidden = true;
+  }
+}
+
+async function saveArticle(e) {
+  e.preventDefault();
+  const body = collectArticleForm();
+  if (!/^[a-z0-9-]+$/.test(body.slug)) {
+    setArticleMsg("Slug invalide : minuscules a-z, chiffres et tirets uniquement.", "err");
+    return;
+  }
+  if (!body.published) {
+    setArticleMsg("Date de publication requise.", "err");
+    return;
+  }
+  if (
+    !body.fr.title.trim() ||
+    !body.en.title.trim() ||
+    !body.fr.body.trim() ||
+    !body.en.body.trim()
+  ) {
+    setArticleMsg("Les titres et contenus FR et EN sont requis.", "err");
+    return;
+  }
+  setArticleMsg("", "");
+  $("art-save").disabled = true;
+  try {
+    const method = articleSlug ? "PUT" : "POST";
+    const r = await api(API.articles, { method, body: JSON.stringify(body) });
+    if (r.status !== 200 && r.status !== 201) {
+      setArticleMsg(r.data && r.data.error ? r.data.error : "Erreur", "err");
+      return;
+    }
+    setArticleMsg(articleSlug ? "Article mis à jour." : "Article créé.", "ok");
+    $("article-editor").hidden = true;
+    loadArticles();
+  } catch (err) {
+    if (err && err.message === "Session expirée") return;
+    setArticleMsg("Erreur réseau", "err");
+  } finally {
+    $("art-save").disabled = false;
+  }
+}
+
+async function deleteArticle(slug) {
+  if (!window.confirm(`Supprimer l'article « ${slug} » ? Cette action est définitive.`)) return;
+  const r = await api(API.articles + "/" + slug, { method: "DELETE" });
+  if (r.status !== 200) {
+    if (r.status === 401) return;
+    window.alert(r.data && r.data.error ? r.data.error : "Erreur");
+    return;
+  }
+  if (articleSlug === slug) $("article-editor").hidden = true;
+  loadArticles();
+}
+
+/* ---------- Traductions ---------- */
+
+let transKeys = [];
+
+function setTransMsg(text, cls) {
+  const m = $("trans-msg");
+  m.textContent = text;
+  m.className = "msg" + (cls ? " " + cls : "");
+}
+
+function autoGrow(ta) {
+  ta.style.height = "auto";
+  ta.style.height = Math.max(ta.scrollHeight + 4, 40) + "px";
+}
+
+function transRow(key, fr, en) {
+  const tr = document.createElement("tr");
+  tr.dataset.key = key;
+  tr.innerHTML =
+    `<td class="mono trans-key" title="${esc(key)}">${esc(key)}</td>` +
+    `<td><textarea class="trans-val" data-lang="fr" rows="1" spellcheck="false">${esc(fr)}</textarea></td>` +
+    `<td><textarea class="trans-val" data-lang="en" rows="1" spellcheck="false">${esc(en)}</textarea></td>` +
+    `<td class="col-actions"><button type="button" class="btn-danger btn-sm trans-del" title="Supprimer la clé">Supprimer</button></td>`;
+  tr.querySelectorAll("textarea").forEach((ta) => {
+    ta.addEventListener("input", () => autoGrow(ta));
+    autoGrow(ta);
+  });
+  tr.querySelector(".trans-del").addEventListener("click", () => {
+    tr.remove();
+    setTransMsg("Modifications non enregistrées.", "ok");
+    updateTransCount();
+  });
+  return tr;
+}
+
+function applyTransFilter() {
+  const q = $("trans-filter").value.trim().toLowerCase();
+  for (const tr of $("trans-table").querySelectorAll("tbody tr")) {
+    tr.hidden = !!(q && !tr.dataset.key.includes(q));
+  }
+  updateTransCount();
+}
+
+function updateTransCount() {
+  const total = transKeys.length;
+  const visible = $("trans-table").querySelectorAll("tbody tr:not([hidden])").length;
+  $("trans-meta").textContent = visible + " / " + total + " clés";
+}
+
+async function loadTranslations() {
+  const r = await api(API.i18n);
+  if (r.status !== 200) return;
+  const dict = r.data || { fr: {}, en: {} };
+  transKeys = Array.from(
+    new Set([...Object.keys(dict.fr || {}), ...Object.keys(dict.en || {})])
+  ).sort();
+  const tbody = $("trans-table").querySelector("tbody");
+  tbody.innerHTML = "";
+  const frag = document.createDocumentFragment();
+  for (const key of transKeys) {
+    frag.appendChild(transRow(key, (dict.fr || {})[key] || "", (dict.en || {})[key] || ""));
+  }
+  tbody.appendChild(frag);
+  updateTransCount();
+  setTransMsg("", "");
+}
+
+async function saveTranslations() {
+  const dict = { fr: {}, en: {} };
+  for (const tr of $("trans-table").querySelectorAll("tbody tr")) {
+    const key = tr.dataset.key;
+    dict.fr[key] = tr.querySelector('[data-lang="fr"]').value;
+    dict.en[key] = tr.querySelector('[data-lang="en"]').value;
+  }
+  setTransMsg("", "");
+  $("trans-save").disabled = true;
+  try {
+    const r = await api(API.i18n, { method: "PUT", body: JSON.stringify(dict) });
+    if (r.status !== 200) {
+      setTransMsg(r.data && r.data.error ? r.data.error : "Erreur", "err");
+      return;
+    }
+    setTransMsg("Traductions enregistrées.", "ok");
+    loadTranslations();
+  } catch (err) {
+    if (err && err.message === "Session expirée") return;
+    setTransMsg("Erreur réseau", "err");
+  } finally {
+    $("trans-save").disabled = false;
+  }
+}
+
+function addTransKey() {
+  const key = window.prompt("Clé de traduction (ex : faq.q9) :");
+  if (!key) return;
+  const k = key.trim();
+  if (!k) return;
+  const tbody = $("trans-table").querySelector("tbody");
+  if ([...tbody.children].some((tr) => tr.dataset.key === k)) {
+    setTransMsg("Cette clé existe déjà.", "err");
+    return;
+  }
+  tbody.appendChild(transRow(k, "", ""));
+  transKeys.push(k);
+  transKeys.sort();
+  $("trans-filter").value = "";
+  applyTransFilter();
+  setTransMsg("Clé ajoutée, enregistrez pour appliquer.", "ok");
+}
+
+/* ---------- Règles Discord ---------- */
+
+async function loadRules() {
+  const r = await api(API.rules);
+  if (r.status !== 200) return;
+  $("rules-content").value = (r.data && r.data.content) || "";
+  const len = (r.data && r.data.length) || 0;
+  $("rules-meta").textContent = len ? len + " caractères" : "";
+  setRulesMsg("", "");
+}
+
+function setRulesMsg(text, cls) {
+  const m = $("rules-msg");
+  m.textContent = text;
+  m.className = "msg" + (cls ? " " + cls : "");
+}
+
+async function saveRules() {
+  const content = $("rules-content").value;
+  setRulesMsg("", "");
+  $("rules-save").disabled = true;
+  try {
+    const r = await api(API.rules, { method: "PUT", body: JSON.stringify({ content }) });
+    if (r.status !== 200) {
+      setRulesMsg(r.data && r.data.error ? r.data.error : "Erreur", "err");
+      return;
+    }
+    setRulesMsg("Règles enregistrées — le bot les publiera dans la minute.", "ok");
+    loadRules();
+  } catch (err) {
+    if (err && err.message === "Session expirée") return;
+    setRulesMsg("Erreur réseau", "err");
+  } finally {
+    $("rules-save").disabled = false;
+  }
+}
+
+/* ---------- Honeypot ---------- */
+
+function hpEndpointsHtml(endpoints) {
+  const top = Object.entries(endpoints || {})
+    .sort((a, b) => b[1] - a[1])
+    .slice(0, 3);
+  if (top.length === 0) return '<span class="muted">—</span>';
+  return top
+    .map(([p, c]) => `<span class="hp-end" title="${esc(p)}">${esc(p)} ×${c}</span>`)
+    .join(" ");
+}
+
+async function loadHoneypot() {
+  const r = await api(API.honeypot);
+  if (r.status !== 200) return;
+  const d = r.data || {};
+  const ips = d.ips || [];
+  const total = d.total || 0;
+  const banned = ips.filter((x) => x.banned).length;
+  $("honeypot-meta").textContent =
+    total + " IP piégées" + (banned ? " · " + banned + " bannie(s)" : "") + " (max " + (d.max || "-") + ")";
+  const box = $("honeypot-list");
+  if (ips.length === 0) {
+    box.innerHTML = '<p class="meta">Aucune IP piégée pour le moment.</p>';
+    return;
+  }
+  box.innerHTML =
+    '<table><thead><tr><th>IP</th><th>Hits</th><th>Chemins</th><th>Premier</th><th>Dernier</th><th>Statut</th><th></th></tr></thead><tbody>' +
+    ips
+      .map((e) => {
+        const badge = e.banned ? '<span class="badge-ban">Bannie</span>' : '<span class="muted">Active</span>';
+        return (
+          "<tr>" +
+          `<td class="ip">${esc(e.ip)}</td>` +
+          `<td>${e.count}</td>` +
+          `<td class="hp-ends">${hpEndpointsHtml(e.endpoints)}</td>` +
+          `<td>${fmtDate(Math.floor(e.first / 1000))}</td>` +
+          `<td>${fmtDate(Math.floor(e.last / 1000))}</td>` +
+          `<td>${badge}</td>` +
+          `<td class="col-actions"><button type="button" class="btn-ghost btn-sm" data-hp="${esc(e.ip)}" data-ban="${e.banned ? "0" : "1"}">${e.banned ? "Débannir" : "Bannir"}</button></td>` +
+          "</tr>"
+        );
+      })
+      .join("") +
+    "</tbody></table>";
+}
+
+async function setHoneypotBan(ip, ban) {
+  const r = await api(API.honeypot, { method: "POST", body: JSON.stringify({ action: ban ? "ban" : "unban", ip }) });
+  if (r.status !== 200) return;
+  loadHoneypot();
+}
+
+async function clearHoneypot() {
+  if (!confirm("Vider toute la liste honeypot ?")) return;
+  const r = await api(API.honeypot, { method: "POST", body: JSON.stringify({ action: "clear" }) });
+  if (r.status !== 200) return;
+  loadHoneypot();
+}
+
+/* ---------- Actualisation ---------- */
+
+async function refreshAll() {
+  try {
+    await loadDashboard();
+    $("updated").textContent = "à jour " + new Date().toLocaleTimeString("fr-FR", { hour12: false });
+  } catch (err) {
+    if (err && err.message === "Session expirée") return;
+    $("updated").textContent = "erreur de rafraîchissement";
+  }
+}
+
+function startAutoRefresh() {
+  stopAutoRefresh();
+  autoTimer = setInterval(refreshAll, REFRESH_MS);
+  logTimer = setInterval(() => {
+    if (!$("tab-logs").hidden) loadLogs();
+    if (!$("tab-system").hidden) loadSystem();
+    if (!$("tab-zmap").hidden) loadZmap();
+  }, REFRESH_MS);
+  refreshAll();
+}
+
+function stopAutoRefresh() {
+  if (autoTimer) clearInterval(autoTimer);
+  if (logTimer) clearInterval(logTimer);
+  autoTimer = null;
+  logTimer = null;
+}
+
+/* ---------- Redémarrage ---------- */
+
+async function doRestart(service) {
+  const label = service === "app" ? "l'application" : "Caddy";
+  if (!window.confirm(`Redémarrer ${label} ?`)) return;
+  const btn = service === "app" ? $("restart-app") : $("restart-caddy");
+  btn.disabled = true;
+  btn.textContent = "Redémarrage…";
+  try {
+    const r = await api(API.restart, { method: "POST", body: JSON.stringify({ service }) });
+    if (r.status !== 200) {
+      window.alert(r.data && r.data.error ? r.data.error : "Erreur");
+      return;
+    }
+    if (service === "app") {
+      setTimeout(() => {
+        window.alert("Application redémarrée. Votre session est expirée, reconnectez-vous.");
+        clearSession();
+      }, 2000);
+    } else {
+      setTimeout(() => window.alert("Caddy redémarré."), 2000);
+    }
+  } catch (err) {
+    if (err && err.message === "Session expirée") return;
+    window.alert("Erreur réseau");
+  } finally {
+    btn.disabled = false;
+    btn.textContent = label === "l'application" ? "Redémarrer l'application" : "Redémarrer Caddy";
+  }
+}
+
+/* ---------- Câblage ---------- */
+
+$("auth-form").addEventListener("submit", submitAuth);
+$("toggle-pw").addEventListener("click", () => {
+  const input = $("password");
+  input.type = input.type === "password" ? "text" : "password";
+});
+
+document.querySelectorAll(".nav-item").forEach((b) => b.addEventListener("click", () => switchTab(b.dataset.tab)));
+$("refresh").addEventListener("click", refreshAll);
+$("logout").addEventListener("click", () => {
+  stopAutoRefresh();
+  clearSession();
+  setMsg("", "");
+});
+$("autorefresh").addEventListener("change", (e) => {
+  if (e.target.checked) startAutoRefresh();
+  else stopAutoRefresh();
+});
+$("restart-app").addEventListener("click", () => doRestart("app"));
+$("restart-caddy").addEventListener("click", () => doRestart("caddy"));
+$("log-filter").addEventListener("input", () => {
+  if (logFilterTimer) clearTimeout(logFilterTimer);
+  logFilterTimer = setTimeout(loadLogs, 350);
+});
+$("log-status").addEventListener("change", loadLogs);
+$("log-exclude").addEventListener("click", () => setLogExclude(!logExclude));
+$("article-new").addEventListener("click", () => openArticleEditor());
+$("article-form").addEventListener("submit", saveArticle);
+$("art-cancel").addEventListener("click", () => {
+  $("article-editor").hidden = true;
+  setArticleMsg("", "");
+});
+$("art-delete").addEventListener("click", () => {
+  if (articleSlug) deleteArticle(articleSlug);
+});
+$("articles-list").addEventListener("click", (e) => {
+  const btn = e.target.closest("[data-action]");
+  if (!btn) return;
+  const slug = btn.dataset.slug;
+  if (btn.dataset.action === "edit") openArticleEditor(slug);
+  else if (btn.dataset.action === "view") window.open("/actualites/" + slug + "/", "_blank", "noopener");
+  else if (btn.dataset.action === "delete") deleteArticle(slug);
+});
+$("trans-save").addEventListener("click", saveTranslations);
+$("trans-add").addEventListener("click", addTransKey);
+$("trans-filter").addEventListener("input", applyTransFilter);
+$("rules-save").addEventListener("click", saveRules);
+$("rules-reload").addEventListener("click", loadRules);
+$("honeypot-refresh").addEventListener("click", loadHoneypot);
+$("honeypot-clear").addEventListener("click", clearHoneypot);
+$("honeypot-list").addEventListener("click", (e) => {
+  const btn = e.target.closest("[data-hp]");
+  if (!btn) return;
+  setHoneypotBan(btn.dataset.hp, btn.dataset.ban === "1");
+});
+$("art-copy-from-en").addEventListener("click", () => copyLangFields("en", "fr"));
+$("art-copy-from-fr").addEventListener("click", () => copyLangFields("fr", "en"));
+document.querySelectorAll("[data-preview]").forEach((b) =>
+  b.addEventListener("click", () => togglePreview(b.dataset.preview))
+);
+
+initAuth().catch(() => {
+  $("login").hidden = false;
+  setMsg("Erreur réseau", "err");
+});
+
+renderLogExclude();
diff --git a/public/z-panel/index.html b/public/z-panel/index.html
new file mode 100644
index 0000000..487cb31
--- /dev/null
+++ b/public/z-panel/index.html
@@ -0,0 +1,406 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="noindex, nofollow" />
+    <title>Console · Zektyc</title>
+    <link rel="stylesheet" href="/z-panel/admin.css?v=2" />
+  </head>
+  <body>
+    <div id="login" class="login-view" hidden>
+      <div class="login-card">
+        <div class="brand brand-login">
+          <span class="brand-mark" aria-hidden="true">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 16" role="presentation" focusable="false">
+              <path d="M5 4h22L5 12h22" fill="none" stroke="currentColor" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+          </span>
+          <span class="brand-name">Zektyc</span>
+        </div>
+        <h1>Console d'administration</h1>
+        <p class="login-sub">Accès restreint · réservé à l'éditeur</p>
+        <form id="auth-form">
+          <label for="password">Mot de passe</label>
+          <div class="pw-wrap">
+            <input type="password" id="password" autocomplete="current-password" required spellcheck="false" />
+            <button type="button" id="toggle-pw" class="pw-eye" aria-label="Afficher ou masquer le mot de passe">
+              <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
+                <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z" />
+                <circle cx="12" cy="12" r="3" />
+              </svg>
+            </button>
+          </div>
+          <button type="submit" id="auth-btn" class="btn-primary btn-block">Connexion</button>
+          <p id="auth-msg" class="msg" role="status"></p>
+        </form>
+      </div>
+    </div>
+
+    <div id="app" class="app" hidden>
+      <aside class="sidebar">
+        <div class="brand">
+          <span class="brand-mark" aria-hidden="true">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 16" role="presentation" focusable="false">
+              <path d="M5 4h22L5 12h22" fill="none" stroke="currentColor" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/>
+            </svg>
+          </span>
+          <span class="brand-name">Zektyc</span>
+        </div>
+        <nav class="side-nav" aria-label="Sections du panneau">
+          <button class="nav-item active" data-tab="dash" type="button" aria-label="Tableau de bord" title="Tableau de bord">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3 3v18h18"/><path d="M7 14l4-4 4 3 5-6"/></svg>
+            <span>Tableau de bord</span>
+          </button>
+          <button class="nav-item" data-tab="logs" type="button" aria-label="Logs" title="Logs">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M4 6h16M4 12h16M4 18h10"/></svg>
+            <span>Logs</span>
+          </button>
+          <button class="nav-item" data-tab="system" type="button" aria-label="Système" title="Système">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="2" y="3" width="20" height="14" rx="2"/><path d="M8 21h8M12 17v4"/></svg>
+            <span>Système</span>
+          </button>
+          <button class="nav-item" data-tab="zmap" type="button" aria-label="ZMap" title="ZMap">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="12" cy="12" r="10"/><path d="M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z"/></svg>
+            <span>ZMap</span>
+          </button>
+          <button class="nav-item" data-tab="articles" type="button" aria-label="Articles" title="Articles">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M4 5a2 2 0 0 1 2-2h8l6 6v10a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2z"/><path d="M14 3v6h6"/><path d="M8 13h8M8 17h5"/></svg>
+            <span>Articles</span>
+          </button>
+          <button class="nav-item" data-tab="trans" type="button" aria-label="Traductions" title="Traductions">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="12" cy="12" r="10"/><path d="M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z"/></svg>
+            <span>Traductions</span>
+          </button>
+          <button class="nav-item" data-tab="rules" type="button" aria-label="Règles Discord" title="Règles Discord">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/><path d="M12 8v4M12 16h.01"/></svg>
+            <span>Règles Discord</span>
+          </button>
+          <button class="nav-item" data-tab="honeypot" type="button" aria-label="Honeypot" title="Honeypot">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3l8 4v5c0 5-3.5 8-8 9-4.5-1-8-4-8-9V7z"/><circle cx="12" cy="11" r="3"/></svg>
+            <span>Honeypot</span>
+          </button>
+          <button class="nav-item" data-tab="restart" type="button" aria-label="Redémarrage" title="Redémarrage">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M23 4v6h-6"/><path d="M1 20v-6h6"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10"/><path d="M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg>
+            <span>Redémarrage</span>
+          </button>
+        </nav>
+        <div class="side-foot">
+          <button id="logout" class="btn-ghost" type="button" aria-label="Se déconnecter" title="Se déconnecter">
+            <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4"/><path d="M16 17l5-5-5-5"/><path d="M21 12H9"/></svg>
+            <span>Se déconnecter</span>
+          </button>
+        </div>
+      </aside>
+
+      <main class="main">
+        <header class="topbar">
+          <h1 id="page-title">Tableau de bord</h1>
+          <div class="topbar-actions">
+            <span id="updated" class="updated" role="status"></span>
+            <label class="switch" title="Actualisation automatique toutes les 15 s">
+              <input type="checkbox" id="autorefresh" checked />
+              <span class="switch-track" aria-hidden="true"></span>
+              Auto
+            </label>
+            <button id="refresh" class="btn-ghost" type="button">
+              <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M23 4v6h-6"/><path d="M1 20v-6h6"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10"/><path d="M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg>
+              Actualiser
+            </button>
+          </div>
+        </header>
+
+        <section id="tab-dash" class="tab" aria-label="Tableau de bord">
+          <div id="stat-cards" class="stat-grid">
+            <div class="stat-card"><div class="stat-icon ic-total"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3 3v18h18"/><path d="M7 14l4-4 4 3 5-6"/></svg></div><div class="stat-body"><b class="stat-value">—</b><span class="stat-label">requêtes</span></div></div>
+            <div class="stat-card"><div class="stat-icon ic-ok"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"/><path d="M22 4L12 14l-3-3"/></svg></div><div class="stat-body"><b class="stat-value">—</b><span class="stat-label">200 OK</span></div></div>
+            <div class="stat-card"><div class="stat-icon ic-err"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="12" cy="12" r="10"/><path d="M12 8v4M12 16h.01"/></svg></div><div class="stat-body"><b class="stat-value">—</b><span class="stat-label">404 bloqués</span></div></div>
+            <div class="stat-card"><div class="stat-icon ic-warn"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 9v4M12 17h.01"/><path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"/></svg></div><div class="stat-body"><b class="stat-value">—</b><span class="stat-label">429 rate-limit</span></div></div>
+            <div class="stat-card"><div class="stat-icon ic-err"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="12" cy="12" r="10"/><path d="M12 8v4M12 16h.01"/></svg></div><div class="stat-body"><b class="stat-value">—</b><span class="stat-label">405 refusés</span></div></div>
+            <div class="stat-card"><div class="stat-icon ic-info"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M3 3v18h18"/><path d="M7 9h4M7 13h8M7 17h6"/></svg></div><div class="stat-body"><b class="stat-value">—</b><span class="stat-label">statuts distincts</span></div></div>
+          </div>
+
+          <div class="card">
+            <div class="card-head">
+              <h2>Activité par heure</h2>
+              <span id="chart-meta" class="meta"></span>
+            </div>
+            <div id="chart" class="chart"><p class="meta">Chargement…</p></div>
+            <div class="legend">
+              <span class="lg lg-ok">200–299</span>
+              <span class="lg lg-redir">300–399</span>
+              <span class="lg lg-err4">400–499</span>
+              <span class="lg lg-err5">500+</span>
+            </div>
+          </div>
+
+          <div class="grid-2">
+            <div class="card">
+              <div class="card-head"><h2>Chemins bloqués</h2><span id="blocked-count" class="meta"></span></div>
+              <div id="blocked-table" class="table-scroll"><p class="meta">Chargement…</p></div>
+            </div>
+            <div class="card">
+              <div class="card-head"><h2>Rate-limit par IP</h2><span id="ratelimit-count" class="meta"></span></div>
+              <div id="ratelimit-table" class="table-scroll"><p class="meta">Chargement…</p></div>
+            </div>
+          </div>
+        </section>
+
+        <section id="tab-logs" class="tab" hidden aria-label="Logs">
+          <div class="card">
+            <div class="card-head">
+              <h2>Logs d'accès</h2>
+              <div class="head-actions">
+                <span id="log-meta" class="meta"></span>
+                <button id="log-exclude" class="btn-ghost btn-sm" type="button" aria-pressed="true" title="Masquer/afficher les requêtes de base (CSS, JS, images, favicon, robots.txt, API du panneau)">
+                  <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
+                    <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94"/><path d="M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19"/><line x1="1" y1="1" x2="23" y2="23"/>
+                  </svg>
+                  <span id="log-exclude-label">Masquer le bruit</span>
+                </button>
+              </div>
+            </div>
+            <div class="filters">
+              <input type="text" id="log-filter" placeholder="Filtre (IP, URI, méthode)…" spellcheck="false" />
+              <select id="log-status">
+                <option value="">Tous les statuts</option>
+                <option value="200">200</option>
+                <option value="404">404</option>
+                <option value="405">405</option>
+                <option value="429">429</option>
+                <option value="500">5xx</option>
+              </select>
+            </div>
+            <div class="table-scroll">
+              <table id="log-table">
+                <thead>
+                  <tr>
+                    <th>Date</th>
+                    <th>IP</th>
+                    <th>Méthode</th>
+                    <th>URI</th>
+                    <th>Statut</th>
+                    <th>Durée</th>
+                    <th>User-Agent</th>
+                  </tr>
+                </thead>
+                <tbody></tbody>
+              </table>
+            </div>
+          </div>
+        </section>
+
+        <section id="tab-system" class="tab" hidden aria-label="Système">
+          <div id="sys-grid" class="stat-grid"></div>
+          <div class="card">
+            <div class="card-head"><h2>Processus</h2></div>
+            <div id="procs" class="table-scroll"><p class="meta">Chargement…</p></div>
+          </div>
+          <div class="card">
+            <div class="card-head"><h2>Disque</h2></div>
+            <div id="disk"><p class="meta">Chargement…</p></div>
+          </div>
+        </section>
+
+        <section id="tab-zmap" class="tab" hidden aria-label="ZMap">
+          <div id="zmap-grid" class="stat-grid"></div>
+          <div class="card">
+            <div class="card-head"><h2>Build Planet</h2><span id="zmap-build-meta" class="meta"></span></div>
+            <div id="zmap-build-info"><p class="meta">Chargement…</p></div>
+          </div>
+          <div class="card">
+            <div class="card-head"><h2>Grilles</h2><span id="zmap-grids-meta" class="meta"></span></div>
+            <div id="zmap-grids-info"><p class="meta">Chargement…</p></div>
+          </div>
+          <div class="card">
+            <div class="card-head"><h2>Log du build</h2></div>
+            <pre id="zmap-build-log" class="build-log"></pre>
+          </div>
+        </section>
+
+        <section id="tab-articles" class="tab" hidden aria-label="Articles">
+          <div class="card">
+            <div class="card-head">
+              <h2>Articles</h2>
+              <span id="articles-meta" class="meta"></span>
+              <button id="article-new" class="btn-primary" type="button">
+                <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 5v14M5 12h14"/></svg>
+                Nouvel article
+              </button>
+            </div>
+            <div id="articles-list" class="table-scroll"><p class="meta">Chargement…</p></div>
+          </div>
+
+          <div id="article-editor" class="card" hidden>
+            <div class="card-head">
+              <h2 id="article-editor-title">Nouvel article</h2>
+              <span id="article-editor-meta" class="meta"></span>
+            </div>
+            <form id="article-form">
+              <div class="form-grid">
+                <label class="field">
+                  <span>Slug (URL)</span>
+                  <input type="text" id="art-slug" required pattern="[a-z0-9-]+" spellcheck="false" placeholder="ex : censure-reseaux-sociaux-mineurs" />
+                </label>
+                <label class="field">
+                  <span>Date de publication</span>
+                  <input type="date" id="art-published" required />
+                </label>
+              </div>
+
+              <fieldset class="lang-pane">
+                <legend>
+                  Français
+                  <button type="button" class="btn-ghost btn-sm" id="art-copy-from-en" title="Copie titre + description + contenu depuis l'anglais">← Copier depuis l'anglais</button>
+                </legend>
+                <div class="form-grid">
+                  <label class="field">
+                    <span>Titre</span>
+                    <input type="text" id="art-fr-title" required />
+                  </label>
+                  <label class="field">
+                    <span>Titre OG (partage)</span>
+                    <input type="text" id="art-fr-og" spellcheck="false" />
+                  </label>
+                </div>
+                <label class="field">
+                  <span>Description (meta)</span>
+                  <input type="text" id="art-fr-desc" spellcheck="false" />
+                </label>
+                <label class="field">
+                  <span>Contenu (Markdown)</span>
+                  <textarea id="art-fr-body" rows="10" spellcheck="false" required></textarea>
+                  <span class="md-tools">
+                    <button type="button" class="btn-ghost btn-sm" data-preview="fr">Aperçu</button>
+                  </span>
+                </label>
+                <div id="art-fr-preview" class="md-preview" hidden></div>
+              </fieldset>
+
+              <fieldset class="lang-pane">
+                <legend>
+                  English
+                  <button type="button" class="btn-ghost btn-sm" id="art-copy-from-fr" title="Copies title + description + content from French">Copier depuis le français →</button>
+                </legend>
+                <div class="form-grid">
+                  <label class="field">
+                    <span>Title</span>
+                    <input type="text" id="art-en-title" required />
+                  </label>
+                  <label class="field">
+                    <span>OG title (share)</span>
+                    <input type="text" id="art-en-og" spellcheck="false" />
+                  </label>
+                </div>
+                <label class="field">
+                  <span>Description (meta)</span>
+                  <input type="text" id="art-en-desc" spellcheck="false" />
+                </label>
+                <label class="field">
+                  <span>Body (Markdown)</span>
+                  <textarea id="art-en-body" rows="10" spellcheck="false" required></textarea>
+                  <span class="md-tools">
+                    <button type="button" class="btn-ghost btn-sm" data-preview="en">Preview</button>
+                  </span>
+                </label>
+                <div id="art-en-preview" class="md-preview" hidden></div>
+              </fieldset>
+
+              <div class="form-actions">
+                <button type="submit" id="art-save" class="btn-primary">Enregistrer</button>
+                <button type="button" id="art-cancel" class="btn-ghost">Annuler</button>
+                <button type="button" id="art-delete" class="btn-danger" hidden>Supprimer</button>
+              </div>
+              <p id="art-msg" class="msg" role="status"></p>
+            </form>
+          </div>
+        </section>
+
+        <section id="tab-trans" class="tab" hidden aria-label="Traductions">
+          <div class="card">
+            <div class="card-head">
+              <h2>Traductions</h2>
+              <span id="trans-meta" class="meta"></span>
+              <div class="head-actions">
+                <button id="trans-add" class="btn-ghost" type="button">
+                  <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 5v14M5 12h14"/></svg>
+                  Ajouter une clé
+                </button>
+                <button id="trans-save" class="btn-primary" type="button">Enregistrer</button>
+              </div>
+            </div>
+            <div class="filters">
+              <input type="text" id="trans-filter" placeholder="Filtrer les clés…" spellcheck="false" />
+            </div>
+            <div class="table-scroll">
+              <table id="trans-table">
+                <thead>
+                  <tr>
+                    <th>Clé</th>
+                    <th>Français</th>
+                    <th>English</th>
+                    <th class="col-actions"></th>
+                  </tr>
+                </thead>
+                <tbody></tbody>
+              </table>
+            </div>
+            <p id="trans-msg" class="msg" role="status"></p>
+          </div>
+        </section>
+
+        <section id="tab-rules" class="tab" hidden aria-label="Règles Discord">
+          <div class="card">
+            <div class="card-head">
+              <h2>Règles Discord</h2>
+              <span id="rules-meta" class="meta"></span>
+              <div class="head-actions">
+                <button id="rules-reload" class="btn-ghost" type="button">Recharger</button>
+                <button id="rules-save" class="btn-primary" type="button">Enregistrer</button>
+              </div>
+            </div>
+            <p class="muted">Markdown Discord. Le bot Zektyc publie ces règles chaque minute dans le salon des règles, avec le bouton « ✅ Accepter » qui attribue le rôle <b>Membre</b>. Si le contenu change, le message existant est mis à jour automatiquement. Limite : 2000 caractères.</p>
+            <div class="rules-editor">
+              <textarea id="rules-content" rows="18" spellcheck="false" placeholder="# Règles du serveur…"></textarea>
+            </div>
+            <p id="rules-msg" class="msg" role="status"></p>
+          </div>
+        </section>
+
+        <section id="tab-honeypot" class="tab" hidden aria-label="Honeypot">
+          <div class="card">
+            <div class="card-head">
+              <h2>Honeypot</h2>
+              <span id="honeypot-meta" class="meta"></span>
+              <div class="head-actions">
+                <button id="honeypot-clear" class="btn-danger" type="button">Vider la liste</button>
+                <button id="honeypot-refresh" class="btn-ghost" type="button">Actualiser</button>
+              </div>
+            </div>
+            <p class="muted">Les adresses qui demandent des chemins WordPress inexistants (wp-login.php, .env, xmlrpc.php, etc.) reçoivent une fausse réponse WordPress et sont enregistrées ici. Bannir une IP la bloque définitivement (HTTP 403).</p>
+            <div id="honeypot-list" class="table-scroll"><p class="meta">Chargement…</p></div>
+          </div>
+        </section>
+
+        <section id="tab-restart" class="tab" hidden aria-label="Redémarrage">
+          <div class="card">
+            <div class="card-head"><h2>Redémarrage des services</h2></div>
+            <p class="muted">Redémarrage automatique via pm2. L'application relance en ~1 s, Caddy entraîne une coupure TLS de quelques secondes.</p>
+            <div class="restart-actions">
+              <button id="restart-app" class="btn-danger" type="button">
+                <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="12" cy="12" r="10"/><path d="M12 6v6l4 2"/></svg>
+                Redémarrer l'application
+              </button>
+              <button id="restart-caddy" class="btn-danger" type="button">
+                <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M23 4v6h-6"/><path d="M1 20v-6h6"/><path d="M3.51 9a9 9 0 0 1 14.85-3.36L23 10"/><path d="M1 14l4.64 4.36A9 9 0 0 0 20.49 15"/></svg>
+                Redémarrer Caddy
+              </button>
+            </div>
+          </div>
+        </section>
+      </main>
+    </div>
+    <script src="/vendor/marked.umd.js" defer></script>
+    <script src="/z-panel/admin.js" defer></script>
+  </body>
+</html>
diff --git a/public/zenyth/index.html b/public/zenyth/index.html
new file mode 100644
index 0000000..afc4646
--- /dev/null
+++ b/public/zenyth/index.html
@@ -0,0 +1,62 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="index, follow" />
+    <title>Zenyth Browser · Zektyc</title>
+    <meta name="description" content="Zenyth Browser : Firefox durci anti-fingerprinting. Résiste aux sondes ZFP/ZPD. Paquet RPM prêt à installer." />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <link rel="stylesheet" href="/css/zenyth.css?v=1" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="zy-main">
+      <section class="zy-hero">
+        <span class="zy-badge">Projet Zektyc</span>
+        <h1>Zenyth <span>Browser</span></h1>
+        <p class="zy-sub">Firefox durci anti-fingerprinting, conçu pour résister aux sondes ZFP et ZPD. Canvas, audio, polices, WebGL, WebGPU, WebRTC : tout est neutralisé ou uniformisé.</p>
+      </section>
+
+      <div class="zy-grid">
+        <div class="zy-feat"><b>🛡️ RFP maximal</b><p>Resist Fingerprinting verrouillé + letterboxing : canvas uniformisé, timezone UTC, hardware générique.</p></div>
+        <div class="zy-feat"><b>🔤 Polices masquées</b><p>font-visibility niveau 1 : les sondes de polices (y compris via Web Workers) voient un set identique chez tout le monde.</p></div>
+        <div class="zy-feat"><b>🚫 WebGPU &amp; batterie coupés</b><p>Les API les plus révélatrices n'existent tout simplement pas dans ce navigateur.</p></div>
+        <div class="zy-feat"><b>🌐 WebRTC sans fuite</b><p>Pas d'IP locale, mDNS uniquement : ton adresse réelle ne transite jamais dans les négociations P2P.</p></div>
+        <div class="zy-feat"><b>🧩 Extensions verrouillées</b><p>JShelter (randomisation canvas/audio par session) et uBlock Origin installés et non démontables.</p></div>
+        <div class="zy-feat"><b>📦 Un RPM, zéro config</b><p>Le lanceur crée un profil dédié et réinjecte le durcissement à chaque démarrage.</p></div>
+      </div>
+
+      <section class="zy-card zy-dl">
+        <a class="zy-btn" href="/zenyth/zenyth-browser-1.0.2-3.noarch.rpm" download>Télécharger le .rpm</a>
+        <span class="zy-meta">zenyth-browser-1.0.2-3.noarch.rpm · noarch · requiert firefox</span>
+        <span class="zy-meta">SHA-256 : 48c4978f73810c10427684082c0f0e2a6ba5e713f4ee6cc6af3835bc62ac56f6</span>
+      </section>
+
+      <section class="zy-card">
+        <h2 style="margin-top:0">Installation</h2>
+        <ol class="zy-steps">
+          <li>Télécharge le paquet puis installe-le :
+            <code class="zy-code">sudo dnf install ./zenyth-browser-1.0.2-3.noarch.rpm</code>
+          </li>
+          <li>Lance Zenyth depuis ton menu d'applications ou :
+            <code class="zy-code">zenyth</code>
+          </li>
+          <li>Vérifie que tu passes sous les radars :
+            <code class="zy-code">https://riricdev.tail5ea5cd.ts.net/fingerprint-test</code>
+          </li>
+        </ol>
+        <div class="zy-warn">
+          ⚠️ Zenyth force l'anglais US, l'UTC et une fenêtre standardisée : c'est le prix de l'anonymat.
+          Certains sites peuvent te demander plus souvent de te reconnecter.
+        </div>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
diff --git a/public/zenyth/zenyth-browser-1.0.2-3.noarch.rpm b/public/zenyth/zenyth-browser-1.0.2-3.noarch.rpm
new file mode 100644
index 0000000..542da5c
Binary files /dev/null and b/public/zenyth/zenyth-browser-1.0.2-3.noarch.rpm differ
diff --git a/public/zmap/archives/index.html b/public/zmap/archives/index.html
new file mode 100644
index 0000000..b42fa45
--- /dev/null
+++ b/public/zmap/archives/index.html
@@ -0,0 +1,108 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="Archives et changelog de ZMap : toutes les versions de l'application Android de cartographie libre OpenStreetMap avec les bornes de recharge électrique." />
+    <meta name="robots" content="index, follow" />
+    <title>Archives &amp; changelog · ZMap · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/zmap/archives" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Archives &amp; changelog · ZMap" />
+    <meta property="og:description" content="Toutes les versions de ZMap avec leur changelog et leurs liens de téléchargement." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/zmap/archives" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta property="og:locale:alternate" content="en_US" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/zmap/">← Retour à la page ZMap</a></p>
+      <h1>ZMap — Archives &amp; changelog</h1>
+      <p class="legal-meta">Toutes les versions publiées, avec leurs changelogs et leurs APK.</p>
+
+      <div class="dev-banner">
+        ⚠️ Toutes les versions sont des <strong>versions de développement</strong>
+        publiques, destinées aux tests. Les APK archivées restent téléchargeables,
+        mais la dernière version est toujours recommandée.
+      </div>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>v0.5.0 <span class="tag-latest">dernière</span> <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">20 août 2026 · 6 011 ko · <a href="/zmap/zmap-0.5.0.apk" download>⬇ Télécharger</a></p>
+          <ul>
+            <li>Vitesses par route précises : base de données serveur des limites de vitesse (maxspeed OSM) de toutes les routes.</li>
+            <li>Chaque point du trajet est rattaché à sa route réelle (snapping), sa vitesse est fournie avec l'itinéraire.</li>
+            <li>Le téléphone garde le trajet complet en cache local (hors-ligne pendant la conduite).</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.4.1 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">20 août 2026 · 6 012 ko · <a href="/zmap/zmap-0.4.1.apk" download>⬇ Télécharger</a></p>
+          <ul>
+            <li>Correction : le démarrage de navigation ne bloque plus si le serveur de vitesses est lent — le trajet démarre toujours.</li>
+            <li>Bornes à accès restreint (private, customers, employés…) masquées par défaut et signalées en jaune.</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.4.0 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">19 août 2026 · 6 012 ko · <a href="/zmap/zmap-0.4.0.apk" download>⬇ Télécharger</a></p>
+          <ul>
+            <li>Nouvelle interface : thème clair/sombre, toasts en haut de l'écran, écran de chargement au démarrage.</li>
+            <li>Bornes colorées : vert = ouverte, rouge = fermée, jaune = accès privé, avec la puissance kW affichée sous chaque icône.</li>
+            <li>Réglages vie privée : WebSocket on/off, effacer le cache local, masquer les bornes privées.</li>
+            <li>Fluidité : fermeture automatique du clavier, animations, barre de recherche masquée pendant la conduite.</li>
+            <li>Calcul d'itinéraire accéléré : les vitesses maximales sont récupérées en une seule requête au lieu d'une par point.</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.3.0 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">19 août 2026 · 6 001 ko · <a href="/zmap/zmap-0.3.0.apk" download>⬇ Télécharger</a></p>
+          <ul>
+            <li>Navigation conduite façon GPS : caméra derrière la flèche, étapes « tournez à gauche », heure d'arrivée, vitesse et limite de vitesse.</li>
+            <li>Choix de la voiture (Tesla Model Y, Zoé, e-208, ID.3, EV6…) avec filtrage des bornes compatibles.</li>
+            <li>Connecteurs détaillés : Type 2, CCS, CHAdeMO… et calcul de la consommation / autonomie sur le trajet.</li>
+            <li>Cache offline et canal WebSocket sécurisé avec reconnexion automatique.</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.2.0 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">19 août 2026 · 5 963 ko · <a href="/zmap/zmap-0.2.0.apk" download>⬇ Télécharger</a></p>
+          <ul>
+            <li>Calcul d'itinéraire (OSRM) avec distance, durée et étapes.</li>
+            <li>Bornes de recharge le long du trajet.</li>
+            <li>Recherche de lieux (ville, rue, monument).</li>
+            <li>Estimation de la consommation en kWh et du pourcentage de batterie.</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.1.0 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">19 août 2026 · 5 932 ko · <a href="/zmap/zmap-0.1.0.apk" download>⬇ Télécharger</a></p>
+          <ul>
+            <li>Première version : carte OpenStreetMap libre.</li>
+            <li>Bornes de recharge électrique en Europe (Suisse incluse).</li>
+            <li>Passerelle Zektyc pour éviter les limitations de débit d'Overpass.</li>
+          </ul>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
\ No newline at end of file
diff --git a/public/zmap/en/archives/index.html b/public/zmap/en/archives/index.html
new file mode 100644
index 0000000..0631f8d
--- /dev/null
+++ b/public/zmap/en/archives/index.html
@@ -0,0 +1,108 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="ZMap archives and changelog: all versions of the free OpenStreetMap Android mapping app with EV charging stations." />
+    <meta name="robots" content="index, follow" />
+    <title>Archives &amp; changelog · ZMap · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/zmap/en/archives" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Archives &amp; changelog · ZMap" />
+    <meta property="og:description" content="Every ZMap version with its changelog and download links." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/zmap/en/archives" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="en_US" />
+    <meta property="og:locale:alternate" content="fr_FR" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/zmap/en/">← Back to ZMap page</a></p>
+      <h1>ZMap — Archives &amp; changelog</h1>
+      <p class="legal-meta">Every published version, with its changelog and APK.</p>
+
+      <div class="dev-banner">
+        ⚠️ All versions are public <strong>development builds</strong> meant for
+        testing. Archived APKs remain downloadable, but the latest version is
+        always recommended.
+      </div>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>v0.5.0 <span class="tag-latest">latest</span> <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">Aug 20, 2026 · 6,011 KB · <a href="/zmap/zmap-0.5.0.apk" download>⬇ Download</a></p>
+          <ul>
+            <li>Precise per-road speeds: server database of speed limits (OSM maxspeed) for all roads.</li>
+            <li>Each trip point is snapped to its actual road; its speed is returned with the route.</li>
+            <li>The phone keeps the full trip in local cache (offline while driving).</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.4.1 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">Aug 20, 2026 · 6,012 KB · <a href="/zmap/zmap-0.4.1.apk" download>⬇ Download</a></p>
+          <ul>
+            <li>Fix: starting navigation no longer blocks if the speed server is slow — the trip always starts.</li>
+            <li>Restricted-access stations (private, customers, employees…) hidden by default and shown in yellow.</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.4.0 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">Aug 19, 2026 · 6,012 KB · <a href="/zmap/zmap-0.4.0.apk" download>⬇ Download</a></p>
+          <ul>
+            <li>New UI: light/dark theme, toasts at the top of the screen, loading screen on startup.</li>
+            <li>Color-coded stations: green = open, red = closed, yellow = private access, with the kW power shown under each icon.</li>
+            <li>Privacy settings: WebSocket on/off, clear local cache, hide private stations.</li>
+            <li>Smoothness: keyboard auto-hide, animations, search bar hidden while driving.</li>
+            <li>Faster route calculation: max speeds fetched in a single request instead of one per point.</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.3.0 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">Aug 19, 2026 · 6,001 KB · <a href="/zmap/zmap-0.3.0.apk" download>⬇ Download</a></p>
+          <ul>
+            <li>GPS-style driving navigation: camera behind the arrow, "turn left" steps, arrival time, speed and speed limit.</li>
+            <li>Car selection (Tesla Model Y, Zoé, e-208, ID.3, EV6…) with compatible station filtering.</li>
+            <li>Detailed connectors: Type 2, CCS, CHAdeMO… and consumption / range estimates.</li>
+            <li>Offline cache and secure WebSocket channel with auto-reconnect.</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.2.0 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">Aug 19, 2026 · 5,963 KB · <a href="/zmap/zmap-0.2.0.apk" download>⬇ Download</a></p>
+          <ul>
+            <li>Route calculation (OSRM) with distance, duration and steps.</li>
+            <li>Charging stations along the route.</li>
+            <li>Place search (city, street, landmark).</li>
+            <li>Energy consumption and battery percentage estimates.</li>
+          </ul>
+        </article>
+
+        <article class="card">
+          <h3>v0.1.0 <span class="tag tag-dev">dev</span></h3>
+          <p class="legal-note">Aug 19, 2026 · 5,932 KB · <a href="/zmap/zmap-0.1.0.apk" download>⬇ Download</a></p>
+          <ul>
+            <li>First release: free OpenStreetMap map.</li>
+            <li>EV charging stations across Europe (Switzerland included).</li>
+            <li>Zektyc gateway to avoid Overpass rate limits.</li>
+          </ul>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
\ No newline at end of file
diff --git a/public/zmap/en/index.html b/public/zmap/en/index.html
new file mode 100644
index 0000000..9351800
--- /dev/null
+++ b/public/zmap/en/index.html
@@ -0,0 +1,123 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="ZMap: a free Android mapping app using OpenStreetMap, showing EV charging stations across Europe (Switzerland included)." />
+    <meta name="robots" content="index, follow" />
+    <title>ZMap · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/zmap/en/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="ZMap · Zektyc" />
+    <meta property="og:description" content="Free OpenStreetMap map with EV charging stations across Europe (Switzerland included). Android app with automatic updates." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/zmap/en/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="en_US" />
+    <meta property="og:locale:alternate" content="fr_FR" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/">← Back to home</a></p>
+      <h1>ZMap</h1>
+      <p class="legal-meta">Free Android mapping app · v0.5.0</p>
+      <a class="btn btn-ghost" href="/zmap/en/archives">🗂️ Archives &amp; changelog</a>
+      <a class="btn btn-ghost" href="/zmap/en/road-speeds">🧭 Per-road speeds</a>
+
+      <div class="dev-banner">
+        ⚠️ <strong>Development build.</strong> All versions published here are
+        development builds meant for testing. They are public but may contain
+        bugs or UI changes.
+      </div>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>OpenStreetMap map</h3>
+          <p>
+            ZMap displays a free map based on OpenStreetMap tiles, with no account,
+            no trackers and no data collection. Move around freely with multi-touch
+            (pinch to zoom), the map and stations load based on your position.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>EV charging stations</h3>
+          <p>
+            ZMap queries the OpenStreetMap database (via the Zektyc proxy) and
+            displays EV charging stations across Europe, Switzerland included.
+            Tap a station to see its details: operator, power, connectors
+            (Type 2, CCS, CHAdeMO…), whether it is free and its address.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Search &amp; navigation</h3>
+          <p>
+            Search for a place (city, street, landmark…) from the search bar.
+            ZMap then computes your route, shows distance and duration, and
+            highlights the charging stations along the way. Tap the directions
+            icon then the map to choose a destination.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Turn-by-turn driving</h3>
+          <p>
+            A GPS-style navigation mode: the camera follows the car and stays
+            oriented behind the arrow (the road direction, not the phone's),
+            with "turn left" steps, arrival time, speed and road speed limit.
+            The map is dimmed so the blue route stands out.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Built for your car</h3>
+          <p>
+            Pick your model (Tesla Model Y, Zoé, e-208, ID.3, EV6…): ZMap
+            computes consumption and range on your trip, and only shows stations
+            compatible with your connectors (Type 2, CCS, CHAdeMO…).
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Connected &amp; offline-ready</h3>
+          <p>
+            ZMap connects to the Zektyc server over secure WebSocket
+            (auto-reconnect, offline mode banner on disconnect). Before you
+            leave, the map, route and stations are cached on the phone: during
+            the drive, data usage is nearly zero.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Automatic updates</h3>
+          <p>
+            ZMap automatically checks for new versions and updates itself, without
+            going through the Play Store.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Download</h3>
+          <p>Latest version: <strong>0.5.0</strong></p>
+          <a class="btn btn-ghost" href="/zmap/zmap-0.5.0.apk" download>⬇ Download APK (6 MB)</a>
+          <p class="legal-note">
+            Compatible with Android 7.0 (API 24) and above. The app is signed
+            with a release key.
+          </p>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
\ No newline at end of file
diff --git a/public/zmap/en/road-speeds/index.html b/public/zmap/en/road-speeds/index.html
new file mode 100644
index 0000000..86a12af
--- /dev/null
+++ b/public/zmap/en/road-speeds/index.html
@@ -0,0 +1,204 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="ZMap's per-road speed database: 90.5 million sampled points, 3.6 million km of roads mapped with their speed limit (OpenStreetMap), across all of Europe." />
+    <meta name="robots" content="index, follow" />
+    <title>Per-road speeds · ZMap · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/zmap/en/road-speeds/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Per-road speeds · ZMap" />
+    <meta property="og:description" content="ZMap knows the speed limit of every road in Europe: 90.5 million points, 3.6 million km, built from OpenStreetMap data." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/zmap/en/road-speeds/" />
+    <meta property="og:locale" content="en_US" />
+    <meta property="og:locale:alternate" content="fr_FR" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <style>
+      .stats-grid {
+        display: grid;
+        grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+        gap: 12px;
+        margin: 24px 0;
+      }
+      .stat {
+        background: rgba(255, 255, 255, 0.04);
+        border: 1px solid rgba(255, 255, 255, 0.08);
+        border-radius: 10px;
+        padding: 16px;
+        text-align: center;
+      }
+      .stat b {
+        display: block;
+        font-size: 1.7em;
+        line-height: 1.2;
+        color: var(--accent, #4dd6a8);
+      }
+      .stat span {
+        font-size: 0.85em;
+        opacity: 0.7;
+      }
+      table.speeds {
+        width: 100%;
+        border-collapse: collapse;
+        margin: 16px 0;
+      }
+      table.speeds th,
+      table.speeds td {
+        text-align: right;
+        padding: 6px 10px;
+        border-bottom: 1px solid rgba(255, 255, 255, 0.08);
+      }
+      table.speeds th:first-child,
+      table.speeds td:first-child {
+        text-align: left;
+      }
+      .bar {
+        display: inline-block;
+        height: 10px;
+        border-radius: 3px;
+        background: var(--accent, #4dd6a8);
+        vertical-align: middle;
+      }
+      code {
+        background: rgba(255, 255, 255, 0.06);
+        padding: 1px 6px;
+        border-radius: 4px;
+        font-size: 0.9em;
+      }
+    </style>
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/zmap/en/">← Back to ZMap</a></p>
+      <h1>Per-road speeds</h1>
+      <p class="legal-meta">
+        ZMap's internal database · how it is built and what it contains
+      </p>
+
+      <div class="dev-banner">
+        🧭 <strong>Navigation feature.</strong> ZMap snaps every point of your
+        route to its actual road and reads its speed limit from a local database
+        covering all of Europe — then keeps it cached on your phone for offline
+        driving.
+      </div>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>The idea</h3>
+          <p>
+            Most navigation apps need a connection to know the speed limit. ZMap
+            does it differently: a per-road speed-limit database is built from
+            OpenStreetMap data and lives on the server. When a route is computed,
+            each trip point is snapped to the nearest road and given its speed.
+            The full route — speeds included — is then cached on the phone: while
+            driving, no network request is needed.
+          </p>
+        </article>
+      </section>
+
+      <div class="stats-grid">
+        <div class="stat"><b>90.5M</b><span>sampled points</span></div>
+        <div class="stat"><b>3.6M km</b><span>of roads with a known speed</span></div>
+        <div class="stat"><b>5,104</b><span>cells of 0.5° × 0.5°</span></div>
+        <div class="stat"><b>370 MB</b><span>compressed grid (gzip)</span></div>
+        <div class="stat"><b>40 m</b><span>sampling step along roads</span></div>
+        <div class="stat"><b>5 B</b><span>per point (lon, lat, speed)</span></div>
+      </div>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>How it is built</h3>
+          <ol>
+            <li>
+              <strong>Source:</strong> the OpenStreetMap Europe extract
+              (Geofabrik, 34.8 GB) contains 98.2 million roads
+              (<code>highway</code>).
+            </li>
+            <li>
+              <strong>Filtering:</strong> <code>osmium tags-filter</code> keeps
+              only the roads (8.5 GB), then only those carrying a speed
+              (<code>maxspeed</code>) are kept — about 13 million.
+            </li>
+            <li>
+              <strong>Sampling:</strong> a point is placed every 40 metres along
+              each road, with its speed in km/h.
+            </li>
+            <li>
+              <strong>Indexing:</strong> Europe is split into 0.5° cells
+              (≈ 55 km), each subdivided into 32 × 32. Every point is quantized
+              to ≈ 0.76 m and stored in 5 bytes, then the cell is gzip-compressed:
+              90.5 million points in 370 MB total.
+            </li>
+          </ol>
+          <p>
+            It is fully reproducible: the build script
+            (<code>build_maxspeed.py</code>) runs end to end on a small server.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>What is inside</h3>
+          <p>
+            Share of points by speed limit (most common values) :
+          </p>
+          <table class="speeds">
+            <tr><th>Limit</th><th>Share</th><th></th></tr>
+            <tr><td>50 km/h</td><td>26.2%</td><td><span class="bar" style="width:100%"></span></td></tr>
+            <tr><td>30 km/h (30 zones)</td><td>18.5%</td><td><span class="bar" style="width:71%"></span></td></tr>
+            <tr><td>90 km/h</td><td>9.5%</td><td><span class="bar" style="width:36%"></span></td></tr>
+            <tr><td>80 km/h</td><td>9.2%</td><td><span class="bar" style="width:35%"></span></td></tr>
+            <tr><td>70 km/h</td><td>6.0%</td><td><span class="bar" style="width:23%"></span></td></tr>
+            <tr><td>60 km/h</td><td>5.7%</td><td><span class="bar" style="width:22%"></span></td></tr>
+            <tr><td>100 km/h</td><td>4.6%</td><td><span class="bar" style="width:18%"></span></td></tr>
+            <tr><td>40 km/h</td><td>3.3%</td><td><span class="bar" style="width:13%"></span></td></tr>
+            <tr><td>48 km/h (30 mph, UK)</td><td>2.8%</td><td><span class="bar" style="width:11%"></span></td></tr>
+            <tr><td>97 km/h (60 mph, UK)</td><td>2.4%</td><td><span class="bar" style="width:9%"></span></td></tr>
+            <tr><td>32 km/h (20 mph, UK)</td><td>2.1%</td><td><span class="bar" style="width:8%"></span></td></tr>
+            <tr><td>20 km/h (pedestrian zones)</td><td>2.1%</td><td><span class="bar" style="width:8%"></span></td></tr>
+            <tr><td>120 km/h</td><td>1.8%</td><td><span class="bar" style="width:7%"></span></td></tr>
+            <tr><td>130 km/h (motorways)</td><td>1.7%</td><td><span class="bar" style="width:6%"></span></td></tr>
+            <tr><td>110 km/h</td><td>1.4%</td><td><span class="bar" style="width:5%"></span></td></tr>
+          </table>
+          <p class="legal-note">
+            <em>Numeric</em> values found in OpenStreetMap. Actual limits may
+            differ (roadworks, temporary signs, weather). Roads with no limit
+            (e.g. some German sections) have no <code>maxspeed</code>: ZMap then
+            shows no speed.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>In the app</h3>
+          <p>
+            The server returns, with every route, an array of speeds aligned with
+            the geometry points (one value per point). The phone stores
+            everything in its local cache: while driving, the current section's
+            limit is read without network, and offline mode keeps the whole trip.
+            Snapping a 4,500-point route takes about 170 ms on the server.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Accuracy and coverage</h3>
+          <ul>
+            <li>Coverage: all of Europe, longitude −12° to 46°, latitude 27° to 72°.</li>
+            <li>Snapping: the nearest road within 40 m of the point.</li>
+            <li>Point location accuracy: ≈ 0.76 m.</li>
+            <li>Data: OpenStreetMap, free (ODbL licence).</li>
+          </ul>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
\ No newline at end of file
diff --git a/public/zmap/index.html b/public/zmap/index.html
new file mode 100644
index 0000000..04a18c6
--- /dev/null
+++ b/public/zmap/index.html
@@ -0,0 +1,129 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="ZMap : application Android de cartographie libre utilisant OpenStreetMap, affichant les bornes de recharge électrique en Europe (Suisse incluse)." />
+    <meta name="robots" content="index, follow" />
+    <title>ZMap · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/zmap/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="ZMap · Zektyc" />
+    <meta property="og:description" content="Carte libre OpenStreetMap avec les bornes de recharge électrique en Europe (Suisse incluse). Application Android, mise à jour automatique." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/zmap/" />
+    <meta property="og:image" content="https://riricdev.tail5ea5cd.ts.net/og-image.png" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta property="og:locale:alternate" content="en_US" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/">← Retour à l'accueil</a></p>
+      <h1>ZMap</h1>
+      <p class="legal-meta">Application Android de cartographie libre · v0.5.0</p>
+      <a class="btn btn-ghost" href="/zmap/archives">🗂️ Archives &amp; changelog</a>
+      <a class="btn btn-ghost" href="/zmap/vitesses-par-route">🧭 Vitesses par route</a>
+
+      <div class="dev-banner">
+        ⚠️ <strong>Version de développement.</strong> Toutes les versions publiées
+        ici sont des versions de développement (dev builds) destinées aux tests.
+        Elles sont publiques mais peuvent contenir des bugs ou des changements
+        d'interface.
+      </div>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>Carte OpenStreetMap</h3>
+          <p>
+            ZMap affiche une carte libre basée sur les tuiles OpenStreetMap,
+            sans compte, sans tracker et sans collecte de données. Déplacez-vous
+            librement avec le multi-touch (pincer pour zoomer), la carte et les
+            bornes se chargent en fonction de votre position.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Bornes de recharge électrique</h3>
+          <p>
+            ZMap interroge la base OpenStreetMap (via le proxy Zektyc) et affiche
+            les bornes de recharge électrique en Europe, Suisse incluse. Un simple
+            appui sur une borne affiche ses caractéristiques : opérateur,
+            puissance, connecteurs (Type 2, CCS, CHAdeMO…), gratuité et adresse.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Recherche et navigation</h3>
+          <p>
+            Recherchez un lieu (ville, rue, monument…) directement depuis la barre
+            de recherche. ZMap calcule ensuite votre itinéraire, affiche la
+            distance et la durée, et met en évidence les bornes de recharge
+            situées sur le chemin. Touchez l'icône itinéraire puis la carte pour
+            choisir une destination.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Conduite assistée</h3>
+          <p>
+            Un mode navigation façon GPS : la caméra suit la voiture et reste
+            orientée derrière la flèche (la direction de la route, pas du
+            téléphone), avec étapes « tournez à gauche », heure d'arrivée,
+            vitesse et limite de vitesse du tronçon. La carte est assombrie pour
+            bien distinguer l'itinéraire en bleu.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Adaptée à votre voiture</h3>
+          <p>
+            Choisissez votre modèle (Tesla Model Y, Zoé, e-208, ID.3, EV6…) :
+            ZMap calcule la consommation et l'autonomie sur votre trajet, et
+            n'affiche que les bornes compatibles avec vos connecteurs
+            (Type 2, CCS, CHAdeMO…).
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Connexion et hors-ligne</h3>
+          <p>
+            ZMap se connecte au serveur Zektyc en WebSocket sécurisé (reconnexion
+            automatique, mode hors-ligne affiché en cas de coupure). Avant un
+            départ, la carte, l'itinéraire et les bornes sont mis en cache sur le
+            téléphone : pendant le trajet, la consommation de données est quasi
+            nulle.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Mises à jour automatiques</h3>
+          <p>
+            ZMap vérifie automatiquement les nouvelles versions et se met à jour
+            en toute simplicité, sans passer par le Play Store.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Téléchargement</h3>
+          <p>Dernière version : <strong>0.5.0</strong></p>
+          <a class="btn btn-ghost" href="/zmap/zmap-0.5.0.apk" download>⬇ Télécharger l'APK (6 Mo)</a>
+          <p class="legal-note">
+            Compatible Android 7.0 (API 24) et supérieur. L'application est
+            signée avec une clé de release.
+          </p>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
\ No newline at end of file
diff --git a/public/zmap/update.json b/public/zmap/update.json
new file mode 100644
index 0000000..8788185
--- /dev/null
+++ b/public/zmap/update.json
@@ -0,0 +1,7 @@
+{
+  "versionCode": 6,
+  "versionName": "0.5.0",
+  "apkUrl": "https://riricdev.tail5ea5cd.ts.net/zmap/zmap-0.5.0.apk",
+  "notes": "Vitesses par route précises : le serveur dispose désormais d'une base de données des limites de vitesse (maxspeed OSM) de toutes les routes. Chaque point du trajet est rattaché à sa route et sa vitesse est fournie avec l'itinéraire (plus de requête séparée). Le téléphone garde tout en cache local pour fonctionner hors-ligne.",
+  "mandatory": false
+}
\ No newline at end of file
diff --git a/public/zmap/vitesses-par-route/index.html b/public/zmap/vitesses-par-route/index.html
new file mode 100644
index 0000000..d1f870d
--- /dev/null
+++ b/public/zmap/vitesses-par-route/index.html
@@ -0,0 +1,212 @@
+<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="La base de données des vitesses par route de ZMap : 90,5 millions de points, 3,6 millions de km de routes cartographiées avec leur limite de vitesse (OpenStreetMap), sur toute l'Europe." />
+    <meta name="robots" content="index, follow" />
+    <title>Vitesses par route · ZMap · Zektyc</title>
+    <link rel="canonical" href="https://riricdev.tail5ea5cd.ts.net/zmap/vitesses-par-route/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Vitesses par route · ZMap" />
+    <meta property="og:description" content="ZMap connaît la limite de vitesse de chaque route d'Europe : 90,5 millions de points, 3,6 millions de km, à partir des données OpenStreetMap." />
+    <meta property="og:url" content="https://riricdev.tail5ea5cd.ts.net/zmap/vitesses-par-route/" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta property="og:locale:alternate" content="en_US" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <style>
+      .stats-grid {
+        display: grid;
+        grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+        gap: 12px;
+        margin: 24px 0;
+      }
+      .stat {
+        background: rgba(255, 255, 255, 0.04);
+        border: 1px solid rgba(255, 255, 255, 0.08);
+        border-radius: 10px;
+        padding: 16px;
+        text-align: center;
+      }
+      .stat b {
+        display: block;
+        font-size: 1.7em;
+        line-height: 1.2;
+        color: var(--accent, #4dd6a8);
+      }
+      .stat span {
+        font-size: 0.85em;
+        opacity: 0.7;
+      }
+      table.speeds {
+        width: 100%;
+        border-collapse: collapse;
+        margin: 16px 0;
+      }
+      table.speeds th,
+      table.speeds td {
+        text-align: right;
+        padding: 6px 10px;
+        border-bottom: 1px solid rgba(255, 255, 255, 0.08);
+      }
+      table.speeds th:first-child,
+      table.speeds td:first-child {
+        text-align: left;
+      }
+      .bar {
+        display: inline-block;
+        height: 10px;
+        border-radius: 3px;
+        background: var(--accent, #4dd6a8);
+        vertical-align: middle;
+      }
+      code {
+        background: rgba(255, 255, 255, 0.06);
+        padding: 1px 6px;
+        border-radius: 4px;
+        font-size: 0.9em;
+      }
+    </style>
+  </head>
+  <body>
+    <header id="h"></header>
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/zmap/">← Retour à ZMap</a></p>
+      <h1>Vitesses par route</h1>
+      <p class="legal-meta">
+        La base de données interne de ZMap · comment elle est construite et
+        ce qu'elle contient
+      </p>
+
+      <div class="dev-banner">
+        🧭 <strong>Fonctionnalité de navigation.</strong> ZMap rattache chaque
+        point de votre itinéraire à sa route réelle et lit sa limite de vitesse
+        dans une base de données locale de toute l'Europe — puis la garde en
+        cache sur votre téléphone pour la conduite hors-ligne.
+      </div>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>Le principe</h3>
+          <p>
+            La plupart des applications de navigation ont besoin d'une connexion
+            pour connaître la vitesse autorisée. ZMap fait différemment : une base
+            de données des limites de vitesse est construite <em>par route</em> à
+            partir des données OpenStreetMap, puis embarquée côté serveur. Quand
+            un itinéraire est calculé, chaque point du trajet est rattaché à la
+            route la plus proche et reçoit sa vitesse. L'itinéraire complet — y
+            compris ses vitesses — est ensuite mis en cache sur le téléphone :
+            pendant la conduite, plus aucune requête réseau n'est nécessaire.
+          </p>
+        </article>
+      </section>
+
+      <div class="stats-grid">
+        <div class="stat"><b>90,5 M</b><span>points échantillonnés</span></div>
+        <div class="stat"><b>3,6 M km</b><span>de routes avec vitesse connue</span></div>
+        <div class="stat"><b>5 104</b><span>cellules de 0,5° × 0,5°</span></div>
+        <div class="stat"><b>370 Mo</b><span>grille compressée (gzip)</span></div>
+        <div class="stat"><b>40 m</b><span>échantillonnage le long des routes</span></div>
+        <div class="stat"><b>5 o</b><span>par point (lon, lat, vitesse)</span></div>
+      </div>
+
+      <section class="projects-page">
+        <article class="card">
+          <h3>Comment c'est construit</h3>
+          <ol>
+            <li>
+              <strong>Source :</strong> l'extrait Europe d'OpenStreetMap
+              (Geofabrik, 34,8 Go) contient 98,2 millions de routes
+              (<code>highway</code>).
+            </li>
+            <li>
+              <strong>Filtrage :</strong> <code>osmium tags-filter</code> ne garde
+              que les routes (8,5 Go), puis seules celles portant une vitesse
+              (<code>maxspeed</code>) sont conservées — environ 13 millions.
+            </li>
+            <li>
+              <strong>Échantillonnage :</strong> un point est posé tous les
+              40 mètres le long de chaque route, avec sa vitesse en km/h.
+            </li>
+            <li>
+              <strong>Indexation :</strong> l'Europe est découpée en cellules de
+              0,5° de côté (≈ 55 km), elles-mêmes subdivisées en 32 × 32. Chaque
+              point est quantifié sur ~0,76 m et stocké sur 5 octets, puis la
+              cellule est compressée en gzip : 90,5 millions de points en 370 Mo
+              au total.
+            </li>
+          </ol>
+          <p>
+            Le tout est reproductible : le script de construction
+            (<code>build_maxspeed.py</code>) tourne de bout en bout sur un petit
+            serveur.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Ce qu'il y a dedans</h3>
+          <p>
+            Répartition des points par limite de vitesse (extrait des valeurs les
+            plus courantes) :
+          </p>
+          <table class="speeds">
+            <tr><th>Limite</th><th>Part des points</th><th></th></tr>
+            <tr><td>50 km/h</td><td>26,2 %</td><td><span class="bar" style="width:100%"></span></td></tr>
+            <tr><td>30 km/h (zones 30)</td><td>18,5 %</td><td><span class="bar" style="width:71%"></span></td></tr>
+            <tr><td>90 km/h</td><td>9,5 %</td><td><span class="bar" style="width:36%"></span></td></tr>
+            <tr><td>80 km/h</td><td>9,2 %</td><td><span class="bar" style="width:35%"></span></td></tr>
+            <tr><td>70 km/h</td><td>6,0 %</td><td><span class="bar" style="width:23%"></span></td></tr>
+            <tr><td>60 km/h</td><td>5,7 %</td><td><span class="bar" style="width:22%"></span></td></tr>
+            <tr><td>100 km/h</td><td>4,6 %</td><td><span class="bar" style="width:18%"></span></td></tr>
+            <tr><td>40 km/h</td><td>3,3 %</td><td><span class="bar" style="width:13%"></span></td></tr>
+            <tr><td>48 km/h (30 mph, RU)</td><td>2,8 %</td><td><span class="bar" style="width:11%"></span></td></tr>
+            <tr><td>97 km/h (60 mph, RU)</td><td>2,4 %</td><td><span class="bar" style="width:9%"></span></td></tr>
+            <tr><td>32 km/h (20 mph, RU)</td><td>2,1 %</td><td><span class="bar" style="width:8%"></span></td></tr>
+            <tr><td>20 km/h (zones piétonnes)</td><td>2,1 %</td><td><span class="bar" style="width:8%"></span></td></tr>
+            <tr><td>120 km/h</td><td>1,8 %</td><td><span class="bar" style="width:7%"></span></td></tr>
+            <tr><td>130 km/h (autoroutes)</td><td>1,7 %</td><td><span class="bar" style="width:6%"></span></td></tr>
+            <tr><td>110 km/h</td><td>1,4 %</td><td><span class="bar" style="width:5%"></span></td></tr>
+          </table>
+          <p class="legal-note">
+            Valeurs <em>numériques</em> présentes dans OpenStreetMap. Les vitesses
+            réelles peuvent différer (travaux, panneaux temporaires, conditions
+            météo). Les autoroutes sans limite (ex. certaines portions allemandes)
+            n'ont pas de <code>maxspeed</code> : ZMap n'affiche alors aucune
+            vitesse.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Côté application</h3>
+          <p>
+            Le serveur renvoie, avec chaque itinéraire, un tableau de vitesses
+            aligné sur les points du tracé (une valeur par point). Le téléphone
+            enregistre tout dans son cache local : pendant la conduite, la limite
+            du tronçon courant est lue sans réseau, et le mode hors-ligne garde
+            tout le trajet. Le rattachement d'un trajet de 4 500 points prend
+            environ 170 ms sur le serveur.
+          </p>
+        </article>
+
+        <article class="card">
+          <h3>Précision et couverture</h3>
+          <ul>
+            <li>Couverture : Europe entière, longitude −12° à 46°, latitude 27° à 72°.</li>
+            <li>Rattachement : la route la plus proche à moins de 40 m du point.</li>
+            <li>Localisation d'un point : précision ≈ 0,76 m.</li>
+            <li>Données : OpenStreetMap, libre de droits (licence ODbL).</li>
+          </ul>
+        </article>
+      </section>
+    </main>
+
+    <footer id="f"></footer>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/components.js?v=6" defer></script>
+  </body>
+</html>
\ No newline at end of file
diff --git a/public/zmap/web/app.js b/public/zmap/web/app.js
new file mode 100644
index 0000000..a692675
--- /dev/null
+++ b/public/zmap/web/app.js
@@ -0,0 +1,188 @@
+(function(){
+"use strict";
+var API = location.origin;
+
+var map = L.map("map",{zoomControl:false,attributionControl:false}).setView([48.85,2.35],13);
+var osm = L.tileLayer("https://tile.openstreetmap.org/{z}/{x}/{y}.png",{maxZoom:19,attribution:"OSM"});
+var esri = L.tileLayer("https://server.arcgisonline.com/ArcGIS/rest/services/World_Imagery/MapServer/tile/{z}/{y}/{x}",{maxZoom:19,attribution:"Esri"});
+osm.addTo(map);
+L.control.attribution({position:"bottomleft",prefix:false}).addTo(map);
+
+var fromPt=null, toPt=null, routeLayer=null, stationLayer=null, gpsWatchId=null, gpsMarker=null;
+var selectingFrom=true;
+
+var $=function(id){return document.getElementById(id)};
+var $from=$("from"), $to=$("to"), $btnRoute=$("btn-route"), $btnClear=$("btn-clear");
+var $btnSat=$("btn-sat"), $btnGps=$("btn-gps"), $panel=$("panel");
+var $routeInfo=$("route-info"), $legend=$("speed-legend"), $loading=$("loading");
+var $searchIn=$("search-input"), $searchRes=$("search-results");
+
+function esc(s){var d=document.createElement("div");d.textContent=s;return d.innerHTML}
+
+$btnSat.onclick=function(){
+  if(map.hasLayer(esri)){map.removeLayer(esri);osm.addTo(map);$btnSat.className="icon-btn"}
+  else{map.removeLayer(osm);esri.addTo(map);$btnSat.className="icon-btn active"}
+};
+
+$btnGps.onclick=function(){
+  if(gpsWatchId!=null){stopGps();return}
+  if(!navigator.geolocation){alert("Géolocalisation non supportée");return}
+  gpsWatchId=navigator.geolocation.watchPosition(function(pos){
+    var lat=pos.coords.latitude,lng=pos.coords.longitude;
+    if(!gpsMarker){
+      var icon=L.divIcon({className:"",html:"<div class='gps-dot'></div>",iconSize:[14,14],iconAnchor:[7,7]});
+      gpsMarker=L.marker([lat,lng],{icon:icon,zIndexOffset:1000}).addTo(map);
+    } else gpsMarker.setLatLng([lat,lng]);
+  },function(e){alert("Erreur GPS: "+e.message)},{enableHighAccuracy:true,timeout:10000});
+  $btnGps.className="icon-btn active gps-active";
+};
+function stopGps(){
+  if(gpsWatchId!=null){navigator.geolocation.clearWatch(gpsWatchId);gpsWatchId=null}
+  if(gpsMarker){map.removeLayer(gpsMarker);gpsMarker=null}
+  $btnGps.className="icon-btn";
+}
+
+var searchTimer=null;
+$searchIn.oninput=function(){
+  clearTimeout(searchTimer);
+  var q=$searchIn.value.trim();
+  if(q.length<2){$searchRes.className="search-results";return}
+  searchTimer=setTimeout(function(){doSearch(q)},300);
+};
+$searchIn.onkeydown=function(e){if(e.key==="Escape"){$searchRes.className="search-results";$searchIn.blur()}};
+document.addEventListener("click",function(e){if(!e.target.closest(".search-wrap"))$searchRes.className="search-results"});
+
+function doSearch(q){
+  fetch(API+"/api/zmap/search?q="+encodeURIComponent(q))
+    .then(function(r){return r.json()})
+    .then(function(d){
+      if(!d.results||!d.results.length){$searchRes.innerHTML='<div class="sr-item" style="color:var(--dim)">Aucun résultat</div>';return}
+      $searchRes.innerHTML="";
+      for(var i=0;i<d.results.length;i++){
+        var r=d.results[i];
+        var el=document.createElement("div");
+        el.className="sr-item";
+        el.innerHTML="<div>"+esc(r.display_name)+"</div><div class='sr-type'>"+esc(r.type)+" · "+esc(r.category)+"</div>";
+        el.dataset.lat=r.lat;el.dataset.lng=r.lon;
+        el.onclick=function(){
+          var lat=parseFloat(this.dataset.lat),lng=parseFloat(this.dataset.lng);
+          map.setView([lat,lng],16);
+          if(selectingFrom){setFrom(lat,lng);selectingFrom=false}
+          else{setTo(lat,lng);selectingFrom=true}
+          $searchRes.className="search-results";$searchIn.value="";
+        };
+        $searchRes.appendChild(el);
+      }
+      $searchRes.className="search-results open";
+    }).catch(function(){});
+}
+
+map.on("click",function(e){
+  var lat=+e.latlng.lat.toFixed(5),lng=+e.latlng.lng.toFixed(5);
+  if(selectingFrom){setFrom(lat,lng);selectingFrom=false}
+  else{setTo(lat,lng);selectingFrom=true}
+});
+
+function setFrom(lat,lng){fromPt={lat:lat,lng:lng};$from.value=lat+","+lng;if(fromPt&&toPt)$btnRoute.disabled=false}
+function setTo(lat,lng){toPt={lat:lat,lng:lng};$to.value=lat+","+lng;if(fromPt&&toPt)$btnRoute.disabled=false}
+
+$btnClear.onclick=function(){
+  fromPt=toPt=null;$from.value="";$to.value="";$btnRoute.disabled=true;selectingFrom=true;
+  $routeInfo.className="route-info hidden";$legend.innerHTML="";
+  if(routeLayer){map.removeLayer(routeLayer);routeLayer=null}
+  if(stationLayer){map.removeLayer(stationLayer);stationLayer=null}
+};
+
+$btnRoute.onclick=function(){
+  if(!fromPt||!toPt)return;
+  $loading.className="loading show";
+  fetch(API+"/api/zmap/route?from="+fromPt.lat+","+fromPt.lng+"&to="+toPt.lat+","+toPt.lng)
+    .then(function(r){return r.json()})
+    .then(function(d){if(d.error){alert(d.error);return}renderRoute(d)})
+    .catch(function(e){alert("Erreur: "+e.message)})
+    .finally(function(){$loading.className="loading"});
+};
+
+function speedColor(k){
+  if(k==null)return"#555";
+  if(k<=20)return"#ef4444";if(k<=40)return"#f59e0b";if(k<=60)return"#eab308";
+  if(k<=80)return"#22c55e";if(k<=100)return"#06b6d4";if(k<=120)return"#3b82f6";return"#8b5cf6";
+}
+function speedCls(k){
+  if(k==null)return"sl-unk";
+  if(k<=20)return"sl-20";if(k<=40)return"sl-40";if(k<=60)return"sl-60";
+  if(k<=80)return"sl-80";if(k<=100)return"sl-100";if(k<=120)return"sl-120";return"sl-max";
+}
+
+function renderRoute(d){
+  if(routeLayer)map.removeLayer(routeLayer);
+  var coords=d.geometry&&d.geometry.coordinates||[];
+  var speeds=d.speeds||[];
+  var segs=[];
+  for(var i=0;i<coords.length-1;i++){
+    var kmh=speeds[i]!=null?speeds[i]:null;
+    var line=L.polyline([[coords[i][1],coords[i][0]],[coords[i+1][1],coords[i+1][0]]],
+      {color:speedColor(kmh),weight:5,opacity:.9,lineCap:"round",lineJoin:"round"});
+    if(kmh!=null)line.bindPopup("<b>"+kmh+" km/h</b>");
+    segs.push(line);
+  }
+  routeLayer=L.layerGroup(segs).addTo(map);
+  map.fitBounds(L.polyline(coords.map(function(c){return[c[1],c[0]]})).getBounds().pad(.1));
+
+  var covered=speeds.filter(function(s){return s!=null}).length;
+  var total=speeds.length;
+  var pct=total?Math.round(covered/total*100):0;
+  $routeInfo.className="route-info";
+  var dist={};
+  for(var i=0;i<speeds.length;i++){
+    var k=speeds[i]==null?"?":speeds[i]<=20?"0-20":speeds[i]<=40?"21-40":speeds[i]<=60?"41-60":speeds[i]<=80?"61-80":speeds[i]<=100?"81-100":speeds[i]<=120?"101-120":">120";
+    dist[k]=(dist[k]||0)+1;
+  }
+  var colors={"?":"#555","0-20":"#ef4444","21-40":"#f59e0b","41-60":"#eab308","61-80":"#22c55e","81-100":"#06b6d4","101-120":"#3b82f6",">120":"#8b5cf6"};
+  var order=["?","0-20","21-40","41-60","61-80","81-100","101-120",">120"];
+  var barHtml="<div class='speed-bar'>";
+  var distribHtml="<div class='speed-distrib'>";
+  for(var j=0;j<order.length;j++){
+    var cnt=dist[order[j]]||0;
+    if(cnt===0)continue;
+    var bpct=Math.round(cnt/speeds.length*100);
+    barHtml+="<div style='width:"+bpct+"%;background:"+colors[order[j]]+"'></div>";
+    distribHtml+="<span><span class='sd-dot' style='background:"+colors[order[j]]+"'></span>"+order[j]+" km/h: "+cnt+"</span>";
+  }
+  barHtml+="</div>";distribHtml+="</div>";
+  $routeInfo.innerHTML='<div class="ri-main">'+d.distance_km+" km</div>"+
+    '<div class="ri-sub">'+d.duration_min+" min · "+covered+"/"+total+" segments · <b>"+pct+"%</b> couverts</div>"+barHtml+distribHtml;
+
+  var leg=[["≤20","sl-20"],["21-40","sl-40"],["41-60","sl-60"],
+    ["61-80","sl-80"],["81-100","sl-100"],["101-120","sl-120"],[">120","sl-max"],["?","sl-unk"]];
+  $legend.innerHTML=leg.map(function(l){return'<span class="'+l[1]+'">'+l[0]+" km/h</span>"}).join("");
+  loadStations(coords);
+}
+
+function loadStations(coords){
+  if(stationLayer)map.removeLayer(stationLayer);
+  if(!coords.length)return;
+  var mnLa=90,mxLa=-90,mnLo=180,mxLo=-180;
+  for(var i=0;i<coords.length;i++){
+    if(coords[i][1]<mnLa)mnLa=coords[i][1];if(coords[i][1]>mxLa)mxLa=coords[i][1];
+    if(coords[i][0]<mnLo)mnLo=coords[i][0];if(coords[i][0]>mxLo)mxLo=coords[i][0];
+  }
+  var p=.02;
+  fetch(API+"/api/zmap/stations?south="+(mnLa-p)+"&west="+(mnLo-p)+"&north="+(mxLa+p)+"&east="+(mxLo+p))
+    .then(function(r){return r.json()})
+    .then(function(d){
+      if(!d.stations||!d.stations.length)return;
+      stationLayer=L.layerGroup().addTo(map);
+      for(var i=0;i<d.stations.length;i++){
+        var s=d.stations[i];
+        var icon=L.divIcon({className:"",html:"<div class='station-dot'></div>",iconSize:[10,10],iconAnchor:[5,5]});
+        var pw=0;
+        if(s.connectors)for(var j=0;j<s.connectors.length;j++){var v=s.connectors[j].powerKw||0;if(v>pw)pw=v}
+        L.marker([s.lat,s.lon],{icon:icon}).bindPopup(
+          "<b>"+esc((s.name||"").slice(0,40)||"Borne")+"</b><br>"+
+          (pw?pw+" kW":"")+" "+esc(s.network||"")+"<br>"+esc(s.status||"")
+        ).addTo(stationLayer);
+      }
+    }).catch(function(){});
+}
+})();
diff --git a/public/zmap/web/index.html b/public/zmap/web/index.html
new file mode 100644
index 0000000..3423fa4
--- /dev/null
+++ b/public/zmap/web/index.html
@@ -0,0 +1,56 @@
+<!DOCTYPE html>
+<html lang="fr">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no">
+<title>ZMap — Web</title>
+<link rel="stylesheet" href="leaflet/leaflet.css">
+<link rel="stylesheet" href="style.css">
+</head>
+<body>
+<div id="map"></div>
+
+<div class="topbar">
+  <div class="search-wrap">
+    <svg class="icon" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><circle cx="11" cy="11" r="8"/><path d="M21 21l-4.35-4.35"/></svg>
+    <input id="search-input" type="text" placeholder="Rechercher un lieu..." autocomplete="off">
+    <div id="search-results" class="search-results"></div>
+  </div>
+  <button id="btn-gps" class="icon-btn" title="Ma position">
+    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><circle cx="12" cy="12" r="3"/><path d="M12 2v4m0 12v4M2 12h4m12 0h4"/></svg>
+  </button>
+  <button id="btn-sat" class="icon-btn" title="Vue satellite">
+    <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><circle cx="12" cy="12" r="10"/><path d="M2 12h20M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10A15.3 15.3 0 0 1 12 2z"/></svg>
+  </button>
+</div>
+
+<div id="panel" class="panel open">
+  <div class="panel-head">
+    <h2>Itinéraire</h2>
+    <button class="panel-close" id="panel-close">&times;</button>
+  </div>
+  <div class="panel-body">
+    <div class="point-row">
+      <div class="point-dot from"></div>
+      <input id="from" placeholder="Départ (clic ou recherche)" readonly>
+    </div>
+    <div class="point-row">
+      <div class="point-dot to"></div>
+      <input id="to" placeholder="Arrivée (clic ou recherche)" readonly>
+    </div>
+    <div class="actions">
+      <button class="btn" id="btn-route" disabled>Calculer</button>
+      <button class="btn btn-outline btn-danger" id="btn-clear">Effacer</button>
+    </div>
+    <div id="route-info" class="route-info hidden"></div>
+    <div id="speed-legend" class="speed-legend"></div>
+    <p class="hint">Cliquez sur la carte ou utilisez la barre de recherche</p>
+  </div>
+</div>
+
+<div id="loading"><div class="spinner"></div> Calcul de l'itinéraire...</div>
+
+<script src="leaflet/leaflet.js"></script>
+<script src="app.js"></script>
+</body>
+</html>
diff --git a/public/zmap/web/leaflet/images/layers-2x.png b/public/zmap/web/leaflet/images/layers-2x.png
new file mode 100644
index 0000000..200c333
Binary files /dev/null and b/public/zmap/web/leaflet/images/layers-2x.png differ
diff --git a/public/zmap/web/leaflet/images/layers.png b/public/zmap/web/leaflet/images/layers.png
new file mode 100644
index 0000000..1a72e57
Binary files /dev/null and b/public/zmap/web/leaflet/images/layers.png differ
diff --git a/public/zmap/web/leaflet/leaflet.css b/public/zmap/web/leaflet/leaflet.css
new file mode 100644
index 0000000..2961b76
--- /dev/null
+++ b/public/zmap/web/leaflet/leaflet.css
@@ -0,0 +1,661 @@
+/* required styles */
+
+.leaflet-pane,
+.leaflet-tile,
+.leaflet-marker-icon,
+.leaflet-marker-shadow,
+.leaflet-tile-container,
+.leaflet-pane > svg,
+.leaflet-pane > canvas,
+.leaflet-zoom-box,
+.leaflet-image-layer,
+.leaflet-layer {
+	position: absolute;
+	left: 0;
+	top: 0;
+	}
+.leaflet-container {
+	overflow: hidden;
+	}
+.leaflet-tile,
+.leaflet-marker-icon,
+.leaflet-marker-shadow {
+	-webkit-user-select: none;
+	   -moz-user-select: none;
+	        user-select: none;
+	  -webkit-user-drag: none;
+	}
+/* Prevents IE11 from highlighting tiles in blue */
+.leaflet-tile::selection {
+	background: transparent;
+}
+/* Safari renders non-retina tile on retina better with this, but Chrome is worse */
+.leaflet-safari .leaflet-tile {
+	image-rendering: -webkit-optimize-contrast;
+	}
+/* hack that prevents hw layers "stretching" when loading new tiles */
+.leaflet-safari .leaflet-tile-container {
+	width: 1600px;
+	height: 1600px;
+	-webkit-transform-origin: 0 0;
+	}
+.leaflet-marker-icon,
+.leaflet-marker-shadow {
+	display: block;
+	}
+/* .leaflet-container svg: reset svg max-width decleration shipped in Joomla! (joomla.org) 3.x */
+/* .leaflet-container img: map is broken in FF if you have max-width: 100% on tiles */
+.leaflet-container .leaflet-overlay-pane svg {
+	max-width: none !important;
+	max-height: none !important;
+	}
+.leaflet-container .leaflet-marker-pane img,
+.leaflet-container .leaflet-shadow-pane img,
+.leaflet-container .leaflet-tile-pane img,
+.leaflet-container img.leaflet-image-layer,
+.leaflet-container .leaflet-tile {
+	max-width: none !important;
+	max-height: none !important;
+	width: auto;
+	padding: 0;
+	}
+
+.leaflet-container img.leaflet-tile {
+	/* See: https://bugs.chromium.org/p/chromium/issues/detail?id=600120 */
+	mix-blend-mode: plus-lighter;
+}
+
+.leaflet-container.leaflet-touch-zoom {
+	-ms-touch-action: pan-x pan-y;
+	touch-action: pan-x pan-y;
+	}
+.leaflet-container.leaflet-touch-drag {
+	-ms-touch-action: pinch-zoom;
+	/* Fallback for FF which doesn't support pinch-zoom */
+	touch-action: none;
+	touch-action: pinch-zoom;
+}
+.leaflet-container.leaflet-touch-drag.leaflet-touch-zoom {
+	-ms-touch-action: none;
+	touch-action: none;
+}
+.leaflet-container {
+	-webkit-tap-highlight-color: transparent;
+}
+.leaflet-container a {
+	-webkit-tap-highlight-color: rgba(51, 181, 229, 0.4);
+}
+.leaflet-tile {
+	filter: inherit;
+	visibility: hidden;
+	}
+.leaflet-tile-loaded {
+	visibility: inherit;
+	}
+.leaflet-zoom-box {
+	width: 0;
+	height: 0;
+	-moz-box-sizing: border-box;
+	     box-sizing: border-box;
+	z-index: 800;
+	}
+/* workaround for https://bugzilla.mozilla.org/show_bug.cgi?id=888319 */
+.leaflet-overlay-pane svg {
+	-moz-user-select: none;
+	}
+
+.leaflet-pane         { z-index: 400; }
+
+.leaflet-tile-pane    { z-index: 200; }
+.leaflet-overlay-pane { z-index: 400; }
+.leaflet-shadow-pane  { z-index: 500; }
+.leaflet-marker-pane  { z-index: 600; }
+.leaflet-tooltip-pane   { z-index: 650; }
+.leaflet-popup-pane   { z-index: 700; }
+
+.leaflet-map-pane canvas { z-index: 100; }
+.leaflet-map-pane svg    { z-index: 200; }
+
+.leaflet-vml-shape {
+	width: 1px;
+	height: 1px;
+	}
+.lvml {
+	behavior: url(#default#VML);
+	display: inline-block;
+	position: absolute;
+	}
+
+
+/* control positioning */
+
+.leaflet-control {
+	position: relative;
+	z-index: 800;
+	pointer-events: visiblePainted; /* IE 9-10 doesn't have auto */
+	pointer-events: auto;
+	}
+.leaflet-top,
+.leaflet-bottom {
+	position: absolute;
+	z-index: 1000;
+	pointer-events: none;
+	}
+.leaflet-top {
+	top: 0;
+	}
+.leaflet-right {
+	right: 0;
+	}
+.leaflet-bottom {
+	bottom: 0;
+	}
+.leaflet-left {
+	left: 0;
+	}
+.leaflet-control {
+	float: left;
+	clear: both;
+	}
+.leaflet-right .leaflet-control {
+	float: right;
+	}
+.leaflet-top .leaflet-control {
+	margin-top: 10px;
+	}
+.leaflet-bottom .leaflet-control {
+	margin-bottom: 10px;
+	}
+.leaflet-left .leaflet-control {
+	margin-left: 10px;
+	}
+.leaflet-right .leaflet-control {
+	margin-right: 10px;
+	}
+
+
+/* zoom and fade animations */
+
+.leaflet-fade-anim .leaflet-popup {
+	opacity: 0;
+	-webkit-transition: opacity 0.2s linear;
+	   -moz-transition: opacity 0.2s linear;
+	        transition: opacity 0.2s linear;
+	}
+.leaflet-fade-anim .leaflet-map-pane .leaflet-popup {
+	opacity: 1;
+	}
+.leaflet-zoom-animated {
+	-webkit-transform-origin: 0 0;
+	    -ms-transform-origin: 0 0;
+	        transform-origin: 0 0;
+	}
+svg.leaflet-zoom-animated {
+	will-change: transform;
+}
+
+.leaflet-zoom-anim .leaflet-zoom-animated {
+	-webkit-transition: -webkit-transform 0.25s cubic-bezier(0,0,0.25,1);
+	   -moz-transition:    -moz-transform 0.25s cubic-bezier(0,0,0.25,1);
+	        transition:         transform 0.25s cubic-bezier(0,0,0.25,1);
+	}
+.leaflet-zoom-anim .leaflet-tile,
+.leaflet-pan-anim .leaflet-tile {
+	-webkit-transition: none;
+	   -moz-transition: none;
+	        transition: none;
+	}
+
+.leaflet-zoom-anim .leaflet-zoom-hide {
+	visibility: hidden;
+	}
+
+
+/* cursors */
+
+.leaflet-interactive {
+	cursor: pointer;
+	}
+.leaflet-grab {
+	cursor: -webkit-grab;
+	cursor:    -moz-grab;
+	cursor:         grab;
+	}
+.leaflet-crosshair,
+.leaflet-crosshair .leaflet-interactive {
+	cursor: crosshair;
+	}
+.leaflet-popup-pane,
+.leaflet-control {
+	cursor: auto;
+	}
+.leaflet-dragging .leaflet-grab,
+.leaflet-dragging .leaflet-grab .leaflet-interactive,
+.leaflet-dragging .leaflet-marker-draggable {
+	cursor: move;
+	cursor: -webkit-grabbing;
+	cursor:    -moz-grabbing;
+	cursor:         grabbing;
+	}
+
+/* marker & overlays interactivity */
+.leaflet-marker-icon,
+.leaflet-marker-shadow,
+.leaflet-image-layer,
+.leaflet-pane > svg path,
+.leaflet-tile-container {
+	pointer-events: none;
+	}
+
+.leaflet-marker-icon.leaflet-interactive,
+.leaflet-image-layer.leaflet-interactive,
+.leaflet-pane > svg path.leaflet-interactive,
+svg.leaflet-image-layer.leaflet-interactive path {
+	pointer-events: visiblePainted; /* IE 9-10 doesn't have auto */
+	pointer-events: auto;
+	}
+
+/* visual tweaks */
+
+.leaflet-container {
+	background: #ddd;
+	outline-offset: 1px;
+	}
+.leaflet-container a {
+	color: #0078A8;
+	}
+.leaflet-zoom-box {
+	border: 2px dotted #38f;
+	background: rgba(255,255,255,0.5);
+	}
+
+
+/* general typography */
+.leaflet-container {
+	font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;
+	font-size: 12px;
+	font-size: 0.75rem;
+	line-height: 1.5;
+	}
+
+
+/* general toolbar styles */
+
+.leaflet-bar {
+	box-shadow: 0 1px 5px rgba(0,0,0,0.65);
+	border-radius: 4px;
+	}
+.leaflet-bar a {
+	background-color: #fff;
+	border-bottom: 1px solid #ccc;
+	width: 26px;
+	height: 26px;
+	line-height: 26px;
+	display: block;
+	text-align: center;
+	text-decoration: none;
+	color: black;
+	}
+.leaflet-bar a,
+.leaflet-control-layers-toggle {
+	background-position: 50% 50%;
+	background-repeat: no-repeat;
+	display: block;
+	}
+.leaflet-bar a:hover,
+.leaflet-bar a:focus {
+	background-color: #f4f4f4;
+	}
+.leaflet-bar a:first-child {
+	border-top-left-radius: 4px;
+	border-top-right-radius: 4px;
+	}
+.leaflet-bar a:last-child {
+	border-bottom-left-radius: 4px;
+	border-bottom-right-radius: 4px;
+	border-bottom: none;
+	}
+.leaflet-bar a.leaflet-disabled {
+	cursor: default;
+	background-color: #f4f4f4;
+	color: #bbb;
+	}
+
+.leaflet-touch .leaflet-bar a {
+	width: 30px;
+	height: 30px;
+	line-height: 30px;
+	}
+.leaflet-touch .leaflet-bar a:first-child {
+	border-top-left-radius: 2px;
+	border-top-right-radius: 2px;
+	}
+.leaflet-touch .leaflet-bar a:last-child {
+	border-bottom-left-radius: 2px;
+	border-bottom-right-radius: 2px;
+	}
+
+/* zoom control */
+
+.leaflet-control-zoom-in,
+.leaflet-control-zoom-out {
+	font: bold 18px 'Lucida Console', Monaco, monospace;
+	text-indent: 1px;
+	}
+
+.leaflet-touch .leaflet-control-zoom-in, .leaflet-touch .leaflet-control-zoom-out  {
+	font-size: 22px;
+	}
+
+
+/* layers control */
+
+.leaflet-control-layers {
+	box-shadow: 0 1px 5px rgba(0,0,0,0.4);
+	background: #fff;
+	border-radius: 5px;
+	}
+.leaflet-control-layers-toggle {
+	background-image: url(images/layers.png);
+	width: 36px;
+	height: 36px;
+	}
+.leaflet-retina .leaflet-control-layers-toggle {
+	background-image: url(images/layers-2x.png);
+	background-size: 26px 26px;
+	}
+.leaflet-touch .leaflet-control-layers-toggle {
+	width: 44px;
+	height: 44px;
+	}
+.leaflet-control-layers .leaflet-control-layers-list,
+.leaflet-control-layers-expanded .leaflet-control-layers-toggle {
+	display: none;
+	}
+.leaflet-control-layers-expanded .leaflet-control-layers-list {
+	display: block;
+	position: relative;
+	}
+.leaflet-control-layers-expanded {
+	padding: 6px 10px 6px 6px;
+	color: #333;
+	background: #fff;
+	}
+.leaflet-control-layers-scrollbar {
+	overflow-y: scroll;
+	overflow-x: hidden;
+	padding-right: 5px;
+	}
+.leaflet-control-layers-selector {
+	margin-top: 2px;
+	position: relative;
+	top: 1px;
+	}
+.leaflet-control-layers label {
+	display: block;
+	font-size: 13px;
+	font-size: 1.08333em;
+	}
+.leaflet-control-layers-separator {
+	height: 0;
+	border-top: 1px solid #ddd;
+	margin: 5px -10px 5px -6px;
+	}
+
+/* Default icon URLs */
+.leaflet-default-icon-path { /* used only in path-guessing heuristic, see L.Icon.Default */
+	background-image: url(images/marker-icon.png);
+	}
+
+
+/* attribution and scale controls */
+
+.leaflet-container .leaflet-control-attribution {
+	background: #fff;
+	background: rgba(255, 255, 255, 0.8);
+	margin: 0;
+	}
+.leaflet-control-attribution,
+.leaflet-control-scale-line {
+	padding: 0 5px;
+	color: #333;
+	line-height: 1.4;
+	}
+.leaflet-control-attribution a {
+	text-decoration: none;
+	}
+.leaflet-control-attribution a:hover,
+.leaflet-control-attribution a:focus {
+	text-decoration: underline;
+	}
+.leaflet-attribution-flag {
+	display: inline !important;
+	vertical-align: baseline !important;
+	width: 1em;
+	height: 0.6669em;
+	}
+.leaflet-left .leaflet-control-scale {
+	margin-left: 5px;
+	}
+.leaflet-bottom .leaflet-control-scale {
+	margin-bottom: 5px;
+	}
+.leaflet-control-scale-line {
+	border: 2px solid #777;
+	border-top: none;
+	line-height: 1.1;
+	padding: 2px 5px 1px;
+	white-space: nowrap;
+	-moz-box-sizing: border-box;
+	     box-sizing: border-box;
+	background: rgba(255, 255, 255, 0.8);
+	text-shadow: 1px 1px #fff;
+	}
+.leaflet-control-scale-line:not(:first-child) {
+	border-top: 2px solid #777;
+	border-bottom: none;
+	margin-top: -2px;
+	}
+.leaflet-control-scale-line:not(:first-child):not(:last-child) {
+	border-bottom: 2px solid #777;
+	}
+
+.leaflet-touch .leaflet-control-attribution,
+.leaflet-touch .leaflet-control-layers,
+.leaflet-touch .leaflet-bar {
+	box-shadow: none;
+	}
+.leaflet-touch .leaflet-control-layers,
+.leaflet-touch .leaflet-bar {
+	border: 2px solid rgba(0,0,0,0.2);
+	background-clip: padding-box;
+	}
+
+
+/* popup */
+
+.leaflet-popup {
+	position: absolute;
+	text-align: center;
+	margin-bottom: 20px;
+	}
+.leaflet-popup-content-wrapper {
+	padding: 1px;
+	text-align: left;
+	border-radius: 12px;
+	}
+.leaflet-popup-content {
+	margin: 13px 24px 13px 20px;
+	line-height: 1.3;
+	font-size: 13px;
+	font-size: 1.08333em;
+	min-height: 1px;
+	}
+.leaflet-popup-content p {
+	margin: 17px 0;
+	margin: 1.3em 0;
+	}
+.leaflet-popup-tip-container {
+	width: 40px;
+	height: 20px;
+	position: absolute;
+	left: 50%;
+	margin-top: -1px;
+	margin-left: -20px;
+	overflow: hidden;
+	pointer-events: none;
+	}
+.leaflet-popup-tip {
+	width: 17px;
+	height: 17px;
+	padding: 1px;
+
+	margin: -10px auto 0;
+	pointer-events: auto;
+
+	-webkit-transform: rotate(45deg);
+	   -moz-transform: rotate(45deg);
+	    -ms-transform: rotate(45deg);
+	        transform: rotate(45deg);
+	}
+.leaflet-popup-content-wrapper,
+.leaflet-popup-tip {
+	background: white;
+	color: #333;
+	box-shadow: 0 3px 14px rgba(0,0,0,0.4);
+	}
+.leaflet-container a.leaflet-popup-close-button {
+	position: absolute;
+	top: 0;
+	right: 0;
+	border: none;
+	text-align: center;
+	width: 24px;
+	height: 24px;
+	font: 16px/24px Tahoma, Verdana, sans-serif;
+	color: #757575;
+	text-decoration: none;
+	background: transparent;
+	}
+.leaflet-container a.leaflet-popup-close-button:hover,
+.leaflet-container a.leaflet-popup-close-button:focus {
+	color: #585858;
+	}
+.leaflet-popup-scrolled {
+	overflow: auto;
+	}
+
+.leaflet-oldie .leaflet-popup-content-wrapper {
+	-ms-zoom: 1;
+	}
+.leaflet-oldie .leaflet-popup-tip {
+	width: 24px;
+	margin: 0 auto;
+
+	-ms-filter: "progid:DXImageTransform.Microsoft.Matrix(M11=0.70710678, M12=0.70710678, M21=-0.70710678, M22=0.70710678)";
+	filter: progid:DXImageTransform.Microsoft.Matrix(M11=0.70710678, M12=0.70710678, M21=-0.70710678, M22=0.70710678);
+	}
+
+.leaflet-oldie .leaflet-control-zoom,
+.leaflet-oldie .leaflet-control-layers,
+.leaflet-oldie .leaflet-popup-content-wrapper,
+.leaflet-oldie .leaflet-popup-tip {
+	border: 1px solid #999;
+	}
+
+
+/* div icon */
+
+.leaflet-div-icon {
+	background: #fff;
+	border: 1px solid #666;
+	}
+
+
+/* Tooltip */
+/* Base styles for the element that has a tooltip */
+.leaflet-tooltip {
+	position: absolute;
+	padding: 6px;
+	background-color: #fff;
+	border: 1px solid #fff;
+	border-radius: 3px;
+	color: #222;
+	white-space: nowrap;
+	-webkit-user-select: none;
+	-moz-user-select: none;
+	-ms-user-select: none;
+	user-select: none;
+	pointer-events: none;
+	box-shadow: 0 1px 3px rgba(0,0,0,0.4);
+	}
+.leaflet-tooltip.leaflet-interactive {
+	cursor: pointer;
+	pointer-events: auto;
+	}
+.leaflet-tooltip-top:before,
+.leaflet-tooltip-bottom:before,
+.leaflet-tooltip-left:before,
+.leaflet-tooltip-right:before {
+	position: absolute;
+	pointer-events: none;
+	border: 6px solid transparent;
+	background: transparent;
+	content: "";
+	}
+
+/* Directions */
+
+.leaflet-tooltip-bottom {
+	margin-top: 6px;
+}
+.leaflet-tooltip-top {
+	margin-top: -6px;
+}
+.leaflet-tooltip-bottom:before,
+.leaflet-tooltip-top:before {
+	left: 50%;
+	margin-left: -6px;
+	}
+.leaflet-tooltip-top:before {
+	bottom: 0;
+	margin-bottom: -12px;
+	border-top-color: #fff;
+	}
+.leaflet-tooltip-bottom:before {
+	top: 0;
+	margin-top: -12px;
+	margin-left: -6px;
+	border-bottom-color: #fff;
+	}
+.leaflet-tooltip-left {
+	margin-left: -6px;
+}
+.leaflet-tooltip-right {
+	margin-left: 6px;
+}
+.leaflet-tooltip-left:before,
+.leaflet-tooltip-right:before {
+	top: 50%;
+	margin-top: -6px;
+	}
+.leaflet-tooltip-left:before {
+	right: 0;
+	margin-right: -12px;
+	border-left-color: #fff;
+	}
+.leaflet-tooltip-right:before {
+	left: 0;
+	margin-left: -12px;
+	border-right-color: #fff;
+	}
+
+/* Printing */
+
+@media print {
+	/* Prevent printers from removing background-images of controls. */
+	.leaflet-control {
+		-webkit-print-color-adjust: exact;
+		print-color-adjust: exact;
+		}
+	}
diff --git a/public/zmap/web/leaflet/leaflet.js b/public/zmap/web/leaflet/leaflet.js
new file mode 100644
index 0000000..a3bf693
--- /dev/null
+++ b/public/zmap/web/leaflet/leaflet.js
@@ -0,0 +1,6 @@
+/* @preserve
+ * Leaflet 1.9.4, a JS library for interactive maps. https://leafletjs.com
+ * (c) 2010-2023 Vladimir Agafonkin, (c) 2010-2011 CloudMade
+ */
+!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t||self).leaflet={})}(this,function(t){"use strict";function l(t){for(var e,i,n=1,o=arguments.length;n<o;n++)for(e in i=arguments[n])t[e]=i[e];return t}var R=Object.create||function(t){return N.prototype=t,new N};function N(){}function a(t,e){var i,n=Array.prototype.slice;return t.bind?t.bind.apply(t,n.call(arguments,1)):(i=n.call(arguments,2),function(){return t.apply(e,i.length?i.concat(n.call(arguments)):arguments)})}var D=0;function h(t){return"_leaflet_id"in t||(t._leaflet_id=++D),t._leaflet_id}function j(t,e,i){var n,o,s=function(){n=!1,o&&(r.apply(i,o),o=!1)},r=function(){n?o=arguments:(t.apply(i,arguments),setTimeout(s,e),n=!0)};return r}function H(t,e,i){var n=e[1],e=e[0],o=n-e;return t===n&&i?t:((t-e)%o+o)%o+e}function u(){return!1}function i(t,e){return!1===e?t:(e=Math.pow(10,void 0===e?6:e),Math.round(t*e)/e)}function W(t){return t.trim?t.trim():t.replace(/^\s+|\s+$/g,"")}function F(t){return W(t).split(/\s+/)}function c(t,e){for(var i in Object.prototype.hasOwnProperty.call(t,"options")||(t.options=t.options?R(t.options):{}),e)t.options[i]=e[i];return t.options}function U(t,e,i){var n,o=[];for(n in t)o.push(encodeURIComponent(i?n.toUpperCase():n)+"="+encodeURIComponent(t[n]));return(e&&-1!==e.indexOf("?")?"&":"?")+o.join("&")}var V=/\{ *([\w_ -]+) *\}/g;function q(t,i){return t.replace(V,function(t,e){e=i[e];if(void 0===e)throw new Error("No value provided for variable "+t);return e="function"==typeof e?e(i):e})}var d=Array.isArray||function(t){return"[object Array]"===Object.prototype.toString.call(t)};function G(t,e){for(var i=0;i<t.length;i++)if(t[i]===e)return i;return-1}var K="data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=";function Y(t){return window["webkit"+t]||window["moz"+t]||window["ms"+t]}var X=0;function J(t){var e=+new Date,i=Math.max(0,16-(e-X));return X=e+i,window.setTimeout(t,i)}var $=window.requestAnimationFrame||Y("RequestAnimationFrame")||J,Q=window.cancelAnimationFrame||Y("CancelAnimationFrame")||Y("CancelRequestAnimationFrame")||function(t){window.clearTimeout(t)};function x(t,e,i){if(!i||$!==J)return $.call(window,a(t,e));t.call(e)}function r(t){t&&Q.call(window,t)}var tt={__proto__:null,extend:l,create:R,bind:a,get lastId(){return D},stamp:h,throttle:j,wrapNum:H,falseFn:u,formatNum:i,trim:W,splitWords:F,setOptions:c,getParamString:U,template:q,isArray:d,indexOf:G,emptyImageUrl:K,requestFn:$,cancelFn:Q,requestAnimFrame:x,cancelAnimFrame:r};function et(){}et.extend=function(t){function e(){c(this),this.initialize&&this.initialize.apply(this,arguments),this.callInitHooks()}var i,n=e.__super__=this.prototype,o=R(n);for(i in(o.constructor=e).prototype=o,this)Object.prototype.hasOwnProperty.call(this,i)&&"prototype"!==i&&"__super__"!==i&&(e[i]=this[i]);if(t.statics&&l(e,t.statics),t.includes){var s=t.includes;if("undefined"!=typeof L&&L&&L.Mixin){s=d(s)?s:[s];for(var r=0;r<s.length;r++)s[r]===L.Mixin.Events&&console.warn("Deprecated include of L.Mixin.Events: this property will be removed in future releases, please inherit from L.Evented instead.",(new Error).stack)}l.apply(null,[o].concat(t.includes))}return l(o,t),delete o.statics,delete o.includes,o.options&&(o.options=n.options?R(n.options):{},l(o.options,t.options)),o._initHooks=[],o.callInitHooks=function(){if(!this._initHooksCalled){n.callInitHooks&&n.callInitHooks.call(this),this._initHooksCalled=!0;for(var t=0,e=o._initHooks.length;t<e;t++)o._initHooks[t].call(this)}},e},et.include=function(t){var e=this.prototype.options;return l(this.prototype,t),t.options&&(this.prototype.options=e,this.mergeOptions(t.options)),this},et.mergeOptions=function(t){return l(this.prototype.options,t),this},et.addInitHook=function(t){var e=Array.prototype.slice.call(arguments,1),i="function"==typeof t?t:function(){this[t].apply(this,e)};return this.prototype._initHooks=this.prototype._initHooks||[],this.prototype._initHooks.push(i),this};var e={on:function(t,e,i){if("object"==typeof t)for(var n in t)this._on(n,t[n],e);else for(var o=0,s=(t=F(t)).length;o<s;o++)this._on(t[o],e,i);return this},off:function(t,e,i){if(arguments.length)if("object"==typeof t)for(var n in t)this._off(n,t[n],e);else{t=F(t);for(var o=1===arguments.length,s=0,r=t.length;s<r;s++)o?this._off(t[s]):this._off(t[s],e,i)}else delete this._events;return this},_on:function(t,e,i,n){"function"!=typeof e?console.warn("wrong listener type: "+typeof e):!1===this._listens(t,e,i)&&(e={fn:e,ctx:i=i===this?void 0:i},n&&(e.once=!0),this._events=this._events||{},this._events[t]=this._events[t]||[],this._events[t].push(e))},_off:function(t,e,i){var n,o,s;if(this._events&&(n=this._events[t]))if(1===arguments.length){if(this._firingCount)for(o=0,s=n.length;o<s;o++)n[o].fn=u;delete this._events[t]}else"function"!=typeof e?console.warn("wrong listener type: "+typeof e):!1!==(e=this._listens(t,e,i))&&(i=n[e],this._firingCount&&(i.fn=u,this._events[t]=n=n.slice()),n.splice(e,1))},fire:function(t,e,i){if(this.listens(t,i)){var n=l({},e,{type:t,target:this,sourceTarget:e&&e.sourceTarget||this});if(this._events){var o=this._events[t];if(o){this._firingCount=this._firingCount+1||1;for(var s=0,r=o.length;s<r;s++){var a=o[s],h=a.fn;a.once&&this.off(t,h,a.ctx),h.call(a.ctx||this,n)}this._firingCount--}}i&&this._propagateEvent(n)}return this},listens:function(t,e,i,n){"string"!=typeof t&&console.warn('"string" type argument expected');var o=e,s=("function"!=typeof e&&(n=!!e,i=o=void 0),this._events&&this._events[t]);if(s&&s.length&&!1!==this._listens(t,o,i))return!0;if(n)for(var r in this._eventParents)if(this._eventParents[r].listens(t,e,i,n))return!0;return!1},_listens:function(t,e,i){if(this._events){var n=this._events[t]||[];if(!e)return!!n.length;i===this&&(i=void 0);for(var o=0,s=n.length;o<s;o++)if(n[o].fn===e&&n[o].ctx===i)return o}return!1},once:function(t,e,i){if("object"==typeof t)for(var n in t)this._on(n,t[n],e,!0);else for(var o=0,s=(t=F(t)).length;o<s;o++)this._on(t[o],e,i,!0);return this},addEventParent:function(t){return this._eventParents=this._eventParents||{},this._eventParents[h(t)]=t,this},removeEventParent:function(t){return this._eventParents&&delete this._eventParents[h(t)],this},_propagateEvent:function(t){for(var e in this._eventParents)this._eventParents[e].fire(t.type,l({layer:t.target,propagatedFrom:t.target},t),!0)}},it=(e.addEventListener=e.on,e.removeEventListener=e.clearAllEventListeners=e.off,e.addOneTimeEventListener=e.once,e.fireEvent=e.fire,e.hasEventListeners=e.listens,et.extend(e));function p(t,e,i){this.x=i?Math.round(t):t,this.y=i?Math.round(e):e}var nt=Math.trunc||function(t){return 0<t?Math.floor(t):Math.ceil(t)};function m(t,e,i){return t instanceof p?t:d(t)?new p(t[0],t[1]):null==t?t:"object"==typeof t&&"x"in t&&"y"in t?new p(t.x,t.y):new p(t,e,i)}function f(t,e){if(t)for(var i=e?[t,e]:t,n=0,o=i.length;n<o;n++)this.extend(i[n])}function _(t,e){return!t||t instanceof f?t:new f(t,e)}function s(t,e){if(t)for(var i=e?[t,e]:t,n=0,o=i.length;n<o;n++)this.extend(i[n])}function g(t,e){return t instanceof s?t:new s(t,e)}function v(t,e,i){if(isNaN(t)||isNaN(e))throw new Error("Invalid LatLng object: ("+t+", "+e+")");this.lat=+t,this.lng=+e,void 0!==i&&(this.alt=+i)}function w(t,e,i){return t instanceof v?t:d(t)&&"object"!=typeof t[0]?3===t.length?new v(t[0],t[1],t[2]):2===t.length?new v(t[0],t[1]):null:null==t?t:"object"==typeof t&&"lat"in t?new v(t.lat,"lng"in t?t.lng:t.lon,t.alt):void 0===e?null:new v(t,e,i)}p.prototype={clone:function(){return new p(this.x,this.y)},add:function(t){return this.clone()._add(m(t))},_add:function(t){return this.x+=t.x,this.y+=t.y,this},subtract:function(t){return this.clone()._subtract(m(t))},_subtract:function(t){return this.x-=t.x,this.y-=t.y,this},divideBy:function(t){return this.clone()._divideBy(t)},_divideBy:function(t){return this.x/=t,this.y/=t,this},multiplyBy:function(t){return this.clone()._multiplyBy(t)},_multiplyBy:function(t){return this.x*=t,this.y*=t,this},scaleBy:function(t){return new p(this.x*t.x,this.y*t.y)},unscaleBy:function(t){return new p(this.x/t.x,this.y/t.y)},round:function(){return this.clone()._round()},_round:function(){return this.x=Math.round(this.x),this.y=Math.round(this.y),this},floor:function(){return this.clone()._floor()},_floor:function(){return this.x=Math.floor(this.x),this.y=Math.floor(this.y),this},ceil:function(){return this.clone()._ceil()},_ceil:function(){return this.x=Math.ceil(this.x),this.y=Math.ceil(this.y),this},trunc:function(){return this.clone()._trunc()},_trunc:function(){return this.x=nt(this.x),this.y=nt(this.y),this},distanceTo:function(t){var e=(t=m(t)).x-this.x,t=t.y-this.y;return Math.sqrt(e*e+t*t)},equals:function(t){return(t=m(t)).x===this.x&&t.y===this.y},contains:function(t){return t=m(t),Math.abs(t.x)<=Math.abs(this.x)&&Math.abs(t.y)<=Math.abs(this.y)},toString:function(){return"Point("+i(this.x)+", "+i(this.y)+")"}},f.prototype={extend:function(t){var e,i;if(t){if(t instanceof p||"number"==typeof t[0]||"x"in t)e=i=m(t);else if(e=(t=_(t)).min,i=t.max,!e||!i)return this;this.min||this.max?(this.min.x=Math.min(e.x,this.min.x),this.max.x=Math.max(i.x,this.max.x),this.min.y=Math.min(e.y,this.min.y),this.max.y=Math.max(i.y,this.max.y)):(this.min=e.clone(),this.max=i.clone())}return this},getCenter:function(t){return m((this.min.x+this.max.x)/2,(this.min.y+this.max.y)/2,t)},getBottomLeft:function(){return m(this.min.x,this.max.y)},getTopRight:function(){return m(this.max.x,this.min.y)},getTopLeft:function(){return this.min},getBottomRight:function(){return this.max},getSize:function(){return this.max.subtract(this.min)},contains:function(t){var e,i;return(t=("number"==typeof t[0]||t instanceof p?m:_)(t))instanceof f?(e=t.min,i=t.max):e=i=t,e.x>=this.min.x&&i.x<=this.max.x&&e.y>=this.min.y&&i.y<=this.max.y},intersects:function(t){t=_(t);var e=this.min,i=this.max,n=t.min,t=t.max,o=t.x>=e.x&&n.x<=i.x,t=t.y>=e.y&&n.y<=i.y;return o&&t},overlaps:function(t){t=_(t);var e=this.min,i=this.max,n=t.min,t=t.max,o=t.x>e.x&&n.x<i.x,t=t.y>e.y&&n.y<i.y;return o&&t},isValid:function(){return!(!this.min||!this.max)},pad:function(t){var e=this.min,i=this.max,n=Math.abs(e.x-i.x)*t,t=Math.abs(e.y-i.y)*t;return _(m(e.x-n,e.y-t),m(i.x+n,i.y+t))},equals:function(t){return!!t&&(t=_(t),this.min.equals(t.getTopLeft())&&this.max.equals(t.getBottomRight()))}},s.prototype={extend:function(t){var e,i,n=this._southWest,o=this._northEast;if(t instanceof v)i=e=t;else{if(!(t instanceof s))return t?this.extend(w(t)||g(t)):this;if(e=t._southWest,i=t._northEast,!e||!i)return this}return n||o?(n.lat=Math.min(e.lat,n.lat),n.lng=Math.min(e.lng,n.lng),o.lat=Math.max(i.lat,o.lat),o.lng=Math.max(i.lng,o.lng)):(this._southWest=new v(e.lat,e.lng),this._northEast=new v(i.lat,i.lng)),this},pad:function(t){var e=this._southWest,i=this._northEast,n=Math.abs(e.lat-i.lat)*t,t=Math.abs(e.lng-i.lng)*t;return new s(new v(e.lat-n,e.lng-t),new v(i.lat+n,i.lng+t))},getCenter:function(){return new v((this._southWest.lat+this._northEast.lat)/2,(this._southWest.lng+this._northEast.lng)/2)},getSouthWest:function(){return this._southWest},getNorthEast:function(){return this._northEast},getNorthWest:function(){return new v(this.getNorth(),this.getWest())},getSouthEast:function(){return new v(this.getSouth(),this.getEast())},getWest:function(){return this._southWest.lng},getSouth:function(){return this._southWest.lat},getEast:function(){return this._northEast.lng},getNorth:function(){return this._northEast.lat},contains:function(t){t=("number"==typeof t[0]||t instanceof v||"lat"in t?w:g)(t);var e,i,n=this._southWest,o=this._northEast;return t instanceof s?(e=t.getSouthWest(),i=t.getNorthEast()):e=i=t,e.lat>=n.lat&&i.lat<=o.lat&&e.lng>=n.lng&&i.lng<=o.lng},intersects:function(t){t=g(t);var e=this._southWest,i=this._northEast,n=t.getSouthWest(),t=t.getNorthEast(),o=t.lat>=e.lat&&n.lat<=i.lat,t=t.lng>=e.lng&&n.lng<=i.lng;return o&&t},overlaps:function(t){t=g(t);var e=this._southWest,i=this._northEast,n=t.getSouthWest(),t=t.getNorthEast(),o=t.lat>e.lat&&n.lat<i.lat,t=t.lng>e.lng&&n.lng<i.lng;return o&&t},toBBoxString:function(){return[this.getWest(),this.getSouth(),this.getEast(),this.getNorth()].join(",")},equals:function(t,e){return!!t&&(t=g(t),this._southWest.equals(t.getSouthWest(),e)&&this._northEast.equals(t.getNorthEast(),e))},isValid:function(){return!(!this._southWest||!this._northEast)}};var ot={latLngToPoint:function(t,e){t=this.projection.project(t),e=this.scale(e);return this.transformation._transform(t,e)},pointToLatLng:function(t,e){e=this.scale(e),t=this.transformation.untransform(t,e);return this.projection.unproject(t)},project:function(t){return this.projection.project(t)},unproject:function(t){return this.projection.unproject(t)},scale:function(t){return 256*Math.pow(2,t)},zoom:function(t){return Math.log(t/256)/Math.LN2},getProjectedBounds:function(t){var e;return this.infinite?null:(e=this.projection.bounds,t=this.scale(t),new f(this.transformation.transform(e.min,t),this.transformation.transform(e.max,t)))},infinite:!(v.prototype={equals:function(t,e){return!!t&&(t=w(t),Math.max(Math.abs(this.lat-t.lat),Math.abs(this.lng-t.lng))<=(void 0===e?1e-9:e))},toString:function(t){return"LatLng("+i(this.lat,t)+", "+i(this.lng,t)+")"},distanceTo:function(t){return st.distance(this,w(t))},wrap:function(){return st.wrapLatLng(this)},toBounds:function(t){var t=180*t/40075017,e=t/Math.cos(Math.PI/180*this.lat);return g([this.lat-t,this.lng-e],[this.lat+t,this.lng+e])},clone:function(){return new v(this.lat,this.lng,this.alt)}}),wrapLatLng:function(t){var e=this.wrapLng?H(t.lng,this.wrapLng,!0):t.lng;return new v(this.wrapLat?H(t.lat,this.wrapLat,!0):t.lat,e,t.alt)},wrapLatLngBounds:function(t){var e=t.getCenter(),i=this.wrapLatLng(e),n=e.lat-i.lat,e=e.lng-i.lng;return 0==n&&0==e?t:(i=t.getSouthWest(),t=t.getNorthEast(),new s(new v(i.lat-n,i.lng-e),new v(t.lat-n,t.lng-e)))}},st=l({},ot,{wrapLng:[-180,180],R:6371e3,distance:function(t,e){var i=Math.PI/180,n=t.lat*i,o=e.lat*i,s=Math.sin((e.lat-t.lat)*i/2),e=Math.sin((e.lng-t.lng)*i/2),t=s*s+Math.cos(n)*Math.cos(o)*e*e,i=2*Math.atan2(Math.sqrt(t),Math.sqrt(1-t));return this.R*i}}),rt=6378137,rt={R:rt,MAX_LATITUDE:85.0511287798,project:function(t){var e=Math.PI/180,i=this.MAX_LATITUDE,i=Math.max(Math.min(i,t.lat),-i),i=Math.sin(i*e);return new p(this.R*t.lng*e,this.R*Math.log((1+i)/(1-i))/2)},unproject:function(t){var e=180/Math.PI;return new v((2*Math.atan(Math.exp(t.y/this.R))-Math.PI/2)*e,t.x*e/this.R)},bounds:new f([-(rt=rt*Math.PI),-rt],[rt,rt])};function at(t,e,i,n){d(t)?(this._a=t[0],this._b=t[1],this._c=t[2],this._d=t[3]):(this._a=t,this._b=e,this._c=i,this._d=n)}function ht(t,e,i,n){return new at(t,e,i,n)}at.prototype={transform:function(t,e){return this._transform(t.clone(),e)},_transform:function(t,e){return t.x=(e=e||1)*(this._a*t.x+this._b),t.y=e*(this._c*t.y+this._d),t},untransform:function(t,e){return new p((t.x/(e=e||1)-this._b)/this._a,(t.y/e-this._d)/this._c)}};var lt=l({},st,{code:"EPSG:3857",projection:rt,transformation:ht(lt=.5/(Math.PI*rt.R),.5,-lt,.5)}),ut=l({},lt,{code:"EPSG:900913"});function ct(t){return document.createElementNS("http://www.w3.org/2000/svg",t)}function dt(t,e){for(var i,n,o,s,r="",a=0,h=t.length;a<h;a++){for(i=0,n=(o=t[a]).length;i<n;i++)r+=(i?"L":"M")+(s=o[i]).x+" "+s.y;r+=e?b.svg?"z":"x":""}return r||"M0 0"}var _t=document.documentElement.style,pt="ActiveXObject"in window,mt=pt&&!document.addEventListener,n="msLaunchUri"in navigator&&!("documentMode"in document),ft=y("webkit"),gt=y("android"),vt=y("android 2")||y("android 3"),yt=parseInt(/WebKit\/([0-9]+)|$/.exec(navigator.userAgent)[1],10),yt=gt&&y("Google")&&yt<537&&!("AudioNode"in window),xt=!!window.opera,wt=!n&&y("chrome"),bt=y("gecko")&&!ft&&!xt&&!pt,Pt=!wt&&y("safari"),Lt=y("phantom"),o="OTransition"in _t,Tt=0===navigator.platform.indexOf("Win"),Mt=pt&&"transition"in _t,zt="WebKitCSSMatrix"in window&&"m11"in new window.WebKitCSSMatrix&&!vt,_t="MozPerspective"in _t,Ct=!window.L_DISABLE_3D&&(Mt||zt||_t)&&!o&&!Lt,Zt="undefined"!=typeof orientation||y("mobile"),St=Zt&&ft,Et=Zt&&zt,kt=!window.PointerEvent&&window.MSPointerEvent,Ot=!(!window.PointerEvent&&!kt),At="ontouchstart"in window||!!window.TouchEvent,Bt=!window.L_NO_TOUCH&&(At||Ot),It=Zt&&xt,Rt=Zt&&bt,Nt=1<(window.devicePixelRatio||window.screen.deviceXDPI/window.screen.logicalXDPI),Dt=function(){var t=!1;try{var e=Object.defineProperty({},"passive",{get:function(){t=!0}});window.addEventListener("testPassiveEventSupport",u,e),window.removeEventListener("testPassiveEventSupport",u,e)}catch(t){}return t}(),jt=!!document.createElement("canvas").getContext,Ht=!(!document.createElementNS||!ct("svg").createSVGRect),Wt=!!Ht&&((Wt=document.createElement("div")).innerHTML="<svg/>","http://www.w3.org/2000/svg"===(Wt.firstChild&&Wt.firstChild.namespaceURI));function y(t){return 0<=navigator.userAgent.toLowerCase().indexOf(t)}var b={ie:pt,ielt9:mt,edge:n,webkit:ft,android:gt,android23:vt,androidStock:yt,opera:xt,chrome:wt,gecko:bt,safari:Pt,phantom:Lt,opera12:o,win:Tt,ie3d:Mt,webkit3d:zt,gecko3d:_t,any3d:Ct,mobile:Zt,mobileWebkit:St,mobileWebkit3d:Et,msPointer:kt,pointer:Ot,touch:Bt,touchNative:At,mobileOpera:It,mobileGecko:Rt,retina:Nt,passiveEvents:Dt,canvas:jt,svg:Ht,vml:!Ht&&function(){try{var t=document.createElement("div"),e=(t.innerHTML='<v:shape adj="1"/>',t.firstChild);return e.style.behavior="url(#default#VML)",e&&"object"==typeof e.adj}catch(t){return!1}}(),inlineSvg:Wt,mac:0===navigator.platform.indexOf("Mac"),linux:0===navigator.platform.indexOf("Linux")},Ft=b.msPointer?"MSPointerDown":"pointerdown",Ut=b.msPointer?"MSPointerMove":"pointermove",Vt=b.msPointer?"MSPointerUp":"pointerup",qt=b.msPointer?"MSPointerCancel":"pointercancel",Gt={touchstart:Ft,touchmove:Ut,touchend:Vt,touchcancel:qt},Kt={touchstart:function(t,e){e.MSPOINTER_TYPE_TOUCH&&e.pointerType===e.MSPOINTER_TYPE_TOUCH&&O(e);ee(t,e)},touchmove:ee,touchend:ee,touchcancel:ee},Yt={},Xt=!1;function Jt(t,e,i){return"touchstart"!==e||Xt||(document.addEventListener(Ft,$t,!0),document.addEventListener(Ut,Qt,!0),document.addEventListener(Vt,te,!0),document.addEventListener(qt,te,!0),Xt=!0),Kt[e]?(i=Kt[e].bind(this,i),t.addEventListener(Gt[e],i,!1),i):(console.warn("wrong event specified:",e),u)}function $t(t){Yt[t.pointerId]=t}function Qt(t){Yt[t.pointerId]&&(Yt[t.pointerId]=t)}function te(t){delete Yt[t.pointerId]}function ee(t,e){if(e.pointerType!==(e.MSPOINTER_TYPE_MOUSE||"mouse")){for(var i in e.touches=[],Yt)e.touches.push(Yt[i]);e.changedTouches=[e],t(e)}}var ie=200;function ne(t,i){t.addEventListener("dblclick",i);var n,o=0;function e(t){var e;1!==t.detail?n=t.detail:"mouse"===t.pointerType||t.sourceCapabilities&&!t.sourceCapabilities.firesTouchEvents||((e=Ne(t)).some(function(t){return t instanceof HTMLLabelElement&&t.attributes.for})&&!e.some(function(t){return t instanceof HTMLInputElement||t instanceof HTMLSelectElement})||((e=Date.now())-o<=ie?2===++n&&i(function(t){var e,i,n={};for(i in t)e=t[i],n[i]=e&&e.bind?e.bind(t):e;return(t=n).type="dblclick",n.detail=2,n.isTrusted=!1,n._simulated=!0,n}(t)):n=1,o=e))}return t.addEventListener("click",e),{dblclick:i,simDblclick:e}}var oe,se,re,ae,he,le,ue=we(["transform","webkitTransform","OTransform","MozTransform","msTransform"]),ce=we(["webkitTransition","transition","OTransition","MozTransition","msTransition"]),de="webkitTransition"===ce||"OTransition"===ce?ce+"End":"transitionend";function _e(t){return"string"==typeof t?document.getElementById(t):t}function pe(t,e){var i=t.style[e]||t.currentStyle&&t.currentStyle[e];return"auto"===(i=i&&"auto"!==i||!document.defaultView?i:(t=document.defaultView.getComputedStyle(t,null))?t[e]:null)?null:i}function P(t,e,i){t=document.createElement(t);return t.className=e||"",i&&i.appendChild(t),t}function T(t){var e=t.parentNode;e&&e.removeChild(t)}function me(t){for(;t.firstChild;)t.removeChild(t.firstChild)}function fe(t){var e=t.parentNode;e&&e.lastChild!==t&&e.appendChild(t)}function ge(t){var e=t.parentNode;e&&e.firstChild!==t&&e.insertBefore(t,e.firstChild)}function ve(t,e){return void 0!==t.classList?t.classList.contains(e):0<(t=xe(t)).length&&new RegExp("(^|\\s)"+e+"(\\s|$)").test(t)}function M(t,e){var i;if(void 0!==t.classList)for(var n=F(e),o=0,s=n.length;o<s;o++)t.classList.add(n[o]);else ve(t,e)||ye(t,((i=xe(t))?i+" ":"")+e)}function z(t,e){void 0!==t.classList?t.classList.remove(e):ye(t,W((" "+xe(t)+" ").replace(" "+e+" "," ")))}function ye(t,e){void 0===t.className.baseVal?t.className=e:t.className.baseVal=e}function xe(t){return void 0===(t=t.correspondingElement?t.correspondingElement:t).className.baseVal?t.className:t.className.baseVal}function C(t,e){if("opacity"in t.style)t.style.opacity=e;else if("filter"in t.style){var i=!1,n="DXImageTransform.Microsoft.Alpha";try{i=t.filters.item(n)}catch(t){if(1===e)return}e=Math.round(100*e),i?(i.Enabled=100!==e,i.Opacity=e):t.style.filter+=" progid:"+n+"(opacity="+e+")"}}function we(t){for(var e=document.documentElement.style,i=0;i<t.length;i++)if(t[i]in e)return t[i];return!1}function be(t,e,i){e=e||new p(0,0);t.style[ue]=(b.ie3d?"translate("+e.x+"px,"+e.y+"px)":"translate3d("+e.x+"px,"+e.y+"px,0)")+(i?" scale("+i+")":"")}function Z(t,e){t._leaflet_pos=e,b.any3d?be(t,e):(t.style.left=e.x+"px",t.style.top=e.y+"px")}function Pe(t){return t._leaflet_pos||new p(0,0)}function Le(){S(window,"dragstart",O)}function Te(){k(window,"dragstart",O)}function Me(t){for(;-1===t.tabIndex;)t=t.parentNode;t.style&&(ze(),le=(he=t).style.outlineStyle,t.style.outlineStyle="none",S(window,"keydown",ze))}function ze(){he&&(he.style.outlineStyle=le,le=he=void 0,k(window,"keydown",ze))}function Ce(t){for(;!((t=t.parentNode).offsetWidth&&t.offsetHeight||t===document.body););return t}function Ze(t){var e=t.getBoundingClientRect();return{x:e.width/t.offsetWidth||1,y:e.height/t.offsetHeight||1,boundingClientRect:e}}ae="onselectstart"in document?(re=function(){S(window,"selectstart",O)},function(){k(window,"selectstart",O)}):(se=we(["userSelect","WebkitUserSelect","OUserSelect","MozUserSelect","msUserSelect"]),re=function(){var t;se&&(t=document.documentElement.style,oe=t[se],t[se]="none")},function(){se&&(document.documentElement.style[se]=oe,oe=void 0)});pt={__proto__:null,TRANSFORM:ue,TRANSITION:ce,TRANSITION_END:de,get:_e,getStyle:pe,create:P,remove:T,empty:me,toFront:fe,toBack:ge,hasClass:ve,addClass:M,removeClass:z,setClass:ye,getClass:xe,setOpacity:C,testProp:we,setTransform:be,setPosition:Z,getPosition:Pe,get disableTextSelection(){return re},get enableTextSelection(){return ae},disableImageDrag:Le,enableImageDrag:Te,preventOutline:Me,restoreOutline:ze,getSizedParentNode:Ce,getScale:Ze};function S(t,e,i,n){if(e&&"object"==typeof e)for(var o in e)ke(t,o,e[o],i);else for(var s=0,r=(e=F(e)).length;s<r;s++)ke(t,e[s],i,n);return this}var E="_leaflet_events";function k(t,e,i,n){if(1===arguments.length)Se(t),delete t[E];else if(e&&"object"==typeof e)for(var o in e)Oe(t,o,e[o],i);else if(e=F(e),2===arguments.length)Se(t,function(t){return-1!==G(e,t)});else for(var s=0,r=e.length;s<r;s++)Oe(t,e[s],i,n);return this}function Se(t,e){for(var i in t[E]){var n=i.split(/\d/)[0];e&&!e(n)||Oe(t,n,null,null,i)}}var Ee={mouseenter:"mouseover",mouseleave:"mouseout",wheel:!("onwheel"in window)&&"mousewheel"};function ke(e,t,i,n){var o,s,r=t+h(i)+(n?"_"+h(n):"");e[E]&&e[E][r]||(s=o=function(t){return i.call(n||e,t||window.event)},!b.touchNative&&b.pointer&&0===t.indexOf("touch")?o=Jt(e,t,o):b.touch&&"dblclick"===t?o=ne(e,o):"addEventListener"in e?"touchstart"===t||"touchmove"===t||"wheel"===t||"mousewheel"===t?e.addEventListener(Ee[t]||t,o,!!b.passiveEvents&&{passive:!1}):"mouseenter"===t||"mouseleave"===t?e.addEventListener(Ee[t],o=function(t){t=t||window.event,We(e,t)&&s(t)},!1):e.addEventListener(t,s,!1):e.attachEvent("on"+t,o),e[E]=e[E]||{},e[E][r]=o)}function Oe(t,e,i,n,o){o=o||e+h(i)+(n?"_"+h(n):"");var s,r,i=t[E]&&t[E][o];i&&(!b.touchNative&&b.pointer&&0===e.indexOf("touch")?(n=t,r=i,Gt[s=e]?n.removeEventListener(Gt[s],r,!1):console.warn("wrong event specified:",s)):b.touch&&"dblclick"===e?(n=i,(r=t).removeEventListener("dblclick",n.dblclick),r.removeEventListener("click",n.simDblclick)):"removeEventListener"in t?t.removeEventListener(Ee[e]||e,i,!1):t.detachEvent("on"+e,i),t[E][o]=null)}function Ae(t){return t.stopPropagation?t.stopPropagation():t.originalEvent?t.originalEvent._stopped=!0:t.cancelBubble=!0,this}function Be(t){return ke(t,"wheel",Ae),this}function Ie(t){return S(t,"mousedown touchstart dblclick contextmenu",Ae),t._leaflet_disable_click=!0,this}function O(t){return t.preventDefault?t.preventDefault():t.returnValue=!1,this}function Re(t){return O(t),Ae(t),this}function Ne(t){if(t.composedPath)return t.composedPath();for(var e=[],i=t.target;i;)e.push(i),i=i.parentNode;return e}function De(t,e){var i,n;return e?(n=(i=Ze(e)).boundingClientRect,new p((t.clientX-n.left)/i.x-e.clientLeft,(t.clientY-n.top)/i.y-e.clientTop)):new p(t.clientX,t.clientY)}var je=b.linux&&b.chrome?window.devicePixelRatio:b.mac?3*window.devicePixelRatio:0<window.devicePixelRatio?2*window.devicePixelRatio:1;function He(t){return b.edge?t.wheelDeltaY/2:t.deltaY&&0===t.deltaMode?-t.deltaY/je:t.deltaY&&1===t.deltaMode?20*-t.deltaY:t.deltaY&&2===t.deltaMode?60*-t.deltaY:t.deltaX||t.deltaZ?0:t.wheelDelta?(t.wheelDeltaY||t.wheelDelta)/2:t.detail&&Math.abs(t.detail)<32765?20*-t.detail:t.detail?t.detail/-32765*60:0}function We(t,e){var i=e.relatedTarget;if(!i)return!0;try{for(;i&&i!==t;)i=i.parentNode}catch(t){return!1}return i!==t}var mt={__proto__:null,on:S,off:k,stopPropagation:Ae,disableScrollPropagation:Be,disableClickPropagation:Ie,preventDefault:O,stop:Re,getPropagationPath:Ne,getMousePosition:De,getWheelDelta:He,isExternalTarget:We,addListener:S,removeListener:k},Fe=it.extend({run:function(t,e,i,n){this.stop(),this._el=t,this._inProgress=!0,this._duration=i||.25,this._easeOutPower=1/Math.max(n||.5,.2),this._startPos=Pe(t),this._offset=e.subtract(this._startPos),this._startTime=+new Date,this.fire("start"),this._animate()},stop:function(){this._inProgress&&(this._step(!0),this._complete())},_animate:function(){this._animId=x(this._animate,this),this._step()},_step:function(t){var e=+new Date-this._startTime,i=1e3*this._duration;e<i?this._runFrame(this._easeOut(e/i),t):(this._runFrame(1),this._complete())},_runFrame:function(t,e){t=this._startPos.add(this._offset.multiplyBy(t));e&&t._round(),Z(this._el,t),this.fire("step")},_complete:function(){r(this._animId),this._inProgress=!1,this.fire("end")},_easeOut:function(t){return 1-Math.pow(1-t,this._easeOutPower)}}),A=it.extend({options:{crs:lt,center:void 0,zoom:void 0,minZoom:void 0,maxZoom:void 0,layers:[],maxBounds:void 0,renderer:void 0,zoomAnimation:!0,zoomAnimationThreshold:4,fadeAnimation:!0,markerZoomAnimation:!0,transform3DLimit:8388608,zoomSnap:1,zoomDelta:1,trackResize:!0},initialize:function(t,e){e=c(this,e),this._handlers=[],this._layers={},this._zoomBoundLayers={},this._sizeChanged=!0,this._initContainer(t),this._initLayout(),this._onResize=a(this._onResize,this),this._initEvents(),e.maxBounds&&this.setMaxBounds(e.maxBounds),void 0!==e.zoom&&(this._zoom=this._limitZoom(e.zoom)),e.center&&void 0!==e.zoom&&this.setView(w(e.center),e.zoom,{reset:!0}),this.callInitHooks(),this._zoomAnimated=ce&&b.any3d&&!b.mobileOpera&&this.options.zoomAnimation,this._zoomAnimated&&(this._createAnimProxy(),S(this._proxy,de,this._catchTransitionEnd,this)),this._addLayers(this.options.layers)},setView:function(t,e,i){if((e=void 0===e?this._zoom:this._limitZoom(e),t=this._limitCenter(w(t),e,this.options.maxBounds),i=i||{},this._stop(),this._loaded&&!i.reset&&!0!==i)&&(void 0!==i.animate&&(i.zoom=l({animate:i.animate},i.zoom),i.pan=l({animate:i.animate,duration:i.duration},i.pan)),this._zoom!==e?this._tryAnimatedZoom&&this._tryAnimatedZoom(t,e,i.zoom):this._tryAnimatedPan(t,i.pan)))return clearTimeout(this._sizeTimer),this;return this._resetView(t,e,i.pan&&i.pan.noMoveStart),this},setZoom:function(t,e){return this._loaded?this.setView(this.getCenter(),t,{zoom:e}):(this._zoom=t,this)},zoomIn:function(t,e){return t=t||(b.any3d?this.options.zoomDelta:1),this.setZoom(this._zoom+t,e)},zoomOut:function(t,e){return t=t||(b.any3d?this.options.zoomDelta:1),this.setZoom(this._zoom-t,e)},setZoomAround:function(t,e,i){var n=this.getZoomScale(e),o=this.getSize().divideBy(2),t=(t instanceof p?t:this.latLngToContainerPoint(t)).subtract(o).multiplyBy(1-1/n),n=this.containerPointToLatLng(o.add(t));return this.setView(n,e,{zoom:i})},_getBoundsCenterZoom:function(t,e){e=e||{},t=t.getBounds?t.getBounds():g(t);var i=m(e.paddingTopLeft||e.padding||[0,0]),n=m(e.paddingBottomRight||e.padding||[0,0]),o=this.getBoundsZoom(t,!1,i.add(n));return(o="number"==typeof e.maxZoom?Math.min(e.maxZoom,o):o)===1/0?{center:t.getCenter(),zoom:o}:(e=n.subtract(i).divideBy(2),n=this.project(t.getSouthWest(),o),i=this.project(t.getNorthEast(),o),{center:this.unproject(n.add(i).divideBy(2).add(e),o),zoom:o})},fitBounds:function(t,e){if((t=g(t)).isValid())return t=this._getBoundsCenterZoom(t,e),this.setView(t.center,t.zoom,e);throw new Error("Bounds are not valid.")},fitWorld:function(t){return this.fitBounds([[-90,-180],[90,180]],t)},panTo:function(t,e){return this.setView(t,this._zoom,{pan:e})},panBy:function(t,e){var i;return e=e||{},(t=m(t).round()).x||t.y?(!0===e.animate||this.getSize().contains(t)?(this._panAnim||(this._panAnim=new Fe,this._panAnim.on({step:this._onPanTransitionStep,end:this._onPanTransitionEnd},this)),e.noMoveStart||this.fire("movestart"),!1!==e.animate?(M(this._mapPane,"leaflet-pan-anim"),i=this._getMapPanePos().subtract(t).round(),this._panAnim.run(this._mapPane,i,e.duration||.25,e.easeLinearity)):(this._rawPanBy(t),this.fire("move").fire("moveend"))):this._resetView(this.unproject(this.project(this.getCenter()).add(t)),this.getZoom()),this):this.fire("moveend")},flyTo:function(n,o,t){if(!1===(t=t||{}).animate||!b.any3d)return this.setView(n,o,t);this._stop();var s=this.project(this.getCenter()),r=this.project(n),e=this.getSize(),a=this._zoom,h=(n=w(n),o=void 0===o?a:o,Math.max(e.x,e.y)),i=h*this.getZoomScale(a,o),l=r.distanceTo(s)||1,u=1.42,c=u*u;function d(t){t=(i*i-h*h+(t?-1:1)*c*c*l*l)/(2*(t?i:h)*c*l),t=Math.sqrt(t*t+1)-t;return t<1e-9?-18:Math.log(t)}function _(t){return(Math.exp(t)-Math.exp(-t))/2}function p(t){return(Math.exp(t)+Math.exp(-t))/2}var m=d(0);function f(t){return h*(p(m)*(_(t=m+u*t)/p(t))-_(m))/c}var g=Date.now(),v=(d(1)-m)/u,y=t.duration?1e3*t.duration:1e3*v*.8;return this._moveStart(!0,t.noMoveStart),function t(){var e=(Date.now()-g)/y,i=(1-Math.pow(1-e,1.5))*v;e<=1?(this._flyToFrame=x(t,this),this._move(this.unproject(s.add(r.subtract(s).multiplyBy(f(i)/l)),a),this.getScaleZoom(h/(e=i,h*(p(m)/p(m+u*e))),a),{flyTo:!0})):this._move(n,o)._moveEnd(!0)}.call(this),this},flyToBounds:function(t,e){t=this._getBoundsCenterZoom(t,e);return this.flyTo(t.center,t.zoom,e)},setMaxBounds:function(t){return t=g(t),this.listens("moveend",this._panInsideMaxBounds)&&this.off("moveend",this._panInsideMaxBounds),t.isValid()?(this.options.maxBounds=t,this._loaded&&this._panInsideMaxBounds(),this.on("moveend",this._panInsideMaxBounds)):(this.options.maxBounds=null,this)},setMinZoom:function(t){var e=this.options.minZoom;return this.options.minZoom=t,this._loaded&&e!==t&&(this.fire("zoomlevelschange"),this.getZoom()<this.options.minZoom)?this.setZoom(t):this},setMaxZoom:function(t){var e=this.options.maxZoom;return this.options.maxZoom=t,this._loaded&&e!==t&&(this.fire("zoomlevelschange"),this.getZoom()>this.options.maxZoom)?this.setZoom(t):this},panInsideBounds:function(t,e){this._enforcingBounds=!0;var i=this.getCenter(),t=this._limitCenter(i,this._zoom,g(t));return i.equals(t)||this.panTo(t,e),this._enforcingBounds=!1,this},panInside:function(t,e){var i=m((e=e||{}).paddingTopLeft||e.padding||[0,0]),n=m(e.paddingBottomRight||e.padding||[0,0]),o=this.project(this.getCenter()),t=this.project(t),s=this.getPixelBounds(),i=_([s.min.add(i),s.max.subtract(n)]),s=i.getSize();return i.contains(t)||(this._enforcingBounds=!0,n=t.subtract(i.getCenter()),i=i.extend(t).getSize().subtract(s),o.x+=n.x<0?-i.x:i.x,o.y+=n.y<0?-i.y:i.y,this.panTo(this.unproject(o),e),this._enforcingBounds=!1),this},invalidateSize:function(t){if(!this._loaded)return this;t=l({animate:!1,pan:!0},!0===t?{animate:!0}:t);var e=this.getSize(),i=(this._sizeChanged=!0,this._lastCenter=null,this.getSize()),n=e.divideBy(2).round(),o=i.divideBy(2).round(),n=n.subtract(o);return n.x||n.y?(t.animate&&t.pan?this.panBy(n):(t.pan&&this._rawPanBy(n),this.fire("move"),t.debounceMoveend?(clearTimeout(this._sizeTimer),this._sizeTimer=setTimeout(a(this.fire,this,"moveend"),200)):this.fire("moveend")),this.fire("resize",{oldSize:e,newSize:i})):this},stop:function(){return this.setZoom(this._limitZoom(this._zoom)),this.options.zoomSnap||this.fire("viewreset"),this._stop()},locate:function(t){var e,i;return t=this._locateOptions=l({timeout:1e4,watch:!1},t),"geolocation"in navigator?(e=a(this._handleGeolocationResponse,this),i=a(this._handleGeolocationError,this),t.watch?this._locationWatchId=navigator.geolocation.watchPosition(e,i,t):navigator.geolocation.getCurrentPosition(e,i,t)):this._handleGeolocationError({code:0,message:"Geolocation not supported."}),this},stopLocate:function(){return navigator.geolocation&&navigator.geolocation.clearWatch&&navigator.geolocation.clearWatch(this._locationWatchId),this._locateOptions&&(this._locateOptions.setView=!1),this},_handleGeolocationError:function(t){var e;this._container._leaflet_id&&(e=t.code,t=t.message||(1===e?"permission denied":2===e?"position unavailable":"timeout"),this._locateOptions.setView&&!this._loaded&&this.fitWorld(),this.fire("locationerror",{code:e,message:"Geolocation error: "+t+"."}))},_handleGeolocationResponse:function(t){if(this._container._leaflet_id){var e,i,n=new v(t.coords.latitude,t.coords.longitude),o=n.toBounds(2*t.coords.accuracy),s=this._locateOptions,r=(s.setView&&(e=this.getBoundsZoom(o),this.setView(n,s.maxZoom?Math.min(e,s.maxZoom):e)),{latlng:n,bounds:o,timestamp:t.timestamp});for(i in t.coords)"number"==typeof t.coords[i]&&(r[i]=t.coords[i]);this.fire("locationfound",r)}},addHandler:function(t,e){return e&&(e=this[t]=new e(this),this._handlers.push(e),this.options[t]&&e.enable()),this},remove:function(){if(this._initEvents(!0),this.options.maxBounds&&this.off("moveend",this._panInsideMaxBounds),this._containerId!==this._container._leaflet_id)throw new Error("Map container is being reused by another instance");try{delete this._container._leaflet_id,delete this._containerId}catch(t){this._container._leaflet_id=void 0,this._containerId=void 0}for(var t in void 0!==this._locationWatchId&&this.stopLocate(),this._stop(),T(this._mapPane),this._clearControlPos&&this._clearControlPos(),this._resizeRequest&&(r(this._resizeRequest),this._resizeRequest=null),this._clearHandlers(),this._loaded&&this.fire("unload"),this._layers)this._layers[t].remove();for(t in this._panes)T(this._panes[t]);return this._layers=[],this._panes=[],delete this._mapPane,delete this._renderer,this},createPane:function(t,e){e=P("div","leaflet-pane"+(t?" leaflet-"+t.replace("Pane","")+"-pane":""),e||this._mapPane);return t&&(this._panes[t]=e),e},getCenter:function(){return this._checkIfLoaded(),this._lastCenter&&!this._moved()?this._lastCenter.clone():this.layerPointToLatLng(this._getCenterLayerPoint())},getZoom:function(){return this._zoom},getBounds:function(){var t=this.getPixelBounds();return new s(this.unproject(t.getBottomLeft()),this.unproject(t.getTopRight()))},getMinZoom:function(){return void 0===this.options.minZoom?this._layersMinZoom||0:this.options.minZoom},getMaxZoom:function(){return void 0===this.options.maxZoom?void 0===this._layersMaxZoom?1/0:this._layersMaxZoom:this.options.maxZoom},getBoundsZoom:function(t,e,i){t=g(t),i=m(i||[0,0]);var n=this.getZoom()||0,o=this.getMinZoom(),s=this.getMaxZoom(),r=t.getNorthWest(),t=t.getSouthEast(),i=this.getSize().subtract(i),t=_(this.project(t,n),this.project(r,n)).getSize(),r=b.any3d?this.options.zoomSnap:1,a=i.x/t.x,i=i.y/t.y,t=e?Math.max(a,i):Math.min(a,i),n=this.getScaleZoom(t,n);return r&&(n=Math.round(n/(r/100))*(r/100),n=e?Math.ceil(n/r)*r:Math.floor(n/r)*r),Math.max(o,Math.min(s,n))},getSize:function(){return this._size&&!this._sizeChanged||(this._size=new p(this._container.clientWidth||0,this._container.clientHeight||0),this._sizeChanged=!1),this._size.clone()},getPixelBounds:function(t,e){t=this._getTopLeftPoint(t,e);return new f(t,t.add(this.getSize()))},getPixelOrigin:function(){return this._checkIfLoaded(),this._pixelOrigin},getPixelWorldBounds:function(t){return this.options.crs.getProjectedBounds(void 0===t?this.getZoom():t)},getPane:function(t){return"string"==typeof t?this._panes[t]:t},getPanes:function(){return this._panes},getContainer:function(){return this._container},getZoomScale:function(t,e){var i=this.options.crs;return e=void 0===e?this._zoom:e,i.scale(t)/i.scale(e)},getScaleZoom:function(t,e){var i=this.options.crs,t=(e=void 0===e?this._zoom:e,i.zoom(t*i.scale(e)));return isNaN(t)?1/0:t},project:function(t,e){return e=void 0===e?this._zoom:e,this.options.crs.latLngToPoint(w(t),e)},unproject:function(t,e){return e=void 0===e?this._zoom:e,this.options.crs.pointToLatLng(m(t),e)},layerPointToLatLng:function(t){t=m(t).add(this.getPixelOrigin());return this.unproject(t)},latLngToLayerPoint:function(t){return this.project(w(t))._round()._subtract(this.getPixelOrigin())},wrapLatLng:function(t){return this.options.crs.wrapLatLng(w(t))},wrapLatLngBounds:function(t){return this.options.crs.wrapLatLngBounds(g(t))},distance:function(t,e){return this.options.crs.distance(w(t),w(e))},containerPointToLayerPoint:function(t){return m(t).subtract(this._getMapPanePos())},layerPointToContainerPoint:function(t){return m(t).add(this._getMapPanePos())},containerPointToLatLng:function(t){t=this.containerPointToLayerPoint(m(t));return this.layerPointToLatLng(t)},latLngToContainerPoint:function(t){return this.layerPointToContainerPoint(this.latLngToLayerPoint(w(t)))},mouseEventToContainerPoint:function(t){return De(t,this._container)},mouseEventToLayerPoint:function(t){return this.containerPointToLayerPoint(this.mouseEventToContainerPoint(t))},mouseEventToLatLng:function(t){return this.layerPointToLatLng(this.mouseEventToLayerPoint(t))},_initContainer:function(t){t=this._container=_e(t);if(!t)throw new Error("Map container not found.");if(t._leaflet_id)throw new Error("Map container is already initialized.");S(t,"scroll",this._onScroll,this),this._containerId=h(t)},_initLayout:function(){var t=this._container,e=(this._fadeAnimated=this.options.fadeAnimation&&b.any3d,M(t,"leaflet-container"+(b.touch?" leaflet-touch":"")+(b.retina?" leaflet-retina":"")+(b.ielt9?" leaflet-oldie":"")+(b.safari?" leaflet-safari":"")+(this._fadeAnimated?" leaflet-fade-anim":"")),pe(t,"position"));"absolute"!==e&&"relative"!==e&&"fixed"!==e&&"sticky"!==e&&(t.style.position="relative"),this._initPanes(),this._initControlPos&&this._initControlPos()},_initPanes:function(){var t=this._panes={};this._paneRenderers={},this._mapPane=this.createPane("mapPane",this._container),Z(this._mapPane,new p(0,0)),this.createPane("tilePane"),this.createPane("overlayPane"),this.createPane("shadowPane"),this.createPane("markerPane"),this.createPane("tooltipPane"),this.createPane("popupPane"),this.options.markerZoomAnimation||(M(t.markerPane,"leaflet-zoom-hide"),M(t.shadowPane,"leaflet-zoom-hide"))},_resetView:function(t,e,i){Z(this._mapPane,new p(0,0));var n=!this._loaded,o=(this._loaded=!0,e=this._limitZoom(e),this.fire("viewprereset"),this._zoom!==e);this._moveStart(o,i)._move(t,e)._moveEnd(o),this.fire("viewreset"),n&&this.fire("load")},_moveStart:function(t,e){return t&&this.fire("zoomstart"),e||this.fire("movestart"),this},_move:function(t,e,i,n){void 0===e&&(e=this._zoom);var o=this._zoom!==e;return this._zoom=e,this._lastCenter=t,this._pixelOrigin=this._getNewPixelOrigin(t),n?i&&i.pinch&&this.fire("zoom",i):((o||i&&i.pinch)&&this.fire("zoom",i),this.fire("move",i)),this},_moveEnd:function(t){return t&&this.fire("zoomend"),this.fire("moveend")},_stop:function(){return r(this._flyToFrame),this._panAnim&&this._panAnim.stop(),this},_rawPanBy:function(t){Z(this._mapPane,this._getMapPanePos().subtract(t))},_getZoomSpan:function(){return this.getMaxZoom()-this.getMinZoom()},_panInsideMaxBounds:function(){this._enforcingBounds||this.panInsideBounds(this.options.maxBounds)},_checkIfLoaded:function(){if(!this._loaded)throw new Error("Set map center and zoom first.")},_initEvents:function(t){this._targets={};var e=t?k:S;e((this._targets[h(this._container)]=this)._container,"click dblclick mousedown mouseup mouseover mouseout mousemove contextmenu keypress keydown keyup",this._handleDOMEvent,this),this.options.trackResize&&e(window,"resize",this._onResize,this),b.any3d&&this.options.transform3DLimit&&(t?this.off:this.on).call(this,"moveend",this._onMoveEnd)},_onResize:function(){r(this._resizeRequest),this._resizeRequest=x(function(){this.invalidateSize({debounceMoveend:!0})},this)},_onScroll:function(){this._container.scrollTop=0,this._container.scrollLeft=0},_onMoveEnd:function(){var t=this._getMapPanePos();Math.max(Math.abs(t.x),Math.abs(t.y))>=this.options.transform3DLimit&&this._resetView(this.getCenter(),this.getZoom())},_findEventTargets:function(t,e){for(var i,n=[],o="mouseout"===e||"mouseover"===e,s=t.target||t.srcElement,r=!1;s;){if((i=this._targets[h(s)])&&("click"===e||"preclick"===e)&&this._draggableMoved(i)){r=!0;break}if(i&&i.listens(e,!0)){if(o&&!We(s,t))break;if(n.push(i),o)break}if(s===this._container)break;s=s.parentNode}return n=n.length||r||o||!this.listens(e,!0)?n:[this]},_isClickDisabled:function(t){for(;t&&t!==this._container;){if(t._leaflet_disable_click)return!0;t=t.parentNode}},_handleDOMEvent:function(t){var e,i=t.target||t.srcElement;!this._loaded||i._leaflet_disable_events||"click"===t.type&&this._isClickDisabled(i)||("mousedown"===(e=t.type)&&Me(i),this._fireDOMEvent(t,e))},_mouseEvents:["click","dblclick","mouseover","mouseout","contextmenu"],_fireDOMEvent:function(t,e,i){"click"===t.type&&((a=l({},t)).type="preclick",this._fireDOMEvent(a,a.type,i));var n=this._findEventTargets(t,e);if(i){for(var o=[],s=0;s<i.length;s++)i[s].listens(e,!0)&&o.push(i[s]);n=o.concat(n)}if(n.length){"contextmenu"===e&&O(t);var r,a=n[0],h={originalEvent:t};for("keypress"!==t.type&&"keydown"!==t.type&&"keyup"!==t.type&&(r=a.getLatLng&&(!a._radius||a._radius<=10),h.containerPoint=r?this.latLngToContainerPoint(a.getLatLng()):this.mouseEventToContainerPoint(t),h.layerPoint=this.containerPointToLayerPoint(h.containerPoint),h.latlng=r?a.getLatLng():this.layerPointToLatLng(h.layerPoint)),s=0;s<n.length;s++)if(n[s].fire(e,h,!0),h.originalEvent._stopped||!1===n[s].options.bubblingMouseEvents&&-1!==G(this._mouseEvents,e))return}},_draggableMoved:function(t){return(t=t.dragging&&t.dragging.enabled()?t:this).dragging&&t.dragging.moved()||this.boxZoom&&this.boxZoom.moved()},_clearHandlers:function(){for(var t=0,e=this._handlers.length;t<e;t++)this._handlers[t].disable()},whenReady:function(t,e){return this._loaded?t.call(e||this,{target:this}):this.on("load",t,e),this},_getMapPanePos:function(){return Pe(this._mapPane)||new p(0,0)},_moved:function(){var t=this._getMapPanePos();return t&&!t.equals([0,0])},_getTopLeftPoint:function(t,e){return(t&&void 0!==e?this._getNewPixelOrigin(t,e):this.getPixelOrigin()).subtract(this._getMapPanePos())},_getNewPixelOrigin:function(t,e){var i=this.getSize()._divideBy(2);return this.project(t,e)._subtract(i)._add(this._getMapPanePos())._round()},_latLngToNewLayerPoint:function(t,e,i){i=this._getNewPixelOrigin(i,e);return this.project(t,e)._subtract(i)},_latLngBoundsToNewLayerBounds:function(t,e,i){i=this._getNewPixelOrigin(i,e);return _([this.project(t.getSouthWest(),e)._subtract(i),this.project(t.getNorthWest(),e)._subtract(i),this.project(t.getSouthEast(),e)._subtract(i),this.project(t.getNorthEast(),e)._subtract(i)])},_getCenterLayerPoint:function(){return this.containerPointToLayerPoint(this.getSize()._divideBy(2))},_getCenterOffset:function(t){return this.latLngToLayerPoint(t).subtract(this._getCenterLayerPoint())},_limitCenter:function(t,e,i){var n,o;return!i||(n=this.project(t,e),o=this.getSize().divideBy(2),o=new f(n.subtract(o),n.add(o)),o=this._getBoundsOffset(o,i,e),Math.abs(o.x)<=1&&Math.abs(o.y)<=1)?t:this.unproject(n.add(o),e)},_limitOffset:function(t,e){var i;return e?(i=new f((i=this.getPixelBounds()).min.add(t),i.max.add(t)),t.add(this._getBoundsOffset(i,e))):t},_getBoundsOffset:function(t,e,i){e=_(this.project(e.getNorthEast(),i),this.project(e.getSouthWest(),i)),i=e.min.subtract(t.min),e=e.max.subtract(t.max);return new p(this._rebound(i.x,-e.x),this._rebound(i.y,-e.y))},_rebound:function(t,e){return 0<t+e?Math.round(t-e)/2:Math.max(0,Math.ceil(t))-Math.max(0,Math.floor(e))},_limitZoom:function(t){var e=this.getMinZoom(),i=this.getMaxZoom(),n=b.any3d?this.options.zoomSnap:1;return n&&(t=Math.round(t/n)*n),Math.max(e,Math.min(i,t))},_onPanTransitionStep:function(){this.fire("move")},_onPanTransitionEnd:function(){z(this._mapPane,"leaflet-pan-anim"),this.fire("moveend")},_tryAnimatedPan:function(t,e){t=this._getCenterOffset(t)._trunc();return!(!0!==(e&&e.animate)&&!this.getSize().contains(t))&&(this.panBy(t,e),!0)},_createAnimProxy:function(){var t=this._proxy=P("div","leaflet-proxy leaflet-zoom-animated");this._panes.mapPane.appendChild(t),this.on("zoomanim",function(t){var e=ue,i=this._proxy.style[e];be(this._proxy,this.project(t.center,t.zoom),this.getZoomScale(t.zoom,1)),i===this._proxy.style[e]&&this._animatingZoom&&this._onZoomTransitionEnd()},this),this.on("load moveend",this._animMoveEnd,this),this._on("unload",this._destroyAnimProxy,this)},_destroyAnimProxy:function(){T(this._proxy),this.off("load moveend",this._animMoveEnd,this),delete this._proxy},_animMoveEnd:function(){var t=this.getCenter(),e=this.getZoom();be(this._proxy,this.project(t,e),this.getZoomScale(e,1))},_catchTransitionEnd:function(t){this._animatingZoom&&0<=t.propertyName.indexOf("transform")&&this._onZoomTransitionEnd()},_nothingToAnimate:function(){return!this._container.getElementsByClassName("leaflet-zoom-animated").length},_tryAnimatedZoom:function(t,e,i){if(!this._animatingZoom){if(i=i||{},!this._zoomAnimated||!1===i.animate||this._nothingToAnimate()||Math.abs(e-this._zoom)>this.options.zoomAnimationThreshold)return!1;var n=this.getZoomScale(e),n=this._getCenterOffset(t)._divideBy(1-1/n);if(!0!==i.animate&&!this.getSize().contains(n))return!1;x(function(){this._moveStart(!0,i.noMoveStart||!1)._animateZoom(t,e,!0)},this)}return!0},_animateZoom:function(t,e,i,n){this._mapPane&&(i&&(this._animatingZoom=!0,this._animateToCenter=t,this._animateToZoom=e,M(this._mapPane,"leaflet-zoom-anim")),this.fire("zoomanim",{center:t,zoom:e,noUpdate:n}),this._tempFireZoomEvent||(this._tempFireZoomEvent=this._zoom!==this._animateToZoom),this._move(this._animateToCenter,this._animateToZoom,void 0,!0),setTimeout(a(this._onZoomTransitionEnd,this),250))},_onZoomTransitionEnd:function(){this._animatingZoom&&(this._mapPane&&z(this._mapPane,"leaflet-zoom-anim"),this._animatingZoom=!1,this._move(this._animateToCenter,this._animateToZoom,void 0,!0),this._tempFireZoomEvent&&this.fire("zoom"),delete this._tempFireZoomEvent,this.fire("move"),this._moveEnd(!0))}});function Ue(t){return new B(t)}var B=et.extend({options:{position:"topright"},initialize:function(t){c(this,t)},getPosition:function(){return this.options.position},setPosition:function(t){var e=this._map;return e&&e.removeControl(this),this.options.position=t,e&&e.addControl(this),this},getContainer:function(){return this._container},addTo:function(t){this.remove(),this._map=t;var e=this._container=this.onAdd(t),i=this.getPosition(),t=t._controlCorners[i];return M(e,"leaflet-control"),-1!==i.indexOf("bottom")?t.insertBefore(e,t.firstChild):t.appendChild(e),this._map.on("unload",this.remove,this),this},remove:function(){return this._map&&(T(this._container),this.onRemove&&this.onRemove(this._map),this._map.off("unload",this.remove,this),this._map=null),this},_refocusOnMap:function(t){this._map&&t&&0<t.screenX&&0<t.screenY&&this._map.getContainer().focus()}}),Ve=(A.include({addControl:function(t){return t.addTo(this),this},removeControl:function(t){return t.remove(),this},_initControlPos:function(){var i=this._controlCorners={},n="leaflet-",o=this._controlContainer=P("div",n+"control-container",this._container);function t(t,e){i[t+e]=P("div",n+t+" "+n+e,o)}t("top","left"),t("top","right"),t("bottom","left"),t("bottom","right")},_clearControlPos:function(){for(var t in this._controlCorners)T(this._controlCorners[t]);T(this._controlContainer),delete this._controlCorners,delete this._controlContainer}}),B.extend({options:{collapsed:!0,position:"topright",autoZIndex:!0,hideSingleBase:!1,sortLayers:!1,sortFunction:function(t,e,i,n){return i<n?-1:n<i?1:0}},initialize:function(t,e,i){for(var n in c(this,i),this._layerControlInputs=[],this._layers=[],this._lastZIndex=0,this._handlingClick=!1,this._preventClick=!1,t)this._addLayer(t[n],n);for(n in e)this._addLayer(e[n],n,!0)},onAdd:function(t){this._initLayout(),this._update(),(this._map=t).on("zoomend",this._checkDisabledLayers,this);for(var e=0;e<this._layers.length;e++)this._layers[e].layer.on("add remove",this._onLayerChange,this);return this._container},addTo:function(t){return B.prototype.addTo.call(this,t),this._expandIfNotCollapsed()},onRemove:function(){this._map.off("zoomend",this._checkDisabledLayers,this);for(var t=0;t<this._layers.length;t++)this._layers[t].layer.off("add remove",this._onLayerChange,this)},addBaseLayer:function(t,e){return this._addLayer(t,e),this._map?this._update():this},addOverlay:function(t,e){return this._addLayer(t,e,!0),this._map?this._update():this},removeLayer:function(t){t.off("add remove",this._onLayerChange,this);t=this._getLayer(h(t));return t&&this._layers.splice(this._layers.indexOf(t),1),this._map?this._update():this},expand:function(){M(this._container,"leaflet-control-layers-expanded"),this._section.style.height=null;var t=this._map.getSize().y-(this._container.offsetTop+50);return t<this._section.clientHeight?(M(this._section,"leaflet-control-layers-scrollbar"),this._section.style.height=t+"px"):z(this._section,"leaflet-control-layers-scrollbar"),this._checkDisabledLayers(),this},collapse:function(){return z(this._container,"leaflet-control-layers-expanded"),this},_initLayout:function(){var t="leaflet-control-layers",e=this._container=P("div",t),i=this.options.collapsed,n=(e.setAttribute("aria-haspopup",!0),Ie(e),Be(e),this._section=P("section",t+"-list")),o=(i&&(this._map.on("click",this.collapse,this),S(e,{mouseenter:this._expandSafely,mouseleave:this.collapse},this)),this._layersLink=P("a",t+"-toggle",e));o.href="#",o.title="Layers",o.setAttribute("role","button"),S(o,{keydown:function(t){13===t.keyCode&&this._expandSafely()},click:function(t){O(t),this._expandSafely()}},this),i||this.expand(),this._baseLayersList=P("div",t+"-base",n),this._separator=P("div",t+"-separator",n),this._overlaysList=P("div",t+"-overlays",n),e.appendChild(n)},_getLayer:function(t){for(var e=0;e<this._layers.length;e++)if(this._layers[e]&&h(this._layers[e].layer)===t)return this._layers[e]},_addLayer:function(t,e,i){this._map&&t.on("add remove",this._onLayerChange,this),this._layers.push({layer:t,name:e,overlay:i}),this.options.sortLayers&&this._layers.sort(a(function(t,e){return this.options.sortFunction(t.layer,e.layer,t.name,e.name)},this)),this.options.autoZIndex&&t.setZIndex&&(this._lastZIndex++,t.setZIndex(this._lastZIndex)),this._expandIfNotCollapsed()},_update:function(){if(this._container){me(this._baseLayersList),me(this._overlaysList),this._layerControlInputs=[];for(var t,e,i,n=0,o=0;o<this._layers.length;o++)i=this._layers[o],this._addItem(i),e=e||i.overlay,t=t||!i.overlay,n+=i.overlay?0:1;this.options.hideSingleBase&&(this._baseLayersList.style.display=(t=t&&1<n)?"":"none"),this._separator.style.display=e&&t?"":"none"}return this},_onLayerChange:function(t){this._handlingClick||this._update();var e=this._getLayer(h(t.target)),t=e.overlay?"add"===t.type?"overlayadd":"overlayremove":"add"===t.type?"baselayerchange":null;t&&this._map.fire(t,e)},_createRadioElement:function(t,e){t='<input type="radio" class="leaflet-control-layers-selector" name="'+t+'"'+(e?' checked="checked"':"")+"/>",e=document.createElement("div");return e.innerHTML=t,e.firstChild},_addItem:function(t){var e,i=document.createElement("label"),n=this._map.hasLayer(t.layer),n=(t.overlay?((e=document.createElement("input")).type="checkbox",e.className="leaflet-control-layers-selector",e.defaultChecked=n):e=this._createRadioElement("leaflet-base-layers_"+h(this),n),this._layerControlInputs.push(e),e.layerId=h(t.layer),S(e,"click",this._onInputClick,this),document.createElement("span")),o=(n.innerHTML=" "+t.name,document.createElement("span"));return i.appendChild(o),o.appendChild(e),o.appendChild(n),(t.overlay?this._overlaysList:this._baseLayersList).appendChild(i),this._checkDisabledLayers(),i},_onInputClick:function(){if(!this._preventClick){var t,e,i=this._layerControlInputs,n=[],o=[];this._handlingClick=!0;for(var s=i.length-1;0<=s;s--)t=i[s],e=this._getLayer(t.layerId).layer,t.checked?n.push(e):t.checked||o.push(e);for(s=0;s<o.length;s++)this._map.hasLayer(o[s])&&this._map.removeLayer(o[s]);for(s=0;s<n.length;s++)this._map.hasLayer(n[s])||this._map.addLayer(n[s]);this._handlingClick=!1,this._refocusOnMap()}},_checkDisabledLayers:function(){for(var t,e,i=this._layerControlInputs,n=this._map.getZoom(),o=i.length-1;0<=o;o--)t=i[o],e=this._getLayer(t.layerId).layer,t.disabled=void 0!==e.options.minZoom&&n<e.options.minZoom||void 0!==e.options.maxZoom&&n>e.options.maxZoom},_expandIfNotCollapsed:function(){return this._map&&!this.options.collapsed&&this.expand(),this},_expandSafely:function(){var t=this._section,e=(this._preventClick=!0,S(t,"click",O),this.expand(),this);setTimeout(function(){k(t,"click",O),e._preventClick=!1})}})),qe=B.extend({options:{position:"topleft",zoomInText:'<span aria-hidden="true">+</span>',zoomInTitle:"Zoom in",zoomOutText:'<span aria-hidden="true">&#x2212;</span>',zoomOutTitle:"Zoom out"},onAdd:function(t){var e="leaflet-control-zoom",i=P("div",e+" leaflet-bar"),n=this.options;return this._zoomInButton=this._createButton(n.zoomInText,n.zoomInTitle,e+"-in",i,this._zoomIn),this._zoomOutButton=this._createButton(n.zoomOutText,n.zoomOutTitle,e+"-out",i,this._zoomOut),this._updateDisabled(),t.on("zoomend zoomlevelschange",this._updateDisabled,this),i},onRemove:function(t){t.off("zoomend zoomlevelschange",this._updateDisabled,this)},disable:function(){return this._disabled=!0,this._updateDisabled(),this},enable:function(){return this._disabled=!1,this._updateDisabled(),this},_zoomIn:function(t){!this._disabled&&this._map._zoom<this._map.getMaxZoom()&&this._map.zoomIn(this._map.options.zoomDelta*(t.shiftKey?3:1))},_zoomOut:function(t){!this._disabled&&this._map._zoom>this._map.getMinZoom()&&this._map.zoomOut(this._map.options.zoomDelta*(t.shiftKey?3:1))},_createButton:function(t,e,i,n,o){i=P("a",i,n);return i.innerHTML=t,i.href="#",i.title=e,i.setAttribute("role","button"),i.setAttribute("aria-label",e),Ie(i),S(i,"click",Re),S(i,"click",o,this),S(i,"click",this._refocusOnMap,this),i},_updateDisabled:function(){var t=this._map,e="leaflet-disabled";z(this._zoomInButton,e),z(this._zoomOutButton,e),this._zoomInButton.setAttribute("aria-disabled","false"),this._zoomOutButton.setAttribute("aria-disabled","false"),!this._disabled&&t._zoom!==t.getMinZoom()||(M(this._zoomOutButton,e),this._zoomOutButton.setAttribute("aria-disabled","true")),!this._disabled&&t._zoom!==t.getMaxZoom()||(M(this._zoomInButton,e),this._zoomInButton.setAttribute("aria-disabled","true"))}}),Ge=(A.mergeOptions({zoomControl:!0}),A.addInitHook(function(){this.options.zoomControl&&(this.zoomControl=new qe,this.addControl(this.zoomControl))}),B.extend({options:{position:"bottomleft",maxWidth:100,metric:!0,imperial:!0},onAdd:function(t){var e="leaflet-control-scale",i=P("div",e),n=this.options;return this._addScales(n,e+"-line",i),t.on(n.updateWhenIdle?"moveend":"move",this._update,this),t.whenReady(this._update,this),i},onRemove:function(t){t.off(this.options.updateWhenIdle?"moveend":"move",this._update,this)},_addScales:function(t,e,i){t.metric&&(this._mScale=P("div",e,i)),t.imperial&&(this._iScale=P("div",e,i))},_update:function(){var t=this._map,e=t.getSize().y/2,t=t.distance(t.containerPointToLatLng([0,e]),t.containerPointToLatLng([this.options.maxWidth,e]));this._updateScales(t)},_updateScales:function(t){this.options.metric&&t&&this._updateMetric(t),this.options.imperial&&t&&this._updateImperial(t)},_updateMetric:function(t){var e=this._getRoundNum(t);this._updateScale(this._mScale,e<1e3?e+" m":e/1e3+" km",e/t)},_updateImperial:function(t){var e,i,t=3.2808399*t;5280<t?(i=this._getRoundNum(e=t/5280),this._updateScale(this._iScale,i+" mi",i/e)):(i=this._getRoundNum(t),this._updateScale(this._iScale,i+" ft",i/t))},_updateScale:function(t,e,i){t.style.width=Math.round(this.options.maxWidth*i)+"px",t.innerHTML=e},_getRoundNum:function(t){var e=Math.pow(10,(Math.floor(t)+"").length-1),t=t/e;return e*(t=10<=t?10:5<=t?5:3<=t?3:2<=t?2:1)}})),Ke=B.extend({options:{position:"bottomright",prefix:'<a href="https://leafletjs.com" title="A JavaScript library for interactive maps">'+(b.inlineSvg?'<svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="12" height="8" viewBox="0 0 12 8" class="leaflet-attribution-flag"><path fill="#4C7BE1" d="M0 0h12v4H0z"/><path fill="#FFD500" d="M0 4h12v3H0z"/><path fill="#E0BC00" d="M0 7h12v1H0z"/></svg> ':"")+"Leaflet</a>"},initialize:function(t){c(this,t),this._attributions={}},onAdd:function(t){for(var e in(t.attributionControl=this)._container=P("div","leaflet-control-attribution"),Ie(this._container),t._layers)t._layers[e].getAttribution&&this.addAttribution(t._layers[e].getAttribution());return this._update(),t.on("layeradd",this._addAttribution,this),this._container},onRemove:function(t){t.off("layeradd",this._addAttribution,this)},_addAttribution:function(t){t.layer.getAttribution&&(this.addAttribution(t.layer.getAttribution()),t.layer.once("remove",function(){this.removeAttribution(t.layer.getAttribution())},this))},setPrefix:function(t){return this.options.prefix=t,this._update(),this},addAttribution:function(t){return t&&(this._attributions[t]||(this._attributions[t]=0),this._attributions[t]++,this._update()),this},removeAttribution:function(t){return t&&this._attributions[t]&&(this._attributions[t]--,this._update()),this},_update:function(){if(this._map){var t,e=[];for(t in this._attributions)this._attributions[t]&&e.push(t);var i=[];this.options.prefix&&i.push(this.options.prefix),e.length&&i.push(e.join(", ")),this._container.innerHTML=i.join(' <span aria-hidden="true">|</span> ')}}}),n=(A.mergeOptions({attributionControl:!0}),A.addInitHook(function(){this.options.attributionControl&&(new Ke).addTo(this)}),B.Layers=Ve,B.Zoom=qe,B.Scale=Ge,B.Attribution=Ke,Ue.layers=function(t,e,i){return new Ve(t,e,i)},Ue.zoom=function(t){return new qe(t)},Ue.scale=function(t){return new Ge(t)},Ue.attribution=function(t){return new Ke(t)},et.extend({initialize:function(t){this._map=t},enable:function(){return this._enabled||(this._enabled=!0,this.addHooks()),this},disable:function(){return this._enabled&&(this._enabled=!1,this.removeHooks()),this},enabled:function(){return!!this._enabled}})),ft=(n.addTo=function(t,e){return t.addHandler(e,this),this},{Events:e}),Ye=b.touch?"touchstart mousedown":"mousedown",Xe=it.extend({options:{clickTolerance:3},initialize:function(t,e,i,n){c(this,n),this._element=t,this._dragStartTarget=e||t,this._preventOutline=i},enable:function(){this._enabled||(S(this._dragStartTarget,Ye,this._onDown,this),this._enabled=!0)},disable:function(){this._enabled&&(Xe._dragging===this&&this.finishDrag(!0),k(this._dragStartTarget,Ye,this._onDown,this),this._enabled=!1,this._moved=!1)},_onDown:function(t){var e,i;this._enabled&&(this._moved=!1,ve(this._element,"leaflet-zoom-anim")||(t.touches&&1!==t.touches.length?Xe._dragging===this&&this.finishDrag():Xe._dragging||t.shiftKey||1!==t.which&&1!==t.button&&!t.touches||((Xe._dragging=this)._preventOutline&&Me(this._element),Le(),re(),this._moving||(this.fire("down"),i=t.touches?t.touches[0]:t,e=Ce(this._element),this._startPoint=new p(i.clientX,i.clientY),this._startPos=Pe(this._element),this._parentScale=Ze(e),i="mousedown"===t.type,S(document,i?"mousemove":"touchmove",this._onMove,this),S(document,i?"mouseup":"touchend touchcancel",this._onUp,this)))))},_onMove:function(t){var e;this._enabled&&(t.touches&&1<t.touches.length?this._moved=!0:!(e=new p((e=t.touches&&1===t.touches.length?t.touches[0]:t).clientX,e.clientY)._subtract(this._startPoint)).x&&!e.y||Math.abs(e.x)+Math.abs(e.y)<this.options.clickTolerance||(e.x/=this._parentScale.x,e.y/=this._parentScale.y,O(t),this._moved||(this.fire("dragstart"),this._moved=!0,M(document.body,"leaflet-dragging"),this._lastTarget=t.target||t.srcElement,window.SVGElementInstance&&this._lastTarget instanceof window.SVGElementInstance&&(this._lastTarget=this._lastTarget.correspondingUseElement),M(this._lastTarget,"leaflet-drag-target")),this._newPos=this._startPos.add(e),this._moving=!0,this._lastEvent=t,this._updatePosition()))},_updatePosition:function(){var t={originalEvent:this._lastEvent};this.fire("predrag",t),Z(this._element,this._newPos),this.fire("drag",t)},_onUp:function(){this._enabled&&this.finishDrag()},finishDrag:function(t){z(document.body,"leaflet-dragging"),this._lastTarget&&(z(this._lastTarget,"leaflet-drag-target"),this._lastTarget=null),k(document,"mousemove touchmove",this._onMove,this),k(document,"mouseup touchend touchcancel",this._onUp,this),Te(),ae();var e=this._moved&&this._moving;this._moving=!1,Xe._dragging=!1,e&&this.fire("dragend",{noInertia:t,distance:this._newPos.distanceTo(this._startPos)})}});function Je(t,e,i){for(var n,o,s,r,a,h,l,u=[1,4,2,8],c=0,d=t.length;c<d;c++)t[c]._code=si(t[c],e);for(s=0;s<4;s++){for(h=u[s],n=[],c=0,o=(d=t.length)-1;c<d;o=c++)r=t[c],a=t[o],r._code&h?a._code&h||((l=oi(a,r,h,e,i))._code=si(l,e),n.push(l)):(a._code&h&&((l=oi(a,r,h,e,i))._code=si(l,e),n.push(l)),n.push(r));t=n}return t}function $e(t,e){var i,n,o,s,r,a,h;if(!t||0===t.length)throw new Error("latlngs not passed");I(t)||(console.warn("latlngs are not flat! Only the first ring will be used"),t=t[0]);for(var l=w([0,0]),u=g(t),c=(u.getNorthWest().distanceTo(u.getSouthWest())*u.getNorthEast().distanceTo(u.getNorthWest())<1700&&(l=Qe(t)),t.length),d=[],_=0;_<c;_++){var p=w(t[_]);d.push(e.project(w([p.lat-l.lat,p.lng-l.lng])))}for(_=r=a=h=0,i=c-1;_<c;i=_++)n=d[_],o=d[i],s=n.y*o.x-o.y*n.x,a+=(n.x+o.x)*s,h+=(n.y+o.y)*s,r+=3*s;u=0===r?d[0]:[a/r,h/r],u=e.unproject(m(u));return w([u.lat+l.lat,u.lng+l.lng])}function Qe(t){for(var e=0,i=0,n=0,o=0;o<t.length;o++){var s=w(t[o]);e+=s.lat,i+=s.lng,n++}return w([e/n,i/n])}var ti,gt={__proto__:null,clipPolygon:Je,polygonCenter:$e,centroid:Qe};function ei(t,e){if(e&&t.length){var i=t=function(t,e){for(var i=[t[0]],n=1,o=0,s=t.length;n<s;n++)(function(t,e){var i=e.x-t.x,e=e.y-t.y;return i*i+e*e})(t[n],t[o])>e&&(i.push(t[n]),o=n);o<s-1&&i.push(t[s-1]);return i}(t,e=e*e),n=i.length,o=new(typeof Uint8Array!=void 0+""?Uint8Array:Array)(n);o[0]=o[n-1]=1,function t(e,i,n,o,s){var r,a,h,l=0;for(a=o+1;a<=s-1;a++)h=ri(e[a],e[o],e[s],!0),l<h&&(r=a,l=h);n<l&&(i[r]=1,t(e,i,n,o,r),t(e,i,n,r,s))}(i,o,e,0,n-1);var s,r=[];for(s=0;s<n;s++)o[s]&&r.push(i[s]);return r}return t.slice()}function ii(t,e,i){return Math.sqrt(ri(t,e,i,!0))}function ni(t,e,i,n,o){var s,r,a,h=n?ti:si(t,i),l=si(e,i);for(ti=l;;){if(!(h|l))return[t,e];if(h&l)return!1;a=si(r=oi(t,e,s=h||l,i,o),i),s===h?(t=r,h=a):(e=r,l=a)}}function oi(t,e,i,n,o){var s,r,a=e.x-t.x,e=e.y-t.y,h=n.min,n=n.max;return 8&i?(s=t.x+a*(n.y-t.y)/e,r=n.y):4&i?(s=t.x+a*(h.y-t.y)/e,r=h.y):2&i?(s=n.x,r=t.y+e*(n.x-t.x)/a):1&i&&(s=h.x,r=t.y+e*(h.x-t.x)/a),new p(s,r,o)}function si(t,e){var i=0;return t.x<e.min.x?i|=1:t.x>e.max.x&&(i|=2),t.y<e.min.y?i|=4:t.y>e.max.y&&(i|=8),i}function ri(t,e,i,n){var o=e.x,e=e.y,s=i.x-o,r=i.y-e,a=s*s+r*r;return 0<a&&(1<(a=((t.x-o)*s+(t.y-e)*r)/a)?(o=i.x,e=i.y):0<a&&(o+=s*a,e+=r*a)),s=t.x-o,r=t.y-e,n?s*s+r*r:new p(o,e)}function I(t){return!d(t[0])||"object"!=typeof t[0][0]&&void 0!==t[0][0]}function ai(t){return console.warn("Deprecated use of _flat, please use L.LineUtil.isFlat instead."),I(t)}function hi(t,e){var i,n,o,s,r,a;if(!t||0===t.length)throw new Error("latlngs not passed");I(t)||(console.warn("latlngs are not flat! Only the first ring will be used"),t=t[0]);for(var h=w([0,0]),l=g(t),u=(l.getNorthWest().distanceTo(l.getSouthWest())*l.getNorthEast().distanceTo(l.getNorthWest())<1700&&(h=Qe(t)),t.length),c=[],d=0;d<u;d++){var _=w(t[d]);c.push(e.project(w([_.lat-h.lat,_.lng-h.lng])))}for(i=d=0;d<u-1;d++)i+=c[d].distanceTo(c[d+1])/2;if(0===i)a=c[0];else for(n=d=0;d<u-1;d++)if(o=c[d],s=c[d+1],i<(n+=r=o.distanceTo(s))){a=[s.x-(r=(n-i)/r)*(s.x-o.x),s.y-r*(s.y-o.y)];break}l=e.unproject(m(a));return w([l.lat+h.lat,l.lng+h.lng])}var vt={__proto__:null,simplify:ei,pointToSegmentDistance:ii,closestPointOnSegment:function(t,e,i){return ri(t,e,i)},clipSegment:ni,_getEdgeIntersection:oi,_getBitCode:si,_sqClosestPointOnSegment:ri,isFlat:I,_flat:ai,polylineCenter:hi},yt={project:function(t){return new p(t.lng,t.lat)},unproject:function(t){return new v(t.y,t.x)},bounds:new f([-180,-90],[180,90])},xt={R:6378137,R_MINOR:6356752.314245179,bounds:new f([-20037508.34279,-15496570.73972],[20037508.34279,18764656.23138]),project:function(t){var e=Math.PI/180,i=this.R,n=t.lat*e,o=this.R_MINOR/i,o=Math.sqrt(1-o*o),s=o*Math.sin(n),s=Math.tan(Math.PI/4-n/2)/Math.pow((1-s)/(1+s),o/2),n=-i*Math.log(Math.max(s,1e-10));return new p(t.lng*e*i,n)},unproject:function(t){for(var e,i=180/Math.PI,n=this.R,o=this.R_MINOR/n,s=Math.sqrt(1-o*o),r=Math.exp(-t.y/n),a=Math.PI/2-2*Math.atan(r),h=0,l=.1;h<15&&1e-7<Math.abs(l);h++)e=s*Math.sin(a),e=Math.pow((1-e)/(1+e),s/2),a+=l=Math.PI/2-2*Math.atan(r*e)-a;return new v(a*i,t.x*i/n)}},wt={__proto__:null,LonLat:yt,Mercator:xt,SphericalMercator:rt},Pt=l({},st,{code:"EPSG:3395",projection:xt,transformation:ht(bt=.5/(Math.PI*xt.R),.5,-bt,.5)}),li=l({},st,{code:"EPSG:4326",projection:yt,transformation:ht(1/180,1,-1/180,.5)}),Lt=l({},ot,{projection:yt,transformation:ht(1,0,-1,0),scale:function(t){return Math.pow(2,t)},zoom:function(t){return Math.log(t)/Math.LN2},distance:function(t,e){var i=e.lng-t.lng,e=e.lat-t.lat;return Math.sqrt(i*i+e*e)},infinite:!0}),o=(ot.Earth=st,ot.EPSG3395=Pt,ot.EPSG3857=lt,ot.EPSG900913=ut,ot.EPSG4326=li,ot.Simple=Lt,it.extend({options:{pane:"overlayPane",attribution:null,bubblingMouseEvents:!0},addTo:function(t){return t.addLayer(this),this},remove:function(){return this.removeFrom(this._map||this._mapToAdd)},removeFrom:function(t){return t&&t.removeLayer(this),this},getPane:function(t){return this._map.getPane(t?this.options[t]||t:this.options.pane)},addInteractiveTarget:function(t){return this._map._targets[h(t)]=this},removeInteractiveTarget:function(t){return delete this._map._targets[h(t)],this},getAttribution:function(){return this.options.attribution},_layerAdd:function(t){var e,i=t.target;i.hasLayer(this)&&(this._map=i,this._zoomAnimated=i._zoomAnimated,this.getEvents&&(e=this.getEvents(),i.on(e,this),this.once("remove",function(){i.off(e,this)},this)),this.onAdd(i),this.fire("add"),i.fire("layeradd",{layer:this}))}})),ui=(A.include({addLayer:function(t){var e;if(t._layerAdd)return e=h(t),this._layers[e]||((this._layers[e]=t)._mapToAdd=this,t.beforeAdd&&t.beforeAdd(this),this.whenReady(t._layerAdd,t)),this;throw new Error("The provided object is not a Layer.")},removeLayer:function(t){var e=h(t);return this._layers[e]&&(this._loaded&&t.onRemove(this),delete this._layers[e],this._loaded&&(this.fire("layerremove",{layer:t}),t.fire("remove")),t._map=t._mapToAdd=null),this},hasLayer:function(t){return h(t)in this._layers},eachLayer:function(t,e){for(var i in this._layers)t.call(e,this._layers[i]);return this},_addLayers:function(t){for(var e=0,i=(t=t?d(t)?t:[t]:[]).length;e<i;e++)this.addLayer(t[e])},_addZoomLimit:function(t){isNaN(t.options.maxZoom)&&isNaN(t.options.minZoom)||(this._zoomBoundLayers[h(t)]=t,this._updateZoomLevels())},_removeZoomLimit:function(t){t=h(t);this._zoomBoundLayers[t]&&(delete this._zoomBoundLayers[t],this._updateZoomLevels())},_updateZoomLevels:function(){var t,e=1/0,i=-1/0,n=this._getZoomSpan();for(t in this._zoomBoundLayers)var o=this._zoomBoundLayers[t].options,e=void 0===o.minZoom?e:Math.min(e,o.minZoom),i=void 0===o.maxZoom?i:Math.max(i,o.maxZoom);this._layersMaxZoom=i===-1/0?void 0:i,this._layersMinZoom=e===1/0?void 0:e,n!==this._getZoomSpan()&&this.fire("zoomlevelschange"),void 0===this.options.maxZoom&&this._layersMaxZoom&&this.getZoom()>this._layersMaxZoom&&this.setZoom(this._layersMaxZoom),void 0===this.options.minZoom&&this._layersMinZoom&&this.getZoom()<this._layersMinZoom&&this.setZoom(this._layersMinZoom)}}),o.extend({initialize:function(t,e){var i,n;if(c(this,e),this._layers={},t)for(i=0,n=t.length;i<n;i++)this.addLayer(t[i])},addLayer:function(t){var e=this.getLayerId(t);return this._layers[e]=t,this._map&&this._map.addLayer(t),this},removeLayer:function(t){t=t in this._layers?t:this.getLayerId(t);return this._map&&this._layers[t]&&this._map.removeLayer(this._layers[t]),delete this._layers[t],this},hasLayer:function(t){return("number"==typeof t?t:this.getLayerId(t))in this._layers},clearLayers:function(){return this.eachLayer(this.removeLayer,this)},invoke:function(t){var e,i,n=Array.prototype.slice.call(arguments,1);for(e in this._layers)(i=this._layers[e])[t]&&i[t].apply(i,n);return this},onAdd:function(t){this.eachLayer(t.addLayer,t)},onRemove:function(t){this.eachLayer(t.removeLayer,t)},eachLayer:function(t,e){for(var i in this._layers)t.call(e,this._layers[i]);return this},getLayer:function(t){return this._layers[t]},getLayers:function(){var t=[];return this.eachLayer(t.push,t),t},setZIndex:function(t){return this.invoke("setZIndex",t)},getLayerId:h})),ci=ui.extend({addLayer:function(t){return this.hasLayer(t)?this:(t.addEventParent(this),ui.prototype.addLayer.call(this,t),this.fire("layeradd",{layer:t}))},removeLayer:function(t){return this.hasLayer(t)?((t=t in this._layers?this._layers[t]:t).removeEventParent(this),ui.prototype.removeLayer.call(this,t),this.fire("layerremove",{layer:t})):this},setStyle:function(t){return this.invoke("setStyle",t)},bringToFront:function(){return this.invoke("bringToFront")},bringToBack:function(){return this.invoke("bringToBack")},getBounds:function(){var t,e=new s;for(t in this._layers){var i=this._layers[t];e.extend(i.getBounds?i.getBounds():i.getLatLng())}return e}}),di=et.extend({options:{popupAnchor:[0,0],tooltipAnchor:[0,0],crossOrigin:!1},initialize:function(t){c(this,t)},createIcon:function(t){return this._createIcon("icon",t)},createShadow:function(t){return this._createIcon("shadow",t)},_createIcon:function(t,e){var i=this._getIconUrl(t);if(i)return i=this._createImg(i,e&&"IMG"===e.tagName?e:null),this._setIconStyles(i,t),!this.options.crossOrigin&&""!==this.options.crossOrigin||(i.crossOrigin=!0===this.options.crossOrigin?"":this.options.crossOrigin),i;if("icon"===t)throw new Error("iconUrl not set in Icon options (see the docs).");return null},_setIconStyles:function(t,e){var i=this.options,n=i[e+"Size"],n=m(n="number"==typeof n?[n,n]:n),o=m("shadow"===e&&i.shadowAnchor||i.iconAnchor||n&&n.divideBy(2,!0));t.className="leaflet-marker-"+e+" "+(i.className||""),o&&(t.style.marginLeft=-o.x+"px",t.style.marginTop=-o.y+"px"),n&&(t.style.width=n.x+"px",t.style.height=n.y+"px")},_createImg:function(t,e){return(e=e||document.createElement("img")).src=t,e},_getIconUrl:function(t){return b.retina&&this.options[t+"RetinaUrl"]||this.options[t+"Url"]}});var _i=di.extend({options:{iconUrl:"marker-icon.png",iconRetinaUrl:"marker-icon-2x.png",shadowUrl:"marker-shadow.png",iconSize:[25,41],iconAnchor:[12,41],popupAnchor:[1,-34],tooltipAnchor:[16,-28],shadowSize:[41,41]},_getIconUrl:function(t){return"string"!=typeof _i.imagePath&&(_i.imagePath=this._detectIconPath()),(this.options.imagePath||_i.imagePath)+di.prototype._getIconUrl.call(this,t)},_stripUrl:function(t){function e(t,e,i){return(e=e.exec(t))&&e[i]}return(t=e(t,/^url\((['"])?(.+)\1\)$/,2))&&e(t,/^(.*)marker-icon\.png$/,1)},_detectIconPath:function(){var t=P("div","leaflet-default-icon-path",document.body),e=pe(t,"background-image")||pe(t,"backgroundImage");return document.body.removeChild(t),(e=this._stripUrl(e))?e:(t=document.querySelector('link[href$="leaflet.css"]'))?t.href.substring(0,t.href.length-"leaflet.css".length-1):""}}),pi=n.extend({initialize:function(t){this._marker=t},addHooks:function(){var t=this._marker._icon;this._draggable||(this._draggable=new Xe(t,t,!0)),this._draggable.on({dragstart:this._onDragStart,predrag:this._onPreDrag,drag:this._onDrag,dragend:this._onDragEnd},this).enable(),M(t,"leaflet-marker-draggable")},removeHooks:function(){this._draggable.off({dragstart:this._onDragStart,predrag:this._onPreDrag,drag:this._onDrag,dragend:this._onDragEnd},this).disable(),this._marker._icon&&z(this._marker._icon,"leaflet-marker-draggable")},moved:function(){return this._draggable&&this._draggable._moved},_adjustPan:function(t){var e=this._marker,i=e._map,n=this._marker.options.autoPanSpeed,o=this._marker.options.autoPanPadding,s=Pe(e._icon),r=i.getPixelBounds(),a=i.getPixelOrigin(),a=_(r.min._subtract(a).add(o),r.max._subtract(a).subtract(o));a.contains(s)||(o=m((Math.max(a.max.x,s.x)-a.max.x)/(r.max.x-a.max.x)-(Math.min(a.min.x,s.x)-a.min.x)/(r.min.x-a.min.x),(Math.max(a.max.y,s.y)-a.max.y)/(r.max.y-a.max.y)-(Math.min(a.min.y,s.y)-a.min.y)/(r.min.y-a.min.y)).multiplyBy(n),i.panBy(o,{animate:!1}),this._draggable._newPos._add(o),this._draggable._startPos._add(o),Z(e._icon,this._draggable._newPos),this._onDrag(t),this._panRequest=x(this._adjustPan.bind(this,t)))},_onDragStart:function(){this._oldLatLng=this._marker.getLatLng(),this._marker.closePopup&&this._marker.closePopup(),this._marker.fire("movestart").fire("dragstart")},_onPreDrag:function(t){this._marker.options.autoPan&&(r(this._panRequest),this._panRequest=x(this._adjustPan.bind(this,t)))},_onDrag:function(t){var e=this._marker,i=e._shadow,n=Pe(e._icon),o=e._map.layerPointToLatLng(n);i&&Z(i,n),e._latlng=o,t.latlng=o,t.oldLatLng=this._oldLatLng,e.fire("move",t).fire("drag",t)},_onDragEnd:function(t){r(this._panRequest),delete this._oldLatLng,this._marker.fire("moveend").fire("dragend",t)}}),mi=o.extend({options:{icon:new _i,interactive:!0,keyboard:!0,title:"",alt:"Marker",zIndexOffset:0,opacity:1,riseOnHover:!1,riseOffset:250,pane:"markerPane",shadowPane:"shadowPane",bubblingMouseEvents:!1,autoPanOnFocus:!0,draggable:!1,autoPan:!1,autoPanPadding:[50,50],autoPanSpeed:10},initialize:function(t,e){c(this,e),this._latlng=w(t)},onAdd:function(t){this._zoomAnimated=this._zoomAnimated&&t.options.markerZoomAnimation,this._zoomAnimated&&t.on("zoomanim",this._animateZoom,this),this._initIcon(),this.update()},onRemove:function(t){this.dragging&&this.dragging.enabled()&&(this.options.draggable=!0,this.dragging.removeHooks()),delete this.dragging,this._zoomAnimated&&t.off("zoomanim",this._animateZoom,this),this._removeIcon(),this._removeShadow()},getEvents:function(){return{zoom:this.update,viewreset:this.update}},getLatLng:function(){return this._latlng},setLatLng:function(t){var e=this._latlng;return this._latlng=w(t),this.update(),this.fire("move",{oldLatLng:e,latlng:this._latlng})},setZIndexOffset:function(t){return this.options.zIndexOffset=t,this.update()},getIcon:function(){return this.options.icon},setIcon:function(t){return this.options.icon=t,this._map&&(this._initIcon(),this.update()),this._popup&&this.bindPopup(this._popup,this._popup.options),this},getElement:function(){return this._icon},update:function(){var t;return this._icon&&this._map&&(t=this._map.latLngToLayerPoint(this._latlng).round(),this._setPos(t)),this},_initIcon:function(){var t=this.options,e="leaflet-zoom-"+(this._zoomAnimated?"animated":"hide"),i=t.icon.createIcon(this._icon),n=!1,i=(i!==this._icon&&(this._icon&&this._removeIcon(),n=!0,t.title&&(i.title=t.title),"IMG"===i.tagName&&(i.alt=t.alt||"")),M(i,e),t.keyboard&&(i.tabIndex="0",i.setAttribute("role","button")),this._icon=i,t.riseOnHover&&this.on({mouseover:this._bringToFront,mouseout:this._resetZIndex}),this.options.autoPanOnFocus&&S(i,"focus",this._panOnFocus,this),t.icon.createShadow(this._shadow)),o=!1;i!==this._shadow&&(this._removeShadow(),o=!0),i&&(M(i,e),i.alt=""),this._shadow=i,t.opacity<1&&this._updateOpacity(),n&&this.getPane().appendChild(this._icon),this._initInteraction(),i&&o&&this.getPane(t.shadowPane).appendChild(this._shadow)},_removeIcon:function(){this.options.riseOnHover&&this.off({mouseover:this._bringToFront,mouseout:this._resetZIndex}),this.options.autoPanOnFocus&&k(this._icon,"focus",this._panOnFocus,this),T(this._icon),this.removeInteractiveTarget(this._icon),this._icon=null},_removeShadow:function(){this._shadow&&T(this._shadow),this._shadow=null},_setPos:function(t){this._icon&&Z(this._icon,t),this._shadow&&Z(this._shadow,t),this._zIndex=t.y+this.options.zIndexOffset,this._resetZIndex()},_updateZIndex:function(t){this._icon&&(this._icon.style.zIndex=this._zIndex+t)},_animateZoom:function(t){t=this._map._latLngToNewLayerPoint(this._latlng,t.zoom,t.center).round();this._setPos(t)},_initInteraction:function(){var t;this.options.interactive&&(M(this._icon,"leaflet-interactive"),this.addInteractiveTarget(this._icon),pi&&(t=this.options.draggable,this.dragging&&(t=this.dragging.enabled(),this.dragging.disable()),this.dragging=new pi(this),t&&this.dragging.enable()))},setOpacity:function(t){return this.options.opacity=t,this._map&&this._updateOpacity(),this},_updateOpacity:function(){var t=this.options.opacity;this._icon&&C(this._icon,t),this._shadow&&C(this._shadow,t)},_bringToFront:function(){this._updateZIndex(this.options.riseOffset)},_resetZIndex:function(){this._updateZIndex(0)},_panOnFocus:function(){var t,e,i=this._map;i&&(t=(e=this.options.icon.options).iconSize?m(e.iconSize):m(0,0),e=e.iconAnchor?m(e.iconAnchor):m(0,0),i.panInside(this._latlng,{paddingTopLeft:e,paddingBottomRight:t.subtract(e)}))},_getPopupAnchor:function(){return this.options.icon.options.popupAnchor},_getTooltipAnchor:function(){return this.options.icon.options.tooltipAnchor}});var fi=o.extend({options:{stroke:!0,color:"#3388ff",weight:3,opacity:1,lineCap:"round",lineJoin:"round",dashArray:null,dashOffset:null,fill:!1,fillColor:null,fillOpacity:.2,fillRule:"evenodd",interactive:!0,bubblingMouseEvents:!0},beforeAdd:function(t){this._renderer=t.getRenderer(this)},onAdd:function(){this._renderer._initPath(this),this._reset(),this._renderer._addPath(this)},onRemove:function(){this._renderer._removePath(this)},redraw:function(){return this._map&&this._renderer._updatePath(this),this},setStyle:function(t){return c(this,t),this._renderer&&(this._renderer._updateStyle(this),this.options.stroke&&t&&Object.prototype.hasOwnProperty.call(t,"weight")&&this._updateBounds()),this},bringToFront:function(){return this._renderer&&this._renderer._bringToFront(this),this},bringToBack:function(){return this._renderer&&this._renderer._bringToBack(this),this},getElement:function(){return this._path},_reset:function(){this._project(),this._update()},_clickTolerance:function(){return(this.options.stroke?this.options.weight/2:0)+(this._renderer.options.tolerance||0)}}),gi=fi.extend({options:{fill:!0,radius:10},initialize:function(t,e){c(this,e),this._latlng=w(t),this._radius=this.options.radius},setLatLng:function(t){var e=this._latlng;return this._latlng=w(t),this.redraw(),this.fire("move",{oldLatLng:e,latlng:this._latlng})},getLatLng:function(){return this._latlng},setRadius:function(t){return this.options.radius=this._radius=t,this.redraw()},getRadius:function(){return this._radius},setStyle:function(t){var e=t&&t.radius||this._radius;return fi.prototype.setStyle.call(this,t),this.setRadius(e),this},_project:function(){this._point=this._map.latLngToLayerPoint(this._latlng),this._updateBounds()},_updateBounds:function(){var t=this._radius,e=this._radiusY||t,i=this._clickTolerance(),t=[t+i,e+i];this._pxBounds=new f(this._point.subtract(t),this._point.add(t))},_update:function(){this._map&&this._updatePath()},_updatePath:function(){this._renderer._updateCircle(this)},_empty:function(){return this._radius&&!this._renderer._bounds.intersects(this._pxBounds)},_containsPoint:function(t){return t.distanceTo(this._point)<=this._radius+this._clickTolerance()}});var vi=gi.extend({initialize:function(t,e,i){if(c(this,e="number"==typeof e?l({},i,{radius:e}):e),this._latlng=w(t),isNaN(this.options.radius))throw new Error("Circle radius cannot be NaN");this._mRadius=this.options.radius},setRadius:function(t){return this._mRadius=t,this.redraw()},getRadius:function(){return this._mRadius},getBounds:function(){var t=[this._radius,this._radiusY||this._radius];return new s(this._map.layerPointToLatLng(this._point.subtract(t)),this._map.layerPointToLatLng(this._point.add(t)))},setStyle:fi.prototype.setStyle,_project:function(){var t,e,i,n,o,s=this._latlng.lng,r=this._latlng.lat,a=this._map,h=a.options.crs;h.distance===st.distance?(n=Math.PI/180,o=this._mRadius/st.R/n,t=a.project([r+o,s]),e=a.project([r-o,s]),e=t.add(e).divideBy(2),i=a.unproject(e).lat,n=Math.acos((Math.cos(o*n)-Math.sin(r*n)*Math.sin(i*n))/(Math.cos(r*n)*Math.cos(i*n)))/n,!isNaN(n)&&0!==n||(n=o/Math.cos(Math.PI/180*r)),this._point=e.subtract(a.getPixelOrigin()),this._radius=isNaN(n)?0:e.x-a.project([i,s-n]).x,this._radiusY=e.y-t.y):(o=h.unproject(h.project(this._latlng).subtract([this._mRadius,0])),this._point=a.latLngToLayerPoint(this._latlng),this._radius=this._point.x-a.latLngToLayerPoint(o).x),this._updateBounds()}});var yi=fi.extend({options:{smoothFactor:1,noClip:!1},initialize:function(t,e){c(this,e),this._setLatLngs(t)},getLatLngs:function(){return this._latlngs},setLatLngs:function(t){return this._setLatLngs(t),this.redraw()},isEmpty:function(){return!this._latlngs.length},closestLayerPoint:function(t){for(var e=1/0,i=null,n=ri,o=0,s=this._parts.length;o<s;o++)for(var r=this._parts[o],a=1,h=r.length;a<h;a++){var l,u,c=n(t,l=r[a-1],u=r[a],!0);c<e&&(e=c,i=n(t,l,u))}return i&&(i.distance=Math.sqrt(e)),i},getCenter:function(){if(this._map)return hi(this._defaultShape(),this._map.options.crs);throw new Error("Must add layer to map before using getCenter()")},getBounds:function(){return this._bounds},addLatLng:function(t,e){return e=e||this._defaultShape(),t=w(t),e.push(t),this._bounds.extend(t),this.redraw()},_setLatLngs:function(t){this._bounds=new s,this._latlngs=this._convertLatLngs(t)},_defaultShape:function(){return I(this._latlngs)?this._latlngs:this._latlngs[0]},_convertLatLngs:function(t){for(var e=[],i=I(t),n=0,o=t.length;n<o;n++)i?(e[n]=w(t[n]),this._bounds.extend(e[n])):e[n]=this._convertLatLngs(t[n]);return e},_project:function(){var t=new f;this._rings=[],this._projectLatlngs(this._latlngs,this._rings,t),this._bounds.isValid()&&t.isValid()&&(this._rawPxBounds=t,this._updateBounds())},_updateBounds:function(){var t=this._clickTolerance(),t=new p(t,t);this._rawPxBounds&&(this._pxBounds=new f([this._rawPxBounds.min.subtract(t),this._rawPxBounds.max.add(t)]))},_projectLatlngs:function(t,e,i){var n,o,s=t[0]instanceof v,r=t.length;if(s){for(o=[],n=0;n<r;n++)o[n]=this._map.latLngToLayerPoint(t[n]),i.extend(o[n]);e.push(o)}else for(n=0;n<r;n++)this._projectLatlngs(t[n],e,i)},_clipPoints:function(){var t=this._renderer._bounds;if(this._parts=[],this._pxBounds&&this._pxBounds.intersects(t))if(this.options.noClip)this._parts=this._rings;else for(var e,i,n,o,s=this._parts,r=0,a=0,h=this._rings.length;r<h;r++)for(e=0,i=(o=this._rings[r]).length;e<i-1;e++)(n=ni(o[e],o[e+1],t,e,!0))&&(s[a]=s[a]||[],s[a].push(n[0]),n[1]===o[e+1]&&e!==i-2||(s[a].push(n[1]),a++))},_simplifyPoints:function(){for(var t=this._parts,e=this.options.smoothFactor,i=0,n=t.length;i<n;i++)t[i]=ei(t[i],e)},_update:function(){this._map&&(this._clipPoints(),this._simplifyPoints(),this._updatePath())},_updatePath:function(){this._renderer._updatePoly(this)},_containsPoint:function(t,e){var i,n,o,s,r,a,h=this._clickTolerance();if(this._pxBounds&&this._pxBounds.contains(t))for(i=0,s=this._parts.length;i<s;i++)for(n=0,o=(r=(a=this._parts[i]).length)-1;n<r;o=n++)if((e||0!==n)&&ii(t,a[o],a[n])<=h)return!0;return!1}});yi._flat=ai;var xi=yi.extend({options:{fill:!0},isEmpty:function(){return!this._latlngs.length||!this._latlngs[0].length},getCenter:function(){if(this._map)return $e(this._defaultShape(),this._map.options.crs);throw new Error("Must add layer to map before using getCenter()")},_convertLatLngs:function(t){var t=yi.prototype._convertLatLngs.call(this,t),e=t.length;return 2<=e&&t[0]instanceof v&&t[0].equals(t[e-1])&&t.pop(),t},_setLatLngs:function(t){yi.prototype._setLatLngs.call(this,t),I(this._latlngs)&&(this._latlngs=[this._latlngs])},_defaultShape:function(){return(I(this._latlngs[0])?this._latlngs:this._latlngs[0])[0]},_clipPoints:function(){var t=this._renderer._bounds,e=this.options.weight,e=new p(e,e),t=new f(t.min.subtract(e),t.max.add(e));if(this._parts=[],this._pxBounds&&this._pxBounds.intersects(t))if(this.options.noClip)this._parts=this._rings;else for(var i,n=0,o=this._rings.length;n<o;n++)(i=Je(this._rings[n],t,!0)).length&&this._parts.push(i)},_updatePath:function(){this._renderer._updatePoly(this,!0)},_containsPoint:function(t){var e,i,n,o,s,r,a,h,l=!1;if(!this._pxBounds||!this._pxBounds.contains(t))return!1;for(o=0,a=this._parts.length;o<a;o++)for(s=0,r=(h=(e=this._parts[o]).length)-1;s<h;r=s++)i=e[s],n=e[r],i.y>t.y!=n.y>t.y&&t.x<(n.x-i.x)*(t.y-i.y)/(n.y-i.y)+i.x&&(l=!l);return l||yi.prototype._containsPoint.call(this,t,!0)}});var wi=ci.extend({initialize:function(t,e){c(this,e),this._layers={},t&&this.addData(t)},addData:function(t){var e,i,n,o=d(t)?t:t.features;if(o){for(e=0,i=o.length;e<i;e++)((n=o[e]).geometries||n.geometry||n.features||n.coordinates)&&this.addData(n);return this}var s,r=this.options;return(!r.filter||r.filter(t))&&(s=bi(t,r))?(s.feature=Zi(t),s.defaultOptions=s.options,this.resetStyle(s),r.onEachFeature&&r.onEachFeature(t,s),this.addLayer(s)):this},resetStyle:function(t){return void 0===t?this.eachLayer(this.resetStyle,this):(t.options=l({},t.defaultOptions),this._setLayerStyle(t,this.options.style),this)},setStyle:function(e){return this.eachLayer(function(t){this._setLayerStyle(t,e)},this)},_setLayerStyle:function(t,e){t.setStyle&&("function"==typeof e&&(e=e(t.feature)),t.setStyle(e))}});function bi(t,e){var i,n,o,s,r="Feature"===t.type?t.geometry:t,a=r?r.coordinates:null,h=[],l=e&&e.pointToLayer,u=e&&e.coordsToLatLng||Li;if(!a&&!r)return null;switch(r.type){case"Point":return Pi(l,t,i=u(a),e);case"MultiPoint":for(o=0,s=a.length;o<s;o++)i=u(a[o]),h.push(Pi(l,t,i,e));return new ci(h);case"LineString":case"MultiLineString":return n=Ti(a,"LineString"===r.type?0:1,u),new yi(n,e);case"Polygon":case"MultiPolygon":return n=Ti(a,"Polygon"===r.type?1:2,u),new xi(n,e);case"GeometryCollection":for(o=0,s=r.geometries.length;o<s;o++){var c=bi({geometry:r.geometries[o],type:"Feature",properties:t.properties},e);c&&h.push(c)}return new ci(h);case"FeatureCollection":for(o=0,s=r.features.length;o<s;o++){var d=bi(r.features[o],e);d&&h.push(d)}return new ci(h);default:throw new Error("Invalid GeoJSON object.")}}function Pi(t,e,i,n){return t?t(e,i):new mi(i,n&&n.markersInheritOptions&&n)}function Li(t){return new v(t[1],t[0],t[2])}function Ti(t,e,i){for(var n,o=[],s=0,r=t.length;s<r;s++)n=e?Ti(t[s],e-1,i):(i||Li)(t[s]),o.push(n);return o}function Mi(t,e){return void 0!==(t=w(t)).alt?[i(t.lng,e),i(t.lat,e),i(t.alt,e)]:[i(t.lng,e),i(t.lat,e)]}function zi(t,e,i,n){for(var o=[],s=0,r=t.length;s<r;s++)o.push(e?zi(t[s],I(t[s])?0:e-1,i,n):Mi(t[s],n));return!e&&i&&0<o.length&&o.push(o[0].slice()),o}function Ci(t,e){return t.feature?l({},t.feature,{geometry:e}):Zi(e)}function Zi(t){return"Feature"===t.type||"FeatureCollection"===t.type?t:{type:"Feature",properties:{},geometry:t}}Tt={toGeoJSON:function(t){return Ci(this,{type:"Point",coordinates:Mi(this.getLatLng(),t)})}};function Si(t,e){return new wi(t,e)}mi.include(Tt),vi.include(Tt),gi.include(Tt),yi.include({toGeoJSON:function(t){var e=!I(this._latlngs);return Ci(this,{type:(e?"Multi":"")+"LineString",coordinates:zi(this._latlngs,e?1:0,!1,t)})}}),xi.include({toGeoJSON:function(t){var e=!I(this._latlngs),i=e&&!I(this._latlngs[0]),t=zi(this._latlngs,i?2:e?1:0,!0,t);return Ci(this,{type:(i?"Multi":"")+"Polygon",coordinates:t=e?t:[t]})}}),ui.include({toMultiPoint:function(e){var i=[];return this.eachLayer(function(t){i.push(t.toGeoJSON(e).geometry.coordinates)}),Ci(this,{type:"MultiPoint",coordinates:i})},toGeoJSON:function(e){var i,n,t=this.feature&&this.feature.geometry&&this.feature.geometry.type;return"MultiPoint"===t?this.toMultiPoint(e):(i="GeometryCollection"===t,n=[],this.eachLayer(function(t){t.toGeoJSON&&(t=t.toGeoJSON(e),i?n.push(t.geometry):"FeatureCollection"===(t=Zi(t)).type?n.push.apply(n,t.features):n.push(t))}),i?Ci(this,{geometries:n,type:"GeometryCollection"}):{type:"FeatureCollection",features:n})}});var Mt=Si,Ei=o.extend({options:{opacity:1,alt:"",interactive:!1,crossOrigin:!1,errorOverlayUrl:"",zIndex:1,className:""},initialize:function(t,e,i){this._url=t,this._bounds=g(e),c(this,i)},onAdd:function(){this._image||(this._initImage(),this.options.opacity<1&&this._updateOpacity()),this.options.interactive&&(M(this._image,"leaflet-interactive"),this.addInteractiveTarget(this._image)),this.getPane().appendChild(this._image),this._reset()},onRemove:function(){T(this._image),this.options.interactive&&this.removeInteractiveTarget(this._image)},setOpacity:function(t){return this.options.opacity=t,this._image&&this._updateOpacity(),this},setStyle:function(t){return t.opacity&&this.setOpacity(t.opacity),this},bringToFront:function(){return this._map&&fe(this._image),this},bringToBack:function(){return this._map&&ge(this._image),this},setUrl:function(t){return this._url=t,this._image&&(this._image.src=t),this},setBounds:function(t){return this._bounds=g(t),this._map&&this._reset(),this},getEvents:function(){var t={zoom:this._reset,viewreset:this._reset};return this._zoomAnimated&&(t.zoomanim=this._animateZoom),t},setZIndex:function(t){return this.options.zIndex=t,this._updateZIndex(),this},getBounds:function(){return this._bounds},getElement:function(){return this._image},_initImage:function(){var t="IMG"===this._url.tagName,e=this._image=t?this._url:P("img");M(e,"leaflet-image-layer"),this._zoomAnimated&&M(e,"leaflet-zoom-animated"),this.options.className&&M(e,this.options.className),e.onselectstart=u,e.onmousemove=u,e.onload=a(this.fire,this,"load"),e.onerror=a(this._overlayOnError,this,"error"),!this.options.crossOrigin&&""!==this.options.crossOrigin||(e.crossOrigin=!0===this.options.crossOrigin?"":this.options.crossOrigin),this.options.zIndex&&this._updateZIndex(),t?this._url=e.src:(e.src=this._url,e.alt=this.options.alt)},_animateZoom:function(t){var e=this._map.getZoomScale(t.zoom),t=this._map._latLngBoundsToNewLayerBounds(this._bounds,t.zoom,t.center).min;be(this._image,t,e)},_reset:function(){var t=this._image,e=new f(this._map.latLngToLayerPoint(this._bounds.getNorthWest()),this._map.latLngToLayerPoint(this._bounds.getSouthEast())),i=e.getSize();Z(t,e.min),t.style.width=i.x+"px",t.style.height=i.y+"px"},_updateOpacity:function(){C(this._image,this.options.opacity)},_updateZIndex:function(){this._image&&void 0!==this.options.zIndex&&null!==this.options.zIndex&&(this._image.style.zIndex=this.options.zIndex)},_overlayOnError:function(){this.fire("error");var t=this.options.errorOverlayUrl;t&&this._url!==t&&(this._url=t,this._image.src=t)},getCenter:function(){return this._bounds.getCenter()}}),ki=Ei.extend({options:{autoplay:!0,loop:!0,keepAspectRatio:!0,muted:!1,playsInline:!0},_initImage:function(){var t="VIDEO"===this._url.tagName,e=this._image=t?this._url:P("video");if(M(e,"leaflet-image-layer"),this._zoomAnimated&&M(e,"leaflet-zoom-animated"),this.options.className&&M(e,this.options.className),e.onselectstart=u,e.onmousemove=u,e.onloadeddata=a(this.fire,this,"load"),t){for(var i=e.getElementsByTagName("source"),n=[],o=0;o<i.length;o++)n.push(i[o].src);this._url=0<i.length?n:[e.src]}else{d(this._url)||(this._url=[this._url]),!this.options.keepAspectRatio&&Object.prototype.hasOwnProperty.call(e.style,"objectFit")&&(e.style.objectFit="fill"),e.autoplay=!!this.options.autoplay,e.loop=!!this.options.loop,e.muted=!!this.options.muted,e.playsInline=!!this.options.playsInline;for(var s=0;s<this._url.length;s++){var r=P("source");r.src=this._url[s],e.appendChild(r)}}}});var Oi=Ei.extend({_initImage:function(){var t=this._image=this._url;M(t,"leaflet-image-layer"),this._zoomAnimated&&M(t,"leaflet-zoom-animated"),this.options.className&&M(t,this.options.className),t.onselectstart=u,t.onmousemove=u}});var Ai=o.extend({options:{interactive:!1,offset:[0,0],className:"",pane:void 0,content:""},initialize:function(t,e){t&&(t instanceof v||d(t))?(this._latlng=w(t),c(this,e)):(c(this,t),this._source=e),this.options.content&&(this._content=this.options.content)},openOn:function(t){return(t=arguments.length?t:this._source._map).hasLayer(this)||t.addLayer(this),this},close:function(){return this._map&&this._map.removeLayer(this),this},toggle:function(t){return this._map?this.close():(arguments.length?this._source=t:t=this._source,this._prepareOpen(),this.openOn(t._map)),this},onAdd:function(t){this._zoomAnimated=t._zoomAnimated,this._container||this._initLayout(),t._fadeAnimated&&C(this._container,0),clearTimeout(this._removeTimeout),this.getPane().appendChild(this._container),this.update(),t._fadeAnimated&&C(this._container,1),this.bringToFront(),this.options.interactive&&(M(this._container,"leaflet-interactive"),this.addInteractiveTarget(this._container))},onRemove:function(t){t._fadeAnimated?(C(this._container,0),this._removeTimeout=setTimeout(a(T,void 0,this._container),200)):T(this._container),this.options.interactive&&(z(this._container,"leaflet-interactive"),this.removeInteractiveTarget(this._container))},getLatLng:function(){return this._latlng},setLatLng:function(t){return this._latlng=w(t),this._map&&(this._updatePosition(),this._adjustPan()),this},getContent:function(){return this._content},setContent:function(t){return this._content=t,this.update(),this},getElement:function(){return this._container},update:function(){this._map&&(this._container.style.visibility="hidden",this._updateContent(),this._updateLayout(),this._updatePosition(),this._container.style.visibility="",this._adjustPan())},getEvents:function(){var t={zoom:this._updatePosition,viewreset:this._updatePosition};return this._zoomAnimated&&(t.zoomanim=this._animateZoom),t},isOpen:function(){return!!this._map&&this._map.hasLayer(this)},bringToFront:function(){return this._map&&fe(this._container),this},bringToBack:function(){return this._map&&ge(this._container),this},_prepareOpen:function(t){if(!(i=this._source)._map)return!1;if(i instanceof ci){var e,i=null,n=this._source._layers;for(e in n)if(n[e]._map){i=n[e];break}if(!i)return!1;this._source=i}if(!t)if(i.getCenter)t=i.getCenter();else if(i.getLatLng)t=i.getLatLng();else{if(!i.getBounds)throw new Error("Unable to get source layer LatLng.");t=i.getBounds().getCenter()}return this.setLatLng(t),this._map&&this.update(),!0},_updateContent:function(){if(this._content){var t=this._contentNode,e="function"==typeof this._content?this._content(this._source||this):this._content;if("string"==typeof e)t.innerHTML=e;else{for(;t.hasChildNodes();)t.removeChild(t.firstChild);t.appendChild(e)}this.fire("contentupdate")}},_updatePosition:function(){var t,e,i;this._map&&(e=this._map.latLngToLayerPoint(this._latlng),t=m(this.options.offset),i=this._getAnchor(),this._zoomAnimated?Z(this._container,e.add(i)):t=t.add(e).add(i),e=this._containerBottom=-t.y,i=this._containerLeft=-Math.round(this._containerWidth/2)+t.x,this._container.style.bottom=e+"px",this._container.style.left=i+"px")},_getAnchor:function(){return[0,0]}}),Bi=(A.include({_initOverlay:function(t,e,i,n){var o=e;return o instanceof t||(o=new t(n).setContent(e)),i&&o.setLatLng(i),o}}),o.include({_initOverlay:function(t,e,i,n){var o=i;return o instanceof t?(c(o,n),o._source=this):(o=e&&!n?e:new t(n,this)).setContent(i),o}}),Ai.extend({options:{pane:"popupPane",offset:[0,7],maxWidth:300,minWidth:50,maxHeight:null,autoPan:!0,autoPanPaddingTopLeft:null,autoPanPaddingBottomRight:null,autoPanPadding:[5,5],keepInView:!1,closeButton:!0,autoClose:!0,closeOnEscapeKey:!0,className:""},openOn:function(t){return!(t=arguments.length?t:this._source._map).hasLayer(this)&&t._popup&&t._popup.options.autoClose&&t.removeLayer(t._popup),t._popup=this,Ai.prototype.openOn.call(this,t)},onAdd:function(t){Ai.prototype.onAdd.call(this,t),t.fire("popupopen",{popup:this}),this._source&&(this._source.fire("popupopen",{popup:this},!0),this._source instanceof fi||this._source.on("preclick",Ae))},onRemove:function(t){Ai.prototype.onRemove.call(this,t),t.fire("popupclose",{popup:this}),this._source&&(this._source.fire("popupclose",{popup:this},!0),this._source instanceof fi||this._source.off("preclick",Ae))},getEvents:function(){var t=Ai.prototype.getEvents.call(this);return(void 0!==this.options.closeOnClick?this.options.closeOnClick:this._map.options.closePopupOnClick)&&(t.preclick=this.close),this.options.keepInView&&(t.moveend=this._adjustPan),t},_initLayout:function(){var t="leaflet-popup",e=this._container=P("div",t+" "+(this.options.className||"")+" leaflet-zoom-animated"),i=this._wrapper=P("div",t+"-content-wrapper",e);this._contentNode=P("div",t+"-content",i),Ie(e),Be(this._contentNode),S(e,"contextmenu",Ae),this._tipContainer=P("div",t+"-tip-container",e),this._tip=P("div",t+"-tip",this._tipContainer),this.options.closeButton&&((i=this._closeButton=P("a",t+"-close-button",e)).setAttribute("role","button"),i.setAttribute("aria-label","Close popup"),i.href="#close",i.innerHTML='<span aria-hidden="true">&#215;</span>',S(i,"click",function(t){O(t),this.close()},this))},_updateLayout:function(){var t=this._contentNode,e=t.style,i=(e.width="",e.whiteSpace="nowrap",t.offsetWidth),i=Math.min(i,this.options.maxWidth),i=(i=Math.max(i,this.options.minWidth),e.width=i+1+"px",e.whiteSpace="",e.height="",t.offsetHeight),n=this.options.maxHeight,o="leaflet-popup-scrolled";(n&&n<i?(e.height=n+"px",M):z)(t,o),this._containerWidth=this._container.offsetWidth},_animateZoom:function(t){var t=this._map._latLngToNewLayerPoint(this._latlng,t.zoom,t.center),e=this._getAnchor();Z(this._container,t.add(e))},_adjustPan:function(){var t,e,i,n,o,s,r,a;this.options.autoPan&&(this._map._panAnim&&this._map._panAnim.stop(),this._autopanning?this._autopanning=!1:(t=this._map,e=parseInt(pe(this._container,"marginBottom"),10)||0,e=this._container.offsetHeight+e,a=this._containerWidth,(i=new p(this._containerLeft,-e-this._containerBottom))._add(Pe(this._container)),i=t.layerPointToContainerPoint(i),o=m(this.options.autoPanPadding),n=m(this.options.autoPanPaddingTopLeft||o),o=m(this.options.autoPanPaddingBottomRight||o),s=t.getSize(),r=0,i.x+a+o.x>s.x&&(r=i.x+a-s.x+o.x),i.x-r-n.x<(a=0)&&(r=i.x-n.x),i.y+e+o.y>s.y&&(a=i.y+e-s.y+o.y),i.y-a-n.y<0&&(a=i.y-n.y),(r||a)&&(this.options.keepInView&&(this._autopanning=!0),t.fire("autopanstart").panBy([r,a]))))},_getAnchor:function(){return m(this._source&&this._source._getPopupAnchor?this._source._getPopupAnchor():[0,0])}})),Ii=(A.mergeOptions({closePopupOnClick:!0}),A.include({openPopup:function(t,e,i){return this._initOverlay(Bi,t,e,i).openOn(this),this},closePopup:function(t){return(t=arguments.length?t:this._popup)&&t.close(),this}}),o.include({bindPopup:function(t,e){return this._popup=this._initOverlay(Bi,this._popup,t,e),this._popupHandlersAdded||(this.on({click:this._openPopup,keypress:this._onKeyPress,remove:this.closePopup,move:this._movePopup}),this._popupHandlersAdded=!0),this},unbindPopup:function(){return this._popup&&(this.off({click:this._openPopup,keypress:this._onKeyPress,remove:this.closePopup,move:this._movePopup}),this._popupHandlersAdded=!1,this._popup=null),this},openPopup:function(t){return this._popup&&(this instanceof ci||(this._popup._source=this),this._popup._prepareOpen(t||this._latlng)&&this._popup.openOn(this._map)),this},closePopup:function(){return this._popup&&this._popup.close(),this},togglePopup:function(){return this._popup&&this._popup.toggle(this),this},isPopupOpen:function(){return!!this._popup&&this._popup.isOpen()},setPopupContent:function(t){return this._popup&&this._popup.setContent(t),this},getPopup:function(){return this._popup},_openPopup:function(t){var e;this._popup&&this._map&&(Re(t),e=t.layer||t.target,this._popup._source!==e||e instanceof fi?(this._popup._source=e,this.openPopup(t.latlng)):this._map.hasLayer(this._popup)?this.closePopup():this.openPopup(t.latlng))},_movePopup:function(t){this._popup.setLatLng(t.latlng)},_onKeyPress:function(t){13===t.originalEvent.keyCode&&this._openPopup(t)}}),Ai.extend({options:{pane:"tooltipPane",offset:[0,0],direction:"auto",permanent:!1,sticky:!1,opacity:.9},onAdd:function(t){Ai.prototype.onAdd.call(this,t),this.setOpacity(this.options.opacity),t.fire("tooltipopen",{tooltip:this}),this._source&&(this.addEventParent(this._source),this._source.fire("tooltipopen",{tooltip:this},!0))},onRemove:function(t){Ai.prototype.onRemove.call(this,t),t.fire("tooltipclose",{tooltip:this}),this._source&&(this.removeEventParent(this._source),this._source.fire("tooltipclose",{tooltip:this},!0))},getEvents:function(){var t=Ai.prototype.getEvents.call(this);return this.options.permanent||(t.preclick=this.close),t},_initLayout:function(){var t="leaflet-tooltip "+(this.options.className||"")+" leaflet-zoom-"+(this._zoomAnimated?"animated":"hide");this._contentNode=this._container=P("div",t),this._container.setAttribute("role","tooltip"),this._container.setAttribute("id","leaflet-tooltip-"+h(this))},_updateLayout:function(){},_adjustPan:function(){},_setPosition:function(t){var e,i=this._map,n=this._container,o=i.latLngToContainerPoint(i.getCenter()),i=i.layerPointToContainerPoint(t),s=this.options.direction,r=n.offsetWidth,a=n.offsetHeight,h=m(this.options.offset),l=this._getAnchor(),i="top"===s?(e=r/2,a):"bottom"===s?(e=r/2,0):(e="center"===s?r/2:"right"===s?0:"left"===s?r:i.x<o.x?(s="right",0):(s="left",r+2*(h.x+l.x)),a/2);t=t.subtract(m(e,i,!0)).add(h).add(l),z(n,"leaflet-tooltip-right"),z(n,"leaflet-tooltip-left"),z(n,"leaflet-tooltip-top"),z(n,"leaflet-tooltip-bottom"),M(n,"leaflet-tooltip-"+s),Z(n,t)},_updatePosition:function(){var t=this._map.latLngToLayerPoint(this._latlng);this._setPosition(t)},setOpacity:function(t){this.options.opacity=t,this._container&&C(this._container,t)},_animateZoom:function(t){t=this._map._latLngToNewLayerPoint(this._latlng,t.zoom,t.center);this._setPosition(t)},_getAnchor:function(){return m(this._source&&this._source._getTooltipAnchor&&!this.options.sticky?this._source._getTooltipAnchor():[0,0])}})),Ri=(A.include({openTooltip:function(t,e,i){return this._initOverlay(Ii,t,e,i).openOn(this),this},closeTooltip:function(t){return t.close(),this}}),o.include({bindTooltip:function(t,e){return this._tooltip&&this.isTooltipOpen()&&this.unbindTooltip(),this._tooltip=this._initOverlay(Ii,this._tooltip,t,e),this._initTooltipInteractions(),this._tooltip.options.permanent&&this._map&&this._map.hasLayer(this)&&this.openTooltip(),this},unbindTooltip:function(){return this._tooltip&&(this._initTooltipInteractions(!0),this.closeTooltip(),this._tooltip=null),this},_initTooltipInteractions:function(t){var e,i;!t&&this._tooltipHandlersAdded||(e=t?"off":"on",i={remove:this.closeTooltip,move:this._moveTooltip},this._tooltip.options.permanent?i.add=this._openTooltip:(i.mouseover=this._openTooltip,i.mouseout=this.closeTooltip,i.click=this._openTooltip,this._map?this._addFocusListeners():i.add=this._addFocusListeners),this._tooltip.options.sticky&&(i.mousemove=this._moveTooltip),this[e](i),this._tooltipHandlersAdded=!t)},openTooltip:function(t){return this._tooltip&&(this instanceof ci||(this._tooltip._source=this),this._tooltip._prepareOpen(t)&&(this._tooltip.openOn(this._map),this.getElement?this._setAriaDescribedByOnLayer(this):this.eachLayer&&this.eachLayer(this._setAriaDescribedByOnLayer,this))),this},closeTooltip:function(){if(this._tooltip)return this._tooltip.close()},toggleTooltip:function(){return this._tooltip&&this._tooltip.toggle(this),this},isTooltipOpen:function(){return this._tooltip.isOpen()},setTooltipContent:function(t){return this._tooltip&&this._tooltip.setContent(t),this},getTooltip:function(){return this._tooltip},_addFocusListeners:function(){this.getElement?this._addFocusListenersOnLayer(this):this.eachLayer&&this.eachLayer(this._addFocusListenersOnLayer,this)},_addFocusListenersOnLayer:function(t){var e="function"==typeof t.getElement&&t.getElement();e&&(S(e,"focus",function(){this._tooltip._source=t,this.openTooltip()},this),S(e,"blur",this.closeTooltip,this))},_setAriaDescribedByOnLayer:function(t){t="function"==typeof t.getElement&&t.getElement();t&&t.setAttribute("aria-describedby",this._tooltip._container.id)},_openTooltip:function(t){var e;this._tooltip&&this._map&&(this._map.dragging&&this._map.dragging.moving()&&!this._openOnceFlag?(this._openOnceFlag=!0,(e=this)._map.once("moveend",function(){e._openOnceFlag=!1,e._openTooltip(t)})):(this._tooltip._source=t.layer||t.target,this.openTooltip(this._tooltip.options.sticky?t.latlng:void 0)))},_moveTooltip:function(t){var e=t.latlng;this._tooltip.options.sticky&&t.originalEvent&&(t=this._map.mouseEventToContainerPoint(t.originalEvent),t=this._map.containerPointToLayerPoint(t),e=this._map.layerPointToLatLng(t)),this._tooltip.setLatLng(e)}}),di.extend({options:{iconSize:[12,12],html:!1,bgPos:null,className:"leaflet-div-icon"},createIcon:function(t){var t=t&&"DIV"===t.tagName?t:document.createElement("div"),e=this.options;return e.html instanceof Element?(me(t),t.appendChild(e.html)):t.innerHTML=!1!==e.html?e.html:"",e.bgPos&&(e=m(e.bgPos),t.style.backgroundPosition=-e.x+"px "+-e.y+"px"),this._setIconStyles(t,"icon"),t},createShadow:function(){return null}}));di.Default=_i;var Ni=o.extend({options:{tileSize:256,opacity:1,updateWhenIdle:b.mobile,updateWhenZooming:!0,updateInterval:200,zIndex:1,bounds:null,minZoom:0,maxZoom:void 0,maxNativeZoom:void 0,minNativeZoom:void 0,noWrap:!1,pane:"tilePane",className:"",keepBuffer:2},initialize:function(t){c(this,t)},onAdd:function(){this._initContainer(),this._levels={},this._tiles={},this._resetView()},beforeAdd:function(t){t._addZoomLimit(this)},onRemove:function(t){this._removeAllTiles(),T(this._container),t._removeZoomLimit(this),this._container=null,this._tileZoom=void 0},bringToFront:function(){return this._map&&(fe(this._container),this._setAutoZIndex(Math.max)),this},bringToBack:function(){return this._map&&(ge(this._container),this._setAutoZIndex(Math.min)),this},getContainer:function(){return this._container},setOpacity:function(t){return this.options.opacity=t,this._updateOpacity(),this},setZIndex:function(t){return this.options.zIndex=t,this._updateZIndex(),this},isLoading:function(){return this._loading},redraw:function(){var t;return this._map&&(this._removeAllTiles(),(t=this._clampZoom(this._map.getZoom()))!==this._tileZoom&&(this._tileZoom=t,this._updateLevels()),this._update()),this},getEvents:function(){var t={viewprereset:this._invalidateAll,viewreset:this._resetView,zoom:this._resetView,moveend:this._onMoveEnd};return this.options.updateWhenIdle||(this._onMove||(this._onMove=j(this._onMoveEnd,this.options.updateInterval,this)),t.move=this._onMove),this._zoomAnimated&&(t.zoomanim=this._animateZoom),t},createTile:function(){return document.createElement("div")},getTileSize:function(){var t=this.options.tileSize;return t instanceof p?t:new p(t,t)},_updateZIndex:function(){this._container&&void 0!==this.options.zIndex&&null!==this.options.zIndex&&(this._container.style.zIndex=this.options.zIndex)},_setAutoZIndex:function(t){for(var e,i=this.getPane().children,n=-t(-1/0,1/0),o=0,s=i.length;o<s;o++)e=i[o].style.zIndex,i[o]!==this._container&&e&&(n=t(n,+e));isFinite(n)&&(this.options.zIndex=n+t(-1,1),this._updateZIndex())},_updateOpacity:function(){if(this._map&&!b.ielt9){C(this._container,this.options.opacity);var t,e=+new Date,i=!1,n=!1;for(t in this._tiles){var o,s=this._tiles[t];s.current&&s.loaded&&(o=Math.min(1,(e-s.loaded)/200),C(s.el,o),o<1?i=!0:(s.active?n=!0:this._onOpaqueTile(s),s.active=!0))}n&&!this._noPrune&&this._pruneTiles(),i&&(r(this._fadeFrame),this._fadeFrame=x(this._updateOpacity,this))}},_onOpaqueTile:u,_initContainer:function(){this._container||(this._container=P("div","leaflet-layer "+(this.options.className||"")),this._updateZIndex(),this.options.opacity<1&&this._updateOpacity(),this.getPane().appendChild(this._container))},_updateLevels:function(){var t=this._tileZoom,e=this.options.maxZoom;if(void 0!==t){for(var i in this._levels)i=Number(i),this._levels[i].el.children.length||i===t?(this._levels[i].el.style.zIndex=e-Math.abs(t-i),this._onUpdateLevel(i)):(T(this._levels[i].el),this._removeTilesAtZoom(i),this._onRemoveLevel(i),delete this._levels[i]);var n=this._levels[t],o=this._map;return n||((n=this._levels[t]={}).el=P("div","leaflet-tile-container leaflet-zoom-animated",this._container),n.el.style.zIndex=e,n.origin=o.project(o.unproject(o.getPixelOrigin()),t).round(),n.zoom=t,this._setZoomTransform(n,o.getCenter(),o.getZoom()),u(n.el.offsetWidth),this._onCreateLevel(n)),this._level=n}},_onUpdateLevel:u,_onRemoveLevel:u,_onCreateLevel:u,_pruneTiles:function(){if(this._map){var t,e,i,n=this._map.getZoom();if(n>this.options.maxZoom||n<this.options.minZoom)this._removeAllTiles();else{for(t in this._tiles)(i=this._tiles[t]).retain=i.current;for(t in this._tiles)(i=this._tiles[t]).current&&!i.active&&(e=i.coords,this._retainParent(e.x,e.y,e.z,e.z-5)||this._retainChildren(e.x,e.y,e.z,e.z+2));for(t in this._tiles)this._tiles[t].retain||this._removeTile(t)}}},_removeTilesAtZoom:function(t){for(var e in this._tiles)this._tiles[e].coords.z===t&&this._removeTile(e)},_removeAllTiles:function(){for(var t in this._tiles)this._removeTile(t)},_invalidateAll:function(){for(var t in this._levels)T(this._levels[t].el),this._onRemoveLevel(Number(t)),delete this._levels[t];this._removeAllTiles(),this._tileZoom=void 0},_retainParent:function(t,e,i,n){var t=Math.floor(t/2),e=Math.floor(e/2),i=i-1,o=new p(+t,+e),o=(o.z=i,this._tileCoordsToKey(o)),o=this._tiles[o];return o&&o.active?o.retain=!0:(o&&o.loaded&&(o.retain=!0),n<i&&this._retainParent(t,e,i,n))},_retainChildren:function(t,e,i,n){for(var o=2*t;o<2*t+2;o++)for(var s=2*e;s<2*e+2;s++){var r=new p(o,s),r=(r.z=i+1,this._tileCoordsToKey(r)),r=this._tiles[r];r&&r.active?r.retain=!0:(r&&r.loaded&&(r.retain=!0),i+1<n&&this._retainChildren(o,s,i+1,n))}},_resetView:function(t){t=t&&(t.pinch||t.flyTo);this._setView(this._map.getCenter(),this._map.getZoom(),t,t)},_animateZoom:function(t){this._setView(t.center,t.zoom,!0,t.noUpdate)},_clampZoom:function(t){var e=this.options;return void 0!==e.minNativeZoom&&t<e.minNativeZoom?e.minNativeZoom:void 0!==e.maxNativeZoom&&e.maxNativeZoom<t?e.maxNativeZoom:t},_setView:function(t,e,i,n){var o=Math.round(e),o=void 0!==this.options.maxZoom&&o>this.options.maxZoom||void 0!==this.options.minZoom&&o<this.options.minZoom?void 0:this._clampZoom(o),s=this.options.updateWhenZooming&&o!==this._tileZoom;n&&!s||(this._tileZoom=o,this._abortLoading&&this._abortLoading(),this._updateLevels(),this._resetGrid(),void 0!==o&&this._update(t),i||this._pruneTiles(),this._noPrune=!!i),this._setZoomTransforms(t,e)},_setZoomTransforms:function(t,e){for(var i in this._levels)this._setZoomTransform(this._levels[i],t,e)},_setZoomTransform:function(t,e,i){var n=this._map.getZoomScale(i,t.zoom),e=t.origin.multiplyBy(n).subtract(this._map._getNewPixelOrigin(e,i)).round();b.any3d?be(t.el,e,n):Z(t.el,e)},_resetGrid:function(){var t=this._map,e=t.options.crs,i=this._tileSize=this.getTileSize(),n=this._tileZoom,o=this._map.getPixelWorldBounds(this._tileZoom);o&&(this._globalTileRange=this._pxBoundsToTileRange(o)),this._wrapX=e.wrapLng&&!this.options.noWrap&&[Math.floor(t.project([0,e.wrapLng[0]],n).x/i.x),Math.ceil(t.project([0,e.wrapLng[1]],n).x/i.y)],this._wrapY=e.wrapLat&&!this.options.noWrap&&[Math.floor(t.project([e.wrapLat[0],0],n).y/i.x),Math.ceil(t.project([e.wrapLat[1],0],n).y/i.y)]},_onMoveEnd:function(){this._map&&!this._map._animatingZoom&&this._update()},_getTiledPixelBounds:function(t){var e=this._map,i=e._animatingZoom?Math.max(e._animateToZoom,e.getZoom()):e.getZoom(),i=e.getZoomScale(i,this._tileZoom),t=e.project(t,this._tileZoom).floor(),e=e.getSize().divideBy(2*i);return new f(t.subtract(e),t.add(e))},_update:function(t){var e=this._map;if(e){var i=this._clampZoom(e.getZoom());if(void 0===t&&(t=e.getCenter()),void 0!==this._tileZoom){var n,e=this._getTiledPixelBounds(t),o=this._pxBoundsToTileRange(e),s=o.getCenter(),r=[],e=this.options.keepBuffer,a=new f(o.getBottomLeft().subtract([e,-e]),o.getTopRight().add([e,-e]));if(!(isFinite(o.min.x)&&isFinite(o.min.y)&&isFinite(o.max.x)&&isFinite(o.max.y)))throw new Error("Attempted to load an infinite number of tiles");for(n in this._tiles){var h=this._tiles[n].coords;h.z===this._tileZoom&&a.contains(new p(h.x,h.y))||(this._tiles[n].current=!1)}if(1<Math.abs(i-this._tileZoom))this._setView(t,i);else{for(var l=o.min.y;l<=o.max.y;l++)for(var u=o.min.x;u<=o.max.x;u++){var c,d=new p(u,l);d.z=this._tileZoom,this._isValidTile(d)&&((c=this._tiles[this._tileCoordsToKey(d)])?c.current=!0:r.push(d))}if(r.sort(function(t,e){return t.distanceTo(s)-e.distanceTo(s)}),0!==r.length){this._loading||(this._loading=!0,this.fire("loading"));for(var _=document.createDocumentFragment(),u=0;u<r.length;u++)this._addTile(r[u],_);this._level.el.appendChild(_)}}}}},_isValidTile:function(t){var e=this._map.options.crs;if(!e.infinite){var i=this._globalTileRange;if(!e.wrapLng&&(t.x<i.min.x||t.x>i.max.x)||!e.wrapLat&&(t.y<i.min.y||t.y>i.max.y))return!1}return!this.options.bounds||(e=this._tileCoordsToBounds(t),g(this.options.bounds).overlaps(e))},_keyToBounds:function(t){return this._tileCoordsToBounds(this._keyToTileCoords(t))},_tileCoordsToNwSe:function(t){var e=this._map,i=this.getTileSize(),n=t.scaleBy(i),i=n.add(i);return[e.unproject(n,t.z),e.unproject(i,t.z)]},_tileCoordsToBounds:function(t){t=this._tileCoordsToNwSe(t),t=new s(t[0],t[1]);return t=this.options.noWrap?t:this._map.wrapLatLngBounds(t)},_tileCoordsToKey:function(t){return t.x+":"+t.y+":"+t.z},_keyToTileCoords:function(t){var t=t.split(":"),e=new p(+t[0],+t[1]);return e.z=+t[2],e},_removeTile:function(t){var e=this._tiles[t];e&&(T(e.el),delete this._tiles[t],this.fire("tileunload",{tile:e.el,coords:this._keyToTileCoords(t)}))},_initTile:function(t){M(t,"leaflet-tile");var e=this.getTileSize();t.style.width=e.x+"px",t.style.height=e.y+"px",t.onselectstart=u,t.onmousemove=u,b.ielt9&&this.options.opacity<1&&C(t,this.options.opacity)},_addTile:function(t,e){var i=this._getTilePos(t),n=this._tileCoordsToKey(t),o=this.createTile(this._wrapCoords(t),a(this._tileReady,this,t));this._initTile(o),this.createTile.length<2&&x(a(this._tileReady,this,t,null,o)),Z(o,i),this._tiles[n]={el:o,coords:t,current:!0},e.appendChild(o),this.fire("tileloadstart",{tile:o,coords:t})},_tileReady:function(t,e,i){e&&this.fire("tileerror",{error:e,tile:i,coords:t});var n=this._tileCoordsToKey(t);(i=this._tiles[n])&&(i.loaded=+new Date,this._map._fadeAnimated?(C(i.el,0),r(this._fadeFrame),this._fadeFrame=x(this._updateOpacity,this)):(i.active=!0,this._pruneTiles()),e||(M(i.el,"leaflet-tile-loaded"),this.fire("tileload",{tile:i.el,coords:t})),this._noTilesToLoad()&&(this._loading=!1,this.fire("load"),b.ielt9||!this._map._fadeAnimated?x(this._pruneTiles,this):setTimeout(a(this._pruneTiles,this),250)))},_getTilePos:function(t){return t.scaleBy(this.getTileSize()).subtract(this._level.origin)},_wrapCoords:function(t){var e=new p(this._wrapX?H(t.x,this._wrapX):t.x,this._wrapY?H(t.y,this._wrapY):t.y);return e.z=t.z,e},_pxBoundsToTileRange:function(t){var e=this.getTileSize();return new f(t.min.unscaleBy(e).floor(),t.max.unscaleBy(e).ceil().subtract([1,1]))},_noTilesToLoad:function(){for(var t in this._tiles)if(!this._tiles[t].loaded)return!1;return!0}});var Di=Ni.extend({options:{minZoom:0,maxZoom:18,subdomains:"abc",errorTileUrl:"",zoomOffset:0,tms:!1,zoomReverse:!1,detectRetina:!1,crossOrigin:!1,referrerPolicy:!1},initialize:function(t,e){this._url=t,(e=c(this,e)).detectRetina&&b.retina&&0<e.maxZoom?(e.tileSize=Math.floor(e.tileSize/2),e.zoomReverse?(e.zoomOffset--,e.minZoom=Math.min(e.maxZoom,e.minZoom+1)):(e.zoomOffset++,e.maxZoom=Math.max(e.minZoom,e.maxZoom-1)),e.minZoom=Math.max(0,e.minZoom)):e.zoomReverse?e.minZoom=Math.min(e.maxZoom,e.minZoom):e.maxZoom=Math.max(e.minZoom,e.maxZoom),"string"==typeof e.subdomains&&(e.subdomains=e.subdomains.split("")),this.on("tileunload",this._onTileRemove)},setUrl:function(t,e){return this._url===t&&void 0===e&&(e=!0),this._url=t,e||this.redraw(),this},createTile:function(t,e){var i=document.createElement("img");return S(i,"load",a(this._tileOnLoad,this,e,i)),S(i,"error",a(this._tileOnError,this,e,i)),!this.options.crossOrigin&&""!==this.options.crossOrigin||(i.crossOrigin=!0===this.options.crossOrigin?"":this.options.crossOrigin),"string"==typeof this.options.referrerPolicy&&(i.referrerPolicy=this.options.referrerPolicy),i.alt="",i.src=this.getTileUrl(t),i},getTileUrl:function(t){var e={r:b.retina?"@2x":"",s:this._getSubdomain(t),x:t.x,y:t.y,z:this._getZoomForUrl()};return this._map&&!this._map.options.crs.infinite&&(t=this._globalTileRange.max.y-t.y,this.options.tms&&(e.y=t),e["-y"]=t),q(this._url,l(e,this.options))},_tileOnLoad:function(t,e){b.ielt9?setTimeout(a(t,this,null,e),0):t(null,e)},_tileOnError:function(t,e,i){var n=this.options.errorTileUrl;n&&e.getAttribute("src")!==n&&(e.src=n),t(i,e)},_onTileRemove:function(t){t.tile.onload=null},_getZoomForUrl:function(){var t=this._tileZoom,e=this.options.maxZoom;return(t=this.options.zoomReverse?e-t:t)+this.options.zoomOffset},_getSubdomain:function(t){t=Math.abs(t.x+t.y)%this.options.subdomains.length;return this.options.subdomains[t]},_abortLoading:function(){var t,e,i;for(t in this._tiles)this._tiles[t].coords.z!==this._tileZoom&&((i=this._tiles[t].el).onload=u,i.onerror=u,i.complete||(i.src=K,e=this._tiles[t].coords,T(i),delete this._tiles[t],this.fire("tileabort",{tile:i,coords:e})))},_removeTile:function(t){var e=this._tiles[t];if(e)return e.el.setAttribute("src",K),Ni.prototype._removeTile.call(this,t)},_tileReady:function(t,e,i){if(this._map&&(!i||i.getAttribute("src")!==K))return Ni.prototype._tileReady.call(this,t,e,i)}});function ji(t,e){return new Di(t,e)}var Hi=Di.extend({defaultWmsParams:{service:"WMS",request:"GetMap",layers:"",styles:"",format:"image/jpeg",transparent:!1,version:"1.1.1"},options:{crs:null,uppercase:!1},initialize:function(t,e){this._url=t;var i,n=l({},this.defaultWmsParams);for(i in e)i in this.options||(n[i]=e[i]);var t=(e=c(this,e)).detectRetina&&b.retina?2:1,o=this.getTileSize();n.width=o.x*t,n.height=o.y*t,this.wmsParams=n},onAdd:function(t){this._crs=this.options.crs||t.options.crs,this._wmsVersion=parseFloat(this.wmsParams.version);var e=1.3<=this._wmsVersion?"crs":"srs";this.wmsParams[e]=this._crs.code,Di.prototype.onAdd.call(this,t)},getTileUrl:function(t){var e=this._tileCoordsToNwSe(t),i=this._crs,i=_(i.project(e[0]),i.project(e[1])),e=i.min,i=i.max,e=(1.3<=this._wmsVersion&&this._crs===li?[e.y,e.x,i.y,i.x]:[e.x,e.y,i.x,i.y]).join(","),i=Di.prototype.getTileUrl.call(this,t);return i+U(this.wmsParams,i,this.options.uppercase)+(this.options.uppercase?"&BBOX=":"&bbox=")+e},setParams:function(t,e){return l(this.wmsParams,t),e||this.redraw(),this}});Di.WMS=Hi,ji.wms=function(t,e){return new Hi(t,e)};var Wi=o.extend({options:{padding:.1},initialize:function(t){c(this,t),h(this),this._layers=this._layers||{}},onAdd:function(){this._container||(this._initContainer(),M(this._container,"leaflet-zoom-animated")),this.getPane().appendChild(this._container),this._update(),this.on("update",this._updatePaths,this)},onRemove:function(){this.off("update",this._updatePaths,this),this._destroyContainer()},getEvents:function(){var t={viewreset:this._reset,zoom:this._onZoom,moveend:this._update,zoomend:this._onZoomEnd};return this._zoomAnimated&&(t.zoomanim=this._onAnimZoom),t},_onAnimZoom:function(t){this._updateTransform(t.center,t.zoom)},_onZoom:function(){this._updateTransform(this._map.getCenter(),this._map.getZoom())},_updateTransform:function(t,e){var i=this._map.getZoomScale(e,this._zoom),n=this._map.getSize().multiplyBy(.5+this.options.padding),o=this._map.project(this._center,e),n=n.multiplyBy(-i).add(o).subtract(this._map._getNewPixelOrigin(t,e));b.any3d?be(this._container,n,i):Z(this._container,n)},_reset:function(){for(var t in this._update(),this._updateTransform(this._center,this._zoom),this._layers)this._layers[t]._reset()},_onZoomEnd:function(){for(var t in this._layers)this._layers[t]._project()},_updatePaths:function(){for(var t in this._layers)this._layers[t]._update()},_update:function(){var t=this.options.padding,e=this._map.getSize(),i=this._map.containerPointToLayerPoint(e.multiplyBy(-t)).round();this._bounds=new f(i,i.add(e.multiplyBy(1+2*t)).round()),this._center=this._map.getCenter(),this._zoom=this._map.getZoom()}}),Fi=Wi.extend({options:{tolerance:0},getEvents:function(){var t=Wi.prototype.getEvents.call(this);return t.viewprereset=this._onViewPreReset,t},_onViewPreReset:function(){this._postponeUpdatePaths=!0},onAdd:function(){Wi.prototype.onAdd.call(this),this._draw()},_initContainer:function(){var t=this._container=document.createElement("canvas");S(t,"mousemove",this._onMouseMove,this),S(t,"click dblclick mousedown mouseup contextmenu",this._onClick,this),S(t,"mouseout",this._handleMouseOut,this),t._leaflet_disable_events=!0,this._ctx=t.getContext("2d")},_destroyContainer:function(){r(this._redrawRequest),delete this._ctx,T(this._container),k(this._container),delete this._container},_updatePaths:function(){if(!this._postponeUpdatePaths){for(var t in this._redrawBounds=null,this._layers)this._layers[t]._update();this._redraw()}},_update:function(){var t,e,i,n;this._map._animatingZoom&&this._bounds||(Wi.prototype._update.call(this),t=this._bounds,e=this._container,i=t.getSize(),n=b.retina?2:1,Z(e,t.min),e.width=n*i.x,e.height=n*i.y,e.style.width=i.x+"px",e.style.height=i.y+"px",b.retina&&this._ctx.scale(2,2),this._ctx.translate(-t.min.x,-t.min.y),this.fire("update"))},_reset:function(){Wi.prototype._reset.call(this),this._postponeUpdatePaths&&(this._postponeUpdatePaths=!1,this._updatePaths())},_initPath:function(t){this._updateDashArray(t);t=(this._layers[h(t)]=t)._order={layer:t,prev:this._drawLast,next:null};this._drawLast&&(this._drawLast.next=t),this._drawLast=t,this._drawFirst=this._drawFirst||this._drawLast},_addPath:function(t){this._requestRedraw(t)},_removePath:function(t){var e=t._order,i=e.next,e=e.prev;i?i.prev=e:this._drawLast=e,e?e.next=i:this._drawFirst=i,delete t._order,delete this._layers[h(t)],this._requestRedraw(t)},_updatePath:function(t){this._extendRedrawBounds(t),t._project(),t._update(),this._requestRedraw(t)},_updateStyle:function(t){this._updateDashArray(t),this._requestRedraw(t)},_updateDashArray:function(t){if("string"==typeof t.options.dashArray){for(var e,i=t.options.dashArray.split(/[, ]+/),n=[],o=0;o<i.length;o++){if(e=Number(i[o]),isNaN(e))return;n.push(e)}t.options._dashArray=n}else t.options._dashArray=t.options.dashArray},_requestRedraw:function(t){this._map&&(this._extendRedrawBounds(t),this._redrawRequest=this._redrawRequest||x(this._redraw,this))},_extendRedrawBounds:function(t){var e;t._pxBounds&&(e=(t.options.weight||0)+1,this._redrawBounds=this._redrawBounds||new f,this._redrawBounds.extend(t._pxBounds.min.subtract([e,e])),this._redrawBounds.extend(t._pxBounds.max.add([e,e])))},_redraw:function(){this._redrawRequest=null,this._redrawBounds&&(this._redrawBounds.min._floor(),this._redrawBounds.max._ceil()),this._clear(),this._draw(),this._redrawBounds=null},_clear:function(){var t,e=this._redrawBounds;e?(t=e.getSize(),this._ctx.clearRect(e.min.x,e.min.y,t.x,t.y)):(this._ctx.save(),this._ctx.setTransform(1,0,0,1,0,0),this._ctx.clearRect(0,0,this._container.width,this._container.height),this._ctx.restore())},_draw:function(){var t,e,i=this._redrawBounds;this._ctx.save(),i&&(e=i.getSize(),this._ctx.beginPath(),this._ctx.rect(i.min.x,i.min.y,e.x,e.y),this._ctx.clip()),this._drawing=!0;for(var n=this._drawFirst;n;n=n.next)t=n.layer,(!i||t._pxBounds&&t._pxBounds.intersects(i))&&t._updatePath();this._drawing=!1,this._ctx.restore()},_updatePoly:function(t,e){if(this._drawing){var i,n,o,s,r=t._parts,a=r.length,h=this._ctx;if(a){for(h.beginPath(),i=0;i<a;i++){for(n=0,o=r[i].length;n<o;n++)s=r[i][n],h[n?"lineTo":"moveTo"](s.x,s.y);e&&h.closePath()}this._fillStroke(h,t)}}},_updateCircle:function(t){var e,i,n,o;this._drawing&&!t._empty()&&(e=t._point,i=this._ctx,n=Math.max(Math.round(t._radius),1),1!=(o=(Math.max(Math.round(t._radiusY),1)||n)/n)&&(i.save(),i.scale(1,o)),i.beginPath(),i.arc(e.x,e.y/o,n,0,2*Math.PI,!1),1!=o&&i.restore(),this._fillStroke(i,t))},_fillStroke:function(t,e){var i=e.options;i.fill&&(t.globalAlpha=i.fillOpacity,t.fillStyle=i.fillColor||i.color,t.fill(i.fillRule||"evenodd")),i.stroke&&0!==i.weight&&(t.setLineDash&&t.setLineDash(e.options&&e.options._dashArray||[]),t.globalAlpha=i.opacity,t.lineWidth=i.weight,t.strokeStyle=i.color,t.lineCap=i.lineCap,t.lineJoin=i.lineJoin,t.stroke())},_onClick:function(t){for(var e,i,n=this._map.mouseEventToLayerPoint(t),o=this._drawFirst;o;o=o.next)(e=o.layer).options.interactive&&e._containsPoint(n)&&(("click"===t.type||"preclick"===t.type)&&this._map._draggableMoved(e)||(i=e));this._fireEvent(!!i&&[i],t)},_onMouseMove:function(t){var e;!this._map||this._map.dragging.moving()||this._map._animatingZoom||(e=this._map.mouseEventToLayerPoint(t),this._handleMouseHover(t,e))},_handleMouseOut:function(t){var e=this._hoveredLayer;e&&(z(this._container,"leaflet-interactive"),this._fireEvent([e],t,"mouseout"),this._hoveredLayer=null,this._mouseHoverThrottled=!1)},_handleMouseHover:function(t,e){if(!this._mouseHoverThrottled){for(var i,n,o=this._drawFirst;o;o=o.next)(i=o.layer).options.interactive&&i._containsPoint(e)&&(n=i);n!==this._hoveredLayer&&(this._handleMouseOut(t),n&&(M(this._container,"leaflet-interactive"),this._fireEvent([n],t,"mouseover"),this._hoveredLayer=n)),this._fireEvent(!!this._hoveredLayer&&[this._hoveredLayer],t),this._mouseHoverThrottled=!0,setTimeout(a(function(){this._mouseHoverThrottled=!1},this),32)}},_fireEvent:function(t,e,i){this._map._fireDOMEvent(e,i||e.type,t)},_bringToFront:function(t){var e,i,n=t._order;n&&(e=n.next,i=n.prev,e&&((e.prev=i)?i.next=e:e&&(this._drawFirst=e),n.prev=this._drawLast,(this._drawLast.next=n).next=null,this._drawLast=n,this._requestRedraw(t)))},_bringToBack:function(t){var e,i,n=t._order;n&&(e=n.next,(i=n.prev)&&((i.next=e)?e.prev=i:i&&(this._drawLast=i),n.prev=null,n.next=this._drawFirst,this._drawFirst.prev=n,this._drawFirst=n,this._requestRedraw(t)))}});function Ui(t){return b.canvas?new Fi(t):null}var Vi=function(){try{return document.namespaces.add("lvml","urn:schemas-microsoft-com:vml"),function(t){return document.createElement("<lvml:"+t+' class="lvml">')}}catch(t){}return function(t){return document.createElement("<"+t+' xmlns="urn:schemas-microsoft.com:vml" class="lvml">')}}(),zt={_initContainer:function(){this._container=P("div","leaflet-vml-container")},_update:function(){this._map._animatingZoom||(Wi.prototype._update.call(this),this.fire("update"))},_initPath:function(t){var e=t._container=Vi("shape");M(e,"leaflet-vml-shape "+(this.options.className||"")),e.coordsize="1 1",t._path=Vi("path"),e.appendChild(t._path),this._updateStyle(t),this._layers[h(t)]=t},_addPath:function(t){var e=t._container;this._container.appendChild(e),t.options.interactive&&t.addInteractiveTarget(e)},_removePath:function(t){var e=t._container;T(e),t.removeInteractiveTarget(e),delete this._layers[h(t)]},_updateStyle:function(t){var e=t._stroke,i=t._fill,n=t.options,o=t._container;o.stroked=!!n.stroke,o.filled=!!n.fill,n.stroke?(e=e||(t._stroke=Vi("stroke")),o.appendChild(e),e.weight=n.weight+"px",e.color=n.color,e.opacity=n.opacity,n.dashArray?e.dashStyle=d(n.dashArray)?n.dashArray.join(" "):n.dashArray.replace(/( *, *)/g," "):e.dashStyle="",e.endcap=n.lineCap.replace("butt","flat"),e.joinstyle=n.lineJoin):e&&(o.removeChild(e),t._stroke=null),n.fill?(i=i||(t._fill=Vi("fill")),o.appendChild(i),i.color=n.fillColor||n.color,i.opacity=n.fillOpacity):i&&(o.removeChild(i),t._fill=null)},_updateCircle:function(t){var e=t._point.round(),i=Math.round(t._radius),n=Math.round(t._radiusY||i);this._setPath(t,t._empty()?"M0 0":"AL "+e.x+","+e.y+" "+i+","+n+" 0,23592600")},_setPath:function(t,e){t._path.v=e},_bringToFront:function(t){fe(t._container)},_bringToBack:function(t){ge(t._container)}},qi=b.vml?Vi:ct,Gi=Wi.extend({_initContainer:function(){this._container=qi("svg"),this._container.setAttribute("pointer-events","none"),this._rootGroup=qi("g"),this._container.appendChild(this._rootGroup)},_destroyContainer:function(){T(this._container),k(this._container),delete this._container,delete this._rootGroup,delete this._svgSize},_update:function(){var t,e,i;this._map._animatingZoom&&this._bounds||(Wi.prototype._update.call(this),e=(t=this._bounds).getSize(),i=this._container,this._svgSize&&this._svgSize.equals(e)||(this._svgSize=e,i.setAttribute("width",e.x),i.setAttribute("height",e.y)),Z(i,t.min),i.setAttribute("viewBox",[t.min.x,t.min.y,e.x,e.y].join(" ")),this.fire("update"))},_initPath:function(t){var e=t._path=qi("path");t.options.className&&M(e,t.options.className),t.options.interactive&&M(e,"leaflet-interactive"),this._updateStyle(t),this._layers[h(t)]=t},_addPath:function(t){this._rootGroup||this._initContainer(),this._rootGroup.appendChild(t._path),t.addInteractiveTarget(t._path)},_removePath:function(t){T(t._path),t.removeInteractiveTarget(t._path),delete this._layers[h(t)]},_updatePath:function(t){t._project(),t._update()},_updateStyle:function(t){var e=t._path,t=t.options;e&&(t.stroke?(e.setAttribute("stroke",t.color),e.setAttribute("stroke-opacity",t.opacity),e.setAttribute("stroke-width",t.weight),e.setAttribute("stroke-linecap",t.lineCap),e.setAttribute("stroke-linejoin",t.lineJoin),t.dashArray?e.setAttribute("stroke-dasharray",t.dashArray):e.removeAttribute("stroke-dasharray"),t.dashOffset?e.setAttribute("stroke-dashoffset",t.dashOffset):e.removeAttribute("stroke-dashoffset")):e.setAttribute("stroke","none"),t.fill?(e.setAttribute("fill",t.fillColor||t.color),e.setAttribute("fill-opacity",t.fillOpacity),e.setAttribute("fill-rule",t.fillRule||"evenodd")):e.setAttribute("fill","none"))},_updatePoly:function(t,e){this._setPath(t,dt(t._parts,e))},_updateCircle:function(t){var e=t._point,i=Math.max(Math.round(t._radius),1),n="a"+i+","+(Math.max(Math.round(t._radiusY),1)||i)+" 0 1,0 ",e=t._empty()?"M0 0":"M"+(e.x-i)+","+e.y+n+2*i+",0 "+n+2*-i+",0 ";this._setPath(t,e)},_setPath:function(t,e){t._path.setAttribute("d",e)},_bringToFront:function(t){fe(t._path)},_bringToBack:function(t){ge(t._path)}});function Ki(t){return b.svg||b.vml?new Gi(t):null}b.vml&&Gi.include(zt),A.include({getRenderer:function(t){t=(t=t.options.renderer||this._getPaneRenderer(t.options.pane)||this.options.renderer||this._renderer)||(this._renderer=this._createRenderer());return this.hasLayer(t)||this.addLayer(t),t},_getPaneRenderer:function(t){var e;return"overlayPane"!==t&&void 0!==t&&(void 0===(e=this._paneRenderers[t])&&(e=this._createRenderer({pane:t}),this._paneRenderers[t]=e),e)},_createRenderer:function(t){return this.options.preferCanvas&&Ui(t)||Ki(t)}});var Yi=xi.extend({initialize:function(t,e){xi.prototype.initialize.call(this,this._boundsToLatLngs(t),e)},setBounds:function(t){return this.setLatLngs(this._boundsToLatLngs(t))},_boundsToLatLngs:function(t){return[(t=g(t)).getSouthWest(),t.getNorthWest(),t.getNorthEast(),t.getSouthEast()]}});Gi.create=qi,Gi.pointsToPath=dt,wi.geometryToLayer=bi,wi.coordsToLatLng=Li,wi.coordsToLatLngs=Ti,wi.latLngToCoords=Mi,wi.latLngsToCoords=zi,wi.getFeature=Ci,wi.asFeature=Zi,A.mergeOptions({boxZoom:!0});var _t=n.extend({initialize:function(t){this._map=t,this._container=t._container,this._pane=t._panes.overlayPane,this._resetStateTimeout=0,t.on("unload",this._destroy,this)},addHooks:function(){S(this._container,"mousedown",this._onMouseDown,this)},removeHooks:function(){k(this._container,"mousedown",this._onMouseDown,this)},moved:function(){return this._moved},_destroy:function(){T(this._pane),delete this._pane},_resetState:function(){this._resetStateTimeout=0,this._moved=!1},_clearDeferredResetState:function(){0!==this._resetStateTimeout&&(clearTimeout(this._resetStateTimeout),this._resetStateTimeout=0)},_onMouseDown:function(t){if(!t.shiftKey||1!==t.which&&1!==t.button)return!1;this._clearDeferredResetState(),this._resetState(),re(),Le(),this._startPoint=this._map.mouseEventToContainerPoint(t),S(document,{contextmenu:Re,mousemove:this._onMouseMove,mouseup:this._onMouseUp,keydown:this._onKeyDown},this)},_onMouseMove:function(t){this._moved||(this._moved=!0,this._box=P("div","leaflet-zoom-box",this._container),M(this._container,"leaflet-crosshair"),this._map.fire("boxzoomstart")),this._point=this._map.mouseEventToContainerPoint(t);var t=new f(this._point,this._startPoint),e=t.getSize();Z(this._box,t.min),this._box.style.width=e.x+"px",this._box.style.height=e.y+"px"},_finish:function(){this._moved&&(T(this._box),z(this._container,"leaflet-crosshair")),ae(),Te(),k(document,{contextmenu:Re,mousemove:this._onMouseMove,mouseup:this._onMouseUp,keydown:this._onKeyDown},this)},_onMouseUp:function(t){1!==t.which&&1!==t.button||(this._finish(),this._moved&&(this._clearDeferredResetState(),this._resetStateTimeout=setTimeout(a(this._resetState,this),0),t=new s(this._map.containerPointToLatLng(this._startPoint),this._map.containerPointToLatLng(this._point)),this._map.fitBounds(t).fire("boxzoomend",{boxZoomBounds:t})))},_onKeyDown:function(t){27===t.keyCode&&(this._finish(),this._clearDeferredResetState(),this._resetState())}}),Ct=(A.addInitHook("addHandler","boxZoom",_t),A.mergeOptions({doubleClickZoom:!0}),n.extend({addHooks:function(){this._map.on("dblclick",this._onDoubleClick,this)},removeHooks:function(){this._map.off("dblclick",this._onDoubleClick,this)},_onDoubleClick:function(t){var e=this._map,i=e.getZoom(),n=e.options.zoomDelta,i=t.originalEvent.shiftKey?i-n:i+n;"center"===e.options.doubleClickZoom?e.setZoom(i):e.setZoomAround(t.containerPoint,i)}})),Zt=(A.addInitHook("addHandler","doubleClickZoom",Ct),A.mergeOptions({dragging:!0,inertia:!0,inertiaDeceleration:3400,inertiaMaxSpeed:1/0,easeLinearity:.2,worldCopyJump:!1,maxBoundsViscosity:0}),n.extend({addHooks:function(){var t;this._draggable||(t=this._map,this._draggable=new Xe(t._mapPane,t._container),this._draggable.on({dragstart:this._onDragStart,drag:this._onDrag,dragend:this._onDragEnd},this),this._draggable.on("predrag",this._onPreDragLimit,this),t.options.worldCopyJump&&(this._draggable.on("predrag",this._onPreDragWrap,this),t.on("zoomend",this._onZoomEnd,this),t.whenReady(this._onZoomEnd,this))),M(this._map._container,"leaflet-grab leaflet-touch-drag"),this._draggable.enable(),this._positions=[],this._times=[]},removeHooks:function(){z(this._map._container,"leaflet-grab"),z(this._map._container,"leaflet-touch-drag"),this._draggable.disable()},moved:function(){return this._draggable&&this._draggable._moved},moving:function(){return this._draggable&&this._draggable._moving},_onDragStart:function(){var t,e=this._map;e._stop(),this._map.options.maxBounds&&this._map.options.maxBoundsViscosity?(t=g(this._map.options.maxBounds),this._offsetLimit=_(this._map.latLngToContainerPoint(t.getNorthWest()).multiplyBy(-1),this._map.latLngToContainerPoint(t.getSouthEast()).multiplyBy(-1).add(this._map.getSize())),this._viscosity=Math.min(1,Math.max(0,this._map.options.maxBoundsViscosity))):this._offsetLimit=null,e.fire("movestart").fire("dragstart"),e.options.inertia&&(this._positions=[],this._times=[])},_onDrag:function(t){var e,i;this._map.options.inertia&&(e=this._lastTime=+new Date,i=this._lastPos=this._draggable._absPos||this._draggable._newPos,this._positions.push(i),this._times.push(e),this._prunePositions(e)),this._map.fire("move",t).fire("drag",t)},_prunePositions:function(t){for(;1<this._positions.length&&50<t-this._times[0];)this._positions.shift(),this._times.shift()},_onZoomEnd:function(){var t=this._map.getSize().divideBy(2),e=this._map.latLngToLayerPoint([0,0]);this._initialWorldOffset=e.subtract(t).x,this._worldWidth=this._map.getPixelWorldBounds().getSize().x},_viscousLimit:function(t,e){return t-(t-e)*this._viscosity},_onPreDragLimit:function(){var t,e;this._viscosity&&this._offsetLimit&&(t=this._draggable._newPos.subtract(this._draggable._startPos),e=this._offsetLimit,t.x<e.min.x&&(t.x=this._viscousLimit(t.x,e.min.x)),t.y<e.min.y&&(t.y=this._viscousLimit(t.y,e.min.y)),t.x>e.max.x&&(t.x=this._viscousLimit(t.x,e.max.x)),t.y>e.max.y&&(t.y=this._viscousLimit(t.y,e.max.y)),this._draggable._newPos=this._draggable._startPos.add(t))},_onPreDragWrap:function(){var t=this._worldWidth,e=Math.round(t/2),i=this._initialWorldOffset,n=this._draggable._newPos.x,o=(n-e+i)%t+e-i,n=(n+e+i)%t-e-i,t=Math.abs(o+i)<Math.abs(n+i)?o:n;this._draggable._absPos=this._draggable._newPos.clone(),this._draggable._newPos.x=t},_onDragEnd:function(t){var e,i,n,o,s=this._map,r=s.options,a=!r.inertia||t.noInertia||this._times.length<2;s.fire("dragend",t),!a&&(this._prunePositions(+new Date),t=this._lastPos.subtract(this._positions[0]),a=(this._lastTime-this._times[0])/1e3,e=r.easeLinearity,a=(t=t.multiplyBy(e/a)).distanceTo([0,0]),i=Math.min(r.inertiaMaxSpeed,a),t=t.multiplyBy(i/a),n=i/(r.inertiaDeceleration*e),(o=t.multiplyBy(-n/2).round()).x||o.y)?(o=s._limitOffset(o,s.options.maxBounds),x(function(){s.panBy(o,{duration:n,easeLinearity:e,noMoveStart:!0,animate:!0})})):s.fire("moveend")}})),St=(A.addInitHook("addHandler","dragging",Zt),A.mergeOptions({keyboard:!0,keyboardPanDelta:80}),n.extend({keyCodes:{left:[37],right:[39],down:[40],up:[38],zoomIn:[187,107,61,171],zoomOut:[189,109,54,173]},initialize:function(t){this._map=t,this._setPanDelta(t.options.keyboardPanDelta),this._setZoomDelta(t.options.zoomDelta)},addHooks:function(){var t=this._map._container;t.tabIndex<=0&&(t.tabIndex="0"),S(t,{focus:this._onFocus,blur:this._onBlur,mousedown:this._onMouseDown},this),this._map.on({focus:this._addHooks,blur:this._removeHooks},this)},removeHooks:function(){this._removeHooks(),k(this._map._container,{focus:this._onFocus,blur:this._onBlur,mousedown:this._onMouseDown},this),this._map.off({focus:this._addHooks,blur:this._removeHooks},this)},_onMouseDown:function(){var t,e,i;this._focused||(i=document.body,t=document.documentElement,e=i.scrollTop||t.scrollTop,i=i.scrollLeft||t.scrollLeft,this._map._container.focus(),window.scrollTo(i,e))},_onFocus:function(){this._focused=!0,this._map.fire("focus")},_onBlur:function(){this._focused=!1,this._map.fire("blur")},_setPanDelta:function(t){for(var e=this._panKeys={},i=this.keyCodes,n=0,o=i.left.length;n<o;n++)e[i.left[n]]=[-1*t,0];for(n=0,o=i.right.length;n<o;n++)e[i.right[n]]=[t,0];for(n=0,o=i.down.length;n<o;n++)e[i.down[n]]=[0,t];for(n=0,o=i.up.length;n<o;n++)e[i.up[n]]=[0,-1*t]},_setZoomDelta:function(t){for(var e=this._zoomKeys={},i=this.keyCodes,n=0,o=i.zoomIn.length;n<o;n++)e[i.zoomIn[n]]=t;for(n=0,o=i.zoomOut.length;n<o;n++)e[i.zoomOut[n]]=-t},_addHooks:function(){S(document,"keydown",this._onKeyDown,this)},_removeHooks:function(){k(document,"keydown",this._onKeyDown,this)},_onKeyDown:function(t){if(!(t.altKey||t.ctrlKey||t.metaKey)){var e,i,n=t.keyCode,o=this._map;if(n in this._panKeys)o._panAnim&&o._panAnim._inProgress||(i=this._panKeys[n],t.shiftKey&&(i=m(i).multiplyBy(3)),o.options.maxBounds&&(i=o._limitOffset(m(i),o.options.maxBounds)),o.options.worldCopyJump?(e=o.wrapLatLng(o.unproject(o.project(o.getCenter()).add(i))),o.panTo(e)):o.panBy(i));else if(n in this._zoomKeys)o.setZoom(o.getZoom()+(t.shiftKey?3:1)*this._zoomKeys[n]);else{if(27!==n||!o._popup||!o._popup.options.closeOnEscapeKey)return;o.closePopup()}Re(t)}}})),Et=(A.addInitHook("addHandler","keyboard",St),A.mergeOptions({scrollWheelZoom:!0,wheelDebounceTime:40,wheelPxPerZoomLevel:60}),n.extend({addHooks:function(){S(this._map._container,"wheel",this._onWheelScroll,this),this._delta=0},removeHooks:function(){k(this._map._container,"wheel",this._onWheelScroll,this)},_onWheelScroll:function(t){var e=He(t),i=this._map.options.wheelDebounceTime,e=(this._delta+=e,this._lastMousePos=this._map.mouseEventToContainerPoint(t),this._startTime||(this._startTime=+new Date),Math.max(i-(+new Date-this._startTime),0));clearTimeout(this._timer),this._timer=setTimeout(a(this._performZoom,this),e),Re(t)},_performZoom:function(){var t=this._map,e=t.getZoom(),i=this._map.options.zoomSnap||0,n=(t._stop(),this._delta/(4*this._map.options.wheelPxPerZoomLevel)),n=4*Math.log(2/(1+Math.exp(-Math.abs(n))))/Math.LN2,i=i?Math.ceil(n/i)*i:n,n=t._limitZoom(e+(0<this._delta?i:-i))-e;this._delta=0,this._startTime=null,n&&("center"===t.options.scrollWheelZoom?t.setZoom(e+n):t.setZoomAround(this._lastMousePos,e+n))}})),kt=(A.addInitHook("addHandler","scrollWheelZoom",Et),A.mergeOptions({tapHold:b.touchNative&&b.safari&&b.mobile,tapTolerance:15}),n.extend({addHooks:function(){S(this._map._container,"touchstart",this._onDown,this)},removeHooks:function(){k(this._map._container,"touchstart",this._onDown,this)},_onDown:function(t){var e;clearTimeout(this._holdTimeout),1===t.touches.length&&(e=t.touches[0],this._startPos=this._newPos=new p(e.clientX,e.clientY),this._holdTimeout=setTimeout(a(function(){this._cancel(),this._isTapValid()&&(S(document,"touchend",O),S(document,"touchend touchcancel",this._cancelClickPrevent),this._simulateEvent("contextmenu",e))},this),600),S(document,"touchend touchcancel contextmenu",this._cancel,this),S(document,"touchmove",this._onMove,this))},_cancelClickPrevent:function t(){k(document,"touchend",O),k(document,"touchend touchcancel",t)},_cancel:function(){clearTimeout(this._holdTimeout),k(document,"touchend touchcancel contextmenu",this._cancel,this),k(document,"touchmove",this._onMove,this)},_onMove:function(t){t=t.touches[0];this._newPos=new p(t.clientX,t.clientY)},_isTapValid:function(){return this._newPos.distanceTo(this._startPos)<=this._map.options.tapTolerance},_simulateEvent:function(t,e){t=new MouseEvent(t,{bubbles:!0,cancelable:!0,view:window,screenX:e.screenX,screenY:e.screenY,clientX:e.clientX,clientY:e.clientY});t._simulated=!0,e.target.dispatchEvent(t)}})),Ot=(A.addInitHook("addHandler","tapHold",kt),A.mergeOptions({touchZoom:b.touch,bounceAtZoomLimits:!0}),n.extend({addHooks:function(){M(this._map._container,"leaflet-touch-zoom"),S(this._map._container,"touchstart",this._onTouchStart,this)},removeHooks:function(){z(this._map._container,"leaflet-touch-zoom"),k(this._map._container,"touchstart",this._onTouchStart,this)},_onTouchStart:function(t){var e,i,n=this._map;!t.touches||2!==t.touches.length||n._animatingZoom||this._zooming||(e=n.mouseEventToContainerPoint(t.touches[0]),i=n.mouseEventToContainerPoint(t.touches[1]),this._centerPoint=n.getSize()._divideBy(2),this._startLatLng=n.containerPointToLatLng(this._centerPoint),"center"!==n.options.touchZoom&&(this._pinchStartLatLng=n.containerPointToLatLng(e.add(i)._divideBy(2))),this._startDist=e.distanceTo(i),this._startZoom=n.getZoom(),this._moved=!1,this._zooming=!0,n._stop(),S(document,"touchmove",this._onTouchMove,this),S(document,"touchend touchcancel",this._onTouchEnd,this),O(t))},_onTouchMove:function(t){if(t.touches&&2===t.touches.length&&this._zooming){var e=this._map,i=e.mouseEventToContainerPoint(t.touches[0]),n=e.mouseEventToContainerPoint(t.touches[1]),o=i.distanceTo(n)/this._startDist;if(this._zoom=e.getScaleZoom(o,this._startZoom),!e.options.bounceAtZoomLimits&&(this._zoom<e.getMinZoom()&&o<1||this._zoom>e.getMaxZoom()&&1<o)&&(this._zoom=e._limitZoom(this._zoom)),"center"===e.options.touchZoom){if(this._center=this._startLatLng,1==o)return}else{i=i._add(n)._divideBy(2)._subtract(this._centerPoint);if(1==o&&0===i.x&&0===i.y)return;this._center=e.unproject(e.project(this._pinchStartLatLng,this._zoom).subtract(i),this._zoom)}this._moved||(e._moveStart(!0,!1),this._moved=!0),r(this._animRequest);n=a(e._move,e,this._center,this._zoom,{pinch:!0,round:!1},void 0);this._animRequest=x(n,this,!0),O(t)}},_onTouchEnd:function(){this._moved&&this._zooming?(this._zooming=!1,r(this._animRequest),k(document,"touchmove",this._onTouchMove,this),k(document,"touchend touchcancel",this._onTouchEnd,this),this._map.options.zoomAnimation?this._map._animateZoom(this._center,this._map._limitZoom(this._zoom),!0,this._map.options.zoomSnap):this._map._resetView(this._center,this._map._limitZoom(this._zoom))):this._zooming=!1}})),Xi=(A.addInitHook("addHandler","touchZoom",Ot),A.BoxZoom=_t,A.DoubleClickZoom=Ct,A.Drag=Zt,A.Keyboard=St,A.ScrollWheelZoom=Et,A.TapHold=kt,A.TouchZoom=Ot,t.Bounds=f,t.Browser=b,t.CRS=ot,t.Canvas=Fi,t.Circle=vi,t.CircleMarker=gi,t.Class=et,t.Control=B,t.DivIcon=Ri,t.DivOverlay=Ai,t.DomEvent=mt,t.DomUtil=pt,t.Draggable=Xe,t.Evented=it,t.FeatureGroup=ci,t.GeoJSON=wi,t.GridLayer=Ni,t.Handler=n,t.Icon=di,t.ImageOverlay=Ei,t.LatLng=v,t.LatLngBounds=s,t.Layer=o,t.LayerGroup=ui,t.LineUtil=vt,t.Map=A,t.Marker=mi,t.Mixin=ft,t.Path=fi,t.Point=p,t.PolyUtil=gt,t.Polygon=xi,t.Polyline=yi,t.Popup=Bi,t.PosAnimation=Fe,t.Projection=wt,t.Rectangle=Yi,t.Renderer=Wi,t.SVG=Gi,t.SVGOverlay=Oi,t.TileLayer=Di,t.Tooltip=Ii,t.Transformation=at,t.Util=tt,t.VideoOverlay=ki,t.bind=a,t.bounds=_,t.canvas=Ui,t.circle=function(t,e,i){return new vi(t,e,i)},t.circleMarker=function(t,e){return new gi(t,e)},t.control=Ue,t.divIcon=function(t){return new Ri(t)},t.extend=l,t.featureGroup=function(t,e){return new ci(t,e)},t.geoJSON=Si,t.geoJson=Mt,t.gridLayer=function(t){return new Ni(t)},t.icon=function(t){return new di(t)},t.imageOverlay=function(t,e,i){return new Ei(t,e,i)},t.latLng=w,t.latLngBounds=g,t.layerGroup=function(t,e){return new ui(t,e)},t.map=function(t,e){return new A(t,e)},t.marker=function(t,e){return new mi(t,e)},t.point=m,t.polygon=function(t,e){return new xi(t,e)},t.polyline=function(t,e){return new yi(t,e)},t.popup=function(t,e){return new Bi(t,e)},t.rectangle=function(t,e){return new Yi(t,e)},t.setOptions=c,t.stamp=h,t.svg=Ki,t.svgOverlay=function(t,e,i){return new Oi(t,e,i)},t.tileLayer=ji,t.tooltip=function(t,e){return new Ii(t,e)},t.transformation=ht,t.version="1.9.4",t.videoOverlay=function(t,e,i){return new ki(t,e,i)},window.L);t.noConflict=function(){return window.L=Xi,this},window.L=t});
+//# sourceMappingURL=leaflet.js.map
\ No newline at end of file
diff --git a/public/zmap/web/leaflet/marker-icon-2x.png b/public/zmap/web/leaflet/marker-icon-2x.png
new file mode 100644
index 0000000..88f9e50
Binary files /dev/null and b/public/zmap/web/leaflet/marker-icon-2x.png differ
diff --git a/public/zmap/web/leaflet/marker-icon.png b/public/zmap/web/leaflet/marker-icon.png
new file mode 100644
index 0000000..950edf2
Binary files /dev/null and b/public/zmap/web/leaflet/marker-icon.png differ
diff --git a/public/zmap/web/leaflet/marker-shadow.png b/public/zmap/web/leaflet/marker-shadow.png
new file mode 100644
index 0000000..9fd2979
Binary files /dev/null and b/public/zmap/web/leaflet/marker-shadow.png differ
diff --git a/public/zmap/web/style.css b/public/zmap/web/style.css
new file mode 100644
index 0000000..7fce0f3
--- /dev/null
+++ b/public/zmap/web/style.css
@@ -0,0 +1,99 @@
+*{margin:0;padding:0;box-sizing:border-box}
+:root{--bg:#0c0c0f;--surface:#16161a;--surface2:#1e1e24;--border:#2a2a32;--text:#e8e8ed;--dim:#8888a0;--accent:#3b82f6;--accent2:#2563eb;--green:#22c55e;--red:#ef4444;--orange:#f59e0b;--radius:12px;--radius-sm:8px}
+html,body{height:100%;overflow:hidden}
+body{font-family:system-ui,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;background:var(--bg);color:var(--text);-webkit-font-smoothing:antialiased}
+#map{position:fixed;top:0;left:0;right:0;bottom:0;z-index:0}
+
+/* --- Top bar --- */
+.topbar{position:fixed;top:12px;left:12px;right:12px;z-index:1000;display:flex;gap:8px;align-items:center}
+.search-wrap{flex:1;position:relative}
+.search-wrap input{width:100%;background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);padding:12px 14px 12px 40px;color:var(--text);font-size:14px;outline:none;transition:border-color .2s}
+.search-wrap input:focus{border-color:var(--accent)}
+.search-wrap input::placeholder{color:var(--dim)}
+.search-wrap .icon{position:absolute;left:12px;top:50%;transform:translateY(-50%);color:var(--dim);pointer-events:none}
+.search-results{position:absolute;top:calc(100% + 4px);left:0;right:0;background:var(--surface);border:1px solid var(--border);border-radius:var(--radius-sm);overflow:hidden;display:none;max-height:320px;overflow-y:auto;box-shadow:0 8px 32px rgba(0,0,0,.5);z-index:2000}
+.search-results.open{display:block}
+.search-results .sr-item{padding:10px 14px;cursor:pointer;font-size:13px;border-bottom:1px solid var(--border);transition:background .15s}
+.search-results .sr-item:last-child{border-bottom:none}
+.search-results .sr-item:hover{background:var(--surface2)}
+.search-results .sr-item .sr-type{font-size:11px;color:var(--dim)}
+.icon-btn{background:var(--surface);border:1px solid var(--border);border-radius:var(--radius-sm);width:44px;height:44px;display:flex;align-items:center;justify-content:center;cursor:pointer;color:var(--text);transition:all .2s;flex-shrink:0}
+.icon-btn:hover{background:var(--surface2);border-color:var(--accent)}
+.icon-btn.active{background:var(--accent);border-color:var(--accent);color:#fff}
+
+/* --- Side panel --- */
+.panel{position:fixed;top:68px;left:12px;z-index:1000;background:var(--surface);border:1px solid var(--border);border-radius:var(--radius);padding:0;width:340px;max-height:calc(100vh - 92px);overflow:hidden;display:none;box-shadow:0 8px 32px rgba(0,0,0,.4)}
+.panel.open{display:block}
+.panel-head{padding:16px 16px 0;display:flex;align-items:center;justify-content:space-between}
+.panel-head h2{font-size:16px;font-weight:700}
+.panel-close{background:none;border:none;color:var(--dim);cursor:pointer;padding:4px;font-size:20px}
+.panel-close:hover{color:var(--text)}
+.panel-body{padding:12px 16px 16px}
+
+.point-row{display:flex;align-items:center;gap:8px;margin-bottom:8px}
+.point-dot{width:10px;height:10px;border-radius:50%;flex-shrink:0}
+.point-dot.from{background:var(--green)}
+.point-dot.to{background:var(--red)}
+.point-row input{flex:1;background:var(--bg);border:1px solid var(--border);border-radius:var(--radius-sm);padding:8px 10px;color:var(--text);font-size:13px;outline:none}
+.point-row input:focus{border-color:var(--accent)}
+
+.actions{display:flex;gap:6px;margin-top:4px}
+.btn{background:var(--accent);color:#fff;border:none;border-radius:var(--radius-sm);padding:10px 16px;font-size:13px;font-weight:600;cursor:pointer;transition:background .2s}
+.btn:hover{background:var(--accent2)}
+.btn:disabled{opacity:.35;cursor:default}
+.btn-outline{background:transparent;border:1px solid var(--border);color:var(--text)}
+.btn-outline:hover{background:var(--surface2);border-color:var(--accent)}
+.btn-danger{background:var(--red)}
+.btn-danger:hover{background:#dc2626}
+
+/* Route info */
+.route-info{background:var(--bg);border-radius:var(--radius-sm);padding:12px;margin-top:10px;font-size:13px;line-height:1.7}
+.route-info .ri-main{font-size:18px;font-weight:700;margin-bottom:2px}
+.route-info .ri-sub{color:var(--dim);font-size:12px}
+.route-info .ri-stat{display:inline-block;margin-right:12px}
+.route-info .ri-stat b{color:var(--accent)}
+
+/* Speed legend */
+.speed-legend{display:flex;gap:4px;margin-top:10px;flex-wrap:wrap}
+.speed-legend span{padding:4px 8px;border-radius:4px;font-size:11px;font-weight:700;letter-spacing:.3px}
+.sl-20{background:#ef4444;color:#fff}.sl-40{background:#f59e0b;color:#000}.sl-60{background:#eab308;color:#000}
+.sl-80{background:#22c55e;color:#000}.sl-100{background:#06b6d4;color:#000}.sl-120{background:#3b82f6;color:#fff}
+.sl-max{background:#8b5cf6;color:#fff}.sl-unk{background:#555;color:#aaa}
+.speed-bar{display:flex;height:8px;border-radius:4px;overflow:hidden;margin-top:6px}
+.speed-bar div{height:100%;transition:width .3s}
+.speed-distrib{display:flex;gap:8px;margin-top:4px;flex-wrap:wrap;font-size:11px;color:var(--dim)}
+.speed-distrib span{display:flex;align-items:center;gap:3px}
+.speed-distrib .sd-dot{width:8px;height:8px;border-radius:2px;flex-shrink:0}
+
+.hint{margin-top:12px;font-size:11px;color:var(--dim);text-align:center}
+
+/* --- GPS button --- */
+.gps-active .gps-dot{animation:pulse 1.5s infinite}
+@keyframes pulse{0%,100%{box-shadow:0 0 0 0 rgba(59,130,246,.5)}50%{box-shadow:0 0 0 8px rgba(59,130,246,0)}}
+
+/* --- Loading --- */
+/* --- Leaflet overrides --- */
+.leaflet-control-zoom{border:none!important}
+.leaflet-control-zoom a{background:var(--surface)!important;color:var(--text)!important;border:1px solid var(--border)!important;border-radius:var(--radius-sm)!important;width:36px!important;height:36px!important;line-height:36px!important;font-size:18px!important}
+.leaflet-control-zoom a:hover{background:var(--surface2)!important}
+.leaflet-control-zoom{gap:0;margin-right:54px!important}
+
+/* --- Marker popups --- */
+.leaflet-popup-content-wrapper{background:var(--surface)!important;color:var(--text)!important;border-radius:var(--radius-sm)!important;border:1px solid var(--border)!important;box-shadow:0 4px 16px rgba(0,0,0,.4)!important}
+.leaflet-popup-tip{background:var(--surface)!important;border:1px solid var(--border)!important}
+.leaflet-popup-content{font-size:13px;margin:8px 12px!important}
+
+.gps-dot{width:14px;height:14px;background:var(--accent);border:3px solid #fff;border-radius:50%;box-shadow:0 0 8px rgba(59,130,246,.6)}
+.station-dot{width:10px;height:10px;background:var(--green);border:2px solid #fff;border-radius:50%}
+.loading{display:none;position:fixed;top:50%;left:50%;transform:translate(-50%,-50%);z-index:2000;background:var(--surface);padding:14px 22px;border-radius:var(--radius);font-size:13px;border:1px solid var(--border);box-shadow:0 8px 32px rgba(0,0,0,.5);align-items:center;gap:8px}
+.loading.show{display:flex}
+.spinner{width:16px;height:16px;border:2px solid var(--border);border-top-color:var(--accent);border-radius:50%;animation:spin .6s linear infinite}
+@keyframes spin{to{transform:rotate(360deg)}}
+
+/* --- Responsive --- */
+@media(max-width:600px){
+  .topbar{top:8px;left:8px;right:8px}
+  .panel{left:8px;right:8px;width:auto;top:60px;max-height:55vh}
+  .map-ctrls.top{top:8px}
+  .map-ctrls.bottom{bottom:8px}
+}
diff --git a/public/zmap/zmap-0.1.0.apk b/public/zmap/zmap-0.1.0.apk
new file mode 100644
index 0000000..4f7c485
Binary files /dev/null and b/public/zmap/zmap-0.1.0.apk differ
diff --git a/public/zmap/zmap-0.2.0.apk b/public/zmap/zmap-0.2.0.apk
new file mode 100644
index 0000000..ecbd875
Binary files /dev/null and b/public/zmap/zmap-0.2.0.apk differ
diff --git a/public/zmap/zmap-0.3.0.apk b/public/zmap/zmap-0.3.0.apk
new file mode 100644
index 0000000..bf7bbd8
Binary files /dev/null and b/public/zmap/zmap-0.3.0.apk differ
diff --git a/public/zmap/zmap-0.4.0.apk b/public/zmap/zmap-0.4.0.apk
new file mode 100644
index 0000000..6244655
Binary files /dev/null and b/public/zmap/zmap-0.4.0.apk differ
diff --git a/public/zmap/zmap-0.4.1.apk b/public/zmap/zmap-0.4.1.apk
new file mode 100644
index 0000000..9035090
Binary files /dev/null and b/public/zmap/zmap-0.4.1.apk differ
diff --git a/public/zmap/zmap-0.5.0.apk b/public/zmap/zmap-0.5.0.apk
new file mode 100644
index 0000000..47308bb
Binary files /dev/null and b/public/zmap/zmap-0.5.0.apk differ
diff --git a/src/db.ts b/src/db.ts
new file mode 100644
index 0000000..670f313
--- /dev/null
+++ b/src/db.ts
@@ -0,0 +1,98 @@
+import { Database } from "bun:sqlite"
+import { join, normalize } from "node:path"
+
+const DATA_ROOT = normalize(join(import.meta.dir, "..", "data"))
+export const DB_FILE = normalize(join(DATA_ROOT, "zektyc.db"))
+
+export interface HoneypotRow {
+  ip: string
+  count: number
+  first: number
+  last: number
+  banned: boolean
+  endpoints: Record<string, number>
+}
+
+const db = new Database(DB_FILE, { create: true })
+
+db.run(`
+  PRAGMA journal_mode = WAL;
+  CREATE TABLE IF NOT EXISTS honeypot (
+    ip        TEXT PRIMARY KEY,
+    count     INTEGER NOT NULL DEFAULT 1,
+    first     INTEGER NOT NULL,
+    last      INTEGER NOT NULL,
+    banned    INTEGER NOT NULL DEFAULT 0,
+    endpoints TEXT NOT NULL DEFAULT '{}'
+  );
+`)
+
+const upsertStmt = db.prepare(`
+  INSERT INTO honeypot (ip, count, first, last, banned, endpoints)
+  VALUES (?1, 1, ?2, ?2, 0, ?3)
+  ON CONFLICT(ip) DO UPDATE SET
+    count = count + 1,
+    last  = excluded.last,
+    endpoints = excluded.endpoints
+`)
+const bumpStmt = db.prepare(`
+  UPDATE honeypot
+  SET count = count + 1, last = ?2, endpoints = ?3
+  WHERE ip = ?1
+`)
+const getStmt = db.prepare(`SELECT * FROM honeypot WHERE ip = ?1`)
+const banStmt = db.prepare(`
+  INSERT INTO honeypot (ip, count, first, last, banned, endpoints)
+  VALUES (?1, 0, ?2, ?2, ?3, '{}')
+  ON CONFLICT(ip) DO UPDATE SET banned = ?3
+`)
+const getBannedStmt = db.prepare(`SELECT ip FROM honeypot WHERE banned = 1`)
+const clearStmt = db.prepare(`DELETE FROM honeypot`)
+const listStmt = db.prepare(`SELECT * FROM honeypot ORDER BY last DESC`)
+
+export function recordHoneypotHit(ip: string, path: string) {
+  if (!ip || ip === "local") return
+  const now = Date.now()
+  const row = getStmt.get(ip) as { endpoints: string } | null
+  if (row) {
+    let endpoints: Record<string, number> = {}
+    try {
+      endpoints = JSON.parse(row.endpoints) as Record<string, number>
+    } catch {}
+    endpoints[path] = (endpoints[path] ?? 0) + 1
+    bumpStmt.run(ip, now, JSON.stringify(endpoints))
+  } else {
+    upsertStmt.run(ip, now, JSON.stringify({ [path]: 1 }))
+  }
+}
+
+export function getHoneypotIps(): HoneypotRow[] {
+  const rows = listStmt.all() as Array<
+    Omit<HoneypotRow, "banned" | "endpoints"> & { banned: number; endpoints: string }
+  >
+  return rows.map((r) => ({
+    ip: r.ip,
+    count: r.count,
+    first: r.first,
+    last: r.last,
+    banned: r.banned === 1,
+    endpoints: JSON.parse(r.endpoints) as Record<string, number>,
+  }))
+}
+
+export function setHoneypotBanned(ip: string, banned: boolean) {
+  const now = Date.now()
+  banStmt.run(ip, now, banned ? 1 : 0)
+  return true
+}
+
+export function getBannedHoneypotIps(): string[] {
+  const rows = getBannedStmt.all() as Array<{ ip: string }>
+  return rows.map((r) => r.ip)
+}
+
+export function clearHoneypot() {
+  clearStmt.run()
+}
+
+export { db }
diff --git a/src/docs.ts b/src/docs.ts
new file mode 100644
index 0000000..9036261
--- /dev/null
+++ b/src/docs.ts
@@ -0,0 +1,107 @@
+import { marked } from "marked"
+import { readFileSync } from "node:fs"
+import { join, normalize } from "node:path"
+
+const SITE_URL = "https://riricdev.tail5ea5cd.ts.net"
+
+// Layout de la page de documentation (navigable, sections).
+function layout(title: string, description: string, body: string, sidebar: string): string {
+  return `<!doctype html>
+<html lang="fr">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="${description}" />
+    <meta name="robots" content="index, follow" />
+    <title>${title} · Zektyc</title>
+    <link rel="canonical" href="${SITE_URL}/docs/maxspeed" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="${title}" />
+    <meta property="og:description" content="${description}" />
+    <meta property="og:url" content="${SITE_URL}/docs/maxspeed" />
+    <meta property="og:image" content="${SITE_URL}/og-image.png" />
+    <meta property="og:locale" content="fr_FR" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="me" href="https://piaille.fr/@zektyc" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <style>
+      .docs-wrap { display: flex; gap: 32px; align-items: flex-start; max-width: 1180px; margin: 0 auto; padding: 40px 24px; }
+      .docs-side { flex: 0 0 240px; position: sticky; top: 24px; font-size: 14px; }
+      .docs-side h3 { margin: 0 0 10px; font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; opacity: 0.6; }
+      .docs-side ul { list-style: none; margin: 0; padding: 0; }
+      .docs-side li { margin: 4px 0; }
+      .docs-side a { color: inherit; text-decoration: none; opacity: 0.85; }
+      .docs-side a:hover { opacity: 1; text-decoration: underline; }
+      .docs-side a.active { opacity: 1; font-weight: 600; }
+      .docs-body { flex: 1 1 auto; min-width: 0; line-height: 1.7; }
+      .docs-body h1 { font-size: 1.9em; border-bottom: 1px solid #222; padding-bottom: 12px; }
+      .docs-body h2 { font-size: 1.35em; margin-top: 2.2em; border-bottom: 1px solid #1e1e1e; padding-bottom: 6px; }
+      .docs-body h3 { font-size: 1.1em; margin-top: 1.6em; }
+      .docs-body pre { background: #0d1117; border: 1px solid #222; border-radius: 8px; padding: 14px; overflow: auto; font-size: 13px; }
+      .docs-body code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; }
+      .docs-body :not(pre) > code { background: #161b22; padding: 2px 5px; border-radius: 4px; font-size: 0.9em; }
+      .docs-body table { border-collapse: collapse; width: 100%; margin: 16px 0; font-size: 14px; }
+      .docs-body th, .docs-body td { border: 1px solid #24262b; padding: 8px 12px; text-align: left; }
+      .docs-body th { background: #0d1117; }
+      .docs-body blockquote { border-left: 3px solid #333; margin: 16px 0; padding: 4px 16px; opacity: 0.85; }
+      @media (max-width: 760px) { .docs-wrap { flex-direction: column; } .docs-side { position: static; flex: auto; } }
+    </style>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/i18n.js" defer></script>
+    <script>document.addEventListener("click",function(e){var t=e.target.closest?e.target.closest(".site-nav"):null;if(t){var n=document.getElementById("nav-toggle");if(n)n.checked=false}})</script>
+  </head>
+  <body>
+    <header class="site-header">
+      <a class="skip-link" href="#main">Aller au contenu</a>
+      <a class="brand" href="/"><span class="brand-mark" aria-hidden="true"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 16" role="presentation" focusable="false"><path d="M5 4h22L5 12h22" fill="none" stroke="currentColor" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/></svg></span><span class="brand-name">Zektyc</span></a>
+      <input type="checkbox" id="nav-toggle" class="nav-toggle-input" />
+      <label for="nav-toggle" class="nav-burger" aria-label="Menu">
+        <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 6h16M4 12h16M4 18h16"/></svg>
+        <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"/></svg>
+      </label>
+      <nav class="site-nav" aria-label="Navigation">
+        <div class="lang-switch" role="group" aria-label="Langue / Language">
+          <button type="button" data-lang="fr" class="lang-btn active"><strong>FR</strong></button>
+          <button type="button" data-lang="en" class="lang-btn">EN</button>
+        </div>
+        <button type="button" class="theme-btn" aria-label="Theme">
+          <svg class="icon-moon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"/></svg>
+          <svg class="icon-sun" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg>
+        </button>
+      </nav>
+    </header>
+
+    <main id="main" class="docs-wrap">
+      <nav class="docs-side" aria-label="Documentation">
+        <h3>API</h3>
+        <ul>
+          <li><a href="/docs/maxspeed" class="active">Maxspeed (vitesses)</a></li>
+        </ul>
+      </nav>
+      <article class="docs-body">
+${body}
+      </article>
+    </main>
+
+    <footer class="site-footer"></footer>
+  </body>
+</html>`
+}
+
+const DOCS_DIR = normalize(join(import.meta.dir))
+
+export function docsPage(service: string): string | null {
+  if (service !== "maxspeed") return null
+  const md = readFileSync(join(DOCS_DIR, "maxspeed-doc.md"), "utf8")
+  const body = marked.parse(md) as string
+  return layout(
+    "API Maxspeed",
+    "API publique des limitations de vitesse (maxspeed) en Europe, depuis OpenStreetMap. Endpoints point & route, exemples, performance.",
+    body,
+    "",
+  )
+}
diff --git a/src/maxspeed-api.ts b/src/maxspeed-api.ts
new file mode 100644
index 0000000..d3917e2
--- /dev/null
+++ b/src/maxspeed-api.ts
@@ -0,0 +1,163 @@
+import { readFileSync, existsSync } from "node:fs"
+import { gunzipSync } from "node:zlib"
+
+// ============================================================================
+// API publique "maxspeed" — jeu de données OSM des limitations de vitesse.
+//
+// Données : grille de cellules 0.5° x 0.5° couvrant l'Europe (produite par
+// data/maxspeed/build_maxspeed.py à partir du planet OSM). Chaque fichier
+// <x>_<y>.bin.gz = blob gzip :
+//   int32 count ; int32 offsets[32*32] ; puis count points de
+//   (lonq uint16, latq uint16, speed uint8) triés par sous-cellule 128.
+//
+// Ce module est autonome (indépendant de ZMap). Lecture lazy par cellule avec
+// cache LRU borné.
+// ============================================================================
+
+const CELL = 0.5
+const SUB = 32
+const MAX_DIST = 40.0 // mètres: distance maximale route->point pour un "hit"
+const DEFAULT_DIR = process.env.ZMAP_MAXSPEED_DIR || ""
+
+let GRID_DIR = DEFAULT_DIR
+let index: Record<string, { x: number; y: number; count: number }> | null = null
+const cells = new Map<string, { off: Int32Array; data: Buffer }>()
+
+export function setMaxspeedDir(dir: string) {
+  GRID_DIR = dir
+  index = null
+  cells.clear()
+}
+
+export function gridDir(): string {
+  return GRID_DIR
+}
+
+export function meta() {
+  const idx = loadIndex()
+  if (!idx) return null
+  let points = 0
+  let files = 0
+  for (const k in idx) {
+    files++
+    points += idx[k]!.count
+  }
+  return {
+    cell: CELL,
+    sub: SUB,
+    stepM: 40.0,
+    points,
+    files,
+    dir: GRID_DIR,
+  }
+}
+
+function loadIndex(): Record<string, { x: number; y: number; count: number }> | null {
+  if (!GRID_DIR) return null
+  if (!index) {
+    const f = `${GRID_DIR}/index.json`
+    if (!existsSync(f)) return null
+    try {
+      index = JSON.parse(readFileSync(f, "utf8"))
+    } catch {
+      return null
+    }
+  }
+  return index
+}
+
+function loadCell(x: number, y: number): { off: Int32Array; data: Buffer } | null {
+  const key = `${x}_${y}`
+  const hit = cells.get(key)
+  if (hit) return hit
+  const f = `${GRID_DIR}/${key}.bin.gz`
+  if (!existsSync(f)) return null
+  try {
+    const raw = gunzipSync(readFileSync(f))
+    const off = new Int32Array(raw.buffer, raw.byteOffset + 4, SUB * SUB)
+    const data = raw.subarray(4 + SUB * SUB * 4)
+    const c = { off, data }
+    cells.set(key, c)
+    if (cells.size > 64) cells.delete(cells.keys().next().value!)
+    return c
+  } catch {
+    return null
+  }
+}
+
+// Recherche la vitesse au coordonnée donnée. Retour km/h, ou null si aucun
+// point de route dans les 40 m. Coordonnées (lon, lat).
+export function snapPoint(lon: number, lat: number): number | null {
+  const idx = loadIndex()
+  if (!idx) return null
+  const x = Math.floor(lon / CELL)
+  const y = Math.floor(lat / CELL)
+  const cell = loadCell(x, y)
+  if (!cell) return null
+  return snapInCell(cell, x, y, lat, lon)
+}
+
+function snapInCell(cell: { off: Int32Array; data: Buffer }, cx: number, cy: number, lat: number, lon: number): number | null {
+  const lonq = Math.round(((lon - cx * CELL) / CELL) * 65535)
+  const latq = Math.round(((lat - cy * CELL) / CELL) * 65535)
+  if (lonq < 0 || lonq > 65535 || latq < 0 || latq > 65535) return null
+  const sx = Math.min(SUB - 1, Math.floor((lonq * SUB) / 65536))
+  const sy = Math.min(SUB - 1, Math.floor((latq * SUB) / 65536))
+  let best: number | null = null
+  let bestD2 = Infinity
+  const cosLat = Math.cos((lat * Math.PI) / 180)
+  for (let dy = -1; dy <= 1; dy++) {
+    for (let dx = -1; dx <= 1; dx++) {
+      const sxx = sx + dx
+      const syy = sy + dy
+      if (sxx < 0 || syy < 0 || sxx >= SUB || syy >= SUB) continue
+      const sub = sxx + syy * SUB
+      const start = cell.off[sub]!
+      const end = sub + 1 < SUB * SUB ? cell.off[sub + 1]! : cell.data.length / 5
+      for (let i = start; i < end; i++) {
+        const base = i * 5
+        const plon = cx * CELL + (cell.data.readUInt16LE(base) / 65535) * CELL
+        const plat = cy * CELL + (cell.data.readUInt16LE(base + 2) / 65535) * CELL
+        const dlonp = (lon - plon) * 111320 * cosLat
+        const dlatp = (lat - plat) * 110540
+        const d2 = dlonp * dlonp + dlatp * dlatp
+        if (d2 < bestD2) {
+          bestD2 = d2
+          best = cell.data.readUInt8(base + 4)
+        }
+      }
+    }
+  }
+  if (bestD2 > MAX_DIST * MAX_DIST) return null
+  return best
+}
+
+// Snap sur un tracé (liste de [lon, lat]). Retour un tableau de vitesses,
+// null quand aucun point de route proche.
+export function snapRoute(coords: [number, number][]): (number | null)[] {
+  const out: (number | null)[] = new Array(coords.length).fill(null)
+  const idx = loadIndex()
+  if (!idx) return out
+  const byCell = new Map<string, { x: number; y: number; indices: number[] }>()
+  for (let i = 0; i < coords.length; i++) {
+    const [lon, lat] = coords[i]!
+    const x = Math.floor(lon / CELL)
+    const y = Math.floor(lat / CELL)
+    const k = `${x}_${y}`
+    let e = byCell.get(k)
+    if (!e) {
+      e = { x, y, indices: [] }
+      byCell.set(k, e)
+    }
+    e.indices.push(i)
+  }
+  for (const { x, y, indices } of byCell.values()) {
+    const cell = loadCell(x, y)
+    if (!cell) continue
+    for (const i of indices) {
+      const [lon, lat] = coords[i]!
+      out[i] = snapInCell(cell, x, y, lat, lon)
+    }
+  }
+  return out
+}
diff --git a/src/maxspeed-doc.md b/src/maxspeed-doc.md
new file mode 100644
index 0000000..2a973f8
--- /dev/null
+++ b/src/maxspeed-doc.md
@@ -0,0 +1,261 @@
+# Documentation API · Zektyc
+
+Bienvenue sur la documentation des API publiques Zektyc. Chaque service expose une
+ou plusieurs routes JSON, documentées ci-dessous. Cette page est la **version unique
+de référence** : ajoutez ici toute nouvelle API.
+
+> Toutes les réponses sont en `application/json; charset=utf-8`, compatibles CORS
+> (n'importe quel navigateur peut les appeler directement). Le trafic passe par un
+> reverse-proxy qui applique un rate-limit par IP.
+
+---
+
+## 📚 Sommaire
+
+- [1. API Maxspeed — limitations de vitesse](#1-api-maxspeed)
+- [2. Format de réponse standard](#2-format-de-reponse-standard)
+- [3. Erreurs & codes HTTP](#3-erreurs--codes-http)
+- [4. Rate limiting](#4-rate-limiting)
+- [5. Performance mesurée](#5-performance-mesuree)
+- [6. Exemples](#6-exemples)
+- [7. Playground](#7-playground)
+
+---
+
+# 1. API Maxspeed
+
+Découvre la **limitation de vitesse** (maxspeed) d'un point géographique en France
+et en Europe, calculée depuis les données OpenStreetMap.
+
+La base est une grille de **90 518 792 points** échantillonnés le long des routes
+(europa entière), à une résolution d'environ **0,8 mètre**. Chaque point porte la
+vitesse maximale de la route sur laquelle il se trouve.
+
+**Base URL** (racine de l'API) :
+
+```
+https://riricdev.tail5ea5cd.ts.net/api/maxspeed
+```
+
+| Endpoint | Méthode | Description                          |
+|----------|---------|--------------------------------------|
+| `/api/maxspeed/`    | GET | Métadonnées du jeu de données (points, cellules, résolution) |
+| `/api/maxspeed/point` | GET | Limitation de vitesse à un point (lat, lon) |
+| `/api/maxspeed/route` | GET | Limitation le long d'un tracé (liste de points) |
+
+### 1.1 Point isolé
+
+Interroge la vitesse pour **une seule coordonnée**.
+
+```
+GET /api/maxspeed/point?lat=48.87&lon=2.307
+```
+
+**Paramètres :**
+
+| Nom | Type | Requis | Description |
+|-----|------|--------|-------------|
+| `lat` | float | oui | Latitude ∈ `[-90, 90]` |
+| `lon` | float | oui | Longitude ∈ `[-180, 180]` |
+
+**Réponse (`200`) :**
+
+```json
+{
+  "lat": 48.87,
+  "lon": 2.307,
+  "maxspeed": 50,
+  "unit": "km/h",
+  "hit": true
+}
+```
+
+### 1.2 Tracé (route)
+
+Interroge la vitesse le long d'un **parcours**. Utile pour colorer un itinéraire
+selon la vitesse autorisée, ou estimer des temps de trajet.
+
+```
+GET /api/maxspeed/route?coords=2.307,48.87;2.404,48.66;2.589,48.66
+```
+
+**Paramètres :**
+
+| Nom | Type | Requis | Description |
+|-----|------|--------|-------------|
+| `coords` | string | oui | Suite de `lon,lat` séparés par des `;` — **jusqu'à 5000 points** |
+
+**Réponse (`200`) :**
+
+```json
+{
+  "points": [
+    { "lon": 2.307, "lat": 48.87, "maxspeed": 50 },
+    { "lon": 2.404, "lat": 48.66, "maxspeed": 50 },
+    { "lon": 2.589, "lat": 48.66, "maxspeed": 80 }
+  ]
+}
+```
+
+> `maxspeed` est `null` quand aucun point de route n'est trouvé à moins de **40 mètres**
+> (zone non couverte, champ, mer, etc.).
+
+---
+
+# 2. Format de réponse standard
+
+- En-tête `Content-Type: application/json; charset=utf-8`.
+- CORS ouvert : `Access-Control-Allow-Origin: *` (appelable depuis n'importe quel site).
+- Cache HTTP : `public, max-age=300` (5 min) — les valeurs ne changent qu'avec une
+  mise à jour du jeu de données (hebdomadaire).
+- Les réponses sont compactes (pas de champs redondants).
+
+---
+
+# 3. Erreurs & codes HTTP
+
+| Code | Signification |
+|------|---------------|
+| `200` | Succès |
+| `400` | Paramètre manquant / invalide (ex. `lat` hors bornes, `coords` mal formé) |
+| `404` | Endpoint inconnu |
+| `429` | Trop de requêtes (rate-limit dépassé) — voir ci-dessous |
+| `503` | Données non disponibles (jeu de données non chargé) |
+
+Format d'erreur :
+
+```json
+{
+  "error": "lat/lon invalides (lat ∈ [-90,90], lon ∈ [-180,180])"
+}
+```
+
+---
+
+# 4. Rate limiting
+
+Chaque IP a un **quota global** sur le site : **200 requêtes / 10 s**. Une fois le
+quota dépassé, l'API retourne `429` avec un en-tête `Retry-After` (secondes).
+
+```
+HTTP/1.1 429 Too Many Requests
+Retry-After: 3
+```
+
+Ces limites protègent le service public contre les abus et les DoS (surcouche au
+reverse-proxy qui absorbe les attaques). Pour un usage intensif légitime (batch sur
+tout le continent), contacte-nous — on pourra te fournir un accès dédié.
+
+---
+
+# 5. Performance mesurée
+
+Benchmarks **réels** effectués sur la machine de production (ARM 64, 4 cœurs, Bun) :
+
+| Opération | Latence moyenne | Débit maximal (mono-cœur) |
+|-----------|-----------------|---------------------------|
+| Lookup point unique | **~0,10 ms** | ~9 900 req/s |
+| Lookup par point d'un tracé | **~0,11 ms** | ~9 000 req/s |
+
+Chiffres clés du jeu de données :
+
+```
+Points maxspeed      : 90 518 792
+Cellules (tuiles)    : 5 104
+Résolution           : ~0,8 m (échantillonnage tous les 40 m le long des routes)
+Taille grille        : 370 Mo (compressé)
+Source               : OpenStreetMap (planet hebdo)
+```
+
+---
+
+# 6. Exemples
+
+Quelques exemples de valeurs réelles en Île-de-France (balayage sur l'axe A6 / A10) :
+
+| Localisation (approx.) | Lon | Lat | Maxspeed |
+|------------------------|-----|-----|----------|
+| Zone urbaine (Boulevard) | `2.307` | `48.87` | **50 km/h** |
+| Secteur péri-urbain (A6 sud) | `2.404` | `48.66` | **50 km/h** |
+| Voie rapide (A10) | `2.439` | `48.60` | **110 km/h** |
+| Autoroute dégagée (A6) | `2.589` | `48.66` | **80 km/h** |
+
+### JavaScript (fetch)
+
+```js
+const res = await fetch(
+  "https://riricdev.tail5ea5cd.ts.net/api/maxspeed/point?lat=48.87&lon=2.307"
+)
+const data = await res.json()
+console.log(data.maxspeed) // 50
+```
+
+### Python (urllib)
+
+```python
+import json, urllib.request
+
+url = "https://riricdev.tail5ea5cd.ts.net/api/maxspeed/point?lat=48.87&lon=2.307"
+with urllib.request.urlopen(url) as r:
+    data = json.load(r)
+print(data["maxspeed"])  # 50
+```
+
+### curl
+
+```bash
+curl "https://riricdev.tail5ea5cd.ts.net/api/maxspeed/point?lat=48.87&lon=2.307"
+# {"lat":48.87,"lon":2.307,"maxspeed":50,"unit":"km/h","hit":true}
+```
+
+---
+
+# 7. Playground
+
+Outil interactif : clique sur la carte ou saisis des coordonnées pour interroger
+l'API en direct.
+
+<div class="ms-playground">
+  <form id="ms-form">
+    <label>Latitude
+      <input type="number" step="any" id="ms-lat" value="48.87" />
+    </label>
+    <label>Longitude
+      <input type="number" step="any" id="ms-lon" value="2.307" />
+    </label>
+    <button type="submit">Interroger</button>
+  </form>
+  <pre id="ms-out" class="ms-out">—</pre>
+</div>
+
+<style>
+  .ms-playground { background: #0d1117; border: 1px solid #222; border-radius: 8px; padding: 16px; }
+  .ms-playground form { display: flex; gap: 12px; flex-wrap: wrap; align-items: end; }
+  .ms-playground label { display: flex; flex-direction: column; font-size: 12px; gap: 4px; }
+  .ms-playground input { background: #111; color: inherit; border: 1px solid #333; border-radius: 4px; padding: 6px 8px; width: 130px; }
+  .ms-playground button { background: #333; color: inherit; border: 0; border-radius: 6px; padding: 8px 14px; cursor: pointer; }
+  .ms-playground button:hover { background: #444; }
+  .ms-out { white-space: pre-wrap; margin-top: 12px; font-size: 13px; }
+</style>
+
+<script>
+document.addEventListener("DOMContentLoaded", function () {
+  var form = document.getElementById("ms-form")
+  var out = document.getElementById("ms-out")
+  form.addEventListener("submit", function (e) {
+    e.preventDefault()
+    var lat = document.getElementById("ms-lat").value
+    var lon = document.getElementById("ms-lon").value
+    out.textContent = "Chargement…"
+    fetch("/api/maxspeed/point?lat=" + encodeURIComponent(lat) + "&lon=" + encodeURIComponent(lon))
+      .then(function (r) { return r.json() })
+      .then(function (d) { out.textContent = JSON.stringify(d, null, 2) })
+      .catch(function (err) { out.textContent = "Erreur: " + err })
+  })
+})
+</script>
+
+---
+
+_Documentation générée automatiquement. Dernière vérification de la section
+Performance : septembre 2026._
diff --git a/src/maxspeed-router.ts b/src/maxspeed-router.ts
new file mode 100644
index 0000000..99bf32d
--- /dev/null
+++ b/src/maxspeed-router.ts
@@ -0,0 +1,74 @@
+import { meta, snapPoint, snapRoute } from "./maxspeed-api.ts"
+
+const CORS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "GET, HEAD, OPTIONS",
+  "Access-Control-Allow-Headers": "Content-Type, Accept",
+  "Cache-Control": "public, max-age=300",
+  "X-Robots-Tag": "noindex, nofollow",
+}
+
+function json(data: unknown, status = 200) {
+  return new Response(JSON.stringify(data), { status, headers: { "Content-Type": "application/json; charset=utf-8", ...CORS } })
+}
+
+function bad(msg: string) {
+  return json({ error: msg }, 400)
+}
+
+function parseLat(s: string | null): number | null {
+  if (!s) return null
+  const v = Number(s)
+  if (!Number.isFinite(v) || v < -90 || v > 90) return null
+  return v
+}
+function parseLon(s: string | null): number | null {
+  if (!s) return null
+  const v = Number(s)
+  if (!Number.isFinite(v) || v < -180 || v > 180) return null
+  return v
+}
+
+export async function handleMaxspeedRoute(req: Request, url: URL): Promise<Response | null> {
+  const p = url.pathname
+  if (!p.startsWith("/api/maxspeed")) return null
+  if (req.method === "OPTIONS") return new Response(null, { status: 204, headers: CORS })
+
+  const base = "/api/maxspeed"
+
+  // Racine : métadonnées du jeu de données
+  if (p === base || p === base + "/") {
+    const m = meta()
+    return json(m ? { ok: true, ...m } : { ok: false, error: "données non disponibles" }, m ? 200 : 503)
+  }
+
+  // GET /api/maxspeed/point?lat=&lon=
+  if (p === base + "/point") {
+    const lat = parseLat(url.searchParams.get("lat"))
+    const lon = parseLon(url.searchParams.get("lon"))
+    if (lat === null || lon === null) return bad("lat/lon invalides (lat ∈ [-90,90], lon ∈ [-180,180])")
+    const speed = snapPoint(lon, lat)
+    return json({ lat, lon, maxspeed: speed, unit: speed === null ? null : "km/h", hit: speed !== null })
+  }
+
+  // GET /api/maxspeed/route?coords=lon,lat;lon,lat;...
+  if (p === base + "/route") {
+    const raw = url.searchParams.get("coords")
+    if (!raw) return bad("paramètre coords manquant")
+    const coords: [number, number][] = []
+    for (const part of raw.split(";")) {
+      const [a, b] = part.split(",")
+      const lon = parseLon(a ?? null)
+      const lat = parseLat(b ?? null)
+      if (lon === null || lat === null) return bad(`coordonnée invalide: "${part}"`)
+      coords.push([lon, lat])
+    }
+    if (coords.length === 0) return bad("aucune coordonnée")
+    if (coords.length > 5000) return bad("maximum 5000 points pour route")
+    const speeds = snapRoute(coords)
+    return json({ points: coords.map(([lon, lat], i) => ({ lon, lat, maxspeed: speeds[i] })) })
+  }
+
+  // Autres chemins sous /api/maxspeed -> 404
+  return json({ ok: false, error: "endpoint inconnu" }, 404)
+}
diff --git a/src/server.ts b/src/server.ts
new file mode 100644
index 0000000..a2333f3
--- /dev/null
+++ b/src/server.ts
@@ -0,0 +1,1241 @@
+import { file, serve } from "bun"
+import { marked } from "marked"
+import { getHoneypotResponse } from "wordpress-honeypot"
+import type { SiteConfig } from "wordpress-honeypot"
+import {
+  recordHoneypotHit,
+  getHoneypotIps,
+  setHoneypotBanned,
+  getBannedHoneypotIps,
+  clearHoneypot,
+} from "./db"
+import { handleZMapRoute } from "./zmap-api"
+import { handleMaxspeedRoute } from "./maxspeed-router"
+import { docsPage } from "./docs"
+import { zmapWsHandler, zmapWsMessage, zmapWsClose, zmapWsKeepAlive } from "./zmap-ws"
+import { join, normalize } from "node:path"
+import { statSync, existsSync, readFileSync, writeFileSync, chmodSync, readdirSync } from "node:fs"
+import { randomBytes } from "node:crypto"
+import { spawn, execSync } from "node:child_process"
+import os from "node:os"
+
+type CachedFile = { data: Buffer; type: string; etag: string }
+let fileCache = new Map<string, CachedFile>()
+
+type ArticleLang = { title: string; ogTitle: string; description: string; body: string }
+type Article = {
+  slug: string
+  published: string
+  modified: string
+  fr: ArticleLang
+  en: ArticleLang
+}
+type I18nDict = Record<string, Record<string, string>>
+
+const host = process.env.HOST || "127.0.0.1"
+const port = Number(process.env.PORT) || 3000
+const root = normalize(join(import.meta.dir, "..", "public"))
+
+const MAX_BODY_BYTES = 1_000_000
+const MAX_ADMIN_BODY_BYTES = 2_000_000
+const RATE_WINDOW_MS = 10_000
+const RATE_MAX = 200
+
+const SITE_URL = "https://riricdev.tail5ea5cd.ts.net"
+const DATA_ROOT = normalize(join(import.meta.dir, "..", "data"))
+const ARTICLES_FILE = normalize(join(DATA_ROOT, "articles.json"))
+const I18N_FILE = normalize(join(DATA_ROOT, "i18n.json"))
+const ARTICLE_SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/
+const ARTICLE_DATE_RE = /^\d{4}-\d{2}-\d{2}$/
+const RULES_FILE = process.env.RULES_FILE || "/home/riricdev/zektyc-bot/data/rules.md"
+const MAX_RULES_LEN = 2000
+
+const HONEYPOT_MAX_IPS = 500
+const HONEYPOT_CONFIG: SiteConfig = {
+  domain: "zektyc.duckdns.org",
+  siteName: "Zektyc",
+  dbName: "wordpress",
+  dbUser: "wp_admin",
+  adminEmail: "admin@zektyc.duckdns.org",
+  phpVersion: "7.4.33",
+  serverSoftware: "Apache/2.4.51 (Debian)",
+  serverName: "web-01",
+}
+
+const DISCORD_WIDGET_URL = "https://discord.com/api/guilds/1528977765129519134/widget.json"
+const DISCORD_CACHE_MS = 60_000
+
+const ADMIN_PREFIX = "/z-panel"
+const HASH_FILE = normalize(join(import.meta.dir, "..", "data", "admin.pwhash"))
+const LOCK_FILE = normalize(join(import.meta.dir, "..", "data", "admin.lock"))
+const ACCESS_LOG = "/var/log/caddy/access.log"
+const SESSION_TTL_MS = 24 * 60 * 60 * 1000
+const ADMIN_MIN_PASSWORD = 12
+const ADMIN_MAX_PASSWORD = 200
+const ADMIN_ATTEMPT_LIMIT = 5
+const ADMIN_ATTEMPT_WINDOW_MS = 15 * 60 * 1000
+
+const BEHIND_CLOUDFLARE = process.env.BEHIND_CLOUDFLARE === "1"
+
+const NOISE_EXT_RE = /\.(?:css|js|mjs|map|png|jpe?g|gif|svg|webp|avif|ico|woff2?|ttf|otf|eot|xml|json)(?:\?.*)?$/i
+const NOISE_FILE_RE = /^\/(?:robots\.txt|favicon\.\w+|sitemap(?:\.xml)?|og-image\.\w+|site\.webmanifest|manifest\.json|apple-touch-icon[^/]*)(?:\?.*)?$/i
+const NOISE_PREFIX_RE = /^\/(?:z-panel|vendor|css|js|data)\//
+
+const ARTICLE_LABELS: Record<"fr" | "en", { category: string; back: string; backNews: string; other: string }> = {
+  fr: { category: "Blog", back: "Retour à l'accueil", backNews: "Retour au blog", other: "English version" },
+  en: { category: "Blog", back: "Back to home", backNews: "Back to blog", other: "Version française" },
+}
+
+let discordCache: { data: { presence_count: number | null }; at: number } | null = null
+let discordInflight: Promise<{ presence_count: number | null }> | null = null
+let honeypotBanned = new Set<string>()
+let lastPrune = 0
+
+const sessions = new Map<string, number>()
+const adminAttempts = new Map<string, { count: number; reset: number }>()
+const requests = new Map<string, { count: number; reset: number }>()
+
+function json(data: unknown, status = 200) {
+  return new Response(JSON.stringify(data), {
+    status,
+    headers: {
+      "Content-Type": "application/json; charset=utf-8",
+      "Cache-Control": "no-store",
+      "X-Robots-Tag": "noindex, nofollow",
+    },
+  })
+}
+
+function jsonRaw(data: unknown, headers: Record<string, string> = {}) {
+  return new Response(JSON.stringify(data), {
+    headers: { "Content-Type": "application/json; charset=utf-8", ...headers },
+  })
+}
+
+function html(body: string, cache = "no-cache") {
+  return new Response(body, {
+    headers: { "Content-Type": "text/html; charset=utf-8", "Cache-Control": cache },
+  })
+}
+
+function bearerToken(req: Request): string | null {
+  const h = req.headers.get("authorization")
+  return h ? (h.match(/^Bearer\s+(\S+)$/i)?.[1] ?? null) : null
+}
+
+function pruneSessions() {
+  const now = Date.now()
+  for (const [t, exp] of sessions) if (exp < now) sessions.delete(t)
+}
+
+function isAuthed(req: Request): boolean {
+  const t = bearerToken(req)
+  if (!t) return false
+  const exp = sessions.get(t)
+  if (!exp || exp < Date.now()) {
+    if (exp) sessions.delete(t)
+    return false
+  }
+  sessions.set(t, Date.now() + SESSION_TTL_MS)
+  return true
+}
+
+function adminLimited(ip: string): number {
+  const now = Date.now()
+  const e = adminAttempts.get(ip)
+  if (!e || now > e.reset) {
+    adminAttempts.set(ip, { count: 1, reset: now + ADMIN_ATTEMPT_WINDOW_MS })
+    return 0
+  }
+  e.count++
+  return e.count > ADMIN_ATTEMPT_LIMIT ? e.reset - now : 0
+}
+
+function allow(ip: string): number {
+  const now = Date.now()
+  const entry = requests.get(ip)
+  if (!entry || now > entry.reset) {
+    requests.set(ip, { count: 1, reset: now + RATE_WINDOW_MS })
+    return 0
+  }
+  entry.count++
+  return entry.count > RATE_MAX ? entry.reset - now : 0
+}
+
+function maybePrune() {
+  const now = Date.now()
+  if (now - lastPrune < 60_000) return
+  lastPrune = now
+  for (const [ip, e] of requests) {
+    if (now > e.reset) requests.delete(ip)
+  }
+}
+
+function readPasswordHash(): string | null {
+  if (!existsSync(HASH_FILE)) return null
+  try { return readFileSync(HASH_FILE, "utf8").trim() } catch { return null }
+}
+
+async function setPassword(pw: string) {
+  const hash = await Bun.password.hash(pw, { algorithm: "argon2id", memoryCost: 65536, timeCost: 4 })
+  writeFileSync(HASH_FILE, hash, { encoding: "utf8", mode: 0o600 })
+  chmodSync(HASH_FILE, 0o600)
+  writeFileSync(LOCK_FILE, String(Date.now()), { encoding: "utf8", mode: 0o600 })
+}
+
+function parseLogLine(line: string): Record<string, any> | null {
+  if (!line) return null
+  try { return JSON.parse(line) } catch { return null }
+}
+
+function isNoiseEntry(e: Record<string, any>): boolean {
+  const method = e.request?.method ?? ""
+  if (method && method !== "GET" && method !== "HEAD") return false
+  const path = (e.request?.uri ?? "").split("?")[0]
+  return NOISE_PREFIX_RE.test(path) || /^\/\.well-known\//.test(path) || NOISE_FILE_RE.test(path) || NOISE_EXT_RE.test(path)
+}
+
+function tailEntries(window: number) {
+  const lines = readFileSync(ACCESS_LOG, "utf8").split("\n").filter((l) => l.trim() !== "")
+  const total = lines.length
+  const entries = lines.slice(-window).map(parseLogLine).filter((e): e is Record<string, any> => e !== null)
+  return { entries, total, truncated: total > window }
+}
+
+function computeStats() {
+  const out: Record<string, any> = {
+    total: 0, firstTs: null, lastTs: null,
+    byStatus: {}, byIp: {}, byUri: {}, byUa: {}, by429: {}, blocked: {},
+  }
+  if (!existsSync(ACCESS_LOG)) return out
+  for (const line of readFileSync(ACCESS_LOG, "utf8").split("\n")) {
+    const e = parseLogLine(line)
+    if (!e) continue
+    out.total++
+    const ts = e.ts as number
+    if (out.firstTs === null || ts < out.firstTs) out.firstTs = ts
+    if (out.lastTs === null || ts > out.lastTs) out.lastTs = ts
+    const status = String(e.status ?? "-")
+    const ip = e.request?.remote_ip ?? e.client_ip ?? "?"
+    const uri = e.request?.uri ?? "-"
+    const ua = e.request?.headers?.["User-Agent"]?.[0] ?? "-"
+    out.byStatus[status] = (out.byStatus[status] ?? 0) + 1
+    out.byIp[ip] = (out.byIp[ip] ?? 0) + 1
+    out.byUri[uri] = (out.byUri[uri] ?? 0) + 1
+    out.byUa[ua] = (out.byUa[ua] ?? 0) + 1
+    if (status === "429") out.by429[ip] = (out.by429[ip] ?? 0) + 1
+    if (status === "404") out.blocked[uri] = (out.blocked[uri] ?? 0) + 1
+  }
+  return out
+}
+
+function top(obj: Record<string, number>, n: number): [string, number][] {
+  return Object.entries(obj).sort((a, b) => b[1] - a[1]).slice(0, n)
+}
+
+function computeTimeline() {
+  const buckets: Record<string, { total: number; ok: number; redir: number; err4: number; err5: number }> = {}
+  if (existsSync(ACCESS_LOG)) {
+    for (const line of readFileSync(ACCESS_LOG, "utf8").split("\n")) {
+      const e = parseLogLine(line)
+      if (!e || typeof e.ts !== "number") continue
+      const key = Math.floor(e.ts / 3600) * 3600
+      const b = (buckets[key] ??= { total: 0, ok: 0, redir: 0, err4: 0, err5: 0 })
+      b.total++
+      const s = e.status
+      if (s >= 500) b.err5++
+      else if (s >= 400) b.err4++
+      else if (s >= 300) b.redir++
+      else b.ok++
+    }
+  }
+  const now = Math.floor(Date.now() / 1000 / 3600) * 3600
+  const start = now - 47 * 3600
+  const out: { hour: number; total: number; ok: number; redir: number; err4: number; err5: number }[] = []
+  for (let t = start; t <= now; t += 3600) out.push({ hour: t, ...(buckets[t] ?? { total: 0, ok: 0, redir: 0, err4: 0, err5: 0 }) })
+  return out
+}
+
+function readJson<T>(file: string, fallback: T): T {
+  try {
+    if (!existsSync(file)) return fallback
+    return JSON.parse(readFileSync(file, "utf8")) as T
+  } catch { return fallback }
+}
+
+function writeJson(file: string, data: unknown) {
+  writeFileSync(file, JSON.stringify(data, null, 2) + "\n", { encoding: "utf8", mode: 0o600 })
+  chmodSync(file, 0o600)
+}
+
+function readArticles(): Article[] {
+  return readJson<Article[]>(ARTICLES_FILE, [])
+}
+
+function writeArticles(articles: Article[]) {
+  writeJson(ARTICLES_FILE, articles)
+  writeSitemaps(articles)
+}
+
+function readI18n(): I18nDict {
+  return readJson<I18nDict>(I18N_FILE, { fr: {}, en: {} })
+}
+
+function readRules(): string {
+  if (!existsSync(RULES_FILE)) return ""
+  try { return readFileSync(RULES_FILE, "utf8") } catch { return "" }
+}
+
+function writeRules(content: string) {
+  writeFileSync(RULES_FILE, content, { encoding: "utf8", mode: 0o600 })
+  chmodSync(RULES_FILE, 0o600)
+}
+
+function refreshHoneypotBanned() {
+  honeypotBanned = new Set(getBannedHoneypotIps())
+}
+
+refreshHoneypotBanned()
+
+function isHoneypotBanned(ip: string): boolean {
+  return honeypotBanned.has(ip)
+}
+
+function escHtml(s: string): string {
+  return s.replace(/[&<>"']/g, (c) =>
+    ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" }[c] ?? c)
+  )
+}
+
+function renderMarkdown(src: string): string {
+  return marked.parse(src) as string
+}
+
+function formatDate(iso: string, lang: "fr" | "en"): string {
+  try {
+    return new Intl.DateTimeFormat(lang === "fr" ? "fr-FR" : "en-US", {
+      day: "numeric", month: "long", year: "numeric",
+    }).format(new Date(iso + "T00:00:00Z"))
+  } catch { return iso }
+}
+
+function systemInfo() {
+  const info: Record<string, any> = { procs: [] }
+  try {
+    const [up] = readFileSync("/proc/uptime", "utf8").trim().split(/\s+/).map(Number)
+    info.uptime = up
+  } catch { info.uptime = null }
+  try { info.loadavg = readFileSync("/proc/loadavg", "utf8").trim() } catch { info.loadavg = null }
+  info.cpus = os.cpus().length
+  try {
+    const mem: Record<string, number> = {}
+    for (const line of readFileSync("/proc/meminfo", "utf8").split("\n")) {
+      const m = line.match(/^(\w+):\s+(\d+)\s*kB/)
+      if (m?.[1]) mem[m[1]] = Number(m[2]) * 1024
+    }
+    info.mem = mem
+  } catch {}
+  try {
+    const seen = new Set<string>()
+    info.disk = execSync("/bin/df -Pk / /var/log 2>/dev/null", { encoding: "utf8" })
+      .trim()
+      .split("\n")
+      .filter((line) => {
+        const cols = line.trim().split(/\s+/)
+        if (!cols.length || cols[0] === "Filesystem") return true
+        const mnt = cols[cols.length - 1] ?? ""
+        if (seen.has(mnt)) return false
+        seen.add(mnt)
+        return true
+      })
+  } catch { info.disk = null }
+  for (const dir of readdirSync("/proc")) {
+    if (!/^\d+$/.test(dir)) continue
+    const pid = Number(dir)
+    try {
+      const cmd = readFileSync(`/proc/${pid}/cmdline`, "utf8").replace(/\0/g, " ").trim()
+      if (!(cmd.includes("caddy run") || cmd.includes("src/server.ts") || cmd.includes("pm2"))) continue
+      const status = readFileSync(`/proc/${pid}/status`, "utf8")
+      const name = (status.match(/^Name:\s*(.*)$/m) ?? [])[1] ?? ""
+      const rss = Number((status.match(/^VmRSS:\s*(\d+)/m) ?? [])[1] ?? 0) * 1024
+      info.procs.push({ pid, name, rss, cmd: cmd.slice(0, 140) })
+    } catch { continue }
+  }
+  return info
+}
+
+function findPid(match: (cmd: string) => boolean, exclude?: number): number | null {
+  for (const dir of readdirSync("/proc")) {
+    if (!/^\d+$/.test(dir)) continue
+    const pid = Number(dir)
+    if (exclude === pid) continue
+    try {
+      const cmd = readFileSync(`/proc/${pid}/cmdline`, "utf8").replace(/\0/g, " ")
+      if (match(cmd)) return pid
+    } catch { continue }
+  }
+  return null
+}
+
+function scheduleRestart(pid: number) {
+  spawn("/bin/sh", ["-c", `sleep 0.6; kill -9 ${pid} 2>/dev/null`], { detached: true, stdio: "ignore" }).unref()
+}
+
+function normalizeArticle(b: any): Article {
+  const today = new Date().toISOString().slice(0, 10)
+  const norm = (v: any): ArticleLang => ({
+    title: String(v.title ?? "").trim(),
+    ogTitle: String(v.ogTitle ?? "").trim() || String(v.title ?? "").trim(),
+    description: String(v.description ?? "").trim(),
+    body: String(v.body ?? "").trim(),
+  })
+  return { slug: String(b.slug ?? ""), published: String(b.published ?? ""), modified: today, fr: norm(b.fr), en: norm(b.en) }
+}
+
+function validateArticle(b: any): string | null {
+  if (!b || typeof b !== "object") return "corps invalide"
+  if (typeof b.slug !== "string" || !ARTICLE_SLUG_RE.test(b.slug)) return "slug invalide (minuscules a-z, chiffres, tirets)"
+  if (typeof b.published !== "string" || !ARTICLE_DATE_RE.test(b.published)) return "date (published) invalide, format AAAA-MM-JJ attendu"
+  for (const lang of ["fr", "en"] as const) {
+    const v = b[lang]
+    if (!v || typeof v !== "object") return `version ${lang} manquante`
+    if (typeof v.title !== "string" || !v.title.trim()) return `titre ${lang} requis`
+    if (typeof v.body !== "string" || !v.body.trim()) return `contenu (body) ${lang} requis`
+    if (typeof v.ogTitle !== "string") return `ogTitle ${lang} invalide`
+    if (typeof v.description !== "string") return `description ${lang} invalide`
+  }
+  return null
+}
+
+function validateI18n(b: any): string | null {
+  if (!b || typeof b !== "object") return "corps invalide"
+  for (const lang of ["fr", "en"]) {
+    const d = b[lang]
+    if (!d || typeof d !== "object" || Array.isArray(d)) return `dictionnaire ${lang} invalide`
+    for (const [k, v] of Object.entries(d)) {
+      if (typeof v !== "string") return `clé "${k}" (${lang}) : valeur invalide`
+    }
+  }
+  return null
+}
+
+function validateRules(b: any): string | null {
+  if (!b || typeof b !== "object") return "corps invalide"
+  if (typeof b.content !== "string") return "contenu (content) invalide"
+  if (b.content.length > MAX_RULES_LEN) return `règles limitées à ${MAX_RULES_LEN} caractères (limite Discord)`
+  return null
+}
+
+async function readBody(req: Request): Promise<{ ok: true; data: any } | { ok: false; res: Response }> {
+  const text = await req.text().catch(() => "")
+  if (text.length > MAX_ADMIN_BODY_BYTES) return { ok: false, res: json({ error: "corps trop grand" }, 413) }
+  try { return { ok: true, data: JSON.parse(text) } }
+  catch { return { ok: false, res: json({ error: "json invalide" }, 400) } }
+}
+
+function siteHeader(lang: "fr" | "en"): string {
+  const skip = lang === "fr" ? "Aller au contenu" : "Skip to content"
+  const frActive = lang === "fr"
+  const enActive = lang === "en"
+  return `<header class="site-header">
+    <a class="skip-link" href="#main">${skip}</a>
+    <a class="brand" href="/"><span class="brand-mark" aria-hidden="true"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 16" role="presentation" focusable="false"><path d="M5 4h22L5 12h22" fill="none" stroke="currentColor" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/></svg></span><span class="brand-name">Zektyc</span></a>
+    <input type="checkbox" id="nav-toggle" class="nav-toggle-input" />
+    <label for="nav-toggle" class="nav-burger" aria-label="Menu">
+      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M4 6h16M4 12h16M4 18h16"/></svg>
+      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12M18 6L6 18"/></svg>
+    </label>
+    <nav class="site-nav" aria-label="Navigation">
+      <div class="lang-switch" role="group" aria-label="Langue / Language">
+        <button type="button" data-lang="fr" class="lang-btn${frActive ? " active" : ""}">${frActive ? "<strong>FR</strong>" : "FR"}</button>
+        <button type="button" data-lang="en" class="lang-btn${enActive ? " active" : ""}">${enActive ? "<strong>EN</strong>" : "EN"}</button>
+      </div>
+      <button type="button" class="theme-btn" aria-label="Theme">
+        <svg class="icon-moon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"/></svg>
+        <svg class="icon-sun" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg>
+      </button>
+    </nav>
+  </header>`
+}
+
+function siteFooter(lang: "fr" | "en"): string {
+  const tos = lang === "fr" ? "Conditions d\u2019utilisation" : "Terms of Service"
+  const priv = lang === "fr" ? "Confidentialit\u00e9" : "Privacy"
+  const note = lang === "fr" ? "Ce site ne collecte rien. Aucun cookie, aucun tracker." : "This site collects nothing. No cookies, no trackers."
+  return `<footer class="site-footer">
+    <p>Zektyc \u00b7 France</p>
+    <p class="footer-note">${note}</p>
+    <nav class="footer-nav" aria-label="Legal">
+      <a rel="me" href="https://piaille.fr/@zektyc"><img src="/icons/mastodon.svg" alt="" width="14" height="14" class="footer-icon" /> Mastodon</a>
+      <span class="footer-sep" aria-hidden="true">\u00b7</span>
+      <a href="/${lang === "fr" ? "tos" : "en/tos"}">${tos}</a>
+      <span class="footer-sep" aria-hidden="true">\u00b7</span>
+      <a href="/${lang === "fr" ? "privacy-policy" : "en/privacy-policy"}">${priv}</a>
+      <span class="footer-sep" aria-hidden="true">\u00b7</span>
+      <a href="/docs/maxspeed">API</a>
+      <span class="footer-sep" aria-hidden="true">\u00b7</span>
+      <a href="/.well-known/security.txt">security.txt</a>
+      <span class="footer-sep" aria-hidden="true">\u00b7</span>
+      <a href="http://l5cbkqmok4rnkhbtpltmtlf3pa5i5rfw23z2mtj5tugpo3quta3b5hqd.onion">Tor</a>
+    </nav>
+  </footer>`
+}
+
+const ERROR_MESSAGES: Record<number, { fr: string; en: string }> = {
+  400: { fr: "Requ\u00eate invalide", en: "Bad Request" },
+  403: { fr: "Acc\u00e8s interdit", en: "Forbidden" },
+  404: { fr: "Page introuvable", en: "Page Not Found" },
+  405: { fr: "M\u00e9thode non autoris\u00e9e", en: "Method Not Allowed" },
+  408: { fr: "D\u00e9lai d\u2019attente d\u00e9pass\u00e9", en: "Request Timeout" },
+  413: { fr: "Requ\u00eate trop volumineuse", en: "Payload Too Large" },
+  429: { fr: "Trop de requ\u00eates", en: "Too Many Requests" },
+  500: { fr: "Erreur interne du serveur", en: "Internal Server Error" },
+  502: { fr: "Passerelle incorrecte", en: "Bad Gateway" },
+  503: { fr: "Service indisponible", en: "Service Unavailable" },
+}
+
+function errorPage(status: number, req?: Request): Response {
+  const urlPath = req ? new URL(req.url).pathname : "/"
+  const lang: "fr" | "en" = /^\/en(\/|$)/.test(urlPath) ? "en" : "fr"
+  const msgs = ERROR_MESSAGES[status] ?? { fr: "Une erreur inconnue s\u2019est produite", en: "An unknown error occurred" }
+  const title = msgs[lang]
+
+  const cached = fileCache.get("/error.html")
+  if (!cached) return new Response(`${status} ${title}`, { status, headers: { "Content-Type": "text/plain" } })
+
+  const isFr = lang === "fr"
+  const tpl = cached.data.toString("utf-8")
+  const body = tpl
+    .replace(/__LANG__/g, lang)
+    .replace(/__STATUS__/g, String(status))
+    .replace(/__TITLE__/g, title)
+    .replace(/__MSG__/g, isFr
+      ? "La page que vous recherchez n\u2019existe pas, a \u00e9t\u00e9 d\u00e9plac\u00e9e ou une erreur s\u2019est produite."
+      : "The page you are looking for does not exist, has been moved, or an error occurred.")
+    .replace(/__HREF__/g, `/${isFr ? "" : "en/"}`)
+    .replace(/__BACK__/g, isFr ? "Retour \u00e0 l\u2019accueil" : "Back to home")
+    .replace(/__NEWS_HREF__/g, isFr ? "blog/" : "en/blog/")
+    .replace(/__NEWS__/g, isFr ? "Blog" : "Blog")
+    .replace(/__PROJECTS_HREF__/g, isFr ? "projets/" : "en/projets/")
+    .replace(/__PROJECTS__/g, isFr ? "Projets" : "Projects")
+    .replace(/__FR_ACTIVE__/g, isFr ? "active" : "")
+    .replace(/__EN_ACTIVE__/g, !isFr ? "active" : "")
+    .replace(/__FR_LABEL__/g, isFr ? "<strong>FR</strong>" : "FR")
+    .replace(/__EN_LABEL__/g, !isFr ? "<strong>EN</strong>" : "EN")
+    .replace(/__NOTE__/g, isFr ? "Ce site ne collecte rien. Aucun cookie, aucun tracker." : "This site collects nothing. No cookies, no trackers.")
+    .replace(/__TOS_HREF__/g, isFr ? "/tos" : "/en/tos")
+    .replace(/__TOS__/g, isFr ? "Conditions d\u2019utilisation" : "Terms of Service")
+    .replace(/__PRIV_HREF__/g, isFr ? "/privacy-policy" : "/en/privacy-policy")
+    .replace(/__PRIV__/g, isFr ? "Confidentialit\u00e9" : "Privacy")
+
+  return new Response(body, {
+    status,
+    headers: { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" },
+  })
+}
+
+function articlePage(article: Article, lang: "fr" | "en"): string {
+  const v = article[lang]
+  const frUrl = `${SITE_URL}/fr/blog/${article.slug}/`
+  const enUrl = `${SITE_URL}/en/blog/${article.slug}/`
+  const url = lang === "fr" ? frUrl : enUrl
+  const other = lang === "fr" ? enUrl : frUrl
+  const backNews = lang === "fr" ? "/fr/blog" : "/en/blog"
+  const labels = ARTICLE_LABELS[lang]
+  const langCode = lang === "fr" ? "fr_FR" : "en_US"
+  const altLang = lang === "fr" ? "en_US" : "fr_FR"
+  const ldJson = JSON.stringify({
+    "@context": "https://schema.org",
+    "@type": "Article",
+    headline: v.title,
+    datePublished: article.published,
+    dateModified: article.modified,
+    inLanguage: lang,
+    url,
+    author: { "@type": "Organization", name: "Zektyc", url: `${SITE_URL}/` },
+    publisher: { "@type": "Organization", name: "Zektyc", url: `${SITE_URL}/`, logo: { "@type": "ImageObject", url: `${SITE_URL}/favicon.svg` } },
+  }, null, 2).replace(/</g, "\\u003c")
+
+  return `<!doctype html>
+<html lang="${lang}">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="description" content="${escHtml(v.description)}" />
+    <meta name="robots" content="index, follow" />
+    <title>${escHtml(v.title)} · Zektyc</title>
+    <link rel="canonical" href="${url}" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="article" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="${escHtml(v.ogTitle)}" />
+    <meta property="og:description" content="${escHtml(v.description)}" />
+    <meta property="og:url" content="${url}" />
+    <meta property="og:image" content="${SITE_URL}/og-image.png" />
+    <meta property="og:locale" content="${langCode}" />
+    <meta property="og:locale:alternate" content="${altLang}" />
+    <meta name="twitter:card" content="summary_large_image" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="me" href="https://piaille.fr/@zektyc" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <script type="application/ld+json">
+${ldJson}
+    </script>
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/i18n.js" defer></script>
+    <script>document.addEventListener("click",function(e){var t=e.target.closest?e.target.closest(".site-nav"):null;if(t){var n=document.getElementById("nav-toggle");if(n)n.checked=false}})</script>
+  </head>
+  <body>
+    ${siteHeader(lang)}
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="${backNews}">\u2190 ${labels.backNews}</a></p>
+      <h1>${escHtml(v.title)}</h1>
+      <p class="legal-meta">${labels.category} \u00b7 ${formatDate(article.published, lang)}</p>
+
+${renderMarkdown(v.body)}
+
+      <p class="legal-note"><a href="${other}">${labels.other}</a></p>
+    </main>
+
+    ${siteFooter(lang)}
+  </body>
+</html>`
+}
+
+function newsIndex(lang: "fr" | "en"): string {
+  const labels = ARTICLE_LABELS[lang]
+  const articles = readArticles()
+    .filter((a) => a[lang]?.title && a[lang]?.body)
+    .sort((a, b) => b.published.localeCompare(a.published))
+  const items = articles.map((a) => {
+    const v = a[lang]
+    const url = `/${lang}/blog/${a.slug}/`
+    return `<article class="news-item">
+        <h2><a href="${url}">${escHtml(v.title)}</a></h2>
+        <p class="legal-meta">${formatDate(a.published, lang)}</p>
+        <p>${escHtml(v.description)}</p>
+      </article>`
+  }).join("\n")
+  const count = `${articles.length} article${articles.length > 1 ? "s" : ""}`
+
+  return `<!doctype html>
+<html lang="${lang}">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="index, follow" />
+    <title>Blog · Zektyc</title>
+    <link rel="canonical" href="${SITE_URL}/${lang}/blog/" />
+    <meta name="theme-color" content="#070a0f" />
+    <meta property="og:type" content="website" />
+    <meta property="og:site_name" content="Zektyc" />
+    <meta property="og:title" content="Blog · Zektyc" />
+    <meta property="og:url" content="${SITE_URL}/${lang}/blog/" />
+    <meta property="og:image" content="${SITE_URL}/og-image.png" />
+    <meta property="og:locale" content="${lang === "fr" ? "fr_FR" : "en_US"}" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="shortcut icon" href="/favicon.ico" />
+    <link rel="me" href="https://piaille.fr/@zektyc" />
+    <link rel="stylesheet" href="/css/style.css?v=7" />
+    <script src="/js/theme.js" defer></script>
+    <script src="/js/i18n.js" defer></script>
+    <script>document.addEventListener("click",function(e){var t=e.target.closest?e.target.closest(".site-nav"):null;if(t){var n=document.getElementById("nav-toggle");if(n)n.checked=false}})</script>
+  </head>
+  <body>
+    ${siteHeader(lang)}
+
+    <main class="legal" id="main">
+      <p class="legal-note"><a href="/${lang}/">\u2190 ${labels.back}</a></p>
+      <h1>Blog</h1>
+      <p class="legal-meta">${count}</p>
+
+      ${articles.length ? items : `<p>${lang === "fr" ? "Aucun article pour le moment." : "No articles yet."}</p>`}
+    </main>
+
+    ${siteFooter(lang)}
+  </body>
+</html>`
+}
+
+function writeSitemaps(articles: Article[]) {
+  const base: { fr: string; en: string; lm: string }[] = [
+    { fr: "/fr/", en: "/en/", lm: "2026-08-14" },
+    { fr: "/fr/tos", en: "/en/tos", lm: "2026-08-14" },
+    { fr: "/fr/privacy-policy", en: "/en/privacy-policy", lm: "2026-08-14" },
+    { fr: "/fr/blog/", en: "/en/blog/", lm: "2026-08-14" },
+    { fr: "/fr/fingerprint-test", en: "/en/fingerprint-test", lm: "2026-08-16" },
+    { fr: "/fr/projets", en: "/en/projets", lm: "2026-08-17" },
+  ]
+  const art = articles.map((a) => ({ fr: `/fr/blog/${a.slug}/`, en: `/en/blog/${a.slug}/`, lm: a.modified || a.published }))
+  const pages = [...base, ...art].sort((x, y) => x.fr.localeCompare(y.fr))
+  const header = `<?xml version="1.0" encoding="UTF-8"?>\n<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">\n`
+  const footer = `</urlset>\n`
+  const mainBody = pages.map((p) => {
+    const loc = `${SITE_URL}${p.fr}`
+    return `  <url>\n    <loc>${loc}</loc>\n    <lastmod>${p.lm}</lastmod>\n    <xhtml:link href="${loc}" hreflang="fr" rel="alternate"/>\n    <xhtml:link href="${SITE_URL}${p.en}" hreflang="en" rel="alternate"/>\n    <xhtml:link href="${loc}" hreflang="x-default" rel="alternate"/>\n  </url>`
+  }).join("\n")
+  const enBody = pages.map((p) => {
+    const loc = `${SITE_URL}${p.en}`
+    return `  <url>\n    <loc>${loc}</loc>\n    <lastmod>${p.lm}</lastmod>\n    <xhtml:link href="${SITE_URL}${p.fr}" hreflang="fr" rel="alternate"/>\n    <xhtml:link href="${loc}" hreflang="en" rel="alternate"/>\n    <xhtml:link href="${SITE_URL}${p.fr}" hreflang="x-default" rel="alternate"/>\n  </url>`
+  }).join("\n")
+  writeFileSync(normalize(join(root, "sitemap-main.xml")), header + mainBody + "\n" + footer, "utf8")
+  writeFileSync(normalize(join(root, "sitemap-en.xml")), header + enBody + "\n" + footer, "utf8")
+}
+
+async function fetchDiscordWidget(): Promise<{ presence_count: number | null }> {
+  try {
+    const res = await fetch(DISCORD_WIDGET_URL, {
+      headers: { accept: "application/json", "user-agent": "Zektyc-Site" },
+      signal: AbortSignal.timeout(5_000),
+    })
+    if (!res.ok) return { presence_count: null }
+    const json = (await res.json()) as { presence_count?: number }
+    return { presence_count: typeof json.presence_count === "number" ? json.presence_count : null }
+  } catch { return { presence_count: null } }
+}
+
+function getDiscordPresence(): Promise<{ presence_count: number | null }> {
+  const now = Date.now()
+  if (discordCache && now - discordCache.at < DISCORD_CACHE_MS) return Promise.resolve(discordCache.data)
+  if (!discordInflight) {
+    discordInflight = fetchDiscordWidget().then((data) => {
+      discordCache = { data, at: Date.now() }
+      discordInflight = null
+      return data
+    })
+  }
+  return discordInflight
+}
+
+function clientIp(req: Request): string {
+  if (BEHIND_CLOUDFLARE) {
+    const cf = req.headers.get("cf-connecting-ip")
+    if (cf) return cf
+  }
+  const fwd = req.headers.get("x-forwarded-for")
+  if (fwd) {
+    const parts = fwd.split(",").map((s) => s.trim()).filter(Boolean)
+    const last = parts[parts.length - 1]
+    if (last) return last
+  }
+  return "local"
+}
+
+const LANG_ROUTES: Record<string, (rest: string) => string> = {
+  fr: (rest) => (rest ? "/" + rest : "/"),
+  en: (rest) => (rest ? "/" + rest.replace(/\/+$/, "") + "/en" : "/"),
+}
+
+function resolveLangPath(path: string): string | null {
+  const m = path.match(/^\/(fr|en)(?:\/(.*))?$/)
+  if (!m) return null
+  const route = LANG_ROUTES[m[1] ?? ""]
+  return route ? route(m[2] ?? "") : null
+}
+
+function lookup(path: string) {
+  if (path === "/") path = "/index.html"
+  const resolved = normalize(join(root, path))
+  if (!resolved.startsWith(root)) return null
+  try { if (statSync(resolved).isDirectory()) return normalize(join(resolved, "index.html")) } catch {}
+  return resolved
+}
+
+function matchArticle(p: string, articles: Article[]): { article: Article; lang: "fr" | "en" } | null {
+  const m = p.match(/^\/blog\/([a-z0-9-]+)(?:\/en)?\/?$/)
+  if (!m) return null
+  const slug = m[1]
+  const lang: "fr" | "en" = p.endsWith("/en") ? "en" : "fr"
+  const article = articles.find((a) => a.slug === slug)
+  return article ? { article, lang } : null
+}
+
+function serveAdminIndex() {
+  const f = file(normalize(join(root, "z-panel", "index.html")))
+  return f.exists().then((exists) =>
+    exists
+      ? new Response(f, { headers: { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store", "X-Robots-Tag": "noindex, nofollow" } })
+      : new Response("Panel introuvable", { status: 404 })
+  )
+}
+
+function serveAdminStatic(rel: string) {
+  const f = file(normalize(join(root, "z-panel", rel)))
+  return f.exists().then((exists) => {
+    if (!exists) return new Response("Not Found", { status: 404 })
+    const ext = rel.slice(rel.lastIndexOf(".")).toLowerCase()
+    return new Response(f, {
+      headers: { "Content-Type": types[ext] ?? "application/octet-stream", "Cache-Control": "no-store", "X-Robots-Tag": "noindex, nofollow" },
+    })
+  })
+}
+
+async function handleAdmin(req: Request, url: URL): Promise<Response> {
+  const { pathname: path, searchParams } = url
+  const ip = clientIp(req)
+  const method = req.method
+
+  if ((path === ADMIN_PREFIX || path === ADMIN_PREFIX + "/") && (method === "GET" || method === "HEAD")) return serveAdminIndex()
+  if (
+    (method === "GET" || method === "HEAD") &&
+    path.startsWith(ADMIN_PREFIX + "/") &&
+    !path.startsWith(ADMIN_PREFIX + "/api/") &&
+    path !== ADMIN_PREFIX + "/state" &&
+    path !== ADMIN_PREFIX + "/me"
+  ) return serveAdminStatic(path.slice(ADMIN_PREFIX.length) || "/index.html")
+
+  if (method !== "GET" && method !== "POST" && method !== "PUT" && method !== "DELETE")
+    return new Response("Method Not Allowed", { status: 405, headers: { Allow: "GET, POST, PUT, DELETE" } })
+
+  if (path === ADMIN_PREFIX + "/state" && method === "GET")
+    return json({ configured: existsSync(HASH_FILE), locked: existsSync(LOCK_FILE) })
+
+  if (path === ADMIN_PREFIX + "/setup" && method === "POST") {
+    if (adminLimited(ip) > 0) return json({ error: "trop de tentatives" }, 429)
+    if (existsSync(HASH_FILE)) return json({ error: "déjà configuré" }, 409)
+    let body: any
+    try { body = await req.json() } catch { return json({ error: "json invalide" }, 400) }
+    const pw = typeof body?.password === "string" ? body.password : ""
+    if (pw.length < ADMIN_MIN_PASSWORD || pw.length > ADMIN_MAX_PASSWORD)
+      return json({ error: `mot de passe entre ${ADMIN_MIN_PASSWORD} et ${ADMIN_MAX_PASSWORD} caractères` }, 400)
+    await setPassword(pw)
+    console.log(`[admin] mot de passe défini (ip ${ip})`)
+    return json({ ok: true })
+  }
+
+  if (path === ADMIN_PREFIX + "/login" && method === "POST") {
+    if (adminLimited(ip) > 0) return json({ error: "trop de tentatives" }, 429)
+    let body: any
+    try { body = await req.json() } catch { return json({ error: "json invalide" }, 400) }
+    const pw = typeof body?.password === "string" ? body.password : ""
+    const hash = readPasswordHash()
+    if (!hash) return json({ error: "non configuré" }, 409)
+    if (!(await Bun.password.verify(pw, hash))) {
+      console.log(`[admin] échec login (ip ${ip})`)
+      return json({ error: "mot de passe incorrect" }, 401)
+    }
+    const token = randomBytes(32).toString("base64url")
+    sessions.set(token, Date.now() + SESSION_TTL_MS)
+    console.log(`[admin] login réussi (ip ${ip})`)
+    return json({ ok: true, token, expires: Date.now() + SESSION_TTL_MS })
+  }
+
+  if (!isAuthed(req)) return json({ error: "non autorisé" }, 401)
+
+  if (path === ADMIN_PREFIX + "/me" && method === "GET") return json({ ok: true })
+
+  if (path === ADMIN_PREFIX + "/api/stats" && method === "GET") {
+    const s = computeStats()
+    return json({
+      total: s.total, firstTs: s.firstTs, lastTs: s.lastTs, byStatus: s.byStatus,
+      topIps: top(s.byIp, 10), topUris: top(s.byUri, 10), topUas: top(s.byUa, 10),
+      by429: s.by429, blocked: top(s.blocked, 10),
+    })
+  }
+
+  if (path === ADMIN_PREFIX + "/api/timeline" && method === "GET") return json(computeTimeline())
+
+  if (path === ADMIN_PREFIX + "/api/logs" && method === "GET") {
+    const lines = Math.min(Math.max(Number(searchParams.get("lines") ?? 200) || 200, 10), 2000)
+    const status = searchParams.get("status")
+    const filter = searchParams.get("filter")?.toLowerCase()
+    const exclude = searchParams.get("exclude") === "1"
+    let { entries, total, truncated } = tailEntries(Math.max(lines * (exclude ? 6 : 3), 300))
+    if (exclude) entries = entries.filter((e) => !isNoiseEntry(e))
+    if (status) entries = entries.filter((e) => String(e.status) === status)
+    if (filter) entries = entries.filter((e) => `${e.request?.uri ?? ""} ${e.request?.method ?? ""} ${e.request?.remote_ip ?? ""}`.toLowerCase().includes(filter))
+    const list = entries.slice(-lines).map((e) => ({
+      ts: e.ts as number, ip: e.request?.remote_ip ?? e.client_ip ?? "?",
+      method: e.request?.method ?? "-", uri: e.request?.uri ?? "-",
+      status: e.status ?? -1, duration: e.duration as number | undefined,
+      size: e.size as number | undefined, ua: e.request?.headers?.["User-Agent"]?.[0] ?? "-",
+    }))
+    return json({ entries: list, total, truncated, returned: list.length })
+  }
+
+  if (path === ADMIN_PREFIX + "/api/system" && method === "GET") return json(systemInfo())
+
+  if (path === ADMIN_PREFIX + "/api/restart" && method === "POST") {
+    let body: any
+    try { body = await req.json() } catch { return json({ error: "json invalide" }, 400) }
+    const service = body?.service
+    if (service !== "app" && service !== "caddy") return json({ error: "service invalide" }, 400)
+    let pid: number | null = service === "caddy"
+      ? findPid((c) => c.includes("caddy run"))
+      : findPid((c) => c.includes("src/server.ts") && !c.includes("pm2"), process.pid) ?? process.pid
+    if (pid === null || pid === 1) return json({ error: "processus introuvable" }, 500)
+    scheduleRestart(pid)
+    console.log(`[admin] restart ${service} (pid ${pid}, ip ${ip})`)
+    return json({ ok: true, service, pid })
+  }
+
+  if (path === ADMIN_PREFIX + "/api/articles" && method === "GET") {
+    return json(readArticles().map((a) => ({
+      slug: a.slug, published: a.published, modified: a.modified,
+      frTitle: a.fr?.title ?? "", enTitle: a.en?.title ?? "",
+    })))
+  }
+
+  if (path === ADMIN_PREFIX + "/api/articles" && method === "POST") {
+    const r = await readBody(req)
+    if (!r.ok) return r.res
+    const err = validateArticle(r.data)
+    if (err) return json({ error: err }, 400)
+    const articles = readArticles()
+    if (articles.some((a) => a.slug === r.data.slug)) return json({ error: "ce slug existe déjà" }, 409)
+    const article = normalizeArticle(r.data)
+    articles.push(article)
+    writeArticles(articles)
+    console.log(`[admin] article créé: ${article.slug} (ip ${ip})`)
+    return json({ ok: true, slug: article.slug }, 201)
+  }
+
+  if (path === ADMIN_PREFIX + "/api/articles" && method === "PUT") {
+    const r = await readBody(req)
+    if (!r.ok) return r.res
+    const err = validateArticle(r.data)
+    if (err) return json({ error: err }, 400)
+    const articles = readArticles()
+    const i = articles.findIndex((a) => a.slug === r.data.slug)
+    if (i === -1) return json({ error: "article introuvable" }, 404)
+    articles[i] = normalizeArticle(r.data)
+    writeArticles(articles)
+    console.log(`[admin] article mis à jour: ${r.data.slug} (ip ${ip})`)
+    return json({ ok: true, slug: r.data.slug })
+  }
+
+  const delMatch = path.match(/^\/z-panel\/api\/articles\/([a-z0-9-]+)$/)
+  if (delMatch) {
+    const slug = delMatch[1]
+    const articles = readArticles()
+    if (method === "DELETE") {
+      const next = articles.filter((a) => a.slug !== slug)
+      if (next.length === articles.length) return json({ error: "article introuvable" }, 404)
+      writeArticles(next)
+      console.log(`[admin] article supprimé: ${slug} (ip ${ip})`)
+      return json({ ok: true, slug })
+    }
+    if (method === "GET") {
+      const article = articles.find((a) => a.slug === slug)
+      return article ? json(article) : json({ error: "article introuvable" }, 404)
+    }
+  }
+
+  if (path === ADMIN_PREFIX + "/api/i18n" && method === "GET") return json(readI18n())
+
+  if (path === ADMIN_PREFIX + "/api/i18n" && method === "PUT") {
+    const r = await readBody(req)
+    if (!r.ok) return r.res
+    const err = validateI18n(r.data)
+    if (err) return json({ error: err }, 400)
+    writeJson(I18N_FILE, r.data)
+    console.log(`[admin] traductions mises à jour (ip ${ip})`)
+    return json({ ok: true })
+  }
+
+  if (path === ADMIN_PREFIX + "/api/rules" && method === "GET") {
+    const content = readRules()
+    return json({ content, length: content.length, max: MAX_RULES_LEN })
+  }
+
+  if (path === ADMIN_PREFIX + "/api/rules" && method === "PUT") {
+    const r = await readBody(req)
+    if (!r.ok) return r.res
+    const err = validateRules(r.data)
+    if (err) return json({ error: err }, 400)
+    writeRules(r.data.content)
+    console.log(`[admin] règles Discord mises à jour (ip ${ip})`)
+    return json({ ok: true })
+  }
+
+  if (path === ADMIN_PREFIX + "/api/honeypot" && method === "GET") {
+    const ips = getHoneypotIps()
+    return json({
+      total: ips.length, max: HONEYPOT_MAX_IPS,
+      ips: ips.slice(0, HONEYPOT_MAX_IPS).map((r) => ({ ip: r.ip, count: r.count, first: r.first, last: r.last, banned: r.banned, endpoints: r.endpoints })),
+    })
+  }
+
+  if (path === ADMIN_PREFIX + "/api/honeypot" && method === "POST") {
+    const r = await readBody(req)
+    if (!r.ok) return r.res
+    const action = r.data?.action
+    if (action === "ban" || action === "unban") {
+      const hpIp = typeof r.data?.ip === "string" ? r.data.ip.trim() : ""
+      if (!hpIp || !/^[0-9a-f.:]+$/i.test(hpIp)) return json({ error: "IP invalide" }, 400)
+      setHoneypotBanned(hpIp, action === "ban")
+      refreshHoneypotBanned()
+      console.log(`[admin] honeypot ${action} ${hpIp} (ip ${ip})`)
+      return json({ ok: true, banned: action === "ban" })
+    }
+    if (action === "clear") {
+      clearHoneypot()
+      refreshHoneypotBanned()
+      console.log(`[admin] honeypot vidé (ip ${ip})`)
+      return json({ ok: true })
+    }
+    return json({ error: "action invalide" }, 400)
+  }
+
+  if (path === ADMIN_PREFIX + "/api/zmap" && method === "GET") {
+    const data: Record<string, any> = { build: { running: false, pid: null, pass: null, ways: 0, nodes: 0, log: [] }, grids: {} }
+    const dataDir = normalize(join(import.meta.dir, "..", "data", "maxspeed"))
+    const logFile = join(dataDir, "build-planet.log")
+
+    const buildPid = findPid((c) => c.includes("build_world.py") && !c.includes("grep"))
+    if (buildPid !== null) {
+      data.build.running = true
+      data.build.pid = buildPid
+      try {
+        const status = readFileSync(`/proc/${buildPid}/status`, "utf8")
+        data.build.rss = Number((status.match(/^VmRSS:\s*(\d+)/m) ?? [])[1] ?? 0) * 1024
+      } catch {}
+    }
+
+    try {
+      const log = readFileSync(logFile, "utf8").trim().split("\n")
+      data.build.log = log.slice(-30)
+      for (let i = log.length - 1; i >= 0; i--) {
+        const line = log[i]!
+        const wayMatch = line.match(/pass(\d):\s*([\d.]+)M\s+ways/)
+        if (wayMatch) {
+          data.build.pass = Number(wayMatch[1])
+          data.build.ways = Number(wayMatch[2]) * 1_000_000
+        }
+        const nodeMatch = line.match(/pass(\d):.*?([\d.]+)M\s+nodes/)
+        if (nodeMatch) {
+          data.build.pass = Number(nodeMatch[1])
+          data.build.nodes = Number(nodeMatch[2]) * 1_000_000
+        }
+        if (line.match(/pass2:.*?([\d.]+)M\s+nodes/)) {
+          data.build.pass = 2
+          data.build.nodes = Number(line.match(/pass2:.*?([\d.]+)M\s+nodes/)![1]) * 1_000_000
+        }
+        if (line.includes("PASS2_DONE") || line.includes("PASS2_WRITE_DONE") || line.includes("done")) {
+          data.build.done = true
+          data.build.pass = 0
+          break
+        }
+      }
+    } catch {}
+
+    for (const [name, dir] of [["europe", join(dataDir, "grid-europe")], ["planet", join(dataDir, "grid-planet")]] as [string, string][]) {
+      const metaP = join(dir, "meta.json")
+      const indexP = join(dir, "index.json")
+      try {
+        if (existsSync(metaP) && existsSync(indexP)) {
+          const meta = JSON.parse(readFileSync(metaP, "utf8"))
+          const index = JSON.parse(readFileSync(indexP, "utf8"))
+          data.grids[name] = { ...meta, cells: Object.keys(index).length, totalSize: Object.values(index).reduce((acc: number, v: any) => acc + (v.s || 0), 0) }
+        }
+      } catch {}
+    }
+
+    return json(data)
+  }
+
+  return json({ error: "route inconnue" }, 404)
+}
+
+const types: Record<string, string> = {
+  ".html": "text/html; charset=utf-8",
+  ".css": "text/css",
+  ".js": "text/javascript",
+  ".mjs": "text/javascript",
+  ".json": "application/json",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".svg": "image/svg+xml",
+  ".webp": "image/webp",
+  ".ico": "image/x-icon",
+  ".txt": "text/plain; charset=utf-8",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".xml": "application/xml",
+  ".pdf": "application/pdf",
+}
+
+function buildFileCache() {
+  const next = new Map<string, CachedFile>()
+  function walk(dir: string) {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      const full = join(dir, entry.name)
+      if (entry.isDirectory()) { walk(full); continue }
+      try {
+        const data = readFileSync(full) as Buffer
+        const ext = full.slice(full.lastIndexOf(".")).toLowerCase()
+        const rel = full.slice(root.length)
+        next.set(rel, {
+          data,
+          type: types[ext] ?? "application/octet-stream",
+          etag: `"${data.length}-${Date.now()}"`,
+        })
+      } catch {}
+    }
+  }
+  walk(root)
+  fileCache = next
+  console.log(`[cache] ${fileCache.size} fichiers en RAM (${(process.memoryUsage().rss / 1048576).toFixed(0)} Mo RSS)`)
+}
+
+function startWatcher() {
+  process.on("SIGUSR1", () => {
+    buildFileCache()
+    console.log("[cache] rechargé manuellement via SIGUSR1")
+  })
+  let debounce: ReturnType<typeof setTimeout> | null = null
+  const reloader = () => {
+    if (debounce) clearTimeout(debounce)
+    debounce = setTimeout(() => {
+      buildFileCache()
+      console.log("[cache] rechargé automatiquement (fichier modifié)")
+      debounce = null
+    }, 300)
+  }
+  try {
+    const { watch } = require("fs")
+    watch(root, { recursive: true }, (_event: string, filename: string | null) => {
+      if (filename) reloader()
+    })
+    console.log("[watcher] auto-reload actif sur " + root)
+  } catch {
+    console.log("[watcher] fs.watch indisponible, kill -USR1 pour recharger le cache")
+  }
+}
+
+console.log(`Zektyc sert ${root} sur http://${host}:${port}`)
+buildFileCache()
+startWatcher()
+writeSitemaps(readArticles())
+
+let server: import("bun").Server<Record<string, unknown>> = undefined as unknown as import("bun").Server<Record<string, unknown>>
+server = serve({
+  hostname: host,
+  port,
+  idleTimeout: 120,
+  async fetch(req) {
+    maybePrune()
+    pruneSessions()
+
+    const url = new URL(req.url)
+    const { pathname } = url
+
+    if (pathname === "/api/zmap/ws") {
+      if (req.headers.get("upgrade")?.toLowerCase() !== "websocket") return new Response("Upgrade required", { status: 426 })
+      if (!server.upgrade(req, { data: {} })) return new Response("Upgrade failed", { status: 400 })
+      return new Response("", { status: 101 })
+    }
+
+    if (pathname.startsWith(ADMIN_PREFIX)) return await handleAdmin(req, url)
+
+    if (pathname.startsWith("/api/zmap/")) {
+      const zmapRes = await handleZMapRoute(req, url)
+      if (zmapRes) return zmapRes
+    }
+
+    const ip = clientIp(req)
+    if (isHoneypotBanned(ip)) return errorPage(403, req)
+
+    // API publique maxspeed (indépendante de ZMap). OPTIONS CORS autorisé,
+    // sinon on applique le même rate-limit global par IP que le reste.
+    if (pathname.startsWith("/api/maxspeed")) {
+      const msRes = await handleMaxspeedRoute(req, url)
+      if (msRes) return msRes
+      const retryAfterMs = allow(ip)
+      if (retryAfterMs > 0) {
+        const res = json({ ok: false, error: "trop de requêtes" }, 429)
+        res.headers.set("Retry-After", String(Math.ceil(retryAfterMs / 1000)))
+        return res
+      }
+      return errorPage(404, req)
+    }
+
+    if (req.method !== "GET" && req.method !== "HEAD") {
+      const res = errorPage(405, req)
+      res.headers.set("Allow", "GET, HEAD")
+      return res
+    }
+    if (Number(req.headers.get("content-length") || 0) > MAX_BODY_BYTES) return errorPage(413, req)
+
+    const retryAfter = allow(ip)
+    if (retryAfter > 0) {
+      const res = errorPage(429, req)
+      res.headers.set("Retry-After", String(Math.ceil(retryAfter / 1000)))
+      return res
+    }
+
+    if (pathname === "/api/discord") return jsonRaw(await getDiscordPresence())
+    if (pathname === "/api/time") return jsonRaw({ t: Date.now() })
+
+    if (pathname === "/data/i18n.json") {
+      let body = "{}"
+      try { body = readFileSync(I18N_FILE, "utf8") } catch {}
+      return new Response(body, { headers: { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-cache" } })
+    }
+
+    // Pages de documentation globale des API
+    const docsMatch = pathname.match(/^\/docs\/([a-z0-9-]+)\/?$/)
+    if (docsMatch) {
+      const page = docsPage(docsMatch[1]!)
+      if (page) return html(page, "public, max-age=300")
+    }
+
+    const p = resolveLangPath(pathname) ?? pathname
+    const articles = readArticles()
+    const matched = matchArticle(p, articles)
+    if (matched) return html(articlePage(matched.article, matched.lang))
+    if (p === "/actualites" || p === "/actualites/") return new Response(null, { status: 301, headers: { Location: "/blog/" } })
+    if (p === "/actualites/en" || p === "/actualites/en/") return new Response(null, { status: 301, headers: { Location: "/en/blog/" } })
+    if (p.startsWith("/actualites")) return new Response(null, { status: 301, headers: { Location: "/blog/" } })
+
+    const filePath = lookup(decodeURIComponent(p))
+    if (!filePath) return new Response("Forbidden", { status: 403 })
+
+    const rel = filePath.slice(root.length)
+    const cached = fileCache.get(rel)
+    if (cached) {
+      const ifNoneMatch = req.headers.get("if-none-match")
+      if (ifNoneMatch && ifNoneMatch === cached.etag) return new Response(null, { status: 304 })
+      const isHtml = cached.type.startsWith("text/html")
+      return new Response(cached.data, {
+        headers: {
+          "Content-Type": cached.type,
+          "Cache-Control": isHtml ? "no-store" : "public, max-age=300",
+          "ETag": cached.etag,
+        },
+      })
+    }
+
+    const f = file(filePath)
+    if (await f.exists()) {
+      const ext = filePath.slice(filePath.lastIndexOf(".")).toLowerCase()
+      return new Response(f, {
+        headers: {
+          "Content-Type": types[ext] ?? "application/octet-stream",
+          "Cache-Control": ext === ".html" ? "no-cache" : "public, max-age=300",
+        },
+      })
+    }
+
+    if (!pathname.startsWith("/api/zmap/")) {
+      const hp = getHoneypotResponse(HONEYPOT_CONFIG, p)
+      if (hp) {
+        recordHoneypotHit(ip, pathname)
+        return new Response(hp.body, { status: hp.status, headers: { ...hp.headers, "Cache-Control": "no-store" } })
+      }
+    }
+
+    return errorPage(404, req)
+  },
+  websocket: {
+    open: zmapWsHandler,
+    message: zmapWsMessage,
+    close: zmapWsClose,
+  },
+})
+
+zmapWsKeepAlive()
diff --git a/src/zmap-api.ts b/src/zmap-api.ts
new file mode 100644
index 0000000..590d750
--- /dev/null
+++ b/src/zmap-api.ts
@@ -0,0 +1,451 @@
+import { snapSpeeds } from "./zmap-maxspeed.ts"
+
+const OVERPASS_MIRRORS = [
+  "https://overpass-api.de/api/interpreter",
+  "https://overpass.kumi.systems/api/interpreter",
+  "https://maps.mail.ru/osm/tools/overpass/api/interpreter",
+  "https://overpass.private.coffee/api/interpreter",
+]
+const NOMINATIM = "https://nominatim.openstreetmap.org/search"
+const OSRM = "https://router.project-osrm.org/route/v1/driving"
+
+interface CacheEntry {
+  body: string
+  ts: number
+  contentType: string
+}
+
+const cache = new Map<string, CacheEntry>()
+const CACHE_TTL_STATIONS = 10 * 60 * 1000
+const CACHE_TTL_SEARCH = 24 * 60 * 60 * 1000
+const CACHE_TTL_ROUTE = 12 * 60 * 60 * 1000
+
+const clientLimits = new Map<string, number[]>()
+const RATE_MAX = 30
+const RATE_WINDOW = 60_000
+
+const UA =
+  "ZMapProxy/1.0 (zektyc.duckdns.org; contact: riric65@protonmail.com; OSM proxy)"
+
+function json(data: unknown, status = 200): Response {
+  return new Response(JSON.stringify(data), {
+    status,
+    headers: { "Content-Type": "application/json; charset=utf-8" },
+  })
+}
+
+function cacheKey(prefix: string, q: string): string {
+  return prefix + ":" + q
+}
+
+function getCached(key: string, ttl: number): CacheEntry | null {
+  const e = cache.get(key)
+  if (e && Date.now() - e.ts < ttl) return e
+  cache.delete(key)
+  return null
+}
+
+function setCached(key: string, body: string, contentType: string) {
+  cache.set(key, { body, ts: Date.now(), contentType })
+}
+
+async function queryOverpass(query: string): Promise<string> {
+  let lastErr: string = "aucun miroir joignable"
+  for (const mirror of OVERPASS_MIRRORS) {
+    try {
+      const res = await fetch(mirror, {
+        method: "POST",
+        headers: {
+          "User-Agent": UA,
+          "Content-Type": "application/x-www-form-urlencoded",
+        },
+        body: "data=" + encodeURIComponent(query),
+        signal: AbortSignal.timeout(12_000),
+      })
+      if (!res.ok) {
+        lastErr = `HTTP ${res.status} sur ${mirror}`
+        continue
+      }
+      return await res.text()
+    } catch (e: any) {
+      lastErr = (e?.message ?? "connexion impossible") + " sur " + mirror
+    }
+  }
+  throw new Error(lastErr)
+}
+
+async function fetchText(url: string): Promise<string> {
+  const res = await fetch(url, { headers: { "User-Agent": UA } })
+  if (!res.ok) throw new Error(`HTTP ${res.status}`)
+  return res.text()
+}
+
+function checkRateLimit(ip: string): boolean {
+  const now = Date.now()
+  const recent = (clientLimits.get(ip) ?? []).filter((t) => now - t < RATE_WINDOW)
+  if (recent.length >= RATE_MAX) {
+    clientLimits.set(ip, recent)
+    return false
+  }
+  recent.push(now)
+  clientLimits.set(ip, recent)
+  return true
+}
+
+function clientIp(req: Request): string {
+  const fwd = req.headers.get("x-forwarded-for")
+  const first = fwd ? fwd.split(",")[0]?.trim() : undefined
+  return (
+    req.headers.get("cf-connecting-ip") ||
+    first ||
+    "unknown"
+  ) as string
+}
+
+async function handleStations(req: Request, url: URL): Promise<Response> {
+  const south = url.searchParams.get("south")
+  const west = url.searchParams.get("west")
+  const north = url.searchParams.get("north")
+  const east = url.searchParams.get("east")
+
+  if (!south || !west || !north || !east) {
+    return json({ error: "bbox requise (south,west,north,east)" }, 400)
+  }
+  const slat = Number(south), wlon = Number(west), nlat = Number(north), elon = Number(east)
+  if ([slat, wlon, nlat, elon].some((n) => isNaN(n)) || slat >= nlat || wlon >= elon) {
+    return json({ error: "bbox invalide" }, 400)
+  }
+  const area = (nlat - slat) * (elon - wlon)
+  if (area > 40) return json({ error: "zone trop grande, zoomez" }, 400)
+
+  const q = `${slat},${wlon},${nlat},${elon}`
+  const key = cacheKey("stations", q)
+  const cached = getCached(key, CACHE_TTL_STATIONS)
+  if (cached) {
+    return new Response(cached.body, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  }
+
+  const query = `
+    [out:json][timeout:30];
+    (
+      node["amenity"="charging_station"](${q});
+      way["amenity"="charging_station"](${q});
+    );
+    out center tags;`
+
+  try {
+    const raw = await queryOverpass(query)
+    const parsed = parseOverpass(raw)
+    const out = JSON.stringify({ stations: parsed, count: parsed.length })
+    setCached(key, out, "application/json")
+    return new Response(out, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  } catch (e: any) {
+    return json({ error: "proxy: " + (e?.message ?? "erreur inconnue") }, 502)
+  }
+}
+
+function parseOverpass(raw: string): unknown[] {
+  try {
+    const j = JSON.parse(raw)
+    const out: unknown[] = []
+    for (const el of j.elements || []) {
+      const tags = el.tags || {}
+      if (tags.amenity !== "charging_station") continue
+      const lat = el.lat ?? el.center?.lat
+      const lon = el.lon ?? el.center?.lon
+      if (lat == null || lon == null) continue
+
+      const connectors: { kind: string; count: number | null; powerKw: number | null }[] = []
+      for (const key of Object.keys(tags)) {
+        const m = /^socket:([^:]+)$/.exec(key)
+        if (!m || tags[key] === undefined || tags[key] === "no") continue
+        const kind = m[1]!
+        const powerRaw = tags[`socket:${kind}:output`] ?? tags[`socket:${kind}:voltage`]
+        const countRaw = tags[`capacity:${kind}`]
+        connectors.push({
+          kind,
+          powerKw: typeof powerRaw === "string" ? parseFloat(powerRaw.replace(/[^0-9.]/g, "")) || null : null,
+          count: typeof countRaw === "string" ? parseInt(countRaw, 10) || null : null,
+        })
+      }
+      if (connectors.length === 0 && tags.socket) {
+        for (const part of String(tags.socket).split(",")) {
+          const kind = part.trim().replace(/\s*x\d+.*$/i, "")
+          if (kind) connectors.push({ kind, count: null, powerKw: null })
+        }
+      }
+
+      const power = tags.power || tags.maxpower || tags.output || null
+      const capacity = tags.capacity ? parseInt(tags.capacity, 10) || null : null
+
+      out.push({
+        id: el.id,
+        lat,
+        lon,
+        name: tags.name || null,
+        operator: tags.operator || null,
+        brand: tags.brand || null,
+        power,
+        maxpower: tags.maxpower || null,
+        capacity,
+        connectors,
+        fee: tags.fee === "no" ? false : tags.fee === "yes" ? true : null,
+        parking_fee: tags["parking:fee"] === "no" ? false : tags["parking:fee"] === "yes" ? true : null,
+        access: tags.access || null,
+        opening_hours: tags.opening_hours || null,
+        phone: tags.phone || tags["contact:phone"] || null,
+        website: tags.website || tags["contact:website"] || null,
+        ref: tags.ref || null,
+        address: [tags["addr:street"], tags["addr:housenumber"], tags["addr:city"]]
+          .filter((x) => x)
+          .join(", ") || null,
+      })
+    }
+    return out
+  } catch {
+    return []
+  }
+}
+
+async function handleSearch(req: Request, url: URL): Promise<Response> {
+  const q = url.searchParams.get("q")
+  if (!q || q.trim().length < 2) return json({ error: "q requis" }, 400)
+
+  const key = cacheKey("search", q.toLowerCase().trim())
+  const cached = getCached(key, CACHE_TTL_SEARCH)
+  if (cached) {
+    return new Response(cached.body, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  }
+
+  const target = `${NOMINATIM}?q=${encodeURIComponent(q)}&format=jsonv2&limit=5&accept-language=fr`
+  try {
+    const body = await fetchText(target)
+    const parsed = JSON.parse(body).map((r: any) => ({
+      display_name: r.display_name,
+      lat: parseFloat(r.lat),
+      lon: parseFloat(r.lon),
+      type: r.type,
+      category: r.category,
+    }))
+    const out = JSON.stringify({ results: parsed })
+    setCached(key, out, "application/json")
+    return new Response(out, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  } catch (e: any) {
+    return json({ error: "proxy: " + (e?.message ?? "erreur") }, 502)
+  }
+}
+
+async function handleRoute(req: Request, url: URL): Promise<Response> {
+  const from = url.searchParams.get("from")
+  const to = url.searchParams.get("to")
+  if (!from || !to) return json({ error: "from et to requis (lat,lon)" }, 400)
+
+  const [fromLat, fromLon] = from.split(",").map(Number) as [number, number]
+  const [toLat, toLon] = to.split(",").map(Number) as [number, number]
+  if (isNaN(fromLat) || isNaN(fromLon) || isNaN(toLat) || isNaN(toLon)) {
+    return json({ error: "coordonnées invalides" }, 400)
+  }
+
+  const key = cacheKey("route", `${from}|${to}`)
+  const cached = getCached(key, CACHE_TTL_ROUTE)
+  if (cached) {
+    return new Response(cached.body, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  }
+
+  const target = `${OSRM}/${fromLon},${fromLat};${toLon},${toLat}?overview=full&geometries=geojson&steps=true&annotations=true`
+  try {
+    const body = await fetchText(target)
+    const j = JSON.parse(body)
+    if (j.code !== "Ok" || !j.routes?.length) {
+      return json({ error: "itinéraire introuvable" }, 404)
+    }
+    const route = j.routes[0]
+    const steps: unknown[] = []
+    for (const leg of route.legs || []) {
+      for (const st of leg.steps || []) {
+        const man = st.maneuver || {}
+        steps.push({
+          type: man.type || null,
+          modifier: man.modifier || null,
+          name: st.name || "",
+          distance: st.distance || 0,
+          duration: st.duration || 0,
+          instruction: st.maneuver?.instruction || st.instruction || null,
+          location: man.location ? [man.location[1], man.location[0]] : null,
+        })
+      }
+    }
+    const out = JSON.stringify({
+      distance_km: (route.distance / 1000).toFixed(1),
+      duration_min: Math.round(route.duration / 60),
+      geometry: route.geometry,
+      summary: route.legs?.[0]?.summary || null,
+      steps,
+      speeds: snapSpeeds(route.geometry?.coordinates || []),
+    })
+    setCached(key, out, "application/json")
+    return new Response(out, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  } catch (e: any) {
+    return json({ error: "proxy: " + (e?.message ?? "erreur") }, 502)
+  }
+}
+
+async function handleMaxSpeed(req: Request, url: URL): Promise<Response> {
+  const lat = url.searchParams.get("lat")
+  const lon = url.searchParams.get("lon")
+  if (!lat || !lon || isNaN(Number(lat)) || isNaN(Number(lon))) {
+    return json({ error: "lat et lon requis" }, 400)
+  }
+  const key = cacheKey("maxspeed", `${lat}|${lon}`)
+  const cached = getCached(key, 5 * 60 * 1000)
+  if (cached) {
+    return new Response(cached.body, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  }
+
+  const query = `
+    [out:json][timeout:15];
+    (
+      way["highway"]["maxspeed"](around:40,${lat},${lon});
+    );
+    out tags center;
+    out center;`
+  try {
+    const raw = await queryOverpass(query)
+    const j = JSON.parse(raw)
+    let best: number | null = null
+    let bestDist = Infinity
+    for (const el of j.elements || []) {
+      const ms = el.tags?.maxspeed
+      if (!ms) continue
+      const n = parseSpeed(ms)
+      if (n == null) continue
+      const c = el.center || el
+      if (c.lat == null) continue
+      const d = Math.hypot(c.lat - Number(lat), c.lon - Number(lon))
+      if (d < bestDist) {
+        bestDist = d
+        best = n
+      }
+    }
+    const out = JSON.stringify({ maxspeed: best })
+    setCached(key, out, "application/json")
+    return new Response(out, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  } catch (e: any) {
+    return json({ error: "proxy: " + (e?.message ?? "erreur") }, 502)
+  }
+}
+
+async function handleMaxSpeeds(req: Request, url: URL): Promise<Response> {
+  const pointsRaw = url.searchParams.get("points")
+  if (!pointsRaw) return json({ error: "points requis (lat,lon;lat,lon;…)" }, 400)
+  const points: { lat: number; lon: number; key: string }[] = []
+  for (const p of pointsRaw.split(";")) {
+    const [la, lo] = p.split(",").map(Number)
+    if (la === undefined || lo === undefined || isNaN(la) || isNaN(lo)) continue
+    points.push({ lat: la, lon: lo, key: p })
+  }
+  if (points.length === 0) return json({ error: "points invalides" }, 400)
+  if (points.length > 150) points.length = 150
+
+  const key = cacheKey("maxspeeds", pointsRaw)
+  const cached = getCached(key, 10 * 60 * 1000)
+  if (cached) {
+    return new Response(cached.body, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  }
+
+  const arounds = points.map((p) => `way["highway"]["maxspeed"](around:40,${p.lat},${p.lon});`).join("\n")
+  const query = `[out:json][timeout:25];\n(\n${arounds}\n);\nout tags center;`
+  try {
+    const raw = await queryOverpass(query)
+    const j = JSON.parse(raw)
+    const result: Record<string, number> = {}
+    const ways: { lat: number; lon: number; kmh: number }[] = []
+    for (const el of j.elements || []) {
+      const ms = el.tags?.maxspeed
+      if (!ms) continue
+      const n = parseSpeed(ms)
+      if (n == null) continue
+      const c = el.center || el
+      if (c.lat == null || c.lon == null) continue
+      ways.push({ lat: c.lat, lon: c.lon, kmh: n })
+    }
+    for (const p of points) {
+      let best: number | null = null
+      let bestD = Infinity
+      for (const w of ways) {
+        const d = Math.hypot(w.lat - p.lat, w.lon - p.lon)
+        if (d < bestD) {
+          bestD = d
+          best = w.kmh
+        }
+      }
+      if (best != null && bestD < 0.1) result[p.key] = best
+    }
+    const out = JSON.stringify({ limits: result })
+    setCached(key, out, "application/json")
+    return new Response(out, {
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+    })
+  } catch (e: any) {
+    return json({ error: "proxy: " + (e?.message ?? "erreur") }, 502)
+  }
+}
+
+function parseSpeed(v: string): number | null {
+  const m = /(\d+)\s*(mph)?/.exec(v)
+  if (!m) return null
+  return m[2] === "mph" ? Math.round(parseInt(m[1]!) * 1.609) : +(m[1]!)
+}
+
+export async function handleZMapRoute(req: Request, url: URL): Promise<Response | null> {
+  if (!url.pathname.startsWith("/api/zmap/")) return null
+
+  const ip = clientIp(req)
+  if (!checkRateLimit(ip)) {
+    return json({ error: "trop de requêtes", retryAfter: 60 }, 429)
+  }
+
+  const p = url.pathname.replace("/api/zmap/", "")
+  try {
+    switch (p) {
+      case "stations":
+        return await handleStations(req, url)
+      case "search":
+        return await handleSearch(req, url)
+      case "route":
+        return await handleRoute(req, url)
+      case "maxspeed":
+        return await handleMaxSpeed(req, url)
+      case "maxspeeds":
+        return await handleMaxSpeeds(req, url)
+      case "ping":
+        return json({ ok: true, v: "0.1.0" })
+      default:
+        return json({ error: "endpoint inconnu" }, 404)
+    }
+  } catch (e: any) {
+    return json({ error: "proxy: " + (e?.message ?? "erreur") }, 500)
+  }
+}
+
+export function clearZMapCache() {
+  cache.clear()
+}
diff --git a/src/zmap-maxspeed.ts b/src/zmap-maxspeed.ts
new file mode 100644
index 0000000..4cd3d7a
--- /dev/null
+++ b/src/zmap-maxspeed.ts
@@ -0,0 +1,109 @@
+import { readFileSync, existsSync } from "node:fs"
+import { gunzipSync } from "node:zlib"
+
+const CELL = 0.5
+const SUB = 32
+const MAX_DIST = 40.0
+
+let GRID_DIR = process.env.ZMAP_MAXSPEED_DIR || ""
+let index: Record<string, { x: number; y: number; count: number }> | null = null
+const cells = new Map<string, { off: Int32Array; data: Buffer }>()
+
+export function setMaxspeedDir(dir: string) {
+  GRID_DIR = dir
+  index = null
+  cells.clear()
+}
+
+function loadIndex() {
+  if (!GRID_DIR) return null
+  if (!index) {
+    const f = `${GRID_DIR}/index.json`
+    if (!existsSync(f)) return null
+    index = JSON.parse(readFileSync(f, "utf8"))
+  }
+  return index
+}
+
+function loadCell(x: number, y: number): { off: Int32Array; data: Buffer } | null {
+  const key = `${x}_${y}`
+  const hit = cells.get(key)
+  if (hit) return hit
+  if (!GRID_DIR) return null
+  const f = `${GRID_DIR}/${key}.bin.gz`
+  if (!existsSync(f)) return null
+  try {
+    const raw = gunzipSync(readFileSync(f))
+    const off = new Int32Array(raw.buffer, raw.byteOffset + 4, SUB * SUB)
+    const data = raw.subarray(4 + SUB * SUB * 4)
+    const c = { off, data }
+    cells.set(key, c)
+    if (cells.size > 200) cells.delete(cells.keys().next().value!)
+    return c
+  } catch {
+    return null
+  }
+}
+
+function snapCell(cell: { off: Int32Array; data: Buffer }, cx: number, cy: number, lat: number, lon: number): number | null {
+  const lonq = Math.round(((lon - cx * CELL) / CELL) * 65535)
+  const latq = Math.round(((lat - cy * CELL) / CELL) * 65535)
+  if (lonq < 0 || lonq > 65535 || latq < 0 || latq > 65535) return null
+  const sx = Math.min(SUB - 1, Math.floor((lonq * SUB) / 65536))
+  const sy = Math.min(SUB - 1, Math.floor((latq * SUB) / 65536))
+  let best: number | null = null
+  let bestD2 = Infinity
+  const cosLat = Math.cos((lat * Math.PI) / 180)
+  for (let dy = -1; dy <= 1; dy++) {
+    for (let dx = -1; dx <= 1; dx++) {
+      const sxx = sx + dx
+      const syy = sy + dy
+      if (sxx < 0 || syy < 0 || sxx >= SUB || syy >= SUB) continue
+      const sub = sxx + syy * SUB
+      const start = cell.off[sub]!
+      const end = sub + 1 < SUB * SUB ? cell.off[sub + 1]! : (cell.data.length / 5)
+      for (let i = start; i < end; i++) {
+        const base = i * 5
+        const plon = cx * CELL + (cell.data.readUInt16LE(base) / 65535) * CELL
+        const plat = cy * CELL + (cell.data.readUInt16LE(base + 2) / 65535) * CELL
+        const dlonp = (lon - plon) * 111320 * cosLat
+        const dlatp = (lat - plat) * 110540
+        const d2 = dlonp * dlonp + dlatp * dlatp
+        if (d2 < bestD2) {
+          bestD2 = d2
+          best = cell.data.readUInt8(base + 4)
+        }
+      }
+    }
+  }
+  if (bestD2 > MAX_DIST * MAX_DIST) return null
+  return best
+}
+
+export function snapSpeeds(coords: [number, number][]): (number | null)[] {
+  const idx = loadIndex()
+  if (!idx) return coords.map(() => null)
+  const byCell = new Map<string, { x: number; y: number; indices: number[] }>()
+  for (let i = 0; i < coords.length; i++) {
+    const [lon, lat] = coords[i]!
+    const x = Math.floor(lon / CELL)
+    const y = Math.floor(lat / CELL)
+    const k = `${x}_${y}`
+    let entry = byCell.get(k)
+    if (!entry) {
+      entry = { x, y, indices: [] }
+      byCell.set(k, entry)
+    }
+    entry.indices.push(i)
+  }
+  const out: (number | null)[] = new Array(coords.length).fill(null)
+  for (const { x, y, indices } of byCell.values()) {
+    const cell = loadCell(x, y)
+    if (!cell) continue
+    for (const i of indices) {
+    const [lon, lat] = coords[i]!
+      out[i] = snapCell(cell, x, y, lat, lon)
+    }
+  }
+  return out
+}
diff --git a/src/zmap-ws.ts b/src/zmap-ws.ts
new file mode 100644
index 0000000..4219240
--- /dev/null
+++ b/src/zmap-ws.ts
@@ -0,0 +1,52 @@
+import type { ServerWebSocket } from "bun"
+
+const clients = new Set<ServerWebSocket<unknown>>()
+
+export function zmapWsHandler(ws: ServerWebSocket<unknown>) {
+  clients.add(ws)
+  ws.send(JSON.stringify({ type: "hello", v: "0.3.0", ts: Date.now() }))
+}
+
+export function zmapWsMessage(ws: ServerWebSocket<unknown>, raw: string | Buffer) {
+  const msg = raw.toString()
+  try {
+    const j = JSON.parse(msg)
+    if (j?.type === "ping") {
+      ws.send(JSON.stringify({ type: "pong", ts: Date.now() }))
+      return
+    }
+    ws.send(JSON.stringify({ type: "ack", ts: Date.now() }))
+  } catch {
+    ws.send(JSON.stringify({ type: "error", error: "json invalide" }))
+  }
+}
+
+export function zmapWsClose(ws: ServerWebSocket<unknown>) {
+  clients.delete(ws)
+}
+
+export function zmapBroadcast(payload: unknown) {
+  const data = JSON.stringify(payload)
+  for (const ws of clients) {
+    try {
+      ws.send(data)
+    } catch {
+    }
+  }
+}
+
+export function zmapWsKeepAlive() {
+  setInterval(() => {
+    const now = Date.now()
+    for (const ws of clients) {
+      try {
+        ws.send(JSON.stringify({ type: "ping", ts: now }))
+      } catch {
+      }
+    }
+  }, 25_000)
+}
+
+export function zmapWsCount(): number {
+  return clients.size
+}
diff --git a/tsconfig.json b/tsconfig.json
new file mode 100644
index 0000000..09e32de
--- /dev/null
+++ b/tsconfig.json
@@ -0,0 +1,29 @@
+{
+  "compilerOptions": {
+    // Environment setup & latest features
+    "lib": ["ESNext"],
+    "target": "ESNext",
+    "module": "Preserve",
+    "moduleDetection": "force",
+    "allowJs": true,
+    "types": ["bun"],
+
+    // Bundler mode
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "noEmit": true,
+
+    // Best practices
+    "strict": true,
+    "skipLibCheck": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+
+    // Some stricter flags (disabled by default)
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noPropertyAccessFromIndexSignature": false
+  }
+}