hotfix: Singler player now plays fine

Reviewed-on: https://gitea.fernandovideira.com/SyntaxSquad/DADProject/pulls/99
Reviewed-by: KZix <[email protected]>
Reviewed-by: Edd <[email protected]>
Reviewed-by: FernandoJVideira <[email protected]>

.gitignore

@@ -80,6 +80,7 @@ frontend/.env.*.local
 # Websockets: NodeJs (in websockets)
 # -------------------------
 /websockets/node_modules/
+/websockets/.env
 # -------------------------
 # Other useful ignores
 # -------------------------
@@ -99,3 +100,9 @@ Desktop.ini
 
 # If you have any local secrets or files not to track, add them here:
 # /path/to/some/file
+
+/frontend/package-lock.json
+/websockets/package-lock.json
+/api/package-lock.json
+
+.vscode

.vscode/settings.json

@@ -1,3 +0,0 @@
-{
-    "postman.settings.dotenv-detection-notification-visibility": false
-}

api/.gitignore

@@ -22,3 +22,5 @@
 Homestead.json
 Homestead.yaml
 Thumbs.db
+
+composer.lock

api/app/Http/Controllers/AuthController.php

@@ -2,11 +2,11 @@
 
 namespace App\Http\Controllers;
 
+use App\Http\Requests\RegisterRequest;
+use App\Models\User;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
 use Illuminate\Validation\ValidationException;
-use App\Models\User;
-use App\Http\Requests\RegisterRequest;
 
 class AuthController extends Controller
 {
@@ -24,6 +24,13 @@ class AuthController extends Controller
         }
 
         $user = Auth::user();
+
+        if ($user->blocked) {
+            Auth::logout();
+
+            return response()->json(['message' => 'Your account is blocked. Please contact support.'], 403);
+        }
+
         $token = $user->createToken('auth-token')->plainTextToken;
 
         return response()->json([
@@ -46,15 +53,27 @@ class AuthController extends Controller
         if (User::where('email', $request->email)->exists()) {
             return response()->json(['message' => 'Email already registered'], 409);
         }
+        
+        if (User::where('nickname', $request->nickname)->exists()) {
+            return response()->json(['message' => 'Nickname already registered'], 409);
+        }
+
+        $avatarFilename = null;
+
+        if ($request->hasFile('photo_avatar_filename')) {
+            $file = $request->file('photo_avatar_filename');
+            $path = $file->store('photos_avatars', 'public');
+            $avatarFilename = basename($path);
+        }
 
         $user = User::create([
             'email' => $request->email,
             'nickname' => $request->nickname,
             'name' => $request->name,
             'password' => bcrypt($request->password),
-            'photo_avatar_filename' => $request->photo,
+            'photo_avatar_filename' => $avatarFilename,
-            'type' => 'P', 
+            'type' => 'P',
-            'blocked' => false, 
+            'blocked' => false,
             'coins_balance' => 10,
         ]);
 

api/app/Http/Controllers/CoinPurchaseController.php

@@ -0,0 +1,76 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Controllers\Controller;
+use App\Models\CoinPurchase;
+use App\Models\CoinTransaction;
+use App\Models\CoinTransactionType;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+
+class CoinPurchaseController extends Controller
+{
+    public function store(Request $request)
+    {
+        $validated = $request->validate([
+            'euros' => 'required|numeric|min:1|max:100',
+            'payment_type' => 'required|in:MBWAY,MB,VISA,PAYPAL',
+            'payment_reference' => [
+                'required',
+                function ($attribute, $value, $fail) use ($request) {
+                    $type = $request->payment_type;
+                    $regex = null;
+
+                    switch ($type) {
+                        case 'MBWAY': $regex = '/^9[0-9]{8}$/'; break;
+                        case 'MB':    $regex = '/^[0-9]{5}-[0-9]{9}$/'; break;
+                        case 'VISA':  $regex = '/^4[0-9]{15}$/'; break;
+                        case 'PAYPAL':
+                            if (!filter_var($value, FILTER_VALIDATE_EMAIL)) {
+                                $fail("Invalid PayPal email.");
+                            }
+                            return;
+                    }
+
+                    if ($regex && !preg_match($regex, $value)) {
+                        $fail("Invalid format for $type.");
+                    }
+                },
+            ],
+        ]);
+
+        $user = $request->user();
+        $coinsAmount = $validated['euros'] * 10; 
+
+        return DB::transaction(function () use ($user, $validated, $coinsAmount) {
+            
+            $type = CoinTransactionType::firstOrCreate(['name' => 'Coin purchase'], ['type' => 'C']);
+
+            $transaction = CoinTransaction::create([
+                'user_id' => $user->id,
+                'coin_transaction_type_id' => $type->id,
+                'transaction_datetime' => now(),
+                'coins' => $coinsAmount,
+            ]);
+
+            $purchase = CoinPurchase::create([
+                'purchase_datetime' => now(),
+                'user_id' => $user->id,
+                'coin_transaction_id' => $transaction->id,
+                'euros' => $validated['euros'],
+                'payment_type' => $validated['payment_type'],
+                'payment_reference' => $validated['payment_reference'],
+            ]);
+
+            $user->increment('coins_balance', $coinsAmount);
+
+            return response()->json([
+                'message' => 'Purchase successful',
+                'balance' => $user->coins_balance,
+                'transaction_id' => $transaction->id,
+                'purchase' => $purchase,
+            ], 201);
+        });
+    }
+}

api/app/Http/Controllers/Controller.php

@@ -2,7 +2,10 @@
 
 namespace App\Http\Controllers;
 
-abstract class Controller
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use Illuminate\Routing\Controller as BaseController;
+
+abstract class Controller extends BaseController
 {
-    //
+    use AuthorizesRequests;
 }

api/app/Http/Controllers/GameController.php

@@ -4,135 +4,259 @@ namespace App\Http\Controllers;
 
 use App\Models\Game;
 use Illuminate\Http\Request;
-use App\Http\Requests\StoreGameRequest;
 use Illuminate\Support\Facades\Auth;
-use App\Models\MatchGame;
 
 class GameController extends Controller
 {
+    const GHOST_ID = 1;
+
     public function index(Request $request)
     {
-        $query = Game::query()->with(['winner', 'player1', 'player2']);
+        $this->authorize('viewAny', Game::class);
 
-        if ($request->has('type') && in_array($request->type, ['3', '9'])) {
+        $user = Auth::user();
-            $query->where('type', $request->type);
+        $query = Game::query()->with(["winner", "player1", "player2"]);
+
+        // Se não for Admin, mostra apenas os jogos do utilizador
+        if ($user->type !== 'A') {
+            $query->where(function ($q) use ($user) {
+                $q->where('player1_user_id', $user->id)
+                  ->orWhere('player2_user_id', $user->id);
+            });
         }
 
-        if ($request->has('status') && in_array($request->status, ['Pending', 'Playing', 'Ended', 'Interrupted'])) {
+        if ($request->has("type") && in_array($request->type, ["3", "9"])) {
-            $query->where('status', $request->status);
+            $query->where("type", $request->type);
         }
 
-        $query->orderBy('began_at', 'desc');
+        if (
+            $request->has("status") &&
+            in_array($request->status, [
+                "Pending",
+                "Playing",
+                "Ended",
+                "Interrupted",
+            ])
+        ) {
+            $query->where("status", $request->status);
+        }
+
+        if ($request->has("sort_direction") && in_array($request->sort_direction, ["asc", "desc"])) {
+            $query->orderBy("began_at", $request->sort_direction);
+        } else {
+            $query->orderBy("began_at", "desc");
+        }
 
         return response()->json($query->paginate(15));
     }
 
-    public function store(Request $request)
+    // --- MÉTODOS ADICIONADOS ---
+
+    // Host a new multiplayer Game
+    public function host(Request $request)
     {
-        $validated = $request->validate([
+        $request->validate([
-            'type' => 'required|in:3,9',
+            'type' => 'required|in:3,9'
         ]);
 
-        $user = Auth::user();
+        $user = $request->user();
-
-        $activeMatch = MatchGame::where(function ($q) use ($user) {
-            $q->where('player1_user_id', $user->id)
-              ->orWhere('player2_user_id', $user->id);
-        })->whereIn('status', ['Pending', 'Playing'])->exists();
 
+        // Check for active game
         $activeGame = Game::where(function ($q) use ($user) {
-            $q->where('player1_user_id', $user->id)
+             $q->where("player1_user_id", $user->id)
-              ->orWhere('player2_user_id', $user->id);
+               ->orWhere("player2_user_id", $user->id);
-        })->whereIn('status', ['Pending', 'Playing'])->exists();
-
-        if ($activeMatch || $activeGame) {
-            return response()->json(['message' => 'You already have an active game or match.'], 400);
-        }
-
-        $game = Game::create([
-            'type' => $validated['type'],
-            'status' => 'Pending',
-            'player1_user_id' => $user->id,
-            'player2_user_id' => $user->id, 
-            'winner_user_id' => $user->id,  
-            'loser_user_id' => $user->id,   
-            'began_at' => now(),
-            'player1_points' => 0,
-            'player2_points' => 0,
-            'custom' => null
-        ]);
-
-        return response()->json([
-            'message' => 'Multiplayer game room created',
-            'game' => $game
-        ], 201);
-    }
-
-    public function join(Game $game)
-    {
-        $user = Auth::user();
-
-        if ($game->player1_user_id == $user->id) {
-            return response()->json([
-                'message' => 'Waiting for opponent...',
-                'game' => $game
-            ], 200);
-        }
-
-        if ($game->status !== 'Pending') {
-            return response()->json(['message' => 'Game is full or already started'], 400);
-        }
-
-        $activeGame = Game::where(function ($query) use ($user) {
-            $query->where('player1_user_id', $user->id)
-                  ->orWhere('player2_user_id', $user->id);
         })
-        ->whereIn('status', ['Pending', 'Playing'])
+        ->whereIn("status", ["Pending", "Playing"])
         ->exists();
 
         if ($activeGame) {
-            return response()->json(['message' => 'You are already in another active game.'], 400);
+             return response()->json(["message" => "You already have an active game."], 400);
         }
 
-        $game->update([
+        $game = Game::create([
-            'status' => 'Playing',
+            'type' => $request->type,
-            'player2_user_id' => $user->id,
+            'status' => 'Pending',
+            'player1_user_id' => $user->id,
+            'player2_user_id' => self::GHOST_ID, // Ghost ID = 1 (Waiting for player)
+            'began_at' => now(),
+            'player1_points' => 0,
+            'player2_points' => 0,
+        ]);
+
+        return response()->json($game, 201);
+    }
+
+    // List open games (Available to join)
+    public function open(Request $request)
+    {
+        $type = $request->query('type', '9');
+        $GHOST_ID = 1;
+
+        $games = Game::where('status', 'Pending')
+            ->where('player2_user_id', $GHOST_ID) // Games waiting for P2
+            ->where('type', $type)
+            ->with('player1')
+            ->orderBy('began_at', 'asc')
+            ->paginate(10);
+
+        return response()->json($games);
+    }
+    // ---------------------------
+
+    public function store(Request $request)
+    {
+        $this->authorize('create', Game::class);
+
+        $validated = $request->validate([
+            "type" => "required|in:3,9",
+            "player2_user_id" => "nullable|integer|exists:users,id",
+            "match_id" => "nullable|integer|exists:matches,id",
+            "status" => "nullable|in:Pending,Playing",
+            "began_at" => "nullable|date"
+        ]);
+
+        $user = Auth::user();
+
+        $activeGame = Game::where(function ($q) use ($user) {
+             $q->where("player1_user_id", $user->id)
+               ->orWhere("player2_user_id", $user->id);
+        })
+        ->whereIn("status", ["Pending", "Playing"])
+        ->exists();
+
+        if ($activeGame) {
+             return response()->json(["message" => "You already have an active game."], 400);
+        }
+
+        $player2Id = $request->input('player2_user_id', self::GHOST_ID);
+
+        $initialStatus = $request->input('status', 'Pending');
+
+        // If specific player 2 is provided, auto-start game
+        if ($player2Id !== self::GHOST_ID && !$request->has('status')) {
+            $initialStatus = 'Playing';
+        }
+
+        $game = Game::create([
+            "type" => $validated["type"],
+            "status" => $initialStatus,
+            "player1_user_id" => $user->id,
+            "player2_user_id" => $player2Id,
+            "winner_user_id" => null,
+            "loser_user_id" => null,
+            "match_id" => $request->input('match_id', null),
+            "began_at" => $request->input('began_at', now()),
+            "player1_points" => 0,
+            "player2_points" => 0,
+            "custom" => null,
         ]);
 
         return response()->json([
-            'message' => 'Joined successfully! Game starts now.',
+            "message" => "Game created",
-            'game' => $game
+            "game" => $game,
-        ], 200);
+        ], 201);
+    }
+
+    public function join(Request $request, Game $game)
+    {
+        // Prevent joining if already full or started
+        if ($game->status !== 'Pending' || $game->player2_user_id !== self::GHOST_ID) {
+            return response()->json(['message' => 'Game is not available'], 400);
+        }
+
+        // Prevent joining your own game
+        if ($game->player1_user_id === $request->user()->id) {
+            return response()->json(['message' => 'Cannot join your own game'], 400);
+        }
+
+        // Check if joining user has another active game
+        $activeGame = Game::where(function ($q) use ($request) {
+             $q->where("player1_user_id", $request->user()->id)
+               ->orWhere("player2_user_id", $request->user()->id);
+        })
+        ->whereIn("status", ["Pending", "Playing"])
+        ->exists();
+
+        if ($activeGame) {
+             return response()->json(["message" => "You already have an active game."], 400);
+        }
+
+        $game->update([
+            'player2_user_id' => $request->user()->id,
+            'status' => 'Playing',
+        ]);
+
+        return response()->json($game);
     }
 
     public function show(Game $game)
     {
-        $game->load(['player1', 'player2', 'winner']);
+        $this->authorize('view', $game);
+
+        $game->load(["player1", "player2", "winner"]);
         return response()->json($game);
     }
 
     public function update(Request $request, Game $game)
     {
-        if ($game->status == 'Ended') {
+        $this->authorize('update', $game);
-            return response()->json(['message' => 'Game already ended'], 400);
+
+        if ($game->status == "Ended") {
+            return response()->json(["message" => "Game already ended"], 400);
         }
 
         $data = $request->validate([
-            'status' => 'in:Playing,Ended,Interrupted',
+            "status" => "in:Playing,Ended,Interrupted",
-            'winner_user_id' => 'exists:users,id', 
+            "winner_user_id" => "exists:users,id",
-            'loser_user_id' => 'exists:users,id',
+            "loser_user_id" => "exists:users,id",
-            'player1_points' => 'integer',
+            "player1_points" => "integer",
-            'player2_points' => 'integer',
+            "player2_points" => "integer",
-            'is_draw' => 'boolean',
+            "is_draw" => "boolean",
-            'total_time' => 'numeric'
+            "total_time" => "numeric",
         ]);
 
-        if (isset($data['status']) && $data['status'] === 'Ended') {
+        if (isset($data["status"]) && $data["status"] === "Ended") {
-            $data['ended_at'] = now();
+            $data["ended_at"] = now();
         }
 
         $game->update($data);
 
         return response()->json($game);
     }
-}
+
+    public function resign(Game $game)
+    {
+        $this->authorize('resign', $game);
+
+        $user = Auth::user();
+
+        $game->update([
+            'status' => 'Ended',
+            'winner_user_id' => $game->player1_user_id === $user->id
+                ? $game->player2_user_id
+                : $game->player1_user_id,
+            'loser_user_id' => $user->id,
+            'ended_at' => now(),
+        ]);
+
+        return response()->json([
+            'message' => 'You have resigned from the game',
+            'game' => $game->fresh(),
+        ]);
+    }
+
+    public function destroy(Game $game)
+    {
+        // Ensure only the host can delete, and ONLY if it's still Pending
+        if ($game->player1_user_id !== auth()->id()) {
+            return response()->json(['message' => 'Unauthorized'], 403);
+        }
+
+        if ($game->status !== 'Pending') {
+            return response()->json(['message' => 'Cannot delete a game in progress'], 400);
+        }
+
+        $game->delete();
+        return response()->noContent();
+    }
+}

api/app/Http/Controllers/MatchController.php

@@ -3,26 +3,36 @@
 namespace App\Http\Controllers;
 
 use App\Models\MatchGame;
-use App\Models\Game;
+use App\Models\CoinTransaction;
+use App\Models\CoinTransactionType;
 use Illuminate\Http\Request;
 use App\Http\Requests\StoreMatchRequest;
-use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\DB;
 
 class MatchController extends Controller
 {
     public function index(Request $request)
     {
-        $query = MatchGame::query()->with(['winner', 'player1', 'player2']);
+        $query = MatchGame::query()->with(["winner", "player1", "player2"]);
 
-        if ($request->has('type')) {
+        if ($request->has("type")) {
-            $query->where('type', $request->type);
+            $query->where("type", $request->type);
         }
 
-        if ($request->has('status')) {
+        if ($request->has("status")) {
-            $query->where('status', $request->status);
+            $query->where("status", $request->status);
         }
 
-        $query->orderBy('began_at', 'desc');
+        if ($request->has("pot") && in_array($request->pot, ["asc", "desc"])) {
+            $query->orderBy("stake", $request->pot);
+        } elseif (
+            $request->has("sort_direction") &&
+            in_array($request->sort_direction, ["asc", "desc"])
+        ) {
+            $query->orderBy("began_at", $request->sort_direction);
+        } else {
+            $query->orderBy("began_at", "desc");
+        }
 
         return response()->json($query->paginate(15));
     }
@@ -30,105 +40,334 @@ class MatchController extends Controller
     public function store(StoreMatchRequest $request)
     {
         $validated = $request->validated();
-        $user = Auth::user();
+        $user = $request->user();
+        $stake = $validated['stake'];
 
-        $activeMatch = MatchGame::where(function ($q) use ($user) {
+        if ($user->coins_balance < $stake) {
-            $q->where('player1_user_id', $user->id)
+            return response()->json(
-              ->orWhere('player2_user_id', $user->id);
+                ["message" => "Insufficient coin balance"],
-        })->whereIn('status', ['Pending', 'Playing'])->exists();
+                400,
-
+            );
-        $activeGame = Game::where(function ($q) use ($user) {
-            $q->where('player1_user_id', $user->id)
-              ->orWhere('player2_user_id', $user->id);
-        })->whereIn('status', ['Pending', 'Playing'])->exists();
-
-        if ($activeMatch || $activeGame) {
-            return response()->json(['message' => 'You already have an active game or match.'], 400);
         }
 
-        $match = MatchGame::create([
+        $activeMatch = MatchGame::where(function ($q) use ($user) {
-            'type' => $validated['type'],
+            $q->where("player1_user_id", $user->id)->orWhere(
-            'status' => 'Pending',
+                "player2_user_id",
-            'player1_user_id' => $user->id,
+                $user->id,
-            'player2_user_id' => $user->id,
+            );
-            'winner_user_id' => $user->id,
+        })
-            'loser_user_id' => $user->id,
+            ->whereIn("status", ["Pending", "Playing"])
-            'stake' => $validated['stake'],
+            ->exists();
-            'began_at' => now(),
-            'player1_marks' => 0,
-            'player2_marks' => 0,
-            'player1_points' => 0,
-            'player2_points' => 0,
-            'custom' => null
-        ]);
 
-        return response()->json([
+        if ($activeMatch) {
-            'message' => 'Match created successfully',
+            return response()->json(['message' => 'You already have an active match.'], 400);
-            'match' => $match
+        }
-        ], 201);
+
+        return DB::transaction(function () use ($validated, $user, $stake) {
+            $GHOST_ID = 1;
+
+            $user->decrement("coins_balance", $stake);
+
+            $stakeType = CoinTransactionType::firstOrCreate(
+                ["name" => "Match stake"],
+                ["type" => "D"], // Debit
+            );
+
+            $match = MatchGame::create([
+                "type" => $validated["type"],
+                "status" => "Pending",
+                "player1_user_id" => $user->id,
+                "player2_user_id" => $GHOST_ID,
+                "winner_user_id" => $GHOST_ID,
+                "loser_user_id" => $GHOST_ID,
+                "stake" => $stake,
+                "began_at" => now(),
+                "player1_marks" => 0,
+                "player2_marks" => 0,
+                "player1_points" => 0,
+                "player2_points" => 0,
+            ]);
+
+            CoinTransaction::create([
+                "user_id" => $user->id,
+                "match_id" => $match->id,
+                "coin_transaction_type_id" => $stakeType->id,
+                "transaction_datetime" => now(),
+                "coins" => -$stake,
+            ]);
+
+            return response()->json(
+                [
+                    "message" => "Match created successfully",
+                    "match" => $match,
+                    "balance" => $user->coins_balance,
+                ],
+                201,
+            );
+        });
     }
 
     public function show(MatchGame $match)
     {
-        $match->load(['player1', 'player2', 'winner']);
+        $match->load(["player1", "player2", "winner"]);
         return response()->json($match);
     }
 
     public function join(MatchGame $match)
     {
-        $user = Auth::user();
+        $user = request()->user();
 
         if ($match->player1_user_id == $user->id) {
-            return response()->json(['message' => 'Waiting for opponent...', 'match' => $match]);
+            return response()->json(
+                ["message" => "You cannot join your own match"],
+                400,
+            );
+        }
+        if ($match->status !== "Pending") {
+            return response()->json(
+                ["message" => "Match is full or started"],
+                400,
+            );
         }
 
-        if ($match->status !== 'Pending') {
+        if ($user->coins_balance < $match->stake) {
-            return response()->json(['message' => 'Match is full or started'], 400);
+            return response()->json(
+                ["message" => "Insufficient coin balance to join this match"],
+                400,
+            );
         }
 
         $activeMatch = MatchGame::where(function ($q) use ($user) {
-            $q->where('player1_user_id', $user->id)
+            $q->where("player1_user_id", $user->id)->orWhere(
-              ->orWhere('player2_user_id', $user->id);
+                "player2_user_id",
-        })->whereIn('status', ['Pending', 'Playing'])->exists();
+                $user->id,
+            );
+        })
+            ->whereIn("status", ["Pending", "Playing"])
+            ->exists();
 
         if ($activeMatch) {
-             return response()->json(['message' => 'You are already in another active match.'], 400);
+            return response()->json(
+                ["message" => "You are already in another active match."],
+                400,
+            );
         }
 
-        $match->update([
+        return DB::transaction(function () use ($match, $user) {
-            'status' => 'Playing',
+            $user->decrement("coins_balance", $match->stake);
-            'player2_user_id' => $user->id
-        ]);
 
-        return response()->json([
+            $stakeType = CoinTransactionType::firstOrCreate(
-            'message' => 'Joined match successfully!',
+                ["name" => "Match stake"],
-            'match' => $match
+                ["type" => "D"],
-        ]);
+            );
+
+            CoinTransaction::create([
+                'user_id' => $user->id,
+                'match_id' => $match->id,
+                'coin_transaction_type_id' => $stakeType->id,
+                'transaction_datetime' => now(),
+                'coins' => -$match->stake,
+            ]);
+
+            $match->update([
+                "status" => "Playing",
+                "player2_user_id" => $user->id,
+            ]);
+
+            return response()->json([
+                "message" => "Joined match successfully!",
+                "match" => $match,
+                "balance" => $user->coins_balance,
+            ]);
+        });
     }
 
     public function update(Request $request, MatchGame $match)
     {
-        if ($match->status == 'Ended') {
+        if ($match->status == "Ended") {
-            return response()->json(['message' => 'Match already ended'], 400);
+            return response()->json(["message" => "Match already ended"], 400);
         }
 
         $data = $request->validate([
-            'status' => 'in:Playing,Ended,Interrupted',
+            "status" => "in:Playing,Ended,Interrupted",
-            'winner_user_id' => 'exists:users,id',
+            "winner_user_id" => "exists:users,id",
-            'loser_user_id' => 'exists:users,id',
+            "loser_user_id" => "exists:users,id",
-            'player1_marks' => 'integer',
+            "player1_marks" => "integer",
-            'player2_marks' => 'integer',
+            "player2_marks" => "integer",
-            'player1_points' => 'integer',
+            "player1_points" => "integer",
-            'player2_points' => 'integer',
+            "player2_points" => "integer",
-            'total_time' => 'numeric'
+            "total_time" => "numeric",
         ]);
 
-        if (isset($data['status']) && $data['status'] === 'Ended') {
+        return DB::transaction(function () use ($match, $data) {
-            $data['ended_at'] = now();
+            if (isset($data['status']) && $data['status'] === 'Ended') {
+                $data['ended_at'] = now();
+            }
+
+            $match->update($data);
+
+            if (
+                $match->status === "Ended" &&
+                $match->stake > 0 &&
+                $match->winner_user_id
+            ) {
+                $payoutType = CoinTransactionType::firstOrCreate(
+                    ["name" => "Match payout"],
+                    ["type" => "C"], // Credit
+                );
+
+                $totalPrize = $match->stake * 2;
+
+                CoinTransaction::create([
+                    "user_id" => $match->winner_user_id,
+                    "match_id" => $match->id,
+                    "coin_transaction_type_id" => $payoutType->id,
+                    "transaction_datetime" => now(),
+                    "coins" => $totalPrize,
+                ]);
+
+                $match->winner->increment("coins_balance", $totalPrize);
+            }
+
+            return response()->json($match);
+        });
+    }
+
+    public function host(Request $request)
+    {
+        $request->validate([
+            "type" => "required|in:3,9",
+            "stake" => "required|integer|min:0",
+        ]);
+
+        $user = $request->user();
+        $stake = $request->stake;
+
+        if ($user->coins_balance < $stake) {
+            return response()->json(
+                ["message" => "Insufficient coin balance"],
+                400,
+            );
         }
 
-        $match->update($data);
+        $activeMatch = MatchGame::where(function ($q) use ($user) {
+            $q->where("player1_user_id", $user->id)->orWhere(
+                "player2_user_id",
+                $user->id,
+            );
+        })
+            ->whereIn("status", ["Pending", "Playing"])
+            ->exists();
 
-        return response()->json($match);
+        if ($activeMatch) {
+            return response()->json(
+                ["message" => "You already have an active match."],
+                400,
+            );
+        }
+
+        return DB::transaction(function () use ($request, $user, $stake) {
+            $GHOST_ID = 1;
+
+            $user->decrement("coins_balance", $stake);
+
+            $stakeType = CoinTransactionType::firstOrCreate(
+                ["name" => "Match stake"],
+                ["type" => "D"], // Debit
+            );
+
+            $match = MatchGame::create([
+                'type' => $request->type,
+                'status' => 'Pending',
+                'player1_user_id' => $user->id,
+                'player2_user_id' => $GHOST_ID,
+                'winner_user_id' => null,
+                'loser_user_id' => null,
+                'stake' => $stake,
+                'began_at' => now(),
+                'player1_marks' => 0, 'player2_marks' => 0,
+                'player1_points' => 0, 'player2_points' => 0,
+
+            ]);
+
+            CoinTransaction::create([
+                "user_id" => $user->id,
+                "match_id" => $match->id,
+                "coin_transaction_type_id" => $stakeType->id,
+                "transaction_datetime" => now(),
+                "coins" => -$stake,
+            ]);
+
+            return response()->json($match, 201);
+        });
     }
-}
+
+    public function open(Request $request)
+    {
+        $query = MatchGame::where('status', 'Pending')
+            ->where(function($q) {
+                $q->whereNull('player2_user_id')
+                  ->orWhere('player2_user_id', 1); // 1 = Ghost ID
+            });
+
+        if ($request->has('type')) {
+            $query->where('type', $request->type);
+        }
+
+        $matches = $query->with('player1:id,nickname')
+            ->orderBy('began_at', 'desc')
+            ->paginate(10);
+
+        return response()->json($matches);
+    }
+
+    // --- FIX: Safely Delete Match by removing dependencies first ---
+    public function destroy(MatchGame $match)
+    {
+        $user = request()->user();
+
+        if ($match->player1_user_id !== $user->id) {
+            return response()->json(['message' => 'Unauthorized'], 403);
+        }
+
+        if ($match->status !== 'Pending') {
+            return response()->json(['message' => 'Cannot cancel a match that has already started'], 400);
+        }
+
+        return DB::transaction(function () use ($match, $user) {
+            // 1. Delete associated Games first (The FK constraint cause)
+            DB::table('games')->where('match_id', $match->id)->delete();
+
+            // 2. Unlink existing Coin Transactions (Set match_id to NULL)
+            CoinTransaction::where('match_id', $match->id)->update(['match_id' => null]);
+
+            // 3. Process Refund
+            if ($match->stake > 0) {
+                 $user->increment('coins_balance', $match->stake);
+
+                 $refundType = CoinTransactionType::firstOrCreate(
+                     ['name' => 'Refund'],
+                     ['type' => 'C']
+                 );
+
+                 // Create Refund Transaction with NO LINK to the deleted match
+                 CoinTransaction::create([
+                     'user_id' => $user->id,
+                     'match_id' => null, // IMPORTANT: Must be null
+                     'coin_transaction_type_id' => $refundType->id,
+                     'transaction_datetime' => now(),
+                     'coins' => $match->stake,
+                     'custom' => "Refund for Match #{$match->id}"
+                 ]);
+            }
+
+            // 4. Finally delete the match
+            $match->delete();
+
+            return response()->json([
+                'message' => 'Match canceled and refunded',
+                'balance' => $user->coins_balance
+            ]);
+        });
+    }
+}

api/app/Http/Controllers/ProfileController.php

@@ -0,0 +1,113 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+use App\Models\User;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Str;
+
+
+class ProfileController extends Controller
+{
+    public function show(Request $request)
+    {
+        $user = $request->user();
+
+        return response()->json($user);
+    }
+
+    public function update(Request $request)
+    {
+        $request->validate([
+            "name" => "required|string|max:255",
+            "nickname" =>
+                "required|string|max:255|unique:users,nickname," .
+                $request->user()->id,
+        ]);
+
+        $user = $request->user();
+        $user->name = $request->name;
+        $user->nickname = $request->nickname;
+        $user->save();
+
+        return response()->json($user);
+    }
+
+    public function destroy(User $user)
+    {
+        $currentUser = Auth::user();
+
+        if ($currentUser->id !== $user->id && $currentUser->type !== "A") {
+            return response()->json(["message" => "Unauthorized"], 403);
+        }
+
+        $user->delete();
+
+        return response()->json(["message" => "User deleted successfully"]);
+    }
+
+    public function updatePassword(Request $request)
+    {
+        $request->validate([
+            "current_password" => "required",
+            "new_password" => "required|min:8|confirmed",
+        ]);
+
+        $user = $request->user();
+
+        if (!Hash::check($request->current_password, $user->password)) {
+            return response()->json(
+                [
+                    "message" => "Current password is incorrect",
+                ],
+                422,
+            );
+        }
+
+        $user->password = Hash::make($request->new_password);
+        $user->save();
+
+        return response()->json([
+            "message" => "Password changed successfully",
+        ]);
+    }
+
+    public function getCoins(Request $request)
+    {
+        return response()->json([
+            'coins' => $request->user()->coins_balance
+        ]);
+    }
+
+    public function uploadAvatar(Request $request)
+    {
+        $request->validate([
+            "avatar" => "required|image|mimes:jpeg,png,jpg,gif|max:2048",
+        ]);
+
+        $user = $request->user();
+
+        if ($user->photo_avatar_filename) {
+            Storage::disk("public")->delete(
+                "photos_avatars/" . $user->photo_avatar_filename,
+            );
+        }
+
+        $file = $request->file("avatar");
+        $filename =
+            str_pad($user->id, 5, "0", STR_PAD_LEFT) .
+            "_" .
+            Str::random(10) .
+            "." .
+            $file->extension();
+        $file->storeAs("photos_avatars", $filename, "public");
+
+        $user->photo_avatar_filename = $filename;
+        $user->save();
+
+        return response()->json($user);
+    }
+}

api/app/Http/Controllers/StatisticsController.php

@@ -0,0 +1,136 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Controllers\Controller;
+use App\Models\Game;
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use App\Models\CoinTransaction;
+
+class StatisticsController extends Controller
+{
+    public function getPublicStats()
+    {
+        $totalPlayers = User::where('type', 'P')->count();
+
+        $totalGames = Game::where('status', 'Ended')->count();
+        $activeGames = Game::where('status', 'Playing')->count();
+
+        return response()->json([
+            'total_players' => $totalPlayers,
+            'total_games' => $totalGames,
+            'active_games' => $activeGames,
+        ]);
+    }
+
+    public function getLeaderboard(Request $request)
+    {
+        $type = $request->query('type');
+
+        $leaderboard = User::where('type', 'P')
+            ->withCount(['wonGames' => function ($query) use ($type) {
+                if ($type) {
+                    $query->where('type', $type);
+                }
+            }])
+            ->orderBy('won_games_count', 'desc')
+            ->paginate(10);
+
+        $leaderboard->through(function ($user) {
+            return [
+                'id' => $user->id,
+                'nickname' => $user->nickname,
+                'photo_avatar_filename' => $user->photo_avatar_filename,
+                'won_games_count' => $user->won_games_count,
+            ];
+        });
+
+        return response()->json($leaderboard);
+    }
+
+    public function getPersonalStats(Request $request)
+    {
+        $user = $request->user();
+
+        $totalGames = Game::where('status', 'Ended')
+            ->where(function ($q) use ($user) {
+                $q->where('player1_user_id', $user->id)
+                  ->orWhere('player2_user_id', $user->id);
+            })
+            ->count();
+
+        $totalWins = Game::where('status', 'Ended')
+            ->where('winner_user_id', $user->id)
+            ->count();
+
+        $totalLosses = $totalGames - $totalWins; // Simplest math
+
+        $winRate = 0;
+        if ($totalGames > 0) {
+            $winRate = round(($totalWins / $totalGames) * 100, 1);
+        }
+
+        return response()->json([
+            'nickname' => $user->nickname,
+            'total_games' => $totalGames,
+            'total_wins' => $totalWins,
+            'total_losses' => $totalLosses,
+            'win_rate' => $winRate . '%',
+            'current_balance' => $user->coins_balance, // Extra info
+        ]);
+    }
+
+    public function getAdminStats()
+    {
+        $totalPlayers = User::where('type', 'P')->count();
+        $totalGames = Game::count();
+        $totalBlockedUsers = User::where('blocked', true)->count();
+        
+        $gamesByType = Game::select('type', DB::raw('count(*) as total'))
+            ->groupBy('type')
+            ->get();
+
+
+        $gamesPerMonth = Game::select(
+                DB::raw("strftime('%Y-%m', began_at) as month"), 
+                DB::raw('count(*) as total')
+            )
+            ->whereNotNull('began_at')
+            ->groupBy('month')
+            ->orderBy('month', 'desc')
+            ->limit(12)
+            ->get();
+
+        $totalCoinsPurchased = \App\Models\CoinTransaction::whereHas('type', function($q) {
+                $q->where('name', 'Coin purchase');
+            })
+            ->sum('coins');
+
+        $purchasesPerMonth = \App\Models\CoinTransaction::join('coin_transaction_types', 'coin_transactions.coin_transaction_type_id', '=', 'coin_transaction_types.id')
+            ->where('coin_transaction_types.name', 'Coin purchase')
+            ->select(
+                DB::raw("strftime('%Y-%m', coin_transactions.transaction_datetime) as month"), 
+                DB::raw('SUM(coin_transactions.coins) as total_coins')
+            )
+            ->groupBy('month')
+            ->orderBy('month', 'desc')
+            ->limit(12)
+            ->get();
+
+        return response()->json([
+            'global_counters' => [
+                'total_players' => $totalPlayers,
+                'total_games' => $totalGames,
+                'blocked_users' => $totalBlockedUsers,
+                'total_coins_purchased' => (int) $totalCoinsPurchased,
+            ],
+            'charts' => [
+                'games_by_type' => $gamesByType,
+                'games_per_month' => $gamesPerMonth,
+                'purchases_per_month' => $purchasesPerMonth,
+            ]
+        ]);
+    }
+}

api/app/Http/Controllers/TransactionController.php

@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\CoinTransaction;
+use Illuminate\Http\Request;
+
+class TransactionController extends Controller
+{
+    
+    public function index(Request $request)
+    {
+
+        $this->authorize('viewAny', CoinTransaction::class);
+
+        $query = CoinTransaction::with('user:id,nickname,email', 'type:id,name');
+        
+        if ($request->has('sort_coins')) {
+            $direction = $request->get('sort_coins') === 'asc' ? 'asc' : 'desc';
+            $query->orderBy('coins', $direction);
+        } 
+        
+        $dateDirection = $request->get('sort_datetime') === 'asc' ? 'asc' : 'desc';
+        $query->orderBy('transaction_datetime', $dateDirection);
+
+       
+        $transactions = $query->paginate(15);
+
+        return response()->json($transactions);
+    }
+}

api/app/Http/Controllers/UserController.php

@@ -2,8 +2,9 @@
 
 namespace App\Http\Controllers;
 
-use App\Models\User;
 use App\Models\Game;
+use App\Models\User;
+use App\Models\MatchGame;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\Facades\Hash;
@@ -17,25 +18,51 @@ class UserController extends Controller
      */
     public function index(Request $request)
     {
-        if ($request->user()->type !== 'A') {
+        $this->authorize("viewAny", User::class);
-            return response()->json(['message' => 'Unauthorized'], 403);
-        }
 
         $query = User::query();
 
-        // Filtros úteis para o Backoffice
+        if ($request->has("type")) {
-        if ($request->has('type')) {
+            $query->where("type", $request->type);
-            $query->where('type', $request->type);
         }
-        if ($request->has('search')) {
+
-            $query->where('name', 'like', '%' . $request->search . '%')
+        if ($request->has("blocked")) {
-                  ->orWhere('email', 'like', '%' . $request->search . '%')
+            $query->where("blocked", $request->type);
-                  ->orWhere('nickname', 'like', '%' . $request->search . '%');
+        }
+
+        if ($request->has("search")) {
+            $query->where(function ($q) use ($request) {
+                $q->where("name", "like", "%" . $request->search . "%")
+                    ->orWhere("email", "like", "%" . $request->search . "%")
+                    ->orWhere("nickname", "like", "%" . $request->search . "%");
+            });
         }
 
         return response()->json($query->paginate(15));
     }
 
+    /**
+     * POST /api/users
+     * Registar um novo utilizador (Admin only)
+     */
+    public function store(Request $request)
+    {
+        $this->authorize("create", User::class);
+
+        $validated = $request->validate([
+            "name" => "required|string|max:255",
+            "email" => "required|email|unique:users,email",
+            "password" => "required|string|min:3",
+            "type" => "required|in:A,U",
+        ]);
+
+        $validated["password"] = Hash::make($validated["password"]);
+
+        $user = User::create($validated);
+
+        return response()->json($user, 201);
+    }
+
     /**
      * GET /api/users/me
      * Retorna o perfil do utilizador autenticado atual.
@@ -53,17 +80,19 @@ class UserController extends Controller
     public function show(User $user)
     {
         $currentUser = Auth::user();
-        if ($currentUser->id !== $user->id && $currentUser->type !== 'A') {
+
+        // Admins and owners get full profile, others get limited view
+        if ($currentUser->type === "A" || $currentUser->id === $user->id) {
+            return response()->json($user);
+        } else {
             return response()->json([
-                'id' => $user->id,
+                "id" => $user->id,
-                'name' => $user->name,
+                "name" => $user->name,
-                'nickname' => $user->nickname,
+                "nickname" => $user->nickname,
-                'photo_avatar_filename' => $user->photo_avatar_filename,
+                "photo_avatar_filename" => $user->photo_avatar_filename,
-                'type' => $user->type
+                "type" => $user->type,
             ]);
         }
-
-        return response()->json($user);
     }
 
     /**
@@ -72,24 +101,24 @@ class UserController extends Controller
      */
     public function update(Request $request, User $user)
     {
-        $currentUser = Auth::user();
+        $this->authorize("update", $user);
-
-        if ($currentUser->id !== $user->id && $currentUser->type !== 'A') {
-            return response()->json(['message' => 'Unauthorized'], 403);
-        }
 
         $validated = $request->validate([
-            'name' => 'sometimes|string|max:255',
+            "name" => "sometimes|string|max:255",
-            'nickname' => ['sometimes', 'string', 'max:20', Rule::unique('users')->ignore($user->id)],
+            "nickname" => [
-            'email' => ['sometimes', 'email', Rule::unique('users')->ignore($user->id)],
+                "sometimes",
-            'password' => 'sometimes|string|min:3',
+                "string",
-            'blocked' => 'sometimes|boolean',
+                "max:20",
+                Rule::unique("users")->ignore($user->id),
+            ],
+            "email" => [
+                "sometimes",
+                "email",
+                Rule::unique("users")->ignore($user->id),
+            ],
+            "password" => "sometimes|string|min:3",
         ]);
 
-        if (isset($validated['blocked']) && $currentUser->type !== 'A') {
-            return response()->json(['message' => 'Only admins can block users'], 403);
-        }
-
         // Lógica de Upload de Foto (Exemplo Básico)
         // if ($request->hasFile('photo_avatar')) {
         //     $path = $request->file('photo_avatar')->store('avatars', 'public');
@@ -101,50 +130,253 @@ class UserController extends Controller
         return response()->json($user);
     }
 
+    public function updatePassword(Request $request, User $user)
+    {
+        $this->authorize("update", $user);
+
+        $validated = $request->validate([
+            "current_password" => "required|string",
+            "new_password" => "required|string|min:3|confirmed",
+        ]);
+
+        // Verificar se a password atual está correta
+        if (!Hash::check($validated["current_password"], $user->password)) {
+            return response()->json(
+                ["message" => "Current password is incorrect"],
+                403,
+            );
+        }
+
+        // Atualizar para a nova password
+        $user->password = Hash::make($validated["new_password"]);
+        $user->save();
+
+        return response()->json(["message" => "Password updated successfully"]);
+    }
+
     /**
      * DELETE /api/users/{user}
      * Apagar conta (Soft Delete)
      */
     public function destroy(User $user)
     {
-        $currentUser = Auth::user();
+        $this->authorize("delete", $user);
 
-        if ($currentUser->id !== $user->id && $currentUser->type !== 'A') {
+        // Check if user has transactions or games - if so, soft delete
-            return response()->json(['message' => 'Unauthorized'], 403);
+        $hasTransactions = $user->transactions()->exists();
+        $hasGames = Game::where(function ($q) use ($user) {
+            $q->where("player1_user_id", $user->id)->orWhere(
+                "player2_user_id",
+                $user->id,
+            );
+        })->exists();
+
+        if ($hasTransactions || $hasGames) {
+            $user->delete(); // Soft delete
+            $message =
+                "User account deactivated (soft-deleted due to transaction/game history)";
+        } else {
+            $user->forceDelete(); // Hard delete
+            $message = "User permanently deleted";
         }
 
-        if ($currentUser->id === $user->id && $currentUser->type === 'A') {
+        return response()->json(["message" => $message]);
-             if ($user->type === 'A') {
+    }
-                return response()->json(['message' => 'Admins cannot delete their own account'], 403);
+
-             }
+    /**
+     * GET /api/users/{user}/games
+     * Histórico de Partidas Individuais (Cartas)
+     */
+    public function getGames(Request $request, User $user)
+    {
+        $this->authorize("view", $user);
+
+        // Define a query base para GAMES
+        $query = \App\Models\Game::query()
+            ->where(function ($q) use ($user) {
+                $q->where("player1_user_id", $user->id)->orWhere(
+                    "player2_user_id",
+                    $user->id,
+                );
+            })
+            ->with(["winner", "player1", "player2"]);
+
+        if ($request->has("type")) {
+            $query->where("type", $request->type);
         }
 
-        $user->delete();
+        if ($request->has("status")) {
+            $query->where("status", $request->status);
+        }
 
-        return response()->json(['message' => 'User deleted successfully']);
+        // Date filtering
+        if ($request->has("date_from")) {
+            $query->whereDate("began_at", ">=", $request->date_from);
+        }
+
+        if ($request->has("date_to")) {
+            $query->whereDate("began_at", "<=", $request->date_to);
+        }
+
+        // Flexible sorting
+        $sortColumn = $request->get("sort_by", "began_at");
+        $sortDirection = $request->get("sort_direction", "desc");
+
+        // Whitelist sortable columns for security
+        $allowedColumns = [
+            "began_at",
+            "ended_at",
+            "total_time",
+            "total_points",
+        ];
+        if (in_array($sortColumn, $allowedColumns)) {
+            $query->orderBy($sortColumn, $sortDirection);
+        } else {
+            $query->orderBy("began_at", $sortDirection);
+        }
+
+        $games = $query->paginate(10);
+
+        $games->getCollection()->transform(function ($game) use ($user) {
+            if ($game->winner_user_id == $user->id) {
+                $game->outcome = "win";
+            } elseif ($game->is_draw) {
+                $game->outcome = "draw";
+            } else {
+                $game->outcome = "loss";
+            }
+            return $game;
+        });
+
+        return response()->json($games);
     }
 
     /**
      * GET /api/users/{user}/matches
-     * Histórico de Jogos Multiplayer do Utilizador
+     * Histórico de Matches (Apostas / Marcas)
      */
     public function getMatches(Request $request, User $user)
     {
-        $currentUser = Auth::user();
+        $this->authorize("view", $user);
 
-        if ($currentUser->id !== $user->id && $currentUser->type !== 'A') {
+        $query = MatchGame::query()
-            return response()->json(['message' => 'Unauthorized'], 403);
+            ->where(function ($q) use ($user) {
+                $q->where("player1_user_id", $user->id)->orWhere(
+                    "player2_user_id",
+                    $user->id,
+                );
+            })
+            ->with(["winner", "player1", "player2"]);
+
+        if ($request->has("type")) {
+            $query->where("type", $request->type);
         }
 
-        $matches = Game::query()
+        if ($request->has("status")) {
-            ->where(function($q) use ($user) {
+            $query->where("status", $request->status);
-                $q->where('player1_user_id', $user->id)
+        }
-                  ->orWhere('player2_user_id', $user->id);
+
-            })
+        // Date filtering
-            ->with(['winner', 'player1', 'player2'])
+        if ($request->has("date_from")) {
-            ->orderBy('began_at', 'desc')
+            $query->whereDate("began_at", ">=", $request->date_from);
-            ->paginate(10);
+        }
+
+        if ($request->has("date_to")) {
+            $query->whereDate("began_at", "<=", $request->date_to);
+        }
+
+        // Flexible sorting
+        $sortColumn = $request->get("sort_by", "began_at");
+        $sortDirection = $request->get("sort_direction", "desc");
+
+        // Whitelist sortable columns for security
+        $allowedColumns = ["began_at", "ended_at", "stake", "total_time"];
+        if (in_array($sortColumn, $allowedColumns)) {
+            $query->orderBy($sortColumn, $sortDirection);
+        } else {
+            $query->orderBy("began_at", $sortDirection);
+        }
+
+        $matches = $query->paginate(10);
+
+        $matches->getCollection()->transform(function ($match) use ($user) {
+            if ($match->winner_user_id == $user->id) {
+                $match->outcome = "win";
+            } elseif (
+                $match->winner_user_id &&
+                $match->winner_user_id != $user->id
+            ) {
+                $match->outcome = "loss";
+            } else {
+                $match->outcome = "interrupted"; // Matches geralmente não empatam (alguém chega a 4 marcas)
+            }
+            return $match;
+        });
 
         return response()->json($matches);
     }
-}
+
+    public function block(User $user)
+    {
+        $this->authorize("block", $user);
+
+        $user->blocked = true;
+        $user->save();
+
+        // Revoke all active tokens for immediate effect
+        $user->tokens()->delete();
+
+        return response()->json(["message" => "User blocked successfully"]);
+    }
+
+    public function unblock(User $user)
+    {
+        $this->authorize("unblock", $user);
+
+        $user->blocked = false;
+        $user->save();
+
+        return response()->json(["message" => "User unblocked successfully"]);
+    }
+
+    public function getTransactions(Request $request, User $user)
+    {
+        if (
+            $request->user()->id !== $user->id &&
+            $request->user()->type !== "A"
+        ) {
+            return response()->json(["message" => "Forbidden"], 403);
+        }
+
+        $query = $user->transactions()->with("type");
+
+        if ($request->has("type")) {
+            $query->whereHas("type", function ($q) use ($request) {
+                $q->where("type", $request->type);
+            });
+        }
+
+        if ($request->has("date_from")) {
+            $query->whereDate(
+                "transaction_datetime",
+                ">=",
+                $request->date_from,
+            );
+        }
+
+        if ($request->has("date_to")) {
+            $query->whereDate("transaction_datetime", "<=", $request->date_to);
+        }
+
+        $transactions = $query
+            ->orderBy("transaction_datetime", "desc")
+            ->paginate(10);
+
+        return response()->json($transactions);
+    }
+
+    public function getMyTransactions(Request $request)
+    {
+        return $this->getTransactions($request, $request->user());
+    }
+}

api/app/Http/Middleware/CheckUserType.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class CheckUserType
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(
+        Request $request,
+        Closure $next,
+        string $type,
+    ): Response {
+        $user = $request->user();
+
+        if (!$user || $user->type !== $type) {
+            return response()->json(
+                ["message" => "Unauthorized. User type {$type} required."],
+                403,
+            );
+        }
+
+        return $next($request);
+    }
+}

api/app/Http/Requests/RegisterRequest.php

@@ -26,7 +26,7 @@ class RegisterRequest extends FormRequest
             'nickname' => 'required|string|max:255',
             'name' => 'required|string|max:255',
             'password' => 'required|string|min:3',
-            'photo' => 'nullable|string',
+            'photo' => 'nullable|image|mimes:jpeg,png,jpg,gif|max:2048',
         ];
     }
 }

api/app/Models/CoinPurchase.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+
+class CoinPurchase extends Model
+{
+    use HasFactory;
+    
+    protected $table = 'coin_purchases';
+    public $timestamps = false;
+
+    protected $fillable = [
+        'purchase_datetime',
+        'user_id',
+        'coin_transaction_id',
+        'euros',
+        'payment_type',
+        'payment_reference',
+        'custom'
+    ];
+
+    protected $casts = [
+        'purchase_datetime' => 'datetime',
+        'custom' => 'array',
+    ];
+
+    public function transaction()
+    {
+        return $this->belongsTo(CoinTransaction::class, 'coin_transaction_id');
+    }
+}

api/app/Models/CoinTransaction.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+
+class CoinTransaction extends Model
+{
+    use HasFactory;
+
+    protected $table = 'coin_transactions';
+    
+    public $timestamps = false; 
+
+    protected $fillable = [
+        'transaction_datetime',
+        'user_id',
+        'match_id',
+        'game_id',
+        'coin_transaction_type_id',
+        'coins',
+        'custom'
+    ];
+
+    protected $casts = [
+        'transaction_datetime' => 'datetime',
+        'custom' => 'array',
+    ];
+
+    public function type()
+    {
+        return $this->belongsTo(CoinTransactionType::class, 'coin_transaction_type_id');
+    }
+
+    public function user()
+    {
+        return $this->belongsTo(User::class);
+    }
+}

api/app/Models/CoinTransactionType.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+
+class CoinTransactionType extends Model
+{
+    use HasFactory;
+
+    // FIX: Disable auto-timestamps because the table doesn't have updated_at/created_at columns
+    public $timestamps = false;
+
+    protected $fillable = [
+        'name',
+        'type',
+        'description' // Include description if your table has it
+    ];
+}

api/app/Models/Game.php

@@ -3,7 +3,6 @@
 namespace App\Models;
 
 use Illuminate\Database\Eloquent\Model;
-use App\Http\Requests\StoreGameRequest;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 
 
@@ -30,11 +29,22 @@ class Game extends Model
         'match_id'
     ];
 
+    protected $casts = [
+        'began_at' => 'datetime',
+        'ended_at' => 'datetime',
+        'is_draw' => 'boolean',
+    ];
+
     public function winner()
     {
         return $this->belongsTo(User::class, "winner_user_id");
     }
 
+    public function loser()
+    {
+        return $this->belongsTo(User::class, "loser_user_id");
+    }
+
     public function player1()
     {
         return $this->belongsTo(User::class, 'player1_user_id');

api/app/Models/User.php

@@ -2,7 +2,6 @@
 
 namespace App\Models;
 
-// use Illuminate\Contracts\Auth\MustVerifyEmail;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\SoftDeletes;
 use Illuminate\Foundation\Auth\User as Authenticatable;
@@ -11,30 +10,27 @@ use Laravel\Sanctum\HasApiTokens;
 
 class User extends Authenticatable
 {
-    /** @use HasFactory<\Database\Factories\UserFactory> */
+    use HasApiTokens, HasFactory, Notifiable, SoftDeletes;
-    use HasFactory, Notifiable, HasApiTokens, SoftDeletes;
 
     /**
      * The attributes that are mass assignable.
      *
-     * @var list<string>
+     * @var array<int, string>
      */
     protected $fillable = [
         'name',
         'email',
         'password',
         'nickname',
-        'photo_avatar_filename',
         'type',
-        'blocked',
+        'photo_avatar_filename',
         'coins_balance',
-        'custom',
     ];
 
     /**
      * The attributes that should be hidden for serialization.
      *
-     * @var list<string>
+     * @var array<int, string>
      */
     protected $hidden = [
         'password',
@@ -42,16 +38,29 @@ class User extends Authenticatable
     ];
 
     /**
-     * Get the attributes that should be cast.
+     * The attributes that should be cast.
      *
-     * @return array<string, string>
+     * @var array<string, string>
      */
-    protected function casts(): array
+    protected $casts = [
+        'email_verified_at' => 'datetime',
+        'password' => 'hashed',
+        'blocked' => 'boolean',
+        'deleted_at' => 'datetime',
+    ];
+
+    public function wonGames()
     {
-        return [
+        return $this->hasMany(Game::class, 'winner_user_id');
-            'email_verified_at' => 'datetime',
+    }
-            'password' => 'hashed',
+
-            'blocked' => 'boolean',
+    public function games()
-        ];
+    {
+        return $this->hasMany(Game::class, 'player1_user_id')->orWhere('player2_user_id', $this->id);
+    }
+
+    public function transactions()
+    {
+        return $this->hasMany(CoinTransaction::class);
     }
 }

api/app/Policies/CoinTransactionPolicy.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\CoinTransaction;
+use App\Models\User;
+use Illuminate\Auth\Access\Response;
+
+class CoinTransactionPolicy
+{
+    /**
+     * Determine whether the user can view any models.
+     */
+    public function viewAny(User $user): bool
+    {
+        return $user->type === 'A' ? true : false;
+    }
+}

api/app/Policies/GamePolicy.php

@@ -0,0 +1,132 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\Game;
+use App\Models\User;
+
+class GamePolicy
+{
+    /**
+     * Determine whether the user can view any models.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**2
+     * Determine whether the user can view the model.
+     */
+    public function view(User $user, Game $game): bool
+    {
+        if ($user->type === "A") {
+            return true;
+        }
+
+        if (
+            $game->player1_user_id === $user->id ||
+            $game->player2_user_id === $user->id
+        ) {
+            return true;
+        }
+
+        if ($game->status === "Pending") {
+            return true;
+        }
+
+        return false;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     */
+    public function create(User $user): bool
+    {
+        if ($user->type === "A") {
+            return false;
+        }
+
+        return true;
+    }
+
+    public function join(User $user, Game $game): bool
+    {
+        if ($user->type === "A") {
+            return false;
+        }
+
+        if (
+            $game->status !== "Pending" ||
+            $game->player1_user_id === $user->id
+        ) {
+            return false;
+        }
+
+        if ($game->player2_user_id !== null && $game->player2_user_id !== 1) {
+            return false;
+        }
+
+        return true;
+    }
+
+    public function resign(User $user, Game $game): bool
+    {
+        if ($user->type === "A") {
+            return false;
+        }
+
+        if (
+            $game->status !== "Playing" ||
+            ($game->player1_user_id !== $user->id &&
+                $game->player2_user_id !== $user->id)
+        ) {
+            return false;
+        }
+
+        return true;
+    }
+    /**
+     * Determine whether the user can update the model.
+     */
+    public function update(User $user, Game $game): bool
+    {
+        if ($user->type === "A") {
+            return false;
+        }
+
+        if (!in_array($game->status, ['Playing', 'Pending'])) {
+            return false;
+        }
+
+        if ($game->player1_user_id !== $user->id && $game->player2_user_id !== $user->id) {
+            return false;
+        }
+
+        return true;
+    }
+    /**
+     * Determine whether the user can delete the model.
+     */
+    public function delete(User $user, Game $game): bool
+    {
+        // Only admins can delete games
+        return $user->type === "A";
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     */
+    public function restore(User $user, Game $game): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     */
+    public function forceDelete(User $user, Game $game): bool
+    {
+        return false;
+    }
+}

api/app/Policies/UserPolicy.php

@@ -0,0 +1,74 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\User;
+
+class UserPolicy
+{
+    /**
+     * Determine whether the user can view any models.
+     */
+    public function viewAny(User $user): bool
+    {
+        return $user->type === 'A';
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     */
+    public function view(User $user, User $model): bool
+    {
+        return $user->id === $model->id || $user->type === 'A';
+    }
+
+    /**
+     * Determine whether the user can create models.
+     */
+    public function create(User $user): bool
+    {
+        return $user->type === 'A';
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     */
+    public function update(User $user, User $model): bool
+    {
+        return $user->id === $model->id;
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     */
+    public function delete(User $user, User $model): bool
+    {
+        return ($user->type === 'A' && $user->id !== $model->id) || ($user->type === 'P' && $user->id === $model->id);
+    }
+
+    public function block(User $user, User $model): bool
+    {
+        return $user->type === 'A' && $user->id !== $model->id && $model->type === 'P';
+    }
+
+    public function unblock(User $user, User $model): bool
+    {
+        return $user->type === 'A' && $user->id !== $model->id && $model->type === 'P';
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     */
+    public function restore(User $user, User $model): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     */
+    public function forceDelete(User $user, User $model): bool
+    {
+        return false;
+    }
+}

api/bootstrap/app.php

@@ -6,14 +6,17 @@ use Illuminate\Foundation\Configuration\Middleware;
 
 return Application::configure(basePath: dirname(__DIR__))
     ->withRouting(
-        web: __DIR__.'/../routes/web.php',
+        web: __DIR__ . "/../routes/web.php",
-        api: __DIR__.'/../routes/api.php',
+        api: __DIR__ . "/../routes/api.php",
-        commands: __DIR__.'/../routes/console.php',
+        commands: __DIR__ . "/../routes/console.php",
-        health: '/up',
+        health: "/up",
     )
     ->withMiddleware(function (Middleware $middleware): void {
-        //
+        $middleware->alias([
+            "user.type" => App\Http\Middleware\CheckUserType::class,
+        ]);
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         //
-    })->create();
+    })
+    ->create();

api/bootstrap/cache/services.php

@@ -102,12 +102,15 @@
     'Illuminate\\Queue\\Console\\ForgetFailedCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\ListenCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\MonitorCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
+    'Illuminate\\Queue\\Console\\PauseCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\PruneBatchesCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\PruneFailedJobsCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\RestartCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
+    'Illuminate\\Queue\\Console\\ResumeCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\RetryCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\RetryBatchCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\WorkCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
+    'Illuminate\\Foundation\\Console\\ReloadCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Foundation\\Console\\RouteCacheCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Foundation\\Console\\RouteClearCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Foundation\\Console\\RouteListCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',

api/routes/api.php

@@ -2,37 +2,95 @@
 
 use App\Http\Controllers\AuthController;
 use App\Http\Controllers\GameController;
-use App\Http\Controllers\UserController;
 use App\Http\Controllers\MatchController;
-use Illuminate\Http\Request;
+use App\Http\Controllers\ProfileController;
+use App\Http\Controllers\StatisticsController;
+use App\Http\Controllers\UserController;
+use App\Http\Controllers\CoinPurchaseController;
+use App\Http\Controllers\TransactionController;
 use Illuminate\Support\Facades\Route;
 
+Route::prefix('v1')->group(function () {
+    // Public Routes
+    Route::post('/login', [AuthController::class, 'login']);
+    Route::post('/register', [AuthController::class, 'register']);
 
-# Authentication Routes
+    Route::get('/statistics/public', [StatisticsController::class, 'getPublicStats']);
-Route::post('/login', [AuthController::class, 'login']);
+    Route::get('/leaderboard', [StatisticsController::class, 'getLeaderboard']);
 
-Route::middleware('auth:sanctum')->group(function () {
+    // Authenticated Routes
-    Route::get('/users/me', function (Request $request) {
+    Route::middleware(['auth:sanctum', 'throttle:60,1'])->group(function () {
-        return $request->user();
+        Route::post('/logout', [AuthController::class, 'logout']);
+        Route::post('/coin-purchases', [CoinPurchaseController::class, 'store']);
+        Route::get('/statistics/me', [StatisticsController::class, 'getPersonalStats']);
+        Route::prefix('users/me')->group(function () {
+            Route::get('/', [ProfileController::class, 'show']);
+            Route::put('/', [ProfileController::class, 'update']);
+            Route::patch('/password', [ProfileController::class, 'updatePassword']);
+            Route::delete('/', [ProfileController::class, 'destroy']);
+            Route::get('/coins', [ProfileController::class, 'getCoins']);
+            Route::put('/password', [
+                ProfileController::class,
+                'updatePassword',
+            ]);
+            Route::post('/avatar', [ProfileController::class, 'uploadAvatar']);
+            Route::get('/transactions', [UserController::class, 'getMyTransactions']);
+        });
+
+        // User Resources
+        Route::prefix('/users')->group(function () {
+            Route::get('/{user}', [UserController::class, 'show']);
+            Route::get('/{user}/transactions', [UserController::class, 'getTransactions']);
+            Route::get('/{user}/games', [UserController::class, 'getGames']);
+            Route::get('/{user}/matches', [UserController::class, 'getMatches']);
+        });
+
+        Route::prefix('games')->group(function () {
+            Route::post('host', [GameController::class, 'host']);
+            Route::get('open', [GameController::class, 'open']);
+            Route::get('/', [GameController::class, 'index']);
+            Route::get('/{game}', [GameController::class, 'show']);
+            Route::post('/', [GameController::class, 'store']);
+            Route::put('/{game}', [GameController::class, 'update']);
+            Route::delete('/{game}', [GameController::class, 'destroy']);
+            Route::post('/{game}/resign', [GameController::class, 'resign']);
+            Route::post('/{game}/join', [GameController::class, 'join']);
+        });
+
+        Route::prefix('matches')->group(function () {
+            Route::post('host', [MatchController::class, 'host']);
+            Route::get('open', [MatchController::class, 'open']);
+            Route::post('/{match}/join', [MatchController::class, 'join']);
+            Route::post('/{match}/start', [MatchController::class, 'start']); // Changed to /start to be explicit
+            Route::delete('/{match}', [MatchController::class, 'destroy']);
+            Route::apiResource('/', MatchController::class)->parameters(['' => 'match']);
+        });
+
+        // Admin Routes
+        Route::middleware('user.type:A')
+            ->prefix('admin')
+            ->group(function () {
+                Route::get('/statistics', [StatisticsController::class, 'getAdminStats']);
+                Route::get('/transactions', [TransactionController::class, 'index']);
+                Route::get('/games', [GameController::class, 'index']);
+                Route::get('/matches', [MatchController::class, 'index']);
+                Route::prefix('users')->group(function () {
+                    Route::get('/', [UserController::class, 'index']);
+                    Route::post('/', [UserController::class, 'store']);
+                    Route::put('/{user}', [UserController::class, 'update']);
+                    Route::delete('/{user}', [
+                        UserController::class,
+                        'destroy',
+                    ]);
+                    Route::post('/{user}/block', [
+                        UserController::class,
+                        'block',
+                    ]);
+                    Route::post('/{user}/unblock', [
+                        UserController::class,
+                        'unblock',
+                    ]);
+                });
+            });
     });
-    Route::post('logout', [AuthController::class, 'logout']);
 });
-
-Route::post('/register', [AuthController::class, 'register']);
-
-# Game Routes - Protected
-Route::middleware('auth:sanctum')->group(function () {
-    Route::apiResource('games', GameController::class);
-    Route::post('games', [GameController::class, 'store']);
-    Route::post('/games/{game}/resign', [GameController::class, 'resign']);
-    Route::get('/users/{user}/matches', [UserController::class, 'getMatches']);
-    Route::post('games/{game}/join', [GameController::class, 'join']);
-});
-
-Route::middleware('auth:sanctum')->group(function () {
-    Route::get('matches', [MatchController::class, 'index']);
-    Route::post('matches', [MatchController::class, 'store']);
-    Route::get('matches/{match}', [MatchController::class, 'show']);
-    Route::post('matches/{match}/join', [MatchController::class, 'join']);
-    Route::put('matches/{match}', [MatchController::class, 'update']);
-});

api/sample-requests.http

@@ -0,0 +1,84 @@
+### Get All Students (Login)
+# @name login
+POST http://localhost:8000/api/v1/login
+Content-Type: application/json
+Accept: application/json
+
+{
+    "email": "[email protected]",
+    "password": "123"
+}
+
+### Capture the token & id
+@token = {{login.response.body.token}}
+@id = {{login.response.body.user.id}}
+
+### Get All matches
+GET http://localhost:8000/api/v1/games
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}
+
+### Get me user
+GET http://localhost:8000/api/v1/users/me
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}
+
+### Get me coins
+GET http://localhost:8000/api/v1/users/me/coins
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}
+
+### Get me matches
+GET http://localhost:8000/api/v1/users/{{id}}/matches
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}
+
+### Get me transactions
+GET http://localhost:8000/api/v1/users/{{id}}/transactions?type=C
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}
+
+### post coin-purchases
+POST http://localhost:8000/api/v1/coin-purchases
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}
+
+{
+    "euros": 1,
+    "payment_type": "MBWAY",
+    "payment_reference": "912345678"
+}
+
+### Get leaderboard
+GET http://localhost:8000/api/v1/leaderboard
+Content-Type: application/json
+Accept: application/json
+
+### Get me stats
+GET http://localhost:8000/api/v1/statistics/me
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}
+
+### Get public stats
+GET http://localhost:8000/api/v1/statistics/public
+Content-Type: application/json
+Accept: application/json
+
+### Get admin stats
+GET http://localhost:8000/api/v1/admin/statistics
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}
+
+### Get admin stats
+GET http://localhost:8000/api/v1/admin/users
+Content-Type: application/json
+Accept: application/json
+Authorization: Bearer {{token}}

bruno_collection/Admin/Get Users.bru

@@ -0,0 +1,20 @@
+meta {
+  name: Get Users
+  type: http
+  seq: 1
+}
+
+get {
+  url: {{api_url}}/admin/users/
+  body: none
+  auth: inherit
+}
+
+headers {
+  Authorization: Bearer {{token}}
+}
+
+settings {
+  encodeUrl: true
+  timeout: 0
+}

bruno_collection/Admin/folder.bru

@@ -0,0 +1,8 @@
+meta {
+  name: Admin
+  seq: 4
+}
+
+auth {
+  mode: inherit
+}

bruno_collection/Auth/Login.bru

@@ -5,14 +5,14 @@ meta {
 }
 
 post {
-  url: {{api_url}}/auth/login
+  url: {{api_url}}/login
   body: json
   auth: none
 }
 
 body:json {
   {
-    "email":"a1@mail.pt",
+    "email":"p[email protected]",
     "password":"123"
   }
 }

bruno_collection/Auth/Patch Password.bru

@@ -0,0 +1,23 @@
+meta {
+  name: Patch Password
+  type: http
+  seq: 3
+}
+
+patch {
+  url: {{api_url}}/users/me
+  body: json
+  auth: none
+}
+
+headers {
+  Accept: application/json
+  Authorization: Bearer {{token}}
+}
+
+body:json {
+  {
+    "current_password":"123",
+    "new_password": "456"
+  }
+}

bruno_collection/Games/Create Game.bru

@@ -0,0 +1,15 @@
+meta {
+  name: Create Game
+  type: http
+  seq: 3
+}
+
+post {
+  url: {{api_url}}/games
+  body: none
+  auth: inherit
+}
+
+settings {
+  encodeUrl: true
+}

bruno_collection/Games/Get Games.bru

@@ -5,7 +5,7 @@ meta {
 }
 
 get {
-  url: {{api_url}}/games
+  url: {{api_url}}/games/1
   body: none
   auth: none
 }

bruno_collection/environments/Local Development.bru

@@ -1,5 +1,5 @@
 vars {
-  base_url: http://localhost:8085
+  base_url: http://localhost:8000
-  api_url: http://localhost:8085/api
+  api_url: http://localhost:8000/api/v1
   token: 
 }

deployment/kubernetes-vue.yml

@@ -17,7 +17,7 @@ spec:
       priorityClassName: low-priority
       containers:
         - name: web
-          image: registry-172.22.21.115.sslip.io/dad-group-x/web:v1.0.0
+          image: registry-172.22.21.115.sslip.io/dad-group-46/web:v1.0.1
           resources:
             requests:
               memory: "64Mi"

frontend/.env.example

@@ -1,2 +1,2 @@
 VITE_API_DOMAIN=localhost:8000
-VITE_WS_CONNECTION=ws://localhost:3000
+VITE_WS_CONNECTION=ws://localhost:3001

frontend/components.json

@@ -9,13 +9,12 @@
     "cssVariables": true,
     "prefix": ""
   },
-  "iconLibrary": "lucide",
   "aliases": {
     "components": "@/components",
+    "composables": "@/composables",
     "utils": "@/lib/utils",
     "ui": "@/components/ui",
-    "lib": "@/lib",
+    "lib": "@/lib"
-    "composables": "@/composables"
   },
-  "registries": {}
+  "iconLibrary": "lucide"
-}
+}

frontend/index.html

@@ -5,7 +5,7 @@
     <link rel="icon" href="/favicon.ico" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="stylesheet" href="/src/index.css" />
-    <title>Vite App</title>
+    <title>Bisca</title>
   </head>
   <body>
     <div id="app"></div>

frontend/package.json

@@ -16,14 +16,15 @@
   "dependencies": {
     "@tailwindcss/vite": "^4.1.17",
     "@tanstack/vue-table": "^8.21.3",
-    "@vueuse/core": "^14.0.0",
+    "@vueuse/core": "^14.1.0",
     "axios": "^1.13.2",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "date-fns": "^4.1.0",
+    "lucide-react": "^0.562.0",
     "lucide-vue-next": "^0.554.0",
     "pinia": "^3.0.3",
-    "reka-ui": "^2.6.0",
+    "reka-ui": "^2.7.0",
     "socket.io-client": "^4.8.1",
     "tailwind-merge": "^3.4.0",
     "tailwindcss": "^4.1.17",

frontend/src/App.vue

@@ -3,8 +3,7 @@
   <nav class="max-w-full p-5 flex flex-row justify-between align-middle">
     <div class="align-middle text-xl">
       <RouterLink to="/"> {{ pageTitle }} </RouterLink>
-      <span class="text-xs" v-if="authStore.currentUser">&nbsp;&nbsp;&nbsp;
+      <span class="text-xs" v-if="authStore.currentUser">&nbsp;&nbsp;&nbsp; ({{ authStore.currentUser?.name }})
-        ({{ authStore.currentUser?.name }})
       </span>
     </div>
     <NavBar @logout="logout" :userLoggedIn="authStore.isLoggedIn" />
@@ -17,41 +16,35 @@
 </template>
 
 <script setup>
-import { RouterLink, RouterView } from 'vue-router';
+import { RouterLink, RouterView } from 'vue-router'
-import { toast } from 'vue-sonner';
+import { toast } from 'vue-sonner'
 import 'vue-sonner/style.css'
-import { ref, onMounted } from 'vue';
+import { ref, onMounted } from 'vue'
 import { Toaster } from '@/components/ui/sonner'
-import NavBar from './components/layout/NavBar.vue';
+import NavBar from './components/layout/NavBar.vue'
-import { useAuthStore } from './stores/auth';
+import { useAuthStore } from './stores/auth'
-import { useSocketStore } from './stores/socket';
+import { useSocketStore } from './stores/socket'
 
 const authStore = useAuthStore()
 const socketStore = useSocketStore()
 
-
+const pageTitle = ref(`DAD 2025/26`)
-const year = new Date().getFullYear()
-const pageTitle = ref(`DAD ${year}/${String(year + 1).slice(-2)}`)
-
-
 
 const logout = () => {
-
   toast.promise(authStore.logout(), {
     loading: 'Calling API',
     success: () => {
       return 'Logout Sucessfull '
     },
-    error: (data) => `[API] Error saving game - ${data?.response?.data?.message}`,
+    error: (data) => `[API] Error - ${data?.response?.data?.message}`,
   })
-
 }
 
-onMounted(() => {
+onMounted(async () => {
-  socketStore.handleConnection()
+  await authStore.restoreSession()
+  // REMOVED - The WebSocket for multiplayer is handled separately in the WebSocketStore
+  // socketStore.handleConnection()
 })
-
-
 </script>
 
-<style></style>`
+<style></style>

frontend/src/components/game/DeckArea.vue

@@ -0,0 +1,114 @@
+<template>
+  <div class="relative flex items-center justify-center w-64 h-48">
+    <div
+      v-if="trumpCard"
+      class="absolute rotate-90 origin-center transition-all duration-700"
+      :class="[trumpReveal && 'scale-110']"
+    >
+      <div
+        class="ring-2 ring-amber-400/60 ring-offset-2 rounded-lg transition-all duration-700"
+        :class="[
+          trumpReveal &&
+            'ring-4 ring-amber-400 shadow-[0_0_30px_rgba(251,191,36,0.8)] animate-pulse',
+        ]"
+      >
+        <GameCard :suit="trumpCard.suit" :rank="trumpCard.rank" />
+      </div>
+      <div
+        v-if="trumpReveal"
+        class="absolute -bottom-8 left-1/2 -translate-x-1/2 bg-amber-500/90 text-white text-[10px] font-bold px-3 py-1 rounded-full whitespace-nowrap animate-pulse"
+      >
+        TRUMP
+      </div>
+    </div>
+
+    <div
+      v-if="!isEmpty && cardsRemaining > 0"
+      class="absolute -translate-x-8 -translate-y-4 transition-all duration-300"
+      :class="[cardsRemaining === 0 && 'opacity-0 scale-95', deckPulse && 'scale-105']"
+    >
+      <div class="relative">
+        <div
+          class="absolute inset-0 bg-gray-800 rounded-lg opacity-20 translate-x-1 translate-y-1"
+        ></div>
+        <div
+          class="absolute inset-0 bg-gray-800 rounded-lg opacity-15 translate-x-2 translate-y-2"
+        ></div>
+        <div
+          class="absolute inset-0 bg-gray-800 rounded-lg opacity-10 translate-x-3 translate-y-3"
+        ></div>
+
+        <div class="relative">
+          <GameCard suit="c" :rank="1" :face-down="true" />
+
+          <div
+            class="absolute -top-2 -right-2 bg-blue-600 text-white text-xs font-bold rounded-full w-8 h-8 flex items-center justify-center shadow-lg border-2 border-white transition-all duration-300"
+          >
+            <Transition
+              enter-active-class="transition-all duration-200"
+              enter-from-class="scale-150 opacity-0"
+              enter-to-class="scale-100 opacity-100"
+              leave-active-class="transition-all duration-200"
+              leave-from-class="scale-100 opacity-100"
+              leave-to-class="scale-50 opacity-0"
+              mode="out-in"
+            >
+              <span :key="cardsRemaining">{{ cardsRemaining }}</span>
+            </Transition>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup>
+import { ref, watch } from 'vue'
+import GameCard from './GameCard.vue'
+
+const props = defineProps({
+  trumpCard: {
+    type: Object,
+    default: null,
+  },
+  cardsRemaining: {
+    type: Number,
+    required: true,
+  },
+  isEmpty: {
+    type: Boolean,
+    required: true,
+  },
+  revealTrump: {
+    type: Boolean,
+    default: false,
+  },
+})
+
+const deckPulse = ref(false)
+const trumpReveal = ref(false)
+
+// Pulse animation when cards remaining changes
+watch(
+  () => props.cardsRemaining,
+  () => {
+    deckPulse.value = true
+    setTimeout(() => {
+      deckPulse.value = false
+    }, 300)
+  },
+)
+
+// Trump reveal animation
+watch(
+  () => props.revealTrump,
+  (newValue) => {
+    if (newValue) {
+      trumpReveal.value = true
+      setTimeout(() => {
+        trumpReveal.value = false
+      }, 3000) // Show for 3 seconds
+    }
+  },
+)
+</script>

frontend/src/components/game/FlyingCard.vue

@@ -0,0 +1,76 @@
+<template>
+  <Teleport to="body">
+    <div
+      v-if="isVisible"
+      class="fixed pointer-events-none z-[9999]"
+      :style="{
+        left: currentPosition.x + 'px',
+        top: currentPosition.y + 'px',
+        transition: isAnimating ? `all ${duration}ms ease-out` : 'none',
+      }"
+    >
+      <GameCard :suit="card.suit" :rank="card.rank" :face-down="faceDown" />
+    </div>
+  </Teleport>
+</template>
+
+<script setup>
+import { ref, onMounted, watch } from 'vue'
+import GameCard from './GameCard.vue'
+
+const props = defineProps({
+  card: {
+    type: Object,
+    required: true,
+  },
+  startPosition: {
+    type: Object,
+    required: true,
+    validator: (value) => 'x' in value && 'y' in value,
+  },
+  endPosition: {
+    type: Object,
+    required: true,
+    validator: (value) => 'x' in value && 'y' in value,
+  },
+  duration: {
+    type: Number,
+    default: 500,
+  },
+  faceDown: {
+    type: Boolean,
+    default: true,
+  },
+  delay: {
+    type: Number,
+    default: 0,
+  },
+})
+
+const emit = defineEmits(['complete'])
+
+const isVisible = ref(false)
+const isAnimating = ref(false)
+const currentPosition = ref({ x: 0, y: 0 })
+
+onMounted(() => {
+  // Start at the deck position
+  currentPosition.value = { ...props.startPosition }
+  isVisible.value = true
+
+  // Wait for delay, then start animation
+  setTimeout(() => {
+    // Force a reflow to ensure starting position is set
+    requestAnimationFrame(() => {
+      isAnimating.value = true
+      currentPosition.value = { ...props.endPosition }
+
+      // After animation completes, emit event and hide
+      setTimeout(() => {
+        emit('complete')
+        isVisible.value = false
+      }, props.duration)
+    })
+  }, props.delay)
+})
+</script>

frontend/src/components/game/GameBoard.vue

@@ -0,0 +1,83 @@
+<template>
+  <div
+    class="min-h-screen bg-linear-to-br from-green-700 via-green-800 to-green-900 grid grid-rows-[auto_auto_1fr_auto] grid-cols-[1fr_3fr_1fr] gap-6 p-8"
+  >
+    <div class="col-start-1 col-end-4 row-start-1 flex justify-start items-start">
+      <ScoreDisplay
+        :player-score="playerScore"
+        :opponent-score="opponentScore"
+        :current-turn="currentTurn"
+        :player-name="playerName"
+        :opponent-name="opponentName"
+        :round-number="1"
+      />
+    </div>
+
+    <div class="col-start-2 col-end-3 row-start-2 flex justify-center">
+      <PlayerHand
+        :cards="opponentHand"
+        :face-down="true"
+        :max-cards="maxCards"
+      />
+    </div>
+
+    <div class="col-start-2 col-end-3 row-start-3 flex items-center justify-center">
+      <PlayArea
+        :player-card="currentTrick.playerCard"
+        :opponent-card="currentTrick.opponentCard"
+        :winner="currentTrick.winner"
+      />
+    </div>
+
+    <div class="col-start-3 col-end-4 row-start-3 flex items-center justify-center">
+      <DeckArea :trump-card="trumpCard" :cards-remaining="cardsRemaining" :is-empty="deckIsEmpty" />
+    </div>
+
+    <div class="col-start-2 col-end-3 row-start-4 flex justify-center">
+      <PlayerHand
+        :cards="playerHand"
+        :face-down="false"
+        :max-cards="maxCards"
+        @card-clicked="handleCardClick"
+      />
+    </div>
+  </div>
+</template>
+
+<script setup>
+import PlayerHand from './PlayerHand.vue'
+import PlayArea from './PlayArea.vue'
+import DeckArea from './DeckArea.vue'
+import ScoreDisplay from './ScoreDisplay.vue'
+
+const props = defineProps({
+  playerHand: { type: Array, default: () => [] },
+  opponentHand: { type: Array, default: () => [] },
+  currentTrick: {
+    type: Object,
+    default: () => ({ playerCard: null, opponentCard: null, winner: null }),
+  },
+  trumpCard: { type: Object, required: true },
+  cardsRemaining: { type: Number, default: 0 },
+  deckIsEmpty: { type: Boolean, default: false },
+  maxCards: { type: Number, default: 3 },
+  // REMOVIDO: playableCardIndices (já não precisamos dele)
+  playerScore: { type: Number, default: 0 },
+  opponentScore: { type: Number, default: 0 },
+  playerName: { type: String, default: 'You' },
+  opponentName: { type: String, default: 'Bot' },
+  currentTurn: {
+    type: String,
+    default: 'player',
+    validator: (value) => ['player', 'opponent'].includes(value),
+  },
+  isMyTurn: { type: Boolean, default: false },
+})
+
+const emit = defineEmits(['play-card'])
+
+const handleCardClick = (payload) => {
+  if (!props.isMyTurn) return
+  emit('play-card', payload.card)
+}
+</script>

frontend/src/components/game/GameCard.vue

@@ -0,0 +1,39 @@
+<template>
+  <div
+    class="relative w-32 aspect-[2.5/3.5] cursor-pointer transition-all duration-300 ease-in-out hover:scale-105 hover:-translate-y-2 hover:shadow-2xl"
+  >
+    <img
+      :src="cardImage"
+      :alt="faceDown ? 'Card back' : `${suit} ${rank}`"
+      class="w-full h-full object-cover rounded-lg shadow-lg select-none"
+      draggable="false"
+    />
+  </div>
+</template>
+
+<script setup>
+import { computed } from 'vue'
+
+const props = defineProps({
+  suit: {
+    type: String,
+    required: true,
+  },
+  rank: {
+    type: Number,
+    required: true,
+  },
+  faceDown: {
+    type: Boolean,
+    default: false,
+  },
+})
+
+const cardImage = computed(() => {
+  if (props.faceDown) {
+    return '/cards/semFace.png'
+  } else {
+    return `/cards/${props.suit}${props.rank}.png`
+  }
+})
+</script>

frontend/src/components/game/GameOver.vue

@@ -0,0 +1,308 @@
+<template>
+  <Teleport to="body">
+    <Transition
+      enter-active-class="transition-all duration-500 ease-out"
+      enter-from-class="opacity-0"
+      enter-to-class="opacity-100"
+      leave-active-class="transition-all duration-300 ease-in"
+      leave-from-class="opacity-100"
+      leave-to-class="opacity-0"
+    >
+      <div
+        v-if="isVisible"
+        class="fixed inset-0 bg-black/70 backdrop-blur-sm z-[9998] flex items-center justify-center p-4"
+        @click.self="handleClose"
+      >
+        <Transition
+          enter-active-class="transition-all duration-500 ease-out delay-100"
+          enter-from-class="opacity-0 scale-75 -translate-y-10"
+          enter-to-class="opacity-100 scale-100 translate-y-0"
+          leave-active-class="transition-all duration-300 ease-in"
+          leave-from-class="opacity-100 scale-100"
+          leave-to-class="opacity-0 scale-90"
+        >
+          <div
+            v-if="isVisible"
+            class="bg-gradient-to-br from-gray-900 via-gray-800 to-gray-900 rounded-2xl shadow-2xl border-2 max-w-md w-full p-8 relative overflow-hidden"
+            :class="[
+              winner === 'player'
+                ? 'border-emerald-500/50'
+                : winner === 'opponent'
+                  ? 'border-rose-500/50'
+                  : 'border-gray-600/50',
+            ]"
+          >
+            <!-- Confetti Effect (if player wins) -->
+            <div
+              v-if="winner === 'player' && showConfetti"
+              class="absolute inset-0 pointer-events-none"
+            >
+              <div
+                v-for="i in 30"
+                :key="i"
+                class="absolute w-2 h-2 animate-confetti"
+                :style="{
+                  left: Math.random() * 100 + '%',
+                  top: '-10px',
+                  backgroundColor: ['#fbbf24', '#34d399', '#60a5fa', '#f472b6', '#a78bfa'][
+                    Math.floor(Math.random() * 5)
+                  ],
+                  animationDelay: Math.random() * 2 + 's',
+                  animationDuration: 3 + Math.random() * 2 + 's',
+                }"
+              ></div>
+            </div>
+
+            <!-- Winner Icon/Badge -->
+            <div class="flex justify-center mb-6">
+              <div
+                class="relative"
+                :class="[winner === 'player' ? 'animate-bounce' : 'animate-pulse']"
+              >
+                <div
+                  v-if="winner === 'player'"
+                  class="w-24 h-24 rounded-full bg-gradient-to-br from-emerald-400 to-emerald-600 flex items-center justify-center shadow-lg shadow-emerald-500/50"
+                >
+                  <span class="text-5xl">🏆</span>
+                </div>
+                <div
+                  v-else-if="winner === 'opponent'"
+                  class="w-24 h-24 rounded-full bg-gradient-to-br from-rose-400 to-rose-600 flex items-center justify-center shadow-lg shadow-rose-500/50"
+                >
+                  <span class="text-5xl">😔</span>
+                </div>
+                <div
+                  v-else
+                  class="w-24 h-24 rounded-full bg-gradient-to-br from-gray-400 to-gray-600 flex items-center justify-center shadow-lg"
+                >
+                  <span class="text-5xl">🤝</span>
+                </div>
+              </div>
+            </div>
+
+            <!-- Title -->
+            <h2
+              class="text-4xl font-black text-center mb-2 bg-clip-text text-transparent bg-gradient-to-r"
+              :class="[
+                winner === 'player'
+                  ? 'from-emerald-300 to-emerald-500'
+                  : winner === 'opponent'
+                    ? 'from-rose-300 to-rose-500'
+                    : 'from-gray-300 to-gray-500',
+              ]"
+            >
+              {{ title }}
+            </h2>
+
+            <!-- Subtitle -->
+            <p class="text-center text-gray-400 mb-8">{{ subtitle }}</p>
+
+            <!-- Scores -->
+            <div class="bg-black/30 rounded-xl p-6 mb-8 space-y-4">
+              <div class="flex items-center justify-between">
+                <span class="text-gray-300 font-medium">{{ playerName }}</span>
+                <span
+                  class="text-3xl font-black tabular-nums transition-all duration-500"
+                  :class="[
+                    playerScore > opponentScore
+                      ? 'text-emerald-400 drop-shadow-[0_0_12px_rgba(52,211,153,0.6)]'
+                      : 'text-white',
+                  ]"
+                >
+                  {{ displayPlayerScore }}
+                </span>
+              </div>
+              <div class="h-px bg-gray-700"></div>
+              <div class="flex items-center justify-between">
+                <span class="text-gray-300 font-medium">{{ opponentName }}</span>
+                <span
+                  class="text-3xl font-black tabular-nums transition-all duration-500"
+                  :class="[
+                    opponentScore > playerScore
+                      ? 'text-rose-400 drop-shadow-[0_0_12px_rgba(251,113,133,0.6)]'
+                      : 'text-white',
+                  ]"
+                >
+                  {{ displayOpponentScore }}
+                </span>
+              </div>
+            </div>
+
+            <!-- Stats (optional) -->
+            <div v-if="stats" class="grid grid-cols-2 gap-4 mb-8">
+              <div class="bg-black/20 rounded-lg p-3 text-center">
+                <p class="text-gray-400 text-xs mb-1">Your Tricks</p>
+                <p class="text-2xl font-bold text-white">{{ stats.playerTricks }}</p>
+              </div>
+              <div class="bg-black/20 rounded-lg p-3 text-center">
+                <p class="text-gray-400 text-xs mb-1">Opponent Tricks</p>
+                <p class="text-2xl font-bold text-white">{{ stats.opponentTricks }}</p>
+              </div>
+            </div>
+
+            <!-- Actions -->
+            <div class="flex gap-3">
+              <button
+                v-if="!isLoggingOut"
+                @click="$emit('play-again')"
+                class="flex-1 bg-gradient-to-r from-emerald-500 to-emerald-600 hover:from-emerald-600 hover:to-emerald-700 text-white font-bold py-3 px-6 rounded-lg transition-all shadow-lg"
+              >
+                Play Again
+              </button>
+              <button
+                v-if="!hideClose"
+                @click="handleClose"
+                class="flex-1 font-bold py-3 px-6 rounded-lg transition-all"
+                :class="[
+                  isLoggingOut
+                    ? 'bg-red-600 hover:bg-red-700 text-white w-full'
+                    : 'bg-gray-700 hover:bg-gray-600 text-white',
+                ]"
+              >
+                {{ isLoggingOut ? 'Confirm Logout' : 'Close' }}
+              </button>
+            </div>
+          </div>
+        </Transition>
+      </div>
+    </Transition>
+  </Teleport>
+</template>
+
+<script setup>
+import { ref, computed, watch, onMounted } from 'vue'
+
+const props = defineProps({
+  isVisible: {
+    type: Boolean,
+    required: true,
+  },
+  winner: {
+    type: String,
+    required: true,
+    validator: (value) => ['player', 'opponent', 'draw'].includes(value),
+  },
+  playerScore: {
+    type: Number,
+    required: true,
+  },
+  opponentScore: {
+    type: Number,
+    required: true,
+  },
+  playerName: {
+    type: String,
+    default: 'You',
+  },
+  opponentName: {
+    type: String,
+    default: 'Bot',
+  },
+  stats: {
+    type: Object,
+    default: null,
+  },
+  hideClose: {
+    type: Boolean,
+    default: false,
+  },
+  isLoggingOut: {
+    type: Boolean,
+    default: false,
+  },
+})
+
+const emit = defineEmits(['close', 'play-again'])
+
+const showConfetti = ref(false)
+const displayPlayerScore = ref(0)
+const displayOpponentScore = ref(0)
+
+// Computed title based on winner
+const title = computed(() => {
+  if (props.winner === 'player') return 'Victory!'
+  if (props.winner === 'opponent') return 'Defeat'
+  return 'Draw!'
+})
+
+// Computed subtitle
+const subtitle = computed(() => {
+  if (props.winner === 'player') return 'Congratulations! You won the game!'
+  if (props.winner === 'opponent') return 'Better luck next time!'
+  return 'The game ended in a draw'
+})
+
+// Animate score count-up
+const animateScore = (fromValue, toValue, callback) => {
+  const duration = 1000
+  const steps = 30
+  const stepDuration = duration / steps
+  const increment = (toValue - fromValue) / steps
+
+  let current = fromValue
+  let step = 0
+
+  const interval = setInterval(() => {
+    step++
+    current += increment
+
+    if (step >= steps) {
+      current = toValue
+      clearInterval(interval)
+    }
+
+    callback(Math.round(current))
+  }, stepDuration)
+}
+
+// Watch for visibility and trigger animations
+watch(
+  () => props.isVisible,
+  (newValue) => {
+    if (newValue) {
+      // Start confetti if player wins
+      if (props.winner === 'player') {
+        setTimeout(() => {
+          showConfetti.value = true
+        }, 300)
+      }
+
+      // Animate scores counting up
+      setTimeout(() => {
+        animateScore(0, props.playerScore, (value) => {
+          displayPlayerScore.value = value
+        })
+        animateScore(0, props.opponentScore, (value) => {
+          displayOpponentScore.value = value
+        })
+      }, 400)
+    } else {
+      showConfetti.value = false
+      displayPlayerScore.value = 0
+      displayOpponentScore.value = 0
+    }
+  },
+  { immediate: true },
+)
+
+const handleClose = () => {
+  emit('close')
+}
+</script>
+
+<style scoped>
+@keyframes confetti {
+  0% {
+    transform: translateY(0) rotate(0deg);
+    opacity: 1;
+  }
+  100% {
+    transform: translateY(100vh) rotate(720deg);
+    opacity: 0;
+  }
+}
+
+.animate-confetti {
+  animation: confetti linear forwards;
+}
+</style>

frontend/src/components/game/PlayArea.vue

@@ -0,0 +1,100 @@
+<template>
+  <div class="flex items-center justify-center h-64 relative">
+    <div class="relative w-96 h-full flex items-center justify-center">
+      <!-- Opponent Card Slot -->
+      <div
+        class="absolute top-4"
+        :class="[
+          winner === 'opponent' && 'ring-4 ring-green-400 ring-offset-4 rounded-lg animate-pulse',
+        ]"
+        :style="{ zIndex: opponentCard ? (firstPlayer === 'opponent' ? 1 : 2) : 0 }"
+      >
+        <div
+          v-if="!opponentCard"
+          class="w-32 aspect-[2.5/3.5] border-4 border-dashed border-gray-400/40 rounded-lg bg-gray-100/20 flex items-center justify-center"
+        >
+          <span class="text-gray-400 text-xs font-medium">Opponent</span>
+        </div>
+        <Transition
+          enter-active-class="transition-all duration-500 ease-out"
+          enter-from-class="opacity-0 -translate-y-[200px] scale-75"
+          enter-to-class="opacity-100 translate-y-0 scale-100 rotate-6"
+          leave-active-class="transition-all duration-500 ease-in"
+          :leave-from-class="`opacity-100 translate-y-0 scale-100 rotate-6`"
+          :leave-to-class="
+            winner === 'opponent'
+              ? 'opacity-0 -translate-y-[200px] translate-x-[300px] scale-50 rotate-0'
+              : 'opacity-0 translate-y-[200px] translate-x-[300px] scale-50 rotate-0'
+          "
+          mode="out-in"
+        >
+          <div
+            v-if="opponentCard"
+            :key="`${opponentCard.suit}-${opponentCard.rank}`"
+            class="rotate-6"
+          >
+            <GameCard :suit="opponentCard.suit" :rank="opponentCard.rank" />
+          </div>
+        </Transition>
+      </div>
+
+      <!-- Player Card Slot -->
+      <div
+        class="absolute bottom-4"
+        :class="[
+          winner === 'player' && 'ring-4 ring-green-400 ring-offset-4 rounded-lg animate-pulse',
+        ]"
+        :style="{ zIndex: playerCard ? (firstPlayer === 'player' ? 1 : 2) : 0 }"
+      >
+        <div
+          v-if="!playerCard"
+          class="w-32 aspect-[2.5/3.5] border-4 border-dashed border-gray-400/40 rounded-lg bg-gray-100/20 flex items-center justify-center"
+        >
+          <span class="text-gray-400 text-xs font-medium">You</span>
+        </div>
+        <Transition
+          enter-active-class="transition-all duration-500 ease-out"
+          enter-from-class="opacity-0 translate-y-[200px] scale-75"
+          enter-to-class="opacity-100 translate-y-0 scale-100 -rotate-6"
+          leave-active-class="transition-all duration-500 ease-in"
+          :leave-from-class="`opacity-100 translate-y-0 scale-100 -rotate-6`"
+          :leave-to-class="
+            winner === 'opponent'
+              ? 'opacity-0 -translate-y-[200px] translate-x-[300px] scale-50 rotate-0'
+              : 'opacity-0 translate-y-[200px] translate-x-[300px] scale-50 rotate-0'
+          "
+          mode="out-in"
+        >
+          <div v-if="playerCard" :key="`${playerCard.suit}-${playerCard.rank}`" class="-rotate-6">
+            <GameCard :suit="playerCard.suit" :rank="playerCard.rank" />
+          </div>
+        </Transition>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup>
+import GameCard from './GameCard.vue'
+
+const props = defineProps({
+  playerCard: {
+    type: Object,
+    default: null,
+  },
+  opponentCard: {
+    type: Object,
+    default: null,
+  },
+  winner: {
+    type: String,
+    default: null,
+    validator: (value) => [null, 'player', 'opponent'].includes(value),
+  },
+  firstPlayer: {
+    type: String,
+    default: null,
+    validator: (value) => [null, 'player', 'opponent'].includes(value),
+  },
+})
+</script>

frontend/src/components/game/PlayerHand.vue

@@ -0,0 +1,112 @@
+<template>
+  <div class="flex justify-center items-end relative h-40">
+    <TransitionGroup
+      enter-active-class="transition-all duration-500 ease-out"
+      enter-from-class="opacity-0 -translate-y-8 scale-75"
+      enter-to-class="opacity-100 translate-y-0 scale-100"
+    >
+      <div
+        v-for="(card, index) in cards"
+        :key="`${card.suit}-${card.rank}-${index}`"
+        class="absolute transition-all duration-300 ease-out"
+        :style="getCardStyle(index)"
+        @mouseenter="hoveredIndex = index"
+        @mouseleave="hoveredIndex = null"
+        @click="handleCardClick(card, index)"
+      >
+        <div
+          :class="[
+            'transition-all duration-300 rounded-lg',
+            isValid(card)
+              ? 'cursor-pointer hover:shadow-xl ring-2 ring-transparent hover:ring-yellow-400/50'
+              : 'cursor-not-allowed opacity-60 grayscale brightness-75',
+            hoveredIndex === index && isValid(card) && 'scale-110 -translate-y-4 z-50',
+          ]"
+        >
+          <GameCard :suit="card.suit" :rank="card.rank" :face-down="faceDown" />
+        </div>
+      </div>
+    </TransitionGroup>
+  </div>
+</template>
+
+<script setup>
+import { ref, computed } from 'vue'
+import GameCard from './GameCard.vue'
+import { toast } from 'vue-sonner'
+import { useBiscaStore } from '@/stores/bisca'
+
+const props = defineProps({
+  cards: {
+    type: Array,
+    required: true,
+    default: () => [],
+  },
+  faceDown: {
+    type: Boolean,
+    default: false,
+  },
+  maxCards: {
+    type: Number,
+    default: 3,
+    validator: (value) => [3, 9].includes(value),
+  },
+  isDisabled: {
+    type: Boolean,
+    default: false,
+  },
+})
+
+const emit = defineEmits(['card-clicked'])
+const store = useBiscaStore()
+
+const hoveredIndex = ref(null)
+
+const isValid = (card) => {
+  if (props.faceDown) return false
+  return store.canPlayCard(card)
+}
+
+const handleCardClick = (card, index) => {
+  if (props.faceDown) return
+
+  if (store.canPlayCard(card)) {
+    emit('card-clicked', { card, index })
+  } else {
+    toast.warning('Jogada Inválida', {
+      description: 'Tens de assistir ao naipe jogado!',
+      duration: 2000,
+    })
+  }
+}
+
+
+const overlapPercentage = computed(() => {
+  return props.maxCards === 3 ? 0.7 : 0.85
+})
+
+const cardWidth = 128
+const getCardStyle = (index) => {
+  const totalCards = props.cards.length
+  const overlapOffset = cardWidth * (1 - overlapPercentage.value)
+  const totalWidth = cardWidth + (totalCards - 1) * overlapOffset
+  const startOffset = -totalWidth / 2 + cardWidth / 2
+
+  let left = startOffset + index * overlapOffset
+
+  if (hoveredIndex.value !== null && hoveredIndex.value !== index) {
+    if (isValid(props.cards[hoveredIndex.value])) {
+        if (index < hoveredIndex.value) {
+          left -= 10
+        } else if (index > hoveredIndex.value) {
+          left += 10
+        }
+    }
+  }
+
+  return {
+    left: `calc(50% + ${left}px)`,
+    zIndex: hoveredIndex.value === index ? 50 : index + 1,
+  }
+}
+</script>

frontend/src/components/game/ScoreDisplay.vue

@@ -0,0 +1,177 @@
+<template>
+  <div
+    class="inline-flex bg-gray-900/80 backdrop-blur-sm border border-gray-700/50 shadow-xl rounded-md px-4 py-1.5 items-center gap-4"
+  >
+    <!-- Opponent Score (Left) -->
+    <div class="flex items-center gap-2">
+      <div class="flex flex-col items-start">
+        <span class="text-gray-400 text-[10px] uppercase tracking-wide mb-0.5">{{
+          opponentName
+        }}</span>
+        <span
+          class="text-2xl font-black tabular-nums transition-all duration-300"
+          :class="[
+            opponentScore > playerScore
+              ? 'text-amber-400 drop-shadow-[0_0_12px_rgba(251,191,36,0.6)]'
+              : 'text-white',
+            scoreChanged === 'opponent' && 'scale-110',
+          ]"
+        >
+          {{ displayOpponentScore }}
+        </span>
+      </div>
+    </div>
+
+    <!-- Center Turn Indicator -->
+    <div class="flex flex-col items-center gap-1">
+      <div
+        class="px-3 py-0.5 rounded-full text-[9px] font-bold uppercase tracking-wider transition-all duration-300"
+        :class="[
+          currentTurn === 'player'
+            ? 'bg-emerald-500/20 text-emerald-400 border border-emerald-500/40 shadow-[0_0_10px_rgba(52,211,153,0.4)]'
+            : 'bg-rose-500/20 text-rose-400 border border-rose-500/40 shadow-[0_0_10px_rgba(251,113,133,0.4)]',
+          turnChanged && 'animate-pulse',
+        ]"
+      >
+        <!-- You can replace the above line with the following if you want to show names instead -->
+        {{ currentTurn === 'player' ? playerName + "'s Turn" : opponentName + "'s Turn" }}
+      </div>
+      <span v-if="roundNumber" class="text-gray-500 text-[10px] font-medium">
+        Round {{ roundNumber }}
+      </span>
+    </div>
+
+    <!-- Player Score (Right) -->
+    <div class="flex items-center gap-2">
+      <div class="flex flex-col items-end">
+        <span class="text-gray-400 text-[10px] uppercase tracking-wide mb-0.5">{{
+          playerName
+        }}</span>
+        <span
+          class="text-2xl font-black tabular-nums transition-all duration-300"
+          :class="[
+            playerScore > opponentScore
+              ? 'text-amber-400 drop-shadow-[0_0_12px_rgba(251,191,36,0.6)]'
+              : 'text-white',
+            scoreChanged === 'player' && 'scale-110',
+          ]"
+        >
+          {{ displayPlayerScore }}
+        </span>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup>
+import { ref, watch, computed } from 'vue'
+
+const props = defineProps({
+  playerScore: {
+    type: Number,
+    required: true,
+  },
+  opponentScore: {
+    type: Number,
+    required: true,
+  },
+  playerName: {
+    type: String,
+    default: 'You',
+  },
+  opponentName: {
+    type: String,
+    default: 'Bot',
+  },
+  currentTurn: {
+    type: String,
+    default: 'player',
+    validator: (value) => ['player', 'opponent'].includes(value),
+  },
+  roundNumber: {
+    type: Number,
+    default: null,
+  },
+})
+
+const scoreChanged = ref(null)
+const turnChanged = ref(false)
+const displayPlayerScore = ref(props.playerScore)
+const displayOpponentScore = ref(props.opponentScore)
+
+// Animate score count-up
+const animateScore = (fromValue, toValue, callback) => {
+  const duration = 500 // Total animation duration in ms
+  const steps = 20 // Number of increments
+  const stepDuration = duration / steps
+  const increment = (toValue - fromValue) / steps
+
+  let current = fromValue
+  let step = 0
+
+  const interval = setInterval(() => {
+    step++
+    current += increment
+
+    if (step >= steps) {
+      current = toValue
+      clearInterval(interval)
+    }
+
+    callback(Math.round(current))
+  }, stepDuration)
+}
+
+// Watch for player score changes and trigger count-up animation
+watch(
+  () => props.playerScore,
+  (newScore, oldScore) => {
+    scoreChanged.value = 'player'
+
+    if (oldScore !== undefined && newScore !== oldScore) {
+      animateScore(oldScore, newScore, (value) => {
+        displayPlayerScore.value = value
+      })
+    } else {
+      displayPlayerScore.value = newScore
+    }
+
+    setTimeout(() => {
+      scoreChanged.value = null
+    }, 300)
+  },
+  { immediate: true },
+)
+
+// Watch for opponent score changes and trigger count-up animation
+watch(
+  () => props.opponentScore,
+  (newScore, oldScore) => {
+    scoreChanged.value = 'opponent'
+
+    if (oldScore !== undefined && newScore !== oldScore) {
+      animateScore(oldScore, newScore, (value) => {
+        displayOpponentScore.value = value
+      })
+    } else {
+      displayOpponentScore.value = newScore
+    }
+
+    setTimeout(() => {
+      scoreChanged.value = null
+    }, 300)
+  },
+  { immediate: true },
+)
+
+// Watch for turn changes and trigger pulse animation
+watch(
+  () => props.currentTurn,
+  () => {
+    turnChanged.value = true
+    setTimeout(() => {
+      turnChanged.value = false
+    }, 1000)
+  },
+)
+</script>

frontend/src/components/layout/NavBar.vue

@@ -1,50 +1,82 @@
 <template>
-    <div>
+  <div>
-        <NavigationMenu>
+    <NavigationMenu>
-            <NavigationMenuList class="justify-around gap-20">
+      <NavigationMenuList class="justify-around gap-20">
-                <NavigationMenuItem>
+        <NavigationMenuItem v-if="!userLoggedIn">
-                    <NavigationMenuTrigger>Testing</NavigationMenuTrigger>
+          <NavigationMenuLink>
-                    <NavigationMenuContent>
+            <RouterLink to="/login">Login</RouterLink>
-                        <li>
+          </NavigationMenuLink>
-                            <NavigationMenuLink as-child>
+        </NavigationMenuItem>
-                                <RouterLink to="/testing/laravel">Laravel</RouterLink>
+
-                            </NavigationMenuLink>
+        <NavigationMenuItem v-else class="flex flex-row gap-4">
-                            <NavigationMenuLink as-child>
+          <NavigationMenuLink v-if="userStore.coins > 0" href="/coins-purchase"
-                                <RouterLink to="/testing/websockets">Web Sockets</RouterLink>
+            class="flex flex-row items-center gap-1">
-                            </NavigationMenuLink>
+            <div class="flex items-center justify-center w-5 h-5 bg-purple-400 rounded-full shadow-sm">
-                        </li>
+              <span class="text-[10px] font-bold text-purple-900">$</span>
-                    </NavigationMenuContent>
+            </div>
-                </NavigationMenuItem>
+
-                <NavigationMenuItem v-if="!userLoggedIn">
+            <span class="text-sm font-medium tabular-nums">
-                    <NavigationMenuLink>
+              {{ userStore.coins }} <span class="text-muted-foreground text-xs">Coins</span>
-                        <RouterLink to="/login">Login</RouterLink>
+            </span>
-                    </NavigationMenuLink>
+          </NavigationMenuLink>
-                </NavigationMenuItem>
+          <NavigationMenuLink>
-                <NavigationMenuItem v-else>
+            <RouterLink to="/user">Profile</RouterLink>
-                    <NavigationMenuLink>
+          </NavigationMenuLink>
-                        <a @click.prevent="logoutClickHandler">Logout</a>
+          <NavigationMenuLink>
-                    </NavigationMenuLink>
+            <a href="/home" @click.prevent="logoutClickHandler" class="cursor-pointer">Logout</a>
-                </NavigationMenuItem>
+          </NavigationMenuLink>
-            </NavigationMenuList>
+        </NavigationMenuItem>
-        </NavigationMenu>
+      </NavigationMenuList>
-    </div>
+    </NavigationMenu>
+  </div>
 </template>
 
 <script setup>
+import { useBiscaStore } from '@/stores/bisca'
 import {
-    NavigationMenu,
+  NavigationMenu,
-    NavigationMenuContent,
+  NavigationMenuContent,
-    NavigationMenuItem,
+  NavigationMenuItem,
-    NavigationMenuLink,
+  NavigationMenuLink,
-    NavigationMenuList,
+  NavigationMenuList,
-    NavigationMenuTrigger,
+  NavigationMenuTrigger,
 } from '@/components/ui/navigation-menu'
-
+import router from '@/router'
+import { watch } from 'vue'
+import { useUserStore } from '@/stores/user'
 
 const emits = defineEmits(['logout'])
 const { userLoggedIn } = defineProps(['userLoggedIn'])
 
+const biscaStore = useBiscaStore()
+
 const logoutClickHandler = () => {
-    emits('logout')
+  if (biscaStore.isGameRunning) {
+    const confirmLogout = window.confirm(
+      'If you leave now this game will count as "FORFEIT". Are you sure you want to logout?',
+    )
+    if (!confirmLogout) return
+
+    biscaStore.isLoggingOut = true
+
+    biscaStore.quitGame()
+
+    return
+  }
+
+  emits('logout')
+  router.push('/login')
 }
+
+const userStore = useUserStore()
+
+watch(
+  () => userLoggedIn,
+  async (isLoggedIn) => {
+    if (isLoggedIn) {
+      await userStore.fetchCoins()
+    } else {
+      userStore.coins = 0
+    }
+  }, { immediate: true })
 </script>

frontend/src/components/ui/card/Card.vue

@@ -0,0 +1,21 @@
+<script setup>
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  class: { type: null, required: false },
+});
+</script>
+
+<template>
+  <div
+    data-slot="card"
+    :class="
+      cn(
+        'bg-card text-card-foreground flex flex-col gap-6 rounded-xl border py-6 shadow-sm',
+        props.class,
+      )
+    "
+  >
+    <slot />
+  </div>
+</template>

frontend/src/components/ui/card/CardAction.vue

@@ -0,0 +1,21 @@
+<script setup>
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  class: { type: null, required: false },
+});
+</script>
+
+<template>
+  <div
+    data-slot="card-action"
+    :class="
+      cn(
+        'col-start-2 row-span-2 row-start-1 self-start justify-self-end',
+        props.class,
+      )
+    "
+  >
+    <slot />
+  </div>
+</template>

frontend/src/components/ui/card/CardContent.vue

@@ -0,0 +1,13 @@
+<script setup>
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  class: { type: null, required: false },
+});
+</script>
+
+<template>
+  <div data-slot="card-content" :class="cn('px-6', props.class)">
+    <slot />
+  </div>
+</template>

frontend/src/components/ui/card/CardDescription.vue

@@ -0,0 +1,16 @@
+<script setup>
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  class: { type: null, required: false },
+});
+</script>
+
+<template>
+  <p
+    data-slot="card-description"
+    :class="cn('text-muted-foreground text-sm', props.class)"
+  >
+    <slot />
+  </p>
+</template>

frontend/src/components/ui/card/CardFooter.vue

@@ -0,0 +1,16 @@
+<script setup>
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  class: { type: null, required: false },
+});
+</script>
+
+<template>
+  <div
+    data-slot="card-footer"
+    :class="cn('flex items-center px-6 [.border-t]:pt-6', props.class)"
+  >
+    <slot />
+  </div>
+</template>

frontend/src/components/ui/card/CardHeader.vue

@@ -0,0 +1,21 @@
+<script setup>
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  class: { type: null, required: false },
+});
+</script>
+
+<template>
+  <div
+    data-slot="card-header"
+    :class="
+      cn(
+        '@container/card-header grid auto-rows-min grid-rows-[auto_auto] items-start gap-1.5 px-6 has-data-[slot=card-action]:grid-cols-[1fr_auto] [.border-b]:pb-6',
+        props.class,
+      )
+    "
+  >
+    <slot />
+  </div>
+</template>

frontend/src/components/ui/card/CardTitle.vue

@@ -0,0 +1,16 @@
+<script setup>
+import { cn } from "@/lib/utils";
+
+const props = defineProps({
+  class: { type: null, required: false },
+});
+</script>
+
+<template>
+  <h3
+    data-slot="card-title"
+    :class="cn('leading-none font-semibold', props.class)"
+  >
+    <slot />
+  </h3>
+</template>

frontend/src/components/ui/card/index.js

@@ -0,0 +1,7 @@
+export { default as Card } from "./Card.vue";
+export { default as CardAction } from "./CardAction.vue";
+export { default as CardContent } from "./CardContent.vue";
+export { default as CardDescription } from "./CardDescription.vue";
+export { default as CardFooter } from "./CardFooter.vue";
+export { default as CardHeader } from "./CardHeader.vue";
+export { default as CardTitle } from "./CardTitle.vue";