2 Commits

Author	SHA1	Message	Date
Cal Corum	cbc1da3c03	Add visibility filter for client-safe game state views ... SECURITY: Implement hidden information filtering to prevent cheating. - Create VisibleGameState, VisiblePlayerState, VisibleZone models - get_visible_state(game, player_id): filtered view for a player - get_spectator_state(game): filtered view for spectators Hidden Information (NEVER exposed): - Opponent's hand contents (count only) - All deck contents and order - All prize card contents - Energy deck order Public Information (always visible): - Active and benched Pokemon (full details) - Discard piles (full contents) - Energy zone (available energy) - Scores, turn info, phase - Stadium in play - 44 security-critical tests verifying no information leakage - Tests check JSON serialization for hidden card ID leaks - Also adds test for configurable burn damage Completes HIGH-008 and TEST-012 from PROJECT_PLAN.json Updates security checklist: 4/5 items now verified	2026-01-25 13:11:06 -06:00
Cal Corum	eef857e972	Add turn manager with phase state machine and between-turn effects ... - Implement TurnManager class for turn/phase state machine - Phase transitions: SETUP -> DRAW -> MAIN -> ATTACK -> END - Turn start: reset counters, draw card, flip energy (Pokemon Pocket style) - Turn end: apply status damage (poison/burn), check recovery (sleep/burn flip) - Between-turn paralysis auto-removal - Knockout processing with scoring and forced action setup - Integration with win condition checking (deck-out, no Pokemon, turn limit) - 60 tests covering all functionality - 644 total core tests passing at 97% coverage Completes HIGH-007 and TEST-011 from PROJECT_PLAN.json Week 4 (Game Logic) now complete - ready for Week 5 (Engine & Polish)	2026-01-25 13:02:56 -06:00